Function at 0x14000cee0
Capabilities:
Create process on windows
Encode data using xor

Disassembly:
mov rax, rsp
mov qword [rax + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0xe8]
sub rsp, 0x1b0
movaps xmmword [rax - 0x48], xmm6
movaps xmmword [rax - 0x58], xmm7
movaps xmmword [rax - 0x68], xmm8
movaps xmmword [rax - 0x78], xmm9
mov rax, qword [0x140050040]
xor rax, rsp
mov qword [rbp + 0x68], rax
mov rdi, rcx
mov qword [rbp - 0x78], rcx
mov dword [rbp + 0x10], 0
movsd xmm0, qword [rcx + 8]
movsd qword [rbp + 0x30], xmm0
mov rsi, qword [0x1400b0e08]
add rsi, 0x1ed0
xorps xmm0, xmm0
cvtss2sd xmm0, xmm1
mulsd xmm0, qword [0x140045ed0]
cvtpd2ps xmm0, xmm0
movss xmm1, dword [0x1400b0fbc]
addss xmm1, xmm0
movss dword [0x1400b0fbc], xmm1
xorps xmm9, xmm9
movss xmm6, dword [0x140045f04]
comiss xmm1, xmm6
jbe 0x14000cf88
mov dword [0x1400b0fbc], 0
lea rcx, [rbp + 0x58]
call fcn.140002c70
xor ebx, ebx
movss xmm7, dword [0x140045e9c]
nop dword [rax + rax]
movd xmm0, ebx
cvtdq2ps xmm0, xmm0
mulss xmm0, xmm7
subss xmm0, dword [0x1400b0fbc]
comiss xmm9, xmm0
jbe 0x14000cfbd
addss xmm0, xmm6
lea rax, [rbp + 0x10]
mov qword [rsp + 0x28], rax
lea rax, [rbp]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 8]
movaps xmm2, xmm6
movaps xmm1, xmm6
call fcn.140017d10
movss dword [rsp + 0x20], xmm6
movss xmm3, dword [rbp + 0x10]
movss xmm2, dword [rbp]
movss xmm1, dword [rbp + 8]
lea rcx, [rbp + 0x20]
call fcn.140002cd0
movups xmm0, xmmword [rbp + 0x20]
movups xmmword [rbp + 0x58], xmm0
inc ebx
cmp ebx, 0xa
jl 0x14000cfa0
movaps xmm0, xmmword [0x1400461b0]
movups xmmword [rbp + 0x20], xmm0
lea rcx, [rbp + 0x20]
call fcn.140017c60
mov qword [rbp + 0x10], 0
movss xmm0, dword [0x140045f14]
movss dword [rsp + 0x30], xmm0
mov dword [rsp + 0x28], 0xf
movss dword [rsp + 0x20], xmm9
mov r9d, eax
lea r8, [rbp + 0x30]
lea rdx, [rbp + 0x10]
mov rcx, rsi
call fcn.140032ef0
mov qword [rbp + 0x38], rsi
mov edx, 0x48
lea rcx, [0x1400b0ea8]
call fcn.1400127e0
mov rcx, rax
call fcn.140021c10
mov dword [rsp + 0x20], 0xff
mov edx, 0xff
mov r9d, edx
mov r8d, edx
lea rcx, [rbp - 0x50]
call fcn.140002c80
movups xmm0, xmmword [rax]
movaps xmmword [rbp + 0x20], xmm0
lea rax, [rbp + 0x20]
mov qword [rsp + 0x28], rax
movss xmm0, dword [rbp + 0x30]
movss dword [rsp + 0x20], xmm0
movss xmm8, dword [0x140045f60]
movaps xmm3, xmm8
lea r8, str.diablo
lea rdx, [rbp + 0x40]
lea rcx, [rbp + 0x38]
call fcn.14000e840
call fcn.140021cb0
mov edx, 0x20
lea rcx, [0x1400b0eb8]
call fcn.1400128a0
mov rcx, rax
call fcn.140021c10
mov dword [rsp + 0x20], 0xff
mov edx, 0xa8
mov r9d, edx
mov r8d, edx
lea rcx, [rbp - 0x50]
call fcn.140002c80
movups xmm0, xmmword [rax]
movaps xmmword [rbp + 0x20], xmm0
movss xmm3, dword [rbp + 0x44]
addss xmm3, xmm8
subss xmm3, dword [0x140045f48]
lea rax, [rbp + 0x20]
mov qword [rsp + 0x28], rax
movss xmm0, dword [rbp + 0x30]
movss dword [rsp + 0x20], xmm0
lea r8, str.play_different
lea rdx, [rbp + 0x48]
lea rcx, [rbp + 0x38]
call fcn.14000e840
call fcn.140021cb0
mov edx, 0x18
lea rcx, [0x1400b0eb8]
call fcn.1400128a0
mov rcx, rax
call fcn.140021c10
mov dword [rsp + 0x20], 0xff
mov edx, 0xff
mov r9d, edx
mov r8d, edx
lea rcx, [rbp - 0x50]
call fcn.140002c80
movups xmm6, xmmword [rax]
lea rcx, [rdi + 0x10]
call fcn.140001e40
movdqa xmmword [rbp + 0x20], xmm6
movss xmm3, dword [rbp + 0x44]
addss xmm3, xmm8
addss xmm3, dword [rbp + 0x4c]
addss xmm3, dword [0x140045f48]
lea rcx, [rbp + 0x20]
mov qword [rsp + 0x28], rcx
movss xmm0, dword [rbp + 0x30]
movss dword [rsp + 0x20], xmm0
mov r8, rax
lea rdx, [rbp + 0x50]
lea rcx, [rbp + 0x38]
call fcn.14000e840
call fcn.140021cb0
movss xmm0, dword [rbp + 0x44]
addss xmm0, xmm8
addss xmm0, dword [rbp + 0x4c]
addss xmm0, dword [rbp + 0x54]
addss xmm0, xmm8
call fcn.1400224b0
movzx edx, byte [rsp + 0x40]
lea rcx, [rsp + 0x58]
call fcn.140002130
nop
mov r8d, 7
lea rdx, str.nullify
lea rcx, [rsp + 0x58]
call fcn.140002150
nop
mov dword [rbp + 0x10], 1
call qword [0x1400b0da0]
mov rbx, rax
movzx edx, byte [rsp + 0x40]
lea rcx, [rbp - 0x50]
call fcn.140002130
nop
mov r8, 0xffffffffffffffff
nop
inc r8
cmp byte [rbx + r8], 0
jne 0x14000d240
mov rdx, rbx
lea rcx, [rbp - 0x50]
call fcn.140002150
nop
lea rdx, [rsp + 0x58]
lea rcx, [rbp - 0x50]
call fcn.1400149d0
lea rcx, [rbp - 0x50]
call fcn.140001c70
nop
lea rcx, [rsp + 0x58]
call fcn.140001c70
cmp qword [0x1400b0dd0], 0
jne 0x14000d28f
mov rcx, qword [0x1400b0d40]
call fcn.14000cb50
movss xmm0, dword [0x140045f64]
call fcn.140022460
xor sil, sil
mov dword [rbp - 0x80], esi
xor r14b, r14b
mov dword [rbp - 0x7c], r14d
xor r15b, r15b
mov dword [rbp + 8], r15d
xor r12b, r12b
mov dword [rbp], r12d
xor r13b, r13b
mov dword [rsp + 0x50], r13d
xor bl, bl
mov dword [rsp + 0x54], ebx
mov byte [rsp + 0x78], bl
mov byte [rsp + 0x7c], bl
mov byte [rbp + 0x10], bl
mov rcx, qword [rdi + 0x30]
mov qword [rsp + 0x48], rcx
mov rax, qword [rdi + 0x38]
mov qword [rbp - 0x70], rax
cmp rcx, rax
je 0x14000d685
movzx ebx, byte [rsp + 0x40]
movzx edi, byte [rsp + 0x40]
movzx esi, byte [rsp + 0x40]
movzx r14d, byte [rsp + 0x40]
movzx r15d, byte [rsp + 0x40]
movzx r12d, byte [rsp + 0x40]
movzx r13d, byte [rsp + 0x40]
mov rdx, rcx
lea rcx, [rbp - 0x50]
call fcn.140001d20
nop
movzx edx, dil
lea rcx, [rsp + 0x58]
call fcn.140002130
nop
mov r8d, 0xb
lea rdx, str.diablo_rust
lea rcx, [rsp + 0x58]
call fcn.140002150
nop
lea rdx, [rsp + 0x58]
lea rcx, [rbp - 0x50]
call fcn.1400149d0
mov byte [rsp + 0x40], al
lea rcx, [rsp + 0x58]
call fcn.140001c70
mov eax, dword [rbp - 0x80]
movzx eax, al
cmp byte [rsp + 0x40], 0
mov ecx, 1
cmovne eax, ecx
mov dword [rbp - 0x80], eax
movzx edx, bl
lea rcx, [rsp + 0x58]
call fcn.140002130
nop
mov r8d, 0x13
lea rdx, str.diablo_rust_private
lea rcx, [rsp + 0x58]
call fcn.140002150
nop
lea rdx, [rsp + 0x58]
lea rcx, [rbp - 0x50]
call fcn.1400149d0
mov byte [rsp + 0x40], al
lea rcx, [rsp + 0x58]
call fcn.140001c70
mov eax, dword [rbp - 0x7c]
movzx eax, al
cmp byte [rsp + 0x40], 0
mov ecx, 1
cmovne eax, ecx
mov dword [rbp - 0x7c], eax
movzx edx, r15b
lea rcx, [rsp + 0x58]
call fcn.140002130
nop
mov r8d, 0xb
lea rdx, str.diablo_apex
lea rcx, [rsp + 0x58]
call fcn.140002150
nop
lea rdx, [rsp + 0x58]
lea rcx, [rbp - 0x50]
call fcn.1400149d0
mov byte [rsp + 0x40], al
lea rcx, [rsp + 0x58]
call fcn.140001c70
mov eax, dword [rbp + 8]
movzx eax, al
cmp byte [rsp + 0x40], 0
mov ecx, 1
cmovne eax, ecx
mov dword [rbp + 8], eax
movzx edx, sil
lea rcx, [rsp + 0x58]
call fcn.140002130
nop
mov r8d, 0x10
lea rdx, str.diablo_rust_test
lea rcx, [rsp + 0x58]
call fcn.140002150
nop
lea rdx, [rsp + 0x58]
lea rcx, [rbp - 0x50]
call fcn.1400149d0
mov byte [rsp + 0x40], al
lea rcx, [rsp + 0x58]
call fcn.140001c70
mov eax, dword [rbp]
movzx eax, al
cmp byte [rsp + 0x40], 0
mov ecx, 1
cmovne eax, ecx
mov dword [rbp], eax
movzx edx, r14b
lea rcx, [rsp + 0x58]
call fcn.140002130
nop
mov r8d, 0x10
lea rdx, str.diablo_apex_test
lea rcx, [rsp + 0x58]
call fcn.140002150
nop
lea rdx, [rsp + 0x58]
lea rcx, [rbp - 0x50]
call fcn.1400149d0
mov byte [rsp + 0x40], al
lea rcx, [rsp + 0x58]
call fcn.140001c70
mov eax, dword [rsp + 0x50]
movzx eax, al
cmp byte [rsp + 0x40], 0
mov ecx, 1
cmovne eax, ecx
mov dword [rsp + 0x50], eax
movzx edx, r13b
lea rcx, [rsp + 0x58]
call fcn.140002130
nop
mov r8d, 0x10
lea rdx, str.diablo_csgo_test
lea rcx, [rsp + 0x58]
call fcn.140002150
nop
lea rdx, [rsp + 0x58]
lea rcx, [rbp - 0x50]
call fcn.1400149d0
mov byte [rsp + 0x40], al
lea rcx, [rsp + 0x58]
call fcn.140001c70
mov eax, dword [rsp + 0x54]
movzx eax, al
cmp byte [rsp + 0x40], 0
mov ecx, 1
cmovne eax, ecx
mov dword [rsp + 0x54], eax
movzx edx, r12b
lea rcx, [rsp + 0x58]
call fcn.140002130
nop
mov r8d, 0xb
lea rdx, str.diablo_csgo
lea rcx, [rsp + 0x58]
call fcn.140002150
nop
lea rdx, [rsp + 0x58]
lea rcx, [rbp - 0x50]
call fcn.1400149d0
mov byte [rsp + 0x40], al
lea rcx, [rsp + 0x58]
call fcn.140001c70
mov eax, dword [rsp + 0x78]
movzx eax, al
cmp byte [rsp + 0x40], 0
mov ecx, 1
cmovne eax, ecx
mov dword [rsp + 0x78], eax
movzx edx, byte [rsp + 0x40]
lea rcx, [rsp + 0x58]
call fcn.140002130
nop
mov r8d, 0xa
lea rdx, str.diablo_r6s
lea rcx, [rsp + 0x58]
call fcn.140002150
nop
lea rdx, [rsp + 0x58]
lea rcx, [rbp - 0x50]
call fcn.1400149d0
mov byte [rsp + 0x40], al
lea rcx, [rsp + 0x58]
call fcn.140001c70
mov eax, dword [rsp + 0x7c]
movzx eax, al
cmp byte [rsp + 0x40], 0
mov ecx, 1
cmovne eax, ecx
mov dword [rsp + 0x7c], eax
movzx edx, byte [rsp + 0x40]
lea rcx, [rsp + 0x58]
call fcn.140002130
nop
mov r8d, 0xd
lea rdx, str.diablo_finals
lea rcx, [rsp + 0x58]
call fcn.140002150
nop
lea rdx, [rsp + 0x58]
lea rcx, [rbp - 0x50]
call fcn.1400149d0
mov byte [rsp + 0x40], al
lea rcx, [rsp + 0x58]
call fcn.140001c70
mov eax, dword [rbp + 0x10]
movzx eax, al
cmp byte [rsp + 0x40], 0
mov ecx, 1
cmovne eax, ecx
mov dword [rbp + 0x10], eax
lea rcx, [rbp - 0x50]
call fcn.140001c70
mov rcx, qword [rsp + 0x48]
add rcx, 0x20
mov qword [rsp + 0x48], rcx
cmp rcx, qword [rbp - 0x70]
jne 0x14000d311
mov rdi, qword [rbp - 0x78]
mov esi, dword [rbp - 0x80]
mov r14d, dword [rbp - 0x7c]
mov r15d, dword [rbp + 8]
mov r12d, dword [rbp]
mov r13d, dword [rsp + 0x50]
mov ebx, dword [rsp + 0x54]
lea rcx, [rbp + 0x20]
call fcn.1400223a0
cmp byte [rdi + 0x4c], 0
jne 0x14000d6a6
test r12b, r12b
jne 0x14000d6a6
test r13b, r13b
jne 0x14000d6a6
test bl, bl
je 0x14000d78b
mov edx, 0x10
lea rcx, [0x1400b0ea8]
call fcn.1400127e0
mov rcx, rax
call fcn.140021c10
mov dword [rsp + 0x48], 0x41200000
mov dword [rsp + 0x4c], 0x41200000
lea rcx, [rsp + 0x48]
call fcn.1400223e0
lea rdx, [0x1400b0f71]
lea rcx, str.Test_Build_
call fcn.14003b840
call fcn.140021cb0
test bl, bl
je 0x14000d78b
mov dword [rsp + 0x48], 0x41200000
mov dword [rsp + 0x4c], 0x420c0000
lea rcx, [rsp + 0x48]
call fcn.1400223e0
mov dword [rsp + 0x48], 0x42c80000
mov dword [rsp + 0x4c], 0x41a00000
xor r8d, r8d
lea rdx, [rsp + 0x48]
lea rcx, str.Test_Module
call fcn.14003a610
test al, al
je 0x14000d78b
mov ecx, 0xb8
call fcn.14003d500
mov rbx, rax
mov qword [rbp - 0x70], rax
xor edx, edx
mov r8d, 0xb8
mov rcx, rax
call sub.VCRUNTIME140.dll_memset
movzx edx, r13b
movzx ecx, r12b
add edx, ecx
movzx ecx, r15b
add edx, ecx
movzx ecx, r14b
add edx, ecx
movzx eax, sil
add edx, eax
mov r8, rdi
mov rcx, rbx
call fcn.14000c1f0
nop
mov qword [0x1400b0d50], rax
lea rcx, [rbp + 0x20]
call fcn.1400223e0
movaps xmm0, xmmword [0x1400461b0]
movups xmmword [rbp - 0x70], xmm0
lea rdx, [rbp - 0x70]
mov ecx, 0x15
call fcn.140017fa0
movaps xmm0, xmmword [0x140046200]
movups xmmword [rsp + 0x58], xmm0
xorps xmm1, xmm1
movups xmmword [rbp - 0x50], xmm1
mov dword [rsp + 0x48], 0x3f800000
mov dword [rsp + 0x4c], 0x3f800000
mov qword [rbp], 0
mov dword [rbp + 8], 0x43160000
mov dword [rbp + 0xc], 0x43480000
lea rax, [rsp + 0x58]
mov qword [rsp + 0x30], rax
lea rax, [rbp - 0x50]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 1
lea r9, [rsp + 0x48]
lea r8, [rbp]
lea rdx, [rbp + 8]
mov rcx, qword [0x1400b0dd0]
call fcn.14003b730
test al, al
je 0x14000dab8
lea rcx, str.mpnotify.exe
call fcn.14000ca80
mov ecx, 0x28
call qword [sym.imp.KERNEL32.dll_Sleep]
movdqa xmm1, xmmword [str.a__6_b]
movdqu xmmword [rbp - 0x50], xmm1
movdqa xmm2, xmmword [0x1400460c0]
movdqu xmmword [rbp - 0x40], xmm2
mov dl, 4
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd ecx, xmm1
xor al, cl
mov byte [rbp - 0x4f], al
xor byte [rbp - 0x4e], cl
xor byte [rbp - 0x4d], cl
xor byte [rbp - 0x4c], cl
xor byte [rbp - 0x4b], cl
xor byte [rbp - 0x4a], cl
xor byte [rbp - 0x49], cl
xor byte [rbp - 0x48], cl
xor byte [rbp - 0x47], cl
xor byte [rbp - 0x46], cl
xor byte [rbp - 0x45], cl
xor byte [rbp - 0x44], cl
xor byte [rbp - 0x43], cl
xor byte [rbp - 0x42], cl
xor byte [rbp - 0x41], cl
movd eax, xmm2
xor al, cl
mov byte [rbp - 0x40], al
xor byte [rbp - 0x3f], cl
xor byte [rbp - 0x3e], cl
xor byte [rbp - 0x3d], cl
xor byte [rbp - 0x3c], cl
xor byte [rbp - 0x3b], cl
xor byte [rbp - 0x3a], cl
xor byte [rbp - 0x39], cl
xor byte [rbp - 0x38], cl
xor byte [rbp - 0x37], cl
xor byte [rbp - 0x36], cl
xor byte [rbp - 0x35], cl
xor byte [rbp - 0x34], cl
xor byte [rbp - 0x33], cl
xor byte [rbp - 0x32], cl
xor byte [rbp - 0x31], cl
xor dl, cl
mov byte [rbp - 0x30], dl
mov byte [rbp - 0x2f], 0
mov dword [rsp + 0x28], 0xa
mov qword [rsp + 0x20], 0
xor r9d, r9d
lea r8, [rbp - 0x4f]
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
test r12b, r12b
je 0x14000d952
cmp byte [0x1400b0f71], 0
je 0x14000d952
mov ecx, 0xb8
call fcn.14003d500
mov rbx, rax
mov qword [rbp - 0x70], rax
xor edx, edx
mov r8d, 0xb8
mov rcx, rax
call sub.VCRUNTIME140.dll_memset
movzx edx, r15b
movzx ecx, r14b
add edx, ecx
movzx ecx, sil
add edx, ecx
mov r8, rdi
mov rcx, rbx
call fcn.14000c1f0
nop
mov qword [0x1400b0d50], rax
jmp 0x14000dab8
test r14b, r14b
je 0x14000d994
mov ecx, 0xb8
call fcn.14003d500
mov rbx, rax
mov qword [rbp - 0x70], rax
xor edx, edx
mov r8d, 0xb8
mov rcx, rax
call sub.VCRUNTIME140.dll_memset
movzx edx, sil
mov r8, rdi
mov rcx, rbx
call fcn.14000c1f0
nop
mov qword [0x1400b0d50], rax
jmp 0x14000dab8
test sil, sil
je 0x14000d9d4
mov ecx, 0xb8
call fcn.14003d500
mov rbx, rax
mov qword [rbp - 0x70], rax
xor edx, edx
mov r8d, 0xb8
mov rcx, rax
call sub.VCRUNTIME140.dll_memset
mov r8, rdi
xor edx, edx
mov rcx, rbx
call fcn.14000c1f0
nop
mov qword [0x1400b0d50], rax
jmp 0x14000dab8
movdqa xmm0, xmmword [0x140046280]
movdqa xmmword [rbp - 0x50], xmm0
movdqa xmm1, xmmword [0x140046120]
movdqa xmmword [rbp - 0x40], xmm1
movdqa xmm0, xmmword [0x140046100]
movdqa xmmword [rbp - 0x30], xmm0
movdqa xmm1, xmmword [0x140046150]
movdqa xmmword [rbp - 0x20], xmm1
mov word [rbp - 0x10], 0x673c
xor eax, eax
mov byte [rbp - 0xe], al
xor ecx, ecx
nop word [rax + rax]
movzx eax, byte [rbp - 0x50]
xor byte [rbp + rcx - 0x4f], al
movzx eax, byte [rbp - 0x50]
xor byte [rbp + rcx - 0x4e], al
movzx eax, byte [rbp - 0x50]
xor byte [rbp + rcx - 0x4d], al
movzx eax, byte [rbp - 0x50]
xor byte [rbp + rcx - 0x4c], al
movzx eax, byte [rbp - 0x50]
xor byte [rbp + rcx - 0x4b], al
movzx eax, byte [rbp - 0x50]
xor byte [rbp + rcx - 0x4a], al
movzx eax, byte [rbp - 0x50]
xor byte [rbp + rcx - 0x49], al
movzx eax, byte [rbp - 0x50]
xor byte [rbp + rcx - 0x48], al
movzx eax, byte [rbp - 0x50]
xor byte [rbp + rcx - 0x47], al
movzx eax, byte [rbp - 0x50]
xor byte [rbp + rcx - 0x46], al
movzx eax, byte [rbp - 0x50]
xor byte [rbp + rcx - 0x45], al
movzx eax, byte [rbp - 0x50]
xor byte [rbp + rcx - 0x44], al
movzx eax, byte [rbp - 0x50]
xor byte [rbp + rcx - 0x43], al
add rcx, 0xd
cmp rcx, 0x41
jb 0x14000da20
mov byte [rbp - 0xe], 0
mov dword [rsp + 0x28], 5
mov qword [rsp + 0x20], 0
xor r9d, r9d
lea r8, [rbp - 0x4f]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
movss xmm6, dword [0x140045fb8]
movaps xmm1, xmm6
movaps xmm0, xmm9
call fcn.1400222f0
movaps xmm0, xmmword [0x140046200]
movups xmmword [rbp - 0x50], xmm0
xorps xmm1, xmm1
movups xmmword [rsp + 0x58], xmm1
mov dword [rsp + 0x48], 0x3f800000
mov dword [rsp + 0x4c], 0x3f800000
mov qword [rbp], 0
mov dword [rbp + 8], 0x43160000
mov dword [rbp + 0xc], 0x43480000
lea rax, [rbp - 0x50]
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x58]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 1
lea r9, [rsp + 0x48]
lea r8, [rbp]
lea rdx, [rbp + 8]
mov rcx, qword [0x1400b0d30]
call fcn.14003b730
test al, al
je 0x14000dde8
lea rcx, str.mpnotify.exe
call fcn.14000ca80
mov ecx, 0x28
call qword [sym.imp.KERNEL32.dll_Sleep]
movdqa xmm1, xmmword [0x140046080]
movdqu xmmword [rbp - 0x50], xmm1
movdqa xmm2, xmmword [0x1400460b0]
movdqu xmmword [rbp - 0x40], xmm2
mov dl, 5
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd ecx, xmm1
xor al, cl
mov byte [rbp - 0x4f], al
xor byte [rbp - 0x4e], cl
xor byte [rbp - 0x4d], cl
xor byte [rbp - 0x4c], cl
xor byte [rbp - 0x4b], cl
xor byte [rbp - 0x4a], cl
xor byte [rbp - 0x49], cl
xor byte [rbp - 0x48], cl
xor byte [rbp - 0x47], cl
xor byte [rbp - 0x46], cl
xor byte [rbp - 0x45], cl
xor byte [rbp - 0x44], cl
xor byte [rbp - 0x43], cl
xor byte [rbp - 0x42], cl
xor byte [rbp - 0x41], cl
movd eax, xmm2
xor al, cl
mov byte [rbp - 0x40], al
xor byte [rbp - 0x3f], cl
xor byte [rbp - 0x3e], cl
xor byte [rbp - 0x3d], cl
xor byte [rbp - 0x3c], cl
xor byte [rbp - 0x3b], cl
xor byte [rbp - 0x3a], cl
xor byte [rbp - 0x39], cl
xor byte [rbp - 0x38], cl
xor byte [rbp - 0x37], cl
xor byte [rbp - 0x36], cl
xor byte [rbp - 0x35], cl
xor byte [rbp - 0x34], cl
xor byte [rbp - 0x33], cl
xor byte [rbp - 0x32], cl
xor byte [rbp - 0x31], cl
xor dl, cl
mov byte [rbp - 0x30], dl
mov byte [rbp - 0x2f], 0
mov dword [rsp + 0x28], 0xa
mov qword [rsp + 0x20], 0
xor r9d, r9d
lea r8, [rbp - 0x4f]
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
test r13b, r13b
je 0x14000dc77
cmp byte [0x1400b0f71], 0
je 0x14000dc77
mov ecx, 0xb8
call fcn.14003d500
mov rbx, rax
mov qword [rbp - 0x70], rax
xor edx, edx
mov r8d, 0xb8
mov rcx, rax
call sub.VCRUNTIME140.dll_memset
movzx edx, r12b
movzx ecx, r15b
add edx, ecx
movzx ecx, r14b
add edx, ecx
movzx ecx, sil
add edx, ecx
mov r8, rdi
mov rcx, rbx
call fcn.14000c1f0
nop
mov qword [0x1400b0d50], rax
jmp 0x14000dde8
test r15b, r15b
je 0x14000dd04
movzx r13d, r14b
movzx eax, sil
add r13d, eax
mov ecx, 0xb8
cmp byte [rdi + 0x4c], 0
je 0x14000dccd
call fcn.14003d500
mov rbx, rax
mov qword [rbp - 0x70], rax
xor edx, edx
mov r8d, 0xb8
mov rcx, rax
call sub.VCRUNTIME140.dll_memset
mov r8, rdi
mov edx, r13d
mov rcx, rbx
call fcn.14000c1f0
nop
mov qword [0x1400b0d50], rax
jmp 0x14000dde8
call fcn.14003d500
mov rbx, rax
mov qword [rbp - 0x70], rax
xor edx, edx
mov r8d, 0xb8
mov rcx, rax
call sub.VCRUNTIME140.dll_memset
mov r8, rdi
mov edx, r13d
mov rcx, rbx
call fcn.14000c1f0
nop
mov qword [0x1400b0d50], rax
jmp 0x14000dde8
movdqa xmm0, xmmword [0x140046320]
movdqa xmmword [rbp - 0x50], xmm0
movdqa xmm1, xmmword [0x140046110]
movdqa xmmword [rbp - 0x40], xmm1
movdqa xmm0, xmmword [0x140046130]
movdqa xmmword [rbp - 0x30], xmm0
movdqa xmm1, xmmword [str._7_ay5_1_y7_]
movdqa xmmword [rbp - 0x20], xmm1
mov word [rbp - 0x10], 0x7b20
xor eax, eax
mov byte [rbp - 0xe], al
xor ecx, ecx
nop word [rax + rax]
movzx eax, byte [rbp - 0x50]
xor byte [rbp + rcx - 0x4f], al
movzx eax, byte [rbp - 0x50]
xor byte [rbp + rcx - 0x4e], al
movzx eax, byte [rbp - 0x50]
xor byte [rbp + rcx - 0x4d], al
movzx eax, byte [rbp - 0x50]
xor byte [rbp + rcx - 0x4c], al
movzx eax, byte [rbp - 0x50]
xor byte [rbp + rcx - 0x4b], al
movzx eax, byte [rbp - 0x50]
xor byte [rbp + rcx - 0x4a], al
movzx eax, byte [rbp - 0x50]
xor byte [rbp + rcx - 0x49], al
movzx eax, byte [rbp - 0x50]
xor byte [rbp + rcx - 0x48], al
movzx eax, byte [rbp - 0x50]
xor byte [rbp + rcx - 0x47], al
movzx eax, byte [rbp - 0x50]
xor byte [rbp + rcx - 0x46], al
movzx eax, byte [rbp - 0x50]
xor byte [rbp + rcx - 0x45], al
movzx eax, byte [rbp - 0x50]
xor byte [rbp + rcx - 0x44], al
movzx eax, byte [rbp - 0x50]
xor byte [rbp + rcx - 0x43], al
add rcx, 0xd
cmp rcx, 0x41
jb 0x14000dd50
mov byte [rbp - 0xe], 0
mov dword [rsp + 0x28], 5
mov qword [rsp + 0x20], 0
xor r9d, r9d
lea r8, [rbp - 0x4f]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
movaps xmm1, xmm6
movaps xmm0, xmm9
call fcn.1400222f0
movaps xmm0, xmmword [0x140046200]
movups xmmword [rbp - 0x50], xmm0
xorps xmm1, xmm1
movups xmmword [rsp + 0x58], xmm1
mov dword [rsp + 0x48], 0x3f800000
mov dword [rsp + 0x4c], 0x3f800000
mov qword [rbp], 0
mov dword [rbp + 8], 0x43160000
mov dword [rbp + 0xc], 0x43480000
lea rax, [rbp - 0x50]
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x58]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 1
lea r9, [rsp + 0x48]
lea r8, [rbp]
lea rdx, [rbp + 8]
mov rcx, qword [0x1400b0d68]
call fcn.14003b730
test al, al
je 0x14000e08a
lea rcx, str.mpnotify.exe
call fcn.14000ca80
mov ecx, 0x28
call qword [sym.imp.KERNEL32.dll_Sleep]
movdqa xmm1, xmmword [0x140046140]
movdqu xmmword [rbp - 0x50], xmm1
movdqa xmm2, xmmword [0x140046160]
movdqu xmmword [rbp - 0x40], xmm2
mov dl, 0x27
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd ecx, xmm1
xor al, cl
mov byte [rbp - 0x4f], al
xor byte [rbp - 0x4e], cl
xor byte [rbp - 0x4d], cl
xor byte [rbp - 0x4c], cl
xor byte [rbp - 0x4b], cl
xor byte [rbp - 0x4a], cl
xor byte [rbp - 0x49], cl
xor byte [rbp - 0x48], cl
xor byte [rbp - 0x47], cl
xor byte [rbp - 0x46], cl
xor byte [rbp - 0x45], cl
xor byte [rbp - 0x44], cl
xor byte [rbp - 0x43], cl
xor byte [rbp - 0x42], cl
xor byte [rbp - 0x41], cl
movd eax, xmm2
xor al, cl
mov byte [rbp - 0x40], al
xor byte [rbp - 0x3f], cl
xor byte [rbp - 0x3e], cl
xor byte [rbp - 0x3d], cl
xor byte [rbp - 0x3c], cl
xor byte [rbp - 0x3b], cl
xor byte [rbp - 0x3a], cl
xor byte [rbp - 0x39], cl
xor byte [rbp - 0x38], cl
xor byte [rbp - 0x37], cl
xor byte [rbp - 0x36], cl
xor byte [rbp - 0x35], cl
xor byte [rbp - 0x34], cl
xor byte [rbp - 0x33], cl
xor byte [rbp - 0x32], cl
xor byte [rbp - 0x31], cl
xor dl, cl
mov byte [rbp - 0x30], dl
mov byte [rbp - 0x2f], 0
mov dword [rsp + 0x28], 0xa
xor ebx, ebx
mov qword [rsp + 0x20], rbx
xor r9d, r9d
lea r8, [rbp - 0x4f]
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
cmp byte [rsp + 0x78], bl
je 0x14000dfae
mov ecx, 0xb8
call fcn.14003d500
mov rbx, rax
mov qword [rbp - 0x70], rax
xor edx, edx
mov r8d, 0xb8
mov rcx, rax
call sub.VCRUNTIME140.dll_memset
movzx edx, byte [rsp + 0x54]
mov r13d, dword [rsp + 0x50]
movzx ecx, r13b
add edx, ecx
movzx ecx, r12b
add edx, ecx
movzx ecx, r15b
add edx, ecx
movzx eax, r14b
add edx, eax
movzx eax, sil
add edx, eax
mov r8, rdi
mov rcx, rbx
call fcn.14000c1f0
nop
mov byte [rax + 0x81], 1
mov qword [0x1400b0d50], rax
jmp 0x14000e08f
movdqa xmm0, xmmword [0x1400460f0]
movdqa xmmword [rbp - 0x50], xmm0
movdqa xmm1, xmmword [0x140046330]
movdqa xmmword [rbp - 0x40], xmm1
movdqa xmm0, xmmword [0x140046270]
movdqa xmmword [rbp - 0x30], xmm0
movdqa xmm1, xmmword [0x140046300]
movdqa xmmword [rbp - 0x20], xmm1
mov word [rbp - 0x10], 0x2a71
xor eax, eax
mov byte [rbp - 0xe], al
mov rcx, rbx
movzx eax, byte [rbp - 0x50]
xor byte [rbp + rcx - 0x4f], al
movzx eax, byte [rbp - 0x50]
xor byte [rbp + rcx - 0x4e], al
movzx eax, byte [rbp - 0x50]
xor byte [rbp + rcx - 0x4d], al
movzx eax, byte [rbp - 0x50]
xor byte [rbp + rcx - 0x4c], al
movzx eax, byte [rbp - 0x50]
xor byte [rbp + rcx - 0x4b], al
movzx eax, byte [rbp - 0x50]
xor byte [rbp + rcx - 0x4a], al
movzx eax, byte [rbp - 0x50]
xor byte [rbp + rcx - 0x49], al
movzx eax, byte [rbp - 0x50]
xor byte [rbp + rcx - 0x48], al
movzx eax, byte [rbp - 0x50]
xor byte [rbp + rcx - 0x47], al
movzx eax, byte [rbp - 0x50]
xor byte [rbp + rcx - 0x46], al
movzx eax, byte [rbp - 0x50]
xor byte [rbp + rcx - 0x45], al
movzx eax, byte [rbp - 0x50]
xor byte [rbp + rcx - 0x44], al
movzx eax, byte [rbp - 0x50]
xor byte [rbp + rcx - 0x43], al
add rcx, 0xd
cmp rcx, 0x41
jb 0x14000dff0
mov byte [rbp - 0xe], bl
mov dword [rsp + 0x28], 5
mov qword [rsp + 0x20], rbx
xor r9d, r9d
lea r8, [rbp - 0x4f]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
mov r13d, dword [rsp + 0x50]
jmp 0x14000e091
mov r13d, dword [rsp + 0x50]
xor ebx, ebx
movaps xmm1, xmm6
movaps xmm0, xmm9
call fcn.1400222f0
movaps xmm0, xmmword [0x140046200]
movups xmmword [rbp - 0x50], xmm0
xorps xmm1, xmm1
movups xmmword [rsp + 0x58], xmm1
mov dword [rsp + 0x48], 0x3f800000
mov dword [rsp + 0x4c], 0x3f800000
mov qword [rbp], 0
mov dword [rbp + 8], 0x43160000
mov dword [rbp + 0xc], 0x43480000
lea rax, [rbp - 0x50]
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x58]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 1
lea r9, [rsp + 0x48]
lea r8, [rbp]
lea rdx, [rbp + 8]
mov rcx, qword [0x1400b0dd8]
call fcn.14003b730
test al, al
je 0x14000e480
movzx edx, byte [rsp + 0x40]
lea rcx, [rbp - 0x70]
call fcn.140002130
nop
mov r8d, 0xb
lea rdx, str.Notepad.exe
lea rcx, [rbp - 0x70]
call fcn.140002150
nop
lea rcx, [rbp - 0x70]
call fcn.14000c910
nop
lea rcx, [rbp - 0x70]
call fcn.140001c70
movzx edx, byte [rsp + 0x40]
lea rcx, [rbp - 0x50]
call fcn.140002130
nop
mov r8d, 0xb
lea rdx, str.notepad.exe
lea rcx, [rbp - 0x50]
call fcn.140002150
nop
lea rcx, [rbp - 0x50]
call fcn.14000c910
nop
lea rcx, [rbp - 0x50]
call fcn.140001c70
mov ecx, 0x28
call qword [sym.imp.KERNEL32.dll_Sleep]
movdqa xmm1, xmmword [0x140046220]
movdqu xmmword [rbp - 0x50], xmm1
movdqa xmm2, xmmword [0x140046260]
movdqu xmmword [rbp - 0x40], xmm2
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd ecx, xmm1
xor al, cl
mov byte [rbp - 0x4f], al
xor byte [rbp - 0x4e], cl
xor byte [rbp - 0x4d], cl
xor byte [rbp - 0x4c], cl
xor byte [rbp - 0x4b], cl
xor byte [rbp - 0x4a], cl
xor byte [rbp - 0x49], cl
xor byte [rbp - 0x48], cl
xor byte [rbp - 0x47], cl
xor byte [rbp - 0x46], cl
xor byte [rbp - 0x45], cl
xor byte [rbp - 0x44], cl
xor byte [rbp - 0x43], cl
xor byte [rbp - 0x42], cl
xor byte [rbp - 0x41], cl
movd eax, xmm2
xor al, cl
mov byte [rbp - 0x40], al
xor byte [rbp - 0x3f], cl
xor byte [rbp - 0x3e], cl
xor byte [rbp - 0x3d], cl
xor byte [rbp - 0x3c], cl
xor byte [rbp - 0x3b], cl
xor byte [rbp - 0x3a], cl
xor byte [rbp - 0x39], cl
xor byte [rbp - 0x38], cl
xor byte [rbp - 0x37], cl
xor byte [rbp - 0x36], cl
xor byte [rbp - 0x35], cl
xor byte [rbp - 0x34], cl
xor byte [rbp - 0x33], cl
xor byte [rbp - 0x32], cl
xor byte [rbp - 0x31], cl
mov byte [rbp - 0x30], 0
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x20], rbx
xor r9d, r9d
lea r8, [rbp - 0x4f]
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
xor edx, edx
lea rcx, str.Notepad
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
jne 0x14000e280
mov edi, 1
nop dword [rax + rax]
mov ecx, edi
call qword [sym.imp.KERNEL32.dll_Sleep]
xor edx, edx
lea rcx, str.Notepad
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
je 0x14000e260
mov rdi, qword [rbp - 0x78]
cmp byte [rsp + 0x7c], 0
je 0x14000e2f1
mov ecx, 0xb8
call fcn.14003d500
mov rbx, rax
mov qword [rbp - 0x70], rax
xor edx, edx
mov r8d, 0xb8
mov rcx, rax
call sub.VCRUNTIME140.dll_memset
movzx edx, byte [rsp + 0x78]
movzx ecx, byte [rsp + 0x54]
add edx, ecx
movzx ecx, r13b
add edx, ecx
movzx ecx, r12b
add edx, ecx
movzx eax, r15b
add edx, eax
movzx eax, r14b
add edx, eax
movzx eax, sil
add edx, eax
mov r8, rdi
mov rcx, rbx
call fcn.14000c1f0
nop
mov byte [rax + 0x80], 1
mov qword [0x1400b0d50], rax
jmp 0x14000e480
movdqa xmm0, xmmword [0x140046210]
movdqa xmmword [rbp - 0x50], xmm0
movdqa xmm1, xmmword [0x1400460a0]
movdqa xmmword [rbp - 0x40], xmm1
movdqa xmm0, xmmword [0x140046060]
movdqa xmmword [rbp - 0x30], xmm0
movdqa xmm1, xmmword [0x140046070]
movdqa xmmword [rbp - 0x20], xmm1
mov dword [rbp - 0x10], 0x1b1f061d
mov word [rbp - 0xc], 0x40
mov rcx, rbx
nop word [rax + rax]
movzx eax, byte [rbp - 0x50]
xor byte [rbp + rcx - 0x4f], al
movzx eax, byte [rbp - 0x50]
xor byte [rbp + rcx - 0x4e], al
movzx eax, byte [rbp - 0x50]
xor byte [rbp + rcx - 0x4d], al
movzx eax, byte [rbp - 0x50]
xor byte [rbp + rcx - 0x4c], al
movzx eax, byte [rbp - 0x50]
xor byte [rbp + rcx - 0x4b], al
movzx eax, byte [rbp - 0x50]
xor byte [rbp + rcx - 0x4a], al
movzx eax, byte [rbp - 0x50]
xor byte [rbp + rcx - 0x49], al
movzx eax, byte [rbp - 0x50]
xor byte [rbp + rcx - 0x48], al
movzx eax, byte [rbp - 0x50]
xor byte [rbp + rcx - 0x47], al
movzx eax, byte [rbp - 0x50]
xor byte [rbp + rcx - 0x46], al
movzx eax, byte [rbp - 0x50]
xor byte [rbp + rcx - 0x45], al
movzx eax, byte [rbp - 0x50]
xor byte [rbp + rcx - 0x44], al
movzx eax, byte [rbp - 0x50]
xor byte [rbp + rcx - 0x43], al
movzx eax, byte [rbp - 0x50]
xor byte [rbp + rcx - 0x42], al
movzx eax, byte [rbp - 0x50]
xor byte [rbp + rcx - 0x41], al
movzx eax, byte [rbp - 0x50]
xor byte [rbp + rcx - 0x40], al
movzx eax, byte [rbp - 0x50]
xor byte [rbp + rcx - 0x3f], al
movzx eax, byte [rbp - 0x50]
xor byte [rbp + rcx - 0x3e], al
movzx eax, byte [rbp - 0x50]
xor byte [rbp + rcx - 0x3d], al
movzx eax, byte [rbp - 0x50]
xor byte [rbp + rcx - 0x3c], al
movzx eax, byte [rbp - 0x50]
xor byte [rbp + rcx - 0x3b], al
movzx eax, byte [rbp - 0x50]
xor byte [rbp + rcx - 0x3a], al
movzx eax, byte [rbp - 0x50]
xor byte [rbp + rcx - 0x39], al
movzx eax, byte [rbp - 0x50]
xor byte [rbp + rcx - 0x38], al
movzx eax, byte [rbp - 0x50]
xor byte [rbp + rcx - 0x37], al
movzx eax, byte [rbp - 0x50]
xor byte [rbp + rcx - 0x36], al
movzx eax, byte [rbp - 0x50]
xor byte [rbp + rcx - 0x35], al
movzx eax, byte [rbp - 0x50]
xor byte [rbp + rcx - 0x34], al
movzx eax, byte [rbp - 0x50]
xor byte [rbp + rcx - 0x33], al
movzx eax, byte [rbp - 0x50]
xor byte [rbp + rcx - 0x32], al
movzx eax, byte [rbp - 0x50]
xor byte [rbp + rcx - 0x31], al
movzx eax, byte [rbp - 0x50]
xor byte [rbp + rcx - 0x30], al
movzx eax, byte [rbp - 0x50]
xor byte [rbp + rcx - 0x2f], al
movzx eax, byte [rbp - 0x50]
xor byte [rbp + rcx - 0x2e], al
add rcx, 0x22
cmp rcx, 0x44
jb 0x14000e340
mov byte [rbp - 0xb], 0
mov dword [rsp + 0x28], 5
mov qword [rsp + 0x20], rbx
xor r9d, r9d
lea r8, [rbp - 0x4f]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
movaps xmm1, xmm6
movaps xmm0, xmm9
call fcn.1400222f0
movaps xmm0, xmmword [0x140046200]
movups xmmword [rbp - 0x50], xmm0
xorps xmm1, xmm1
movups xmmword [rsp + 0x58], xmm1
mov dword [rbp - 0x78], 0x3f800000
mov dword [rbp - 0x74], 0x3f800000
mov qword [rsp + 0x48], 0
mov dword [rbp], 0x43160000
mov dword [rbp + 4], 0x43480000
lea rax, [rbp - 0x50]
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x58]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 1
lea r9, [rbp - 0x78]
lea r8, [rsp + 0x48]
lea rdx, [rbp]
mov rcx, qword [0x1400b0ce0]
call fcn.14003b730
test al, al
je 0x14000e7ef
lea rcx, str.mpnotify.exe
call fcn.14000ca80
mov ecx, 0x28
call qword [sym.imp.KERNEL32.dll_Sleep]
movdqa xmm1, xmmword [0x140046340]
movdqu xmmword [rbp - 0x50], xmm1
movdqa xmm2, xmmword [0x1400462f0]
movdqu xmmword [rbp - 0x40], xmm2
mov r8b, 0x6c
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd ecx, xmm1
xor al, cl
mov byte [rbp - 0x4f], al
xor byte [rbp - 0x4e], cl
xor byte [rbp - 0x4d], cl
xor byte [rbp - 0x4c], cl
xor byte [rbp - 0x4b], cl
xor byte [rbp - 0x4a], cl
xor byte [rbp - 0x49], cl
xor byte [rbp - 0x48], cl
xor byte [rbp - 0x47], cl
xor byte [rbp - 0x46], cl
xor byte [rbp - 0x45], cl
xor byte [rbp - 0x44], cl
xor byte [rbp - 0x43], cl
xor byte [rbp - 0x42], cl
xor byte [rbp - 0x41], cl
movd eax, xmm2
xor al, cl
mov byte [rbp - 0x40], al
xor byte [rbp - 0x3f], cl
xor byte [rbp - 0x3e], cl
xor byte [rbp - 0x3d], cl
xor byte [rbp - 0x3c], cl
xor byte [rbp - 0x3b], cl
xor byte [rbp - 0x3a], cl
xor byte [rbp - 0x39], cl
xor byte [rbp - 0x38], cl
xor byte [rbp - 0x37], cl
xor byte [rbp - 0x36], cl
xor byte [rbp - 0x35], cl
xor byte [rbp - 0x34], cl
xor byte [rbp - 0x33], cl
xor byte [rbp - 0x32], cl
xor byte [rbp - 0x31], cl
xor r8b, cl
mov byte [rbp - 0x30], r8b
mov byte [rbp - 0x2f], 0
mov dword [rsp + 0x28], 0xa
mov qword [rsp + 0x20], 0
xor r9d, r9d
lea r8, [rbp - 0x4f]
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
mov ecx, 0x1f4
call qword [sym.imp.KERNEL32.dll_Sleep]
cmp byte [rbp + 0x10], 0
je 0x14000e65e
mov ecx, 0xb8
call fcn.14003d500
mov rbx, rax
mov qword [rbp - 0x70], rax
xor edx, edx
mov r8d, 0xb8
mov rcx, rax
call sub.VCRUNTIME140.dll_memset
movzx edx, byte [rsp + 0x7c]
movzx ecx, byte [rsp + 0x78]
add edx, ecx
movzx ecx, byte [rsp + 0x54]
add edx, ecx
movzx ecx, r13b
add edx, ecx
movzx eax, r12b
add edx, eax
movzx eax, r15b
add edx, eax
movzx eax, r14b
add edx, eax
movzx eax, sil
add edx, eax
mov r8, rdi
mov rcx, rbx
call fcn.14000c1f0
nop
mov byte [rax + 0x82], 1
mov qword [0x1400b0d50], rax
jmp 0x14000e7ef
movdqa xmm1, xmmword [0x140046170]
movdqa xmmword [rbp - 0x50], xmm1
movdqa xmm2, xmmword [0x1400462a0]
movdqa xmmword [rbp - 0x40], xmm2
movdqa xmm3, xmmword [0x140046310]
movdqa xmmword [rbp - 0x30], xmm3
movdqa xmm4, xmmword [0x140046350]
movdqa xmmword [rbp - 0x20], xmm4
mov cl, 0x61
mov r8b, 0x3f
movzx r9d, cl
mov r10b, 0x71
mov r11b, 0x60
mov bl, 0x7b
mov dil, 0x62
mov sil, 0x66
mov r14b, 0x3d
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd edx, xmm1
xor al, dl
mov byte [rbp - 0x4f], al
xor byte [rbp - 0x4e], dl
xor byte [rbp - 0x4d], dl
xor byte [rbp - 0x4c], dl
xor byte [rbp - 0x4b], dl
xor byte [rbp - 0x4a], dl
xor byte [rbp - 0x49], dl
xor byte [rbp - 0x48], dl
xor byte [rbp - 0x47], dl
xor byte [rbp - 0x46], dl
xor byte [rbp - 0x45], dl
xor byte [rbp - 0x44], dl
xor byte [rbp - 0x43], dl
xor byte [rbp - 0x42], dl
xor byte [rbp - 0x41], dl
movd eax, xmm2
xor al, dl
mov byte [rbp - 0x40], al
xor byte [rbp - 0x3f], dl
xor byte [rbp - 0x3e], dl
xor byte [rbp - 0x3d], dl
xor byte [rbp - 0x3c], dl
xor byte [rbp - 0x3b], dl
xor byte [rbp - 0x3a], dl
xor byte [rbp - 0x39], dl
xor byte [rbp - 0x38], dl
xor byte [rbp - 0x37], dl
xor byte [rbp - 0x36], dl
xor byte [rbp - 0x35], dl
xor byte [rbp - 0x34], dl
xor byte [rbp - 0x33], dl
xor byte [rbp - 0x32], dl
xor byte [rbp - 0x31], dl
movd eax, xmm3
xor al, dl
mov byte [rbp - 0x30], al
xor byte [rbp - 0x2f], dl
xor byte [rbp - 0x2e], dl
xor byte [rbp - 0x2d], dl
xor byte [rbp - 0x2c], dl
xor byte [rbp - 0x2b], dl
xor byte [rbp - 0x2a], dl
xor byte [rbp - 0x29], dl
xor byte [rbp - 0x28], dl
xor byte [rbp - 0x27], dl
xor byte [rbp - 0x26], dl
xor byte [rbp - 0x25], dl
xor byte [rbp - 0x24], dl
xor byte [rbp - 0x23], dl
xor byte [rbp - 0x22], dl
xor byte [rbp - 0x21], dl
movd eax, xmm4
xor al, dl
mov byte [rbp - 0x20], al
xor byte [rbp - 0x1f], dl
xor byte [rbp - 0x1e], dl
xor byte [rbp - 0x1d], dl
xor byte [rbp - 0x1c], dl
xor byte [rbp - 0x1b], dl
xor byte [rbp - 0x1a], dl
xor byte [rbp - 0x19], dl
xor byte [rbp - 0x18], dl
xor byte [rbp - 0x17], dl
xor byte [rbp - 0x16], dl
xor byte [rbp - 0x15], dl
xor byte [rbp - 0x14], dl
xor byte [rbp - 0x13], dl
xor byte [rbp - 0x12], dl
xor byte [rbp - 0x11], dl
xor cl, dl
mov byte [rbp - 0x10], cl
xor r8b, dl
mov byte [rbp - 0xf], r8b
xor r9b, dl
mov byte [rbp - 0xe], r9b
xor r10b, dl
mov byte [rbp - 0xd], r10b
xor r11b, dl
mov byte [rbp - 0xc], r11b
xor bl, dl
mov byte [rbp - 0xb], bl
xor dil, dl
mov byte [rbp - 0xa], dil
xor sil, dl
mov byte [rbp - 9], sil
xor r14b, dl
mov byte [rbp - 8], r14b
mov byte [rbp - 7], 0
mov dword [rsp + 0x28], 5
mov qword [rsp + 0x20], 0
xor r9d, r9d
lea r8, [rbp - 0x4f]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
mov ecx, 1
call fcn.140018000
mov rcx, qword [rbp + 0x68]
xor rcx, rsp
call fcn.14003d4e0
lea r11, [rsp + 0x1b0]
mov rbx, qword [r11 + 0x50]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret