Function at 0x14000e720
Capabilities:
Access peb ldr_data
Encode data using xor
Enumerate processes
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov r11, rsp
mov qword [r11 + 0x20], rdi
push rbp
lea rbp, [r11 - 0x228]
sub rsp, 0x320
mov rax, qword [0x14004c040]
xor rax, rsp
mov qword [rbp + 0x200], rax
mov rax, qword gs:[0x60]
mov qword [r11 + 8], rbx
mov qword [r11 + 0x10], rsi
mov qword [r11 + 0x18], r14
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop dword [rax + rax]
mov r9, qword [rax + 0x30]
movsxd rcx, dword [r9 + 0x3c]
mov ebx, dword [rcx + r9 + 0x88]
add rbx, r9
cmp rbx, r9
je 0x14000e7e4
mov r8d, dword [rbx + 0x18]
test r8d, r8d
je 0x14000e7e4
mov r11d, dword [rbx + 0x20]
nop word [rax + rax]
dec r8d
mov edi, 0x811c9dc5
lea rcx, [r11 + r8*4]
mov edx, dword [rcx + r9]
add rdx, r9
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x14000e7df
nop dword [rax]
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, edi
imul edi, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x14000e7c0
cmp edi, 0x98d87e10
je 0x14000e7e9
test r8d, r8d
jne 0x14000e7a0
mov rax, qword [rax]
jmp 0x14000e770
mov ecx, dword [rbx + 0x24]
add rcx, r9
movzx edx, word [rcx + r8*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r9
mov eax, dword [rcx + rdx*4]
add rax, r9
call rax
mov edx, 0xffffffec
mov rcx, rax
mov rsi, rax
call qword [sym.imp.USER32.dll_GetWindowLongPtrA]
mov edx, 0xffffffec
mov rcx, rsi
bts rax, 0x13
mov r8, rax
call qword [sym.imp.USER32.dll_SetWindowLongPtrA]
mov rcx, qword gs:[0x60]
mov rcx, qword [rcx + 0x18]
mov rcx, qword [rcx + 0x10]
nop word [rax + rax]
mov r9, qword [rcx + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov ebx, dword [rax + r9 + 0x88]
add rbx, r9
cmp rbx, r9
je 0x14000e8b4
mov r8d, dword [rbx + 0x18]
test r8d, r8d
je 0x14000e8b4
mov r11d, dword [rbx + 0x20]
nop word [rax + rax]
dec r8d
mov edi, 0x811c9dc5
lea rax, [r11 + r8*4]
mov edx, dword [rax + r9]
add rdx, r9
movzx eax, byte [rdx]
inc rdx
test al, al
je 0x14000e8af
nop dword [rax]
movsx eax, al
lea rdx, [rdx + 1]
xor eax, edi
imul edi, eax, 0x1000193
movzx eax, byte [rdx - 1]
test al, al
jne 0x14000e890
cmp edi, 0x1de05d54
je 0x14000e8b9
test r8d, r8d
jne 0x14000e870
mov rcx, qword [rcx]
jmp 0x14000e840
mov ecx, dword [rbx + 0x24]
add rcx, r9
movzx edx, word [rcx + r8*2]
mov r8b, pe_nt_image_headers64
mov ecx, dword [rbx + 0x1c]
add rcx, r9
mov eax, dword [rcx + rdx*4]
xor edx, edx
add rax, r9
mov rcx, rsi
mov r9d, 2
call rax
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop word [rax + rax]
mov r9, qword [rax + 0x30]
movsxd rcx, dword [r9 + 0x3c]
mov ebx, dword [rcx + r9 + 0x88]
add rbx, r9
cmp rbx, r9
je 0x14000e974
mov r8d, dword [rbx + 0x18]
test r8d, r8d
je 0x14000e974
mov r11d, dword [rbx + 0x20]
nop word [rax + rax]
dec r8d
mov edi, 0x811c9dc5
lea rcx, [r11 + r8*4]
mov edx, dword [rcx + r9]
add rdx, r9
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x14000e96f
nop dword [rax]
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, edi
imul edi, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x14000e950
cmp edi, 0x9a9264ad
je 0x14000e979
test r8d, r8d
jne 0x14000e930
mov rax, qword [rax]
jmp 0x14000e900
mov ecx, dword [rbx + 0x24]
xor esi, esi
movups xmm0, xmmword [0x140044430]
movzx eax, word [0x140044458]
add rcx, r9
movups xmm1, xmmword [0x140044440]
mov r14d, dword [0x14004c088]
mov edi, esi
movaps xmmword [rsp + 0x310], xmm6
movzx edx, word [rcx + r8*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r9
mov r10d, dword [rcx + rdx*4]
add r10, r9
mov word [rbp - 0x50], ax
movzx eax, byte [0x14004445a]
mov byte [rbp - 0x4e], al
movups xmmword [rbp - 0x78], xmm0
movsd xmm0, qword [0x140044450]
movsd qword [rbp - 0x58], xmm0
movups xmmword [rbp - 0x68], xmm1
cmp r14d, 2
jl 0x14000eb22
movdqa xmm0, xmmword [0x140045800]
lea rcx, [rbp - 0x74]
movdqa xmm5, xmmword [0x140045780]
movdqa xmm4, xmmword [0x140045870]
movdqa xmm6, xmmword [0x1400457a0]
movdqa xmmword [rbp - 0x40], xmm0
mov edx, dword [rbp - 0x40]
nop dword [rax]
nop word [rax + rax]
movd xmm2, edi
lea eax, [rdi + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
paddd xmm3, xmm5
pmuldq xmm0, xmm4
add edi, 8
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x1400457e0]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 0xc]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rcx - 0xc], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, edx
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400457e0]
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movd dword [rcx - 8], xmm2
cmp edi, 0x28
jl 0x14000ea20
cmp edi, 0x2b
jge 0x14000eb60
movsxd rax, edi
lea r8, [rbp - 0x78]
add r8, rax
nop dword [rax]
mov eax, 0x5397829d
lea r8, [r8 + 1]
imul edi
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, 1
sub al, dl
movsx eax, al
imul ecx, eax, 0x31
add cl, dil
inc edi
xor byte [r8 - 1], cl
cmp edi, 0x2b
jl 0x14000eb30
lea rcx, [rbp - 0x78]
call r10
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, [0x140010820]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov eax, dword [0x14003fac8]
mov edi, esi
mov dword [rsp + 0x70], eax
movzx eax, word [0x14003facc]
mov word [rsp + 0x74], ax
movzx eax, byte [0x14003face]
mov byte [rsp + 0x76], al
movups xmm0, xmmword [str.B_RFVRYMIeKD]
movups xmmword [rsp + 0x60], xmm0
cmp r14d, 2
jl 0x14000ecf2
movdqa xmm0, xmmword [0x140045800]
lea rcx, [rsp + 0x64]
movdqa xmm5, xmmword [0x140045780]
movdqa xmm4, xmmword [0x140045870]
movdqa xmm6, xmmword [0x1400457a0]
movdqa xmmword [rbp - 0x40], xmm0
mov edx, dword [rbp - 0x40]
nop dword [rax]
nop word [rax + rax]
movd xmm2, edi
lea eax, [rdi + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
paddd xmm3, xmm5
pmuldq xmm0, xmm4
add edi, 8
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x1400457e0]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 0xc]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rcx - 0xc], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, edx
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400457e0]
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movd dword [rcx - 8], xmm2
cmp edi, 0x10
jl 0x14000ebf0
cmp edi, 0x17
jge 0x14000ed30
movsxd rax, edi
lea r8, [rsp + 0x60]
add r8, rax
nop dword [rax]
mov eax, 0x5397829d
lea r8, [r8 + 1]
imul edi
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, 1
sub al, dl
movsx eax, al
imul ecx, eax, 0x31
add cl, dil
inc edi
xor byte [r8 - 1], cl
cmp edi, 0x17
jl 0x14000ed00
lea rdx, [rsp + 0x60]
lea rcx, [rbp - 0x78]
call fcn.14000fb90
mov rcx, rax
call fcn.14000e210
movzx eax, byte [0x1400444f8]
mov edi, esi
mov byte [rsp + 0x70], al
movups xmm0, xmmword [str.BFRFA]
movups xmmword [rsp + 0x60], xmm0
cmp r14d, 2
jl 0x14000eea2
movdqa xmm0, xmmword [0x140045800]
lea rcx, [rsp + 0x64]
movdqa xmm5, xmmword [0x140045780]
movdqa xmm4, xmmword [0x140045870]
movdqa xmm6, xmmword [0x1400457a0]
movdqa xmmword [rbp - 0x40], xmm0
mov edx, dword [rbp - 0x40]
nop word [rax + rax]
movd xmm2, edi
lea eax, [rdi + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
paddd xmm3, xmm5
pmuldq xmm0, xmm4
add edi, 8
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x1400457e0]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 0xc]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rcx - 0xc], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, edx
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400457e0]
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movd dword [rcx - 8], xmm2
cmp edi, 0x10
jl 0x14000eda0
cmp edi, 0x11
jge 0x14000eee0
movsxd rax, edi
lea r8, [rsp + 0x60]
add r8, rax
nop dword [rax]
mov eax, 0x5397829d
lea r8, [r8 + 1]
imul edi
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, 1
sub al, dl
movsx eax, al
imul ecx, eax, 0x31
add cl, dil
inc edi
xor byte [r8 - 1], cl
cmp edi, 0x11
jl 0x14000eeb0
lea rdx, [rsp + 0x60]
lea rcx, [rbp - 0x78]
call fcn.14000fb90
mov rcx, rax
call fcn.14000e210
cmp qword [0x14004c770], rsi
jne 0x14000f024
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop dword [rax + rax]
mov r9, qword [rax + 0x30]
movsxd rcx, dword [r9 + 0x3c]
mov ebx, dword [rcx + r9 + 0x88]
add rbx, r9
cmp rbx, r9
je 0x14000ef94
mov r8d, dword [rbx + 0x18]
test r8d, r8d
je 0x14000ef94
mov r11d, dword [rbx + 0x20]
nop word [rax + rax]
dec r8d
mov edi, 0x811c9dc5
lea rcx, [r9 + r8*4]
mov ecx, dword [rcx + r11]
add rcx, r9
movzx edx, byte [rcx]
inc rcx
test dl, dl
je 0x14000ef8f
nop dword [rax]
movsx edx, dl
lea rcx, [rcx + 1]
xor edx, edi
imul edi, edx, 0x1000193
movzx edx, byte [rcx - 1]
test dl, dl
jne 0x14000ef70
cmp edi, 0xf652bc95
je 0x14000ef99
test r8d, r8d
jne 0x14000ef50
mov rax, qword [rax]
jmp 0x14000ef20
mov ecx, dword [rbx + 0x24]
movzx eax, byte [0x14003fa7a]
add rcx, r9
movsd xmm0, qword [str.w_A___C_]
xor al, 0x3b
movzx edx, word [rcx + r8*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r9
mov edi, dword [rcx + rdx*4]
lea rdx, [rsp + 0x50]
movzx ecx, word [0x14003fa78]
add rdi, r9
movsd qword [rsp + 0x50], xmm0
xor byte [rsp + 0x51], 0x32
xor byte [rsp + 0x52], 0x33
xor byte [rsp + 0x53], 0x34
xor byte [rsp + 0x54], 0x35
xor byte [rsp + 0x55], 0x36
xor byte [rsp + 0x56], 0x37
xor byte [rsp + 0x57], 0x38
mov word [rsp + 0x58], cx
xor cl, 0x39
xor byte [rsp + 0x59], 0x3a
mov byte [rsp + 0x58], cl
xor ecx, ecx
mov byte [rsp + 0x50], 0x46
mov byte [rsp + 0x5a], al
call rdi
mov qword [0x14004c770], rax
test rax, rax
je 0x14000ef03
mov rbx, qword [0x14004c8e0]
cmp qword [rbx], rsi
jne 0x14000f041
lea rcx, str.No_driver__r_n
call fcn.140001950
mov rax, rsi
jmp 0x14000f0bb
mov eax, dword [rbx + 0x1c]
lea rcx, [rbp - 0x10]
xor edx, edx
mov dword [rbp - 0x20], eax
mov r8d, 0x208
call sub.VCRUNTIME140.dll_memset
mov rdx, qword [rbx + 0x10]
lea rdi, [rbp - 0x10]
sub rdi, rdx
nop dword [rax]
nop word [rax + rax]
movzx eax, word [rdx]
mov word [rdx + rdi], ax
lea rdx, [rdx + 2]
test ax, ax
jne 0x14000f070
mov rcx, qword [rbx]
lea rax, [rbp - 0x20]
mov qword [rsp + 0x38], rsi
lea r8, [rbp - 0x20]
mov qword [rsp + 0x30], rsi
mov r9d, 0x218
mov dword [rsp + 0x28], 0x218
mov edx, 0x220840
mov qword [rsp + 0x20], rax
mov qword [rbp - 0x18], rsi
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov rax, qword [rbp - 0x18]
cmp byte [0x140044511], sil
movups xmm0, xmmword [str.sS_Q]
mov qword [0x14004c860], rax
movzx eax, word [0x140044510]
movups xmmword [rsp + 0x60], xmm0
mov word [rsp + 0x70], ax
je 0x14000f260
mov edi, esi
cmp r14d, 2
jl 0x14000f222
movdqa xmm0, xmmword [0x140045800]
lea rcx, [rsp + 0x64]
movdqa xmm5, xmmword [0x140045780]
movdqa xmm4, xmmword [0x140045870]
movdqa xmm6, xmmword [0x1400457a0]
movdqa xmmword [rbp - 0x40], xmm0
mov edx, dword [rbp - 0x40]
movd xmm2, edi
lea eax, [rdi + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
paddd xmm3, xmm5
pmuldq xmm0, xmm4
add edi, 8
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x1400457e0]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 0xc]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rcx - 0xc], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, edx
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400457e0]
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movd dword [rcx - 8], xmm2
cmp edi, 0x10
jl 0x14000f120
cmp edi, 0x12
jge 0x14000f260
movsxd rax, edi
lea r8, [rsp + 0x60]
add r8, rax
nop dword [rax]
mov eax, 0x5397829d
lea r8, [r8 + 1]
imul edi
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, 1
sub al, dl
movsx eax, al
imul ecx, eax, 0x31
add cl, dil
inc edi
xor byte [r8 - 1], cl
cmp edi, 0x12
jl 0x14000f230
lea rdx, [rsp + 0x60]
lea rcx, [rbp - 0x78]
call fcn.14000fb90
mov rcx, rax
call fcn.14000e4d0
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, [0x140001b70]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::ios_base____ptr64____cdecl___class_std::ios_base____ptr64_____ptr64]
mov rdx, qword [0x14004c860]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_long_unsigned___int64_____ptr64]
mov rcx, rax
lea rdx, [0x140010820]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
cmp byte [0x140044563], sil
movups xmm0, xmmword [str.yS_PYS]
mov eax, dword [0x140044560]
mov dword [rsp + 0x70], eax
movups xmmword [rsp + 0x60], xmm0
je 0x14000f450
mov edi, esi
cmp r14d, 2
jl 0x14000f412
movdqa xmm0, xmmword [0x140045800]
lea rcx, [rsp + 0x64]
movdqa xmm5, xmmword [0x140045780]
movdqa xmm4, xmmword [0x140045870]
movdqa xmm6, xmmword [0x1400457a0]
movdqa xmmword [rbp - 0x40], xmm0
mov edx, dword [rbp - 0x40]
nop word [rax + rax]
movd xmm2, edi
lea eax, [rdi + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
paddd xmm3, xmm5
pmuldq xmm0, xmm4
add edi, 8
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x1400457e0]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 0xc]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rcx - 0xc], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, edx
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400457e0]
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movd dword [rcx - 8], xmm2
cmp edi, 0x10
jl 0x14000f310
cmp edi, 0x14
jge 0x14000f450
movsxd rax, edi
lea r8, [rsp + 0x60]
add r8, rax
nop dword [rax]
mov eax, 0x5397829d
lea r8, [r8 + 1]
imul edi
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, 1
sub al, dl
movsx eax, al
imul ecx, eax, 0x31
add cl, dil
inc edi
xor byte [r8 - 1], cl
cmp edi, 0x14
jl 0x14000f420
lea rdx, [rsp + 0x60]
lea rcx, [rbp - 0x78]
call fcn.14000fb90
mov rcx, rax
call fcn.14000e4d0
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, [0x140001b70]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::ios_base____ptr64____cdecl___class_std::ios_base____ptr64_____ptr64]
mov rcx, qword [0x14004c8e0]
mov rdx, qword [rcx]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___void_const____ptr64____ptr64]
mov rcx, rax
lea rdx, [0x140010820]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov eax, dword [0x14003fae8]
mov edi, esi
mov dword [rsp + 0x70], eax
movzx eax, byte [0x14003faec]
mov byte [rsp + 0x74], al
movups xmm0, xmmword [str.a_WPED]
movups xmmword [rsp + 0x60], xmm0
cmp r14d, 2
jl 0x14000f602
movdqa xmm0, xmmword [0x140045800]
lea rcx, [rsp + 0x64]
movdqa xmm5, xmmword [0x140045780]
movdqa xmm4, xmmword [0x140045870]
movdqa xmm6, xmmword [0x1400457a0]
movdqa xmmword [rbp - 0x40], xmm0
mov edx, dword [rbp - 0x40]
nop word [rax + rax]
movd xmm2, edi
lea eax, [rdi + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
paddd xmm3, xmm5
pmuldq xmm0, xmm4
add edi, 8
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x1400457e0]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 0xc]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rcx - 0xc], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, edx
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400457e0]
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movd dword [rcx - 8], xmm2
cmp edi, 0x10
jl 0x14000f500
cmp edi, 0x15
jge 0x14000f640
movsxd rax, edi
lea r8, [rsp + 0x60]
add r8, rax
nop dword [rax]
mov eax, 0x5397829d
lea r8, [r8 + 1]
imul edi
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, 1
sub al, dl
movsx eax, al
imul ecx, eax, 0x31
add cl, dil
inc edi
xor byte [r8 - 1], cl
cmp edi, 0x15
jl 0x14000f610
lea rdx, [rsp + 0x60]
lea rcx, [rbp - 0x78]
call fcn.14000fb90
mov rcx, rax
call fcn.14000e4d0
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, [0x140001b70]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::ios_base____ptr64____cdecl___class_std::ios_base____ptr64_____ptr64]
mov edx, dword [0x14004c880]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___int____ptr64]
mov rcx, rax
lea rdx, [0x140010820]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
xor ecx, ecx
mov dword [rbp - 0x40], esi
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
lea r9, [rbp - 0x40]
mov edx, 0x1000
mov rcx, rax
mov r8d, 4
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
xor eax, eax
lea r9, [rbp - 0x30]
mov ecx, 0x1000
mov rdi, rbx
rep stosb byte [rdi], al
mov r8d, dword [rbp - 0x40]
mov rcx, rbx
mov edx, 0x1000
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
mov eax, dword [0x140044468]
cmp r14d, 2
movsd xmm0, qword [0x140044460]
movaps xmm6, xmmword [rsp + 0x310]
mov rbx, qword [rsp + 0x330]
mov r14, qword [rsp + 0x340]
mov dword [rbp - 0x80], eax
movzx eax, byte [0x14004446c]
mov byte [rbp - 0x7c], al
movsd qword [rsp + 0x78], xmm0
jl 0x14000f815
movdqa xmm2, xmmword [0x140045780]
mov esi, 8
movdqa xmm4, xmmword [0x140045870]
movdqa xmm1, xmm2
movdqa xmm3, xmmword [0x140045790]
movdqa xmm0, xmm2
mov eax, dword [0x140045800]
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm4
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1400457a0]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x1400457e0]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, eax
paddb xmm2, xmm0
movd xmm0, dword [0x140044460]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rsp + 0x78], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1400457a0]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400457e0]
movd xmm1, dword [rsp + 0x7c]
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
xorps xmm2, xmm1
movd dword [rsp + 0x7c], xmm2
movsxd rax, esi
lea rdi, [rsp + 0x78]
add rdi, rax
mov eax, 0x5397829d
lea rdi, [rdi + 1]
imul esi
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, 1
sub al, dl
movsx eax, al
imul ecx, eax, 0x31
add cl, sil
inc esi
xor byte [rdi - 1], cl
cmp esi, 0xd
jl 0x14000f820
mov rsi, qword [rsp + 0x338]
lea rdx, [rsp + 0x78]
lea rcx, [rbp - 0x78]
call fcn.14000fb90
mov rcx, rax
call fcn.14000e210
nop dword [rax]
cmp byte [0x140044539], 0
movsd xmm0, qword [0x140044530]
movzx eax, word [0x140044538]
movsd qword [rsp + 0x40], xmm0
mov word [rsp + 0x48], ax
je 0x14000f8c5
xor byte [rsp + 0x41], 0x32
xor byte [rsp + 0x42], 0x33
xor byte [rsp + 0x43], 0x34
xor byte [rsp + 0x44], 0x35
xor byte [rsp + 0x45], 0x36
xor byte [rsp + 0x46], 0x37
xor byte [rsp + 0x47], 0x38
xor byte [rsp + 0x48], 0x39
xor byte [rsp + 0x49], 0x3a
mov byte [rsp + 0x40], 0x6f
xor edx, edx
lea ecx, [rdx + 2]
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
lea rdx, [rbp - 0x20]
mov dword [rbp - 0x20], 0x130
mov rcx, rax
mov rdi, rax
call qword [sym.imp.KERNEL32.dll_Process32First]
test eax, eax
je 0x14000f914
nop dword [rax + rax]
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0xc]
call qword [sym.imp.KERNEL32.dll_lstrcmpiA]
mov rcx, rdi
test eax, eax
je 0x14000f922
lea rdx, [rbp - 0x20]
call qword [sym.imp.KERNEL32.dll_Process32Next]
test eax, eax
jne 0x14000f8f0
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x14000f870
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [rbp - 0x18], 0
je 0x14000f870
call fcn.140001b90
call fcn.14000dac0
call fcn.1400095e0
call fcn.14000cc60
call fcn.14000d710
xor eax, eax
mov rcx, qword [rbp + 0x200]
xor rcx, rsp
call fcn.14003d2b0
mov rdi, qword [rsp + 0x348]
add rsp, 0x320
pop rbp
ret