Function at 0x140135450
Capabilities:
Contain obfuscated stackstrings
Create process on windows
Enumerate processes

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x1b8]
sub rsp, 0x290
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
movaps xmmword [rax - 0x68], xmm9
movaps xmmword [rax - 0x78], xmm10
movaps xmmword [rax - 0x88], xmm11
movaps xmmword [rax - 0x98], xmm12
movaps xmmword [rax - 0xa8], xmm13
movaps xmmword [rax - 0xb8], xmm14
movaps xmmword [rax - 0xc8], xmm15
mov rax, qword [0x14039f0c0]
xor rax, rsp
mov qword [rbp + 0xe0], rax
lea rcx, reloc.WS2_32.dll_accept
call fcn.14027ddb0
mov rdi, qword [0x140413728]
lea rdx, [rsp + 0x68]
mov rax, qword [0x1404145f0]
xor r12d, r12d
mov rcx, qword [0x140413648]
movss xmm1, dword [rdi + 0x38fc]
movss xmm0, dword [rdi + 0x3930]
movaps xmm6, xmm1
mulss xmm6, dword [0x14036c500]
addss xmm0, xmm0
addss xmm1, xmm1
addss xmm6, dword [rax + 0x14]
or dword [rdi + 0x49e8], 1
mov qword [rdi + 0x49f8], r12
addss xmm1, dword [rdi + 0x3d60]
mov qword [rdi + 0x4a00], r12
addss xmm6, xmm0
mov dword [rdi + 0x49ec], 1
movss dword [rsp + 0x58], xmm1
movss dword [rsp + 0x50], xmm6
call qword [sym.imp.USER32.dll_GetClientRect]
mov eax, dword [rsp + 0x74]
lea rdx, [rsp + 0x60]
sub eax, dword [rsp + 0x6c]
mov ecx, 2
xorps xmm8, xmm8
mov qword [rsp + 0x60], r12
movd xmm1, eax
mov eax, dword [rsp + 0x70]
sub eax, dword [rsp + 0x68]
cvtdq2ps xmm1, xmm1
movd xmm0, eax
mov rax, qword [0x140413728]
cvtdq2ps xmm0, xmm0
or dword [rax + 0x49e8], 2
mov dword [rax + 0x49f0], 1
movss dword [rax + 0x4a0c], xmm1
movss dword [rax + 0x4a08], xmm0
call fcn.1401596e0
xorps xmm1, xmm1
mov ecx, 4
call fcn.140159650
xor edx, edx
mov dword [rsp + 0x60], 0x4e454d66
mov r8d, 0xab
mov word [rsp + 0x64], 0x55
lea rcx, [rsp + 0x61]
call fcn.140163720
mov rax, qword [0x140413728]
mov ecx, 2
movss xmm1, dword [rax + 0x10]
movss xmm0, dword [rax + 0x14]
subss xmm0, dword [0x1404145dc]
subss xmm1, dword [0x1404145d8]
or dword [rax + 0x49e8], 1
mov qword [rax + 0x4a00], r12
mov dword [rax + 0x49ec], 4
mulss xmm0, dword [0x14036c3dc]
mulss xmm1, dword [0x14036c3dc]
movss dword [rax + 0x49fc], xmm0
movss dword [rax + 0x49f8], xmm1
call fcn.140159790
mov rcx, qword [0x140413728]
mov rax, qword [rcx + 0x4038]
movss xmm9, dword [rax + 0x28]
movss xmm10, dword [rax + 0x2c]
movss xmm12, dword [rax + 0x30]
movss xmm14, dword [rax + 0x34]
mov byte [rax + 0xc0], 1
movups xmm0, xmmword [rcx + 0x3a30]
mov rax, qword [rcx + 0x4038]
movss xmm7, dword [rdi + 0x3900]
movss xmm13, dword [rdi + 0x3904]
movups xmmword [rbp - 0x78], xmm0
mov rsi, qword [rax + 0x2a8]
shufps xmm0, xmm0, 0xff
mulss xmm0, dword [rcx + 0x38f0]
movss dword [rsp + 0x60], xmm7
movss dword [rbp - 0x6c], xmm0
lea rcx, [rbp - 0x78]
call fcn.140158ef0
mov rcx, qword [0x140413728]
mov r15d, eax
movups xmm0, xmmword [rcx + 0x3a00]
movups xmmword [rbp - 0x78], xmm0
shufps xmm0, xmm0, 0xff
mulss xmm0, dword [rcx + 0x38f0]
lea rcx, [rbp - 0x78]
movss dword [rbp - 0x6c], xmm0
call fcn.140158ef0
mov rcx, qword [0x140413728]
lea r8, [rbp - 0x78]
movaps xmm0, xmm12
mov dword [rsp + 0x28], Ordinal_50
movaps xmm1, xmm10
movss dword [rsp + 0x78], xmm9
addss xmm1, xmm6
movss dword [rsp + 0x7c], xmm10
addss xmm0, xmm9
movss dword [rsp + 0x20], xmm7
mov r9d, eax
lea rdx, [rsp + 0x78]
mov rax, qword [rcx + 0x4038]
unpcklps xmm0, xmm1
mov rcx, qword [rax + 0x2a8]
movsd qword [rbp - 0x78], xmm0
call fcn.1401767c0
mov rax, qword [0x140413728]
lea rcx, [rbp - 0x78]
movups xmm0, xmmword [rax + 0x39e0]
movups xmmword [rbp - 0x78], xmm0
shufps xmm0, xmm0, 0xff
mulss xmm0, dword [rax + 0x38f0]
movss dword [rbp - 0x6c], xmm0
call fcn.140158ef0
movss xmm1, dword [rdi + 0x38fc]
mov edx, eax
movss xmm0, dword [rdi + 0x38f8]
addss xmm1, xmm1
mov rcx, qword [0x1404145e8]
addss xmm0, xmm0
lea r13, [0x140366fe8]
movss xmm2, dword [rcx + 0x14]
addss xmm1, xmm10
addss xmm0, xmm9
movss dword [rsp + 0x7c], xmm1
movss dword [rsp + 0x78], xmm0
test eax, 0xff000000
je 0x14013581a
test rcx, rcx
jne 0x1401357c7
mov rax, qword [rsi + 0x38]
mov rcx, qword [rax + 8]
ucomiss xmm2, xmm8
jp 0x1401357d8
jne 0x1401357d8
mov rax, qword [rsi + 0x38]
movss xmm2, dword [rax + 0x10]
movups xmm0, xmmword [rsi + 0x88]
mov byte [rsp + 0x48], r12b
lea rax, [0x140366feb]
movss dword [rsp + 0x40], xmm8
lea r9, [rsp + 0x78]
mov qword [rsp + 0x38], rax
lea rax, [rbp - 0x78]
mov qword [rsp + 0x30], r13
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], edx
mov rdx, rsi
movups xmmword [rbp - 0x78], xmm0
call fcn.14017c690
mov rax, qword [0x140413728]
lea rcx, [rbp - 0x78]
movups xmm0, xmmword [rax + 0x3b10]
movups xmmword [rbp - 0x78], xmm0
shufps xmm0, xmm0, 0xff
mulss xmm0, dword [rax + 0x38f0]
movss dword [rbp - 0x6c], xmm0
call fcn.140158ef0
mov rcx, qword [0x140413728]
lea rdx, [rbp - 0x78]
movss xmm15, dword [0x14036c630]
mov r14d, eax
movss xmm3, dword [0x14036c600]
mov qword [rsp + 0x38], r12
movss xmm6, dword [rcx + 0x3d60]
mov rcx, qword [rcx + 0x3d58]
movaps xmm2, xmm6
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x28], r13
movss dword [rsp + 0x20], xmm15
call fcn.14017c250
movss xmm0, dword [rbp - 0x78]
mov rcx, qword [0x1404145e8]
movss xmm3, dword [rdi + 0x38fc]
movss xmm2, dword [rdi + 0x38f8]
addss xmm3, xmm3
addss xmm2, xmm2
movss xmm4, dword [rcx + 0x14]
addss xmm0, dword [0x14036c424]
addss xmm3, xmm10
addss xmm2, xmm9
cvttss2si eax, xmm0
movaps xmm0, xmm4
addss xmm3, xmm8
divss xmm0, xmm6
movd xmm1, eax
movss dword [rsp + 0x7c], xmm3
cvtdq2ps xmm1, xmm1
mulss xmm1, xmm0
addss xmm1, xmm2
movss dword [rsp + 0x78], xmm1
test r14d, 0xff000000
je 0x14013596c
test rcx, rcx
jne 0x14013590e
mov rax, qword [rsi + 0x38]
mov rcx, qword [rax + 8]
ucomiss xmm4, xmm8
jp 0x14013591f
jne 0x14013591f
mov rax, qword [rsi + 0x38]
movss xmm4, dword [rax + 0x10]
movups xmm0, xmmword [rsi + 0x88]
mov byte [rsp + 0x48], r12b
lea rax, [0x140366fe7]
movss dword [rsp + 0x40], xmm8
lea r9, [rsp + 0x78]
mov qword [rsp + 0x38], rax
movaps xmm2, xmm4
lea rax, [0x140366fe4]
mov rdx, rsi
mov qword [rsp + 0x30], rax
lea rax, [rbp - 0x78]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], r14d
movups xmmword [rbp - 0x78], xmm0
call fcn.14017c690
mov rax, qword [0x140413728]
lea rcx, [rbp - 0x78]
movups xmm0, xmmword [rax + 0x3a00]
movups xmmword [rbp - 0x78], xmm0
shufps xmm0, xmm0, 0xff
mulss xmm0, dword [rax + 0x38f0]
movss dword [rbp - 0x6c], xmm0
call fcn.140158ef0
movaps xmm11, xmm14
mov dword [rsp + 0x28], 0x100
subss xmm11, dword [rsp + 0x58]
movaps xmm0, xmm12
lea r8, [rbp - 0x78]
movaps xmm6, xmm9
addss xmm0, xmm9
mov r9d, eax
addss xmm6, xmm8
mov rax, qword [0x140413728]
lea rdx, [rsp + 0x78]
movaps xmm7, xmm11
movaps xmm2, xmm10
addss xmm2, dword [rsp + 0x50]
addss xmm7, xmm10
mov rcx, qword [rax + 0x4038]
movaps xmm1, xmm6
unpcklps xmm1, xmm2
mov rcx, qword [rcx + 0x2a8]
unpcklps xmm0, xmm7
movsd qword [rbp - 0x78], xmm0
movss xmm0, dword [rsp + 0x60]
movss dword [rsp + 0x20], xmm0
movsd qword [rsp + 0x78], xmm1
call fcn.1401767c0
mov rax, qword [0x140413728]
lea rcx, [rbp - 0x78]
movups xmm0, xmmword [rax + 0x3a10]
movups xmmword [rbp - 0x78], xmm0
shufps xmm0, xmm0, 0xff
mulss xmm0, dword [rax + 0x38f0]
movss dword [rbp - 0x6c], xmm0
call fcn.140158ef0
movaps xmm1, xmm14
mov dword [rsp + 0x28], 0xc0
addss xmm1, xmm10
movaps xmm0, xmm12
mov r9d, eax
addss xmm0, xmm9
mov rax, qword [0x140413728]
lea r8, [rbp - 0x78]
lea rdx, [rsp + 0x78]
mov rcx, qword [rax + 0x4038]
unpcklps xmm0, xmm1
movaps xmm1, xmm6
movss xmm6, dword [rsp + 0x60]
unpcklps xmm1, xmm7
mov rcx, qword [rcx + 0x2a8]
movsd qword [rsp + 0x78], xmm1
movss dword [rsp + 0x20], xmm6
movsd qword [rbp - 0x78], xmm0
call fcn.1401767c0
comiss xmm13, xmm8
jbe 0x140135b04
movaps xmm0, xmm11
movss dword [rsp + 0x20], xmm13
subss xmm0, xmm13
movaps xmm1, xmm10
mov r9d, r15d
lea r8, [rsp + 0x78]
lea rdx, [rsp + 0x60]
mov rcx, rsi
addss xmm1, xmm0
movaps xmm0, xmm12
subss xmm0, xmm13
movss dword [rsp + 0x7c], xmm1
addss xmm0, xmm9
movss dword [rsp + 0x64], xmm1
movss dword [rsp + 0x78], xmm0
movaps xmm0, xmm9
addss xmm0, xmm13
movss dword [rsp + 0x60], xmm0
call fcn.1401765a0
mov rax, qword [0x140413728]
lea rbx, [0x140413c28]
cmp qword [0x140413c40], 0xf
lea rcx, [rbp - 0x78]
mov r14, rbx
cmova r14, qword [0x140413c28]
movups xmm0, xmmword [rax + 0x3b10]
movups xmmword [rbp - 0x78], xmm0
shufps xmm0, xmm0, 0xff
mulss xmm0, dword [rax + 0x38f0]
movss dword [rbp - 0x6c], xmm0
call fcn.140158ef0
cmp qword [0x140413c40], 0xf
mov r15d, eax
addss xmm11, dword [rdi + 0x38fc]
cmova rbx, qword [0x140413c28]
mov rcx, qword [0x140413728]
test rbx, rbx
jne 0x140135b77
xorps xmm2, xmm2
jmp 0x140135bc5
movss xmm2, dword [rcx + 0x3d60]
lea rdx, [rbp - 0x78]
movss xmm3, dword [0x14036c600]
mov rcx, qword [rcx + 0x3d58]
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x28], rbx
movss dword [rsp + 0x20], xmm15
call fcn.14017c250
movss xmm0, dword [rbp - 0x78]
addss xmm0, dword [0x14036c424]
cvttss2si eax, xmm0
movd xmm2, eax
cvtdq2ps xmm2, xmm2
movaps xmm0, xmm12
lea rdx, [rsp + 0x78]
subss xmm0, xmm2
movaps xmm1, xmm10
addss xmm1, xmm11
mov r9, r14
mov r8d, r15d
mov rcx, rsi
subss xmm0, dword [rdi + 0x38f8]
movss dword [rsp + 0x7c], xmm1
addss xmm0, xmm9
movss dword [rsp + 0x78], xmm0
call fcn.140177020
comiss xmm13, xmm8
jbe 0x140135c30
addss xmm12, xmm9
movaps xmm1, xmm9
addss xmm14, xmm10
unpcklps xmm1, xmm10
movaps xmm2, xmm6
movq rcx, xmm1
unpcklps xmm12, xmm14
movq rdx, xmm12
call fcn.140151940
mov rcx, qword [0x140413728]
lea rdx, [rsp + 0x51]
mov dword [rsp + 0x78], r12d
mov rax, qword [rcx + 0x4038]
mov byte [rax + 0xc0], 1
mov rax, qword [rcx + 0x4038]
movss xmm0, dword [rax + 0x2c]
subss xmm0, dword [rax + 0x90]
mov byte [rax + 0x151], 1
addss xmm0, dword [rsp + 0x50]
movss dword [rax + 0x114], xmm0
mov rax, qword [rcx + 0x4038]
movss xmm0, dword [rax + 0x34]
subss xmm0, dword [rsp + 0x50]
mov dword [rsp + 0x50], 0x69614d21
mov word [rsp + 0x54], WSAStartup
mov byte [rax + 0xc0], 1
mov rcx, qword [rcx + 0x4038]
movss dword [rsp + 0x7c], xmm0
call fcn.14015c600
xor r9d, r9d
mov dword [rsp + 0x20], 0x80
lea r8, [rsp + 0x78]
mov edx, eax
lea rcx, [rsp + 0x51]
call fcn.140160390
xorps xmm1, xmm1
mov ecx, 7
call fcn.140159650
mov rcx, qword [0x140413728]
lea rdx, [rbp - 0x77]
mov dword [rbp - 0x78], 0x6e6f4363
mov dword [rbp - 0x74], 0x746e6574
mov byte [rbp - 0x70], r12b
mov rax, qword [rcx + 0x4038]
mov qword [rsp + 0x78], r12
mov byte [rax + 0xc0], 1
mov rcx, qword [rcx + 0x4038]
call fcn.14015c600
mov r9d, 1
mov dword [rsp + 0x20], 0x80
lea r8, [rsp + 0x78]
mov edx, eax
lea rcx, [rbp - 0x77]
call fcn.140160390
mov ecx, 1
call fcn.140159790
cmp byte [0x140414650], r12b
mov rcx, qword [0x140413728]
movss xmm0, dword [rdi + 0x38f8]
movss xmm9, dword [0x14036c42c]
addss xmm0, xmm0
mov rax, qword [rcx + 0x4038]
movss xmm6, dword [rax + 0x30]
subss xmm6, dword [rdi + 0x393c]
movss xmm7, dword [rax + 0x34]
subss xmm7, dword [rdi + 0x3940]
subss xmm6, xmm0
movss xmm0, dword [rdi + 0x38fc]
addss xmm0, xmm0
subss xmm7, xmm0
movsd xmm0, qword [rcx + 0x3f88]
cvtpd2ps xmm0, xmm0
subss xmm7, dword [0x14036c568]
je 0x140135ded
movaps xmm1, xmm0
subss xmm1, dword [0x14041464c]
comiss xmm8, xmm1
jbe 0x140135dc3
xorps xmm2, xmm2
jmp 0x140135dcb
movaps xmm2, xmm9
minss xmm2, xmm1
comiss xmm1, dword [0x14036c4dc]
movss dword [0x140414648], xmm2
jbe 0x140135e25
movss dword [0x14041464c], xmm0
mov byte [0x140414650], r12b
jmp 0x140135e25
subss xmm0, dword [0x14041464c]
movaps xmm2, xmm9
subss xmm2, xmm0
comiss xmm8, xmm2
jbe 0x140135e08
xorps xmm1, xmm1
jmp 0x140135e10
movaps xmm1, xmm9
minss xmm1, xmm2
comiss xmm0, xmm9
movss dword [0x140414648], xmm1
jbe 0x140135e25
mov byte [0x140414651], 1
cmp byte [0x140414651], r12b
jne 0x140135f0a
mov rax, qword [rcx + 0x4038]
subss xmm6, dword [0x14036c584]
subss xmm7, dword [0x14036c584]
mov byte [rax + 0xc0], 1
mov rax, qword [rcx + 0x4038]
xor ecx, ecx
mulss xmm6, dword [0x14036c3dc]
mulss xmm7, dword [0x14036c3dc]
movss xmm1, dword [rax + 0x2c]
subss xmm1, dword [rax + 0x90]
movss xmm0, dword [rax + 0x28]
subss xmm0, dword [rax + 0x8c]
addss xmm6, dword [0x14036c53c]
mov byte [rax + 0x151], 1
addss xmm1, xmm7
addss xmm0, xmm6
movss dword [rax + 0x114], xmm1
movss dword [rax + 0x110], xmm0
movss xmm1, dword [0x140414648]
call fcn.140159650
mov rcx, qword [0x1404145f0]
call fcn.140165ff0
lea r8, [rsp + 0x78]
mov dword [rsp + 0x78], 0x42480000
lea rcx, [rsp + 0x51]
mov dword [rsp + 0x7c], 0x42480000
mov dword [rsp + 0x50], 0x746e6904
mov word [rsp + 0x54], 0x6f72
mov byte [rsp + 0x56], r12b
call fcn.14014caf0
call fcn.1401660a0
mov ecx, 1
call fcn.140159790
jmp 0x140136246
call fcn.140169db0
mov rcx, qword [0x140413728]
lea rdx, [rsp + 0x51]
addss xmm6, dword [0x14036c53c]
mov dword [rsp + 0x50], 0x676f4c11
mov word [rsp + 0x54], 0x6e69
mov byte [rsp + 0x56], r12b
mov rax, qword [rcx + 0x4038]
movss dword [rsp + 0x78], xmm6
movss dword [rsp + 0x7c], xmm7
mov byte [rax + 0xc0], 1
mov rcx, qword [rcx + 0x4038]
call fcn.14015c600
mov r9d, 1
mov dword [rsp + 0x20], 0x400
lea r8, [rsp + 0x78]
mov edx, eax
lea rcx, [rsp + 0x51]
call fcn.140160390
call fcn.14018fea0
test al, al
je 0x140135fa8
lea rcx, [rsp + 0x51]
mov dword [rsp + 0x50], 0x676f4c4c
mov word [rsp + 0x54], 0x6e69
mov byte [rsp + 0x56], r12b
call fcn.14017f980
call fcn.140190160
movss xmm6, dword [0x14036c618]
lea r15, [0x140414654]
mov r8, r15
mov dword [rsp + 0x28], r12d
lea rdx, [rbp - 0x77]
movss dword [rsp + 0x20], xmm6
lea rcx, [rsp + 0x79]
mov dword [rbp - 0x78], 0x6573555a
mov dword [rbp - 0x74], 0x6d616e72
mov word [rbp - 0x70], 0x65
mov dword [rsp + 0x78], 0x6573553d
mov dword [rsp + 0x7c], 0x6d616e72
mov word [rbp - 0x80], 0x65
call fcn.14014f910
lea r14, [0x140414674]
mov dword [rsp + 0x28], 0x8000
mov r8, r14
movss dword [rsp + 0x20], xmm6
lea rdx, [rbp - 0x77]
mov dword [rbp - 0x78], 0x73615012
lea rcx, [rsp + 0x79]
mov dword [rbp - 0x74], 0x726f7773
mov word [rbp - 0x70], 0x64
mov dword [rsp + 0x78], 0x73615046
mov dword [rsp + 0x7c], 0x726f7773
mov word [rbp - 0x80], 0x64
call fcn.14014f910
mov rax, qword [0x140413728]
mov r8, qword [rax + 0x4038]
cmp byte [r8 + 0xc3], r12b
jne 0x14013608d
mov edx, dword [r8 + 0x1c4]
mov eax, edx
neg eax
sbb ecx, ecx
add ecx, 2
cmp qword [r8 + 0x1b8], r12
je 0x140136084
neg edx
sbb ecx, ecx
add ecx, 6
movaps xmm1, xmm9
call fcn.140181cb0
lea rdx, [rsp + 0x78]
mov dword [rsp + 0x78], 0xbdcccccd
lea rcx, [rsp + 0x51]
mov dword [rsp + 0x7c], 0x41c80000
mov dword [rsp + 0x50], 0x616f4c6b
mov word [rsp + 0x54], 0x64
call fcn.14014c4c0
test al, al
je 0x140136202
movdqa xmm0, xmmword [0x14036d860]
xor edx, edx
mov ecx, 2
mov dword [rbp - 0x68], 0x78652e61
movdqu xmmword [rbp - 0x78], xmm0
mov word [rbp - 0x64], 0x65
mov esi, r12d
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
lea rdx, [rbp - 0x50]
mov dword [rbp - 0x50], 0x130
mov rcx, rax
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_Process32First]
test eax, eax
je 0x140136138
nop dword [rax + rax]
lea rdx, [rbp - 0x77]
lea rcx, [rbp - 0x24]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__stricmp]
test eax, eax
je 0x140136135
lea rdx, [rbp - 0x50]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_Process32Next]
test eax, eax
jne 0x140136110
jmp 0x140136138
mov esi, dword [rbp - 0x48]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test esi, esi
je 0x1401361b6
mov rbx, 0xffffffffffffffff
mov r8, rbx
nop
inc r8
cmp byte [r15 + r8], r12b
jne 0x140136150
mov rdx, r15
lea rcx, [0x1403d7dd0]
call fcn.140055c60
nop dword [rax + rax]
inc rbx
cmp byte [r14 + rbx], r12b
jne 0x140136170
mov r8, rbx
lea rcx, [0x1403d7db0]
mov rdx, r14
call fcn.140055c60
xorps xmm0, xmm0
mov byte [0x140413639], 1
xorps xmm1, xmm1
movups xmmword [0x140414654], xmm0
movups xmmword [0x140414664], xmm0
movups xmmword [0x140414674], xmm1
movups xmmword [0x140414684], xmm1
jmp 0x140136202
movdqa xmm0, xmmword [0x14036d310]
lea r8, [rsp + 0x51]
mov r9d, reloc.WS2_32.dll_recv
mov dword [rsp + 0x50], 0x6f68701e
lea rdx, [rbp - 0x77]
mov dword [rsp + 0x54], 0x6e6f74
xor ecx, ecx
mov dword [rbp - 0x68], 0x20786f6c
movdqu xmmword [rbp - 0x78], xmm0
mov dword [rbp - 0x64], 0x73726966
mov word [rbp - 0x60], 0x2174
mov byte [rbp - 0x5e], r12b
call qword [sym.imp.USER32.dll_MessageBoxA]
lea rdx, [rsp + 0x78]
mov dword [rsp + 0x78], 0xbdcccccd
lea rcx, [rsp + 0x51]
mov dword [rsp + 0x7c], 0x41c80000
mov dword [rsp + 0x50], 0x6e61437c
mov dword [rsp + 0x54], 0x6c6563
call fcn.14014c4c0
test al, al
je 0x14013623c
mov byte [0x140413623], 1
call fcn.140160710
call fcn.140169f00
call fcn.140160710
call fcn.140160710
mov rcx, qword [0x140413728]
lea rdx, [rsp + 0x59]
mov dword [rsp + 0x5c], 0x726574
mov qword [rsp + 0x78], r12
mov rax, qword [rcx + 0x4038]
movss xmm1, dword [rax + 0x34]
subss xmm1, dword [rsp + 0x58]
mov byte [rax + 0xc0], 1
mov rax, qword [rcx + 0x4038]
mov dword [rsp + 0x58], 0x6f6f4629
movss xmm0, dword [rax + 0x2c]
subss xmm0, dword [rax + 0x90]
mov byte [rax + 0x151], 1
addss xmm0, xmm1
movss dword [rax + 0x114], xmm0
mov rax, qword [rcx + 0x4038]
mov byte [rax + 0xc0], 1
mov rcx, qword [rcx + 0x4038]
call fcn.14015c600
mov r9d, 1
mov dword [rsp + 0x20], 0xbb
lea r8, [rsp + 0x78]
mov edx, eax
lea rcx, [rsp + 0x59]
call fcn.140160390
movss xmm1, dword [rdi + 0x3904]
lea rdx, [rsp + 0x78]
mov rax, qword [0x140413728]
addss xmm1, xmm1
lea rcx, [0x140366ff8]
movss xmm0, dword [rax + 0x3d60]
addss xmm1, xmm0
movss dword [rsp + 0x78], xmm0
movss dword [rsp + 0x7c], xmm1
call fcn.14014bc70
test al, al
je 0x140136382
movdqa xmm0, xmmword [0x14036d920]
lea r8, [rbp - 0x77]
movdqa xmm1, xmmword [0x14036d6a0]
lea rdx, [rsp + 0x59]
mov dword [rsp + 0x28], 1
xor r9d, r9d
xor ecx, ecx
mov dword [rbp - 0x58], 0x6966664f
movdqu xmmword [rbp - 0x78], xmm0
mov dword [rbp - 0x54], 0x6c6163
movdqu xmmword [rbp - 0x68], xmm1
mov dword [rsp + 0x58], 0x65706f6a
mov word [rsp + 0x5c], WSAStartup
mov qword [rsp + 0x20], r12
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
movaps xmm1, xmm15
movaps xmm0, xmm8
call fcn.140169980
movss xmm1, dword [rdi + 0x3904]
lea rdx, [rsp + 0x78]
mov rax, qword [0x140413728]
addss xmm1, xmm1
lea rcx, [0x140366ff4]
movss xmm0, dword [rax + 0x3d60]
addss xmm1, xmm0
movss dword [rsp + 0x78], xmm0
movss dword [rsp + 0x7c], xmm1
call fcn.14014bc70
test al, al
je 0x14013642b
movdqa xmm0, xmmword [0x14036d390]
lea r8, [rbp - 0x77]
mov dword [rsp + 0x28], 1
lea rdx, [rsp + 0x59]
xor r9d, r9d
mov dword [rbp - 0x68], 0x2f67672e
xor ecx, ecx
mov dword [rbp - 0x64], 0x59567953
movdqu xmmword [rbp - 0x78], xmm0
mov dword [rbp - 0x60], 0x6e767162
mov word [rbp - 0x5c], 0x3267
mov byte [rbp - 0x5a], r12b
mov dword [rsp + 0x58], 0x65706f05
mov word [rsp + 0x5c], WSAStartup
mov qword [rsp + 0x20], r12
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
call fcn.140160710
call fcn.140165830
mov rcx, qword [rbp + 0xe0]
xor rcx, rsp
call fcn.14027c900
lea r11, [rsp + 0x290]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
movaps xmm13, xmmword [r11 - 0x80]
movaps xmm14, xmmword [r11 - 0x90]
movaps xmm15, xmmword [r11 - 0xa0]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret