Function at 0x140040120
Capabilities:
Encode data using xor
Enumerate gui resources
Enumerate processes
Execute command
Terminate process

Disassembly:
mov rax, rsp
mov qword [rax + 0x18], rbx
mov qword [rax + 0x20], rsi
push rbp
lea rbp, [rax - 0x2c8]
sub rsp, 0x3c0
movaps xmmword [rax - 0x18], xmm6
movaps xmmword [rax - 0x28], xmm7
movaps xmmword [rax - 0x38], xmm8
movaps xmmword [rax - 0x58], xmm10
movaps xmmword [rax - 0x68], xmm11
movaps xmmword [rax - 0x78], xmm12
movaps xmmword [rax - 0x88], xmm13
movaps xmmword [rax - 0x98], xmm14
mov rax, qword [0x140053040]
xor rax, rsp
mov qword [rbp + 0x220], rax
movups xmm2, xmmword [str.aVQMSU_]
xor ebx, ebx
movzx eax, byte [0x14004b5e8]
movsd xmm0, qword [0x14004b5e0]
mov r8d, ebx
mov esi, dword [0x140053010]
movdqa xmm10, xmmword [0x14004b9a0]
movdqa xmm11, xmmword [0x14004b960]
movdqa xmm12, xmmword [0x14004b950]
movdqa xmm13, xmmword [0x14004b940]
movdqa xmm7, xmmword [0x14004b930]
movdqa xmm14, xmmword [0x14004b9f0]
movdqa xmm8, xmmword [str.6666]
movdqa xmm6, xmmword [0x14004bd90]
movsd qword [rbp - 0x50], xmm0
mov byte [rbp - 0x48], al
movups xmmword [rbp - 0x60], xmm2
cmp esi, 2
jl 0x14004043b
movdqa xmm1, xmm7
movd eax, xmm2
punpckldq xmm1, xmm7
movdqa xmm0, xmm7
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm7
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm7
pmulld xmm0, xmm8
psubd xmm1, xmm0
movd xmm0, eax
andps xmm1, xmm10
packuswb xmm1, xmm1
packuswb xmm1, xmm1
paddb xmm1, xmm14
xorps xmm1, xmm0
movdqa xmm0, xmm13
movd dword [rbp - 0x60], xmm1
movdqa xmm1, xmm13
punpckldq xmm1, xmm13
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm13
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm13
pmulld xmm0, xmm8
psubd xmm1, xmm0
movd xmm0, dword [rbp - 0x5c]
andps xmm1, xmm10
packuswb xmm1, xmm1
packuswb xmm1, xmm1
paddb xmm1, xmm14
xorps xmm1, xmm0
movdqa xmm0, xmm12
movd dword [rbp - 0x5c], xmm1
movdqa xmm1, xmm12
punpckldq xmm1, xmm12
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm12
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm12
pmulld xmm0, xmm8
psubd xmm1, xmm0
movd xmm0, dword [rbp - 0x58]
andps xmm1, xmm10
packuswb xmm1, xmm1
packuswb xmm1, xmm1
paddb xmm1, xmm14
xorps xmm1, xmm0
movdqa xmm0, xmm11
movd dword [rbp - 0x58], xmm1
movdqa xmm1, xmm11
punpckldq xmm1, xmm11
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm11
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm11
pmulld xmm0, xmm8
psubd xmm1, xmm0
andps xmm1, xmm10
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movdqa xmm2, xmmword [0x14004b970]
paddb xmm1, xmm14
movdqa xmm3, xmmword [0x14004b980]
mov r8d, 0x18
movd xmm0, dword [rbp - 0x54]
xorps xmm1, xmm0
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm6
movd dword [rbp - 0x54], xmm1
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm3
pmulld xmm0, xmm8
psubd xmm2, xmm0
punpckldq xmm1, xmm3
movd xmm0, dword [rbp - 0x50]
andps xmm2, xmm10
packuswb xmm2, xmm2
packuswb xmm2, xmm2
pmuldq xmm1, xmm6
paddb xmm2, xmm14
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm6
movd dword [rbp - 0x50], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm3, xmm0
movd xmm0, dword [rbp - 0x4c]
andps xmm3, xmm10
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm14
xorps xmm3, xmm0
movd dword [rbp - 0x4c], xmm3
mov eax, r8d
lea r9, [rbp - 0x60]
add r9, rax
nop word [rax + rax]
mov eax, 0x4bda12f7
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, 1
sub al, dl
movsx eax, al
imul ecx, eax, 0x36
add cl, r8b
inc r8d
xor byte [r9 - 1], cl
cmp r8d, 0x19
jl 0x140040450
lea rcx, [rbp - 0x60]
call fcn.140001220
call fcn.1400382c0
test al, al
jne 0x14004061c
cmp byte [0x14004b3eb], bl
movups xmm0, xmmword [0x14004b3d0]
mov eax, dword [0x14004b3e8]
mov dword [rbp - 0x48], eax
movups xmmword [rbp - 0x60], xmm0
movsd xmm0, qword [0x14004b3e0]
movsd qword [rbp - 0x50], xmm0
je 0x140040613
mov r8d, ebx
cmp esi, 2
jl 0x1400405cd
movdqa xmmword [rbp - 0x70], xmm14
lea rcx, [rbp - 0x5c]
mov edx, dword [rbp - 0x70]
nop
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm7
add r8d, 8
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm6
pmuldq xmm1, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmm10
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 0xc]
xorps xmm2, xmm0
movd dword [rcx - 0xc], xmm2
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm7
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm6
pmuldq xmm1, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmm10
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movd dword [rcx - 8], xmm2
cmp r8d, 0x18
jl 0x1400404e0
cmp r8d, 0x1c
jge 0x140040613
movsxd rax, r8d
lea r9, [rbp - 0x60]
add r9, rax
nop word [rax + rax]
mov eax, 0x4bda12f7
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, 1
sub al, dl
movsx eax, al
imul ecx, eax, 0x36
add cl, r8b
inc r8d
xor byte [r9 - 1], cl
cmp r8d, 0x1c
jl 0x1400405e0
lea rcx, [rbp - 0x60]
call fcn.140001220
cmp qword [0x14006d620], rbx
jne 0x1400408a6
mov qword [rsp + 0x3d0], rdi
mov qword [rsp + 0x3d8], r14
movaps xmmword [rsp + 0x380], xmm9
movdqa xmm9, xmmword [0x14004b9e0]
nop dword [rax + rax]
movups xmm0, xmmword [str.pXJMTRHXS___7i]
mov r8d, ebx
movups xmm1, xmmword [0x14004b650]
mov eax, dword [0x14004b680]
movups xmmword [rsp + 0x40], xmm0
movups xmm0, xmmword [str.__g]
movups xmmword [rsp + 0x50], xmm1
movups xmm1, xmmword [0x14004b670]
movups xmmword [rsp + 0x60], xmm0
movups xmmword [rsp + 0x70], xmm1
mov dword [rbp - 0x80], eax
cmp esi, 2
jl 0x140040795
lea rcx, [rsp + 0x40]
nop word [rax + rax]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 0x10]
paddd xmm2, xmm7
add r8d, 8
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm6
pmuldq xmm1, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm2, xmm0
pshufhw xmm0, xmm2, 0xd8
movq xmm2, xmm9
pshuflw xmm1, xmm0, 0xd8
movq xmm0, qword [rcx - 0x10]
pshufd xmm3, xmm1, 0xd8
paddw xmm3, xmm2
movd xmm2, eax
pshufd xmm2, xmm2, 0
xorps xmm3, xmm0
movq qword [rcx - 0x10], xmm3
paddd xmm2, xmm7
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm6
punpckldq xmm1, xmm2
pmuldq xmm1, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm2, xmm0
pshufhw xmm0, xmm2, 0xd8
movq xmm2, xmm9
pshuflw xmm1, xmm0, 0xd8
movq xmm0, qword [rcx - 8]
pshufd xmm3, xmm1, 0xd8
paddw xmm3, xmm2
xorps xmm3, xmm0
movq qword [rcx - 8], xmm3
cmp r8d, 0x20
jl 0x1400406a0
cmp r8d, 0x22
jge 0x1400407d7
movsxd rax, r8d
lea r9, [rsp + 0x40]
lea r9, [r9 + rax*2]
mov eax, 0x4bda12f7
lea r9, [r9 + 2]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, 1
sub ax, dx
movzx eax, ax
imul ecx, eax, 0x36
add cx, r8w
inc r8d
xor word [r9 - 2], cx
cmp r8d, 0x22
jl 0x1400407a1
mov r14, qword [0x14006d668]
xor edx, edx
mov ecx, 2
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
lea rdx, [rbp - 0x20]
mov dword [rbp - 0x20], 0x238
mov rcx, rax
mov rdi, rax
call qword [sym.imp.KERNEL32.dll_Process32FirstW]
test eax, eax
je 0x140040838
nop word [rax + rax]
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0xc]
call qword [sym.imp.KERNEL32.dll_lstrcmpiW]
mov rcx, rdi
test eax, eax
je 0x140040920
lea rdx, [rbp - 0x20]
call qword [sym.imp.KERNEL32.dll_Process32NextW]
test eax, eax
jne 0x140040810
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [r14]
lea rdx, [rbp - 0x70]
mov dword [0x14006d5b0], eax
lea rcx, [0x140038580]
mov qword [rbp - 0x70], rbx
mov dword [rbp - 0x68], eax
call qword [sym.imp.USER32.dll_EnumWindows]
test eax, eax
jne 0x14004087a
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xffffffff
jne 0x14004087a
mov rax, qword [rbp - 0x70]
test rax, rax
jne 0x14004087d
mov rax, rbx
mov qword [0x14006d620], rax
test rax, rax
je 0x140040650
movaps xmm9, xmmword [rsp + 0x380]
mov r14, qword [rsp + 0x3d8]
mov rdi, qword [rsp + 0x3d0]
cmp byte [0x14004b4df], bl
mov eax, dword [str.U_K9xXV:]
mov dword [rbp - 0x70], eax
je 0x140040973
mov r8d, ebx
cmp esi, 2
jl 0x140040931
movdqa xmm1, xmm7
movdqa xmm0, xmm7
punpckldq xmm1, xmm7
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm7
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm7
pmulld xmm0, xmm8
psubd xmm1, xmm0
movd xmm0, eax
andps xmm1, xmm10
packuswb xmm1, xmm1
packuswb xmm1, xmm1
paddb xmm1, xmm14
xorps xmm1, xmm0
movd dword [rbp - 0x70], xmm1
jmp 0x140040973
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [rbp - 0x18]
mov dword [r14], eax
jmp 0x140040844
lea r9, [rbp - 0x70]
nop word [rax + rax]
mov eax, 0x2f684bdb
lea r9, [r9 + 1]
mul r8d
mov eax, r8d
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x36
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x36
xor byte [r9 - 1], al
cmp r8d, 4
jl 0x140040940
lea rcx, [rbp - 0x70]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov rcx, qword [0x14006d668]
lea r8, [rbp - 0x60]
mov qword [rsp + 0x38], rbx
mov r9d, 0x10
mov qword [rsp + 0x30], rbx
mov edx, 0x2207d0
mov dword [rsp + 0x28], ebx
mov eax, dword [rcx]
mov rcx, qword [rcx + 0x10]
mov dword [rbp - 0x5c], eax
lea rax, [rbp - 0x28]
mov qword [rbp - 0x58], rax
mov byte [rbp - 0x28], bl
mov dword [rbp - 0x60], 0x4823fa
mov qword [rsp + 0x20], rbx
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
cmp byte [rbp - 0x28], bl
jne 0x140040cac
movsd xmm0, qword [0x14004b418]
mov r8d, ebx
movzx eax, byte [0x14004b420]
movsd qword [rbp - 0x50], xmm0
mov byte [rbp - 0x48], al
movups xmm2, xmmword [0x14004b408]
movups xmmword [rbp - 0x60], xmm2
cmp esi, 2
jl 0x140040c5d
movd eax, xmm2
movdqa xmm1, xmm7
punpckldq xmm1, xmm7
movdqa xmm0, xmm7
punpckhdq xmm0, xmm7
movdqa xmm2, xmm13
pmuldq xmm0, xmm6
pmuldq xmm1, xmm6
movd ecx, xmm14
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm7
pmulld xmm0, xmm8
psubd xmm1, xmm0
movd xmm0, ecx
andps xmm1, xmm10
packuswb xmm1, xmm1
packuswb xmm1, xmm1
paddb xmm1, xmm0
movd xmm0, eax
xorps xmm1, xmm0
movdqa xmm0, xmm13
punpckhdq xmm0, xmm13
pmuldq xmm0, xmm6
movd dword [rbp - 0x60], xmm1
movdqa xmm1, xmm13
punpckldq xmm1, xmm13
pmuldq xmm1, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movd xmm1, dword [rbp - 0x5c]
pmulld xmm0, xmm8
psubd xmm2, xmm0
movd xmm0, ecx
andps xmm2, xmm10
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movdqa xmm0, xmm12
xorps xmm2, xmm1
punpckhdq xmm0, xmm12
pmuldq xmm0, xmm6
movdqa xmm1, xmm12
punpckldq xmm1, xmm12
pmuldq xmm1, xmm6
movd dword [rbp - 0x5c], xmm2
movdqa xmm2, xmm12
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movd xmm1, dword [rbp - 0x58]
pmulld xmm0, xmm8
psubd xmm2, xmm0
movd xmm0, ecx
andps xmm2, xmm10
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movdqa xmm0, xmm11
xorps xmm2, xmm1
punpckhdq xmm0, xmm11
pmuldq xmm0, xmm6
movdqa xmm1, xmm11
punpckldq xmm1, xmm11
pmuldq xmm1, xmm6
movd dword [rbp - 0x58], xmm2
movdqa xmm2, xmm11
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
movdqa xmm3, xmmword [0x14004b970]
psubd xmm2, xmm0
movd xmm1, dword [rbp - 0x54]
andps xmm2, xmm10
packuswb xmm2, xmm2
mov r8d, 0x18
packuswb xmm2, xmm2
movd xmm0, ecx
paddb xmm2, xmm0
movdqa xmm0, xmm3
xorps xmm2, xmm1
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm6
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm6
movd dword [rbp - 0x54], xmm2
movdqa xmm2, xmmword [0x14004b980]
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movd xmm1, dword [rbp - 0x50]
pmulld xmm0, xmm8
psubd xmm3, xmm0
movd xmm0, ecx
andps xmm3, xmm10
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm0
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
xorps xmm3, xmm1
movdqa xmm1, xmm2
pmuldq xmm0, xmm6
punpckldq xmm1, xmm2
pmuldq xmm1, xmm6
movd dword [rbp - 0x50], xmm3
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movd xmm1, dword [rbp - 0x4c]
pmulld xmm0, xmm8
psubd xmm2, xmm0
movd xmm0, ecx
andps xmm2, xmm10
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
xorps xmm2, xmm1
movd dword [rbp - 0x4c], xmm2
mov eax, r8d
lea r9, [rbp - 0x60]
add r9, rax
nop word [rax + rax]
mov eax, 0x4bda12f7
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, 1
sub al, dl
movsx eax, al
imul ecx, eax, 0x36
add cl, r8b
inc r8d
xor byte [r9 - 1], cl
cmp r8d, 0x19
jl 0x140040c70
lea rcx, [rbp - 0x60]
call fcn.140001220
call fcn.140037ba0
test al, al
jne 0x140040e2b
lea rdx, [rbp - 0x60]
call fcn.140041980
mov r9, rax
cmp byte [rax + 0x1d], bl
je 0x140040e0f
cmp esi, 2
jl 0x140040dd8
movdqa xmmword [rbp - 0x70], xmm14
mov rcx, rax
mov edx, dword [rbp - 0x70]
nop dword [rax]
nop word [rax + rax]
movd xmm2, ebx
lea eax, [rbx + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm7
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
paddd xmm3, xmm7
movdqa xmm0, xmm2
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm2
add ebx, 8
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm6
pmulld xmm0, xmm8
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmm10
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm6
movd dword [rcx - 8], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm3, xmm0
movd xmm0, edx
andps xmm3, xmm10
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm3, xmm0
movd dword [rcx - 4], xmm3
cmp ebx, 0x18
jl 0x140040cf0
cmp ebx, 0x1e
jge 0x140040e0f
movsxd r8, ebx
add r8, r9
nop
mov eax, 0x4bda12f7
lea r8, [r8 + 1]
imul ebx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, 1
sub al, dl
movsx eax, al
imul ecx, eax, 0x36
add cl, bl
inc ebx
xor byte [r8 - 1], cl
cmp ebx, 0x1e
jl 0x140040de0
mov rcx, r9
call fcn.140001220
mov ecx, 0xbb8
call qword [sym.imp.KERNEL32.dll_Sleep]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
call fcn.140039b30
test al, al
jne 0x14004110b
lea rdx, [rbp - 0x60]
call fcn.1400419b0
mov r9, rax
cmp byte [rax + 0x18], bl
je 0x1400410ef
cmp esi, 2
jl 0x1400410b7
movdqa xmm1, xmm7
movd eax, xmm14
punpckldq xmm1, xmm7
movdqa xmm0, xmm7
punpckhdq xmm0, xmm7
pmuldq xmm0, xmm6
pmuldq xmm1, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm13
pmulld xmm0, xmm8
psubd xmm7, xmm0
punpckldq xmm1, xmm13
pmuldq xmm1, xmm6
andps xmm7, xmm10
packuswb xmm7, xmm7
packuswb xmm7, xmm7
movd xmm0, eax
paddb xmm7, xmm0
movd xmm0, dword [r9]
xorps xmm7, xmm0
movdqa xmm0, xmm13
punpckhdq xmm0, xmm13
pmuldq xmm0, xmm6
movd dword [r9], xmm7
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm12
pmulld xmm0, xmm8
psubd xmm13, xmm0
punpckldq xmm1, xmm12
pmuldq xmm1, xmm6
andps xmm13, xmm10
packuswb xmm13, xmm13
packuswb xmm13, xmm13
movd xmm0, eax
paddb xmm13, xmm0
movd xmm0, dword [r9 + 4]
xorps xmm13, xmm0
movdqa xmm0, xmm12
punpckhdq xmm0, xmm12
pmuldq xmm0, xmm6
movd dword [r9 + 4], xmm13
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm11
pmulld xmm0, xmm8
psubd xmm12, xmm0
punpckldq xmm1, xmm11
andps xmm12, xmm10
movd xmm0, eax
packuswb xmm12, xmm12
packuswb xmm12, xmm12
paddb xmm12, xmm0
pmuldq xmm1, xmm6
movd xmm0, dword [r9 + 8]
xorps xmm12, xmm0
movdqa xmm0, xmm11
punpckhdq xmm0, xmm11
pmuldq xmm0, xmm6
movd dword [r9 + 8], xmm12
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm11, xmm0
movd xmm0, eax
andps xmm11, xmm10
packuswb xmm11, xmm11
packuswb xmm11, xmm11
movdqa xmm2, xmmword [0x14004b970]
paddb xmm11, xmm0
movd xmm0, dword [r9 + 0xc]
movdqa xmm1, xmm2
movdqa xmm3, xmmword [0x14004b980]
xorps xmm11, xmm0
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
mov ebx, 0x18
pmuldq xmm0, xmm6
pmuldq xmm1, xmm6
movd dword [r9 + 0xc], xmm11
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm3
pmulld xmm0, xmm8
psubd xmm2, xmm0
punpckldq xmm1, xmm3
andps xmm2, xmm10
movd xmm0, eax
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
pmuldq xmm1, xmm6
movd xmm0, dword [r9 + 0x10]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm6
movd dword [r9 + 0x10], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm3, xmm0
movd xmm0, eax
andps xmm3, xmm10
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm0
movd xmm0, dword [r9 + 0x14]
xorps xmm3, xmm0
movd dword [r9 + 0x14], xmm3
mov r8d, ebx
add r8, r9
nop dword [rax]
mov eax, 0x4bda12f7
lea r8, [r8 + 1]
imul ebx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, 1
sub al, dl
movsx eax, al
imul ecx, eax, 0x36
add cl, bl
inc ebx
xor byte [r8 - 1], cl
cmp ebx, 0x19
jl 0x1400410c0
mov rcx, r9
call fcn.140001220
mov ecx, 0xbb8
call qword [sym.imp.KERNEL32.dll_Sleep]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov rcx, qword [0x14006d668]
lea r8, [rbp - 0x60]
mov qword [rsp + 0x38], rbx
mov r9d, 0x10
mov qword [rsp + 0x30], rbx
mov edx, 0x221708
mov dword [rsp + 0x28], ebx
mov eax, dword [rcx]
mov rcx, qword [rcx + 0x10]
mov dword [rbp - 0x5c], eax
lea rax, [rbp - 0x70]
mov qword [rbp - 0x58], rax
mov qword [rbp - 0x70], rbx
mov dword [rbp - 0x60], 0x4823fa
mov qword [rsp + 0x20], rbx
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov rax, qword [rbp - 0x70]
mov qword [0x14006d618], rax
test rax, rax
jne 0x1400412d3
lea rdx, [rbp - 0x60]
call fcn.1400419e0
mov r9, rax
cmp byte [rax + 0x31], bl
je 0x1400412bf
cmp esi, 2
jl 0x140041288
movdqa xmmword [rbp - 0x70], xmm14
mov rcx, rax
mov edx, dword [rbp - 0x70]
nop dword [rax]
nop dword [rax + rax]
movd xmm2, ebx
lea eax, [rbx + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm7
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
paddd xmm3, xmm7
movdqa xmm0, xmm2
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm2
add ebx, 8
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm6
pmulld xmm0, xmm8
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmm10
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm6
movd dword [rcx - 8], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm3, xmm0
movd xmm0, edx
andps xmm3, xmm10
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm3, xmm0
movd dword [rcx - 4], xmm3
cmp ebx, 0x30
jl 0x1400411a0
cmp ebx, 0x32
jge 0x1400412bf
movsxd r8, ebx
add r8, r9
nop
mov eax, 0x4bda12f7
lea r8, [r8 + 1]
imul ebx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, 1
sub al, dl
movsx eax, al
imul ecx, eax, 0x36
add cl, bl
inc ebx
xor byte [r8 - 1], cl
cmp ebx, 0x32
jl 0x140041290
mov rcx, r9
call fcn.140001220
mov ecx, 0xffffffff
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
lea rdx, [rbp - 0x60]
call fcn.140041a10
mov r10, rax
cmp byte [rax + 0x11], bl
je 0x1400414d3
mov r8d, ebx
cmp esi, 2
jl 0x140041490
movd eax, xmm14
movdqa xmm1, xmm7
punpckldq xmm1, xmm7
movdqa xmm0, xmm7
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm7
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm7
pmulld xmm0, xmm8
psubd xmm1, xmm0
movd xmm0, eax
andps xmm1, xmm10
packuswb xmm1, xmm1
packuswb xmm1, xmm1
paddb xmm1, xmm0
movd xmm0, dword [r10]
xorps xmm1, xmm0
movdqa xmm0, xmm13
movd dword [r10], xmm1
movdqa xmm1, xmm13
punpckldq xmm1, xmm13
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm13
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm13
pmulld xmm0, xmm8
psubd xmm1, xmm0
movd xmm0, eax
andps xmm1, xmm10
packuswb xmm1, xmm1
packuswb xmm1, xmm1
paddb xmm1, xmm0
movd xmm0, dword [r10 + 4]
xorps xmm1, xmm0
movdqa xmm0, xmm12
movd dword [r10 + 4], xmm1
movdqa xmm1, xmm12
punpckldq xmm1, xmm12
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm12
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm12
pmulld xmm0, xmm8
psubd xmm1, xmm0
movd xmm0, eax
andps xmm1, xmm10
packuswb xmm1, xmm1
packuswb xmm1, xmm1
paddb xmm1, xmm0
movd xmm0, dword [r10 + 8]
xorps xmm1, xmm0
movdqa xmm0, xmm11
movd dword [r10 + 8], xmm1
movdqa xmm1, xmm11
punpckldq xmm1, xmm11
punpckhdq xmm0, xmm11
pmuldq xmm0, xmm6
pmuldq xmm1, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm11
pmulld xmm0, xmm8
psubd xmm1, xmm0
andps xmm1, xmm10
movd xmm0, eax
packuswb xmm1, xmm1
mov r8d, 0x10
packuswb xmm1, xmm1
paddb xmm1, xmm0
movd xmm0, dword [r10 + 0xc]
xorps xmm1, xmm0
movd dword [r10 + 0xc], xmm1
mov r9d, r8d
add r9, r10
nop word [rax + rax]
mov eax, 0x4bda12f7
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, 1
sub al, dl
movsx eax, al
imul ecx, eax, 0x36
add cl, r8b
inc r8d
xor byte [r9 - 1], cl
cmp r8d, 0x12
jl 0x1400414a0
mov edx, dword [0x14006d5b0]
mov rcx, r10
call fcn.140001220
lea rdx, [rbp - 0x60]
call fcn.140041a30
mov r10, rax
cmp byte [rax + 0x15], bl
je 0x140041743
mov r8d, ebx
cmp esi, 2
jl 0x140041703
movd eax, xmm14
movdqa xmm1, xmm7
punpckldq xmm1, xmm7
movdqa xmm0, xmm7
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm7
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm7
pmulld xmm0, xmm8
psubd xmm1, xmm0
movd xmm0, eax
andps xmm1, xmm10
packuswb xmm1, xmm1
packuswb xmm1, xmm1
paddb xmm1, xmm0
movd xmm0, dword [r10]
xorps xmm1, xmm0
movdqa xmm0, xmm13
movd dword [r10], xmm1
movdqa xmm1, xmm13
punpckldq xmm1, xmm13
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm13
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm13
pmulld xmm0, xmm8
psubd xmm1, xmm0
movd xmm0, eax
andps xmm1, xmm10
packuswb xmm1, xmm1
packuswb xmm1, xmm1
paddb xmm1, xmm0
movd xmm0, dword [r10 + 4]
xorps xmm1, xmm0
movdqa xmm0, xmm12
movd dword [r10 + 4], xmm1
movdqa xmm1, xmm12
punpckldq xmm1, xmm12
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm12
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm12
pmulld xmm0, xmm8
psubd xmm1, xmm0
movd xmm0, eax
andps xmm1, xmm10
packuswb xmm1, xmm1
packuswb xmm1, xmm1
paddb xmm1, xmm0
movd xmm0, dword [r10 + 8]
xorps xmm1, xmm0
movdqa xmm0, xmm11
movd dword [r10 + 8], xmm1
movdqa xmm1, xmm11
punpckldq xmm1, xmm11
punpckhdq xmm0, xmm11
pmuldq xmm0, xmm6
pmuldq xmm1, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm11
pmulld xmm0, xmm8
psubd xmm1, xmm0
movdqa xmm2, xmmword [0x14004b970]
andps xmm1, xmm10
packuswb xmm1, xmm1
mov r8d, 0x14
packuswb xmm1, xmm1
movd xmm0, eax
paddb xmm1, xmm0
movd xmm0, dword [r10 + 0xc]
xorps xmm1, xmm0
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
movd dword [r10 + 0xc], xmm1
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm6
pmuldq xmm1, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm2, xmm0
movd xmm0, eax
andps xmm2, xmm10
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [r10 + 0x10]
xorps xmm2, xmm0
movd dword [r10 + 0x10], xmm2
mov r9d, r8d
add r9, r10
nop dword [rax]
mov eax, 0x4bda12f7
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, 1
sub al, dl
movsx eax, al
imul ecx, eax, 0x36
add cl, r8b
inc r8d
xor byte [r9 - 1], cl
cmp r8d, 0x16
jl 0x140041710
mov rdx, qword [0x14006d618]
mov rcx, r10
call fcn.140001220
mov rax, qword [0x14006d668]
lea rdx, [rbp - 0x60]
mov r10, qword [rax + 8]
call fcn.140041a60
mov r9, rax
cmp byte [rax + 0x12], bl
je 0x14004194f
cmp esi, 2
jl 0x140041912
movdqa xmm1, xmm7
movd eax, xmm14
punpckldq xmm1, xmm7
movdqa xmm0, xmm7
punpckhdq xmm0, xmm7
pmuldq xmm0, xmm6
pmuldq xmm1, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm13
pmulld xmm0, xmm8
psubd xmm7, xmm0
punpckldq xmm1, xmm13
pmuldq xmm1, xmm6
andps xmm7, xmm10
packuswb xmm7, xmm7
packuswb xmm7, xmm7
movd xmm0, eax
paddb xmm7, xmm0
movd xmm0, dword [r9]
xorps xmm7, xmm0
movdqa xmm0, xmm13
punpckhdq xmm0, xmm13
pmuldq xmm0, xmm6
movd dword [r9], xmm7
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm12
pmulld xmm0, xmm8
psubd xmm13, xmm0
punpckldq xmm1, xmm12
pmuldq xmm1, xmm6
andps xmm13, xmm10
packuswb xmm13, xmm13
packuswb xmm13, xmm13
movd xmm0, eax
paddb xmm13, xmm0
movd xmm0, dword [r9 + 4]
xorps xmm13, xmm0
movdqa xmm0, xmm12
punpckhdq xmm0, xmm12
pmuldq xmm0, xmm6
movd dword [r9 + 4], xmm13
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm11
pmulld xmm0, xmm8
psubd xmm12, xmm0
punpckldq xmm1, xmm11
andps xmm12, xmm10
movd xmm0, eax
packuswb xmm12, xmm12
packuswb xmm12, xmm12
paddb xmm12, xmm0
pmuldq xmm1, xmm6
movd xmm0, dword [r9 + 8]
xorps xmm12, xmm0
movdqa xmm0, xmm11
punpckhdq xmm0, xmm11
pmuldq xmm0, xmm6
movd dword [r9 + 8], xmm12
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm11, xmm0
movd xmm0, eax
andps xmm11, xmm10
packuswb xmm11, xmm11
packuswb xmm11, xmm11
paddb xmm11, xmm0
mov ebx, 0x10
movd xmm0, dword [r9 + 0xc]
xorps xmm11, xmm0
movd dword [r9 + 0xc], xmm11
mov r8d, ebx
add r8, r9
nop dword [rax + rax]
mov eax, 0x4bda12f7
lea r8, [r8 + 1]
imul ebx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, 1
sub al, dl
movsx eax, al
imul ecx, eax, 0x36
add cl, bl
inc ebx
xor byte [r8 - 1], cl
cmp ebx, 0x13
jl 0x140041920
mov rdx, r10
mov rcx, r9
call fcn.140001220
call fcn.14003a630
call fcn.14003a2b0
call fcn.14003fb20
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3