Function at 0x140001270
Capabilities:
Allocate or change rwx memory
Encode data using xor
Enumerate processes
Enumerate threads
Execute command
Execute shellcode via indirect call
Get file size
Hijack thread execution
Parse pe header
Read file on windows
Resume thread
Set console window title
Suspend thread
Terminate process

Disassembly:
mov rax, rsp
push rbp
push rbx
push rdi
push r14
lea rbp, [rax - 0x7a8]
sub rsp, 0x888
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
movaps xmmword [rax - 0x68], xmm9
movaps xmmword [rax - 0x78], xmm10
mov rax, qword [section..data]
xor rax, rsp
mov qword [rbp + 0x720], rax
lea rcx, str.DWareUD___OGFN
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleA]
lea rcx, str.e_36m_n_n____e_0mProgress:_e_0m
call fcn.140001010
mov ecx, 0xbb8
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [0x140006420]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, 0xbb8
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, str.e_35m_DWareUD
call fcn.140001010
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, str.e_35mOG_Fortnite
call fcn.140001010
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, str.e_35m__
call fcn.140001010
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, str.e_35mStatus:
call fcn.140001010
mov ecx, 0x12c
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, str.e_32mUndetected
call fcn.140001010
mov ecx, 0x12c
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, str.e_34m_EasyAntiCheat_
call fcn.140001010
mov ecx, 0x1388
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [0x140006420]
mov dword [rbp - 0x58], 0x1c
mov dword [rbp + 0x280], 0x10000b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.e_35m____e_0m_Initialized_n
call fcn.140001010
lea rcx, str.e_35m_____e_0m_Disabling_anticheat_callbacks..._n
call fcn.140001010
lea rcx, [0x140006368]
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov rcx, rax
lea rdx, str.NtQueryIntervalProfile
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
xor ebx, ebx
lea rdx, [rbp]
mov ecx, 0x1601
mov dword [rbp], ebx
call rax
cmp byte [0x1400067c7], bl
movups xmm0, xmmword [0x1400067b0]
mov r14d, dword [0x140008058]
movdqa xmm7, xmmword [0x140006990]
movdqa xmm10, xmmword [0x1400069a0]
movdqa xmm8, xmmword [str.6666]
movdqa xmm6, xmmword [0x1400069b0]
movdqa xmm9, xmmword [0x140006970]
movups xmmword [rsp + 0x50], xmm0
movsd xmm0, qword [0x1400067c0]
movsd qword [rsp + 0x60], xmm0
je 0x140001571
cmp r14d, 2
jl 0x140001537
movdqa xmmword [rsp + 0x40], xmm10
lea rcx, [rsp + 0x54]
mov r8d, dword [rsp + 0x40]
mov edx, ebx
nop dword [rax]
movd xmm2, edx
lea eax, [rdx + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm9
add edx, 8
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm6
pmuldq xmm1, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm2, xmm0
movd xmm0, r8d
andps xmm2, xmm7
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 0xc]
xorps xmm2, xmm0
movd dword [rcx - 0xc], xmm2
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm9
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm6
pmuldq xmm1, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm2, xmm0
movd xmm0, r8d
andps xmm2, xmm7
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movd dword [rcx - 8], xmm2
cmp edx, 0x18
jl 0x140001450
jmp 0x140001571
lea r9, [rsp + 0x50]
mov r8d, ebx
nop
mov eax, 0x4bda12f7
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x36
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x31
xor byte [r9 - 1], al
cmp r8d, 0x18
jl 0x140001540
lea rcx, [rsp + 0x50]
call fcn.140001010
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [0x140006420]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movzx eax, byte [0x140006878]
mov r8d, ebx
mov byte [rsp + 0x68], al
movups xmm0, xmmword [0x140006860]
movups xmmword [rsp + 0x50], xmm0
movsd xmm0, qword [0x140006870]
movsd qword [rsp + 0x60], xmm0
cmp r14d, 2
jl 0x1400016cd
movdqa xmmword [rsp + 0x40], xmm10
lea rcx, [rsp + 0x54]
mov edx, dword [rsp + 0x40]
nop word [rax + rax]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm9
add r8d, 8
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm6
pmuldq xmm1, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmm7
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 0xc]
xorps xmm2, xmm0
movd dword [rcx - 0xc], xmm2
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm9
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm6
pmuldq xmm1, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmm7
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movd dword [rcx - 8], xmm2
cmp r8d, 0x18
jl 0x1400015e0
cmp r8d, 0x19
jge 0x140001711
movsxd rax, r8d
lea r9, [rsp + 0x50]
add r9, rax
nop dword [rax + rax]
mov eax, 0x4bda12f7
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x36
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x31
xor byte [r9 - 1], al
cmp r8d, 0x19
jl 0x1400016e0
lea rcx, [rsp + 0x50]
mov qword [rsp + 0x8b0], rsi
call fcn.140001010
xor edx, edx
mov dword [rbp + 0x10], 0x238
mov ecx, 2
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rcx, rax
lea rdx, [rbp + 0x10]
mov rdi, rax
call qword [sym.imp.KERNEL32.dll_Process32FirstW]
cmp eax, 1
jne 0x140001cb1
lea rdx, [rbp + 0x10]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_Process32NextW]
cmp eax, 1
jne 0x140001cb1
lea rsi, str.FortniteClient_Win64_Shipping.exe
nop dword [rax]
lea rdx, [rbp + 0x3c]
mov rcx, rbx
nop word [rax + rax]
movzx eax, word [rdx + rcx*2]
cmp ax, word [rsi + rcx*2]
jne 0x140001c9b
movzx eax, word [rdx + rcx*2 + 2]
cmp ax, word [rsi + rcx*2 + 2]
jne 0x140001c9b
add rcx, 2
cmp rcx, 0x22
jne 0x140001780
mov esi, dword [rbp + 0x18]
mov dword [rbp], esi
test esi, esi
je 0x140001cba
lea rcx, [0x140006420]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov eax, dword [str.ag6NE]
mov r8d, ebx
mov dword [rsp + 0x60], eax
movzx eax, byte [0x140006894]
mov byte [rsp + 0x64], al
movups xmm0, xmmword [0x140006880]
movups xmmword [rsp + 0x50], xmm0
cmp r14d, 2
jl 0x1400018fd
movdqa xmmword [rsp + 0x40], xmm10
lea rcx, [rsp + 0x54]
mov edx, dword [rsp + 0x40]
mov dword [rbp], esi
nop dword [rax]
nop dword [rax + rax]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm9
add r8d, 8
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm6
pmuldq xmm1, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmm7
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 0xc]
xorps xmm2, xmm0
movd dword [rcx - 0xc], xmm2
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm9
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm6
pmuldq xmm1, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmm7
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movd dword [rcx - 8], xmm2
cmp r8d, 0x10
jl 0x140001810
cmp r8d, 0x15
jge 0x140001941
movsxd rax, r8d
lea r9, [rsp + 0x50]
add r9, rax
nop dword [rax + rax]
mov eax, 0x4bda12f7
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x36
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x31
xor byte [r9 - 1], al
cmp r8d, 0x15
jl 0x140001910
mov edx, esi
lea rcx, [rsp + 0x50]
call fcn.140001010
lea rcx, [0x140006420]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
cmp byte [0x1400065b1], bl
movups xmm0, xmmword [0x1400065a0]
movzx eax, word [0x1400065b0]
mov word [rsp + 0x60], ax
movups xmmword [rsp + 0x50], xmm0
je 0x140001ad1
mov r8d, ebx
cmp r14d, 2
jl 0x140001a8d
movdqa xmmword [rsp + 0x40], xmm10
lea rcx, [rsp + 0x54]
mov edx, dword [rsp + 0x40]
nop dword [rax + rax]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm9
add r8d, 8
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm6
pmuldq xmm1, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmm7
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 0xc]
xorps xmm2, xmm0
movd dword [rcx - 0xc], xmm2
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm9
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm6
pmuldq xmm1, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmm7
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movd dword [rcx - 8], xmm2
cmp r8d, 0x10
jl 0x1400019a0
cmp r8d, 0x12
jge 0x140001ad1
movsxd rax, r8d
lea r9, [rsp + 0x50]
add r9, rax
nop dword [rax + rax]
mov eax, 0x4bda12f7
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x36
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x31
xor byte [r9 - 1], al
cmp r8d, 0x12
jl 0x140001aa0
lea rcx, [rsp + 0x50]
call fcn.140001010
mov qword [rsp + 0x30], rbx
lea rcx, str.C:WindowsTempdwareogfn.dll
mov dword [rsp + 0x28], ebx
xor r9d, r9d
mov edx, 0x80000000
mov dword [rsp + 0x20], 3
mov r8d, 3
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rdi, rax
cmp rax, 0xffffffffffffffff
jne 0x140001ce7
lea rcx, [0x140006420]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, [rsp + 0x50]
call fcn.140004420
mov rdi, rax
cmp byte [rax + 0x20], bl
je 0x140001c6d
cmp r14d, 2
jl 0x140001c3a
movdqa xmmword [rsp + 0x40], xmm10
mov rcx, rax
mov edx, dword [rsp + 0x40]
nop
movd xmm2, ebx
lea eax, [rbx + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm9
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
paddd xmm3, xmm9
movdqa xmm0, xmm2
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm2
add ebx, 8
pmuldq xmm0, xmm6
mov eax, ebx
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm6
pmulld xmm0, xmm8
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmm7
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm6
movd dword [rcx - 8], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm3, xmm0
movd xmm0, edx
andps xmm3, xmm7
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm3, xmm0
movd dword [rcx - 4], xmm3
cmp ebx, 0x20
jl 0x140001b50
cmp eax, 0x21
jge 0x140001c6d
movsxd r8, ebx
add r8, rdi
mov eax, 0x4bda12f7
lea r8, [r8 + 1]
imul ebx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x36
movzx eax, bl
inc ebx
sub al, cl
add al, 0x31
xor byte [r8 - 1], al
cmp ebx, 0x21
jl 0x140001c40
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
mov rcx, rdi
call fcn.140001010
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [0x140006420]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
call fcn.140001230
int3
lea rdx, [rbp + 0x10]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_Process32NextW]
cmp eax, 1
je 0x140001770
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [0x140006420]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.e_35m_____e_0m_Start_Fortnite__n
call fcn.140001010
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov qword [rsp + 0x8b8], r12
xor edx, edx
mov rcx, rdi
mov qword [rsp + 0x880], r15
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov edx, eax
xor ecx, ecx
mov r9d, 4
mov r12d, eax
mov r8d, 0x3000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r15, rax
test rax, rax
jne 0x140001ec4
lea rcx, [0x140006420]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, [rsp + 0x50]
call fcn.140004450
mov rsi, rax
cmp byte [rax + 0x30], bl
je 0x140001e8d
cmp r14d, 2
jl 0x140001e5a
movdqa xmmword [rsp + 0x40], xmm10
mov rcx, rax
mov edx, dword [rsp + 0x40]
nop dword [rax]
nop word [rax + rax]
movd xmm2, ebx
lea eax, [rbx + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm9
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
paddd xmm3, xmm9
movdqa xmm0, xmm2
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm2
add ebx, 8
pmuldq xmm0, xmm6
mov eax, ebx
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm6
pmulld xmm0, xmm8
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmm7
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm6
movd dword [rcx - 8], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm3, xmm0
movd xmm0, edx
andps xmm3, xmm7
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm3, xmm0
movd dword [rcx - 4], xmm3
cmp ebx, 0x30
jl 0x140001d70
cmp eax, 0x31
jge 0x140001e8d
movsxd r8, ebx
add r8, rsi
mov eax, 0x4bda12f7
lea r8, [r8 + 1]
imul ebx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x36
movzx eax, bl
inc ebx
sub al, cl
add al, 0x31
xor byte [r8 - 1], al
cmp ebx, 0x31
jl 0x140001e60
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
mov rcx, rsi
call fcn.140001010
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [0x140006420]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
call fcn.140001230
int3
lea r9, [rbp + 8]
mov qword [rsp + 0x20], rbx
mov r8d, r12d
mov rdx, r15
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
jne 0x140002085
lea rcx, [0x140006420]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, [rsp + 0x50]
call fcn.140004480
mov rsi, rax
cmp byte [rax + 0x20], bl
je 0x14000203d
cmp r14d, 2
jl 0x14000200a
movdqa xmmword [rsp + 0x40], xmm10
mov rcx, rax
mov edx, dword [rsp + 0x40]
nop
movd xmm2, ebx
lea eax, [rbx + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm9
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
paddd xmm3, xmm9
movdqa xmm0, xmm2
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm2
add ebx, 8
pmuldq xmm0, xmm6
mov eax, ebx
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm6
pmulld xmm0, xmm8
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmm7
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm6
movd dword [rcx - 8], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm3, xmm0
movd xmm0, edx
andps xmm3, xmm7
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm3, xmm0
movd dword [rcx - 4], xmm3
cmp ebx, 0x20
jl 0x140001f20
cmp eax, 0x21
jge 0x14000203d
movsxd r8, ebx
add r8, rsi
mov eax, 0x4bda12f7
lea r8, [r8 + 1]
imul ebx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x36
movzx eax, bl
inc ebx
sub al, cl
add al, 0x31
xor byte [r8 - 1], al
cmp ebx, 0x21
jl 0x140002010
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
mov rcx, rsi
call fcn.140001010
xor edx, edx
mov r8d, 0x8000
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_VirtualFree]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [0x140006420]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
call fcn.140001230
int3
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, 0x5a4d
cmp word [r15], ax
je 0x140002234
lea rcx, [0x140006420]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, [rsp + 0x50]
call fcn.1400044b0
mov r9, rax
cmp byte [rax + 0x1d], bl
je 0x1400021fd
cmp r14d, 2
jl 0x1400021ca
movdqa xmmword [rsp + 0x40], xmm10
mov rcx, rax
mov edx, dword [rsp + 0x40]
nop dword [rax + rax]
movd xmm2, ebx
lea eax, [rbx + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm9
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
paddd xmm3, xmm9
movdqa xmm0, xmm2
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm2
add ebx, 8
pmuldq xmm0, xmm6
mov eax, ebx
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm6
pmulld xmm0, xmm8
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmm7
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm6
movd dword [rcx - 8], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm3, xmm0
movd xmm0, edx
andps xmm3, xmm7
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm3, xmm0
movd dword [rcx - 4], xmm3
cmp ebx, 0x18
jl 0x1400020e0
cmp eax, 0x1e
jge 0x1400021fd
movsxd r8, ebx
add r8, r9
mov eax, 0x4bda12f7
lea r8, [r8 + 1]
imul ebx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x36
movzx eax, bl
inc ebx
sub al, cl
add al, 0x31
xor byte [r8 - 1], al
cmp ebx, 0x1e
jl 0x1400021d0
mov rcx, r9
call fcn.140001010
xor edx, edx
mov r8d, 0x8000
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_VirtualFree]
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [0x140006420]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
call fcn.140001230
int3
movsxd rdi, dword [r15 + 0x3c]
add rdi, r15
cmp dword [rdi], 0x4550
je 0x1400023cc
lea rcx, [0x140006420]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, [rsp + 0x50]
call fcn.1400044e0
mov r9, rax
cmp byte [rax + 0x16], bl
je 0x1400023ad
cmp r14d, 2
jl 0x14000237a
movdqa xmmword [rsp + 0x40], xmm10
mov rcx, rax
mov edx, dword [rsp + 0x40]
nop dword [rax]
nop word [rax + rax]
movd xmm2, ebx
lea eax, [rbx + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm9
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
paddd xmm3, xmm9
movdqa xmm0, xmm2
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm2
add ebx, 8
pmuldq xmm0, xmm6
mov eax, ebx
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm6
pmulld xmm0, xmm8
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmm7
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm6
movd dword [rcx - 8], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm3, xmm0
movd xmm0, edx
andps xmm3, xmm7
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm3, xmm0
movd dword [rcx - 4], xmm3
cmp ebx, 0x10
jl 0x140002290
cmp eax, 0x17
jge 0x1400023ad
movsxd r8, ebx
add r8, r9
mov eax, 0x4bda12f7
lea r8, [r8 + 1]
imul ebx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x36
movzx eax, bl
inc ebx
sub al, cl
add al, 0x31
xor byte [r8 - 1], al
cmp ebx, 0x17
jl 0x140002380
mov rcx, r9
call fcn.140001010
xor edx, edx
mov r8d, 0x8000
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_VirtualFree]
call fcn.140001230
int3
mov eax, 0x2000
test word [rdi + 0x16], ax
jne 0x14000255c
lea rcx, [0x140006420]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, [rsp + 0x50]
call fcn.140004510
mov r9, rax
cmp byte [rax + 0x19], bl
je 0x14000253d
cmp r14d, 2
jl 0x14000250a
movdqa xmmword [rsp + 0x40], xmm10
mov rcx, rax
mov edx, dword [rsp + 0x40]
nop word [rax + rax]
movd xmm2, ebx
lea eax, [rbx + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm9
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
paddd xmm3, xmm9
movdqa xmm0, xmm2
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm2
add ebx, 8
pmuldq xmm0, xmm6
mov eax, ebx
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm6
pmulld xmm0, xmm8
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmm7
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm6
movd dword [rcx - 8], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm3, xmm0
movd xmm0, edx
andps xmm3, xmm7
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm3, xmm0
movd dword [rcx - 4], xmm3
cmp ebx, 0x18
jl 0x140002420
cmp eax, 0x1a
jge 0x14000253d
movsxd r8, ebx
add r8, r9
mov eax, 0x4bda12f7
lea r8, [r8 + 1]
imul ebx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x36
movzx eax, bl
inc ebx
sub al, cl
add al, 0x31
xor byte [r8 - 1], al
cmp ebx, 0x1a
jl 0x140002510
mov rcx, r9
call fcn.140001010
xor edx, edx
mov r8d, 0x8000
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_VirtualFree]
call fcn.140001230
int3
lea r9, [rbp - 8]
mov qword [rsp + 0x8c0], r13
xor r8d, r8d
mov dl, 1
mov ecx, 0x14
call qword [sym.imp.ntdll.dll_RtlAdjustPrivilege]
mov r8d, esi
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov qword [rbp - 0x68], rax
mov r13, rax
test rax, rax
jne 0x140002713
lea rcx, [0x140006420]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, [rsp + 0x50]
call fcn.140004540
mov rdi, rax
cmp byte [rax + 0x2e], bl
je 0x1400026fd
cmp r14d, 2
jl 0x1400026ca
movdqa xmmword [rsp + 0x40], xmm10
mov rcx, rax
mov edx, dword [rsp + 0x40]
nop dword [rax]
nop word [rax + rax]
movd xmm2, ebx
lea eax, [rbx + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm9
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
paddd xmm3, xmm9
movdqa xmm0, xmm2
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm2
add ebx, 8
pmuldq xmm0, xmm6
mov eax, ebx
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm6
pmulld xmm0, xmm8
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmm7
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm6
movd dword [rcx - 8], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm3, xmm0
movd xmm0, edx
andps xmm3, xmm7
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm3, xmm0
movd dword [rcx - 4], xmm3
cmp ebx, 0x28
jl 0x1400025e0
cmp eax, 0x2f
jge 0x1400026fd
movsxd r8, ebx
add r8, rdi
mov eax, 0x4bda12f7
lea r8, [r8 + 1]
imul ebx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x36
movzx eax, bl
inc ebx
sub al, cl
add al, 0x31
xor byte [r8 - 1], al
cmp ebx, 0x2f
jl 0x1400026d0
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
mov rcx, rdi
call fcn.140001010
call fcn.140001230
int3
mov r8d, dword [rdi + 0x50]
xor edx, edx
mov r9d, 0x3000
mov dword [rsp + 0x20], 0x40
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov r12, rax
test rax, rax
jne 0x1400028cd
lea rcx, [0x140006420]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, [rsp + 0x50]
call fcn.140004590
mov rdi, rax
cmp byte [rax + 0x2f], bl
je 0x14000289d
cmp r14d, 2
jl 0x140002865
movdqa xmmword [rsp + 0x40], xmm10
mov rcx, rax
mov edx, dword [rsp + 0x40]
nop word [rax + rax]
movd xmm2, ebx
lea eax, [rbx + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm9
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
paddd xmm3, xmm9
movdqa xmm0, xmm2
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm2
add ebx, 8
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm6
pmulld xmm0, xmm8
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmm7
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm6
movd dword [rcx - 8], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm3, xmm0
movd xmm0, edx
andps xmm3, xmm7
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm3, xmm0
movd dword [rcx - 4], xmm3
cmp ebx, 0x30
jl 0x140002780
jmp 0x14000289d
mov r8, rdi
nop dword [rax + rax]
mov eax, 0x4bda12f7
lea r8, [r8 + 1]
imul ebx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul edx, eax, 0x36
movzx eax, bl
inc ebx
sub al, dl
add al, 0x31
xor byte [r8 - 1], al
cmp ebx, 0x30
jl 0x140002870
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
mov rcx, rdi
call fcn.140001010
xor edx, edx
mov r8d, 0x8000
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_VirtualFree]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_CloseHandle]
call fcn.140001230
int3
mov r9d, dword [rdi + 0x54]
mov r8, r15
mov rdx, r12
mov qword [rsp + 0x20], rbx
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
test eax, eax
jne 0x140002a92
lea rcx, [0x140006420]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, [rsp + 0x50]
call fcn.1400045c0
mov rdi, rax
cmp byte [rax + 0x32], bl
je 0x140002a4d
cmp r14d, 2
jl 0x140002a1a
movdqa xmmword [rsp + 0x40], xmm10
mov rcx, rax
mov edx, dword [rsp + 0x40]
nop dword [rax + rax]
movd xmm2, ebx
lea eax, [rbx + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm9
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
paddd xmm3, xmm9
movdqa xmm0, xmm2
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm2
add ebx, 8
pmuldq xmm0, xmm6
mov eax, ebx
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm6
pmulld xmm0, xmm8
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmm7
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm6
movd dword [rcx - 8], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm3, xmm0
movd xmm0, edx
andps xmm3, xmm7
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm3, xmm0
movd dword [rcx - 4], xmm3
cmp ebx, 0x30
jl 0x140002930
cmp eax, 0x33
jge 0x140002a4d
movsxd r8, ebx
add r8, rdi
mov eax, 0x4bda12f7
lea r8, [r8 + 1]
imul ebx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x36
movzx eax, bl
inc ebx
sub al, cl
add al, 0x31
xor byte [r8 - 1], al
cmp ebx, 0x33
jl 0x140002a20
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
mov rcx, rdi
call fcn.140001010
mov r9d, 0x8000
xor r8d, r8d
mov rdx, r12
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_VirtualFreeEx]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor edx, edx
mov r8d, 0x8000
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_VirtualFree]
call fcn.140001230
int3
mov esi, ebx
cmp bx, word [rdi + 6]
jae 0x140002adb
nop word [rax + rax]
mov eax, esi
mov qword [rsp + 0x20], rbx
lea rcx, [rax + rax*4]
mov r8d, dword [rdi + rcx*8 + 0x11c]
mov edx, dword [rdi + rcx*8 + 0x114]
add r8, r15
mov r9d, dword [rdi + rcx*8 + 0x118]
add rdx, r12
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
movzx eax, word [rdi + 6]
inc esi
cmp esi, eax
jb 0x140002aa0
xor edx, edx
mov dword [rsp + 0x20], 0x40
mov r9d, 0x3000
mov r8d, 0x1000
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov qword [rbp - 0x78], rax
mov rsi, rax
test rax, rax
jne 0x140002cb2
lea rcx, [0x140006420]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, [rsp + 0x50]
call fcn.140004600
mov rdi, rax
cmp byte [rax + 0x37], bl
je 0x140002c6d
cmp r14d, 2
jl 0x140002c35
movdqa xmmword [rsp + 0x40], xmm10
mov rcx, rax
mov edx, dword [rsp + 0x40]
nop word [rax + rax]
movd xmm2, ebx
lea eax, [rbx + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm9
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
paddd xmm3, xmm9
movdqa xmm0, xmm2
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm2
add ebx, 8
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm6
pmulld xmm0, xmm8
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmm7
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm6
movd dword [rcx - 8], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm3, xmm0
movd xmm0, edx
andps xmm3, xmm7
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm3, xmm0
movd dword [rcx - 4], xmm3
cmp ebx, 0x38
jl 0x140002b50
jmp 0x140002c6d
mov r8, rdi
nop dword [rax + rax]
mov eax, 0x4bda12f7
lea r8, [r8 + 1]
imul ebx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul edx, eax, 0x36
movzx eax, bl
inc ebx
sub al, dl
add al, 0x31
xor byte [r8 - 1], al
cmp ebx, 0x38
jl 0x140002c40
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
mov rcx, rdi
call fcn.140001010
mov r9d, 0x8000
xor r8d, r8d
mov rdx, r12
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_VirtualFreeEx]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor edx, edx
mov r8d, 0x8000
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_VirtualFree]
call fcn.140001230
int3
movzx eax, word [0x1400068b8]
mov r8d, ebx
mov word [rsp + 0x70], ax
movups xmm0, xmmword [0x140006898]
movups xmm1, xmmword [0x1400068a8]
movups xmmword [rsp + 0x50], xmm0
movups xmmword [rsp + 0x60], xmm1
cmp r14d, 2
jl 0x140002ded
movdqa xmmword [rsp + 0x40], xmm10
lea rcx, [rsp + 0x54]
mov edx, dword [rsp + 0x40]
nop dword [rax]
nop word [rax + rax]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm9
add r8d, 8
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm6
pmuldq xmm1, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmm7
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 0xc]
xorps xmm2, xmm0
movd dword [rcx - 0xc], xmm2
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm9
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm6
pmuldq xmm1, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmm7
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movd dword [rcx - 8], xmm2
cmp r8d, 0x20
jl 0x140002d00
cmp r8d, 0x22
jge 0x140002e31
movsxd rax, r8d
lea r9, [rsp + 0x50]
add r9, rax
nop dword [rax + rax]
mov eax, 0x4bda12f7
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x36
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x31
xor byte [r9 - 1], al
cmp r8d, 0x22
jl 0x140002e00
mov rdx, rsi
lea rcx, [rsp + 0x50]
call fcn.140001010
mov qword [rbp - 0x38], r12
lea r8, [rbp - 0x38]
movsxd rax, dword [r15 + 0x3c]
mov r9d, 0x30
add rax, r12
mov qword [rsp + 0x20], rbx
mov qword [rbp - 0x30], rax
mov rdx, rsi
mov eax, dword [rdi + 0xb0]
mov rcx, r13
add rax, r12
mov qword [rbp - 0x28], rax
mov eax, dword [rdi + 0x90]
add rax, r12
mov qword [rbp - 0x20], rax
mov rax, qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov qword [rbp - 0x18], rax
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rbp - 0x10], rax
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
test eax, eax
jne 0x140002ea9
lea rcx, [0x140006420]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov eax, dword [0x140006628]
mov r8d, ebx
mov dword [rsp + 0x68], eax
movzx eax, byte [0x14000662c]
mov byte [rsp + 0x6c], al
movups xmm0, xmmword [0x140006610]
movups xmmword [rsp + 0x50], xmm0
movsd xmm0, qword [0x140006620]
movsd qword [rsp + 0x60], xmm0
cmp r14d, 2
jl 0x140002fed
movdqa xmmword [rsp + 0x40], xmm10
lea rcx, [rsp + 0x54]
mov edx, dword [rsp + 0x40]
nop word [rax + rax]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm9
add r8d, 8
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm6
pmuldq xmm1, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmm7
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 0xc]
xorps xmm2, xmm0
movd dword [rcx - 0xc], xmm2
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm9
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm6
pmuldq xmm1, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmm7
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movd dword [rcx - 8], xmm2
cmp r8d, 0x18
jl 0x140002f00
cmp r8d, 0x1d
jge 0x140003031
movsxd rax, r8d
lea r9, [rsp + 0x50]
add r9, rax
nop dword [rax + rax]
mov eax, 0x4bda12f7
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x36
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x31
xor byte [r9 - 1], al
cmp r8d, 0x1d
jl 0x140003000
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, [rsp + 0x50]
call fcn.140001010
lea rax, [rsi + 0x30]
mov qword [rsp + 0x20], rbx
mov rdx, rax
mov qword [rbp - 0x70], rax
mov r9d, 0xfd0
lea r8, [0x140001070]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
test eax, eax
jne 0x14000307a
lea rcx, [0x140006420]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov eax, dword [0x140006628]
mov r8d, ebx
mov dword [rsp + 0x68], eax
movzx eax, byte [0x14000662c]
mov byte [rsp + 0x6c], al
movups xmm0, xmmword [0x140006610]
movups xmmword [rsp + 0x50], xmm0
movsd xmm0, qword [0x140006620]
movsd qword [rsp + 0x60], xmm0
cmp r14d, 2
jl 0x1400031bd
movdqa xmmword [rsp + 0x40], xmm10
lea rcx, [rsp + 0x54]
mov edx, dword [rsp + 0x40]
nop word [rax + rax]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm9
add r8d, 8
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm6
pmuldq xmm1, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmm7
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 0xc]
xorps xmm2, xmm0
movd dword [rcx - 0xc], xmm2
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm9
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm6
pmuldq xmm1, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmm7
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movd dword [rcx - 8], xmm2
cmp r8d, 0x18
jl 0x1400030d0
cmp r8d, 0x1d
jge 0x140003201
movsxd rax, r8d
lea r9, [rsp + 0x50]
add r9, rax
nop dword [rax + rax]
mov eax, 0x4bda12f7
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x36
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x31
xor byte [r9 - 1], al
cmp r8d, 0x1d
jl 0x1400031d0
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, [rsp + 0x50]
call fcn.140001010
xor edx, edx
mov ecx, 4
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rcx, rax
lea rdx, [rbp - 0x58]
mov rsi, rax
call qword [sym.imp.KERNEL32.dll_Thread32First]
lea rdx, [rbp - 0x58]
mov rcx, rsi
mov edi, ebx
call qword [sym.imp.KERNEL32.dll_Thread32Next]
test eax, eax
je 0x140003265
mov r15d, dword [rbp]
cmp dword [rbp - 0x4c], r15d
jne 0x140003254
cmp edi, 3
je 0x140003265
inc edi
lea rdx, [rbp - 0x58]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_Thread32Next]
test eax, eax
jne 0x140003247
lea rcx, [0x140006420]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
cmp byte [0x14000664b], bl
movups xmm0, xmmword [0x140006630]
mov eax, dword [0x140006648]
mov dword [rsp + 0x68], eax
movups xmmword [rsp + 0x50], xmm0
movsd xmm0, qword [0x140006640]
movsd qword [rsp + 0x60], xmm0
je 0x1400033f1
mov r8d, ebx
cmp r14d, 2
jl 0x1400033ad
movdqa xmmword [rsp + 0x40], xmm10
lea rcx, [rsp + 0x54]
mov edx, dword [rsp + 0x40]
nop
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm9
add r8d, 8
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm6
pmuldq xmm1, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmm7
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 0xc]
xorps xmm2, xmm0
movd dword [rcx - 0xc], xmm2
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm9
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm6
pmuldq xmm1, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmm7
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movd dword [rcx - 8], xmm2
cmp r8d, 0x18
jl 0x1400032c0
cmp r8d, 0x1c
jge 0x1400033f1
movsxd rax, r8d
lea r9, [rsp + 0x50]
add r9, rax
nop dword [rax + rax]
mov eax, 0x4bda12f7
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x36
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x31
xor byte [r9 - 1], al
cmp r8d, 0x1c
jl 0x1400033c0
mov edx, dword [rbp - 0x50]
lea rcx, [rsp + 0x50]
call fcn.140001010
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor edx, edx
mov dword [rsp + 0x20], 0x40
mov r9d, 0x3000
mov r8d, 0x1000
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov qword [rbp - 0x60], rax
mov r15, rax
lea rcx, [0x140006420]
test rax, rax
jne 0x1400035bc
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, [rsp + 0x50]
call fcn.140004640
mov rdi, rax
cmp byte [rax + 0x35], bl
je 0x14000359d
cmp r14d, 2
jl 0x14000356a
movdqa xmmword [rsp + 0x40], xmm10
mov rcx, rax
mov edx, dword [rsp + 0x40]
nop dword [rax]
nop word [rax + rax]
movd xmm2, ebx
lea eax, [rbx + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm9
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
paddd xmm3, xmm9
movdqa xmm0, xmm2
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm2
add ebx, 8
pmuldq xmm0, xmm6
mov eax, ebx
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm6
pmulld xmm0, xmm8
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmm7
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm6
movd dword [rcx - 8], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm3, xmm0
movd xmm0, edx
andps xmm3, xmm7
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm3, xmm0
movd dword [rcx - 4], xmm3
cmp ebx, 0x30
jl 0x140003480
cmp eax, 0x36
jge 0x14000359d
movsxd r8, ebx
add r8, rdi
mov eax, 0x4bda12f7
lea r8, [r8 + 1]
imul ebx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x36
movzx eax, bl
inc ebx
sub al, cl
add al, 0x31
xor byte [r8 - 1], al
cmp ebx, 0x36
jl 0x140003570
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
mov rcx, rdi
call fcn.140001010
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_CloseHandle]
call fcn.140001230
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov eax, dword [0x140006778]
mov r8d, ebx
mov dword [rsp + 0x68], eax
movzx eax, byte [0x14000677c]
mov byte [rsp + 0x6c], al
movups xmm0, xmmword [0x140006760]
movups xmmword [rsp + 0x50], xmm0
movsd xmm0, qword [0x140006770]
movsd qword [rsp + 0x60], xmm0
cmp r14d, 2
jl 0x1400036fd
movdqa xmmword [rsp + 0x40], xmm10
lea rcx, [rsp + 0x54]
mov edx, dword [rsp + 0x40]
nop
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm9
add r8d, 8
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm6
pmuldq xmm1, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmm7
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 0xc]
xorps xmm2, xmm0
movd dword [rcx - 0xc], xmm2
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm9
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm6
pmuldq xmm1, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmm7
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movd dword [rcx - 8], xmm2
cmp r8d, 0x18
jl 0x140003610
cmp r8d, 0x1d
jge 0x140003741
movsxd rax, r8d
lea r9, [rsp + 0x50]
add r9, rax
nop dword [rax + rax]
mov eax, 0x4bda12f7
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x36
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x31
xor byte [r9 - 1], al
cmp r8d, 0x1d
jl 0x140003710
mov rdx, r15
lea rcx, [rsp + 0x50]
call fcn.140001010
mov r8d, dword [rbp - 0x50]
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenThread]
mov qword [rbp], rax
mov rsi, rax
test rax, rax
jne 0x140003901
lea rcx, [0x140006420]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, [rsp + 0x50]
call fcn.140004680
mov rdi, rax
cmp byte [rax + 0x2d], bl
je 0x1400038cd
cmp r14d, 2
jl 0x14000389a
movdqa xmmword [rsp + 0x40], xmm10
mov rcx, rax
mov edx, dword [rsp + 0x40]
nop word [rax + rax]
movd xmm2, ebx
lea eax, [rbx + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm9
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
paddd xmm3, xmm9
movdqa xmm0, xmm2
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm2
add ebx, 8
pmuldq xmm0, xmm6
mov eax, ebx
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm6
pmulld xmm0, xmm8
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmm7
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm6
movd dword [rcx - 8], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm3, xmm0
movd xmm0, edx
andps xmm3, xmm7
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm3, xmm0
movd dword [rcx - 4], xmm3
cmp ebx, 0x28
jl 0x1400037b0
cmp eax, 0x2e
jge 0x1400038cd
movsxd r8, ebx
add r8, rdi
mov eax, 0x4bda12f7
lea r8, [r8 + 1]
imul ebx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x36
movzx eax, bl
inc ebx
sub al, cl
add al, 0x31
xor byte [r8 - 1], al
cmp ebx, 0x2e
jl 0x1400038a0
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
mov rcx, rdi
call fcn.140001010
mov r9d, 0x8000
xor r8d, r8d
mov rdx, r15
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_VirtualFreeEx]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_CloseHandle]
call fcn.140001230
int3
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_SuspendThread]
lea rdx, [rbp + 0x250]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetThreadContext]
mov edx, 0x10000
xor ecx, ecx
mov r9d, 4
mov r8d, 0x3000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
xor edx, edx
mov r8d, 0x10000
mov rcx, rax
mov r15, rax
call sub.VCRUNTIME140.dll_memset
movups xmm0, xmmword [0x140008078]
lea r12, [r15 + 0x12c]
mov rdi, r15
movups xmmword [r15], xmm0
movups xmm1, xmmword [0x140008088]
movups xmmword [r15 + 0x10], xmm1
movups xmm0, xmmword [0x140008098]
movups xmmword [r15 + 0x20], xmm0
cmp r15, r12
jae 0x140003d26
mov rsi, qword [rbp - 0x78]
movabs rcx, 0xcccccccccccccccc
mov r13, qword [rbp - 0x70]
movabs rdx, 0xaaaaaaaaaaaaaaaa
nop dword [rax + rax]
mov rax, qword [rdi]
cmp rax, rcx
jne 0x140003b53
lea rcx, [0x140006420]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
cmp byte [0x14000675d], bl
movups xmm0, xmmword [0x140006740]
mov eax, dword [0x140006758]
mov dword [rsp + 0x68], eax
movzx eax, word [0x14000675c]
movups xmmword [rsp + 0x50], xmm0
mov word [rsp + 0x6c], ax
movsd xmm0, qword [0x140006750]
movsd qword [rsp + 0x60], xmm0
je 0x140003b41
mov r8d, ebx
cmp r14d, 2
jl 0x140003aff
movdqa xmmword [rsp + 0x40], xmm10
lea rcx, [rsp + 0x54]
mov edx, dword [rsp + 0x40]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm9
add r8d, 8
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm6
pmuldq xmm1, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmm7
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 0xc]
xorps xmm2, xmm0
movd dword [rcx - 0xc], xmm2
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm9
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm6
pmuldq xmm1, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmm7
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movd dword [rcx - 8], xmm2
cmp r8d, 0x18
jl 0x140003a12
cmp r8d, 0x1e
jge 0x140003b41
movsxd rax, r8d
lea r9, [rsp + 0x50]
add r9, rax
nop word [rax + rax]
mov eax, 0x4bda12f7
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x36
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x31
xor byte [r9 - 1], al
cmp r8d, 0x1e
jl 0x140003b10
lea rcx, [rsp + 0x50]
call fcn.140001010
mov qword [rdi], rsi
jmp 0x140003cfe
cmp rax, rdx
jne 0x140003d12
lea rcx, [0x140006420]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov eax, dword [0x1400066a8]
mov r8d, ebx
mov dword [rsp + 0x70], eax
movzx eax, word [0x1400066ac]
mov word [rsp + 0x74], ax
movzx eax, byte [0x1400066ae]
mov byte [rsp + 0x76], al
movups xmm0, xmmword [0x140006688]
movups xmm1, xmmword [0x140006698]
movups xmmword [rsp + 0x50], xmm0
movups xmmword [rsp + 0x60], xmm1
cmp r14d, 2
jl 0x140003cad
movdqa xmmword [rsp + 0x40], xmm10
lea rcx, [rsp + 0x54]
mov edx, dword [rsp + 0x40]
nop
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm9
add r8d, 8
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm6
pmuldq xmm1, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmm7
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 0xc]
xorps xmm2, xmm0
movd dword [rcx - 0xc], xmm2
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm9
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm6
pmuldq xmm1, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmm7
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movd dword [rcx - 8], xmm2
cmp r8d, 0x20
jl 0x140003bc0
cmp r8d, 0x27
jge 0x140003cf1
movsxd rax, r8d
lea r9, [rsp + 0x50]
add r9, rax
nop dword [rax + rax]
mov eax, 0x4bda12f7
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x36
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x31
xor byte [r9 - 1], al
cmp r8d, 0x27
jl 0x140003cc0
lea rcx, [rsp + 0x50]
call fcn.140001010
mov qword [rdi], r13
movabs rdx, 0xaaaaaaaaaaaaaaaa
movabs rcx, 0xcccccccccccccccc
inc rdi
cmp rdi, r12
jb 0x1400039a0
mov r13, qword [rbp - 0x68]
mov rsi, qword [rbp]
mov r12, qword [rbp - 0x60]
mov r9d, 0x30
mov rdx, r12
mov qword [rsp + 0x20], rbx
mov r8, r15
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
test eax, eax
jne 0x140003f04
lea rcx, [0x140006420]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, [rsp + 0x50]
call fcn.1400046c0
mov rdi, rax
cmp byte [rax + 0x37], bl
je 0x140003ead
cmp r14d, 2
jl 0x140003e75
movdqa xmmword [rsp + 0x40], xmm10
mov rcx, rax
mov edx, dword [rsp + 0x40]
nop word [rax + rax]
movd xmm2, ebx
lea eax, [rbx + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm9
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
paddd xmm3, xmm9
movdqa xmm0, xmm2
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm2
add ebx, 8
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm6
pmulld xmm0, xmm8
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmm7
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm6
movd dword [rcx - 8], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm3, xmm0
movd xmm0, edx
andps xmm3, xmm7
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm3, xmm0
movd dword [rcx - 4], xmm3
cmp ebx, 0x38
jl 0x140003d90
jmp 0x140003ead
mov r8, rdi
nop dword [rax + rax]
mov eax, 0x4bda12f7
lea r8, [r8 + 1]
imul ebx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul edx, eax, 0x36
movzx eax, bl
inc ebx
sub al, dl
add al, 0x31
xor byte [r8 - 1], al
cmp ebx, 0x38
jl 0x140003e80
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
mov rcx, rdi
call fcn.140001010
mov r9d, 0x8000
xor r8d, r8d
mov rdx, r12
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_VirtualFreeEx]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_ResumeThread]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor edx, edx
mov r8d, 0x8000
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_VirtualFree]
call fcn.140001230
int3
lea rdx, [rbp + 0x250]
mov qword [rbp + 0x348], r12
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_SetThreadContext]
test eax, eax
jne 0x140003f85
lea rcx, [0x140006420]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.____Unable_to_hijack_target_thread___d__n
call fcn.140001010
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r9d, 0x8000
xor r8d, r8d
mov rdx, r12
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_VirtualFreeEx]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_ResumeThread]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor edx, edx
mov r8d, 0x8000
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_VirtualFree]
call fcn.140001230
int3
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_ResumeThread]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor edx, edx
mov r8d, 0x8000
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_VirtualFree]
lea rcx, [0x140006420]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, [rsp + 0x50]
call fcn.140004700
mov r10, rax
cmp byte [rax + 0x1a], bl
je 0x140004121
mov r8d, ebx
cmp r14d, 2
jl 0x1400040dd
movdqa xmmword [rsp + 0x40], xmm10
mov rcx, rax
mov edx, dword [rsp + 0x40]
nop
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm9
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
paddd xmm3, xmm9
movdqa xmm0, xmm2
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm2
add r8d, 8
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm6
pmulld xmm0, xmm8
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmm7
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm6
movd dword [rcx - 8], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm3, xmm0
movd xmm0, edx
andps xmm3, xmm7
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm3, xmm0
movd dword [rcx - 4], xmm3
cmp r8d, 0x18
jl 0x140003ff0
cmp r8d, 0x1b
jge 0x140004121
movsxd r9, r8d
add r9, r10
nop dword [rax]
nop word [rax + rax]
mov eax, 0x4bda12f7
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x36
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x31
xor byte [r9 - 1], al
cmp r8d, 0x1b
jl 0x1400040f0
mov rcx, r10
call fcn.140001010
lea rcx, [0x140006420]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, [rsp + 0x50]
call fcn.140004730
mov r10, rax
cmp byte [rax + 0x25], bl
je 0x1400042a1
mov r8d, ebx
cmp r14d, 2
jl 0x14000425d
movdqa xmmword [rsp + 0x40], xmm10
mov rcx, rax
mov edx, dword [rsp + 0x40]
nop word [rax + rax]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm9
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
paddd xmm3, xmm9
movdqa xmm0, xmm2
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm2
add r8d, 8
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm6
pmulld xmm0, xmm8
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmm7
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm6
movd dword [rcx - 8], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm3, xmm0
movd xmm0, edx
andps xmm3, xmm7
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm3, xmm0
movd dword [rcx - 4], xmm3
cmp r8d, 0x20
jl 0x140004170
cmp r8d, 0x26
jge 0x1400042a1
movsxd r9, r8d
add r9, r10
nop dword [rax]
nop word [rax + rax]
mov eax, 0x4bda12f7
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x36
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x31
xor byte [r9 - 1], al
cmp r8d, 0x26
jl 0x140004270
mov rcx, r10
call fcn.140001010
mov cl, 1
call fcn.1400011c0
lea rcx, [0x140006420]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, [rsp + 0x50]
call fcn.140004760
mov r9, rax
cmp byte [rax + 0x17], bl
je 0x14000440d
cmp r14d, 2
jl 0x1400043d5
movdqa xmmword [rsp + 0x40], xmm10
mov rcx, rax
mov edx, dword [rsp + 0x40]
nop dword [rax + rax]
movd xmm2, ebx
lea eax, [rbx + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm9
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
paddd xmm3, xmm9
movdqa xmm0, xmm2
pmuldq xmm1, xmm6
punpckhdq xmm0, xmm2
add ebx, 8
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm6
pmulld xmm0, xmm8
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmm7
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm6
movd dword [rcx - 8], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm3, xmm0
movd xmm0, edx
andps xmm3, xmm7
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm3, xmm0
movd dword [rcx - 4], xmm3
cmp ebx, 0x18
jl 0x1400042f0
jmp 0x14000440d
mov r8, r9
nop dword [rax + rax]
mov eax, 0x4bda12f7
lea r8, [r8 + 1]
imul ebx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul edx, eax, 0x36
movzx eax, bl
inc ebx
sub al, dl
add al, 0x31
xor byte [r8 - 1], al
cmp ebx, 0x18
jl 0x1400043e0
mov rcx, r9
call fcn.140001010
call fcn.140001230
int3