Function at 0x7ff787135b50
Capabilities:
Authenticate hmac
Enumerate processes
Get graphical window text
Parse pe header

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x478]
sub rsp, 0x578
xor r13d, r13d
mov dword [rbp + 0x4c0], r13d
movdqa xmm1, xmmword [0x7ff78744d630]
movdqu xmmword [rsp + 0x30], xmm1
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd ecx, xmm1
xor al, cl
mov byte [rsp + 0x31], al
xor byte [rsp + 0x32], cl
xor byte [rsp + 0x33], cl
xor byte [rsp + 0x34], cl
xor byte [rsp + 0x35], cl
xor byte [rsp + 0x36], cl
xor byte [rsp + 0x37], cl
xor byte [rsp + 0x38], cl
xor byte [rsp + 0x39], cl
xor byte [rsp + 0x3a], cl
xor byte [rsp + 0x3b], cl
xor byte [rsp + 0x3c], cl
xor byte [rsp + 0x3d], cl
xor byte [rsp + 0x3e], cl
xor byte [rsp + 0x3f], cl
mov byte [rsp + 0x40], r13b
xorps xmm0, xmm0
movups xmmword [rbp + 0x10], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x20], xmm1
lea rax, [rsp + 0x31]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], r13b
jne 0x7ff787135bf3
lea rdx, [rsp + 0x31]
lea rcx, [rbp + 0x10]
call fcn.7ff78711dbf0
nop
mov byte [rsp + 0x50], 0x60
mov al, 0x23
mov cl, 8
mov dl, 5
mov r8b, 1
mov r9b, 0x14
mov r10b, 0x40
mov r11b, 0x25
mov bl, 0xe
mov dil, 7
mov sil, 9
movzx r14d, bl
movzx r15d, dl
xor r12d, r12d
xor al, 0x60
mov byte [rsp + 0x51], al
xor cl, 0x60
mov byte [rsp + 0x52], cl
xor dl, 0x60
mov byte [rsp + 0x53], dl
xor r8b, 0x60
mov byte [rsp + 0x54], r8b
xor r9b, 0x60
mov byte [rsp + 0x55], r9b
xor r10b, 0x60
mov byte [rsp + 0x56], r10b
xor r11b, 0x60
mov byte [rsp + 0x57], r11b
xor bl, 0x60
mov byte [rsp + 0x58], bl
xor dil, 0x60
mov byte [rsp + 0x59], dil
xor sil, 0x60
mov byte [rsp + 0x5a], sil
xor r14b, 0x60
mov byte [rsp + 0x5b], r14b
xor r15b, 0x60
mov byte [rsp + 0x5c], r15b
mov byte [rsp + 0x5d], r12b
xorps xmm0, xmm0
movups xmmword [rbp + 0x30], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x40], xmm1
lea rax, [rsp + 0x51]
mov r8, 0xffffffffffffffff
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], r12b
jne 0x7ff787135cc0
lea rdx, [rsp + 0x51]
lea rcx, [rbp + 0x30]
call fcn.7ff78711dbf0
nop
mov byte [rsp + 0x30], 0x67
mov al, 0x33
mov cl, 6
mov dl, 0x14
mov r8b, 0xc
mov r9b, 0x47
mov r10b, 0x22
mov r11b, 0x1f
mov bl, 0x17
mov dil, 0xb
mov sil, 8
mov r14b, 0x15
mov r15b, 2
movzx r12d, r14b
xor r13d, r13d
xor al, 0x67
mov byte [rsp + 0x31], al
xor cl, 0x67
mov byte [rsp + 0x32], cl
xor dl, 0x67
mov byte [rsp + 0x33], dl
xor r8b, 0x67
mov byte [rsp + 0x34], r8b
xor r9b, 0x67
mov byte [rsp + 0x35], r9b
xor r10b, 0x67
mov byte [rsp + 0x36], r10b
xor r11b, 0x67
mov byte [rsp + 0x37], r11b
xor bl, 0x67
mov byte [rsp + 0x38], bl
xor dil, 0x67
mov byte [rsp + 0x39], dil
xor sil, 0x67
mov byte [rsp + 0x3a], sil
xor r14b, 0x67
mov byte [rsp + 0x3b], r14b
xor r15b, 0x67
mov byte [rsp + 0x3c], r15b
xor r12b, 0x67
mov byte [rsp + 0x3d], r12b
mov byte [rsp + 0x3e], r13b
xorps xmm0, xmm0
movups xmmword [rbp + 0x50], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x60], xmm1
lea rax, [rsp + 0x31]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], r13b
jne 0x7ff787135d90
lea rdx, [rsp + 0x31]
lea rcx, [rbp + 0x50]
call fcn.7ff78711dbf0
nop
movdqa xmm1, xmmword [0x7ff78744dd10]
movdqu xmmword [rsp + 0x30], xmm1
mov dl, 0x61
mov r8b, 0x7c
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd ecx, xmm1
xor al, cl
mov byte [rsp + 0x31], al
xor byte [rsp + 0x32], cl
xor byte [rsp + 0x33], cl
xor byte [rsp + 0x34], cl
xor byte [rsp + 0x35], cl
xor byte [rsp + 0x36], cl
xor byte [rsp + 0x37], cl
xor byte [rsp + 0x38], cl
xor byte [rsp + 0x39], cl
xor byte [rsp + 0x3a], cl
xor byte [rsp + 0x3b], cl
xor byte [rsp + 0x3c], cl
xor byte [rsp + 0x3d], cl
xor byte [rsp + 0x3e], cl
xor byte [rsp + 0x3f], cl
xor dl, cl
mov byte [rsp + 0x40], dl
xor r8b, cl
mov byte [rsp + 0x41], r8b
mov byte [rsp + 0x42], 0
xorps xmm0, xmm0
movups xmmword [rbp + 0x70], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x80], xmm1
lea rax, [rsp + 0x31]
mov r8, 0xffffffffffffffff
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x7ff787135e40
lea rdx, [rsp + 0x31]
lea rcx, [rbp + 0x70]
call fcn.7ff78711dbf0
nop
movdqa xmm1, xmmword [0x7ff78744dcb0]
movdqu xmmword [rsp + 0x70], xmm1
mov dl, 0x6c
mov r8b, 5
mov r9b, 0x68
mov r10b, 0x4a
mov r11b, 0x4b
mov bl, 0x4c
mov dil, 0x51
movzx esi, r10b
mov r14b, 0x57
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd ecx, xmm1
xor al, cl
mov byte [rsp + 0x71], al
xor byte [rsp + 0x72], cl
xor byte [rsp + 0x73], cl
xor byte [rsp + 0x74], cl
xor byte [rsp + 0x75], cl
xor byte [rsp + 0x76], cl
xor byte [rsp + 0x77], cl
xor byte [rsp + 0x78], cl
xor byte [rsp + 0x79], cl
xor byte [rsp + 0x7a], cl
xor byte [rsp + 0x7b], cl
xor byte [rsp + 0x7c], cl
xor byte [rsp + 0x7d], cl
xor byte [rsp + 0x7e], cl
xor byte [rsp + 0x7f], cl
xor dl, cl
mov byte [rbp - 0x80], dl
xor r8b, cl
mov byte [rbp - 0x7f], r8b
xor r9b, cl
mov byte [rbp - 0x7e], r9b
xor r10b, cl
mov byte [rbp - 0x7d], r10b
xor r11b, cl
mov byte [rbp - 0x7c], r11b
xor bl, cl
mov byte [rbp - 0x7b], bl
xor dil, cl
mov byte [rbp - 0x7a], dil
xor sil, cl
mov byte [rbp - 0x79], sil
xor r14b, cl
mov byte [rbp - 0x78], r14b
mov byte [rbp - 0x77], 0
xorps xmm0, xmm0
movups xmmword [rbp + 0x90], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0xa0], xmm1
lea rax, [rsp + 0x71]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], 0
jne 0x7ff787135f30
lea rdx, [rsp + 0x71]
lea rcx, [rbp + 0x90]
call fcn.7ff78711dbf0
nop
movdqa xmm1, xmmword [0x7ff78744d340]
movdqu xmmword [rsp + 0x30], xmm1
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd ecx, xmm1
xor al, cl
mov byte [rsp + 0x31], al
xor byte [rsp + 0x32], cl
xor byte [rsp + 0x33], cl
xor byte [rsp + 0x34], cl
xor byte [rsp + 0x35], cl
xor byte [rsp + 0x36], cl
xor byte [rsp + 0x37], cl
xor byte [rsp + 0x38], cl
xor byte [rsp + 0x39], cl
xor byte [rsp + 0x3a], cl
xor byte [rsp + 0x3b], cl
xor byte [rsp + 0x3c], cl
xor byte [rsp + 0x3d], cl
xor byte [rsp + 0x3e], cl
mov byte [rsp + 0x3f], 0
xorps xmm0, xmm0
movups xmmword [rbp + 0xb0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0xc0], xmm1
lea rax, [rsp + 0x31]
mov r8, 0xffffffffffffffff
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x7ff787135fd0
lea rdx, [rsp + 0x31]
lea rcx, [rbp + 0xb0]
call fcn.7ff78711dbf0
nop
mov byte [rbp + 0x4c0], 0x43
mov al, 7
mov cl, 0x36
mov dl, 0x2e
mov r8b, 0x33
mov r9b, 0x26
mov r10b, 0x31
xor r11d, r11d
xor al, 0x43
mov byte [rbp + 0x4c1], al
xor cl, 0x43
mov byte [rbp + 0x4c2], cl
xor dl, 0x43
mov byte [rbp + 0x4c3], dl
xor r8b, 0x43
mov byte [rbp + 0x4c4], r8b
xor r9b, 0x43
mov byte [rbp + 0x4c5], r9b
xor r10b, 0x43
mov byte [rbp + 0x4c6], r10b
mov byte [rbp + 0x4c7], r11b
xorps xmm0, xmm0
movups xmmword [rbp + 0xd0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0xe0], xmm1
lea rax, [rbp + 0x4c1]
mov r8, 0xffffffffffffffff
nop word [rax + rax]
inc r8
cmp byte [rax + r8], r11b
jne 0x7ff787136070
lea rdx, [rbp + 0x4c1]
lea rcx, [rbp + 0xd0]
call fcn.7ff78711dbf0
nop
mov byte [rsp + 0x50], 0x72
mov al, 0x36
mov cl, 0xb
mov dl, 0x1c
mov r8b, 0x3e
mov r9b, 0x1d
mov r10b, 0x15
movzx r11d, r10b
mov bl, 0x17
xor dil, dil
xor esi, esi
xor al, 0x72
mov byte [rsp + 0x51], al
xor cl, 0x72
mov byte [rsp + 0x52], cl
xor dl, 0x72
mov byte [rsp + 0x53], dl
xor r8b, 0x72
mov byte [rsp + 0x54], r8b
xor r9b, 0x72
mov byte [rsp + 0x55], r9b
xor r10b, 0x72
mov byte [rsp + 0x56], r10b
xor r11b, 0x72
mov byte [rsp + 0x57], r11b
xor bl, 0x72
mov byte [rsp + 0x58], bl
xor dil, 0x72
mov byte [rsp + 0x59], dil
mov byte [rsp + 0x5a], sil
xorps xmm0, xmm0
movups xmmword [rbp + 0xf0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x100], xmm1
lea rax, [rsp + 0x51]
mov r8, 0xffffffffffffffff
nop word [rax + rax]
inc r8
cmp byte [rax + r8], sil
jne 0x7ff787136120
lea rdx, [rsp + 0x51]
lea rcx, [rbp + 0xf0]
call fcn.7ff78711dbf0
nop
mov byte [rsp + 0x50], 0x33
mov al, 0x72
mov cl, 0x43
mov dl, 0x5a
mov r8b, 0x7f
mov r9b, 0x5c
mov r10b, 0x54
movzx r11d, r10b
mov bl, 0x56
mov dil, 0x41
xor esi, esi
xor al, 0x33
mov byte [rsp + 0x51], al
xor cl, 0x33
mov byte [rsp + 0x52], cl
xor dl, 0x33
mov byte [rsp + 0x53], dl
xor r8b, 0x33
mov byte [rsp + 0x54], r8b
xor r9b, 0x33
mov byte [rsp + 0x55], r9b
xor r10b, 0x33
mov byte [rsp + 0x56], r10b
xor r11b, 0x33
mov byte [rsp + 0x57], r11b
xor bl, 0x33
mov byte [rsp + 0x58], bl
xor dil, 0x33
mov byte [rsp + 0x59], dil
mov byte [rsp + 0x5a], sil
xorps xmm0, xmm0
movups xmmword [rbp + 0x110], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x120], xmm1
lea rax, [rsp + 0x51]
mov r8, 0xffffffffffffffff
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], sil
jne 0x7ff7871361d0
lea rdx, [rsp + 0x51]
lea rcx, [rbp + 0x110]
call fcn.7ff78711dbf0
nop
mov byte [rsp + 0x60], 0x3e
mov al, 0x7a
mov cl, 0x57
mov dl, 0x4c
mov r8b, 0x69
mov r9b, 0x5f
mov r10b, 0x4a
mov r11b, 0x5d
mov bl, 0x56
xor edi, edi
xor al, 0x3e
mov byte [rsp + 0x61], al
xor cl, 0x3e
mov byte [rsp + 0x62], cl
xor dl, 0x3e
mov byte [rsp + 0x63], dl
xor r8b, 0x3e
mov byte [rsp + 0x64], r8b
xor r9b, 0x3e
mov byte [rsp + 0x65], r9b
xor r10b, 0x3e
mov byte [rsp + 0x66], r10b
xor r11b, 0x3e
mov byte [rsp + 0x67], r11b
xor bl, 0x3e
mov byte [rsp + 0x68], bl
mov byte [rsp + 0x69], dil
xorps xmm0, xmm0
movups xmmword [rbp + 0x130], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x140], xmm1
lea rax, [rsp + 0x61]
mov r8, 0xffffffffffffffff
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], dil
jne 0x7ff787136270
lea rdx, [rsp + 0x61]
lea rcx, [rbp + 0x130]
call fcn.7ff78711dbf0
nop
mov byte [rsp + 0x50], 0x65
mov al, 0x24
mov cl, 0x10
mov dl, 0x11
mov r8b, 0xa
mov r9b, 0x45
mov r10b, 0x21
xor r11b, r11b
mov bl, 7
movzx edi, cl
mov sil, 2
xor r14d, r14d
xor al, 0x65
mov byte [rsp + 0x51], al
xor cl, 0x65
mov byte [rsp + 0x52], cl
xor dl, 0x65
mov byte [rsp + 0x53], dl
xor r8b, 0x65
mov byte [rsp + 0x54], r8b
xor r9b, 0x65
mov byte [rsp + 0x55], r9b
xor r10b, 0x65
mov byte [rsp + 0x56], r10b
xor r11b, 0x65
mov byte [rsp + 0x57], r11b
xor bl, 0x65
mov byte [rsp + 0x58], bl
xor dil, 0x65
mov byte [rsp + 0x59], dil
xor sil, 0x65
mov byte [rsp + 0x5a], sil
mov byte [rsp + 0x5b], r14b
xorps xmm0, xmm0
movups xmmword [rbp + 0x150], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x160], xmm1
lea rax, [rsp + 0x51]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], r14b
jne 0x7ff787136324
lea rdx, [rsp + 0x51]
lea rcx, [rbp + 0x150]
call fcn.7ff78711dbf0
nop
mov byte [rbp + 0x4c0], 0x4d
mov al, 0x22
mov cl, 0x1e
mov dl, 0x3d
mov r8b, 0x34
xor r9d, r9d
xor al, 0x4d
mov byte [rbp + 0x4c1], al
xor cl, 0x4d
mov byte [rbp + 0x4c2], cl
xor dl, 0x4d
mov byte [rbp + 0x4c3], dl
xor r8b, 0x4d
mov byte [rbp + 0x4c4], r8b
mov byte [rbp + 0x4c5], r9b
xorps xmm0, xmm0
movups xmmword [rbp + 0x170], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x180], xmm1
lea rax, [rbp + 0x4c1]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], r9b
jne 0x7ff7871363a1
lea rdx, [rbp + 0x4c1]
lea rcx, [rbp + 0x170]
call fcn.7ff78711dbf0
nop
mov byte [rsp + 0x60], 0x2e
mov al, 0x6f
mov cl, 0x7e
mov dl, 0x67
mov r8b, 0x7d
mov r9b, 0x4d
mov r10b, 0x4f
mov r11b, 0x40
xor ebx, ebx
xor al, 0x2e
mov byte [rsp + 0x61], al
xor cl, 0x2e
mov byte [rsp + 0x62], cl
xor dl, 0x2e
mov byte [rsp + 0x63], dl
xor r8b, 0x2e
mov byte [rsp + 0x64], r8b
xor r9b, 0x2e
mov byte [rsp + 0x65], r9b
xor r10b, 0x2e
mov byte [rsp + 0x66], r10b
xor r11b, 0x2e
mov byte [rsp + 0x67], r11b
mov byte [rsp + 0x68], bl
xorps xmm0, xmm0
movups xmmword [rbp + 0x190], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x1a0], xmm1
lea rax, [rsp + 0x61]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], bl
jne 0x7ff787136434
lea rdx, [rsp + 0x61]
lea rcx, [rbp + 0x190]
call fcn.7ff78711dbf0
nop
mov byte [rsp + 0x50], 0x11
mov al, 0x42
mov cl, 0x61
mov dl, 0x68
movzx r8d, al
mov r9b, 0x65
mov r10b, 0x64
mov r11b, 0x75
mov bl, 0x78
mov dil, 0x7e
xor esi, esi
xor al, 0x11
mov byte [rsp + 0x51], al
xor cl, 0x11
mov byte [rsp + 0x52], cl
xor dl, 0x11
mov byte [rsp + 0x53], dl
xor r8b, 0x11
mov byte [rsp + 0x54], r8b
xor r9b, 0x11
mov byte [rsp + 0x55], r9b
xor r10b, 0x11
mov byte [rsp + 0x56], r10b
xor r11b, 0x11
mov byte [rsp + 0x57], r11b
xor bl, 0x11
mov byte [rsp + 0x58], bl
xor dil, 0x11
mov byte [rsp + 0x59], dil
mov byte [rsp + 0x5a], sil
xorps xmm0, xmm0
movups xmmword [rbp + 0x1b0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x1c0], xmm1
lea rax, [rsp + 0x51]
mov r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp byte [rax + r8], sil
jne 0x7ff7871364e0
lea rdx, [rsp + 0x51]
lea rcx, [rbp + 0x1b0]
call fcn.7ff78711dbf0
nop
movdqa xmm1, xmmword [0x7ff78744d370]
movdqu xmmword [rsp + 0x30], xmm1
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd ecx, xmm1
xor al, cl
mov byte [rsp + 0x31], al
xor byte [rsp + 0x32], cl
xor byte [rsp + 0x33], cl
xor byte [rsp + 0x34], cl
xor byte [rsp + 0x35], cl
xor byte [rsp + 0x36], cl
xor byte [rsp + 0x37], cl
xor byte [rsp + 0x38], cl
xor byte [rsp + 0x39], cl
xor byte [rsp + 0x3a], cl
xor byte [rsp + 0x3b], cl
xor byte [rsp + 0x3c], cl
xor byte [rsp + 0x3d], cl
xor byte [rsp + 0x3e], cl
mov byte [rsp + 0x3f], 0
xorps xmm0, xmm0
movups xmmword [rbp + 0x1d0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x1e0], xmm1
lea rax, [rsp + 0x31]
mov r8, 0xffffffffffffffff
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x7ff787136580
lea rdx, [rsp + 0x31]
lea rcx, [rbp + 0x1d0]
call fcn.7ff78711dbf0
nop
movdqa xmm1, xmmword [0x7ff78744d4b0]
movdqu xmmword [rsp + 0x30], xmm1
mov dl, 0x29
mov r8b, 6
mov r9b, 0xb
mov r10b, 0x19
movzx r11d, r10b
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd ecx, xmm1
xor al, cl
mov byte [rsp + 0x31], al
xor byte [rsp + 0x32], cl
xor byte [rsp + 0x33], cl
xor byte [rsp + 0x34], cl
xor byte [rsp + 0x35], cl
xor byte [rsp + 0x36], cl
xor byte [rsp + 0x37], cl
xor byte [rsp + 0x38], cl
xor byte [rsp + 0x39], cl
xor byte [rsp + 0x3a], cl
xor byte [rsp + 0x3b], cl
xor byte [rsp + 0x3c], cl
xor byte [rsp + 0x3d], cl
xor byte [rsp + 0x3e], cl
xor byte [rsp + 0x3f], cl
xor dl, cl
mov byte [rsp + 0x40], dl
xor r8b, cl
mov byte [rsp + 0x41], r8b
xor r9b, cl
mov byte [rsp + 0x42], r9b
xor r10b, cl
mov byte [rsp + 0x43], r10b
xor r11b, cl
mov byte [rsp + 0x44], r11b
mov byte [rsp + 0x45], 0
xorps xmm0, xmm0
movups xmmword [rbp + 0x1f0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x200], xmm1
lea rax, [rsp + 0x31]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], 0
jne 0x7ff787136654
lea rdx, [rsp + 0x31]
lea rcx, [rbp + 0x1f0]
call fcn.7ff78711dbf0
nop
movdqa xmm1, xmmword [0x7ff78744dcf0]
movdqu xmmword [rsp + 0x30], xmm1
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd ecx, xmm1
xor al, cl
mov byte [rsp + 0x31], al
xor byte [rsp + 0x32], cl
xor byte [rsp + 0x33], cl
xor byte [rsp + 0x34], cl
xor byte [rsp + 0x35], cl
xor byte [rsp + 0x36], cl
xor byte [rsp + 0x37], cl
xor byte [rsp + 0x38], cl
xor byte [rsp + 0x39], cl
xor byte [rsp + 0x3a], cl
xor byte [rsp + 0x3b], cl
xor byte [rsp + 0x3c], cl
xor byte [rsp + 0x3d], cl
xor byte [rsp + 0x3e], cl
xor byte [rsp + 0x3f], cl
mov byte [rsp + 0x40], 0
xorps xmm0, xmm0
movups xmmword [rbp + 0x210], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x220], xmm1
lea rax, [rsp + 0x31]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], 0
jne 0x7ff7871366f3
lea rdx, [rsp + 0x31]
lea rcx, [rbp + 0x210]
call fcn.7ff78711dbf0
nop
mov byte [rsp + 0x60], 0x50
mov al, 0x1e
mov cl, 0x35
mov dl, 0x3d
movzx r8d, cl
mov r9b, 0x23
mov r10b, 0x39
movzx r11d, r9b
xor ebx, ebx
xor al, 0x50
mov byte [rsp + 0x61], al
xor cl, 0x50
mov byte [rsp + 0x62], cl
xor dl, 0x50
mov byte [rsp + 0x63], dl
xor r8b, 0x50
mov byte [rsp + 0x64], r8b
xor r9b, 0x50
mov byte [rsp + 0x65], r9b
xor r10b, 0x50
mov byte [rsp + 0x66], r10b
xor r11b, 0x50
mov byte [rsp + 0x67], r11b
mov byte [rsp + 0x68], bl
xorps xmm0, xmm0
movups xmmword [rbp + 0x230], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x240], xmm1
lea rax, [rsp + 0x61]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], bl
jne 0x7ff787136787
lea rdx, [rsp + 0x61]
lea rcx, [rbp + 0x230]
call fcn.7ff78711dbf0
nop
movdqa xmm1, xmmword [0x7ff78744dbf0]
movdqu xmmword [rsp + 0x30], xmm1
mov dl, 0x7c
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd ecx, xmm1
xor al, cl
mov byte [rsp + 0x31], al
xor byte [rsp + 0x32], cl
xor byte [rsp + 0x33], cl
xor byte [rsp + 0x34], cl
xor byte [rsp + 0x35], cl
xor byte [rsp + 0x36], cl
xor byte [rsp + 0x37], cl
xor byte [rsp + 0x38], cl
xor byte [rsp + 0x39], cl
xor byte [rsp + 0x3a], cl
xor byte [rsp + 0x3b], cl
xor byte [rsp + 0x3c], cl
xor byte [rsp + 0x3d], cl
xor byte [rsp + 0x3e], cl
xor byte [rsp + 0x3f], cl
xor dl, cl
mov byte [rsp + 0x40], dl
mov byte [rsp + 0x41], 0
xorps xmm0, xmm0
movups xmmword [rbp + 0x250], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x260], xmm1
lea rax, [rsp + 0x31]
mov r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x7ff787136830
lea rdx, [rsp + 0x31]
lea rcx, [rbp + 0x250]
call fcn.7ff78711dbf0
nop
movdqa xmm1, xmmword [0x7ff78744dc90]
movdqu xmmword [rsp + 0x30], xmm1
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd ecx, xmm1
xor al, cl
mov byte [rsp + 0x31], al
xor byte [rsp + 0x32], cl
xor byte [rsp + 0x33], cl
xor byte [rsp + 0x34], cl
xor byte [rsp + 0x35], cl
xor byte [rsp + 0x36], cl
xor byte [rsp + 0x37], cl
xor byte [rsp + 0x38], cl
xor byte [rsp + 0x39], cl
xor byte [rsp + 0x3a], cl
xor byte [rsp + 0x3b], cl
xor byte [rsp + 0x3c], cl
xor byte [rsp + 0x3d], cl
xor byte [rsp + 0x3e], cl
xor byte [rsp + 0x3f], cl
mov byte [rsp + 0x40], 0
xorps xmm0, xmm0
movups xmmword [rbp + 0x270], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x280], xmm1
lea rax, [rsp + 0x31]
mov r8, 0xffffffffffffffff
nop
inc r8
cmp byte [rax + r8], 0
jne 0x7ff7871368d0
lea rdx, [rsp + 0x31]
lea rcx, [rbp + 0x270]
call fcn.7ff78711dbf0
nop
mov byte [rbp + 0x4c0], 0x37
mov al, 0x71
mov cl, 0x52
mov dl, 0x5b
mov r8b, 0x5e
mov r9b, 0x4f
xor r10d, r10d
xor al, 0x37
mov byte [rbp + 0x4c1], al
xor cl, 0x37
mov byte [rbp + 0x4c2], cl
xor dl, 0x37
mov byte [rbp + 0x4c3], dl
xor r8b, 0x37
mov byte [rbp + 0x4c4], r8b
xor r9b, 0x37
mov byte [rbp + 0x4c5], r9b
mov byte [rbp + 0x4c6], r10b
xorps xmm0, xmm0
movups xmmword [rbp + 0x290], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x2a0], xmm1
lea rax, [rbp + 0x4c1]
mov r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp byte [rax + r8], r10b
jne 0x7ff787136960
lea rdx, [rbp + 0x4c1]
lea rcx, [rbp + 0x290]
call fcn.7ff78711dbf0
nop
mov byte [rsp + 0x50], 0x43
xor al, al
mov cl, 0x3a
mov dl, 0x21
mov r8b, 0x26
mov r9b, 0x31
mov r10b, 0x63
mov r11b, 0xb
mov bl, 0x36
mov dil, 0x2d
mov sil, 0x37
movzx r14d, r8b
movzx r15d, r9b
xor r12d, r12d
xor al, 0x43
mov byte [rsp + 0x51], al
xor cl, 0x43
mov byte [rsp + 0x52], cl
xor dl, 0x43
mov byte [rsp + 0x53], dl
xor r8b, 0x43
mov byte [rsp + 0x54], r8b
xor r9b, 0x43
mov byte [rsp + 0x55], r9b
xor r10b, 0x43
mov byte [rsp + 0x56], r10b
xor r11b, 0x43
mov byte [rsp + 0x57], r11b
xor bl, 0x43
mov byte [rsp + 0x58], bl
xor dil, 0x43
mov byte [rsp + 0x59], dil
xor sil, 0x43
mov byte [rsp + 0x5a], sil
xor r14b, 0x43
mov byte [rsp + 0x5b], r14b
xor r15b, 0x43
mov byte [rsp + 0x5c], r15b
mov byte [rsp + 0x5d], r12b
xorps xmm0, xmm0
movups xmmword [rbp + 0x2b0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x2c0], xmm1
lea rax, [rsp + 0x51]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], r12b
jne 0x7ff787136a30
lea rdx, [rsp + 0x51]
lea rcx, [rbp + 0x2b0]
call fcn.7ff78711dbf0
nop
movdqa xmm1, xmmword [0x7ff78744d7b0]
movdqu xmmword [rsp + 0x30], xmm1
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd ecx, xmm1
xor al, cl
mov byte [rsp + 0x31], al
xor byte [rsp + 0x32], cl
xor byte [rsp + 0x33], cl
xor byte [rsp + 0x34], cl
xor byte [rsp + 0x35], cl
xor byte [rsp + 0x36], cl
xor byte [rsp + 0x37], cl
xor byte [rsp + 0x38], cl
xor byte [rsp + 0x39], cl
xor byte [rsp + 0x3a], cl
xor byte [rsp + 0x3b], cl
xor byte [rsp + 0x3c], cl
xor byte [rsp + 0x3d], cl
xor byte [rsp + 0x3e], cl
xor byte [rsp + 0x3f], cl
mov byte [rsp + 0x40], 0
xorps xmm0, xmm0
movups xmmword [rbp + 0x2d0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x2e0], xmm1
lea rax, [rsp + 0x31]
mov r8, 0xffffffffffffffff
nop
inc r8
cmp byte [rax + r8], 0
jne 0x7ff787136ad0
lea rdx, [rsp + 0x31]
lea rcx, [rbp + 0x2d0]
call fcn.7ff78711dbf0
nop
lea rax, [rbp + 0x10]
mov qword [rsp + 0x30], rax
lea rax, [rbp + 0x2f0]
mov qword [rsp + 0x38], rax
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x30]
call fcn.7ff78713a880
nop
lea r9, [fcn.7ff78711d4d0]
mov edx, 0x20
lea r8d, [rdx - 9]
lea rcx, [rbp + 0x10]
call fcn.7ff78718e960
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x70], xmm0
xor edi, edi
mov qword [rbp - 0x80], rdi
xor ebx, ebx
mov rax, qword [rbp - 0x28]
mov rdx, qword [rbp - 0x30]
sub rax, rdx
sar rax, 5
test rax, rax
je 0x7ff787136bb4
xor ecx, ecx
mov rsi, qword [rsp + 0x78]
nop word [rax + rax]
shl rcx, 5
add rcx, rdx
cmp rsi, rdi
je 0x7ff787136b82
mov rdx, rcx
mov rcx, rsi
call fcn.7ff78711ead0
add rsi, 0x20
mov qword [rsp + 0x78], rsi
jmp 0x7ff787136b9b
mov r8, rcx
mov rdx, rsi
lea rcx, [rsp + 0x70]
call fcn.7ff78711f1d0
mov rdi, qword [rbp - 0x80]
mov rsi, qword [rsp + 0x78]
inc ebx
mov rax, qword [rbp - 0x28]
mov rdx, qword [rbp - 0x30]
sub rax, rdx
sar rax, 5
movsxd rcx, ebx
cmp rcx, rax
jb 0x7ff787136b60
xor ecx, ecx
call qword [sym.imp.user32.dll_GetTopWindow]
mov rdi, rax
mov qword [rsp + 0x60], rax
test rax, rax
je 0x7ff787136fc6
mov rbx, qword [rsp + 0x78]
mov dword [rbp + 0x4c8], 0
lea rdx, [rbp + 0x4c8]
mov rcx, rdi
call qword [sym.imp.user32.dll_GetWindowThreadProcessId]
call qword [sym.imp.kernel32.dll_GetCurrentProcessId]
cmp dword [rbp + 0x4c8], eax
je 0x7ff787136fa7
mov r8d, 0x80
lea rdx, [rbp + 0x2f0]
mov rcx, rdi
call qword [sym.imp.user32.dll_GetWindowTextA]
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
mov qword [rbp - 0x40], 0
mov qword [rbp - 0x38], 0
lea rax, [rbp + 0x2f0]
mov r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x7ff787136c40
lea rdx, [rbp + 0x2f0]
lea rcx, [rbp - 0x50]
call fcn.7ff78711dbf0
nop
mov rax, qword [rsp + 0x70]
mov qword [rbp + 0x4d8], rax
cmp rax, rbx
je 0x7ff787136f9e
mov rdx, rax
lea rcx, [rbp - 0x18]
call fcn.7ff78711ead0
nop
lea r9, [rbp - 0x18]
cmp qword [rbp], 0xf
cmova r9, qword [rbp - 0x18]
lea rcx, [rbp - 0x50]
cmp qword [rbp - 0x38], 0xf
seta byte [rbp + 0x4c0]
cmova rcx, qword [rbp - 0x50]
mov rax, qword [rbp - 8]
mov qword [rsp + 0x20], rax
mov rdx, qword [rbp - 0x40]
call fcn.7ff78712feb0
cmp rax, 0xffffffffffffffff
je 0x7ff787136f6e
mov byte [rsp + 0x30], 0x30
mov al, 0x73
mov cl, 0x49
mov dl, 0x52
mov r8b, 0x55
mov r9b, 0x42
mov r10b, 0x10
mov r11b, 0x78
mov bl, 0x45
mov dil, 0x5e
mov sil, 0x44
movzx r14d, r8b
movzx r15d, r9b
xor r12d, r12d
xor al, 0x30
mov byte [rsp + 0x31], al
xor cl, 0x30
mov byte [rsp + 0x32], cl
xor dl, 0x30
mov byte [rsp + 0x33], dl
xor r8b, 0x30
mov byte [rsp + 0x34], r8b
xor r9b, 0x30
mov byte [rsp + 0x35], r9b
xor r10b, 0x30
mov byte [rsp + 0x36], r10b
xor r11b, 0x30
mov byte [rsp + 0x37], r11b
xor bl, 0x30
mov byte [rsp + 0x38], bl
xor dil, 0x30
mov byte [rsp + 0x39], dil
xor sil, 0x30
mov byte [rsp + 0x3a], sil
xor r14b, 0x30
mov byte [rsp + 0x3b], r14b
xor r15b, 0x30
mov byte [rsp + 0x3c], r15b
mov byte [rsp + 0x3d], r12b
lea rcx, [rsp + 0x31]
mov rax, 0xffffffffffffffff
mov r12, qword [rbp - 0x50]
nop
inc rax
cmp byte [rcx + rax], 0
jne 0x7ff787136d60
lea rcx, [rbp - 0x50]
movzx edi, byte [rbp + 0x4c0]
test dil, dil
cmovne rcx, r12
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x31]
mov rbx, qword [rbp - 0x40]
mov rdx, rbx
call fcn.7ff78712feb0
cmp rax, 0xffffffffffffffff
je 0x7ff787137035
mov byte [rbp + 0x4d0], 0x1a
mov al, 0x49
mov cl, 0x6e
mov dl, 0x7f
mov r8b, 0x7b
mov r9b, 0x77
xor r10d, r10d
xor al, 0x1a
mov byte [rbp + 0x4d1], al
xor cl, 0x1a
mov byte [rbp + 0x4d2], cl
xor dl, 0x1a
mov byte [rbp + 0x4d3], dl
xor r8b, 0x1a
mov byte [rbp + 0x4d4], r8b
xor r9b, 0x1a
mov byte [rbp + 0x4d5], r9b
mov byte [rbp + 0x4d6], r10b
lea rcx, [rbp + 0x4d1]
mov rax, 0xffffffffffffffff
inc rax
cmp byte [rcx + rax], r10b
jne 0x7ff787136df6
lea rcx, [rbp - 0x50]
test dil, dil
cmovne rcx, r12
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x4d1]
mov rdx, rbx
call fcn.7ff78712feb0
cmp rax, 0xffffffffffffffff
jne 0x7ff787136f6e
mov edi, dword [rbp + 0x4c8]
mov dword [rbp + 0x10], 0x130
xor edx, edx
lea ecx, [rax + 3]
call qword [sym.imp.kernel32.dll_CreateToolhelp32Snapshot]
mov rbx, rax
cmp rax, 0xffffffffffffffff
je 0x7ff787136e83
lea rdx, [rbp + 0x10]
mov rcx, rax
call qword [sym.imp.kernel32.dll_Process32First]
test eax, eax
je 0x7ff787136e7a
nop word [rax + rax]
mov rcx, rbx
cmp edi, dword [rbp + 0x18]
je 0x7ff787136fee
lea rdx, [rbp + 0x10]
call qword [sym.imp.kernel32.dll_Process32Next]
test eax, eax
jne 0x7ff787136e60
mov rcx, rbx
call qword [sym.imp.kernel32.dll_CloseHandle]
xorps xmm0, xmm0
movups xmmword [rbp - 0x70], xmm0
xor r14d, r14d
mov r15d, 0xf
mov byte [rbp - 0x70], r14b
mov qword [rbp - 0x58], r15
mov qword [rbp - 0x60], r14
or r13d, 1
mov byte [rsp + 0x50], 0x21
mov al, 0x42
mov cl, 0x4d
mov dl, 0x48
mov r8b, 0x44
mov r9b, 0x4f
mov r10b, 0x55
mov r11b, 0xf
movzx ebx, r8b
mov dil, 0x59
movzx esi, r8b
xor r12d, r12d
xor al, 0x21
mov byte [rsp + 0x51], al
xor cl, 0x21
mov byte [rsp + 0x52], cl
xor dl, 0x21
mov byte [rsp + 0x53], dl
xor r8b, 0x21
mov byte [rsp + 0x54], r8b
xor r9b, 0x21
mov byte [rsp + 0x55], r9b
xor r10b, 0x21
mov byte [rsp + 0x56], r10b
xor r11b, 0x21
mov byte [rsp + 0x57], r11b
xor bl, 0x21
mov byte [rsp + 0x58], bl
xor dil, 0x21
mov byte [rsp + 0x59], dil
xor sil, 0x21
mov byte [rsp + 0x5a], sil
mov byte [rsp + 0x5b], r12b
lea rcx, [rsp + 0x51]
mov rax, 0xffffffffffffffff
nop word [rax + rax]
inc rax
cmp byte [rcx + rax], r12b
jne 0x7ff787136f30
lea rcx, [rbp - 0x70]
cmp r15, 0xf
cmova rcx, qword [rbp - 0x70]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x51]
mov rdx, r14
call fcn.7ff78712feb0
mov rbx, rax
lea rcx, [rbp - 0x70]
call fcn.7ff78711d510
cmp rbx, 0xffffffffffffffff
jne 0x7ff787137035
lea rcx, [rbp - 0x18]
call fcn.7ff78711d510
mov rax, qword [rbp + 0x4d8]
add rax, 0x20
mov qword [rbp + 0x4d8], rax
cmp rax, qword [rsp + 0x78]
jne 0x7ff787136c70
mov rbx, qword [rsp + 0x78]
mov rdi, qword [rsp + 0x60]
lea rcx, [rbp - 0x50]
call fcn.7ff78711d510
mov edx, 2
mov rcx, rdi
call qword [sym.imp.user32.dll_GetWindow]
mov rdi, rax
mov qword [rsp + 0x60], rax
test rax, rax
jne 0x7ff787136bd2
lea rcx, [rsp + 0x70]
call fcn.7ff78711daf0
nop
lea rcx, [rbp - 0x30]
call fcn.7ff78711daf0
add rsp, 0x578
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
call qword [sym.imp.kernel32.dll_CloseHandle]
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x70], xmm0
xor eax, eax
mov qword [rbp - 0x60], rax
mov qword [rbp - 0x58], rax
lea rax, [rbp + 0x3c]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], 0
jne 0x7ff787137011
lea rdx, [rbp + 0x3c]
lea rcx, [rbp - 0x70]
call fcn.7ff78711dbf0
mov r15, qword [rbp - 0x58]
mov r14, qword [rbp - 0x60]
jmp 0x7ff787136e9f
lea rcx, [rbp - 0x50]
call fcn.7ff78711da10
mov rdi, rax
lea rdx, [rbp - 0x70]
call fcn.7ff787133df0
lea rdx, [0x7ff787444510]
mov rcx, rax
call fcn.7ff787125bb0
xor esi, esi
test al, al
jne 0x7ff7871370c5
mov byte [rsp + 0x60], 0x16
mov cl, 0x55
mov dl, 0x7a
mov al, 0x79
mov r8b, 0x65
mov r9b, 0x73
mov r10b, 0x36
mov r11b, 0x33
movzx ebx, r8b
xor cl, 0x16
mov byte [rsp + 0x61], cl
xor dl, 0x16
mov byte [rsp + 0x62], dl
xor al, 0x16
mov byte [rsp + 0x63], al
xor r8b, 0x16
mov byte [rsp + 0x64], r8b
xor r9b, 0x16
mov byte [rsp + 0x65], r9b
xor r10b, 0x16
mov byte [rsp + 0x66], r10b
xor r11b, 0x16
mov byte [rsp + 0x67], r11b
xor bl, 0x16
mov byte [rsp + 0x68], bl
mov byte [rsp + 0x69], sil
lea rdx, [rsp + 0x61]
jmp 0x7ff787137128
mov byte [rsp + 0x50], 0x6f
mov al, 0x29
mov cl, 0xa
mov dl, 0xc
mov r8b, 7
movzx r9d, cl
mov r10b, 0x4f
mov r11b, 0x4a
mov bl, 0x1c
xor al, 0x6f
mov byte [rsp + 0x51], al
xor cl, 0x6f
mov byte [rsp + 0x52], cl
xor dl, 0x6f
mov byte [rsp + 0x53], dl
xor r8b, 0x6f
mov byte [rsp + 0x54], r8b
xor r9b, 0x6f
mov byte [rsp + 0x55], r9b
xor r10b, 0x6f
mov byte [rsp + 0x56], r10b
xor r11b, 0x6f
mov byte [rsp + 0x57], r11b
xor bl, 0x6f
mov byte [rsp + 0x58], bl
mov byte [rsp + 0x59], sil
lea rdx, [rsp + 0x51]
mov r8, rdi
lea rcx, [rbp + 0x370]
call fcn.7ff78711d570
lea rcx, [rbp - 0x70]
call fcn.7ff78711d4d0
call fcn.7ff78711d450
lea rdx, [rbp + 0x370]
mov rcx, rax
call fcn.7ff7871485c0
int3