Function at 0x140162b40
Capabilities:
Contain obfuscated stackstrings
Create process on windows
Enumerate processes

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x1b8]
sub rsp, 0x290
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
movaps xmmword [rax - 0x68], xmm9
movaps xmmword [rax - 0x78], xmm10
movaps xmmword [rax - 0x88], xmm11
movaps xmmword [rax - 0x98], xmm12
movaps xmmword [rax - 0xa8], xmm13
movaps xmmword [rax - 0xb8], xmm14
movaps xmmword [rax - 0xc8], xmm15
mov rax, qword [0x14041d0c0]
xor rax, rsp
mov qword [rbp + 0xe0], rax
lea rcx, [0x1404b98c7]
call fcn.1402b13b0
mov rdi, qword [0x140491ae8]
lea rdx, [rsp + 0x68]
mov rax, qword [0x140492a70]
xor r12d, r12d
mov rcx, qword [0x1404919d8]
movss xmm1, dword [rdi + 0x38fc]
movss xmm0, dword [rdi + 0x3930]
movaps xmm6, xmm1
mulss xmm6, dword [0x1403e87d8]
addss xmm0, xmm0
addss xmm1, xmm1
addss xmm6, dword [rax + 0x14]
or dword [rdi + 0x49e8], 1
mov qword [rdi + 0x49f8], r12
addss xmm1, dword [rdi + 0x3d60]
mov qword [rdi + 0x4a00], r12
addss xmm6, xmm0
mov dword [rdi + 0x49ec], 1
movss dword [rsp + 0x58], xmm1
movss dword [rsp + 0x50], xmm6
call qword [sym.imp.USER32.dll_GetClientRect]
mov eax, dword [rsp + 0x74]
lea rdx, [rsp + 0x60]
sub eax, dword [rsp + 0x6c]
mov ecx, 2
xorps xmm8, xmm8
mov qword [rsp + 0x60], r12
movd xmm1, eax
mov eax, dword [rsp + 0x70]
sub eax, dword [rsp + 0x68]
cvtdq2ps xmm1, xmm1
movd xmm0, eax
mov rax, qword [0x140491ae8]
cvtdq2ps xmm0, xmm0
or dword [rax + 0x49e8], 2
mov dword [rax + 0x49f0], 1
movss dword [rax + 0x4a0c], xmm1
movss dword [rax + 0x4a08], xmm0
call fcn.140189d80
xorps xmm1, xmm1
mov ecx, 4
call fcn.140189cf0
xor edx, edx
mov dword [rsp + 0x60], 0x4e454d3d
mov r8d, 0xab
mov word [rsp + 0x64], 0x55
lea rcx, [rsp + 0x61]
call fcn.140193dc0
mov rax, qword [0x140491ae8]
mov ecx, 2
movss xmm1, dword [rax + 0x10]
movss xmm0, dword [rax + 0x14]
subss xmm0, dword [0x140492a5c]
subss xmm1, dword [0x140492a58]
or dword [rax + 0x49e8], 1
mov qword [rax + 0x4a00], r12
mov dword [rax + 0x49ec], 4
mulss xmm0, dword [0x1403e86a0]
mulss xmm1, dword [0x1403e86a0]
movss dword [rax + 0x49fc], xmm0
movss dword [rax + 0x49f8], xmm1
call fcn.140189e30
mov rcx, qword [0x140491ae8]
mov rax, qword [rcx + 0x4038]
movss xmm9, dword [rax + 0x28]
movss xmm10, dword [rax + 0x2c]
movss xmm12, dword [rax + 0x30]
movss xmm14, dword [rax + 0x34]
mov byte [rax + 0xc0], 1
movups xmm0, xmmword [rcx + 0x3a30]
mov rax, qword [rcx + 0x4038]
movss xmm7, dword [rdi + 0x3900]
movss xmm13, dword [rdi + 0x3904]
movups xmmword [rbp - 0x78], xmm0
mov rsi, qword [rax + 0x2a8]
shufps xmm0, xmm0, 0xff
mulss xmm0, dword [rcx + 0x38f0]
movss dword [rsp + 0x60], xmm7
movss dword [rbp - 0x6c], xmm0
lea rcx, [rbp - 0x78]
call fcn.140189590
mov rcx, qword [0x140491ae8]
mov r15d, eax
movups xmm0, xmmword [rcx + 0x3a00]
movups xmmword [rbp - 0x78], xmm0
shufps xmm0, xmm0, 0xff
mulss xmm0, dword [rcx + 0x38f0]
lea rcx, [rbp - 0x78]
movss dword [rbp - 0x6c], xmm0
call fcn.140189590
mov rcx, qword [0x140491ae8]
lea r8, [rbp - 0x78]
movaps xmm0, xmm12
mov dword [rsp + 0x28], Ordinal_50
movaps xmm1, xmm10
movss dword [rsp + 0x78], xmm9
addss xmm1, xmm6
movss dword [rsp + 0x7c], xmm10
addss xmm0, xmm9
movss dword [rsp + 0x20], xmm7
mov r9d, eax
lea rdx, [rsp + 0x78]
mov rax, qword [rcx + 0x4038]
unpcklps xmm0, xmm1
mov rcx, qword [rax + 0x2a8]
movsd qword [rbp - 0x78], xmm0
call fcn.1401a7050
mov rax, qword [0x140491ae8]
lea rcx, [rbp - 0x78]
movups xmm0, xmmword [rax + 0x39e0]
movups xmmword [rbp - 0x78], xmm0
shufps xmm0, xmm0, 0xff
mulss xmm0, dword [rax + 0x38f0]
movss dword [rbp - 0x6c], xmm0
call fcn.140189590
movss xmm1, dword [rdi + 0x38fc]
mov edx, eax
movss xmm0, dword [rdi + 0x38f8]
addss xmm1, xmm1
mov rcx, qword [0x140492a68]
addss xmm0, xmm0
lea r13, [0x1403e3284]
movss xmm2, dword [rcx + 0x14]
addss xmm1, xmm10
addss xmm0, xmm9
movss dword [rsp + 0x7c], xmm1
movss dword [rsp + 0x78], xmm0
test eax, 0xff000000
je 0x140162f0a
test rcx, rcx
jne 0x140162eb7
mov rax, qword [rsi + 0x38]
mov rcx, qword [rax + 8]
ucomiss xmm2, xmm8
jp 0x140162ec8
jne 0x140162ec8
mov rax, qword [rsi + 0x38]
movss xmm2, dword [rax + 0x10]
movups xmm0, xmmword [rsi + 0x88]
mov byte [rsp + 0x48], r12b
lea rax, [0x1403e3287]
movss dword [rsp + 0x40], xmm8
lea r9, [rsp + 0x78]
mov qword [rsp + 0x38], rax
lea rax, [rbp - 0x78]
mov qword [rsp + 0x30], r13
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], edx
mov rdx, rsi
movups xmmword [rbp - 0x78], xmm0
call fcn.1401acf60
mov rax, qword [0x140491ae8]
lea rcx, [rbp - 0x78]
movups xmm0, xmmword [rax + 0x3b10]
movups xmmword [rbp - 0x78], xmm0
shufps xmm0, xmm0, 0xff
mulss xmm0, dword [rax + 0x38f0]
movss dword [rbp - 0x6c], xmm0
call fcn.140189590
mov rcx, qword [0x140491ae8]
lea rdx, [rbp - 0x78]
movss xmm15, dword [0x1403e8918]
mov r14d, eax
movss xmm3, dword [0x1403e88e8]
mov qword [rsp + 0x38], r12
movss xmm6, dword [rcx + 0x3d60]
mov rcx, qword [rcx + 0x3d58]
movaps xmm2, xmm6
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x28], r13
movss dword [rsp + 0x20], xmm15
call fcn.1401acb20
movss xmm0, dword [rbp - 0x78]
mov rcx, qword [0x140492a68]
movss xmm3, dword [rdi + 0x38fc]
movss xmm2, dword [rdi + 0x38f8]
addss xmm3, xmm3
addss xmm2, xmm2
movss xmm4, dword [rcx + 0x14]
addss xmm0, dword [0x1403e86ec]
addss xmm3, xmm10
addss xmm2, xmm9
cvttss2si eax, xmm0
movaps xmm0, xmm4
addss xmm3, xmm8
divss xmm0, xmm6
movd xmm1, eax
movss dword [rsp + 0x7c], xmm3
cvtdq2ps xmm1, xmm1
mulss xmm1, xmm0
addss xmm1, xmm2
movss dword [rsp + 0x78], xmm1
test r14d, 0xff000000
je 0x14016305c
test rcx, rcx
jne 0x140162ffe
mov rax, qword [rsi + 0x38]
mov rcx, qword [rax + 8]
ucomiss xmm4, xmm8
jp 0x14016300f
jne 0x14016300f
mov rax, qword [rsi + 0x38]
movss xmm4, dword [rax + 0x10]
movups xmm0, xmmword [rsi + 0x88]
mov byte [rsp + 0x48], r12b
lea rax, [0x1403e328b]
movss dword [rsp + 0x40], xmm8
lea r9, [rsp + 0x78]
mov qword [rsp + 0x38], rax
movaps xmm2, xmm4
lea rax, [0x1403e3288]
mov rdx, rsi
mov qword [rsp + 0x30], rax
lea rax, [rbp - 0x78]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], r14d
movups xmmword [rbp - 0x78], xmm0
call fcn.1401acf60
mov rax, qword [0x140491ae8]
lea rcx, [rbp - 0x78]
movups xmm0, xmmword [rax + 0x3a00]
movups xmmword [rbp - 0x78], xmm0
shufps xmm0, xmm0, 0xff
mulss xmm0, dword [rax + 0x38f0]
movss dword [rbp - 0x6c], xmm0
call fcn.140189590
movaps xmm11, xmm14
mov dword [rsp + 0x28], 0x100
subss xmm11, dword [rsp + 0x58]
movaps xmm0, xmm12
lea r8, [rbp - 0x78]
movaps xmm6, xmm9
addss xmm0, xmm9
mov r9d, eax
addss xmm6, xmm8
mov rax, qword [0x140491ae8]
lea rdx, [rsp + 0x78]
movaps xmm7, xmm11
movaps xmm2, xmm10
addss xmm2, dword [rsp + 0x50]
addss xmm7, xmm10
mov rcx, qword [rax + 0x4038]
movaps xmm1, xmm6
unpcklps xmm1, xmm2
mov rcx, qword [rcx + 0x2a8]
unpcklps xmm0, xmm7
movsd qword [rbp - 0x78], xmm0
movss xmm0, dword [rsp + 0x60]
movss dword [rsp + 0x20], xmm0
movsd qword [rsp + 0x78], xmm1
call fcn.1401a7050
mov rax, qword [0x140491ae8]
lea rcx, [rbp - 0x78]
movups xmm0, xmmword [rax + 0x3a10]
movups xmmword [rbp - 0x78], xmm0
shufps xmm0, xmm0, 0xff
mulss xmm0, dword [rax + 0x38f0]
movss dword [rbp - 0x6c], xmm0
call fcn.140189590
movaps xmm1, xmm14
mov dword [rsp + 0x28], 0xc0
addss xmm1, xmm10
movaps xmm0, xmm12
mov r9d, eax
addss xmm0, xmm9
mov rax, qword [0x140491ae8]
lea r8, [rbp - 0x78]
lea rdx, [rsp + 0x78]
mov rcx, qword [rax + 0x4038]
unpcklps xmm0, xmm1
movaps xmm1, xmm6
movss xmm6, dword [rsp + 0x60]
unpcklps xmm1, xmm7
mov rcx, qword [rcx + 0x2a8]
movsd qword [rsp + 0x78], xmm1
movss dword [rsp + 0x20], xmm6
movsd qword [rbp - 0x78], xmm0
call fcn.1401a7050
comiss xmm13, xmm8
jbe 0x1401631f4
movaps xmm0, xmm11
movss dword [rsp + 0x20], xmm13
subss xmm0, xmm13
movaps xmm1, xmm10
mov r9d, r15d
lea r8, [rsp + 0x78]
lea rdx, [rsp + 0x60]
mov rcx, rsi
addss xmm1, xmm0
movaps xmm0, xmm12
subss xmm0, xmm13
movss dword [rsp + 0x7c], xmm1
addss xmm0, xmm9
movss dword [rsp + 0x64], xmm1
movss dword [rsp + 0x78], xmm0
movaps xmm0, xmm9
addss xmm0, xmm13
movss dword [rsp + 0x60], xmm0
call fcn.1401a6e30
mov rax, qword [0x140491ae8]
lea rbx, [0x140492048]
cmp qword [0x140492060], 0xf
lea rcx, [rbp - 0x78]
mov r14, rbx
cmova r14, qword [0x140492048]
movups xmm0, xmmword [rax + 0x3b10]
movups xmmword [rbp - 0x78], xmm0
shufps xmm0, xmm0, 0xff
mulss xmm0, dword [rax + 0x38f0]
movss dword [rbp - 0x6c], xmm0
call fcn.140189590
cmp qword [0x140492060], 0xf
mov r15d, eax
addss xmm11, dword [rdi + 0x38fc]
cmova rbx, qword [0x140492048]
mov rcx, qword [0x140491ae8]
test rbx, rbx
jne 0x140163267
xorps xmm2, xmm2
jmp 0x1401632b5
movss xmm2, dword [rcx + 0x3d60]
lea rdx, [rbp - 0x78]
movss xmm3, dword [0x1403e88e8]
mov rcx, qword [rcx + 0x3d58]
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x28], rbx
movss dword [rsp + 0x20], xmm15
call fcn.1401acb20
movss xmm0, dword [rbp - 0x78]
addss xmm0, dword [0x1403e86ec]
cvttss2si eax, xmm0
movd xmm2, eax
cvtdq2ps xmm2, xmm2
movaps xmm0, xmm12
lea rdx, [rsp + 0x78]
subss xmm0, xmm2
movaps xmm1, xmm10
addss xmm1, xmm11
mov r9, r14
mov r8d, r15d
mov rcx, rsi
subss xmm0, dword [rdi + 0x38f8]
movss dword [rsp + 0x7c], xmm1
addss xmm0, xmm9
movss dword [rsp + 0x78], xmm0
call fcn.1401a78b0
comiss xmm13, xmm8
jbe 0x140163320
addss xmm12, xmm9
movaps xmm1, xmm9
addss xmm14, xmm10
unpcklps xmm1, xmm10
movaps xmm2, xmm6
movq rcx, xmm1
unpcklps xmm12, xmm14
movq rdx, xmm12
call fcn.140181f70
mov rcx, qword [0x140491ae8]
lea rdx, [rsp + 0x51]
mov dword [rsp + 0x78], r12d
mov rax, qword [rcx + 0x4038]
mov byte [rax + 0xc0], 1
mov rax, qword [rcx + 0x4038]
movss xmm0, dword [rax + 0x2c]
subss xmm0, dword [rax + 0x90]
mov byte [rax + 0x151], 1
addss xmm0, dword [rsp + 0x50]
movss dword [rax + 0x114], xmm0
mov rax, qword [rcx + 0x4038]
movss xmm0, dword [rax + 0x34]
subss xmm0, dword [rsp + 0x50]
mov dword [rsp + 0x50], 0x69614d1f
mov word [rsp + 0x54], WSAStartup
mov byte [rax + 0xc0], 1
mov rcx, qword [rcx + 0x4038]
movss dword [rsp + 0x7c], xmm0
call fcn.14018cca0
xor r9d, r9d
mov dword [rsp + 0x20], 0x80
lea r8, [rsp + 0x78]
mov edx, eax
lea rcx, [rsp + 0x51]
call fcn.140190a30
xorps xmm1, xmm1
mov ecx, 7
call fcn.140189cf0
mov rcx, qword [0x140491ae8]
lea rdx, [rbp - 0x77]
mov dword [rbp - 0x78], 0x6e6f4333
mov dword [rbp - 0x74], 0x746e6574
mov byte [rbp - 0x70], r12b
mov rax, qword [rcx + 0x4038]
mov qword [rsp + 0x78], r12
mov byte [rax + 0xc0], 1
mov rcx, qword [rcx + 0x4038]
call fcn.14018cca0
mov r9d, 1
mov dword [rsp + 0x20], 0x80
lea r8, [rsp + 0x78]
mov edx, eax
lea rcx, [rbp - 0x77]
call fcn.140190a30
mov ecx, 1
call fcn.140189e30
cmp byte [0x140492af8], r12b
mov rcx, qword [0x140491ae8]
movss xmm0, dword [rdi + 0x38f8]
movss xmm9, dword [0x1403e86f4]
addss xmm0, xmm0
mov rax, qword [rcx + 0x4038]
movss xmm6, dword [rax + 0x30]
subss xmm6, dword [rdi + 0x393c]
movss xmm7, dword [rax + 0x34]
subss xmm7, dword [rdi + 0x3940]
subss xmm6, xmm0
movss xmm0, dword [rdi + 0x38fc]
addss xmm0, xmm0
subss xmm7, xmm0
movsd xmm0, qword [rcx + 0x3f88]
cvtpd2ps xmm0, xmm0
subss xmm7, dword [0x1403e883c]
je 0x1401634dd
movaps xmm1, xmm0
subss xmm1, dword [0x140492af4]
comiss xmm8, xmm1
jbe 0x1401634b3
xorps xmm2, xmm2
jmp 0x1401634bb
movaps xmm2, xmm9
minss xmm2, xmm1
comiss xmm1, dword [0x1403e87ac]
movss dword [0x140492af0], xmm2
jbe 0x140163515
movss dword [0x140492af4], xmm0
mov byte [0x140492af8], r12b
jmp 0x140163515
subss xmm0, dword [0x140492af4]
movaps xmm2, xmm9
subss xmm2, xmm0
comiss xmm8, xmm2
jbe 0x1401634f8
xorps xmm1, xmm1
jmp 0x140163500
movaps xmm1, xmm9
minss xmm1, xmm2
comiss xmm0, xmm9
movss dword [0x140492af0], xmm1
jbe 0x140163515
mov byte [0x140492af9], 1
cmp byte [0x140492af9], r12b
jne 0x1401635fa
mov rax, qword [rcx + 0x4038]
subss xmm6, dword [0x1403e885c]
subss xmm7, dword [0x1403e885c]
mov byte [rax + 0xc0], 1
mov rax, qword [rcx + 0x4038]
xor ecx, ecx
mulss xmm6, dword [0x1403e86a0]
mulss xmm7, dword [0x1403e86a0]
movss xmm1, dword [rax + 0x2c]
subss xmm1, dword [rax + 0x90]
movss xmm0, dword [rax + 0x28]
subss xmm0, dword [rax + 0x8c]
addss xmm6, dword [0x1403e8814]
mov byte [rax + 0x151], 1
addss xmm1, xmm7
addss xmm0, xmm6
movss dword [rax + 0x114], xmm1
movss dword [rax + 0x110], xmm0
movss xmm1, dword [0x140492af0]
call fcn.140189cf0
mov rcx, qword [0x140492a70]
call fcn.140196690
lea r8, [rsp + 0x78]
mov dword [rsp + 0x78], 0x42480000
lea rcx, [rsp + 0x51]
mov dword [rsp + 0x7c], 0x42480000
mov dword [rsp + 0x50], 0x746e692c
mov word [rsp + 0x54], 0x6f72
mov byte [rsp + 0x56], r12b
call fcn.14017d1c0
call fcn.140196740
mov ecx, 1
call fcn.140189e30
jmp 0x140163936
call fcn.14019a4a0
mov rcx, qword [0x140491ae8]
lea rdx, [rsp + 0x51]
addss xmm6, dword [0x1403e8814]
mov dword [rsp + 0x50], 0x676f4c14
mov word [rsp + 0x54], 0x6e69
mov byte [rsp + 0x56], r12b
mov rax, qword [rcx + 0x4038]
movss dword [rsp + 0x78], xmm6
movss dword [rsp + 0x7c], xmm7
mov byte [rax + 0xc0], 1
mov rcx, qword [rcx + 0x4038]
call fcn.14018cca0
mov r9d, 1
mov dword [rsp + 0x20], 0x400
lea r8, [rsp + 0x78]
mov edx, eax
lea rcx, [rsp + 0x51]
call fcn.140190a30
call fcn.1401c0800
test al, al
je 0x140163698
lea rcx, [rsp + 0x51]
mov dword [rsp + 0x50], 0x676f4c2c
mov word [rsp + 0x54], 0x6e69
mov byte [rsp + 0x56], r12b
call fcn.1401b02a0
call fcn.1401c0ac0
movss xmm6, dword [0x1403e8900]
lea r15, [0x140492afc]
mov r8, r15
mov dword [rsp + 0x28], r12d
lea rdx, [rbp - 0x77]
movss dword [rsp + 0x20], xmm6
lea rcx, [rsp + 0x79]
mov dword [rbp - 0x78], 0x65735577
mov dword [rbp - 0x74], 0x6d616e72
mov word [rbp - 0x70], 0x65
mov dword [rsp + 0x78], 0x6573550e
mov dword [rsp + 0x7c], 0x6d616e72
mov word [rbp - 0x80], 0x65
call fcn.14017ff90
lea r14, [0x140492b1c]
mov dword [rsp + 0x28], 0x8000
mov r8, r14
movss dword [rsp + 0x20], xmm6
lea rdx, [rbp - 0x77]
mov dword [rbp - 0x78], 0x73615071
lea rcx, [rsp + 0x79]
mov dword [rbp - 0x74], 0x726f7773
mov word [rbp - 0x70], 0x64
mov dword [rsp + 0x78], 0x7361505b
mov dword [rsp + 0x7c], 0x726f7773
mov word [rbp - 0x80], 0x64
call fcn.14017ff90
mov rax, qword [0x140491ae8]
mov r8, qword [rax + 0x4038]
cmp byte [r8 + 0xc3], r12b
jne 0x14016377d
mov edx, dword [r8 + 0x1c4]
mov eax, edx
neg eax
sbb ecx, ecx
add ecx, 2
cmp qword [r8 + 0x1b8], r12
je 0x140163774
neg edx
sbb ecx, ecx
add ecx, 6
movaps xmm1, xmm9
call fcn.1401b25d0
lea rdx, [rsp + 0x78]
mov dword [rsp + 0x78], 0xbdcccccd
lea rcx, [rsp + 0x51]
mov dword [rsp + 0x7c], 0x41c80000
mov dword [rsp + 0x50], 0x616f4c30
mov word [rsp + 0x54], 0x64
call fcn.14017cb90
test al, al
je 0x1401638f2
movdqa xmm0, xmmword [0x1403e9d80]
xor edx, edx
mov ecx, 2
mov dword [rbp - 0x68], 0x78652e61
movdqu xmmword [rbp - 0x78], xmm0
mov word [rbp - 0x64], 0x65
mov esi, r12d
call qword [sym.imp.KERNEL32.DLL_CreateToolhelp32Snapshot]
lea rdx, [rbp - 0x50]
mov dword [rbp - 0x50], 0x130
mov rcx, rax
mov rbx, rax
call qword [sym.imp.KERNEL32.DLL_Process32First]
test eax, eax
je 0x140163828
nop dword [rax + rax]
lea rdx, [rbp - 0x77]
lea rcx, [rbp - 0x24]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__stricmp]
test eax, eax
je 0x140163825
lea rdx, [rbp - 0x50]
mov rcx, rbx
call qword [sym.imp.KERNEL32.DLL_Process32Next]
test eax, eax
jne 0x140163800
jmp 0x140163828
mov esi, dword [rbp - 0x48]
mov rcx, rbx
call qword [sym.imp.KERNEL32.DLL_CloseHandle]
test esi, esi
je 0x1401638a6
mov rbx, 0xffffffffffffffff
mov r8, rbx
nop
inc r8
cmp byte [r15 + r8], r12b
jne 0x140163840
mov rdx, r15
lea rcx, [0x140456010]
call fcn.14005c8b0
nop dword [rax + rax]
inc rbx
cmp byte [r14 + rbx], r12b
jne 0x140163860
mov r8, rbx
lea rcx, [0x140456050]
mov rdx, r14
call fcn.14005c8b0
xorps xmm0, xmm0
mov byte [0x1404919a7], 1
xorps xmm1, xmm1
movups xmmword [0x140492afc], xmm0
movups xmmword [0x140492b0c], xmm0
movups xmmword [0x140492b1c], xmm1
movups xmmword [0x140492b2c], xmm1
jmp 0x1401638f2
movdqa xmm0, xmmword [0x1403e9700]
lea r8, [rsp + 0x51]
mov r9d, reloc.WS2_32.dll_recv
mov dword [rsp + 0x50], 0x6f687058
lea rdx, [rbp - 0x77]
mov dword [rsp + 0x54], 0x6e6f74
xor ecx, ecx
mov dword [rbp - 0x68], 0x20786f6c
movdqu xmmword [rbp - 0x78], xmm0
mov dword [rbp - 0x64], 0x73726966
mov word [rbp - 0x60], 0x2174
mov byte [rbp - 0x5e], r12b
call qword [sym.imp.USER32.dll_MessageBoxA]
lea rdx, [rsp + 0x78]
mov dword [rsp + 0x78], 0xbdcccccd
lea rcx, [rsp + 0x51]
mov dword [rsp + 0x7c], 0x41c80000
mov dword [rsp + 0x50], 0x6e61435a
mov dword [rsp + 0x54], 0x6c6563
call fcn.14017cb90
test al, al
je 0x14016392c
mov byte [0x1404919a1], 1
call fcn.140190db0
call fcn.14019a5f0
call fcn.140190db0
call fcn.140190db0
mov rcx, qword [0x140491ae8]
lea rdx, [rsp + 0x59]
mov dword [rsp + 0x5c], 0x726574
mov qword [rsp + 0x78], r12
mov rax, qword [rcx + 0x4038]
movss xmm1, dword [rax + 0x34]
subss xmm1, dword [rsp + 0x58]
mov byte [rax + 0xc0], 1
mov rax, qword [rcx + 0x4038]
mov dword [rsp + 0x58], 0x6f6f4615
movss xmm0, dword [rax + 0x2c]
subss xmm0, dword [rax + 0x90]
mov byte [rax + 0x151], 1
addss xmm0, xmm1
movss dword [rax + 0x114], xmm0
mov rax, qword [rcx + 0x4038]
mov byte [rax + 0xc0], 1
mov rcx, qword [rcx + 0x4038]
call fcn.14018cca0
mov r9d, 1
mov dword [rsp + 0x20], 0xbb
lea r8, [rsp + 0x78]
mov edx, eax
lea rcx, [rsp + 0x59]
call fcn.140190a30
movss xmm1, dword [rdi + 0x3904]
lea rdx, [rsp + 0x78]
mov rax, qword [0x140491ae8]
addss xmm1, xmm1
lea rcx, [0x1403e3270]
movss xmm0, dword [rax + 0x3d60]
addss xmm1, xmm0
movss dword [rsp + 0x78], xmm0
movss dword [rsp + 0x7c], xmm1
call fcn.14017c340
test al, al
je 0x140163a72
movdqa xmm0, xmmword [0x1403e9e30]
lea r8, [rbp - 0x77]
movdqa xmm1, xmmword [0x1403e9aa0]
lea rdx, [rsp + 0x59]
mov dword [rsp + 0x28], 1
xor r9d, r9d
xor ecx, ecx
mov dword [rbp - 0x58], 0x6966664f
movdqu xmmword [rbp - 0x78], xmm0
mov dword [rbp - 0x54], 0x6c6163
movdqu xmmword [rbp - 0x68], xmm1
mov dword [rsp + 0x58], 0x65706f02
mov word [rsp + 0x5c], WSAStartup
mov qword [rsp + 0x20], r12
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
movaps xmm1, xmm15
movaps xmm0, xmm8
call fcn.14019a030
movss xmm1, dword [rdi + 0x3904]
lea rdx, [rsp + 0x78]
mov rax, qword [0x140491ae8]
addss xmm1, xmm1
lea rcx, [0x1403e3274]
movss xmm0, dword [rax + 0x3d60]
addss xmm1, xmm0
movss dword [rsp + 0x78], xmm0
movss dword [rsp + 0x7c], xmm1
call fcn.14017c340
test al, al
je 0x140163b1b
movdqa xmm0, xmmword [0x1403e9790]
lea r8, [rbp - 0x77]
mov dword [rsp + 0x28], 1
lea rdx, [rsp + 0x59]
xor r9d, r9d
mov dword [rbp - 0x68], 0x2f67672e
xor ecx, ecx
mov dword [rbp - 0x64], 0x59567953
movdqu xmmword [rbp - 0x78], xmm0
mov dword [rbp - 0x60], 0x6e767162
mov word [rbp - 0x5c], 0x3267
mov byte [rbp - 0x5a], r12b
mov dword [rsp + 0x58], 0x65706f55
mov word [rsp + 0x5c], WSAStartup
mov qword [rsp + 0x20], r12
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
call fcn.140190db0
call fcn.140195ed0
mov rcx, qword [rbp + 0xe0]
xor rcx, rsp
call fcn.1402aff00
lea r11, [rsp + 0x290]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
movaps xmm13, xmmword [r11 - 0x80]
movaps xmm14, xmmword [r11 - 0x90]
movaps xmm15, xmmword [r11 - 0xa0]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret