Function at 0x14000b6b0
Capabilities:
Contain obfuscated stackstrings
Encode data using xor
Enumerate process modules

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0xb18]
sub rsp, 0xbf0
movaps xmmword [rax - 0x38], xmm6
lea r15, str.sZrrA
movaps xmmword [rax - 0x48], xmm7
xor esi, esi
mov rax, qword gs:[0x58]
mov r13d, esi
movdqa xmm7, xmmword [0x140050c90]
mov r14, 0xffffffffffffffff
mov ebx, 4
mov dword [rbp + 0xb20], esi
mov rax, qword [rax]
mov eax, dword [rbx + rax]
cmp dword [0x14005f6b0], eax
jle 0x14000b85e
lea rcx, [0x14005f6b0]
call fcn.14001da38
cmp dword [0x14005f6b0], r14d
jne 0x14000b85e
xor eax, eax
mov dword [rbp + 0xe2], 0x41437443
xorps xmm0, xmm0
mov dword [rbp + 0xfb], eax
movups xmmword [rbp + 0xeb], xmm0
mov byte [rbp + 0xff], al
mov edx, esi
mov dword [rbp + 0xe6], 0x50233b72
mov ecx, esi
mov byte [rbp + 0xea], 0x78
nop
cdqe
movsxd rcx, ecx
movzx eax, byte [rax + r15]
xor byte [rbp + rcx + 0xe2], al
lea eax, [rdx + 1]
mov edx, eax
mov ecx, eax
cmp eax, 9
jb 0x14000b770
xorps xmm0, xmm0
mov dword [0x14005eb78], eax
xorps xmm1, xmm1
mov byte [rbp + 0xeb], sil
movups xmmword [rbp + 0x720], xmm0
lea rax, [rbp + 0xe2]
mov r8, r14
movdqu xmmword [rbp + 0x730], xmm1
nop dword [rax]
inc r8
cmp byte [rax + r8], sil
jne 0x14000b7c0
lea rdx, [rbp + 0xe2]
lea rcx, [rbp + 0x720]
call fcn.14001b810
cmp qword [rbp + 0x738], 0xf
lea rcx, [rbp + 0x720]
cmova rcx, qword [rbp + 0x720]
call fcn.14002cf8c
mov rdx, qword [rbp + 0x738]
cvttsd2si eax, xmm0
mov dword [0x14005f43c], eax
cmp rdx, 0xf
jbe 0x14000b843
mov rcx, qword [rbp + 0x720]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000b83e
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000e912
call fcn.14001dd34
lea rcx, [0x14005f6b0]
mov byte [rbp + 0x720], sil
movdqu xmmword [rbp + 0x730], xmm7
call fcn.14001d9cc
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov eax, dword [rbx + rcx]
cmp dword [0x14005f4c8], eax
jle 0x14000b99e
lea rcx, [0x14005f4c8]
call fcn.14001da38
cmp dword [0x14005f4c8], r14d
jne 0x14000b99e
xor eax, eax
mov dword [rsp + 0x3e], 0x41437443
xorps xmm0, xmm0
mov dword [rsp + 0x57], eax
movups xmmword [rsp + 0x47], xmm0
mov byte [rsp + 0x5b], al
mov edx, esi
mov dword [rsp + 0x42], 0x50233b72
mov ecx, esi
mov byte [rsp + 0x46], 0x78
nop dword [rax]
cdqe
movsxd rcx, ecx
movzx eax, byte [rax + r15]
xor byte [rsp + rcx + 0x3e], al
lea eax, [rdx + 1]
mov edx, eax
mov ecx, eax
cmp eax, 9
jb 0x14000b8c0
xorps xmm0, xmm0
mov dword [0x14005eb78], eax
xorps xmm1, xmm1
mov byte [rsp + 0x47], sil
movups xmmword [rbp + 0x740], xmm0
lea rax, [rsp + 0x3e]
mov r8, r14
movdqu xmmword [rbp + 0x750], xmm1
inc r8
cmp byte [rax + r8], sil
jne 0x14000b902
lea rdx, [rsp + 0x3e]
lea rcx, [rbp + 0x740]
call fcn.14001b810
cmp qword [rbp + 0x758], 0xf
lea rcx, [rbp + 0x740]
cmova rcx, qword [rbp + 0x740]
call fcn.14002cf8c
mov rdx, qword [rbp + 0x758]
cvttsd2si eax, xmm0
mov dword [0x14005f528], eax
cmp rdx, 0xf
jbe 0x14000b983
mov rcx, qword [rbp + 0x740]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000b97e
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000e912
call fcn.14001dd34
lea rcx, [0x14005f4c8]
mov byte [rbp + 0x740], sil
movdqu xmmword [rbp + 0x750], xmm7
call fcn.14001d9cc
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov eax, dword [rbx + rcx]
cmp dword [0x14005f414], eax
jle 0x14000bade
lea rcx, [0x14005f414]
call fcn.14001da38
cmp dword [0x14005f414], r14d
jne 0x14000bade
xor eax, eax
mov dword [rsp + 0x5c], 0x41437443
xorps xmm0, xmm0
mov dword [rsp + 0x75], eax
movups xmmword [rsp + 0x65], xmm0
mov byte [rsp + 0x79], al
mov edx, esi
mov dword [rsp + 0x60], 0x50233b72
mov ecx, esi
mov byte [rsp + 0x64], 0x78
nop dword [rax]
cdqe
movsxd rcx, ecx
movzx eax, byte [rax + r15]
xor byte [rsp + rcx + 0x5c], al
lea eax, [rdx + 1]
mov edx, eax
mov ecx, eax
cmp eax, 9
jb 0x14000ba00
xorps xmm0, xmm0
mov dword [0x14005eb78], eax
xorps xmm1, xmm1
mov byte [rsp + 0x65], sil
movups xmmword [rbp + 0x760], xmm0
lea rax, [rsp + 0x5c]
mov r8, r14
movdqu xmmword [rbp + 0x770], xmm1
inc r8
cmp byte [rax + r8], sil
jne 0x14000ba42
lea rdx, [rsp + 0x5c]
lea rcx, [rbp + 0x760]
call fcn.14001b810
cmp qword [rbp + 0x778], 0xf
lea rcx, [rbp + 0x760]
cmova rcx, qword [rbp + 0x760]
call fcn.14002cf8c
mov rdx, qword [rbp + 0x778]
cvttsd2si eax, xmm0
mov dword [0x14005f494], eax
cmp rdx, 0xf
jbe 0x14000bac3
mov rcx, qword [rbp + 0x760]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000babe
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000e912
call fcn.14001dd34
lea rcx, [0x14005f414]
mov byte [rbp + 0x760], sil
movdqu xmmword [rbp + 0x770], xmm7
call fcn.14001d9cc
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov eax, dword [rbx + rcx]
cmp dword [0x14005f3fc], eax
jle 0x14000bc1d
lea rcx, [0x14005f3fc]
call fcn.14001da38
cmp dword [0x14005f3fc], r14d
jne 0x14000bc1d
xor eax, eax
mov dword [rsp + 0x7a], 0x41437443
xorps xmm0, xmm0
mov dword [rbp - 0x6d], eax
movups xmmword [rbp - 0x7d], xmm0
mov byte [rbp - 0x69], al
mov edx, esi
mov dword [rsp + 0x7e], 0x50233b72
mov ecx, esi
mov byte [rbp - 0x7e], 0x78
nop dword [rax]
cdqe
movsxd rcx, ecx
movzx eax, byte [rax + r15]
xor byte [rsp + rcx + 0x7a], al
lea eax, [rdx + 1]
mov edx, eax
mov ecx, eax
cmp eax, 9
jb 0x14000bb40
xorps xmm0, xmm0
mov dword [0x14005eb78], eax
xorps xmm1, xmm1
mov byte [rbp - 0x7d], sil
movups xmmword [rbp + 0x780], xmm0
lea rax, [rsp + 0x7a]
mov r8, r14
movdqu xmmword [rbp + 0x790], xmm1
inc r8
cmp byte [rax + r8], sil
jne 0x14000bb81
lea rdx, [rsp + 0x7a]
lea rcx, [rbp + 0x780]
call fcn.14001b810
cmp qword [rbp + 0x798], 0xf
lea rcx, [rbp + 0x780]
cmova rcx, qword [rbp + 0x780]
call fcn.14002cf8c
mov rdx, qword [rbp + 0x798]
cvttsd2si eax, xmm0
mov dword [0x14005f3f8], eax
cmp rdx, 0xf
jbe 0x14000bc02
mov rcx, qword [rbp + 0x780]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000bbfd
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000e912
call fcn.14001dd34
lea rcx, [0x14005f3fc]
mov byte [rbp + 0x780], sil
movdqu xmmword [rbp + 0x790], xmm7
call fcn.14001d9cc
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov eax, dword [rbx + rcx]
cmp dword [0x14005f504], eax
jle 0x14000bd6b
lea rcx, [0x14005f504]
call fcn.14001da38
cmp dword [0x14005f504], r14d
jne 0x14000bd6b
xorps xmm0, xmm0
mov dword [rbp + 0x100], 0x44417443
xor eax, eax
mov word [rbp + 0x104], 0x3c71
movups xmmword [rbp + 0x106], xmm0
mov word [rbp + 0x116], ax
mov edx, esi
mov ecx, esi
nop dword [rax + rax]
cdqe
movsxd rcx, ecx
movzx eax, byte [rax + r15]
xor byte [rbp + rcx + 0x100], al
lea eax, [rdx + 1]
mov edx, eax
mov ecx, eax
cmp eax, 6
jb 0x14000bc80
xorps xmm0, xmm0
mov dword [0x14005f388], eax
xorps xmm1, xmm1
mov byte [rbp + 0x106], sil
movups xmmword [rbp + 0x7a0], xmm0
lea rax, [rbp + 0x100]
mov r8, r14
movdqu xmmword [rbp + 0x7b0], xmm1
nop dword [rax]
inc r8
cmp byte [rax + r8], sil
jne 0x14000bcd0
lea rdx, [rbp + 0x100]
lea rcx, [rbp + 0x7a0]
call fcn.14001b810
cmp qword [rbp + 0x7b8], 0xf
lea rcx, [rbp + 0x7a0]
cmova rcx, qword [rbp + 0x7a0]
call fcn.1400291d8
mov rdx, qword [rbp + 0x7b8]
mov qword [0x14005f670], rax
cmp rdx, 0xf
jbe 0x14000bd50
mov rcx, qword [rbp + 0x7a0]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000bd4b
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000e912
call fcn.14001dd34
lea rcx, [0x14005f504]
mov byte [rbp + 0x7a0], sil
movdqu xmmword [rbp + 0x7b0], xmm7
call fcn.14001d9cc
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov eax, dword [rbx + rcx]
cmp dword [0x14005f6a0], eax
jle 0x14000bebb
lea rcx, [0x14005f6a0]
call fcn.14001da38
cmp dword [0x14005f6a0], r14d
jne 0x14000bebb
xorps xmm0, xmm0
mov dword [rbp + 0x118], 0x44417443
xor eax, eax
mov word [rbp + 0x11c], 0x3c71
movups xmmword [rbp + 0x11e], xmm0
mov word [rbp + 0x12e], ax
mov edx, esi
mov ecx, esi
nop dword [rax]
cdqe
movsxd rcx, ecx
movzx eax, byte [rax + r15]
xor byte [rbp + rcx + 0x118], al
lea eax, [rdx + 1]
mov edx, eax
mov ecx, eax
cmp eax, 6
jb 0x14000bdd0
xorps xmm0, xmm0
mov dword [0x14005f388], eax
xorps xmm1, xmm1
mov byte [rbp + 0x11e], sil
movups xmmword [rbp + 0x580], xmm0
lea rax, [rbp + 0x118]
mov r8, r14
movdqu xmmword [rbp + 0x590], xmm1
nop dword [rax]
inc r8
cmp byte [rax + r8], sil
jne 0x14000be20
lea rdx, [rbp + 0x118]
lea rcx, [rbp + 0x580]
call fcn.14001b810
cmp qword [rbp + 0x598], 0xf
lea rcx, [rbp + 0x580]
cmova rcx, qword [rbp + 0x580]
call fcn.1400291d8
mov rdx, qword [rbp + 0x598]
mov qword [0x14005f4a0], rax
cmp rdx, 0xf
jbe 0x14000bea0
mov rcx, qword [rbp + 0x580]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000be9b
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000e912
call fcn.14001dd34
lea rcx, [0x14005f6a0]
mov byte [rbp + 0x580], sil
movdqu xmmword [rbp + 0x590], xmm7
call fcn.14001d9cc
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov eax, dword [rbx + rcx]
cmp dword [0x14005f660], eax
jle 0x14000c00b
lea rcx, [0x14005f660]
call fcn.14001da38
cmp dword [0x14005f660], r14d
jne 0x14000c00b
xorps xmm0, xmm0
mov dword [rbp + 0x130], 0x44417443
xor eax, eax
mov word [rbp + 0x134], 0x3c71
movups xmmword [rbp + 0x136], xmm0
mov word [rbp + 0x146], ax
mov edx, esi
mov ecx, esi
nop dword [rax]
cdqe
movsxd rcx, ecx
movzx eax, byte [rax + r15]
xor byte [rbp + rcx + 0x130], al
lea eax, [rdx + 1]
mov edx, eax
mov ecx, eax
cmp eax, 6
jb 0x14000bf20
xorps xmm0, xmm0
mov dword [0x14005f388], eax
xorps xmm1, xmm1
mov byte [rbp + 0x136], sil
movups xmmword [rbp + 0x5a0], xmm0
lea rax, [rbp + 0x130]
mov r8, r14
movdqu xmmword [rbp + 0x5b0], xmm1
nop dword [rax]
inc r8
cmp byte [rax + r8], sil
jne 0x14000bf70
lea rdx, [rbp + 0x130]
lea rcx, [rbp + 0x5a0]
call fcn.14001b810
cmp qword [rbp + 0x5b8], 0xf
lea rcx, [rbp + 0x5a0]
cmova rcx, qword [rbp + 0x5a0]
call fcn.1400291d8
mov rdx, qword [rbp + 0x5b8]
mov qword [0x14005f650], rax
cmp rdx, 0xf
jbe 0x14000bff0
mov rcx, qword [rbp + 0x5a0]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000bfeb
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000e912
call fcn.14001dd34
lea rcx, [0x14005f660]
mov byte [rbp + 0x5a0], sil
movdqu xmmword [rbp + 0x5b0], xmm7
call fcn.14001d9cc
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov eax, dword [rbx + rcx]
cmp dword [0x14005f52c], eax
jle 0x14000c15b
lea rcx, [0x14005f52c]
call fcn.14001da38
cmp dword [0x14005f52c], r14d
jne 0x14000c15b
xorps xmm0, xmm0
mov dword [rbp + 0x148], 0x44417443
xor eax, eax
mov word [rbp + 0x14c], 0x3c71
movups xmmword [rbp + 0x14e], xmm0
mov word [rbp + 0x15e], ax
mov edx, esi
mov ecx, esi
nop dword [rax]
cdqe
movsxd rcx, ecx
movzx eax, byte [rax + r15]
xor byte [rbp + rcx + 0x148], al
lea eax, [rdx + 1]
mov edx, eax
mov ecx, eax
cmp eax, 6
jb 0x14000c070
xorps xmm0, xmm0
mov dword [0x14005f388], eax
xorps xmm1, xmm1
mov byte [rbp + 0x14e], sil
movups xmmword [rbp + 0x5c0], xmm0
lea rax, [rbp + 0x148]
mov r8, r14
movdqu xmmword [rbp + 0x5d0], xmm1
nop dword [rax]
inc r8
cmp byte [rax + r8], sil
jne 0x14000c0c0
lea rdx, [rbp + 0x148]
lea rcx, [rbp + 0x5c0]
call fcn.14001b810
cmp qword [rbp + 0x5d8], 0xf
lea rcx, [rbp + 0x5c0]
cmova rcx, qword [rbp + 0x5c0]
call fcn.1400291d8
mov rdx, qword [rbp + 0x5d8]
mov qword [0x14005f3c0], rax
cmp rdx, 0xf
jbe 0x14000c140
mov rcx, qword [rbp + 0x5c0]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000c13b
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000e912
call fcn.14001dd34
lea rcx, [0x14005f52c]
mov byte [rbp + 0x5c0], sil
movdqu xmmword [rbp + 0x5d0], xmm7
call fcn.14001d9cc
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov eax, dword [rbx + rcx]
cmp dword [0x14005f3d0], eax
jle 0x14000c19f
lea rcx, [0x14005f3d0]
call fcn.14001da38
cmp dword [0x14005f3d0], r14d
jne 0x14000c19f
lea rcx, [0x140044530]
call fcn.14001dd14
lea rcx, [0x14005f3d0]
call fcn.14001d9cc
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov eax, dword [rbx + rcx]
cmp dword [0x14005f46c], eax
jle 0x14000c1e3
lea rcx, [0x14005f46c]
call fcn.14001da38
cmp dword [0x14005f46c], r14d
jne 0x14000c1e3
lea rcx, [0x1400444c0]
call fcn.14001dd14
lea rcx, [0x14005f46c]
call fcn.14001d9cc
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov qword [0x14005f4a0], rax
xorps xmm0, xmm0
mov edx, esi
test rax, rax
jne 0x14000c30a
mov dword [rbp - 0x68], 0x41437443
mov dword [rbp - 0x64], 0x50233b72
mov byte [rbp - 0x60], 0x78
movups xmmword [rbp - 0x5f], xmm0
mov dword [rbp - 0x4f], eax
mov byte [rbp - 0x4b], al
nop word [rax + rax]
movsxd rcx, eax
movsxd rax, esi
movzx eax, byte [rax + r15]
xor byte [rbp + rcx - 0x68], al
inc edx
mov esi, edx
mov eax, edx
cmp edx, 9
jb 0x14000c220
xorps xmm0, xmm0
mov dword [0x14005eb78], edx
xorps xmm1, xmm1
mov byte [rbp - 0x5f], r13b
movups xmmword [rbp + 0x810], xmm0
lea rax, [rbp - 0x68]
movdqu xmmword [rbp + 0x820], xmm1
nop dword [rax]
inc r14
cmp byte [rax + r14], r13b
jne 0x14000c260
mov r8, r14
lea rdx, [rbp - 0x68]
lea rcx, [rbp + 0x810]
call fcn.14001b810
cmp qword [rbp + 0x828], 0xf
lea rcx, [rbp + 0x810]
cmova rcx, qword [rbp + 0x810]
call fcn.14002cf8c
mov rdx, qword [rbp + 0x828]
cvttsd2si ebx, xmm0
cmp rdx, 0xf
jbe 0x14000c2dd
mov rcx, qword [rbp + 0x810]
inc rdx
mov r8, rcx
cmp rdx, 0x1000
jb 0x14000c2d8
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub r8, rcx
add r8, 0xfffffffffffffff8
cmp r8, 0x1f
ja 0x14000e912
call fcn.14001dd34
mov eax, ebx
lea r11, [rsp + 0xbf0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
xor eax, eax
mov dword [rbp + 0x24d], 0x405c6a42
mov word [rbp + 0x278], ax
mov ecx, esi
mov dword [rbp + 0x251], 0x5f263773
mov word [rbp + 0x255], 0x433c
mov byte [rbp + 0x257], 0x2c
movups xmmword [rbp + 0x258], xmm0
movups xmmword [rbp + 0x268], xmm0
nop word [rax + rax]
cdqe
movsxd rcx, ecx
movzx eax, byte [rax + r15]
xor byte [rbp + rcx + 0x24d], al
lea eax, [rdx + 1]
mov edx, eax
mov ecx, eax
cmp eax, 0xb
jb 0x14000c350
xorps xmm0, xmm0
mov dword [0x14005f384], eax
xorps xmm1, xmm1
mov byte [rbp + 0x258], sil
movups xmmword [rbp + 0x660], xmm0
lea rax, [rbp + 0x24d]
mov r8, r14
movdqu xmmword [rbp + 0x670], xmm1
nop dword [rax]
inc r8
cmp byte [rax + r8], sil
jne 0x14000c3a0
lea rdx, [rbp + 0x24d]
lea rcx, [rbp + 0x660]
call fcn.14001b810
cmp qword [rbp + 0x678], 0xf
lea rcx, [rbp + 0x660]
cmova rcx, qword [rbp + 0x660]
call fcn.14002cf8c
cvttsd2si edi, xmm0
mov dword [rbp + 0x160], 0x44417443
xor eax, eax
mov word [rbp + 0x164], 0x3c71
mov edx, esi
mov word [rbp + 0x176], ax
mov ecx, esi
xorps xmm0, xmm0
movups xmmword [rbp + 0x166], xmm0
cdqe
movsxd rcx, ecx
movzx eax, byte [rax + r15]
xor byte [rbp + rcx + 0x160], al
lea eax, [rdx + 1]
mov edx, eax
mov ecx, eax
cmp eax, 6
jb 0x14000c406
xorps xmm0, xmm0
mov dword [0x14005f388], eax
xorps xmm1, xmm1
mov byte [rbp + 0x166], sil
movups xmmword [rbp + 0x640], xmm0
lea rax, [rbp + 0x160]
mov r8, r14
movdqu xmmword [rbp + 0x650], xmm1
nop
inc r8
cmp byte [rax + r8], sil
jne 0x14000c450
lea rdx, [rbp + 0x160]
lea rcx, [rbp + 0x640]
call fcn.14001b810
cmp qword [rbp + 0x658], 0xf
lea rcx, [rbp + 0x640]
cmova rcx, qword [rbp + 0x640]
call fcn.1400291d8
mov rbx, rax
mov dword [rsp + 0x20], 0x41406a42
xor eax, eax
mov dword [rsp + 0x24], 0x52213d6f
xorps xmm0, xmm0
mov dword [rsp + 0x39], eax
mov byte [rsp + 0x3d], al
mov edx, esi
mov byte [rsp + 0x28], 0x3d
mov ecx, esi
movups xmmword [rsp + 0x29], xmm0
nop word [rax + rax]
cdqe
movsxd rcx, ecx
movzx eax, byte [rax + r15]
xor byte [rsp + rcx + 0x20], al
lea eax, [rdx + 1]
mov edx, eax
mov ecx, eax
cmp eax, 9
jb 0x14000c4c0
xorps xmm0, xmm0
mov dword [0x14005eb78], eax
xorps xmm1, xmm1
mov byte [rsp + 0x29], sil
movups xmmword [rbp + 0x620], xmm0
lea rax, [rsp + 0x20]
mov r8, r14
movdqu xmmword [rbp + 0x630], xmm1
inc r8
cmp byte [rax + r8], sil
jne 0x14000c502
lea rdx, [rsp + 0x20]
lea rcx, [rbp + 0x620]
call fcn.14001b810
cmp qword [rbp + 0x638], 0xf
lea rcx, [rbp + 0x620]
mov r8d, edi
mov rdx, rbx
cmova rcx, qword [rbp + 0x620]
call fcn.140028c3c
mov r12, rax
mov dword [rbp + 0x178], 0x44417443
xor eax, eax
mov word [rbp + 0x17c], 0x3c71
xorps xmm0, xmm0
mov word [rbp + 0x18e], ax
movups xmmword [rbp + 0x17e], xmm0
mov edx, esi
mov r8d, esi
mov ecx, esi
nop
movsxd rax, edx
lea edx, [r8 + 1]
movsxd rcx, ecx
mov r8d, edx
movzx eax, byte [rax + r15]
xor byte [rbp + rcx + 0x178], al
mov ecx, edx
cmp edx, 6
jb 0x14000c570
xorps xmm0, xmm0
mov dword [0x14005f388], edx
xorps xmm1, xmm1
mov byte [rbp + 0x17e], sil
movups xmmword [rbp + 0x600], xmm0
lea rax, [rbp + 0x178]
mov r8, r14
movdqu xmmword [rbp + 0x610], xmm1
nop dword [rax]
inc r8
cmp byte [rax + r8], sil
jne 0x14000c5c0
lea rdx, [rbp + 0x178]
lea rcx, [rbp + 0x600]
call fcn.14001b810
cmp qword [rbp + 0x618], 0xf
lea rcx, [rbp + 0x600]
cmova rcx, qword [rbp + 0x600]
call fcn.1400291d8
mov r15, qword [0x14005f4a0]
lea r8, str.sZrrA
xorps xmm0, xmm0
mov word [rbp + 0x99d], 0x7442
mov rdi, rax
mov byte [rbp + 0x99f], 0x47
xor eax, eax
mov edx, esi
mov word [rbp + 0xa10], ax
mov ecx, esi
movups xmmword [rbp + 0x9a0], xmm0
movups xmmword [rbp + 0x9b0], xmm0
movups xmmword [rbp + 0x9c0], xmm0
movups xmmword [rbp + 0x9d0], xmm0
movups xmmword [rbp + 0x9e0], xmm0
movups xmmword [rbp + 0x9f0], xmm0
movups xmmword [rbp + 0xa00], xmm0
nop word [rax + rax]
cdqe
movsxd rcx, ecx
movzx eax, byte [rax + r8]
xor byte [rbp + rcx + 0x99d], al
lea eax, [rdx + 1]
mov edx, eax
mov ecx, eax
cmp eax, 3
jb 0x14000c660
xorps xmm0, xmm0
mov dword [0x14005e350], eax
xorps xmm1, xmm1
mov byte [rbp + 0x9a0], sil
movups xmmword [rbp + 0x5e0], xmm0
lea rax, [rbp + 0x99d]
mov r8, r14
movdqu xmmword [rbp + 0x5f0], xmm1
nop dword [rax]
inc r8
cmp byte [rax + r8], sil
jne 0x14000c6b0
lea rdx, [rbp + 0x99d]
lea rcx, [rbp + 0x5e0]
call fcn.14001b810
cmp qword [rbp + 0x5f8], 0xf
lea rbx, [rbp + 0x5e0]
mov r9d, r12d
lea r8, [0x14005eb80]
cmova rbx, qword [rbp + 0x5e0]
mov rdx, rdi
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_K32GetModuleFileNameExW]
mov rcx, rbx
mov edi, eax
call fcn.14002cf8c
mov rdx, qword [rbp + 0x5f8]
cvttsd2si ebx, xmm0
cmp rdx, 0xf
jbe 0x14000c748
mov rcx, qword [rbp + 0x5e0]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000c743
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000e912
call fcn.14001dd34
mov rdx, qword [rbp + 0x618]
mov byte [rbp + 0x5e0], sil
movdqu xmmword [rbp + 0x5f0], xmm7
cmp rdx, 0xf
jbe 0x14000c798
mov rcx, qword [rbp + 0x600]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000c793
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000e912
call fcn.14001dd34
mov rdx, qword [rbp + 0x638]
mov byte [rbp + 0x600], sil
movdqu xmmword [rbp + 0x610], xmm7
cmp rdx, 0xf
jbe 0x14000c7e8
mov rcx, qword [rbp + 0x620]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000c7e3
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000e912
call fcn.14001dd34
mov rdx, qword [rbp + 0x658]
mov byte [rbp + 0x620], sil
movdqu xmmword [rbp + 0x630], xmm7
cmp rdx, 0xf
jbe 0x14000c838
mov rcx, qword [rbp + 0x640]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000c833
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000e912
call fcn.14001dd34
mov rdx, qword [rbp + 0x678]
mov byte [rbp + 0x640], sil
movdqu xmmword [rbp + 0x650], xmm7
cmp rdx, 0xf
jbe 0x14000c888
mov rcx, qword [rbp + 0x660]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000c883
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000e912
call fcn.14001dd34
xor eax, eax
mov byte [rbp + 0x660], sil
xorps xmm0, xmm0
mov edx, esi
movdqu xmmword [rbp + 0x670], xmm7
cmp edi, ebx
jae 0x14000c96c
mov dword [rbp - 0x2c], 0x41437443
lea r8, str.sZrrA
mov dword [rbp - 0x28], 0x50233b72
mov byte [rbp - 0x24], 0x78
movups xmmword [rbp - 0x23], xmm0
mov dword [rbp - 0x13], eax
mov byte [rbp - 0xf], al
nop dword [rax]
movsxd rcx, eax
movsxd rax, esi
movzx eax, byte [rax + r8]
xor byte [rbp + rcx - 0x2c], al
inc edx
mov esi, edx
mov eax, edx
cmp edx, 9
jb 0x14000c8d0
xorps xmm0, xmm0
mov dword [0x14005eb78], edx
xorps xmm1, xmm1
mov byte [rbp - 0x23], r13b
movups xmmword [rbp + 0x830], xmm0
lea rax, [rbp - 0x2c]
movdqu xmmword [rbp + 0x840], xmm1
nop dword [rax]
inc r14
cmp byte [rax + r14], r13b
jne 0x14000c910
mov r8, r14
lea rdx, [rbp - 0x2c]
lea rcx, [rbp + 0x830]
call fcn.14001b810
cmp qword [rbp + 0x848], 0xf
lea rcx, [rbp + 0x830]
cmova rcx, qword [rbp + 0x830]
call fcn.14002cf8c
mov rdx, qword [rbp + 0x848]
cvttsd2si ebx, xmm0
cmp rdx, 0xf
jbe 0x14000c2dd
mov rcx, qword [rbp + 0x830]
inc rdx
jmp 0x14000c2b3
mov dword [rbp + 0x27a], 0x405c6a42
lea r12, str.sZrrA
mov dword [rbp + 0x27e], 0x5f263773
mov ecx, esi
mov word [rbp + 0x282], 0x433c
mov byte [rbp + 0x284], 0x2c
movups xmmword [rbp + 0x285], xmm0
mov word [rbp + 0x2a5], ax
movups xmmword [rbp + 0x295], xmm0
nop
cdqe
movsxd rcx, ecx
movzx eax, byte [rax + r12]
xor byte [rbp + rcx + 0x27a], al
lea eax, [rdx + 1]
mov edx, eax
mov ecx, eax
cmp eax, 0xb
jb 0x14000c9b0
xorps xmm0, xmm0
mov dword [0x14005f384], eax
xorps xmm1, xmm1
mov byte [rbp + 0x285], sil
movups xmmword [rbp + 0x6c0], xmm0
lea rax, [rbp + 0x27a]
mov r8, r14
movdqu xmmword [rbp + 0x6d0], xmm1
nop dword [rax]
inc r8
cmp byte [rax + r8], sil
jne 0x14000ca00
lea rdx, [rbp + 0x27a]
lea rcx, [rbp + 0x6c0]
call fcn.14001b810
cmp qword [rbp + 0x6d8], 0xf
lea rcx, [rbp + 0x6c0]
cmova rcx, qword [rbp + 0x6c0]
call fcn.14002cf8c
cvttsd2si edi, xmm0
mov dword [rbp + 0x190], 0x44417443
xor eax, eax
mov word [rbp + 0x194], 0x3c71
mov edx, esi
mov word [rbp + 0x1a6], ax
mov ecx, esi
xorps xmm0, xmm0
movups xmmword [rbp + 0x196], xmm0
cdqe
movsxd rcx, ecx
movzx eax, byte [rax + r12]
xor byte [rbp + rcx + 0x190], al
lea eax, [rdx + 1]
mov edx, eax
mov ecx, eax
cmp eax, 6
jb 0x14000ca66
xorps xmm0, xmm0
mov dword [0x14005f388], eax
xorps xmm1, xmm1
mov byte [rbp + 0x196], sil
movups xmmword [rbp + 0x6a0], xmm0
lea rax, [rbp + 0x190]
mov r8, r14
movdqu xmmword [rbp + 0x6b0], xmm1
nop
inc r8
cmp byte [rax + r8], sil
jne 0x14000cab0
lea rdx, [rbp + 0x190]
lea rcx, [rbp + 0x6a0]
call fcn.14001b810
cmp qword [rbp + 0x6b8], 0xf
lea rcx, [rbp + 0x6a0]
cmova rcx, qword [rbp + 0x6a0]
call fcn.1400291d8
movdqa xmm0, xmmword [str.KkK_o_8_tc_sw]
mov rbx, rax
movdqu xmmword [rbp + 0x4f0], xmm0
mov edx, esi
mov r8d, esi
mov ecx, esi
movsxd rax, edx
lea edx, [r8 + 1]
movsxd rcx, ecx
mov r8d, edx
movzx eax, byte [rax + r12]
xor byte [rbp + rcx + 0x4f0], al
mov ecx, edx
cmp edx, 0xf
jb 0x14000cb02
xorps xmm0, xmm0
mov dword [0x14005eb60], edx
xorps xmm1, xmm1
mov byte [rbp + 0x4ff], sil
movups xmmword [rbp + 0x680], xmm0
lea rax, [rbp + 0x4f0]
mov r8, r14
movdqu xmmword [rbp + 0x690], xmm1
nop
inc r8
cmp byte [rax + r8], sil
jne 0x14000cb50
lea rdx, [rbp + 0x4f0]
lea rcx, [rbp + 0x680]
call fcn.14001b810
cmp qword [rbp + 0x698], 0xf
lea rcx, [rbp + 0x680]
mov r8d, edi
mov rdx, rbx
cmova rcx, qword [rbp + 0x680]
call fcn.140028c3c
lea r15, [0x140058850]
mov rdx, rax
mov rcx, r15
lea r8, [0x14005f43c]
call qword [sym.imp.KERNEL32.dll_K32EnumProcesses]
mov rdx, qword [rbp + 0x698]
mov ebx, eax
cmp rdx, 0xf
jbe 0x14000cbeb
mov rcx, qword [rbp + 0x680]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000cbe6
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000e912
call fcn.14001dd34
mov rdx, qword [rbp + 0x6b8]
mov byte [rbp + 0x680], sil
movdqu xmmword [rbp + 0x690], xmm7
cmp rdx, 0xf
jbe 0x14000cc3b
mov rcx, qword [rbp + 0x6a0]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000cc36
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000e912
call fcn.14001dd34
mov rdx, qword [rbp + 0x6d8]
mov byte [rbp + 0x6a0], sil
movdqu xmmword [rbp + 0x6b0], xmm7
cmp rdx, 0xf
jbe 0x14000cc8b
mov rcx, qword [rbp + 0x6c0]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000cc86
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000e912
call fcn.14001dd34
mov byte [rbp + 0x6c0], sil
movdqu xmmword [rbp + 0x6d0], xmm7
test ebx, ebx
jne 0x14000cd6c
xor eax, eax
mov dword [rbp - 0xe], 0x41437443
xorps xmm0, xmm0
mov dword [rbp + 0xb], eax
movups xmmword [rbp - 5], xmm0
mov byte [rbp + 0xf], al
mov edx, esi
mov dword [rbp - 0xa], 0x50233b72
mov byte [rbp - 6], 0x78
nop word [rax + rax]
movsxd rcx, eax
movsxd rax, esi
movzx eax, byte [rax + r12]
xor byte [rbp + rcx - 0xe], al
inc edx
mov esi, edx
mov eax, edx
cmp edx, 9
jb 0x14000ccd0
xorps xmm0, xmm0
mov dword [0x14005eb78], edx
xorps xmm1, xmm1
mov byte [rbp - 5], r13b
movups xmmword [rbp + 0x850], xmm0
lea rax, [rbp - 0xe]
movdqu xmmword [rbp + 0x860], xmm1
nop dword [rax]
inc r14
cmp byte [rax + r14], r13b
jne 0x14000cd10
mov r8, r14
lea rdx, [rbp - 0xe]
lea rcx, [rbp + 0x850]
call fcn.14001b810
cmp qword [rbp + 0x868], 0xf
lea rcx, [rbp + 0x850]
cmova rcx, qword [rbp + 0x850]
call fcn.14002cf8c
mov rdx, qword [rbp + 0x868]
cvttsd2si ebx, xmm0
cmp rdx, 0xf
jbe 0x14000c2dd
mov rcx, qword [rbp + 0x850]
inc rdx
jmp 0x14000c2b3
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
xorps xmm0, xmm0
mov word [rbp + 0xa12], 0x7442
mov dword [0x14005f528], eax
mov edx, esi
xor eax, eax
mov byte [rbp + 0xa14], 0x47
mov word [rbp + 0xa85], ax
mov ecx, esi
movups xmmword [rbp + 0xa15], xmm0
movups xmmword [rbp + 0xa25], xmm0
movups xmmword [rbp + 0xa35], xmm0
movups xmmword [rbp + 0xa45], xmm0
movups xmmword [rbp + 0xa55], xmm0
movups xmmword [rbp + 0xa65], xmm0
movups xmmword [rbp + 0xa75], xmm0
nop dword [rax]
cdqe
movsxd rcx, ecx
movzx eax, byte [rax + r12]
xor byte [rbp + rcx + 0xa12], al
lea eax, [rdx + 1]
mov edx, eax
mov ecx, eax
cmp eax, 3
jb 0x14000cdd0
xorps xmm0, xmm0
mov dword [0x14005e350], eax
xorps xmm1, xmm1
mov byte [rbp + 0xa15], sil
movups xmmword [rbp + 0x6e0], xmm0
lea rax, [rbp + 0xa12]
mov r8, r14
movdqu xmmword [rbp + 0x6f0], xmm1
nop dword [rax]
inc r8
cmp byte [rax + r8], sil
jne 0x14000ce20
lea rdx, [rbp + 0xa12]
lea rcx, [rbp + 0x6e0]
call fcn.14001b810
cmp qword [rbp + 0x6f8], 0xf
lea rcx, [rbp + 0x6e0]
cmova rcx, qword [rbp + 0x6e0]
call fcn.14002cf8c
mov rdx, qword [rbp + 0x6f8]
cvttsd2si eax, xmm0
cmp dword [0x14005f528], eax
setb bl
cmp rdx, 0xf
jbe 0x14000cea6
mov rcx, qword [rbp + 0x6e0]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000cea1
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000e912
call fcn.14001dd34
mov byte [rbp + 0x6e0], sil
movdqu xmmword [rbp + 0x6f0], xmm7
test bl, bl
je 0x14000cf7c
xor eax, eax
mov dword [rbp + 0x10], 0x41437443
xorps xmm0, xmm0
mov dword [rbp + 0x29], eax
movups xmmword [rbp + 0x19], xmm0
mov byte [rbp + 0x2d], al
mov edx, esi
mov dword [rbp + 0x14], 0x50233b72
mov byte [rbp + 0x18], 0x78
movsxd rcx, eax
movsxd rax, esi
movzx eax, byte [rax + r12]
xor byte [rbp + rcx + 0x10], al
inc edx
mov esi, edx
mov eax, edx
cmp edx, 9
jb 0x14000cee0
xorps xmm0, xmm0
mov dword [0x14005eb78], edx
xorps xmm1, xmm1
mov byte [rbp + 0x19], r13b
movups xmmword [rbp + 0x870], xmm0
lea rax, [rbp + 0x10]
movdqu xmmword [rbp + 0x880], xmm1
nop dword [rax]
inc r14
cmp byte [rax + r14], r13b
jne 0x14000cf20
mov r8, r14
lea rdx, [rbp + 0x10]
lea rcx, [rbp + 0x870]
call fcn.14001b810
cmp qword [rbp + 0x888], 0xf
lea rcx, [rbp + 0x870]
cmova rcx, qword [rbp + 0x870]
call fcn.14002cf8c
mov rdx, qword [rbp + 0x888]
cvttsd2si ebx, xmm0
cmp rdx, 0xf
jbe 0x14000c2dd
mov rcx, qword [rbp + 0x870]
inc rdx
jmp 0x14000c2b3
lea rdx, [0x14005eb80]
lea rcx, [rbp + 0xa88]
call fcn.140018f90
mov rdx, rax
lea rcx, [rbp + 0x908]
call fcn.140002260
movdqa xmm6, xmmword [0x140050c80]
lea rdi, [0x140056da0]
mov rbx, rax
cmp rdi, rax
je 0x14000d02e
mov rdx, qword [reloc.OLEAUT32.dll_VariantInit]
cmp rdx, 7
jbe 0x14000cffb
mov rcx, qword [0x140056da0]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000cff6
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000e912
call fcn.14001dd34
movdqu xmmword [0x140056db0], xmm6
mov word [0x140056da0], si
movups xmm0, xmmword [rbx]
movups xmmword [0x140056da0], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [0x140056db0], xmm1
mov qword [rbx + 0x10], rsi
mov qword [rbx + 0x18], 7
mov word [rbx], si
mov rdx, qword [rbp + 0x920]
cmp rdx, 7
jbe 0x14000d07c
mov rcx, qword [rbp + 0x908]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000d06f
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000e912
call fcn.14001dd34
movdqa xmm6, xmmword [0x140050c80]
cmp qword [reloc.OLEAUT32.dll_VariantInit], 7
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x918], xmm6
cmova rdi, qword [0x140056da0]
mov edx, esi
xor eax, eax
mov word [rbp + 0x908], si
mov dword [rbp + 0x47], eax
mov ecx, esi
mov byte [rbp + 0x4b], al
mov qword [0x14005f650], rdi
mov dword [rbp + 0x2e], 0x41437443
mov dword [rbp + 0x32], 0x50233b72
mov byte [rbp + 0x36], 0x78
movups xmmword [rbp + 0x37], xmm0
nop word [rax + rax]
cdqe
movsxd rcx, ecx
movzx eax, byte [rax + r12]
xor byte [rbp + rcx + 0x2e], al
lea eax, [rdx + 1]
mov edx, eax
mov ecx, eax
cmp eax, 9
jb 0x14000d0d0
xorps xmm0, xmm0
mov dword [0x14005eb78], eax
xorps xmm1, xmm1
mov byte [rbp + 0x37], sil
movups xmmword [rbp + 0x700], xmm0
lea rax, [rbp + 0x2e]
mov r8, r14
movdqu xmmword [rbp + 0x710], xmm1
inc r8
cmp byte [rax + r8], sil
jne 0x14000d110
lea rdx, [rbp + 0x2e]
lea rcx, [rbp + 0x700]
call fcn.14001b810
cmp qword [rbp + 0x718], 0xf
lea rcx, [rbp + 0x700]
cmova rcx, qword [rbp + 0x700]
call fcn.14002cf8c
mov rdx, qword [rbp + 0x718]
cvttsd2si eax, xmm0
mov dword [0x14005f494], eax
cmp rdx, 0xf
jbe 0x14000d190
mov rcx, qword [rbp + 0x700]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000d18b
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000e912
call fcn.14001dd34
movdqa xmm6, xmmword [str.6_Q7_rq.f]
movdqu xmmword [rbp + 0x710], xmm7
mov byte [rbp + 0x700], sil
movdqa xmm7, xmmword [0x140050e30]
nop
xor eax, eax
mov dword [rbp + 0x4c], 0x434b7447
xorps xmm0, xmm0
mov dword [rbp + 0x65], eax
movups xmmword [rbp + 0x55], xmm0
mov byte [rbp + 0x69], al
mov edx, esi
mov dword [rbp + 0x50], 0x55273975
mov ecx, esi
mov byte [rbp + 0x54], 0x78
nop word [rax + rax]
cdqe
movsxd rcx, ecx
movzx eax, byte [rax + r12]
xor byte [rbp + rcx + 0x4c], al
lea eax, [rdx + 1]
mov edx, eax
mov ecx, eax
cmp eax, 9
jb 0x14000d1e0
xorps xmm0, xmm0
mov dword [0x14005eb78], eax
movups xmmword [rbp + 0x500], xmm0
mov byte [rbp + 0x55], sil
lea rax, [rbp + 0x4c]
mov qword [rbp + 0x510], rsi
mov r8, r14
mov qword [rbp + 0x518], rsi
inc r8
cmp byte [rax + r8], sil
jne 0x14000d223
lea rdx, [rbp + 0x4c]
lea rcx, [rbp + 0x500]
call fcn.14001b810
cmp qword [rbp + 0x518], 0xf
lea rcx, [rbp + 0x500]
cmova rcx, qword [rbp + 0x500]
call fcn.14002cf8c
mov eax, dword [0x14005f43c]
xor edx, edx
cvttsd2si ecx, xmm0
div ecx
mov ecx, dword [0x14005f494]
mov rdx, qword [rbp + 0x518]
cmp ecx, eax
setb bl
cmp rdx, 0xf
jbe 0x14000d2b8
mov rcx, qword [rbp + 0x500]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000d2ad
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000e912
call fcn.14001dd34
mov ecx, dword [0x14005f494]
mov qword [rbp + 0x510], rsi
xorps xmm0, xmm0
mov qword [rbp + 0x518], 0xf
mov edx, esi
mov byte [rbp + 0x500], sil
test bl, bl
je 0x14000e828
mov eax, ecx
mov ecx, esi
mov dword [rbp + 0x6a], 0x41437443
mov dword [rbp + 0x6e], 0x50233b72
mov byte [rbp + 0x72], 0x78
mov eax, dword [r15 + rax*4]
mov dword [0x14005f3f8], eax
xor eax, eax
mov dword [rbp + 0x83], eax
or r13d, 1
mov byte [rbp + 0x87], al
movups xmmword [rbp + 0x73], xmm0
nop dword [rax]
nop dword [rax + rax]
cdqe
movsxd rcx, ecx
movzx eax, byte [rax + r12]
xor byte [rbp + rcx + 0x6a], al
lea eax, [rdx + 1]
mov edx, eax
mov ecx, eax
cmp eax, 9
jb 0x14000d320
xorps xmm0, xmm0
mov dword [0x14005eb78], eax
movups xmmword [rbp + 0x520], xmm0
mov byte [rbp + 0x73], sil
lea rax, [rbp + 0x6a]
mov qword [rbp + 0x530], rsi
mov r8, r14
mov qword [rbp + 0x538], rsi
inc r8
cmp byte [rax + r8], sil
jne 0x14000d363
lea rdx, [rbp + 0x6a]
lea rcx, [rbp + 0x520]
call fcn.14001b810
cmp qword [rbp + 0x538], 0xf
lea rcx, [rbp + 0x520]
cmova rcx, qword [rbp + 0x520]
call fcn.14002cf8c
mov r15d, dword [0x14005f3f8]
cvttsd2si eax, xmm0
cmp r15d, eax
jbe 0x14000d3b5
cmp r15d, dword [0x14005f528]
je 0x14000d3b5
mov bl, 1
jmp 0x14000d3b7
xor bl, bl
mov rdx, qword [rbp + 0x538]
and r13d, 0xfffffffe
cmp rdx, 0xf
jbe 0x14000d403
mov rcx, qword [rbp + 0x520]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000d3f7
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000e912
call fcn.14001dd34
mov r15d, dword [0x14005f3f8]
mov qword [rbp + 0x530], rsi
mov qword [rbp + 0x538], 0xf
mov byte [rbp + 0x520], sil
test bl, bl
je 0x14000e6e2
xor eax, eax
mov dword [rbp + 0x88], 0x41437443
xorps xmm0, xmm0
mov dword [rbp + 0xa1], eax
movups xmmword [rbp + 0x91], xmm0
mov byte [rbp + 0xa5], al
mov edx, esi
mov dword [rbp + 0x8c], 0x50233b72
mov ecx, esi
mov byte [rbp + 0x90], 0x78
nop dword [rax + rax]
cdqe
movsxd rcx, ecx
movzx eax, byte [rax + r12]
xor byte [rbp + rcx + 0x88], al
lea eax, [rdx + 1]
mov edx, eax
mov ecx, eax
cmp eax, 9
jb 0x14000d460
xorps xmm0, xmm0
mov dword [0x14005eb78], eax
movups xmmword [rbp + 0x350], xmm0
mov byte [rbp + 0x91], sil
lea rax, [rbp + 0x88]
mov qword [rbp + 0x360], rsi
mov r8, r14
mov qword [rbp + 0x368], rsi
nop dword [rax]
inc r8
cmp byte [rax + r8], sil
jne 0x14000d4b0
lea rdx, [rbp + 0x88]
lea rcx, [rbp + 0x350]
call fcn.14001b810
cmp qword [rbp + 0x368], 0xf
lea rcx, [rbp + 0x350]
cmova rcx, qword [rbp + 0x350]
call fcn.14002cf8c
cvttsd2si r12d, xmm0
mov dword [rbp + 0x2a7], 0x405c6a42
xor eax, eax
mov dword [rbp + 0x2ab], 0x5f263773
mov edx, esi
mov word [rbp + 0x2af], 0x433c
mov ecx, esi
mov byte [rbp + 0x2b1], 0x2c
lea rbx, str.sZrrA
mov word [rbp + 0x2d2], ax
xorps xmm0, xmm0
movups xmmword [rbp + 0x2b2], xmm0
movups xmmword [rbp + 0x2c2], xmm0
nop word [rax + rax]
cdqe
movsxd rcx, ecx
movzx eax, byte [rax + rbx]
xor byte [rbp + rcx + 0x2a7], al
lea eax, [rdx + 1]
mov edx, eax
mov ecx, eax
cmp eax, 0xb
jb 0x14000d540
xorps xmm0, xmm0
mov dword [0x14005f384], eax
movups xmmword [rbp + 0x330], xmm0
mov byte [rbp + 0x2b2], sil
lea rax, [rbp + 0x2a7]
mov qword [rbp + 0x340], rsi
mov r8, r14
mov qword [rbp + 0x348], rsi
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], sil
jne 0x14000d590
lea rdx, [rbp + 0x2a7]
lea rcx, [rbp + 0x330]
call fcn.14001b810
cmp qword [rbp + 0x348], 0xf
lea rcx, [rbp + 0x330]
cmova rcx, qword [rbp + 0x330]
call fcn.14002cf8c
cvttsd2si edi, xmm0
mov dword [rbp + 0x1a8], 0x44417443
xor eax, eax
mov word [rbp + 0x1ac], 0x3c71
mov edx, esi
mov word [rbp + 0x1be], ax
mov ecx, esi
xorps xmm0, xmm0
movups xmmword [rbp + 0x1ae], xmm0
nop word [rax + rax]
cdqe
movsxd rcx, ecx
movzx eax, byte [rax + rbx]
xor byte [rbp + rcx + 0x1a8], al
lea eax, [rdx + 1]
mov edx, eax
mov ecx, eax
cmp eax, 6
jb 0x14000d600
xorps xmm0, xmm0
mov dword [0x14005f388], eax
movups xmmword [rbp + 0x560], xmm0
mov byte [rbp + 0x1ae], sil
lea rax, [rbp + 0x1a8]
mov qword [rbp + 0x570], rsi
mov r8, r14
mov qword [rbp + 0x578], rsi
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], sil
jne 0x14000d650
lea rdx, [rbp + 0x1a8]
lea rcx, [rbp + 0x560]
call fcn.14001b810
cmp qword [rbp + 0x578], 0xf
lea rcx, [rbp + 0x560]
cmova rcx, qword [rbp + 0x560]
call fcn.1400291d8
xorps xmm0, xmm0
lea r14, str.sZrrA
mov rbx, rax
mov edx, esi
xor eax, eax
mov r8d, esi
mov dword [rbp + 0x900], eax
mov ecx, esi
movdqu xmmword [rbp + 0x8d0], xmm7
movups xmmword [rbp + 0x8e0], xmm0
movups xmmword [rbp + 0x8f0], xmm0
nop word [rax + rax]
movsxd rax, edx
lea edx, [r8 + 1]
movsxd rcx, ecx
mov r8d, edx
movzx eax, byte [rax + r14]
xor byte [rbp + rcx + 0x8d0], al
mov ecx, edx
cmp edx, 0x10
jb 0x14000d6c0
mov r14, 0xffffffffffffffff
mov dword [0x14005e2f0], edx
xorps xmm0, xmm0
mov byte [rbp + 0x8e0], sil
movups xmmword [rbp + 0x540], xmm0
mov r8, r14
mov qword [rbp + 0x550], rsi
mov qword [rbp + 0x558], rsi
lea rax, [rbp + 0x8d0]
inc r8
cmp byte [rax + r8], sil
jne 0x14000d716
lea rdx, [rbp + 0x8d0]
lea rcx, [rbp + 0x540]
call fcn.14001b810
cmp qword [rbp + 0x558], 0xf
lea rcx, [rbp + 0x540]
mov r8d, edi
mov rdx, rbx
cmova rcx, qword [rbp + 0x540]
call fcn.140028cf0
mov r8d, r15d
mov edx, r12d
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rdx, qword [rbp + 0x558]
mov qword [0x14005f670], rax
cmp rdx, 0xf
jbe 0x14000d7aa
mov rcx, qword [rbp + 0x540]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000d7a5
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000e912
call fcn.14001dd34
mov rdx, qword [rbp + 0x578]
mov qword [rbp + 0x550], rsi
mov qword [rbp + 0x558], 0xf
mov byte [rbp + 0x540], sil
cmp rdx, 0xf
jbe 0x14000d804
mov rcx, qword [rbp + 0x560]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000d7ff
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000e912
call fcn.14001dd34
mov rdx, qword [rbp + 0x348]
mov qword [rbp + 0x570], rsi
mov qword [rbp + 0x578], 0xf
mov byte [rbp + 0x560], sil
cmp rdx, 0xf
jbe 0x14000d85e
mov rcx, qword [rbp + 0x330]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000d859
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000e912
call fcn.14001dd34
mov rdx, qword [rbp + 0x368]
mov qword [rbp + 0x340], rsi
mov qword [rbp + 0x348], 0xf
mov byte [rbp + 0x330], sil
cmp rdx, 0xf
jbe 0x14000d8b8
mov rcx, qword [rbp + 0x350]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000d8b3
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000e912
call fcn.14001dd34
cmp qword [0x14005f670], rsi
mov qword [rbp + 0x360], rsi
mov qword [rbp + 0x368], 0xf
mov byte [rbp + 0x350], sil
je 0x14000e6db
xorps xmm0, xmm0
mov dword [rbp + 0x2d4], 0x405c6a42
xor eax, eax
mov dword [rbp + 0x2d8], 0x5f263773
movups xmmword [rbp + 0x2df], xmm0
mov word [rbp + 0x2ff], ax
mov edx, esi
movups xmmword [rbp + 0x2ef], xmm0
mov word [rbp + 0x2dc], 0x433c
lea rdi, str.sZrrA
mov byte [rbp + 0x2de], 0x2c
mov ecx, esi
nop word [rax + rax]
cdqe
movsxd rcx, ecx
movzx eax, byte [rax + rdi]
xor byte [rbp + rcx + 0x2d4], al
lea eax, [rdx + 1]
mov edx, eax
mov ecx, eax
cmp eax, 0xb
jb 0x14000d930
xorps xmm0, xmm0
mov dword [0x14005f384], eax
movups xmmword [rbp + 0x3d0], xmm0
mov byte [rbp + 0x2df], sil
lea rax, [rbp + 0x2d4]
mov qword [rbp + 0x3e0], rsi
mov r8, r14
mov qword [rbp + 0x3e8], rsi
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], sil
jne 0x14000d980
lea rdx, [rbp + 0x2d4]
lea rcx, [rbp + 0x3d0]
call fcn.14001b810
cmp qword [rbp + 0x3e8], 0xf
lea rcx, [rbp + 0x3d0]
cmova rcx, qword [rbp + 0x3d0]
call fcn.14002cf8c
cvttsd2si r12d, xmm0
mov dword [rbp + 0x1c0], 0x44417443
xor eax, eax
mov word [rbp + 0x1c4], 0x3c71
mov edx, esi
mov word [rbp + 0x1d6], ax
mov ecx, esi
xorps xmm0, xmm0
movups xmmword [rbp + 0x1c6], xmm0
nop word [rax + rax]
cdqe
movsxd rcx, ecx
movzx eax, byte [rax + rdi]
xor byte [rbp + rcx + 0x1c0], al
lea eax, [rdx + 1]
mov edx, eax
mov ecx, eax
cmp eax, 6
jb 0x14000d9f0
xorps xmm0, xmm0
mov dword [0x14005f388], eax
movups xmmword [rbp + 0x3b0], xmm0
mov byte [rbp + 0x1c6], sil
lea rax, [rbp + 0x1c0]
mov qword [rbp + 0x3c0], rsi
mov r8, r14
mov qword [rbp + 0x3c8], rsi
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], sil
jne 0x14000da40
lea rdx, [rbp + 0x1c0]
lea rcx, [rbp + 0x3b0]
call fcn.14001b810
cmp qword [rbp + 0x3c8], 0xf
lea rcx, [rbp + 0x3b0]
cmova rcx, qword [rbp + 0x3b0]
call fcn.1400291d8
xorps xmm0, xmm0
mov dword [rbp + 0x7c0], 0x4a466a41
mov r15, rax
mov dword [rbp + 0x7c4], 0x522b3e6f
xor eax, eax
mov word [rbp + 0x7c8], 0x2438
mov dword [rbp + 0x80a], eax
mov edx, esi
mov byte [rbp + 0x80e], al
mov ecx, esi
movups xmmword [rbp + 0x7ca], xmm0
movups xmmword [rbp + 0x7da], xmm0
movups xmmword [rbp + 0x7ea], xmm0
movups xmmword [rbp + 0x7fa], xmm0
nop dword [rax]
cdqe
movsxd rcx, ecx
movzx eax, byte [rax + rdi]
xor byte [rbp + rcx + 0x7c0], al
lea eax, [rdx + 1]
mov edx, eax
mov ecx, eax
cmp eax, 0xa
jb 0x14000dad0
xorps xmm0, xmm0
mov dword [0x14005e2f8], eax
movups xmmword [rbp + 0x390], xmm0
mov byte [rbp + 0x7ca], sil
lea rax, [rbp + 0x7c0]
mov qword [rbp + 0x3a0], rsi
mov r8, r14
mov qword [rbp + 0x3a8], rsi
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], sil
jne 0x14000db20
lea rdx, [rbp + 0x7c0]
lea rcx, [rbp + 0x390]
call fcn.14001b810
cmp qword [rbp + 0x3a8], 0xf
lea rbx, [rbp + 0x390]
xorps xmm0, xmm0
mov dword [rbp + 0xa6], 0x41437443
cmova rbx, qword [rbp + 0x390]
mov edx, esi
xor eax, eax
mov dword [rbp + 0xaa], 0x50233b72
mov dword [rbp + 0xbf], eax
mov ecx, esi
mov byte [rbp + 0xc3], al
mov byte [rbp + 0xae], 0x78
movups xmmword [rbp + 0xaf], xmm0
nop word [rax + rax]
cdqe
movsxd rcx, ecx
movzx eax, byte [rax + rdi]
xor byte [rbp + rcx + 0xa6], al
lea eax, [rdx + 1]
mov edx, eax
mov ecx, eax
cmp eax, 9
jb 0x14000db90
xorps xmm0, xmm0
mov dword [0x14005eb78], eax
movups xmmword [rbp + 0x370], xmm0
mov byte [rbp + 0xaf], sil
lea rax, [rbp + 0xa6]
mov qword [rbp + 0x380], rsi
mov r8, r14
mov qword [rbp + 0x388], rsi
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], sil
jne 0x14000dbe0
lea rdx, [rbp + 0xa6]
lea rcx, [rbp + 0x370]
call fcn.14001b810
cmp qword [rbp + 0x388], 0xf
lea rdi, [rbp + 0x370]
mov r8d, r12d
mov rdx, r15
cmova rdi, qword [rbp + 0x370]
mov rcx, rbx
call fcn.140028c3c
mov rcx, rdi
mov rbx, rax
call fcn.14002cf8c
cvttsd2si edx, xmm0
mov r8, rbx
lea rcx, [0x14005e360]
call fcn.140043430
mov rdx, qword [rbp + 0x388]
cmp rdx, 0xf
jbe 0x14000dc80
mov rcx, qword [rbp + 0x370]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000dc7b
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000e912
call fcn.14001dd34
mov rdx, qword [rbp + 0x3a8]
mov qword [rbp + 0x380], rsi
mov qword [rbp + 0x388], 0xf
mov byte [rbp + 0x370], sil
cmp rdx, 0xf
jbe 0x14000dcda
mov rcx, qword [rbp + 0x390]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000dcd5
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000e912
call fcn.14001dd34
mov rdx, qword [rbp + 0x3c8]
mov qword [rbp + 0x3a0], rsi
mov qword [rbp + 0x3a8], 0xf
mov byte [rbp + 0x390], sil
cmp rdx, 0xf
jbe 0x14000dd34
mov rcx, qword [rbp + 0x3b0]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000dd2f
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000e912
call fcn.14001dd34
mov rdx, qword [rbp + 0x3e8]
mov qword [rbp + 0x3c0], rsi
mov qword [rbp + 0x3c8], 0xf
mov byte [rbp + 0x3b0], sil
cmp rdx, 0xf
jbe 0x14000dd8e
mov rcx, qword [rbp + 0x3d0]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000dd89
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000e912
call fcn.14001dd34
xorps xmm0, xmm0
mov qword [rbp + 0x3e0], rsi
xor eax, eax
mov qword [rbp + 0x3e8], 0xf
movups xmmword [rbp + 0x30c], xmm0
mov word [rbp + 0x32c], ax
mov edx, esi
movups xmmword [rbp + 0x31c], xmm0
mov byte [rbp + 0x3d0], sil
lea r15, str.sZrrA
mov dword [rbp + 0x301], 0x405c6a42
mov ecx, esi
mov dword [rbp + 0x305], 0x5f263773
mov word [rbp + 0x309], 0x433c
mov byte [rbp + 0x30b], 0x2c
cdqe
movsxd rcx, ecx
movzx eax, byte [rax + r15]
xor byte [rbp + rcx + 0x301], al
lea eax, [rdx + 1]
mov edx, eax
mov ecx, eax
cmp eax, 0xb
jb 0x14000ddf0
xorps xmm0, xmm0
mov dword [0x14005f384], eax
movups xmmword [rbp + 0x470], xmm0
mov byte [rbp + 0x30c], sil
lea rax, [rbp + 0x301]
mov qword [rbp + 0x480], rsi
mov r8, r14
mov qword [rbp + 0x488], rsi
nop dword [rax]
inc r8
cmp byte [rax + r8], sil
jne 0x14000de40
lea rdx, [rbp + 0x301]
lea rcx, [rbp + 0x470]
call fcn.14001b810
cmp qword [rbp + 0x488], 0xf
lea rcx, [rbp + 0x470]
cmova rcx, qword [rbp + 0x470]
call fcn.14002cf8c
cvttsd2si edi, xmm0
mov dword [rbp + 0x1d8], 0x44417443
xor eax, eax
mov word [rbp + 0x1dc], 0x3c71
mov edx, esi
mov word [rbp + 0x1ee], ax
mov ecx, esi
xorps xmm0, xmm0
movups xmmword [rbp + 0x1de], xmm0
cdqe
movsxd rcx, ecx
movzx eax, byte [rax + r15]
xor byte [rbp + rcx + 0x1d8], al
lea eax, [rdx + 1]
mov edx, eax
mov ecx, eax
cmp eax, 6
jb 0x14000dea6
xorps xmm0, xmm0
mov dword [0x14005f388], eax
movups xmmword [rbp + 0x450], xmm0
mov byte [rbp + 0x1de], sil
lea rax, [rbp + 0x1d8]
mov qword [rbp + 0x460], rsi
mov r8, r14
mov qword [rbp + 0x468], rsi
inc r8
cmp byte [rax + r8], sil
jne 0x14000def2
lea rdx, [rbp + 0x1d8]
lea rcx, [rbp + 0x450]
call fcn.14001b810
cmp qword [rbp + 0x468], 0xf
lea rcx, [rbp + 0x450]
cmova rcx, qword [rbp + 0x450]
call fcn.1400291d8
mov rbx, rax
mov dword [rbp + 0x238], 0x41406a42
mov edx, esi
mov byte [rbp + 0x23c], WSAStartup
mov r8d, esi
mov ecx, esi
movdqu xmmword [rbp + 0x23d], xmm6
nop dword [rax]
movsxd rax, edx
lea edx, [r8 + 1]
movsxd rcx, ecx
mov r8d, edx
movzx eax, byte [rax + r15]
xor byte [rbp + rcx + 0x238], al
mov ecx, edx
cmp edx, 0xe
jb 0x14000df50
xorps xmm0, xmm0
mov dword [0x14005d870], edx
movups xmmword [rbp + 0x430], xmm0
mov byte [rbp + 0x246], sil
lea rax, [rbp + 0x238]
mov qword [rbp + 0x440], rsi
mov r8, r14
mov qword [rbp + 0x448], rsi
nop
inc r8
cmp byte [rax + r8], sil
jne 0x14000dfa0
lea rdx, [rbp + 0x238]
lea rcx, [rbp + 0x430]
call fcn.14001b810
cmp qword [rbp + 0x448], 0xf
lea rcx, [rbp + 0x430]
mov r8d, edi
mov rdx, rbx
cmova rcx, qword [rbp + 0x430]
call fcn.140028c3c
mov r12, rax
mov dword [rbp + 0x1f0], 0x44417443
xor eax, eax
mov word [rbp + 0x1f4], 0x3c71
xorps xmm0, xmm0
mov word [rbp + 0x206], ax
movups xmmword [rbp + 0x1f6], xmm0
mov edx, esi
mov r8d, esi
mov ecx, esi
nop
movsxd rax, edx
lea edx, [r8 + 1]
movsxd rcx, ecx
mov r8d, edx
movzx eax, byte [rax + r15]
xor byte [rbp + rcx + 0x1f0], al
mov ecx, edx
cmp edx, 6
jb 0x14000e010
xorps xmm0, xmm0
mov dword [0x14005f388], edx
movups xmmword [rbp + 0x410], xmm0
mov byte [rbp + 0x1f6], sil
lea rax, [rbp + 0x1f0]
mov qword [rbp + 0x420], rsi
mov r8, r14
mov qword [rbp + 0x428], rsi
nop
inc r8
cmp byte [rax + r8], sil
jne 0x14000e060
lea rdx, [rbp + 0x1f0]
lea rcx, [rbp + 0x410]
call fcn.14001b810
cmp qword [rbp + 0x428], 0xf
lea rcx, [rbp + 0x410]
cmova rcx, qword [rbp + 0x410]
call fcn.1400291d8
mov r15, qword [0x14005f670]
lea r8, str.sZrrA
mov rdi, rax
mov dword [rbp + 0xc4], 0x41437443
xor eax, eax
mov dword [rbp + 0xc8], 0x50233b72
xorps xmm0, xmm0
mov dword [rbp + 0xdd], eax
mov byte [rbp + 0xe1], al
mov edx, esi
mov byte [rbp + 0xcc], 0x78
mov ecx, esi
movups xmmword [rbp + 0xcd], xmm0
cdqe
movsxd rcx, ecx
movzx eax, byte [rax + r8]
xor byte [rbp + rcx + 0xc4], al
lea eax, [rdx + 1]
mov edx, eax
mov ecx, eax
cmp eax, 9
jb 0x14000e0e0
xorps xmm0, xmm0
mov dword [0x14005eb78], eax
movups xmmword [rbp + 0x3f0], xmm0
mov byte [rbp + 0xcd], sil
lea rax, [rbp + 0xc4]
mov qword [rbp + 0x400], rsi
mov r8, r14
mov qword [rbp + 0x408], rsi
nop dword [rax]
inc r8
cmp byte [rax + r8], sil
jne 0x14000e130
lea rdx, [rbp + 0xc4]
lea rcx, [rbp + 0x3f0]
call fcn.14001b810
cmp qword [rbp + 0x408], 0xf
lea rbx, [rbp + 0x3f0]
mov r9d, r12d
lea r8, [0x14005e360]
cmova rbx, qword [rbp + 0x3f0]
mov rdx, rdi
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_K32GetModuleFileNameExW]
mov rcx, rbx
mov edi, eax
call fcn.14002cf8c
mov rdx, qword [rbp + 0x408]
cvttsd2si ebx, xmm0
cmp rdx, 0xf
jbe 0x14000e1c8
mov rcx, qword [rbp + 0x3f0]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000e1c3
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000e912
call fcn.14001dd34
mov rdx, qword [rbp + 0x428]
mov qword [rbp + 0x400], rsi
mov qword [rbp + 0x408], 0xf
mov byte [rbp + 0x3f0], sil
cmp rdx, 0xf
jbe 0x14000e222
mov rcx, qword [rbp + 0x410]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000e21d
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000e912
call fcn.14001dd34
mov rdx, qword [rbp + 0x448]
mov qword [rbp + 0x420], rsi
mov qword [rbp + 0x428], 0xf
mov byte [rbp + 0x410], sil
cmp rdx, 0xf
jbe 0x14000e27c
mov rcx, qword [rbp + 0x430]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000e277
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000e912
call fcn.14001dd34
mov rdx, qword [rbp + 0x468]
mov qword [rbp + 0x440], rsi
mov qword [rbp + 0x448], 0xf
mov byte [rbp + 0x430], sil
cmp rdx, 0xf
jbe 0x14000e2d6
mov rcx, qword [rbp + 0x450]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000e2d1
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000e912
call fcn.14001dd34
mov rdx, qword [rbp + 0x488]
mov qword [rbp + 0x460], rsi
mov qword [rbp + 0x468], 0xf
mov byte [rbp + 0x450], sil
cmp rdx, 0xf
jbe 0x14000e330
mov rcx, qword [rbp + 0x470]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000e32b
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000e912
call fcn.14001dd34
mov rcx, qword [0x14005f670]
mov qword [rbp + 0x480], rsi
mov qword [rbp + 0x488], 0xf
mov byte [rbp + 0x470], sil
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor eax, eax
lea r12, str.sZrrA
xorps xmm0, xmm0
mov edx, esi
mov ecx, esi
cmp edi, ebx
jbe 0x14000e5ca
mov dword [rbp + 0x208], 0x44417443
mov word [rbp + 0x20c], 0x3c71
movups xmmword [rbp + 0x20e], xmm0
mov word [rbp + 0x21e], ax
nop
cdqe
movsxd rcx, ecx
movzx eax, byte [rax + r12]
xor byte [rbp + rcx + 0x208], al
lea eax, [rdx + 1]
mov edx, eax
mov ecx, eax
cmp eax, 6
jb 0x14000e390
xorps xmm0, xmm0
mov dword [0x14005f388], eax
movups xmmword [rbp + 0x490], xmm0
mov byte [rbp + 0x20e], sil
lea rax, [rbp + 0x208]
mov qword [rbp + 0x4a0], rsi
mov r8, r14
mov qword [rbp + 0x4a8], rsi
nop dword [rax]
inc r8
cmp byte [rax + r8], sil
jne 0x14000e3e0
lea rdx, [rbp + 0x208]
lea rcx, [rbp + 0x490]
call fcn.14001b810
cmp qword [rbp + 0x4a8], 0xf
lea rcx, [rbp + 0x490]
cmova rcx, qword [rbp + 0x490]
call fcn.1400291d8
mov rdx, qword [rbp + 0x4a8]
mov qword [0x14005f670], rax
cmp rdx, 0xf
jbe 0x14000e460
mov rcx, qword [rbp + 0x490]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000e45b
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000e912
call fcn.14001dd34
lea rdx, [0x14005e360]
mov qword [rbp + 0x4a0], rsi
lea rcx, [rbp + 0xaa8]
mov qword [rbp + 0x4a8], 0xf
mov byte [rbp + 0x490], sil
call fcn.140018f90
mov rdx, rax
lea rcx, [rbp + 0x8b0]
call fcn.140002260
lea rdi, [0x140056d40]
mov rbx, rax
cmp rdi, rax
je 0x14000e531
mov rdx, qword [reloc.OLEAUT32.dll_VariantInit]
cmp rdx, 7
jbe 0x14000e4f4
mov rcx, qword [0x140056d40]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000e4ef
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000e912
call fcn.14001dd34
mov qword [0x140056d50], rsi
mov qword [reloc.OLEAUT32.dll_VariantInit], 7
mov word [0x140056d40], si
movups xmm0, xmmword [rbx]
movups xmmword [0x140056d40], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [0x140056d50], xmm1
mov qword [rbx + 0x10], rsi
mov qword [rbx + 0x18], 7
mov word [rbx], si
mov rdx, qword [rbp + 0x8c8]
cmp rdx, 7
jbe 0x14000e577
mov rcx, qword [rbp + 0x8b0]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000e572
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000e912
call fcn.14001dd34
cmp qword [reloc.OLEAUT32.dll_VariantInit], 7
mov rcx, rdi
mov rdx, qword [0x14005f650]
cmova rcx, qword [0x140056d40]
mov qword [0x14005f3c0], rcx
mov qword [rbp + 0x8c0], rsi
mov qword [rbp + 0x8c8], 7
mov word [rbp + 0x8b0], si
call qword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
jne 0x14000e6e2
mov eax, dword [0x14005f3f8]
jmp 0x14000c2df
mov dword [rbp + 0x220], 0x44417443
mov word [rbp + 0x224], 0x3c71
movups xmmword [rbp + 0x226], xmm0
mov word [rbp + 0x236], ax
nop dword [rax + rax]
cdqe
movsxd rcx, ecx
movzx eax, byte [rax + r12]
xor byte [rbp + rcx + 0x220], al
lea eax, [rdx + 1]
mov edx, eax
mov ecx, eax
cmp eax, 6
jb 0x14000e5f0
xorps xmm0, xmm0
mov dword [0x14005f388], eax
movups xmmword [rbp + 0x4b0], xmm0
mov byte [rbp + 0x226], sil
lea rax, [rbp + 0x220]
mov qword [rbp + 0x4c0], rsi
mov r8, r14
mov qword [rbp + 0x4c8], rsi
nop dword [rax]
inc r8
cmp byte [rax + r8], sil
jne 0x14000e640
lea rdx, [rbp + 0x220]
lea rcx, [rbp + 0x4b0]
call fcn.14001b810
cmp qword [rbp + 0x4c8], 0xf
lea rcx, [rbp + 0x4b0]
cmova rcx, qword [rbp + 0x4b0]
call fcn.1400291d8
mov rdx, qword [rbp + 0x4c8]
mov qword [0x14005f670], rax
cmp rdx, 0xf
jbe 0x14000e6c0
mov rcx, qword [rbp + 0x4b0]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000e6bb
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000e912
call fcn.14001dd34
mov qword [rbp + 0x4c0], rsi
mov qword [rbp + 0x4c8], 0xf
mov byte [rbp + 0x4b0], sil
jmp 0x14000e6e2
lea r12, str.sZrrA
xorps xmm0, xmm0
mov word [rbp + 0x928], 0x7442
xor eax, eax
mov byte [rbp + 0x92a], 0x47
movups xmmword [rbp + 0x92b], xmm0
mov word [rbp + 0x99b], ax
mov edx, esi
movups xmmword [rbp + 0x93b], xmm0
mov ecx, esi
movups xmmword [rbp + 0x94b], xmm0
movups xmmword [rbp + 0x95b], xmm0
movups xmmword [rbp + 0x96b], xmm0
movups xmmword [rbp + 0x97b], xmm0
movups xmmword [rbp + 0x98b], xmm0
cdqe
movsxd rcx, ecx
movzx eax, byte [rax + r12]
xor byte [rbp + rcx + 0x928], al
lea eax, [rdx + 1]
mov edx, eax
mov ecx, eax
cmp eax, 3
jb 0x14000e733
xorps xmm0, xmm0
mov dword [0x14005e350], eax
movups xmmword [rbp + 0x4d0], xmm0
mov byte [rbp + 0x92b], sil
lea rax, [rbp + 0x928]
mov qword [rbp + 0x4e0], rsi
mov r8, r14
mov qword [rbp + 0x4e8], rsi
nop
inc r8
cmp byte [rax + r8], sil
jne 0x14000e780
lea rdx, [rbp + 0x928]
lea rcx, [rbp + 0x4d0]
call fcn.14001b810
cmp qword [rbp + 0x4e8], 0xf
lea rcx, [rbp + 0x4d0]
cmova rcx, qword [rbp + 0x4d0]
call fcn.14002cf8c
mov rdx, qword [rbp + 0x4e8]
cvttsd2si eax, xmm0
add dword [0x14005f494], eax
cmp rdx, 0xf
jbe 0x14000e803
mov rcx, qword [rbp + 0x4d0]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000e7fe
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000e912
call fcn.14001dd34
mov qword [rbp + 0x4e0], rsi
lea r15, [0x140058850]
mov qword [rbp + 0x4e8], 0xf
mov byte [rbp + 0x4d0], sil
jmp 0x14000d1b0
xor eax, eax
mov dword [rbp - 0x4a], 0x41437443
mov dword [rbp - 0x31], eax
mov byte [rbp - 0x2d], al
mov dword [rbp - 0x46], 0x50233b72
mov byte [rbp - 0x42], 0x78
movups xmmword [rbp - 0x41], xmm0
nop word [rax + rax]
movsxd rcx, eax
movsxd rax, esi
movzx eax, byte [rbp + rax - 0x4a]
xor al, byte [rcx + r12]
inc edx
mov byte [rbp + rcx - 0x4a], al
mov esi, edx
mov eax, edx
cmp edx, 9
jb 0x14000e850
xorps xmm0, xmm0
mov dword [0x14005eb78], edx
xorps xmm1, xmm1
mov byte [rbp - 0x41], 0
movups xmmword [rbp + 0x890], xmm0
lea rax, [rbp - 0x4a]
movdqu xmmword [rbp + 0x8a0], xmm1
inc r14
cmp byte [rax + r14], 0
jne 0x14000e891
mov r8, r14
lea rdx, [rbp - 0x4a]
lea rcx, [rbp + 0x890]
call fcn.14001b810
cmp qword [rbp + 0x8a8], 0xf
lea rcx, [rbp + 0x890]
cmova rcx, qword [rbp + 0x890]
call fcn.14002cf8c
mov rdx, qword [rbp + 0x8a8]
cvttsd2si ebx, xmm0
cmp rdx, 0xf
jbe 0x14000c2dd
mov rcx, qword [rbp + 0x890]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000c2d8
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000c2d8
call fcn.140023db8
int3