Function at 0x140004230
Capabilities:
Authenticate hmac
Create process on windows
Encode data using xor
Generate random numbers using a mersenne twister
Query environment variable

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x14b0]
mov eax, 0x15b0
call fcn.14000a2d0
sub rsp, rax
movaps xmmword [rsp + 0x15a0], xmm6
movaps xmmword [rsp + 0x1590], xmm7
movaps xmmword [rsp + 0x1580], xmm8
movaps xmmword [rsp + 0x1570], xmm9
mov rax, qword [0x140010040]
xor rax, rsp
mov qword [rbp + 0x1460], rax
xor esi, esi
xorps xmm0, xmm0
movups xmmword [rbp + 0x70], xmm0
movdqa xmm1, xmmword [0x14000bb60]
movdqu xmmword [rbp + 0x80], xmm1
mov word [rbp + 0x70], si
movsd xmm0, qword [str.wtzvhizh_]
movsd qword [rsp + 0x20], xmm0
mov ecx, dword [0x14000b9f0]
mov dword [rsp + 0x28], ecx
movzx eax, byte [0x14000b9f4]
mov byte [rsp + 0x2c], al
mov r8d, esi
movdqa xmm9, xmmword [0x14000bbd0]
mov r12d, dword [0x140010010]
cmp r12d, 2
jl 0x14000442b
movdqa xmm4, xmmword [0x14000bbf0]
movdqa xmm5, xmmword [str.5555]
movdqa xmm6, xmmword [0x14000bbe0]
movdqa xmm2, xmmword [0x14000bb80]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
andps xmm2, xmm9
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm6
movd xmm0, dword [str.wtzvhizh_]
xorps xmm2, xmm0
movd dword [rsp + 0x20], xmm2
movdqa xmm2, xmmword [0x14000bb90]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
andps xmm2, xmm9
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm6
movd xmm0, dword [rsp + 0x24]
xorps xmm2, xmm0
movd dword [rsp + 0x24], xmm2
movdqa xmm3, xmmword [0x14000bba0]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm3, xmm0
andps xmm3, xmm9
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm6
movd xmm0, ecx
xorps xmm3, xmm0
movd dword [rsp + 0x28], xmm3
mov r8d, 0xc
mov eax, r8d
lea r9, [rsp + 0x20]
add r9, rax
nop word [rax + rax]
mov eax, 0x4d4873ed
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x35
movzx eax, r8b
sub al, cl
add al, 0x32
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0xd
jl 0x140004440
lea rcx, [rsp + 0x20]
call qword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll_getenv]
mov qword [rbp + 0x30], rax
mov rbx, 0xffffffffffffffff
mov rcx, rbx
nop dword [rax]
inc rcx
cmp byte [rax + rcx], 0
jne 0x140004490
mov qword [rbp + 0x38], rcx
call fcn.140008d08
movaps xmm0, xmmword [rbp + 0x30]
movdqa xmmword [rbp + 0x30], xmm0
lea r8, [rbp + 0x30]
mov edx, eax
lea rcx, [rbp - 0x80]
call fcn.140001a10
nop
lea rdx, [rbp - 0x80]
lea rcx, [rbp + 0x70]
call fcn.140001c80
nop
mov rdx, qword [rbp - 0x68]
cmp rdx, 7
jbe 0x14000450c
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004507
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140004507
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400098c8
mov eax, dword [str.fVYE6]
mov dword [rbp + 0x30], eax
movzx eax, byte [0x14000ba84]
mov byte [rbp + 0x30], 0x54
xor byte [rbp + 0x31], 0x33
xor byte [rbp + 0x32], 0x34
xor byte [rbp + 0x33], 0x35
xor al, 0x36
mov byte [rbp + 0x34], al
xorps xmm0, xmm0
movups xmmword [rbp + 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x60], xmm1
lea rax, [rbp + 0x30]
mov r8, rbx
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140004550
lea rdx, [rbp + 0x30]
lea rcx, [rbp + 0x50]
call fcn.140007f30
nop
lea rax, [rbp + 0x50]
cmp qword [rbp + 0x68], 0xf
cmova rax, qword [rbp + 0x50]
mov qword [rsp + 0x20], rax
mov rax, qword [rbp + 0x60]
mov qword [rsp + 0x28], rax
call fcn.140008d08
movaps xmm0, xmmword [rsp + 0x20]
movdqa xmmword [rsp + 0x20], xmm0
lea r8, [rsp + 0x20]
mov edx, eax
lea rcx, [rbp - 0x80]
call fcn.140001a10
nop
lea rdx, [rbp - 0x80]
lea rcx, [rbp + 0x70]
call fcn.140001c80
nop
mov rdx, qword [rbp - 0x68]
cmp rdx, 7
jbe 0x1400045f7
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400045f1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400045f1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400098c8
nop
mov rdx, qword [rbp + 0x68]
cmp rdx, 0xf
jbe 0x140004635
inc rdx
mov rcx, qword [rbp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004630
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140004630
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400098c8
movups xmm6, xmmword [0x14000b9c0]
movups xmmword [rsp + 0x20], xmm6
movzx eax, byte [0x14000b9d0]
mov byte [rsp + 0x30], al
mov r8d, esi
cmp r12d, 2
jl 0x140004807
movdqa xmm4, xmmword [0x14000bbf0]
movdqa xmm5, xmmword [str.5555]
movdqa xmm3, xmmword [0x14000bb80]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm3, xmm0
andps xmm3, xmm9
packuswb xmm3, xmm3
packuswb xmm3, xmm3
mov ecx, dword [0x14000bbe0]
movd xmm0, ecx
paddb xmm3, xmm0
movd eax, xmm6
movd xmm0, eax
xorps xmm3, xmm0
movd dword [rsp + 0x20], xmm3
movdqa xmm2, xmmword [0x14000bb90]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
andps xmm2, xmm9
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, ecx
paddb xmm2, xmm0
movd xmm1, dword [rsp + 0x24]
xorps xmm2, xmm1
movd dword [rsp + 0x24], xmm2
movdqa xmm3, xmmword [0x14000bba0]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm3, xmm0
andps xmm3, xmm9
packuswb xmm3, xmm3
packuswb xmm3, xmm3
movd xmm0, ecx
paddb xmm3, xmm0
movd xmm1, dword [rsp + 0x28]
xorps xmm3, xmm1
movd dword [rsp + 0x28], xmm3
movdqa xmm2, xmmword [0x14000bbb0]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
andps xmm2, xmm9
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, ecx
paddb xmm2, xmm0
movd xmm1, dword [rsp + 0x2c]
xorps xmm2, xmm1
movd dword [rsp + 0x2c], xmm2
mov r8d, 0x10
mov eax, r8d
lea r9, [rsp + 0x20]
add r9, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x4d4873ed
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x35
movzx eax, r8b
sub al, cl
add al, 0x32
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x11
jl 0x140004820
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x70], xmm1
lea rax, [rsp + 0x20]
mov r8, rbx
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140004870
lea rdx, [rsp + 0x20]
lea rcx, [rsp + 0x60]
call fcn.140007f30
lea rcx, [rsp + 0x60]
cmp qword [rsp + 0x78], 0xf
cmova rcx, qword [rsp + 0x60]
call qword [sym.imp.KERNEL32.dll_GlobalFindAtomA]
movzx edi, ax
mov rdx, qword [rsp + 0x78]
cmp rdx, 0xf
jbe 0x1400048e3
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400048de
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400048de
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400098c8
movdqa xmm6, xmmword [0x14000bb70]
test di, di
jne 0x140005657
movsd xmm0, qword [str.n_VDXk]
movsd qword [rsp + 0x20], xmm0
mov ecx, dword [str.IBO]
mov dword [rsp + 0x28], ecx
cmp byte [0x14000b8c3], dil
je 0x140004aa2
mov r8d, esi
cmp r12d, 2
jl 0x140004a6a
movdqa xmm4, xmmword [0x14000bbf0]
movdqa xmm5, xmmword [str.5555]
movdqa xmm3, xmmword [0x14000bb80]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm3, xmm0
andps xmm3, xmm9
packuswb xmm3, xmm3
packuswb xmm3, xmm3
mov eax, dword [0x14000bbe0]
movd xmm0, eax
paddb xmm3, xmm0
movd xmm0, dword [str.n_VDXk]
xorps xmm3, xmm0
movd dword [rsp + 0x20], xmm3
movdqa xmm2, xmmword [0x14000bb90]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
andps xmm2, xmm9
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rsp + 0x24]
xorps xmm2, xmm1
movd dword [rsp + 0x24], xmm2
movdqa xmm3, xmmword [0x14000bba0]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm3, xmm0
andps xmm3, xmm9
packuswb xmm3, xmm3
packuswb xmm3, xmm3
movd xmm0, eax
paddb xmm3, xmm0
movd xmm1, ecx
xorps xmm3, xmm1
movd dword [rsp + 0x28], xmm3
jmp 0x140004aa2
lea r9, [rsp + 0x20]
nop
mov eax, 0x3521cfb3
mul r8d
mov eax, r8d
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x35
movzx eax, r8b
sub al, cl
add al, 0x32
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0xc
jl 0x140004a70
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x70], xmm1
lea rax, [rsp + 0x20]
mov r8, rbx
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140004ac0
lea rdx, [rsp + 0x20]
lea rcx, [rsp + 0x60]
call fcn.140007f30
nop
lea rax, [rbp + 0x70]
cmp qword [rbp + 0x88], 7
cmova rax, qword [rbp + 0x70]
mov qword [rsp + 0x20], rax
mov rax, qword [rbp + 0x80]
mov qword [rsp + 0x28], rax
call fcn.140008d08
movaps xmm0, xmmword [rsp + 0x20]
movdqa xmmword [rsp + 0x20], xmm0
lea r8, [rsp + 0x20]
mov edx, eax
lea rcx, [rbp - 0x80]
call fcn.140007340
nop
lea r9, [rsp + 0x60]
lea r8, [rbp - 0x80]
lea rcx, [rbp + 0x50]
call fcn.140008810
nop
mov rdx, qword [rbp - 0x68]
cmp rdx, 0xf
jbe 0x140004b6e
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004b69
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140004b69
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400098c8
movdqu xmmword [rbp - 0x70], xmm6
mov byte [rbp - 0x80], 0
mov rdx, qword [rsp + 0x78]
cmp rdx, 0xf
jbe 0x140004bb7
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004bb2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140004bb2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400098c8
movsd xmm0, qword [str.nPYQ]
movsd qword [rsp + 0x20], xmm0
movzx eax, byte [0x14000b8d0]
mov byte [rsp + 0x20], 0x5c
xor byte [rsp + 0x21], 0x33
xor byte [rsp + 0x22], 0x34
xor byte [rsp + 0x23], 0x35
xor byte [rsp + 0x24], 0x36
xor byte [rsp + 0x25], 0x37
xor byte [rsp + 0x26], 0x38
xor byte [rsp + 0x27], 0x39
xor al, 0x3a
mov byte [rsp + 0x28], al
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x70], xmm1
lea rax, [rsp + 0x20]
mov r8, rbx
inc r8
cmp byte [rax + r8], 0
jne 0x140004c13
lea rdx, [rsp + 0x20]
lea rcx, [rsp + 0x60]
call fcn.140007f30
nop
lea rax, [rbp + 0x70]
cmp qword [rbp + 0x88], 7
cmova rax, qword [rbp + 0x70]
mov qword [rsp + 0x20], rax
mov rax, qword [rbp + 0x80]
mov qword [rsp + 0x28], rax
call fcn.140008d08
movaps xmm0, xmmword [rsp + 0x20]
movdqa xmmword [rsp + 0x20], xmm0
lea r8, [rsp + 0x20]
mov edx, eax
lea rcx, [rsp + 0x40]
call fcn.140007340
nop
lea r9, [rsp + 0x60]
lea r8, [rsp + 0x40]
lea rcx, [rbp + 0x90]
call fcn.140008810
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x140004cc8
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004cc3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140004cc3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400098c8
movdqu xmmword [rsp + 0x50], xmm6
mov byte [rsp + 0x40], 0
mov rdx, qword [rsp + 0x78]
cmp rdx, 0xf
jbe 0x140004d13
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004d0e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140004d0e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400098c8
lea rdx, [rbp + 0x50]
cmp qword [rbp + 0x68], 0xf
cmova rdx, qword [rbp + 0x50]
lea rcx, str._nLoadDrv__s
call fcn.140001020
lea rdx, [rbp + 0x90]
cmp qword [rbp + 0xa8], 0xf
cmova rdx, qword [rbp + 0x90]
lea rcx, str._nLoadCmd__s
call fcn.140001020
lea rcx, [rbp + 0x50]
cmp qword [rbp + 0x68], 0xf
cmova rcx, qword [rbp + 0x50]
mov qword [rsp + 0x20], rcx
mov rax, rbx
inc rax
cmp byte [rcx + rax], 0
jne 0x140004d66
mov qword [rsp + 0x28], rax
movaps xmm0, xmmword [rsp + 0x20]
movdqa xmmword [rsp + 0x20], xmm0
mov r8d, 0x3200
lea rdx, [0x140010180]
lea rcx, [rsp + 0x20]
call fcn.140002f10
lea rcx, [rbp + 0x90]
cmp qword [rbp + 0xa8], 0xf
cmova rcx, qword [rbp + 0x90]
mov qword [rsp + 0x20], rcx
mov rax, rbx
inc rax
cmp byte [rcx + rax], 0
jne 0x140004db5
mov qword [rsp + 0x28], rax
movaps xmm0, xmmword [rsp + 0x20]
movdqa xmmword [rsp + 0x20], xmm0
mov r8d, 0x34c000
lea rdx, [0x140013380]
lea rcx, [rsp + 0x20]
call fcn.140002f10
movzx eax, word [0x14000baa0]
mov word [rbp + 0x30], ax
cmp byte [0x14000baa1], 0
je 0x140004e01
mov byte [rbp + 0x30], 0x20
xor byte [rbp + 0x31], 0x33
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x70], xmm1
lea rax, [rbp + 0x30]
mov r8, rbx
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140004e20
lea rdx, [rbp + 0x30]
lea rcx, [rbp - 0x80]
call fcn.140007f30
nop
lea r8, [rbp + 0x90]
cmp qword [rbp + 0xa8], 0xf
cmova r8, qword [rbp + 0x90]
mov r9, qword [rbp + 0xa0]
lea rcx, [rbp - 0x80]
call fcn.140007180
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x70], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x60], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x70], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea rdx, [rbp + 0x50]
cmp qword [rbp + 0x68], 0xf
cmova rdx, qword [rbp + 0x50]
mov r8, qword [rbp + 0x60]
lea rcx, [rsp + 0x60]
call fcn.140007270
movups xmm8, xmmword [rax]
movups xmmword [rbp + 0xb0], xmm8
movups xmm7, xmmword [rax + 0x10]
movups xmmword [rbp + 0xc0], xmm7
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [rsp + 0x78]
cmp rdx, 0xf
jbe 0x140004f12
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004f0d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140004f0d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400098c8
movdqu xmmword [rsp + 0x70], xmm6
mov byte [rsp + 0x60], 0
mov rdx, qword [rbp - 0x68]
cmp rdx, 0xf
jbe 0x140004f5b
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004f56
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140004f56
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400098c8
movdqu xmmword [rbp - 0x70], xmm6
mov byte [rbp - 0x80], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], rsi
mov qword [rsp + 0x58], rsi
lea r15, [rbp + 0xb0]
movq r14, xmm8
movdqa xmm0, xmm7
psrldq xmm0, 8
movq r13, xmm0
cmp r13, 0xf
cmova r15, r14
movabs rdi, 0x7fffffffffffffff
movq rsi, xmm7
cmp rsi, rdi
ja 0x140005ce7
cmp rsi, 0xf
ja 0x140004fd2
mov qword [rsp + 0x50], rsi
mov qword [rsp + 0x58], 0xf
movups xmm0, xmmword [r15]
movups xmmword [rsp + 0x40], xmm0
jmp 0x140005068
mov rax, rsi
or rax, 0xf
cmp rax, rdi
jbe 0x14000500a
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.140009380
mov rcx, rax
test rax, rax
je 0x14000503e
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x14000504a
mov rdi, rax
mov ecx, 0x16
cmp rax, rcx
cmovb rdi, rcx
lea rcx, [rdi + 1]
test rcx, rcx
jne 0x140005026
xor eax, eax
jmp 0x14000504a
cmp rcx, 0x1000
jb 0x140005045
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140005ce1
jmp 0x140004fec
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140009380
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x50], rsi
mov qword [rsp + 0x58], rdi
lea r8, [rsi + 1]
mov rdx, r15
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
lea rax, [rsp + 0x40]
mov qword [rsp + 0x20], rax
mov r9d, 3
lea r8, [0x14000b840]
lea rcx, [rsp + 0x40]
call fcn.140007180
xorps xmm0, xmm0
movups xmmword [rbp - 0x40], xmm0
movups xmmword [rbp - 0x30], xmm0
movups xmmword [rbp - 0x20], xmm0
movups xmmword [rbp - 0x10], xmm0
movups xmmword [rbp], xmm0
movups xmmword [rbp + 0x10], xmm0
movups xmmword [rbp + 0x20], xmm0
mov dword [rbp - 0x40], 0x70
mov dword [rbp - 0x3c], 0x40
xor esi, esi
mov qword [rbp - 0x38], rsi
mov qword [rbp - 0x30], rsi
lea rax, str.cmd.exe
mov qword [rbp - 0x28], rax
lea rax, [rsp + 0x40]
cmp qword [rsp + 0x58], 0xf
cmova rax, qword [rsp + 0x40]
mov qword [rbp - 0x20], rax
mov qword [rbp - 0x18], rsi
mov dword [rbp - 0x10], esi
mov qword [rbp - 8], rsi
lea rcx, [rbp - 0x40]
call qword [sym.imp.SHELL32.dll_ShellExecuteExA]
test eax, eax
jne 0x140005108
mov edx, 0xffffffff
mov rcx, qword [rbp + 0x28]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
lea rdx, [rbp + 0x30]
mov rcx, qword [rbp + 0x28]
call qword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
mov rcx, qword [rbp + 0x28]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x140005161
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000515c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000515c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400098c8
mov ecx, 0xbb8
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [rbp + 0x50]
cmp qword [rbp + 0x68], 0xf
cmova rcx, qword [rbp + 0x50]
mov qword [rsp + 0x20], rcx
mov rax, rbx
inc rax
cmp byte [rcx + rax], 0
jne 0x140005182
mov qword [rsp + 0x28], rax
call fcn.140008d08
movaps xmm0, xmmword [rsp + 0x20]
movdqa xmmword [rsp + 0x20], xmm0
lea r8, [rsp + 0x20]
mov edx, eax
lea rcx, [rsp + 0x40]
call fcn.140001a10
nop
lea rcx, [rsp + 0x40]
cmp qword [rsp + 0x58], 7
cmova rcx, qword [rsp + 0x40]
call fcn.140008fc0
mov rdx, rax
shr rax, 0x20
test eax, eax
jne 0x140005ced
mov rdx, qword [rsp + 0x58]
cmp rdx, 7
jbe 0x14000521c
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005217
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140005217
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400098c8
lea rcx, [rbp + 0x90]
cmp qword [rbp + 0xa8], 0xf
cmova rcx, qword [rbp + 0x90]
mov qword [rsp + 0x20], rcx
mov rax, rbx
nop dword [rax + rax]
inc rax
cmp byte [rcx + rax], 0
jne 0x140005240
mov qword [rsp + 0x28], rax
call fcn.140008d08
movaps xmm0, xmmword [rsp + 0x20]
movdqa xmmword [rsp + 0x20], xmm0
lea r8, [rsp + 0x20]
mov edx, eax
lea rcx, [rsp + 0x40]
call fcn.140001a10
nop
lea rcx, [rsp + 0x40]
cmp qword [rsp + 0x58], 7
cmova rcx, qword [rsp + 0x40]
call fcn.140008fc0
mov rdx, rax
shr rax, 0x20
test eax, eax
jne 0x140005cfc
mov rdx, qword [rsp + 0x58]
cmp rdx, 7
jbe 0x1400052da
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400052d5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400052d5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400098c8
movups xmm7, xmmword [0x14000b9c0]
movups xmmword [rsp + 0x20], xmm7
movzx eax, byte [0x14000b9d0]
mov byte [rsp + 0x30], al
mov r8d, esi
cmp r12d, 2
jl 0x1400054ac
movdqa xmm4, xmmword [0x14000bbf0]
movdqa xmm5, xmmword [str.5555]
movdqa xmm3, xmmword [0x14000bb80]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm3, xmm0
andps xmm3, xmm9
packuswb xmm3, xmm3
packuswb xmm3, xmm3
mov ecx, dword [0x14000bbe0]
movd xmm0, ecx
paddb xmm3, xmm0
movd eax, xmm7
movd xmm0, eax
xorps xmm3, xmm0
movd dword [rsp + 0x20], xmm3
movdqa xmm2, xmmword [0x14000bb90]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
andps xmm2, xmm9
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, ecx
paddb xmm2, xmm0
movd xmm1, dword [rsp + 0x24]
xorps xmm2, xmm1
movd dword [rsp + 0x24], xmm2
movdqa xmm3, xmmword [0x14000bba0]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm3, xmm0
andps xmm3, xmm9
packuswb xmm3, xmm3
packuswb xmm3, xmm3
movd xmm0, ecx
paddb xmm3, xmm0
movd xmm1, dword [rsp + 0x28]
xorps xmm3, xmm1
movd dword [rsp + 0x28], xmm3
movdqa xmm2, xmmword [0x14000bbb0]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
andps xmm2, xmm9
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, ecx
paddb xmm2, xmm0
movd xmm1, dword [rsp + 0x2c]
xorps xmm2, xmm1
movd dword [rsp + 0x2c], xmm2
mov r8d, 0x10
mov eax, r8d
lea r9, [rsp + 0x20]
add r9, rax
nop word [rax + rax]
mov eax, 0x4d4873ed
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x35
movzx eax, r8b
sub al, cl
add al, 0x32
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x11
jl 0x1400054c0
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x50], xmm1
lea rax, [rsp + 0x20]
mov r8, rbx
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140005510
lea rdx, [rsp + 0x20]
lea rcx, [rsp + 0x40]
call fcn.140007f30
lea rcx, [rsp + 0x40]
cmp qword [rsp + 0x58], 0xf
cmova rcx, qword [rsp + 0x40]
call qword [sym.imp.KERNEL32.dll_GlobalAddAtomA]
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x140005581
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000557b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000557b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400098c8
nop
cmp r13, 0xf
jbe 0x1400055bc
lea rdx, [r13 + 1]
mov rax, r14
cmp rdx, 0x1000
jb 0x1400055b3
add rdx, 0x27
mov r14, qword [r14 - 8]
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400055b3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r14
call fcn.1400098c8
nop
mov rdx, qword [rbp + 0xa8]
cmp rdx, 0xf
jbe 0x140005600
inc rdx
mov rcx, qword [rbp + 0x90]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400055fb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400055fb
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400098c8
mov qword [rbp + 0xa0], rsi
mov qword [rbp + 0xa8], 0xf
mov byte [rbp + 0x90], 0
mov rdx, qword [rbp + 0x68]
cmp rdx, 0xf
jbe 0x140005657
inc rdx
mov rcx, qword [rbp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005652
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140005652
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400098c8
mov eax, dword [0x14000ba50]
mov dword [rbp + 0x30], eax
movzx eax, byte [0x14000ba54]
mov byte [rbp + 0x30], 0x2e
xor byte [rbp + 0x31], 0x33
xor byte [rbp + 0x32], 0x34
xor byte [rbp + 0x33], 0x35
xor al, 0x36
mov byte [rbp + 0x34], al
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x50], xmm1
lea rax, [rbp + 0x30]
mov r8, rbx
inc r8
cmp byte [rax + r8], 0
jne 0x140005694
lea rdx, [rbp + 0x30]
lea rcx, [rsp + 0x40]
call fcn.140007f30
nop
call qword [sym.imp.MSVCP140.dll_unsigned_int___cdecl_std::_Random_device_void_]
mov dword [rbp + 0x1454], 0xffffffff
mov dword [rbp + 0xd4], eax
mov edx, 1
mov r9d, 0x270
nop
mov ecx, eax
shr ecx, 0x1e
xor ecx, eax
imul eax, ecx, 0x6c078965
add eax, edx
mov dword [rbp + rdx*4 + 0xd4], eax
inc rdx
cmp rdx, r9
jb 0x1400056d0
mov dword [rbp + 0xd0], r9d
lea r8, [rbp + 0xd8]
nop dword [rax]
mov edx, dword [r8 - 4]
xor edx, dword [r8]
btr edx, 0x1f
xor edx, dword [r8 - 4]
mov eax, edx
and al, 1
neg al
sbb ecx, ecx
and ecx, 0x9908b0df
shr edx, 1
xor ecx, edx
xor ecx, dword [r8 + 0x630]
mov dword [r8 + 0x9bc], ecx
lea r8, [r8 + 4]
sub r9, 1
jne 0x140005700
mov eax, dword [rbp + 0xd0]
mov ecx, dword [rbp + rax*4 + 0xd4]
mov eax, ecx
shr eax, 0xb
and eax, dword [rbp + 0x1454]
xor ecx, eax
mov eax, ecx
and eax, 0xff3a58ad
shl eax, 7
xor ecx, eax
mov eax, ecx
and eax, 0xffffdf8c
shl eax, 0xf
xor ecx, eax
mov edx, ecx
shr edx, 0x12
xor edx, ecx
and edx, 0xf
add edx, 5
lea rcx, [rbp - 0x60]
call fcn.140002ac0
mov rdi, rax
movzx ecx, word [0x14000ba60]
mov word [rbp + 0x30], cx
cmp byte [0x14000ba61], 0
je 0x1400057a0
mov byte [rbp + 0x30], 0x5c
xor byte [rbp + 0x31], 0x33
xorps xmm0, xmm0
movups xmmword [rbp + 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x60], xmm1
lea rax, [rbp + 0x30]
mov r8, rbx
inc r8
cmp byte [rax + r8], 0
jne 0x1400057b6
lea rdx, [rbp + 0x30]
lea rcx, [rbp + 0x50]
call fcn.140007f30
nop
lea rax, [rbp + 0x70]
cmp qword [rbp + 0x88], 7
cmova rax, qword [rbp + 0x70]
mov qword [rsp + 0x20], rax
mov rax, qword [rbp + 0x80]
mov qword [rsp + 0x28], rax
call fcn.140008d08
movaps xmm0, xmmword [rsp + 0x20]
movdqa xmmword [rsp + 0x20], xmm0
lea r8, [rsp + 0x20]
mov edx, eax
lea rcx, [rbp - 0x80]
call fcn.140007340
nop
lea r9, [rbp + 0x50]
lea r8, [rbp - 0x80]
lea rcx, [rbp + 0xb0]
call fcn.140008810
nop
mov r9, rdi
lea r8, [rbp + 0xb0]
lea rcx, [rbp + 0x30]
call fcn.140008810
nop
lea r9, [rsp + 0x40]
lea r8, [rbp + 0x30]
lea rcx, [rsp + 0x60]
call fcn.140008810
nop
lea rax, [rsp + 0x60]
cmp qword [rsp + 0x78], 0xf
cmova rax, qword [rsp + 0x60]
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 0x70]
mov qword [rsp + 0x28], rax
call fcn.140008d08
movaps xmm0, xmmword [rsp + 0x20]
movdqa xmmword [rsp + 0x20], xmm0
lea r8, [rsp + 0x20]
mov edx, eax
lea rcx, [rbp + 0x90]
call fcn.140001a10
nop
lea rdx, [rbp + 0x90]
lea rcx, [rbp + 0x70]
call fcn.140001c80
nop
mov rdx, qword [rbp + 0xa8]
cmp rdx, 7
jbe 0x1400058ed
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x90]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400058e7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400058e7
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400098c8
nop
mov rdx, qword [rsp + 0x78]
cmp rdx, 0xf
jbe 0x14000592d
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005928
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140005928
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400098c8
movdqu xmmword [rsp + 0x70], xmm6
mov byte [rsp + 0x60], 0
mov rdx, qword [rbp + 0x48]
cmp rdx, 0xf
jbe 0x140005977
inc rdx
mov rcx, qword [rbp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005971
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140005971
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400098c8
nop
mov rdx, qword [rbp + 0xc8]
cmp rdx, 0xf
jbe 0x1400059bc
inc rdx
mov rcx, qword [rbp + 0xb0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400059b6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400059b6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400098c8
nop
mov rdx, qword [rbp - 0x68]
cmp rdx, 0xf
jbe 0x1400059fa
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400059f5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400059f5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400098c8
movdqu xmmword [rbp - 0x70], xmm6
mov byte [rbp - 0x80], 0
mov rdx, qword [rbp + 0x68]
cmp rdx, 0xf
jbe 0x140005a42
inc rdx
mov rcx, qword [rbp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005a3c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140005a3c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400098c8
nop
mov rdx, qword [rbp - 0x48]
cmp rdx, 0xf
jbe 0x140005a80
inc rdx
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005a7b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140005a7b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400098c8
movdqu xmmword [rbp - 0x50], xmm6
mov byte [rbp - 0x60], 0
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x140005ac9
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005ac4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140005ac4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400098c8
mov eax, dword [0x14000b8d8]
mov dword [rbp + 0x30], eax
movzx eax, word [0x14000b8dc]
mov word [rbp + 0x34], ax
movzx eax, byte [0x14000b8de]
mov byte [rbp + 0x30], 0x47
xor byte [rbp + 0x31], 0x33
xor byte [rbp + 0x32], 0x34
xor byte [rbp + 0x33], 0x35
xor byte [rbp + 0x34], 0x36
xor byte [rbp + 0x35], 0x37
xor al, 0x38
mov byte [rbp + 0x36], al
lea rcx, [rbp + 0x30]
call fcn.140003d00
lea rax, [rbp + 0x70]
cmp qword [rbp + 0x88], 7
cmova rax, qword [rbp + 0x70]
mov qword [rsp + 0x20], rax
mov rax, qword [rbp + 0x80]
mov qword [rsp + 0x28], rax
call fcn.140008d08
movaps xmm0, xmmword [rsp + 0x20]
movdqa xmmword [rsp + 0x20], xmm0
lea r8, [rsp + 0x20]
mov edx, eax
lea rcx, [rbp - 0x80]
call fcn.140007340
nop
lea rax, [rbp - 0x80]
cmp qword [rbp - 0x68], 0xf
cmova rax, qword [rbp - 0x80]
mov qword [rsp + 0x20], rax
inc rbx
cmp byte [rax + rbx], 0
jne 0x140005b60
mov qword [rsp + 0x28], rbx
call fcn.140008d08
movaps xmm0, xmmword [rsp + 0x20]
movdqa xmmword [rsp + 0x20], xmm0
lea r8, [rsp + 0x20]
mov edx, eax
lea rcx, [rbp + 0x50]
call fcn.140001a10
nop
lea rcx, [rbp + 0x50]
cmp qword [rbp + 0x68], 7
cmova rcx, qword [rbp + 0x50]
call fcn.140008fc0
mov rdx, rax
shr rax, 0x20
test eax, eax
jne 0x140005cd3
mov rdx, qword [rbp + 0x68]
cmp rdx, 7
jbe 0x140005bf4
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005bef
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140005bef
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400098c8
movdqa xmm0, xmmword [0x14000bb60]
movdqu xmmword [rbp + 0x60], xmm0
mov word [rbp + 0x50], si
mov rdx, qword [rbp - 0x68]
cmp rdx, 0xf
jbe 0x140005c44
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005c3e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140005c3e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400098c8
nop
mov rdx, qword [rbp + 0x88]
cmp rdx, 7
jbe 0x140005c8a
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005c85
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140005c85
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400098c8
mov eax, 1
mov rcx, qword [rbp + 0x1460]
xor rcx, rsp
call fcn.140009240
lea r11, [rsp + 0x15b0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
shr rdx, 0x20
lea r8, [rbp + 0x50]
call fcn.140002810
nop
call fcn.140001180
int3
call fcn.140001220
nop
shr rdx, 0x20
lea r8, [rsp + 0x40]
call fcn.140002810
nop
shr rdx, 0x20
lea r8, [rsp + 0x40]
call fcn.140002810
int3