Function at 0x180023740
Capabilities:
Encode data using xor
Enumerate processes
Query or enumerate registry value
Terminate process
Terminate process by name

Disassembly:
mov rax, rsp
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x708]
sub rsp, 0x7c8
movaps xmmword [rax - 0x58], xmm6
movaps xmmword [rax - 0x68], xmm7
movaps xmmword [rax - 0x78], xmm8
movaps xmmword [rax - 0x88], xmm9
movaps xmmword [rax - 0x98], xmm10
xor r13d, r13d
mov dword [rbp + 0x710], r13d
mov qword [rbp + 0x720], r13
movups xmm0, xmmword [str.gZPCOXH_k_S6_]
movups xmmword [rbp + 0x48], xmm0
movups xmm1, xmmword [0x18015c140]
movups xmmword [rbp + 0x58], xmm1
movsd xmm0, qword [str.0_H]
movsd qword [rbp + 0x68], xmm0
movzx eax, word [0x18015c158]
mov word [rbp + 0x70], ax
mov r8d, r13d
lea ebx, [r13 + 4]
lea edi, [rbx + 0x1b]
mov r12d, dword [reloc.WS2_32.dll_accept]
cmp r12d, 2
jl 0x1800238f1
movdqa xmm5, xmmword [0x1801600f0]
movdqa xmm4, xmmword [0x1801602f0]
movd xmm6, ebx
movdqa xmm7, xmmword [0x180160110]
movd xmm8, edi
movdqa xmm9, xmmword [str.4444444455555555]
lea rcx, [rbp + 0x48]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm9
paddw xmm3, xmm2
movq xmm0, qword [rcx]
xorps xmm3, xmm0
movq qword [rcx], xmm3
lea eax, [r8 + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm9
paddw xmm3, xmm2
movq xmm0, qword [rcx + 8]
xorps xmm3, xmm0
movq qword [rcx + 8], xmm3
add r8d, 8
lea rcx, [rcx + 0x10]
cmp r8d, 0x10
jl 0x180023802
cmp r8d, 0x15
jge 0x180023934
movsxd rax, r8d
lea r9, [rbp + 0x48]
lea r9, [r9 + rax*2]
nop dword [rax]
mov eax, 0x5397829d
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movzx eax, dx
imul ecx, eax, 0x31
movzx eax, r8w
sub ax, cx
add ax, 0x34
xor word [r9], ax
inc r8d
lea r9, [r9 + 2]
cmp r8d, 0x15
jl 0x180023900
lea rax, [rbp + 0x720]
mov qword [rsp + 0x20], rax
mov r14d, 1
mov r9d, r14d
xor r8d, r8d
lea rdx, [rbp + 0x48]
mov rcx, 0xffffffff80000001
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
je 0x180023973
mov rcx, qword [rbp + 0x720]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x180026445
mov eax, 0x22
mov word [rbp + 0x460], ax
mov dword [rbp + 0x718], 0x206
movups xmm0, xmmword [str.gASVUB_]
movups xmmword [rsp + 0x60], xmm0
movzx eax, word [0x18015c198]
mov ecx, 0x53
mov word [rsp + 0x60], cx
xor word [rsp + 0x62], 0x35
xor word [rsp + 0x64], 0x36
xor word [rsp + 0x66], 0x37
xor word [rsp + 0x68], 0x38
xor word [rsp + 0x6a], 0x39
xor word [rsp + 0x6c], 0x3a
xor word [rsp + 0x6e], 0x3b
xor ax, 0x3c
mov word [rsp + 0x70], ax
lea rax, [rbp + 0x718]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x462]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea rdx, [rsp + 0x60]
mov rcx, qword [rbp + 0x720]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov rcx, qword [rbp + 0x720]
test eax, eax
jne 0x180023968
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
xorps xmm0, xmm0
movups xmmword [rbp + 0x78], xmm0
mov qword [rbp + 0x88], r13
mov qword [rbp + 0x90], r13
lea rax, [rbp + 0x460]
mov rsi, 0xffffffffffffffff
mov r8, rsi
inc r8
cmp word [rax + r8*2], r13w
jne 0x180023a44
lea rdx, [rbp + 0x460]
lea rcx, [rbp + 0x78]
call fcn.180008da0
nop
mov r8, r14
lea rdx, [0x18012209c]
lea rcx, [rbp + 0x78]
call fcn.18000a5b0
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x118], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x128], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 7
mov word [rax], r13w
mov r15d, 8
mov rdx, qword [rbp + 0x90]
cmp rdx, 8
jb 0x180023ae0
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180023adb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800266ad
call fcn.1800bdc0c
mov qword [rbp + 0x88], r13
mov qword [rbp + 0x90], 7
mov word [rbp + 0x78], r13w
movsd xmm10, qword [0x180160030]
jmp 0x180023b07
mov edi, 0x1f
movups xmm9, xmmword [0x18015c1c8]
movups xmmword [rsp + 0x60], xmm9
pextrw eax, xmm9, 7
test ax, ax
je 0x180023c64
cmp r12d, 2
jl 0x180023c1c
movdqa xmm4, xmmword [0x1801602f0]
movd xmm6, ebx
movd xmm5, edi
movdqa xmm8, xmmword [str.4444444455555555]
movdqa xmm2, xmmword [0x1801600f0]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm5
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x180160110]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm8
paddw xmm3, xmm2
movq xmm1, xmm9
xorps xmm3, xmm1
movq qword [rsp + 0x60], xmm3
movdqa xmm2, xmmword [0x180160100]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm5
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x180160110]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm8
paddw xmm3, xmm2
movq xmm0, qword [rsp + 0x68]
xorps xmm3, xmm0
movq qword [rsp + 0x68], xmm3
jmp 0x180023c64
lea r9, [rsp + 0x60]
mov r8d, r13d
nop dword [rax]
nop dword [rax + rax]
mov eax, 0x5397829d
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movzx eax, dx
imul ecx, eax, 0x31
movzx eax, r8w
sub ax, cx
add ax, 0x34
xor word [r9], ax
inc r8d
lea r9, [r9 + 2]
cmp r8d, 8
jl 0x180023c30
xorps xmm0, xmm0
movups xmmword [rbp - 0x60], xmm0
mov qword [rbp - 0x50], r13
mov qword [rbp - 0x48], r13
lea rax, [rsp + 0x60]
mov r8, rsi
nop dword [rax + rax]
inc r8
cmp word [rax + r8*2], 0
jne 0x180023c80
lea rdx, [rsp + 0x60]
lea rcx, [rbp - 0x60]
call fcn.180008da0
nop
cmp qword [rbp - 0x50], 0
je 0x180023f6a
lea rdx, [rbp - 0x60]
lea rcx, [rsp + 0x40]
call fcn.180007680
nop
mov r8, rsi
lea rdx, [0x18015ab78]
lea rcx, [rsp + 0x40]
call fcn.180007340
cmp rax, 0xffffffffffffffff
je 0x180023d34
mov r8, rsi
lea rdx, [0x18015ab74]
lea rcx, [rsp + 0x40]
call fcn.180007340
mov rbx, qword [rsp + 0x50]
cmp rbx, rax
jb 0x1800266b3
mov rcx, rbx
sub rcx, rax
mov rdx, rsi
cmp rcx, rdx
cmovb rdx, rcx
lea rcx, [rsp + 0x40]
cmp qword [rsp + 0x58], 8
cmovae rcx, qword [rsp + 0x40]
lea rcx, [rcx + rax*2]
sub rbx, rdx
lea rdx, [rcx + rdx*2]
mov r8, rbx
sub r8, rax
lea r8, [r8*2 + 2]
call fcn.1800c0160
mov qword [rsp + 0x50], rbx
lea rdx, str..exe
lea rcx, [rsp + 0x40]
call fcn.180009970
xor edx, edx
lea ecx, [rdx + 2]
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rdi, rax
mov dword [rbp + 0x160], 0x238
lea rdx, [rbp + 0x160]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_Process32FirstW]
test eax, eax
je 0x180023f27
nop word [rax + rax]
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
mov qword [rbp - 0x70], r13
mov qword [rbp - 0x68], r13
lea rax, [rbp + 0x18c]
mov r8, rsi
nop dword [rax]
inc r8
cmp word [rax + r8*2], 0
jne 0x180023da0
lea rdx, [rbp + 0x18c]
lea rcx, [rbp - 0x80]
call fcn.180008da0
lea rdx, [rbp - 0x80]
lea rcx, [rbp - 0x20]
call fcn.1800a16d0
mov rbx, rax
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0x28]
call fcn.180007680
mov rdx, rax
lea rcx, [rbp - 0x40]
call fcn.1800a16d0
mov r10, qword [rax + 0x10]
cmp qword [rax + 0x18], 8
jb 0x180023df3
mov rax, qword [rax]
mov r9, qword [rbx + 0x10]
cmp qword [rbx + 0x18], 8
jb 0x180023e01
mov rbx, qword [rbx]
mov rcx, r9
cmp r10, r9
cmovb rcx, r10
test rcx, rcx
je 0x180023e26
sub rbx, rax
movzx edx, word [rax + rbx]
cmp dx, word [rax]
jne 0x180023e2f
add rax, 2
sub rcx, 1
jne 0x180023e13
cmp r9, r10
jae 0x180023e37
mov ebx, esi
jmp 0x180023e3d
mov ebx, r14d
cmovb ebx, esi
jmp 0x180023e3d
mov ebx, r13d
seta bl
mov rdx, qword [rbp - 0x28]
cmp rdx, 8
jb 0x180023e7d
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180023e78
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800266b9
call fcn.1800bdc0c
mov qword [rbp - 0x30], r13
mov qword [rbp - 0x28], 7
mov word [rbp - 0x40], r13w
mov rdx, qword [rbp - 8]
cmp rdx, 8
jb 0x180023ece
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180023ec9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800266bf
call fcn.1800bdc0c
test ebx, ebx
je 0x180023eec
lea rdx, [rbp + 0x160]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_Process32NextW]
test eax, eax
jne 0x180023d80
jmp 0x180023f27
mov r8d, dword [rbp + 0x168]
xor edx, edx
mov ecx, r14d
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x180023f1d
mov edx, 9
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 8
jb 0x180023f6a
mov rcx, qword [rsp + 0x40]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180023f64
mov rcx, qword [rcx - 8]
sub rax, rcx
add rdx, 0x27
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800266c5
call fcn.1800bdc0c
nop
mov rdx, qword [rbp - 0x48]
cmp rdx, 8
jb 0x180023faa
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180023fa5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18002674f
call fcn.1800bdc0c
movups xmm0, xmmword [str.GASVU]
movups xmmword [rsp + 0x60], xmm0
mov eax, dword [0x18015c110]
mov dword [rsp + 0x70], eax
cmp word [0x18015c112], 0
je 0x18002400a
mov eax, reloc.WS2_32.dll_WSAStartup
mov word [rsp + 0x60], ax
xor word [rsp + 0x62], 0x35
xor word [rsp + 0x64], 0x36
xor word [rsp + 0x66], 0x37
xor word [rsp + 0x68], 0x38
xor word [rsp + 0x6a], 0x39
xor word [rsp + 0x6c], 0x3a
xor word [rsp + 0x6e], 0x3b
xor word [rsp + 0x70], 0x3c
xor word [rsp + 0x72], 0x3d
xorps xmm0, xmm0
movups xmmword [rbp - 0x60], xmm0
mov qword [rbp - 0x50], r13
mov qword [rbp - 0x48], r13
lea rax, [rsp + 0x60]
mov r8, rsi
inc r8
cmp word [rax + r8*2], 0
jne 0x180024021
lea rdx, [rsp + 0x60]
lea rcx, [rbp - 0x60]
call fcn.180008da0
nop
cmp qword [rbp - 0x50], 0
je 0x18002430a
lea rdx, [rbp - 0x60]
lea rcx, [rsp + 0x40]
call fcn.180007680
nop
mov r8, rsi
lea rdx, [0x18015ab78]
lea rcx, [rsp + 0x40]
call fcn.180007340
cmp rax, 0xffffffffffffffff
je 0x1800240d5
mov r8, rsi
lea rdx, [0x18015ab74]
lea rcx, [rsp + 0x40]
call fcn.180007340
mov rbx, qword [rsp + 0x50]
cmp rbx, rax
jb 0x1800266cb
mov rcx, rbx
sub rcx, rax
mov rdx, rsi
cmp rcx, rdx
cmovb rdx, rcx
lea rcx, [rsp + 0x40]
cmp qword [rsp + 0x58], 8
cmovae rcx, qword [rsp + 0x40]
lea rcx, [rcx + rax*2]
sub rbx, rdx
lea rdx, [rcx + rdx*2]
mov r8, rbx
sub r8, rax
lea r8, [r8*2 + 2]
call fcn.1800c0160
mov qword [rsp + 0x50], rbx
lea rdx, str..exe
lea rcx, [rsp + 0x40]
call fcn.180009970
xor edx, edx
lea ecx, [rdx + 2]
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rdi, rax
mov dword [rbp + 0x160], 0x238
lea rdx, [rbp + 0x160]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_Process32FirstW]
test eax, eax
je 0x1800242c7
nop word [rax + rax]
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
mov qword [rbp - 0x70], r13
mov qword [rbp - 0x68], r13
lea rax, [rbp + 0x18c]
mov r8, rsi
nop dword [rax]
inc r8
cmp word [rax + r8*2], 0
jne 0x180024140
lea rdx, [rbp + 0x18c]
lea rcx, [rbp - 0x80]
call fcn.180008da0
lea rdx, [rbp - 0x80]
lea rcx, [rbp - 0x20]
call fcn.1800a16d0
mov rbx, rax
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0x28]
call fcn.180007680
mov rdx, rax
lea rcx, [rbp - 0x40]
call fcn.1800a16d0
mov r10, qword [rax + 0x10]
cmp qword [rax + 0x18], 8
jb 0x180024193
mov rax, qword [rax]
mov r9, qword [rbx + 0x10]
cmp qword [rbx + 0x18], 8
jb 0x1800241a1
mov rbx, qword [rbx]
mov rcx, r9
cmp r10, r9
cmovb rcx, r10
test rcx, rcx
je 0x1800241c6
sub rbx, rax
movzx edx, word [rbx + rax]
cmp dx, word [rax]
jne 0x1800241cf
add rax, 2
sub rcx, 1
jne 0x1800241b3
cmp r9, r10
jae 0x1800241d7
mov ebx, esi
jmp 0x1800241dd
mov ebx, r14d
cmovb ebx, esi
jmp 0x1800241dd
mov ebx, r13d
seta bl
mov rdx, qword [rbp - 0x28]
cmp rdx, 8
jb 0x18002421d
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180024218
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800266d1
call fcn.1800bdc0c
mov qword [rbp - 0x30], r13
mov qword [rbp - 0x28], 7
mov word [rbp - 0x40], r13w
mov rdx, qword [rbp - 8]
cmp rdx, 8
jb 0x18002426e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180024269
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800266d7
call fcn.1800bdc0c
test ebx, ebx
je 0x18002428c
lea rdx, [rbp + 0x160]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_Process32NextW]
test eax, eax
jne 0x180024120
jmp 0x1800242c7
mov r8d, dword [rbp + 0x168]
xor edx, edx
mov ecx, r14d
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x1800242bd
mov edx, 9
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 8
jb 0x18002430a
mov rcx, qword [rsp + 0x40]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180024304
mov rcx, qword [rcx - 8]
sub rax, rcx
add rdx, 0x27
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800266dd
call fcn.1800bdc0c
nop
mov rdx, qword [rbp - 0x48]
cmp rdx, 8
jb 0x18002434a
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180024345
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18002674f
call fcn.1800bdc0c
movups xmm0, xmmword [str.GASVUJ_IJT_Zn_:D]
movups xmmword [rbp], xmm0
movups xmm1, xmmword [0x18015c170]
movups xmmword [rbp + 0x10], xmm1
movzx eax, word [0x18015c180]
mov word [rbp + 0x20], ax
mov r8d, r13d
cmp r12d, 2
jl 0x18002449f
movdqa xmm5, xmmword [0x1801600f0]
movdqa xmm4, xmmword [0x1801602f0]
mov eax, 4
movd xmm6, eax
movdqa xmm7, xmmword [0x180160110]
mov eax, 0x1f
movd xmm8, eax
movdqa xmm9, xmmword [str.4444444455555555]
lea rcx, [rbp]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm9
paddw xmm3, xmm2
movq xmm0, qword [rcx]
xorps xmm3, xmm0
movq qword [rcx], xmm3
lea eax, [r8 + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm9
paddw xmm3, xmm2
movq xmm0, qword [rcx + 8]
xorps xmm3, xmm0
movq qword [rcx + 8], xmm3
add r8d, 8
lea rcx, [rcx + 0x10]
cmp r8d, 0x10
jl 0x1800243b0
cmp r8d, 0x11
jge 0x1800244e4
movsxd rax, r8d
lea r9, [rbp]
lea r9, [r9 + rax*2]
nop word [rax + rax]
mov eax, 0x5397829d
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movzx eax, dx
imul ecx, eax, 0x31
movzx eax, r8w
sub ax, cx
add ax, 0x34
xor word [r9], ax
inc r8d
lea r9, [r9 + 2]
cmp r8d, 0x11
jl 0x1800244b0
xorps xmm0, xmm0
movups xmmword [rbp - 0x60], xmm0
mov qword [rbp - 0x50], r13
mov qword [rbp - 0x48], r13
lea rax, [rbp]
mov r8, rsi
nop word [rax + rax]
inc r8
cmp word [rax + r8*2], 0
jne 0x180024500
lea rdx, [rbp]
lea rcx, [rbp - 0x60]
call fcn.180008da0
nop
cmp qword [rbp - 0x50], 0
je 0x1800247ea
lea rdx, [rbp - 0x60]
lea rcx, [rsp + 0x40]
call fcn.180007680
nop
mov r8, rsi
lea rdx, [0x18015ab78]
lea rcx, [rsp + 0x40]
call fcn.180007340
cmp rax, 0xffffffffffffffff
je 0x1800245b3
mov r8, rsi
lea rdx, [0x18015ab74]
lea rcx, [rsp + 0x40]
call fcn.180007340
mov rbx, qword [rsp + 0x50]
cmp rbx, rax
jb 0x1800266e3
mov rcx, rbx
sub rcx, rax
mov rdx, rsi
cmp rcx, rdx
cmovb rdx, rcx
lea rcx, [rsp + 0x40]
cmp qword [rsp + 0x58], 8
cmovae rcx, qword [rsp + 0x40]
lea rcx, [rcx + rax*2]
sub rbx, rdx
lea rdx, [rcx + rdx*2]
mov r8, rbx
sub r8, rax
lea r8, [r8*2 + 2]
call fcn.1800c0160
mov qword [rsp + 0x50], rbx
lea rdx, str..exe
lea rcx, [rsp + 0x40]
call fcn.180009970
xor edx, edx
lea ecx, [rdx + 2]
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rdi, rax
mov dword [rbp + 0x160], 0x238
lea rdx, [rbp + 0x160]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_Process32FirstW]
test eax, eax
je 0x1800247a7
nop dword [rax]
nop dword [rax + rax]
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
mov qword [rbp - 0x70], r13
mov qword [rbp - 0x68], r13
lea rax, [rbp + 0x18c]
mov r8, rsi
nop dword [rax]
inc r8
cmp word [rax + r8*2], 0
jne 0x180024620
lea rdx, [rbp + 0x18c]
lea rcx, [rbp - 0x80]
call fcn.180008da0
lea rdx, [rbp - 0x80]
lea rcx, [rbp - 0x20]
call fcn.1800a16d0
mov rbx, rax
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0x28]
call fcn.180007680
mov rdx, rax
lea rcx, [rbp - 0x40]
call fcn.1800a16d0
mov r10, qword [rax + 0x10]
cmp qword [rax + 0x18], 8
jb 0x180024673
mov rax, qword [rax]
mov r9, qword [rbx + 0x10]
cmp qword [rbx + 0x18], 8
jb 0x180024681
mov rbx, qword [rbx]
mov rcx, r9
cmp r10, r9
cmovb rcx, r10
test rcx, rcx
je 0x1800246a6
sub rbx, rax
movzx edx, word [rax + rbx]
cmp dx, word [rax]
jne 0x1800246af
add rax, 2
sub rcx, 1
jne 0x180024693
cmp r9, r10
jae 0x1800246b7
mov ebx, esi
jmp 0x1800246bd
mov ebx, r14d
cmovb ebx, esi
jmp 0x1800246bd
mov ebx, r13d
seta bl
mov rdx, qword [rbp - 0x28]
cmp rdx, 8
jb 0x1800246fd
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800246f8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800266e9
call fcn.1800bdc0c
mov qword [rbp - 0x30], r13
mov qword [rbp - 0x28], 7
mov word [rbp - 0x40], r13w
mov rdx, qword [rbp - 8]
cmp rdx, 8
jb 0x18002474e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180024749
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800266ef
call fcn.1800bdc0c
test ebx, ebx
je 0x18002476c
lea rdx, [rbp + 0x160]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_Process32NextW]
test eax, eax
jne 0x180024600
jmp 0x1800247a7
mov r8d, dword [rbp + 0x168]
xor edx, edx
mov ecx, r14d
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x18002479d
mov edx, 9
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 8
jb 0x1800247ea
mov rcx, qword [rsp + 0x40]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800247e4
mov rcx, qword [rcx - 8]
sub rax, rcx
add rdx, 0x27
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800266f5
call fcn.1800bdc0c
nop
mov rdx, qword [rbp - 0x48]
cmp rdx, 8
jb 0x18002482a
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180024825
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18002674f
call fcn.1800bdc0c
movups xmm0, xmmword [0x18015c1d8]
movups xmmword [rbp + 0x48], xmm0
movups xmm1, xmmword [0x18015c1e8]
movups xmmword [rbp + 0x58], xmm1
mov eax, dword [0x18015c1f8]
mov dword [rbp + 0x68], eax
movzx eax, word [0x18015c1fc]
mov word [rbp + 0x6c], ax
mov r8d, r13d
cmp r12d, 2
jl 0x18002498f
movdqa xmm5, xmmword [0x1801600f0]
movdqa xmm4, xmmword [0x1801602f0]
mov eax, 4
movd xmm6, eax
movdqa xmm7, xmmword [0x180160110]
mov eax, 0x1f
movd xmm8, eax
movdqa xmm9, xmmword [str.4444444455555555]
lea rcx, [rbp + 0x48]
nop dword [rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm9
paddw xmm3, xmm2
movq xmm0, qword [rcx]
xorps xmm3, xmm0
movq qword [rcx], xmm3
lea eax, [r8 + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm9
paddw xmm3, xmm2
movq xmm0, qword [rcx + 8]
xorps xmm3, xmm0
movq qword [rcx + 8], xmm3
add r8d, 8
lea rcx, [rcx + 0x10]
cmp r8d, 0x10
jl 0x1800248a0
cmp r8d, 0x13
jge 0x1800249d4
movsxd rax, r8d
lea r9, [rbp + 0x48]
lea r9, [r9 + rax*2]
nop word [rax + rax]
mov eax, 0x5397829d
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movzx eax, dx
imul ecx, eax, 0x31
movzx eax, r8w
sub ax, cx
add ax, 0x34
xor word [r9], ax
inc r8d
lea r9, [r9 + 2]
cmp r8d, 0x13
jl 0x1800249a0
xorps xmm0, xmm0
movups xmmword [rbp - 0x60], xmm0
mov qword [rbp - 0x50], r13
mov qword [rbp - 0x48], r13
lea rax, [rbp + 0x48]
mov r8, rsi
nop word [rax + rax]
inc r8
cmp word [rax + r8*2], 0
jne 0x1800249f0
lea rdx, [rbp + 0x48]
lea rcx, [rbp - 0x60]
call fcn.180008da0
nop
cmp qword [rbp - 0x50], 0
je 0x180024cda
lea rdx, [rbp - 0x60]
lea rcx, [rsp + 0x40]
call fcn.180007680
nop
mov r8, rsi
lea rdx, [0x18015ab78]
lea rcx, [rsp + 0x40]
call fcn.180007340
cmp rax, 0xffffffffffffffff
je 0x180024aa3
mov r8, rsi
lea rdx, [0x18015ab74]
lea rcx, [rsp + 0x40]
call fcn.180007340
mov rbx, qword [rsp + 0x50]
cmp rbx, rax
jb 0x1800266fb
mov rcx, rbx
sub rcx, rax
mov rdx, rsi
cmp rcx, rdx
cmovb rdx, rcx
lea rcx, [rsp + 0x40]
cmp qword [rsp + 0x58], 8
cmovae rcx, qword [rsp + 0x40]
lea rcx, [rcx + rax*2]
sub rbx, rdx
lea rdx, [rcx + rdx*2]
mov r8, rbx
sub r8, rax
lea r8, [r8*2 + 2]
call fcn.1800c0160
mov qword [rsp + 0x50], rbx
lea rdx, str..exe
lea rcx, [rsp + 0x40]
call fcn.180009970
xor edx, edx
lea ecx, [rdx + 2]
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rdi, rax
mov dword [rbp + 0x160], 0x238
lea rdx, [rbp + 0x160]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_Process32FirstW]
test eax, eax
je 0x180024c97
nop dword [rax]
nop dword [rax + rax]
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
mov qword [rbp - 0x70], r13
mov qword [rbp - 0x68], r13
lea rax, [rbp + 0x18c]
mov r8, rsi
nop dword [rax]
inc r8
cmp word [rax + r8*2], 0
jne 0x180024b10
lea rdx, [rbp + 0x18c]
lea rcx, [rbp - 0x80]
call fcn.180008da0
lea rdx, [rbp - 0x80]
lea rcx, [rbp - 0x20]
call fcn.1800a16d0
mov rbx, rax
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0x28]
call fcn.180007680
mov rdx, rax
lea rcx, [rbp - 0x40]
call fcn.1800a16d0
mov r10, qword [rax + 0x10]
cmp qword [rax + 0x18], 8
jb 0x180024b63
mov rax, qword [rax]
mov r9, qword [rbx + 0x10]
cmp qword [rbx + 0x18], 8
jb 0x180024b71
mov rbx, qword [rbx]
mov rcx, r9
cmp r10, r9
cmovb rcx, r10
test rcx, rcx
je 0x180024b96
sub rbx, rax
movzx edx, word [rbx + rax]
cmp dx, word [rax]
jne 0x180024b9f
add rax, 2
sub rcx, 1
jne 0x180024b83
cmp r9, r10
jae 0x180024ba7
mov ebx, esi
jmp 0x180024bad
mov ebx, r14d
cmovb ebx, esi
jmp 0x180024bad
mov ebx, r13d
seta bl
mov rdx, qword [rbp - 0x28]
cmp rdx, 8
jb 0x180024bed
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180024be8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180026701
call fcn.1800bdc0c
mov qword [rbp - 0x30], r13
mov qword [rbp - 0x28], 7
mov word [rbp - 0x40], r13w
mov rdx, qword [rbp - 8]
cmp rdx, 8
jb 0x180024c3e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180024c39
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180026707
call fcn.1800bdc0c
test ebx, ebx
je 0x180024c5c
lea rdx, [rbp + 0x160]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_Process32NextW]
test eax, eax
jne 0x180024af0
jmp 0x180024c97
mov r8d, dword [rbp + 0x168]
xor edx, edx
mov ecx, r14d
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x180024c8d
mov edx, 9
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 8
jb 0x180024cda
mov rcx, qword [rsp + 0x40]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180024cd4
mov rcx, qword [rcx - 8]
sub rax, rcx
add rdx, 0x27
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18002670d
call fcn.1800bdc0c
nop
mov rdx, qword [rbp - 0x48]
cmp rdx, 8
jb 0x180024d1a
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180024d15
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18002674f
call fcn.1800bdc0c
movups xmm0, xmmword [str.GASVU]
movups xmmword [rsp + 0x60], xmm0
mov eax, dword [0x18015c110]
mov dword [rsp + 0x70], eax
cmp word [0x18015c112], 0
je 0x180024d7a
mov eax, reloc.WS2_32.dll_WSAStartup
mov word [rsp + 0x60], ax
xor word [rsp + 0x62], 0x35
xor word [rsp + 0x64], 0x36
xor word [rsp + 0x66], 0x37
xor word [rsp + 0x68], 0x38
xor word [rsp + 0x6a], 0x39
xor word [rsp + 0x6c], 0x3a
xor word [rsp + 0x6e], 0x3b
xor word [rsp + 0x70], 0x3c
xor word [rsp + 0x72], 0x3d
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
mov qword [rbp - 0x70], r13
mov qword [rbp - 0x68], r13
lea rax, [rsp + 0x60]
mov r8, rsi
inc r8
cmp word [rax + r8*2], 0
jne 0x180024d91
lea rdx, [rsp + 0x60]
lea rcx, [rbp - 0x80]
call fcn.180008da0
nop
or r15d, 1
mov dword [rbp + 0x710], r15d
lea rcx, [rbp - 0x80]
call fcn.1800a5150
test al, al
jne 0x180025848
movups xmm0, xmmword [str.GASVUJ_IJT_Zn_:D]
movups xmmword [rbp], xmm0
movups xmm1, xmmword [0x18015c170]
movups xmmword [rbp + 0x10], xmm1
movzx eax, word [0x18015c180]
mov word [rbp + 0x20], ax
mov r8d, r13d
cmp r12d, 2
jl 0x180024f1f
movdqa xmm5, xmmword [0x1801600f0]
movdqa xmm4, xmmword [0x1801602f0]
mov eax, 4
movd xmm6, eax
movdqa xmm7, xmmword [0x180160110]
mov eax, 0x1f
movd xmm8, eax
movdqa xmm9, xmmword [str.4444444455555555]
lea rcx, [rbp]
nop dword [rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm9
paddw xmm3, xmm2
movq xmm0, qword [rcx]
xorps xmm3, xmm0
movq qword [rcx], xmm3
lea eax, [r8 + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm9
paddw xmm3, xmm2
movq xmm0, qword [rcx + 8]
xorps xmm3, xmm0
movq qword [rcx + 8], xmm3
add r8d, 8
lea rcx, [rcx + 0x10]
cmp r8d, 0x10
jl 0x180024e30
cmp r8d, 0x11
jge 0x180024f64
movsxd rax, r8d
lea r9, [rbp]
lea r9, [r9 + rax*2]
nop word [rax + rax]
mov eax, 0x5397829d
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movzx eax, dx
imul ecx, eax, 0x31
movzx eax, r8w
sub ax, cx
add ax, 0x34
xor word [r9], ax
inc r8d
lea r9, [r9 + 2]
cmp r8d, 0x11
jl 0x180024f30
xorps xmm0, xmm0
movups xmmword [rbp - 0x40], xmm0
mov qword [rbp - 0x30], r13
mov qword [rbp - 0x28], r13
lea rax, [rbp]
mov r8, rsi
nop word [rax + rax]
inc r8
cmp word [rax + r8*2], 0
jne 0x180024f80
lea rdx, [rbp]
lea rcx, [rbp - 0x40]
call fcn.180008da0
nop
or r15d, 2
mov dword [rbp + 0x710], r15d
cmp qword [rbp - 0x30], 0
je 0x180025293
lea rdx, [rbp - 0x40]
lea rcx, [rsp + 0x40]
call fcn.180007680
nop
mov r8, rsi
lea rdx, [0x18015ab64]
lea rcx, [rsp + 0x40]
call fcn.180007340
cmp rax, 0xffffffffffffffff
je 0x18002503e
mov r8, rsi
lea rdx, [0x18015ab8c]
lea rcx, [rsp + 0x40]
call fcn.180007340
mov rbx, qword [rsp + 0x50]
cmp rbx, rax
jb 0x180026713
mov rcx, rbx
sub rcx, rax
mov rdx, rsi
cmp rcx, rdx
cmovb rdx, rcx
lea rcx, [rsp + 0x40]
cmp qword [rsp + 0x58], 8
cmovae rcx, qword [rsp + 0x40]
lea rcx, [rcx + rax*2]
sub rbx, rdx
lea rdx, [rcx + rdx*2]
mov r8, rbx
sub r8, rax
lea r8, [r8*2 + 2]
call fcn.1800c0160
mov qword [rsp + 0x50], rbx
lea rdx, [0x18015ab80]
lea rcx, [rsp + 0x40]
call fcn.180009970
xor edx, edx
lea ecx, [rdx + 2]
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rdi, rax
mov dword [rbp + 0x160], 0x238
lea rdx, [rbp + 0x160]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_Process32FirstW]
test eax, eax
jne 0x1800250d0
mov rdx, qword [rsp + 0x58]
cmp rdx, 8
jb 0x180025293
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18002528e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18002669b
jmp 0x18002528e
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x70], r13
mov qword [rsp + 0x78], r13
lea rax, [rbp + 0x18c]
mov r8, rsi
nop dword [rax]
inc r8
cmp word [rax + r8*2], 0
jne 0x1800250f0
lea rdx, [rbp + 0x18c]
lea rcx, [rsp + 0x60]
call fcn.180008da0
lea rdx, [rsp + 0x60]
lea rcx, [rbp - 0x20]
call fcn.1800a16d0
mov rbx, rax
lea rdx, [rsp + 0x40]
lea rcx, [rbp]
call fcn.180007680
mov rdx, rax
lea rcx, [rbp + 0x28]
call fcn.1800a16d0
mov r10, qword [rax + 0x10]
cmp qword [rax + 0x18], 8
jb 0x180025145
mov rax, qword [rax]
mov r9, qword [rbx + 0x10]
cmp qword [rbx + 0x18], 8
jb 0x180025153
mov rbx, qword [rbx]
mov rcx, r9
cmp r10, r9
cmovb rcx, r10
test rcx, rcx
je 0x180025178
sub rbx, rax
movzx edx, word [rax + rbx]
cmp dx, word [rax]
jne 0x180025181
add rax, 2
sub rcx, 1
jne 0x180025165
cmp r9, r10
jae 0x180025189
mov ebx, esi
jmp 0x18002518f
mov ebx, r14d
cmovb ebx, esi
jmp 0x18002518f
mov ebx, r13d
seta bl
mov rdx, qword [rbp + 0x40]
cmp rdx, 8
jb 0x1800251cf
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800251ca
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180026719
call fcn.1800bdc0c
mov qword [rbp + 0x38], r13
mov qword [rbp + 0x40], 7
mov word [rbp + 0x28], r13w
mov rdx, qword [rbp - 8]
cmp rdx, 8
jb 0x180025220
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18002521b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18002671f
call fcn.1800bdc0c
mov qword [rbp - 0x10], r13
mov qword [rbp - 8], 7
mov word [rbp - 0x20], r13w
test ebx, ebx
je 0x1800257dc
lea rdx, [rbp + 0x160]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_Process32NextW]
test eax, eax
jne 0x1800250d0
mov rdx, qword [rsp + 0x58]
cmp rdx, 8
jb 0x180025293
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18002528e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18002673d
call fcn.1800bdc0c
mov eax, dword [0x18015c1f8]
mov dword [rbp + 0x68], eax
movups xmm0, xmmword [0x18015c1d8]
movups xmm1, xmmword [0x18015c1e8]
movzx eax, word [0x18015c1fc]
movups xmmword [rbp + 0x48], xmm0
movups xmmword [rbp + 0x58], xmm1
mov word [rbp + 0x6c], ax
mov r8d, r13d
cmp r12d, 2
jl 0x1800253f1
movdqa xmm5, xmmword [0x1801600f0]
movdqa xmm4, xmmword [0x1801602f0]
mov eax, 4
movd xmm6, eax
movdqa xmm7, xmmword [0x180160110]
mov eax, 0x1f
movd xmm8, eax
movdqa xmm9, xmmword [str.4444444455555555]
lea rcx, [rbp + 0x48]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm9
paddw xmm3, xmm2
movq xmm0, qword [rcx]
xorps xmm3, xmm0
movq qword [rcx], xmm3
lea eax, [r8 + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm9
paddw xmm3, xmm2
movq xmm0, qword [rcx + 8]
xorps xmm3, xmm0
movq qword [rcx + 8], xmm3
add r8d, 8
lea rcx, [rcx + 0x10]
cmp r8d, 0x10
jl 0x180025302
cmp r8d, 0x13
jge 0x180025434
movsxd rax, r8d
lea r9, [rbp + 0x48]
lea r9, [r9 + rax*2]
nop dword [rax]
mov eax, 0x5397829d
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movzx eax, dx
imul ecx, eax, 0x31
movzx eax, r8w
sub ax, cx
add ax, 0x34
xor word [r9], ax
inc r8d
lea r9, [r9 + 2]
cmp r8d, 0x13
jl 0x180025400
xorps xmm0, xmm0
movups xmmword [rbp - 0x60], xmm0
mov qword [rbp - 0x50], r13
mov qword [rbp - 0x48], r13
lea rax, [rbp + 0x48]
mov r8, rsi
nop word [rax + rax]
inc r8
cmp word [rax + r8*2], 0
jne 0x180025450
lea rdx, [rbp + 0x48]
lea rcx, [rbp - 0x60]
call fcn.180008da0
nop
or r15d, 4
mov dword [rbp + 0x710], r15d
cmp qword [rbp - 0x50], 0
je 0x18002558d
lea rdx, [rbp - 0x60]
lea rcx, [rsp + 0x40]
call fcn.180007680
nop
mov r8, rsi
lea rdx, [0x18015ab64]
lea rcx, [rsp + 0x40]
call fcn.180007340
cmp rax, 0xffffffffffffffff
je 0x18002550e
mov r8, rsi
lea rdx, [0x18015ab8c]
lea rcx, [rsp + 0x40]
call fcn.180007340
mov rbx, qword [rsp + 0x50]
cmp rbx, rax
jb 0x180026725
mov rcx, rbx
sub rcx, rax
mov rdx, rsi
cmp rcx, rdx
cmovb rdx, rcx
lea rcx, [rsp + 0x40]
cmp qword [rsp + 0x58], 8
cmovae rcx, qword [rsp + 0x40]
lea rcx, [rcx + rax*2]
sub rbx, rdx
lea rdx, [rcx + rdx*2]
mov r8, rbx
sub r8, rax
lea r8, [r8*2 + 2]
call fcn.1800c0160
mov qword [rsp + 0x50], rbx
lea rdx, [0x18015ab80]
lea rcx, [rsp + 0x40]
call fcn.180009970
xor edx, edx
lea ecx, [rdx + 2]
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rdi, rax
mov dword [rbp + 0x160], 0x238
lea rdx, [rbp + 0x160]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_Process32FirstW]
test eax, eax
jne 0x1800255a0
mov rdx, qword [rsp + 0x58]
cmp rdx, 8
jb 0x18002558d
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180025588
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18002672b
call fcn.1800bdc0c
mov bl, 1
jmp 0x18002584a
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
mov qword [rbp - 0x10], r13
mov qword [rbp - 8], r13
lea rax, [rbp + 0x18c]
mov r8, rsi
nop dword [rax]
inc r8
cmp word [rax + r8*2], 0
jne 0x1800255c0
lea rdx, [rbp + 0x18c]
lea rcx, [rbp - 0x20]
call fcn.180008da0
lea rdx, [rbp - 0x20]
lea rcx, [rsp + 0x60]
call fcn.1800a16d0
mov rbx, rax
lea rdx, [rsp + 0x40]
lea rcx, [rbp]
call fcn.180007680
mov rdx, rax
lea rcx, [rbp + 0x28]
call fcn.1800a16d0
mov r10, qword [rax + 0x10]
cmp qword [rax + 0x18], 8
jb 0x180025614
mov rax, qword [rax]
mov r9, qword [rbx + 0x10]
cmp qword [rbx + 0x18], 8
jb 0x180025622
mov rbx, qword [rbx]
mov rcx, r9
cmp r10, r9
cmovb rcx, r10
test rcx, rcx
je 0x180025647
sub rbx, rax
movzx edx, word [rax + rbx]
cmp dx, word [rax]
jne 0x180025650
add rax, 2
sub rcx, 1
jne 0x180025634
cmp r9, r10
jae 0x180025658
mov ebx, esi
jmp 0x18002565e
mov ebx, r14d
cmovb ebx, esi
jmp 0x18002565e
mov ebx, r13d
seta bl
mov rdx, qword [rbp + 0x40]
cmp rdx, 8
jb 0x18002569e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180025699
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180026731
call fcn.1800bdc0c
mov qword [rbp + 0x38], r13
mov qword [rbp + 0x40], 7
mov word [rbp + 0x28], r13w
mov rdx, qword [rsp + 0x78]
cmp rdx, 8
jb 0x1800256f1
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800256ec
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180026737
call fcn.1800bdc0c
mov qword [rsp + 0x70], r13
mov qword [rsp + 0x78], 7
mov word [rsp + 0x60], r13w
test ebx, ebx
je 0x18002576b
lea rdx, [rbp + 0x160]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_Process32NextW]
test eax, eax
jne 0x1800255a0
mov rdx, qword [rsp + 0x58]
cmp rdx, 8
jb 0x18002558d
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180025588
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800266a1
jmp 0x180025588
mov r8d, dword [rbp + 0x168]
xor edx, edx
lea ecx, [rdx + 0x10]
call qword [sym.imp.KERNEL32.dll_OpenProcess]
test rax, rax
je 0x18002578b
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 8
jb 0x180025848
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180025843
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800266a1
jmp 0x180025843
mov r8d, dword [rbp + 0x168]
xor edx, edx
lea ecx, [rdx + 0x10]
call qword [sym.imp.KERNEL32.dll_OpenProcess]
test rax, rax
je 0x1800257fc
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 8
jb 0x180025848
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180025843
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18002673d
call fcn.1800bdc0c
xor bl, bl
test r15b, 4
je 0x180025895
and r15d, 0xfffffffb
mov rdx, qword [rbp - 0x48]
cmp rdx, 8
jb 0x180025895
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18002588f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180026743
call fcn.1800bdc0c
nop
test r15b, 2
je 0x1800258e0
and r15d, 0xfffffffd
mov rdx, qword [rbp - 0x28]
cmp rdx, 8
jb 0x1800258e0
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800258da
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180026749
call fcn.1800bdc0c
nop
test r15b, 1
je 0x18002592a
and r15d, 0xfffffffe
mov rdx, qword [rbp - 0x68]
cmp rdx, 8
jb 0x18002592a
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180025925
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18002674f
call fcn.1800bdc0c
test bl, bl
jne 0x180025a4f
call fcn.1800bbce8
mov rbx, rax
call fcn.1800bbccc
cmp rbx, 0x989680
jne 0x18002594e
imul rax, rax, 0x64
jmp 0x18002596c
cqo
idiv rbx
mov rcx, rax
imul rax, rdx, 0x3b9aca00
cqo
idiv rbx
imul rcx, rcx, 0x3b9aca00
add rax, rcx
movabs rcx, 0x7ffffffffa0a1efe
cmp rax, rcx
lea rdi, [rax + 0x5f5e100]
jle 0x180025990
movabs rdi, 0x7fffffffffffffff
nop dword [rax]
call fcn.1800bbce8
mov rbx, rax
call fcn.1800bbccc
cmp rbx, 0x989680
jne 0x1800259ac
imul rax, rax, 0x64
jmp 0x1800259ca
cqo
idiv rbx
mov rcx, rax
imul rax, rdx, 0x3b9aca00
cqo
idiv rbx
imul rcx, rcx, 0x3b9aca00
add rax, rcx
cmp rdi, rax
mov ebx, 4
je 0x180023b02
jl 0x180023b02
mov rbx, rdi
sub rbx, rax
call fcn.1800bbe1c
imul rcx, rax, 0x64
xorps xmm0, xmm0
cvtsi2sd xmm0, rbx
comisd xmm0, xmm10
jbe 0x180025a0b
movabs rax, 0x311cdad160000
add rcx, rax
jmp 0x180025a0e
add rcx, rbx
movabs rax, 0x112e0be826d694b3
imul rcx
sar rdx, 0x1a
mov rax, rdx
shr rax, 0x3f
add rdx, rax
mov qword [rbp + 0xb0], rdx
imul eax, edx, 0x3b9aca00
sub ecx, eax
mov dword [rbp + 0xb8], ecx
lea rcx, [rbp + 0xb0]
call fcn.1800bbe4c
jmp 0x180025990
lea rax, [rsp + 0x40]
mov qword [rbp + 0x710], rax
movups xmm0, xmmword [0x18015c118]
movups xmmword [rsp + 0x60], xmm0
movzx eax, word [0x18015c128]
mov ecx, 0x2d
mov word [rsp + 0x60], cx
xor word [rsp + 0x62], 0x35
xor word [rsp + 0x64], 0x36
xor word [rsp + 0x66], 0x37
xor word [rsp + 0x68], 0x38
xor word [rsp + 0x6a], 0x39
xor word [rsp + 0x6c], 0x3a
xor word [rsp + 0x6e], 0x3b
xor ax, 0x3c
mov word [rsp + 0x70], ax
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
mov qword [rbp - 0x70], r13
mov qword [rbp - 0x68], r13
lea rax, [rsp + 0x60]
mov r8, rsi
inc r8
cmp word [rax + r8*2], 0
jne 0x180025ac2
lea rdx, [rsp + 0x60]
lea rcx, [rbp - 0x80]
call fcn.180008da0
nop
lea rax, [rbp - 0x80]
mov qword [rsp + 0x60], rax
lea rax, [rbp - 0x60]
mov qword [rsp + 0x68], rax
movaps xmm0, xmmword [rsp + 0x60]
movdqa xmmword [rsp + 0x60], xmm0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x40]
call fcn.180013a50
mov rbx, rax
lea rdx, [rbp + 0x118]
lea rcx, [rbp]
call fcn.180007680
nop
lea r8, [rbp + 0xc0]
mov rdx, rbx
mov rcx, rax
call fcn.1800a4ee0
movzx ebx, al
lea r9, [fcn.1800074f0]
mov r8, r14
mov edx, 0x20
lea rcx, [rbp - 0x80]
call fcn.1800bdc40
test bl, bl
jne 0x180025b6c
mov rcx, qword [rbp + 0xc0]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp + 0xc8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x1800263ff
movups xmm0, xmmword [str.GASVUJ_IJT_Zn_:D]
movups xmmword [rbp], xmm0
movups xmm1, xmmword [0x18015c170]
movups xmmword [rbp + 0x10], xmm1
movzx eax, word [0x18015c180]
mov word [rbp + 0x20], ax
mov r8d, r13d
mov r15d, 4
cmp r12d, 2
jl 0x180025ccf
movdqa xmm5, xmmword [0x1801600f0]
movdqa xmm4, xmmword [0x1801602f0]
movd xmm6, r15d
movdqa xmm7, xmmword [0x180160110]
mov eax, 0x1f
movd xmm8, eax
movdqa xmm9, xmmword [str.4444444455555555]
lea rcx, [rbp]
nop dword [rax]
nop dword [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm9
paddw xmm3, xmm2
movq xmm0, qword [rcx]
xorps xmm3, xmm0
movq qword [rcx], xmm3
lea eax, [r8 + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm9
paddw xmm3, xmm2
movq xmm0, qword [rcx + 8]
xorps xmm3, xmm0
movq qword [rcx + 8], xmm3
add r8d, 8
lea rcx, [rcx + 0x10]
cmp r8d, 0x10
jl 0x180025be0
cmp r8d, 0x11
jge 0x180025d14
movsxd rax, r8d
lea r9, [rbp]
lea r9, [r9 + rax*2]
nop word [rax + rax]
mov eax, 0x5397829d
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movzx eax, dx
imul ecx, eax, 0x31
movzx eax, r8w
sub ax, cx
add ax, 0x34
xor word [r9], ax
inc r8d
lea r9, [r9 + 2]
cmp r8d, 0x11
jl 0x180025ce0
xorps xmm0, xmm0
movups xmmword [rbp - 0x40], xmm0
mov qword [rbp - 0x30], r13
mov qword [rbp - 0x28], r13
lea rax, [rbp]
mov r8, rsi
nop word [rax + rax]
inc r8
cmp word [rax + r8*2], 0
jne 0x180025d30
lea rdx, [rbp]
lea rcx, [rbp - 0x40]
call fcn.180008da0
nop
cmp qword [rbp - 0x30], 0
jne 0x180025d57
xor bl, bl
jmp 0x18002608e
lea rdx, [rbp - 0x40]
lea rcx, [rsp + 0x40]
call fcn.180007680
nop
mov r8, rsi
lea rdx, [0x18015ab64]
lea rcx, [rsp + 0x40]
call fcn.180007340
cmp rax, 0xffffffffffffffff
je 0x180025de9
mov r8, rsi
lea rdx, [0x18015ab8c]
lea rcx, [rsp + 0x40]
call fcn.180007340
mov r9, rax
mov rbx, qword [rsp + 0x50]
cmp rbx, rax
jb 0x180026755
mov rax, rbx
sub rax, r9
mov r8, rsi
cmp rax, rsi
cmovb r8, rax
lea rax, [rsp + 0x40]
cmp qword [rsp + 0x58], 8
cmovae rax, qword [rsp + 0x40]
lea rcx, [rax + r9*2]
sub rbx, r8
lea rdx, [rcx + r8*2]
mov r8, rbx
sub r8, r9
lea r8, [r8*2 + 2]
call fcn.1800c0160
mov qword [rsp + 0x50], rbx
lea rdx, [0x18015ab80]
lea rcx, [rsp + 0x40]
call fcn.180009970
xor edx, edx
lea ecx, [rdx + 2]
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rdi, rax
mov dword [rbp + 0x160], 0x238
lea rdx, [rbp + 0x160]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_Process32FirstW]
test eax, eax
jne 0x180025e70
mov rdx, qword [rsp + 0x58]
cmp rdx, 8
jb 0x18002601c
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180026017
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800266a7
jmp 0x180026017
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
mov qword [rbp - 0x10], r13
mov qword [rbp - 8], r13
lea rax, [rbp + 0x18c]
mov r8, rsi
nop dword [rax]
inc r8
cmp word [rax + r8*2], 0
jne 0x180025e90
lea rdx, [rbp + 0x18c]
lea rcx, [rbp - 0x20]
call fcn.180008da0
lea rdx, [rbp - 0x20]
lea rcx, [rbp - 0x80]
call fcn.1800a16d0
mov rbx, rax
lea rdx, [rsp + 0x40]
lea rcx, [rbp]
call fcn.180007680
mov rdx, rax
lea rcx, [rbp + 0x28]
call fcn.1800a16d0
mov r10, qword [rax + 0x10]
cmp qword [rax + 0x18], 8
jb 0x180025ee3
mov rax, qword [rax]
mov r9, qword [rbx + 0x10]
cmp qword [rbx + 0x18], 8
jb 0x180025ef1
mov rbx, qword [rbx]
mov rcx, r9
cmp r10, r9
cmovb rcx, r10
test rcx, rcx
je 0x180025f16
sub rbx, rax
movzx edx, word [rbx + rax]
cmp dx, word [rax]
jne 0x180025f1f
add rax, 2
sub rcx, 1
jne 0x180025f03
cmp r9, r10
jae 0x180025f27
mov ebx, esi
jmp 0x180025f2d
mov ebx, r14d
cmovb ebx, esi
jmp 0x180025f2d
mov ebx, r13d
seta bl
mov rdx, qword [rbp + 0x40]
cmp rdx, 8
jb 0x180025f6d
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180025f68
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18002675b
call fcn.1800bdc0c
mov qword [rbp + 0x38], r13
mov qword [rbp + 0x40], 7
mov word [rbp + 0x28], r13w
mov rdx, qword [rbp - 0x68]
cmp rdx, 8
jb 0x180025fbe
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180025fb9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180026761
call fcn.1800bdc0c
test ebx, ebx
je 0x180026020
lea rdx, [rbp + 0x160]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_Process32NextW]
test eax, eax
jne 0x180025e70
mov rdx, qword [rsp + 0x58]
cmp rdx, 8
jb 0x18002601c
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180026017
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180026767
call fcn.1800bdc0c
xor bl, bl
jmp 0x18002608e
mov r8d, dword [rbp + 0x168]
xor edx, edx
lea ecx, [rdx + 0x10]
call qword [sym.imp.KERNEL32.dll_OpenProcess]
test rax, rax
je 0x180026040
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 8
jb 0x18002608c
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180026087
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180026767
call fcn.1800bdc0c
mov bl, 1
mov rdx, qword [rbp - 0x28]
cmp rdx, 8
jb 0x1800260ce
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800260c9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180026695
call fcn.1800bdc0c
test bl, bl
jne 0x1800263ff
mov ecx, 0x98
call fcn.1800bdbd0
mov rbx, rax
mov qword [rbp + 0x710], rax
lea rax, [rbp - 0x20]
mov qword [rbp + 0x728], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
mov qword [rbp - 0x10], r13
mov qword [rbp - 8], r13
xor r8d, r8d
lea rdx, [0x1801220a0]
lea rcx, [rbp - 0x20]
call fcn.180008da0
nop
lea rax, [rbp + 0x28]
mov qword [rbp + 0xb0], rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x28], xmm0
mov qword [rbp + 0x38], r13
mov qword [rbp + 0x40], r13
xor r8d, r8d
lea rdx, [0x1801220a4]
lea rcx, [rbp + 0x28]
call fcn.180008da0
nop
movups xmm0, xmmword [str.GASVU]
movups xmmword [rsp + 0x40], xmm0
mov eax, dword [0x18015c110]
mov dword [rsp + 0x50], eax
cmp word [0x18015c112], 0
je 0x1800261a6
mov eax, reloc.WS2_32.dll_WSAStartup
mov word [rsp + 0x40], ax
xor word [rsp + 0x42], 0x35
xor word [rsp + 0x44], 0x36
xor word [rsp + 0x46], 0x37
xor word [rsp + 0x48], 0x38
xor word [rsp + 0x4a], 0x39
xor word [rsp + 0x4c], 0x3a
xor word [rsp + 0x4e], 0x3b
xor word [rsp + 0x50], 0x3c
xor word [rsp + 0x52], 0x3d
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
mov qword [rbp - 0x70], r13
mov qword [rbp - 0x68], r13
lea rax, [rsp + 0x40]
nop word [rax + rax]
inc rsi
cmp word [rax + rsi*2], 0
jne 0x1800261c0
mov r8, rsi
lea rdx, [rsp + 0x40]
lea rcx, [rbp - 0x80]
call fcn.180008da0
nop
lea r9, [rbp - 0x20]
lea r8, [rbp + 0x28]
lea rdx, [rbp - 0x80]
mov rcx, rbx
call fcn.1800314a0
mov rdi, rax
mov rcx, qword [rbp + 0xc0]
mov qword [rax + 0x18], rcx
mov ecx, dword [rbp + 0xd0]
mov dword [rax], ecx
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
lea rbx, [rax + 0x7530]
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
cmp rax, rbx
ja 0x1800263f9
movups xmm0, xmmword [str.GASVUJ_IJT_Zn_._D]
movups xmmword [rbp], xmm0
movups xmm1, xmmword [0x18015c1b0]
movups xmmword [rbp + 0x10], xmm1
movzx eax, word [0x18015c1c0]
mov word [rbp + 0x20], ax
mov r8d, r13d
cmp r12d, 2
jl 0x18002637f
movdqa xmm5, xmmword [0x1801600f0]
movdqa xmm4, xmmword [0x1801602f0]
movd xmm6, r15d
movdqa xmm7, xmmword [0x180160110]
mov eax, 0x1f
movd xmm8, eax
movdqa xmm9, xmmword [str.4444444455555555]
lea rcx, [rbp]
nop dword [rax]
nop dword [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm9
paddw xmm3, xmm2
movq xmm0, qword [rcx]
xorps xmm3, xmm0
movq qword [rcx], xmm3
lea eax, [r8 + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm9
paddw xmm3, xmm2
movq xmm0, qword [rcx + 8]
xorps xmm3, xmm0
movq qword [rcx + 8], xmm3
add r8d, 8
lea rcx, [rcx + 0x10]
cmp r8d, 0x10
jl 0x180026290
cmp r8d, 0x11
jge 0x1800263c4
movsxd rax, r8d
lea r9, [rbp]
lea r9, [r9 + rax*2]
nop word [rax + rax]
mov eax, 0x5397829d
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movzx eax, dx
imul ecx, eax, 0x31
movzx eax, r8w
sub ax, cx
add ax, 0x34
xor word [r9], ax
inc r8d
lea r9, [r9 + 2]
cmp r8d, 0x11
jl 0x180026390
xor r8d, r8d
lea rdx, [rbp]
mov ecx, dword [rbp + 0xd0]
call fcn.1800a2a90
test rax, rax
jne 0x180026479
mov ecx, 0x1f4
call qword [sym.imp.KERNEL32.dll_Sleep]
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
cmp rax, rbx
jbe 0x180026222
mov r14d, 0x405f
mov rdx, qword [rbp + 0x130]
cmp rdx, 8
jb 0x180026445
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x118]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180026440
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18002676d
call fcn.1800bdc0c
mov eax, r14d
lea r11, [rsp + 0x7c8]
movaps xmm6, xmmword [r11 - 0x18]
movaps xmm7, xmmword [r11 - 0x28]
movaps xmm8, xmmword [r11 - 0x38]
movaps xmm9, xmmword [r11 - 0x48]
movaps xmm10, xmmword [r11 - 0x58]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
mov r8d, 0x2a400
lea rdx, [0x180310780]
lea rcx, [rbp + 0x98]
call fcn.1800a1890
nop
lea rdx, [rbp + 0x98]
lea rcx, [rsp + 0x40]
call fcn.180007240
mov rdx, rax
mov rcx, rdi
call fcn.180031820
lea rcx, [rbp + 0x98]
call fcn.1800071d0
mov rdx, qword [0x180366bf8]
lea rcx, [rbp + 0x3a0]
call fcn.180026780
nop
mov rax, qword [0x180366bf8]
mov dword [rax + 0x30], r13d
mov dword [rax + 0x24], r14d
mov dword [rax + 0x20], r14d
mov ecx, 0x12c
call qword [sym.imp.KERNEL32.dll_Sleep]
call fcn.180013910
lea rdx, [rbp + 0xd8]
mov rcx, rax
call fcn.1800138f0
nop
movabs rax, 0x7ffffffffffffffe
mov rcx, qword [rbp + 0xe8]
sub rax, rcx
cmp rax, 8
jb 0x180026773
lea r9, [rbp + 0xd8]
cmp qword [rbp + 0xf0], 8
cmovae r9, qword [rbp + 0xd8]
mov qword [rsp + 0x30], 8
lea rax, str.vcs2.dll
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea rcx, [rbp + 0xf8]
call fcn.180009cd0
nop
lea rdx, [rbp + 0x710]
lea rcx, [rbp + 0xf8]
call fcn.1800074b0
mov rbx, qword [rax]
lea rdx, [rbp + 0x728]
lea rcx, [rbp + 0xf8]
call fcn.1800074d0
mov r8, rbx
mov rdx, qword [rax]
lea rcx, [rbp + 0x138]
call fcn.180008c60
nop
lea rdx, [rdi + 0x20]
lea rcx, [rsp + 0x40]
call fcn.180007240
mov rdx, rax
lea rcx, [rbp + 0xf8]
call fcn.1800a9930
lea rdx, [rbp + 0x138]
lea rcx, [rbp]
call fcn.1800079d0
xor r9d, r9d
xor r8d, r8d
mov rdx, rax
mov rcx, rdi
call fcn.180022140
mov ebx, eax
lea rdx, [rbp + 0x3a0]
mov rcx, qword [0x180366bf8]
call fcn.1800268b0
test ebx, ebx
je 0x1800265fb
call fcn.180023740
mov r14d, eax
jmp 0x1800265fe
mov r14d, r13d
lea rcx, [rbp + 0x138]
call fcn.180007870
nop
lea rcx, [rbp + 0xf8]
call fcn.1800074f0
nop
lea rcx, [rbp + 0xd8]
call fcn.1800074f0
nop
lea rcx, [rbp + 0x3e8]
call fcn.180013270
lea rcx, [rbp + 0x3a0]
call fcn.180013b10
nop
mov rcx, qword [rbp + 0x98]
test rcx, rcx
je 0x1800263ff
mov rdx, qword [rbp + 0xa8]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x180026679
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180026695
call fcn.1800bdc0c
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x98], xmm0
mov qword [rbp + 0xa8], r13
jmp 0x1800263ff
call fcn.1800c9ad0
nop
call fcn.1800c9ad0
nop
call fcn.1800c9ad0
nop
call fcn.1800c9ad0
nop
call fcn.1800c9ad0
nop
call fcn.180008460
nop
call fcn.1800c9ad0
nop
call fcn.1800c9ad0
nop
call fcn.1800c9ad0
nop
call fcn.180008460
nop
call fcn.1800c9ad0
nop
call fcn.1800c9ad0
nop
call fcn.1800c9ad0
nop
call fcn.180008460
nop
call fcn.1800c9ad0
nop
call fcn.1800c9ad0
nop
call fcn.1800c9ad0
nop
call fcn.180008460
nop
call fcn.1800c9ad0
nop
call fcn.1800c9ad0
nop
call fcn.1800c9ad0
nop
call fcn.180008460
nop
call fcn.1800c9ad0
nop
call fcn.1800c9ad0
nop
call fcn.180008460
nop
call fcn.1800c9ad0
nop
call fcn.1800c9ad0
nop
call fcn.1800c9ad0
nop
call fcn.1800c9ad0
int3
call fcn.1800c9ad0
nop
call fcn.1800c9ad0
nop
call fcn.1800c9ad0
nop
call fcn.180008460
nop
call fcn.1800c9ad0
nop
call fcn.1800c9ad0
nop
call fcn.1800c9ad0
nop
call fcn.1800c9ad0
nop
call fcn.180003190
int3