Function at 0x460a00
Capabilities:
Acquire debug privileges
Encode data using xor
Enumerate processes

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff0
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x478ec2
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x868
mov eax, dword [0x4902d4]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x874], edx
mov dword [ebp - 0x854], ecx
mov ecx, dword [0x49032c]
mov edx, dword [0x490330]
cmp ecx, edx
je 0x460a70
push ecx
call fcn.0044bad0
mov eax, dword [0x49032c]
add esp, 4
mov dword [0x490330], eax
push 0
push 2
mov dword [ebp - 0x248], 0x22c
call dword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov esi, eax
lea eax, [ebp - 0x248]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_Process32FirstW]
cmp eax, 1
jne 0x460add
mov edi, dword [sym.imp.KERNEL32.dll_Process32NextW]
lea eax, [ebp - 0x248]
push eax
push esi
call edi
cmp eax, 1
jne 0x460add
nop
push dword [ebp - 0x854]
lea eax, [ebp - 0x224]
push eax
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
add esp, 8
test eax, eax
je 0x460d47
lea eax, [ebp - 0x248]
push eax
push esi
call edi
cmp eax, 1
je 0x460ab0
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ax, word [0x485728]
xor edx, edx
cmp dword [0x4931b8], 2
movups xmm0, xmmword [str.iHT_XML___7d_2__K]
mov word [ebp - 0x834], ax
mov al, byte [0x48572a]
mov byte [ebp - 0x832], al
movups xmmword [ebp - 0x844], xmm0
mov dword [ebp - 0x830], edx
jl 0x460c70
movaps xmm0, xmmword [0x486210]
mov eax, 4
movaps xmm4, xmmword [0x4860d0]
movaps xmm3, xmmword [0x486500]
movaps xmm6, xmmword [0x486100]
movd xmm5, eax
mov eax, 0x1f
movaps xmmword [ebp - 0x870], xmm0
mov ecx, dword [ebp - 0x870]
movd xmm7, eax
nop word [eax + eax]
movd xmm0, edx
lea eax, [edx + 4]
pshufd xmm2, xmm0, 0
paddd xmm2, xmm4
movaps xmm1, xmm2
movaps xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm3
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm5
movaps xmm0, xmm1
psrld xmm0, xmm7
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm0, xmm0, 0xd8
pshufd xmm1, xmm0, 0xd8
pand xmm1, xmmword [0x4861d0]
packuswb xmm1, xmm1
movd xmm0, ecx
paddb xmm1, xmm0
movd xmm0, dword [ebp + edx - 0x844]
pxor xmm1, xmm0
movd xmm0, eax
pshufd xmm2, xmm0, 0
movd dword [ebp + edx - 0x844], xmm1
paddd xmm2, xmm4
movaps xmm1, xmm2
movaps xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm3
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm5
movaps xmm0, xmm1
psrld xmm0, xmm7
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm0, xmm0, 0xd8
pshufd xmm1, xmm0, 0xd8
pand xmm1, xmmword [0x4861d0]
packuswb xmm1, xmm1
movd xmm0, ecx
paddb xmm1, xmm0
movd xmm0, dword [ebp + edx - 0x840]
pxor xmm1, xmm0
movd dword [ebp + edx - 0x840], xmm1
add edx, 8
cmp edx, 0x10
jl 0x460b60
mov dword [ebp - 0x830], edx
cmp edx, 0x13
jge 0x460ca7
nop
mov eax, 0x5397829d
imul edx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [ebp - 0x830]
movsx eax, al
mov cl, dl
imul eax, eax, 0x31
sub cl, al
add cl, 0x39
xor byte [ebp + edx - 0x844], cl
inc edx
mov dword [ebp - 0x830], edx
cmp edx, 0x13
jl 0x460c70
lea eax, [ebp - 0x844]
push eax
lea eax, [ebp - 0x418]
push eax
call fcn.00461e50
xorps xmm0, xmm0
mov dword [ebp - 0x83c], 0
lea ecx, [ebp - 0x418]
mov dword [ebp - 0x838], 0
add esp, 8
lea edx, [ecx + 1]
movups xmmword [ebp - 0x84c], xmm0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x460ce4
sub ecx, edx
lea eax, [ebp - 0x418]
push ecx
push eax
lea ecx, [ebp - 0x84c]
call fcn.00437fe0
mov dword [ebp - 4], 0
mov eax, dword [0x490330]
cmp eax, dword [0x490334]
je 0x461d7e
movups xmm0, xmmword [ebp - 0x84c]
mov ecx, 0xf
mov byte [ebp - 0x84c], 0
movups xmmword [eax], xmm0
movq xmm0, qword [ebp - 0x83c]
movq qword [eax + 0x10], xmm0
add dword [0x490330], 0x18
jmp 0x461d96
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov esi, dword [ebp - 0x240]
test esi, esi
je 0x460ae4
movups xmm0, xmmword [str.iHT_XML_1ecBI]
mov al, byte [0x4856c4]
xor edx, edx
mov edi, dword [0x4931b8]
mov byte [ebp - 0x834], al
mov dword [ebp - 0x830], edx
lea eax, [edx + 4]
lea ecx, [edx + 0x1f]
movups xmmword [ebp - 0x844], xmm0
cmp edi, 2
jl 0x460ed1
movaps xmm0, xmmword [0x486210]
movaps xmm4, xmmword [0x4860d0]
movaps xmm3, xmmword [0x486500]
movaps xmm6, xmmword [0x486100]
movd xmm7, ecx
movaps xmmword [ebp - 0x870], xmm0
mov ecx, dword [ebp - 0x870]
movd xmm5, eax
movd xmm0, edx
lea eax, [edx + 4]
pshufd xmm2, xmm0, 0
paddd xmm2, xmm4
movaps xmm1, xmm2
movaps xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm3
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm5
movaps xmm0, xmm1
psrld xmm0, xmm7
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm0, xmm0, 0xd8
pshufd xmm1, xmm0, 0xd8
pand xmm1, xmmword [0x4861d0]
packuswb xmm1, xmm1
movd xmm0, ecx
paddb xmm1, xmm0
movd xmm0, dword [ebp + edx - 0x844]
pxor xmm1, xmm0
movd xmm0, eax
pshufd xmm2, xmm0, 0
movd dword [ebp + edx - 0x844], xmm1
paddd xmm2, xmm4
movaps xmm1, xmm2
movaps xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm3
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm5
movaps xmm0, xmm1
psrld xmm0, xmm7
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm0, xmm0, 0xd8
pshufd xmm1, xmm0, 0xd8
pand xmm1, xmmword [0x4861d0]
packuswb xmm1, xmm1
movd xmm0, ecx
paddb xmm1, xmm0
movd xmm0, dword [ebp + edx - 0x840]
pxor xmm1, xmm0
movd dword [ebp + edx - 0x840], xmm1
add edx, 8
cmp edx, 0x10
jl 0x460dc3
mov dword [ebp - 0x830], edx
cmp edx, 0x11
jge 0x460f08
mov eax, 0x5397829d
imul edx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [ebp - 0x830]
movsx eax, al
mov cl, dl
imul eax, eax, 0x31
sub cl, al
add cl, 0x39
xor byte [ebp + edx - 0x844], cl
inc edx
mov dword [ebp - 0x830], edx
cmp edx, 0x11
jl 0x460ed1
push esi
lea eax, [ebp - 0x844]
push eax
lea eax, [ebp - 0x418]
push eax
call fcn.00461e50
xorps xmm0, xmm0
mov dword [ebp - 0x83c], 0
lea ecx, [ebp - 0x418]
mov dword [ebp - 0x838], 0
add esp, 0xc
lea edx, [ecx + 1]
movups xmmword [ebp - 0x84c], xmm0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x460f46
sub ecx, edx
lea eax, [ebp - 0x418]
push ecx
push eax
lea ecx, [ebp - 0x84c]
call fcn.00437fe0
mov dword [ebp - 4], 1
mov eax, dword [0x490330]
cmp eax, dword [0x490334]
je 0x460fa2
movups xmm0, xmmword [ebp - 0x84c]
mov ecx, 0xf
mov byte [ebp - 0x84c], 0
movups xmmword [eax], xmm0
movq xmm0, qword [ebp - 0x83c]
movq qword [eax + 0x10], xmm0
add dword [0x490330], 0x18
jmp 0x460fba
lea ecx, [ebp - 0x84c]
push ecx
push eax
mov ecx, 0x49032c
call fcn.00461e70
mov ecx, dword [ebp - 0x838]
mov dword [ebp - 4], 0xffffffff
cmp ecx, 0x10
jb 0x460ff7
mov edx, dword [ebp - 0x84c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x460fed
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x460fed
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.0047421c
add esp, 8
lea eax, [ebp - 0x82c]
mov dword [ebp - 0x82c], 0
push eax
xorps xmm0, xmm0
push 0x28
movups xmmword [ebp - 0x828], xmm0
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.ADVAPI32.dll_OpenProcessToken]
test eax, eax
je 0x461078
lea eax, [ebp - 0x824]
mov dword [ebp - 0x828], 1
push eax
push str.SeDebugPrivilege
push 0
mov dword [ebp - 0x81c], 2
call dword [sym.imp.ADVAPI32.dll_LookupPrivilegeValueW]
test eax, eax
je 0x46106c
push 0
push 0
push 0
lea eax, [ebp - 0x828]
push eax
push 0
push dword [ebp - 0x82c]
call dword [sym.imp.ADVAPI32.dll_AdjustTokenPrivileges]
push dword [ebp - 0x82c]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push esi
push 0
push 0x1fffff
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov esi, eax
test esi, esi
jne 0x461359
call dword [sym.imp.KERNEL32.dll_GetLastError]
movups xmm0, xmmword [str.vJRmLP_10d.__.ql6j_b_R]
mov cx, word [0x4856e0]
mov esi, eax
mov word [ebp - 0x834], cx
movups xmmword [ebp - 0x84c], xmm0
movq xmm0, qword [0x4856d8]
movq qword [ebp - 0x83c], xmm0
test ch, ch
je 0x461267
xor edx, edx
mov dword [ebp - 0x830], edx
cmp edi, 2
jl 0x461230
movaps xmm0, xmmword [0x486210]
mov ecx, 4
movaps xmm4, xmmword [0x4860d0]
movaps xmm3, xmmword [0x486500]
movaps xmm6, xmmword [0x486100]
movd xmm5, ecx
mov ecx, 0x1f
movaps xmmword [ebp - 0x870], xmm0
movd xmm7, ecx
mov ecx, dword [ebp - 0x870]
nop dword [eax + eax]
movd xmm0, edx
lea eax, [edx + 4]
pshufd xmm2, xmm0, 0
paddd xmm2, xmm4
movaps xmm1, xmm2
movaps xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm3
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm5
movaps xmm0, xmm1
psrld xmm0, xmm7
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm0, xmm0, 0xd8
pshufd xmm1, xmm0, 0xd8
pand xmm1, xmmword [0x4861d0]
packuswb xmm1, xmm1
movd xmm0, ecx
paddb xmm1, xmm0
movd xmm0, dword [ebp + edx - 0x84c]
pxor xmm1, xmm0
movd xmm0, eax
pshufd xmm2, xmm0, 0
movd dword [ebp + edx - 0x84c], xmm1
paddd xmm2, xmm4
movaps xmm1, xmm2
movaps xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm3
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm5
movaps xmm0, xmm1
psrld xmm0, xmm7
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm0, xmm0, 0xd8
pshufd xmm1, xmm0, 0xd8
pand xmm1, xmmword [0x4861d0]
packuswb xmm1, xmm1
movd xmm0, ecx
paddb xmm1, xmm0
movd xmm0, dword [ebp + edx - 0x848]
pxor xmm1, xmm0
movd dword [ebp + edx - 0x848], xmm1
add edx, 8
cmp edx, 0x18
jl 0x461120
mov dword [ebp - 0x830], edx
cmp edx, 0x1a
jge 0x461267
nop
mov eax, 0x5397829d
imul edx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [ebp - 0x830]
movsx eax, al
mov cl, dl
imul eax, eax, 0x31
sub cl, al
add cl, 0x39
xor byte [ebp + edx - 0x84c], cl
inc edx
mov dword [ebp - 0x830], edx
cmp edx, 0x1a
jl 0x461230
push esi
lea eax, [ebp - 0x84c]
push eax
lea eax, [ebp - 0x418]
push eax
call fcn.00461e50
xorps xmm0, xmm0
mov dword [ebp - 0x83c], 0
lea ecx, [ebp - 0x418]
mov dword [ebp - 0x838], 0
add esp, 0xc
lea edx, [ecx + 1]
movups xmmword [ebp - 0x84c], xmm0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4612a5
sub ecx, edx
lea eax, [ebp - 0x418]
push ecx
push eax
lea ecx, [ebp - 0x84c]
call fcn.00437fe0
mov dword [ebp - 4], 2
mov eax, dword [0x490330]
cmp eax, dword [0x490334]
je 0x461301
movups xmm0, xmmword [ebp - 0x84c]
mov ecx, 0xf
mov byte [ebp - 0x84c], 0
movups xmmword [eax], xmm0
movq xmm0, qword [ebp - 0x83c]
movq qword [eax + 0x10], xmm0
add dword [0x490330], 0x18
jmp 0x461319
lea edx, [ebp - 0x84c]
mov ecx, 0x49032c
push edx
push eax
call fcn.00461e70
mov ecx, dword [ebp - 0x838]
cmp ecx, 0x10
jb 0x46134f
mov edx, dword [ebp - 0x84c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x461345
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x461345
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.0047421c
add esp, 8
mov eax, 0xfffffffe
jmp 0x461dcf
mov ecx, esi
call fcn.00460690
test al, al
jne 0x46163f
movups xmm0, xmmword [0x485694]
mov eax, dword [0x4856ac]
xor edx, edx
mov dword [ebp - 0x838], eax
mov ax, word [0x4856b0]
mov word [ebp - 0x834], ax
mov al, byte [0x4856b2]
mov byte [ebp - 0x832], al
mov dword [ebp - 0x830], edx
movups xmmword [ebp - 0x850], xmm0
movq xmm0, qword [0x4856a4]
movq qword [ebp - 0x840], xmm0
cmp edi, 2
jl 0x461510
movaps xmm0, xmmword [0x486210]
mov ecx, 4
movaps xmm4, xmmword [0x4860d0]
movaps xmm3, xmmword [0x486500]
movaps xmm6, xmmword [0x486100]
movd xmm5, ecx
mov ecx, 0x1f
movaps xmmword [ebp - 0x870], xmm0
movd xmm7, ecx
mov ecx, dword [ebp - 0x870]
nop word [eax + eax]
movd xmm0, edx
lea eax, [edx + 4]
pshufd xmm2, xmm0, 0
paddd xmm2, xmm4
movaps xmm1, xmm2
movaps xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm3
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm5
movaps xmm0, xmm1
psrld xmm0, xmm7
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm0, xmm0, 0xd8
pshufd xmm1, xmm0, 0xd8
pand xmm1, xmmword [0x4861d0]
packuswb xmm1, xmm1
movd xmm0, ecx
paddb xmm1, xmm0
movd xmm0, dword [ebp + edx - 0x850]
pxor xmm1, xmm0
movd xmm0, eax
pshufd xmm2, xmm0, 0
movd dword [ebp + edx - 0x850], xmm1
paddd xmm2, xmm4
movaps xmm1, xmm2
movaps xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm3
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm5
movaps xmm0, xmm1
psrld xmm0, xmm7
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm0, xmm0, 0xd8
pshufd xmm1, xmm0, 0xd8
pand xmm1, xmmword [0x4861d0]
packuswb xmm1, xmm1
movd xmm0, ecx
paddb xmm1, xmm0
movd xmm0, dword [ebp + edx - 0x84c]
pxor xmm1, xmm0
movd dword [ebp + edx - 0x84c], xmm1
add edx, 8
cmp edx, 0x18
jl 0x461400
mov dword [ebp - 0x830], edx
cmp edx, 0x1f
jge 0x461547
nop
mov eax, 0x5397829d
imul edx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [ebp - 0x830]
movsx eax, al
mov cl, dl
imul eax, eax, 0x31
sub cl, al
add cl, 0x39
xor byte [ebp + edx - 0x850], cl
inc edx
mov dword [ebp - 0x830], edx
cmp edx, 0x1f
jl 0x461510
lea eax, [ebp - 0x850]
push eax
lea eax, [ebp - 0x418]
push eax
call fcn.00461e50
xorps xmm0, xmm0
mov dword [ebp - 0x83c], 0
lea ecx, [ebp - 0x418]
mov dword [ebp - 0x838], 0
add esp, 8
lea edx, [ecx + 1]
movups xmmword [ebp - 0x84c], xmm0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x461584
sub ecx, edx
lea eax, [ebp - 0x418]
push ecx
push eax
lea ecx, [ebp - 0x84c]
call fcn.00437fe0
mov dword [ebp - 4], 3
mov eax, dword [0x490330]
cmp eax, dword [0x490334]
je 0x4615e0
movups xmm0, xmmword [ebp - 0x84c]
mov ecx, 0xf
mov byte [ebp - 0x84c], 0
movups xmmword [eax], xmm0
movq xmm0, qword [ebp - 0x83c]
movq qword [eax + 0x10], xmm0
add dword [0x490330], 0x18
jmp 0x4615f8
lea ecx, [ebp - 0x84c]
push ecx
push eax
mov ecx, 0x49032c
call fcn.00461e70
mov ecx, dword [ebp - 0x838]
cmp ecx, 0x10
jb 0x46162e
mov edx, dword [ebp - 0x84c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x461624
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x461624
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.0047421c
add esp, 8
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, 0xfffffffd
jmp 0x461dcf
cmp byte [0x485737], 0
movq xmm0, qword [str.t_KLTPXnolIDHISO]
mov eax, dword [0x485734]
movq qword [ebp - 0x86c], xmm0
mov dword [ebp - 0x864], eax
je 0x4617c7
xor edx, edx
mov dword [ebp - 0x830], edx
cmp edi, 2
jl 0x461790
movaps xmm2, xmmword [0x4860d0]
mov eax, 4
movaps xmm4, xmmword [0x486500]
movaps xmm1, xmm2
punpckldq xmm1, xmm2
movaps xmm0, xmm2
punpckhdq xmm0, xmm2
mov edx, 8
pmuldq xmm0, xmm4
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
movd xmm5, eax
mov eax, 0x1f
psrad xmm1, xmm5
mov dword [ebp - 0x830], edx
movaps xmm0, xmm1
movd xmm6, eax
mov eax, dword [0x486210]
psrld xmm0, xmm6
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x486100]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
movaps xmm2, xmmword [0x4860e0]
pshufhw xmm0, xmm0, 0xd8
pshufd xmm1, xmm0, 0xd8
pand xmm1, xmmword [0x4861d0]
packuswb xmm1, xmm1
movd xmm0, eax
paddb xmm1, xmm0
movd xmm0, dword [str.t_KLTPXnolIDHISO]
pxor xmm1, xmm0
movaps xmm0, xmm2
movd dword [ebp - 0x86c], xmm1
movaps xmm1, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm4
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm5
movaps xmm0, xmm1
psrld xmm0, xmm6
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x486100]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm0, xmm0, 0xd8
pshufd xmm1, xmm0, 0xd8
pand xmm1, xmmword [0x4861d0]
packuswb xmm1, xmm1
movd xmm0, eax
paddb xmm1, xmm0
movd xmm0, dword [ebp - 0x868]
pxor xmm1, xmm0
movd dword [ebp - 0x868], xmm1
nop dword [eax]
mov eax, 0x5397829d
imul edx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [ebp - 0x830]
movsx eax, al
mov cl, dl
imul eax, eax, 0x31
sub cl, al
add cl, 0x39
xor byte [ebp + edx - 0x86c], cl
inc edx
mov dword [ebp - 0x830], edx
cmp edx, 0xc
jl 0x461790
lea eax, [ebp - 0x86c]
push eax
lea eax, [ebp - 0x418]
push eax
call fcn.00461e50
xorps xmm0, xmm0
mov dword [ebp - 0x83c], 0
lea ecx, [ebp - 0x418]
mov dword [ebp - 0x838], 0
add esp, 8
lea edx, [ecx + 1]
movups xmmword [ebp - 0x84c], xmm0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x461804
sub ecx, edx
lea eax, [ebp - 0x418]
push ecx
push eax
lea ecx, [ebp - 0x84c]
call fcn.00437fe0
mov dword [ebp - 4], 4
mov eax, dword [0x490330]
cmp eax, dword [0x490334]
je 0x461860
movups xmm0, xmmword [ebp - 0x84c]
mov ecx, 0xf
mov byte [ebp - 0x84c], 0
movups xmmword [eax], xmm0
movq xmm0, qword [ebp - 0x83c]
movq qword [eax + 0x10], xmm0
add dword [0x490330], 0x18
jmp 0x461878
lea ecx, [ebp - 0x84c]
push ecx
push eax
mov ecx, 0x49032c
call fcn.00461e70
mov ecx, dword [ebp - 0x838]
mov dword [ebp - 4], 0xffffffff
cmp ecx, 0x10
jb 0x4618b5
mov edx, dword [ebp - 0x84c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4618ab
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x4618ab
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.0047421c
add esp, 8
mov edx, dword [ebp - 0x874]
mov ecx, esi
push 0
push 1
push 1
push 1
push 1
push 1
push dword [ebx + 8]
call fcn.00461f90
add esp, 0x1c
push esi
test al, al
jne 0x461b98
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [0x485748]
movups xmm0, xmmword [0x485738]
mov dword [ebp - 0x838], eax
mov ax, word [0x48574c]
mov word [ebp - 0x834], ax
movups xmmword [ebp - 0x848], xmm0
test ah, ah
je 0x461aa7
xor edx, edx
mov dword [ebp - 0x830], edx
cmp edi, 2
jl 0x461a70
movaps xmm0, xmmword [0x486210]
mov eax, 4
movaps xmm4, xmmword [0x4860d0]
movaps xmm3, xmmword [0x486500]
movaps xmm6, xmmword [0x486100]
movd xmm5, eax
mov eax, 0x1f
movaps xmmword [ebp - 0x870], xmm0
mov ecx, dword [ebp - 0x870]
movd xmm7, eax
nop dword [eax]
movd xmm0, edx
lea eax, [edx + 4]
pshufd xmm2, xmm0, 0
paddd xmm2, xmm4
movaps xmm1, xmm2
movaps xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm3
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm5
movaps xmm0, xmm1
psrld xmm0, xmm7
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm0, xmm0, 0xd8
pshufd xmm1, xmm0, 0xd8
pand xmm1, xmmword [0x4861d0]
packuswb xmm1, xmm1
movd xmm0, ecx
paddb xmm1, xmm0
movd xmm0, dword [ebp + edx - 0x848]
pxor xmm1, xmm0
movd xmm0, eax
pshufd xmm2, xmm0, 0
movd dword [ebp + edx - 0x848], xmm1
paddd xmm2, xmm4
movaps xmm1, xmm2
movaps xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm3
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm5
movaps xmm0, xmm1
psrld xmm0, xmm7
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm0, xmm0, 0xd8
pshufd xmm1, xmm0, 0xd8
pand xmm1, xmmword [0x4861d0]
packuswb xmm1, xmm1
movd xmm0, ecx
paddb xmm1, xmm0
movd xmm0, dword [ebp + edx - 0x844]
pxor xmm1, xmm0
movd dword [ebp + edx - 0x844], xmm1
add edx, 8
cmp edx, 0x10
jl 0x461960
mov dword [ebp - 0x830], edx
cmp edx, 0x16
jge 0x461aa7
nop
mov eax, 0x5397829d
imul edx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [ebp - 0x830]
movsx eax, al
mov cl, dl
imul eax, eax, 0x31
sub cl, al
add cl, 0x39
xor byte [ebp + edx - 0x848], cl
inc edx
mov dword [ebp - 0x830], edx
cmp edx, 0x16
jl 0x461a70
lea eax, [ebp - 0x848]
push eax
lea eax, [ebp - 0x418]
push eax
call fcn.00461e50
xorps xmm0, xmm0
mov dword [ebp - 0x83c], 0
lea ecx, [ebp - 0x418]
mov dword [ebp - 0x838], 0
add esp, 8
lea edx, [ecx + 1]
movups xmmword [ebp - 0x84c], xmm0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x461ae4
sub ecx, edx
lea eax, [ebp - 0x418]
push ecx
push eax
lea ecx, [ebp - 0x84c]
call fcn.00437fe0
mov dword [ebp - 4], 5
mov eax, dword [0x490330]
cmp eax, dword [0x490334]
je 0x461b40
movups xmm0, xmmword [ebp - 0x84c]
mov ecx, 0xf
mov byte [ebp - 0x84c], 0
movups xmmword [eax], xmm0
movq xmm0, qword [ebp - 0x83c]
movq qword [eax + 0x10], xmm0
add dword [0x490330], 0x18
jmp 0x461b58
lea ecx, [ebp - 0x84c]
push ecx
push eax
mov ecx, 0x49032c
call fcn.00461e70
mov ecx, dword [ebp - 0x838]
cmp ecx, 0x10
jb 0x461b8e
mov edx, dword [ebp - 0x84c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x461b84
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x461b84
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.0047421c
add esp, 8
mov eax, 0xfffffff8
jmp 0x461dcf
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp byte [0x485693], 0
mov eax, dword [str.vq1_pTM_QW__]
mov dword [ebp - 0x830], eax
je 0x461c8c
xor edx, edx
mov dword [ebp - 0x854], edx
cmp edi, 2
jl 0x461c55
movaps xmm3, xmmword [0x4860d0]
mov ecx, 4
movaps xmm2, xmm3
movaps xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmmword [0x486500]
punpckldq xmm2, xmm3
pmuldq xmm2, xmmword [0x486500]
shufps xmm2, xmm0, 0xdd
movd xmm0, ecx
mov ecx, 0x1f
psrad xmm2, xmm0
movaps xmm1, xmm2
movd xmm0, ecx
psrld xmm1, xmm0
paddd xmm1, xmm2
pmulld xmm1, xmmword [0x486100]
psubd xmm3, xmm1
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm0, xmm0, 0xd8
pshufd xmm1, xmm0, 0xd8
pand xmm1, xmmword [0x4861d0]
packuswb xmm1, xmm1
paddb xmm1, xmmword [0x486210]
movd xmm0, eax
pxor xmm1, xmm0
movd dword [ebp - 0x830], xmm1
jmp 0x461c8c
mov eax, 0x5397829d
imul edx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [ebp - 0x854]
movsx eax, al
mov cl, dl
imul eax, eax, 0x31
sub cl, al
add cl, 0x39
xor byte [ebp + edx - 0x830], cl
inc edx
mov dword [ebp - 0x854], edx
cmp edx, 4
jl 0x461c55
lea eax, [ebp - 0x830]
push eax
lea eax, [ebp - 0x818]
push eax
call fcn.00461e50
xorps xmm0, xmm0
mov dword [ebp - 0x83c], 0
lea ecx, [ebp - 0x818]
mov dword [ebp - 0x838], 0
add esp, 8
lea edx, [ecx + 1]
movups xmmword [ebp - 0x84c], xmm0
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x461cd0
sub ecx, edx
lea eax, [ebp - 0x818]
push ecx
push eax
lea ecx, [ebp - 0x84c]
call fcn.00437fe0
mov dword [ebp - 4], 6
mov eax, dword [0x490330]
cmp eax, dword [0x490334]
je 0x461d2c
movups xmm0, xmmword [ebp - 0x84c]
mov ecx, 0xf
mov byte [ebp - 0x84c], 0
movups xmmword [eax], xmm0
movq xmm0, qword [ebp - 0x83c]
movq qword [eax + 0x10], xmm0
add dword [0x490330], 0x18
jmp 0x461d44
lea ecx, [ebp - 0x84c]
push ecx
push eax
mov ecx, 0x49032c
call fcn.00461e70
mov ecx, dword [ebp - 0x838]
cmp ecx, 0x10
jb 0x461d7a
mov edx, dword [ebp - 0x84c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x461d70
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x461d70
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.0047421c
add esp, 8
xor eax, eax
jmp 0x461dcf
lea ecx, [ebp - 0x84c]
push ecx
push eax
mov ecx, 0x49032c
call fcn.00461e70
mov ecx, dword [ebp - 0x838]
cmp ecx, 0x10
jb 0x461dcc
mov edx, dword [ebp - 0x84c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x461dc2
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x461dc2
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.0047421c
add esp, 8
or eax, 0xffffffff
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.00473fd7
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret