Function at 0x1400541a0
Capabilities:
Accept command line arguments
Create process on windows
Encode data using xor
Enumerate gui resources
Enumerate processes
Execute command
Log keystrokes via polling
Schedule task via at
Terminate process

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x2f8]
sub rsp, 0x3d0
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
movaps xmmword [rax - 0x68], xmm9
movaps xmmword [rax - 0x78], xmm10
movaps xmmword [rax - 0x88], xmm11
mov rax, qword [0x14010e0c0]
xor rax, rsp
mov qword [rbp + 0x260], rax
xorps xmm0, xmm0
movups xmmword [rbp + 0xa8], xmm0
lea rdx, [rbp + 0x2f8]
movabs rcx, 0xff00ff00ff00ff00
mov qword [rbp + 0xb0], rcx
mov qword [rbp + 0xb8], rdx
mov rax, qword [rdx]
xor rax, rcx
mov qword [rbp - 8], rax
mov qword [rbp + 0xa8], rax
xor ebx, ebx
mov qword [rdx], rbx
mov eax, dword [str.R_4tRVYS]
mov dword [rbp + 0x40], eax
movdqa xmm9, xmmword [0x1400f9b80]
movdqa xmm6, xmmword [0x1400f9b00]
movdqa xmm11, xmmword [0x1400f9c30]
movdqa xmm10, xmmword [0x1400f9b20]
movdqa xmm8, xmmword [0x1400fa060]
mov r13d, dword [reloc.WS2_32.dll_accept]
cmp byte [0x1400f8077], bl
je 0x140054323
cmp r13d, 2
jl 0x1400542e6
movdqa xmm1, xmm6
punpckldq xmm1, xmm6
pmuldq xmm1, xmm8
movdqa xmm0, xmm6
punpckhdq xmm0, xmm6
pmuldq xmm0, xmm8
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm6
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm10
movdqa xmm1, xmm6
psubd xmm1, xmm0
andps xmm1, xmm9
packuswb xmm1, xmm1
packuswb xmm1, xmm1
paddb xmm1, xmm11
movd xmm0, eax
xorps xmm1, xmm0
movd dword [rbp + 0x40], xmm1
jmp 0x140054323
lea r9, [rbp + 0x40]
mov r8d, ebx
nop dword [rax]
mov eax, 0x92492493
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x38
movzx eax, r8b
sub al, cl
add al, 0x31
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 4
jl 0x1400542f0
xorps xmm0, xmm0
movups xmmword [rbp + 8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x18], xmm1
lea rax, [rbp + 0x40]
mov rsi, 0xffffffffffffffff
mov r8, rsi
inc r8
cmp byte [rax + r8], 0
jne 0x140054340
lea rdx, [rbp + 0x40]
lea rcx, [rbp + 8]
call fcn.14005edb0
lea rcx, [rbp + 8]
cmp qword [rbp + 0x20], 0xf
cmova rcx, qword [rbp + 8]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov rdx, qword [rbp + 0x20]
cmp rdx, 0xf
jbe 0x1400543a9
inc rdx
mov rcx, qword [rbp + 8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400543a4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400543a4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400d7fc0
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov edx, 2
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
xorps xmm0, xmm0
movups xmmword [rbp + 0x88], xmm0
mov qword [rbp + 0x98], rbx
mov qword [rbp + 0xa0], rbx
mov r8d, 0x266
lea rdx, str._n_____________________________________________________________n________________________________________________________n________________________________________________________n_______________________________________________________n_____________________________________________________n___________________________________________________n_____________________________________________________n_________________________________________________________n_____________________________________________________________n
lea rcx, [rbp + 0x88]
call fcn.14005edb0
nop
lea rdx, [rbp + 0x88]
cmp qword [rbp + 0xa0], 0xf
cmova rdx, qword [rbp + 0x88]
mov r8, qword [rbp + 0x98]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14005fe30
lea rdx, [0x14005e6a0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rax, [rbp - 0x70]
mov qword [rbp + 0x70], rax
movzx eax, word [0x1400f7c90]
mov word [rbp + 0x40], ax
cmp byte [reloc.WLDAP32.dll_Ordinal_50], 0
je 0x140054452
mov byte [rbp + 0x40], reloc.WLDAP32.dll_Ordinal_33
xor byte [rbp + 0x41], 0x32
xorps xmm0, xmm0
movups xmmword [rsp + 0x70], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x80], xmm1
lea rax, [rbp + 0x40]
mov r8, rsi
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140054470
lea rdx, [rbp + 0x40]
lea rcx, [rsp + 0x70]
call fcn.14005edb0
nop
lea rdx, [rsp + 0x70]
cmp qword [rbp - 0x78], 0xf
cmova rdx, qword [rsp + 0x70]
xorps xmm0, xmm0
movups xmmword [rbp - 0x70], xmm0
mov qword [rbp - 0x60], rbx
mov qword [rbp - 0x58], rbx
mov r8, rsi
nop dword [rax + rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x1400544b0
lea rcx, [rbp - 0x70]
call fcn.14005edb0
nop
movups xmm0, xmmword [str.fSZ_XP]
movups xmmword [rbp + 8], xmm0
mov eax, dword [0x1400f83b0]
mov dword [rbp + 0x18], eax
movzx eax, byte [0x1400f83b4]
mov byte [rbp + 0x1c], al
mov r8d, ebx
cmp r13d, 2
jl 0x1400545f7
movdqa xmmword [rbp + 0x50], xmm11
lea rcx, [rbp + 0xc]
mov edx, dword [rbp + 0x50]
nop dword [rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm6
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm8
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm8
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm10
psubd xmm2, xmm0
andps xmm2, xmm9
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm6
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm8
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm8
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm10
psubd xmm2, xmm0
andps xmm2, xmm9
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x10
jl 0x140054500
cmp r8d, 0x15
jge 0x140054643
movsxd rax, r8d
lea r9, [rbp + 8]
add r9, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x92492493
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x38
movzx eax, r8b
sub al, cl
add al, 0x31
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x15
jl 0x140054610
xorps xmm0, xmm0
movups xmmword [rbp + 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x60], xmm1
lea rax, [rbp + 8]
mov r8, rsi
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140054660
lea rdx, [rbp + 8]
lea rcx, [rbp + 0x50]
call fcn.14005edb0
nop
lea rdx, [rbp + 0x50]
cmp qword [rbp + 0x68], 0xf
cmova rdx, qword [rbp + 0x50]
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
mov qword [rbp - 0x40], rbx
mov qword [rbp - 0x38], rbx
mov r8, rsi
nop dword [rax + rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x1400546a0
lea rcx, [rbp - 0x50]
call fcn.14005edb0
nop
lea rdx, [rbp - 0x70]
lea rcx, [rbp - 0x50]
call fcn.140052780
nop
mov rdx, qword [rbp + 0x68]
cmp rdx, 0xf
jbe 0x140054701
inc rdx
mov rcx, qword [rbp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400546fb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400546fb
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400d7fc0
nop
mov rdx, qword [rbp - 0x78]
cmp rdx, 0xf
jbe 0x140054740
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005473b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14005473b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400d7fc0
cmp qword [0x1401103b0], 0
jne 0x140054830
lea r14, [rbp + 0x2f8]
nop word [rax + rax]
xor edx, edx
mov ecx, 2
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rdi, rax
mov dword [rbp + 0x130], 0x130
lea rdx, [rbp + 0x130]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_Process32First]
test eax, eax
je 0x1400547c0
nop
lea rdx, str.FortniteClient_Win64_Shipping.exe
lea rcx, [rbp + 0x15c]
call qword [sym.imp.KERNEL32.dll_lstrcmpiA]
mov rcx, rdi
test eax, eax
je 0x1400549d0
lea rdx, [rbp + 0x130]
call qword [sym.imp.KERNEL32.dll_Process32Next]
test eax, eax
jne 0x140054790
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, ebx
mov dword [0x140110408], eax
mov rdi, qword [r14]
mov qword [r14], rbx
mov qword [rbp + 8], rbx
mov dword [rbp + 0x10], eax
lea rdx, [rbp + 8]
lea rcx, [0x140050930]
call qword [sym.imp.USER32.dll_EnumWindows]
test eax, eax
jne 0x140054807
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xffffffff
jne 0x140054807
mov rax, qword [rbp + 8]
test rax, rax
jne 0x14005480a
mov rax, rbx
mov rcx, r14
mov qword [rcx], rdi
mov qword [0x1401103b0], rax
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_Sleep]
cmp qword [0x1401103b0], 0
je 0x140054760
lea rcx, str.user32.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
test rax, rax
je 0x1400572dd
lea rcx, str.win32u.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
test rax, rax
je 0x1400572dd
lea rcx, str.user32.dll
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov qword [0x1401103a0], rax
test rax, rax
je 0x1400572dd
lea rcx, str.win32u.dll
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov qword [0x1401103a8], rax
test rax, rax
je 0x1400572dd
lea rdx, str.NtUserSendInput
mov rcx, qword [0x1401103a0]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rax
test rax, rax
jne 0x140054ba2
lea rdx, str.NtUserSendInput
mov rcx, qword [0x1401103a8]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rax
test rax, rax
jne 0x140054ba2
lea rdx, [rbp - 8]
call fcn.1400575d0
mov r10, rax
movdqa xmm7, xmmword [0x1400f9b10]
cmp byte [rax + 7], cl
je 0x140054a23
cmp r13d, 2
jl 0x1400549e1
movdqa xmm1, xmm6
punpckldq xmm1, xmm6
pmuldq xmm1, xmm8
movdqa xmm0, xmm6
punpckhdq xmm0, xmm6
pmuldq xmm0, xmm8
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm6
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm10
movdqa xmm1, xmm6
psubd xmm1, xmm0
andps xmm1, xmm9
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd eax, xmm11
movd xmm0, eax
paddb xmm1, xmm0
movd xmm0, dword [r10]
xorps xmm1, xmm0
movd dword [r10], xmm1
movdqa xmm1, xmm7
punpckldq xmm1, xmm7
pmuldq xmm1, xmm8
movdqa xmm0, xmm7
punpckhdq xmm0, xmm7
pmuldq xmm0, xmm8
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm7
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm10
movdqa xmm1, xmm7
psubd xmm1, xmm0
andps xmm1, xmm9
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd xmm0, eax
paddb xmm1, xmm0
movd xmm0, dword [r10 + 4]
xorps xmm1, xmm0
movd dword [r10 + 4], xmm1
jmp 0x140054a23
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [rbp + 0x138]
jmp 0x1400547cb
mov r9, r10
mov r8d, ebx
nop word [rax + rax]
mov eax, 0x92492493
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x38
movzx eax, r8b
sub al, cl
add al, 0x31
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 8
jl 0x1400549f0
mov rdx, r10
lea rcx, [rbp - 0x50]
call fcn.14005c460
nop
mov rcx, rax
call fcn.14005c340
mov rdi, rax
lea rdx, [rbp + 0x70]
call fcn.1400575e0
mov r9, rax
cmp byte [rax + 0xc], 0
je 0x140054b5e
cmp r13d, 2
jl 0x140054b29
movdqa xmm1, xmm6
punpckldq xmm1, xmm6
pmuldq xmm1, xmm8
movdqa xmm0, xmm6
punpckhdq xmm0, xmm6
pmuldq xmm0, xmm8
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm6
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm10
psubd xmm6, xmm0
andps xmm6, xmm9
packuswb xmm6, xmm6
packuswb xmm6, xmm6
movd eax, xmm11
movd xmm0, eax
paddb xmm6, xmm0
movd xmm0, dword [r9]
xorps xmm6, xmm0
movd dword [r9], xmm6
movdqa xmm1, xmm7
punpckldq xmm1, xmm7
pmuldq xmm1, xmm8
movdqa xmm0, xmm7
punpckhdq xmm0, xmm7
pmuldq xmm0, xmm8
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm7
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm10
psubd xmm7, xmm0
andps xmm7, xmm9
packuswb xmm7, xmm7
packuswb xmm7, xmm7
movd xmm0, eax
paddb xmm7, xmm0
movd xmm0, dword [r9 + 4]
xorps xmm7, xmm0
movd dword [r9 + 4], xmm7
mov ebx, 8
movsxd r8, ebx
add r8, r9
nop
mov eax, 0x92492493
imul ebx
add edx, ebx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x38
movzx eax, bl
sub al, cl
add al, 0x31
xor byte [r8], al
inc ebx
lea r8, [r8 + 1]
cmp ebx, 0xd
jl 0x140054b30
mov rdx, r9
lea rcx, [rbp - 0x30]
call fcn.14005c460
mov rcx, rax
call fcn.14005c340
mov r9d, Ordinal_50
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
lea rcx, [rbp - 0x30]
call fcn.14005c370
nop
lea rcx, [rbp - 0x50]
call fcn.14005c370
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
movups xmm0, xmmword [rcx]
movups xmmword [0x1401107c8], xmm0
movsd xmm1, qword [rcx + 0x10]
movsd qword [0x1401107d8], xmm1
mov eax, dword [rcx + 0x18]
mov dword [0x1401107e0], eax
movzx eax, word [rcx + 0x1c]
mov word [0x1401107e4], ax
lea r14, [rbp + 0x2f8]
mov r12, qword [r14]
lea rax, [rbp + 0x2f8]
mov qword [rax], rbx
mov r15d, ebx
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
lea r8, [rbp + 0x50]
mov edx, 8
call qword [sym.imp.ADVAPI32.dll_OpenProcessToken]
test eax, eax
je 0x140054d03
lea rax, [rbp + 0x80]
mov qword [rsp + 0x20], rax
mov r9d, 4
lea r8, [rbp + 0x40]
mov edx, reloc.WLDAP32.dll_Ordinal_26
mov rcx, qword [rbp + 0x50]
call qword [sym.imp.ADVAPI32.dll_GetTokenInformation]
test eax, eax
je 0x140054c3b
mov r15d, 1
mov edi, dword [rbp + 0x80]
jmp 0x140054c43
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
mov rcx, qword [rbp + 0x50]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rax, [rbp + 0x2f8]
mov qword [rax], rbx
test r15d, r15d
je 0x140054d0b
cmp dword [rbp + 0x40], 0
jne 0x140054d19
lea rcx, [rbp + 0x70]
call fcn.14003d790
mov edi, eax
test eax, eax
jne 0x140054d0b
lea rcx, [rbp + 0xc0]
call qword [sym.imp.KERNEL32.dll_GetStartupInfoA]
call qword [sym.imp.KERNEL32.dll_GetCommandLineA]
lea rcx, [rbp + 8]
mov qword [rsp + 0x50], rcx
lea rcx, [rbp + 0xc0]
mov qword [rsp + 0x48], rcx
mov qword [rsp + 0x40], rbx
mov qword [rsp + 0x38], rbx
mov dword [rsp + 0x30], ebx
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rax
xor edx, edx
mov rcx, qword [rbp + 0x70]
call qword [sym.imp.ADVAPI32.dll_CreateProcessAsUserA]
test eax, eax
je 0x140054cef
mov rcx, qword [rbp + 8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp + 0x10]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ExitProcess]
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
mov rcx, qword [rbp + 0x70]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x140054d0b
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
lea rax, [rbp + 0x2f8]
mov qword [rax], rbx
test edi, edi
jne 0x140054d61
lea rdx, str.CreateWindowInBand
mov rcx, qword [0x1401103a0]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x140110350], rax
test rax, rax
jne 0x140055022
lea rdx, str.CreateWindowInBand
mov rcx, qword [0x1401103a8]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x140110350], rax
test rax, rax
jne 0x140055022
mov qword [r14], r12
lea rdx, [rbp - 8]
call fcn.1400575d0
mov r10, rax
movdqa xmm7, xmmword [0x1400f9b10]
cmp byte [rax + 7], 0
je 0x140054ea3
cmp r13d, 2
jl 0x140054e5f
movdqa xmm1, xmm6
punpckldq xmm1, xmm6
pmuldq xmm1, xmm8
movdqa xmm0, xmm6
punpckhdq xmm0, xmm6
pmuldq xmm0, xmm8
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm6
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm10
movdqa xmm1, xmm6
psubd xmm1, xmm0
andps xmm1, xmm9
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd eax, xmm11
movd xmm0, eax
paddb xmm1, xmm0
movd xmm0, dword [r10]
xorps xmm1, xmm0
movd dword [r10], xmm1
movdqa xmm1, xmm7
punpckldq xmm1, xmm7
pmuldq xmm1, xmm8
movdqa xmm0, xmm7
punpckhdq xmm0, xmm7
pmuldq xmm0, xmm8
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm7
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm10
movdqa xmm1, xmm7
psubd xmm1, xmm0
andps xmm1, xmm9
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd xmm0, eax
paddb xmm1, xmm0
movd xmm0, dword [r10 + 4]
xorps xmm1, xmm0
movd dword [r10 + 4], xmm1
jmp 0x140054ea3
mov r9, r10
mov r8d, ebx
nop word [rax + rax]
mov eax, 0x92492493
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x38
movzx eax, r8b
sub al, cl
add al, 0x31
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 8
jl 0x140054e70
mov rdx, r10
lea rcx, [rbp - 0x50]
call fcn.14005c460
nop
mov rcx, rax
call fcn.14005c340
mov rdi, rax
lea rdx, [rbp + 0x70]
call fcn.140057610
mov r9, rax
cmp byte [rax + 0xc], 0
je 0x140054fde
cmp r13d, 2
jl 0x140054fa9
movdqa xmm1, xmm6
punpckldq xmm1, xmm6
pmuldq xmm1, xmm8
movdqa xmm0, xmm6
punpckhdq xmm0, xmm6
pmuldq xmm0, xmm8
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm6
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm10
psubd xmm6, xmm0
andps xmm6, xmm9
packuswb xmm6, xmm6
packuswb xmm6, xmm6
movd eax, xmm11
movd xmm0, eax
paddb xmm6, xmm0
movd xmm0, dword [r9]
xorps xmm6, xmm0
movd dword [r9], xmm6
movdqa xmm1, xmm7
punpckldq xmm1, xmm7
pmuldq xmm1, xmm8
movdqa xmm0, xmm7
punpckhdq xmm0, xmm7
pmuldq xmm0, xmm8
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm7
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm10
psubd xmm7, xmm0
andps xmm7, xmm9
packuswb xmm7, xmm7
packuswb xmm7, xmm7
movd xmm0, eax
paddb xmm7, xmm0
movd xmm0, dword [r9 + 4]
xorps xmm7, xmm0
movd dword [r9 + 4], xmm7
mov ebx, 8
movsxd r8, ebx
add r8, r9
nop
mov eax, 0x92492493
imul ebx
add edx, ebx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x38
movzx eax, bl
sub al, cl
add al, 0x31
xor byte [r8], al
inc ebx
lea r8, [r8 + 1]
cmp ebx, 0xd
jl 0x140054fb0
mov rdx, r9
lea rcx, [rbp - 0x30]
call fcn.14005c460
mov rcx, rax
call fcn.14005c340
mov r9d, Ordinal_50
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
lea rcx, [rbp - 0x30]
call fcn.14005c370
nop
lea rcx, [rbp - 0x50]
call fcn.14005c370
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov qword [r14], r12
movups xmm0, xmmword [str.w_A___C_zVRYSJ]
movups xmmword [rbp - 0x30], xmm0
movups xmm1, xmmword [str.__uph]
movups xmmword [rbp - 0x20], xmm1
mov eax, dword [0x1400f8220]
mov dword [rbp - 0x10], eax
movzx eax, word [0x1400f8224]
mov word [rbp - 0xc], ax
mov r8d, ebx
cmp r13d, 2
jl 0x140055167
movdqa xmmword [rbp + 0x50], xmm11
lea rcx, [rbp - 0x2c]
mov edx, dword [rbp + 0x50]
nop dword [rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm6
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm8
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm8
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm10
psubd xmm2, xmm0
andps xmm2, xmm9
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm6
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm8
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm8
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm10
psubd xmm2, xmm0
andps xmm2, xmm9
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x20
jl 0x140055070
cmp r8d, 0x26
jge 0x1400551b3
movsxd rax, r8d
lea r9, [rbp - 0x30]
add r9, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x92492493
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x38
movzx eax, r8b
sub al, cl
add al, 0x31
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x26
jl 0x140055180
xorps xmm0, xmm0
movups xmmword [rsp + 0x70], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x80], xmm1
lea rax, [rbp - 0x30]
mov r8, rsi
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x1400551d0
lea rdx, [rbp - 0x30]
lea rcx, [rsp + 0x70]
call fcn.14005edb0
nop
lea rdx, [rsp + 0x70]
cmp qword [rbp - 0x78], 0xf
cmova rdx, qword [rsp + 0x70]
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x40], xmm1
mov r8, rsi
nop dword [rax + rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x140055210
lea rcx, [rbp - 0x50]
call fcn.14005edb0
nop
lea rcx, [rbp - 0x50]
call fcn.1400522e0
mov rdi, rax
mov rdx, qword [rbp - 0x38]
cmp rdx, 0xf
jbe 0x14005526f
inc rdx
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140055269
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140055269
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400d7fc0
nop
mov rdx, qword [rbp - 0x78]
cmp rdx, 0xf
jbe 0x1400552ae
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400552a9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400552a9
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400d7fc0
test rdi, rdi
je 0x140055462
lea rdx, [rbp + 0x40]
call fcn.140057660
movzx ecx, byte [rax + 2]
test cl, cl
je 0x1400552d5
xor byte [rax], 0x31
xor byte [rax + 1], 0x32
xor cl, 0x33
mov byte [rax + 2], cl
mov rdx, rax
lea rcx, [rbp - 0x50]
call fcn.14005c460
nop
mov rcx, rax
call fcn.14005c340
mov rdi, rax
lea rdx, [rbp - 8]
call fcn.140057640
mov r9, rax
cmp byte [rax + 0xb], 0
je 0x14005541e
cmp r13d, 2
jl 0x1400553e3
movdqa xmm1, xmm6
punpckldq xmm1, xmm6
pmuldq xmm1, xmm8
movdqa xmm0, xmm6
punpckhdq xmm0, xmm6
pmuldq xmm0, xmm8
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm6
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm10
psubd xmm6, xmm0
andps xmm6, xmm9
packuswb xmm6, xmm6
packuswb xmm6, xmm6
movd eax, xmm11
movd xmm0, eax
paddb xmm6, xmm0
movd xmm0, dword [r9]
xorps xmm6, xmm0
movd dword [r9], xmm6
movdqa xmm2, xmmword [0x1400f9b10]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm8
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm8
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm10
psubd xmm2, xmm0
andps xmm2, xmm9
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm0, dword [r9 + 4]
xorps xmm2, xmm0
movd dword [r9 + 4], xmm2
mov ebx, 8
movsxd r8, ebx
add r8, r9
nop dword [rax]
mov eax, 0x92492493
imul ebx
add edx, ebx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x38
movzx eax, bl
sub al, cl
add al, 0x31
xor byte [r8], al
inc ebx
lea r8, [r8 + 1]
cmp ebx, 0xc
jl 0x1400553f0
mov rdx, r9
lea rcx, [rbp - 0x30]
call fcn.14005c460
mov rcx, rax
call fcn.14005c340
mov r9d, Ordinal_50
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
lea rcx, [rbp - 0x30]
call fcn.14005c370
nop
lea rcx, [rbp - 0x50]
call fcn.14005c370
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
mov edx, 0x80000000
lea rcx, str..SE64
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [0x140110400], rax
dec rax
cmp rax, 0xfffffffffffffffd
ja 0x140057018
lea rax, [rbp - 0x50]
mov qword [rbp + 0x70], rax
movzx eax, word [0x1400f7ca8]
mov word [rbp + 0x40], ax
cmp byte [reloc.WLDAP32.dll_Ordinal_50], 0
je 0x1400554c7
mov byte [rbp + 0x40], reloc.WLDAP32.dll_Ordinal_45
xor byte [rbp + 0x41], 0x32
xorps xmm0, xmm0
movups xmmword [rbp - 0x70], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x60], xmm1
lea rax, [rbp + 0x40]
mov r8, rsi
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x1400554e0
lea rdx, [rbp + 0x40]
lea rcx, [rbp - 0x70]
call fcn.14005edb0
nop
lea rdx, [rbp - 0x70]
cmp qword [rbp - 0x58], 0xf
cmova rdx, qword [rbp - 0x70]
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
mov qword [rbp - 0x40], rbx
mov qword [rbp - 0x38], rbx
mov r8, rsi
nop dword [rax + rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x140055520
lea rcx, [rbp - 0x50]
call fcn.14005edb0
nop
movups xmm0, xmmword [str._RPXP]
movups xmmword [rbp + 8], xmm0
movsd xmm0, qword [0x1400f8440]
movsd qword [rbp + 0x18], xmm0
cmp byte [0x1400f8447], 0
je 0x1400556a3
cmp r13d, 2
jl 0x140055664
mov edx, ebx
movdqa xmmword [rbp + 0x50], xmm11
lea rcx, [rbp + 0xc]
mov r8d, dword [rbp + 0x50]
movd xmm2, edx
pshufd xmm2, xmm2, 0
paddd xmm2, xmm6
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm8
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm8
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm10
psubd xmm2, xmm0
andps xmm2, xmm9
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [rdx + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm6
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm8
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm8
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm10
psubd xmm2, xmm0
andps xmm2, xmm9
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add edx, 8
lea rcx, [rcx + 8]
cmp edx, 0x18
jl 0x140055573
jmp 0x1400556a3
lea r9, [rbp + 8]
mov r8d, ebx
nop dword [rax + rax]
mov eax, 0x92492493
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x38
movzx eax, r8b
sub al, cl
add al, 0x31
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x18
jl 0x140055670
xorps xmm0, xmm0
movups xmmword [rsp + 0x70], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x80], xmm1
lea rax, [rbp + 8]
mov r8, rsi
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x1400556c0
lea rdx, [rbp + 8]
lea rcx, [rsp + 0x70]
call fcn.14005edb0
nop
lea rdx, [rsp + 0x70]
cmp qword [rbp - 0x78], 0xf
cmova rdx, qword [rsp + 0x70]
xorps xmm0, xmm0
movups xmmword [rbp - 0x30], xmm0
mov qword [rbp - 0x20], rbx
mov qword [rbp - 0x18], rbx
mov r8, rsi
nop dword [rax + rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x140055700
lea rcx, [rbp - 0x30]
call fcn.14005edb0
nop
lea rdx, [rbp - 0x50]
lea rcx, [rbp - 0x30]
call fcn.140052780
nop
mov rdx, qword [rbp - 0x78]
cmp rdx, 0xf
jbe 0x140055762
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005575c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14005575c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400d7fc0
nop
mov rdx, qword [rbp - 0x58]
cmp rdx, 0xf
jbe 0x1400557a0
inc rdx
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005579b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14005579b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400d7fc0
mov ecx, 0x258
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rax, [rbp - 0x30]
mov qword [rbp + 0x70], rax
movzx eax, word [0x1400f7c90]
mov word [rbp + 0x40], ax
cmp byte [reloc.WLDAP32.dll_Ordinal_50], 0
je 0x1400557cf
mov byte [rbp + 0x40], reloc.WLDAP32.dll_Ordinal_33
xor byte [rbp + 0x41], 0x32
xorps xmm0, xmm0
movups xmmword [rsp + 0x70], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x80], xmm1
lea rax, [rbp + 0x40]
mov r8, rsi
inc r8
cmp byte [rax + r8], 0
jne 0x1400557e6
lea rdx, [rbp + 0x40]
lea rcx, [rsp + 0x70]
call fcn.14005edb0
nop
lea rdx, [rsp + 0x70]
cmp qword [rbp - 0x78], 0xf
cmova rdx, qword [rsp + 0x70]
xorps xmm0, xmm0
movups xmmword [rbp - 0x30], xmm0
mov qword [rbp - 0x20], rbx
mov qword [rbp - 0x18], rbx
mov r8, rsi
inc r8
cmp byte [rdx + r8], 0
jne 0x140055821
lea rcx, [rbp - 0x30]
call fcn.14005edb0
nop
movsd xmm0, qword [str.y__XP]
movsd qword [rbp + 0x50], xmm0
mov eax, dword [str.HRJXL_]
mov dword [rbp + 0x58], eax
movzx eax, word [0x1400f7dfc]
mov word [rbp + 0x5c], ax
movzx eax, byte [0x1400f7dfe]
mov byte [rbp + 0x5e], al
mov r8d, ebx
cmp r13d, 2
jl 0x140055949
movdqa xmm1, xmm6
punpckldq xmm1, xmm6
pmuldq xmm1, xmm8
movdqa xmm0, xmm6
punpckhdq xmm0, xmm6
pmuldq xmm0, xmm8
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm6
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm10
movdqa xmm1, xmm6
psubd xmm1, xmm0
andps xmm1, xmm9
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd eax, xmm11
movd xmm0, eax
paddb xmm1, xmm0
movd xmm0, dword [str.y__XP]
xorps xmm1, xmm0
movd dword [rbp + 0x50], xmm1
movdqa xmm2, xmmword [0x1400f9b10]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm8
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm8
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm10
psubd xmm2, xmm0
andps xmm2, xmm9
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rbp + 0x54]
xorps xmm2, xmm1
movd dword [rbp + 0x54], xmm2
mov r8d, 8
movsxd rax, r8d
lea r9, [rbp + 0x50]
add r9, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x92492493
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x38
movzx eax, r8b
sub al, cl
add al, 0x31
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0xf
jl 0x140055960
xorps xmm0, xmm0
movups xmmword [rbp - 0x70], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x60], xmm1
lea rax, [rbp + 0x50]
mov r8, rsi
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x1400559b0
lea rdx, [rbp + 0x50]
lea rcx, [rbp - 0x70]
call fcn.14005edb0
nop
lea rdx, [rbp - 0x70]
cmp qword [rbp - 0x58], 0xf
cmova rdx, qword [rbp - 0x70]
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
mov qword [rbp - 0x40], rbx
mov qword [rbp - 0x38], rbx
mov r8, rsi
nop dword [rax + rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x1400559f0
lea rcx, [rbp - 0x50]
call fcn.14005edb0
nop
lea rdx, [rbp - 0x30]
lea rcx, [rbp - 0x50]
call fcn.140052780
nop
mov rdx, qword [rbp - 0x58]
cmp rdx, 0xf
jbe 0x140055a51
inc rdx
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140055a4b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140055a4b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400d7fc0
nop
mov rdx, qword [rbp - 0x78]
cmp rdx, 0xf
jbe 0x140055a90
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140055a8b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140055a8b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400d7fc0
call fcn.14003c850
mov qword [0x140110950], rax
mov ecx, 0x258
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rax, [rbp - 0x30]
mov qword [rbp + 0x70], rax
movzx eax, word [0x1400f7e00]
mov word [rbp + 0x40], ax
cmp byte [reloc.WLDAP32.dll_Ordinal_50], 0
je 0x140055acb
mov byte [rbp + 0x40], Ordinal_45
xor byte [rbp + 0x41], 0x32
xorps xmm0, xmm0
movups xmmword [rsp + 0x70], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x80], xmm1
lea rax, [rbp + 0x40]
mov r8, rsi
inc r8
cmp byte [rax + r8], 0
jne 0x140055ae2
lea rdx, [rbp + 0x40]
lea rcx, [rsp + 0x70]
call fcn.14005edb0
nop
lea rdx, [rsp + 0x70]
cmp qword [rbp - 0x78], 0xf
cmova rdx, qword [rsp + 0x70]
xorps xmm0, xmm0
movups xmmword [rbp - 0x30], xmm0
mov qword [rbp - 0x20], rbx
mov qword [rbp - 0x18], rbx
mov r8, rsi
nop dword [rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x140055b20
lea rcx, [rbp - 0x30]
call fcn.14005edb0
nop
movups xmm0, xmmword [str.y__PR]
movups xmmword [rbp + 8], xmm0
psrldq xmm0, 0xf
movd eax, xmm0
test al, al
je 0x140055ca3
cmp r13d, 2
jl 0x140055c61
mov edx, ebx
movdqa xmmword [rbp + 0x50], xmm11
lea rcx, [rbp + 0xc]
mov r8d, dword [rbp + 0x50]
nop word [rax + rax]
movd xmm2, edx
pshufd xmm2, xmm2, 0
paddd xmm2, xmm6
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm8
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm8
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm10
psubd xmm2, xmm0
andps xmm2, xmm9
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [rdx + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm6
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm8
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm8
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm10
psubd xmm2, xmm0
andps xmm2, xmm9
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add edx, 8
lea rcx, [rcx + 8]
cmp edx, 0x10
jl 0x140055b70
jmp 0x140055ca3
lea r9, [rbp + 8]
mov r8d, ebx
nop dword [rax + rax]
mov eax, 0x92492493
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x38
movzx eax, r8b
sub al, cl
add al, 0x31
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x10
jl 0x140055c70
xorps xmm0, xmm0
movups xmmword [rbp - 0x70], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x60], xmm1
lea rax, [rbp + 8]
mov r8, rsi
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140055cc0
lea rdx, [rbp + 8]
lea rcx, [rbp - 0x70]
call fcn.14005edb0
nop
lea rdx, [rbp - 0x70]
cmp qword [rbp - 0x58], 0xf
cmova rdx, qword [rbp - 0x70]
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
mov qword [rbp - 0x40], rbx
mov qword [rbp - 0x38], rbx
mov r8, rsi
nop dword [rax + rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x140055d00
lea rcx, [rbp - 0x50]
call fcn.14005edb0
nop
lea rdx, [rbp - 0x30]
lea rcx, [rbp - 0x50]
call fcn.140052780
nop
mov rdx, qword [rbp - 0x58]
cmp rdx, 0xf
jbe 0x140055d61
inc rdx
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140055d5b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140055d5b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400d7fc0
nop
mov rdx, qword [rbp - 0x78]
cmp rdx, 0xf
jbe 0x140055da0
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140055d9b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140055d9b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400d7fc0
lea rax, [rbp - 0x30]
mov qword [rbp + 0x70], rax
movzx eax, word [0x1400f7c90]
mov word [rbp + 0x40], ax
cmp byte [reloc.WLDAP32.dll_Ordinal_50], 0
je 0x140055dc4
mov byte [rbp + 0x40], reloc.WLDAP32.dll_Ordinal_33
xor byte [rbp + 0x41], 0x32
xorps xmm0, xmm0
movups xmmword [rsp + 0x70], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x80], xmm1
lea rax, [rbp + 0x40]
mov r8, rsi
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140055de0
lea rdx, [rbp + 0x40]
lea rcx, [rsp + 0x70]
call fcn.14005edb0
nop
lea rdx, [rsp + 0x70]
cmp qword [rbp - 0x78], 0xf
cmova rdx, qword [rsp + 0x70]
xorps xmm0, xmm0
movups xmmword [rbp - 0x30], xmm0
mov qword [rbp - 0x20], rbx
mov qword [rbp - 0x18], rbx
mov r8, rsi
nop dword [rax + rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x140055e20
lea rcx, [rbp - 0x30]
call fcn.14005edb0
nop
movups xmm0, xmmword [str.uGDXP]
movups xmmword [rbp + 8], xmm0
movsd xmm0, qword [0x1400f7d30]
movsd qword [rbp + 0x18], xmm0
movzx eax, word [0x1400f7d38]
mov word [rbp + 0x20], ax
cmp byte [0x1400f7d39], 0
je 0x140055fc3
mov r8d, ebx
cmp r13d, 2
jl 0x140055f77
movdqa xmmword [rbp + 0x50], xmm11
lea rcx, [rbp + 0xc]
mov edx, dword [rbp + 0x50]
nop
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm6
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm8
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm8
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm10
psubd xmm2, xmm0
andps xmm2, xmm9
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm6
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm8
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm8
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm10
psubd xmm2, xmm0
andps xmm2, xmm9
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x18
jl 0x140055e80
cmp r8d, 0x1a
jge 0x140055fc3
movsxd rax, r8d
lea r9, [rbp + 8]
add r9, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x92492493
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x38
movzx eax, r8b
sub al, cl
add al, 0x31
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x1a
jl 0x140055f90
xorps xmm0, xmm0
movups xmmword [rbp - 0x70], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x60], xmm1
lea rax, [rbp + 8]
mov r8, rsi
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140055fe0
lea rdx, [rbp + 8]
lea rcx, [rbp - 0x70]
call fcn.14005edb0
nop
lea rdx, [rbp - 0x70]
cmp qword [rbp - 0x58], 0xf
cmova rdx, qword [rbp - 0x70]
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
mov qword [rbp - 0x40], rbx
mov qword [rbp - 0x38], rbx
mov r8, rsi
nop dword [rax + rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x140056020
lea rcx, [rbp - 0x50]
call fcn.14005edb0
nop
lea rdx, [rbp - 0x30]
lea rcx, [rbp - 0x50]
call fcn.140052780
nop
mov rdx, qword [rbp - 0x58]
cmp rdx, 0xf
jbe 0x140056081
inc rdx
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005607b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14005607b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400d7fc0
nop
mov rdx, qword [rbp - 0x78]
cmp rdx, 0xf
jbe 0x1400560c0
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400560bb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400560bb
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400d7fc0
call fcn.140052a20
lea rax, [rbp - 0x30]
mov qword [rbp + 0x70], rax
movzx eax, word [0x1400f7e00]
mov word [rbp + 0x40], ax
cmp byte [reloc.WLDAP32.dll_Ordinal_50], 0
je 0x1400560e9
mov byte [rbp + 0x40], Ordinal_45
xor byte [rbp + 0x41], 0x32
xorps xmm0, xmm0
movups xmmword [rsp + 0x70], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x80], xmm1
lea rax, [rbp + 0x40]
mov r8, rsi
inc r8
cmp byte [rax + r8], 0
jne 0x140056100
lea rdx, [rbp + 0x40]
lea rcx, [rsp + 0x70]
call fcn.14005edb0
nop
lea rdx, [rsp + 0x70]
cmp qword [rbp - 0x78], 0xf
cmova rdx, qword [rsp + 0x70]
xorps xmm0, xmm0
movups xmmword [rbp - 0x30], xmm0
mov qword [rbp - 0x20], rbx
mov qword [rbp - 0x18], rbx
mov r8, rsi
nop dword [rax + rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x140056140
lea rcx, [rbp - 0x30]
call fcn.14005edb0
nop
movups xmm0, xmmword [str.uGDPR]
movups xmmword [rbp + 8], xmm0
mov eax, dword [0x1400f82a8]
mov dword [rbp + 0x18], eax
movzx eax, byte [0x1400f82ac]
mov byte [rbp + 0x1c], al
mov r8d, ebx
cmp r13d, 2
jl 0x140056287
movdqa xmmword [rbp + 0x50], xmm11
lea rcx, [rbp + 0xc]
mov edx, dword [rbp + 0x50]
nop dword [rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm6
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm8
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm8
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm10
psubd xmm2, xmm0
andps xmm2, xmm9
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm6
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm8
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm8
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm10
psubd xmm2, xmm0
andps xmm2, xmm9
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x10
jl 0x140056190
cmp r8d, 0x15
jge 0x1400562d3
movsxd rax, r8d
lea r9, [rbp + 8]
add r9, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x92492493
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x38
movzx eax, r8b
sub al, cl
add al, 0x31
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x15
jl 0x1400562a0
xorps xmm0, xmm0
movups xmmword [rbp - 0x70], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x60], xmm1
lea rax, [rbp + 8]
mov r8, rsi
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x1400562f0
lea rdx, [rbp + 8]
lea rcx, [rbp - 0x70]
call fcn.14005edb0
nop
lea rdx, [rbp - 0x70]
cmp qword [rbp - 0x58], 0xf
cmova rdx, qword [rbp - 0x70]
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
mov qword [rbp - 0x40], rbx
mov qword [rbp - 0x38], rbx
mov r8, rsi
nop dword [rax + rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x140056330
lea rcx, [rbp - 0x50]
call fcn.14005edb0
nop
lea rdx, [rbp - 0x30]
lea rcx, [rbp - 0x50]
call fcn.140052780
nop
mov rdx, qword [rbp - 0x58]
cmp rdx, 0xf
jbe 0x140056391
inc rdx
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005638b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14005638b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400d7fc0
nop
mov rdx, qword [rbp - 0x78]
cmp rdx, 0xf
jbe 0x1400563d0
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400563cb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400563cb
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400d7fc0
lea rax, [rbp - 0x30]
mov qword [rbp + 0x70], rax
movzx eax, word [0x1400f7c90]
mov word [rbp + 0x40], ax
cmp byte [reloc.WLDAP32.dll_Ordinal_50], 0
je 0x1400563f4
mov byte [rbp + 0x40], reloc.WLDAP32.dll_Ordinal_33
xor byte [rbp + 0x41], 0x32
xorps xmm0, xmm0
movups xmmword [rsp + 0x70], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x80], xmm1
lea rax, [rbp + 0x40]
mov r8, rsi
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140056410
lea rdx, [rbp + 0x40]
lea rcx, [rsp + 0x70]
call fcn.14005edb0
nop
lea rdx, [rsp + 0x70]
cmp qword [rbp - 0x78], 0xf
cmova rdx, qword [rsp + 0x70]
xorps xmm0, xmm0
movups xmmword [rbp - 0x30], xmm0
mov qword [rbp - 0x20], rbx
mov qword [rbp - 0x18], rbx
mov r8, rsi
nop dword [rax + rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x140056450
lea rcx, [rbp - 0x30]
call fcn.14005edb0
nop
movups xmm0, xmmword [str.w__UY_MQW_e]
movups xmmword [rbp + 8], xmm0
movsd xmm0, qword [0x1400f8000]
movsd qword [rbp + 0x18], xmm0
mov eax, dword [0x1400f8008]
mov dword [rbp + 0x20], eax
cmp byte [0x1400f800b], 0
je 0x1400565f3
mov r8d, ebx
cmp r13d, 2
jl 0x1400565a7
movdqa xmmword [rbp + 0x50], xmm11
lea rcx, [rbp + 0xc]
mov edx, dword [rbp + 0x50]
nop dword [rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm6
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm8
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm8
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm10
psubd xmm2, xmm0
andps xmm2, xmm9
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm6
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm8
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm8
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm10
psubd xmm2, xmm0
andps xmm2, xmm9
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x18
jl 0x1400564b0
cmp r8d, 0x1c
jge 0x1400565f3
movsxd rax, r8d
lea r9, [rbp + 8]
add r9, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x92492493
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x38
movzx eax, r8b
sub al, cl
add al, 0x31
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x1c
jl 0x1400565c0
xorps xmm0, xmm0
movups xmmword [rbp - 0x70], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x60], xmm1
lea rax, [rbp + 8]
mov r8, rsi
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140056610
lea rdx, [rbp + 8]
lea rcx, [rbp - 0x70]
call fcn.14005edb0
nop
lea rdx, [rbp - 0x70]
cmp qword [rbp - 0x58], 0xf
cmova rdx, qword [rbp - 0x70]
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
mov qword [rbp - 0x40], rbx
mov qword [rbp - 0x38], rbx
mov r8, rsi
nop dword [rax + rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x140056650
lea rcx, [rbp - 0x50]
call fcn.14005edb0
nop
lea rdx, [rbp - 0x30]
lea rcx, [rbp - 0x50]
call fcn.140052780
nop
mov rdx, qword [rbp - 0x58]
cmp rdx, 0xf
jbe 0x1400566b1
inc rdx
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400566ab
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400566ab
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400d7fc0
nop
mov rdx, qword [rbp - 0x78]
cmp rdx, 0xf
jbe 0x1400566f0
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400566eb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400566eb
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400d7fc0
mov ecx, 0x384
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, str.Base____0x
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14005e4c0
mov rdi, rax
call fcn.14003c850
mov rdx, rax
mov rcx, rdi
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___void_const____ptr64____ptr64]
lea rdx, [0x14005e6a0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str.PID___
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14005e4c0
mov edx, dword [0x140110408]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___int____ptr64]
lea rdx, [0x14005e6a0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rax, [rbp - 0x30]
mov qword [rbp + 0x70], rax
movzx eax, word [0x1400f7ca8]
mov word [rbp + 0x40], ax
cmp byte [reloc.WLDAP32.dll_Ordinal_50], 0
je 0x140056788
mov byte [rbp + 0x40], reloc.WLDAP32.dll_Ordinal_45
xor byte [rbp + 0x41], 0x32
xorps xmm0, xmm0
movups xmmword [rsp + 0x70], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x80], xmm1
lea rax, [rbp + 0x40]
mov r8, rsi
nop
inc r8
cmp byte [rax + r8], 0
jne 0x1400567a0
lea rdx, [rbp + 0x40]
lea rcx, [rsp + 0x70]
call fcn.14005edb0
nop
lea rdx, [rsp + 0x70]
cmp qword [rbp - 0x78], 0xf
cmova rdx, qword [rsp + 0x70]
xorps xmm0, xmm0
movups xmmword [rbp - 0x30], xmm0
mov qword [rbp - 0x20], rbx
mov qword [rbp - 0x18], rbx
mov r8, rsi
nop dword [rax + rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x1400567e0
lea rcx, [rbp - 0x30]
call fcn.14005edb0
nop
movups xmm0, xmmword [str.t_RGXP]
movups xmmword [rbp + 8], xmm0
mov eax, dword [0x1400f8110]
mov dword [rbp + 0x18], eax
movzx eax, word [0x1400f8114]
mov word [rbp + 0x1c], ax
movzx eax, byte [0x1400f8116]
mov byte [rbp + 0x1e], al
mov r8d, ebx
cmp r13d, 2
jl 0x140056937
movdqa xmmword [rbp + 0x50], xmm11
lea rcx, [rbp + 0xc]
mov edx, dword [rbp + 0x50]
nop word [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm6
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm8
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm8
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm10
psubd xmm2, xmm0
andps xmm2, xmm9
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm6
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm8
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm8
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm10
psubd xmm2, xmm0
andps xmm2, xmm9
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x10
jl 0x140056840
cmp r8d, 0x17
jge 0x140056983
movsxd rax, r8d
lea r9, [rbp + 8]
add r9, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x92492493
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x38
movzx eax, r8b
sub al, cl
add al, 0x31
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x17
jl 0x140056950
xorps xmm0, xmm0
movups xmmword [rbp - 0x70], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x60], xmm1
lea rax, [rbp + 8]
mov r8, rsi
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x1400569a0
lea rdx, [rbp + 8]
lea rcx, [rbp - 0x70]
call fcn.14005edb0
nop
lea rdx, [rbp - 0x70]
cmp qword [rbp - 0x58], 0xf
cmova rdx, qword [rbp - 0x70]
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
mov qword [rbp - 0x40], rbx
mov qword [rbp - 0x38], rbx
mov r8, rsi
nop dword [rax + rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x1400569e0
lea rcx, [rbp - 0x50]
call fcn.14005edb0
nop
lea rdx, [rbp - 0x30]
lea rcx, [rbp - 0x50]
call fcn.140052780
nop
mov rdx, qword [rbp - 0x58]
cmp rdx, 0xf
jbe 0x140056a41
inc rdx
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140056a3b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140056a3b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400d7fc0
nop
mov rdx, qword [rbp - 0x78]
cmp rdx, 0xf
jbe 0x140056a80
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140056a7b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140056a7b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400d7fc0
lea rax, [rbp - 0x30]
mov qword [rbp + 0x70], rax
movzx eax, word [0x1400f7e00]
mov word [rbp + 0x40], ax
cmp byte [reloc.WLDAP32.dll_Ordinal_50], 0
je 0x140056aa4
mov byte [rbp + 0x40], Ordinal_45
xor byte [rbp + 0x41], 0x32
xorps xmm0, xmm0
movups xmmword [rsp + 0x70], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x80], xmm1
lea rax, [rbp + 0x40]
mov r8, rsi
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140056ac0
lea rdx, [rbp + 0x40]
lea rcx, [rsp + 0x70]
call fcn.14005edb0
nop
lea rdx, [rsp + 0x70]
cmp qword [rbp - 0x78], 0xf
cmova rdx, qword [rsp + 0x70]
xorps xmm0, xmm0
movups xmmword [rbp - 0x30], xmm0
mov qword [rbp - 0x20], rbx
mov qword [rbp - 0x18], rbx
mov r8, rsi
nop dword [rax + rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x140056b00
lea rcx, [rbp - 0x30]
call fcn.14005edb0
nop
movups xmm0, xmmword [0x1400f7f88]
movups xmmword [rbp + 8], xmm0
movups xmm1, xmmword [0x1400f7f98]
movups xmmword [rbp + 0x18], xmm1
movups xmm0, xmmword [0x1400f7fa8]
movups xmmword [rbp + 0x28], xmm0
movzx eax, word [0x1400f7fb8]
mov word [rbp + 0x38], ax
mov r8d, ebx
cmp r13d, 2
jl 0x140056c57
movdqa xmmword [rbp + 0x50], xmm11
lea rcx, [rbp + 0xc]
mov edx, dword [rbp + 0x50]
nop word [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm6
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm8
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm8
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm10
psubd xmm2, xmm0
andps xmm2, xmm9
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm6
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm8
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm8
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm10
psubd xmm2, xmm0
andps xmm2, xmm9
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x30
jl 0x140056b60
cmp r8d, 0x32
jge 0x140056ca3
movsxd rax, r8d
lea r9, [rbp + 8]
add r9, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x92492493
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x38
movzx eax, r8b
sub al, cl
add al, 0x31
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x32
jl 0x140056c70
xorps xmm0, xmm0
movups xmmword [rbp - 0x70], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x60], xmm1
lea rax, [rbp + 8]
mov r8, rsi
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140056cc0
lea rdx, [rbp + 8]
lea rcx, [rbp - 0x70]
call fcn.14005edb0
nop
lea rdx, [rbp - 0x70]
cmp qword [rbp - 0x58], 0xf
cmova rdx, qword [rbp - 0x70]
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
mov qword [rbp - 0x40], rbx
mov qword [rbp - 0x38], rbx
inc rsi
cmp byte [rdx + rsi], 0
jne 0x140056cf5
mov r8, rsi
lea rcx, [rbp - 0x50]
call fcn.14005edb0
nop
lea rdx, [rbp - 0x30]
lea rcx, [rbp - 0x50]
call fcn.140052780
nop
mov rdx, qword [rbp - 0x58]
cmp rdx, 0xf
jbe 0x140056d58
inc rdx
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140056d52
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140056d52
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400d7fc0
nop
mov rdx, qword [rbp - 0x78]
cmp rdx, 0xf
jbe 0x140056d97
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140056d92
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140056d92
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400d7fc0
mov ecx, WSACleanup
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jne 0x140056dcb
nop word [rax + rax]
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, WSACleanup
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x140056db0
xorps xmm0, xmm0
movups xmmword [rbp + 0x50], xmm0
lea r14, [rbp + 0x2f8]
movabs r15, 0xff00ff00ff00ff00
mov qword [rbp + 0x58], r15
mov qword [rbp + 0x60], r14
mov rsi, qword [r14]
mov rax, rsi
xor rax, r15
mov qword [rbp + 0x50], rax
mov qword [r14], rbx
mov qword [rbp + 0xc0], 0x50
mov rax, qword [sym.imp.USER32.dll_DefWindowProcA]
mov qword [rbp + 0xc8], rax
mov qword [rbp + 0xd0], rbx
mov qword [rbp + 0xd8], rbx
mov edx, 0x7f00
xor ecx, ecx
call qword [sym.imp.USER32.dll_LoadIconA]
mov qword [rbp + 0xe0], rax
mov edx, 0x7f00
xor ecx, ecx
call qword [sym.imp.USER32.dll_LoadCursorA]
mov qword [rbp + 0xe8], rax
xorps xmm0, xmm0
movdqu xmmword [rbp + 0xf0], xmm0
lea rax, str.Viper_Public
mov qword [rbp + 0x100], rax
mov edx, 0x7f00
xor ecx, ecx
call qword [sym.imp.USER32.dll_LoadIconA]
mov qword [rbp + 0x108], rax
lea rcx, [rbp + 0xc0]
call qword [sym.imp.USER32.dll_RegisterClassExA]
movzx edi, ax
call qword [sym.imp.USER32.dll_GetDesktopWindow]
mov rcx, rax
lea rdx, [rbp + 8]
call qword [sym.imp.USER32.dll_GetWindowRect]
mov r10, qword [0x140110350]
mov dword [rsp + 0x60], 2
mov qword [rsp + 0x58], rbx
mov rcx, qword [rbp + 0xd8]
mov qword [rsp + 0x50], rcx
mov qword [rsp + 0x48], rbx
mov qword [rsp + 0x40], rbx
mov ecx, dword [rbp + 0x14]
mov dword [rsp + 0x38], ecx
mov ecx, dword [rbp + 0x10]
mov dword [rsp + 0x30], ecx
mov eax, dword [rbp + 0xc]
mov dword [rsp + 0x28], eax
mov eax, dword [rbp + 8]
mov dword [rsp + 0x20], eax
mov r9d, 0x80000000
lea r8, str.Viper_Loader__Last_Built:_6_13_2024_4:16:08__Status:_UD
movzx edx, di
xor ecx, ecx
call r10
mov qword [0x1401103f0], rax
mov edx, 0xffffffec
mov r8d, 0x800a0
mov rcx, rax
call qword [sym.imp.USER32.dll_SetWindowLongA]
mov r9d, 2
mov r8b, 0xff
xor edx, edx
mov rcx, qword [0x1401103f0]
call qword [sym.imp.USER32.dll_SetLayeredWindowAttributes]
movdqa xmm0, xmmword [0x1400f9a60]
movdqu xmmword [rbp + 0x70], xmm0
lea rdx, [rbp + 0x70]
mov rcx, qword [0x1401103f0]
call qword [sym.imp.dwmapi.dll_DwmExtendFrameIntoClientArea]
mov edx, 5
mov rcx, qword [0x1401103f0]
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, qword [0x1401103f0]
call qword [sym.imp.USER32.dll_UpdateWindow]
nop
mov qword [r14], rsi
call fcn.14003e0b0
call fcn.1400509a0
nop
mov rdx, qword [rbp + 0xa0]
cmp rdx, 0xf
jbe 0x140056fb9
inc rdx
mov rcx, qword [rbp + 0x88]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140056fb3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140056fb3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400d7fc0
nop
mov rax, qword [rbp - 8]
xor rax, r15
lea rcx, [rbp + 0x2f8]
mov qword [rcx], rax
mov rcx, qword [rbp + 0x260]
xor rcx, rsp
call fcn.1400d7c30
lea r11, [rsp + 0x3d0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
lea rdx, [rbp - 8]
call fcn.1400575d0
mov r10, rax
movdqa xmm7, xmmword [0x1400f9b10]
cmp byte [rax + 7], 0
je 0x140057153
cmp r13d, 2
jl 0x140057113
movdqa xmm1, xmm6
punpckldq xmm1, xmm6
pmuldq xmm1, xmm8
movdqa xmm0, xmm6
punpckhdq xmm0, xmm6
pmuldq xmm0, xmm8
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm6
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm10
movdqa xmm1, xmm6
psubd xmm1, xmm0
andps xmm1, xmm9
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd eax, xmm11
movd xmm0, eax
paddb xmm1, xmm0
movd xmm0, dword [r10]
xorps xmm1, xmm0
movd dword [r10], xmm1
movdqa xmm1, xmm7
punpckldq xmm1, xmm7
pmuldq xmm1, xmm8
movdqa xmm0, xmm7
punpckhdq xmm0, xmm7
pmuldq xmm0, xmm8
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm7
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm10
movdqa xmm1, xmm7
psubd xmm1, xmm0
andps xmm1, xmm9
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd xmm0, eax
paddb xmm1, xmm0
movd xmm0, dword [r10 + 4]
xorps xmm1, xmm0
movd dword [r10 + 4], xmm1
jmp 0x140057153
mov r9, r10
mov r8d, ebx
nop dword [rax]
mov eax, 0x92492493
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x38
movzx eax, r8b
sub al, cl
add al, 0x31
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 8
jl 0x140057120
mov rdx, r10
lea rcx, [rbp - 0x50]
call fcn.14005c460
nop
mov rcx, rax
call fcn.14005c340
mov rdi, rax
lea rdx, [rbp + 0x70]
call fcn.140057680
mov r9, rax
cmp byte [rax + 0xc], 0
je 0x14005728e
cmp r13d, 2
jl 0x140057259
movdqa xmm1, xmm6
punpckldq xmm1, xmm6
pmuldq xmm1, xmm8
movdqa xmm0, xmm6
punpckhdq xmm0, xmm6
pmuldq xmm0, xmm8
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm6
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm10
psubd xmm6, xmm0
andps xmm6, xmm9
packuswb xmm6, xmm6
packuswb xmm6, xmm6
movd eax, xmm11
movd xmm0, eax
paddb xmm6, xmm0
movd xmm0, dword [r9]
xorps xmm6, xmm0
movd dword [r9], xmm6
movdqa xmm1, xmm7
punpckldq xmm1, xmm7
pmuldq xmm1, xmm8
movdqa xmm0, xmm7
punpckhdq xmm0, xmm7
pmuldq xmm0, xmm8
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm7
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm10
psubd xmm7, xmm0
andps xmm7, xmm9
packuswb xmm7, xmm7
packuswb xmm7, xmm7
movd xmm0, eax
paddb xmm7, xmm0
movd xmm0, dword [r9 + 4]
xorps xmm7, xmm0
movd dword [r9 + 4], xmm7
mov ebx, 8
movsxd r8, ebx
add r8, r9
nop
mov eax, 0x92492493
imul ebx
add edx, ebx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x38
movzx eax, bl
sub al, cl
add al, 0x31
xor byte [r8], al
inc ebx
lea r8, [r8 + 1]
cmp ebx, 0xd
jl 0x140057260
mov rdx, r9
lea rcx, [rbp - 0x30]
call fcn.14005c460
mov rcx, rax
call fcn.14005c340
mov r9d, Ordinal_50
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
lea rcx, [rbp - 0x30]
call fcn.14005c370
nop
lea rcx, [rbp - 0x50]
call fcn.14005c370
mov ecx, 0x5dc
call qword [sym.imp.KERNEL32.dll_Sleep]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
lea rdx, [rbp - 8]
call fcn.1400575d0
mov r10, rax
movdqa xmm7, xmmword [0x1400f9b10]
cmp byte [rax + 7], 0
je 0x140057413
cmp r13d, 2
jl 0x1400573d8
movdqa xmm1, xmm6
punpckldq xmm1, xmm6
pmuldq xmm1, xmm8
movdqa xmm0, xmm6
punpckhdq xmm0, xmm6
pmuldq xmm0, xmm8
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm6
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm10
movdqa xmm1, xmm6
psubd xmm1, xmm0
andps xmm1, xmm9
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd eax, xmm11
movd xmm0, eax
paddb xmm1, xmm0
movd xmm0, dword [r10]
xorps xmm1, xmm0
movd dword [r10], xmm1
movdqa xmm1, xmm7
punpckldq xmm1, xmm7
pmuldq xmm1, xmm8
movdqa xmm0, xmm7
punpckhdq xmm0, xmm7
pmuldq xmm0, xmm8
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm7
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm10
movdqa xmm1, xmm7
psubd xmm1, xmm0
andps xmm1, xmm9
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd xmm0, eax
paddb xmm1, xmm0
movd xmm0, dword [r10 + 4]
xorps xmm1, xmm0
movd dword [r10 + 4], xmm1
jmp 0x140057413
mov r9, r10
mov r8d, ebx
nop
mov eax, 0x92492493
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x38
movzx eax, r8b
sub al, cl
add al, 0x31
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 8
jl 0x1400573e0
mov rdx, r10
lea rcx, [rbp - 0x50]
call fcn.14005c460
nop
mov rcx, rax
call fcn.14005c340
mov rdi, rax
lea rdx, [rbp + 0x70]
call fcn.1400575a0
mov r9, rax
cmp byte [rax + 0xc], 0
je 0x14005754e
cmp r13d, 2
jl 0x140057519
movdqa xmm1, xmm6
punpckldq xmm1, xmm6
pmuldq xmm1, xmm8
movdqa xmm0, xmm6
punpckhdq xmm0, xmm6
pmuldq xmm0, xmm8
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm6
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm10
psubd xmm6, xmm0
andps xmm6, xmm9
packuswb xmm6, xmm6
packuswb xmm6, xmm6
movd eax, xmm11
movd xmm0, eax
paddb xmm6, xmm0
movd xmm0, dword [r9]
xorps xmm6, xmm0
movd dword [r9], xmm6
movdqa xmm1, xmm7
punpckldq xmm1, xmm7
pmuldq xmm1, xmm8
movdqa xmm0, xmm7
punpckhdq xmm0, xmm7
pmuldq xmm0, xmm8
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm7
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm10
psubd xmm7, xmm0
andps xmm7, xmm9
packuswb xmm7, xmm7
packuswb xmm7, xmm7
movd xmm0, eax
paddb xmm7, xmm0
movd xmm0, dword [r9 + 4]
xorps xmm7, xmm0
movd dword [r9 + 4], xmm7
mov ebx, 8
movsxd r8, ebx
add r8, r9
nop
mov eax, 0x92492493
imul ebx
add edx, ebx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x38
movzx eax, bl
sub al, cl
add al, 0x31
xor byte [r8], al
inc ebx
lea r8, [r8 + 1]
cmp ebx, 0xd
jl 0x140057520
mov rdx, r9
lea rcx, [rbp - 0x30]
call fcn.14005c460
mov rcx, rax
call fcn.14005c340
mov r9d, Ordinal_50
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
lea rcx, [rbp - 0x30]
call fcn.14005c370
nop
lea rcx, [rbp - 0x50]
call fcn.14005c370
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3