Function at 0x140002170
Capabilities:
Enumerate gui resources
Execute command
Set console window title

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0xa8
lea rbp, [rsp + 0x80]
mov qword [rbp + 0x20], 0xfffffffffffffffe
mov rax, qword [str.XQR_]
mov qword [rbp + 0x10], rax
movups xmm0, xmmword [str.DTBTPH]
movaps xmmword [rbp], xmm0
mov edx, 0xeb0ef025
mov eax, 0x946636e7
mov ecx, 0x2d7c2b4e
nop dword [rax + rax]
cmp edx, 0x2d7c2b4e
je 0x14000228e
cmp edx, 0xf99845df
je 0x1400021eb
cmp edx, 0xeb0ef025
jne 0x1400021c0
cmp word [rbp + 0x16], 0
mov edx, 0xf99845df
cmove edx, ecx
jmp 0x1400021c0
xor edx, edx
mov ebx, 0x4acf5637
nop word cs:[rax + rax]
nop dword [rax]
cmp ebx, 0x90d69413
je 0x140002284
cmp ebx, 0x946636e7
je 0x140002230
cmp ebx, 0x4acf5637
jne 0x140002200
mov dword [rbp - 0x40], edx
mov ebx, dword [rbp - 0x40]
cmp ebx, 0xc
mov ebx, 0x90d69413
cmovl ebx, eax
jmp 0x140002200
movsxd rdx, dword [rbp - 0x40]
movsxd rbx, dword [rbp - 0x40]
imul rdi, rbx, 0x5397829d
mov rsi, rdi
shr rsi, 0x3f
sar rdi, 0x24
add edi, esi
imul edi, edi, 0x31
sub ebx, edi
mov edi, 0xffcb
sub edi, ebx
add ebx, 0x34
and edi, 0x8698
and ebx, 0x7967
or ebx, edi
xor bx, word [rbp + rdx*2]
xor ebx, 0x8698
mov word [rbp + rdx*2], bx
mov edx, dword [rbp - 0x40]
add edx, 1
jmp 0x1400021ed
mov edx, 0x2d7c2b4e
jmp 0x1400021c0
lea rsi, [rbp - 0x40]
mov rcx, rsi
call fcn.140001290
mov rdi, rbp
mov rcx, rdi
call sub.api_ms_win_crt_string_l1_1_0.dll_wcslen
mov rcx, rsi
mov rdx, rdi
mov r8, rax
call fcn.140008cb0
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
movaps xmmword [rbp - 0x50], xmm1
movaps xmmword [rbp - 0x60], xmm0
movaps xmm0, xmmword [0x14010fe10]
movups xmmword [rax + 0x10], xmm0
mov word [rax], 0
lea rcx, [rbp - 0x40]
call fcn.140009270
movzx eax, word [0x14000b028]
mov word [rbp - 0x30], ax
movups xmm0, xmmword [0x14000b018]
movaps xmmword [rbp - 0x40], xmm0
mov edx, 0x71015360
mov eax, 0x8bf5785d
mov ecx, 0xf9daff57
cmp edx, 0xf9daff57
je 0x1400023c6
cmp edx, 0x830c7f1
je 0x14000232a
cmp edx, 0x71015360
jne 0x140002300
cmp byte [rbp - 0x2f], 0
mov edx, 0x830c7f1
cmove edx, ecx
jmp 0x140002300
xor edx, edx
mov ebx, 0x4011b158
nop word cs:[rax + rax]
nop dword [rax + rax]
cmp ebx, 0x825e4183
je 0x1400023bc
cmp ebx, 0x8bf5785d
je 0x140002370
cmp ebx, 0x4011b158
jne 0x140002340
mov dword [rbp], edx
mov ebx, dword [rbp]
cmp ebx, 0x12
mov ebx, 0x825e4183
cmovl ebx, eax
jmp 0x140002340
movsxd rdx, dword [rbp]
movsxd rbx, dword [rbp]
imul rdi, rbx, 0x5397829d
mov rsi, rdi
shr rsi, 0x3f
sar rdi, 0x24
add edi, esi
imul edi, edi, 0x31
sub ebx, edi
mov edi, 0xcb
sub edi, ebx
add ebx, 0x34
and edi, 0xc9
and ebx, 0x36
or ebx, edi
xor bl, byte [rbp + rdx - 0x40]
xor bl, 0xc9
mov byte [rbp + rdx - 0x40], bl
mov edx, dword [rbp]
add edx, 1
jmp 0x14000232c
mov edx, 0xf9daff57
jmp 0x140002300
lea rcx, [rbp - 0x40]
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleA]
call fcn.140001c10
test al, al
je 0x1400024d2
call fcn.140001e00
test al, al
je 0x1400025c2
mov rax, qword [0x14000b07f]
mov qword [rbp - 0x3a], rax
mov rax, qword [0x14000b079]
mov qword [rbp - 0x40], rax
mov edx, 0x62df05c7
mov r8d, 0x3127b3c4
mov ecx, 0xe3c107e3
cmp edx, 0xe3c107e3
je 0x1400026b6
cmp edx, 0xbbf7eea
je 0x14000243a
cmp edx, 0x62df05c7
jne 0x140002410
cmp byte [rbp - 0x33], 0
mov edx, 0xbbf7eea
cmove edx, ecx
jmp 0x140002410
xor edx, edx
mov ebx, 0xcce6b8ff
nop word cs:[rax + rax]
nop dword [rax + rax]
cmp ebx, 0x3c0234d9
je 0x1400024c8
cmp ebx, 0x3127b3c4
je 0x140002480
cmp ebx, 0xcce6b8ff
jne 0x140002450
mov dword [rbp], edx
mov ebx, dword [rbp]
cmp ebx, 0xe
mov ebx, 0x3c0234d9
cmovl ebx, r8d
jmp 0x140002450
movsxd rdx, dword [rbp]
movzx ebx, byte [rbp + rdx - 0x40]
movsxd rdi, dword [rbp]
imul rsi, rdi, 0x5397829d
mov rax, rsi
shr rax, 0x3f
sar rsi, 0x24
add esi, eax
imul eax, esi, 0x31
sub edi, eax
lea eax, [rdi + 0x34]
mov esi, 0xcb
sub esi, edi
and esi, ebx
not ebx
and ebx, eax
or esi, ebx
mov byte [rbp + rdx - 0x40], sil
mov edx, dword [rbp]
add edx, 1
jmp 0x14000243c
mov edx, 0xe3c107e3
jmp 0x140002410
movups xmm0, xmmword [0x14000b039]
movups xmmword [rbp - 0x31], xmm0
movups xmm0, xmmword [0x14000b02a]
movaps xmmword [rbp - 0x40], xmm0
mov edx, 0x394005b
mov r8d, 0x4ad3176f
mov ecx, 0xcca2f5ec
nop dword [rax + rax]
cmp edx, 0xcca2f5ec
je 0x140003401
cmp edx, 0x796b3b51
je 0x14000252a
cmp edx, 0x394005b
jne 0x140002500
cmp byte [rbp - 0x22], 0
mov edx, 0x796b3b51
cmove edx, ecx
jmp 0x140002500
xor edx, edx
mov ebx, 0x3d3eba91
nop word cs:[rax + rax]
nop dword [rax + rax]
cmp ebx, 0xdaa30d84
je 0x1400025b8
cmp ebx, 0x4ad3176f
je 0x140002570
cmp ebx, 0x3d3eba91
jne 0x140002540
mov dword [rbp], edx
mov ebx, dword [rbp]
cmp ebx, 0x1f
mov ebx, 0xdaa30d84
cmovl ebx, r8d
jmp 0x140002540
movsxd rdx, dword [rbp]
movzx ebx, byte [rbp + rdx - 0x40]
movsxd rdi, dword [rbp]
imul rsi, rdi, 0x5397829d
mov rax, rsi
shr rax, 0x3f
sar rsi, 0x24
add esi, eax
imul eax, esi, 0x31
sub edi, eax
lea eax, [rdi + 0x34]
mov esi, 0xcb
sub esi, edi
and esi, ebx
not ebx
and ebx, eax
or esi, ebx
mov byte [rbp + rdx - 0x40], sil
mov edx, dword [rbp]
add edx, 1
jmp 0x14000252c
mov edx, 0xcca2f5ec
jmp 0x140002500
movups xmm0, xmmword [0x14000b069]
movaps xmmword [rbp - 0x20], xmm0
movups xmm0, xmmword [0x14000b059]
movaps xmmword [rbp - 0x30], xmm0
movups xmm0, xmmword [0x14000b049]
movaps xmmword [rbp - 0x40], xmm0
mov edx, 0xafef630f
mov r8d, 0x6b7979c6
mov ecx, 0x70e43fe6
nop word cs:[rax + rax]
nop dword [rax]
cmp edx, 0x70e43fe6
je 0x140003401
cmp edx, 0xd30e0bd3
je 0x14000262a
cmp edx, 0xafef630f
jne 0x140002600
cmp byte [rbp - 0x11], 0
mov edx, 0xd30e0bd3
cmove edx, ecx
jmp 0x140002600
xor edx, edx
jmp 0x140002673
movsxd rdx, dword [rbp]
movzx ebx, byte [rbp + rdx - 0x40]
movsxd rdi, dword [rbp]
imul rsi, rdi, 0x5397829d
mov rax, rsi
shr rax, 0x3f
sar rsi, 0x24
add esi, eax
imul eax, esi, 0x31
sub edi, eax
lea eax, [rdi + 0x34]
mov esi, 0xcb
sub esi, edi
and esi, ebx
not ebx
and ebx, eax
or esi, ebx
mov byte [rbp + rdx - 0x40], sil
mov edx, dword [rbp]
add edx, 1
mov ebx, 0xd1a59d69
nop dword [rax + rax]
cmp ebx, 0x6b7979c6
je 0x140002630
cmp ebx, 0x618ae695
je 0x1400026ac
cmp ebx, 0xd1a59d69
jne 0x140002680
mov dword [rbp], edx
mov ebx, dword [rbp]
cmp ebx, 0x30
mov ebx, 0x618ae695
cmovl ebx, r8d
jmp 0x140002680
mov edx, 0x70e43fe6
jmp 0x140002600
lea rcx, [rbp - 0x40]
call fcn.1400011e0
lea rcx, [0x140001f20]
xor edx, edx
call qword [sym.imp.USER32.dll_EnumWindows]
mov rax, qword [0x140113330]
cmp rax, qword [0x140113328]
je 0x140002762
lea rdx, [0x14000b0b0]
lea rsi, [rbp - 0x60]
mov r8d, 0x104c00
mov rcx, rsi
call fcn.1400013b0
test al, al
je 0x14000285e
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp - 0x40], rax
cmp qword [rbp - 0x48], 8
mov ecx, 0x44a6699
mov eax, 0xfd32d7cb
cmovae eax, ecx
mov edx, 0xb167c394
nop word cs:[rax + rax]
cmp edx, 0x44a6699
je 0x140002754
cmp edx, 0xfd32d7cb
je 0x140002965
cmp edx, 0xb167c394
jne 0x140002730
mov rcx, qword [rbp - 0x40]
mov edx, eax
jmp 0x140002730
mov rcx, qword [rbp]
mov rcx, qword [rcx]
mov edx, 0xfd32d7cb
jmp 0x140002730
mov al, byte [0x14000b0a7]
mov byte [rbp - 0x20], al
movups xmm0, xmmword [0x14000b097]
movaps xmmword [rbp - 0x30], xmm0
movups xmm0, xmmword [0x14000b087]
movaps xmmword [rbp - 0x40], xmm0
mov edx, 0xbe559926
mov r8d, 0xc35c6c
mov ecx, 0x4d8046ea
nop word cs:[rax + rax]
nop dword [rax + rax]
cmp edx, 0x4d8046ea
je 0x140003401
cmp edx, 0xc9976283
je 0x1400027ca
cmp edx, 0xbe559926
jne 0x1400027a0
cmp byte [rbp - 0x20], 0
mov edx, 0xc9976283
cmove edx, ecx
jmp 0x1400027a0
xor edx, edx
mov ebx, 0xcb1e6430
nop word cs:[rax + rax]
nop dword [rax + rax]
cmp ebx, 0x1a180b62
je 0x140002854
cmp ebx, 0xc35c6c
je 0x14000280c
cmp ebx, 0xcb1e6430
jne 0x1400027e0
mov dword [rbp], edx
mov ebx, dword [rbp]
cmp ebx, 0x21
mov ebx, 0x1a180b62
cmovl ebx, r8d
jmp 0x1400027e0
movsxd rdx, dword [rbp]
movzx ebx, byte [rbp + rdx - 0x40]
movsxd rdi, dword [rbp]
imul rsi, rdi, 0x5397829d
mov rax, rsi
shr rax, 0x3f
sar rsi, 0x24
add esi, eax
imul eax, esi, 0x31
sub edi, eax
lea eax, [rdi + 0x34]
mov esi, 0xcb
sub esi, edi
and esi, ebx
not ebx
and ebx, eax
or esi, ebx
mov byte [rbp + rdx - 0x40], sil
mov edx, dword [rbp]
add edx, 1
jmp 0x1400027cc
mov edx, 0x4d8046ea
jmp 0x1400027a0
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rcx, qword [0x14010fccf]
mov qword [rbp - 0x21], rcx
movups xmm0, xmmword [0x14010fcc0]
movaps xmmword [rbp - 0x30], xmm0
movups xmm0, xmmword [0x14010fcb0]
movaps xmmword [rbp - 0x40], xmm0
mov ebx, 0x4e8d364c
mov r8d, 0xaec1d350
mov edx, 0x9e0a4ea
nop word cs:[rax + rax]
nop
cmp ebx, 0xfa10e86e
je 0x1400028ca
cmp ebx, 0x9e0a4ea
je 0x140002a6e
cmp ebx, 0x4e8d364c
jne 0x1400028a0
cmp byte [rbp - 0x1a], 0
mov ebx, 0xfa10e86e
cmove ebx, edx
jmp 0x1400028a0
xor ebx, ebx
mov edi, 0x29e176f9
nop word cs:[rax + rax]
nop dword [rax + rax]
cmp edi, 0xaec1d350
je 0x14000290c
cmp edi, 0x41a0e670
je 0x14000295b
cmp edi, 0x29e176f9
jne 0x1400028e0
mov dword [rbp], ebx
mov edi, dword [rbp]
cmp edi, 0x27
mov edi, 0x41a0e670
cmovl edi, r8d
jmp 0x1400028e0
movsxd rbx, dword [rbp]
movsxd rdi, dword [rbp]
imul rsi, rdi, 0x5397829d
mov rcx, rsi
shr rcx, 0x3f
sar rsi, 0x24
add esi, ecx
imul ecx, esi, 0x31
sub edi, ecx
mov ecx, 0xcb
sub ecx, edi
add edi, 0x14
and ecx, 0xef
and edi, 0x10
or edi, ecx
xor dil, byte [rbp + rbx - 0x40]
xor dil, 0xef
mov byte [rbp + rbx - 0x40], dil
mov ebx, dword [rbp]
add ebx, 1
jmp 0x1400028cc
mov ebx, 0x9e0a4ea
jmp 0x1400028a0
xor edx, edx
mov r8d, 1
call qword [sym.imp.KERNEL32.dll_LoadLibraryExW]
test rax, rax
je 0x140003227
mov r12, rax
mov al, byte [0x14010fcfa]
mov byte [rbp - 0x38], al
mov rax, qword [0x14010fcf2]
mov qword [rbp - 0x40], rax
mov edx, 0xaca95567
mov r8d, 0xfea55818
mov ecx, 0xe3078fe8
nop word cs:[rax + rax]
nop dword [rax]
cmp edx, 0xfec49650
je 0x1400029da
cmp edx, 0xe3078fe8
je 0x140002a7e
cmp edx, 0xaca95567
jne 0x1400029b0
cmp byte [rbp - 0x38], 0
mov edx, 0xfec49650
cmove edx, ecx
jmp 0x1400029b0
xor edx, edx
mov ebx, 0xfc6a1327
nop word cs:[rax + rax]
nop dword [rax + rax]
cmp ebx, 0x347381ea
je 0x140002a64
cmp ebx, 0xfea55818
je 0x140002a1c
cmp ebx, 0xfc6a1327
jne 0x1400029f0
mov dword [rbp], edx
mov ebx, dword [rbp]
cmp ebx, 9
mov ebx, 0x347381ea
cmovl ebx, r8d
jmp 0x1400029f0
movsxd rdx, dword [rbp]
movzx ebx, byte [rbp + rdx - 0x40]
movsxd rdi, dword [rbp]
imul rsi, rdi, 0x5397829d
mov rax, rsi
shr rax, 0x3f
sar rsi, 0x24
add esi, eax
imul eax, esi, 0x31
sub edi, eax
lea eax, [rdi + 0x34]
mov esi, 0xcb
sub esi, edi
and esi, ebx
not ebx
and ebx, eax
or esi, ebx
mov byte [rbp + rdx - 0x40], sil
mov edx, dword [rbp]
add edx, 1
jmp 0x1400029dc
mov edx, 0xe3078fe8
jmp 0x1400029b0
lea rcx, [rbp - 0x40]
mov edx, eax
call fcn.140001000
jmp 0x14000340a
lea rdx, [rbp - 0x40]
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x14000330e
mov r13, rax
mov rdx, qword [0x140113330]
sub rdx, qword [0x140113328]
mov rax, qword [0x14010fd32]
mov qword [rbp - 0x30], rax
movups xmm0, xmmword [0x14010fd22]
movaps xmmword [rbp - 0x40], xmm0
mov ebx, 0x416d5454
mov r8d, 0x8792f9a7
mov r9d, 0xb9bc5103
nop dword [rax]
cmp ebx, 0xb9bc5103
je 0x140002b8e
cmp ebx, 0xbb1d0caf
je 0x140002afb
cmp ebx, 0x416d5454
jne 0x140002ad0
cmp byte [rbp - 0x29], 0
mov ebx, 0xbb1d0caf
cmove ebx, r9d
jmp 0x140002ad0
xor ebx, ebx
mov esi, 0xae4327b2
nop word cs:[rax + rax]
nop dword [rax]
cmp esi, 0x8792f9a7
je 0x140002b3c
cmp esi, 0xebecfd83
je 0x140002b84
cmp esi, 0xae4327b2
jne 0x140002b10
mov dword [rbp], ebx
mov esi, dword [rbp]
cmp esi, 0x18
mov esi, 0xebecfd83
cmovl esi, r8d
jmp 0x140002b10
movsxd rbx, dword [rbp]
movzx esi, byte [rbp + rbx - 0x40]
movsxd rax, dword [rbp]
imul rcx, rax, 0x5397829d
mov rdi, rcx
shr rdi, 0x3f
sar rcx, 0x24
add ecx, edi
imul ecx, ecx, 0x31
sub eax, ecx
lea ecx, [rax + 0x34]
mov edi, 0xcb
sub edi, eax
and edi, esi
not esi
and esi, ecx
or edi, esi
mov byte [rbp + rbx - 0x40], dil
mov ebx, dword [rbp]
add ebx, 1
jmp 0x140002afd
mov ebx, 0xb9bc5103
jmp 0x140002ad0
sar rdx, 3
movabs rax, 0xaaaaaaaaaaaaaaab
imul rdx, rax
lea rcx, [rbp - 0x40]
call fcn.1400011e0
mov rax, qword [0x140113328]
cmp qword [0x140113330], rax
je 0x140002e72
xor esi, esi
jmp 0x140002c31
lea rcx, [rbp - 0x40]
call fcn.1400011e0
mov rax, qword [0x140113328]
mov qword [rax + r15 + 0x10], r14
mov rax, qword [0x140113328]
mov ecx, dword [rax + r15 + 0xc]
xor edx, edx
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.USER32.dll_PostThreadMessageW]
add esi, 1
movsxd rsi, esi
mov rcx, qword [0x140113330]
mov rax, qword [0x140113328]
sub rcx, rax
sar rcx, 3
movabs rdx, 0xaaaaaaaaaaaaaaab
imul rcx, rdx
cmp rcx, rsi
jbe 0x140002e72
lea rcx, [rsi*8]
lea r15, [rcx + rcx*2]
mov r9d, dword [rax + r15 + 0xc]
mov ecx, 3
mov rdx, r13
mov r8, r12
call qword [sym.imp.USER32.dll_SetWindowsHookExW]
mov r14, rax
mov rax, qword [0x140113328]
mov edx, dword [rax + r15 + 8]
test r14, r14
je 0x140002d60
mov eax, dword [0x14010fd5e]
mov dword [rbp - 0x30], eax
movups xmm0, xmmword [0x14010fd4e]
movaps xmmword [rbp - 0x40], xmm0
mov eax, 0xe6036e1a
nop word cs:[rax + rax]
nop
cmp eax, 0xd8e53903
je 0x140002cbc
cmp eax, 0xddd340ba
je 0x140002bd0
cmp eax, 0xe6036e1a
jne 0x140002c90
cmp byte [rbp - 0x2d], 0
mov eax, 0xd8e53903
mov ecx, 0xddd340ba
cmove eax, ecx
jmp 0x140002c90
xor eax, eax
mov ecx, 0x66066305
nop word cs:[rax + rax]
nop dword [rax]
cmp ecx, 0xeb1919ed
je 0x140002d49
cmp ecx, 0x596311ff
je 0x140002d00
cmp ecx, 0x66066305
jne 0x140002cd0
mov dword [rbp], eax
mov ecx, dword [rbp]
cmp ecx, 0x14
mov ecx, 0xeb1919ed
mov ebx, 0x596311ff
cmovl ecx, ebx
jmp 0x140002cd0
movsxd r8, dword [rbp]
movzx ecx, byte [rbp + r8 - 0x40]
movsxd rdi, dword [rbp]
imul rbx, rdi, 0x5397829d
mov rax, rbx
shr rax, 0x3f
sar rbx, 0x24
add ebx, eax
imul eax, ebx, 0x31
sub edi, eax
lea eax, [rdi + 0x34]
mov ebx, 0xcb
sub ebx, edi
and ebx, ecx
not ecx
and ecx, eax
or ebx, ecx
mov byte [rbp + r8 - 0x40], bl
mov eax, dword [rbp]
add eax, 1
jmp 0x140002cbe
mov eax, 0xddd340ba
jmp 0x140002c90
mov eax, dword [0x14010fd4a]
mov dword [rbp - 0x30], eax
movups xmm0, xmmword [0x14010fd3a]
movaps xmmword [rbp - 0x40], xmm0
mov eax, 0xe6036e1a
nop dword [rax]
cmp eax, 0xd8e53903
je 0x140002dac
cmp eax, 0xddd340ba
je 0x140002e50
cmp eax, 0xe6036e1a
jne 0x140002d80
cmp byte [rbp - 0x2d], 0
mov eax, 0xd8e53903
mov ecx, 0xddd340ba
cmove eax, ecx
jmp 0x140002d80
xor eax, eax
mov ecx, 0x66066305
nop word cs:[rax + rax]
nop dword [rax]
cmp ecx, 0xeb1919ed
je 0x140002e39
cmp ecx, 0x596311ff
je 0x140002df0
cmp ecx, 0x66066305
jne 0x140002dc0
mov dword [rbp], eax
mov ecx, dword [rbp]
cmp ecx, 0x14
mov ecx, 0xeb1919ed
mov ebx, 0x596311ff
cmovl ecx, ebx
jmp 0x140002dc0
movsxd r8, dword [rbp]
movzx ecx, byte [rbp + r8 - 0x40]
movsxd rbx, dword [rbp]
imul rdi, rbx, 0x5397829d
mov rax, rdi
shr rax, 0x3f
sar rdi, 0x24
add edi, eax
imul eax, edi, 0x31
sub ebx, eax
lea eax, [rbx + 0x34]
mov edi, 0xcb
sub edi, ebx
and edi, ecx
not ecx
and ecx, eax
or edi, ecx
mov byte [rbp + r8 - 0x40], dil
mov eax, dword [rbp]
add eax, 1
jmp 0x140002dae
mov eax, 0xddd340ba
jmp 0x140002d80
lea rcx, [rbp - 0x40]
call fcn.140001000
mov rax, qword [0x140113328]
lea rcx, [rsi + rsi*2]
mov qword [rax + rcx*8 + 0x10], 0
jmp 0x140002bff
movups xmm0, xmmword [0x14010fd71]
movups xmmword [rbp - 0x31], xmm0
movups xmm0, xmmword [0x14010fd62]
movaps xmmword [rbp - 0x40], xmm0
mov edx, 0x394005b
mov r8d, 0x4ad3176f
mov ecx, 0xcca2f5ec
nop dword [rax + rax]
cmp edx, 0xcca2f5ec
je 0x140002f5e
cmp edx, 0x796b3b51
je 0x140002eca
cmp edx, 0x394005b
jne 0x140002ea0
cmp byte [rbp - 0x22], 0
mov edx, 0x796b3b51
cmove edx, ecx
jmp 0x140002ea0
xor edx, edx
mov ebx, 0x3d3eba91
nop word cs:[rax + rax]
nop dword [rax + rax]
cmp ebx, 0xdaa30d84
je 0x140002f54
cmp ebx, 0x4ad3176f
je 0x140002f0c
cmp ebx, 0x3d3eba91
jne 0x140002ee0
mov dword [rbp], edx
mov ebx, dword [rbp]
cmp ebx, 0x1f
mov ebx, 0xdaa30d84
cmovl ebx, r8d
jmp 0x140002ee0
movsxd rdx, dword [rbp]
movzx ebx, byte [rbp + rdx - 0x40]
movsxd rdi, dword [rbp]
imul rsi, rdi, 0x5397829d
mov rax, rsi
shr rax, 0x3f
sar rsi, 0x24
add esi, eax
imul eax, esi, 0x31
sub edi, eax
lea eax, [rdi + 0x34]
mov esi, 0xcb
sub esi, edi
and esi, ebx
not ebx
and ebx, eax
or esi, ebx
mov byte [rbp + rdx - 0x40], sil
mov edx, dword [rbp]
add edx, 1
jmp 0x140002ecc
mov edx, 0xcca2f5ec
jmp 0x140002ea0
lea rcx, [rbp - 0x40]
call fcn.1400011e0
movups xmm0, xmmword [0x14010fdad]
movups xmmword [rbp - 0x14], xmm0
movups xmm0, xmmword [0x14010fda1]
movaps xmmword [rbp - 0x20], xmm0
movups xmm0, xmmword [0x14010fd91]
movaps xmmword [rbp - 0x30], xmm0
movups xmm0, xmmword [0x14010fd81]
movaps xmmword [rbp - 0x40], xmm0
mov edx, 0x4a73a39c
mov r8d, 0x5b49525a
mov ecx, 0x66e5bb19
nop word cs:[rax + rax]
nop dword [rax]
cmp edx, 0xedcc4e50
je 0x140002fda
cmp edx, 0x66e5bb19
je 0x14000306e
cmp edx, 0x4a73a39c
jne 0x140002fb0
cmp byte [rbp - 5], 0
mov edx, 0xedcc4e50
cmove edx, ecx
jmp 0x140002fb0
xor edx, edx
mov ebx, 0xf18b1769
nop word cs:[rax + rax]
nop dword [rax + rax]
cmp ebx, 0xa376a255
je 0x140003064
cmp ebx, 0x5b49525a
je 0x14000301c
cmp ebx, 0xf18b1769
jne 0x140002ff0
mov dword [rbp], edx
mov ebx, dword [rbp]
cmp ebx, 0x3c
mov ebx, 0xa376a255
cmovl ebx, r8d
jmp 0x140002ff0
movsxd rdx, dword [rbp]
movzx ebx, byte [rbp + rdx - 0x40]
movsxd rdi, dword [rbp]
imul rsi, rdi, 0x5397829d
mov rax, rsi
shr rax, 0x3f
sar rsi, 0x24
add esi, eax
imul eax, esi, 0x31
sub edi, eax
lea eax, [rdi + 0x34]
mov esi, 0xcb
sub esi, edi
and esi, ebx
not ebx
and ebx, eax
or esi, ebx
mov byte [rbp + rdx - 0x40], sil
mov edx, dword [rbp]
add edx, 1
jmp 0x140002fdc
mov edx, 0x66e5bb19
jmp 0x140002fb0
lea rcx, [rbp - 0x40]
call fcn.140001130
lea rcx, str.pause___nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea r9, str.Suicide
xor ecx, ecx
xor edx, edx
xor r8d, r8d
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [0x140113348], rax
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rax, qword [0x140113330]
mov rdx, qword [0x140113328]
cmp rax, rdx
je 0x14000340a
xor edi, edi
mov r14, qword [sym.imp.USER32.dll_UnhookWindowsHookEx]
lea r15, [rbp - 0x40]
mov r12d, 0x8792f9a7
mov r13d, 0xb9bc5103
jmp 0x140003126
xor r8d, r8d
test eax, eax
setne r8b
mov rcx, r15
call fcn.140001130
mov rax, qword [0x140113330]
mov rdx, qword [0x140113328]
add edi, 1
movsxd rdi, edi
mov rcx, rax
sub rcx, rdx
sar rcx, 3
movabs rbx, 0xaaaaaaaaaaaaaaab
imul rcx, rbx
cmp rcx, rdi
jbe 0x14000340a
lea rbx, [rdi + rdi*2]
mov rcx, qword [rdx + rbx*8 + 0x10]
test rcx, rcx
je 0x1400030ff
call r14
mov rcx, qword [0x140113328]
mov edx, dword [rcx + rbx*8 + 8]
mov rcx, qword [0x14010fdcd]
mov qword [rbp - 0x30], rcx
movups xmm0, xmmword [0x14010fdbd]
movaps xmmword [rbp - 0x40], xmm0
mov ecx, 0x416d5454
nop dword [rax]
cmp ecx, 0xb9bc5103
je 0x1400030e0
cmp ecx, 0xbb1d0caf
je 0x14000318b
cmp ecx, 0x416d5454
jne 0x140003160
cmp byte [rbp - 0x29], 0
mov ecx, 0xbb1d0caf
cmove ecx, r13d
jmp 0x140003160
xor ecx, ecx
mov ebx, 0xae4327b2
nop word cs:[rax + rax]
nop dword [rax]
cmp ebx, 0x8792f9a7
je 0x1400031d0
cmp ebx, 0xebecfd83
je 0x14000321d
cmp ebx, 0xae4327b2
jne 0x1400031a0
mov dword [rbp], ecx
mov ebx, dword [rbp]
cmp ebx, 0x18
mov ebx, 0xebecfd83
cmovl ebx, r12d
jmp 0x1400031a0
movsxd r8, dword [rbp]
movzx r9d, byte [rbp + r8 - 0x40]
movsxd rsi, dword [rbp]
imul rcx, rsi, 0x5397829d
mov rbx, rcx
shr rbx, 0x3f
sar rcx, 0x24
add ecx, ebx
imul ecx, ecx, 0x31
sub esi, ecx
lea ecx, [rsi + 0x34]
mov ebx, 0xcb
sub ebx, esi
and ebx, r9d
not r9d
and r9d, ecx
or ebx, r9d
mov byte [rbp + r8 - 0x40], bl
mov ecx, dword [rbp]
add ecx, 1
jmp 0x14000318d
mov ecx, 0xb9bc5103
jmp 0x140003160
movups xmm0, xmmword [0x14010fce2]
movups xmmword [rbp - 0x35], xmm0
movups xmm0, xmmword [0x14010fcd7]
movaps xmmword [rbp - 0x40], xmm0
mov edx, 0xfc74c9d7
mov r8d, 0xbaadf5a8
mov ecx, 0x1178109a
nop dword [rax]
cmp edx, 0x2d0c70f8
je 0x14000327a
cmp edx, 0x1178109a
je 0x140003401
cmp edx, 0xfc74c9d7
jne 0x140003250
cmp byte [rbp - 0x26], 0
mov edx, 0x2d0c70f8
cmove edx, ecx
jmp 0x140003250
xor edx, edx
mov ebx, 0x67dc0499
nop word cs:[rax + rax]
nop dword [rax + rax]
cmp ebx, 0xbaadf5a8
je 0x1400032bc
cmp ebx, 0xe118bf0e
je 0x140003304
cmp ebx, 0x67dc0499
jne 0x140003290
mov dword [rbp], edx
mov ebx, dword [rbp]
cmp ebx, 0x1b
mov ebx, 0xe118bf0e
cmovl ebx, r8d
jmp 0x140003290
movsxd rdx, dword [rbp]
movzx ebx, byte [rbp + rdx - 0x40]
movsxd rdi, dword [rbp]
imul rsi, rdi, 0x5397829d
mov rax, rsi
shr rax, 0x3f
sar rsi, 0x24
add esi, eax
imul eax, esi, 0x31
sub edi, eax
lea eax, [rdi + 0x34]
mov esi, 0xcb
sub esi, edi
and esi, ebx
not ebx
and ebx, eax
or esi, ebx
mov byte [rbp + rdx - 0x40], sil
mov edx, dword [rbp]
add edx, 1
jmp 0x14000327c
mov edx, 0x1178109a
jmp 0x140003250
mov rax, qword [0x14010fd1a]
mov qword [rbp - 0x21], rax
movups xmm0, xmmword [0x14010fd0b]
movaps xmmword [rbp - 0x30], xmm0
movups xmm0, xmmword [0x14010fcfb]
movaps xmmword [rbp - 0x40], xmm0
mov edx, 0x4e8d364c
mov eax, 0xaec1d350
mov ecx, 0x9e0a4ea
nop
cmp edx, 0xfa10e86e
je 0x14000336a
cmp edx, 0x9e0a4ea
je 0x140003401
cmp edx, 0x4e8d364c
jne 0x140003340
cmp byte [rbp - 0x1a], 0
mov edx, 0xfa10e86e
cmove edx, ecx
jmp 0x140003340
xor edx, edx
mov ebx, 0x29e176f9
nop word cs:[rax + rax]
nop dword [rax + rax]
cmp ebx, 0xaec1d350
je 0x1400033ab
cmp ebx, 0x41a0e670
je 0x1400033f7
cmp ebx, 0x29e176f9
jne 0x140003380
mov dword [rbp], edx
mov ebx, dword [rbp]
cmp ebx, 0x27
mov ebx, 0x41a0e670
cmovl ebx, eax
jmp 0x140003380
movsxd rdx, dword [rbp]
movsxd rbx, dword [rbp]
imul rdi, rbx, 0x5397829d
mov rsi, rdi
shr rsi, 0x3f
sar rdi, 0x24
add edi, esi
imul edi, edi, 0x31
sub ebx, edi
mov edi, 0xcb
sub edi, ebx
add ebx, 0x14
and edi, 0xef
and ebx, 0x10
or ebx, edi
xor bl, byte [rbp + rdx - 0x40]
xor bl, 0xef
mov byte [rbp + rdx - 0x40], bl
mov edx, dword [rbp]
add edx, 1
jmp 0x14000336c
mov edx, 0x9e0a4ea
jmp 0x140003340
lea rcx, [rbp - 0x40]
call fcn.140001000
mov rcx, qword [0x140113348]
test rcx, rcx
je 0x14000341c
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [0x140113340]
test rcx, rcx
je 0x14000342e
call qword [sym.imp.KERNEL32.dll_CloseHandle]
movups xmm0, xmmword [0x14010fdf1]
movups xmmword [rbp - 0x24], xmm0
movups xmm0, xmmword [0x14010fde5]
movaps xmmword [rbp - 0x30], xmm0
movups xmm0, xmmword [0x14010fdd5]
movaps xmmword [rbp - 0x40], xmm0
mov edx, 0xa543c784
mov eax, 0xcf800ae5
mov ecx, 0xd5d9892a
nop
cmp edx, 0x6866e965
je 0x14000348a
cmp edx, 0xd5d9892a
je 0x140003526
cmp edx, 0xa543c784
jne 0x140003460
cmp byte [rbp - 0x15], 0
mov edx, 0x6866e965
cmove edx, ecx
jmp 0x140003460
xor edx, edx
mov ebx, 0xa4456020
nop word cs:[rax + rax]
nop dword [rax + rax]
cmp ebx, 0x955f29a3
je 0x14000351c
cmp ebx, 0xcf800ae5
je 0x1400034d0
cmp ebx, 0xa4456020
jne 0x1400034a0
mov dword [rbp], edx
mov ebx, dword [rbp]
cmp ebx, 0x2c
mov ebx, 0x955f29a3
cmovl ebx, eax
jmp 0x1400034a0
movsxd rdx, dword [rbp]
movsxd rbx, dword [rbp]
imul rdi, rbx, 0x5397829d
mov rsi, rdi
shr rsi, 0x3f
sar rdi, 0x24
add edi, esi
imul edi, edi, 0x31
sub ebx, edi
mov edi, 0x4b
sub edi, ebx
add ebx, 0x34
and edi, 0x4c
and ebx, 0xb3
or ebx, edi
xor bl, byte [rbp + rdx - 0x40]
xor bl, 0x4c
mov byte [rbp + rdx - 0x40], bl
mov edx, dword [rbp]
add edx, 1
jmp 0x14000348c
mov edx, 0xd5d9892a
jmp 0x140003460
lea rcx, [rbp - 0x40]
call fcn.140001130
lea rcx, str.pause___nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp - 0x60]
call fcn.140009270
xor eax, eax
add rsp, 0xa8
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret