Function at 0x140082020
Capabilities:
Create process on windows

Disassembly:
push rsi
push rdi
push rbp
push rbx
sub rsp, 0xd8
movaps xmmword [rsp + 0xc0], xmm8
movdqa xmmword [rsp + 0xb0], xmm7
movaps xmmword [rsp + 0xa0], xmm6
mov rsi, rdx
mov rbx, rcx
mov rax, qword [0x140183d00]
xor rax, rsp
mov qword [rsp + 0x98], rax
movsd xmm0, qword [0x140109080]
movsd qword [rsp + 0x58], xmm0
movss xmm0, dword [rdx + 4]
addss xmm0, dword [0x140109090]
movss xmm8, dword [0x140107700]
mulss xmm0, xmm8
movss xmm1, dword [rdx]
mulss xmm1, xmm8
addss xmm1, dword [0x140109094]
addss xmm1, dword [0x140109098]
movss dword [rsp + 0x60], xmm1
movss dword [rsp + 0x64], xmm0
lea rdi, [rsp + 0x60]
mov rcx, rdi
call fcn.1400a7560
pxor xmm7, xmm7
movdqa xmmword [rsp + 0x60], xmm7
movaps xmm0, xmmword [0x140108760]
movaps xmmword [rsp + 0x40], xmm0
movsd xmm0, qword [0x140108060]
movsd qword [rsp + 0x38], xmm0
movq qword [rsp + 0x30], xmm7
mov ecx, dword [rbx + 4]
mov qword [rsp + 0x28], rdi
lea rax, [rsp + 0x40]
mov qword [rsp + 0x20], rax
lea rdx, [rsp + 0x58]
lea r8, [rsp + 0x30]
lea r9, [rsp + 0x38]
call fcn.1400c8ef0
movss xmm1, dword [0x1401087f0]
xorps xmm0, xmm0
call fcn.1400a74b0
movss xmm6, dword [rsi + 4]
call fcn.1400a7680
subss xmm6, xmm0
mulss xmm6, xmm8
movaps xmm0, xmm6
call fcn.1400a75f0
cmp byte [0x140186bf2], 1
jne 0x14008224e
movzx eax, byte [0x140186be4]
movzx ecx, byte [0x140186be6]
movzx edx, byte [0x140186be8]
movzx r8d, byte [0x140186bea]
movzx r9d, byte [0x140186be7]
shl r9d, 8
or r9d, ecx
movzx ecx, byte [0x140186be5]
shl ecx, 8
or ecx, eax
movd xmm0, ecx
pinsrw xmm0, r9d, 1
movzx eax, byte [0x140186be9]
shl eax, 8
or eax, edx
pinsrw xmm0, eax, 2
movzx eax, byte [0x140186beb]
shl eax, 8
or eax, r8d
pinsrw xmm0, eax, 3
psllw xmm0, 7
pand xmm0, xmmword [0x1401011b0]
pcmpgtb xmm7, xmm0
movdqa xmm0, xmm7
pandn xmm0, xmmword [0x1401090b0]
movzx eax, byte [0x140186bec]
pand xmm7, xmmword [0x1401090a0]
por xmm7, xmm0
shl al, 5
or al, 0x88
cmp byte [0x140186bed], 0
mov edx, 0x61
mov ecx, 0x89
cmovne ecx, edx
cmp byte [0x140186bee], 0
mov r8d, reloc.WS2_32.dll_WSAGetLastError
mov edx, 0x8a
cmovne edx, r8d
cmp byte [0x140186bef], 0
mov r9d, 0x67
mov r8d, 0x8b
cmovne r8d, r9d
cmp byte [0x140186bf0], 0
mov r10d, 0x7c
mov r9d, 0x8c
cmovne r9d, r10d
cmp byte [0x140186bf1], 0
mov r11d, 0xb2
mov r10d, 0x8d
cmovne r10d, r11d
jmp 0x1400822ce
mov byte [0x140186be4], 1
mov byte [0x140186be5], 1
mov byte [0x140186be6], 1
mov byte [0x140186be7], 1
mov byte [0x140186be8], 1
mov byte [0x140186be9], 1
mov byte [0x140186bea], 1
mov byte [0x140186beb], 1
mov byte [0x140186bec], 1
mov byte [0x140186bed], 1
mov byte [0x140186bee], 1
mov byte [0x140186bef], 1
mov byte [0x140186bf0], 1
mov byte [0x140186bf1], 1
mov byte [0x140186bf2], 1
movdqa xmm7, xmmword [0x1401090a0]
mov al, 0xa8
mov cl, 0x61
mov dl, reloc.WS2_32.dll_WSAGetLastError
mov r8b, 0x67
mov r9b, 0x7c
mov r10b, 0xb2
movq qword [rsp + 0x60], xmm7
mov byte [rsp + 0x68], al
mov byte [rsp + 0x69], cl
mov byte [rsp + 0x6a], dl
mov byte [rsp + 0x6b], r8b
mov byte [rsp + 0x6c], r9b
mov byte [rsp + 0x6d], r10b
mov byte [rsp + 0x6e], 0x8e
mov qword [rsp + 0x6f], 0
mov word [rsp + 0x77], 0
call fcn.140085530
mov rbx, qword [rax]
call fcn.140085540
mov rcx, qword [rax]
xor eax, eax
jmp 0x14008233d
mov rdx, rcx
movzx ecx, r9b
add rax, rdx
add rax, rcx
mov rcx, rdx
inc rax
cmp rax, 0x19
jae 0x140082578
cmp rbx, rax
ja 0x140082566
movzx r9d, byte [rsp + rax + 0x60]
movzx r8d, r9b
lea rdx, [rcx + 1]
cmp rbx, rdx
jae 0x1400823c0
cmp rcx, rax
ja 0x140082570
lea r10, [rbx + rcx]
cmp r10, rax
jbe 0x140082430
lea r11, [rcx + 0xa]
cmp rbx, r11
je 0x140082435
lea r11, [rcx + 2]
cmp rbx, r11
je 0x140082455
lea r11, [rcx + 4]
cmp rbx, r11
jne 0x1400824f2
mov edx, eax
or edx, 0x80
add edx, r8d
mov r9d, eax
and r9d, r8d
add r9d, r9d
sub edx, r9d
add dl, 0x80
mov rbx, r10
jmp 0x140082480
je 0x140082320
lea r10, [rcx + 2]
cmp rbx, r10
je 0x1400824fb
lea r10, [rcx + 6]
cmp rbx, r10
jne 0x140082359
mov r9d, eax
or r9d, 0x99124c40
lea edx, [r9 + r8]
and r9d, r8d
add r9d, r9d
sub edx, r9d
add dl, 0x40
mov r9d, eax
or r9d, 0x71e28f40
lea r10d, [r9 + r8]
and r9d, r8d
add r9d, r9d
sub r10d, r9d
add r10b, dl
add r10b, 0x40
mov byte [rsp + rax + 0x60], r10b
add rbx, rcx
jmp 0x140082480
cmp rbx, rdx
jne 0x14008245d
mov ecx, eax
or ecx, 0x1f4234c0
lea r9d, [rcx + r8]
and ecx, r8d
add ecx, ecx
sub r9d, ecx
add r9b, 0xc0
mov byte [rsp + rax + 0x60], r9b
mov rcx, rdx
dec rax
jmp 0x140082330
lea r10, [rcx + 3]
cmp rbx, r10
jne 0x14008248e
mov r9d, eax
or r9d, 0x47dce740
lea edx, [r9 + r8]
and r9d, r8d
add r9d, r9d
sub edx, r9d
add dl, 0x40
movzx edx, dl
not rdx
add rax, rdx
jmp 0x140082330
lea r10, [rcx + 2]
cmp rbx, r10
je 0x1400824fb
mov r11d, eax
or r11d, 0xa9502d40
lea r10d, [r11 + r8]
and r11d, r8d
add r11d, r11d
sub r10d, r11d
add r10b, 0x40
lea r11, [rcx + 4]
cmp rbx, r11
je 0x140082320
jbe 0x1400824de
mov r10d, eax
or r10d, 0x80
add r10d, r8d
mov r9d, eax
and r9d, r8d
add r9d, r9d
sub r10d, r9d
add r10b, 0x80
cmp rcx, 4
ja 0x140082435
mov byte [rsp + rax + 0x60], r10b
jmp 0x140082330
lea r10, [rcx + 6]
cmp rbx, r10
jne 0x140082551
mov r9d, eax
or r9d, 0xc482e9c0
lea r10d, [r8 + r9]
and r9d, r8d
add r9d, r9d
sub r10d, r9d
add r10b, 0xc0
mov byte [rsp + rax + 0x60], r10b
movzx r9d, r10b
not rcx
add rcx, rax
sub rcx, r9
lea eax, [rcx + r8]
and r8d, ecx
add r8d, r8d
sub eax, r8d
mov byte [rsp + rcx + 0x60], al
sub rcx, rbx
inc rbx
movzx r9d, byte [rsp + rcx + 0x5e]
add rcx, 0xfffffffffffffffe
mov rax, rcx
jmp 0x140082323
lea r8, [rcx + 9]
mov rdx, rcx
cmp rbx, r8
je 0x140082323
jmp 0x140082304
lea rdi, [rsp + 0x12e94a0]
jmp 0x140082578
lea rdi, [rsp + 0x15e6760]
mov rcx, rdi
call fcn.1400c76c0
movd xmm1, dword [0x1401087f0]
xorps xmm0, xmm0
call fcn.1400a74b0
movsd xmm0, qword [0x1401090c0]
movsd qword [rsp + 0x40], xmm0
movss xmm0, dword [rsi + 4]
addss xmm0, dword [0x1401090d0]
mulss xmm0, dword [0x140107700]
call fcn.1400a75f0
cmp byte [0x140186bfe], 1
jne 0x140082696
movzx eax, byte [0x140186bf3]
movzx ecx, byte [0x140186bf5]
movzx edx, byte [0x140186bf7]
movzx r8d, byte [0x140186bf9]
movzx r9d, byte [0x140186bf6]
shl r9d, 8
or r9d, ecx
movzx ecx, byte [0x140186bf4]
shl ecx, 8
or ecx, eax
movd xmm1, ecx
pinsrw xmm1, r9d, 1
movzx eax, byte [0x140186bf8]
shl eax, 8
or eax, edx
pinsrw xmm1, eax, 2
movzx eax, byte [0x140186bfa]
shl eax, 8
or eax, r8d
pinsrw xmm1, eax, 3
psllw xmm1, 7
pand xmm1, xmmword [0x1401011b0]
xorps xmm0, xmm0
pcmpgtb xmm0, xmm1
movdqa xmm1, xmm0
pandn xmm1, xmmword [str.fyxz]
pand xmm0, xmmword [0x1401090e0]
por xmm0, xmm1
cmp byte [0x140186bfb], 0
mov ecx, reloc.WS2_32.dll_ntohs
mov eax, 0x7e
cmovne eax, ecx
cmp byte [0x140186bfc], 0
mov edx, 3
mov ecx, WSACleanup
cmovne ecx, edx
cmp byte [0x140186bfd], 0
mov r8d, 4
mov edx, WSACleanup
cmovne edx, r8d
jmp 0x1400826f8
mov byte [0x140186bf3], 1
mov byte [0x140186bf4], 1
mov byte [0x140186bf5], 1
mov byte [0x140186bf6], 1
mov byte [0x140186bf7], 1
mov byte [0x140186bf8], 1
mov byte [0x140186bf9], 1
mov byte [0x140186bfa], 1
mov byte [0x140186bfb], 1
mov byte [0x140186bfc], 1
mov byte [0x140186bfd], 1
mov byte [0x140186bfe], 1
movdqa xmm0, xmmword [0x1401090e0]
mov al, reloc.WS2_32.dll_ntohs
mov cl, 3
mov dl, 4
movq qword [rsp + 0x60], xmm0
mov byte [rsp + 0x68], al
mov byte [rsp + 0x69], cl
mov byte [rsp + 0x6a], dl
mov byte [rsp + 0x6b], reloc.WS2_32.dll_WSAStartup
pxor xmm0, xmm0
movdqu xmmword [rsp + 0x6c], xmm0
mov word [rsp + 0x7c], 0
lea rsi, [rsp + 0x60]
call fcn.140085530
mov rdi, qword [rax]
call fcn.140085540
mov rcx, qword [rax]
xor eax, eax
jmp 0x140082774
lea ecx, [rax - 0x7d8f51d7]
lea r9d, [rdx + rax]
add r9d, 0x8270ae29
and ecx, edx
add ecx, ecx
sub r9d, ecx
add r9b, 0xe1
mov byte [rsp + rax + 0x60], r9b
dec rax
mov rcx, r8
inc rax
cmp rax, 0x1e
jae 0x1400829c0
cmp rdi, rax
ja 0x1400829ae
movzx r9d, byte [rsp + rax + 0x60]
movzx edx, r9b
lea r8, [rcx + 1]
cmp rdi, r8
jae 0x1400827d0
cmp rcx, rax
ja 0x1400829b8
lea r10, [rdi + rcx]
cmp r10, rax
jbe 0x140082810
cmp rdi, r8
je 0x140082740
lea r9, [rcx + 9]
cmp rdi, r9
je 0x140082761
lea r8, [rcx + 6]
cmp rdi, r8
je 0x1400828d3
lea r8, [rcx + 8]
cmp rdi, r8
je 0x14008287e
jmp 0x140082725
je 0x1400828b2
lea r10, [rcx + 2]
cmp rdi, r10
je 0x140082847
lea r10, [rcx + 3]
cmp rdi, r10
je 0x1400828d3
lea r10, [rcx + 6]
cmp rdi, r10
je 0x140082761
lea r10, [rcx + 5]
cmp rdi, r10
jne 0x140082790
jmp 0x140082740
lea r11, [rcx + 5]
cmp rdi, r11
jbe 0x1400828c1
lea ebp, [rax - 0x2a0ccd0d]
lea ebx, [rax + rdx]
add ebx, 0xd5f332f3
and ebp, edx
add ebp, ebp
sub ebx, ebp
add bl, 0x5b
cmp rdi, r8
je 0x1400828b2
lea r9, [rcx + 2]
cmp rdi, r9
jne 0x1400828db
lea r9d, [rax - 0x23fd461b]
lea r10d, [rdx + rax]
add r10d, 0xdc02b9e5
and r9d, edx
add r9d, r9d
sub r10d, r9d
add r10b, 0xbd
mov byte [rsp + rax + 0x60], r10b
movzx r9d, r10b
not rcx
add rcx, rax
sub rcx, r9
mov rax, rcx
mov rcx, r8
lea r8d, [rax + 0x72673cd4]
lea r9d, [rax + rdx]
add r9d, 0x72673cd4
and r8d, edx
add r8d, r8d
sub r9d, r8d
add r9b, 0x34
mov byte [rsp + rax + 0x60], r9b
sub rax, rdi
inc rdi
movzx r9d, byte [rsp + rax + 0x5e]
add rax, 0xfffffffffffffffe
movzx edx, r9b
add rax, rcx
add rax, rdx
jmp 0x140082767
cmp rdi, r8
je 0x140082740
lea rbx, [rcx + 3]
cmp rdi, rbx
jne 0x14008292b
mov r8, rcx
jmp 0x140082761
cmp rdi, r11
jne 0x14008295b
lea r9d, [rax + 0x38e813c2]
lea r8d, [rax + rdx]
add r8d, 0x38e813c2
and r9d, edx
add r9d, r9d
sub r8d, r9d
add r8b, 0xb2
lea r9d, [rax - 0x50c64bf9]
lea r11d, [rax + rdx]
add r11d, 0xaf39b407
and r9d, edx
add r9d, r9d
sub r11d, r9d
add r11b, r8b
add r11b, 0xcf
mov byte [rsp + rax + 0x60], r11b
mov rdi, r10
jmp 0x14008294f
cmp rdi, r11
jne 0x140082988
lea r9d, [rax - 0x1d56a9d9]
lea r8d, [rax + rdx]
add r8d, 0xe2a95627
and r9d, edx
add r9d, r9d
sub r8d, r9d
add r8b, 0xef
movzx edx, r8b
not rdx
jmp 0x1400828b9
lea r9, [rcx + 3]
cmp rdi, r9
je 0x140082761
cmp rcx, 7
ja 0x140082740
lea r9, [rcx + 7]
cmp rdi, r9
je 0x140082740
mov byte [rsp + rax + 0x60], bl
jmp 0x140082767
lea ebp, [rax - 0x699b7d11]
lea ebx, [rax + rdx]
add ebx, 0x966482ef
and ebp, edx
add ebp, ebp
sub ebx, ebp
add bl, 0x77
cmp rdi, r8
je 0x1400828b2
jmp 0x14008283a
lea rsi, [rsp + 0x6c7be3]
jmp 0x1400829c0
lea rsi, [rsp + 0x147f8f4]
lea rdx, [rsp + 0x40]
mov rcx, rsi
call fcn.1400c82f0
test al, al
je 0x140082fa5
cmp byte [0x140186c19], 0
jne 0x140082a0d
movdqa xmm0, xmmword [str.https:__t.me_ezt]
movdqa xmmword [0x140186c00], xmm0
movabs rax, 0x746168635f6d6165
mov qword [0x140186c10], rax
mov byte [0x140186c18], 0
mov byte [0x140186c19], 1
movdqa xmm0, xmmword [0x140186c00]
paddb xmm0, xmmword [0x140109110]
pxor xmm0, xmmword [0x140109120]
movdqa xmmword [rsp + 0x60], xmm0
movq xmm0, qword [0x140186c10]
paddb xmm0, xmmword [0x140109130]
movabs rdi, 0xc9babe3bca1c0aba
pxor xmm0, xmmword [0x140109140]
movq qword [rsp + 0x70], xmm0
movzx eax, byte [0x140186c18]
add al, 0x16
xor al, 0xd2
mov byte [rsp + 0x78], al
pxor xmm0, xmm0
movdqu xmmword [rsp + 0x79], xmm0
mov word [rsp + 0x89], 0
lea rsi, [rsp + 0x60]
call fcn.140085530
mov rbx, qword [rax]
call fcn.140085540
mov rcx, qword [rax]
xor eax, eax
jmp 0x140082ac3
lea r8d, [rax + 0x5e54202e]
lea ebp, [rax + rdx]
add ebp, 0x5e54202e
and r8d, edx
add r8d, r8d
sub ebp, r8d
add bpl, 0xbe
add rdx, rax
add rdx, rcx
mov rax, rdx
inc rax
cmp rax, 0x2b
jae 0x140082f84
cmp rbx, rax
ja 0x140082f72
movzx edx, byte [rsp + rax + 0x60]
lea r8, [rcx + 1]
cmp rbx, r8
jae 0x140082b30
lea r9d, [rax + rdi]
lea ebp, [r9 + rdx]
mov r10d, edx
and r10d, r9d
add r10d, r10d
sub ebp, r10d
add bpl, 0xea
cmp rcx, rax
ja 0x140082f7c
cmp rbx, rcx
jbe 0x140082b70
cmp rbx, r8
jne 0x140082bef
lea ecx, [rax + 0x2884f6b6]
lea ebp, [rax + rdx]
add ebp, 0x2884f6b6
and ecx, edx
add ecx, ecx
sub ebp, ecx
add bpl, 6
jmp 0x140082d28
je 0x140082a90
lea r9, [rcx + 2]
cmp rbx, r9
jne 0x140082c1a
lea r8d, [rax - 0xd73ca5e]
lea ebp, [rax + rdx]
add ebp, 0xf28c35a2
and r8d, edx
add r8d, r8d
sub ebp, r8d
add bpl, 0x92
jmp 0x140082ca7
lea r9d, [rax - 0x6bb31ebe]
lea ebp, [rax + rdx]
add ebp, 0x944ce142
and r9d, edx
add r9d, r9d
sub ebp, r9d
add bpl, 0x32
lea r9, [rbx + rcx]
cmp r9, rax
jbe 0x140082bc5
lea r8, [rcx + 0x20]
cmp rbx, r8
jne 0x140082c7d
lea r8d, [rax - 0x42daf8d0]
lea ebp, [rax + rdx]
add ebp, 0xbd250730
and r8d, edx
add r8d, r8d
sub ebp, r8d
add bpl, 0xb0
jmp 0x140082c6e
lea r10, [rcx + 0x10]
cmp rbx, r10
jae 0x140082cdf
lea r10d, [rax + rdi]
lea ebp, [r10 + rdx]
mov r11d, edx
and r11d, r10d
add r11d, r11d
sub ebp, r11d
add bpl, 0xea
jmp 0x140082d06
lea r9, [rcx + 2]
cmp rbx, r9
jne 0x140082d54
lea ecx, [rax - 0x4342f3d6]
lea ebp, [rax + rdx]
add ebp, 0xbcbd0c2a
and ecx, edx
add ecx, ecx
sub ebp, ecx
add bpl, 0xda
jmp 0x140082d49
lea r9, [rcx + 3]
cmp rbx, r9
jne 0x140082d86
lea r8d, [rax + 0x436c8b72]
lea ebp, [rax + rdx]
add ebp, 0x436c8b72
and r8d, edx
add r8d, r8d
sub ebp, r8d
add bpl, 0xe2
add rbx, rcx
lea r8d, [rax - 0x1a7f99b6]
lea r9d, [rdx + rax]
add r9d, 0xe580664a
and r8d, edx
add r8d, r8d
sub r9d, r8d
add r9b, bpl
add r9b, 0xfa
mov byte [rsp + rax + 0x60], r9b
movzx edx, bpl
not rdx
add rax, rdx
jmp 0x140082ab6
lea r8, [rcx + 6]
cmp rbx, r8
jne 0x140082de0
lea r8d, [rax - 0x1a6acde8]
lea ebp, [rax + rdx]
add ebp, 0xe5953218
and r8d, edx
add r8d, r8d
sub ebp, r8d
add bpl, 0x58
lea r8d, [rax + 0x43d48678]
lea r9d, [rax + rdx]
add r9d, 0x43d48678
and r8d, edx
add r8d, r8d
sub r9d, r8d
add r9b, 0xb8
mov byte [rsp + rax + 0x60], r9b
sub rax, rbx
inc rbx
movzx edx, byte [rsp + rax + 0x5e]
add rax, 0xfffffffffffffffe
jmp 0x140082aad
cmp rbx, r8
jne 0x140082d06
lea r8d, [rax + 0x2899c284]
lea ebp, [rax + rdx]
add ebp, 0x2899c284
and r8d, edx
add r8d, r8d
sub ebp, r8d
add bpl, 0x64
jmp 0x140082aad
cmp rbx, r8
jne 0x140082dae
lea ecx, [rax - 0x43195c3a]
lea ebp, [rax + rdx]
add ebp, 0xbce6a3c6
and ecx, edx
add ecx, ecx
sub ebp, ecx
add bpl, 0x96
lea ecx, [rax + 0x514850d6]
lea r9d, [rdx + rax]
add r9d, 0x514850d6
and ecx, edx
add ecx, ecx
sub r9d, ecx
add r9b, 0x26
mov byte [rsp + rax + 0x60], r9b
dec rax
mov rcx, r8
jmp 0x140082ab6
lea r9, [rcx + 3]
cmp rbx, r9
jne 0x140082e0f
lea r8d, [rax + 0x50f5219e]
lea ebp, [rax + rdx]
add ebp, 0x50f5219e
and r8d, edx
add r8d, r8d
sub ebp, r8d
add bpl, 0xae
dec rax
jmp 0x140082ab6
lea r9, [rcx + 7]
cmp rbx, r9
jne 0x140082af2
lea ecx, [rax + 0x6bdcb65a]
lea ebp, [rax + rdx]
add ebp, 0x6bdcb65a
and ecx, edx
add ecx, ecx
sub ebp, ecx
add bpl, 0x8a
jmp 0x140082d49
lea r10, [rcx + 3]
cmp rbx, r10
jne 0x140082e3e
lea r8d, [rax - 0x1aa93152]
lea ebp, [rax + rdx]
add ebp, 0xe556ceae
and r8d, edx
add r8d, r8d
sub ebp, r8d
add bpl, 0x3e
dec rax
jmp 0x140082ab6
lea r8, [rcx + 9]
cmp rbx, r8
jne 0x140082f52
lea r8d, [rax + 0x79cd478c]
lea ebp, [rax + rdx]
add ebp, 0x79cd478c
and r8d, edx
add r8d, r8d
sub ebp, r8d
add bpl, 0x2c
jmp 0x140082aad
lea r9, [rcx + 5]
cmp rbx, r9
jne 0x140082b8d
lea r8d, [rax + 0xd9d61fa]
lea ebp, [rax + rdx]
add ebp, 0xd9d61fa
and r8d, edx
add r8d, r8d
sub ebp, r8d
add bpl, 0x2a
jmp 0x140082c6e
lea r10, [rcx + 5]
cmp rbx, r10
jne 0x140082e69
lea r8d, [rax - 0x5e00f0f6]
lea ebp, [rax + rdx]
add ebp, 0xa1ff0f0a
and r8d, edx
add r8d, r8d
sub ebp, r8d
add bpl, 0xba
jmp 0x140082c6e
lea r10, [rcx + 7]
cmp rbx, r10
jne 0x140082ec8
lea r9d, [rax + 0x3637247e]
lea ebp, [rax + rdx]
add ebp, 0x3637247e
and r9d, edx
add r9d, r9d
sub ebp, r9d
add bpl, 0x8e
lea r9d, [rax + 0x79b87bbe]
lea r10d, [rax + rdx]
add r10d, 0x79b87bbe
and r9d, edx
add r9d, r9d
sub r10d, r9d
add r10b, 0xce
mov byte [rsp + rax + 0x60], r10b
movzx r9d, r10b
not rcx
add rax, rcx
sub rax, r9
mov rcx, r8
jmp 0x140082ca7
lea r10, [rcx + 2]
cmp rbx, r10
jne 0x140082ef3
lea r8d, [rax + 0x5ea74f66]
lea ebp, [rax + rdx]
add ebp, 0x5ea74f66
and r8d, edx
add r8d, r8d
sub ebp, r8d
add bpl, 0x36
jmp 0x140082aad
cmp rbx, 2
ja 0x140082f09
cmp rcx, 3
ja 0x140082f31
mov byte [rsp + rax + 0x60], bpl
jmp 0x140082ab6
lea r8d, [rax + 0x1b645b90]
lea ebp, [rax + rdx]
add ebp, 0x1b645b90
and r8d, edx
add r8d, r8d
sub ebp, r8d
add bpl, dl
add bpl, 0x10
mov rbx, r9
jmp 0x140082c47
lea ecx, [rax - 0x78d3b9e4]
lea ebp, [rax + rdx]
add ebp, 0x872c461c
and ecx, edx
add ecx, ecx
sub ebp, ecx
add bpl, bpl
add bpl, 0x78
jmp 0x140082d28
mov ecx, eax
add ecx, 0x6c597d2e
lea ebp, [rax + rdx]
add ebp, 0x6c597d2e
and ecx, edx
add ecx, ecx
sub ebp, ecx
add bpl, 0xbe
jmp 0x140082a7b
lea rsi, [rsp + 0xf34012]
jmp 0x140082f84
lea rsi, [rsp + 0x1573558]
mov dword [rsp + 0x28], 5
mov qword [rsp + 0x20], 0
xor ecx, ecx
xor edx, edx
mov r8, rsi
xor r9d, r9d
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
mov rcx, qword [rsp + 0x98]
xor rcx, rsp
call fcn.1400f0d70
movaps xmm6, xmmword [rsp + 0xa0]
movaps xmm7, xmmword [rsp + 0xb0]
movaps xmm8, xmmword [rsp + 0xc0]
add rsp, 0xd8
pop rbx
pop rbp
pop rdi
pop rsi
ret