Function at 0x140006680
Capabilities:
Get hostname
Get session user name
Terminate process

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x178
lea rbp, [rsp + 0x80]
movaps xmmword [rbp + 0xe0], xmm6
mov qword [rbp + 0xd8], 0xfffffffffffffffe
mov qword [rbp - 0x20], 0
movaps xmm6, xmmword [0x140020290]
movups xmmword [rbp - 0x10], xmm6
mov byte [rbp - 0x20], 0
mov dword [rbp + 0x28], 0x7fff
lea rdi, [rbp - 0x20]
mov qword [rbp + 0x60], rdi
mov rax, qword [rbp + 0x60]
mov qword [rbp + 0x30], rax
mov eax, 0x9af5bc7d
cmp eax, 0xf405f3d7
je 0x1400066f9
cmp eax, 0x9af5bc7d
jne 0x1400066e0
mov eax, 0xf405f3d7
mov rcx, qword [rbp + 0x30]
jmp 0x1400066e0
lea rdx, [rbp + 0x28]
call qword [sym.imp.ADVAPI32.dll_GetUserNameA]
mov dword [rbp + 0x2c], 0x10
mov qword [rbp - 0x60], 0
movups xmmword [rbp - 0x50], xmm6
mov byte [rbp - 0x60], 0
lea rsi, [rbp - 0x60]
mov qword [rbp + 0x60], rsi
mov rax, qword [rbp + 0x60]
mov qword [rbp + 0x30], rax
mov eax, 0x9af5bc7d
nop
cmp eax, 0xf405f3d7
je 0x140006749
cmp eax, 0x9af5bc7d
jne 0x140006730
mov eax, 0xf405f3d7
mov rcx, qword [rbp + 0x30]
jmp 0x140006730
lea rdx, [rbp + 0x2c]
call qword [sym.imp.KERNEL32.dll_GetComputerNameA]
mov qword [rbp], 0
xorps xmm0, xmm0
movups xmmword [rbp + 0x10], xmm0
mov rax, qword [rbp - 0x50]
mov rcx, qword [rbp - 0x48]
mov qword [rbp + 0x90], rax
mov qword [rbp + 0x60], rsi
mov rax, qword [rbp + 0x60]
mov qword [rbp + 0x30], rax
cmp rcx, 0xf
mov ecx, 0x94f08a88
mov eax, 0xf405f3d7
cmova eax, ecx
mov edx, 0x9af5bc7d
jmp 0x1400067b0
mov rcx, qword [rbp + 0x60]
mov rcx, qword [rcx]
mov edx, 0xf405f3d7
nop word cs:[rax + rax]
nop dword [rax + rax]
cmp edx, 0x94f08a88
je 0x140006795
cmp edx, 0xf405f3d7
je 0x1400067d0
cmp edx, 0x9af5bc7d
jne 0x1400067b0
mov rcx, qword [rbp + 0x30]
mov edx, eax
jmp 0x1400067b0
mov qword [rbp + 0x60], rcx
mov rax, rbp
mov qword [rbp + 0x30], rax
mov rax, qword [rbp + 0x90]
cmp rax, 0x10
setb byte [rbp + 0xb0]
mov al, byte [rbp + 0xb0]
mov eax, 0x64819b69
movabs r11, 0x8be1724f7daf94e7
movabs rsi, 0x741e8db082506b18
movabs r9, 0x2083002000308
movabs r10, 0x122001d008006
movabs r8, 0x1104418280a618a1
movabs r14, 0x8222183502080348
mov edx, 0xdf1c0a4f
nop dword [rax]
cmp eax, 0x5a766cb5
jg 0x140006890
cmp eax, 0x9fe07a45
je 0x1400068c0
cmp eax, 0xdf1c0a4f
jne 0x140006840
mov rax, qword [rbp + 0x30]
mov rcx, qword [rbp + 0x60]
movups xmm0, xmmword [rcx]
movups xmmword [rax], xmm0
mov rax, qword [rbp + 0x30]
mov rcx, qword [rbp + 0x90]
mov qword [rax + 0x10], rcx
mov rax, qword [rbp + 0x30]
mov qword [rax + 0x18], 0xf
mov eax, 0x5a766cb6
jmp 0x140006840
cmp eax, 0x5a766cb6
je 0x140006a55
cmp eax, 0x64819b69
jne 0x140006840
cmp byte [rbp + 0xb0], 0
mov eax, 0x9fe07a45
cmovne eax, edx
jmp 0x140006840
mov rcx, qword [rbp + 0x90]
mov rdx, rcx
not rdx
mov rdi, rdx
and rdi, 0xfffffffffffffff0
mov eax, ecx
and eax, 0xf
or rax, rdi
mov rdi, rax
xor rdi, rdx
and rdi, rax
mov rbx, rdx
and rbx, r11
mov rax, rcx
and rax, rsi
or rax, rbx
mov rbx, rax
mov r12, r9
xor rbx, r9
mov r15, r14
and rbx, r14
mov r14, r10
xor rax, r10
mov r13, r8
or rax, r8
movabs rsi, 0x311d63829df6f8b7
and rax, rsi
or rax, rbx
movabs rbx, 0x201922001d50e016
or rdx, rbx
and rdx, rsi
movabs rbx, 0x4cc0844860010400
and rcx, rbx
or rcx, rdx
xor rcx, rax
mov rax, rcx
not rax
movabs rdx, 0xb68169ef66308834
and rax, rdx
movabs rdx, 0x497e961099cf77cb
and rcx, rdx
or rcx, rax
mov rax, rcx
movabs rdx, 0x14ba53da79686b65
xor rax, rdx
movabs rdx, 0xeb45ac258697949a
xor rcx, rdx
mov rdx, rdi
xor rdx, rcx
and rdx, rdi
and rcx, rdi
not rdi
and rdi, rax
or rcx, rdi
mov rdi, rdx
not rdi
mov rax, rdi
movabs rbx, 0xb03b2a5ddd654e1e
and rax, rbx
movabs rsi, 0x4fc4d5a2229ab1e1
and rdx, rsi
or rdx, rax
mov rax, rcx
not rax
or rdi, rax
and rax, rbx
and rcx, rsi
or rcx, rax
xor rcx, rdx
not rdi
or rdi, rcx
movabs rax, 0x7fffffffffffffff
cmp rdi, rax
cmovae rdi, rax
lea rcx, [rdi + 1]
call fcn.140008d90
mov rcx, qword [rbp + 0x30]
mov qword [rcx], rax
mov r8, qword [rbp + 0x90]
add r8, 1
mov rdx, qword [rbp + 0x60]
mov rcx, rax
call fcn.140012aa0
mov rax, qword [rbp + 0x30]
mov rcx, qword [rbp + 0x90]
mov qword [rax + 0x10], rcx
mov rax, qword [rbp + 0x30]
mov qword [rax + 0x18], rdi
mov eax, 0x5a766cb6
lea rdi, [rbp - 0x20]
movabs r11, 0x8be1724f7daf94e7
movabs rsi, 0x741e8db082506b18
mov r9, r12
mov r10, r14
mov r8, r13
mov r14, r15
jmp 0x140006834
mov qword [rbp - 0x40], 0
xorps xmm0, xmm0
movups xmmword [rbp - 0x30], xmm0
mov rax, qword [rbp - 0x10]
mov rcx, qword [rbp - 8]
mov qword [rbp + 0x90], rax
mov qword [rbp + 0x60], rdi
mov rax, qword [rbp + 0x60]
mov qword [rbp + 0x30], rax
cmp rcx, 0xf
mov ecx, 0x94f08a88
mov eax, 0xf405f3d7
cmova eax, ecx
mov edx, 0x9af5bc7d
jmp 0x140006ab0
mov rcx, qword [rbp + 0x60]
mov rcx, qword [rcx]
mov edx, 0xf405f3d7
nop word cs:[rax + rax]
nop dword [rax]
cmp edx, 0x94f08a88
je 0x140006a97
cmp edx, 0xf405f3d7
je 0x140006ad0
cmp edx, 0x9af5bc7d
jne 0x140006ab0
mov rcx, qword [rbp + 0x30]
mov edx, eax
jmp 0x140006ab0
mov qword [rbp + 0x60], rcx
lea r12, [rbp - 0x40]
mov qword [rbp + 0x30], r12
mov rax, qword [rbp + 0x90]
cmp rax, 0x10
setb byte [rbp + 0xb0]
mov al, byte [rbp + 0xb0]
mov eax, 0x64819b69
movabs rbx, 0x768b281aabd80502
movabs rsi, 0x8974d7e55427fafd
movabs r10, 0xecc736c4e236d36e
movabs r11, 0x1338c93b1dc92c91
mov edx, 0xdf1c0a4f
nop word cs:[rax + rax]
cmp eax, 0x5a766cb5
jg 0x140006b80
cmp eax, 0x9fe07a45
je 0x140006bb0
cmp eax, 0xdf1c0a4f
jne 0x140006b30
mov rax, qword [rbp + 0x30]
mov rcx, qword [rbp + 0x60]
movups xmm0, xmmword [rcx]
movups xmmword [rax], xmm0
mov rax, qword [rbp + 0x30]
mov rcx, qword [rbp + 0x90]
mov qword [rax + 0x10], rcx
mov rax, qword [rbp + 0x30]
mov qword [rax + 0x18], 0xf
mov eax, 0x5a766cb6
jmp 0x140006b30
cmp eax, 0x5a766cb6
je 0x140006f95
cmp eax, 0x64819b69
jne 0x140006b30
cmp byte [rbp + 0xb0], 0
mov eax, 0x9fe07a45
cmovne eax, edx
jmp 0x140006b30
mov rdi, qword [rbp + 0x90]
mov rcx, rdi
not rcx
mov rdx, rdi
and rdx, rbx
mov r9, rcx
and r9, rsi
or r9, rdx
mov r8, r9
xor r8, rbx
mov r14, rsi
xor r9, rsi
mov rdx, r9
mov r13, r10
and rdx, r10
mov rsi, r8
and rsi, r11
or rsi, rdx
mov rbx, rsi
mov r15, r11
xor rbx, r11
movabs rax, 0x445304080340202
xor rsi, rax
movabs rax, 0x1565f060803d2203
and rsi, rax
mov rdx, rbx
movabs rax, 0xea9a0f9f7fc2ddfc
and rdx, rax
or rdx, rsi
movabs rax, 0xe9f8829254a16500
xor rdx, rax
movabs r11, 0xfc9d72f2d49c4703
and rbx, r11
or rbx, rdx
mov rdx, rbx
not rdx
movabs r10, 0x7d86be53091c6b92
and rdx, r10
movabs rax, 0x827941acf6e3946d
and rbx, rax
or rbx, rdx
mov rsi, rbx
xor rsi, rax
mov rdx, rcx
movabs rax, 0x3628d0d2b63b8fc
and rdx, rax
and rdi, r11
or rdi, rdx
xor rcx, rdi
and rcx, rdi
mov r11, rbx
xor r11, r10
mov rdx, rcx
not rdx
movabs rax, 0x9d67010b41bacda4
xor rbx, rax
mov rax, rbx
and rax, r11
and rbx, rsi
xor rbx, rax
mov rax, rcx
movabs rsi, 0x80410a5848a4a010
or rax, rsi
movabs r10, 0x99430a7e6fa4e151
and rax, r10
mov rsi, rdx
movabs rdi, 0x61c408190591888
and rsi, rdi
or rsi, rax
mov rax, rdx
movabs rdi, 0x1902002627004141
or rax, rdi
and rax, r10
movabs rdi, 0x60a0b50000020626
and rcx, rdi
or rcx, rax
xor rcx, rsi
mov rax, rbx
not rax
and rax, rcx
not rcx
and rcx, rbx
or rcx, rax
mov rax, r11
and rax, rdx
xor rdx, r11
or rdx, rax
mov rax, rdx
not rax
movabs rbx, 0x2d24584521f455d3
and rax, rbx
movabs rbx, 0xd2dba7bade0baa2c
and rdx, rbx
or rdx, rax
xor rdx, rbx
mov rax, rcx
and rax, rdx
xor rdx, rcx
or rdx, rax
mov rax, rdx
mov rsi, rdx
movabs rcx, 0x3628d0d2b63b8f3
xor rsi, rcx
and rsi, rdx
not rdx
movabs rcx, 0x120880c01632012
and rdx, rcx
movabs rcx, 0x24205012a0098e1
and rax, rcx
or rax, rdx
xor rax, rcx
mov rcx, rax
and rcx, rsi
xor rsi, rax
or rsi, rcx
mov rdx, r9
or rdx, 0xf
and r9, 0xfffffffffffffff0
mov eax, r8d
and eax, 0xf
or rax, r9
mov rcx, rdx
movabs rbx, 0xa630f1ae3db8f567
and rcx, rbx
movabs rdi, 0x59cf0e51c2470a90
and r8, rdi
or r8, rcx
mov rcx, rax
not rcx
or rdx, rcx
and rcx, rbx
movabs rbx, 0x59cf0e51c2470a98
and rax, rbx
or rax, rcx
xor rax, r8
not rdx
or rdx, rax
mov rax, rdx
not rax
mov rcx, rax
movabs rbx, 0xdd7c9f3919c7c97a
and rcx, rbx
mov rbx, rdx
movabs rdi, 0x228360c6e6383685
and rbx, rdi
or rbx, rcx
mov rcx, rbx
movabs rdi, 0x820082c0080204
xor rcx, rdi
movabs rdi, 0x8e059ad04ac254
and rcx, rdi
movabs rdi, 0x1900800101840920
xor rbx, rdi
movabs rdi, 0x641122000030308a
or rbx, rdi
movabs rdi, 0x7f11a20103b43dab
and rbx, rdi
or rbx, rcx
movabs rcx, 0x1b00800103840d21
or rax, rcx
and rax, rdi
movabs rcx, 0x806058642c010000
and rdx, rcx
or rdx, rax
xor rdx, rbx
mov rax, rdx
not rax
movabs rcx, 0xe4717a642c31308a
and rax, rcx
movabs rcx, 0x1b8e859bd3cecf75
and rdx, rcx
or rdx, rax
mov rax, rdx
not rax
mov rcx, rax
movabs rbx, 0x557c4c7d4690768e
and rcx, rbx
movabs rbx, 0xaa83b382b96f8971
and rdx, rbx
or rdx, rcx
xor rdx, rbx
or rdx, rax
mov rax, rdx
not rax
mov rcx, rsi
xor rcx, rdx
and rcx, rsi
and rdx, rsi
not rsi
and rsi, rax
or rdx, rsi
mov rsi, rcx
not rsi
mov rax, rsi
movabs rbx, 0x8be540843cea57b7
and rax, rbx
movabs rdi, 0x741abf7bc315a848
and rcx, rdi
or rcx, rax
mov rax, rdx
not rax
or rsi, rax
and rax, rbx
and rdx, rdi
or rdx, rax
xor rdx, rcx
not rsi
or rsi, rdx
movabs rax, 0x7fffffffffffffff
cmp rsi, rax
cmovae rsi, rax
lea rcx, [rsi + 1]
call fcn.140008d90
mov rcx, qword [rbp + 0x30]
mov qword [rcx], rax
mov r8, qword [rbp + 0x90]
add r8, 1
mov rdx, qword [rbp + 0x60]
mov rcx, rax
call fcn.140012aa0
mov rax, qword [rbp + 0x30]
mov rcx, qword [rbp + 0x90]
mov qword [rax + 0x10], rcx
mov rax, qword [rbp + 0x30]
mov qword [rax + 0x18], rsi
mov eax, 0x5a766cb6
movabs rbx, 0x768b281aabd80502
mov rsi, r14
mov r10, r13
mov r11, r15
jmp 0x140006b21
mov qword [rbp + 0x30], 0
xorps xmm0, xmm0
movups xmmword [rbp + 0x40], xmm0
mov rax, qword [rbp - 0x30]
mov rcx, qword [rbp - 0x28]
mov qword [rbp + 0xb0], rax
mov qword [rbp + 0x90], r12
mov rax, qword [rbp + 0x90]
mov qword [rbp + 0x60], rax
cmp rcx, 0xf
mov ecx, 0x94f08a88
mov eax, 0xf405f3d7
cmova eax, ecx
mov edx, 0x9af5bc7d
jmp 0x140006ff0
mov rcx, qword [rbp + 0x90]
mov rcx, qword [rcx]
mov edx, 0xf405f3d7
nop dword [rax]
cmp edx, 0x94f08a88
je 0x140006fdd
cmp edx, 0xf405f3d7
je 0x140007010
cmp edx, 0x9af5bc7d
jne 0x140006ff0
mov rcx, qword [rbp + 0x60]
mov edx, eax
jmp 0x140006ff0
mov qword [rbp + 0x90], rcx
lea rax, [rbp + 0x30]
mov qword [rbp + 0x60], rax
mov rax, qword [rbp + 0xb0]
cmp rax, 0x10
setb byte [rbp + 0xd0]
mov al, byte [rbp + 0xd0]
mov eax, 0x64819b69
movabs rdx, 0x153da2d473a582e
movabs r10, 0xfeac25d2b8c5a7d1
movabs rdi, 0x5d0159f39e38cee8
movabs r11, 0x5bc3b2ac55bec1f6
movabs rbx, 0xa43c4d53aa413e09
movabs r15, 0x79131728cbc5730
mov esi, 0xdf1c0a4f
nop dword [rax]
cmp eax, 0x5a766cb5
jg 0x1400070d0
cmp eax, 0x9fe07a45
je 0x140007100
cmp eax, 0xdf1c0a4f
jne 0x140007080
mov rax, qword [rbp + 0x60]
mov rcx, qword [rbp + 0x90]
movups xmm0, xmmword [rcx]
movups xmmword [rax], xmm0
mov rax, qword [rbp + 0x60]
mov rcx, qword [rbp + 0xb0]
mov qword [rax + 0x10], rcx
mov rax, qword [rbp + 0x60]
mov qword [rax + 0x18], 0xf
mov eax, 0x5a766cb6
jmp 0x140007080
cmp eax, 0x5a766cb6
je 0x1400074eb
cmp eax, 0x64819b69
jne 0x140007080
cmp byte [rbp + 0xd0], 0
mov eax, 0x9fe07a45
cmovne eax, esi
jmp 0x140007080
mov r9, qword [rbp + 0xb0]
mov r14, r9
not r14
mov rcx, r9
and rcx, rdx
mov r8, r14
and r8, r10
or r8, rcx
xor r8, rdi
or r8, r9
mov rdx, r8
not rdx
mov rcx, r14
and rcx, r11
mov rdi, r9
and rdi, rbx
or rdi, rcx
mov r13, r15
xor rdi, r15
mov rbx, rdi
xor rbx, r14
and rbx, rdi
mov rsi, rbx
not rsi
mov r11, rsi
movabs r10, 0xef76d021c21c796a
and r11, r10
mov rdi, rbx
movabs rcx, 0x10892fde3de38695
and rdi, rcx
or rdi, r11
mov r12, rdi
xor r12, rcx
mov rcx, r8
movabs rax, 0x63266dccb5601f3f
xor rcx, rax
mov r11, rcx
and r11, r8
and rcx, rdx
xor rcx, r11
xor rdi, r10
mov r11, rdi
movabs rax, 0x6026050010001b00
or r11, rax
movabs r15, 0xe0a70520520d9bc0
and r11, r15
mov r10, r12
movabs rax, 0x1c58921308926000
and r10, rax
or r10, r11
movabs rax, 0x80810020420d80c0
or rsi, rax
and rsi, r15
movabs rax, 0x30068cca560043f
and rbx, rax
or rbx, rsi
xor rbx, r10
mov rsi, rcx
not rsi
movabs r10, 0x16851be261c94a78
and rsi, r10
movabs rax, 0xe97ae41d9e36b587
and rcx, rax
or rcx, rsi
mov rsi, rbx
not rsi
and rsi, r10
and rbx, rax
or rbx, rsi
xor rbx, rcx
mov rcx, rdx
movabs rax, 0x5ba879df51cbf9fe
and rcx, rax
movabs rsi, 0xa4578620ae340601
and r8, rsi
or r8, rcx
or rdx, rdi
and rdi, rax
and r12, rsi
or r12, rdi
xor r12, r8
not rdx
or rdx, r12
mov rax, rdx
not rax
movabs rcx, 0x8c545a5db2a5b95e
and rax, rcx
movabs rcx, 0x73aba5a24d5a46a1
and rdx, rcx
or rdx, rax
xor rdx, rcx
mov rax, rbx
and rax, rdx
xor rdx, rbx
or rdx, rax
mov rax, rdx
mov rdi, rdx
movabs rcx, 0x665774365a2a8108
xor rdi, rcx
and rdi, rdx
not rdx
movabs rcx, 0x2001043412028000
and rdx, rcx
movabs rcx, 0x4656700248280108
and rax, rcx
or rax, rdx
xor rax, rcx
mov rcx, rax
and rcx, rdi
xor rdi, rax
or rdi, rcx
mov rax, rdi
not rax
movabs rcx, 0x63ea4276034942bb
and rax, rcx
movabs rcx, 0x9c15bd89fcb6bd44
and rdi, rcx
or rdi, rax
mov rax, r9
movabs rcx, 0x3a1d5fc4a7e87808
and rax, rcx
movabs rcx, 0xd821cb0b4ef82a6b
xor r9, rcx
and r9, r14
movabs rcx, 0xc5e2a03b581787f7
and r14, rcx
or r14, rax
mov rax, r14
xor rax, rcx
mov rcx, rax
movabs rdx, 0x27de34f4b107d594
and rcx, rdx
mov rdx, rcx
and rdx, r9
xor r9, rcx
or r9, rdx
mov rcx, r9
not rcx
movabs rdx, 0xb02baf7d8ac205d3
and rcx, rdx
movabs rdx, 0x4fd45082753dfa2c
and r9, rdx
or r9, rcx
movabs rcx, 0x680a6476c43a2fb7
xor r9, rcx
and eax, 0xf
movabs rcx, 0xc5e2a03b581787f8
xor r14, rcx
or r14, rax
mov rax, r14
not rax
movabs rcx, 0xf822cb98a0bbd66
and rax, rcx
movabs rcx, 0xf07dd34675f44299
and r14, rcx
or r14, rax
xor r14, rcx
mov rax, r9
and rax, r14
xor r14, r9
or r14, rax
mov rax, r14
not rax
mov rcx, rax
and rcx, r14
movabs rbx, 0x6e752d068811c562
and r14, rbx
movabs rsi, 0x918ad2f977ee3a9d
and rax, rsi
or rax, r14
mov rdx, rcx
not rdx
and rdx, rbx
and rcx, rsi
or rcx, rdx
xor rcx, rax
mov rsi, rcx
not rsi
mov rax, rsi
movabs rbx, 0x4dc3ce6372619645
and rax, rbx
movabs rdx, 0xb23c319c8d9e69ba
and rcx, rdx
or rcx, rax
mov rax, rdi
movabs rdx, 0x59efb59e8061557a
xor rax, rdx
xor rcx, rbx
xor rsi, rcx
and rsi, rcx
movabs rcx, 0xa6104a617f9eaa85
xor rdi, rcx
and rdi, rsi
not rsi
mov rcx, rax
xor rcx, rsi
and rcx, rax
and rsi, rax
or rsi, rdi
mov rax, rcx
and rax, rsi
xor rsi, rcx
or rsi, rax
movabs rax, 0x7fffffffffffffff
cmp rsi, rax
cmovae rsi, rax
lea rcx, [rsi + 1]
call fcn.140008d90
mov rcx, qword [rbp + 0x60]
mov qword [rcx], rax
mov r8, qword [rbp + 0xb0]
add r8, 1
mov rdx, qword [rbp + 0x90]
mov rcx, rax
call fcn.140012aa0
mov rax, qword [rbp + 0x60]
mov rcx, qword [rbp + 0xb0]
mov qword [rax + 0x10], rcx
mov rax, qword [rbp + 0x60]
mov qword [rax + 0x18], rsi
mov eax, 0x5a766cb6
movabs rdx, 0x153da2d473a582e
movabs r10, 0xfeac25d2b8c5a7d1
movabs rdi, 0x5d0159f39e38cee8
movabs r11, 0x5bc3b2ac55bec1f6
movabs rbx, 0xa43c4d53aa413e09
mov r15, r13
jmp 0x140007078
lea rax, [rbp + 0x30]
mov qword [rbp + 0x90], rax
mov rax, qword [rbp + 0x90]
mov qword [rbp + 0x60], rax
cmp qword [rbp + 0x48], 0xf
mov eax, 0x38e0b270
mov esi, 0x3e2a7afd
cmova esi, eax
mov ecx, 0xda1353c0
nop dword [rax + rax]
cmp ecx, 0x3e2a7afd
je 0x140007551
cmp ecx, 0x38e0b270
je 0x140007540
cmp ecx, 0xda1353c0
jne 0x140007520
mov rdi, qword [rbp + 0x60]
mov ecx, esi
jmp 0x140007520
mov rax, qword [rbp + 0x90]
mov rdi, qword [rax]
mov ecx, 0x3e2a7afd
jmp 0x140007520
lea rax, [rbp + 0x30]
mov qword [rbp + 0x90], rax
mov rax, qword [rbp + 0x90]
mov qword [rbp + 0x60], rax
mov ecx, 0xda1353c0
nop dword [rax]
cmp ecx, 0x3e2a7afd
je 0x1400075a1
cmp ecx, 0x38e0b270
je 0x140007590
cmp ecx, 0xda1353c0
jne 0x140007570
mov rdx, qword [rbp + 0x60]
mov ecx, esi
jmp 0x140007570
mov rax, qword [rbp + 0x90]
mov rdx, qword [rax]
mov ecx, 0x3e2a7afd
jmp 0x140007570
mov rbx, qword [rbp + 0x40]
lea rax, [rbp + 0x30]
mov qword [rbp + 0x90], rax
mov rax, qword [rbp + 0x90]
mov qword [rbp + 0x60], rax
mov eax, 0xda1353c0
cmp eax, 0x3e2a7afd
je 0x1400075ee
cmp eax, 0x38e0b270
je 0x1400075dd
cmp eax, 0xda1353c0
jne 0x1400075c0
mov rcx, qword [rbp + 0x60]
mov eax, esi
jmp 0x1400075c0
mov rax, qword [rbp + 0x90]
mov rcx, qword [rax]
mov eax, 0x3e2a7afd
jmp 0x1400075c0
add rdx, rbx
lea rax, [rbp + 0xc8]
mov qword [rbp + 0xd0], rax
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0xc8], rcx
lea rax, [rbp + 0x88]
mov qword [rbp + 0xb0], rax
mov rax, qword [rbp + 0xb0]
mov qword [rbp + 0x88], rdx
lea rax, [rbp + 0x58]
mov qword [rbp + 0x90], rax
mov rax, qword [rbp + 0x90]
mov esi, 0x83930abc
mov qword [rbp + 0x58], rdi
mov edx, 0xbe7e599d
mov rax, qword [rbp + 0x88]
cmp edx, 0x83930abc
je 0x1400076aa
cmp edx, 0x3901a3ec
je 0x140007680
cmp edx, 0xbe7e599d
jne 0x140007650
mov qword [rbp + 0x60], rcx
mov rdx, qword [rbp + 0x60]
cmp rdx, rax
mov edx, 0x3901a3ec
cmove edx, esi
jmp 0x140007650
mov rax, qword [rbp + 0x60]
movsx ecx, byte [rax]
call fcn.140014d90
mov byte [rdi], al
mov rcx, qword [rbp + 0xc8]
add rcx, 1
mov qword [rbp + 0xc8], rcx
mov rdi, qword [rbp + 0x58]
add rdi, 1
jmp 0x140007640
mov rax, qword [rbp + 0x90]
mov rax, qword [rbp + 0xb0]
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x60], 0
xorps xmm0, xmm0
movups xmmword [rbp + 0x70], xmm0
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0xd0], rax
mov rax, rbp
mov qword [rbp + 0xb0], rax
mov rax, qword [rbp + 0xb0]
mov qword [rbp + 0x90], rax
cmp qword [rbp + 0x18], 0xf
mov ecx, 0x94f08a88
mov eax, 0xf405f3d7
cmova eax, ecx
mov edx, 0x9af5bc7d
jmp 0x140007720
mov rcx, qword [rbp + 0xb0]
mov rcx, qword [rcx]
mov edx, 0xf405f3d7
nop dword [rax]
cmp edx, 0x94f08a88
je 0x14000770a
cmp edx, 0xf405f3d7
je 0x140007743
cmp edx, 0x9af5bc7d
jne 0x140007720
mov rcx, qword [rbp + 0x90]
mov edx, eax
jmp 0x140007720
mov qword [rbp + 0xb0], rcx
lea r12, [rbp + 0x60]
mov qword [rbp + 0x90], r12
mov rax, qword [rbp + 0xd0]
cmp rax, 0x10
setb byte [rbp + 0xc8]
mov al, byte [rbp + 0xc8]
mov eax, 0x64819b69
movabs r10, 0x4097788f6a0df764
movabs rbx, 0xbf68877095f2089b
movabs r8, 0x11380068057344
movabs r9, 0x12593d2068977bde
movabs rsi, 0xeda6c2df97688421
movabs r11, 0xeda6c2df9768842e
mov edx, 0xdf1c0a4f
nop word cs:[rax + rax]
nop dword [rax]
cmp eax, 0x5a766cb5
jg 0x140007820
cmp eax, 0x9fe07a45
je 0x140007850
cmp eax, 0xdf1c0a4f
jne 0x1400077c0
mov rax, qword [rbp + 0x90]
mov rcx, qword [rbp + 0xb0]
movups xmm0, xmmword [rcx]
movups xmmword [rax], xmm0
mov rax, qword [rbp + 0x90]
mov rcx, qword [rbp + 0xd0]
mov qword [rax + 0x10], rcx
mov rax, qword [rbp + 0x90]
mov qword [rax + 0x18], 0xf
mov eax, 0x5a766cb6
jmp 0x1400077c0
cmp eax, 0x5a766cb6
je 0x140007977
cmp eax, 0x64819b69
jne 0x1400077c0
cmp byte [rbp + 0xc8], 0
mov eax, 0x9fe07a45
cmovne eax, edx
jmp 0x1400077c0
mov rdx, qword [rbp + 0xd0]
mov rdi, rdx
not rdi
mov rcx, rdi
and rcx, r10
mov rax, rdx
and rax, rbx
or rax, rcx
mov rcx, rax
xor rcx, rbx
mov r12, r8
xor rax, r8
mov r14, r9
and rax, r9
mov rbx, rcx
mov r13, rsi
and rbx, rsi
or rbx, rax
mov r15, r11
xor rbx, r11
and rcx, 0xfffffffffffffff0
or rcx, rbx
mov rax, rcx
not rax
movabs rbx, 0x582f9e52088b5fcc
and rax, rbx
movabs rsi, 0xa7d061adf774a033
and rcx, rsi
or rcx, rax
mov rax, rcx
xor rax, rsi
xor rcx, rbx
and edi, 0xf
and rdx, 0xfffffffffffffff0
or rdx, rdi
mov rdi, rdx
not rdi
and rdx, rcx
or rcx, rdi
and rdi, rax
not rcx
or rdi, rdx
mov rax, rcx
and rax, rdi
xor rdi, rcx
or rdi, rax
movabs rax, 0x7fffffffffffffff
cmp rdi, rax
cmovae rdi, rax
lea rcx, [rdi + 1]
call fcn.140008d90
mov rcx, qword [rbp + 0x90]
mov qword [rcx], rax
mov r8, qword [rbp + 0xd0]
add r8, 1
mov rdx, qword [rbp + 0xb0]
mov rcx, rax
call fcn.140012aa0
mov rax, qword [rbp + 0x90]
mov rcx, qword [rbp + 0xd0]
mov qword [rax + 0x10], rcx
mov rax, qword [rbp + 0x90]
mov qword [rax + 0x18], rdi
mov eax, 0x5a766cb6
movabs r10, 0x4097788f6a0df764
movabs rbx, 0xbf68877095f2089b
mov r8, r12
lea r12, [rbp + 0x60]
mov r9, r14
mov rsi, r13
mov r11, r15
jmp 0x1400077ae
mov qword [rbp + 0xb0], r12
mov rax, qword [rbp + 0xb0]
mov qword [rbp + 0x90], rax
cmp qword [rbp + 0x78], 0xf
mov eax, 0x38e0b270
mov edi, 0x3e2a7afd
cmova edi, eax
mov ecx, 0xda1353c0
nop word cs:[rax + rax]
nop dword [rax]
cmp ecx, 0x3e2a7afd
je 0x1400079e4
cmp ecx, 0x38e0b270
je 0x1400079d3
cmp ecx, 0xda1353c0
jne 0x1400079b0
mov rsi, qword [rbp + 0x90]
mov ecx, edi
jmp 0x1400079b0
mov rax, qword [rbp + 0xb0]
mov rsi, qword [rax]
mov ecx, 0x3e2a7afd
jmp 0x1400079b0
mov qword [rbp + 0xb0], r12
mov rax, qword [rbp + 0xb0]
mov qword [rbp + 0x90], rax
mov ecx, 0xda1353c0
nop
cmp ecx, 0x3e2a7afd
je 0x140007a34
cmp ecx, 0x38e0b270
je 0x140007a23
cmp ecx, 0xda1353c0
jne 0x140007a00
mov rdx, qword [rbp + 0x90]
mov ecx, edi
jmp 0x140007a00
mov rax, qword [rbp + 0xb0]
mov rdx, qword [rax]
mov ecx, 0x3e2a7afd
jmp 0x140007a00
mov rbx, qword [rbp + 0x70]
mov qword [rbp + 0xb0], r12
mov rax, qword [rbp + 0xb0]
mov qword [rbp + 0x90], rax
mov eax, 0xda1353c0
nop word cs:[rax + rax]
nop dword [rax]
cmp eax, 0x3e2a7afd
je 0x140007a91
cmp eax, 0x38e0b270
je 0x140007a80
cmp eax, 0xda1353c0
jne 0x140007a60
mov rcx, qword [rbp + 0x90]
mov eax, edi
jmp 0x140007a60
mov rax, qword [rbp + 0xb0]
mov rcx, qword [rax]
mov eax, 0x3e2a7afd
jmp 0x140007a60
add rdx, rbx
lea rax, [rbp + 0x88]
mov qword [rbp + 0xc8], rax
mov rax, qword [rbp + 0xc8]
mov qword [rbp + 0x88], rcx
lea rax, [rbp + 0x58]
mov qword [rbp + 0xd0], rax
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x58], rdx
lea rax, [rbp + 0x20]
mov qword [rbp + 0xb0], rax
mov rax, qword [rbp + 0xb0]
mov edi, 0xdd990183
mov qword [rbp + 0x20], rsi
mov edx, 0x20ab44d6
mov rax, qword [rbp + 0x58]
nop word [rax + rax]
cmp edx, 0xdd990183
je 0x140007b5d
cmp edx, 0x71ef935
je 0x140007b30
cmp edx, 0x20ab44d6
jne 0x140007af0
mov qword [rbp + 0x90], rcx
mov rdx, qword [rbp + 0x90]
cmp rdx, rax
mov edx, 0x71ef935
cmove edx, edi
jmp 0x140007af0
mov rax, qword [rbp + 0x90]
movsx ecx, byte [rax]
call fcn.140014d90
mov byte [rsi], al
mov rcx, qword [rbp + 0x88]
add rcx, 1
mov qword [rbp + 0x88], rcx
mov rsi, qword [rbp + 0x20]
add rsi, 1
jmp 0x140007add
mov rax, qword [rbp + 0xb0]
mov rax, qword [rbp + 0xd0]
mov rax, qword [rbp + 0xc8]
xorps xmm0, xmm0
movaps xmmword [rbp + 0x90], xmm0
mov qword [rbp + 0xa0], 0
movabs r15, 0x1fffffffffffffff
mov qword [rbp + 0xb0], r15
mov ecx, 0x5e0e4768
mov eax, 0x859a9e5f
nop word cs:[rax + rax]
nop dword [rax]
cmp ecx, 0x2a854bae
je 0x140007be2
cmp ecx, 0x5e0e4768
je 0x140007bcd
cmp ecx, 0x859a9e5f
jne 0x140007bb0
jmp 0x140008592
mov rcx, qword [rbp + 0xb0]
cmp rcx, 0x32
mov ecx, 0x2a854bae
cmovb ecx, eax
jmp 0x140007bb0
mov eax, 0x27b73902
nop word [rax + rax]
cmp eax, 0x1eb52689
je 0x140007c05
cmp eax, 0x27b73902
jne 0x140007bf0
mov eax, 0x1eb52689
jmp 0x140007bf0
mov ecx, 0x190
call fcn.140008d90
mov qword [rbp + 0x90], rax
mov rsi, rax
add rsi, 0x190
mov qword [rbp + 0xa0], rsi
lea rdx, [0x14001fe90]
mov r8d, 0x190
mov rcx, rax
call fcn.140012aa0
mov qword [rbp + 0x98], rsi
mov qword [rbp + 0xb0], 0
mov eax, 0x3ebd4073
mov esi, 0xc3f3f4ba
jmp 0x140007c70
mov rcx, qword [rbp + 0xb0]
call fcn.140009060
mov eax, 0xc3f3f4ba
nop dword [rax + rax]
cmp eax, 0x90a49334
je 0x140007c5a
cmp eax, 0xc3f3f4ba
je 0x140007c97
cmp eax, 0x3ebd4073
jne 0x140007c70
cmp qword [rbp + 0xb0], 0
mov eax, 0x90a49334
cmove eax, esi
jmp 0x140007c70
mov rax, qword [rbp + 0x90]
mov r10, qword [rbp + 0x98]
cmp rax, r10
je 0x140007dfa
movabs r8, 0x773477a4773d77f4
cmp qword [rbp + 0x48], 0xf
mov ecx, 0x94f08a88
mov r11d, 0xf405f3d7
cmova r11d, ecx
mov r9d, 0x72b63249
nop word cs:[rax + rax]
nop dword [rax]
mov rbx, qword [rax]
lea rcx, [rbp + 0x30]
mov qword [rbp + 0xd0], rcx
mov rcx, qword [rbp + 0xd0]
mov qword [rbp + 0xb0], rcx
mov ecx, 0x9af5bc7d
jmp 0x140007d20
mov rcx, qword [rbp + 0xd0]
mov rdx, qword [rcx]
mov ecx, 0xf405f3d7
nop word cs:[rax + rax]
nop dword [rax]
cmp ecx, 0x94f08a88
je 0x140007d03
cmp ecx, 0xf405f3d7
je 0x140007d50
cmp ecx, 0x9af5bc7d
jne 0x140007d20
mov rdx, qword [rbp + 0xb0]
mov ecx, r11d
jmp 0x140007d20
mov rsi, r8
lea rcx, [rdx + 1]
mov edi, 0x9e280c9a
nop dword [rax]
cmp edi, 0x72b63249
je 0x140007de0
cmp edi, 0xa3ab800b
je 0x140007db0
cmp edi, 0x9e280c9a
jne 0x140007d60
mov qword [rbp + 0xb0], rsi
mov qword [rbp + 0xd0], rcx
movsx edi, byte [rdx]
mov dword [rbp + 0xc8], edi
cmp dword [rbp + 0xc8], 0
mov edi, 0xa3ab800b
cmove edi, r9d
jmp 0x140007d60
mov rcx, qword [rbp + 0xb0]
shl rcx, 0x3a
add rcx, qword [rbp + 0xb0]
movsxd rsi, dword [rbp + 0xc8]
add rsi, rcx
mov rdx, qword [rbp + 0xd0]
jmp 0x140007d53
cmp rbx, qword [rbp + 0xb0]
je 0x1400080b1
add rax, 8
cmp rax, r10
jne 0x140007ce0
xorps xmm0, xmm0
movaps xmmword [rbp + 0xb0], xmm0
mov qword [rbp + 0xc0], 0
mov qword [rbp + 0xd0], r15
mov ecx, 0x5e0e4768
mov eax, 0x859a9e5f
cmp ecx, 0x2a854bae
je 0x140007e52
cmp ecx, 0x5e0e4768
je 0x140007e3d
cmp ecx, 0x859a9e5f
jne 0x140007e20
jmp 0x140008597
mov rcx, qword [rbp + 0xd0]
cmp rcx, 0x4d
mov ecx, 0x2a854bae
cmovb ecx, eax
jmp 0x140007e20
mov eax, 0x27b73902
nop word [rax + rax]
cmp eax, 0x1eb52689
je 0x140007e75
cmp eax, 0x27b73902
jne 0x140007e60
mov eax, 0x1eb52689
jmp 0x140007e60
mov ecx, 0x268
call fcn.140008d90
mov qword [rbp + 0xb0], rax
mov rsi, rax
add rsi, 0x268
mov qword [rbp + 0xc0], rsi
lea rdx, [0x140020020]
mov r8d, 0x268
mov rcx, rax
call fcn.140012aa0
mov qword [rbp + 0xb8], rsi
mov qword [rbp + 0xd0], 0
mov eax, 0x3ebd4073
mov esi, 0xc3f3f4ba
jmp 0x140007ee0
mov rcx, qword [rbp + 0xd0]
call fcn.140009060
mov eax, 0xc3f3f4ba
nop dword [rax + rax]
cmp eax, 0x90a49334
je 0x140007eca
cmp eax, 0xc3f3f4ba
je 0x140007f07
cmp eax, 0x3ebd4073
jne 0x140007ee0
cmp qword [rbp + 0xd0], 0
mov eax, 0x90a49334
cmove eax, esi
jmp 0x140007ee0
mov rdi, qword [rbp + 0xb0]
mov r10, qword [rbp + 0xb8]
cmp rdi, r10
je 0x1400080b8
cmp qword [rbp + 0x78], 0xf
mov ecx, 0x94f08a88
mov r11d, 0xf405f3d7
cmova r11d, ecx
movabs r9, 0x773477a4773d77f4
mov r8d, 0x72b63249
nop word cs:[rax + rax]
nop dword [rax]
mov r14, qword [rdi]
mov qword [rbp + 0xc8], r12
mov rcx, qword [rbp + 0xc8]
mov qword [rbp + 0xd0], rcx
mov ecx, 0x9af5bc7d
jmp 0x140007f80
mov rcx, qword [rbp + 0xc8]
mov rsi, qword [rcx]
mov ecx, 0xf405f3d7
nop
cmp ecx, 0x94f08a88
je 0x140007f6f
cmp ecx, 0xf405f3d7
je 0x140007fb0
cmp ecx, 0x9af5bc7d
jne 0x140007f80
mov rsi, qword [rbp + 0xd0]
mov ecx, r11d
jmp 0x140007f80
mov rbx, r9
lea rcx, [rsi + 1]
mov edx, 0x9e280c9a
nop dword [rax]
cmp edx, 0x72b63249
je 0x140008040
cmp edx, 0xa3ab800b
je 0x140008010
cmp edx, 0x9e280c9a
jne 0x140007fc0
mov qword [rbp + 0xd0], rbx
mov qword [rbp + 0xc8], rcx
movsx edx, byte [rsi]
mov dword [rbp + 0x88], edx
cmp dword [rbp + 0x88], 0
mov edx, 0xa3ab800b
cmove edx, r8d
jmp 0x140007fc0
mov rcx, qword [rbp + 0xd0]
shl rcx, 0x3a
add rcx, qword [rbp + 0xd0]
movsxd rbx, dword [rbp + 0x88]
add rbx, rcx
mov rsi, qword [rbp + 0xc8]
jmp 0x140007fb3
mov rsi, qword [rbp + 0xd0]
cmp r14, rsi
sete cl
setne bl
add rdi, 8
cmp rdi, r10
sete dl
xor bl, dl
mov r15d, ebx
xor r15b, 1
mov eax, edx
or al, cl
xor al, 1
xor dl, cl
mov ecx, eax
and cl, dl
xor dl, al
or dl, cl
mov eax, edx
xor al, 1
and dl, al
mov ecx, eax
and cl, dl
xor dl, al
or dl, cl
mov ecx, edx
xor cl, 1
and dl, bl
or bl, cl
mov eax, ebx
and al, 1
and cl, r15b
or cl, dl
xor cl, 1
cmp al, cl
jne 0x1400080a5
or bl, cl
test bl, 1
jne 0x140007f50
xor ebx, ebx
cmp r14, rsi
sete bl
neg ebx
jmp 0x1400080ba
mov ebx, 0xffffffff
jmp 0x1400080c6
xor ebx, ebx
lea rcx, [rbp + 0xb0]
call fcn.140009060
lea rcx, [rbp + 0x90]
call fcn.140009060
lea r12, [rbp + 0x60]
mov rcx, r12
call fcn.140009200
lea r15, [rbp + 0x30]
mov rcx, r15
call fcn.140009200
lea rcx, [rbp - 0x40]
call fcn.140009200
mov rcx, rbp
call fcn.140009200
cmp ebx, 0xffffffff
je 0x14000859c
xorps xmm0, xmm0
movaps xmmword [rbp + 0x30], xmm0
mov qword [rbp + 0x40], 0
movaps xmmword [rbp + 0x60], xmm0
mov qword [rbp + 0x70], 0
movaps xmmword [rbp + 0x90], xmm0
mov qword [rbp + 0xa0], 0
lea rcx, [0x140025641]
call fcn.140069d74
ja 0x1400081a1
imul ecx, dword [rdx], 0x60
add dword [rdi - 0xd], 0xe026a1f
cmpsd dword [rsi], dword [rdi]
mov edi, 0xa736325e
mov edi, 0xa79e52b6
mov edi, 0xa7aeb6a6
mov edi, 0xa79eb6a6
mov edi, 0xa726ce9a
mov edi, 0xa7968a52
mov edi, 0xa7c6d2aa
mov edi, 0x40123eba
sub eax, 0x440b8faa
jl 0x140008183
hlt
cmpsb byte [rsi], byte [rdi]
popfq
invalid
loopne 0x1400081b6
mov ebx, 0xe0081fe0
stosd dword [rdi], eax
mov bl, 0xd0
invalid
invalid
call fcn.140002640
call fcn.140002640
mov ecx, 0xffffffff
call qword [sym.imp.KERNEL32.dll_ExitProcess]