Function at 0x140033cc0
Capabilities:
Delete file
Encode data using xor
Execute command
Hide graphical window
Move file
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
mov eax, 0x2090
call fcn.1400a2e50
sub rsp, rax
movaps xmmword [rsp + 0x2080], xmm6
lea rbp, [rsp + 0x60]
and rbp, 0xffffffffffffffe0
call fcn.140033310
call fcn.14003a390
movabs rcx, 0x539c30b21f37f215
movabs rdi, 0x30f944d7175bea0d
movabs r12, 0xae7fad3f0b7fcd08
movabs r13, 0x539c30b2537ba75b
test al, al
je 0x140033e2c
lea rax, [rbp + 0x1910]
mov qword [rbp + 0x318], rax
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0xe0], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0xe8], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x560], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x568], rax
movdqa xmm0, xmmword [rbp + 0xe0]
pxor xmm0, xmmword [rbp + 0x560]
movdqa xmmword [rbp + 0xe0], xmm0
lea rdx, [rbp + 0xe0]
lea rcx, [rbp + 0x1910]
call fcn.140007bd0
mov rbx, rax
mov qword [rbp], rdi
mov rcx, qword [rbp]
mov qword [rbp + 0xf0], rcx
movabs rax, 0xae7fad3f0b1ba87c
mov qword [rbp], rax
mov rcx, qword [rbp]
mov qword [rbp + 0xf8], rcx
mov qword [rbp], r13
mov rcx, qword [rbp]
mov qword [rbp + 0x570], rcx
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x578], rax
movdqa xmm0, xmmword [rbp + 0xf0]
pxor xmm0, xmmword [rbp + 0x570]
movdqa xmmword [rbp + 0xf0], xmm0
lea rdx, [rbp + 0xf0]
lea rcx, [rbp + 0x18f0]
call fcn.140007bd0
nop
mov rdx, rbx
mov rcx, rax
call fcn.140011cb0
mov byte [0x14022a673], 1
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_ShowWindow]
movabs rax, 0x34f556dc3c18d732
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x4c0], rax
movabs rax, 0xca17de4a6719e228
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x4c8], rax
movabs rax, 0xdb1c00504965214b
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x4d0], rax
movabs rsi, 0x7306885d63265eca
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x4d8], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x1000], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x1008], rax
movabs r14, 0xdb1c005049655225
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x1010], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x1018], rax
vmovdqu ymm0, ymmword [rbp + 0x1000]
vpxor ymm0, ymm0, ymmword [rbp + 0x4c0]
vmovdqa ymmword [rbp + 0x4c0], ymm0
lea rcx, [rbp + 0x4c0]
vzeroupper
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r8, rax
movabs rax, 0x539c30b2537ba72c
mov qword [rbp], rax
mov rcx, qword [rbp]
mov qword [rbp + 0x100], rcx
mov qword [rbp], r12
mov rcx, qword [rbp]
mov qword [rbp + 0x108], rcx
mov qword [rbp], r13
mov rcx, qword [rbp]
mov qword [rbp + 0x580], rcx
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x588], rax
movdqa xmm0, xmmword [rbp + 0x100]
pxor xmm0, xmmword [rbp + 0x580]
movdqa xmmword [rbp + 0x100], xmm0
movabs rax, 0x53b864e71c35e818
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x110], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x118], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x590], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x598], rax
movdqa xmm0, xmmword [rbp + 0x110]
pxor xmm0, xmmword [rbp + 0x590]
movdqa xmmword [rbp + 0x110], xmm0
lea rdx, [rbp + 0x100]
lea rcx, [rbp + 0x110]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_freopen]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r8, rax
movabs rax, 0x539c30b2530f8c29
mov qword [rbp], rax
mov rcx, qword [rbp]
mov qword [rbp + 0x120], rcx
mov qword [rbp], r12
mov rcx, qword [rbp]
mov qword [rbp + 0x128], rcx
mov qword [rbp], r13
mov rcx, qword [rbp]
mov qword [rbp + 0x5a0], rcx
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x5a8], rax
movdqa xmm0, xmmword [rbp + 0x120]
pxor xmm0, xmmword [rbp + 0x5a0]
movdqa xmmword [rbp + 0x120], xmm0
movabs rax, 0x539c14dc3a15c838
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x130], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x138], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x5b0], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x5b8], rax
movdqa xmm0, xmmword [rbp + 0x130]
pxor xmm0, xmmword [rbp + 0x5b0]
movdqa xmmword [rbp + 0x130], xmm0
lea rdx, [rbp + 0x120]
lea rcx, [rbp + 0x130]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_freopen]
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r8, rax
movabs rdi, 0x539c30b2530f8c2c
mov qword [rbp], rdi
mov rcx, qword [rbp]
mov qword [rbp + 0x140], rcx
mov qword [rbp], r12
mov rcx, qword [rbp]
mov qword [rbp + 0x148], rcx
mov qword [rbp], r13
mov rcx, qword [rbp]
mov qword [rbp + 0x5c0], rcx
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x5c8], rax
movdqa xmm0, xmmword [rbp + 0x140]
pxor xmm0, xmmword [rbp + 0x5c0]
movdqa xmmword [rbp + 0x140], xmm0
movabs rbx, 0x53b844c73c15c838
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x150], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x158], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x5d0], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x5d8], rax
movdqa xmm0, xmmword [rbp + 0x150]
pxor xmm0, xmmword [rbp + 0x5d0]
movdqa xmmword [rbp + 0x150], xmm0
lea rdx, [rbp + 0x140]
lea rcx, [rbp + 0x150]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_freopen]
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r8, rax
mov qword [rbp], rdi
mov rcx, qword [rbp]
mov qword [rbp + 0x160], rcx
mov qword [rbp], r12
mov rcx, qword [rbp]
mov qword [rbp + 0x168], rcx
mov qword [rbp], r13
mov rcx, qword [rbp]
mov qword [rbp + 0x5e0], rcx
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x5e8], rax
movdqa xmm0, xmmword [rbp + 0x160]
pxor xmm0, xmmword [rbp + 0x5e0]
movdqa xmmword [rbp + 0x160], xmm0
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x170], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x178], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x5f0], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x5f8], rax
movdqa xmm0, xmmword [rbp + 0x170]
pxor xmm0, xmmword [rbp + 0x5f0]
movdqa xmmword [rbp + 0x170], xmm0
lea rdx, [rbp + 0x160]
lea rcx, [rbp + 0x170]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_freopen]
movabs rax, 0x3d510d93014cb19
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x180], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x188], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x600], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x608], rax
movdqa xmm0, xmmword [rbp + 0x180]
pxor xmm0, xmmword [rbp + 0x600]
movdqa xmmword [rbp + 0x180], xmm0
lea rdx, [rbp + 0x180]
lea rcx, [rbp + 0x12a0]
call fcn.140007bd0
nop
lea rcx, [rbp + 0x12a0]
call fcn.1400305f0
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
mov r9d, 2
mov r8b, 0xc3
xor edx, edx
call qword [sym.imp.USER32.dll_SetLayeredWindowAttributes]
movabs rax, 0x1dd37392163fe816
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x4e0], rax
movabs rax, 0x9b4a906c47308e28
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x4e8], rax
movabs rax, 0xea215315072c1e05
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x4f0], rax
movabs rax, 0x7306885d63265ef8
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x4f8], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x1020], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x1028], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x1030], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x1038], rax
vmovdqu ymm0, ymmword [rbp + 0x1020]
vpxor ymm0, ymm0, ymmword [rbp + 0x4e0]
vmovdqa ymmword [rbp + 0x4e0], ymm0
lea rcx, [rbp + 0x4e0]
vzeroupper
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movabs rax, 0x539c30b25308cb38
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x190], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x198], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x610], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x618], rax
movdqa xmm0, xmmword [rbp + 0x190]
pxor xmm0, xmmword [rbp + 0x610]
movdqa xmmword [rbp + 0x190], xmm0
lea rcx, [rbp + 0x190]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, [0x140015340]
lea rcx, [rbp + 0x620]
call fcn.14003c7c0
nop
lea rcx, [rbp + 0x620]
call fcn.14000e0e0
nop
cmp dword [rbp + 0x628], 0
jne 0x140037bbb
call fcn.14000e420
lea rdx, [0x14000e690]
lea rcx, [rbp + 0x630]
call fcn.14003c7c0
nop
lea rcx, [rbp + 0x630]
call fcn.14000e0e0
nop
cmp dword [rbp + 0x638], 0
jne 0x140037bbb
lea rdx, [0x1400154b0]
lea rcx, [rbp + 0x640]
call fcn.14003c7c0
nop
lea rcx, [rbp + 0x640]
call fcn.14000e0e0
nop
cmp dword [rbp + 0x648], 0
jne 0x140037bbb
lea rdx, [0x140015700]
lea rcx, [rbp + 0x650]
call fcn.14003c7c0
nop
lea rcx, [rbp + 0x650]
call fcn.14000e0e0
nop
cmp dword [rbp + 0x658], 0
jne 0x140037bbb
lea rdx, [0x140015400]
lea rcx, [rbp + 0x660]
call fcn.14003c7c0
nop
lea rcx, [rbp + 0x660]
call fcn.14000e0e0
nop
cmp dword [rbp + 0x668], 0
jne 0x140037bbb
lea rdx, [0x14000fec0]
lea rcx, [rbp + 0x670]
call fcn.14003c7c0
nop
lea rcx, [rbp + 0x670]
call fcn.14000e0e0
nop
cmp dword [rbp + 0x678], 0
jne 0x140037bbb
lea rdx, [0x1400324e0]
lea rcx, [rbp + 0x680]
call fcn.14003c7c0
nop
lea rcx, [rbp + 0x680]
call fcn.14000e0e0
nop
cmp dword [rbp + 0x688], 0
jne 0x140037bbb
movabs rax, 0x25f542e22708d209
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1a0], rax
movabs rax, 0xae7fad3f6f1ab969
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1a8], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x690], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x698], rax
movdqa xmm0, xmmword [rbp + 0x1a0]
pxor xmm0, xmmword [rbp + 0x690]
movdqa xmmword [rbp + 0x1a0], xmm0
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0x1280]
call fcn.140007bd0
nop
movabs rax, 0x4f042cb252cf36b
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1b0], rax
movabs rax, 0xae7fad3f0b7fbc45
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1b8], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x6a0], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x6a8], rax
movdqa xmm0, xmmword [rbp + 0x1b0]
pxor xmm0, xmmword [rbp + 0x6a0]
movdqa xmmword [rbp + 0x1b0], xmm0
lea rdx, [rbp + 0x1b0]
lea rcx, [rbp + 0x1260]
call fcn.140007bd0
nop
movabs rax, 0x62f80486304cc568
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x8e0], rax
movabs rax, 0xcf499d0b3a19fc3f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x8e8], rax
movabs rax, 0xea79366178556011
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x8f0], rax
movabs rax, 0x4135ba6d531f6efc
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x8f8], rax
movabs rax, 0x6e1400f5d5feee1a
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x900], rax
movabs rax, 0x41731550e088251a
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x908], rax
movabs rax, 0xac6a1372af28729d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x910], rax
movabs rax, 0xf939ad0751fd23bd
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x918], rax
movabs rdx, 0x63e99c9a4236d1a3
mov qword [rbp], rdx
mov rax, qword [rbp]
mov qword [rbp + 0x920], rax
movabs rcx, 0xe0ae3ca786dca3f0
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x928], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0xfa0], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0xfa8], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0xfb0], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0xfb8], rax
movabs rax, 0x58756596e29b8c2f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfc0], rax
movabs rax, 0x224a243381b0447c
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfc8], rax
movabs rax, 0xc95b2414c91946a9
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfd0], rax
movabs rax, 0xcc5d946163c91a8e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfd8], rax
mov qword [rbp], rdx
mov rax, qword [rbp]
mov qword [rbp + 0xfe0], rax
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0xfe8], rax
vmovdqu ymm0, ymmword [rbp + 0xfa0]
vpxor ymm0, ymm0, ymmword [rbp + 0x8e0]
vmovdqa ymmword [rbp + 0x8e0], ymm0
vmovdqu ymm0, ymmword [rbp + 0x900]
vpxor ymm1, ymm0, ymmword [rbp + 0xfc0]
vmovdqa ymmword [rbp + 0x900], ymm1
vmovdqa xmm0, xmmword [rbp + 0x920]
vpxor xmm0, xmm0, xmmword [rbp + 0xfe0]
vmovdqa xmmword [rbp + 0x920], xmm0
lea rdx, [rbp + 0x8e0]
lea rcx, [rbp + 0x1240]
vzeroupper
call fcn.140007bd0
nop
movabs rax, 0x7cb30ac1230fd333
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x500], rax
movabs rax, 0x8017d94a6a06a863
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x508], rax
movabs rax, 0xf4757031660b3b52
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x510], rax
movabs rax, 0x7306885d4c1470fb
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x518], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x1140], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x1148], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x1150], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x1158], rax
vmovdqu ymm0, ymmword [rbp + 0x1140]
vpxor ymm0, ymm0, ymmword [rbp + 0x500]
vmovdqa ymmword [rbp + 0x500], ymm0
lea rdx, [rbp + 0x500]
lea rcx, [rbp + 0x1220]
vzeroupper
call fcn.140007bd0
nop
movabs rax, 0x73f259c27317d428
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x520], rax
movabs rax, 0xda0fc2172b06a863
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x528], rax
movabs rax, 0xdb1c293c280b3d4c
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x530], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x538], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x1120], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x1128], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x1130], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x1138], rax
vmovdqu ymm0, ymmword [rbp + 0x1120]
vpxor ymm0, ymm0, ymmword [rbp + 0x520]
vmovdqa ymmword [rbp + 0x520], ymm0
lea rdx, [rbp + 0x520]
lea rcx, [rbp + 0x1200]
vzeroupper
call fcn.140007bd0
nop
movabs rax, 0x539c30b2534b896a
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1c0], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x1c8], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x6b0], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x6b8], rax
movdqa xmm0, xmmword [rbp + 0x1c0]
pxor xmm0, xmmword [rbp + 0x6b0]
movdqa xmmword [rbp + 0x1c0], xmm0
lea rdx, [rbp + 0x1c0]
lea rcx, [rbp + 0x11e0]
call fcn.140007bd0
nop
lea rax, [rbp + 0x18d0]
mov qword [rbp + 0x318], rax
lea rdx, [rbp + 0x1200]
lea rcx, [rbp + 0x18d0]
call fcn.14000a3c0
mov r15, rax
lea rax, [rbp + 0x18b0]
mov qword [rbp], rax
lea rdx, [rbp + 0x1220]
lea rcx, [rbp + 0x18b0]
call fcn.14000a3c0
mov r14, rax
lea rax, [rbp + 0x1890]
mov qword [rbp + 0x850], rax
lea rdx, [rbp + 0x11e0]
lea rcx, [rbp + 0x1890]
call fcn.14000a3c0
mov rsi, rax
lea rax, [rbp + 0x1870]
mov qword [rbp + 0x70], rax
lea rdx, [rbp + 0x1240]
lea rcx, [rbp + 0x1870]
call fcn.14000a3c0
mov rdi, rax
lea rax, [rbp + 0x1850]
mov qword [rbp + 0x60], rax
lea rdx, [rbp + 0x1260]
lea rcx, [rbp + 0x1850]
call fcn.14000a3c0
mov rbx, rax
lea rdx, [rbp + 0x1280]
lea rcx, [rbp + 0x1830]
call fcn.14000a3c0
nop
mov qword [rsp + 0x30], r15
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], rsi
mov r9, rdi
mov r8, rbx
mov rdx, rax
lea rcx, [rbp + 0x1930]
call fcn.14000cd30
nop
lea rcx, [rbp + 0x1930]
call fcn.140047200
movabs rax, 0x539c30b25308cb38
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1d0], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x1d8], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x6c0], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x6c8], rax
movdqa xmm0, xmmword [rbp + 0x1d0]
pxor xmm0, xmmword [rbp + 0x6c0]
movdqa xmmword [rbp + 0x1d0], xmm0
lea rcx, [rbp + 0x1d0]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movabs rbx, 0x27b249d738279d18
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x1e0], rax
movabs rax, 0xae7fad3f0b7fb970
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1e8], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x6d0], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x6d8], rax
movdqa xmm0, xmmword [rbp + 0x1e0]
pxor xmm0, xmmword [rbp + 0x6d0]
movdqa xmmword [rbp + 0x1e0], xmm0
lea rdx, [rbp + 0x1e0]
lea rcx, [rbp + 0x11c0]
call fcn.140007bd0
nop
movzx edx, byte [rbp + 0x20]
lea rcx, [rbp + 0x78]
call fcn.140008280
lea rcx, [rbp + 0x78]
call fcn.140007e40
nop
mov dword [rsp + 0x20], 1
mov r9d, 0x40
lea r8d, [r9 - 0x3f]
lea rdx, [rbp + 0x11c0]
lea rcx, [rbp + 0x1be0]
call fcn.140038510
nop
mov qword [rbp + 0x10], 0
mov word [rbp + 0x18], 1
mov rax, qword [rbp + 0x1be0]
movsxd rcx, dword [rax + 4]
mov rax, qword [rbp + rcx + 0x1c28]
mov qword [rbp + 0x60], rax
test rax, rax
sete byte [rbp + 0x68]
mov byte [rbp + 0x69], 0
movaps xmm0, xmmword [rbp + 0x10]
movdqa xmmword [rbp + 0x850], xmm0
movaps xmm1, xmmword [rbp + 0x60]
movdqa xmmword [rbp + 0x12e0], xmm1
lea r9, [rbp + 0x20]
lea r8, [rbp + 0x850]
lea rdx, [rbp + 0x12e0]
lea rcx, [rbp + 0x11a0]
call fcn.140039d40
nop
xor r8d, r8d
lea rdx, [rbp + 0x11a0]
lea rcx, [0x140229140]
call fcn.1400395c0
cmp byte [0x14022a673], 0
je 0x140034e90
lea rax, [rbp + 0x17f0]
mov qword [rbp + 0x10], rax
movabs rax, 0x539c30b21f37f215
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1f0], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x1f8], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x6e0], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x6e8], rax
movdqa xmm0, xmmword [rbp + 0x1f0]
pxor xmm0, xmmword [rbp + 0x6e0]
movdqa xmmword [rbp + 0x1f0], xmm0
lea rdx, [rbp + 0x1f0]
lea rcx, [rbp + 0x17f0]
call fcn.140007bd0
mov rbx, rax
movabs rax, 0x30f944d7175bea0d
mov qword [rbp], rax
mov rcx, qword [rbp]
mov qword [rbp + 0x320], rcx
movabs rax, 0xda0ccc732b1ba87c
mov qword [rbp], rax
mov rcx, qword [rbp]
mov qword [rbp + 0x328], rcx
movabs rdx, 0xdb1c005049655225
mov qword [rbp], rdx
mov rcx, qword [rbp]
mov qword [rbp + 0x330], rcx
movabs rcx, 0x7306885d63265eca
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x338], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x40], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x48], rax
mov qword [rbp], rdx
mov rax, qword [rbp]
mov qword [rbp + 0x50], rax
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x58], rax
vmovdqu ymm0, ymmword [rbp + 0x320]
vpxor ymm1, ymm0, ymmword [rbp + 0x40]
vmovdqa ymmword [rbp + 0x320], ymm1
lea rdx, [rbp + 0x320]
lea rcx, [rbp + 0x17d0]
vzeroupper
call fcn.140007bd0
nop
mov rdx, rbx
mov rcx, rax
call fcn.140011cb0
call fcn.140030820
mov ecx, Ordinal_137
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
lea rcx, [rbp + 0x1be0]
call fcn.14000a510
lea rdx, [0x140229140]
lea rcx, [rbp + 0x17b0]
call fcn.14000a3c0
mov rdx, rax
lea rcx, [rbp + 0x1930]
call fcn.140047d30
movabs rdi, 0x16bc58c63415c217
movabs rsi, 0x73f444c73202c210
cmp byte [rbp + 0x1b70], 0
je 0x140035106
lea rcx, [0x140229140]
call fcn.140038d60
cmp rax, 0xb
jne 0x14003504f
call fcn.140033200
mov byte [0x14022a56a], 1
lea rax, [rbp + 0x1790]
mov qword [rbp + 0x10], rax
lea rdx, [rbp + 0x1af0]
lea rcx, [rbp + 0x1790]
call fcn.14000a3c0
mov rdi, rax
lea rax, [rbp + 0x1770]
mov qword [rbp + 0x60], rax
lea rdx, [rbp + 0x1b98]
lea rcx, [rbp + 0x1770]
call fcn.14000a3c0
mov rbx, rax
lea rdx, [0x140229140]
lea rcx, [rbp + 0x1710]
call fcn.14000a3c0
nop
mov r8, rdi
mov rdx, rbx
mov rcx, rax
call fcn.140032610
test al, al
jne 0x140035015
mov byte [0x14022a698], 1
lea rax, [rbp + 0x16f0]
mov qword [rbp + 0x10], rax
lea rdx, [0x140229140]
lea rcx, [rbp + 0x16f0]
call fcn.14000a3c0
mov rbx, rax
mov qword [rbp], rsi
mov rcx, qword [rbp]
mov qword [rbp + 0x200], rcx
movabs rax, 0xae10d9516214a45b
mov qword [rbp], rax
mov rcx, qword [rbp]
mov qword [rbp + 0x208], rcx
mov qword [rbp], r13
mov rcx, qword [rbp]
mov qword [rbp + 0x6f0], rcx
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x6f8], rax
movdqa xmm0, xmmword [rbp + 0x200]
pxor xmm0, xmmword [rbp + 0x6f0]
movdqa xmmword [rbp + 0x200], xmm0
lea rdx, [rbp + 0x200]
lea rcx, [rbp + 0x16d0]
call fcn.140007bd0
nop
mov r8b, 1
mov rdx, rbx
mov rcx, rax
call fcn.140013840
lea rdx, [0x140229140]
lea rcx, [rbp + 0x78]
call fcn.140038e10
lea rdx, [0x140229140]
lea rcx, [rbp + 0x16b0]
call fcn.14000a3c0
mov rcx, rax
call fcn.1400107a0
movabs rdi, 0x16bc58c63415c217
jmp 0x1400350fc
call fcn.140033200
mov byte [0x14022a56a], 1
lea rax, [rbp + 0x1690]
mov qword [rbp + 0x10], rax
lea rdx, [0x140229140]
lea rcx, [rbp + 0x1690]
call fcn.14000a3c0
mov rbx, rax
mov qword [rbp], rdi
mov rcx, qword [rbp]
mov qword [rbp + 0x210], rcx
movabs rax, 0xae7f9d0f2b1abe64
mov qword [rbp], rax
mov rcx, qword [rbp]
mov qword [rbp + 0x218], rcx
mov qword [rbp], r13
mov rcx, qword [rbp]
mov qword [rbp + 0x700], rcx
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x708], rax
movdqa xmm0, xmmword [rbp + 0x210]
pxor xmm0, xmmword [rbp + 0x700]
movdqa xmmword [rbp + 0x210], xmm0
lea rdx, [rbp + 0x210]
lea rcx, [rbp + 0x1670]
call fcn.140007bd0
nop
xor r8d, r8d
mov rdx, rbx
mov rcx, rax
call fcn.140013840
movabs rbx, 0x27b249d738279d18
cmp byte [0x14022a56a], 0
jne 0x14003575e
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
mov edx, 5
call qword [sym.imp.USER32.dll_ShowWindow]
movabs rax, 0x1dd37392163fe816
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x440], rax
movabs rax, 0x9b4a906c47308e28
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x448], rax
movabs rax, 0xea215315072c1e05
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x450], rax
movabs rax, 0x7306885d63265ef8
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x458], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x1100], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x1108], rax
movabs r14, 0xdb1c005049655225
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x1110], rax
movabs rsi, 0x7306885d63265eca
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x1118], rax
vmovdqu ymm0, ymmword [rbp + 0x440]
vpxor ymm1, ymm0, ymmword [rbp + 0x1100]
vmovdqa ymmword [rbp + 0x440], ymm1
lea rcx, [rbp + 0x440]
vzeroupper
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, [0x14000ae50]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov r8, rax
movabs rax, 0x3fcc10ef6c208751
mov qword [rbp], rax
mov rcx, qword [rbp]
mov qword [rbp + 0xa20], rcx
movabs rax, 0xda11c81f6e0cac6d
mov qword [rbp], rax
mov rcx, qword [rbp]
mov qword [rbp + 0xa28], rcx
movabs rax, 0xfb6e753f30452040
mov qword [rbp], rax
mov rcx, qword [rbp]
mov qword [rbp + 0xa30], rcx
movabs rax, 0x5263fb33064537a6
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xa38], rax
movabs rcx, 0x58756596e29b8c2f
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0xa40], rax
movabs r15, 0x224a243381b0447c
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0xa48], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0xc20], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0xc28], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0xc30], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0xc38], rax
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0xc40], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0xc48], rax
vmovdqu ymm0, ymmword [rbp + 0xa20]
vpxor ymm1, ymm0, ymmword [rbp + 0xc20]
vmovdqa ymmword [rbp + 0xa20], ymm1
vmovdqa xmm0, xmmword [rbp + 0xa40]
vpxor xmm0, xmm0, xmmword [rbp + 0xc40]
vmovdqa xmmword [rbp + 0xa40], xmm0
lea rdx, [rbp + 0xa20]
mov rcx, r8
vzeroupper
call fcn.140007ff0
lea rdx, [0x14000a170]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [0x14000aeb0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov r8, rax
movabs rax, 0x73a610cb36308751
mov qword [rbp], rax
mov rcx, qword [rbp]
mov qword [rbp + 0x220], rcx
mov qword [rbp], r12
mov rcx, qword [rbp]
mov qword [rbp + 0x228], rcx
mov qword [rbp], r13
mov rcx, qword [rbp]
mov qword [rbp + 0x710], rcx
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x718], rax
movdqa xmm0, xmmword [rbp + 0x220]
pxor xmm0, xmmword [rbp + 0x710]
movdqa xmmword [rbp + 0x220], xmm0
lea rdx, [rbp + 0x220]
mov rcx, r8
call fcn.140007ff0
lea rdx, [rbp + 0x78]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call fcn.140039ea0
lea rdx, [rbp + 0x78]
lea rcx, [rbp + 0x1630]
call fcn.14000a3c0
mov rdx, rax
lea rcx, [rbp + 0x1930]
call fcn.140047d30
cmp byte [rbp + 0x1b70], 0
jne 0x140035464
lea rax, [rbp + 0x1610]
mov qword [rbp + 0x10], rax
lea rdx, [rbp + 0x78]
lea rcx, [rbp + 0x1610]
call fcn.14000a3c0
mov rbx, rax
lea rdx, [rbp + 0x1b78]
lea rcx, [rbp + 0x15f0]
call fcn.14000a3c0
nop
xor r8d, r8d
mov rdx, rbx
mov rcx, rax
call fcn.140013840
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x230], rax
movabs rax, 0xae7fad3f0b7fb970
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x238], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x720], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x728], rax
movdqa xmm0, xmmword [rbp + 0x230]
pxor xmm0, xmmword [rbp + 0x720]
movdqa xmmword [rbp + 0x230], xmm0
mov dword [rsp + 0x20], 1
mov r9d, 0x40
lea r8d, [r9 - 0x3e]
lea rdx, [rbp + 0x230]
lea rcx, [rbp + 0x1e00]
call fcn.140038720
nop
lea rdx, [rbp + 0x78]
lea rcx, [rbp + 0x1e00]
call fcn.14000a150
lea rcx, [rbp + 0x1e00]
call fcn.140008f90
lea rcx, [rbp + 0x78]
call fcn.140038d60
cmp rax, 0xb
jne 0x140035545
lea rdx, [rbp + 0x78]
lea rcx, [0x140229140]
call fcn.140038e10
call fcn.140033200
lea rdx, [rbp + 0x78]
lea rcx, [rbp + 0x15d0]
call fcn.14000a3c0
mov rcx, rax
call fcn.1400107a0
jmp 0x1400355e8
call fcn.140033200
lea rax, [rbp + 0x15b0]
mov qword [rbp + 0x10], rax
lea rdx, [rbp + 0x78]
lea rcx, [rbp + 0x15b0]
call fcn.14000a3c0
mov rbx, rax
mov qword [rbp], rdi
mov rcx, qword [rbp]
mov qword [rbp + 0x240], rcx
movabs rax, 0xae7fad3f0b1abe64
mov qword [rbp], rax
mov rcx, qword [rbp]
mov qword [rbp + 0x248], rcx
mov qword [rbp], r13
mov rcx, qword [rbp]
mov qword [rbp + 0x730], rcx
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x738], rax
movdqa xmm0, xmmword [rbp + 0x240]
pxor xmm0, xmmword [rbp + 0x730]
movdqa xmmword [rbp + 0x240], xmm0
lea rdx, [rbp + 0x240]
lea rcx, [rbp + 0x1650]
call fcn.140007bd0
nop
xor r8d, r8d
mov rdx, rbx
mov rcx, rax
call fcn.140013840
lea rax, [rbp + 0x1810]
mov qword [rbp + 0x10], rax
lea rdx, [rbp + 0x1af0]
lea rcx, [rbp + 0x1810]
call fcn.14000a3c0
mov rdi, rax
lea rax, [rbp + 0x1730]
mov qword [rbp + 0x60], rax
lea rdx, [rbp + 0x1b98]
lea rcx, [rbp + 0x1730]
call fcn.14000a3c0
mov rbx, rax
lea rdx, [0x140229140]
lea rcx, [rbp + 0x1750]
call fcn.14000a3c0
nop
mov r8, rdi
mov rdx, rbx
mov rcx, rax
call fcn.140032610
test al, al
jne 0x140035750
mov byte [0x14022a698], 1
lea rax, [rbp + 0x1370]
mov qword [rbp + 0x10], rax
lea rdx, [0x140229140]
lea rcx, [rbp + 0x1370]
call fcn.14000a3c0
mov rbx, rax
movabs rax, 0x73f444c73202c210
mov qword [rbp], rax
mov rcx, qword [rbp]
mov qword [rbp + 0x360], rcx
movabs rax, 0x8e10d9516214a45b
mov qword [rbp], rax
mov rcx, qword [rbp]
mov qword [rbp + 0x368], rcx
movabs rax, 0xdb1c00504938607e
mov qword [rbp], rax
mov rcx, qword [rbp]
mov qword [rbp + 0x370], rcx
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x378], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x10e0], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x10e8], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x10f0], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x10f8], rax
vmovdqu ymm0, ymmword [rbp + 0x360]
vpxor ymm1, ymm0, ymmword [rbp + 0x10e0]
vmovdqa ymmword [rbp + 0x360], ymm1
lea rdx, [rbp + 0x360]
lea rcx, [rbp + 0x1390]
vzeroupper
call fcn.140007bd0
nop
mov r8b, 1
mov rdx, rbx
mov rcx, rax
call fcn.140013840
nop
lea rcx, [rbp + 0x1e00]
call fcn.140008360
jmp 0x14003577c
movabs rsi, 0x7306885d63265eca
movabs r14, 0xdb1c005049655225
movabs r15, 0x224a243381b0447c
movabs rax, 0x7cb30ac1230fd333
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x380], rax
movabs rax, 0xcb17ce50790bbe69
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x388], rax
movabs rax, 0xbe6e6f243a4b2644
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x390], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x398], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x10c0], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x10c8], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x10d0], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x10d8], rax
vmovdqu ymm0, ymmword [rbp + 0x380]
vpxor ymm1, ymm0, ymmword [rbp + 0x10c0]
vmovdqa ymmword [rbp + 0x380], ymm1
lea rdx, [rbp + 0x380]
lea rcx, [rbp + 0x12f0]
vzeroupper
call fcn.140007bd0
nop
lea rcx, [rbp + 0x12f0]
call fcn.140030500
movzx ebx, al
lea rcx, [rbp + 0x12f0]
call fcn.140007bc0
test bl, bl
jne 0x140035a37
lea rax, [rbp + 0x13b0]
mov qword [rbp + 0x10], rax
lea rdx, [0x140229140]
lea rcx, [rbp + 0x13b0]
call fcn.14000a3c0
mov rbx, rax
movabs rdi, 0x73f944db2019c20c
mov qword [rbp], rdi
mov rcx, qword [rbp]
mov qword [rbp + 0x250], rcx
movabs rax, 0xae7fde4c6e1cae69
mov qword [rbp], rax
mov rcx, qword [rbp]
mov qword [rbp + 0x258], rcx
mov qword [rbp], r13
mov rcx, qword [rbp]
mov qword [rbp + 0x740], rcx
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x748], rax
movdqa xmm0, xmmword [rbp + 0x250]
pxor xmm0, xmmword [rbp + 0x740]
movdqa xmmword [rbp + 0x250], xmm0
lea rdx, [rbp + 0x250]
lea rcx, [rbp + 0x13d0]
call fcn.140007bd0
nop
xor r8d, r8d
mov rdx, rbx
mov rcx, rax
call fcn.140013840
movabs rax, 0x539c30c03c09d51e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x260], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x268], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x750], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x758], rax
movdqa xmm0, xmmword [rbp + 0x260]
pxor xmm0, xmmword [rbp + 0x750]
movdqa xmmword [rbp + 0x260], xmm0
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x3a0], rax
movabs rax, 0xea5fde4c6e1cae49
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x3a8], rax
movabs rax, 0xeb4720342c0c3c40
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x3b0], rax
movabs rax, 0x7306885d3e1266b2
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x3b8], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x40], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x48], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x50], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x58], rax
vmovdqu ymm0, ymmword [rbp + 0x40]
vpxor ymm1, ymm0, ymmword [rbp + 0x3a0]
vmovdqa ymmword [rbp + 0x3a0], ymm1
mov r9d, 0x40010
lea r8, [rbp + 0x260]
lea rdx, [rbp + 0x3a0]
xor ecx, ecx
vzeroupper
call qword [sym.imp.USER32.dll_MessageBoxA]
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
movabs rax, 0x1dd37392163fe816
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x3c0], rax
movabs rax, 0x9b4a906c47308e28
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x3c8], rax
movabs rax, 0xea215315072c1e05
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x3d0], rax
movabs rax, 0x7306885d63265ef8
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x3d8], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x10a0], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x10a8], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x10b0], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x10b8], rax
vmovdqu ymm0, ymmword [rbp + 0x3c0]
vpxor ymm1, ymm0, ymmword [rbp + 0x10a0]
vmovdqa ymmword [rbp + 0x3c0], ymm1
lea rcx, [rbp + 0x3c0]
vzeroupper
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, [rbp + 0x78]
lea rcx, [rbp + 0x13f0]
call fcn.14000a3c0
mov rcx, rax
call fcn.14000c900
test al, al
jne 0x140035bcf
lea rax, [rbp + 0x1410]
mov qword [rbp + 0x10], rax
lea rdx, [0x140229140]
lea rcx, [rbp + 0x1410]
call fcn.14000a3c0
mov rbx, rax
movabs rax, 0x2ad910d9301ad518
mov qword [rbp], rax
mov rcx, qword [rbp]
mov qword [rbp + 0x270], rcx
movabs rax, 0xae7f990c2b17ac7e
mov qword [rbp], rax
mov rcx, qword [rbp]
mov qword [rbp + 0x278], rcx
mov qword [rbp], r13
mov rcx, qword [rbp]
mov qword [rbp + 0x760], rcx
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x768], rax
movdqa xmm0, xmmword [rbp + 0x270]
pxor xmm0, xmmword [rbp + 0x760]
movdqa xmmword [rbp + 0x270], xmm0
lea rdx, [rbp + 0x270]
lea rcx, [rbp + 0x1430]
call fcn.140007bd0
nop
mov r8b, 1
mov rdx, rbx
mov rcx, rax
call fcn.140013840
call fcn.14000bba0
lea rax, [rbp + 0x1450]
mov qword [rbp + 0x10], rax
lea rdx, [rbp + 0x1af0]
lea rcx, [rbp + 0x1450]
call fcn.14000a3c0
mov rdi, rax
lea rax, [rbp + 0x1470]
mov qword [rbp + 0x60], rax
lea rdx, [rbp + 0x1b98]
lea rcx, [rbp + 0x1470]
call fcn.14000a3c0
mov rbx, rax
lea rdx, [0x140229140]
lea rcx, [rbp + 0x1490]
call fcn.14000a3c0
nop
mov r8, rdi
mov rdx, rbx
mov rcx, rax
call fcn.140032610
test al, al
jne 0x140035d3c
lea rax, [rbp + 0x14b0]
mov qword [rbp + 0x10], rax
lea rdx, [0x140229140]
lea rcx, [rbp + 0x14b0]
call fcn.14000a3c0
mov rbx, rax
movabs rax, 0x73f444c73202c210
mov qword [rbp], rax
mov rcx, qword [rbp]
mov qword [rbp + 0x3e0], rcx
movabs rax, 0x8e10d9516214a45b
mov qword [rbp], rax
mov rcx, qword [rbp]
mov qword [rbp + 0x3e8], rcx
movabs rax, 0xdb1c00503d0c2a60
mov qword [rbp], rax
mov rcx, qword [rbp]
mov qword [rbp + 0x3f0], rcx
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x3f8], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x40], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x48], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x50], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x58], rax
vmovdqu ymm0, ymmword [rbp + 0x3e0]
vpxor ymm1, ymm0, ymmword [rbp + 0x40]
vmovdqa ymmword [rbp + 0x3e0], ymm1
lea rdx, [rbp + 0x3e0]
lea rcx, [rbp + 0x14d0]
vzeroupper
call fcn.140007bd0
nop
mov r8b, 1
mov rdx, rbx
mov rcx, rax
call fcn.140013840
mov ecx, 0x1f4
call qword [sym.imp.KERNEL32.dll_Sleep]
call fcn.140030820
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
mov edx, 5
call qword [sym.imp.USER32.dll_ShowWindow]
call fcn.14000c310
test al, al
jne 0x1400363c0
movabs rax, 0x7cb30ac1230fd333
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xae0], rax
movabs rax, 0xcb17ce50790bbe69
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xae8], rax
movabs rax, 0xbe6e6f243a4b2644
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xaf0], rax
movabs rax, 0x1f6fee3c094132e5
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xaf8], rax
movabs rax, 0x3d5b29c0b2c9a34a
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xb00], rax
movabs rax, 0x224a243381b02104
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xb08], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0xf00], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0xf08], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0xf10], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0xf18], rax
movabs rbx, 0x58756596e29b8c2f
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0xf20], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0xf28], rax
vmovdqu ymm0, ymmword [rbp + 0xae0]
vpxor ymm1, ymm0, ymmword [rbp + 0xf00]
vmovdqa ymmword [rbp + 0xae0], ymm1
vmovdqa xmm0, xmmword [rbp + 0xb00]
vpxor xmm0, xmm0, xmmword [rbp + 0xf20]
vmovdqa xmmword [rbp + 0xb00], xmm0
lea rdx, [rbp + 0xae0]
lea rcx, [rbp + 0x1180]
vzeroupper
call fcn.140007bd0
nop
lea rcx, [rbp + 0x830]
call fcn.14000bee0
nop
movabs rax, 0x539c30b23603c275
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x280], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x288], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x770], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x778], rax
movdqa xmm0, xmmword [rbp + 0x280]
pxor xmm0, xmmword [rbp + 0x770]
movdqa xmmword [rbp + 0x280], xmm0
lea rdx, [rbp + 0x280]
lea rcx, [rbp + 0x830]
call fcn.140038d70
lea rdx, [rbp + 0x830]
lea rcx, [rbp + 0x1180]
call fcn.14000bfe0
test al, al
je 0x1400361dd
movabs rax, 0x37fd5ffe730cc215
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x9a0], rax
movabs rax, 0xc211da504f5fbf6d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x9a8], rax
movabs rax, 0xb74c20342c01334a
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x9b0], rax
movabs rax, 0x1d73da7d06553faf
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x9b8], rax
movabs rax, 0x58756596e29b8c0f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x9c0], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x9c8], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0xec0], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0xec8], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0xed0], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0xed8], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0xee0], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0xee8], rax
vmovdqu ymm0, ymmword [rbp + 0x9a0]
vpxor ymm1, ymm0, ymmword [rbp + 0xec0]
vmovdqa ymmword [rbp + 0x9a0], ymm1
vmovdqa xmm0, xmmword [rbp + 0x9c0]
vpxor xmm0, xmm0, xmmword [rbp + 0xee0]
vmovdqa xmmword [rbp + 0x9c0], xmm0
lea r8, [rbp + 0x830]
lea rdx, [rbp + 0x9a0]
lea rcx, [rbp + 0x1310]
vzeroupper
call fcn.140039900
nop
movabs rax, 0x53f855c6321fd70e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x290], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x298], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x780], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x788], rax
movdqa xmm0, xmmword [rbp + 0x290]
pxor xmm0, xmmword [rbp + 0x780]
movdqa xmmword [rbp + 0x290], xmm0
lea rcx, [rbp + 0x1310]
call fcn.140007bb0
mov r9d, 0x40080
lea r8, [rbp + 0x290]
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
call fcn.14000c0a0
nop
lea rcx, [rbp + 0x1310]
call fcn.140007bc0
nop
lea rcx, [rbp + 0x830]
call fcn.140007bc0
nop
lea rcx, [rbp + 0x1180]
call fcn.140007bc0
nop
lea rcx, [rbp + 0x11a0]
call fcn.140007bc0
nop
lea rcx, [rbp + 0x1be0]
call fcn.14000a4a0
nop
lea rcx, [rbp + 0x78]
call fcn.140007bc0
nop
lea rcx, [rbp + 0x11c0]
call fcn.140007bc0
nop
lea rcx, [rbp + 0x1930]
call fcn.140037bd0
nop
lea rcx, [rbp + 0x11e0]
call fcn.140007bc0
nop
lea rcx, [rbp + 0x1200]
call fcn.140007bc0
nop
lea rcx, [rbp + 0x1220]
call fcn.140007bc0
nop
lea rcx, [rbp + 0x1240]
call fcn.140007bc0
nop
lea rcx, [rbp + 0x1260]
call fcn.140007bc0
nop
lea rcx, [rbp + 0x1280]
call fcn.140007bc0
nop
lea rcx, [rbp + 0x12a0]
call fcn.140007bc0
mov eax, reloc.WS2_32.dll_ntohs
lea r11, [rsp + 0x2090]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
movabs rax, 0x539c30c03c09d51e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x2a0], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x2a8], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x820], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x828], rax
movdqa xmm0, xmmword [rbp + 0x2a0]
pxor xmm0, xmmword [rbp + 0x820]
movdqa xmmword [rbp + 0x2a0], xmm0
movabs rax, 0x37fd5ffe730cc215
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x400], rax
movabs rax, 0xc211da504f5fbf6d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x408], rax
movabs rax, 0xb27d46706901334a
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x410], rax
movabs rax, 0x7306885d63423ba6
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x418], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x40], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x48], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x50], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x58], rax
vmovdqu ymm0, ymmword [rbp + 0x400]
vpxor ymm1, ymm0, ymmword [rbp + 0x40]
vmovdqa ymmword [rbp + 0x400], ymm1
mov r9d, 0x40030
lea r8, [rbp + 0x2a0]
lea rdx, [rbp + 0x400]
xor ecx, ecx
vzeroupper
call qword [sym.imp.USER32.dll_MessageBoxA]
nop
lea rcx, [rbp + 0x830]
call fcn.140007bc0
nop
lea rcx, [rbp + 0x1180]
call fcn.140007bc0
nop
lea rcx, [rbp + 0x11a0]
call fcn.140007bc0
nop
lea rcx, [rbp + 0x1be0]
call fcn.14000a4a0
nop
lea rcx, [rbp + 0x78]
call fcn.140007bc0
nop
lea rcx, [rbp + 0x11c0]
call fcn.140007bc0
nop
lea rcx, [rbp + 0x1930]
call fcn.140037bd0
nop
lea rcx, [rbp + 0x11e0]
call fcn.140007bc0
nop
lea rcx, [rbp + 0x1200]
call fcn.140007bc0
nop
lea rcx, [rbp + 0x1220]
call fcn.140007bc0
nop
lea rcx, [rbp + 0x1240]
call fcn.140007bc0
nop
lea rcx, [rbp + 0x1260]
call fcn.140007bc0
nop
lea rcx, [rbp + 0x1280]
call fcn.140007bc0
nop
lea rcx, [rbp + 0x12a0]
call fcn.140007bc0
mov eax, 1
jmp 0x1400361b7
movabs rax, 0x539c008a624a9263
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x2b0], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x2b8], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x790], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x798], rax
movdqa xmm0, xmmword [rbp + 0x2b0]
pxor xmm0, xmmword [rbp + 0x790]
movdqa xmmword [rbp + 0x2b0], xmm0
lea rdx, [rbp + 0x2b0]
lea rcx, [rbp + 0x14f0]
call fcn.140007bd0
mov r8, rax
lea rdx, [rbp + 0x12c8]
lea rcx, [rbp + 0x1930]
call fcn.1400482d0
nop
cmp byte [0x14022a698], 0
je 0x14003653c
lea rax, [rbp + 0x1510]
mov qword [rbp + 0x10], rax
lea rdx, [0x140229140]
lea rcx, [rbp + 0x1510]
call fcn.14000a3c0
mov rbx, rax
movabs rax, 0x38fd53923615c512
mov qword [rbp], rax
mov rcx, qword [rbp]
mov qword [rbp + 0x420], rcx
movabs rax, 0xc01ec95e660da47c
mov qword [rbp], rax
mov rcx, qword [rbp]
mov qword [rbp + 0x428], rcx
mov qword [rbp], r14
mov rcx, qword [rbp]
mov qword [rbp + 0x430], rcx
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x438], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x40], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x48], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x50], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x58], rax
vmovdqu ymm0, ymmword [rbp + 0x420]
vpxor ymm1, ymm0, ymmword [rbp + 0x40]
vmovdqa ymmword [rbp + 0x420], ymm1
lea rdx, [rbp + 0x420]
lea rcx, [rbp + 0x1530]
vzeroupper
call fcn.140007bd0
nop
mov r8b, 1
mov rdx, rbx
mov rcx, rax
call fcn.140013840
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
movabs rbx, 0x3cf85edb04279d18
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x4a0], rax
movabs rax, 0xf20fc05a5f23be7f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x4a8], rax
movabs rax, 0xdb68782467163756
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x4b0], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x4b8], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x1080], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x1088], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x1090], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x1098], rax
vmovdqu ymm0, ymmword [rbp + 0x4a0]
vpxor ymm1, ymm0, ymmword [rbp + 0x1080]
vmovdqa ymmword [rbp + 0x4a0], ymm1
lea rdx, [rbp + 0x4a0]
lea rcx, [rbp + 0x1330]
vzeroupper
call fcn.140007bd0
nop
lea rdx, [rbp + 0x1b98]
lea rcx, [rbp + 0x1330]
call fcn.140033210
nop
lea rcx, [rbp + 0x1330]
call fcn.140007bc0
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0xa60], rax
movabs rax, 0xcb0bde465823be7f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xa68], rax
movabs rax, 0xab6f763e15576148
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xa70], rax
movabs rax, 0x5d36b86955563fa9
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xa78], rax
movabs rax, 0x58756596e2f7e04b
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xa80], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0xa88], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0xe80], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0xe88], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0xe90], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0xe98], rax
movabs rbx, 0x58756596e29b8c2f
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0xea0], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0xea8], rax
vmovdqu ymm0, ymmword [rbp + 0xa60]
vpxor ymm1, ymm0, ymmword [rbp + 0xe80]
vmovdqa ymmword [rbp + 0xa60], ymm1
vmovdqa xmm0, xmmword [rbp + 0xa80]
vpxor xmm0, xmm0, xmmword [rbp + 0xea0]
vmovdqa xmmword [rbp + 0xa80], xmm0
lea rcx, [rbp + 0xa60]
vzeroupper
call qword [sym.imp.KERNEL32.dll_DeleteFileA]
lea rcx, [rbp + 0x1350]
call fcn.1400338d0
nop
lea rcx, [rbp + 0x1350]
call fcn.140038ca0
test al, al
jne 0x140037ad2
movabs rax, 0x23fd5dd3360fd407
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xaa0], rax
movabs rax, 0xc112c0506823be78
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xaa8], rax
movabs rax, 0xbc4074233c370e4b
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xab0], rax
movabs rax, 0x763fb2e020826a6
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xab8], rax
movabs rax, 0x58756596e29b8c5c
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xac0], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0xac8], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0xe40], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0xe48], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0xe50], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0xe58], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0xe60], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0xe68], rax
vmovdqu ymm0, ymmword [rbp + 0xaa0]
vpxor ymm1, ymm0, ymmword [rbp + 0xe40]
vmovdqa ymmword [rbp + 0xaa0], ymm1
vmovdqa xmm0, xmmword [rbp + 0xac0]
vpxor xmm0, xmm0, xmmword [rbp + 0xe60]
vmovdqa xmmword [rbp + 0xac0], xmm0
lea r8, [rbp + 0xaa0]
lea rdx, [rbp + 0x1350]
lea rcx, [rbp + 0x1550]
vzeroupper
call fcn.140039970
mov rdx, rax
lea rcx, [0x140228e90]
call fcn.14000a370
lea rcx, [rbp + 0x1550]
call fcn.140007bc0
lea rcx, [0x140228e90]
call fcn.140033bc0
test al, al
jne 0x1400369e7
movabs rax, 0x539c078a604e9268
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x2c0], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x2c8], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x7a0], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x7a8], rax
movdqa xmm0, xmmword [rbp + 0x2c0]
pxor xmm0, xmmword [rbp + 0x7a0]
movdqa xmmword [rbp + 0x2c0], xmm0
lea rdx, [rbp + 0x2c0]
lea rcx, [rbp + 0x1570]
call fcn.140007bd0
mov r8, rax
lea rdx, [rbp + 0xca0]
lea rcx, [rbp + 0x1930]
call fcn.1400482d0
nop
mov dword [rsp + 0x20], 1
mov r9d, 0x40
lea r8d, [r9 - 0x1e]
lea rdx, [0x140228e90]
lea rcx, [rbp + 0x1cf0]
call fcn.1400386d0
nop
lea rcx, [rbp + 0x1cf0]
call fcn.140038670
test al, al
je 0x1400369ce
lea rcx, [rbp + 0xca0]
call fcn.140038840
mov rbx, rax
xor edx, edx
lea rcx, [rbp + 0xca0]
call fcn.140038830
mov r8, rbx
mov rdx, rax
lea rcx, [rbp + 0x1cf0]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::write_char_const____ptr64__long_long___int64_____ptr64]
lea rcx, [rbp + 0x1cf0]
call fcn.140008f90
movabs rbx, 0x58756596e29b8c2f
lea rcx, [rbp + 0x1cf0]
call fcn.140008360
nop
lea rcx, [rbp + 0xca0]
call fcn.140038850
lea rdx, [0x14000ae80]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov r8, rax
movabs rax, 0x3df544db322c8751
mov qword [rbp], rax
mov rcx, qword [rbp]
mov qword [rbp + 0x480], rcx
movabs rax, 0xcf188d4d6419ed6f
mov qword [rbp], rax
mov rcx, qword [rbp]
mov qword [rbp + 0x488], rcx
movabs rax, 0xab73203f3d453748
mov qword [rbp], rax
mov rcx, qword [rbp]
mov qword [rbp + 0x490], rcx
movabs rax, 0x730688734d0830af
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x498], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x1060], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x1068], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x1070], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x1078], rax
vmovdqu ymm0, ymmword [rbp + 0x480]
vpxor ymm1, ymm0, ymmword [rbp + 0x1060]
vmovdqa ymmword [rbp + 0x480], ymm1
lea rdx, [rbp + 0x480]
mov rcx, r8
vzeroupper
call fcn.140007ff0
movabs rdi, 0x539c30b22708d209
movabs r15, 0x53ec40d30c37e308
nop dword [rax]
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x2d0], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x2d8], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x7b0], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x7b8], rax
movdqa xmm0, xmmword [rbp + 0x2d0]
pxor xmm0, xmmword [rbp + 0x7b0]
movdqa xmmword [rbp + 0x2d0], xmm0
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x2e0], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x2e8], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x7c0], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x7c8], rax
movdqa xmm0, xmmword [rbp + 0x2e0]
pxor xmm0, xmmword [rbp + 0x7c0]
movdqa xmmword [rbp + 0x2e0], xmm0
lea rdx, [rbp + 0x2d0]
lea rcx, [rbp + 0x2e0]
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
je 0x140036ae0
lea rdx, [0x14000ae80]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov r8, rax
movabs rax, 0x36ef51d73f2b8751
mov qword [rbp], rax
mov rcx, qword [rbp]
mov qword [rbp + 0x460], rcx
movabs rax, 0x8051834b621eba28
mov qword [rbp], rax
mov rcx, qword [rbp]
mov qword [rbp + 0x468], rcx
mov qword [rbp], r14
mov rcx, qword [rbp]
mov qword [rbp + 0x470], rcx
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x478], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x1040], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x1048], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x1050], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x1058], rax
vmovdqu ymm0, ymmword [rbp + 0x460]
vpxor ymm1, ymm0, ymmword [rbp + 0x1040]
vmovdqa ymmword [rbp + 0x460], ymm1
lea rdx, [rbp + 0x460]
mov rcx, r8
vzeroupper
call fcn.140007ff0
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
call fcn.140033840
movabs rcx, 0x3cf85edb04279d18
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0xb20], rax
movabs rdx, 0xcb0bde465823be7f
mov qword [rbp], rdx
mov rax, qword [rbp]
mov qword [rbp + 0xb28], rax
movabs r8, 0xab6f763e15576148
mov qword [rbp], r8
mov rax, qword [rbp]
mov qword [rbp + 0xb30], rax
movabs rax, 0x1f62a66955563fa9
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xb38], rax
movabs rax, 0x58756596e29b8c43
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xb40], rax
movabs r15, 0x224a243381b0447c
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0xb48], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0xc60], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0xc68], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0xc70], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0xc78], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0xc80], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0xc88], rax
vmovdqu ymm0, ymmword [rbp + 0xb20]
vpxor ymm1, ymm0, ymmword [rbp + 0xc60]
vmovdqa ymmword [rbp + 0xb20], ymm1
vmovdqa xmm0, xmmword [rbp + 0xb40]
vpxor xmm0, xmm0, xmmword [rbp + 0xc80]
vmovdqa xmmword [rbp + 0xb40], xmm0
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x9e0], rax
mov qword [rbp], rdx
mov rax, qword [rbp]
mov qword [rbp + 0x9e8], rax
mov qword [rbp], r8
mov rax, qword [rbp]
mov qword [rbp + 0x9f0], rax
movabs rax, 0x5d36b86955563fa9
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x9f8], rax
movabs rax, 0x58756596e2f7e04b
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xa00], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0xa08], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0xcc0], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0xcc8], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0xcd0], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0xcd8], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0xce0], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0xce8], rax
vmovdqu ymm0, ymmword [rbp + 0x9e0]
vpxor ymm1, ymm0, ymmword [rbp + 0xcc0]
vmovdqa ymmword [rbp + 0x9e0], ymm1
vmovdqa xmm0, xmmword [rbp + 0xa00]
vpxor xmm0, xmm0, xmmword [rbp + 0xce0]
vmovdqa xmmword [rbp + 0xa00], xmm0
xor r8d, r8d
lea rdx, [rbp + 0x9e0]
lea rcx, [rbp + 0xb20]
vzeroupper
call qword [sym.imp.KERNEL32.dll_MoveFileExA]
mov ecx, 0x1f4
call qword [sym.imp.KERNEL32.dll_Sleep]
movabs rax, 0x53cb30ee5341a718
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x940], rax
movabs rax, 0xae10ad5b0b11cd61
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x948], rax
movabs rax, 0xdb4f000c49165252
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x950], rax
movabs rax, 0x7363882963555eb3
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x958], rax
movabs rax, 0x582965a4e2a88c42
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x960], rax
movabs rax, 0x223a244081c64412
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x968], rax
movabs rax, 0xc96d2464c97846ca
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x970], rax
movabs rax, 0xcc31940563e71aba
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x978], rax
movabs rax, 0x63e99c9a4236d1cf
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x980], rax
movabs rcx, 0xe0ae3ca786dca3f0
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x988], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0xf40], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0xf48], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0xf50], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0xf58], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0xf60], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0xf68], rax
movabs rax, 0xc95b2414c91946a9
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xf70], rax
movabs rax, 0xcc5d946163c91a8e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xf78], rax
movabs rax, 0x63e99c9a4236d1a3
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xf80], rax
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0xf88], rax
vmovdqu ymm0, ymmword [rbp + 0x940]
vpxor ymm1, ymm0, ymmword [rbp + 0xf40]
vmovdqa ymmword [rbp + 0x940], ymm1
vmovdqu ymm0, ymmword [rbp + 0x960]
vpxor ymm1, ymm0, ymmword [rbp + 0xf60]
vmovdqa ymmword [rbp + 0x960], ymm1
vmovdqa xmm0, xmmword [rbp + 0x980]
vpxor xmm0, xmm0, xmmword [rbp + 0xf80]
vmovdqa xmmword [rbp + 0x980], xmm0
lea rdx, [rbp + 0x940]
lea rcx, [rbp + 0x1590]
vzeroupper
call fcn.1400090f0
nop
mov dword [rsp + 0x20], 1
mov r9d, 0x40
lea r8d, [r9 - 0x1e]
lea rdx, [rbp + 0x1590]
lea rcx, [rbp + 0x1f10]
call fcn.140038680
nop
lea rcx, [rbp + 0x1f10]
call fcn.140038670
test al, al
je 0x140037149
lea rcx, [rbp + 0x12c8]
call fcn.140038840
mov rbx, rax
xor edx, edx
lea rcx, [rbp + 0x12c8]
call fcn.140038830
mov r8, rbx
mov rdx, rax
lea rcx, [rbp + 0x1f10]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::write_char_const____ptr64__long_long___int64_____ptr64]
lea rcx, [rbp + 0x1f10]
call fcn.140008f90
movabs rax, 0x539c30b25308cb38
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x2f0], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x2f8], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x7d0], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x7d8], rax
movdqa xmm0, xmmword [rbp + 0x2f0]
pxor xmm0, xmmword [rbp + 0x7d0]
movdqa xmmword [rbp + 0x2f0], xmm0
lea rcx, [rbp + 0x2f0]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, [0x14000ae80]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov r8, rax
movabs rax, 0x21bc44c126298751
mov qword [rbp], rax
mov rcx, qword [rbp]
mov qword [rbp + 0x540], rcx
movabs rax, 0x8051ca516211a37d
mov qword [rbp], rax
mov rcx, qword [rbp]
mov qword [rbp + 0x548], rcx
movabs rax, 0xdb35743928127a0b
mov qword [rbp], rax
mov rcx, qword [rbp]
mov qword [rbp + 0x550], rcx
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x558], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x1160], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x1168], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x1170], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x1178], rax
vmovdqu ymm0, ymmword [rbp + 0x1160]
vpxor ymm1, ymm0, ymmword [rbp + 0x540]
vmovdqa ymmword [rbp + 0x540], ymm1
lea rdx, [rbp + 0x540]
mov rcx, r8
vzeroupper
call fcn.140007ff0
movabs rbx, 0xae7fad4c781ea14b
movabs r15, 0x37f267cb2712c90e
nop
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0xa0], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0xa8], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x7e0], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x7e8], rax
movdqa xmm0, xmmword [rbp + 0xa0]
pxor xmm0, xmmword [rbp + 0x7e0]
movdqa xmmword [rbp + 0xa0], xmm0
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0xb0], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0xb8], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x7f0], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x7f8], rax
movdqa xmm0, xmmword [rbp + 0xb0]
pxor xmm0, xmmword [rbp + 0x7f0]
movdqa xmmword [rbp + 0xb0], xmm0
lea rdx, [rbp + 0xa0]
lea rcx, [rbp + 0xb0]
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
je 0x1400372a0
movabs rax, 0x539c30b25308cb38
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xc0], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0xc8], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x800], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x808], rax
movdqa xmm0, xmmword [rbp + 0xc0]
pxor xmm0, xmmword [rbp + 0x800]
movdqa xmmword [rbp + 0xc0], xmm0
lea rcx, [rbp + 0xc0]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, [0x14000ae80]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov r8, rax
movabs rax, 0x30bc44db322c8751
mov qword [rbp], rax
mov rcx, qword [rbp]
mov qword [rbp + 0xb60], rcx
movabs rax, 0xcf10c11f7f1ea860
mov qword [rbp], rax
mov rcx, qword [rbp]
mov qword [rbp + 0xb68], rcx
movabs rax, 0xb47828702e0b3b41
mov qword [rbp], rax
mov rcx, qword [rbp]
mov qword [rbp + 0xb70], rcx
movabs rax, 0x1675e73100062aa4
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xb78], rax
movabs rax, 0x710700f283f4e00f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xb80], rax
movabs rax, 0x224a2433819e6a52
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xb88], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0xe00], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0xe08], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0xe10], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0xe18], rax
movabs rbx, 0x58756596e29b8c2f
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0xe20], rax
movabs r15, 0x224a243381b0447c
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0xe28], rax
vmovdqu ymm0, ymmword [rbp + 0xe00]
vpxor ymm1, ymm0, ymmword [rbp + 0xb60]
vmovdqa ymmword [rbp + 0xb60], ymm1
vmovdqa xmm2, xmmword [rbp + 0xb80]
vpxor xmm2, xmm2, xmmword [rbp + 0xe20]
vmovdqa xmmword [rbp + 0xb80], xmm2
lea rdx, [rbp + 0xb60]
mov rcx, r8
vzeroupper
call fcn.140007ff0
lea rcx, [rbp + 0x300]
call fcn.14000d040
movabs rdi, 0x18dd74f51f3de61f
movsd xmm6, qword [0x1400ce660]
nop word [rax + rax]
lea rcx, [rbp + 0x308]
call fcn.14000d040
lea r8, [rbp + 0x300]
lea rdx, [rbp + 0x308]
lea rcx, [rbp + 0x12c0]
call fcn.140039e90
mov rdx, rax
lea rcx, [rbp + 0x310]
call fcn.14003a3e0
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0xd0], rax
movabs rax, 0xae7fec784a388b42
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xd8], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x810], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x818], rax
movdqa xmm0, xmmword [rbp + 0xd0]
pxor xmm0, xmmword [rbp + 0x810]
movdqa xmmword [rbp + 0xd0], xmm0
lea rcx, [rbp + 0xd0]
call qword [sym.imp.KERNEL32.dll_GlobalFindAtomA]
test ax, ax
je 0x140037878
lea rcx, [rbp + 0x310]
call fcn.140038a60
comisd xmm0, xmm6
jb 0x140037560
movabs rcx, 0x3cf85edb04279d18
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0xba0], rax
movabs rdx, 0xcb0bde465823be7f
mov qword [rbp], rdx
mov rax, qword [rbp]
mov qword [rbp + 0xba8], rax
movabs r8, 0xab6f763e15576148
mov qword [rbp], r8
mov rax, qword [rbp]
mov qword [rbp + 0xbb0], rax
movabs rax, 0x1f62a66955563fa9
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xbb8], rax
movabs rax, 0x58756596e29b8c43
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xbc0], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0xbc8], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0xdc0], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0xdc8], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0xdd0], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0xdd8], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0xde0], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0xde8], rax
vmovdqu ymm0, ymmword [rbp + 0xdc0]
vpxor ymm1, ymm0, ymmword [rbp + 0xba0]
vmovdqa ymmword [rbp + 0xba0], ymm1
vmovdqa xmm2, xmmword [rbp + 0xbc0]
vpxor xmm2, xmm2, xmmword [rbp + 0xde0]
vmovdqa xmmword [rbp + 0xbc0], xmm2
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x860], rax
mov qword [rbp], rdx
mov rax, qword [rbp]
mov qword [rbp + 0x868], rax
mov qword [rbp], r8
mov rax, qword [rbp]
mov qword [rbp + 0x870], rax
movabs rax, 0x5d36b86955563fa9
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x878], rax
movabs rax, 0x58756596e2f7e04b
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x880], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x888], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0xd80], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0xd88], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0xd90], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0xd98], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0xda0], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0xda8], rax
vmovdqu ymm0, ymmword [rbp + 0xd80]
vpxor ymm1, ymm0, ymmword [rbp + 0x860]
vmovdqa ymmword [rbp + 0x860], ymm1
vmovdqa xmm2, xmmword [rbp + 0x880]
vpxor xmm2, xmm2, xmmword [rbp + 0xda0]
vmovdqa xmmword [rbp + 0x880], xmm2
lea rcx, [rbp + 0x860]
vzeroupper
call qword [sym.imp.KERNEL32.dll_DeleteFileA]
mov ecx, 0x1f4
call qword [sym.imp.KERNEL32.dll_Sleep]
xor r8d, r8d
lea rdx, [rbp + 0x860]
lea rcx, [rbp + 0xba0]
call qword [sym.imp.KERNEL32.dll_MoveFileExA]
mov edx, reloc.WLDAP32.dll_Ordinal_50
mov ecx, edx
call qword [sym.imp.KERNEL32.dll_Beep]
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
movabs rcx, 0x3cf85edb04279d18
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0xbe0], rax
movabs rdx, 0xcb0bde465823be7f
mov qword [rbp], rdx
mov rax, qword [rbp]
mov qword [rbp + 0xbe8], rax
movabs r8, 0xab6f763e15576148
mov qword [rbp], r8
mov rax, qword [rbp]
mov qword [rbp + 0xbf0], rax
movabs rax, 0x1f62a66955563fa9
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xbf8], rax
movabs rax, 0x58756596e29b8c43
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xc00], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0xc08], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0xd40], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0xd48], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0xd50], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0xd58], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0xd60], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0xd68], rax
vmovdqu ymm0, ymmword [rbp + 0xd40]
vpxor ymm1, ymm0, ymmword [rbp + 0xbe0]
vmovdqa ymmword [rbp + 0xbe0], ymm1
vmovdqa xmm2, xmmword [rbp + 0xc00]
vpxor xmm2, xmm2, xmmword [rbp + 0xd60]
vmovdqa xmmword [rbp + 0xc00], xmm2
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x8a0], rax
mov qword [rbp], rdx
mov rax, qword [rbp]
mov qword [rbp + 0x8a8], rax
mov qword [rbp], r8
mov rax, qword [rbp]
mov qword [rbp + 0x8b0], rax
movabs rax, 0x5d36b86955563fa9
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x8b8], rax
movabs rax, 0x58756596e2f7e04b
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x8c0], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x8c8], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0xd00], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0xd08], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0xd10], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0xd18], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0xd20], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0xd28], rax
vmovdqu ymm0, ymmword [rbp + 0xd00]
vpxor ymm1, ymm0, ymmword [rbp + 0x8a0]
vmovdqa ymmword [rbp + 0x8a0], ymm1
vmovdqa xmm2, xmmword [rbp + 0x8c0]
vpxor xmm2, xmm2, xmmword [rbp + 0xd20]
vmovdqa xmmword [rbp + 0x8c0], xmm2
lea rcx, [rbp + 0x8a0]
vzeroupper
call qword [sym.imp.KERNEL32.dll_DeleteFileA]
mov ecx, 0x1f4
call qword [sym.imp.KERNEL32.dll_Sleep]
xor r8d, r8d
lea rdx, [rbp + 0x8a0]
lea rcx, [rbp + 0xbe0]
call qword [sym.imp.KERNEL32.dll_MoveFileExA]
mov edx, 0x64
lea ecx, [rdx - 0x14]
call qword [sym.imp.KERNEL32.dll_Beep]
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
nop
lea rdx, [0x14000ae20]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov r8, rax
movabs rax, 0x73f151d727288751
mov qword [rbp], rax
mov rcx, qword [rbp]
mov qword [rbp + 0x340], rcx
movabs rax, 0xdc0de81f630bac58
mov qword [rbp], rax
mov rcx, qword [rbp]
mov qword [rbp + 0x348], rcx
movabs rax, 0xf52430287945204a
mov qword [rbp], rax
mov rcx, qword [rbp]
mov qword [rbp + 0x350], rcx
movabs rax, 0x7306885d632670e4
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x358], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x40], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x48], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x50], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x58], rax
vmovdqu ymm0, ymmword [rbp + 0x40]
vpxor ymm1, ymm0, ymmword [rbp + 0x340]
vmovdqa ymmword [rbp + 0x340], ymm1
lea rdx, [rbp + 0x340]
mov rcx, r8
vzeroupper
call fcn.140007ff0
mov ecx, 0x1388
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, reloc.WS2_32.dll_ntohs
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
int3