Function at 0x14006a8b0
Capabilities:
Create thread
Enumerate processes
Execute command
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
sub rsp, 0x290
lea rbp, [rsp + 0x60]
and rbp, 0xffffffffffffffe0
mov rax, qword [0x140180f00]
xor rax, rsp
mov qword [rbp + 0x220], rax
xor r12d, r12d
movabs rax, 0xcb24f17b4bfa4ce2
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x60], rax
movabs r13, 0x42dbccc6c69569c6
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x68], rax
movabs rdi, 0xcb24f17b4b892081
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x20], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x28], rax
movdqa xmm0, xmmword [rbp + 0x60]
xorps xmm0, xmmword [rbp + 0x20]
movdqa xmmword [rbp + 0x60], xmm0
lea rcx, [rbp + 0x60]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rbx, rax
mov edx, 4
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], r12d
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov edx, 0xc0000000
mov r8d, 3
lea rcx, [0x140168fd0]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [0x14025b850], rax
test rax, rax
je 0x14006aa2b
cmp rax, 0xffffffffffffffff
je 0x14006aa2b
mov edx, 2
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movabs rax, 0xb941871239cd008b
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1e0], rax
movabs rax, 0x31a8a9a5a5e03ae6
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1e8], rax
movabs rax, 0x1d5ca88c844c33ed
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1f0], rax
movabs rax, 0x43a6e5c8ea83f929
mov qword [rbp], rax
movabs rsi, 0x4386c4e88ee69d48
jmp 0x14006aa99
mov edx, 4
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movabs rax, 0xb941871239cd008b
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1e0], rax
movabs rax, 0x23b480e6b2fa27e6
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1e8], rax
movabs rax, 0x7210a8d4c84423ef
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1f0], rax
movabs rsi, 0x4386c4e88ee69d48
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x1f8], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x20], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x28], rax
movabs r14, 0x721088f5e820468b
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x30], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x38], rax
vmovdqu ymm0, ymmword [rbp + 0x1e0]
vpxor ymm1, ymm0, ymmword [rbp + 0x20]
lea rdx, [rbp + 0x1e0]
vmovdqa ymmword [rbp + 0x1e0], ymm1
vzeroupper
call fcn.140071aa0
lea rdx, [0x140071c80]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
xor edx, edx
mov ecx, 2
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rbx, rax
mov dword [rbp + 0xa0], pe_nt_image_headers64
lea rdx, [rbp + 0xa0]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_Process32First]
test eax, eax
je 0x14006ab70
lea rdx, str.notepad.exe
lea rcx, [rbp + 0xcc]
call qword [sym.imp.KERNEL32.dll_lstrcmpiA]
mov rcx, rbx
test eax, eax
je 0x14006ad0e
lea rdx, [rbp + 0xa0]
call qword [sym.imp.KERNEL32.dll_Process32Next]
test eax, eax
jne 0x14006ab40
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, r12d
mov dword [0x14025b858], eax
mov qword [rbp], r12
mov dword [rbp + 0x60], 0xcdd2abc
mov dword [rbp + 0x64], eax
lea rax, [rbp]
mov qword [rbp + 0x68], rax
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], r12d
mov qword [rsp + 0x20], r12
mov r9d, reloc.WS2_32.dll_recv
lea r8, [rbp + 0x60]
mov edx, 0x230e48
mov rcx, qword [0x14025b850]
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov rax, qword [rbp]
mov qword [0x14025b888], rax
mov dword [rbp + 8], r12d
lea rcx, str.Make_sure_to_set_which_overlay_youre_using
call fcn.14006a300
lea rdx, str.Choose_an_overlay:__n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140071aa0
lea rdx, str.1._Medal_Overlay_n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140071aa0
lea rdx, str.2._Nvidia_GeForce_Overlay_n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140071aa0
lea rdx, str.3._Visual_Studio_Overlay_Tobbi__open_only_one_of_them__n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140071aa0
lea rdx, str.4._Riva_Tuner_Overlay__not_fixed__n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140071aa0
lea rdx, str.5._Croshair_x__ask_for_the_files___n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140071aa0
lea rdx, str.Enter_your_choice:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140071aa0
lea rdx, [rbp + 8]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::operator___int____ptr64____ptr64]
mov ecx, dword [rbp + 8]
movabs rdx, 0x96226222cd57acaa
movabs r8, 0x9478d847f27c1075
sub ecx, 1
je 0x14006b2b5
sub ecx, 1
je 0x14006b17f
sub ecx, 1
je 0x14006b037
sub ecx, 1
je 0x14006ae54
cmp ecx, 1
je 0x14006ad1f
lea rdx, str.Invalid_choice.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140071aa0
lea rdx, [0x140071c80]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
xor eax, eax
mov rcx, qword [rbp + 0x220]
xor rcx, rsp
call fcn.14011c9c0
lea r11, [rsp + 0x290]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [rbp + 0xa8]
jmp 0x14006ab7c
movabs rax, 0xa245990838e652c2
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x60], rax
movabs rax, 0x42dbccc6c69531b4
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x68], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x20], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x28], rax
movdqa xmm0, xmmword [rbp + 0x60]
xorps xmm0, xmmword [rbp + 0x20]
movdqa xmmword [rbp + 0x60], xmm0
movabs rax, 0x9c7b941624fb48c2
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1e0], rax
movabs rax, 0x2cb29bb2a3f20daf
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1e8], rax
movabs rax, 0x721088f5e82077d4
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1f0], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x1f8], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x20], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x28], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x30], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x38], rax
vmovdqu ymm0, ymmword [rbp + 0x1e0]
vpxor ymm1, ymm0, ymmword [rbp + 0x20]
vmovdqa ymmword [rbp + 0x1e0], ymm1
lea r15, [rsp + 0x2b8]
movabs rdi, 0xff00ff00ff00ff00
mov qword [rbp + 0x28], rdi
mov qword [rbp + 0x30], r15
mov rbx, qword [r15]
xor rbx, rdi
mov qword [rbp + 0x20], rbx
mov qword [r15], r12
mov rax, qword [0x14025b978]
lea rdx, [rbp + 0x60]
lea rcx, [rbp + 0x1e0]
vzeroupper
call rax
nop
jmp 0x14006b3db
movabs rax, 0xae4a842f2aff49d3
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1e0], rax
movabs rax, 0x36a8a5b2a7e13ab4
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1e8], rax
movabs rax, 0x1766fa90bb5325e2
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1f0], rax
movabs rax, 0x4386c4e88ee69d3a
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1f8], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x20], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x28], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x30], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x38], rax
vmovdqu ymm0, ymmword [rbp + 0x1e0]
vpxor ymm1, ymm0, ymmword [rbp + 0x20]
vmovdqa ymmword [rbp + 0x1e0], ymm1
movabs rax, 0xfb10c14b71f146c0
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x60], rax
movabs rax, 0x78ebfefcf6a559f6
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x68], rax
movabs rax, 0x4120b8c5d91076bb
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x70], rax
movabs rax, 0x73b6f4d8bed6ad72
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x78], rax
movabs rax, 0xa448e877c24c2a45
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x80], rax
movabs rax, 0x96226222cd579c9a
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x88], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x20], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x28], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x30], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x38], rax
mov qword [rbp], r8
mov rax, qword [rbp]
mov qword [rbp + 0x40], rax
mov qword [rbp], rdx
mov rax, qword [rbp]
mov qword [rbp + 0x48], rax
vmovdqu ymm0, ymmword [rbp + 0x60]
vpxor ymm1, ymm0, ymmword [rbp + 0x20]
vmovdqa ymmword [rbp + 0x60], ymm1
vmovdqa xmm0, xmmword [rbp + 0x80]
vxorps xmm0, xmm0, xmmword [rbp + 0x40]
vmovdqa xmmword [rbp + 0x80], xmm0
lea r15, [rsp + 0x2b8]
movabs rdi, 0xff00ff00ff00ff00
mov qword [rbp + 0x28], rdi
mov qword [rbp + 0x30], r15
mov rbx, qword [r15]
xor rbx, rdi
mov qword [rbp + 0x20], rbx
mov qword [r15], r12
mov rax, qword [0x14025b978]
lea rdx, [rbp + 0x1e0]
lea rcx, [rbp + 0x60]
vzeroupper
call rax
nop
jmp 0x14006b3db
movabs rdx, 0x82719e092eea49c2
mov qword [rbp], rdx
mov rax, qword [rbp]
mov qword [rbp + 0x1e0], rax
movabs rcx, 0x27b6adb480f10791
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x1e8], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x1f0], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x1f8], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x20], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x28], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x30], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x38], rax
vmovdqu ymm0, ymmword [rbp + 0x1e0]
vpxor ymm1, ymm0, ymmword [rbp + 0x20]
vmovdqa ymmword [rbp + 0x1e0], ymm1
mov qword [rbp], rdx
mov rax, qword [rbp]
mov qword [rbp + 0x60], rax
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x68], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x70], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x78], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x20], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x28], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x30], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x38], rax
vmovdqu ymm0, ymmword [rbp + 0x60]
vpxor ymm1, ymm0, ymmword [rbp + 0x20]
vmovdqa ymmword [rbp + 0x60], ymm1
lea r15, [rsp + 0x2b8]
movabs rdi, 0xff00ff00ff00ff00
mov qword [rbp + 0x28], rdi
mov qword [rbp + 0x30], r15
mov rbx, qword [r15]
xor rbx, rdi
mov qword [rbp + 0x20], rbx
mov qword [r15], r12
mov rax, qword [0x14025b978]
lea rdx, [rbp + 0x1e0]
lea rcx, [rbp + 0x60]
vzeroupper
call rax
nop
jmp 0x14006b3db
movabs rax, 0x8c04b0320fc076cf
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1e0], rax
movabs rax, 0xdfba9a5b4fa0fa3
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1e8], rax
movabs rax, 0x7210f194845223fd
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1f0], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x1f8], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x20], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x28], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x30], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x38], rax
vmovdqu ymm0, ymmword [rbp + 0x1e0]
vpxor ymm1, ymm0, ymmword [rbp + 0x20]
vmovdqa ymmword [rbp + 0x1e0], ymm1
movabs rax, 0xe667a23466cf65c2
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x60], rax
movabs rax, 0x42db988381d12091
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x68], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x20], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x28], rax
vmovdqa xmm0, xmmword [rbp + 0x60]
vxorps xmm0, xmm0, xmmword [rbp + 0x20]
vmovdqa xmmword [rbp + 0x60], xmm0
lea r15, [rsp + 0x2b8]
movabs rdi, 0xff00ff00ff00ff00
mov qword [rbp + 0x28], rdi
mov qword [rbp + 0x30], r15
mov rbx, qword [r15]
xor rbx, rdi
mov qword [rbp + 0x20], rbx
mov qword [r15], r12
mov rax, qword [0x14025b978]
lea rdx, [rbp + 0x1e0]
lea rcx, [rbp + 0x60]
vzeroupper
call rax
nop
jmp 0x14006b3db
movabs rcx, 0xae52be172aed45cc
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x60], rax
movabs rax, 0x42dbccc6bff405b4
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x68], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x20], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x28], rax
movdqa xmm0, xmmword [rbp + 0x60]
xorps xmm0, xmmword [rbp + 0x20]
movdqa xmmword [rbp + 0x60], xmm0
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x1e0], rax
movabs rax, 0x31baa085bff405b4
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1e8], rax
movabs rax, 0x721088f5e82046f8
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1f0], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x1f8], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x20], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x28], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x30], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x38], rax
vmovdqu ymm0, ymmword [rbp + 0x1e0]
vpxor ymm1, ymm0, ymmword [rbp + 0x20]
vmovdqa ymmword [rbp + 0x1e0], ymm1
lea r15, [rsp + 0x2b8]
movabs rdi, 0xff00ff00ff00ff00
mov qword [rbp + 0x28], rdi
mov qword [rbp + 0x30], r15
mov rbx, qword [r15]
xor rbx, rdi
mov qword [rbp + 0x20], rbx
mov qword [r15], r12
mov rax, qword [0x14025b978]
lea rdx, [rbp + 0x60]
lea rcx, [rbp + 0x1e0]
vzeroupper
call rax
nop
xor rbx, rdi
mov qword [rbp + 0x20], rbx
mov qword [r15], rbx
mov qword [0x14025b7e0], rax
test rax, rax
jne 0x14006b56b
movabs rcx, 0xcb24f17b4b892081
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x60], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x68], rax
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x20], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x28], rax
movdqa xmm0, xmmword [rbp + 0x60]
xorps xmm0, xmmword [rbp + 0x20]
movdqa xmmword [rbp + 0x60], xmm0
movabs rax, 0xb94187346bf401fa
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x20], rax
movabs rax, 0x2eb2ad80e6ec08aa
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x28], rax
movabs rax, 0x743a8cbc50022ee
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x30], rax
movabs rax, 0x26e4e487fac6f62b
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x38], rax
movabs rax, 0x9478d847f27c6555
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x40], rax
movabs rdx, 0x96226222cd57acaa
mov qword [rbp], rdx
mov rax, qword [rbp]
mov qword [rbp + 0x48], rax
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x1e0], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x1e8], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x1f0], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x1f8], rax
movabs rax, 0x9478d847f27c1075
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x200], rax
mov qword [rbp], rdx
mov rax, qword [rbp]
mov qword [rbp + 0x208], rax
vmovdqu ymm0, ymmword [rbp + 0x1e0]
vpxor ymm1, ymm0, ymmword [rbp + 0x20]
vmovdqa ymmword [rbp + 0x20], ymm1
vmovdqa xmm2, xmmword [rbp + 0x40]
vxorps xmm2, xmm2, xmmword [rbp + 0x200]
vmovdqa xmmword [rbp + 0x40], xmm2
mov r9d, 0x40
lea r8, [rbp + 0x60]
lea rdx, [rbp + 0x20]
xor ecx, ecx
vzeroupper
call qword [sym.imp.USER32.dll_MessageBoxA]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
lea rcx, [0x140169ae4]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
lea rsi, [rsp + 0x2b8]
mov qword [rbp + 0x28], rdi
mov qword [rbp + 0x30], rsi
mov rbx, qword [rsi]
xor rbx, rdi
mov qword [rbp + 0x20], rbx
mov qword [rsi], r12
mov rax, qword [0x14025b880]
xor ecx, ecx
call rax
nop
xor rbx, rdi
mov qword [rsi], rbx
mov rcx, qword [0x14025bac8]
mov dword [rcx], eax
lea rsi, [rsp + 0x2b8]
mov qword [rbp + 0x28], rdi
mov qword [rbp + 0x30], rsi
mov rbx, qword [rsi]
xor rbx, rdi
mov qword [rbp + 0x20], rbx
mov qword [rsi], r12
mov rax, qword [0x14025b880]
mov ecx, 1
call rax
nop
xor rbx, rdi
mov qword [rsi], rbx
mov rcx, qword [0x14025bac8]
mov dword [rcx + 4], eax
mov rcx, qword [0x14025ba20]
call fcn.14005e9d0
test al, al
je 0x14006b76a
call fcn.14005e270
test al, al
je 0x14006b76a
call fcn.14003c860
cmp al, 1
jne 0x14006b76a
lea rsi, [rsp + 0x2b8]
mov qword [rbp + 0x1e8], rdi
mov qword [rbp + 0x1f0], rsi
mov rbx, qword [rsi]
xor rbx, rdi
mov qword [rbp + 0x1e0], rbx
mov qword [rsi], r12
mov ecx, 8
call fcn.14011d128
lea rcx, [0x140049ca0]
mov qword [rax], rcx
mov qword [rbp], rax
lea rcx, [rbp + 0x68]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r12d
mov r9, rax
lea r8, [0x140073ca0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x60], rax
test rax, rax
je 0x14006b75a
cmp dword [rbp + 0x68], 0
je 0x14006b74e
movaps xmm0, xmmword [rbp + 0x60]
movdqa xmmword [rbp + 0x20], xmm0
lea rcx, [rbp + 0x20]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x14006b74e
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x60], xmm0
mov ecx, 8
call fcn.14011d128
lea rcx, [0x14004c830]
mov qword [rax], rcx
mov qword [rbp], rax
lea rcx, [rbp + 0x68]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r12d
mov r9, rax
lea r8, [0x140073ca0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x60], rax
test rax, rax
je 0x14006b73e
cmp dword [rbp + 0x68], 0
je 0x14006b732
movaps xmm0, xmmword [rbp + 0x60]
movdqa xmmword [rbp + 0x20], xmm0
lea rcx, [rbp + 0x20]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x14006b732
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x60], xmm0
xor rbx, rdi
mov qword [rsi], rbx
call fcn.14005df80
jmp 0x14006acde
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp + 0x68], r12d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp + 0x68], r12d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ExitProcess]