Function at 0x1400a0630
Capabilities:
Allocate or change rwx memory
Contain obfuscated stackstrings

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rdi
push rbp
lea rbp, [rsp - 0x560]
sub rsp, 0x660
mov rax, qword [0x1404b75f0]
xor rax, rsp
mov qword [rbp + 0x558], rax
lea ebx, [rcx + 0xeda0]
mov dword [rbp + 0x60], 0xe3a00000
mov edi, ecx
mov dword [rbp + 0x64], 0xe12fff1e
mov rcx, qword [0x1404c1ac0]
lea rax, [rsp + 0x30]
mov r9d, 0x40
mov qword [rsp + 0x20], rax
mov edx, ebx
mov rcx, qword [rcx + 8]
lea r8d, [r9 - 0x38]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea r8, [rbp + 0x60]
mov r9d, 8
mov qword [rsp + 0x20], 0
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov rcx, qword [0x1404c1ac0]
mov r8d, 8
mov r9d, dword [rsp + 0x30]
mov edx, ebx
mov qword [rsp + 0x20], 0
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea rax, [rsp + 0x34]
mov r9d, 0x40
mov dword [rbp + 0x68], 0xbf009d6e
mov dword [rbp + 0x6c], 0xbf00bf00
lea ebx, [rdi + 0x109d8]
mov edx, ebx
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 8]
lea r8d, [r9 - 0x38]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea r8, [rbp + 0x68]
mov r9d, 8
mov qword [rsp + 0x20], 0
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov rcx, qword [0x1404c1ac0]
mov r8d, 8
mov r9d, dword [rsp + 0x34]
mov edx, ebx
mov qword [rsp + 0x20], 0
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea rax, [rsp + 0x30]
mov r9d, 0x40
mov dword [rbp + 0x70], 0xf908bf00
mov dword [rbp + 0x74], 0xc9991b
lea ebx, [rdi + 0x109e0]
mov edx, ebx
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 8]
lea r8d, [r9 - 0x38]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea r8, [rbp + 0x70]
mov r9d, 8
mov qword [rsp + 0x20], 0
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov rcx, qword [0x1404c1ac0]
mov r8d, 8
mov r9d, dword [rsp + 0x30]
mov edx, ebx
mov qword [rsp + 0x20], 0
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
lea rax, [rsp + 0x34]
mov dword [rbp + 0x78], 0xa8
mov qword [rsp + 0x20], rax
lea ebx, [rdi + 0x138b8]
mov dword [rbp + 0x7c], 0xa8
mov rcx, qword [0x1404c1ac0]
mov r9d, 0x40
mov edx, ebx
mov rcx, qword [rcx + 8]
lea r8d, [r9 - 0x38]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea r8, [rbp + 0x78]
mov r9d, 8
mov qword [rsp + 0x20], 0
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov rcx, qword [0x1404c1ac0]
mov r8d, 8
mov r9d, dword [rsp + 0x34]
mov edx, ebx
mov qword [rsp + 0x20], 0
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea rax, [rsp + 0x30]
mov r9d, 0x40
mov dword [rbp + 0x80], 0xa8
mov dword [rbp + 0x84], 0xa8
lea ebx, [rdi + 0x138c0]
mov edx, ebx
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 8]
lea r8d, [r9 - 0x38]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea r8, [rbp + 0x80]
mov r9d, 8
mov qword [rsp + 0x20], 0
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov rcx, qword [0x1404c1ac0]
mov r8d, 8
mov r9d, dword [rsp + 0x30]
mov edx, ebx
mov qword [rsp + 0x20], 0
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea rax, [rsp + 0x34]
mov r9d, 0x40
mov dword [rbp + 0x88], 0xa8
mov dword [rbp + 0x8c], 0xa8
lea ebx, [rdi + 0x138c8]
mov edx, ebx
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 8]
lea r8d, [r9 - 0x38]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea r8, [rbp + 0x88]
mov r9d, 8
mov qword [rsp + 0x20], 0
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov rcx, qword [0x1404c1ac0]
mov r8d, 8
mov r9d, dword [rsp + 0x34]
mov edx, ebx
mov qword [rsp + 0x20], 0
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea rax, [rsp + 0x30]
mov r9d, 0x40
mov dword [rbp + 0x90], 0xa8
mov dword [rbp + 0x94], 0xa8
lea ebx, [rdi + 0x138d0]
mov edx, ebx
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 8]
lea r8d, [r9 - 0x38]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea r8, [rbp + 0x90]
mov r9d, 8
mov qword [rsp + 0x20], 0
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov rcx, qword [0x1404c1ac0]
mov r8d, 8
mov r9d, dword [rsp + 0x30]
mov edx, ebx
mov qword [rsp + 0x20], 0
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea rax, [rsp + 0x34]
mov r9d, 0x40
mov dword [rbp + 0x98], 0xa8
mov dword [rbp + 0x9c], 0x754
lea ebx, [rdi + 0x138d8]
mov edx, ebx
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 8]
lea r8d, [r9 - 0x38]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea r8, [rbp + 0x98]
mov r9d, 8
mov qword [rsp + 0x20], 0
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov rcx, qword [0x1404c1ac0]
mov r8d, 8
mov r9d, dword [rsp + 0x34]
mov edx, ebx
mov qword [rsp + 0x20], 0
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea rax, [rsp + 0x30]
mov r9d, 0x40
mov dword [rbp + 0xa0], 0xa8
mov dword [rbp + 0xa4], 0xa8
lea ebx, [rdi + 0x138e8]
mov edx, ebx
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 8]
lea r8d, [r9 - 0x38]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea r8, [rbp + 0xa0]
mov r9d, 8
mov qword [rsp + 0x20], 0
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov rcx, qword [0x1404c1ac0]
mov r8d, 8
mov r9d, dword [rsp + 0x30]
mov edx, ebx
mov qword [rsp + 0x20], 0
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea rax, [rsp + 0x34]
mov r9d, 0x40
mov dword [rbp + 0xa8], 0xa8
mov dword [rbp + 0xac], 0x1ce
lea ebx, [rdi + 0x138f0]
mov edx, ebx
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 8]
lea r8d, [r9 - 0x38]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea r8, [rbp + 0xa8]
mov qword [rsp + 0x20], 0
mov r9d, 8
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov rcx, qword [0x1404c1ac0]
mov r8d, 8
mov r9d, dword [rsp + 0x34]
mov edx, ebx
mov qword [rsp + 0x20], 0
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea rax, [rsp + 0x30]
mov r9d, 0x40
mov dword [rbp + 0xb0], 0x47702000
mov dword [rbp + 0xb4], 0xa8
lea ebx, [rdi + 0x138f8]
mov edx, ebx
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 8]
lea r8d, [r9 - 0x38]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea r8, [rbp + 0xb0]
mov r9d, 8
mov qword [rsp + 0x20], 0
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov rcx, qword [0x1404c1ac0]
mov r8d, 8
mov r9d, dword [rsp + 0x30]
mov edx, ebx
mov qword [rsp + 0x20], 0
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea rax, [rsp + 0x34]
mov r9d, 0x40
mov dword [rbp + 0xb8], 0xa8
mov dword [rbp + 0xbc], 0xa8
lea ebx, [rdi + 0x13900]
mov edx, ebx
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 8]
lea r8d, [r9 - 0x38]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea r8, [rbp + 0xb8]
mov r9d, 8
mov qword [rsp + 0x20], 0
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov rcx, qword [0x1404c1ac0]
mov r8d, 8
mov r9d, dword [rsp + 0x34]
mov edx, ebx
mov qword [rsp + 0x20], 0
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea rax, [rsp + 0x30]
mov r9d, 0x40
mov dword [rbp + 0xc0], 0xa8
mov dword [rbp + 0xc4], 0xa8
lea ebx, [rdi + 0x13908]
mov edx, ebx
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 8]
lea r8d, [r9 - 0x38]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea r8, [rbp + 0xc0]
mov r9d, 8
mov qword [rsp + 0x20], 0
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov r9d, dword [rsp + 0x30]
mov r8d, 8
mov rcx, qword [0x1404c1ac0]
mov edx, ebx
mov qword [rsp + 0x20], 0
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea rax, [rsp + 0x34]
mov r9d, 0x40
mov dword [rbp + 0xc8], 0xa8
mov dword [rbp + 0xcc], 0xa8
lea ebx, [rdi + 0x13910]
mov edx, ebx
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 8]
lea r8d, [r9 - 0x38]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea r8, [rbp + 0xc8]
mov r9d, 8
mov qword [rsp + 0x20], 0
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov rcx, qword [0x1404c1ac0]
mov r8d, 8
mov r9d, dword [rsp + 0x34]
mov edx, ebx
mov qword [rsp + 0x20], 0
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea rax, [rsp + 0x30]
mov r9d, 0x40
mov dword [rbp + 0xd0], 0xa8
mov dword [rbp + 0xd4], 0x296
lea ebx, [rdi + 0x13918]
mov edx, ebx
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 8]
lea r8d, [r9 - 0x38]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea r8, [rbp + 0xd0]
mov r9d, 8
mov qword [rsp + 0x20], 0
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov rcx, qword [0x1404c1ac0]
mov r8d, 8
mov r9d, dword [rsp + 0x30]
mov edx, ebx
mov qword [rsp + 0x20], 0
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea rax, [rsp + 0x34]
mov r9d, 0x40
mov dword [rbp + 0xd8], 0x1e6
mov dword [rbp + 0xdc], 0xa8
lea ebx, [rdi + 0x13928]
mov edx, ebx
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 8]
lea r8d, [r9 - 0x38]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea r8, [rbp + 0xd8]
mov r9d, 8
mov qword [rsp + 0x20], 0
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov rcx, qword [0x1404c1ac0]
mov r8d, 8
mov r9d, dword [rsp + 0x34]
mov edx, ebx
mov qword [rsp + 0x20], 0
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
lea rax, [rsp + 0x30]
mov dword [rbp + 0xe0], 0xa8
mov dword [rbp + 0xe4], 0xa8
lea ebx, [rdi + 0x13930]
mov rcx, qword [0x1404c1ac0]
mov r9d, 0x40
mov edx, ebx
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 8]
lea r8d, [r9 - 0x38]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea r8, [rbp + 0xe0]
mov r9d, 8
mov qword [rsp + 0x20], 0
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov rcx, qword [0x1404c1ac0]
mov r8d, 8
mov r9d, dword [rsp + 0x30]
mov edx, ebx
mov qword [rsp + 0x20], 0
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea rax, [rsp + 0x34]
mov r9d, 0x40
mov dword [rbp + 0xe8], 0xa8
mov dword [rbp + 0xec], 0xa8
lea ebx, [rdi + 0x13938]
mov edx, ebx
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 8]
lea r8d, [r9 - 0x38]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea r8, [rbp + 0xe8]
mov r9d, 8
mov qword [rsp + 0x20], 0
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov rcx, qword [0x1404c1ac0]
mov r8d, 8
mov r9d, dword [rsp + 0x34]
mov edx, ebx
mov qword [rsp + 0x20], 0
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea rax, [rsp + 0x30]
mov r9d, 0x40
mov dword [rbp + 0xf0], 0
mov dword [rbp + 0xf4], Ordinal_211
lea ebx, [rdi + 0x13940]
mov edx, ebx
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 8]
lea r8d, [r9 - 0x38]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea r8, [rbp + 0xf0]
mov r9d, 8
mov qword [rsp + 0x20], 0
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov rcx, qword [0x1404c1ac0]
mov r8d, 8
mov r9d, dword [rsp + 0x30]
mov edx, ebx
mov qword [rsp + 0x20], 0
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea ebx, [rdi + 0x14768]
mov r9d, 0x40
mov dword [rbp + 0xf8], 0x4f24
lea rax, [rsp + 0x34]
mov dword [rbp + 0xfc], 0x47702000
mov qword [rsp + 0x20], rax
mov edx, ebx
mov rcx, qword [rcx + 8]
lea r8d, [r9 - 0x38]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea r8, [rbp + 0xf8]
mov r9d, 8
mov qword [rsp + 0x20], 0
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov rcx, qword [0x1404c1ac0]
mov r8d, 8
mov r9d, dword [rsp + 0x34]
mov edx, ebx
mov qword [rsp + 0x20], 0
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea rax, [rsp + 0x30]
mov r9d, 0x40
mov dword [rbp + 0x100], 0x30f120
mov dword [rbp + 0x104], 0x47702000
lea ebx, [rdi + 0x14a78]
mov edx, ebx
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 8]
lea r8d, [r9 - 0x38]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea r8, [rbp + 0x100]
mov r9d, 8
mov qword [rsp + 0x20], 0
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov rcx, qword [0x1404c1ac0]
mov r8d, 8
mov r9d, dword [rsp + 0x30]
mov edx, ebx
mov qword [rsp + 0x20], 0
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea rax, [rsp + 0x34]
mov r9d, 0x40
mov dword [rbp + 0x108], 0x47702000
mov dword [rbp + 0x10c], 0xbc10b401
lea ebx, [rdi + 0x15658]
mov edx, ebx
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 8]
lea r8d, [r9 - 0x38]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea r8, [rbp + 0x108]
mov r9d, 8
mov qword [rsp + 0x20], 0
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov rcx, qword [0x1404c1ac0]
mov r8d, 8
mov r9d, dword [rsp + 0x34]
mov edx, ebx
mov qword [rsp + 0x20], 0
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea rax, [rsp + 0x30]
mov r9d, 0x40
mov dword [rbp + 0x110], 0x30e549
mov dword [rbp + 0x114], 0x47702000
lea ebx, [rdi + 0x15698]
mov edx, ebx
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 8]
lea r8d, [r9 - 0x38]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea r8, [rbp + 0x110]
mov r9d, 8
mov qword [rsp + 0x20], 0
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov rcx, qword [0x1404c1ac0]
mov r8d, 8
mov r9d, dword [rsp + 0x30]
mov edx, ebx
mov qword [rsp + 0x20], 0
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea rax, [rsp + 0x34]
mov r9d, 0x40
mov dword [rbp + 0x118], 0xbc04
mov dword [rbp + 0x11c], 0x2cbf00bf
lea ebx, [rdi + 0x1b1c0]
mov edx, ebx
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 8]
lea r8d, [r9 - 0x38]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea r8, [rbp + 0x118]
mov r9d, 8
mov qword [rsp + 0x20], 0
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov rcx, qword [0x1404c1ac0]
mov r8d, 8
mov r9d, dword [rsp + 0x34]
mov edx, ebx
mov qword [rsp + 0x20], 0
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea rax, [rsp + 0x30]
mov r9d, 0x40
mov dword [rbp + 0x120], 0xbf00bc20
mov dword [rbp + 0x124], 0xb410446c
lea ebx, [rdi + 0x2c5a8]
mov edx, ebx
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 8]
lea r8d, [r9 - 0x38]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea r8, [rbp + 0x120]
mov r9d, 8
mov qword [rsp + 0x20], 0
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov rcx, qword [0x1404c1ac0]
mov r8d, 8
mov r9d, dword [rsp + 0x30]
mov edx, ebx
mov qword [rsp + 0x20], 0
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea rax, [rsp + 0x34]
mov r9d, 0x40
mov dword [rbp + 0x128], 0xbf005421
mov dword [rbp + 0x12c], 0x2440446e
lea ebx, [rdi + 0x2c688]
mov edx, ebx
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 8]
lea r8d, [r9 - 0x38]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea r8, [rbp + 0x128]
mov r9d, 8
mov qword [rsp + 0x20], 0
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov r9d, dword [rsp + 0x34]
mov r8d, 8
mov edx, ebx
mov qword [rsp + 0x20], 0
mov rcx, qword [0x1404c1ac0]
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea rax, [rsp + 0x30]
mov r9d, 0x40
mov dword [rbp + 0x130], 0xfb7ef020
mov dword [rbp + 0x134], 0xe00f2800
lea ebx, [rdi + 0x39728]
mov edx, ebx
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 8]
lea r8d, [r9 - 0x38]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea r8, [rbp + 0x130]
mov r9d, 8
mov qword [rsp + 0x20], 0
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov rcx, qword [0x1404c1ac0]
mov r8d, 8
mov r9d, dword [rsp + 0x30]
mov edx, ebx
mov qword [rsp + 0x20], 0
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea rax, [rsp + 0x34]
mov r9d, 0x40
mov dword [rbp + 0x138], 0
mov dword [rbp + 0x13c], 0xbc01b410
lea ebx, [rdi + 0x39e68]
mov edx, ebx
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 8]
lea r8d, [r9 - 0x38]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea r8, [rbp + 0x138]
mov r9d, 8
mov qword [rsp + 0x20], 0
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov rcx, qword [0x1404c1ac0]
mov r8d, 8
mov r9d, dword [rsp + 0x34]
mov edx, ebx
mov qword [rsp + 0x20], 0
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea rax, [rsp + 0x30]
mov r9d, 0x40
mov dword [rbp + 0x140], 0x4770bdf0
mov dword [rbp + 0x144], 0xb4014770
lea ebx, [rdi + 0x4cc48]
mov edx, ebx
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 8]
lea r8d, [r9 - 0x38]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea r8, [rbp + 0x140]
mov r9d, 8
mov qword [rsp + 0x20], 0
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov rcx, qword [0x1404c1ac0]
mov r8d, 8
mov r9d, dword [rsp + 0x30]
mov edx, ebx
mov qword [rsp + 0x20], 0
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov dword [rbp + 0x148], 0x4770bdb0
lea ebx, [rdi + 0x4cc90]
mov dword [rbp + 0x14c], 0xb4014770
mov rcx, qword [0x1404c1ac0]
lea rax, [rsp + 0x34]
mov r9d, 0x40
mov qword [rsp + 0x20], rax
mov edx, ebx
mov rcx, qword [rcx + 8]
lea r8d, [r9 - 0x38]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea r8, [rbp + 0x148]
mov r9d, 8
mov qword [rsp + 0x20], 0
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov rcx, qword [0x1404c1ac0]
mov r8d, 8
mov r9d, dword [rsp + 0x34]
mov edx, ebx
mov qword [rsp + 0x20], 0
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea rax, [rsp + 0x30]
mov r9d, 0x40
mov dword [rbp + 0x150], 0xa903d108
mov dword [rbp + 0x154], 0x70082010
lea ebx, [rdi + 0x4ce00]
mov edx, ebx
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 8]
lea r8d, [r9 - 0x38]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea r8, [rbp + 0x150]
mov r9d, 8
mov qword [rsp + 0x20], 0
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov rcx, qword [0x1404c1ac0]
mov r8d, 8
mov r9d, dword [rsp + 0x30]
mov edx, ebx
mov qword [rsp + 0x20], 0
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea rax, [rsp + 0x34]
mov r9d, 0x40
mov dword [rbp + 0x158], 0x47704770
mov dword [rbp + 0x15c], 0x47704770
lea ebx, [rdi + 0x4cf58]
mov edx, ebx
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 8]
lea r8d, [r9 - 0x38]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea r8, [rbp + 0x158]
mov r9d, 8
mov qword [rsp + 0x20], 0
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov rcx, qword [0x1404c1ac0]
mov r8d, 8
mov r9d, dword [rsp + 0x34]
mov edx, ebx
mov qword [rsp + 0x20], 0
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea ebx, [rdi + 0x912f8]
mov r9d, 0x40
mov dword [rbp + 0x160], 0xbd80fb31
lea rax, [rsp + 0x30]
mov dword [rbp + 0x164], 0x47702000
mov qword [rsp + 0x20], rax
mov edx, ebx
lea r8d, [r9 - 0x38]
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea r8, [rbp + 0x160]
mov r9d, 8
mov qword [rsp + 0x20], 0
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov rcx, qword [0x1404c1ac0]
mov r8d, 8
mov r9d, dword [rsp + 0x30]
mov edx, ebx
mov qword [rsp + 0x20], 0
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea rax, [rsp + 0x34]
mov r9d, 0x40
mov dword [rbp + 0x168], 0x294dca
mov dword [rbp + 0x16c], 0x47702000
lea ebx, [rdi + 0x92200]
mov edx, ebx
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 8]
lea r8d, [r9 - 0x38]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea r8, [rbp + 0x168]
mov r9d, 8
mov qword [rsp + 0x20], 0
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov rcx, qword [0x1404c1ac0]
mov r8d, 8
mov r9d, dword [rsp + 0x34]
mov edx, ebx
mov qword [rsp + 0x20], 0
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea rax, [rsp + 0x30]
mov r9d, 0x40
mov dword [rbp + 0x170], 0x47702000
mov dword [rbp + 0x174], 0xb401b081
lea ebx, [rdi + 0x953f8]
mov edx, ebx
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 8]
lea r8d, [r9 - 0x38]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea r8, [rbp + 0x170]
mov r9d, 8
mov qword [rsp + 0x20], 0
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov rcx, qword [0x1404c1ac0]
mov r8d, 8
mov r9d, dword [rsp + 0x30]
mov edx, ebx
mov qword [rsp + 0x20], 0
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea rax, [rsp + 0x34]
mov r9d, 0x40
mov dword [rbp + 0x178], Ordinal_50
mov dword [rbp + 0x17c], 0x47702000
lea ebx, [rdi + 0x95448]
mov edx, ebx
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 8]
lea r8d, [r9 - 0x38]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov r9d, 8
mov qword [rsp + 0x20], 0
lea r8, [rbp + 0x178]
mov edx, ebx
mov rcx, qword [0x1404c1ac0]
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov rcx, qword [0x1404c1ac0]
mov r8d, 8
mov r9d, dword [rsp + 0x34]
mov edx, ebx
mov qword [rsp + 0x20], 0
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea rax, [rsp + 0x30]
mov r9d, 0x40
mov dword [rbp + 0x180], 0x47702000
mov dword [rbp + 0x184], 0x2407b081
lea ebx, [rdi + 0xc9420]
mov edx, ebx
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 8]
lea r8d, [r9 - 0x38]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea r8, [rbp + 0x180]
mov r9d, 8
mov qword [rsp + 0x20], 0
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov rcx, qword [0x1404c1ac0]
mov r8d, 8
mov r9d, dword [rsp + 0x30]
mov edx, ebx
mov qword [rsp + 0x20], 0
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea rax, [rsp + 0x34]
mov r9d, 0x40
mov dword [rbp + 0x188], 0xe12fff1e
mov dword [rbp + 0x18c], 0xe3a00000
lea ebx, [rdi + 0x163650]
mov edx, ebx
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 8]
lea r8d, [r9 - 0x38]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea r8, [rbp + 0x188]
mov r9d, 8
mov qword [rsp + 0x20], 0
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov rcx, qword [0x1404c1ac0]
mov r8d, 8
mov r9d, dword [rsp + 0x34]
mov edx, ebx
mov qword [rsp + 0x20], 0
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea rax, [rsp + 0x30]
mov r9d, 0x40
mov dword [rbp + 0x190], 0xe12fff1e
mov dword [rbp + 0x194], 0xe52d0004
lea ebx, [rdi + 0x163658]
mov edx, ebx
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 8]
lea r8d, [r9 - 0x38]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea r8, [rbp + 0x190]
mov r9d, 8
mov qword [rsp + 0x20], 0
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov r9d, dword [rsp + 0x30]
mov r8d, 8
mov qword [rsp + 0x20], 0
mov rcx, qword [0x1404c1ac0]
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea rax, [rsp + 0x34]
mov r9d, 0x40
mov dword [rbp + 0x198], 0xe3a00000
mov dword [rbp + 0x19c], 0xe12fff1e
lea ebx, [rdi + 0x163688]
mov edx, ebx
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 8]
lea r8d, [r9 - 0x38]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea r8, [rbp + 0x198]
mov r9d, 8
mov qword [rsp + 0x20], 0
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov rcx, qword [0x1404c1ac0]
mov r8d, 8
mov r9d, dword [rsp + 0x34]
mov edx, ebx
mov qword [rsp + 0x20], 0
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea rax, [rsp + 0x30]
mov r9d, 0x40
mov dword [rbp + 0x1a0], 0xe12fff1e
mov dword [rbp + 0x1a4], 0xe3a00000
lea ebx, [rdi + 0x1636b8]
mov edx, ebx
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 8]
lea r8d, [r9 - 0x38]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea r8, [rbp + 0x1a0]
mov r9d, 8
mov qword [rsp + 0x20], 0
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov rcx, qword [0x1404c1ac0]
mov r8d, 8
mov r9d, dword [rsp + 0x30]
mov edx, ebx
mov qword [rsp + 0x20], 0
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea rax, [rsp + 0x34]
mov r9d, 0x40
mov dword [rbp + 0x1a8], 0xe12fff1e
mov dword [rbp + 0x1ac], 0xe52d0004
lea ebx, [rdi + 0x1636c0]
mov edx, ebx
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 8]
lea r8d, [r9 - 0x38]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea r8, [rbp + 0x1a8]
mov r9d, 8
mov qword [rsp + 0x20], 0
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov rcx, qword [0x1404c1ac0]
mov r8d, 8
mov r9d, dword [rsp + 0x34]
mov edx, ebx
mov qword [rsp + 0x20], 0
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov dword [rbp + 0x1b0], 0xe3a00000
mov dword [rbp + 0x1b4], 0xe12fff1e
mov rcx, qword [0x1404c1ac0]
lea rax, [rsp + 0x30]
mov r9d, 0x40
mov qword [rsp + 0x20], rax
lea ebx, [rdi + 0x163950]
mov edx, ebx
mov rcx, qword [rcx + 8]
lea r8d, [r9 - 0x38]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea r8, [rbp + 0x1b0]
mov r9d, 8
mov qword [rsp + 0x20], 0
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov rcx, qword [0x1404c1ac0]
mov r8d, 8
mov r9d, dword [rsp + 0x30]
mov edx, ebx
mov qword [rsp + 0x20], 0
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea rax, [rsp + 0x34]
mov r9d, 0x40
mov dword [rbp + 0x1b8], 0xe8bd8800
mov dword [rbp + 0x1bc], 0xe3a00000
lea ebx, [rdi + 0x164808]
mov edx, ebx
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 8]
lea r8d, [r9 - 0x38]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea r8, [rbp + 0x1b8]
mov r9d, 8
mov qword [rsp + 0x20], 0
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov rcx, qword [0x1404c1ac0]
mov r8d, 8
mov r9d, dword [rsp + 0x34]
mov edx, ebx
mov qword [rsp + 0x20], 0
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea rax, [rsp + 0x30]
mov r9d, 0x40
mov dword [rbp + 0x1c0], 0xe12fff1e
mov dword [rbp + 0x1c4], 0xe24dd010
lea ebx, [rdi + 0x164810]
mov edx, ebx
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 8]
lea r8d, [r9 - 0x38]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea r8, [rbp + 0x1c0]
mov r9d, 8
mov qword [rsp + 0x20], 0
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov rcx, qword [0x1404c1ac0]
mov r8d, 8
mov r9d, dword [rsp + 0x30]
mov edx, ebx
mov qword [rsp + 0x20], 0
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov r9d, 0x40
mov dword [rbp + 0x1c8], 0xe3a00000
lea ebx, [rdi + 0x1b3bb0]
mov dword [rbp + 0x1cc], 0xe12fff1e
lea rax, [rsp + 0x34]
mov edx, ebx
mov qword [rsp + 0x20], rax
lea r8d, [r9 - 0x38]
mov rcx, qword [0x1404c1ac0]
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea r8, [rbp + 0x1c8]
mov r9d, 8
mov qword [rsp + 0x20], 0
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov rcx, qword [0x1404c1ac0]
mov r8d, 8
mov r9d, dword [rsp + 0x34]
mov edx, ebx
mov qword [rsp + 0x20], 0
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea rax, [rsp + 0x30]
mov r9d, 0x40
mov dword [rbp + 0x1d0], 0xe3a00000
mov dword [rbp + 0x1d4], 0xe12fff1e
lea ebx, [rdi + 0x1b3cf8]
mov edx, ebx
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 8]
lea r8d, [r9 - 0x38]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea r8, [rbp + 0x1d0]
mov r9d, 8
mov qword [rsp + 0x20], 0
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov rcx, qword [0x1404c1ac0]
mov r8d, 8
mov r9d, dword [rsp + 0x30]
mov edx, ebx
mov qword [rsp + 0x20], 0
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea rax, [rsp + 0x34]
mov r9d, 0x40
mov dword [rbp + 0x1d8], 0x1b0520
mov dword [rbp + 0x1dc], 0xe3a00000
lea ebx, [rdi + 0x1b3fa8]
mov edx, ebx
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 8]
lea r8d, [r9 - 0x38]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea r8, [rbp + 0x1d8]
mov r9d, 8
mov qword [rsp + 0x20], 0
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov rcx, qword [0x1404c1ac0]
mov r8d, 8
mov r9d, dword [rsp + 0x34]
mov edx, ebx
mov qword [rsp + 0x20], 0
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea rax, [rsp + 0x30]
mov r9d, 0x40
mov dword [rbp + 0x1e0], 0xe12fff1e
mov dword [rbp + 0x1e4], 0xe24dde15
lea ebx, [rdi + 0x1b3fb0]
mov edx, ebx
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 8]
lea r8d, [r9 - 0x38]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov r9d, 8
mov qword [rsp + 0x20], 0
lea r8, [rbp + 0x1e0]
mov rcx, qword [0x1404c1ac0]
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov rcx, qword [0x1404c1ac0]
mov r8d, 8
mov r9d, dword [rsp + 0x30]
mov edx, ebx
mov qword [rsp + 0x20], 0
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea rax, [rsp + 0x34]
mov r9d, 0x40
mov dword [rbp + 0x1e8], 0x1adb1c
mov dword [rbp + 0x1ec], 0xe3a00000
lea ebx, [rdi + 0x1b69e8]
mov edx, ebx
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 8]
lea r8d, [r9 - 0x38]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea r8, [rbp + 0x1e8]
mov r9d, 8
mov qword [rsp + 0x20], 0
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov rcx, qword [0x1404c1ac0]
mov r8d, 8
mov r9d, dword [rsp + 0x34]
mov edx, ebx
mov qword [rsp + 0x20], 0
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea rax, [rsp + 0x30]
mov r9d, 0x40
mov dword [rbp + 0x1f0], 0xe12fff1e
mov dword [rbp + 0x1f4], 0xe24dd070
lea ebx, [rdi + 0x1b69f0]
mov edx, ebx
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 8]
lea r8d, [r9 - 0x38]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea r8, [rbp + 0x1f0]
mov r9d, 8
mov qword [rsp + 0x20], 0
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov rcx, qword [0x1404c1ac0]
mov r8d, 8
mov r9d, dword [rsp + 0x30]
mov edx, ebx
mov qword [rsp + 0x20], 0
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea rax, [rsp + 0x34]
mov r9d, 0x40
mov dword [rbp + 0x1f8], 0xe8bd88f0
mov dword [rbp + 0x1fc], 0xe3a00000
lea ebx, [rdi + 0x1b9518]
mov edx, ebx
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 8]
lea r8d, [r9 - 0x38]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea r8, [rbp + 0x1f8]
mov r9d, 8
mov qword [rsp + 0x20], 0
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov r9d, dword [rsp + 0x34]
mov qword [rsp + 0x20], 0
mov rcx, qword [0x1404c1ac0]
mov r8d, 8
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea rax, [rsp + 0x30]
mov r9d, 0x40
mov dword [rbp + 0x200], 0xe12fff1e
mov dword [rbp + 0x204], 0xe24ddc01
lea ebx, [rdi + 0x1b9520]
mov edx, ebx
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 8]
lea r8d, [r9 - 0x38]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea r8, [rbp + 0x200]
mov r9d, 8
mov qword [rsp + 0x20], 0
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov rcx, qword [0x1404c1ac0]
mov r8d, 8
mov r9d, dword [rsp + 0x30]
mov edx, ebx
mov qword [rsp + 0x20], 0
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea rax, [rsp + 0x34]
mov r9d, 0x40
mov dword [rbp + 0x208], 0x1aa2f0
mov dword [rbp + 0x20c], 0xe3a00000
lea ebx, [rdi + 0x1ba1c0]
mov edx, ebx
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 8]
lea r8d, [r9 - 0x38]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea r8, [rbp + 0x208]
mov r9d, 8
mov qword [rsp + 0x20], 0
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov rcx, qword [0x1404c1ac0]
mov r8d, 8
mov r9d, dword [rsp + 0x34]
mov edx, ebx
mov qword [rsp + 0x20], 0
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea rax, [rsp + 0x30]
mov r9d, 0x40
mov dword [rbp + 0x210], 0xe12fff1e
mov dword [rbp + 0x214], 0xe24dd050
lea ebx, [rdi + 0x1ba1c8]
mov edx, ebx
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 8]
lea r8d, [r9 - 0x38]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea r8, [rbp + 0x210]
mov r9d, 8
mov qword [rsp + 0x20], 0
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov rcx, qword [0x1404c1ac0]
mov r8d, 8
mov r9d, dword [rsp + 0x30]
mov edx, ebx
mov qword [rsp + 0x20], 0
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov dword [rbp + 0x218], 0xe3a00000
mov rcx, qword [0x1404c1ac0]
lea rax, [rsp + 0x34]
mov r9d, 0x40
mov dword [rbp + 0x21c], 0xe12fff1e
lea ebx, [rdi + 0x1ba730]
mov qword [rsp + 0x20], rax
mov edx, ebx
mov rcx, qword [rcx + 8]
lea r8d, [r9 - 0x38]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea r8, [rbp + 0x218]
mov r9d, 8
mov qword [rsp + 0x20], 0
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov rcx, qword [0x1404c1ac0]
mov r8d, 8
mov r9d, dword [rsp + 0x34]
mov edx, ebx
mov qword [rsp + 0x20], 0
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea rax, [rsp + 0x30]
mov r9d, 0x40
mov dword [rbp + 0x220], 0xe8bd8c70
mov dword [rbp + 0x224], 0xe3a00000
lea ebx, [rdi + 0x1bd120]
mov edx, ebx
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 8]
lea r8d, [r9 - 0x38]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea r8, [rbp + 0x220]
mov r9d, 8
mov qword [rsp + 0x20], 0
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov rcx, qword [0x1404c1ac0]
mov r8d, 8
mov r9d, dword [rsp + 0x30]
mov edx, ebx
mov qword [rsp + 0x20], 0
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea rax, [rsp + 0x34]
mov r9d, 0x40
mov dword [rbp + 0x228], 0xe12fff1e
mov dword [rbp + 0x22c], 0xe24dd058
lea ebx, [rdi + 0x1bd128]
mov edx, ebx
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 8]
lea r8d, [r9 - 0x38]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea r8, [rbp + 0x228]
mov r9d, 8
mov qword [rsp + 0x20], 0
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov rcx, qword [0x1404c1ac0]
mov r8d, 8
mov r9d, dword [rsp + 0x34]
mov edx, ebx
mov qword [rsp + 0x20], 0
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov r9d, 0x40
mov dword [rbp + 0x230], 0xe3a00000
lea rax, [rsp + 0x30]
mov dword [rbp + 0x234], 0xe12fff1e
lea ebx, [rdi + 0x1bd320]
mov qword [rsp + 0x20], rax
lea r8d, [r9 - 0x38]
mov rcx, qword [0x1404c1ac0]
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea r8, [rbp + 0x230]
mov r9d, 8
mov qword [rsp + 0x20], 0
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov rcx, qword [0x1404c1ac0]
mov r8d, 8
mov r9d, dword [rsp + 0x30]
mov edx, ebx
mov qword [rsp + 0x20], 0
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea rax, [rsp + 0x34]
mov r9d, 0x40
mov dword [rbp + 0x238], 0x1a6ef0
mov dword [rbp + 0x23c], 0xe3a00000
lea ebx, [rdi + 0x1bd5d0]
mov edx, ebx
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 8]
lea r8d, [r9 - 0x38]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea r8, [rbp + 0x238]
mov r9d, 8
mov qword [rsp + 0x20], 0
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov rcx, qword [0x1404c1ac0]
mov r8d, 8
mov r9d, dword [rsp + 0x34]
mov edx, ebx
mov qword [rsp + 0x20], 0
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea rax, [rsp + 0x30]
mov r9d, 0x40
mov dword [rbp + 0x240], 0xe12fff1e
mov dword [rbp + 0x244], 0xe24dd058
lea ebx, [rdi + 0x1bd5d8]
mov edx, ebx
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 8]
lea r8d, [r9 - 0x38]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea r8, [rbp + 0x240]
mov r9d, 8
mov qword [rsp + 0x20], 0
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov rcx, qword [0x1404c1ac0]
mov r8d, 8
mov r9d, dword [rsp + 0x30]
mov edx, ebx
mov qword [rsp + 0x20], 0
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea rax, [rsp + 0x34]
mov r9d, 0x40
mov dword [rbp + 0x248], 0xe3a00000
mov dword [rbp + 0x24c], 0xe12fff1e
lea ebx, [rdi + 0x1bfb18]
mov edx, ebx
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 8]
lea r8d, [r9 - 0x38]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov r9d, 8
mov qword [rsp + 0x20], 0
mov rcx, qword [0x1404c1ac0]
lea r8, [rbp + 0x248]
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov rcx, qword [0x1404c1ac0]
mov r8d, 8
mov r9d, dword [rsp + 0x34]
mov edx, ebx
mov qword [rsp + 0x20], 0
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea rax, [rsp + 0x30]
mov r9d, 0x40
mov dword [rbp + 0x250], 0xe3a00000
mov dword [rbp + 0x254], 0xe12fff1e
lea ebx, [rdi + 0x1c1000]
mov edx, ebx
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 8]
lea r8d, [r9 - 0x38]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea r8, [rbp + 0x250]
mov r9d, 8
mov qword [rsp + 0x20], 0
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov rcx, qword [0x1404c1ac0]
mov r8d, 8
mov r9d, dword [rsp + 0x30]
mov edx, ebx
mov qword [rsp + 0x20], 0
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea rax, [rsp + 0x34]
mov r9d, 0x40
mov dword [rbp + 0x258], 0xd38305bf
mov dword [rbp + 0x25c], 0x47702000
lea ebx, [rdi + 0x211408]
mov edx, ebx
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 8]
lea r8d, [r9 - 0x38]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea r8, [rbp + 0x258]
mov r9d, 8
mov qword [rsp + 0x20], 0
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov rcx, qword [0x1404c1ac0]
mov r8d, 8
mov r9d, dword [rsp + 0x34]
mov edx, ebx
mov qword [rsp + 0x20], 0
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea rax, [rsp + 0x30]
mov r9d, 0x40
mov dword [rbp + 0x260], 0xe3a00000
mov dword [rbp + 0x264], 0xe12fff1e
lea ebx, [rdi + 0x234140]
mov edx, ebx
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 8]
lea r8d, [r9 - 0x38]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea r8, [rbp + 0x260]
mov r9d, 8
mov qword [rsp + 0x20], 0
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov qword [rsp + 0x20], 0
mov rcx, qword [0x1404c1ac0]
mov r8d, 8
mov r9d, dword [rsp + 0x30]
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea rax, [rsp + 0x34]
mov r9d, 0x40
mov dword [rbp + 0x268], 0xe3a00000
mov dword [rbp + 0x26c], 0xe12fff1e
lea ebx, [rdi + 0x2342b8]
mov edx, ebx
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 8]
lea r8d, [r9 - 0x38]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea r8, [rbp + 0x268]
mov r9d, 8
mov qword [rsp + 0x20], 0
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov rcx, qword [0x1404c1ac0]
mov r8d, 8
mov r9d, dword [rsp + 0x34]
mov edx, ebx
mov qword [rsp + 0x20], 0
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea rax, [rsp + 0x30]
mov r9d, 0x40
mov dword [rbp + 0x270], 0xe3a00000
mov dword [rbp + 0x274], 0xe12fff1e
lea ebx, [rdi + 0x2342c0]
mov edx, ebx
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 8]
lea r8d, [r9 - 0x38]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea r8, [rbp + 0x270]
mov r9d, 8
mov qword [rsp + 0x20], 0
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov rcx, qword [0x1404c1ac0]
mov r8d, 8
mov r9d, dword [rsp + 0x30]
mov edx, ebx
mov qword [rsp + 0x20], 0
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea rax, [rsp + 0x34]
mov r9d, 0x40
mov dword [rbp + 0x278], 0x15e72c
mov dword [rbp + 0x27c], 0xe3a00000
lea ebx, [rdi + 0x234380]
mov edx, ebx
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 8]
lea r8d, [r9 - 0x38]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea r8, [rbp + 0x278]
mov r9d, 8
mov qword [rsp + 0x20], 0
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov rcx, qword [0x1404c1ac0]
mov r8d, 8
mov r9d, dword [rsp + 0x34]
mov edx, ebx
mov qword [rsp + 0x20], 0
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea rax, [rsp + 0x30]
mov r9d, 0x40
mov dword [rbp + 0x280], 0xe12fff1e
mov dword [rbp + 0x284], 0xe08f3003
lea ebx, [rdi + 0x234388]
mov edx, ebx
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 8]
lea r8d, [r9 - 0x38]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea r8, [rbp + 0x280]
mov r9d, 8
mov qword [rsp + 0x20], 0
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov rcx, qword [0x1404c1ac0]
mov r8d, 8
mov r9d, dword [rsp + 0x30]
mov edx, ebx
mov qword [rsp + 0x20], 0
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea rax, [rsp + 0x34]
mov r9d, 0x40
mov dword [rbp + 0x288], 0xe3a00000
mov dword [rbp + 0x28c], 0xe12fff1e
lea ebx, [rdi + 0x2343e0]
mov edx, ebx
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 8]
lea r8d, [r9 - 0x38]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea r8, [rbp + 0x288]
mov r9d, 8
mov qword [rsp + 0x20], 0
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov rcx, qword [0x1404c1ac0]
mov r8d, 8
mov r9d, dword [rsp + 0x34]
mov edx, ebx
mov qword [rsp + 0x20], 0
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea rax, [rsp + 0x30]
mov r9d, 0x40
mov dword [rbp + 0x290], 0xe8bd8038
mov dword [rbp + 0x294], 0xe3a00000
lea ebx, [rdi + 0x2352b8]
mov edx, ebx
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 8]
lea r8d, [r9 - 0x38]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea r8, [rbp + 0x290]
mov r9d, 8
mov qword [rsp + 0x20], 0
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov rcx, qword [0x1404c1ac0]
mov r8d, 8
mov r9d, dword [rsp + 0x30]
mov edx, ebx
mov qword [rsp + 0x20], 0
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
lea rax, [rsp + 0x34]
mov dword [rbp + 0x298], 0xe12fff1e
mov qword [rsp + 0x20], rax
lea ebx, [rdi + 0x2352c0]
mov dword [rbp + 0x29c], 0xe2524000
mov r9d, 0x40
mov rcx, qword [0x1404c1ac0]
lea r8d, [r9 - 0x38]
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea r8, [rbp + 0x298]
mov r9d, 8
mov qword [rsp + 0x20], 0
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov rcx, qword [0x1404c1ac0]
mov r8d, 8
mov r9d, dword [rsp + 0x34]
mov edx, ebx
mov qword [rsp + 0x20], 0
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea rax, [rsp + 0x30]
mov r9d, 0x40
mov dword [rbp + 0x2a0], 0x12f1b0
mov dword [rbp + 0x2a4], 0xe3a00000
lea ebx, [rdi + 0x2353c8]
mov edx, ebx
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 8]
lea r8d, [r9 - 0x38]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea r8, [rbp + 0x2a0]
mov r9d, 8
mov qword [rsp + 0x20], 0
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov rcx, qword [0x1404c1ac0]
mov r8d, 8
mov r9d, dword [rsp + 0x30]
mov edx, ebx
mov qword [rsp + 0x20], 0
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea rax, [rsp + 0x34]
mov r9d, 0x40
mov dword [rbp + 0x2a8], 0xe12fff1e
mov dword [rbp + 0x2ac], 0xe24ddfa7
lea ebx, [rdi + 0x2353d0]
mov edx, ebx
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 8]
lea r8d, [r9 - 0x38]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea r8, [rbp + 0x2a8]
mov r9d, 8
mov qword [rsp + 0x20], 0
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov rcx, qword [0x1404c1ac0]
mov r8d, 8
mov r9d, dword [rsp + 0x34]
mov edx, ebx
mov qword [rsp + 0x20], 0
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea rax, [rsp + 0x30]
mov r9d, 0x40
mov dword [rbp + 0x2b0], 0xe3a00000
mov dword [rbp + 0x2b4], 0xe12fff1e
lea ebx, [rdi + 0x235d18]
mov edx, ebx
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 8]
lea r8d, [r9 - 0x38]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov qword [rsp + 0x20], 0
mov rcx, qword [0x1404c1ac0]
lea r8, [rbp + 0x2b0]
mov r9d, 8
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov rcx, qword [0x1404c1ac0]
mov r8d, 8
mov r9d, dword [rsp + 0x30]
mov edx, ebx
mov qword [rsp + 0x20], 0
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea rax, [rsp + 0x34]
mov r9d, 0x40
mov dword [rbp + 0x2b8], 0xe3a00000
mov dword [rbp + 0x2bc], 0xe12fff1e
lea ebx, [rdi + 0x235e00]
mov edx, ebx
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 8]
lea r8d, [r9 - 0x38]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea r8, [rbp + 0x2b8]
mov r9d, 8
mov qword [rsp + 0x20], 0
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov rcx, qword [0x1404c1ac0]
mov r8d, 8
mov r9d, dword [rsp + 0x34]
mov edx, ebx
mov qword [rsp + 0x20], 0
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea rax, [rsp + 0x30]
mov r9d, 0x40
mov dword [rbp + 0x2c0], 0xf76bc
mov dword [rbp + 0x2c4], 0xe3a00000
lea ebx, [rdi + 0x236228]
mov edx, ebx
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 8]
lea r8d, [r9 - 0x38]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea r8, [rbp + 0x2c0]
mov r9d, 8
mov qword [rsp + 0x20], 0
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov rcx, qword [0x1404c1ac0]
mov r8d, 8
mov r9d, dword [rsp + 0x30]
mov edx, ebx
mov qword [rsp + 0x20], 0
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea rax, [rsp + 0x34]
mov r9d, 0x40
mov dword [rbp + 0x2c8], 0xe12fff1e
mov dword [rbp + 0x2cc], 0xe5906000
lea ebx, [rdi + 0x236230]
mov edx, ebx
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 8]
lea r8d, [r9 - 0x38]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea r8, [rbp + 0x2c8]
mov r9d, 8
mov qword [rsp + 0x20], 0
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov rcx, qword [0x1404c1ac0]
mov r8d, 8
mov r9d, dword [rsp + 0x34]
mov edx, ebx
mov qword [rsp + 0x20], 0
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea rax, [rsp + 0x30]
mov r9d, 0x40
mov dword [rbp + 0x2d0], 0x12dc1c
mov dword [rbp + 0x2d4], 0xe3a00000
lea ebx, [rdi + 0x236c50]
mov edx, ebx
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 8]
lea r8d, [r9 - 0x38]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea r8, [rbp + 0x2d0]
mov r9d, 8
mov qword [rsp + 0x20], 0
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov rcx, qword [0x1404c1ac0]
mov r8d, 8
mov r9d, dword [rsp + 0x30]
mov edx, ebx
mov qword [rsp + 0x20], 0
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea rax, [rsp + 0x34]
mov r9d, 0x40
mov dword [rbp + 0x2d8], 0xe12fff1e
mov dword [rbp + 0x2dc], 0xe79f3003
lea ebx, [rdi + 0x236c58]
mov edx, ebx
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 8]
lea r8d, [r9 - 0x38]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea r8, [rbp + 0x2d8]
mov r9d, 8
mov qword [rsp + 0x20], 0
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov rcx, qword [0x1404c1ac0]
mov r8d, 8
mov r9d, dword [rsp + 0x34]
mov edx, ebx
mov qword [rsp + 0x20], 0
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea rax, [rsp + 0x30]
mov r9d, 0x40
mov dword [rbp + 0x2e0], 0xe3a00000
mov dword [rbp + 0x2e4], 0xe12fff1e
lea ebx, [rdi + 0x236da0]
mov edx, ebx
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 8]
lea r8d, [r9 - 0x38]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea r8, [rbp + 0x2e0]
mov r9d, 8
mov qword [rsp + 0x20], 0
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov rcx, qword [0x1404c1ac0]
mov r8d, 8
mov r9d, dword [rsp + 0x30]
mov edx, ebx
mov qword [rsp + 0x20], 0
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea rax, [rsp + 0x34]
mov r9d, 0x40
mov dword [rbp + 0x2e8], 0xe3a00000
mov dword [rbp + 0x2ec], 0xe12fff1e
lea ebx, [rdi + 0x238138]
mov edx, ebx
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 8]
lea r8d, [r9 - 0x38]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea r8, [rbp + 0x2e8]
mov r9d, 8
mov qword [rsp + 0x20], 0
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov rcx, qword [0x1404c1ac0]
mov r8d, 8
mov r9d, dword [rsp + 0x34]
mov edx, ebx
mov qword [rsp + 0x20], 0
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea rax, [rsp + 0x30]
mov r9d, 0x40
mov dword [rbp + 0x2f0], 0xeafffec3
mov dword [rbp + 0x2f4], 0xe3a00000
lea ebx, [rdi + 0x239518]
mov edx, ebx
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 8]
lea r8d, [r9 - 0x38]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea r8, [rbp + 0x2f0]
mov r9d, 8
mov qword [rsp + 0x20], 0
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov rcx, qword [0x1404c1ac0]
mov r8d, 8
mov r9d, dword [rsp + 0x30]
mov edx, ebx
mov qword [rsp + 0x20], 0
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea rax, [rsp + 0x34]
mov r9d, 0x40
mov dword [rbp + 0x2f8], 0xe12fff1e
mov dword [rbp + 0x2fc], 0xe28d4008
lea ebx, [rdi + 0x239520]
mov edx, ebx
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 8]
lea r8d, [r9 - 0x38]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea r8, [rbp + 0x2f8]
mov r9d, 8
mov qword [rsp + 0x20], 0
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov rcx, qword [0x1404c1ac0]
mov r8d, 8
mov r9d, dword [rsp + 0x34]
mov edx, ebx
mov qword [rsp + 0x20], 0
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
lea rax, [rsp + 0x30]
mov dword [rbp + 0x300], 0xbab1e
mov qword [rsp + 0x20], rax
lea ebx, [rdi + 0x239610]
mov dword [rbp + 0x304], 0xe3a00000
mov rcx, qword [0x1404c1ac0]
mov r9d, 0x40
mov edx, ebx
mov rcx, qword [rcx + 8]
lea r8d, [r9 - 0x38]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea r8, [rbp + 0x300]
mov r9d, 8
mov qword [rsp + 0x20], 0
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov rcx, qword [0x1404c1ac0]
mov r8d, 8
mov r9d, dword [rsp + 0x30]
mov edx, ebx
mov qword [rsp + 0x20], 0
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea rax, [rsp + 0x34]
mov r9d, 0x40
mov dword [rbp + 0x308], 0xe12fff1e
mov dword [rbp + 0x30c], 0xe28d4008
lea ebx, [rdi + 0x239618]
mov edx, ebx
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 8]
lea r8d, [r9 - 0x38]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea r8, [rbp + 0x308]
mov r9d, 8
mov qword [rsp + 0x20], 0
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov rcx, qword [0x1404c1ac0]
mov r8d, 8
mov r9d, dword [rsp + 0x34]
mov edx, ebx
mov qword [rsp + 0x20], 0
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea rax, [rsp + 0x38]
mov r9d, 0x40
mov dword [rbp + 0x310], 0xe3a00000
mov dword [rbp + 0x314], 0xe12fff1e
lea ebx, [rdi + 0x239838]
mov edx, ebx
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 8]
lea r8d, [r9 - 0x38]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea r8, [rbp + 0x310]
mov r9d, 8
mov qword [rsp + 0x20], 0
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov rcx, qword [0x1404c1ac0]
mov r8d, 8
mov r9d, dword [rsp + 0x38]
mov edx, ebx
mov qword [rsp + 0x20], 0
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea rax, [rsp + 0x3c]
mov r9d, 0x40
mov dword [rbp + 0x318], 0xeafffff2
mov dword [rbp + 0x31c], 0xe3a00000
lea ebx, [rdi + 0x239888]
mov edx, ebx
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 8]
lea r8d, [r9 - 0x38]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea r8, [rbp + 0x318]
mov r9d, 8
mov qword [rsp + 0x20], 0
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov rcx, qword [0x1404c1ac0]
mov r8d, 8
mov r9d, dword [rsp + 0x3c]
mov edx, ebx
mov qword [rsp + 0x20], 0
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea rax, [rsp + 0x40]
mov r9d, 0x40
mov dword [rbp + 0x320], 0xe12fff1e
mov dword [rbp + 0x324], 0xe1a04000
lea ebx, [rdi + 0x239890]
mov edx, ebx
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 8]
lea r8d, [r9 - 0x38]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea r8, [rbp + 0x320]
mov r9d, 8
mov qword [rsp + 0x20], 0
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov rcx, qword [0x1404c1ac0]
mov r8d, 8
mov r9d, dword [rsp + 0x40]
mov edx, ebx
mov qword [rsp + 0x20], 0
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea rax, [rsp + 0x44]
mov r9d, 0x40
mov dword [rbp + 0x328], 0xe3a00000
mov dword [rbp + 0x32c], 0xe12fff1e
lea ebx, [rdi + 0x2398e8]
mov edx, ebx
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 8]
lea r8d, [r9 - 0x38]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea r8, [rbp + 0x328]
mov r9d, 8
mov qword [rsp + 0x20], 0
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov rcx, qword [0x1404c1ac0]
mov r8d, 8
mov r9d, dword [rsp + 0x44]
mov edx, ebx
mov qword [rsp + 0x20], 0
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea rax, [rsp + 0x48]
mov r9d, 0x40
mov dword [rbp + 0x330], 0xeaffffed
mov dword [rbp + 0x334], 0xe3a00000
lea ebx, [rdi + 0x23a698]
mov edx, ebx
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 8]
lea r8d, [r9 - 0x38]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea r8, [rbp + 0x330]
mov qword [rsp + 0x20], 0
mov r9d, 8
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov rcx, qword [0x1404c1ac0]
mov r8d, 8
mov r9d, dword [rsp + 0x48]
mov edx, ebx
mov qword [rsp + 0x20], 0
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea rax, [rsp + 0x4c]
mov r9d, 0x40
mov dword [rbp + 0x338], 0xe12fff1e
mov dword [rbp + 0x33c], 0xe1a04000
lea ebx, [rdi + 0x23a6a0]
mov edx, ebx
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 8]
lea r8d, [r9 - 0x38]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea r8, [rbp + 0x338]
mov r9d, 8
mov qword [rsp + 0x20], 0
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov rcx, qword [0x1404c1ac0]
mov r8d, 8
mov r9d, dword [rsp + 0x4c]
mov edx, ebx
mov qword [rsp + 0x20], 0
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea rax, [rsp + 0x50]
mov r9d, 0x40
mov dword [rbp + 0x340], 0xea000a7c
mov dword [rbp + 0x344], 0xe3a00000
lea ebx, [rdi + 0x23a6d8]
mov edx, ebx
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 8]
lea r8d, [r9 - 0x38]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea r8, [rbp + 0x340]
mov r9d, 8
mov qword [rsp + 0x20], 0
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov rcx, qword [0x1404c1ac0]
mov r8d, 8
mov r9d, dword [rsp + 0x50]
mov edx, ebx
mov qword [rsp + 0x20], 0
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea rax, [rsp + 0x54]
mov r9d, 0x40
mov dword [rbp + 0x348], 0xe12fff1e
mov dword [rbp + 0x34c], 0xe08f4004
lea ebx, [rdi + 0x23a6e0]
mov edx, ebx
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 8]
lea r8d, [r9 - 0x38]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea r8, [rbp + 0x348]
mov r9d, 8
mov qword [rsp + 0x20], 0
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov r9d, dword [rsp + 0x54]
mov r8d, 8
mov rcx, qword [0x1404c1ac0]
mov edx, ebx
mov qword [rsp + 0x20], 0
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea rax, [rsp + 0x58]
mov r9d, 0x40
mov dword [rbp + 0x350], 0xe3a00000
mov dword [rbp + 0x354], 0xe12fff1e
lea ebx, [rdi + 0x23a750]
mov edx, ebx
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 8]
lea r8d, [r9 - 0x38]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea r8, [rbp + 0x350]
mov r9d, 8
mov qword [rsp + 0x20], 0
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov rcx, qword [0x1404c1ac0]
mov r8d, 8
mov r9d, dword [rsp + 0x58]
mov edx, ebx
mov qword [rsp + 0x20], 0
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea rax, [rsp + 0x5c]
mov r9d, 0x40
mov dword [rbp + 0x358], 0xe3a00000
mov dword [rbp + 0x35c], 0xe12fff1e
lea ebx, [rdi + 0x23a758]
mov edx, ebx
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 8]
lea r8d, [r9 - 0x38]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea r8, [rbp + 0x358]
mov r9d, 8
mov qword [rsp + 0x20], 0
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov rcx, qword [0x1404c1ac0]
mov r8d, 8
mov r9d, dword [rsp + 0x5c]
mov edx, ebx
mov qword [rsp + 0x20], 0
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea rax, [rsp + 0x60]
mov r9d, 0x40
mov dword [rbp + 0x360], 0xe3a00000
mov dword [rbp + 0x364], 0xe12fff1e
lea ebx, [rdi + 0x23a760]
mov edx, ebx
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 8]
lea r8d, [r9 - 0x38]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea r8, [rbp + 0x360]
mov r9d, 8
mov qword [rsp + 0x20], 0
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov rcx, qword [0x1404c1ac0]
mov r8d, 8
mov r9d, dword [rsp + 0x60]
mov edx, ebx
mov qword [rsp + 0x20], 0
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
lea rax, [rsp + 0x64]
mov dword [rbp + 0x368], 0xe3a00000
mov dword [rbp + 0x36c], 0xe12fff1e
lea ebx, [rdi + 0x23d0d0]
mov rcx, qword [0x1404c1ac0]
mov r9d, 0x40
mov edx, ebx
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 8]
lea r8d, [r9 - 0x38]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea r8, [rbp + 0x368]
mov r9d, 8
mov qword [rsp + 0x20], 0
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov rcx, qword [0x1404c1ac0]
mov r8d, 8
mov r9d, dword [rsp + 0x64]
mov edx, ebx
mov qword [rsp + 0x20], 0
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea rax, [rsp + 0x68]
mov r9d, 0x40
mov dword [rbp + 0x370], 0xe3a00000
mov dword [rbp + 0x374], 0xe12fff1e
lea ebx, [rdi + 0x23d540]
mov edx, ebx
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 8]
lea r8d, [r9 - 0x38]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea r8, [rbp + 0x370]
mov r9d, 8
mov qword [rsp + 0x20], 0
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov rcx, qword [0x1404c1ac0]
mov r8d, 8
mov r9d, dword [rsp + 0x68]
mov edx, ebx
mov qword [rsp + 0x20], 0
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea rax, [rsp + 0x6c]
mov r9d, 0x40
mov dword [rbp + 0x378], 0xe3a00000
mov dword [rbp + 0x37c], 0xe12fff1e
lea ebx, [rdi + 0x23ddf8]
mov edx, ebx
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 8]
lea r8d, [r9 - 0x38]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea r8, [rbp + 0x378]
mov r9d, 8
mov qword [rsp + 0x20], 0
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov rcx, qword [0x1404c1ac0]
mov r8d, 8
mov r9d, dword [rsp + 0x6c]
mov edx, ebx
mov qword [rsp + 0x20], 0
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea ebx, [rdi + 0x23dfd0]
mov r9d, 0x40
mov dword [rbp + 0x380], 0xe3a00000
lea rax, [rsp + 0x70]
mov dword [rbp + 0x384], 0xe12fff1e
mov qword [rsp + 0x20], rax
mov edx, ebx
mov rcx, qword [rcx + 8]
lea r8d, [r9 - 0x38]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea r8, [rbp + 0x380]
mov r9d, 8
mov qword [rsp + 0x20], 0
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov rcx, qword [0x1404c1ac0]
mov r8d, 8
mov r9d, dword [rsp + 0x70]
mov edx, ebx
mov qword [rsp + 0x20], 0
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea rax, [rsp + 0x74]
mov r9d, 0x40
mov dword [rbp + 0x388], 0xe3a00000
mov dword [rbp + 0x38c], 0xe12fff1e
lea ebx, [rdi + 0x23e158]
mov edx, ebx
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 8]
lea r8d, [r9 - 0x38]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea r8, [rbp + 0x388]
mov r9d, 8
mov qword [rsp + 0x20], 0
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov rcx, qword [0x1404c1ac0]
mov r8d, 8
mov r9d, dword [rsp + 0x74]
mov edx, ebx
mov qword [rsp + 0x20], 0
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea rax, [rsp + 0x78]
mov r9d, 0x40
mov dword [rbp + 0x390], 0xe8bd8070
mov dword [rbp + 0x394], 0xe3a00000
lea ebx, [rdi + 0x2466e8]
mov edx, ebx
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 8]
lea r8d, [r9 - 0x38]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea r8, [rbp + 0x390]
mov r9d, 8
mov qword [rsp + 0x20], 0
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov rcx, qword [0x1404c1ac0]
mov r8d, 8
mov r9d, dword [rsp + 0x78]
mov edx, ebx
mov qword [rsp + 0x20], 0
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea rax, [rsp + 0x7c]
mov r9d, 0x40
mov dword [rbp + 0x398], 0xe12fff1e
mov dword [rbp + 0x39c], 0xe59f33f4
lea ebx, [rdi + 0x2466f0]
mov edx, ebx
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 8]
lea r8d, [r9 - 0x38]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea r8, [rbp + 0x398]
mov r9d, 8
mov qword [rsp + 0x20], 0
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov rcx, qword [0x1404c1ac0]
mov r8d, 8
mov r9d, dword [rsp + 0x7c]
mov edx, ebx
mov qword [rsp + 0x20], 0
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea rax, [rbp - 0x80]
mov r9d, 0x40
mov dword [rbp + 0x3a0], 0xea006f4f
mov dword [rbp + 0x3a4], 0xe3a00000
lea ebx, [rdi + 0x246cf0]
mov edx, ebx
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 8]
lea r8d, [r9 - 0x38]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea r8, [rbp + 0x3a0]
mov r9d, 8
mov qword [rsp + 0x20], 0
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov rcx, qword [0x1404c1ac0]
mov r8d, 8
mov r9d, dword [rbp - 0x80]
mov edx, ebx
mov qword [rsp + 0x20], 0
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea rax, [rbp - 0x7c]
mov r9d, 0x40
mov dword [rbp + 0x3a8], 0xe12fff1e
mov dword [rbp + 0x3ac], 0xe1a05000
lea ebx, [rdi + 0x246cf8]
mov edx, ebx
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 8]
lea r8d, [r9 - 0x38]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea r8, [rbp + 0x3a8]
mov r9d, 8
mov qword [rsp + 0x20], 0
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov rcx, qword [0x1404c1ac0]
mov r8d, 8
mov r9d, dword [rbp - 0x7c]
mov edx, ebx
mov qword [rsp + 0x20], 0
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea rax, [rbp - 0x78]
mov r9d, 0x40
mov dword [rbp + 0x3b0], 0xfffffc78
mov dword [rbp + 0x3b4], 0xe3a00000
lea ebx, [rdi + 0x2486f8]
mov edx, ebx
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 8]
lea r8d, [r9 - 0x38]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea r8, [rbp + 0x3b0]
mov r9d, 8
mov qword [rsp + 0x20], 0
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov r9d, dword [rbp - 0x78]
mov r8d, 8
mov edx, ebx
mov qword [rsp + 0x20], 0
mov rcx, qword [0x1404c1ac0]
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea rax, [rbp - 0x74]
mov r9d, 0x40
mov dword [rbp + 0x3b8], 0xe12fff1e
mov dword [rbp + 0x3bc], 0xe1a05000
lea ebx, [rdi + 0x248700]
mov edx, ebx
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 8]
lea r8d, [r9 - 0x38]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea r8, [rbp + 0x3b8]
mov r9d, 8
mov qword [rsp + 0x20], 0
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov rcx, qword [0x1404c1ac0]
mov r8d, 8
mov r9d, dword [rbp - 0x74]
mov edx, ebx
mov qword [rsp + 0x20], 0
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea rax, [rbp - 0x70]
mov r9d, 0x40
mov dword [rbp + 0x3c0], 0xe3a00000
mov dword [rbp + 0x3c4], 0xe12fff1e
lea ebx, [rdi + 0x2488e0]
mov edx, ebx
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 8]
lea r8d, [r9 - 0x38]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea r8, [rbp + 0x3c0]
mov r9d, 8
mov qword [rsp + 0x20], 0
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov rcx, qword [0x1404c1ac0]
mov r8d, 8
mov r9d, dword [rbp - 0x70]
mov edx, ebx
mov qword [rsp + 0x20], 0
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea rax, [rbp - 0x6c]
mov r9d, 0x40
mov dword [rbp + 0x3c8], 0xe3a00000
mov dword [rbp + 0x3cc], 0xe12fff1e
lea ebx, [rdi + 0x24c9e8]
mov edx, ebx
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 8]
lea r8d, [r9 - 0x38]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea r8, [rbp + 0x3c8]
mov r9d, 8
mov qword [rsp + 0x20], 0
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov rcx, qword [0x1404c1ac0]
mov r8d, 8
mov r9d, dword [rbp - 0x6c]
mov edx, ebx
mov qword [rsp + 0x20], 0
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov dword [rbp + 0x3d0], 0xe3a00000
lea ebx, [rdi + 0x24ffc8]
mov dword [rbp + 0x3d4], 0xe12fff1e
mov rcx, qword [0x1404c1ac0]
lea rax, [rbp - 0x68]
mov r9d, 0x40
mov qword [rsp + 0x20], rax
mov edx, ebx
mov rcx, qword [rcx + 8]
lea r8d, [r9 - 0x38]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea r8, [rbp + 0x3d0]
mov r9d, 8
mov qword [rsp + 0x20], 0
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov rcx, qword [0x1404c1ac0]
mov r8d, 8
mov r9d, dword [rbp - 0x68]
mov edx, ebx
mov qword [rsp + 0x20], 0
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea rax, [rbp - 0x64]
mov r9d, 0x40
mov dword [rbp + 0x3d8], 0xe3a00000
mov dword [rbp + 0x3dc], 0xe12fff1e
lea ebx, [rdi + 0x252be8]
mov edx, ebx
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 8]
lea r8d, [r9 - 0x38]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea r8, [rbp + 0x3d8]
mov r9d, 8
mov qword [rsp + 0x20], 0
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov rcx, qword [0x1404c1ac0]
mov r8d, 8
mov r9d, dword [rbp - 0x64]
mov edx, ebx
mov qword [rsp + 0x20], 0
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea rax, [rbp - 0x60]
mov r9d, 0x40
mov dword [rbp + 0x3e0], 0xdd288
mov dword [rbp + 0x3e4], 0xe3a00000
lea ebx, [rdi + 0x253908]
mov edx, ebx
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 8]
lea r8d, [r9 - 0x38]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea r8, [rbp + 0x3e0]
mov r9d, 8
mov qword [rsp + 0x20], 0
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov rcx, qword [0x1404c1ac0]
mov r8d, 8
mov r9d, dword [rbp - 0x60]
mov edx, ebx
mov qword [rsp + 0x20], 0
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea ebx, [rdi + 0x253910]
mov r9d, 0x40
mov dword [rbp + 0x3e8], 0xe12fff1e
lea rax, [rbp - 0x5c]
mov dword [rbp + 0x3ec], 0xe1a04000
mov qword [rsp + 0x20], rax
mov edx, ebx
lea r8d, [r9 - 0x38]
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea r8, [rbp + 0x3e8]
mov r9d, 8
mov qword [rsp + 0x20], 0
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov rcx, qword [0x1404c1ac0]
mov r8d, 8
mov r9d, dword [rbp - 0x5c]
mov edx, ebx
mov qword [rsp + 0x20], 0
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea rax, [rbp - 0x58]
mov r9d, 0x40
mov dword [rbp + 0x3f0], 0xe3a00000
mov dword [rbp + 0x3f4], 0xe12fff1e
lea ebx, [rdi + 0x253b68]
mov edx, ebx
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 8]
lea r8d, [r9 - 0x38]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea r8, [rbp + 0x3f0]
mov r9d, 8
mov qword [rsp + 0x20], 0
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov rcx, qword [0x1404c1ac0]
mov r8d, 8
mov r9d, dword [rbp - 0x58]
mov edx, ebx
mov qword [rsp + 0x20], 0
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea rax, [rbp - 0x54]
mov r9d, 0x40
mov dword [rbp + 0x3f8], 0xe3a00000
mov dword [rbp + 0x3fc], 0xe12fff1e
lea ebx, [rdi + 0x256d90]
mov edx, ebx
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 8]
lea r8d, [r9 - 0x38]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea r8, [rbp + 0x3f8]
mov r9d, 8
mov qword [rsp + 0x20], 0
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov rcx, qword [0x1404c1ac0]
mov r8d, 8
mov r9d, dword [rbp - 0x54]
mov edx, ebx
mov qword [rsp + 0x20], 0
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea rax, [rbp - 0x50]
mov r9d, 0x40
mov dword [rbp + 0x400], 0x8915
mov dword [rbp + 0x404], 0xe3a00000
lea ebx, [rdi + 0x256eb0]
mov edx, ebx
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 8]
lea r8d, [r9 - 0x38]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov r9d, 8
mov qword [rsp + 0x20], 0
lea r8, [rbp + 0x400]
mov edx, ebx
mov rcx, qword [0x1404c1ac0]
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov rcx, qword [0x1404c1ac0]
mov r8d, 8
mov r9d, dword [rbp - 0x50]
mov edx, ebx
mov qword [rsp + 0x20], 0
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea rax, [rbp - 0x4c]
mov r9d, 0x40
mov dword [rbp + 0x408], 0xe12fff1e
mov dword [rbp + 0x40c], 0xe24dde11
lea ebx, [rdi + 0x256eb8]
mov edx, ebx
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 8]
lea r8d, [r9 - 0x38]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea r8, [rbp + 0x408]
mov r9d, 8
mov qword [rsp + 0x20], 0
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov rcx, qword [0x1404c1ac0]
mov r8d, 8
mov r9d, dword [rbp - 0x4c]
mov edx, ebx
mov qword [rsp + 0x20], 0
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea rax, [rbp - 0x48]
mov r9d, 0x40
mov dword [rbp + 0x410], 0xe3a00000
mov dword [rbp + 0x414], 0xe12fff1e
lea ebx, [rdi + 0x256ec0]
mov edx, ebx
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 8]
lea r8d, [r9 - 0x38]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea r8, [rbp + 0x410]
mov r9d, 8
mov qword [rsp + 0x20], 0
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov rcx, qword [0x1404c1ac0]
mov r8d, 8
mov r9d, dword [rbp - 0x48]
mov edx, ebx
mov qword [rsp + 0x20], 0
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea rax, [rbp - 0x44]
mov r9d, 0x40
mov dword [rbp + 0x418], 0xd6e40
mov dword [rbp + 0x41c], 0xe3a00000
lea ebx, [rdi + 0x25a6d0]
mov edx, ebx
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 8]
lea r8d, [r9 - 0x38]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea r8, [rbp + 0x418]
mov r9d, 8
mov qword [rsp + 0x20], 0
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov r9d, dword [rbp - 0x44]
mov r8d, 8
mov qword [rsp + 0x20], 0
mov rcx, qword [0x1404c1ac0]
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea rax, [rbp - 0x40]
mov r9d, 0x40
mov dword [rbp + 0x420], 0xe12fff1e
mov dword [rbp + 0x424], 0xe3a01000
lea ebx, [rdi + 0x25a6d8]
mov edx, ebx
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 8]
lea r8d, [r9 - 0x38]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea r8, [rbp + 0x420]
mov r9d, 8
mov qword [rsp + 0x20], 0
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov rcx, qword [0x1404c1ac0]
mov r8d, 8
mov r9d, dword [rbp - 0x40]
mov edx, ebx
mov qword [rsp + 0x20], 0
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea rax, [rbp - 0x3c]
mov r9d, 0x40
mov dword [rbp + 0x428], 0x106f7c
mov dword [rbp + 0x42c], 0xe3a00000
lea ebx, [rdi + 0x25d868]
mov edx, ebx
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 8]
lea r8d, [r9 - 0x38]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea r8, [rbp + 0x428]
mov r9d, 8
mov qword [rsp + 0x20], 0
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov rcx, qword [0x1404c1ac0]
mov r8d, 8
mov r9d, dword [rbp - 0x3c]
mov edx, ebx
mov qword [rsp + 0x20], 0
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea rax, [rbp - 0x38]
mov r9d, 0x40
mov dword [rbp + 0x430], 0xe12fff1e
mov dword [rbp + 0x434], 0xe5903004
lea ebx, [rdi + 0x25d870]
mov edx, ebx
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 8]
lea r8d, [r9 - 0x38]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea r8, [rbp + 0x430]
mov r9d, 8
mov qword [rsp + 0x20], 0
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov rcx, qword [0x1404c1ac0]
mov r8d, 8
mov r9d, dword [rbp - 0x38]
mov edx, ebx
mov qword [rsp + 0x20], 0
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov dword [rbp + 0x438], 0xe3a00000
mov dword [rbp + 0x43c], 0xe12fff1e
mov rcx, qword [0x1404c1ac0]
lea rax, [rbp - 0x34]
mov r9d, 0x40
mov qword [rsp + 0x20], rax
lea ebx, [rdi + 0x25f620]
mov edx, ebx
mov rcx, qword [rcx + 8]
lea r8d, [r9 - 0x38]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea r8, [rbp + 0x438]
mov r9d, 8
mov qword [rsp + 0x20], 0
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov rcx, qword [0x1404c1ac0]
mov r8d, 8
mov r9d, dword [rbp - 0x34]
mov edx, ebx
mov qword [rsp + 0x20], 0
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea rax, [rbp - 0x30]
mov r9d, 0x40
mov dword [rbp + 0x440], 0xe3a00000
mov dword [rbp + 0x444], 0xe12fff1e
lea ebx, [rdi + 0x25fbf0]
mov edx, ebx
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 8]
lea r8d, [r9 - 0x38]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea r8, [rbp + 0x440]
mov r9d, 8
mov qword [rsp + 0x20], 0
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov rcx, qword [0x1404c1ac0]
mov r8d, 8
mov r9d, dword [rbp - 0x30]
mov edx, ebx
mov qword [rsp + 0x20], 0
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea rax, [rbp - 0x2c]
mov r9d, 0x40
mov dword [rbp + 0x448], 0xe3a00000
mov dword [rbp + 0x44c], 0xe12fff1e
lea ebx, [rdi + 0x260798]
mov edx, ebx
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 8]
lea r8d, [r9 - 0x38]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea r8, [rbp + 0x448]
mov r9d, 8
mov qword [rsp + 0x20], 0
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov rcx, qword [0x1404c1ac0]
mov r8d, 8
mov r9d, dword [rbp - 0x2c]
mov edx, ebx
mov qword [rsp + 0x20], 0
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov r9d, 0x40
mov dword [rbp + 0x450], 0xe12fff1e
lea ebx, [rdi + 0x2651e0]
mov dword [rbp + 0x454], 0xe3a00000
lea rax, [rbp - 0x28]
mov edx, ebx
mov qword [rsp + 0x20], rax
lea r8d, [r9 - 0x38]
mov rcx, qword [0x1404c1ac0]
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea r8, [rbp + 0x450]
mov r9d, 8
mov qword [rsp + 0x20], 0
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov rcx, qword [0x1404c1ac0]
mov r8d, 8
mov r9d, dword [rbp - 0x28]
mov edx, ebx
mov qword [rsp + 0x20], 0
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea rax, [rbp - 0x24]
mov r9d, 0x40
mov dword [rbp + 0x458], 0xe12fff1e
mov dword [rbp + 0x45c], 0xe24dd02c
lea ebx, [rdi + 0x2651e8]
mov edx, ebx
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 8]
lea r8d, [r9 - 0x38]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea r8, [rbp + 0x458]
mov r9d, 8
mov qword [rsp + 0x20], 0
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov rcx, qword [0x1404c1ac0]
mov r8d, 8
mov r9d, dword [rbp - 0x24]
mov edx, ebx
mov qword [rsp + 0x20], 0
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea rax, [rbp - 0x20]
mov r9d, 0x40
mov dword [rbp + 0x460], 0xeafffff1
mov dword [rbp + 0x464], 0xe3a00000
lea ebx, [rdi + 0x2652f8]
mov edx, ebx
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 8]
lea r8d, [r9 - 0x38]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea r8, [rbp + 0x460]
mov r9d, 8
mov qword [rsp + 0x20], 0
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov rcx, qword [0x1404c1ac0]
mov r8d, 8
mov r9d, dword [rbp - 0x20]
mov edx, ebx
mov qword [rsp + 0x20], 0
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea rax, [rbp - 0x1c]
mov r9d, 0x40
mov dword [rbp + 0x468], 0xe12fff1e
mov dword [rbp + 0x46c], 0xe24dd030
lea ebx, [rdi + 0x265300]
mov edx, ebx
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 8]
lea r8d, [r9 - 0x38]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov r9d, 8
mov qword [rsp + 0x20], 0
lea r8, [rbp + 0x468]
mov rcx, qword [0x1404c1ac0]
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov rcx, qword [0x1404c1ac0]
mov r8d, 8
mov r9d, dword [rbp - 0x1c]
mov edx, ebx
mov qword [rsp + 0x20], 0
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea rax, [rbp - 0x18]
mov r9d, 0x40
mov dword [rbp + 0x470], 0xeaffffe3
mov dword [rbp + 0x474], 0xe3a00000
lea ebx, [rdi + 0x265488]
mov edx, ebx
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 8]
lea r8d, [r9 - 0x38]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea r8, [rbp + 0x470]
mov r9d, 8
mov qword [rsp + 0x20], 0
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov rcx, qword [0x1404c1ac0]
mov r8d, 8
mov r9d, dword [rbp - 0x18]
mov edx, ebx
mov qword [rsp + 0x20], 0
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea rax, [rbp - 0x14]
mov r9d, 0x40
mov dword [rbp + 0x478], 0xe12fff1e
mov dword [rbp + 0x47c], 0xe24ddf4b
lea ebx, [rdi + 0x265490]
mov edx, ebx
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 8]
lea r8d, [r9 - 0x38]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea r8, [rbp + 0x478]
mov r9d, 8
mov qword [rsp + 0x20], 0
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov rcx, qword [0x1404c1ac0]
mov r8d, 8
mov r9d, dword [rbp - 0x14]
mov edx, ebx
mov qword [rsp + 0x20], 0
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea rax, [rbp - 0x10]
mov r9d, 0x40
mov dword [rbp + 0x480], 0xffff9400
mov dword [rbp + 0x484], 0xe3a00000
lea ebx, [rdi + 0x265e48]
mov edx, ebx
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 8]
lea r8d, [r9 - 0x38]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea r8, [rbp + 0x480]
mov r9d, 8
mov qword [rsp + 0x20], 0
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov r9d, dword [rbp - 0x10]
mov qword [rsp + 0x20], 0
mov rcx, qword [0x1404c1ac0]
mov r8d, 8
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea rax, [rbp - 0xc]
mov r9d, 0x40
mov dword [rbp + 0x488], 0xe12fff1e
mov dword [rbp + 0x48c], 0xe5908034
lea ebx, [rdi + 0x265e50]
mov edx, ebx
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 8]
lea r8d, [r9 - 0x38]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea r8, [rbp + 0x488]
mov r9d, 8
mov qword [rsp + 0x20], 0
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov rcx, qword [0x1404c1ac0]
mov r8d, 8
mov r9d, dword [rbp - 0xc]
mov edx, ebx
mov qword [rsp + 0x20], 0
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea rax, [rbp - 8]
mov r9d, 0x40
mov dword [rbp + 0x490], 0xe8bd8010
mov dword [rbp + 0x494], 0xe3a00000
lea ebx, [rdi + 0x2667f0]
mov edx, ebx
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 8]
lea r8d, [r9 - 0x38]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea r8, [rbp + 0x490]
mov r9d, 8
mov qword [rsp + 0x20], 0
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov rcx, qword [0x1404c1ac0]
mov r8d, 8
mov r9d, dword [rbp - 8]
mov edx, ebx
mov qword [rsp + 0x20], 0
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea rax, [rbp - 4]
mov r9d, 0x40
mov dword [rbp + 0x498], 0xe12fff1e
mov dword [rbp + 0x49c], 0xe59f6530
lea ebx, [rdi + 0x2667f8]
mov edx, ebx
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 8]
lea r8d, [r9 - 0x38]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea r8, [rbp + 0x498]
mov r9d, 8
mov qword [rsp + 0x20], 0
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov rcx, qword [0x1404c1ac0]
mov r8d, 8
mov r9d, dword [rbp - 4]
mov edx, ebx
mov qword [rsp + 0x20], 0
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov dword [rbp + 0x4a0], 0xe3a00000
mov rcx, qword [0x1404c1ac0]
lea rax, [rbp]
mov r9d, 0x40
mov dword [rbp + 0x4a4], 0xe12fff1e
lea ebx, [rdi + 0x27c5a0]
mov qword [rsp + 0x20], rax
mov edx, ebx
mov rcx, qword [rcx + 8]
lea r8d, [r9 - 0x38]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea r8, [rbp + 0x4a0]
mov r9d, 8
mov qword [rsp + 0x20], 0
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov rcx, qword [0x1404c1ac0]
mov r8d, 8
mov r9d, dword [rbp]
mov edx, ebx
mov qword [rsp + 0x20], 0
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea rax, [rbp + 4]
mov r9d, 0x40
mov dword [rbp + 0x4a8], 0xe3a00000
mov dword [rbp + 0x4ac], 0xe12fff1e
lea ebx, [rdi + 0x27ca28]
mov edx, ebx
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 8]
lea r8d, [r9 - 0x38]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea r8, [rbp + 0x4a8]
mov r9d, 8
mov qword [rsp + 0x20], 0
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov rcx, qword [0x1404c1ac0]
mov r8d, 8
mov r9d, dword [rbp + 4]
mov edx, ebx
mov qword [rsp + 0x20], 0
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea rax, [rbp + 8]
mov r9d, 0x40
mov dword [rbp + 0x4b0], 0xe8bd8070
mov dword [rbp + 0x4b4], 0xe3a00000
lea ebx, [rdi + 0x27caf8]
mov edx, ebx
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 8]
lea r8d, [r9 - 0x38]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea r8, [rbp + 0x4b0]
mov r9d, 8
mov qword [rsp + 0x20], 0
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov rcx, qword [0x1404c1ac0]
mov r8d, 8
mov r9d, dword [rbp + 8]
mov edx, ebx
mov qword [rsp + 0x20], 0
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov r9d, 0x40
mov dword [rbp + 0x4b8], 0xe12fff1e
lea rax, [rbp + 0xc]
mov dword [rbp + 0x4bc], 0xe1a05001
lea ebx, [rdi + 0x27cb00]
mov qword [rsp + 0x20], rax
lea r8d, [r9 - 0x38]
mov rcx, qword [0x1404c1ac0]
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea r8, [rbp + 0x4b8]
mov r9d, 8
mov qword [rsp + 0x20], 0
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov rcx, qword [0x1404c1ac0]
mov r8d, 8
mov r9d, dword [rbp + 0xc]
mov edx, ebx
mov qword [rsp + 0x20], 0
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea rax, [rbp + 0x10]
mov r9d, 0x40
mov dword [rbp + 0x4c0], 0xe3a00000
mov dword [rbp + 0x4c4], 0xe12fff1e
lea ebx, [rdi + 0x294250]
mov edx, ebx
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 8]
lea r8d, [r9 - 0x38]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea r8, [rbp + 0x4c0]
mov r9d, 8
mov qword [rsp + 0x20], 0
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov rcx, qword [0x1404c1ac0]
mov r8d, 8
mov r9d, dword [rbp + 0x10]
mov edx, ebx
mov qword [rsp + 0x20], 0
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea rax, [rbp + 0x14]
mov r9d, 0x40
mov qword [rbp + 0x4c8], reloc.WS2_32.dll_WSAStartup
lea ebx, [rdi + 0x3849b8]
mov qword [rsp + 0x20], rax
mov edx, ebx
mov rcx, qword [rcx + 8]
lea r8d, [r9 - 0x38]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea r8, [rbp + 0x4c8]
mov r9d, 8
mov qword [rsp + 0x20], 0
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov rcx, qword [0x1404c1ac0]
mov r8d, 8
mov r9d, dword [rbp + 0x14]
mov edx, ebx
mov qword [rsp + 0x20], 0
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea rax, [rbp + 0x18]
mov r9d, 0x40
mov qword [rbp + 0x4d0], 0
lea ebx, [rdi + 0x3849c0]
mov qword [rsp + 0x20], rax
mov edx, ebx
mov rcx, qword [rcx + 8]
lea r8d, [r9 - 0x38]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov r9d, 8
mov qword [rsp + 0x20], 0
lea r8, [rbp + 0x4d0]
mov edx, ebx
mov rcx, qword [0x1404c1ac0]
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov rcx, qword [0x1404c1ac0]
mov r8d, 8
mov r9d, dword [rbp + 0x18]
mov edx, ebx
mov qword [rsp + 0x20], 0
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea rax, [rbp + 0x1c]
mov r9d, 0x40
mov qword [rbp + 0x4d8], 0
lea ebx, [rdi + 0x3849c8]
mov qword [rsp + 0x20], rax
mov edx, ebx
mov rcx, qword [rcx + 8]
lea r8d, [r9 - 0x38]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea r8, [rbp + 0x4d8]
mov r9d, 8
mov qword [rsp + 0x20], 0
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov rcx, qword [0x1404c1ac0]
mov r8d, 8
mov r9d, dword [rbp + 0x1c]
mov edx, ebx
mov qword [rsp + 0x20], 0
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea rax, [rbp + 0x20]
mov r9d, 0x40
mov qword [rbp + 0x4e0], 0
lea ebx, [rdi + 0x3849d0]
mov qword [rsp + 0x20], rax
mov edx, ebx
mov rcx, qword [rcx + 8]
lea r8d, [r9 - 0x38]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea r8, [rbp + 0x4e0]
mov r9d, 8
mov qword [rsp + 0x20], 0
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov rcx, qword [0x1404c1ac0]
mov r8d, 8
mov r9d, dword [rbp + 0x20]
mov edx, ebx
mov qword [rsp + 0x20], 0
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea rax, [rbp + 0x24]
mov r9d, 0x40
mov qword [rbp + 0x4e8], 0
lea ebx, [rdi + 0x3849d8]
mov qword [rsp + 0x20], rax
mov edx, ebx
mov rcx, qword [rcx + 8]
lea r8d, [r9 - 0x38]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea r8, [rbp + 0x4e8]
mov r9d, 8
mov qword [rsp + 0x20], 0
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov rcx, qword [0x1404c1ac0]
mov r8d, 8
mov r9d, dword [rbp + 0x24]
mov edx, ebx
mov qword [rsp + 0x20], 0
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea rax, [rbp + 0x28]
mov r9d, 0x40
mov qword [rbp + 0x4f0], 0
lea ebx, [rdi + 0x3849e0]
mov qword [rsp + 0x20], rax
mov edx, ebx
mov rcx, qword [rcx + 8]
lea r8d, [r9 - 0x38]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea r8, [rbp + 0x4f0]
mov r9d, 8
mov qword [rsp + 0x20], 0
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov rcx, qword [0x1404c1ac0]
mov r8d, 8
mov r9d, dword [rbp + 0x28]
mov edx, ebx
mov qword [rsp + 0x20], 0
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea rax, [rbp + 0x2c]
mov r9d, 0x40
mov qword [rbp + 0x4f8], 0
lea ebx, [rdi + 0x3849e8]
mov qword [rsp + 0x20], rax
mov edx, ebx
mov rcx, qword [rcx + 8]
lea r8d, [r9 - 0x38]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea r8, [rbp + 0x4f8]
mov r9d, 8
mov qword [rsp + 0x20], 0
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov rcx, qword [0x1404c1ac0]
mov r8d, 8
mov r9d, dword [rbp + 0x2c]
mov edx, ebx
mov qword [rsp + 0x20], 0
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea rax, [rbp + 0x30]
mov r9d, 0x40
mov qword [rbp + 0x500], 0
lea ebx, [rdi + 0x3849f0]
mov qword [rsp + 0x20], rax
mov edx, ebx
mov rcx, qword [rcx + 8]
lea r8d, [r9 - 0x38]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea r8, [rbp + 0x500]
mov r9d, 8
mov qword [rsp + 0x20], 0
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov rcx, qword [0x1404c1ac0]
mov r8d, 8
mov r9d, dword [rbp + 0x30]
mov edx, ebx
mov qword [rsp + 0x20], 0
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov r9d, 0x40
mov dword [rbp + 0x508], 0
lea ebx, [rdi + 0x3849f8]
mov dword [rbp + 0x50c], 0x6f6d6572
lea rax, [rbp + 0x34]
mov edx, ebx
mov qword [rsp + 0x20], rax
lea r8d, [r9 - 0x38]
mov rcx, qword [0x1404c1ac0]
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea r8, [rbp + 0x508]
mov r9d, 8
mov qword [rsp + 0x20], 0
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov rcx, qword [0x1404c1ac0]
mov r8d, 8
mov r9d, dword [rbp + 0x34]
mov edx, ebx
mov qword [rsp + 0x20], 0
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea rax, [rbp + 0x38]
mov r9d, 0x40
mov qword [rbp + 0x510], 0
lea ebx, [rdi + 0x384a00]
mov qword [rsp + 0x20], rax
mov edx, ebx
mov rcx, qword [rcx + 8]
lea r8d, [r9 - 0x38]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea r8, [rbp + 0x510]
mov r9d, 8
mov qword [rsp + 0x20], 0
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov rcx, qword [0x1404c1ac0]
mov r8d, 8
mov r9d, dword [rbp + 0x38]
mov edx, ebx
mov qword [rsp + 0x20], 0
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea rax, [rbp + 0x3c]
mov r9d, 0x40
mov qword [rbp + 0x518], 0
lea ebx, [rdi + 0x384a08]
mov qword [rsp + 0x20], rax
mov edx, ebx
mov rcx, qword [rcx + 8]
lea r8d, [r9 - 0x38]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea r8, [rbp + 0x518]
mov r9d, 8
mov qword [rsp + 0x20], 0
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov rcx, qword [0x1404c1ac0]
mov r8d, 8
mov r9d, dword [rbp + 0x3c]
mov edx, ebx
mov qword [rsp + 0x20], 0
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea rax, [rbp + 0x40]
mov r9d, 0x40
mov qword [rbp + 0x520], 0
lea ebx, [rdi + 0x384a10]
mov qword [rsp + 0x20], rax
mov edx, ebx
mov rcx, qword [rcx + 8]
lea r8d, [r9 - 0x38]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea r8, [rbp + 0x520]
mov qword [rsp + 0x20], 0
mov r9d, 8
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov rcx, qword [0x1404c1ac0]
mov r8d, 8
mov r9d, dword [rbp + 0x40]
mov edx, ebx
mov qword [rsp + 0x20], 0
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea rax, [rbp + 0x44]
mov r9d, 0x40
mov qword [rbp + 0x528], 0
lea ebx, [rdi + 0x384a18]
mov qword [rsp + 0x20], rax
mov edx, ebx
mov rcx, qword [rcx + 8]
lea r8d, [r9 - 0x38]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea r8, [rbp + 0x528]
mov r9d, 8
mov qword [rsp + 0x20], 0
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov rcx, qword [0x1404c1ac0]
mov r8d, 8
mov r9d, dword [rbp + 0x44]
mov edx, ebx
mov qword [rsp + 0x20], 0
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea rax, [rbp + 0x48]
mov r9d, 0x40
mov qword [rbp + 0x530], 0
lea ebx, [rdi + 0x384a20]
mov qword [rsp + 0x20], rax
mov edx, ebx
mov rcx, qword [rcx + 8]
lea r8d, [r9 - 0x38]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea r8, [rbp + 0x530]
mov r9d, 8
mov qword [rsp + 0x20], 0
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov rcx, qword [0x1404c1ac0]
mov r8d, 8
mov r9d, dword [rbp + 0x48]
mov edx, ebx
mov qword [rsp + 0x20], 0
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea rax, [rbp + 0x4c]
mov r9d, 0x40
mov qword [rbp + 0x538], 0
lea ebx, [rdi + 0x384a28]
mov qword [rsp + 0x20], rax
mov edx, ebx
mov rcx, qword [rcx + 8]
lea r8d, [r9 - 0x38]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea r8, [rbp + 0x538]
mov r9d, 8
mov qword [rsp + 0x20], 0
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov rcx, qword [0x1404c1ac0]
mov r8d, 8
mov r9d, dword [rbp + 0x4c]
mov edx, ebx
mov qword [rsp + 0x20], 0
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov qword [rbp + 0x540], 0
mov rcx, qword [0x1404c1ac0]
lea rax, [rbp + 0x50]
mov r9d, 0x40
mov qword [rsp + 0x20], rax
lea ebx, [rdi + 0x384a30]
mov edx, ebx
mov rcx, qword [rcx + 8]
lea r8d, [r9 - 0x38]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea r8, [rbp + 0x540]
mov r9d, 8
mov qword [rsp + 0x20], 0
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov rcx, qword [0x1404c1ac0]
mov r8d, 8
mov r9d, dword [rbp + 0x50]
mov edx, ebx
mov qword [rsp + 0x20], 0
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea rax, [rbp + 0x54]
mov r9d, 0x40
mov qword [rbp + 0x548], 0
lea ebx, [rdi + 0x384a38]
mov qword [rsp + 0x20], rax
mov edx, ebx
mov rcx, qword [rcx + 8]
lea r8d, [r9 - 0x38]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea r8, [rbp + 0x548]
mov r9d, 8
mov qword [rsp + 0x20], 0
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov rcx, qword [0x1404c1ac0]
mov r8d, 8
mov r9d, dword [rbp + 0x54]
mov edx, ebx
mov qword [rsp + 0x20], 0
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea rax, [rbp + 0x58]
mov r9d, 0x40
mov qword [rbp + 0x550], 0
lea ebx, [rdi + 0x384a40]
mov qword [rsp + 0x20], rax
mov edx, ebx
mov rcx, qword [rcx + 8]
lea r8d, [r9 - 0x38]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [0x1404c1ac0]
lea r8, [rbp + 0x550]
mov r9d, 8
mov qword [rsp + 0x20], 0
mov edx, ebx
mov rcx, qword [rcx + 8]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
mov rcx, qword [0x1404c1ac0]
mov r8d, 8
mov r9d, dword [rbp + 0x58]
mov edx, ebx
mov qword [rsp + 0x20], 0
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [rbp + 0x558]
xor rcx, rsp
call fcn.14025bc30
lea r11, [rsp + 0x660]
mov rbx, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov rsp, r11
pop rbp
ret