Function at 0x140082ba0
Capabilities:
Acquire debug privileges
Allocate or change rwx memory
Hijack thread execution
Resume thread
Suspend thread
Terminate process

Disassembly:
mov qword [rsp + 8], rcx
push rbp
push rsi
push rdi
mov eax, 0x2ca0
call fcn.14014b7b0
sub rsp, rax
lea rbp, [rsp + 0x50]
and rbp, 0xffffffffffffffe0
mov rax, qword [0x1401dedc0]
xor rax, rsp
mov qword [rbp + 0x2c40], rax
mov dword [rbp + 0xb18], 0
mov rax, qword [rsp + 0x2cc0]
cmp qword [rax + 0x10], 0xffffffffffffffff
jne 0x1400830f6
lea rax, [rbp]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rbp + 1]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rbp + 2]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
movzx eax, byte [rbp]
mov byte [rbp + 0x1a0], al
movzx eax, byte [rbp + 1]
mov byte [rbp + 0x1a8], al
movzx eax, byte [rbp + 2]
mov byte [rbp + 0x1b0], al
movabs rax, 0xa82ce30489d55bc6
mov qword [rbp + 0xb20], rax
mov rax, qword [rbp + 0xb20]
mov qword [rbp + 0xb28], rax
mov rax, qword [rbp + 0xb28]
mov qword [rbp + 0x480], rax
movabs rax, 0xd52345f93a8e2df8
mov qword [rbp + 0xb30], rax
mov rax, qword [rbp + 0xb30]
mov qword [rbp + 0xb38], rax
mov rax, qword [rbp + 0xb38]
mov qword [rbp + 0x488], rax
mov rax, qword [rbp + 0xdf8]
mov qword [rbp + 0x3c0], rax
movabs rax, 0xa82ce30489d55ba3
mov qword [rbp + 0xb40], rax
mov rax, qword [rbp + 0xb40]
mov qword [rbp + 0x2b80], rax
movabs rax, 0xd52345f93a8e2df8
mov qword [rbp + 0xb48], rax
mov rax, qword [rbp + 0xb48]
mov qword [rbp + 0x2b88], rax
xor eax, eax
cmp eax, 1
je 0x140082ce9
jmp 0x140082d31
vmovdqu ymm0, ymmword [rbp + 0x2b80]
vmovdqu ymmword [rbp + 0x1080], ymm0
vmovdqu ymm0, ymmword [rbp + 0x480]
vmovdqu ymmword [rbp + 0x1060], ymm0
vmovdqu ymm0, ymmword [rbp + 0x1060]
vpxor ymm0, ymm0, ymmword [rbp + 0x1080]
vmovdqu ymmword [rbp + 0x10a0], ymm0
vmovdqu ymm0, ymmword [rbp + 0x10a0]
vmovdqa ymmword [rbp + 0x480], ymm0
xor eax, eax
cmp eax, 1
je 0x140082d3a
jmp 0x140082d8b
lea rax, [rbp + 0x2ba0]
vmovdqu ymm0, ymmword [rax]
vmovdqu ymmword [rbp + 0x10e0], ymm0
lea rax, [rbp + 0x4a0]
vmovdqu ymm0, ymmword [rax]
vmovdqu ymmword [rbp + 0x10c0], ymm0
vmovdqu ymm0, ymmword [rbp + 0x10c0]
vpxor ymm0, ymm0, ymmword [rbp + 0x10e0]
vmovdqu ymmword [rbp + 0x1100], ymm0
lea rax, [rbp + 0x4a0]
vmovdqu ymm0, ymmword [rbp + 0x1100]
vmovdqu ymmword [rax], ymm0
lea rax, [rbp + 0x2b80]
movdqu xmm0, xmmword [rax]
movdqa xmmword [rbp + 0xc00], xmm0
lea rax, [rbp + 0x480]
movdqu xmm0, xmmword [rax]
movdqa xmmword [rbp + 0xbf0], xmm0
movdqa xmm0, xmmword [rbp + 0xbf0]
xorps xmm0, xmmword [rbp + 0xc00]
movdqa xmmword [rbp + 0xc10], xmm0
lea rax, [rbp + 0x480]
movdqa xmm0, xmmword [rbp + 0xc10]
movdqu xmmword [rax], xmm0
lea rax, [rbp + 0x480]
mov qword [rbp + 0x3c0], rax
lea rax, [rbp + 3]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rbp + 4]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rbp + 5]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
movzx eax, byte [rbp + 3]
mov byte [rbp + 0x48], al
movzx eax, byte [rbp + 4]
mov byte [rbp + 0x50], al
movzx eax, byte [rbp + 5]
mov byte [rbp + 0x58], al
movabs rax, 0xc10c8761e5bc3ae5
mov qword [rbp + 0xb50], rax
mov rax, qword [rbp + 0xb50]
mov qword [rbp + 0xb58], rax
mov rax, qword [rbp + 0xb58]
mov qword [rbp + 0x220], rax
movabs rax, 0xbb4c2c8d59eb4796
mov qword [rbp + 0xb60], rax
mov rax, qword [rbp + 0xb60]
mov qword [rbp + 0x520], rax
mov rax, qword [rbp + 0x520]
mov qword [rbp + 0x228], rax
movabs rax, 0x7fa1693255e80b65
mov qword [rbp + 0x528], rax
mov rax, qword [rbp + 0x528]
mov qword [rbp + 0x530], rax
mov rax, qword [rbp + 0x530]
mov qword [rbp + 0x230], rax
movabs rax, 0x9ea255179ee919a2
mov qword [rbp + 0x538], rax
mov rax, qword [rbp + 0x538]
mov qword [rbp + 0x540], rax
mov rax, qword [rbp + 0x540]
mov qword [rbp + 0x238], rax
mov rax, qword [rbp + 0xe00]
mov qword [rbp + 0x3c8], rax
movabs rax, 0xa82ce30489d55ba3
mov qword [rbp + 0x548], rax
mov rax, qword [rbp + 0x548]
mov qword [rbp + 0x2980], rax
movabs rax, 0xd52345f93a8e2df8
mov qword [rbp + 0x550], rax
mov rax, qword [rbp + 0x550]
mov qword [rbp + 0x2988], rax
movabs rax, 0x7fa1693255d92645
mov qword [rbp + 0x558], rax
mov rax, qword [rbp + 0x558]
mov qword [rbp + 0x2990], rax
movabs rax, 0x9ea255179ee919a2
mov qword [rbp + 0x560], rax
mov rax, qword [rbp + 0x560]
mov qword [rbp + 0x2998], rax
xor eax, eax
test eax, eax
je 0x140082f74
jmp 0x140082fbc
vmovdqa ymm0, ymmword [rbp + 0x2980]
vmovdqu ymmword [rbp + 0x1140], ymm0
vmovdqa ymm0, ymmword [rbp + 0x220]
vmovdqu ymmword [rbp + 0x1120], ymm0
vmovdqu ymm0, ymmword [rbp + 0x1120]
vpxor ymm0, ymm0, ymmword [rbp + 0x1140]
vmovdqu ymmword [rbp + 0x1160], ymm0
vmovdqu ymm0, ymmword [rbp + 0x1160]
vmovdqa ymmword [rbp + 0x220], ymm0
xor eax, eax
cmp eax, 1
je 0x140082fc5
jmp 0x140083016
lea rax, [rbp + 0x29a0]
vmovdqu ymm0, ymmword [rax]
vmovdqu ymmword [rbp + 0x11a0], ymm0
lea rax, [rbp + 0x240]
vmovdqu ymm0, ymmword [rax]
vmovdqu ymmword [rbp + 0x1180], ymm0
vmovdqu ymm0, ymmword [rbp + 0x1180]
vpxor ymm0, ymm0, ymmword [rbp + 0x11a0]
vmovdqu ymmword [rbp + 0x11c0], ymm0
lea rax, [rbp + 0x240]
vmovdqu ymm0, ymmword [rbp + 0x11c0]
vmovdqu ymmword [rax], ymm0
xor eax, eax
cmp eax, 1
je 0x14008301f
jmp 0x140083070
lea rax, [rbp + 0x29c0]
vmovdqu ymm0, ymmword [rax]
vmovdqu ymmword [rbp + 0x1200], ymm0
lea rax, [rbp + 0x260]
vmovdqu ymm0, ymmword [rax]
vmovdqu ymmword [rbp + 0x11e0], ymm0
vmovdqu ymm0, ymmword [rbp + 0x11e0]
vpxor ymm0, ymm0, ymmword [rbp + 0x1200]
vmovdqu ymmword [rbp + 0x1220], ymm0
lea rax, [rbp + 0x260]
vmovdqu ymm0, ymmword [rbp + 0x1220]
vmovdqu ymmword [rax], ymm0
xor eax, eax
cmp eax, 1
je 0x140083079
jmp 0x1400830ca
lea rax, [rbp + 0x29e0]
vmovdqu ymm0, ymmword [rax]
vmovdqu ymmword [rbp + 0x1260], ymm0
lea rax, [rbp + 0x280]
vmovdqu ymm0, ymmword [rax]
vmovdqu ymmword [rbp + 0x1240], ymm0
vmovdqu ymm0, ymmword [rbp + 0x1240]
vpxor ymm0, ymm0, ymmword [rbp + 0x1260]
vmovdqu ymmword [rbp + 0x1280], ymm0
lea rax, [rbp + 0x280]
vmovdqu ymm0, ymmword [rbp + 0x1280]
vmovdqu ymmword [rax], ymm0
lea rax, [rbp + 0x220]
mov qword [rbp + 0x3c8], rax
xor r9d, r9d
mov r8, qword [rbp + 0x3c0]
mov rdx, qword [rbp + 0x3c8]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x1400868db
mov rax, qword [rsp + 0x2cc0]
add rax, 0x80
mov rcx, qword [rsp + 0x2cc0]
add rcx, 0x60
mov r8, rax
mov rdx, rcx
lea rcx, [rbp + 0x2198]
call fcn.14007c020
nop
lea rdx, [rbp + 0x2198]
lea rcx, [rbp + 0x2178]
call fcn.14008b060
nop
mov rax, qword [rsp + 0x2cc0]
add rax, 0x60
mov rcx, qword [rsp + 0x2cc0]
add rcx, 0x80
mov r8, rax
mov rdx, rcx
lea rcx, [rbp + 0x12a0]
call fcn.14007c020
mov qword [rbp + 0x568], rax
mov rdx, qword [rbp + 0x568]
lea rcx, [rbp + 0x2198]
call fcn.14002ab10
lea rcx, [rbp + 0x12a0]
call fcn.140002e60
lea rdx, [rbp + 0x2198]
lea rcx, [rbp + 0x2158]
call fcn.14008b060
nop
mov r9d, 0x20
xor r8d, r8d
lea rdx, [rbp + 0x12c0]
lea rcx, [rbp + 0x2178]
call fcn.1400896b0
mov qword [rbp + 0x570], rax
mov rdx, qword [rbp + 0x570]
lea rcx, [rbp + 0x2178]
call fcn.14002ab10
lea rcx, [rbp + 0x12c0]
call fcn.140002e60
mov r9d, select
xor r8d, r8d
lea rdx, [rbp + 0x12e0]
lea rcx, [rbp + 0x2158]
call fcn.1400896b0
mov qword [rbp + 0x578], rax
mov rdx, qword [rbp + 0x578]
lea rcx, [rbp + 0x2158]
call fcn.14002ab10
lea rcx, [rbp + 0x12e0]
call fcn.140002e60
mov edx, 0xf8
lea rcx, [rbp + 0x2020]
call fcn.14003ec60
mov edx, 1
lea rcx, [rbp + 0x2020]
call fcn.14001f780
nop
mov rax, qword [rsp + 0x2cc0]
add rax, 0x20
mov rdx, rax
lea rcx, [rbp + 0x2138]
call fcn.14001f070
nop
lea rcx, [rbp + 0x2138]
call fcn.14008ab00
lea r9, [rbp + 0x2158]
lea r8, [rbp + 0x2178]
lea rdx, [rbp + 0x2138]
lea rcx, [rbp + 0x1300]
call fcn.14008a590
mov qword [rbp + 0x580], rax
mov rdx, qword [rbp + 0x580]
lea rcx, [rbp + 0x2138]
call fcn.14002ab10
lea rcx, [rbp + 0x1300]
call fcn.140002e60
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
lea r8, [rbp + 0x1ff8]
mov edx, 0x28
mov rcx, rax
call qword [sym.imp.ADVAPI32.dll_OpenProcessToken]
test eax, eax
jne 0x14008381f
lea rax, [rbp + 6]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rbp + 7]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rbp + 8]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
movzx eax, byte [rbp + 6]
mov byte [rbp + 0x60], al
movzx eax, byte [rbp + 7]
mov byte [rbp + 0x68], al
movzx eax, byte [rbp + 8]
mov byte [rbp + 0x70], al
movabs rax, 0xa82ce30489d55bc6
mov qword [rbp + 0x588], rax
mov rax, qword [rbp + 0x588]
mov qword [rbp + 0x590], rax
mov rax, qword [rbp + 0x590]
mov qword [rbp + 0x4a0], rax
movabs rax, 0xd52345f93a8e2df8
mov qword [rbp + 0x598], rax
mov rax, qword [rbp + 0x598]
mov qword [rbp + 0x5a0], rax
mov rax, qword [rbp + 0x5a0]
mov qword [rbp + 0x4a8], rax
mov rax, qword [rbp + 0xe08]
mov qword [rbp + 0x3d0], rax
movabs rax, 0xa82ce30489d55ba3
mov qword [rbp + 0x5a8], rax
mov rax, qword [rbp + 0x5a8]
mov qword [rbp + 0x2b60], rax
movabs rax, 0xd52345f93a8e2df8
mov qword [rbp + 0x5b0], rax
mov rax, qword [rbp + 0x5b0]
mov qword [rbp + 0x2b68], rax
xor eax, eax
cmp eax, 1
je 0x1400833cb
jmp 0x140083413
vmovdqu ymm0, ymmword [rbp + 0x2b60]
vmovdqu ymmword [rbp + 0x1340], ymm0
vmovdqu ymm0, ymmword [rbp + 0x4a0]
vmovdqu ymmword [rbp + 0x1320], ymm0
vmovdqu ymm0, ymmword [rbp + 0x1320]
vpxor ymm0, ymm0, ymmword [rbp + 0x1340]
vmovdqu ymmword [rbp + 0x1360], ymm0
vmovdqu ymm0, ymmword [rbp + 0x1360]
vmovdqa ymmword [rbp + 0x4a0], ymm0
xor eax, eax
cmp eax, 1
je 0x14008341c
jmp 0x14008346d
lea rax, [rbp + 0x2b80]
vmovdqu ymm0, ymmword [rax]
vmovdqu ymmword [rbp + 0x13a0], ymm0
lea rax, [rbp + 0x4c0]
vmovdqu ymm0, ymmword [rax]
vmovdqu ymmword [rbp + 0x1380], ymm0
vmovdqu ymm0, ymmword [rbp + 0x1380]
vpxor ymm0, ymm0, ymmword [rbp + 0x13a0]
vmovdqu ymmword [rbp + 0x13c0], ymm0
lea rax, [rbp + 0x4c0]
vmovdqu ymm0, ymmword [rbp + 0x13c0]
vmovdqu ymmword [rax], ymm0
lea rax, [rbp + 0x2b60]
movdqu xmm0, xmmword [rax]
movdqa xmmword [rbp + 0xc30], xmm0
lea rax, [rbp + 0x4a0]
movdqu xmm0, xmmword [rax]
movdqa xmmword [rbp + 0xc20], xmm0
movdqa xmm0, xmmword [rbp + 0xc20]
xorps xmm0, xmmword [rbp + 0xc30]
movdqa xmmword [rbp + 0xc40], xmm0
lea rax, [rbp + 0x4a0]
movdqa xmm0, xmmword [rbp + 0xc40]
movdqu xmmword [rax], xmm0
lea rax, [rbp + 0x4a0]
mov qword [rbp + 0x3d0], rax
lea rax, [rbp + 9]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rbp + 0xa]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rbp + 0xb]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
movzx eax, byte [rbp + 9]
mov byte [rbp + 0x78], al
movzx eax, byte [rbp + 0xa]
mov byte [rbp + 0x80], al
movzx eax, byte [rbp + 0xb]
mov byte [rbp + 0x88], al
movabs rax, 0xc10c8761e5bc3ae5
mov qword [rbp + 0x5b8], rax
mov rax, qword [rbp + 0x5b8]
mov qword [rbp + 0x5c0], rax
mov rax, qword [rbp + 0x5c0]
mov qword [rbp + 0x260], rax
movabs rax, 0xbb4c2c8d59eb4796
mov qword [rbp + 0x5c8], rax
mov rax, qword [rbp + 0x5c8]
mov qword [rbp + 0x5d0], rax
mov rax, qword [rbp + 0x5d0]
mov qword [rbp + 0x268], rax
movabs rax, 0x7fa1693255e80b65
mov qword [rbp + 0x5d8], rax
mov rax, qword [rbp + 0x5d8]
mov qword [rbp + 0x5e0], rax
mov rax, qword [rbp + 0x5e0]
mov qword [rbp + 0x270], rax
movabs rax, 0x9ea255179ee919a2
mov qword [rbp + 0x5e8], rax
mov rax, qword [rbp + 0x5e8]
mov qword [rbp + 0x5f0], rax
mov rax, qword [rbp + 0x5f0]
mov qword [rbp + 0x278], rax
mov rax, qword [rbp + 0xdd0]
mov qword [rbp + 0x3d8], rax
movabs rax, 0xa82ce30489d55ba3
mov qword [rbp + 0x5f8], rax
mov rax, qword [rbp + 0x5f8]
mov qword [rbp + 0x29c0], rax
movabs rax, 0xd52345f93a8e2df8
mov qword [rbp + 0x600], rax
mov rax, qword [rbp + 0x600]
mov qword [rbp + 0x29c8], rax
movabs rax, 0x7fa1693255d92645
mov qword [rbp + 0x608], rax
mov rax, qword [rbp + 0x608]
mov qword [rbp + 0x29d0], rax
movabs rax, 0x9ea255179ee919a2
mov qword [rbp + 0x610], rax
mov rax, qword [rbp + 0x610]
mov qword [rbp + 0x29d8], rax
xor eax, eax
test eax, eax
je 0x14008365c
jmp 0x1400836a4
vmovdqa ymm0, ymmword [rbp + 0x29c0]
vmovdqu ymmword [rbp + 0x1400], ymm0
vmovdqa ymm0, ymmword [rbp + 0x260]
vmovdqu ymmword [rbp + 0x13e0], ymm0
vmovdqu ymm0, ymmword [rbp + 0x13e0]
vpxor ymm0, ymm0, ymmword [rbp + 0x1400]
vmovdqu ymmword [rbp + 0x1420], ymm0
vmovdqu ymm0, ymmword [rbp + 0x1420]
vmovdqa ymmword [rbp + 0x260], ymm0
xor eax, eax
cmp eax, 1
je 0x1400836ad
jmp 0x1400836fe
lea rax, [rbp + 0x29e0]
vmovdqu ymm0, ymmword [rax]
vmovdqu ymmword [rbp + 0x1460], ymm0
lea rax, [rbp + 0x280]
vmovdqu ymm0, ymmword [rax]
vmovdqu ymmword [rbp + 0x1440], ymm0
vmovdqu ymm0, ymmword [rbp + 0x1440]
vpxor ymm0, ymm0, ymmword [rbp + 0x1460]
vmovdqu ymmword [rbp + 0x1480], ymm0
lea rax, [rbp + 0x280]
vmovdqu ymm0, ymmword [rbp + 0x1480]
vmovdqu ymmword [rax], ymm0
xor eax, eax
cmp eax, 1
je 0x140083707
jmp 0x140083758
lea rax, [rbp + 0x2a00]
vmovdqu ymm0, ymmword [rax]
vmovdqu ymmword [rbp + 0x14c0], ymm0
lea rax, [rbp + 0x2a0]
vmovdqu ymm0, ymmword [rax]
vmovdqu ymmword [rbp + 0x14a0], ymm0
vmovdqu ymm0, ymmword [rbp + 0x14a0]
vpxor ymm0, ymm0, ymmword [rbp + 0x14c0]
vmovdqu ymmword [rbp + 0x14e0], ymm0
lea rax, [rbp + 0x2a0]
vmovdqu ymm0, ymmword [rbp + 0x14e0]
vmovdqu ymmword [rax], ymm0
xor eax, eax
cmp eax, 1
je 0x140083761
jmp 0x1400837b2
lea rax, [rbp + 0x2a20]
vmovdqu ymm0, ymmword [rax]
vmovdqu ymmword [rbp + 0x1520], ymm0
lea rax, [rbp + 0x2c0]
vmovdqu ymm0, ymmword [rax]
vmovdqu ymmword [rbp + 0x1500], ymm0
vmovdqu ymm0, ymmword [rbp + 0x1500]
vpxor ymm0, ymm0, ymmword [rbp + 0x1520]
vmovdqu ymmword [rbp + 0x1540], ymm0
lea rax, [rbp + 0x2c0]
vmovdqu ymm0, ymmword [rbp + 0x1540]
vmovdqu ymmword [rax], ymm0
lea rax, [rbp + 0x260]
mov qword [rbp + 0x3d8], rax
xor r9d, r9d
mov r8, qword [rbp + 0x3d0]
mov rdx, qword [rbp + 0x3d8]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
nop
lea rcx, [rbp + 0x2138]
call fcn.140002e60
nop
lea rcx, [rbp + 0x2020]
call fcn.14002e2b0
nop
lea rcx, [rbp + 0x2158]
call fcn.140002e60
nop
lea rcx, [rbp + 0x2178]
call fcn.140002e60
nop
lea rcx, [rbp + 0x2198]
call fcn.140002e60
jmp 0x1400868db
lea r8, [rbp + 0x21e8]
lea rdx, str.SeDebugPrivilege
xor ecx, ecx
call qword [sym.imp.ADVAPI32.dll_LookupPrivilegeValueW]
test eax, eax
jne 0x140083d9e
mov rcx, qword [rbp + 0x1ff8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rax, [rbp + 0xc]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rbp + 0xd]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rbp + 0xe]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
movzx eax, byte [rbp + 0xc]
mov byte [rbp + 0x90], al
movzx eax, byte [rbp + 0xd]
mov byte [rbp + 0x98], al
movzx eax, byte [rbp + 0xe]
mov byte [rbp + 0xa0], al
movabs rax, 0xa82ce30489d55bc6
mov qword [rbp + 0x618], rax
mov rax, qword [rbp + 0x618]
mov qword [rbp + 0x620], rax
mov rax, qword [rbp + 0x620]
mov qword [rbp + 0x460], rax
movabs rax, 0xd52345f93a8e2df8
mov qword [rbp + 0x628], rax
mov rax, qword [rbp + 0x628]
mov qword [rbp + 0x630], rax
mov rax, qword [rbp + 0x630]
mov qword [rbp + 0x468], rax
mov rax, qword [rbp + 0xbe8]
mov qword [rbp + 0x3a8], rax
movabs rax, 0xa82ce30489d55ba3
mov qword [rbp + 0x638], rax
mov rax, qword [rbp + 0x638]
mov qword [rbp + 0x2b40], rax
movabs rax, 0xd52345f93a8e2df8
mov qword [rbp + 0x640], rax
mov rax, qword [rbp + 0x640]
mov qword [rbp + 0x2b48], rax
xor eax, eax
cmp eax, 1
je 0x140083947
jmp 0x14008398f
vmovdqu ymm0, ymmword [rbp + 0x2b40]
vmovdqu ymmword [rbp + 0x1580], ymm0
vmovdqu ymm0, ymmword [rbp + 0x460]
vmovdqu ymmword [rbp + 0x1560], ymm0
vmovdqu ymm0, ymmword [rbp + 0x1560]
vpxor ymm0, ymm0, ymmword [rbp + 0x1580]
vmovdqu ymmword [rbp + 0x15a0], ymm0
vmovdqu ymm0, ymmword [rbp + 0x15a0]
vmovdqa ymmword [rbp + 0x460], ymm0
xor eax, eax
cmp eax, 1
je 0x140083998
jmp 0x1400839e9
lea rax, [rbp + 0x2b60]
vmovdqu ymm0, ymmword [rax]
vmovdqu ymmword [rbp + 0x15e0], ymm0
lea rax, [rbp + 0x480]
vmovdqu ymm0, ymmword [rax]
vmovdqu ymmword [rbp + 0x15c0], ymm0
vmovdqu ymm0, ymmword [rbp + 0x15c0]
vpxor ymm0, ymm0, ymmword [rbp + 0x15e0]
vmovdqu ymmword [rbp + 0x1600], ymm0
lea rax, [rbp + 0x480]
vmovdqu ymm0, ymmword [rbp + 0x1600]
vmovdqu ymmword [rax], ymm0
lea rax, [rbp + 0x2b40]
movdqu xmm0, xmmword [rax]
movdqa xmmword [rbp + 0xc60], xmm0
lea rax, [rbp + 0x460]
movdqu xmm0, xmmword [rax]
movdqa xmmword [rbp + 0xc50], xmm0
movdqa xmm0, xmmword [rbp + 0xc50]
xorps xmm0, xmmword [rbp + 0xc60]
movdqa xmmword [rbp + 0xc70], xmm0
lea rax, [rbp + 0x460]
movdqa xmm0, xmmword [rbp + 0xc70]
movdqu xmmword [rax], xmm0
lea rax, [rbp + 0x460]
mov qword [rbp + 0x3a8], rax
lea rax, [rbp + 0xf]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rbp + 0x10]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rbp + 0x11]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
movzx eax, byte [rbp + 0xf]
mov byte [rbp + 0xa8], al
movzx eax, byte [rbp + 0x10]
mov byte [rbp + 0xb0], al
movzx eax, byte [rbp + 0x11]
mov byte [rbp + 0xb8], al
movabs rax, 0xc10c8761e5bc3ae5
mov qword [rbp + 0x648], rax
mov rax, qword [rbp + 0x648]
mov qword [rbp + 0x650], rax
mov rax, qword [rbp + 0x650]
mov qword [rbp + 0x2a0], rax
movabs rax, 0xbb4c2c8d59eb4796
mov qword [rbp + 0x658], rax
mov rax, qword [rbp + 0x658]
mov qword [rbp + 0x660], rax
mov rax, qword [rbp + 0x660]
mov qword [rbp + 0x2a8], rax
movabs rax, 0x7fa1693255eb0b65
mov qword [rbp + 0x668], rax
mov rax, qword [rbp + 0x668]
mov qword [rbp + 0x670], rax
mov rax, qword [rbp + 0x670]
mov qword [rbp + 0x2b0], rax
movabs rax, 0x9ea255179ee919a2
mov qword [rbp + 0x678], rax
mov rax, qword [rbp + 0x678]
mov qword [rbp + 0x680], rax
mov rax, qword [rbp + 0x680]
mov qword [rbp + 0x2b8], rax
mov rax, qword [rbp + 0xe10]
mov qword [rbp + 0x3b0], rax
movabs rax, 0xa82ce30489d55ba3
mov qword [rbp + 0x688], rax
mov rax, qword [rbp + 0x688]
mov qword [rbp + 0x2a00], rax
movabs rax, 0xd52345f93a8e2df8
mov qword [rbp + 0x690], rax
mov rax, qword [rbp + 0x690]
mov qword [rbp + 0x2a08], rax
movabs rax, 0x7fa1693255d92645
mov qword [rbp + 0x698], rax
mov rax, qword [rbp + 0x698]
mov qword [rbp + 0x2a10], rax
movabs rax, 0x9ea255179ee919a2
mov qword [rbp + 0x6a0], rax
mov rax, qword [rbp + 0x6a0]
mov qword [rbp + 0x2a18], rax
xor eax, eax
test eax, eax
je 0x140083bdb
jmp 0x140083c23
vmovdqa ymm0, ymmword [rbp + 0x2a00]
vmovdqu ymmword [rbp + 0x1640], ymm0
vmovdqa ymm0, ymmword [rbp + 0x2a0]
vmovdqu ymmword [rbp + 0x1620], ymm0
vmovdqu ymm0, ymmword [rbp + 0x1620]
vpxor ymm0, ymm0, ymmword [rbp + 0x1640]
vmovdqu ymmword [rbp + 0x1660], ymm0
vmovdqu ymm0, ymmword [rbp + 0x1660]
vmovdqa ymmword [rbp + 0x2a0], ymm0
xor eax, eax
cmp eax, 1
je 0x140083c2c
jmp 0x140083c7d
lea rax, [rbp + 0x2a20]
vmovdqu ymm0, ymmword [rax]
vmovdqu ymmword [rbp + 0x16a0], ymm0
lea rax, [rbp + 0x2c0]
vmovdqu ymm0, ymmword [rax]
vmovdqu ymmword [rbp + 0x1680], ymm0
vmovdqu ymm0, ymmword [rbp + 0x1680]
vpxor ymm0, ymm0, ymmword [rbp + 0x16a0]
vmovdqu ymmword [rbp + 0x16c0], ymm0
lea rax, [rbp + 0x2c0]
vmovdqu ymm0, ymmword [rbp + 0x16c0]
vmovdqu ymmword [rax], ymm0
xor eax, eax
cmp eax, 1
je 0x140083c86
jmp 0x140083cd7
lea rax, [rbp + 0x2a40]
vmovdqu ymm0, ymmword [rax]
vmovdqu ymmword [rbp + 0x1700], ymm0
lea rax, [rbp + 0x2e0]
vmovdqu ymm0, ymmword [rax]
vmovdqu ymmword [rbp + 0x16e0], ymm0
vmovdqu ymm0, ymmword [rbp + 0x16e0]
vpxor ymm0, ymm0, ymmword [rbp + 0x1700]
vmovdqu ymmword [rbp + 0x1720], ymm0
lea rax, [rbp + 0x2e0]
vmovdqu ymm0, ymmword [rbp + 0x1720]
vmovdqu ymmword [rax], ymm0
xor eax, eax
cmp eax, 1
je 0x140083ce0
jmp 0x140083d31
lea rax, [rbp + 0x2a60]
vmovdqu ymm0, ymmword [rax]
vmovdqu ymmword [rbp + 0x1760], ymm0
lea rax, [rbp + 0x300]
vmovdqu ymm0, ymmword [rax]
vmovdqu ymmword [rbp + 0x1740], ymm0
vmovdqu ymm0, ymmword [rbp + 0x1740]
vpxor ymm0, ymm0, ymmword [rbp + 0x1760]
vmovdqu ymmword [rbp + 0x1780], ymm0
lea rax, [rbp + 0x300]
vmovdqu ymm0, ymmword [rbp + 0x1780]
vmovdqu ymmword [rax], ymm0
lea rax, [rbp + 0x2a0]
mov qword [rbp + 0x3b0], rax
xor r9d, r9d
mov r8, qword [rbp + 0x3a8]
mov rdx, qword [rbp + 0x3b0]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
nop
lea rcx, [rbp + 0x2138]
call fcn.140002e60
nop
lea rcx, [rbp + 0x2020]
call fcn.14002e2b0
nop
lea rcx, [rbp + 0x2158]
call fcn.140002e60
nop
lea rcx, [rbp + 0x2178]
call fcn.140002e60
nop
lea rcx, [rbp + 0x2198]
call fcn.140002e60
jmp 0x1400868db
mov dword [rbp + 0x21d8], 1
mov eax, reloc.OLEAUT32.dll_VariantTimeToDosDateTime
imul rax, rax, 0
mov rcx, qword [rbp + 0x21e8]
mov qword [rbp + rax + 0x21dc], rcx
mov eax, reloc.OLEAUT32.dll_VariantTimeToDosDateTime
imul rax, rax, 0
mov dword [rbp + rax + 0x21e4], 2
mov qword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
mov r9d, select
lea r8, [rbp + 0x21d8]
xor edx, edx
mov rcx, qword [rbp + 0x1ff8]
call qword [sym.imp.ADVAPI32.dll_AdjustTokenPrivileges]
test eax, eax
jne 0x14008436b
mov rcx, qword [rbp + 0x1ff8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rax, [rbp + 0x12]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rbp + 0x13]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rbp + 0x14]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
movzx eax, byte [rbp + 0x12]
mov byte [rbp + 0xc0], al
movzx eax, byte [rbp + 0x13]
mov byte [rbp + 0xc8], al
movzx eax, byte [rbp + 0x14]
mov byte [rbp + 0xd0], al
movabs rax, 0xa82ce30489d55bc6
mov qword [rbp + 0x6a8], rax
mov rax, qword [rbp + 0x6a8]
mov qword [rbp + 0x6b0], rax
mov rax, qword [rbp + 0x6b0]
mov qword [rbp + 0x500], rax
movabs rax, 0xd52345f93a8e2df8
mov qword [rbp + 0x6b8], rax
mov rax, qword [rbp + 0x6b8]
mov qword [rbp + 0x6c0], rax
mov rax, qword [rbp + 0x6c0]
mov qword [rbp + 0x508], rax
mov rax, qword [rbp + 0xdf0]
mov qword [rbp + 0x3b8], rax
movabs rax, 0xa82ce30489d55ba3
mov qword [rbp + 0x6c8], rax
mov rax, qword [rbp + 0x6c8]
mov qword [rbp + 0x2c00], rax
movabs rax, 0xd52345f93a8e2df8
mov qword [rbp + 0x6d0], rax
mov rax, qword [rbp + 0x6d0]
mov qword [rbp + 0x2c08], rax
xor eax, eax
cmp eax, 1
je 0x140083f14
jmp 0x140083f5c
vmovdqu ymm0, ymmword [rbp + 0x2c00]
vmovdqu ymmword [rbp + 0x17c0], ymm0
vmovdqu ymm0, ymmword [rbp + 0x500]
vmovdqu ymmword [rbp + 0x17a0], ymm0
vmovdqu ymm0, ymmword [rbp + 0x17a0]
vpxor ymm0, ymm0, ymmword [rbp + 0x17c0]
vmovdqu ymmword [rbp + 0x17e0], ymm0
vmovdqu ymm0, ymmword [rbp + 0x17e0]
vmovdqa ymmword [rbp + 0x500], ymm0
xor eax, eax
cmp eax, 1
je 0x140083f65
jmp 0x140083fb6
lea rax, [rbp + 0x2c20]
vmovdqu ymm0, ymmword [rax]
vmovdqu ymmword [rbp + 0x1820], ymm0
lea rax, [rbp + 0x520]
vmovdqu ymm0, ymmword [rax]
vmovdqu ymmword [rbp + 0x1800], ymm0
vmovdqu ymm0, ymmword [rbp + 0x1800]
vpxor ymm0, ymm0, ymmword [rbp + 0x1820]
vmovdqu ymmword [rbp + 0x1840], ymm0
lea rax, [rbp + 0x520]
vmovdqu ymm0, ymmword [rbp + 0x1840]
vmovdqu ymmword [rax], ymm0
lea rax, [rbp + 0x2c00]
movdqu xmm0, xmmword [rax]
movdqa xmmword [rbp + 0xc90], xmm0
lea rax, [rbp + 0x500]
movdqu xmm0, xmmword [rax]
movdqa xmmword [rbp + 0xc80], xmm0
movdqa xmm0, xmmword [rbp + 0xc80]
xorps xmm0, xmmword [rbp + 0xc90]
movdqa xmmword [rbp + 0xca0], xmm0
lea rax, [rbp + 0x500]
movdqa xmm0, xmmword [rbp + 0xca0]
movdqu xmmword [rax], xmm0
lea rax, [rbp + 0x500]
mov qword [rbp + 0x3b8], rax
lea rax, [rbp + 0x15]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rbp + 0x16]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rbp + 0x17]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
movzx eax, byte [rbp + 0x15]
mov byte [rbp + 0xd8], al
movzx eax, byte [rbp + 0x16]
mov byte [rbp + 0xe0], al
movzx eax, byte [rbp + 0x17]
mov byte [rbp + 0xe8], al
movabs rax, 0xc10c8761e5bc3ae5
mov qword [rbp + 0x6d8], rax
mov rax, qword [rbp + 0x6d8]
mov qword [rbp + 0x6e0], rax
mov rax, qword [rbp + 0x6e0]
mov qword [rbp + 0x2e0], rax
movabs rax, 0xbb4c2c8d59eb4796
mov qword [rbp + 0x6e8], rax
mov rax, qword [rbp + 0x6e8]
mov qword [rbp + 0x6f0], rax
mov rax, qword [rbp + 0x6f0]
mov qword [rbp + 0x2e8], rax
movabs rax, 0x7fa1693255ea0b65
mov qword [rbp + 0x6f8], rax
mov rax, qword [rbp + 0x6f8]
mov qword [rbp + 0x700], rax
mov rax, qword [rbp + 0x700]
mov qword [rbp + 0x2f0], rax
movabs rax, 0x9ea255179ee919a2
mov qword [rbp + 0x708], rax
mov rax, qword [rbp + 0x708]
mov qword [rbp + 0x710], rax
mov rax, qword [rbp + 0x710]
mov qword [rbp + 0x2f8], rax
mov rax, qword [rbp + 0xde8]
mov qword [rbp + 0x3a0], rax
movabs rax, 0xa82ce30489d55ba3
mov qword [rbp + 0x718], rax
mov rax, qword [rbp + 0x718]
mov qword [rbp + 0x2a40], rax
movabs rax, 0xd52345f93a8e2df8
mov qword [rbp + 0x720], rax
mov rax, qword [rbp + 0x720]
mov qword [rbp + 0x2a48], rax
movabs rax, 0x7fa1693255d92645
mov qword [rbp + 0x728], rax
mov rax, qword [rbp + 0x728]
mov qword [rbp + 0x2a50], rax
movabs rax, 0x9ea255179ee919a2
mov qword [rbp + 0x730], rax
mov rax, qword [rbp + 0x730]
mov qword [rbp + 0x2a58], rax
xor eax, eax
test eax, eax
je 0x1400841a8
jmp 0x1400841f0
vmovdqa ymm0, ymmword [rbp + 0x2a40]
vmovdqu ymmword [rbp + 0x1880], ymm0
vmovdqa ymm0, ymmword [rbp + 0x2e0]
vmovdqu ymmword [rbp + 0x1860], ymm0
vmovdqu ymm0, ymmword [rbp + 0x1860]
vpxor ymm0, ymm0, ymmword [rbp + 0x1880]
vmovdqu ymmword [rbp + 0x18a0], ymm0
vmovdqu ymm0, ymmword [rbp + 0x18a0]
vmovdqa ymmword [rbp + 0x2e0], ymm0
xor eax, eax
cmp eax, 1
je 0x1400841f9
jmp 0x14008424a
lea rax, [rbp + 0x2a60]
vmovdqu ymm0, ymmword [rax]
vmovdqu ymmword [rbp + 0x18e0], ymm0
lea rax, [rbp + 0x300]
vmovdqu ymm0, ymmword [rax]
vmovdqu ymmword [rbp + 0x18c0], ymm0
vmovdqu ymm0, ymmword [rbp + 0x18c0]
vpxor ymm0, ymm0, ymmword [rbp + 0x18e0]
vmovdqu ymmword [rbp + 0x1900], ymm0
lea rax, [rbp + 0x300]
vmovdqu ymm0, ymmword [rbp + 0x1900]
vmovdqu ymmword [rax], ymm0
xor eax, eax
cmp eax, 1
je 0x140084253
jmp 0x1400842a4
lea rax, [rbp + 0x2a80]
vmovdqu ymm0, ymmword [rax]
vmovdqu ymmword [rbp + 0x1940], ymm0
lea rax, [rbp + 0x320]
vmovdqu ymm0, ymmword [rax]
vmovdqu ymmword [rbp + 0x1920], ymm0
vmovdqu ymm0, ymmword [rbp + 0x1920]
vpxor ymm0, ymm0, ymmword [rbp + 0x1940]
vmovdqu ymmword [rbp + 0x1960], ymm0
lea rax, [rbp + 0x320]
vmovdqu ymm0, ymmword [rbp + 0x1960]
vmovdqu ymmword [rax], ymm0
xor eax, eax
cmp eax, 1
je 0x1400842ad
jmp 0x1400842fe
lea rax, [rbp + 0x2aa0]
vmovdqu ymm0, ymmword [rax]
vmovdqu ymmword [rbp + 0x19a0], ymm0
lea rax, [rbp + 0x340]
vmovdqu ymm0, ymmword [rax]
vmovdqu ymmword [rbp + 0x1980], ymm0
vmovdqu ymm0, ymmword [rbp + 0x1980]
vpxor ymm0, ymm0, ymmword [rbp + 0x19a0]
vmovdqu ymmword [rbp + 0x19c0], ymm0
lea rax, [rbp + 0x340]
vmovdqu ymm0, ymmword [rbp + 0x19c0]
vmovdqu ymmword [rax], ymm0
lea rax, [rbp + 0x2e0]
mov qword [rbp + 0x3a0], rax
xor r9d, r9d
mov r8, qword [rbp + 0x3b8]
mov rdx, qword [rbp + 0x3a0]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
nop
lea rcx, [rbp + 0x2138]
call fcn.140002e60
nop
lea rcx, [rbp + 0x2020]
call fcn.14002e2b0
nop
lea rcx, [rbp + 0x2158]
call fcn.140002e60
nop
lea rcx, [rbp + 0x2178]
call fcn.140002e60
nop
lea rcx, [rbp + 0x2198]
call fcn.140002e60
jmp 0x1400868db
mov rcx, qword [rbp + 0x1ff8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rax, [rbp + 0x2030]
lea rdx, [rbp + 0x2138]
mov rcx, rax
call fcn.140005aa0
mov rax, qword [rbp + 0x2020]
movsxd rax, dword [rax + 4]
lea rax, [rbp + rax + 0x2020]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_bool___cdecl_std::ios_base::fail_void_const___ptr64]
movzx eax, al
test eax, eax
je 0x140084909
lea rax, [rbp + 0x18]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rbp + 0x19]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rbp + 0x1a]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
movzx eax, byte [rbp + 0x18]
mov byte [rbp + 0xf0], al
movzx eax, byte [rbp + 0x19]
mov byte [rbp + 0xf8], al
movzx eax, byte [rbp + 0x1a]
mov byte [rbp + 0x100], al
movabs rax, 0xa82ce30489d55bc6
mov qword [rbp + 0x738], rax
mov rax, qword [rbp + 0x738]
mov qword [rbp + 0x740], rax
mov rax, qword [rbp + 0x740]
mov qword [rbp + 0x440], rax
movabs rax, 0xd52345f93a8e2df8
mov qword [rbp + 0x748], rax
mov rax, qword [rbp + 0x748]
mov qword [rbp + 0x750], rax
mov rax, qword [rbp + 0x750]
mov qword [rbp + 0x448], rax
mov rax, qword [rbp + 0xde0]
mov qword [rbp + 0x3e0], rax
movabs rax, 0xa82ce30489d55ba3
mov qword [rbp + 0x758], rax
mov rax, qword [rbp + 0x758]
mov qword [rbp + 0x2be0], rax
movabs rax, 0xd52345f93a8e2df8
mov qword [rbp + 0x760], rax
mov rax, qword [rbp + 0x760]
mov qword [rbp + 0x2be8], rax
xor eax, eax
cmp eax, 1
je 0x1400844b2
jmp 0x1400844fa
vmovdqu ymm0, ymmword [rbp + 0x2be0]
vmovdqu ymmword [rbp + 0x1a00], ymm0
vmovdqu ymm0, ymmword [rbp + 0x440]
vmovdqu ymmword [rbp + 0x19e0], ymm0
vmovdqu ymm0, ymmword [rbp + 0x19e0]
vpxor ymm0, ymm0, ymmword [rbp + 0x1a00]
vmovdqu ymmword [rbp + 0x1a20], ymm0
vmovdqu ymm0, ymmword [rbp + 0x1a20]
vmovdqa ymmword [rbp + 0x440], ymm0
xor eax, eax
cmp eax, 1
je 0x140084503
jmp 0x140084554
lea rax, [rbp + 0x2c00]
vmovdqu ymm0, ymmword [rax]
vmovdqu ymmword [rbp + 0x1a60], ymm0
lea rax, [rbp + 0x460]
vmovdqu ymm0, ymmword [rax]
vmovdqu ymmword [rbp + 0x1a40], ymm0
vmovdqu ymm0, ymmword [rbp + 0x1a40]
vpxor ymm0, ymm0, ymmword [rbp + 0x1a60]
vmovdqu ymmword [rbp + 0x1a80], ymm0
lea rax, [rbp + 0x460]
vmovdqu ymm0, ymmword [rbp + 0x1a80]
vmovdqu ymmword [rax], ymm0
lea rax, [rbp + 0x2be0]
movdqu xmm0, xmmword [rax]
movdqa xmmword [rbp + 0xcc0], xmm0
lea rax, [rbp + 0x440]
movdqu xmm0, xmmword [rax]
movdqa xmmword [rbp + 0xcb0], xmm0
movdqa xmm0, xmmword [rbp + 0xcb0]
xorps xmm0, xmmword [rbp + 0xcc0]
movdqa xmmword [rbp + 0xcd0], xmm0
lea rax, [rbp + 0x440]
movdqa xmm0, xmmword [rbp + 0xcd0]
movdqu xmmword [rax], xmm0
lea rax, [rbp + 0x440]
mov qword [rbp + 0x3e0], rax
lea rax, [rbp + 0x1b]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rbp + 0x1c]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rbp + 0x1d]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
movzx eax, byte [rbp + 0x1b]
mov byte [rbp + 0x108], al
movzx eax, byte [rbp + 0x1c]
mov byte [rbp + 0x110], al
movzx eax, byte [rbp + 0x1d]
mov byte [rbp + 0x118], al
movabs rax, 0xc10c8761e5bc3ae5
mov qword [rbp + 0x768], rax
mov rax, qword [rbp + 0x768]
mov qword [rbp + 0x770], rax
mov rax, qword [rbp + 0x770]
mov qword [rbp + 0x320], rax
movabs rax, 0xbb4c2c8d59eb4796
mov qword [rbp + 0x778], rax
mov rax, qword [rbp + 0x778]
mov qword [rbp + 0x780], rax
mov rax, qword [rbp + 0x780]
mov qword [rbp + 0x328], rax
movabs rax, 0x7fa1693255e80b65
mov qword [rbp + 0x788], rax
mov rax, qword [rbp + 0x788]
mov qword [rbp + 0x790], rax
mov rax, qword [rbp + 0x790]
mov qword [rbp + 0x330], rax
movabs rax, 0x9ea255179ee919a2
mov qword [rbp + 0x798], rax
mov rax, qword [rbp + 0x798]
mov qword [rbp + 0x7a0], rax
mov rax, qword [rbp + 0x7a0]
mov qword [rbp + 0x338], rax
mov rax, qword [rbp + 0xdd8]
mov qword [rbp + 0x3e8], rax
movabs rax, 0xa82ce30489d55ba3
mov qword [rbp + 0x7a8], rax
mov rax, qword [rbp + 0x7a8]
mov qword [rbp + 0x2a80], rax
movabs rax, 0xd52345f93a8e2df8
mov qword [rbp + 0x7b0], rax
mov rax, qword [rbp + 0x7b0]
mov qword [rbp + 0x2a88], rax
movabs rax, 0x7fa1693255d92645
mov qword [rbp + 0x7b8], rax
mov rax, qword [rbp + 0x7b8]
mov qword [rbp + 0x2a90], rax
movabs rax, 0x9ea255179ee919a2
mov qword [rbp + 0x7c0], rax
mov rax, qword [rbp + 0x7c0]
mov qword [rbp + 0x2a98], rax
xor eax, eax
test eax, eax
je 0x140084746
jmp 0x14008478e
vmovdqa ymm0, ymmword [rbp + 0x2a80]
vmovdqu ymmword [rbp + 0x1ac0], ymm0
vmovdqa ymm0, ymmword [rbp + 0x320]
vmovdqu ymmword [rbp + 0x1aa0], ymm0
vmovdqu ymm0, ymmword [rbp + 0x1aa0]
vpxor ymm0, ymm0, ymmword [rbp + 0x1ac0]
vmovdqu ymmword [rbp + 0x1ae0], ymm0
vmovdqu ymm0, ymmword [rbp + 0x1ae0]
vmovdqa ymmword [rbp + 0x320], ymm0
xor eax, eax
cmp eax, 1
je 0x140084797
jmp 0x1400847e8
lea rax, [rbp + 0x2aa0]
vmovdqu ymm0, ymmword [rax]
vmovdqu ymmword [rbp + 0x1b20], ymm0
lea rax, [rbp + 0x340]
vmovdqu ymm0, ymmword [rax]
vmovdqu ymmword [rbp + 0x1b00], ymm0
vmovdqu ymm0, ymmword [rbp + 0x1b00]
vpxor ymm0, ymm0, ymmword [rbp + 0x1b20]
vmovdqu ymmword [rbp + 0x1b40], ymm0
lea rax, [rbp + 0x340]
vmovdqu ymm0, ymmword [rbp + 0x1b40]
vmovdqu ymmword [rax], ymm0
xor eax, eax
cmp eax, 1
je 0x1400847f1
jmp 0x140084842
lea rax, [rbp + 0x2ac0]
vmovdqu ymm0, ymmword [rax]
vmovdqu ymmword [rbp + 0x1b80], ymm0
lea rax, [rbp + 0x360]
vmovdqu ymm0, ymmword [rax]
vmovdqu ymmword [rbp + 0x1b60], ymm0
vmovdqu ymm0, ymmword [rbp + 0x1b60]
vpxor ymm0, ymm0, ymmword [rbp + 0x1b80]
vmovdqu ymmword [rbp + 0x1ba0], ymm0
lea rax, [rbp + 0x360]
vmovdqu ymm0, ymmword [rbp + 0x1ba0]
vmovdqu ymmword [rax], ymm0
xor eax, eax
cmp eax, 1
je 0x14008484b
jmp 0x14008489c
lea rax, [rbp + 0x2ae0]
vmovdqu ymm0, ymmword [rax]
vmovdqu ymmword [rbp + 0x1be0], ymm0
lea rax, [rbp + 0x380]
vmovdqu ymm0, ymmword [rax]
vmovdqu ymmword [rbp + 0x1bc0], ymm0
vmovdqu ymm0, ymmword [rbp + 0x1bc0]
vpxor ymm0, ymm0, ymmword [rbp + 0x1be0]
vmovdqu ymmword [rbp + 0x1c00], ymm0
lea rax, [rbp + 0x380]
vmovdqu ymm0, ymmword [rbp + 0x1c00]
vmovdqu ymmword [rax], ymm0
lea rax, [rbp + 0x320]
mov qword [rbp + 0x3e8], rax
xor r9d, r9d
mov r8, qword [rbp + 0x3e0]
mov rdx, qword [rbp + 0x3e8]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
nop
lea rcx, [rbp + 0x2138]
call fcn.140002e60
nop
lea rcx, [rbp + 0x2020]
call fcn.14002e2b0
nop
lea rcx, [rbp + 0x2158]
call fcn.140002e60
nop
lea rcx, [rbp + 0x2178]
call fcn.140002e60
nop
lea rcx, [rbp + 0x2198]
call fcn.140002e60
jmp 0x1400868db
lea rdx, [rbp + 0x1c20]
lea rcx, [rbp + 0x2020]
call fcn.140089660
mov qword [rbp + 0x7c8], rax
mov rcx, qword [rbp + 0x7c8]
call fcn.1400716e0
mov qword [rbp + 0x1c8], rax
lea rcx, [rbp + 0x1c20]
call fcn.140002e60
mov rcx, qword [rbp + 0x1c8]
call fcn.14014b348
mov qword [rbp + 0x7d0], rax
mov rax, qword [rbp + 0x7d0]
mov qword [rbp + 0x1ff0], rax
cmp qword [rbp + 0x1ff0], 0
jne 0x140084ec5
lea rax, [rbp + 0x1e]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rbp + 0x1f]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rbp + 0x20]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
movzx eax, byte [rbp + 0x1e]
mov byte [rbp + 0x120], al
movzx eax, byte [rbp + 0x1f]
mov byte [rbp + 0x128], al
movzx eax, byte [rbp + 0x20]
mov byte [rbp + 0x130], al
movabs rax, 0xa82ce30489d55bc6
mov qword [rbp + 0x7d8], rax
mov rax, qword [rbp + 0x7d8]
mov qword [rbp + 0x7e0], rax
mov rax, qword [rbp + 0x7e0]
mov qword [rbp + 0x4c0], rax
movabs rax, 0xd52345f93a8e2df8
mov qword [rbp + 0x7e8], rax
mov rax, qword [rbp + 0x7e8]
mov qword [rbp + 0x7f0], rax
mov rax, qword [rbp + 0x7f0]
mov qword [rbp + 0x4c8], rax
mov rax, qword [rbp + 0xb68]
mov qword [rbp + 0x3f0], rax
movabs rax, 0xa82ce30489d55ba3
mov qword [rbp + 0x7f8], rax
mov rax, qword [rbp + 0x7f8]
mov qword [rbp + 0x2bc0], rax
movabs rax, 0xd52345f93a8e2df8
mov qword [rbp + 0x800], rax
mov rax, qword [rbp + 0x800]
mov qword [rbp + 0x2bc8], rax
xor eax, eax
cmp eax, 1
je 0x140084a6e
jmp 0x140084ab6
vmovdqu ymm0, ymmword [rbp + 0x2bc0]
vmovdqu ymmword [rbp + 0x1c60], ymm0
vmovdqu ymm0, ymmword [rbp + 0x4c0]
vmovdqu ymmword [rbp + 0x1c40], ymm0
vmovdqu ymm0, ymmword [rbp + 0x1c40]
vpxor ymm0, ymm0, ymmword [rbp + 0x1c60]
vmovdqu ymmword [rbp + 0x1c80], ymm0
vmovdqu ymm0, ymmword [rbp + 0x1c80]
vmovdqa ymmword [rbp + 0x4c0], ymm0
xor eax, eax
cmp eax, 1
je 0x140084abf
jmp 0x140084b10
lea rax, [rbp + 0x2be0]
vmovdqu ymm0, ymmword [rax]
vmovdqu ymmword [rbp + 0x1cc0], ymm0
lea rax, [rbp + 0x4e0]
vmovdqu ymm0, ymmword [rax]
vmovdqu ymmword [rbp + 0x1ca0], ymm0
vmovdqu ymm0, ymmword [rbp + 0x1ca0]
vpxor ymm0, ymm0, ymmword [rbp + 0x1cc0]
vmovdqu ymmword [rbp + 0x1ce0], ymm0
lea rax, [rbp + 0x4e0]
vmovdqu ymm0, ymmword [rbp + 0x1ce0]
vmovdqu ymmword [rax], ymm0
lea rax, [rbp + 0x2bc0]
movdqu xmm0, xmmword [rax]
movdqa xmmword [rbp + 0xcf0], xmm0
lea rax, [rbp + 0x4c0]
movdqu xmm0, xmmword [rax]
movdqa xmmword [rbp + 0xce0], xmm0
movdqa xmm0, xmmword [rbp + 0xce0]
xorps xmm0, xmmword [rbp + 0xcf0]
movdqa xmmword [rbp + 0xd00], xmm0
lea rax, [rbp + 0x4c0]
movdqa xmm0, xmmword [rbp + 0xd00]
movdqu xmmword [rax], xmm0
lea rax, [rbp + 0x4c0]
mov qword [rbp + 0x3f0], rax
lea rax, [rbp + 0x21]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rbp + 0x22]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rbp + 0x23]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
movzx eax, byte [rbp + 0x21]
mov byte [rbp + 0x138], al
movzx eax, byte [rbp + 0x22]
mov byte [rbp + 0x140], al
movzx eax, byte [rbp + 0x23]
mov byte [rbp + 0x148], al
movabs rax, 0xc10c8761e5bc3ae5
mov qword [rbp + 0x808], rax
mov rax, qword [rbp + 0x808]
mov qword [rbp + 0x810], rax
mov rax, qword [rbp + 0x810]
mov qword [rbp + 0x360], rax
movabs rax, 0xbb4c2c8d59eb4796
mov qword [rbp + 0x818], rax
mov rax, qword [rbp + 0x818]
mov qword [rbp + 0x820], rax
mov rax, qword [rbp + 0x820]
mov qword [rbp + 0x368], rax
movabs rax, 0x7fa1693255eb0b65
mov qword [rbp + 0x828], rax
mov rax, qword [rbp + 0x828]
mov qword [rbp + 0x830], rax
mov rax, qword [rbp + 0x830]
mov qword [rbp + 0x370], rax
movabs rax, 0x9ea255179ee919a2
mov qword [rbp + 0x838], rax
mov rax, qword [rbp + 0x838]
mov qword [rbp + 0x840], rax
mov rax, qword [rbp + 0x840]
mov qword [rbp + 0x378], rax
mov rax, qword [rbp + 0xb70]
mov qword [rbp + 0x3f8], rax
movabs rax, 0xa82ce30489d55ba3
mov qword [rbp + 0x848], rax
mov rax, qword [rbp + 0x848]
mov qword [rbp + 0x2ac0], rax
movabs rax, 0xd52345f93a8e2df8
mov qword [rbp + 0x850], rax
mov rax, qword [rbp + 0x850]
mov qword [rbp + 0x2ac8], rax
movabs rax, 0x7fa1693255d92645
mov qword [rbp + 0x858], rax
mov rax, qword [rbp + 0x858]
mov qword [rbp + 0x2ad0], rax
movabs rax, 0x9ea255179ee919a2
mov qword [rbp + 0x860], rax
mov rax, qword [rbp + 0x860]
mov qword [rbp + 0x2ad8], rax
xor eax, eax
test eax, eax
je 0x140084d02
jmp 0x140084d4a
vmovdqa ymm0, ymmword [rbp + 0x2ac0]
vmovdqu ymmword [rbp + 0x1d20], ymm0
vmovdqa ymm0, ymmword [rbp + 0x360]
vmovdqu ymmword [rbp + 0x1d00], ymm0
vmovdqu ymm0, ymmword [rbp + 0x1d00]
vpxor ymm0, ymm0, ymmword [rbp + 0x1d20]
vmovdqu ymmword [rbp + 0x1d40], ymm0
vmovdqu ymm0, ymmword [rbp + 0x1d40]
vmovdqa ymmword [rbp + 0x360], ymm0
xor eax, eax
cmp eax, 1
je 0x140084d53
jmp 0x140084da4
lea rax, [rbp + 0x2ae0]
vmovdqu ymm0, ymmword [rax]
vmovdqu ymmword [rbp + 0x1d80], ymm0
lea rax, [rbp + 0x380]
vmovdqu ymm0, ymmword [rax]
vmovdqu ymmword [rbp + 0x1d60], ymm0
vmovdqu ymm0, ymmword [rbp + 0x1d60]
vpxor ymm0, ymm0, ymmword [rbp + 0x1d80]
vmovdqu ymmword [rbp + 0x1da0], ymm0
lea rax, [rbp + 0x380]
vmovdqu ymm0, ymmword [rbp + 0x1da0]
vmovdqu ymmword [rax], ymm0
xor eax, eax
cmp eax, 1
je 0x140084dad
jmp 0x140084dfe
lea rax, [rbp + 0x2b00]
vmovdqu ymm0, ymmword [rax]
vmovdqu ymmword [rbp + 0x1de0], ymm0
lea rax, [rbp + 0x3a0]
vmovdqu ymm0, ymmword [rax]
vmovdqu ymmword [rbp + 0x1dc0], ymm0
vmovdqu ymm0, ymmword [rbp + 0x1dc0]
vpxor ymm0, ymm0, ymmword [rbp + 0x1de0]
vmovdqu ymmword [rbp + 0x1e00], ymm0
lea rax, [rbp + 0x3a0]
vmovdqu ymm0, ymmword [rbp + 0x1e00]
vmovdqu ymmword [rax], ymm0
xor eax, eax
cmp eax, 1
je 0x140084e07
jmp 0x140084e58
lea rax, [rbp + 0x2b20]
vmovdqu ymm0, ymmword [rax]
vmovdqu ymmword [rbp + 0x1e40], ymm0
lea rax, [rbp + 0x3c0]
vmovdqu ymm0, ymmword [rax]
vmovdqu ymmword [rbp + 0x1e20], ymm0
vmovdqu ymm0, ymmword [rbp + 0x1e20]
vpxor ymm0, ymm0, ymmword [rbp + 0x1e40]
vmovdqu ymmword [rbp + 0x1e60], ymm0
lea rax, [rbp + 0x3c0]
vmovdqu ymm0, ymmword [rbp + 0x1e60]
vmovdqu ymmword [rax], ymm0
lea rax, [rbp + 0x360]
mov qword [rbp + 0x3f8], rax
xor r9d, r9d
mov r8, qword [rbp + 0x3f0]
mov rdx, qword [rbp + 0x3f8]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
nop
lea rcx, [rbp + 0x2138]
call fcn.140002e60
nop
lea rcx, [rbp + 0x2020]
call fcn.14002e2b0
nop
lea rcx, [rbp + 0x2158]
call fcn.140002e60
nop
lea rcx, [rbp + 0x2178]
call fcn.140002e60
nop
lea rcx, [rbp + 0x2198]
call fcn.140002e60
jmp 0x1400868db
cmp qword [rbp + 0x1c8], 0x500
jae 0x14008542a
lea rax, [rbp + 0x24]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rbp + 0x25]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rbp + 0x26]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
movzx eax, byte [rbp + 0x24]
mov byte [rbp + 0x150], al
movzx eax, byte [rbp + 0x25]
mov byte [rbp + 0x158], al
movzx eax, byte [rbp + 0x26]
mov byte [rbp + 0x160], al
movabs rax, 0xa82ce30489d55bc6
mov qword [rbp + 0x868], rax
mov rax, qword [rbp + 0x868]
mov qword [rbp + 0x870], rax
mov rax, qword [rbp + 0x870]
mov qword [rbp + 0x4e0], rax
movabs rax, 0xd52345f93a8e2df8
mov qword [rbp + 0x878], rax
mov rax, qword [rbp + 0x878]
mov qword [rbp + 0x880], rax
mov rax, qword [rbp + 0x880]
mov qword [rbp + 0x4e8], rax
mov rax, qword [rbp + 0xb78]
mov qword [rbp + 0x400], rax
movabs rax, 0xa82ce30489d55ba3
mov qword [rbp + 0x888], rax
mov rax, qword [rbp + 0x888]
mov qword [rbp + 0x2ba0], rax
movabs rax, 0xd52345f93a8e2df8
mov qword [rbp + 0x890], rax
mov rax, qword [rbp + 0x890]
mov qword [rbp + 0x2ba8], rax
xor eax, eax
cmp eax, 1
je 0x140084fd3
jmp 0x14008501b
vmovdqu ymm0, ymmword [rbp + 0x2ba0]
vmovdqu ymmword [rbp + 0x1ea0], ymm0
vmovdqu ymm0, ymmword [rbp + 0x4e0]
vmovdqu ymmword [rbp + 0x1e80], ymm0
vmovdqu ymm0, ymmword [rbp + 0x1e80]
vpxor ymm0, ymm0, ymmword [rbp + 0x1ea0]
vmovdqu ymmword [rbp + 0x1ec0], ymm0
vmovdqu ymm0, ymmword [rbp + 0x1ec0]
vmovdqa ymmword [rbp + 0x4e0], ymm0
xor eax, eax
cmp eax, 1
je 0x140085024
jmp 0x140085075
lea rax, [rbp + 0x2bc0]
vmovdqu ymm0, ymmword [rax]
vmovdqu ymmword [rbp + 0x1f00], ymm0
lea rax, [rbp + 0x500]
vmovdqu ymm0, ymmword [rax]
vmovdqu ymmword [rbp + 0x1ee0], ymm0
vmovdqu ymm0, ymmword [rbp + 0x1ee0]
vpxor ymm0, ymm0, ymmword [rbp + 0x1f00]
vmovdqu ymmword [rbp + 0x1f20], ymm0
lea rax, [rbp + 0x500]
vmovdqu ymm0, ymmword [rbp + 0x1f20]
vmovdqu ymmword [rax], ymm0
lea rax, [rbp + 0x2ba0]
movdqu xmm0, xmmword [rax]
movdqa xmmword [rbp + 0xd20], xmm0
lea rax, [rbp + 0x4e0]
movdqu xmm0, xmmword [rax]
movdqa xmmword [rbp + 0xd10], xmm0
movdqa xmm0, xmmword [rbp + 0xd10]
xorps xmm0, xmmword [rbp + 0xd20]
movdqa xmmword [rbp + 0xd30], xmm0
lea rax, [rbp + 0x4e0]
movdqa xmm0, xmmword [rbp + 0xd30]
movdqu xmmword [rax], xmm0
lea rax, [rbp + 0x4e0]
mov qword [rbp + 0x400], rax
lea rax, [rbp + 0x27]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rbp + 0x28]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rbp + 0x29]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
movzx eax, byte [rbp + 0x27]
mov byte [rbp + 0x168], al
movzx eax, byte [rbp + 0x28]
mov byte [rbp + 0x170], al
movzx eax, byte [rbp + 0x29]
mov byte [rbp + 0x178], al
movabs rax, 0xc10c8761e5bc3ae5
mov qword [rbp + 0x898], rax
mov rax, qword [rbp + 0x898]
mov qword [rbp + 0x8a0], rax
mov rax, qword [rbp + 0x8a0]
mov qword [rbp + 0x1e0], rax
movabs rax, 0xbb4c2c8d59eb4796
mov qword [rbp + 0x8a8], rax
mov rax, qword [rbp + 0x8a8]
mov qword [rbp + 0x8b0], rax
mov rax, qword [rbp + 0x8b0]
mov qword [rbp + 0x1e8], rax
movabs rax, 0x7fa1693260ed0b65
mov qword [rbp + 0x8b8], rax
mov rax, qword [rbp + 0x8b8]
mov qword [rbp + 0x8c0], rax
mov rax, qword [rbp + 0x8c0]
mov qword [rbp + 0x1f0], rax
movabs rax, 0x9ea255179ee919a2
mov qword [rbp + 0x8c8], rax
mov rax, qword [rbp + 0x8c8]
mov qword [rbp + 0x8d0], rax
mov rax, qword [rbp + 0x8d0]
mov qword [rbp + 0x1f8], rax
mov rax, qword [rbp + 0xb80]
mov qword [rbp + 0x408], rax
movabs rax, 0xa82ce30489d55ba3
mov qword [rbp + 0x8d8], rax
mov rax, qword [rbp + 0x8d8]
mov qword [rbp + 0x2b00], rax
movabs rax, 0xd52345f93a8e2df8
mov qword [rbp + 0x8e0], rax
mov rax, qword [rbp + 0x8e0]
mov qword [rbp + 0x2b08], rax
movabs rax, 0x7fa1693255d92645
mov qword [rbp + 0x8e8], rax
mov rax, qword [rbp + 0x8e8]
mov qword [rbp + 0x2b10], rax
movabs rax, 0x9ea255179ee919a2
mov qword [rbp + 0x8f0], rax
mov rax, qword [rbp + 0x8f0]
mov qword [rbp + 0x2b18], rax
xor eax, eax
test eax, eax
je 0x140085267
jmp 0x1400852af
vmovdqa ymm0, ymmword [rbp + 0x2b00]
vmovdqu ymmword [rbp + 0x1f60], ymm0
vmovdqa ymm0, ymmword [rbp + 0x1e0]
vmovdqu ymmword [rbp + 0x1f40], ymm0
vmovdqu ymm0, ymmword [rbp + 0x1f40]
vpxor ymm0, ymm0, ymmword [rbp + 0x1f60]
vmovdqu ymmword [rbp + 0xe20], ymm0
vmovdqu ymm0, ymmword [rbp + 0xe20]
vmovdqa ymmword [rbp + 0x1e0], ymm0
xor eax, eax
cmp eax, 1
je 0x1400852b8
jmp 0x140085309
lea rax, [rbp + 0x2b20]
vmovdqu ymm0, ymmword [rax]
vmovdqu ymmword [rbp + 0xe80], ymm0
lea rax, [rbp + 0x200]
vmovdqu ymm0, ymmword [rax]
vmovdqu ymmword [rbp + 0xe60], ymm0
vmovdqu ymm0, ymmword [rbp + 0xe60]
vpxor ymm0, ymm0, ymmword [rbp + 0xe80]
vmovdqu ymmword [rbp + 0xea0], ymm0
lea rax, [rbp + 0x200]
vmovdqu ymm0, ymmword [rbp + 0xea0]
vmovdqu ymmword [rax], ymm0
xor eax, eax
cmp eax, 1
je 0x140085312
jmp 0x140085363
lea rax, [rbp + 0x2b40]
vmovdqu ymm0, ymmword [rax]
vmovdqu ymmword [rbp + 0xee0], ymm0
lea rax, [rbp + 0x220]
vmovdqu ymm0, ymmword [rax]
vmovdqu ymmword [rbp + 0xec0], ymm0
vmovdqu ymm0, ymmword [rbp + 0xec0]
vpxor ymm0, ymm0, ymmword [rbp + 0xee0]
vmovdqu ymmword [rbp + 0xf00], ymm0
lea rax, [rbp + 0x220]
vmovdqu ymm0, ymmword [rbp + 0xf00]
vmovdqu ymmword [rax], ymm0
xor eax, eax
cmp eax, 1
je 0x14008536c
jmp 0x1400853bd
lea rax, [rbp + 0x2b60]
vmovdqu ymm0, ymmword [rax]
vmovdqu ymmword [rbp + 0xf40], ymm0
lea rax, [rbp + 0x240]
vmovdqu ymm0, ymmword [rax]
vmovdqu ymmword [rbp + 0xf20], ymm0
vmovdqu ymm0, ymmword [rbp + 0xf20]
vpxor ymm0, ymm0, ymmword [rbp + 0xf40]
vmovdqu ymmword [rbp + 0xf60], ymm0
lea rax, [rbp + 0x240]
vmovdqu ymm0, ymmword [rbp + 0xf60]
vmovdqu ymmword [rax], ymm0
lea rax, [rbp + 0x1e0]
mov qword [rbp + 0x408], rax
xor r9d, r9d
mov r8, qword [rbp + 0x400]
mov rdx, qword [rbp + 0x408]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
nop
lea rcx, [rbp + 0x2138]
call fcn.140002e60
nop
lea rcx, [rbp + 0x2020]
call fcn.14002e2b0
nop
lea rcx, [rbp + 0x2158]
call fcn.140002e60
nop
lea rcx, [rbp + 0x2178]
call fcn.140002e60
nop
lea rcx, [rbp + 0x2198]
call fcn.140002e60
jmp 0x1400868db
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x2020]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::seekg_long_long___int64___int____ptr64]
mov r8, qword [rbp + 0x1c8]
mov rdx, qword [rbp + 0x1ff0]
lea rcx, [rbp + 0x2020]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::read_char____ptr64__long_long___int64_____ptr64]
mov rax, qword [rbp + 0x1ff0]
mov qword [rbp + 0x8f8], rax
mov rax, qword [rbp + 0x8f8]
movsxd rax, dword [rax + 0x3c]
mov rcx, qword [rbp + 0x1ff0]
add rcx, rax
mov rax, rcx
mov qword [rbp + 0x1fe8], rax
mov rax, qword [rbp + 0x1fe8]
add rax, 0x18
mov qword [rbp + 0x900], rax
mov rax, qword [rsp + 0x2cc0]
mov rax, qword [rax + 0x10]
mov qword [rbp + 0x30], rax
mov rax, qword [rbp + 0x900]
mov eax, dword [rax + 0x38]
mov qword [rbp + 0x1d8], rax
lea rax, [rbp + 0x2a]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rbp + 0x2b]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rbp + 0x2c]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
movzx eax, byte [rbp + 0x2a]
mov byte [rbp + 0x180], al
movzx eax, byte [rbp + 0x2b]
mov byte [rbp + 0x188], al
movzx eax, byte [rbp + 0x2c]
mov byte [rbp + 0x190], al
movabs rax, 0xa8499b61a7e728c0
mov qword [rbp + 0x908], rax
mov rax, qword [rbp + 0x908]
mov qword [rbp + 0x910], rax
mov rax, qword [rbp + 0x910]
mov qword [rbp + 0x420], rax
movabs rax, 0xd52345f93a8e2df8
mov qword [rbp + 0x918], rax
mov rax, qword [rbp + 0x918]
mov qword [rbp + 0x920], rax
mov rax, qword [rbp + 0x920]
mov qword [rbp + 0x428], rax
movabs rax, 0xa82ce30489d55ba3
mov qword [rbp + 0x928], rax
mov rax, qword [rbp + 0x928]
mov qword [rbp + 0x2c20], rax
movabs rax, 0xd52345f93a8e2df8
mov qword [rbp + 0x930], rax
mov rax, qword [rbp + 0x930]
mov qword [rbp + 0x2c28], rax
xor eax, eax
cmp eax, 1
je 0x1400855a6
jmp 0x1400855ee
vmovdqu ymm0, ymmword [rbp + 0x2c20]
vmovdqu ymmword [rbp + 0xfa0], ymm0
vmovdqu ymm0, ymmword [rbp + 0x420]
vmovdqu ymmword [rbp + 0xf80], ymm0
vmovdqu ymm0, ymmword [rbp + 0xf80]
vpxor ymm0, ymm0, ymmword [rbp + 0xfa0]
vmovdqu ymmword [rbp + 0xfc0], ymm0
vmovdqu ymm0, ymmword [rbp + 0xfc0]
vmovdqa ymmword [rbp + 0x420], ymm0
xor eax, eax
cmp eax, 1
je 0x1400855f7
jmp 0x140085648
lea rax, [rbp + 0x2c40]
vmovdqu ymm0, ymmword [rax]
vmovdqu ymmword [rbp + 0x1000], ymm0
lea rax, [rbp + 0x440]
vmovdqu ymm0, ymmword [rax]
vmovdqu ymmword [rbp + 0xfe0], ymm0
vmovdqu ymm0, ymmword [rbp + 0xfe0]
vpxor ymm0, ymm0, ymmword [rbp + 0x1000]
vmovdqu ymmword [rbp + 0x1020], ymm0
lea rax, [rbp + 0x440]
vmovdqu ymm0, ymmword [rbp + 0x1020]
vmovdqu ymmword [rax], ymm0
lea rax, [rbp + 0x2c20]
movdqu xmm0, xmmword [rax]
movdqa xmmword [rbp + 0xd50], xmm0
lea rax, [rbp + 0x420]
movdqu xmm0, xmmword [rax]
movdqa xmmword [rbp + 0xd40], xmm0
movdqa xmm0, xmmword [rbp + 0xd40]
xorps xmm0, xmmword [rbp + 0xd50]
movdqa xmmword [rbp + 0xd60], xmm0
lea rax, [rbp + 0x420]
movdqa xmm0, xmmword [rbp + 0xd60]
movdqu xmmword [rax], xmm0
lea rax, [rbp + 0x420]
mov qword [rbp + 0x938], rax
mov rcx, qword [rbp + 0x938]
call fcn.1400809e0
mov edx, eax
lea rcx, [rbp + 0x1f80]
call fcn.14007f2c0
lea rcx, [rbp + 0x2000]
mov rdi, rcx
mov rsi, rax
mov ecx, Ordinal_29
rep movsb byte [rdi], byte [rsi]
cmp dword [rbp + 0x2008], 0
jne 0x14008573c
xor r9d, r9d
lea r8, [0x140181b14]
lea rdx, str.Failed_injection__3
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
nop
lea rcx, [rbp + 0x2138]
call fcn.140002e60
nop
lea rcx, [rbp + 0x2020]
call fcn.14002e2b0
nop
lea rcx, [rbp + 0x2158]
call fcn.140002e60
nop
lea rcx, [rbp + 0x2178]
call fcn.140002e60
nop
lea rcx, [rbp + 0x2198]
call fcn.140002e60
jmp 0x1400868db
mov dword [rsp + 0x20], 0x40
mov r9d, 0x3000
mov r8, qword [rbp + 0x1d8]
xor edx, edx
mov rcx, qword [rbp + 0x30]
call qword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov qword [rbp + 0x1fe0], rax
cmp qword [rbp + 0x1fe0], 0
jne 0x1400857cd
xor r9d, r9d
lea r8, [0x140181b14]
lea rdx, str.Failed_injection__4_handle_err
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
nop
lea rcx, [rbp + 0x2138]
call fcn.140002e60
nop
lea rcx, [rbp + 0x2020]
call fcn.14002e2b0
nop
lea rcx, [rbp + 0x2158]
call fcn.140002e60
nop
lea rcx, [rbp + 0x2178]
call fcn.140002e60
nop
lea rcx, [rbp + 0x2198]
call fcn.140002e60
jmp 0x1400868db
lea rax, [rbp + 0x2d]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
movzx r8d, byte [rbp + 0x2d]
mov rdx, qword [rbp + 0x1fe8]
mov rcx, qword [rbp + 0x1ff0]
call fcn.14007dcd0
movzx eax, al
test eax, eax
jne 0x14008585b
xor r9d, r9d
lea r8, [0x140181b14]
lea rdx, str.Failed_injection__5
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
nop
lea rcx, [rbp + 0x2138]
call fcn.140002e60
nop
lea rcx, [rbp + 0x2020]
call fcn.14002e2b0
nop
lea rcx, [rbp + 0x2158]
call fcn.140002e60
nop
lea rcx, [rbp + 0x2178]
call fcn.140002e60
nop
lea rcx, [rbp + 0x2198]
call fcn.140002e60
jmp 0x1400868db
mov r8, qword [rbp + 0x1fe0]
mov rdx, qword [rbp + 0x1fe8]
mov rcx, qword [rbp + 0x1ff0]
call fcn.140089140
mov rax, qword [rbp + 0x1fe8]
mov eax, dword [rax + 0x54]
mov qword [rsp + 0x20], 0
mov r9d, eax
mov r8, qword [rbp + 0x1ff0]
mov rdx, qword [rbp + 0x1fe0]
mov rcx, qword [rbp + 0x30]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov rax, qword [rbp + 0x1fe8]
movzx eax, word [rax + 0x14]
mov rcx, qword [rbp + 0x1fe8]
lea rax, [rcx + rax + 0x18]
mov qword [rbp + 0x1d0], rax
mov qword [rbp + 0x1b8], 0
jmp 0x1400858df
mov rax, qword [rbp + 0x1b8]
inc rax
mov qword [rbp + 0x1b8], rax
mov rax, qword [rbp + 0x1fe8]
movzx eax, word [rax + 6]
cmp qword [rbp + 0x1b8], rax
jae 0x140085964
imul rax, qword [rbp + 0x1b8], 0x28
mov rcx, qword [rbp + 0x1d0]
mov eax, dword [rcx + rax + 0x10]
imul rcx, qword [rbp + 0x1b8], 0x28
mov rdx, qword [rbp + 0x1d0]
mov ecx, dword [rdx + rcx + 0x14]
mov rdx, qword [rbp + 0x1ff0]
add rdx, rcx
mov rcx, rdx
imul rdx, qword [rbp + 0x1b8], 0x28
mov rdi, qword [rbp + 0x1d0]
mov edx, dword [rdi + rdx + 0xc]
mov rdi, qword [rbp + 0x1fe0]
add rdi, rdx
mov rdx, rdi
mov qword [rsp + 0x20], 0
mov r9d, eax
mov r8, rcx
mov rcx, qword [rbp + 0x30]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
jmp 0x1400858ce
lea rax, [rbp + 0x2230]
mov rdi, rax
xor eax, eax
mov ecx, 0x28
rep stosb byte [rdi], al
lea rax, [rbp + 0x1fe8]
mov qword [rbp + 0x2230], rax
lea rax, [rbp + 0x1ff0]
mov qword [rbp + 0x2238], rax
lea rax, [rbp + 0x2000]
mov qword [rbp + 0x2240], rax
mov rax, qword [rsp + 0x2cc0]
mov qword [rbp + 0x2248], rax
lea rax, [rbp + 0x1fe0]
mov qword [rbp + 0x2250], rax
lea rcx, [rbp + 0x2230]
call fcn.14007ea20
mov dword [rsp + 0x20], 0x40
mov r9d, 0x3000
mov r8d, 0x500
xor edx, edx
mov rcx, qword [rbp + 0x30]
call qword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov qword [rbp + 0x40], rax
cmp qword [rbp + 0x40], 0
jne 0x140085a54
xor r9d, r9d
lea r8, [0x140181b14]
lea rdx, str.Failed_injection__5
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
nop
lea rcx, [rbp + 0x2138]
call fcn.140002e60
nop
lea rcx, [rbp + 0x2020]
call fcn.14002e2b0
nop
lea rcx, [rbp + 0x2158]
call fcn.140002e60
nop
lea rcx, [rbp + 0x2178]
call fcn.140002e60
nop
lea rcx, [rbp + 0x2198]
call fcn.140002e60
jmp 0x1400868db
mov r8d, dword [rbp + 0x2008]
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenThread]
mov qword [rbp + 0x38], rax
mov qword [rbp + 0xaa0], 1
mov rax, qword [rbp + 0x1fe8]
mov eax, dword [rax + 0x28]
mov rcx, qword [rbp + 0x1fe0]
add rcx, rax
mov rax, rcx
mov qword [rbp + 0xab8], rax
mov rax, qword [rbp + 0x1fe0]
mov qword [rbp + 0x410], rax
mov rax, qword [rbp + 0x410]
xor rax, 0x1337
mov qword [rbp + 0xa68], rax
mov rax, qword [rbp + 0x1d8]
xor rax, 0x1337
mov qword [rbp + 0xa60], rax
lea rax, [rbp + 0x2120]
mov rdi, rax
xor eax, eax
mov ecx, 0x18
rep stosb byte [rdi], al
lea rcx, [rbp + 0x198]
call fcn.14007e290
mov r8, rax
mov edx, 0x20
lea rcx, [rbp + 0x2120]
call fcn.14007e3d0
nop
mov rdx, qword [rbp + 0x410]
lea rcx, [rbp + 0x21b8]
call fcn.140089710
nop
lea rdx, [rbp + 0xb88]
lea rcx, [rbp + 0x2120]
call fcn.14007f2a0
mov rax, qword [rax]
mov qword [rbp + 0x940], rax
mov rax, qword [rbp + 0x940]
mov qword [rbp + 0x948], rax
mov rax, qword [rbp + 0x948]
mov qword [rbp + 0x980], rax
lea rdx, [rbp + 0xb90]
lea rcx, [rbp + 0x2120]
call fcn.14007eec0
mov rax, qword [rax]
mov qword [rbp + 0x950], rax
mov rax, qword [rbp + 0x950]
mov qword [rbp + 0x958], rax
mov rax, qword [rbp + 0x958]
mov qword [rbp + 0x988], rax
lea rdx, [rbp + 0xb98]
lea rcx, [rbp + 0x21b8]
call fcn.14004d2e0
mov rax, qword [rax]
mov qword [rbp + 0x960], rax
mov rax, qword [rbp + 0x960]
mov qword [rbp + 0x968], rax
mov rax, qword [rbp + 0x968]
mov qword [rbp + 0x990], rax
lea rdx, [rbp + 0xba0]
lea rcx, [rbp + 0x21b8]
call fcn.1400414d0
mov rax, qword [rax]
mov qword [rbp + 0x970], rax
mov rax, qword [rbp + 0x970]
mov qword [rbp + 0x978], rax
mov rax, qword [rbp + 0x978]
mov qword [rbp + 0x998], rax
mov dword [rsp + 0x20], 0x100000
mov r9, qword [rbp + 0x980]
mov r8, qword [rbp + 0x988]
mov rdx, qword [rbp + 0x990]
mov rcx, qword [rbp + 0x998]
call fcn.14007c780
lea rdx, [rbp + 0xba8]
lea rcx, [rbp + 0x2120]
call fcn.14007f2a0
mov rax, qword [rax]
mov qword [rbp + 0x9a0], rax
lea rdx, [rbp + 0xbb0]
lea rcx, [rbp + 0x2120]
call fcn.14007eec0
mov rax, qword [rax]
mov qword [rbp + 0x9a8], rax
mov r8, qword [rbp + 0x9a0]
mov rdx, qword [rbp + 0x9a8]
lea rcx, [rbp + 0x2210]
call fcn.14007c500
nop
mov rdx, qword [rbp + 0x1d8]
lea rcx, [rbp + 0x1040]
call fcn.140089710
mov qword [rbp + 0x9b0], rax
mov rdx, qword [rbp + 0x9b0]
lea rcx, [rbp + 0x21b8]
call fcn.14002ab10
lea rcx, [rbp + 0x1040]
call fcn.140002e60
lea rdx, [rbp + 0xbb8]
lea rcx, [rbp + 0x2120]
call fcn.14007f2a0
mov rax, qword [rax]
mov qword [rbp + 0x9b8], rax
mov rax, qword [rbp + 0x9b8]
mov qword [rbp + 0x9c0], rax
mov rax, qword [rbp + 0x9c0]
mov qword [rbp + 0x9f8], rax
lea rdx, [rbp + 0xbc0]
lea rcx, [rbp + 0x2120]
call fcn.14007eec0
mov rax, qword [rax]
mov qword [rbp + 0x9c8], rax
mov rax, qword [rbp + 0x9c8]
mov qword [rbp + 0x9d0], rax
mov rax, qword [rbp + 0x9d0]
mov qword [rbp + 0xa00], rax
lea rdx, [rbp + 0xbc8]
lea rcx, [rbp + 0x21b8]
call fcn.14004d2e0
mov rax, qword [rax]
mov qword [rbp + 0x9d8], rax
mov rax, qword [rbp + 0x9d8]
mov qword [rbp + 0x9e0], rax
mov rax, qword [rbp + 0x9e0]
mov qword [rbp + 0xa08], rax
lea rdx, [rbp + 0xbd0]
lea rcx, [rbp + 0x21b8]
call fcn.1400414d0
mov rax, qword [rax]
mov qword [rbp + 0x9e8], rax
mov rax, qword [rbp + 0x9e8]
mov qword [rbp + 0x9f0], rax
mov rax, qword [rbp + 0x9f0]
mov qword [rbp + 0xa10], rax
mov dword [rsp + 0x20], 0x100000
mov r9, qword [rbp + 0x9f8]
mov r8, qword [rbp + 0xa00]
mov rdx, qword [rbp + 0xa08]
mov rcx, qword [rbp + 0xa10]
call fcn.14007c780
lea rdx, [rbp + 0xbd8]
lea rcx, [rbp + 0x2120]
call fcn.14007f2a0
mov rax, qword [rax]
mov qword [rbp + 0xa18], rax
lea rdx, [rbp + 0xbe0]
lea rcx, [rbp + 0x2120]
call fcn.14007eec0
mov rax, qword [rax]
mov qword [rbp + 0xa20], rax
mov r8, qword [rbp + 0xa18]
mov rdx, qword [rbp + 0xa20]
lea rcx, [rbp + 0x21f0]
call fcn.14007c500
nop
lea rax, [rbp + 0x1fa0]
mov qword [rbp + 0xa28], rax
lea rdx, [rbp + 0x21f0]
mov rcx, qword [rbp + 0xa28]
call fcn.14001f070
mov qword [rbp + 0xa30], rax
mov rax, qword [rbp + 0xa30]
mov qword [rbp + 0xa38], rax
mov rax, qword [rbp + 0xa38]
mov qword [rbp + 0xa50], rax
lea rax, [rbp + 0x1fc0]
mov qword [rbp + 0xa40], rax
lea rdx, [rbp + 0x2210]
mov rcx, qword [rbp + 0xa40]
call fcn.14001f070
mov qword [rbp + 0xa48], rax
mov rax, qword [rbp + 0xa48]
mov qword [rbp + 0xa58], rax
mov rax, qword [rbp + 0xa50]
mov qword [rsp + 0x20], rax
mov r9, qword [rbp + 0xa58]
mov r8, qword [rbp + 0xa60]
mov rdx, qword [rbp + 0xa68]
mov rcx, qword [rsp + 0x2cc0]
call fcn.140086900
cmp eax, 0x894f3415
je 0x140085f9b
xor r9d, r9d
lea r8, [0x140181b14]
lea rdx, str.Failed_injection__8
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
mov r9d, 0x8000
xor r8d, r8d
mov rdx, qword [rbp + 0x1fe0]
mov rcx, qword [rbp + 0x30]
call qword [sym.imp.KERNEL32.dll_VirtualFreeEx]
mov r9d, 0x8000
xor r8d, r8d
mov rdx, qword [rbp + 0x40]
mov rcx, qword [rbp + 0x30]
call qword [sym.imp.KERNEL32.dll_VirtualFreeEx]
mov rcx, qword [rbp + 0x30]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp + 0x38]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
lea rcx, [rbp + 0x21f0]
call fcn.140002e60
nop
lea rcx, [rbp + 0x2210]
call fcn.140002e60
nop
lea rcx, [rbp + 0x21b8]
call fcn.140002e60
nop
lea rcx, [rbp + 0x2120]
call fcn.14007e860
nop
lea rcx, [rbp + 0x2138]
call fcn.140002e60
nop
lea rcx, [rbp + 0x2020]
call fcn.14002e2b0
nop
lea rcx, [rbp + 0x2158]
call fcn.140002e60
nop
lea rcx, [rbp + 0x2178]
call fcn.140002e60
nop
lea rcx, [rbp + 0x2198]
call fcn.140002e60
jmp 0x1400868db
lea rax, [rbp + 0x24a0]
mov rdi, rax
xor eax, eax
mov ecx, 0x4d0
rep stosb byte [rdi], al
mov dword [rbp + 0x24d0], 0x10000b
mov rcx, qword [rbp + 0x38]
call qword [sym.imp.KERNEL32.dll_SuspendThread]
cmp eax, 0xffffffff
je 0x140085fe0
lea rdx, [rbp + 0x24a0]
mov rcx, qword [rbp + 0x38]
call qword [sym.imp.KERNEL32.dll_GetThreadContext]
test eax, eax
jne 0x1400860b8
xor r9d, r9d
lea r8, [0x140181b14]
lea rdx, str.Failed_injection__6
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
mov r9d, 0x8000
xor r8d, r8d
mov rdx, qword [rbp + 0x1fe0]
mov rcx, qword [rbp + 0x30]
call qword [sym.imp.KERNEL32.dll_VirtualFreeEx]
mov r9d, 0x8000
xor r8d, r8d
mov rdx, qword [rbp + 0x40]
mov rcx, qword [rbp + 0x30]
call qword [sym.imp.KERNEL32.dll_VirtualFreeEx]
mov rcx, qword [rbp + 0x30]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp + 0x38]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
lea rcx, [rbp + 0x21f0]
call fcn.140002e60
nop
lea rcx, [rbp + 0x2210]
call fcn.140002e60
nop
lea rcx, [rbp + 0x21b8]
call fcn.140002e60
nop
lea rcx, [rbp + 0x2120]
call fcn.14007e860
nop
lea rcx, [rbp + 0x2138]
call fcn.140002e60
nop
lea rcx, [rbp + 0x2020]
call fcn.14002e2b0
nop
lea rcx, [rbp + 0x2158]
call fcn.140002e60
nop
lea rcx, [rbp + 0x2178]
call fcn.140002e60
nop
lea rcx, [rbp + 0x2198]
call fcn.140002e60
jmp 0x1400868db
lea rax, [rbp + 0x2258]
mov rdi, rax
xor eax, eax
mov ecx, 0x38
rep stosb byte [rdi], al
xor edx, edx
lea rcx, [rbp + 0x2258]
call qword [sym.imp.asmjit.dll_public:_void___cdecl_asmjit::_abi_1_13::JitRuntime::constructor_struct_asmjit::_abi_1_13::JitAllocator::CreateParams_const____ptr64____ptr64]
nop
lea rax, [rbp + 0x2350]
mov rdi, rax
xor eax, eax
mov ecx, 0x150
rep stosb byte [rdi], al
xor edx, edx
lea rcx, [rbp + 0x2350]
call qword [sym.imp.asmjit.dll_public:_void___cdecl_asmjit::_abi_1_13::CodeHolder::constructor_struct_asmjit::_abi_1_13::Support::Temporary_const____ptr64____ptr64]
nop
lea rcx, [rbp + 0x2258]
call fcn.14007f2b0
mov r8, 0xffffffffffffffff
mov rdx, rax
lea rcx, [rbp + 0x2350]
call qword [sym.imp.asmjit.dll_public:_unsigned_int___cdecl_asmjit::_abi_1_13::CodeHolder::init_class_asmjit::_abi_1_13::Environment_const____ptr64__unsigned_long_long_unsigned___int64_____ptr64]
lea rax, [rbp + 0x2290]
mov rdi, rax
xor eax, eax
mov ecx, 0xb0
rep stosb byte [rdi], al
lea rdx, [rbp + 0x2350]
lea rcx, [rbp + 0x2290]
call qword [sym.imp.asmjit.dll_public:_void___cdecl_asmjit::_abi_1_13::x86::Assembler::constructor_class_asmjit::_abi_1_13::CodeHolder____ptr64____ptr64]
nop
lea rax, [rbp + 0x2340]
mov qword [rbp + 0xa70], rax
lea rdx, [0x140181898]
mov rcx, qword [rbp + 0xa70]
call fcn.1400890c0
lea rax, [rbp + 0x2340]
mov qword [rbp + 0xa78], rax
lea rdx, [0x140181888]
mov rcx, qword [rbp + 0xa78]
call fcn.1400890c0
lea rax, [rbp + 0x2340]
mov qword [rbp + 0xa80], rax
lea rdx, [0x1401818a8]
mov rcx, qword [rbp + 0xa80]
call fcn.1400890c0
lea rax, [rbp + 0x2340]
mov qword [rbp + 0xa88], rax
mov dword [rbp + 0x1c0], 0x20
xor r8d, r8d
lea rdx, [rbp + 0x1c0]
lea rcx, [rbp + 0xd70]
call fcn.14007bf80
lea r8, [rbp + 0xd70]
lea rdx, [0x1401818b8]
mov rcx, qword [rbp + 0xa88]
call fcn.140089680
lea rax, [rbp + 0x2340]
mov qword [rbp + 0xa98], rax
mov rax, qword [rbp + 0x1fe0]
mov qword [rbp + 0xa90], rax
xor r8d, r8d
lea rdx, [rbp + 0xa90]
lea rcx, [rbp + 0xd80]
call fcn.14007bff0
lea r8, [rbp + 0xd80]
lea rdx, [0x140181898]
mov rcx, qword [rbp + 0xa98]
call fcn.140088f30
lea rax, [rbp + 0x2340]
mov qword [rbp + 0xab0], rax
mov rax, qword [rbp + 0xaa0]
mov qword [rbp + 0xaa8], rax
xor r8d, r8d
lea rdx, [rbp + 0xaa8]
lea rcx, [rbp + 0xd90]
call fcn.14007bff0
lea r8, [rbp + 0xd90]
lea rdx, [0x1401818a8]
mov rcx, qword [rbp + 0xab0]
call fcn.140088f30
lea rax, [rbp + 0x2340]
mov qword [rbp + 0xac8], rax
mov rax, qword [rbp + 0xab8]
mov qword [rbp + 0xac0], rax
xor r8d, r8d
lea rdx, [rbp + 0xac0]
lea rcx, [rbp + 0xda0]
call fcn.14007bff0
lea r8, [rbp + 0xda0]
lea rdx, [0x140181888]
mov rcx, qword [rbp + 0xac8]
call fcn.140088f30
lea rax, [rbp + 0x2340]
mov qword [rbp + 0xad0], rax
lea rdx, [0x140181888]
mov rcx, qword [rbp + 0xad0]
call fcn.14007f0b0
lea rax, [rbp + 0x2340]
mov qword [rbp + 0xad8], rax
xor r8d, r8d
lea rdx, [rbp + 0x2598]
lea rcx, [rbp + 0xdb0]
call fcn.14007bff0
lea r8, [rbp + 0xdb0]
lea rdx, [0x1401818a8]
mov rcx, qword [rbp + 0xad8]
call fcn.140088f30
lea rax, [rbp + 0x2340]
mov qword [rbp + 0xae0], rax
mov r8d, Ordinal_29
lea rdx, [0x1401818b8]
lea rcx, [rbp + 0xe40]
call fcn.140089110
lea r8, [0x1401818a8]
mov rdx, rax
mov rcx, qword [rbp + 0xae0]
call fcn.140088f60
lea rax, [rbp + 0x2340]
mov qword [rbp + 0xae8], rax
mov dword [rbp + 0x1c4], 0x20
xor r8d, r8d
lea rdx, [rbp + 0x1c4]
lea rcx, [rbp + 0xdc0]
call fcn.14007bf80
lea r8, [rbp + 0xdc0]
lea rdx, [0x1401818b8]
mov rcx, qword [rbp + 0xae8]
call fcn.14007ee90
lea rax, [rbp + 0x2340]
mov qword [rbp + 0xaf0], rax
lea rdx, [0x1401818a8]
mov rcx, qword [rbp + 0xaf0]
call fcn.140089070
lea rax, [rbp + 0x2340]
mov qword [rbp + 0xaf8], rax
lea rdx, [0x140181888]
mov rcx, qword [rbp + 0xaf8]
call fcn.140089070
lea rax, [rbp + 0x2340]
mov qword [rbp + 0xb00], rax
lea rdx, [0x140181898]
mov rcx, qword [rbp + 0xb00]
call fcn.140089070
lea rax, [rbp + 0x2340]
mov qword [rbp + 0xb08], rax
mov r8d, 0xffffffe0
lea rdx, [0x1401818b8]
lea rcx, [rbp + 0xe50]
call fcn.140089110
mov rdx, rax
mov rcx, qword [rbp + 0xb08]
call fcn.140088f00
lea rcx, [rbp + 0x2350]
call qword [sym.imp.asmjit.dll_public:_unsigned_long_long_unsigned___int64____cdecl_asmjit::_abi_1_13::CodeHolder::codeSize_void_const___ptr64]
mov qword [rbp + 0xb10], rax
xor edx, edx
lea rcx, [rbp + 0x2350]
call fcn.140089620
mov rcx, rax
call fcn.14007f250
mov qword [rsp + 0x20], 0
mov r9, qword [rbp + 0xb10]
mov r8, rax
mov rdx, qword [rbp + 0x40]
mov rcx, qword [rbp + 0x30]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
test eax, eax
jne 0x1400865c2
xor r9d, r9d
lea r8, [0x140181b14]
lea rdx, str.Failed_injection_cs2_shell
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
mov r9d, 0x8000
xor r8d, r8d
mov rdx, qword [rbp + 0x1fe0]
mov rax, qword [rsp + 0x2cc0]
mov rcx, qword [rax + 0x10]
call qword [sym.imp.KERNEL32.dll_VirtualFreeEx]
mov r9d, 0x8000
xor r8d, r8d
mov rdx, qword [rbp + 0x40]
mov rax, qword [rsp + 0x2cc0]
mov rcx, qword [rax + 0x10]
call qword [sym.imp.KERNEL32.dll_VirtualFreeEx]
mov rax, qword [rsp + 0x2cc0]
mov rcx, qword [rax + 0x10]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp + 0x38]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
lea rcx, [rbp + 0x2290]
call qword [sym.imp.asmjit.dll_public_virtual:_void___cdecl_asmjit::_abi_1_13::x86::Assembler::destructor_void____ptr64]
nop
lea rcx, [rbp + 0x2350]
call qword [sym.imp.asmjit.dll_public:_void___cdecl_asmjit::_abi_1_13::CodeHolder::destructor_void____ptr64]
nop
lea rcx, [rbp + 0x2258]
call qword [sym.imp.asmjit.dll_public_virtual:_void___cdecl_asmjit::_abi_1_13::JitRuntime::destructor_void____ptr64]
nop
lea rcx, [rbp + 0x21f0]
call fcn.140002e60
nop
lea rcx, [rbp + 0x2210]
call fcn.140002e60
nop
lea rcx, [rbp + 0x21b8]
call fcn.140002e60
nop
lea rcx, [rbp + 0x2120]
call fcn.14007e860
nop
lea rcx, [rbp + 0x2138]
call fcn.140002e60
nop
lea rcx, [rbp + 0x2020]
call fcn.14002e2b0
nop
lea rcx, [rbp + 0x2158]
call fcn.140002e60
nop
lea rcx, [rbp + 0x2178]
call fcn.140002e60
nop
lea rcx, [rbp + 0x2198]
call fcn.140002e60
jmp 0x1400868db
mov rax, qword [rbp + 0x40]
mov qword [rbp + 0x2598], rax
lea rdx, [rbp + 0x24a0]
mov rcx, qword [rbp + 0x38]
call qword [sym.imp.KERNEL32.dll_SetThreadContext]
test eax, eax
jne 0x1400866e7
mov r9d, 0x8000
xor r8d, r8d
mov rdx, qword [rbp + 0x1fe0]
mov rax, qword [rsp + 0x2cc0]
mov rcx, qword [rax + 0x10]
call qword [sym.imp.KERNEL32.dll_VirtualFreeEx]
mov r9d, 0x8000
xor r8d, r8d
mov rdx, qword [rbp + 0x40]
mov rax, qword [rsp + 0x2cc0]
mov rcx, qword [rax + 0x10]
call qword [sym.imp.KERNEL32.dll_VirtualFreeEx]
mov rax, qword [rsp + 0x2cc0]
mov rcx, qword [rax + 0x10]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp + 0x38]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
lea rcx, [rbp + 0x2290]
call qword [sym.imp.asmjit.dll_public_virtual:_void___cdecl_asmjit::_abi_1_13::x86::Assembler::destructor_void____ptr64]
nop
lea rcx, [rbp + 0x2350]
call qword [sym.imp.asmjit.dll_public:_void___cdecl_asmjit::_abi_1_13::CodeHolder::destructor_void____ptr64]
nop
lea rcx, [rbp + 0x2258]
call qword [sym.imp.asmjit.dll_public_virtual:_void___cdecl_asmjit::_abi_1_13::JitRuntime::destructor_void____ptr64]
nop
lea rcx, [rbp + 0x21f0]
call fcn.140002e60
nop
lea rcx, [rbp + 0x2210]
call fcn.140002e60
nop
lea rcx, [rbp + 0x21b8]
call fcn.140002e60
nop
lea rcx, [rbp + 0x2120]
call fcn.14007e860
nop
lea rcx, [rbp + 0x2138]
call fcn.140002e60
nop
lea rcx, [rbp + 0x2020]
call fcn.14002e2b0
nop
lea rcx, [rbp + 0x2158]
call fcn.140002e60
nop
lea rcx, [rbp + 0x2178]
call fcn.140002e60
nop
lea rcx, [rbp + 0x2198]
call fcn.140002e60
jmp 0x1400868db
mov rcx, qword [rbp + 0x38]
call qword [sym.imp.KERNEL32.dll_ResumeThread]
cmp eax, 0xffffffff
jne 0x1400867fb
mov r9d, 0x8000
xor r8d, r8d
mov rdx, qword [rbp + 0x1fe0]
mov rax, qword [rsp + 0x2cc0]
mov rcx, qword [rax + 0x10]
call qword [sym.imp.KERNEL32.dll_VirtualFreeEx]
mov r9d, 0x8000
xor r8d, r8d
mov rdx, qword [rbp + 0x40]
mov rax, qword [rsp + 0x2cc0]
mov rcx, qword [rax + 0x10]
call qword [sym.imp.KERNEL32.dll_VirtualFreeEx]
mov rax, qword [rsp + 0x2cc0]
mov rcx, qword [rax + 0x10]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp + 0x38]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
lea rcx, [rbp + 0x2290]
call qword [sym.imp.asmjit.dll_public_virtual:_void___cdecl_asmjit::_abi_1_13::x86::Assembler::destructor_void____ptr64]
nop
lea rcx, [rbp + 0x2350]
call qword [sym.imp.asmjit.dll_public:_void___cdecl_asmjit::_abi_1_13::CodeHolder::destructor_void____ptr64]
nop
lea rcx, [rbp + 0x2258]
call qword [sym.imp.asmjit.dll_public_virtual:_void___cdecl_asmjit::_abi_1_13::JitRuntime::destructor_void____ptr64]
nop
lea rcx, [rbp + 0x21f0]
call fcn.140002e60
nop
lea rcx, [rbp + 0x2210]
call fcn.140002e60
nop
lea rcx, [rbp + 0x21b8]
call fcn.140002e60
nop
lea rcx, [rbp + 0x2120]
call fcn.14007e860
nop
lea rcx, [rbp + 0x2138]
call fcn.140002e60
nop
lea rcx, [rbp + 0x2020]
call fcn.14002e2b0
nop
lea rcx, [rbp + 0x2158]
call fcn.140002e60
nop
lea rcx, [rbp + 0x2178]
call fcn.140002e60
nop
lea rcx, [rbp + 0x2198]
call fcn.140002e60
jmp 0x1400868db
xor r9d, r9d
lea r8, [0x140181b14]
lea rdx, str.Injected
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
mov rcx, qword [rbp + 0x30]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp + 0x38]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov edx, 0x2b
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
nop
lea rcx, [rbp + 0x2290]
call qword [sym.imp.asmjit.dll_public_virtual:_void___cdecl_asmjit::_abi_1_13::x86::Assembler::destructor_void____ptr64]
nop
lea rcx, [rbp + 0x2350]
call qword [sym.imp.asmjit.dll_public:_void___cdecl_asmjit::_abi_1_13::CodeHolder::destructor_void____ptr64]
nop
lea rcx, [rbp + 0x2258]
call qword [sym.imp.asmjit.dll_public_virtual:_void___cdecl_asmjit::_abi_1_13::JitRuntime::destructor_void____ptr64]
nop
lea rcx, [rbp + 0x21f0]
call fcn.140002e60
nop
lea rcx, [rbp + 0x2210]
call fcn.140002e60
nop
lea rcx, [rbp + 0x21b8]
call fcn.140002e60
nop
lea rcx, [rbp + 0x2120]
call fcn.14007e860
nop
lea rcx, [rbp + 0x2138]
call fcn.140002e60
nop
lea rcx, [rbp + 0x2020]
call fcn.14002e2b0
nop
lea rcx, [rbp + 0x2158]
call fcn.140002e60
nop
lea rcx, [rbp + 0x2178]
call fcn.140002e60
nop
lea rcx, [rbp + 0x2198]
call fcn.140002e60
mov rcx, qword [rbp + 0x2c40]
xor rcx, rsp
call fcn.14014b190
add rsp, 0x2ca0
pop rdi
pop rsi
pop rbp
ret