Function at 0x780000
Capabilities:
Create process on windows

Disassembly:
push rbp
push rbx
sub rsp, 0x458
mov rbp, rsp
mov qword [rbp + 0x78], 0
mov qword [rbp + 0xc8], 0
mov qword [rbp + 0xc0], 0
mov qword [rbp + 0xb8], 0
mov qword [rbp + 0xb0], 0
mov qword [rbp + 0x98], 0
mov qword [rbp + 0x90], 0
mov qword [rbp + 0x88], 0
mov qword [rbp + 0x80], 0
mov qword [rbp + 0xa8], 0
mov qword [rbp + 0xa0], 0
mov qword [rbp + 0xd8], 0
mov qword [rbp + 0xd0], 0
mov qword [rbp + 0xe8], 0
mov qword [rbp + 0xe0], 0
mov qword [rbp + 0x110], 0
mov qword [rbp + 0x108], 0
mov qword [rbp + 0x100], 0
mov qword [rbp + 0xf8], 0
mov qword [rbp + 0xf0], 0
mov qword [rbp + 0x120], 0
mov qword [rbp + 0x118], 0
mov qword [rbp + 0x130], 0
mov qword [rbp + 0x128], 0
mov qword [rbp + 0x140], 0
mov qword [rbp + 0x138], 0
mov qword [rbp + 0x150], 0
mov qword [rbp + 0x148], 0
mov qword [rbp + 0x160], 0
mov qword [rbp + 0x158], 0
mov qword [rbp + 0x170], 0
mov qword [rbp + 0x168], 0
mov qword [rbp + 0x180], 0
mov qword [rbp + 0x178], 0
mov qword [rbp + 0x190], 0
mov qword [rbp + 0x188], 0
mov qword [rbp + 0x198], 0
mov qword [rbp + 0x1a0], 0
mov qword [rbp + 0x1b8], 0
mov qword [rbp + 0x1a8], 0
mov qword [rbp + 0x1b0], 0
mov qword [rbp + 0x1c8], 0
mov qword [rbp + 0x1c0], 0
mov qword [rbp + 0x1d8], 0
mov qword [rbp + 0x1d0], 0
mov qword [rbp + 0x1e8], 0
mov qword [rbp + 0x1e0], 0
mov qword [rbp + 0x1f8], 0
mov qword [rbp + 0x1f0], 0
mov qword [rbp + 0x270], 0
mov qword [rbp + 0x268], 0
mov qword [rbp + 0x260], 0
mov qword [rbp + 0x258], 0
mov qword [rbp + 0x248], 0
mov qword [rbp + 0x240], 0
mov qword [rbp + 0x230], 0
mov qword [rbp + 0x228], 0
mov qword [rbp + 0x218], 0
mov qword [rbp + 0x210], 0
mov qword [rbp + 0x200], 0
mov qword [rbp + 0x208], 0
mov qword [rbp + 0x220], 0
mov qword [rbp + 0x238], 0
mov qword [rbp + 0x250], 0
mov qword [rbp + 0x280], 0
mov qword [rbp + 0x278], 0
mov qword [rbp + 0x310], 0
mov qword [rbp + 0x308], 0
mov qword [rbp + 0x300], 0
mov qword [rbp + 0x2f8], 0
mov qword [rbp + 0x2e8], 0
mov qword [rbp + 0x2e0], 0
mov qword [rbp + 0x2d0], 0
mov qword [rbp + 0x2c8], 0
mov qword [rbp + 0x2b8], 0
mov qword [rbp + 0x2b0], 0
mov qword [rbp + 0x2a0], 0
mov qword [rbp + 0x298], 0
mov qword [rbp + 0x288], 0
mov qword [rbp + 0x290], 0
mov qword [rbp + 0x2a8], 0
mov qword [rbp + 0x2c0], 0
mov qword [rbp + 0x2d8], 0
mov qword [rbp + 0x2f0], 0
mov qword [rbp + 0x320], 0
mov qword [rbp + 0x318], 0
mov qword [rbp + 0x360], 0
mov qword [rbp + 0x358], 0
mov qword [rbp + 0x350], 0
mov qword [rbp + 0x348], 0
mov qword [rbp + 0x338], 0
mov qword [rbp + 0x330], 0
mov qword [rbp + 0x328], 0
mov qword [rbp + 0x340], 0
mov qword [rbp + 0x3b0], 0
mov qword [rbp + 0x3a8], 0
mov qword [rbp + 0x3a0], 0
mov qword [rbp + 0x398], 0
mov qword [rbp + 0x380], 0
mov qword [rbp + 0x378], 0
mov qword [rbp + 0x370], 0
mov qword [rbp + 0x368], 0
mov qword [rbp + 0x390], 0
mov qword [rbp + 0x388], 0
mov qword [rbp + 0x3c0], 0
mov qword [rbp + 0x3b8], 0
mov qword [rbp + 0x3d0], 0
mov qword [rbp + 0x3c8], 0
mov qword [rbp + 0x3d8], 0
mov qword [rbp + 0x3f0], 0
mov qword [rbp + 0x3e0], 0
mov qword [rbp + 0x3e8], 0
mov qword [rbp + 0x400], 0
mov qword [rbp + 0x3f8], 0
mov qword [rbp + 0x410], 0
mov qword [rbp + 0x408], 0
mov qword [rbp + 0x448], 0
mov qword [rbp + 0x418], rbp
mov qword [rbp + 0x470], rcx
mov qword [rbp + 0x478], rdx
mov rcx, qword [rbp + 0x478]
call fcn.004114f0
nop
lea rcx, [rbp + 0x408]
mov edx, 1
call fcn.0076d900
lea rcx, [rbp + 0x410]
mov rdx, qword [rbp + 0x478]
mov r8, qword [rbp + 0x408]
call fcn.00561970
mov rax, qword [rbp + 0x410]
mov rcx, qword [rax + 8]
lea rdx, [rbp + 0x444]
call fcn.00437810
test al, al
je 0x781898
mov eax, dword [rbp + 0x444]
cmp eax, 0xb
jg 0x780601
cmp eax, 0xb
je 0x781180
cmp eax, 6
jg 0x7805d0
cmp eax, 6
je 0x7808aa
sub eax, 1
test eax, eax
je 0x780671
sub eax, 1
test eax, eax
je 0x7807bf
sub eax, 2
test eax, eax
je 0x7807d7
sub eax, 1
test eax, eax
jne 0x781898
jmp 0x78083b
sub eax, 7
test eax, eax
je 0x780af1
sub eax, 1
test eax, eax
je 0x780c3e
sub eax, 1
test eax, eax
je 0x780eb7
sub eax, 1
test eax, eax
jne 0x781898
jmp 0x7810d6
cmp eax, 0x10
jg 0x780640
cmp eax, 0x10
je 0x7814db
sub eax, 0xc
test eax, eax
je 0x781333
sub eax, 1
test eax, eax
je 0x781385
sub eax, 1
test eax, eax
je 0x7813d7
sub eax, 1
test eax, eax
jne 0x781898
jmp 0x781481
sub eax, 0x11
test eax, eax
je 0x781535
sub eax, 1
test eax, eax
je 0x7815af
sub eax, 2
test eax, eax
je 0x78164a
sub eax, 1
test eax, eax
jne 0x781898
jmp 0x78184b
mov rax, qword [0x007e4cd8]
mov rax, qword [rax]
mov rax, qword [rax + 0x710]
mov rcx, qword [rax + 0x50]
xor edx, edx
call fcn.00757e50
mov rax, qword [0x007e4cd8]
mov rax, qword [rax]
mov rax, qword [rax + 0x710]
mov rcx, qword [rax + 0x50]
mov dl, 1
call fcn.00757e50
mov rax, qword [0x007e5198]
mov rax, qword [rax]
cmp byte [rax + 0x73c], 0
jne 0x781898
mov rax, qword [0x007e5198]
mov rax, qword [rax]
cmp byte [rax + 0x788], 0
je 0x781898
lea rcx, [rbp + 0x3f8]
mov edx, 0x1f
call fcn.0076d900
lea rcx, [rbp + 0x400]
mov rax, qword [0x007f2a50]
mov rdx, qword [rax + 0x770]
mov r8, qword [rbp + 0x3f8]
call fcn.00412c00
mov rcx, qword [rbp + 0x400]
mov dl, 1
call fcn.00438220
test al, al
je 0x780781
lea rcx, [rbp + 0x3e8]
mov edx, 0x1f
call fcn.0076d900
lea rcx, [rbp + 0x3f0]
mov rax, qword [0x007f2a50]
mov rdx, qword [rax + 0x770]
mov r8, qword [rbp + 0x3e8]
call fcn.00412c00
mov rcx, qword [rbp + 0x3f0]
call fcn.004127c0
lea rcx, [rbp + 0x3e0]
mov rdx, rax
call fcn.00412860
mov rcx, qword [rbp + 0x3e0]
call fcn.00438a00
mov ecx, 0xbb8
call fcn.00522490
lea rcx, [rbp + 0x3d8]
mov edx, 6
call fcn.004372f0
mov rax, qword [0x007e4d00]
mov rcx, qword [rax]
mov rdx, qword [rbp + 0x3d8]
call fcn.00769dc0
mov rax, qword [0x007e5198]
mov rax, qword [rax]
mov byte [rax + 0x73c], 1
jmp 0x781898
mov rcx, qword [0x007f2a50]
lea rdx, [0x00781fc8]
call fcn.0077e320
jmp 0x781898
mov ecx, 0xc8
call fcn.00522490
mov rax, qword [0x007e4cd8]
mov rax, qword [rax]
mov rax, qword [rax + 0x710]
mov rcx, qword [rax + 0x48]
xor edx, edx
call fcn.00757e50
mov rax, qword [0x007e4cd8]
mov rax, qword [rax]
mov rax, qword [rax + 0x710]
mov rcx, qword [rax + 0x50]
xor edx, edx
call fcn.00757e50
mov rax, qword [0x007e4cd8]
mov rax, qword [rax]
mov rax, qword [rax + 0x710]
mov rcx, qword [rax + 0x60]
xor edx, edx
call fcn.00639370
jmp 0x781898
mov rax, qword [0x007e4cd8]
mov rax, qword [rax]
mov rax, qword [rax + 0x710]
mov rcx, qword [rax + 0x48]
xor edx, edx
call fcn.00757e50
mov rax, qword [0x007e4cd8]
mov rax, qword [rax]
mov rax, qword [rax + 0x710]
mov rcx, qword [rax + 0x50]
xor edx, edx
call fcn.00757e50
mov ecx, 0x64
call fcn.00522490
mov rax, qword [0x007e4cd8]
mov rax, qword [rax]
mov rax, qword [rax + 0x710]
mov rcx, qword [rax + 0x48]
mov dl, 1
call fcn.00757e50
mov ecx, 0x406
call fcn.00522490
jmp 0x781898
mov rax, qword [0x007e46b0]
cmp byte [rax], 0
je 0x7809aa
lea rcx, [rbp + 0x3c8]
mov edx, 1
call fcn.0076d900
lea rcx, [rbp + 0x3d0]
mov rdx, qword [rbp + 0x478]
mov r8, qword [rbp + 0x3c8]
call fcn.00561970
mov rax, qword [rbp + 0x3d0]
mov rcx, qword [rax + 0x10]
call fcn.00437790
mov ebx, eax
lea rcx, [rbp + 0x3b8]
mov edx, 1
call fcn.0076d900
lea rcx, [rbp + 0x3c0]
mov rdx, qword [rbp + 0x478]
mov r8, qword [rbp + 0x3b8]
call fcn.00561970
mov rax, qword [rbp + 0x3c0]
mov rcx, qword [rax + 0x18]
call fcn.00437790
mov ecx, eax
mov eax, ebx
imul eax, eax, 0x64
mov r8d, 0x45
cdq
idiv r8d
mov r8, rax
mov eax, ecx
imul eax, eax, 0x64
mov ecx, 0x45
cdq
idiv ecx
mov rdx, rax
mov ecx, r8d
call sub.user32.dll_SetCursorPos
mov ecx, 2
xor edx, edx
xor r8, r8
xor r9, r9
mov qword [rsp + 0x20], 0
call sub.user32.dll_mouse_event
mov ecx, 0x384
call fcn.00522490
mov ecx, 4
xor edx, edx
xor r8, r8
xor r9, r9
mov qword [rsp + 0x20], 0
call sub.user32.dll_mouse_event
jmp 0x781898
lea rcx, [rbp + 0x3a8]
mov edx, 2
call fcn.004372f0
lea rcx, [rbp + 0x3a0]
mov edx, 0x2d
call fcn.0076d900
lea rcx, [rbp + 0x388]
mov edx, 1
call fcn.0076d900
lea rcx, [rbp + 0x390]
mov rdx, qword [rbp + 0x478]
mov r8, qword [rbp + 0x388]
call fcn.00561970
mov rax, qword [rbp + 0x390]
mov rcx, qword [rax + 0x10]
call fcn.00437790
lea rcx, [rbp + 0x398]
imul eax, eax, 0x64
mov r8d, 0x45
cdq
idiv r8d
mov rdx, rax
call fcn.004372f0
lea rcx, [rbp + 0x380]
mov edx, 1
call fcn.0076d900
lea rcx, [rbp + 0x368]
mov edx, 1
call fcn.0076d900
lea rcx, [rbp + 0x370]
mov rdx, qword [rbp + 0x478]
mov r8, qword [rbp + 0x368]
call fcn.00561970
mov rax, qword [rbp + 0x370]
mov rcx, qword [rax + 0x18]
call fcn.00437790
lea rcx, [rbp + 0x378]
imul eax, eax, 0x64
mov r8d, 0x45
cdq
idiv r8d
mov rdx, rax
call fcn.004372f0
lea rcx, [rbp + 0x3b0]
mov edx, 5
mov r8, qword [rbp + 0x3a8]
mov r9, qword [rbp + 0x3a0]
mov rax, qword [rbp + 0x398]
mov qword [rsp + 0x20], rax
mov rax, qword [rbp + 0x380]
mov qword [rsp + 0x28], rax
mov rax, qword [rbp + 0x378]
mov qword [rsp + 0x30], rax
call fcn.00412d30
mov rax, qword [0x007e4d00]
mov rcx, qword [rax]
mov rdx, qword [rbp + 0x3b0]
call fcn.00769dc0
jmp 0x781898
lea rcx, [rbp + 0x358]
mov edx, 1
call fcn.004372f0
lea rcx, [rbp + 0x350]
mov edx, 1
call fcn.0076d900
lea rcx, [rbp + 0x340]
mov edx, 1
call fcn.0076d900
lea rcx, [rbp + 0x348]
mov rdx, qword [rbp + 0x478]
mov r8, qword [rbp + 0x340]
call fcn.00561970
lea rcx, [rbp + 0x338]
mov edx, 1
call fcn.0076d900
lea rcx, [rbp + 0x328]
mov edx, 1
call fcn.0076d900
lea rcx, [rbp + 0x330]
mov rdx, qword [rbp + 0x478]
mov r8, qword [rbp + 0x328]
call fcn.00561970
lea rcx, [rbp + 0x360]
mov edx, 5
mov r8, qword [rbp + 0x358]
mov r9, qword [rbp + 0x350]
mov rax, qword [rbp + 0x348]
mov rax, qword [rax + 0x10]
mov qword [rsp + 0x20], rax
mov rax, qword [rbp + 0x338]
mov qword [rsp + 0x28], rax
mov rax, qword [rbp + 0x330]
mov rax, qword [rax + 0x18]
mov qword [rsp + 0x30], rax
call fcn.00412d30
mov rax, qword [0x007e5198]
mov rcx, qword [rax]
mov rdx, qword [rbp + 0x360]
call fcn.00777f50
mov ecx, 0x1e
call fcn.00522490
lea rcx, [rbp + 0x320]
mov edx, 5
call fcn.004372f0
lea rcx, [rbp + 0x318]
mov edx, 0x2d
call fcn.0076d900
lea rcx, [rbp + 0x320]
mov rdx, qword [rbp + 0x318]
call fcn.00412b30
mov rax, qword [0x007e4d00]
mov rcx, qword [rax]
mov rdx, qword [rbp + 0x320]
call fcn.00769dc0
jmp 0x781898
lea rcx, [rbp + 0x308]
mov edx, 7
call fcn.004372f0
lea rcx, [rbp + 0x300]
mov edx, 0x2d
call fcn.0076d900
lea rcx, [rbp + 0x2f0]
mov edx, 1
call fcn.0076d900
lea rcx, [rbp + 0x2f8]
mov rdx, qword [rbp + 0x478]
mov r8, qword [rbp + 0x2f0]
call fcn.00561970
lea rcx, [rbp + 0x2e8]
mov edx, 1
call fcn.0076d900
lea rcx, [rbp + 0x2d8]
mov edx, 1
call fcn.0076d900
lea rcx, [rbp + 0x2e0]
mov rdx, qword [rbp + 0x478]
mov r8, qword [rbp + 0x2d8]
call fcn.00561970
lea rcx, [rbp + 0x2d0]
mov edx, 1
call fcn.0076d900
lea rcx, [rbp + 0x2c0]
mov edx, 1
call fcn.0076d900
lea rcx, [rbp + 0x2c8]
mov rdx, qword [rbp + 0x478]
mov r8, qword [rbp + 0x2c0]
call fcn.00561970
lea rcx, [rbp + 0x2b8]
mov edx, 1
call fcn.0076d900
lea rcx, [rbp + 0x2a8]
mov edx, 1
call fcn.0076d900
lea rcx, [rbp + 0x2b0]
mov rdx, qword [rbp + 0x478]
mov r8, qword [rbp + 0x2a8]
call fcn.00561970
lea rcx, [rbp + 0x2a0]
mov edx, 1
call fcn.0076d900
lea rcx, [rbp + 0x290]
mov edx, 1
call fcn.0076d900
lea rcx, [rbp + 0x298]
mov rdx, qword [rbp + 0x478]
mov r8, qword [rbp + 0x290]
call fcn.00561970
lea rcx, [rbp + 0x288]
mov edx, 1
call fcn.0076d900
lea rcx, [rbp + 0x310]
mov edx, 0xc
mov r8, qword [rbp + 0x308]
mov r9, qword [rbp + 0x300]
mov rax, qword [rbp + 0x2f8]
mov rax, qword [rax + 0x10]
mov qword [rsp + 0x20], rax
mov rax, qword [rbp + 0x2e8]
mov qword [rsp + 0x28], rax
mov rax, qword [rbp + 0x2e0]
mov rax, qword [rax + 0x18]
mov qword [rsp + 0x30], rax
mov rax, qword [rbp + 0x2d0]
mov qword [rsp + 0x38], rax
mov rax, qword [rbp + 0x2c8]
mov rax, qword [rax + 0x20]
mov qword [rsp + 0x40], rax
mov rax, qword [rbp + 0x2b8]
mov qword [rsp + 0x48], rax
mov rax, qword [rbp + 0x2b0]
mov rax, qword [rax + 0x28]
mov qword [rsp + 0x50], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rsp + 0x58], rax
mov rax, qword [rbp + 0x298]
mov rax, qword [rax + 0x30]
mov qword [rsp + 0x60], rax
mov rax, qword [rbp + 0x288]
mov qword [rsp + 0x68], rax
call fcn.00412d30
mov rax, qword [0x007e4d00]
mov rcx, qword [rax]
mov rdx, qword [rbp + 0x310]
call fcn.00769dc0
mov ecx, 0x258
call fcn.00522490
lea rcx, [rbp + 0x280]
mov edx, 5
call fcn.004372f0
lea rcx, [rbp + 0x278]
mov edx, 0x2d
call fcn.0076d900
lea rcx, [rbp + 0x280]
mov rdx, qword [rbp + 0x278]
call fcn.00412b30
mov rax, qword [0x007e4d00]
mov rcx, qword [rax]
mov rdx, qword [rbp + 0x280]
call fcn.00769dc0
jmp 0x781898
lea rcx, [rbp + 0x268]
mov edx, 3
call fcn.004372f0
lea rcx, [rbp + 0x260]
mov edx, 1
call fcn.0076d900
lea rcx, [rbp + 0x250]
mov edx, 1
call fcn.0076d900
lea rcx, [rbp + 0x258]
mov rdx, qword [rbp + 0x478]
mov r8, qword [rbp + 0x250]
call fcn.00561970
lea rcx, [rbp + 0x248]
mov edx, 1
call fcn.0076d900
lea rcx, [rbp + 0x238]
mov edx, 1
call fcn.0076d900
lea rcx, [rbp + 0x240]
mov rdx, qword [rbp + 0x478]
mov r8, qword [rbp + 0x238]
call fcn.00561970
lea rcx, [rbp + 0x230]
mov edx, 1
call fcn.0076d900
lea rcx, [rbp + 0x220]
mov edx, 1
call fcn.0076d900
lea rcx, [rbp + 0x228]
mov rdx, qword [rbp + 0x478]
mov r8, qword [rbp + 0x220]
call fcn.00561970
lea rcx, [rbp + 0x218]
mov edx, 1
call fcn.0076d900
lea rcx, [rbp + 0x208]
mov edx, 1
call fcn.0076d900
lea rcx, [rbp + 0x210]
mov rdx, qword [rbp + 0x478]
mov r8, qword [rbp + 0x208]
call fcn.00561970
lea rcx, [rbp + 0x200]
mov edx, 1
call fcn.0076d900
lea rcx, [rbp + 0x270]
mov edx, 0xa
mov r8, qword [rbp + 0x268]
mov r9, qword [rbp + 0x260]
mov rax, qword [rbp + 0x258]
mov rax, qword [rax + 0x10]
mov qword [rsp + 0x20], rax
mov rax, qword [rbp + 0x248]
mov qword [rsp + 0x28], rax
mov rax, qword [rbp + 0x240]
mov rax, qword [rax + 0x18]
mov qword [rsp + 0x30], rax
mov rax, qword [rbp + 0x230]
mov qword [rsp + 0x38], rax
mov rax, qword [rbp + 0x228]
mov rax, qword [rax + 0x20]
mov qword [rsp + 0x40], rax
mov rax, qword [rbp + 0x218]
mov qword [rsp + 0x48], rax
mov rax, qword [rbp + 0x210]
mov rax, qword [rax + 0x28]
mov qword [rsp + 0x50], rax
mov rax, qword [rbp + 0x200]
mov qword [rsp + 0x58], rax
call fcn.00412d30
mov rax, qword [0x007e5198]
mov rcx, qword [rax]
mov rdx, qword [rbp + 0x270]
call fcn.00777f50
mov ecx, 0x1e
call fcn.00522490
lea rcx, [rbp + 0x1f8]
mov edx, 5
call fcn.004372f0
lea rcx, [rbp + 0x1f0]
mov edx, 0x2d
call fcn.0076d900
lea rcx, [rbp + 0x1f8]
mov rdx, qword [rbp + 0x1f0]
call fcn.00412b30
mov rax, qword [0x007e4d00]
mov rcx, qword [rax]
mov rdx, qword [rbp + 0x1f8]
call fcn.00769dc0
jmp 0x781898
lea rcx, [rbp + 0x1e8]
mov edx, 4
call fcn.004372f0
lea rcx, [rbp + 0x1e0]
mov edx, 1
call fcn.0076d900
lea rcx, [rbp + 0x1e8]
mov rdx, qword [rbp + 0x1e0]
call fcn.00412b30
mov rax, qword [0x007e5198]
mov rcx, qword [rax]
mov rdx, qword [rbp + 0x1e8]
call fcn.00777f50
mov ecx, 0x1e
call fcn.00522490
lea rcx, [rbp + 0x1d8]
mov edx, 4
call fcn.004372f0
lea rcx, [rbp + 0x1d0]
mov edx, 0x2d
call fcn.0076d900
lea rcx, [rbp + 0x1d8]
mov rdx, qword [rbp + 0x1d0]
call fcn.00412b30
mov rax, qword [0x007e4d00]
mov rcx, qword [rax]
mov rdx, qword [rbp + 0x1d8]
call fcn.00769dc0
jmp 0x781898
mov rcx, qword [0x004d86a8]
mov dl, 1
call fcn.0050a8a0
mov qword [rbp + 0x438], rax
lea rcx, [rbp + 0x1c0]
mov edx, 0xd
call fcn.0076d900
lea rcx, [rbp + 0x1c8]
mov rax, qword [0x007f2a50]
mov rdx, qword [rax + 0x770]
mov r8, qword [rbp + 0x1c0]
call fcn.00412c00
mov rcx, qword [rbp + 0x1c8]
mov dl, 1
call fcn.00438220
test al, al
je 0x781234
lea rcx, [rbp + 0x1b0]
mov edx, 0xd
call fcn.0076d900
lea rcx, [rbp + 0x1b8]
mov rax, qword [0x007f2a50]
mov rdx, qword [rax + 0x770]
mov r8, qword [rbp + 0x1b0]
call fcn.00412c00
mov rcx, qword [rbp + 0x1b8]
call fcn.004127c0
lea rcx, [rbp + 0x1a8]
mov rdx, rax
call fcn.00412860
mov rcx, qword [rbp + 0x1a8]
call fcn.00438a00
nop
nop
lea rcx, [rbp + 0x1a0]
mov edx, 0xe
call fcn.0076d900
mov rax, qword [rbp + 0x1a0]
mov qword [rbp + 0x430], rax
call fcn.0043cc70
movsd qword [rbp + 0x428], xmm0
lea rcx, [rbp + 0x448]
mov rdx, qword [rbp + 0x430]
movsd xmm2, qword [rbp + 0x428]
mov r9, qword [0x007e5228]
call fcn.0043e130
mov rcx, qword [0x007f2a50]
lea rdx, [rbp + 0x198]
mov r8, qword [rbp + 0x448]
call fcn.00782230
mov rcx, qword [rbp + 0x438]
mov rdx, qword [rbp + 0x198]
mov rax, qword [rbp + 0x438]
mov rax, qword [rax]
call qword [rax + 0x78]
nop
lea rcx, [rbp + 0x448]
call fcn.00411360
lea rcx, [rbp + 0x188]
mov edx, 0xd
call fcn.0076d900
lea rcx, [rbp + 0x190]
mov rax, qword [0x007f2a50]
mov rdx, qword [rax + 0x770]
mov r8, qword [rbp + 0x188]
call fcn.00412c00
mov rcx, qword [rbp + 0x438]
mov rdx, qword [rbp + 0x190]
mov rax, qword [rbp + 0x438]
mov rbx, qword [rax]
call qword [rbx + pe_nt_image_headers64]
jmp 0x781322
mov rcx, qword [rbp + 0x438]
call fcn.0040df60
jmp 0x781898
lea rcx, [rbp + 0x180]
mov edx, 4
call fcn.004372f0
lea rcx, [rbp + 0x178]
mov edx, 0x2d
call fcn.0076d900
lea rcx, [rbp + 0x180]
mov rdx, qword [rbp + 0x178]
call fcn.00412b30
mov rax, qword [0x007e4d00]
mov rcx, qword [rax]
mov rdx, qword [rbp + 0x180]
call fcn.00769dc0
jmp 0x781898
lea rcx, [rbp + 0x170]
mov edx, 5
call fcn.004372f0
lea rcx, [rbp + 0x168]
mov edx, 0x2d
call fcn.0076d900
lea rcx, [rbp + 0x170]
mov rdx, qword [rbp + 0x168]
call fcn.00412b30
mov rax, qword [0x007e4d00]
mov rcx, qword [rax]
mov rdx, qword [rbp + 0x170]
call fcn.00769dc0
jmp 0x781898
lea rcx, [rbp + 0x160]
mov edx, 5
call fcn.004372f0
lea rcx, [rbp + 0x158]
mov edx, 1
call fcn.0076d900
lea rcx, [rbp + 0x160]
mov rdx, qword [rbp + 0x158]
call fcn.00412b30
mov rax, qword [0x007e5198]
mov rcx, qword [rax]
mov rdx, qword [rbp + 0x160]
call fcn.00777f50
mov ecx, 0x1e
call fcn.00522490
lea rcx, [rbp + 0x150]
mov edx, 4
call fcn.004372f0
lea rcx, [rbp + 0x148]
mov edx, 0x2d
call fcn.0076d900
lea rcx, [rbp + 0x150]
mov rdx, qword [rbp + 0x148]
call fcn.00412b30
mov rax, qword [0x007e4d00]
mov rcx, qword [rax]
mov rdx, qword [rbp + 0x150]
call fcn.00769dc0
jmp 0x781898
lea rcx, [rbp + 0x140]
mov edx, 0xf
call fcn.0076d900
lea rcx, [rbp + 0x138]
mov rdx, qword [rbp + 0x140]
xor r8, r8
call fcn.004122d0
mov rcx, qword [rbp + 0x138]
call fcn.004121e0
mov rcx, rax
xor edx, edx
call sub.kernel32.dll_WinExec
mov ecx, 0x57
xor edx, edx
xor r8, r8
mov r9d, 0x1b
call sub.user32.dll_SystemParametersInfoW
jmp 0x781898
lea rcx, [rbp + 0x130]
mov edx, 0x10
call fcn.0076d900
lea rcx, [rbp + 0x128]
mov rdx, qword [rbp + 0x130]
xor r8, r8
call fcn.004122d0
mov rcx, qword [rbp + 0x128]
call fcn.004121e0
mov rcx, rax
xor edx, edx
call sub.kernel32.dll_WinExec
mov ecx, 0x57
xor edx, edx
xor r8, r8
mov r9d, 0x1b
call sub.user32.dll_SystemParametersInfoW
jmp 0x781898
mov rax, qword [0x007e4898]
mov rax, qword [rax]
cmp byte [rax + 0x720], 0
jne 0x781898
lea rcx, [rbp + 0x120]
mov edx, 7
call fcn.004372f0
lea rcx, [rbp + 0x118]
mov edx, 0x2d
call fcn.0076d900
lea rcx, [rbp + 0x120]
mov rdx, qword [rbp + 0x118]
call fcn.00412b30
mov rax, qword [0x007e4d00]
mov rcx, qword [rax]
mov rdx, qword [rbp + 0x120]
call fcn.00769dc0
mov rax, qword [0x007e4898]
mov rax, qword [rax]
mov byte [rax + 0x720], 1
jmp 0x781898
lea rcx, [rbp + 0x108]
mov edx, 6
call fcn.004372f0
lea rcx, [rbp + 0x100]
mov edx, 0x2d
call fcn.0076d900
lea rcx, [rbp + 0xf0]
mov edx, 1
call fcn.0076d900
lea rcx, [rbp + 0xf8]
mov rdx, qword [rbp + 0x478]
mov r8, qword [rbp + 0xf0]
call fcn.00561970
lea rcx, [rbp + 0x110]
mov edx, 3
mov r8, qword [rbp + 0x108]
mov r9, qword [rbp + 0x100]
mov rax, qword [rbp + 0xf8]
mov rax, qword [rax + 0x10]
mov qword [rsp + 0x20], rax
call fcn.00412d30
mov rax, qword [0x007e4d00]
mov rcx, qword [rax]
mov rdx, qword [rbp + 0x110]
call fcn.00769dc0
jmp 0x781898
mov rax, qword [0x007e46b0]
cmp byte [rax], 0
je 0x781707
lea rcx, [rbp + 0xe0]
mov edx, 1
call fcn.0076d900
lea rcx, [rbp + 0xe8]
mov rdx, qword [rbp + 0x478]
mov r8, qword [rbp + 0xe0]
call fcn.00561970
mov rax, qword [rbp + 0xe8]
mov rcx, qword [rax + 0x10]
call fcn.00437790
mov ebx, eax
lea rcx, [rbp + 0xd0]
mov edx, 1
call fcn.0076d900
lea rcx, [rbp + 0xd8]
mov rdx, qword [rbp + 0x478]
mov r8, qword [rbp + 0xd0]
call fcn.00561970
mov rax, qword [rbp + 0xd8]
mov rcx, qword [rax + 0x18]
call fcn.00437790
mov ecx, eax
mov eax, ebx
imul eax, eax, 0x64
mov r8d, 0x45
cdq
idiv r8d
mov r8, rax
mov eax, ecx
imul eax, eax, 0x64
mov ecx, 0x45
cdq
idiv ecx
mov rdx, rax
mov ecx, r8d
call sub.user32.dll_SetCursorPos
jmp 0x781898
lea rcx, [rbp + 0xc0]
mov edx, 3
add byte [rax], al
lea rcx, [rbp + 0x78]
lea rdx, [0x00781fe0]
call fcn.00445720
lea rcx, [rbp + 0x78]
lea rdx, [0x00782008]
call fcn.00412b30
mov rcx, qword [rbp + 0x78]
call fcn.004127c0
xor ecx, ecx
xor edx, edx
mov r8, rax
lea r9, [0x00782050]
mov qword [rsp + 0x20], 0
mov dword [rsp + 0x28], 1
call sub.shell32.dll_ShellExecuteW