Function at 0x14000bb60
Capabilities:
Delete file
Hide graphical window

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
sub rsp, 0x1a0
lea rbp, [rsp + 0x50]
and rbp, 0xffffffffffffffe0
mov rax, qword [0x1401fbf28]
xor rax, rsp
mov qword [rbp + 0x140], rax
xor r13d, r13d
mov dword [rbp], r13d
xor edx, edx
lea rcx, str.ConsoleWindowClass
call qword [sym.imp.USER32.dll_FindWindowA]
mov r15, rax
xor edx, edx
mov rcx, rax
call qword [sym.imp.USER32.dll_ShowWindow]
movabs rax, 0x1f9f79c40e044106
mov qword [rbp + 0x60], rax
movabs rax, 0x65898e2d1762cbf5
mov qword [rbp + 0x68], rax
movabs rax, 0xd41e63d441bdb56a
mov qword [rbp + 0x70], rax
movabs rax, 0xf3491a1bc78d4715
mov qword [rbp + 0x78], rax
movabs rax, 0x24957b8f9b2466ea
mov qword [rbp + 0x80], rax
movabs rax, 0xa9f2e0fd5249a7c7
mov qword [rbp + 0x88], rax
movabs rax, 0xe3419c21952cf5b3
mov qword [rbp + 0x90], rax
movabs rax, 0x8506e7b3761d861
mov qword [rbp + 0x98], rax
movabs rax, 0x292737170dd6017a
mov qword [rbp + 0xa0], rax
movabs rax, 0x3ea13ec97f516d7
mov qword [rbp + 0xa8], rax
movabs rsi, 0x70fb17ad59587b45
mov qword [rbp + 0xe0], rsi
movabs r12, 0xfdfd54443eb882
mov qword [rbp + 0xe8], r12
movabs rax, 0xb2700cb71d8f8607
mov qword [rbp + 0xf0], rax
movabs rax, 0x920b7d7e95d1207c
mov qword [rbp + 0xf8], rax
movabs rax, 0x60d642b9e0780d89
mov qword [rbp + 0x100], rax
movabs rax, 0x9fb4a4d0167be1f6
mov qword [rbp + 0x108], rax
movabs rax, 0xda6caf13d018d88b
mov qword [rbp + 0x110], rax
movabs rax, 0x38672c4a1a59e850
mov qword [rbp + 0x118], rax
movabs rax, 0x10120f254be5394d
mov qword [rbp + 0x120], rax
movabs rax, 0x3ea13ec97f516aa
mov qword [rbp + 0x128], rax
vmovdqu ymm0, ymmword [rbp + 0x60]
vpxor ymm1, ymm0, ymmword [rbp + 0xe0]
vmovdqa ymmword [rbp + 0x60], ymm1
vmovdqu ymm0, ymmword [rbp + 0x80]
vpxor ymm1, ymm0, ymmword [rbp + 0x100]
vmovdqa ymmword [rbp + 0x80], ymm1
vmovdqa xmm0, xmmword [rbp + 0xa0]
vxorps xmm0, xmm0, xmmword [rbp + 0x120]
vmovdqa xmmword [rbp + 0xa0], xmm0
lea rax, [rbp + 0x40]
mov qword [rbp + 0x10], rax
lea rax, [rbp + 0x60]
mov rbx, 0xffffffffffffffff
mov rdi, rbx
vzeroupper
inc rdi
cmp byte [rax + rdi], r13b
jne 0x14000bd60
call fcn.14000d8cc
mov r14d, eax
xorps xmm0, xmm0
movups xmmword [rbp + 0x40], xmm0
mov qword [rbp + 0x50], r13
mov qword [rbp + 0x58], 7
mov word [rbp + 0x40], r13w
mov dword [rbp], 4
test rdi, rdi
je 0x14000be10
cmp rdi, 0x7fffffff
ja 0x14000ca2a
mov dword [rsp + 0x20], r13d
xor r9d, r9d
mov r8d, edi
lea rdx, [rbp + 0x60]
mov ecx, eax
call fcn.14000d8f4
mov rsi, rax
shr rax, 0x20
test eax, eax
jne 0x14000ca35
xor r8d, r8d
movsxd rdx, esi
lea rcx, [rbp + 0x40]
call fcn.14000af70
lea r9, [rbp + 0x40]
cmp qword [rbp + 0x58], 8
cmovae r9, qword [rbp + 0x40]
mov dword [rsp + 0x20], esi
mov r8d, edi
lea rdx, [rbp + 0x60]
mov ecx, r14d
call fcn.14000d8f4
mov rcx, rax
shr rax, 0x20
test eax, eax
jne 0x14000ca41
movabs rsi, 0x70fb17ad59587b45
lea rcx, [rbp + 0x40]
call fcn.14000ac80
nop
mov rdx, qword [rbp + 0x58]
cmp rdx, 8
jb 0x14000be5a
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000be55
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000ca4b
call fcn.14000e608
movabs rax, 0x1f9f79c40e044106
mov qword [rbp + 0x60], rax
movabs rax, 0x65898e2d1762cbf5
mov qword [rbp + 0x68], rax
movabs rax, 0xd41e63d441bdb56a
mov qword [rbp + 0x70], rax
movabs rax, 0xf3491a1bc78d4715
mov qword [rbp + 0x78], rax
movabs rax, 0x24957b8f9b2466ea
mov qword [rbp + 0x80], rax
movabs rax, 0xa9f2e0fd5249a7c7
mov qword [rbp + 0x88], rax
movabs rax, 0xe3419c21952cf5b3
mov qword [rbp + 0x90], rax
movabs rax, 0x8506e7b3761d861
mov qword [rbp + 0x98], rax
movabs rax, 0x292437170dd6017a
mov qword [rbp + 0xa0], rax
movabs rax, 0x3ea13ec97f516d7
mov qword [rbp + 0xa8], rax
mov qword [rbp + 0xe0], rsi
mov qword [rbp + 0xe8], r12
movabs rax, 0xb2700cb71d8f8607
mov qword [rbp + 0xf0], rax
movabs rax, 0x920b7d7e95d1207c
mov qword [rbp + 0xf8], rax
movabs rax, 0x60d642b9e0780d89
mov qword [rbp + 0x100], rax
movabs rax, 0x9fb4a4d0167be1f6
mov qword [rbp + 0x108], rax
movabs rax, 0xda6caf13d018d88b
mov qword [rbp + 0x110], rax
movabs rax, 0x38672c4a1a59e850
mov qword [rbp + 0x118], rax
movabs rax, 0x10120f254be5394d
mov qword [rbp + 0x120], rax
movabs rax, 0x3ea13ec97f516aa
mov qword [rbp + 0x128], rax
vmovdqu ymm0, ymmword [rbp + 0x60]
vpxor ymm1, ymm0, ymmword [rbp + 0xe0]
vmovdqa ymmword [rbp + 0x60], ymm1
vmovdqu ymm0, ymmword [rbp + 0x80]
vpxor ymm1, ymm0, ymmword [rbp + 0x100]
vmovdqa ymmword [rbp + 0x80], ymm1
vmovdqa xmm0, xmmword [rbp + 0xa0]
vxorps xmm0, xmm0, xmmword [rbp + 0x120]
vmovdqa xmmword [rbp + 0xa0], xmm0
lea rax, [rbp + 0x40]
mov qword [rbp + 0x10], rax
lea rax, [rbp + 0x60]
mov rdi, rbx
vzeroupper
inc rdi
cmp byte [rax + rdi], 0
jne 0x14000bfe2
call fcn.14000d8cc
mov r14d, eax
xorps xmm0, xmm0
movups xmmword [rbp + 0x40], xmm0
mov qword [rbp + 0x50], r13
mov qword [rbp + 0x58], 7
mov word [rbp + 0x40], r13w
mov dword [rbp], reloc.WLDAP32.dll_Ordinal_35
test rdi, rdi
je 0x14000c088
cmp rdi, 0x7fffffff
ja 0x14000ca51
mov dword [rsp + 0x20], r13d
xor r9d, r9d
mov r8d, edi
lea rdx, [rbp + 0x60]
mov ecx, eax
call fcn.14000d8f4
mov rsi, rax
shr rax, 0x20
test eax, eax
jne 0x14000ca5c
xor r8d, r8d
movsxd rdx, esi
lea rcx, [rbp + 0x40]
call fcn.14000af70
lea r9, [rbp + 0x40]
cmp qword [rbp + 0x58], 8
cmovae r9, qword [rbp + 0x40]
mov dword [rsp + 0x20], esi
mov r8d, edi
lea rdx, [rbp + 0x60]
mov ecx, r14d
call fcn.14000d8f4
mov rcx, rax
shr rax, 0x20
test eax, eax
jne 0x14000ca68
lea rcx, [rbp + 0x40]
call fcn.14000ac80
nop
mov rdx, qword [rbp + 0x58]
cmp rdx, 8
jb 0x14000c0d2
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000c0cd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000ca72
call fcn.14000e608
movabs r14, 0x1c977ec6322b1a31
mov qword [rbp + 0x20], r14
movabs rsi, 0x2090947b645897a2
mov qword [rbp + 0x28], rsi
movabs rax, 0xca1522c373eae166
mov qword [rbp + 0x30], rax
movabs rdi, 0x920b7d7e95d12019
mov qword [rbp + 0x38], rdi
movabs rax, 0x70fb17ad59587b45
mov qword [rbp + 0xc0], rax
mov qword [rbp + 0xc8], r12
movabs rax, 0xb2700cb71d8f8607
mov qword [rbp + 0xd0], rax
movabs rax, 0x920b7d7e95d1207c
mov qword [rbp + 0xd8], rax
vmovdqu ymm0, ymmword [rbp + 0x20]
vpxor ymm1, ymm0, ymmword [rbp + 0xc0]
vmovdqa ymmword [rbp + 0x20], ymm1
lea rcx, [rbp + 0x20]
vzeroupper
call fcn.140060e04
mov qword [rbp + 0x20], r14
mov qword [rbp + 0x28], rsi
movabs rax, 0xca1522da7ceaf254
mov qword [rbp + 0x30], rax
mov qword [rbp + 0x38], rdi
movabs rax, 0x70fb17ad59587b45
mov qword [rbp + 0xc0], rax
mov qword [rbp + 0xc8], r12
movabs rax, 0xb2700cb71d8f8607
mov qword [rbp + 0xd0], rax
movabs rax, 0x920b7d7e95d1207c
mov qword [rbp + 0xd8], rax
vmovdqu ymm0, ymmword [rbp + 0x20]
vpxor ymm1, ymm0, ymmword [rbp + 0xc0]
vmovdqa ymmword [rbp + 0x20], ymm1
lea rcx, [rbp + 0x20]
vzeroupper
call fcn.140060e04
mov qword [rbp + 0x20], r14
mov qword [rbp + 0x28], rsi
movabs rax, 0xca1522da7ceaf274
mov qword [rbp + 0x30], rax
mov qword [rbp + 0x38], rdi
movabs rax, 0x70fb17ad59587b45
mov qword [rbp + 0xc0], rax
mov qword [rbp + 0xc8], r12
movabs rdi, 0xb2700cb71d8f8607
mov qword [rbp + 0xd0], rdi
movabs rax, 0x920b7d7e95d1207c
mov qword [rbp + 0xd8], rax
vmovdqu ymm0, ymmword [rbp + 0x20]
vpxor ymm1, ymm0, ymmword [rbp + 0xc0]
vmovdqa ymmword [rbp + 0x20], ymm1
lea rcx, [rbp + 0x20]
vzeroupper
call fcn.140060e04
mov qword [rbp + 0x20], r14
mov qword [rbp + 0x28], rsi
movabs rax, 0xdc5e69db69fbe745
mov qword [rbp + 0x30], rax
movabs rax, 0x920b1806f0ff5419
mov qword [rbp + 0x38], rax
movabs rsi, 0x70fb17ad59587b45
mov qword [rbp + 0xc0], rsi
mov qword [rbp + 0xc8], r12
mov qword [rbp + 0xd0], rdi
movabs r14, 0x920b7d7e95d1207c
mov qword [rbp + 0xd8], r14
vmovdqu ymm0, ymmword [rbp + 0x20]
vpxor ymm1, ymm0, ymmword [rbp + 0xc0]
vmovdqa ymmword [rbp + 0x20], ymm1
lea rcx, [rbp + 0x20]
vzeroupper
call fcn.140060e04
movabs rax, 0x508b78d92a781836
mov qword [rbp + 0x10], rax
movabs rax, 0xfd8f313044ccf1
mov qword [rbp + 0x18], rax
mov qword [rbp + 0x40], rsi
mov qword [rbp + 0x48], r12
movdqa xmm0, xmmword [rbp + 0x10]
xorps xmm0, xmmword [rbp + 0x40]
movdqa xmmword [rbp + 0x10], xmm0
lea rcx, [rbp + 0x10]
call fcn.140060e04
movabs rax, 0x49e7bc83d781836
mov qword [rbp + 0x20], rax
movabs rax, 0x7298892e304d98e7
mov qword [rbp + 0x28], rax
mov qword [rbp + 0x30], rdi
mov qword [rbp + 0x38], r14
mov qword [rbp + 0xc0], rsi
mov qword [rbp + 0xc8], r12
mov qword [rbp + 0xd0], rdi
mov qword [rbp + 0xd8], r14
vmovdqu ymm0, ymmword [rbp + 0x20]
vpxor ymm1, ymm0, ymmword [rbp + 0xc0]
vmovdqa ymmword [rbp + 0x20], ymm1
lea rcx, [rbp + 0x20]
vzeroupper
call fcn.140060e04
movabs rax, 0x38972de0c044106
mov qword [rbp + 0x20], rax
movabs rax, 0x5c9e9438264be8de
mov qword [rbp + 0x28], rax
movabs rax, 0x9c12388179e1ef50
mov qword [rbp + 0x30], rax
movabs rax, 0x920b7d7e95a2590f
mov qword [rbp + 0x38], rax
mov qword [rbp + 0xc0], rsi
mov qword [rbp + 0xc8], r12
mov qword [rbp + 0xd0], rdi
mov qword [rbp + 0xd8], r14
vmovdqu ymm0, ymmword [rbp + 0x20]
vpxor ymm1, ymm0, ymmword [rbp + 0xc0]
vmovdqa ymmword [rbp + 0x20], ymm1
lea rcx, [rbp + 0x20]
vzeroupper
call qword [sym.imp.KERNEL32.dll_DeleteFileA]
movabs rax, 0x70fb17ad592b1726
mov qword [rbp + 0x10], rax
mov qword [rbp + 0x18], r12
mov qword [rbp + 0x40], rsi
mov qword [rbp + 0x48], r12
movdqa xmm0, xmmword [rbp + 0x10]
xorps xmm0, xmmword [rbp + 0x40]
movdqa xmmword [rbp + 0x10], xmm0
lea rcx, [rbp + 0x10]
call fcn.140060e04
mov edx, 1
mov rcx, r15
call qword [sym.imp.USER32.dll_ShowWindow]
call fcn.140009840
xorps xmm0, xmm0
movups xmmword [rbp + 0x40], xmm0
mov qword [rbp + 0x50], 9
mov qword [rbp + 0x58], reloc.WS2_32.dll_ntohs
movsd xmm0, qword [str.._Key.ini]
movsd qword [rbp + 0x40], xmm0
movzx eax, byte [0x140088da0]
mov byte [rbp + 0x48], al
mov byte [rbp + 0x49], 0
lea rdx, [rbp + 0xe0]
lea rcx, [rbp + 0x40]
call fcn.140065890
mov edi, eax
mov rdx, qword [rbp + 0x58]
cmp rdx, 0x10
jb 0x14000c487
inc rdx
mov rcx, qword [rbp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000c482
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000ca78
call fcn.14000e608
call fcn.14000a270
test edi, edi
jne 0x14000c633
lea rax, [rbp + 0xc0]
mov qword [rbp + 0x10], rax
xorps xmm0, xmm0
movups xmmword [rbp + 0xc0], xmm0
mov qword [rbp + 0xd0], 3
mov qword [rbp + 0xd8], reloc.WS2_32.dll_ntohs
mov eax, dword [0x140088d88]
mov word [rbp + 0xc0], ax
movzx eax, byte [0x140088d8a]
mov byte [rbp + 0xc2], al
mov byte [rbp + 0xc3], dil
lea rax, [rbp + 0x40]
mov qword [rbp + 0x10], rax
mov qword [rbp + 0x48], r13
mov qword [rbp + 0x50], 7
mov qword [rbp + 0x58], reloc.WS2_32.dll_ntohs
mov rax, qword [str.License]
mov dword [rbp + 0x40], eax
movzx eax, word [0x140088d94]
mov word [rbp + 0x44], ax
movzx eax, byte [0x140088d96]
mov byte [rbp + 0x46], al
mov byte [rbp + 0x47], dil
movups xmmword [rbp + 0x20], xmm0
mov qword [rbp + 0x30], 9
mov qword [rbp + 0x38], reloc.WS2_32.dll_ntohs
movsd xmm0, qword [str.._Key.ini]
movsd qword [rbp + 0x20], xmm0
movzx eax, byte [0x140088da0]
mov byte [rbp + 0x28], al
mov byte [rbp + 0x29], dil
lea r9, [rbp + 0xc0]
lea r8, [rbp + 0x40]
lea rdx, [rbp + 0x20]
lea rcx, [rbp + 0xe0]
call fcn.140006050
mov rdx, rax
lea rdi, [0x1401fbeb8]
mov rcx, rdi
call fcn.140004570
mov rdx, qword [rbp + 0xf8]
cmp rdx, 0x10
jb 0x14000c5bc
inc rdx
mov rcx, qword [rbp + 0xe0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000c5b7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000c872
call fcn.14000e608
movabs rax, 0x708972c63a371707
mov qword [rbp + 0x10], rax
mov qword [rbp + 0x18], r12
mov qword [rbp + 0x40], rsi
mov qword [rbp + 0x48], r12
movdqa xmm0, xmmword [rbp + 0x10]
xorps xmm0, xmmword [rbp + 0x40]
movdqa xmmword [rbp + 0x10], xmm0
lea rax, [rbp + 0x10]
nop dword [rax + rax]
inc rbx
cmp byte [rax + rbx], 0
jne 0x14000c5f0
cmp qword [reloc.WS2_32.dll_ntohs], 0x10
cmovae rdi, qword [0x1401fbeb8]
mov qword [rsp + 0x20], rbx
lea r9, [rbp + 0x10]
xor r8d, r8d
mov rdx, qword [0x1401fbec8]
mov rcx, rdi
call fcn.140003130
cmp rax, 0xffffffffffffffff
je 0x14000c878
jmp 0x14000c831
lea rdx, [0x140088908]
lea rcx, [0x1401fd710]
call fcn.1400025d0
mov rdi, rax
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
mov dl, 0xa
call fcn.14000b6a0
movzx edx, al
mov rcx, rdi
call fcn.14000aaa0
mov rcx, rdi
call fcn.140008d40
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov edx, 7
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
movabs rax, 0x519e7ac23a341e12
mov qword [rbp + 0x10], rax
mov qword [rbp + 0x18], r12
mov qword [rbp + 0x40], rsi
mov qword [rbp + 0x48], r12
movdqa xmm0, xmmword [rbp + 0x10]
xorps xmm0, xmmword [rbp + 0x40]
movdqa xmmword [rbp + 0x10], xmm0
lea rdx, [rbp + 0x10]
lea rcx, [0x1401fd710]
call fcn.1400025d0
mov rdi, rax
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
mov dl, 0xa
call fcn.14000b6a0
movzx edx, al
mov rcx, rdi
call fcn.14000aaa0
mov rcx, rdi
call fcn.140008d40
lea rdx, [0x140088908]
lea rcx, [0x1401fd710]
call fcn.1400025d0
mov rdi, rax
mov rdx, qword [rax]
movsxd rcx, dword [rdx + 4]
add rcx, rax
mov dl, 0xa
call fcn.14000b6a0
movzx edx, al
mov rcx, rdi
call fcn.14000aaa0
mov rcx, rdi
call fcn.140008d40
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov edx, 7
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
movabs rax, 0x158f79e87905561e
mov qword [rbp + 0x20], rax
movabs rax, 0x739398372d5298f0
mov qword [rbp + 0x28], rax
movabs rax, 0xb2700cb71dafbc62
mov qword [rbp + 0x30], rax
mov qword [rbp + 0x38], r14
mov qword [rbp + 0xc0], rsi
mov qword [rbp + 0xc8], r12
movabs r15, 0xb2700cb71d8f8607
mov qword [rbp + 0xd0], r15
mov qword [rbp + 0xd8], r14
vmovdqu ymm0, ymmword [rbp + 0xc0]
vpxor ymm1, ymm0, ymmword [rbp + 0x20]
vmovdqa ymmword [rbp + 0x20], ymm1
lea rdx, [rbp + 0x20]
lea rcx, [0x1401fd710]
vzeroupper
call fcn.1400025d0
lea rdi, [0x1401fbeb8]
mov rdx, rdi
lea rcx, [0x1401fd680]
call fcn.140002350
movabs rax, 0x708972c63a371707
mov qword [rbp + 0x10], rax
mov qword [rbp + 0x18], r12
mov qword [rbp + 0x40], rsi
mov qword [rbp + 0x48], r12
movdqa xmm0, xmmword [rbp + 0x10]
xorps xmm0, xmmword [rbp + 0x40]
movdqa xmmword [rbp + 0x10], xmm0
lea rax, [rbp + 0x10]
inc rbx
cmp byte [rax + rbx], 0
jne 0x14000c7f3
cmp qword [reloc.WS2_32.dll_ntohs], 0x10
cmovae rdi, qword [0x1401fbeb8]
mov qword [rsp + 0x20], rbx
lea r9, [rbp + 0x10]
xor r8d, r8d
mov rdx, qword [0x1401fbec8]
mov rcx, rdi
call fcn.140003130
cmp rax, 0xffffffffffffffff
je 0x14000c956
call fcn.140004c10
call fcn.140006840
call fcn.140006220
xor eax, eax
mov rcx, qword [rbp + 0x140]
xor rcx, rsp
call fcn.14000e6b0
lea r11, [rsp + 0x1a0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.140060a64
int3
call fcn.14000a270
movabs rax, 0x70fb17ad592b1726
mov qword [rbp + 0x10], rax
mov qword [rbp + 0x18], r12
mov qword [rbp + 0x40], rsi
mov qword [rbp + 0x48], r12
movdqa xmm0, xmmword [rbp + 0x10]
xorps xmm0, xmmword [rbp + 0x40]
movdqa xmmword [rbp + 0x10], xmm0
lea rcx, [rbp + 0x10]
call fcn.140060e04
call fcn.140009840
lea rdx, [0x14000ac50]
lea rcx, [0x1401fd710]
call fcn.140004600
movabs rcx, 0x509f7ec1382e150c
mov qword [rbp + 0x20], rcx
movabs rcx, 0x21988e3a215dd1ee
mov qword [rbp + 0x28], rcx
movabs rcx, 0xb2700cb71d8f8607
mov qword [rbp + 0x30], rcx
mov qword [rbp + 0x38], r14
mov qword [rbp + 0xc0], rsi
mov qword [rbp + 0xc8], r12
mov qword [rbp + 0xd0], rcx
mov qword [rbp + 0xd8], r14
vmovdqu ymm0, ymmword [rbp + 0xc0]
vpxor ymm1, ymm0, ymmword [rbp + 0x20]
vmovdqa ymmword [rbp + 0x20], ymm1
lea rdx, [rbp + 0x20]
mov rcx, rax
vzeroupper
call fcn.1400025d0
lea rdx, [0x140003200]
mov rcx, rax
call fcn.140004600
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 3
call fcn.140060df8
int3
call fcn.14000a270
movabs rax, 0x70fb17ad592b1726
mov qword [rbp + 0x10], rax
mov qword [rbp + 0x18], r12
mov qword [rbp + 0x40], rsi
mov qword [rbp + 0x48], r12
movdqa xmm0, xmmword [rbp + 0x10]
xorps xmm0, xmmword [rbp + 0x40]
movdqa xmmword [rbp + 0x10], xmm0
lea rcx, [rbp + 0x10]
call fcn.140060e04
call fcn.140009840
lea rdx, [0x14000ac50]
lea rcx, [0x1401fd710]
call fcn.140004600
movabs rcx, 0x509f7ec1382e150c
mov qword [rbp + 0x20], rcx
movabs rcx, 0x21988e3a215dd1ee
mov qword [rbp + 0x28], rcx
mov qword [rbp + 0x30], r15
mov qword [rbp + 0x38], r14
mov qword [rbp + 0xc0], rsi
mov qword [rbp + 0xc8], r12
mov qword [rbp + 0xd0], r15
mov qword [rbp + 0xd8], r14
vmovdqu ymm0, ymmword [rbp + 0xc0]
vpxor ymm1, ymm0, ymmword [rbp + 0x20]
vmovdqa ymmword [rbp + 0x20], ymm1
lea rdx, [rbp + 0x20]
mov rcx, rax
vzeroupper
call fcn.1400025d0
lea rdx, [0x140003200]
mov rcx, rax
call fcn.140004600
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 3
call fcn.140060df8
nop
mov ecx, reloc.WLDAP32.dll_Ordinal_22
call fcn.140008400
int3
shr rsi, 0x20
mov ecx, esi
call fcn.140008440
int3
shr rcx, 0x20
call fcn.140008440
nop
call fcn.140060a64
nop
mov ecx, reloc.WLDAP32.dll_Ordinal_22
call fcn.140008400
int3
shr rsi, 0x20
mov ecx, esi
call fcn.140008440
int3
shr rcx, 0x20
call fcn.140008440
nop
call fcn.140060a64
int3
call fcn.140060a64
int3