Function at 0x140027180
Capabilities:
Create thread
Inject thread
Terminate process

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
mov qword [rax + 0x20], r12
push r13
push r14
push r15
sub rsp, 0x5b0
movaps xmmword [rax - 0x28], xmm6
mov rax, qword [0x140076100]
xor rax, rsp
mov qword [rsp + 0x590], rax
xor edi, edi
call fcn.140024900
test al, al
je 0x140027f48
mov qword [rsp + 0xb0], 0x54
mov qword [rsp + 0xb8], 0xb0005
mov dword [rsp + 0xc0], 0x258
movabs rax, 0xdd6cc6db6fb77c70
mov qword [rsp + 0x1e0], rax
movabs rax, 0xebd71497591211
mov qword [rsp + 0x1e8], rax
movabs rax, 0x8f49cc9adf3e93d
mov qword [rsp + 0x1f0], rax
movabs rax, 0xd3c8f340f5f47dbd
mov qword [rsp + 0x1f8], rax
movabs rax, 0xd0adc07e8da29cea
mov qword [rsp + 0x200], rax
movabs rax, 0x4dd2fc01b13991c8
mov qword [rsp + 0x208], rax
movabs r14, 0xdd0fc6a86fd67c33
mov qword [rsp + 0x290], r14
movabs rbx, 0x8ad77d973d1270
mov qword [rsp + 0x298], rbx
movabs r12, 0x89a9ca6adbee91d
mov qword [rsp + 0x2a0], r12
movabs r15, 0xd3adf313f5d47dd2
mov qword [rsp + 0x2a8], r15
movabs rsi, 0xd0c2c03c8dcb9c87
mov qword [rsp + 0x2b0], rsi
movabs r13, 0x4dd2fc01b15d91a4
mov qword [rsp + 0x2b8], r13
movdqa xmm0, xmmword [rsp + 0x1e0]
xorps xmm0, xmmword [rsp + 0x290]
movdqa xmmword [rsp + 0x1e0], xmm0
movdqa xmm1, xmmword [rsp + 0x1f0]
xorps xmm1, xmmword [rsp + 0x2a0]
movdqa xmmword [rsp + 0x1f0], xmm1
movdqa xmm0, xmmword [rsp + 0x200]
xorps xmm0, xmmword [rsp + 0x2b0]
movdqa xmmword [rsp + 0x200], xmm0
mov ecx, edi
movzx eax, word [rsp + rcx + 0x1e0]
mov word [rsp + rcx + 0xc4], ax
lea rcx, [rcx + 2]
test ax, ax
jne 0x140027310
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
lea r8, [rsp + 0xb0]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_SetCurrentConsoleFontEx]
movabs rax, 0xb87da7df1bb01340
mov qword [rsp + 0x40], rax
movabs rax, 0x8ad77db77d324a
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x1a0], r14
mov qword [rsp + 0x1a8], rbx
movdqa xmm0, xmmword [rsp + 0x40]
xorps xmm0, xmmword [rsp + 0x1a0]
movdqa xmmword [rsp + 0x40], xmm0
lea rdx, [rsp + 0x40]
lea rcx, [0x1400776f0]
call fcn.14001aec0
mov rcx, rax
lea rdx, str.Tue_Dec_10_18:09:13_2024
call fcn.14001aec0
mov rcx, rax
lea rdx, [0x14006a938]
call fcn.14001aec0
call fcn.140025a70
test al, al
je 0x14002b89c
call fcn.140025fc0
test al, al
je 0x14002784d
movabs rax, 0xfd7cb1c70bb81564
mov qword [rsp + 0x350], rax
movabs rax, 0x20b89f49a51d2341
mov qword [rsp + 0x358], rax
movabs rax, 0x7bbae8c9c39e9a74
mov qword [rsp + 0x360], rax
movabs rax, 0xb7c887619aa40da7
mov qword [rsp + 0x368], rax
movabs rax, 0xb3b0a159feebe0a7
mov qword [rsp + 0x370], rax
movabs rax, 0x25f29973d435b1cc
mov qword [rsp + 0x378], rax
movabs rax, 0x40e494d50bd43b3e
mov qword [rsp + 0x380], rax
movabs rax, 0x16eaa056150f1101
mov qword [rsp + 0x388], rax
movabs rax, 0x4a2953101b2fbf1b
mov qword [rsp + 0x390], rax
movabs rax, 0xf323171b0b1d53d7
mov qword [rsp + 0x398], rax
movabs rax, 0xa8ab45b05d01c612
mov qword [rsp + 0x3a0], rax
movabs rax, 0xa4feee5bf7329d
mov qword [rsp + 0x3a8], rax
movabs rax, 0xdab6877b9953b080
mov qword [rsp + 0x3b0], rax
movabs rax, 0x9332ce983e09aaa0
mov qword [rsp + 0x3b8], rax
movabs rax, 0x3599fc6773dee8d8
mov qword [rsp + 0x3c0], rax
movabs rax, 0x5fbc0a430f45d38d
mov qword [rsp + 0x3c8], rax
movabs rax, 0x9447012bbb5e7a2d
mov qword [rsp + 0x3d0], rax
movabs rax, 0xdcbedddece8872ad
mov qword [rsp + 0x3d8], rax
movabs rax, 0xbacf56e4659aba80
mov qword [rsp + 0x3e0], rax
movabs rcx, 0x8c4edac3fc1065e2
mov qword [rsp + 0x3e8], rcx
mov qword [rsp + 0x480], r14
mov qword [rsp + 0x488], rbx
mov qword [rsp + 0x490], r12
mov qword [rsp + 0x498], r15
mov qword [rsp + 0x4a0], rsi
mov qword [rsp + 0x4a8], r13
movabs rax, 0x2f80b4ba7ff44c51
mov qword [rsp + 0x4b0], rax
movabs rsi, 0x2c8fc43767687f76
mov qword [rsp + 0x4b8], rsi
movabs rax, 0x651320606f5bd73b
mov qword [rsp + 0x4c0], rax
movabs rax, 0x9c4679357c6a24f8
mov qword [rsp + 0x4c8], rax
movabs rax, 0x87df20de736faf65
mov qword [rsp + 0x4d0], rax
movabs rax, 0x688b8d8b3f9e47fa
mov qword [rsp + 0x4d8], rax
movabs rax, 0xb5c4aa14ed7ec7ef
mov qword [rsp + 0x4e0], rax
movabs rax, 0xbe59adf95c24c6cc
mov qword [rsp + 0x4e8], rax
movabs rax, 0x5bf092125eba86b9
mov qword [rsp + 0x4f0], rax
movabs rax, 0x36cb272f6324a7fe
mov qword [rsp + 0x4f8], rax
movabs rax, 0xa5762c58cc311e43
mov qword [rsp + 0x500], rax
movabs rax, 0xb2d1b4adbced0480
mov qword [rsp + 0x508], rax
movabs rax, 0xbae179d60dae88ad
mov qword [rsp + 0x510], rax
mov qword [rsp + 0x518], rcx
movdqa xmm0, xmmword [rsp + 0x350]
xorps xmm0, xmmword [rsp + 0x480]
movdqa xmmword [rsp + 0x350], xmm0
movdqa xmm1, xmmword [rsp + 0x360]
xorps xmm1, xmmword [rsp + 0x490]
movdqa xmmword [rsp + 0x360], xmm1
movdqa xmm0, xmmword [rsp + 0x370]
xorps xmm0, xmmword [rsp + 0x4a0]
movdqa xmmword [rsp + 0x370], xmm0
movdqa xmm1, xmmword [rsp + 0x380]
xorps xmm1, xmmword [rsp + 0x4b0]
movdqa xmmword [rsp + 0x380], xmm1
movdqa xmm0, xmmword [rsp + 0x390]
xorps xmm0, xmmword [rsp + 0x4c0]
movdqa xmmword [rsp + 0x390], xmm0
movdqa xmm1, xmmword [rsp + 0x3a0]
xorps xmm1, xmmword [rsp + 0x4d0]
movdqa xmmword [rsp + 0x3a0], xmm1
movdqa xmm0, xmmword [rsp + 0x3b0]
xorps xmm0, xmmword [rsp + 0x4e0]
movdqa xmmword [rsp + 0x3b0], xmm0
movdqa xmm1, xmmword [rsp + 0x3c0]
xorps xmm1, xmmword [rsp + 0x4f0]
movdqa xmmword [rsp + 0x3c0], xmm1
movdqa xmm0, xmmword [rsp + 0x3d0]
xorps xmm0, xmmword [rsp + 0x500]
movdqa xmmword [rsp + 0x3d0], xmm0
movdqa xmm1, xmmword [rsp + 0x3e0]
xorps xmm1, xmmword [rsp + 0x510]
movdqa xmmword [rsp + 0x3e0], xmm1
lea rdx, [rsp + 0x350]
lea rcx, [0x1400776f0]
call fcn.14001aec0
mov rcx, rax
lea rdx, [0x14006a938]
call fcn.14001aec0
movabs rax, 0xb36ae6db1cb30e43
mov qword [rsp + 0x110], rax
movabs rax, 0x63aab809b74f7704
mov qword [rsp + 0x118], rax
movabs rax, 0x89a9c88c8cd8671
mov qword [rsp + 0x120], rax
mov qword [rsp + 0x128], r15
mov qword [rsp + 0x150], r14
mov qword [rsp + 0x158], rbx
mov qword [rsp + 0x160], r12
mov qword [rsp + 0x168], r15
movdqa xmm0, xmmword [rsp + 0x110]
xorps xmm0, xmmword [rsp + 0x150]
movdqa xmmword [rsp + 0x110], xmm0
movdqa xmm1, xmmword [rsp + 0x120]
xorps xmm1, xmmword [rsp + 0x160]
movdqa xmmword [rsp + 0x120], xmm1
lea rdx, [rsp + 0x110]
lea rcx, [0x1400776f0]
call fcn.14001aec0
mov rcx, rax
lea rdx, [0x14006a938]
call fcn.14001aec0
lea rcx, [0x140077a70]
call fcn.14002d500
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ExitProcess]
movabs rax, 0xf36aa2c91db10c46
mov qword [rsp + 0x40], rax
movabs rax, 0x8ad77d97586a15
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x1a0], r14
mov qword [rsp + 0x1a8], rbx
movdqa xmm0, xmmword [rsp + 0x40]
xorps xmm0, xmmword [rsp + 0x1a0]
movdqa xmmword [rsp + 0x40], xmm0
lea rcx, [rsp + 0x40]
call fcn.140041e30
movabs rax, 0xb921b39a5cb81544
mov qword [rsp + 0x40], rax
movabs rax, 0x8ad77d973d7e1c
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x1a0], r14
mov qword [rsp + 0x1a8], rbx
movdqa xmm0, xmmword [rsp + 0x40]
xorps xmm0, xmmword [rsp + 0x1a0]
movdqa xmmword [rsp + 0x40], xmm0
lea rcx, [rsp + 0x40]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
movabs rcx, 0xb848b4cd1c83087d
mov qword [rsp + 0x110], rcx
movabs rcx, 0x49feb418fd5f5d04
mov qword [rsp + 0x118], rcx
movabs rcx, 0x61eefdcbdfd18f73
mov qword [rsp + 0x120], rcx
movabs rcx, 0xd3adf313f5d413bd
mov qword [rsp + 0x128], rcx
mov qword [rsp + 0x150], r14
mov qword [rsp + 0x158], rbx
mov qword [rsp + 0x160], r12
mov qword [rsp + 0x168], r15
movdqa xmm0, xmmword [rsp + 0x110]
xorps xmm0, xmmword [rsp + 0x150]
movdqa xmmword [rsp + 0x110], xmm0
movdqa xmm1, xmmword [rsp + 0x120]
xorps xmm1, xmmword [rsp + 0x160]
movdqa xmmword [rsp + 0x120], xmm1
lea rdx, [rsp + 0x110]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x140079448], rax
test rax, rax
je 0x140028632
call fcn.14001da10
test al, al
je 0x140028632
lea rcx, [rsp + 0x90]
call fcn.140026e70
nop
movabs rax, 0xb86ba8cd1fb3186f
mov qword [rsp + 0x110], rax
movabs rax, 0x75e88b0ef254711e
mov qword [rsp + 0x118], rax
movabs rax, 0x8f3f7d083da8574
mov qword [rsp + 0x120], rax
mov qword [rsp + 0x128], r15
mov qword [rsp + 0x1a0], r14
mov qword [rsp + 0x1a8], rbx
mov qword [rsp + 0x1b0], r12
mov qword [rsp + 0x1b8], r15
movdqa xmm0, xmmword [rsp + 0x110]
xorps xmm0, xmmword [rsp + 0x1a0]
movdqa xmmword [rsp + 0x110], xmm0
movdqa xmm1, xmmword [rsp + 0x120]
xorps xmm1, xmmword [rsp + 0x1b0]
movdqa xmmword [rsp + 0x120], xmm1
lea rdx, [rsp + 0x110]
lea rcx, [rsp + 0x460]
call fcn.14001acd0
nop
mov r8, rax
lea rdx, [rsp + 0x90]
lea rcx, [rsp + 0x150]
call fcn.140032b90
nop
lea rcx, [rsp + 0x460]
call fcn.14001ac70
xor r8d, r8d
lea rdx, [rsp + 0x150]
lea rcx, [rsp + 0x70]
call fcn.140032a20
nop
lea rcx, [rsp + 0x70]
call fcn.14001d580
movzx edi, al
lea rcx, [rsp + 0x70]
call fcn.14001aac0
test dil, dil
je 0x1400283e5
movabs rax, 0xb360afda0aa6055b
mov qword [rsp + 0x40], rax
movabs rax, 0xefbb08f3527f50
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x1a0], r14
mov qword [rsp + 0x1a8], rbx
movdqa xmm0, xmmword [rsp + 0x40]
xorps xmm0, xmmword [rsp + 0x1a0]
movdqa xmmword [rsp + 0x40], xmm0
lea rdx, [rsp + 0x150]
lea rcx, [rsp + 0x70]
call fcn.140023dd0
lea rdx, [rsp + 0x40]
mov rcx, rax
call fcn.140034eb0
movzx edi, al
lea rcx, [rsp + 0x70]
call fcn.14001ac70
test dil, dil
je 0x140027f2d
movabs rax, 0xb15fbec703b41361
mov qword [rsp + 0x1a0], rax
movabs rax, 0x61feb23fe5586b11
mov qword [rsp + 0x1a8], rax
movabs rax, 0x89a9ca6c8c68c33
mov qword [rsp + 0x1b0], rax
mov qword [rsp + 0x1b8], r15
mov qword [rsp + 0x260], r14
mov qword [rsp + 0x268], rbx
mov qword [rsp + 0x270], r12
mov qword [rsp + 0x278], r15
movdqa xmm0, xmmword [rsp + 0x1a0]
xorps xmm0, xmmword [rsp + 0x260]
movdqa xmmword [rsp + 0x1a0], xmm0
movdqa xmm1, xmmword [rsp + 0x1b0]
xorps xmm1, xmmword [rsp + 0x270]
movdqa xmmword [rsp + 0x1b0], xmm1
lea rdx, [rsp + 0x1a0]
lea rcx, [rsp + 0x70]
call fcn.14001acd0
nop
lea rcx, [rsp + 0x70]
call fcn.140024c30
mov rdi, rax
lea rcx, [rsp + 0x70]
call fcn.14001ac70
test rdi, rdi
je 0x1400281b6
movabs rax, 0xb163afc304a51d47
mov qword [rsp + 0x1a0], rax
movabs rax, 0x20e7be52b75b3d50
mov qword [rsp + 0x1a8], rax
movabs rax, 0x5bfdf7f6ddd3865e
mov qword [rsp + 0x1b0], rax
movabs rax, 0xd3ad966b90fa0ba0
mov qword [rsp + 0x1b8], rax
mov qword [rsp + 0x260], r14
mov qword [rsp + 0x268], rbx
mov qword [rsp + 0x270], r12
mov qword [rsp + 0x278], r15
movdqa xmm0, xmmword [rsp + 0x1a0]
xorps xmm0, xmmword [rsp + 0x260]
movdqa xmmword [rsp + 0x1a0], xmm0
movdqa xmm1, xmmword [rsp + 0x1b0]
xorps xmm1, xmmword [rsp + 0x270]
movdqa xmmword [rsp + 0x1b0], xmm1
lea rcx, [rsp + 0x1a0]
call fcn.140041e30
movabs rax, 0xb24ce6dc1db70840
mov qword [rsp + 0x1a0], rax
movabs rax, 0x76f8841afc6d621d
mov qword [rsp + 0x1a8], rax
movabs rax, 0x89a9ca6c8c68c33
mov qword [rsp + 0x1b0], rax
mov qword [rsp + 0x1b8], r15
mov qword [rsp + 0x260], r14
mov qword [rsp + 0x268], rbx
mov qword [rsp + 0x270], r12
mov qword [rsp + 0x278], r15
movdqa xmm0, xmmword [rsp + 0x1a0]
xorps xmm0, xmmword [rsp + 0x260]
movdqa xmmword [rsp + 0x1a0], xmm0
movdqa xmm1, xmmword [rsp + 0x1b0]
xorps xmm1, xmmword [rsp + 0x270]
movdqa xmmword [rsp + 0x1b0], xmm1
lea rcx, [rsp + 0x1a0]
call fcn.140041e30
movabs rax, 0x8e68adf81fbb1370
mov qword [rsp + 0x40], rax
movabs rax, 0x8ab205f2136402
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x1a0], r14
mov qword [rsp + 0x1a8], rbx
movdqa xmm0, xmmword [rsp + 0x40]
xorps xmm0, xmmword [rsp + 0x1a0]
movdqa xmmword [rsp + 0x40], xmm0
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x70]
call fcn.14001acd0
nop
lea rcx, [rsp + 0x70]
call fcn.140024c30
mov r8, rax
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rdi, rax
lea rcx, [rsp + 0x70]
call fcn.14001ac70
test rdi, rdi
je 0x140027f81
movabs rax, 0xaf6dafe40bb7137f
mov qword [rsp + 0x280], rax
movabs rax, 0x8ad77dd6446011
mov qword [rsp + 0x288], rax
mov qword [rsp + 0x1a0], r14
mov qword [rsp + 0x1a8], rbx
movdqa xmm0, xmmword [rsp + 0x280]
xorps xmm0, xmmword [rsp + 0x1a0]
movdqa xmmword [rsp + 0x280], xmm0
movabs rax, 0xef3caacd01a41958
mov qword [rsp + 0x460], rax
movabs rax, 0x8ad77dfb51765e
mov qword [rsp + 0x468], rax
mov qword [rsp + 0x1a0], r14
mov qword [rsp + 0x1a8], rbx
movdqa xmm0, xmmword [rsp + 0x460]
xorps xmm0, xmmword [rsp + 0x1a0]
movdqa xmmword [rsp + 0x460], xmm0
lea rcx, [rsp + 0x460]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
lea rdx, [rsp + 0x280]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov r14, rax
lea rcx, [rsp + 0x150]
call fcn.14001ac60
mov rbx, 0xffffffffffffffff
mov r8, rbx
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140027ea0
mov dword [rsp + 0x20], 4
xor edx, edx
mov r9d, 0x3000
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov rsi, rax
lea rcx, [rsp + 0x150]
call fcn.14001ac60
inc rbx
cmp byte [rax + rbx], 0
jne 0x140027ed3
lea rcx, [rsp + 0x150]
call fcn.14001ac60
xor r15d, r15d
mov qword [rsp + 0x20], r15
mov r9, rbx
mov r8, rax
mov rdx, rsi
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], r15d
mov qword [rsp + 0x20], rsi
mov r9, r14
xor r8d, r8d
xor edx, edx
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CreateRemoteThread]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
lea rcx, [rsp + 0x150]
call fcn.14001ac70
nop
lea rcx, [rsp + 0x90]
call fcn.14001ac70
xor eax, eax
mov rcx, qword [rsp + 0x590]
xor rcx, rsp
call fcn.140038300
lea r11, [rsp + 0x5b0]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov r12, qword [r11 + 0x38]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop r15
pop r14
pop r13
ret
movabs rax, 0xa92fa2cd03bf1d55
mov qword [rsp + 0x1e0], rax
movabs rax, 0x43aab918e752321f
mov qword [rsp + 0x1e8], rax
movabs rax, 0x7ac9fbcdfdce8472
mov qword [rsp + 0x1f0], rax
movabs rax, 0xb0c89b70d5a85da4
mov qword [rsp + 0x1f8], rax
movabs rax, 0xb3abac4cfdaabcec
mov qword [rsp + 0x200], rax
movabs rax, 0x23bbdc6fde34e5c5
mov qword [rsp + 0x208], rax
movabs rax, 0x1cedd1ce0c8d3f71
mov qword [rsp + 0x210], rax
movabs rax, 0x2c8fc43767687f44
mov qword [rsp + 0x218], rax
mov qword [rsp + 0x290], r14
mov qword [rsp + 0x298], rbx
mov qword [rsp + 0x2a0], r12
mov qword [rsp + 0x2a8], r15
mov qword [rsp + 0x2b0], rsi
mov qword [rsp + 0x2b8], r13
movabs rax, 0x2f80b4ba7ff44c51
mov qword [rsp + 0x2c0], rax
movabs rsi, 0x2c8fc43767687f76
mov qword [rsp + 0x2c8], rsi
movdqa xmm0, xmmword [rsp + 0x1e0]
xorps xmm0, xmmword [rsp + 0x290]
movdqa xmmword [rsp + 0x1e0], xmm0
movdqa xmm1, xmmword [rsp + 0x1f0]
xorps xmm1, xmmword [rsp + 0x2a0]
movdqa xmmword [rsp + 0x1f0], xmm1
movdqa xmm0, xmmword [rsp + 0x200]
xorps xmm0, xmmword [rsp + 0x2b0]
movdqa xmmword [rsp + 0x200], xmm0
movdqa xmm1, xmmword [rsp + 0x210]
xorps xmm1, xmmword [rsp + 0x2c0]
movdqa xmmword [rsp + 0x210], xmm1
lea rdx, [rsp + 0x1e0]
lea rcx, [0x1400776f0]
call fcn.14001aec0
mov rcx, rax
lea rdx, [0x14006a938]
call fcn.14001aec0
movabs rax, 0xb36ae6db1cb30e43
mov qword [rsp + 0x1a0], rax
movabs rax, 0x63aab809b74f7704
mov qword [rsp + 0x1a8], rax
movabs rax, 0x89a9c88c8cd8671
mov qword [rsp + 0x1b0], rax
mov qword [rsp + 0x1b8], r15
mov qword [rsp + 0x260], r14
mov qword [rsp + 0x268], rbx
mov qword [rsp + 0x270], r12
mov qword [rsp + 0x278], r15
movdqa xmm0, xmmword [rsp + 0x1a0]
xorps xmm0, xmmword [rsp + 0x260]
movdqa xmmword [rsp + 0x1a0], xmm0
movdqa xmm1, xmmword [rsp + 0x1b0]
xorps xmm1, xmmword [rsp + 0x270]
movdqa xmmword [rsp + 0x1b0], xmm1
lea rdx, [rsp + 0x1a0]
lea rcx, [0x1400776f0]
call fcn.14001aec0
mov rcx, rax
lea rdx, [0x14006a938]
call fcn.14001aec0
lea rcx, [0x140077a70]
call fcn.14002d500
jmp 0x140027f2d
movabs rax, 0xbf60948801b30c5c
mov qword [rsp + 0x1e0], rax
movabs rax, 0x65f3b611c7457d1c
mov qword [rsp + 0x1e8], rax
movabs rax, 0x6df8bcc7d9dbab6f
mov qword [rsp + 0x1f0], rax
movabs rax, 0xb6dd9c3390a612b4
mov qword [rsp + 0x1f8], rax
movabs rax, 0xb6adb31ceaa5f5e9
mov qword [rsp + 0x200], rax
movabs rax, 0x35b7d264c33ce6d0
mov qword [rsp + 0x208], rax
movabs rax, 0x2f80b4ba7ff46234
mov qword [rsp + 0x210], rax
movabs rax, 0x2c8fc43767687f76
mov qword [rsp + 0x218], rax
mov qword [rsp + 0x290], r14
mov qword [rsp + 0x298], rbx
mov qword [rsp + 0x2a0], r12
mov qword [rsp + 0x2a8], r15
mov qword [rsp + 0x2b0], rsi
mov qword [rsp + 0x2b8], r13
movabs rcx, 0x2f80b4ba7ff44c51
mov qword [rsp + 0x2c0], rcx
mov qword [rsp + 0x2c8], rax
movdqa xmm0, xmmword [rsp + 0x1e0]
xorps xmm0, xmmword [rsp + 0x290]
movdqa xmmword [rsp + 0x1e0], xmm0
movdqa xmm1, xmmword [rsp + 0x1f0]
xorps xmm1, xmmword [rsp + 0x2a0]
movdqa xmmword [rsp + 0x1f0], xmm1
movdqa xmm0, xmmword [rsp + 0x200]
xorps xmm0, xmmword [rsp + 0x2b0]
movdqa xmmword [rsp + 0x200], xmm0
movdqa xmm1, xmmword [rsp + 0x210]
xorps xmm1, xmmword [rsp + 0x2c0]
movdqa xmmword [rsp + 0x210], xmm1
lea rdx, [rsp + 0x1e0]
lea rcx, [0x1400776f0]
call fcn.14001aec0
mov rcx, rax
lea rdx, [0x14006a938]
call fcn.14001aec0
movabs rax, 0xb36ae6db1cb30e43
mov qword [rsp + 0x1a0], rax
movabs rax, 0x63aab809b74f7704
mov qword [rsp + 0x1a8], rax
movabs rax, 0x89a9c88c8cd8671
mov qword [rsp + 0x1b0], rax
mov qword [rsp + 0x1b8], r15
mov qword [rsp + 0x260], r14
mov qword [rsp + 0x268], rbx
mov qword [rsp + 0x270], r12
mov qword [rsp + 0x278], r15
movdqa xmm0, xmmword [rsp + 0x1a0]
xorps xmm0, xmmword [rsp + 0x260]
movdqa xmmword [rsp + 0x1a0], xmm0
movdqa xmm1, xmmword [rsp + 0x1b0]
xorps xmm1, xmmword [rsp + 0x270]
movdqa xmmword [rsp + 0x1b0], xmm1
lea rdx, [rsp + 0x1a0]
lea rcx, [0x1400776f0]
call fcn.14001aec0
mov rcx, rax
lea rdx, [0x14006a938]
call fcn.14001aec0
lea rcx, [0x140077a70]
call fcn.14002d500
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ExitProcess]
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
mov edx, 5
call qword [sym.imp.USER32.dll_ShowWindow]
movabs rax, 0xb366aedc0abb1340
mov qword [rsp + 0x1e0], rax
movabs rax, 0x6ff8a05de4543217
mov qword [rsp + 0x1e8], rax
movabs rax, 0x28f2e8cfda9e8e73
mov qword [rsp + 0x1f0], rax
movabs rax, 0xbdc8977d90a418b6
mov qword [rsp + 0x1f8], rax
movabs rax, 0xb5b0e010feaef5e4
mov qword [rsp + 0x200], rax
movabs rax, 0x2aa28921df28e389
mov qword [rsp + 0x208], rax
movabs rax, 0x4af8d1941a902d23
mov qword [rsp + 0x210], rax
movabs rax, 0x2c8fc43767687f58
mov qword [rsp + 0x218], rax
mov qword [rsp + 0x290], r14
mov qword [rsp + 0x298], rbx
mov qword [rsp + 0x2a0], r12
mov qword [rsp + 0x2a8], r15
mov qword [rsp + 0x2b0], rsi
mov qword [rsp + 0x2b8], r13
movabs rax, 0x2f80b4ba7ff44c51
mov qword [rsp + 0x2c0], rax
movabs rsi, 0x2c8fc43767687f76
mov qword [rsp + 0x2c8], rsi
movdqa xmm0, xmmword [rsp + 0x1e0]
xorps xmm0, xmmword [rsp + 0x290]
movdqa xmmword [rsp + 0x1e0], xmm0
movdqa xmm1, xmmword [rsp + 0x1f0]
xorps xmm1, xmmword [rsp + 0x2a0]
movdqa xmmword [rsp + 0x1f0], xmm1
movdqa xmm0, xmmword [rsp + 0x200]
xorps xmm0, xmmword [rsp + 0x2b0]
movdqa xmmword [rsp + 0x200], xmm0
movdqa xmm1, xmmword [rsp + 0x210]
xorps xmm1, xmmword [rsp + 0x2c0]
movdqa xmmword [rsp + 0x210], xmm1
lea rdx, [rsp + 0x1e0]
lea rcx, [0x1400776f0]
call fcn.14001aec0
mov rcx, rax
lea rdx, [0x14006a938]
call fcn.14001aec0
movabs rax, 0xb36ae6db1cb30e43
mov qword [rsp + 0x1a0], rax
movabs rax, 0x63aab809b74f7704
mov qword [rsp + 0x1a8], rax
movabs rax, 0x89a9c88c8cd8671
mov qword [rsp + 0x1b0], rax
mov qword [rsp + 0x1b8], r15
mov qword [rsp + 0x260], r14
mov qword [rsp + 0x268], rbx
mov qword [rsp + 0x270], r12
mov qword [rsp + 0x278], r15
movdqa xmm0, xmmword [rsp + 0x1a0]
xorps xmm0, xmmword [rsp + 0x260]
movdqa xmmword [rsp + 0x1a0], xmm0
movdqa xmm1, xmmword [rsp + 0x1b0]
xorps xmm1, xmmword [rsp + 0x270]
movdqa xmmword [rsp + 0x1b0], xmm1
lea rdx, [rsp + 0x1a0]
lea rcx, [0x1400776f0]
call fcn.14001aec0
mov rcx, rax
lea rdx, [0x14006a938]
call fcn.14001aec0
lea rcx, [0x140077a70]
call fcn.14002d500
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ExitProcess]
movabs rax, 0xb47bb6c500a40c39
mov qword [rsp + 0x1e0], rax
movabs rax, 0x61f9a418fa1d751e
mov qword [rsp + 0x1e8], rax
movabs rax, 0x7befbcc9d99e8c7a
mov qword [rsp + 0x1f0], rax
movabs rax, 0xbacc8472d5f80fb7
mov qword [rsp + 0x1f8], rax
movabs rax, 0xd0c2c012eaa5f5f3
mov qword [rsp + 0x200], rax
mov qword [rsp + 0x208], r13
mov qword [rsp + 0x290], r14
mov qword [rsp + 0x298], rbx
mov qword [rsp + 0x2a0], r12
mov qword [rsp + 0x2a8], r15
mov qword [rsp + 0x2b0], rsi
mov qword [rsp + 0x2b8], r13
movdqa xmm0, xmmword [rsp + 0x1e0]
xorps xmm0, xmmword [rsp + 0x290]
movdqa xmmword [rsp + 0x1e0], xmm0
movdqa xmm1, xmmword [rsp + 0x1f0]
xorps xmm1, xmmword [rsp + 0x2a0]
movdqa xmmword [rsp + 0x1f0], xmm1
movdqa xmm0, xmmword [rsp + 0x200]
xorps xmm0, xmmword [rsp + 0x2b0]
movdqa xmmword [rsp + 0x200], xmm0
lea rdx, [rsp + 0x1e0]
lea rcx, [0x1400776f0]
call fcn.14001aec0
mov rcx, rax
lea rdx, [0x14006a938]
call fcn.14001aec0
movabs rax, 0xdd0fa3cb06a2135d
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x48], rbx
mov qword [rsp + 0x1a0], r14
mov qword [rsp + 0x1a8], rbx
movdqa xmm0, xmmword [rsp + 0x40]
xorps xmm0, xmmword [rsp + 0x1a0]
movdqa xmmword [rsp + 0x40], xmm0
movabs rax, 0xb87da9ce0a945c68
mov qword [rsp + 0x350], rax
movabs rax, 0x61e5bb5df2556650
mov qword [rsp + 0x358], rax
movabs rax, 0x67e8ec86cad08079
mov qword [rsp + 0x360], rax
movabs rax, 0xb4c8913386a718b1
mov qword [rsp + 0x368], rax
movabs rax, 0xb68be010feecf2ee
mov qword [rsp + 0x370], rax
movabs rax, 0x3bb39421c432e884
mov qword [rsp + 0x378], rax
movabs rax, 0x57efd8d810866c34
mov qword [rsp + 0x380], rax
movabs rax, 0x58e6e45902181056
mov qword [rsp + 0x388], rax
movabs rax, 0x1072000c0332a01b
mov qword [rsp + 0x390], rax
movabs rax, 0xfd2510411d074b8c
mov qword [rsp + 0x398], rax
movabs rax, 0xf4b04cbd5316c309
mov qword [rsp + 0x3a0], rax
movabs rax, 0xcf9e2ab51f7679f
mov qword [rsp + 0x3a8], rax
movabs rax, 0xd4a98a7b995eb58a
mov qword [rsp + 0x3b0], rax
movabs rax, 0xcd35ecd92004e7bc
mov qword [rsp + 0x3b8], rax
movabs rax, 0x28d0f7793fd7a6d6
mov qword [rsp + 0x3c0], rax
movabs rax, 0x16a74b4e4341d58b
mov qword [rsp + 0x3c8], rax
movabs rax, 0xcc010c2ba95c7f24
mov qword [rsp + 0x3d0], rax
movabs rax, 0xd7bfc6c8d7cd6cf4
mov qword [rsp + 0x3d8], rax
movabs rax, 0xd28210a263cfa8c1
mov qword [rsp + 0x3e0], rax
movabs rax, 0xcd18faf98f640487
mov qword [rsp + 0x3e8], rax
movabs rax, 0xf594533e86126059
mov qword [rsp + 0x3f0], rax
movabs rax, 0x38999a11e54b3514
mov qword [rsp + 0x3f8], rax
movabs rax, 0x8fa6b1be3577b620
mov qword [rsp + 0x400], rax
movabs rax, 0xe5e260f0c4d4fe2
mov qword [rsp + 0x408], rax
movabs rax, 0x29c50f30ac91356b
mov qword [rsp + 0x410], rax
movabs rax, 0x44870b45bca2c07b
mov qword [rsp + 0x418], rax
movabs rax, 0x114e94ae8ea4a32e
mov qword [rsp + 0x420], rax
movabs rax, 0x991ed7de06d0b8aa
mov qword [rsp + 0x428], rax
movabs rax, 0x7a7c66b0a7beef8d
mov qword [rsp + 0x430], rax
movabs rax, 0xf72361de90a662a5
mov qword [rsp + 0x438], rax
movabs rax, 0xd79e762b04ecae9
mov qword [rsp + 0x440], rax
movabs rax, 0xdbc17330a5236460
mov qword [rsp + 0x448], rax
movabs rax, 0xc006e4a80c65673b
mov qword [rsp + 0x450], rax
movabs rax, 0x2c16188065985e75
mov qword [rsp + 0x458], rax
mov qword [rsp + 0x480], r14
mov qword [rsp + 0x488], rbx
mov qword [rsp + 0x490], r12
mov qword [rsp + 0x498], r15
mov qword [rsp + 0x4a0], rsi
mov qword [rsp + 0x4a8], r13
movabs rax, 0x2f80b4ba7ff44c51
mov qword [rsp + 0x4b0], rax
movabs rax, 0x2c8fc43767687f76
mov qword [rsp + 0x4b8], rax
movabs rax, 0x651320606f5bd73b
mov qword [rsp + 0x4c0], rax
movabs rax, 0x9c4679357c6a24f8
mov qword [rsp + 0x4c8], rax
movabs rax, 0x87df20de736faf65
mov qword [rsp + 0x4d0], rax
movabs rax, 0x688b8d8b3f9e47fa
mov qword [rsp + 0x4d8], rax
movabs rax, 0xb5c4aa14ed7ec7ef
mov qword [rsp + 0x4e0], rax
movabs rax, 0xbe59adf95c24c6cc
mov qword [rsp + 0x4e8], rax
movabs rax, 0x5bf092125eba86b9
mov qword [rsp + 0x4f0], rax
movabs rax, 0x36cb272f6324a7fe
mov qword [rsp + 0x4f8], rax
movabs rax, 0xa5762c58cc311e43
mov qword [rsp + 0x500], rax
movabs rax, 0xb2d1b4adbced0480
mov qword [rsp + 0x508], rax
movabs rax, 0xbae179d60dae88ad
mov qword [rsp + 0x510], rax
movabs rax, 0x8c4edac3fc1065e2
mov qword [rsp + 0x518], rax
movabs rax, 0xd8b4176cc7472717
mov qword [rsp + 0x520], rax
movabs rax, 0x7eb9b731a60a7034
mov qword [rsp + 0x528], rax
movabs rax, 0xe1c791ea7c32f561
mov qword [rsp + 0x530], rax
movabs rax, 0x7d2c436778226f86
mov qword [rsp + 0x538], rax
movabs rax, 0x46a96c10c9e3544b
mov qword [rsp + 0x540], rax
movabs rax, 0x4e8d56659dc6a508
mov qword [rsp + 0x548], rax
movabs rax, 0x6521fa8ee8ed8375
mov qword [rsp + 0x550], rax
movabs rax, 0xf67df7bb68bfdc8a
mov qword [rsp + 0x558], rax
movabs rax, 0x5a050ac4c4db9dff
mov qword [rsp + 0x560], rax
movabs rax, 0x9b4f08a9b0d30ddc
mov qword [rsp + 0x568], rax
movabs rax, 0x63188542c42badc9
mov qword [rsp + 0x570], rax
movabs rax, 0xafe11d5f8547010e
mov qword [rsp + 0x578], rax
movabs rax, 0xad67838869160853
mov qword [rsp + 0x580], rax
movabs rax, 0x2c1618dd45b92d10
mov qword [rsp + 0x588], rax
movdqa xmm0, xmmword [rsp + 0x350]
xorps xmm0, xmmword [rsp + 0x480]
movdqa xmmword [rsp + 0x350], xmm0
movdqa xmm1, xmmword [rsp + 0x360]
xorps xmm1, xmmword [rsp + 0x490]
movdqa xmmword [rsp + 0x360], xmm1
movdqa xmm0, xmmword [rsp + 0x370]
xorps xmm0, xmmword [rsp + 0x4a0]
movdqa xmmword [rsp + 0x370], xmm0
movdqa xmm1, xmmword [rsp + 0x380]
xorps xmm1, xmmword [rsp + 0x4b0]
movdqa xmmword [rsp + 0x380], xmm1
movdqa xmm0, xmmword [rsp + 0x390]
xorps xmm0, xmmword [rsp + 0x4c0]
movdqa xmmword [rsp + 0x390], xmm0
movdqa xmm1, xmmword [rsp + 0x3a0]
xorps xmm1, xmmword [rsp + 0x4d0]
movdqa xmmword [rsp + 0x3a0], xmm1
movdqa xmm0, xmmword [rsp + 0x3b0]
xorps xmm0, xmmword [rsp + 0x4e0]
movdqa xmmword [rsp + 0x3b0], xmm0
movdqa xmm1, xmmword [rsp + 0x3c0]
xorps xmm1, xmmword [rsp + 0x4f0]
movdqa xmmword [rsp + 0x3c0], xmm1
movdqa xmm0, xmmword [rsp + 0x3d0]
xorps xmm0, xmmword [rsp + 0x500]
movdqa xmmword [rsp + 0x3d0], xmm0
movdqa xmm1, xmmword [rsp + 0x3e0]
xorps xmm1, xmmword [rsp + 0x510]
movdqa xmmword [rsp + 0x3e0], xmm1
movdqa xmm0, xmmword [rsp + 0x3f0]
xorps xmm0, xmmword [rsp + 0x520]
movdqa xmmword [rsp + 0x3f0], xmm0
movdqa xmm1, xmmword [rsp + 0x400]
xorps xmm1, xmmword [rsp + 0x530]
movdqa xmmword [rsp + 0x400], xmm1
movdqa xmm0, xmmword [rsp + 0x410]
xorps xmm0, xmmword [rsp + 0x540]
movdqa xmmword [rsp + 0x410], xmm0
movdqa xmm1, xmmword [rsp + 0x420]
xorps xmm1, xmmword [rsp + 0x550]
movdqa xmmword [rsp + 0x420], xmm1
movdqa xmm0, xmmword [rsp + 0x430]
xorps xmm0, xmmword [rsp + 0x560]
movdqa xmmword [rsp + 0x430], xmm0
movdqa xmm1, xmmword [rsp + 0x440]
xorps xmm1, xmmword [rsp + 0x570]
movdqa xmmword [rsp + 0x440], xmm1
movdqa xmm0, xmmword [rsp + 0x450]
xorps xmm0, xmmword [rsp + 0x580]
movdqa xmmword [rsp + 0x450], xmm0
mov r9d, 0x31
lea r8, [rsp + 0x40]
lea rdx, [rsp + 0x350]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
cmp eax, 1
jne 0x14002bc49
mov edx, 0x1e
lea rcx, [rsp + 0x290]
call fcn.140026f50
nop
movabs rcx, 0xdd0fc6a8309a3f6c
mov qword [rsp + 0x90], rcx
mov qword [rsp + 0x98], rbx
mov qword [rsp + 0x1a0], r14
mov qword [rsp + 0x1a8], rbx
movdqa xmm0, xmmword [rsp + 0x90]
xorps xmm0, xmmword [rsp + 0x1a0]
movdqa xmmword [rsp + 0x90], xmm0
mov r8, rax
lea rdx, [rsp + 0x90]
lea rcx, [rsp + 0x70]
call fcn.140032b20
nop
lea rcx, [rsp + 0x290]
call fcn.14001ac70
movabs r8, 0x61feb23fe5586b11
movabs rcx, 0x89a9ca6c8c68c33
movabs rdx, 0xb15fbec703b41361
nop
mov qword [rsp + 0x110], rdx
mov qword [rsp + 0x118], r8
mov qword [rsp + 0x120], rcx
mov qword [rsp + 0x128], r15
mov qword [rsp + 0x150], r14
mov qword [rsp + 0x158], rbx
mov qword [rsp + 0x160], r12
mov qword [rsp + 0x168], r15
movdqa xmm0, xmmword [rsp + 0x110]
xorps xmm0, xmmword [rsp + 0x150]
movdqa xmmword [rsp + 0x110], xmm0
movdqa xmm1, xmmword [rsp + 0x120]
xorps xmm1, xmmword [rsp + 0x160]
movdqa xmmword [rsp + 0x120], xmm1
lea rdx, [rsp + 0x110]
lea rcx, [rsp + 0x1a0]
call fcn.14001acd0
nop
lea rcx, [rsp + 0x1a0]
call fcn.140024c30
mov rdi, rax
lea rcx, [rsp + 0x1a0]
call fcn.14001ac70
mov qword [rsp + 0x208], r13
mov qword [rsp + 0x150], r14
mov qword [rsp + 0x158], rbx
mov qword [rsp + 0x160], r12
mov qword [rsp + 0x168], r15
mov qword [rsp + 0x170], rsi
mov qword [rsp + 0x178], r13
test rdi, rdi
je 0x1400290b1
movabs rdi, 0xb163afc304a51d47
mov qword [rsp + 0x1e0], rdi
movabs rax, 0x20e7be52b75b3d50
mov qword [rsp + 0x1e8], rax
movabs rax, 0x64cae4c9c1dc864f
mov qword [rsp + 0x1f0], rax
movabs rax, 0xb2d9965187b104b3
mov qword [rsp + 0x1f8], rax
movabs rax, 0xd0c2c03ce8b3f9a9
mov qword [rsp + 0x200], rax
movdqa xmm0, xmmword [rsp + 0x1e0]
xorps xmm0, xmmword [rsp + 0x150]
movdqa xmmword [rsp + 0x1e0], xmm0
movdqa xmm1, xmmword [rsp + 0x1f0]
xorps xmm1, xmmword [rsp + 0x160]
movdqa xmmword [rsp + 0x1f0], xmm1
movdqa xmm0, xmmword [rsp + 0x200]
xorps xmm0, xmmword [rsp + 0x170]
movdqa xmmword [rsp + 0x200], xmm0
lea rcx, [rsp + 0x1e0]
call fcn.140041e30
mov qword [rsp + 0x110], rdi
movabs rax, 0x20e7be52b75b3d50
mov qword [rsp + 0x118], rax
movabs rax, 0x6befeed2c2cc9c78
mov qword [rsp + 0x120], rax
movabs rax, 0xd3c88b76dbe60eb9
mov qword [rsp + 0x128], rax
mov qword [rsp + 0x150], r14
mov qword [rsp + 0x158], rbx
mov qword [rsp + 0x160], r12
mov qword [rsp + 0x168], r15
movdqa xmm0, xmmword [rsp + 0x110]
xorps xmm0, xmmword [rsp + 0x150]
movdqa xmmword [rsp + 0x110], xmm0
movdqa xmm1, xmmword [rsp + 0x120]
xorps xmm1, xmmword [rsp + 0x160]
movdqa xmmword [rsp + 0x120], xmm1
lea rcx, [rsp + 0x110]
call fcn.140041e30
jmp 0x140028e51
movabs rax, 0xba61afc30cb31450
mov qword [rsp + 0x1e0], rax
movabs rax, 0x73fdb819f9546550
mov qword [rsp + 0x1e8], rax
movabs rax, 0x7cf3eed3cedb9a3d
mov qword [rsp + 0x1f0], rax
movabs rax, 0xbdcc9b7090b95dab
mov qword [rsp + 0x1f8], rax
movabs rax, 0xd0c2c012fea6efee
mov qword [rsp + 0x200], rax
movdqa xmm0, xmmword [rsp + 0x1e0]
xorps xmm0, xmmword [rsp + 0x150]
movdqa xmmword [rsp + 0x1e0], xmm0
movdqa xmm1, xmmword [rsp + 0x1f0]
xorps xmm1, xmmword [rsp + 0x160]
movdqa xmmword [rsp + 0x1f0], xmm1
movdqa xmm0, xmmword [rsp + 0x200]
xorps xmm0, xmmword [rsp + 0x170]
movdqa xmmword [rsp + 0x200], xmm0
lea rdx, [rsp + 0x1e0]
lea rcx, [0x1400776f0]
call fcn.14001aec0
mov rcx, rax
lea rdx, [0x14006a938]
call fcn.14001aec0
mov byte [rsp + 0x68], 0
call fcn.1400250b0
movabs rdi, 0x2c8fc43767687f76
test al, al
je 0x140029498
mov byte [rsp + 0x68], 1
movabs rax, 0xfd63a7dd1ba41565
mov qword [rsp + 0x1e0], rax
movabs rax, 0x20efb914ff5e733d
mov qword [rsp + 0x1e8], rax
movabs rax, 0x65e8f3c0d9df854d
mov qword [rsp + 0x1f0], rax
movabs rax, 0xb1cc9d76d5a714f2
mov qword [rsp + 0x1f8], rax
movabs rax, 0xb9a6e040adaff9eb
mov qword [rsp + 0x200], rax
movabs rax, 0x63b59268dd3ff0d7
mov qword [rsp + 0x208], rax
movabs rax, 0x2f80b4ba7ff44c7f
mov qword [rsp + 0x210], rax
mov qword [rsp + 0x218], rdi
mov qword [rsp + 0x150], r14
mov qword [rsp + 0x158], rbx
mov qword [rsp + 0x160], r12
mov qword [rsp + 0x168], r15
mov qword [rsp + 0x170], rsi
mov qword [rsp + 0x178], r13
movabs rax, 0x2f80b4ba7ff44c51
mov qword [rsp + 0x180], rax
mov qword [rsp + 0x188], rdi
movdqa xmm0, xmmword [rsp + 0x1e0]
xorps xmm0, xmmword [rsp + 0x150]
movdqa xmmword [rsp + 0x1e0], xmm0
movdqa xmm1, xmmword [rsp + 0x1f0]
xorps xmm1, xmmword [rsp + 0x160]
movdqa xmmword [rsp + 0x1f0], xmm1
movdqa xmm0, xmmword [rsp + 0x200]
xorps xmm0, xmmword [rsp + 0x170]
movdqa xmmword [rsp + 0x200], xmm0
movdqa xmm1, xmmword [rsp + 0x210]
xorps xmm1, xmmword [rsp + 0x180]
movdqa xmmword [rsp + 0x210], xmm1
lea rdx, [rsp + 0x1e0]
lea rcx, [0x1400776f0]
call fcn.14001aec0
mov rcx, rax
call fcn.1400314d0
movabs rax, 0xb360e98802a51557
mov qword [rsp + 0x1e0], rax
movabs rax, 0x69eef85df2537b1c
mov qword [rsp + 0x1e8], rax
movabs rax, 0x6dfcb1c3c1dc886e
mov qword [rsp + 0x1f0], rax
movabs rax, 0xb582d37687a109b3
mov qword [rsp + 0x1f8], rax
movabs rax, 0xb1aca54ef8bffde2
mov qword [rsp + 0x200], rax
movabs rax, 0x38a68e68e767f4c9
mov qword [rsp + 0x208], rax
movabs rax, 0x41e9dcd91eb92030
mov qword [rsp + 0x210], rax
movabs rax, 0x5ee0a24306042f13
mov qword [rsp + 0x218], rax
movabs rax, 0x651320606f5bd756
mov qword [rsp + 0x220], rax
movabs rcx, 0x9c4679357c6a24f8
mov qword [rsp + 0x228], rcx
mov qword [rsp + 0x2d0], r14
mov qword [rsp + 0x2d8], rbx
mov qword [rsp + 0x2e0], r12
mov qword [rsp + 0x2e8], r15
mov qword [rsp + 0x2f0], rsi
mov qword [rsp + 0x2f8], r13
movabs rax, 0x2f80b4ba7ff44c51
mov qword [rsp + 0x300], rax
mov qword [rsp + 0x308], rdi
movabs rax, 0x651320606f5bd73b
mov qword [rsp + 0x310], rax
mov qword [rsp + 0x318], rcx
movdqa xmm0, xmmword [rsp + 0x1e0]
xorps xmm0, xmmword [rsp + 0x2d0]
movdqa xmmword [rsp + 0x1e0], xmm0
movdqa xmm1, xmmword [rsp + 0x1f0]
xorps xmm1, xmmword [rsp + 0x2e0]
movdqa xmmword [rsp + 0x1f0], xmm1
movdqa xmm0, xmmword [rsp + 0x200]
xorps xmm0, xmmword [rsp + 0x2f0]
movdqa xmmword [rsp + 0x200], xmm0
movdqa xmm1, xmmword [rsp + 0x210]
xorps xmm1, xmmword [rsp + 0x300]
movdqa xmmword [rsp + 0x210], xmm1
movdqa xmm0, xmmword [rsp + 0x220]
xorps xmm0, xmmword [rsp + 0x310]
movdqa xmmword [rsp + 0x220], xmm0
lea rcx, [rsp + 0x1e0]
call fcn.140041e30
call fcn.1400254b0
test al, al
je 0x14002974d
mov byte [rsp + 0x68], 1
movabs rax, 0xfd7cb1c70bb81564
mov qword [rsp + 0x1e0], rax
movabs rax, 0x73e3a10ff24d6b38
mov qword [rsp + 0x1e8], rax
movabs rax, 0x6eeefdcafd9e9b72
mov qword [rsp + 0x1f0], rax
movabs rax, 0xb68d807ad5b90fbd
mov qword [rsp + 0x1f8], rax
movabs rax, 0xace2a459e1a9fde9
mov qword [rsp + 0x200], rax
movabs rax, 0x24be9e60c234f584
mov qword [rsp + 0x208], rax
movabs rax, 0x2f80b4ba51da2b3f
mov qword [rsp + 0x210], rax
mov qword [rsp + 0x218], rdi
mov qword [rsp + 0x150], r14
mov qword [rsp + 0x158], rbx
mov qword [rsp + 0x160], r12
mov qword [rsp + 0x168], r15
mov qword [rsp + 0x170], rsi
mov qword [rsp + 0x178], r13
movabs rax, 0x2f80b4ba7ff44c51
mov qword [rsp + 0x180], rax
mov qword [rsp + 0x188], rdi
movdqa xmm0, xmmword [rsp + 0x1e0]
xorps xmm0, xmmword [rsp + 0x150]
movdqa xmmword [rsp + 0x1e0], xmm0
movdqa xmm1, xmmword [rsp + 0x1f0]
xorps xmm1, xmmword [rsp + 0x160]
movdqa xmmword [rsp + 0x1f0], xmm1
movdqa xmm0, xmmword [rsp + 0x200]
xorps xmm0, xmmword [rsp + 0x170]
movdqa xmmword [rsp + 0x200], xmm0
movdqa xmm1, xmmword [rsp + 0x210]
xorps xmm1, xmmword [rsp + 0x180]
movdqa xmmword [rsp + 0x210], xmm1
lea rdx, [rsp + 0x1e0]
lea rcx, [0x1400776f0]
call fcn.14001aec0
mov rcx, rax
call fcn.1400314d0
movabs rax, 0xb360e98802a51557
mov qword [rsp + 0x1e0], rax
movabs rax, 0x69eef85df2537b1c
mov qword [rsp + 0x1e8], rax
movabs rax, 0x6dfcb1c3c1dc886e
mov qword [rsp + 0x1f0], rax
movabs rax, 0xb582d37687a109b3
mov qword [rsp + 0x1f8], rax
movabs rax, 0xb1aca54ef8bffde2
mov qword [rsp + 0x200], rax
movabs rax, 0x3fb78c78f967f4c9
mov qword [rsp + 0x208], rax
movabs rax, 0x4eece4c810872527
mov qword [rsp + 0x210], rax
movabs rax, 0x2c8fc45a15071902
mov qword [rsp + 0x218], rax
mov qword [rsp + 0x150], r14
mov qword [rsp + 0x158], rbx
mov qword [rsp + 0x160], r12
mov qword [rsp + 0x168], r15
mov qword [rsp + 0x170], rsi
mov qword [rsp + 0x178], r13
movabs rax, 0x2f80b4ba7ff44c51
mov qword [rsp + 0x180], rax
mov qword [rsp + 0x188], rdi
movdqa xmm0, xmmword [rsp + 0x1e0]
xorps xmm0, xmmword [rsp + 0x150]
movdqa xmmword [rsp + 0x1e0], xmm0
movdqa xmm1, xmmword [rsp + 0x1f0]
xorps xmm1, xmmword [rsp + 0x160]
movdqa xmmword [rsp + 0x1f0], xmm1
movdqa xmm0, xmmword [rsp + 0x200]
xorps xmm0, xmmword [rsp + 0x170]
movdqa xmmword [rsp + 0x200], xmm0
movdqa xmm1, xmmword [rsp + 0x210]
xorps xmm1, xmmword [rsp + 0x180]
movdqa xmmword [rsp + 0x210], xmm1
lea rcx, [rsp + 0x1e0]
call fcn.140041e30
call fcn.140026830
movzx ecx, al
movzx eax, byte [rsp + 0x68]
mov edx, 1
test cl, cl
cmovne eax, edx
mov dword [rsp + 0x50], eax
call fcn.140025840
test al, al
je 0x140029995
movabs rax, 0xbf2fa3da1ab51960
mov qword [rsp + 0x1e0], rax
movabs rax, 0x65aaa414b7497d1f
mov qword [rsp + 0x1e8], rax
movabs rax, 0x6fbaf8c3c1dc8873
mov qword [rsp + 0x1f0], rax
movabs rax, 0xaa8d9c679bbd5dbd
mov qword [rsp + 0x1f8], rax
movabs rax, 0xa3ada95eadb9e9e8
mov qword [rsp + 0x200], rax
movabs rax, 0x3ebb9821d533f084
mov qword [rsp + 0x208], rax
movabs rax, 0xef4dd9a1a982e30
mov qword [rsp + 0x210], rax
movabs rax, 0x2c8fc43767687f7c
mov qword [rsp + 0x218], rax
mov qword [rsp + 0x150], r14
mov qword [rsp + 0x158], rbx
mov qword [rsp + 0x160], r12
mov qword [rsp + 0x168], r15
mov qword [rsp + 0x170], rsi
mov qword [rsp + 0x178], r13
movabs rax, 0x2f80b4ba7ff44c51
mov qword [rsp + 0x180], rax
mov qword [rsp + 0x188], rdi
movdqa xmm0, xmmword [rsp + 0x1e0]
xorps xmm0, xmmword [rsp + 0x150]
movdqa xmmword [rsp + 0x1e0], xmm0
movdqa xmm1, xmmword [rsp + 0x1f0]
xorps xmm1, xmmword [rsp + 0x160]
movdqa xmmword [rsp + 0x1f0], xmm1
movdqa xmm0, xmmword [rsp + 0x200]
xorps xmm0, xmmword [rsp + 0x170]
movdqa xmmword [rsp + 0x200], xmm0
movdqa xmm1, xmmword [rsp + 0x210]
xorps xmm1, xmmword [rsp + 0x180]
movdqa xmmword [rsp + 0x210], xmm1
lea rdx, [rsp + 0x1e0]
lea rcx, [0x1400776f0]
call fcn.14001aec0
movabs rax, 0xb36ae6db1cb30e43
mov qword [rsp + 0x110], rax
movabs rax, 0x63aab809b74f7704
mov qword [rsp + 0x118], rax
movabs rax, 0x89a9c88c8cd8671
mov qword [rsp + 0x120], rax
mov qword [rsp + 0x128], r15
mov qword [rsp + 0x150], r14
mov qword [rsp + 0x158], rbx
mov qword [rsp + 0x160], r12
mov qword [rsp + 0x168], r15
movdqa xmm0, xmmword [rsp + 0x110]
xorps xmm0, xmmword [rsp + 0x150]
movdqa xmmword [rsp + 0x110], xmm0
movdqa xmm1, xmmword [rsp + 0x120]
xorps xmm1, xmmword [rsp + 0x160]
movdqa xmmword [rsp + 0x120], xmm1
lea rdx, [rsp + 0x110]
lea rcx, [0x1400776f0]
call fcn.14001aec0
lea rdx, [0x14006a938]
mov rcx, rax
call fcn.14001aec0
lea rcx, [0x140077a70]
call fcn.14002d500
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ExitProcess]
cmp byte [rsp + 0x50], 0
je 0x140029d51
movabs rax, 0xdd0fa3cb06a2135d
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x48], rbx
mov qword [rsp + 0x1a0], r14
mov qword [rsp + 0x1a8], rbx
movdqa xmm0, xmmword [rsp + 0x40]
xorps xmm0, xmmword [rsp + 0x1a0]
movdqa xmmword [rsp + 0x40], xmm0
movabs rax, 0xbe2fb4dd008f5c68
mov qword [rsp + 0x2d0], rax
movabs rax, 0x20f8b209e24d7f1f
mov qword [rsp + 0x2d8], rax
movabs rax, 0x6cfff9c88dc78870
mov qword [rsp + 0x2e0], rax
movabs rax, 0xb2d9807687f41cf2
mov qword [rsp + 0x2e8], rax
movabs rax, 0xb5b6a65dadeae8f5
mov qword [rsp + 0x2f0], rax
movabs rax, 0x24b99f68dd3eb1d6
mov qword [rsp + 0x2f8], rax
movabs rax, 0xfa7dfd558d42b3f
mov qword [rsp + 0x300], rax
movabs rax, 0xce3a85e10480b1f
mov qword [rsp + 0x308], rax
movabs rax, 0x456752011b28b249
mov qword [rsp + 0x310], rax
movabs rax, 0xef661c5e1d070484
mov qword [rsp + 0x318], rax
movabs rax, 0xf4ff4faa530add10
mov qword [rsp + 0x320], rax
movabs rax, 0x1cf2e3ea1ffb319b
mov qword [rsp + 0x328], rax
movabs rax, 0xd3a1c8348a10ae87
mov qword [rsp + 0x330], rax
movabs rax, 0xca37c29a7c41b4a3
mov qword [rsp + 0x338], rax
movabs rax, 0x6d0f57c37cfe8d0
mov qword [rsp + 0x340], rax
movabs rcx, 0x36cb272f6324a7fe
mov qword [rsp + 0x348], rcx
mov qword [rsp + 0x1e0], r14
mov qword [rsp + 0x1e8], rbx
mov qword [rsp + 0x1f0], r12
mov qword [rsp + 0x1f8], r15
mov qword [rsp + 0x200], rsi
mov qword [rsp + 0x208], r13
movabs rax, 0x2f80b4ba7ff44c51
mov qword [rsp + 0x210], rax
mov qword [rsp + 0x218], rdi
movabs rax, 0x651320606f5bd73b
mov qword [rsp + 0x220], rax
movabs rax, 0x9c4679357c6a24f8
mov qword [rsp + 0x228], rax
movabs rax, 0x87df20de736faf65
mov qword [rsp + 0x230], rax
movabs rax, 0x688b8d8b3f9e47fa
mov qword [rsp + 0x238], rax
movabs rax, 0xb5c4aa14ed7ec7ef
mov qword [rsp + 0x240], rax
movabs rax, 0xbe59adf95c24c6cc
mov qword [rsp + 0x248], rax
movabs rax, 0x5bf092125eba86b9
mov qword [rsp + 0x250], rax
mov qword [rsp + 0x258], rcx
movdqa xmm0, xmmword [rsp + 0x2d0]
xorps xmm0, xmmword [rsp + 0x1e0]
movdqa xmmword [rsp + 0x2d0], xmm0
movdqa xmm1, xmmword [rsp + 0x2e0]
xorps xmm1, xmmword [rsp + 0x1f0]
movdqa xmmword [rsp + 0x2e0], xmm1
movdqa xmm0, xmmword [rsp + 0x2f0]
xorps xmm0, xmmword [rsp + 0x200]
movdqa xmmword [rsp + 0x2f0], xmm0
movdqa xmm1, xmmword [rsp + 0x300]
xorps xmm1, xmmword [rsp + 0x210]
movdqa xmmword [rsp + 0x300], xmm1
movdqa xmm0, xmmword [rsp + 0x310]
xorps xmm0, xmmword [rsp + 0x220]
movdqa xmmword [rsp + 0x310], xmm0
movdqa xmm1, xmmword [rsp + 0x320]
xorps xmm1, xmmword [rsp + 0x230]
movdqa xmmword [rsp + 0x320], xmm1
movdqa xmm0, xmmword [rsp + 0x330]
xorps xmm0, xmmword [rsp + 0x240]
movdqa xmmword [rsp + 0x330], xmm0
movdqa xmm1, xmmword [rsp + 0x340]
xorps xmm1, xmmword [rsp + 0x250]
movdqa xmmword [rsp + 0x340], xmm1
mov r9d, 0x31
lea r8, [rsp + 0x40]
lea rdx, [rsp + 0x2d0]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
test eax, eax
jne 0x140029d51
movabs rax, 0xb378a9cc1ba31440
mov qword [rsp + 0x110], rax
movabs rax, 0x30aaa352b74f3d50
mov qword [rsp + 0x118], rax
mov qword [rsp + 0x120], r12
mov qword [rsp + 0x128], r15
mov qword [rsp + 0x150], r14
mov qword [rsp + 0x158], rbx
mov qword [rsp + 0x160], r12
mov qword [rsp + 0x168], r15
movdqa xmm0, xmmword [rsp + 0x110]
xorps xmm0, xmmword [rsp + 0x150]
movdqa xmmword [rsp + 0x110], xmm0
movdqa xmm1, xmmword [rsp + 0x120]
xorps xmm1, xmmword [rsp + 0x160]
movdqa xmmword [rsp + 0x120], xmm1
lea rcx, [rsp + 0x110]
call fcn.140041e30
nop
xor eax, eax
mov dword [rsp + 0x50], eax
movabs rcx, 0xad5ab5e933f8206f
mov qword [rsp + 0x40], rcx
movabs rcx, 0x8ab814f2497314
mov qword [rsp + 0x48], rcx
mov qword [rsp + 0x280], r14
mov qword [rsp + 0x288], rbx
movdqa xmm0, xmmword [rsp + 0x40]
xorps xmm0, xmmword [rsp + 0x280]
movdqa xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
mov edx, 0xc0000000
lea rcx, [rsp + 0x40]
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [0x140079440], rax
cmp rax, 0xffffffffffffffff
jne 0x140029f9b
mov qword [rsp + 0x1a0], r14
mov qword [rsp + 0x1a8], rbx
lea rsi, [0x14006ab50]
movdqa xmm6, xmmword [rsp + 0x1a0]
lea rcx, [rsp + 0x70]
call fcn.14001ac60
mov rdx, rax
lea rcx, [rsp + 0x150]
call fcn.14001acd0
mov r9d, 0x3680
mov r8, rsi
mov rdx, rax
lea rcx, [rsp + 0x1e0]
call fcn.140022b90
nop
movabs rax, 0xaf4ba2c9009a087d
mov qword [rsp + 0x260], rax
movabs rax, 0x8af747e5586419
mov qword [rsp + 0x268], rax
movdqa xmm0, xmmword [rsp + 0x260]
xorps xmm0, xmm6
movdqa xmmword [rsp + 0x260], xmm0
lea rdx, [rsp + 0x260]
lea rcx, [0x1400776f0]
call fcn.14001aec0
mov rsi, rax
mov edx, dword [rsp + 0x200]
lea rcx, [rsp + 0x110]
call fcn.1400209e0
nop
mov rdi, qword [rax + 0x10]
mov rcx, rax
call fcn.14001ac60
mov r8, rdi
mov rdx, rax
mov rcx, rsi
call fcn.140035450
mov rcx, rax
call fcn.1400314d0
nop
lea rcx, [rsp + 0x110]
call fcn.14001ac70
cmp dword [rsp + 0x200], 0
jl 0x140029f89
mov edi, dword [rsp + 0x50]
inc edi
mov dword [rsp + 0x50], edi
lea rcx, [rsp + 0x1e0]
call fcn.14001ac70
movabs rax, 0xad5ab5e933f8206f
mov qword [rsp + 0x40], rax
movabs rax, 0x8ab814f2497314
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x280], r14
mov qword [rsp + 0x288], rbx
movdqa xmm0, xmmword [rsp + 0x40]
xorps xmm0, xmmword [rsp + 0x280]
movdqa xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
mov edx, 0xc0000000
lea rcx, [rsp + 0x40]
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [0x140079440], rax
cmp rax, 0xffffffffffffffff
lea rsi, [0x14006ab50]
je 0x140029df5
movabs rsi, 0xd0c2c03c8dcb9c87
test edi, edi
je 0x140029f9b
movabs rdi, 0x2c8fc43767687f76
jmp 0x14002a2be
lea rcx, [rsp + 0x1e0]
call fcn.14001ac70
jmp 0x14002b60f
movabs rax, 0xbf6eb4cd01ba0945
mov qword [rsp + 0x150], rax
movabs rax, 0x65fcbe0ff31d771c
mov qword [rsp + 0x158], rax
movabs rax, 0x7af6fd86ded7c96f
mov qword [rsp + 0x160], rax
movabs rax, 0xbdd881338cb01cb7
mov qword [rsp + 0x168], rax
movabs rax, 0xa0e2bc1ceaa5f5e9
mov qword [rsp + 0x170], rax
movabs rax, 0x20f28f72d43efed6
mov qword [rsp + 0x178], rax
movabs rax, 0xeecdddb19d43530
mov qword [rsp + 0x180], rax
movabs rdi, 0x2c8fc43767687f76
mov qword [rsp + 0x188], rdi
mov qword [rsp + 0x110], r14
mov qword [rsp + 0x118], rbx
mov qword [rsp + 0x120], r12
mov qword [rsp + 0x128], r15
mov qword [rsp + 0x130], rsi
mov qword [rsp + 0x138], r13
movabs rax, 0x2f80b4ba7ff44c51
mov qword [rsp + 0x140], rax
mov qword [rsp + 0x148], rdi
movdqa xmm0, xmmword [rsp + 0x150]
xorps xmm0, xmmword [rsp + 0x110]
movdqa xmmword [rsp + 0x150], xmm0
movdqa xmm1, xmmword [rsp + 0x160]
xorps xmm1, xmmword [rsp + 0x120]
movdqa xmmword [rsp + 0x160], xmm1
movdqa xmm0, xmmword [rsp + 0x170]
xorps xmm0, xmmword [rsp + 0x130]
movdqa xmmword [rsp + 0x170], xmm0
movdqa xmm1, xmmword [rsp + 0x180]
xorps xmm1, xmmword [rsp + 0x140]
movdqa xmmword [rsp + 0x180], xmm1
lea rdx, [rsp + 0x150]
lea rcx, [0x1400776f0]
call fcn.14001aec0
mov rcx, rax
lea rdx, [0x14006a938]
call fcn.14001aec0
movabs rax, 0xb16ee6db06f6087a
mov qword [rsp + 0x2d0], rax
movabs rax, 0x6de5b418e51d7d03
mov qword [rsp + 0x2d8], rax
movabs rax, 0x7cbaf8c3c9d08c70
mov qword [rsp + 0x2e0], rax
movabs rax, 0xa1cc876090a65dbd
mov qword [rsp + 0x2e8], rax
movabs rax, 0xb3e2b249e2b2bcf3
mov qword [rsp + 0x2f0], rax
movabs rax, 0x6da09975c42dfccb
mov qword [rsp + 0x2f8], rax
movabs rax, 0x40f494ce0c862537
mov qword [rsp + 0x300], rax
movabs rax, 0x49e9a544470d1d56
mov qword [rsp + 0x308], rax
movabs rax, 0x651320606f5bd71a
mov qword [rsp + 0x310], rax
movabs rcx, 0x9c4679357c6a24f8
mov qword [rsp + 0x318], rcx
mov qword [rsp + 0x150], r14
mov qword [rsp + 0x158], rbx
mov qword [rsp + 0x160], r12
mov qword [rsp + 0x168], r15
mov qword [rsp + 0x170], rsi
mov qword [rsp + 0x178], r13
movabs rax, 0x2f80b4ba7ff44c51
mov qword [rsp + 0x180], rax
mov qword [rsp + 0x188], rdi
movabs rax, 0x651320606f5bd73b
mov qword [rsp + 0x190], rax
mov qword [rsp + 0x198], rcx
movdqa xmm0, xmmword [rsp + 0x2d0]
xorps xmm0, xmmword [rsp + 0x150]
movdqa xmmword [rsp + 0x2d0], xmm0
movdqa xmm1, xmmword [rsp + 0x2e0]
xorps xmm1, xmmword [rsp + 0x160]
movdqa xmmword [rsp + 0x2e0], xmm1
movdqa xmm0, xmmword [rsp + 0x2f0]
xorps xmm0, xmmword [rsp + 0x170]
movdqa xmmword [rsp + 0x2f0], xmm0
movdqa xmm1, xmmword [rsp + 0x300]
xorps xmm1, xmmword [rsp + 0x180]
movdqa xmmword [rsp + 0x300], xmm1
movdqa xmm0, xmmword [rsp + 0x310]
xorps xmm0, xmmword [rsp + 0x190]
movdqa xmmword [rsp + 0x310], xmm0
lea rdx, [rsp + 0x2d0]
lea rcx, [0x1400776f0]
call fcn.14001aec0
mov rcx, rax
lea rdx, [0x14006a938]
call fcn.14001aec0
nop
movabs rax, 0x9476b4cd1a87087d
mov qword [rsp + 0x150], rax
movabs rax, 0x69feb610e552741e
mov qword [rsp + 0x158], rax
movabs rax, 0x89af1c9d9ff8772
mov qword [rsp + 0x160], rax
mov qword [rsp + 0x168], r15
mov qword [rsp + 0x110], r14
mov qword [rsp + 0x118], rbx
mov qword [rsp + 0x120], r12
mov qword [rsp + 0x128], r15
movdqa xmm0, xmmword [rsp + 0x150]
xorps xmm0, xmmword [rsp + 0x110]
movdqa xmmword [rsp + 0x150], xmm0
movdqa xmm1, xmmword [rsp + 0x160]
xorps xmm1, xmmword [rsp + 0x120]
movdqa xmmword [rsp + 0x160], xmm1
movabs rax, 0xb16be8c403b2085d
mov qword [rsp + 0x260], rax
movabs rax, 0x8ad77d973d121c
mov qword [rsp + 0x268], rax
mov qword [rsp + 0x1a0], r14
mov qword [rsp + 0x1a8], rbx
movdqa xmm0, xmmword [rsp + 0x260]
xorps xmm0, xmmword [rsp + 0x1a0]
movdqa xmmword [rsp + 0x260], xmm0
lea rcx, [rsp + 0x260]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, [rsp + 0x150]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x140079450], rax
test rax, rax
je 0x14002b5c7
movabs rax, 0xfd68a8c10bb7135f
mov qword [rsp + 0x110], rax
movabs rax, 0x73e3bf09b7507606
mov qword [rsp + 0x118], rax
movabs rax, 0x66fef0d3c2d69a3d
mov qword [rsp + 0x120], rax
movabs rax, 0xbcc1d37697f409f5
mov qword [rsp + 0x128], rax
movabs rax, 0xd0c2c03ca3e5fbe9
mov qword [rsp + 0x130], rax
mov qword [rsp + 0x138], r13
mov qword [rsp + 0x1a0], r14
mov qword [rsp + 0x1a8], rbx
mov qword [rsp + 0x1b0], r12
mov qword [rsp + 0x1b8], r15
mov qword [rsp + 0x1c0], rsi
mov qword [rsp + 0x1c8], r13
movdqa xmm0, xmmword [rsp + 0x110]
xorps xmm0, xmmword [rsp + 0x1a0]
movdqa xmmword [rsp + 0x110], xmm0
movdqa xmm1, xmmword [rsp + 0x120]
xorps xmm1, xmmword [rsp + 0x1b0]
movdqa xmmword [rsp + 0x120], xmm1
movdqa xmm0, xmmword [rsp + 0x130]
xorps xmm0, xmmword [rsp + 0x1c0]
movdqa xmmword [rsp + 0x130], xmm0
lea rdx, [rsp + 0x110]
lea rcx, [0x1400776f0]
call fcn.14001aec0
mov rcx, rax
call fcn.1400314d0
call fcn.14001eab0
test al, al
jne 0x14002a4eb
movabs rdi, 0xd0c2c03c8dcb9c87
movabs rsi, 0x2c8fc43767687f76
jmp 0x14002b623
mov byte [rsp + 0x68], 0
lea rcx, [rsp + 0x68]
call fcn.14001f7f0
cmp byte [rsp + 0x68], 0
jne 0x14002ac15
movabs rax, 0xe75294e73d843968
mov qword [rsp + 0x350], rax
movabs rax, 0x20eeb211fe5c7450
mov qword [rsp + 0x358], rax
movabs rax, 0x28fef2cfcb9e8669
mov qword [rsp + 0x360], rax
movabs rax, 0xbdc29a6796ba08b4
mov qword [rsp + 0x368], rax
movabs rax, 0xf0b1a954f9ebe0a7
mov qword [rsp + 0x370], rax
movabs rax, 0x3ea19521d07de2cd
mov qword [rsp + 0x378], rax
movabs rax, 0x47f494d410d42924
mov qword [rsp + 0x380], rax
movabs rax, 0x5fafb652141d5f13
mov qword [rsp + 0x388], rax
movabs rax, 0xa60001c4f3eb352
mov qword [rsp + 0x390], rax
movabs rax, 0xbc21175c141e4195
mov qword [rsp + 0x398], rax
movabs rax, 0xe5ff45bc5316ce08
mov qword [rsp + 0x3a0], rax
movabs rax, 0x48ece3e254fd2896
mov qword [rsp + 0x3a8], rax
movabs rax, 0xd6abd864cd1baf9b
mov qword [rsp + 0x3b0], rax
movabs rax, 0xdd79df967c57b5a9
mov qword [rsp + 0x3b8], rax
movabs rax, 0x7b96fb3235d9e3d1
mov qword [rsp + 0x3c0], rax
movabs rax, 0x42b85e5c435dc99f
mov qword [rsp + 0x3c8], rax
movabs rax, 0xd6134031aa117326
mov qword [rsp + 0x3d0], rax
movabs rax, 0xc0bed78dd99f65a0
mov qword [rsp + 0x3d8], rax
movabs rax, 0xbac01db379defddf
mov qword [rsp + 0x3e0], rax
movabs rcx, 0x8c4edac3fc1065e2
mov qword [rsp + 0x3e8], rcx
mov qword [rsp + 0x480], r14
mov qword [rsp + 0x488], rbx
mov qword [rsp + 0x490], r12
mov qword [rsp + 0x498], r15
mov qword [rsp + 0x4a0], rsi
mov qword [rsp + 0x4a8], r13
movabs rax, 0x2f80b4ba7ff44c51
mov qword [rsp + 0x4b0], rax
mov qword [rsp + 0x4b8], rdi
movabs rax, 0x651320606f5bd73b
mov qword [rsp + 0x4c0], rax
movabs rax, 0x9c4679357c6a24f8
mov qword [rsp + 0x4c8], rax
movabs rax, 0x87df20de736faf65
mov qword [rsp + 0x4d0], rax
movabs rax, 0x688b8d8b3f9e47fa
mov qword [rsp + 0x4d8], rax
movabs rax, 0xb5c4aa14ed7ec7ef
mov qword [rsp + 0x4e0], rax
movabs rax, 0xbe59adf95c24c6cc
mov qword [rsp + 0x4e8], rax
movabs rax, 0x5bf092125eba86b9
mov qword [rsp + 0x4f0], rax
movabs rax, 0x36cb272f6324a7fe
mov qword [rsp + 0x4f8], rax
movabs rax, 0xa5762c58cc311e43
mov qword [rsp + 0x500], rax
movabs rax, 0xb2d1b4adbced0480
mov qword [rsp + 0x508], rax
movabs rax, 0xbae179d60dae88ad
mov qword [rsp + 0x510], rax
mov qword [rsp + 0x518], rcx
movdqa xmm0, xmmword [rsp + 0x350]
xorps xmm0, xmmword [rsp + 0x480]
movdqa xmmword [rsp + 0x350], xmm0
movdqa xmm1, xmmword [rsp + 0x360]
xorps xmm1, xmmword [rsp + 0x490]
movdqa xmmword [rsp + 0x360], xmm1
movdqa xmm0, xmmword [rsp + 0x370]
xorps xmm0, xmmword [rsp + 0x4a0]
movdqa xmmword [rsp + 0x370], xmm0
movdqa xmm1, xmmword [rsp + 0x380]
xorps xmm1, xmmword [rsp + 0x4b0]
movdqa xmmword [rsp + 0x380], xmm1
movdqa xmm0, xmmword [rsp + 0x390]
xorps xmm0, xmmword [rsp + 0x4c0]
movdqa xmmword [rsp + 0x390], xmm0
movdqa xmm1, xmmword [rsp + 0x3a0]
xorps xmm1, xmmword [rsp + 0x4d0]
movdqa xmmword [rsp + 0x3a0], xmm1
movdqa xmm0, xmmword [rsp + 0x3b0]
xorps xmm0, xmmword [rsp + 0x4e0]
movdqa xmmword [rsp + 0x3b0], xmm0
movdqa xmm1, xmmword [rsp + 0x3c0]
xorps xmm1, xmmword [rsp + 0x4f0]
movdqa xmmword [rsp + 0x3c0], xmm1
movdqa xmm0, xmmword [rsp + 0x3d0]
xorps xmm0, xmmword [rsp + 0x500]
movdqa xmmword [rsp + 0x3d0], xmm0
movdqa xmm1, xmmword [rsp + 0x3e0]
xorps xmm1, xmmword [rsp + 0x510]
movdqa xmmword [rsp + 0x3e0], xmm1
lea rdx, [rsp + 0x350]
lea rcx, [0x1400776f0]
call fcn.14001aec0
lea rdx, [0x14006a938]
mov rcx, rax
call fcn.14001aec0
movabs rax, 0xbc2fb3c716f61a5a
mov qword [rsp + 0x480], rax
movabs rax, 0x6feeb914e01d7702
mov qword [rsp + 0x488], rax
movabs rax, 0x6de8bc979c9e9a6a
mov qword [rsp + 0x490], rax
movabs rax, 0xbec2903381bb12b0
mov qword [rsp + 0x498], rax
movabs rax, 0xbea3e04ee8bfe9f7
mov qword [rsp + 0x4a0], rax
movabs rax, 0x3ef2996ad030b1c0
mov qword [rsp + 0x4a8], rax
movabs rax, 0x5ae3d1c95f913e24
mov qword [rsp + 0x4b0], rax
movabs rax, 0xfbab5805481a04
mov qword [rsp + 0x4b8], rax
movabs rax, 0xc45004c220b831b
mov qword [rsp + 0x4c0], rax
movabs rax, 0xfd3c10591d1f508a
mov qword [rsp + 0x4c8], rax
movabs rax, 0xe3b141fe1d00c611
mov qword [rsp + 0x4d0], rax
movabs rax, 0xee2a5ab72cd04da
mov qword [rsp + 0x4d8], rax
movabs rax, 0xc3a5c2349811becf
mov qword [rsp + 0x4e0], rax
movabs rax, 0x9e258dd0284de6a9
mov qword [rsp + 0x4e8], rax
movabs rax, 0x3496ba321dead6fa
mov qword [rsp + 0x4f0], rax
movabs rax, 0x5feb0e6b2e65878c
mov qword [rsp + 0x4f8], rax
movabs rax, 0xc9144d2ba5553e30
mov qword [rsp + 0x500], rax
movabs rax, 0xb2d1b4adbccc60e5
mov qword [rsp + 0x508], rax
mov qword [rsp + 0x350], r14
mov qword [rsp + 0x358], rbx
mov qword [rsp + 0x360], r12
mov qword [rsp + 0x368], r15
mov qword [rsp + 0x370], rsi
mov qword [rsp + 0x378], r13
movabs rax, 0x2f80b4ba7ff44c51
mov qword [rsp + 0x380], rax
mov qword [rsp + 0x388], rdi
movabs rax, 0x651320606f5bd73b
mov qword [rsp + 0x390], rax
movabs rax, 0x9c4679357c6a24f8
mov qword [rsp + 0x398], rax
movabs rax, 0x87df20de736faf65
mov qword [rsp + 0x3a0], rax
movabs rax, 0x688b8d8b3f9e47fa
mov qword [rsp + 0x3a8], rax
movabs rax, 0xb5c4aa14ed7ec7ef
mov qword [rsp + 0x3b0], rax
movabs rax, 0xbe59adf95c24c6cc
mov qword [rsp + 0x3b8], rax
movabs rax, 0x5bf092125eba86b9
mov qword [rsp + 0x3c0], rax
movabs rax, 0x36cb272f6324a7fe
mov qword [rsp + 0x3c8], rax
movabs rax, 0xa5762c58cc311e43
mov qword [rsp + 0x3d0], rax
movabs rax, 0xb2d1b4adbced0480
mov qword [rsp + 0x3d8], rax
movdqa xmm0, xmmword [rsp + 0x480]
xorps xmm0, xmmword [rsp + 0x350]
movdqa xmmword [rsp + 0x480], xmm0
movdqa xmm1, xmmword [rsp + 0x490]
xorps xmm1, xmmword [rsp + 0x360]
movdqa xmmword [rsp + 0x490], xmm1
movdqa xmm0, xmmword [rsp + 0x4a0]
xorps xmm0, xmmword [rsp + 0x370]
movdqa xmmword [rsp + 0x4a0], xmm0
movdqa xmm1, xmmword [rsp + 0x4b0]
xorps xmm1, xmmword [rsp + 0x380]
movdqa xmmword [rsp + 0x4b0], xmm1
movdqa xmm0, xmmword [rsp + 0x4c0]
xorps xmm0, xmmword [rsp + 0x390]
movdqa xmmword [rsp + 0x4c0], xmm0
movdqa xmm1, xmmword [rsp + 0x4d0]
xorps xmm1, xmmword [rsp + 0x3a0]
movdqa xmmword [rsp + 0x4d0], xmm1
movdqa xmm0, xmmword [rsp + 0x4e0]
xorps xmm0, xmmword [rsp + 0x3b0]
movdqa xmmword [rsp + 0x4e0], xmm0
movdqa xmm1, xmmword [rsp + 0x4f0]
xorps xmm1, xmmword [rsp + 0x3c0]
movdqa xmmword [rsp + 0x4f0], xmm1
movdqa xmm0, xmmword [rsp + 0x500]
xorps xmm0, xmmword [rsp + 0x3d0]
movdqa xmmword [rsp + 0x500], xmm0
lea rdx, [rsp + 0x480]
lea rcx, [0x1400776f0]
call fcn.14001aec0
lea rdx, [0x14006a938]
mov rcx, rax
call fcn.14001aec0
nop
movabs rdi, 0xd0c2c03c8dcb9c87
movabs rsi, 0x2c8fc43767687f76
jmp 0x14002b623
cmp dword [rsp + 0x50], 0
je 0x14002adfa
movabs rax, 0xbe6ab5881cbf1447
mov qword [rsp + 0x110], rax
movabs rax, 0x6fe2a45df9527b04
mov qword [rsp + 0x118], rax
movabs rax, 0x7cbae881c3da8568
mov qword [rsp + 0x120], rax
movabs rax, 0xb4c39c7fd5b116b3
mov qword [rsp + 0x128], rax
movabs rax, 0xa2a3a550eeebe0a7
mov qword [rsp + 0x130], rax
movabs rax, 0x39a09962913affcd
mov qword [rsp + 0x138], rax
movabs rax, 0x4ce1c6ce5f9a2530
mov qword [rsp + 0x140], rax
movabs rax, 0x2c8fc43749460c13
mov qword [rsp + 0x148], rax
mov qword [rsp + 0x1a0], r14
mov qword [rsp + 0x1a8], rbx
mov qword [rsp + 0x1b0], r12
mov qword [rsp + 0x1b8], r15
mov qword [rsp + 0x1c0], rsi
mov qword [rsp + 0x1c8], r13
movabs rax, 0x2f80b4ba7ff44c51
mov qword [rsp + 0x1d0], rax
mov qword [rsp + 0x1d8], rdi
movdqa xmm0, xmmword [rsp + 0x110]
xorps xmm0, xmmword [rsp + 0x1a0]
movdqa xmmword [rsp + 0x110], xmm0
movdqa xmm1, xmmword [rsp + 0x120]
xorps xmm1, xmmword [rsp + 0x1b0]
movdqa xmmword [rsp + 0x120], xmm1
movdqa xmm0, xmmword [rsp + 0x130]
xorps xmm0, xmmword [rsp + 0x1c0]
movdqa xmmword [rsp + 0x130], xmm0
movdqa xmm1, xmmword [rsp + 0x140]
xorps xmm1, xmmword [rsp + 0x1d0]
movdqa xmmword [rsp + 0x140], xmm1
lea rdx, [rsp + 0x110]
lea rcx, [0x1400776f0]
call fcn.14001aec0
mov rcx, rax
call fcn.1400314d0
mov eax, 0x5a4d
cmp word [0x14006ab50], ax
jne 0x14002ada3
movsxd rax, dword [0x14006ab8c]
lea rcx, [0x14006ab50]
add rax, 8
add rax, rcx
jmp 0x14002ada8
mov eax, 4
mov eax, dword [rax]
mov dword [rsp + 0x280], eax
lea rcx, [rsp + 0x70]
call fcn.14001ac60
mov rdx, rax
lea rcx, [rsp + 0x110]
call fcn.14001acd0
nop
mov edx, dword [rsp + 0x280]
lea rcx, [rsp + 0x110]
call fcn.140020de0
nop
lea rcx, [rsp + 0x110]
call fcn.14001ac70
mov rcx, qword [0x140079440]
call fcn.140021920
mov rcx, qword [0x140079440]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rdx, [0x140079470]
lea rcx, [0x140079488]
call fcn.140020950
movabs rax, 0xbb2fabcd1ba50540
mov qword [rsp + 0x110], rax
movabs rax, 0x68e9b61eb7587e19
mov qword [rsp + 0x118], rax
movabs rax, 0x89a9ca6ad9ed378
mov qword [rsp + 0x120], rax
mov qword [rsp + 0x128], r15
mov qword [rsp + 0x1a0], r14
mov qword [rsp + 0x1a8], rbx
mov qword [rsp + 0x1b0], r12
mov qword [rsp + 0x1b8], r15
movdqa xmm0, xmmword [rsp + 0x110]
xorps xmm0, xmmword [rsp + 0x1a0]
movdqa xmmword [rsp + 0x110], xmm0
movdqa xmm1, xmmword [rsp + 0x120]
xorps xmm1, xmmword [rsp + 0x1b0]
movdqa xmmword [rsp + 0x120], xmm1
lea rdx, [rsp + 0x110]
lea rcx, [0x1400776f0]
call fcn.14001aec0
mov rdx, qword [0x140079478]
sub rdx, qword [0x140079470]
mov rcx, rax
call fcn.14002daf0
movabs rcx, 0xdd05b5cd1baf1e13
mov qword [rsp + 0x460], rcx
mov qword [rsp + 0x468], rbx
mov qword [rsp + 0x1a0], r14
mov qword [rsp + 0x1a8], rbx
movdqa xmm0, xmmword [rsp + 0x460]
xorps xmm0, xmmword [rsp + 0x1a0]
movdqa xmmword [rsp + 0x460], xmm0
lea rdx, [rsp + 0x460]
mov rcx, rax
call fcn.14001aec0
mov rcx, qword [0x140079470]
mov qword [0x140079458], rcx
movsxd rax, dword [rcx + 0x3c]
add rcx, rax
mov qword [0x140079468], rcx
movzx eax, word [rcx + 0x14]
add rcx, 0x18
add rcx, rax
mov qword [0x140079460], rcx
mov byte [rsp + 0x69], 0
lea rdx, [rsp + 0x69]
lea rcx, [rsp + 0x110]
call fcn.140032c00
mov rcx, rax
call fcn.140020110
call fcn.1400202c0
mov rcx, qword [0x1400794a8]
sub rcx, qword [0x1400794a0]
call fcn.140020550
mov qword [rsp + 0x280], rax
test rax, rax
jne 0x14002b079
movabs rax, 0xa92fa3c40db71266
mov qword [rsp + 0x110], rax
movabs rax, 0x61e9b811fb5c321f
mov qword [rsp + 0x118], rax
movabs rax, 0x7af5f1c3c09e8c69
mov qword [rsp + 0x120], rax
movabs rax, 0xd3adf313f5d45cab
mov qword [rsp + 0x128], rax
mov qword [rsp + 0x1a0], r14
mov qword [rsp + 0x1a8], rbx
mov qword [rsp + 0x1b0], r12
mov qword [rsp + 0x1b8], r15
movdqa xmm0, xmmword [rsp + 0x110]
xorps xmm0, xmmword [rsp + 0x1a0]
movdqa xmmword [rsp + 0x110], xmm0
movdqa xmm1, xmmword [rsp + 0x120]
xorps xmm1, xmmword [rsp + 0x1b0]
movdqa xmmword [rsp + 0x120], xmm1
lea rdx, [rsp + 0x110]
lea rcx, [0x1400776f0]
call fcn.14001aec0
lea rdx, [0x14006a938]
mov rcx, rax
call fcn.14001aec0
nop
movabs rdi, 0xd0c2c03c8dcb9c87
movabs rsi, 0x2c8fc43767687f76
jmp 0x14002b623
mov rcx, rax
call fcn.1400203d0
mov r8, qword [0x1400794a8]
mov rdx, qword [0x1400794a0]
sub r8, rdx
mov rcx, qword [rsp + 0x280]
call fcn.140020820
mov rax, qword [0x140079468]
mov eax, dword [rax + 0x28]
add rax, qword [rsp + 0x280]
mov qword [rsp + 0x460], rax
movabs rax, 0xb27fe6d11da21256
mov qword [rsp + 0x1a0], rax
movabs rax, 0x8ad75dad497c19
mov qword [rsp + 0x1a8], rax
mov qword [rsp + 0x110], r14
mov qword [rsp + 0x118], rbx
movdqa xmm0, xmmword [rsp + 0x1a0]
xorps xmm0, xmmword [rsp + 0x110]
movdqa xmmword [rsp + 0x1a0], xmm0
lea rdx, [rsp + 0x1a0]
lea rcx, [0x1400776f0]
call fcn.14001aec0
mov rdx, qword [rsp + 0x460]
mov rcx, rax
call fcn.14002daf0
lea rdx, [0x14006a938]
mov rcx, rax
call fcn.14001aec0
mov r8, qword [0x1400794a8]
sub r8, qword [0x1400794a0]
mov rdx, qword [rsp + 0x280]
mov rcx, qword [rsp + 0x460]
call fcn.140032c20
test eax, eax
js 0x14002b5b1
cmp dword [rsp + 0x50], 0
je 0x14002b1a2
lea rcx, [rsp + 0x70]
call fcn.14001ac60
mov rdx, rax
lea rcx, [rsp + 0x110]
call fcn.14001acd0
nop
lea rcx, [rsp + 0x110]
call fcn.140022d00
nop
lea rcx, [rsp + 0x110]
call fcn.14001ac70
movabs rax, 0xb87fb6c922f62739
mov qword [rsp + 0x480], rax
movabs rax, 0x72e5b118f51d3e14
mov qword [rsp + 0x488], rax
movabs rax, 0x64eabcd3c2c7c978
mov qword [rsp + 0x490], rax
movabs rax, 0xb48d8a7d94f404b3
mov qword [rsp + 0x498], rax
movabs rax, 0xb5aab453adaef1e6
mov qword [rsp + 0x4a0], rax
movabs rax, 0x3ff29260d929b1d6
mov qword [rsp + 0x4a8], rax
movabs rax, 0x5da098c210982e3e
mov qword [rsp + 0x4b0], rax
movabs rax, 0x55afb045061c0c13
mov qword [rsp + 0x4b8], rax
movabs rax, 0x157e4f034f29a254
mov qword [rsp + 0x4c0], rax
movabs rax, 0xee2f1f150e0f508d
mov qword [rsp + 0x4c8], rax
movabs rax, 0xa7842a83534edb16
mov qword [rsp + 0x4d0], rax
movabs rax, 0xdfffeab4be622b4
mov qword [rsp + 0x4d8], rax
movabs rax, 0x95aacf64a25efd9f
mov qword [rsp + 0x4e0], rax
movabs rax, 0xca79d5963046a9be
mov qword [rsp + 0x4e8], rax
movabs rax, 0x2f96fd617ed4e3d1
mov qword [rsp + 0x4f0], rax
movabs rax, 0x57ac460f0656c689
mov qword [rsp + 0x4f8], rax
movabs rax, 0xa5762c05ec1f702a
mov qword [rsp + 0x500], rax
movabs rcx, 0xb2d1b4adbced0480
mov qword [rsp + 0x508], rcx
mov qword [rsp + 0x350], r14
mov qword [rsp + 0x358], rbx
mov qword [rsp + 0x360], r12
mov qword [rsp + 0x368], r15
mov qword [rsp + 0x370], rsi
mov qword [rsp + 0x378], r13
movabs rax, 0x2f80b4ba7ff44c51
mov qword [rsp + 0x380], rax
mov qword [rsp + 0x388], rdi
movabs rax, 0x651320606f5bd73b
mov qword [rsp + 0x390], rax
movabs rax, 0x9c4679357c6a24f8
mov qword [rsp + 0x398], rax
movabs rax, 0x87df20de736faf65
mov qword [rsp + 0x3a0], rax
movabs rax, 0x688b8d8b3f9e47fa
mov qword [rsp + 0x3a8], rax
movabs rax, 0xb5c4aa14ed7ec7ef
mov qword [rsp + 0x3b0], rax
movabs rax, 0xbe59adf95c24c6cc
mov qword [rsp + 0x3b8], rax
movabs rax, 0x5bf092125eba86b9
mov qword [rsp + 0x3c0], rax
movabs rax, 0x36cb272f6324a7fe
mov qword [rsp + 0x3c8], rax
movabs rax, 0xa5762c58cc311e43
mov qword [rsp + 0x3d0], rax
mov qword [rsp + 0x3d8], rcx
movdqa xmm0, xmmword [rsp + 0x480]
xorps xmm0, xmmword [rsp + 0x350]
movdqa xmmword [rsp + 0x480], xmm0
movdqa xmm1, xmmword [rsp + 0x490]
xorps xmm1, xmmword [rsp + 0x360]
movdqa xmmword [rsp + 0x490], xmm1
movdqa xmm0, xmmword [rsp + 0x4a0]
xorps xmm0, xmmword [rsp + 0x370]
movdqa xmmword [rsp + 0x4a0], xmm0
movdqa xmm1, xmmword [rsp + 0x4b0]
xorps xmm1, xmmword [rsp + 0x380]
movdqa xmmword [rsp + 0x4b0], xmm1
movdqa xmm0, xmmword [rsp + 0x4c0]
xorps xmm0, xmmword [rsp + 0x390]
movdqa xmmword [rsp + 0x4c0], xmm0
movdqa xmm1, xmmword [rsp + 0x4d0]
xorps xmm1, xmmword [rsp + 0x3a0]
movdqa xmmword [rsp + 0x4d0], xmm1
movdqa xmm0, xmmword [rsp + 0x4e0]
xorps xmm0, xmmword [rsp + 0x3b0]
movdqa xmmword [rsp + 0x4e0], xmm0
movdqa xmm1, xmmword [rsp + 0x4f0]
xorps xmm1, xmmword [rsp + 0x3c0]
movdqa xmmword [rsp + 0x4f0], xmm1
movdqa xmm0, xmmword [rsp + 0x500]
xorps xmm0, xmmword [rsp + 0x3d0]
movdqa xmmword [rsp + 0x500], xmm0
lea rdx, [rsp + 0x480]
lea rcx, [0x1400776f0]
call fcn.14001aec0
lea rdx, [0x14006a938]
mov rcx, rax
call fcn.14001aec0
movabs rax, 0xb36ae6db1cb30e43
mov qword [rsp + 0x110], rax
movabs rax, 0x63aab809b74f7704
mov qword [rsp + 0x118], rax
movabs rax, 0x89a9c88c8cd8671
mov qword [rsp + 0x120], rax
mov qword [rsp + 0x128], r15
mov qword [rsp + 0x1a0], r14
mov qword [rsp + 0x1a8], rbx
mov qword [rsp + 0x1b0], r12
mov qword [rsp + 0x1b8], r15
movdqa xmm0, xmmword [rsp + 0x110]
xorps xmm0, xmmword [rsp + 0x1a0]
movdqa xmmword [rsp + 0x110], xmm0
movdqa xmm1, xmmword [rsp + 0x120]
xorps xmm1, xmmword [rsp + 0x1b0]
movdqa xmmword [rsp + 0x120], xmm1
lea rdx, [rsp + 0x110]
lea rcx, [0x1400776f0]
call fcn.14001aec0
lea rdx, [0x14006a938]
mov rcx, rax
call fcn.14001aec0
lea rcx, [0x140077a70]
call fcn.14002d500
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ExitProcess]
movabs rdi, 0xd0c2c03c8dcb9c87
movabs rsi, 0x2c8fc43767687f76
jmp 0x14002b623
movabs rdi, 0xd0c2c03c8dcb9c87
movabs rsi, 0x2c8fc43767687f76
jmp 0x14002b623
movabs rsi, 0x2c8fc43767687f76
movabs rdi, 0xd0c2c03c8dcb9c87
mov rcx, qword [0x140079440]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [rsp + 0x50], 0
je 0x14002b66d
lea rcx, [rsp + 0x70]
call fcn.14001ac60
mov rdx, rax
lea rcx, [rsp + 0x150]
call fcn.14001acd0
nop
lea rcx, [rsp + 0x150]
call fcn.140022d00
nop
lea rcx, [rsp + 0x150]
call fcn.14001ac70
movabs rax, 0xb467b2cd02b90f39
mov qword [rsp + 0x1e0], rax
movabs rax, 0x70f2b213e21d751e
mov qword [rsp + 0x1e8], rax
movabs rax, 0x69f2bcc2c8ca8a78
mov qword [rsp + 0x1f0], rax
movabs rax, 0xa48d97769bb10da2
mov qword [rsp + 0x1f8], rax
movabs rax, 0xb1adac1ce8a7f5ef
mov qword [rsp + 0x200], rax
movabs rax, 0x3eab8f21d633f8c0
mov qword [rsp + 0x208], rax
movabs rax, 0x4aecdddc5f992925
mov qword [rsp + 0x210], rax
movabs rax, 0x2c8fc43767685158
mov qword [rsp + 0x218], rax
mov qword [rsp + 0x150], r14
mov qword [rsp + 0x158], rbx
mov qword [rsp + 0x160], r12
mov qword [rsp + 0x168], r15
mov qword [rsp + 0x170], rdi
mov qword [rsp + 0x178], r13
movabs rax, 0x2f80b4ba7ff44c51
mov qword [rsp + 0x180], rax
mov qword [rsp + 0x188], rsi
movdqa xmm0, xmmword [rsp + 0x1e0]
xorps xmm0, xmmword [rsp + 0x150]
movdqa xmmword [rsp + 0x1e0], xmm0
movdqa xmm1, xmmword [rsp + 0x1f0]
xorps xmm1, xmmword [rsp + 0x160]
movdqa xmmword [rsp + 0x1f0], xmm1
movdqa xmm0, xmmword [rsp + 0x200]
xorps xmm0, xmmword [rsp + 0x170]
movdqa xmmword [rsp + 0x200], xmm0
movdqa xmm1, xmmword [rsp + 0x210]
xorps xmm1, xmmword [rsp + 0x180]
movdqa xmmword [rsp + 0x210], xmm1
lea rdx, [rsp + 0x1e0]
lea rcx, [0x1400776f0]
call fcn.14001aec0
mov rcx, rax
lea rdx, [0x14006a938]
call fcn.14001aec0
movabs rax, 0xb36ae6db1cb30e43
mov qword [rsp + 0x150], rax
movabs rax, 0x63aab809b74f7704
mov qword [rsp + 0x158], rax
movabs rax, 0x89a9c88c8cd8671
mov qword [rsp + 0x160], rax
mov qword [rsp + 0x168], r15
mov qword [rsp + 0x110], r14
mov qword [rsp + 0x118], rbx
mov qword [rsp + 0x120], r12
mov qword [rsp + 0x128], r15
movdqa xmm0, xmmword [rsp + 0x150]
xorps xmm0, xmmword [rsp + 0x110]
movdqa xmmword [rsp + 0x150], xmm0
movdqa xmm1, xmmword [rsp + 0x160]
xorps xmm1, xmmword [rsp + 0x120]
movdqa xmmword [rsp + 0x160], xmm1
lea rdx, [rsp + 0x150]
lea rcx, [0x1400776f0]
call fcn.14001aec0
mov rcx, rax
lea rdx, [0x14006a938]
call fcn.14001aec0
lea rcx, [0x140077a70]
call fcn.14002d500
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ExitProcess]
movabs rax, 0xfd57b2cb0aa41577
mov qword [rsp + 0x2d0], rax
movabs rax, 0x20efba14e3536702
mov qword [rsp + 0x2d8], rax
movabs rax, 0x7ce9f2cf8dca8673
mov qword [rsp + 0x2e0], rax
movabs rax, 0xf397d37790b811b3
mov qword [rsp + 0x2e8], rax
movabs rax, 0xb1e2a85fffaaf9f4
mov qword [rsp + 0x2f0], rax
movabs rax, 0x21bc8b6ed57df5ca
mov qword [rsp + 0x2f8], rax
movabs rax, 0x5bf4dc9a45902d3e
mov qword [rsp + 0x300], rax
movabs rax, 0x5bf8b31848520c06
mov qword [rsp + 0x308], rax
movabs rax, 0xa604f120c32ba15
mov qword [rsp + 0x310], rax
movabs rax, 0xf969145a1f44509e
mov qword [rsp + 0x318], rax
movabs rax, 0xf0b044f1001a820b
mov qword [rsp + 0x320], rax
movabs rax, 0xdefa2ef5ef12b94
mov qword [rsp + 0x328], rax
movabs rax, 0xc6a584678117a69b
mov qword [rsp + 0x330], rax
movabs rax, 0x8b6a909d351bbebc
mov qword [rsp + 0x338], rax
movabs rdx, 0x5bf092125eba86b9
mov qword [rsp + 0x340], rdx
movabs rcx, 0x36cb272f6324a7fe
mov qword [rsp + 0x348], rcx
mov qword [rsp + 0x1e0], r14
mov qword [rsp + 0x1e8], rbx
mov qword [rsp + 0x1f0], r12
mov qword [rsp + 0x1f8], r15
mov qword [rsp + 0x200], rsi
mov qword [rsp + 0x208], r13
movabs rax, 0x2f80b4ba7ff44c51
mov qword [rsp + 0x210], rax
movabs rax, 0x2c8fc43767687f76
mov qword [rsp + 0x218], rax
movabs rax, 0x651320606f5bd73b
mov qword [rsp + 0x220], rax
movabs rax, 0x9c4679357c6a24f8
mov qword [rsp + 0x228], rax
movabs rax, 0x87df20de736faf65
mov qword [rsp + 0x230], rax
movabs rax, 0x688b8d8b3f9e47fa
mov qword [rsp + 0x238], rax
movabs rax, 0xb5c4aa14ed7ec7ef
mov qword [rsp + 0x240], rax
movabs rax, 0xbe59adf95c24c6cc
mov qword [rsp + 0x248], rax
mov qword [rsp + 0x250], rdx
mov qword [rsp + 0x258], rcx
movdqa xmm0, xmmword [rsp + 0x2d0]
xorps xmm0, xmmword [rsp + 0x1e0]
movdqa xmmword [rsp + 0x2d0], xmm0
movdqa xmm1, xmmword [rsp + 0x2e0]
xorps xmm1, xmmword [rsp + 0x1f0]
movdqa xmmword [rsp + 0x2e0], xmm1
movdqa xmm0, xmmword [rsp + 0x2f0]
xorps xmm0, xmmword [rsp + 0x200]
movdqa xmmword [rsp + 0x2f0], xmm0
movdqa xmm1, xmmword [rsp + 0x300]
xorps xmm1, xmmword [rsp + 0x210]
movdqa xmmword [rsp + 0x300], xmm1
movdqa xmm0, xmmword [rsp + 0x310]
xorps xmm0, xmmword [rsp + 0x220]
movdqa xmmword [rsp + 0x310], xmm0
movdqa xmm1, xmmword [rsp + 0x320]
xorps xmm1, xmmword [rsp + 0x230]
movdqa xmmword [rsp + 0x320], xmm1
movdqa xmm0, xmmword [rsp + 0x330]
xorps xmm0, xmmword [rsp + 0x240]
movdqa xmmword [rsp + 0x330], xmm0
movdqa xmm1, xmmword [rsp + 0x340]
xorps xmm1, xmmword [rsp + 0x250]
movdqa xmmword [rsp + 0x340], xmm1
lea rdx, [rsp + 0x2d0]
lea rcx, [0x1400776f0]
call fcn.14001aec0
mov rcx, rax
lea rdx, [0x14006a938]
call fcn.14001aec0
movabs rax, 0xb36ae6db1cb30e43
mov qword [rsp + 0x150], rax
movabs rax, 0x63aab809b74f7704
mov qword [rsp + 0x158], rax
movabs rax, 0x89a9c88c8cd8671
mov qword [rsp + 0x160], rax
mov qword [rsp + 0x168], r15
mov qword [rsp + 0x110], r14
mov qword [rsp + 0x118], rbx
mov qword [rsp + 0x120], r12
mov qword [rsp + 0x128], r15
movdqa xmm0, xmmword [rsp + 0x150]
xorps xmm0, xmmword [rsp + 0x110]
movdqa xmmword [rsp + 0x150], xmm0
movdqa xmm1, xmmword [rsp + 0x160]
xorps xmm1, xmmword [rsp + 0x120]
movdqa xmmword [rsp + 0x160], xmm1
lea rdx, [rsp + 0x150]
lea rcx, [0x1400776f0]
call fcn.14001aec0
mov rcx, rax
lea rdx, [0x14006a938]
call fcn.14001aec0
lea rcx, [0x140077a70]
call fcn.14002d500
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ExitProcess]
xor ecx, ecx
call fcn.14003e5e4
int3