Function at 0x140026110
Capabilities:
Create thread
Delete file
Enumerate processes
Execute command
Terminate process

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
sub rsp, 0x570
movaps xmmword [rax - 0x38], xmm6
lea rbp, [rax - 0x518]
and rbp, 0xffffffffffffffe0
mov rax, qword [0x1401b4a40]
xor rax, rsp
mov qword [rbp + 0x4d0], rax
xor edi, edi
call fcn.140012df0
call fcn.14000fb30
call fcn.140014b80
call fcn.140010040
call fcn.140014b80
mov ecx, 1
call fcn.1401028f4
mov qword [rbp + 0xd0], rax
lea rcx, [rbp + 8]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], edi
mov r9, rax
lea r8, [0x140004d20]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp], rax
test rax, rax
je 0x140028479
mov qword [rbp + 0xd0], rdi
cmp dword [rbp + 8], edi
je 0x14002846e
movaps xmm0, xmmword [rbp]
movdqa xmmword [rbp + 0x460], xmm0
lea rcx, [rbp + 0x460]
call sub.MSVCP140.dll__Thrd_detach
test eax, eax
jne 0x14002846e
xorps xmm0, xmm0
movaps xmmword [rbp + 0x110], xmm0
movdqa xmmword [rbp], xmm0
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movabs rax, 0x800eee734707503c
mov qword [rbp + 0xd0], rax
mov rax, qword [rbp + 0xd0]
mov qword [rbp], rax
movabs rax, 0xfec4dea16fc4a9d6
mov qword [rbp + 0xd0], rax
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 8], rax
movabs r14, 0xe97a8d1629693f7f
mov qword [rbp + 0xd0], r14
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x3e0], rax
movabs rsi, 0xfec4de8f41eaceb8
mov qword [rbp + 0xd0], rsi
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x3e8], rax
movdqa xmm0, xmmword [rbp]
xorps xmm0, xmmword [rbp + 0x3e0]
movdqa xmmword [rbp], xmm0
lea rdx, [rbp]
call fcn.140002280
mov rcx, rax
lea rdx, reloc.WS2_32.dll_ioctlsocket
call fcn.140002280
movabs rbx, 0xe97a8d16291a531c
mov qword [rbp + 0xd0], rbx
mov rax, qword [rbp + 0xd0]
mov qword [rbp], rax
mov qword [rbp + 0xd0], rsi
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 8], rax
mov qword [rbp + 0xd0], r14
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x3e0], rax
mov qword [rbp + 0xd0], rsi
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x3e8], rax
movdqa xmm0, xmmword [rbp]
xorps xmm0, xmmword [rbp + 0x3e0]
movdqa xmmword [rbp], xmm0
lea rcx, [rbp]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [0x1401b5840]
call fcn.140070a20
cmp byte [0x1401b5a50], dil
jne 0x1400263c8
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movabs rax, 0xc940fe635d084b2c
mov qword [rbp + 0xd0], rax
mov rax, qword [rbp + 0xd0]
mov qword [rbp], rax
mov qword [rbp + 0xd0], rsi
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 8], rax
mov qword [rbp + 0xd0], r14
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x3e0], rax
mov qword [rbp + 0xd0], rsi
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x3e8], rax
movdqa xmm0, xmmword [rbp]
xorps xmm0, xmmword [rbp + 0x3e0]
movdqa xmmword [rbp], xmm0
lea rdx, [rbp]
call fcn.140002280
mov rcx, rax
lea rdx, [0x1401b5a58]
call fcn.140002260
mov rcx, rax
lea rdx, reloc.WS2_32.dll_ioctlsocket
call fcn.140002280
mov ecx, 0x5dc
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
xorps xmm0, xmm0
movups xmmword [rbp + 0x120], xmm0
movdqa xmm1, xmmword [0x14010b890]
movdqu xmmword [rbp + 0x130], xmm1
mov byte [rbp + 0x120], 0
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movabs rax, 0x8036ad644c1d513a
mov qword [rbp + 0xd0], rax
mov rax, qword [rbp + 0xd0]
mov qword [rbp], rax
movabs rax, 0xfee4e4ea3284abdb
mov qword [rbp + 0xd0], rax
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 8], rax
mov qword [rbp + 0xd0], r14
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x3e0], rax
mov qword [rbp + 0xd0], rsi
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x3e8], rax
movdqa xmm0, xmmword [rbp]
xorps xmm0, xmmword [rbp + 0x3e0]
movdqa xmmword [rbp], xmm0
lea rdx, [rbp]
call fcn.140002280
lea rdx, [rbp + 0x120]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call fcn.140002010
lea rdx, [rbp + 0x120]
lea rcx, [rbp + 0x380]
call fcn.14000c540
mov rdx, rax
lea rcx, [0x1401b5840]
call fcn.140073580
mov qword [rbp + 0xd0], rbx
mov rax, qword [rbp + 0xd0]
mov qword [rbp], rax
mov qword [rbp + 0xd0], rsi
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 8], rax
mov qword [rbp + 0xd0], r14
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x3e0], rax
mov qword [rbp + 0xd0], rsi
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x3e8], rax
movdqa xmm0, xmmword [rbp]
xorps xmm0, xmmword [rbp + 0x3e0]
movdqa xmmword [rbp], xmm0
lea rcx, [rbp]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
cmp byte [0x1401b5a50], 0
jne 0x1400265c5
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movabs rax, 0xc940fe635d084b2c
mov qword [rbp + 0xd0], rax
mov rax, qword [rbp + 0xd0]
mov qword [rbp], rax
mov qword [rbp + 0xd0], rsi
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 8], rax
mov qword [rbp + 0xd0], r14
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x3e0], rax
mov qword [rbp + 0xd0], rsi
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x3e8], rax
movdqa xmm0, xmmword [rbp]
xorps xmm0, xmmword [rbp + 0x3e0]
movdqa xmmword [rbp], xmm0
lea rdx, [rbp]
call fcn.140002280
mov rcx, rax
lea rdx, [0x1401b5a58]
call fcn.140002260
mov rcx, rax
lea rdx, reloc.WS2_32.dll_ioctlsocket
call fcn.140002280
mov ecx, 0x5dc
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov ecx, 0x28
call fcn.1401028f4
mov rbx, rax
mov qword [rbp + 0xd0], rax
test rax, rax
je 0x1400265fa
lea rdx, [0x1401b57f0]
mov rcx, rax
call fcn.14000c540
lea rax, [0x140017f70]
mov qword [rbx + 0x20], rax
jmp 0x1400265fd
mov rbx, rdi
mov qword [rbp + 0xd0], rbx
lea rax, [rbp + 0x100]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], edi
mov r9, rbx
lea r8, [0x140004c40]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0xf8], rax
test rax, rax
je 0x14002845d
mov qword [rbp + 0xd0], rdi
mov ecx, 8
call fcn.1401028f4
test rax, rax
je 0x14002665a
lea rcx, [0x140024f40]
mov qword [rax], rcx
jmp 0x14002665d
mov rax, rdi
mov qword [rbp + 0xd0], rax
lea rcx, [rbp + 0xf0]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], edi
mov r9, rax
lea r8, [0x140004cf0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0xe8], rax
test rax, rax
je 0x14002844c
mov qword [rbp + 0xd0], rdi
movabs r13, 0xc56e6cb309393f0c
movabs r12, 0x632dc6b0bde43f99
movabs r15, 0xfe30c3116289c5f2
movdqa xmm6, xmmword [0x14010b870]
movabs rbx, 0xe97a8d16291a531c
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x20], xmm0
mov qword [rbp + 0x30], rdi
mov qword [rbp + 0x38], rdi
mov r8d, recvfrom
lea rdx, str._1__Map_Driver
lea rcx, [rbp + 0x20]
call fcn.1400029a0
xor edx, edx
lea rcx, [rbp + 0x20]
call fcn.140018070
xorps xmm0, xmm0
movups xmmword [rbp + 0x20], xmm0
mov qword [rbp + 0x30], rdi
mov qword [rbp + 0x38], rdi
mov r8d, recvfrom
lea rdx, str._2__Load_cheat
lea rcx, [rbp + 0x20]
call fcn.1400029a0
xor edx, edx
lea rcx, [rbp + 0x20]
call fcn.140018070
lea rdx, str.___Choose_an_option:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002280
lea rdx, [rbp + 0xe4]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::operator___int____ptr64____ptr64]
mov eax, dword [rbp + 0xe4]
cmp eax, 1
jne 0x140027223
movabs rax, 0x8516e47d421a5e0b
mov qword [rbp + 0xd0], rax
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x400], rax
movabs rax, 0xd1e48aa061ace198
mov qword [rbp + 0xd0], rax
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x408], rax
movabs rax, 0x244eafc0f8c472d0
mov qword [rbp + 0xd0], rax
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x410], rax
movabs rax, 0x9045a25d11eca893
mov qword [rbp + 0xd0], rax
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x418], rax
movabs rax, 0x3da068042f3e9b30
mov qword [rbp + 0xd0], rax
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x420], rax
mov qword [rbp + 0xd0], r13
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x428], rax
mov qword [rbp + 0xd0], r14
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x380], rax
mov qword [rbp + 0xd0], rsi
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x388], rax
mov qword [rbp + 0xd0], r12
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x390], rax
mov qword [rbp + 0xd0], r15
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x398], rax
movabs rax, 0x58d80d2a5d5bf353
mov qword [rbp + 0xd0], rax
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x3a0], rax
mov qword [rbp + 0xd0], r13
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x3a8], rax
vmovdqu ymm0, ymmword [rbp + 0x380]
vpxor ymm1, ymm0, ymmword [rbp + 0x400]
vmovdqa ymmword [rbp + 0x400], ymm1
vmovdqa xmm2, xmmword [rbp + 0x3a0]
vxorps xmm2, xmm2, xmmword [rbp + 0x420]
vmovdqa xmmword [rbp + 0x420], xmm2
lea rcx, [rbp + 0x400]
vzeroupper
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movabs rax, 0x8516e47d421a5e0b
mov qword [rbp + 0xd0], rax
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x380], rax
movabs rax, 0xd1e48aa061ace198
mov qword [rbp + 0xd0], rax
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x388], rax
movabs rax, 0xd59b4dffbc472d0
mov qword [rbp + 0xd0], rax
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x390], rax
movabs rax, 0x9055aa7d21ecb19b
mov qword [rbp + 0xd0], rax
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x398], rax
movabs rax, 0x75ec3b44340cde27
mov qword [rbp + 0xd0], rax
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x3a0], rax
movabs rax, 0xa20005c37950575f
mov qword [rbp + 0xd0], rax
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x3a8], rax
movabs rax, 0x8f3f1184b1671eb3
mov qword [rbp + 0xd0], rax
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x3b0], rax
movabs rcx, 0xfc48c4a5bb6ef3b6
mov qword [rbp + 0xd0], rcx
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x3b8], rax
mov qword [rbp + 0xd0], r14
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x400], rax
mov qword [rbp + 0xd0], rsi
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x408], rax
mov qword [rbp + 0xd0], r12
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x410], rax
mov qword [rbp + 0xd0], r15
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x418], rax
movabs rax, 0x58d80d2a5d5bf353
mov qword [rbp + 0xd0], rax
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x420], rax
mov qword [rbp + 0xd0], r13
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x428], rax
movabs rax, 0x8f3f1184d41f7b9d
mov qword [rbp + 0xd0], rax
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x430], rax
mov qword [rbp + 0xd0], rcx
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x438], rax
vmovdqu ymm0, ymmword [rbp + 0x400]
vpxor ymm1, ymm0, ymmword [rbp + 0x380]
vmovdqa ymmword [rbp + 0x380], ymm1
vmovdqu ymm0, ymmword [rbp + 0x3a0]
vpxor ymm1, ymm0, ymmword [rbp + 0x420]
vmovdqa ymmword [rbp + 0x3a0], ymm1
lea rcx, [rbp + 0x380]
vzeroupper
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov qword [rbp + 0xd0], rbx
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x50], rax
mov qword [rbp + 0xd0], rsi
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x58], rax
mov qword [rbp + 0xd0], r14
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x470], rax
mov qword [rbp + 0xd0], rsi
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x478], rax
movdqa xmm0, xmmword [rbp + 0x470]
xorps xmm0, xmmword [rbp + 0x50]
movdqa xmmword [rbp + 0x50], xmm0
lea rcx, [rbp + 0x50]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movabs rax, 0x9d0ee536451b4a1c
mov qword [rbp + 0xd0], rax
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x400], rax
movabs rax, 0x92adb8a06ed0bdc8
mov qword [rbp + 0xd0], rax
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x408], rax
movabs rax, 0xc4fb2d1deca4cfc
mov qword [rbp + 0xd0], rax
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x410], rax
movabs rax, 0xc651ec740de4eb8a
mov qword [rbp + 0xd0], rax
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x418], rax
movabs rax, 0x2ba17e043934896a
mov qword [rbp + 0xd0], rax
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x420], rax
movabs rax, 0xb01e18c66614122c
mov qword [rbp + 0xd0], rax
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x428], rax
movabs rax, 0xf94d75d8ee5c5be9
mov qword [rbp + 0xd0], rax
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x430], rax
movabs rax, 0x9276e4d6c21dddc4
mov qword [rbp + 0xd0], rax
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x438], rax
movabs rax, 0xd11a5fc0042d74b2
mov qword [rbp + 0xd0], rax
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x440], rax
movabs rcx, 0x4d88e7374e370380
mov qword [rbp + 0xd0], rcx
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x448], rax
mov qword [rbp + 0xd0], r14
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x380], rax
mov qword [rbp + 0xd0], rsi
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x388], rax
mov qword [rbp + 0xd0], r12
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x390], rax
mov qword [rbp + 0xd0], r15
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x398], rax
movabs rax, 0x58d80d2a5d5bf353
mov qword [rbp + 0xd0], rax
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x3a0], rax
mov qword [rbp + 0xd0], r13
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x3a8], rax
movabs rax, 0x8f3f1184d41f7b9d
mov qword [rbp + 0xd0], rax
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x3b0], rax
movabs rax, 0xfc48c4a5bb6ef3b6
mov qword [rbp + 0xd0], rax
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x3b8], rax
movabs rax, 0xd12b79fe360d18c7
mov qword [rbp + 0xd0], rax
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x3c0], rax
mov qword [rbp + 0xd0], rcx
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x3c8], rax
vmovdqu ymm0, ymmword [rbp + 0x380]
vpxor ymm1, ymm0, ymmword [rbp + 0x400]
vmovdqa ymmword [rbp + 0x400], ymm1
vmovdqu ymm0, ymmword [rbp + 0x420]
vpxor ymm1, ymm0, ymmword [rbp + 0x3a0]
vmovdqa ymmword [rbp + 0x420], ymm1
vmovdqa xmm2, xmmword [rbp + 0x3c0]
vxorps xmm2, xmm2, xmmword [rbp + 0x440]
vmovdqa xmmword [rbp + 0x440], xmm2
lea rcx, [rbp + 0x400]
vzeroupper
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movabs rax, 0x9d0ee536451b4a1c
mov qword [rbp + 0xd0], rax
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x400], rax
movabs rax, 0x92adb8a06ed0bdc8
mov qword [rbp + 0xd0], rax
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x408], rax
movabs rax, 0xc4fb2d1deca4cfc
mov qword [rbp + 0xd0], rax
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x410], rax
movabs rax, 0x9a45ec740de4eb8a
mov qword [rbp + 0xd0], rax
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x418], rax
movabs rax, 0x36b16f042b3dca62
mov qword [rbp + 0xd0], rax
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x420], rax
movabs rax, 0xb01e18c66614122c
mov qword [rbp + 0xd0], rax
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x428], rax
movabs rax, 0xff5e7cd8ee5c5be9
mov qword [rbp + 0xd0], rax
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x430], rax
movabs rax, 0xdc2dbcc0951c96c6
mov qword [rbp + 0xd0], rax
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x438], rax
movabs rax, 0xf7154bde5a7876f9
mov qword [rbp + 0xd0], rax
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x440], rax
movabs rax, 0x4d88e7374e3703b1
mov qword [rbp + 0xd0], rax
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x448], rax
mov qword [rbp + 0xd0], r14
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x380], rax
mov qword [rbp + 0xd0], rsi
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x388], rax
mov qword [rbp + 0xd0], r12
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x390], rax
mov qword [rbp + 0xd0], r15
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x398], rax
movabs rax, 0x58d80d2a5d5bf353
mov qword [rbp + 0xd0], rax
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x3a0], rax
mov qword [rbp + 0xd0], r13
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x3a8], rax
movabs rax, 0x8f3f1184d41f7b9d
mov qword [rbp + 0xd0], rax
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x3b0], rax
movabs rax, 0xfc48c4a5bb6ef3b6
mov qword [rbp + 0xd0], rax
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x3b8], rax
movabs rax, 0xd12b79fe360d18c7
mov qword [rbp + 0xd0], rax
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x3c0], rax
movabs rax, 0x4d88e7374e370380
mov qword [rbp + 0xd0], rax
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x3c8], rax
vmovdqu ymm0, ymmword [rbp + 0x380]
vpxor ymm1, ymm0, ymmword [rbp + 0x400]
vmovdqa ymmword [rbp + 0x400], ymm1
vmovdqu ymm0, ymmword [rbp + 0x420]
vpxor ymm1, ymm0, ymmword [rbp + 0x3a0]
vmovdqa ymmword [rbp + 0x420], ymm1
vmovdqa xmm2, xmmword [rbp + 0x440]
vxorps xmm2, xmm2, xmmword [rbp + 0x3c0]
vmovdqa xmmword [rbp + 0x440], xmm2
lea rcx, [rbp + 0x400]
vzeroupper
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movabs rax, 0x8c0afd774435053c
mov qword [rbp + 0xd0], rax
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x20], rax
movabs rax, 0xc487feea398fe0ca
mov qword [rbp + 0xd0], rax
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x28], rax
movabs rax, 0x1a5ee8c2cb965bc5
mov qword [rbp + 0xd0], rax
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x30], rax
movabs rax, 0xfe30c3116289c581
mov qword [rbp + 0xd0], rax
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x38], rax
mov qword [rbp + 0xd0], r14
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x400], rax
mov qword [rbp + 0xd0], rsi
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x408], rax
mov qword [rbp + 0xd0], r12
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x410], rax
mov qword [rbp + 0xd0], r15
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x418], rax
vmovdqu ymm0, ymmword [rbp + 0x400]
vpxor ymm1, ymm0, ymmword [rbp + 0x20]
vmovdqa ymmword [rbp + 0x20], ymm1
lea rcx, [rbp + 0x20]
vzeroupper
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movabs rax, 0x8c0afd774435053c
mov qword [rbp + 0xd0], rax
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x60], rax
movabs rax, 0xfec4deea398fe0ca
mov qword [rbp + 0xd0], rax
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x68], rax
mov qword [rbp + 0xd0], r14
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x480], rax
mov qword [rbp + 0xd0], rsi
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x488], rax
movdqa xmm0, xmmword [rbp + 0x480]
xorps xmm0, xmmword [rbp + 0x60]
movdqa xmmword [rbp + 0x60], xmm0
lea rcx, [rbp + 0x60]
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
mov qword [rbp + 0xd0], rbx
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x70], rax
mov qword [rbp + 0xd0], rsi
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x78], rax
mov qword [rbp + 0xd0], r14
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x490], rax
mov qword [rbp + 0xd0], rsi
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x498], rax
movdqa xmm0, xmmword [rbp + 0x490]
xorps xmm0, xmmword [rbp + 0x70]
movdqa xmmword [rbp + 0x70], xmm0
lea rcx, [rbp + 0x70]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
jmp 0x1400266d0
cmp eax, 2
jne 0x140027a7e
mov qword [rbp + 0xd0], rbx
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x80], rax
mov qword [rbp + 0xd0], rsi
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x88], rax
mov qword [rbp + 0xd0], r14
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x4a0], rax
mov qword [rbp + 0xd0], rsi
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x4a8], rax
movdqa xmm0, xmmword [rbp + 0x80]
xorps xmm0, xmmword [rbp + 0x4a0]
movdqa xmmword [rbp + 0x80], xmm0
lea rcx, [rbp + 0x80]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movabs rax, 0x9d13e35f09341424
mov qword [rbp + 0xd0], rax
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x20], rax
movabs rax, 0xdea3b0e63b83a2d9
mov qword [rbp + 0xd0], rax
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x28], rax
movabs rax, 0x6354a7dccf8149f6
mov qword [rbp + 0xd0], rax
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x30], rax
mov qword [rbp + 0xd0], r15
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x38], rax
mov qword [rbp + 0xd0], r14
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x380], rax
mov qword [rbp + 0xd0], rsi
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x388], rax
mov qword [rbp + 0xd0], r12
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x390], rax
mov qword [rbp + 0xd0], r15
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x398], rax
vmovdqu ymm0, ymmword [rbp + 0x20]
vpxor ymm1, ymm0, ymmword [rbp + 0x380]
vmovdqa ymmword [rbp + 0x20], ymm1
vxorps xmm0, xmm0, xmm0
vmovups xmmword [rbp + 0x400], xmm0
mov qword [rbp + 0x410], rdi
mov qword [rbp + 0x418], rdi
lea rax, [rbp + 0x20]
mov r8, 0xffffffffffffffff
vzeroupper
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x1400273a0
lea rdx, [rbp + 0x20]
lea rcx, [rbp + 0x400]
call fcn.1400029a0
mov edx, 5
lea rcx, [rbp + 0x400]
call fcn.140018070
mov edx, 0x190
mov ecx, 0x258
call qword [sym.imp.KERNEL32.dll_Beep]
call fcn.14000fb30
call fcn.140014b80
call fcn.140010040
call fcn.140014b80
mov qword [rbp + 0xd0], r14
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x90], rax
mov qword [rbp + 0xd0], rsi
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x98], rax
mov qword [rbp + 0xd0], r14
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x4b0], rax
mov qword [rbp + 0xd0], rsi
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x4b8], rax
movdqa xmm0, xmmword [rbp + 0x90]
xorps xmm0, xmmword [rbp + 0x4b0]
movdqa xmmword [rbp + 0x90], xmm0
movabs rax, 0x855ae87e5d495136
mov qword [rbp + 0xd0], rax
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x400], rax
movabs rax, 0x8cb4fea33888acd7
mov qword [rbp + 0xd0], rax
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x408], rax
movabs rax, 0x170d8dff9d974cfc
mov qword [rbp + 0xd0], rax
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x410], rax
movabs rax, 0x8a10a7700de5e59d
mov qword [rbp + 0xd0], rax
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x418], rax
movabs rax, 0x2cb968423e7b963b
mov qword [rbp + 0xd0], rax
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x420], rax
movabs rax, 0xc56e6cb309393f2d
mov qword [rbp + 0xd0], rax
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x428], rax
mov qword [rbp + 0xd0], r14
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x380], rax
mov qword [rbp + 0xd0], rsi
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x388], rax
mov qword [rbp + 0xd0], r12
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x390], rax
mov qword [rbp + 0xd0], r15
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x398], rax
movabs rax, 0x58d80d2a5d5bf353
mov qword [rbp + 0xd0], rax
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x3a0], rax
mov qword [rbp + 0xd0], r13
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x3a8], rax
vmovdqu ymm0, ymmword [rbp + 0x400]
vpxor ymm1, ymm0, ymmword [rbp + 0x380]
vmovdqa ymmword [rbp + 0x400], ymm1
vmovdqa xmm0, xmmword [rbp + 0x420]
vxorps xmm0, xmm0, xmmword [rbp + 0x3a0]
vmovdqa xmmword [rbp + 0x420], xmm0
mov r9d, 0x40
lea r8, [rbp + 0x90]
lea rdx, [rbp + 0x400]
xor ecx, ecx
vzeroupper
call qword [sym.imp.USER32.dll_MessageBoxA]
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x28], edi
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov edx, 0xc0000000
mov r8d, 3
lea rcx, str..meow_meow_u8ej
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [0x1401b56d0], rax
dec rax
cmp rax, 0xfffffffffffffffd
ja 0x1400282f5
xor edx, edx
mov ecx, 2
call sub.KERNEL32.dll_CreateToolhelp32Snapshot
mov rbx, rax
mov dword [rbp + 0x140], 0x238
lea rdx, [rbp + 0x140]
mov rcx, rax
call sub.KERNEL32.dll_Process32FirstW
test eax, eax
je 0x14002768f
nop word [rax + rax]
lea rdx, str.FortniteClient_Win64_Shipping.exe
lea rcx, [rbp + 0x16c]
call qword [sym.imp.KERNEL32.dll_lstrcmpiW]
mov rcx, rbx
test eax, eax
je 0x140027a6d
lea rdx, [rbp + 0x140]
call sub.KERNEL32.dll_Process32NextW
test eax, eax
jne 0x140027660
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, edi
mov dword [0x1401b56d8], eax
test eax, eax
je 0x140028003
mov qword [rbp + 0xd0], rdi
mov dword [rbp + 0xc4], edi
mov dword [rbp + 0xc0], eax
lea rax, [rbp + 0xd0]
mov qword [rbp + 0xc8], rax
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x28], edi
mov qword [rsp + 0x20], rdi
mov r9d, reloc.WS2_32.dll_recv
lea r8, [rbp + 0xc0]
mov edx, 0x2210e8
mov rcx, qword [0x1401b56d0]
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov rax, qword [rbp + 0xd0]
mov qword [0x1401b56c8], rax
test rax, rax
je 0x140027eac
mov byte [rbp + 0xe0], 0
mov dword [rbp + 0x3e4], edi
mov eax, dword [0x1401b56d8]
mov dword [rbp + 0x3e0], eax
lea rax, [rbp + 0xe0]
mov qword [rbp + 0x3e8], rax
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x28], edi
mov qword [rsp + 0x20], rdi
mov r9d, reloc.WS2_32.dll_recv
lea r8, [rbp + 0x3e0]
mov edx, 0x221068
mov rcx, qword [0x1401b56d0]
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
cmp byte [rbp + 0xe0], 0
je 0x140027d55
call fcn.14000fb30
call fcn.140014b80
call fcn.140010040
call fcn.140014b80
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movabs rax, 0x8a16e84109341424
mov qword [rbp + 0xd0], rax
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0xa0], rax
movabs rax, 0xfec4de85608fa3d7
mov qword [rbp + 0xd0], rax
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0xa8], rax
mov qword [rbp + 0xd0], r14
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x4c0], rax
mov qword [rbp + 0xd0], rsi
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x4c8], rax
movdqa xmm0, xmmword [rbp + 0xa0]
xorps xmm0, xmmword [rbp + 0x4c0]
movdqa xmmword [rbp + 0xa0], xmm0
lea rdx, [rbp + 0xa0]
call fcn.140002280
lea rdx, str.base_address:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002280
mov rdx, qword [0x1401b56c8]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_long_unsigned___int64_____ptr64]
mov rcx, rax
lea rdx, reloc.WS2_32.dll_ioctlsocket
call fcn.140002280
mov ecx, 1
call fcn.1401028f4
mov qword [rbp + 0xd0], rax
lea rcx, [rbp + 8]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], edi
mov r9, rax
lea r8, [0x140004d70]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp], rax
test rax, rax
je 0x140027d47
mov qword [rbp + 0xd0], rdi
cmp dword [rbp + 8], 0
je 0x140027d3c
movaps xmm0, xmmword [rbp]
movdqa xmmword [rbp + 0xd0], xmm0
lea rcx, [rbp + 0xd0]
call sub.MSVCP140.dll__Thrd_detach
test eax, eax
jne 0x140027d3c
xorps xmm0, xmm0
movaps xmmword [rbp], xmm0
movdqa xmmword [rbp], xmm0
mov qword [rbp + 0x380], 0x50
mov rax, qword [sym.imp.USER32.dll_DefWindowProcA]
mov qword [rbp + 0x388], rax
mov qword [rbp + 0x390], rdi
mov qword [rbp + 0x398], rdi
mov edx, 0x7f00
xor ecx, ecx
call qword [sym.imp.USER32.dll_LoadIconW]
mov qword [rbp + 0x3a0], rax
mov edx, 0x7f00
xor ecx, ecx
call qword [sym.imp.USER32.dll_LoadCursorW]
mov qword [rbp + 0x3a8], rax
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x3b0], xmm0
lea rbx, str.aura_private
mov qword [rbp + 0x3c0], rbx
mov edx, 0x7f00
xor ecx, ecx
call qword [sym.imp.USER32.dll_LoadIconW]
mov qword [rbp + 0x3c8], rax
call qword [sym.imp.USER32.dll_GetDesktopWindow]
mov rcx, rax
lea rdx, [rbp + 0xb0]
call qword [sym.imp.USER32.dll_GetWindowRect]
lea rcx, [rbp + 0x380]
call qword [sym.imp.USER32.dll_RegisterClassExA]
mov qword [rsp + 0x58], rdi
mov rax, qword [rbp + 0x398]
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x48], rdi
mov qword [rsp + 0x40], rdi
mov eax, dword [rbp + 0xbc]
mov dword [rsp + 0x38], eax
mov eax, dword [rbp + 0xb8]
mov dword [rsp + 0x30], eax
mov eax, dword [rbp + 0xb4]
mov dword [rsp + 0x28], eax
mov eax, dword [rbp + 0xb0]
mov dword [rsp + 0x20], eax
mov r9d, 0x80000000
lea r8, str.negro
mov rdx, rbx
xor ecx, ecx
call qword [sym.imp.USER32.dll_CreateWindowExA]
mov qword [0x1401b5760], rax
mov edx, 0xffffffec
mov r8d, 0x800a0
mov rcx, rax
call qword [sym.imp.USER32.dll_SetWindowLongW]
movdqu xmmword [rbp + 0x110], xmm6
lea rdx, [rbp + 0x110]
mov rcx, qword [0x1401b5760]
call qword [sym.imp.dwmapi.dll_DwmExtendFrameIntoClientArea]
mov edx, 5
mov rcx, qword [0x1401b5760]
call qword [sym.imp.USER32.dll_ShowWindow]
mov dword [rsp + 0x30], 3
mov dword [rsp + 0x28], edi
mov dword [rsp + 0x20], edi
xor r9d, r9d
xor r8d, r8d
mov rdx, 0xffffffffffffffff
mov rcx, qword [0x1401b5760]
call qword [sym.imp.USER32.dll_SetWindowPos]
mov r9d, 2
mov r8b, 0xff
xor edx, edx
mov rcx, qword [0x1401b5760]
call qword [sym.imp.USER32.dll_SetLayeredWindowAttributes]
mov rcx, qword [0x1401b5760]
call qword [sym.imp.USER32.dll_UpdateWindow]
call fcn.14001dcc0
call fcn.140020fc0
jmp 0x1400266c5
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [rbp + 0x148]
jmp 0x14002769a
movabs rax, 0xc71eff794a1a561b
mov qword [rbp + 0xd0], rax
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x20], rax
movabs rax, 0x95a1acea2cc5a9df
mov qword [rbp + 0xd0], rax
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x28], rax
movabs rax, 0x632dc6b0bde45bec
mov qword [rbp + 0xd0], rax
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x30], rax
mov qword [rbp + 0xd0], r15
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x38], rax
mov qword [rbp + 0xd0], r14
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x380], rax
mov qword [rbp + 0xd0], rsi
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x388], rax
mov qword [rbp + 0xd0], r12
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x390], rax
mov qword [rbp + 0xd0], r15
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x398], rax
vmovdqu ymm0, ymmword [rbp + 0x380]
vpxor ymm1, ymm0, ymmword [rbp + 0x20]
vmovdqa ymmword [rbp + 0x20], ymm1
movabs rax, 0xc91ee47a481f5136
mov qword [rbp + 0xd0], rax
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x400], rax
movabs rax, 0x91adaaec2486abcb
mov qword [rbp + 0xd0], rax
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x408], rax
movabs rax, 0x1a5f929093ca11f7
mov qword [rbp + 0xd0], rax
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x410], rax
movabs rax, 0xd01ead7803eea4d2
mov qword [rbp + 0xd0], rax
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x418], rax
movabs rax, 0x58d80d2a5d5bf37d
mov qword [rbp + 0xd0], rax
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x420], rax
mov qword [rbp + 0xd0], r13
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x428], rax
mov qword [rbp + 0xd0], r14
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x380], rax
mov qword [rbp + 0xd0], rsi
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x388], rax
mov qword [rbp + 0xd0], r12
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x390], rax
mov qword [rbp + 0xd0], r15
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x398], rax
movabs rax, 0x58d80d2a5d5bf353
mov qword [rbp + 0xd0], rax
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x3a0], rax
mov qword [rbp + 0xd0], r13
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x3a8], rax
vmovdqu ymm0, ymmword [rbp + 0x380]
vpxor ymm1, ymm0, ymmword [rbp + 0x400]
vmovdqa ymmword [rbp + 0x400], ymm1
vmovdqa xmm2, xmmword [rbp + 0x3a0]
vxorps xmm2, xmm2, xmmword [rbp + 0x420]
vmovdqa xmmword [rbp + 0x420], xmm2
mov r9d, reloc.WS2_32.dll_recv
lea r8, [rbp + 0x20]
lea rdx, [rbp + 0x400]
xor ecx, ecx
vzeroupper
call qword [sym.imp.USER32.dll_MessageBoxA]
mov qword [rbp + 0xd0], rbx
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x40], rax
mov qword [rbp + 0xd0], rsi
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x48], rax
mov qword [rbp + 0xd0], r14
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x460], rax
mov qword [rbp + 0xd0], rsi
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x468], rax
movdqa xmm0, xmmword [rbp + 0x460]
xorps xmm0, xmmword [rbp + 0x40]
movdqa xmmword [rbp + 0x40], xmm0
lea rcx, [rbp + 0x40]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
jmp 0x1400266d0
mov ecx, 1
call sub.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_
nop
mov dword [rbp + 8], edi
mov ecx, 6
call sub.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_
nop
mov qword [rbp + 0xd0], r14
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x40], rax
mov qword [rbp + 0xd0], rsi
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x48], rax
mov qword [rbp + 0xd0], r14
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x460], rax
mov qword [rbp + 0xd0], rsi
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x468], rax
movdqa xmm0, xmmword [rbp + 0x40]
xorps xmm0, xmmword [rbp + 0x460]
movdqa xmmword [rbp + 0x40], xmm0
movabs rax, 0x9d5ae97345005e39
mov qword [rbp + 0xd0], rax
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x20], rax
movabs rax, 0x97a0fefb248deed7
mov qword [rbp + 0xd0], rax
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x28], rax
movabs rax, 0x4354b4dfc9875aeb
mov qword [rbp + 0xd0], rax
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x30], rax
movabs rax, 0xfe30c33007faa490
mov qword [rbp + 0xd0], rax
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x38], rax
mov qword [rbp + 0xd0], r14
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x380], rax
mov qword [rbp + 0xd0], rsi
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x388], rax
mov qword [rbp + 0xd0], r12
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x390], rax
mov qword [rbp + 0xd0], r15
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x398], rax
vmovdqu ymm0, ymmword [rbp + 0x380]
vpxor ymm1, ymm0, ymmword [rbp + 0x20]
vmovdqa ymmword [rbp + 0x20], ymm1
mov r9d, reloc.WS2_32.dll_recv
lea r8, [rbp + 0x40]
lea rdx, [rbp + 0x20]
xor ecx, ecx
vzeroupper
call qword [sym.imp.USER32.dll_MessageBoxA]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov qword [rbp + 0xd0], r14
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x40], rax
mov qword [rbp + 0xd0], rsi
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x48], rax
mov qword [rbp + 0xd0], r14
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x460], rax
mov qword [rbp + 0xd0], rsi
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x468], rax
movdqa xmm0, xmmword [rbp + 0x40]
xorps xmm0, xmmword [rbp + 0x460]
movdqa xmmword [rbp + 0x40], xmm0
movabs rax, 0x9d5ae97345005e39
mov qword [rbp + 0xd0], rax
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x20], rax
movabs rax, 0x9fa6fefb248deed7
mov qword [rbp + 0xd0], rax
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x28], rax
movabs rax, 0x65fa2d4dcc45aea
mov qword [rbp + 0xd0], rax
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x30], rax
movabs rax, 0xfe30c31162a8b681
mov qword [rbp + 0xd0], rax
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x38], rax
mov qword [rbp + 0xd0], r14
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x380], rax
mov qword [rbp + 0xd0], rsi
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x388], rax
mov qword [rbp + 0xd0], r12
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x390], rax
mov qword [rbp + 0xd0], r15
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x398], rax
vmovdqu ymm0, ymmword [rbp + 0x380]
vpxor ymm1, ymm0, ymmword [rbp + 0x20]
vmovdqa ymmword [rbp + 0x20], ymm1
mov r9d, reloc.WS2_32.dll_recv
lea r8, [rbp + 0x40]
lea rdx, [rbp + 0x20]
xor ecx, ecx
vzeroupper
call qword [sym.imp.USER32.dll_MessageBoxA]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov qword [rbp + 0xd0], r14
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x40], rax
mov qword [rbp + 0xd0], rsi
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x48], rax
mov qword [rbp + 0xd0], r14
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x460], rax
mov qword [rbp + 0xd0], rsi
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x468], rax
movdqa xmm0, xmmword [rbp + 0x40]
xorps xmm0, xmmword [rbp + 0x460]
movdqa xmmword [rbp + 0x40], xmm0
movabs rax, 0x9d5ae97345005e39
mov qword [rbp + 0xd0], rax
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x400], rax
movabs rax, 0x8ee4bae1288ceed7
mov qword [rbp + 0xd0], rax
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x408], rax
movabs rax, 0xa0db5c3d88750eb
mov qword [rbp + 0xd0], rax
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x410], rax
movabs rax, 0x9176e3630defe596
mov qword [rbp + 0xd0], rax
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x418], rax
movabs rax, 0x349b685e34358721
mov qword [rbp + 0xd0], rax
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x420], rax
movabs rax, 0xab073b9e7d575a65
mov qword [rbp + 0xd0], rax
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x428], rax
movabs rax, 0xff4f78ec87324fab
mov qword [rbp + 0xd0], rax
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x430], rax
movabs rax, 0xdd2dbcc095099ddf
mov qword [rbp + 0xd0], rax
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x438], rax
movabs rdx, 0xd12b79fe360d18c7
mov qword [rbp + 0xd0], rdx
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x440], rax
movabs rcx, 0x4d88e7374e370380
mov qword [rbp + 0xd0], rcx
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x448], rax
mov qword [rbp + 0xd0], r14
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x380], rax
mov qword [rbp + 0xd0], rsi
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x388], rax
mov qword [rbp + 0xd0], r12
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x390], rax
mov qword [rbp + 0xd0], r15
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x398], rax
movabs rax, 0x58d80d2a5d5bf353
mov qword [rbp + 0xd0], rax
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x3a0], rax
mov qword [rbp + 0xd0], r13
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x3a8], rax
movabs rax, 0x8f3f1184d41f7b9d
mov qword [rbp + 0xd0], rax
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x3b0], rax
movabs rax, 0xfc48c4a5bb6ef3b6
mov qword [rbp + 0xd0], rax
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x3b8], rax
mov qword [rbp + 0xd0], rdx
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x3c0], rax
mov qword [rbp + 0xd0], rcx
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x3c8], rax
vmovdqu ymm0, ymmword [rbp + 0x380]
vpxor ymm1, ymm0, ymmword [rbp + 0x400]
vmovdqa ymmword [rbp + 0x400], ymm1
vmovdqu ymm0, ymmword [rbp + 0x420]
vpxor ymm1, ymm0, ymmword [rbp + 0x3a0]
vmovdqa ymmword [rbp + 0x420], ymm1
vmovdqa xmm2, xmmword [rbp + 0x440]
vxorps xmm2, xmm2, xmmword [rbp + 0x3c0]
vmovdqa xmmword [rbp + 0x440], xmm2
mov r9d, reloc.WS2_32.dll_recv
lea r8, [rbp + 0x40]
lea rdx, [rbp + 0x400]
xor ecx, ecx
vzeroupper
call qword [sym.imp.USER32.dll_MessageBoxA]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov qword [rbp + 0xd0], r14
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x40], rax
mov qword [rbp + 0xd0], rsi
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x48], rax
mov qword [rbp + 0xd0], r14
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x460], rax
mov qword [rbp + 0xd0], rsi
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x468], rax
movdqa xmm0, xmmword [rbp + 0x40]
xorps xmm0, xmmword [rbp + 0x460]
movdqa xmmword [rbp + 0x40], xmm0
movabs rax, 0x9d5ae97345005e39
mov qword [rbp + 0xd0], rax
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x20], rax
movabs rax, 0x92a5aae62f83eed7
mov qword [rbp + 0xd0], rax
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x28], rax
movabs rax, 0x1544b4d49d8145f0
mov qword [rbp + 0xd0], rax
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x30], rax
movabs rax, 0xfe30c31162a8b797
mov qword [rbp + 0xd0], rax
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x38], rax
mov qword [rbp + 0xd0], r14
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x380], rax
mov qword [rbp + 0xd0], rsi
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x388], rax
mov qword [rbp + 0xd0], r12
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x390], rax
mov qword [rbp + 0xd0], r15
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x398], rax
vmovdqu ymm0, ymmword [rbp + 0x380]
vpxor ymm1, ymm0, ymmword [rbp + 0x20]
vmovdqa ymmword [rbp + 0x20], ymm1
mov r9d, reloc.WS2_32.dll_recv
lea r8, [rbp + 0x40]
lea rdx, [rbp + 0x20]
xor ecx, ecx
vzeroupper
call qword [sym.imp.USER32.dll_MessageBoxA]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
nop
mov dword [rbp + 0xf0], edi
mov ecx, 6
call sub.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_
nop
mov dword [rbp + 0x100], edi
mov ecx, 6
call sub.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_
nop
mov ecx, 1
call sub.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_
nop
mov dword [rbp + 8], edi
mov ecx, 6
call sub.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_
int3