Function at 0x1400393a0
Capabilities:
Accept command line arguments
Create process on windows
Create thread
Enumerate gui resources
Execute command
Hide graphical window
Terminate process

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
sub rsp, 0xbd0
movaps xmmword [rax - 0x38], xmm6
lea rbp, [rax - 0xb78]
and rbp, 0xffffffffffffffe0
mov rax, qword [0x14013c040]
xor rax, rsp
mov qword [rbp + 0xb28], rax
xor r13d, r13d
mov ecx, 0xfffffff6
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov edx, 0xffffffbf
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetConsoleMode]
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x760], xmm0
movups xmmword [rbp + 0x770], xmm0
movups xmmword [rbp + 0x780], xmm0
movups xmmword [rbp + 0x790], xmm0
movups xmmword [rbp + 0x7a0], xmm0
movups xmmword [rbp + 0x7b0], xmm0
movups xmmword [rbp + 0x7c0], xmm0
mov qword [rbp + 0x7d0], rax
lea rcx, [rbp + 0x760]
call fcn.14003b880
nop
lea rcx, [rbp + 0xa0]
call fcn.14002e120
nop
mov r8, rax
cmp qword [rax + 0x18], 7
jbe 0x140039460
mov r8, qword [rax]
mov rax, qword [rax + 0x10]
lea r9, [r8 + rax*2]
lea rdx, [rbp + 0x980]
lea rcx, [rbp + 0x760]
call fcn.14003bb40
mov rdx, qword [0x14013c390]
cmp rdx, 0xf
jbe 0x1400394bc
mov rcx, qword [0x14013c378]
inc rdx
cmp rdx, 0x1000
jb 0x1400394b7
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140039a65
mov rcx, r8
call fcn.14009721c
movups xmm0, xmmword [rbp + 0x980]
movups xmmword [0x14013c378], xmm0
movups xmm1, xmmword [rbp + 0x990]
movups xmmword [0x14013c388], xmm1
mov qword [rbp + 0x990], r13
mov qword [rbp + 0x998], 0xf
mov byte [rbp + 0x980], 0
lea rcx, [rbp + 0x980]
call fcn.140004ca0
nop
lea rcx, [rbp + 0xa0]
call fcn.140004c20
call fcn.1400384e0
mov edx, 5
mov rcx, qword [0x14013ddc0]
call qword [sym.imp.USER32.dll_ShowWindow]
lea rcx, str.ntdll.dll
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov r8, rax
movabs r15, 0xf96b5f81c503ae6d
movabs rsi, 0xdb239a58ba0432f2
test rax, rax
je 0x140039622
movabs rax, 0x9c3d2be4826fda3f
mov qword [rbp], rax
mov rcx, qword [rbp]
mov qword [rbp + 0x80], rcx
movabs rax, 0xdb239a36d56d4180
mov qword [rbp], rax
mov rcx, qword [rbp]
mov qword [rbp + 0x88], rcx
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x9e0], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x9e8], rax
movdqa xmm0, xmmword [rbp + 0x80]
xorps xmm0, xmmword [rbp + 0x9e0]
movdqa xmmword [rbp + 0x80], xmm0
lea rdx, [rbp + 0x80]
mov rcx, r8
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rbx, rax
test rax, rax
je 0x140039622
xor edx, edx
mov r8d, pe_nt_image_headers64
lea rcx, [rbp + 0x854]
call sub.VCRUNTIME140.dll_memset
mov dword [rbp + 0x850], 0x114
lea rcx, [rbp + 0x850]
call rbx
nop dword [rax]
test eax, eax
jne 0x140039a6c
mov eax, dword [rbp + 0x85c]
cmp eax, 0x4a65
je 0x14003961c
cmp eax, 0x585d
jne 0x140039622
mov dword [0x14013e4c8], eax
call fcn.14002e560
call fcn.140036e40
mov edx, 5
mov rcx, qword [0x14013ddc0]
call qword [sym.imp.USER32.dll_ShowWindow]
xorps xmm0, xmm0
movups xmmword [rbp + 0x140], xmm0
mov qword [rbp + 0x150], r13
mov qword [rbp + 0x158], r13
mov r8d, 7
lea rdx, str.cs2.exe
lea rcx, [rbp + 0x140]
call fcn.140028740
lea rcx, [rbp + 0x140]
call fcn.1400364c0
movabs r14, 0x19408ac226777ea4
movabs r12, 0x78dd08538bf4626f
test eax, eax
jne 0x14003975b
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movabs rax, 0x964b3af2a466c23d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x100], rax
movabs rax, 0xf511c91b9a6a5782
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x108], rax
movabs rax, 0x78dd08538bf46265
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x110], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x118], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0xae0], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0xae8], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0xaf0], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0xaf8], rax
vmovdqu ymm0, ymmword [rbp + 0x100]
vpxor ymm1, ymm0, ymmword [rbp + 0xae0]
vmovdqa ymmword [rbp + 0x100], ymm1
lea rdx, [rbp + 0x100]
vzeroupper
call fcn.140005180
xorps xmm0, xmm0
movups xmmword [rbp + 0x50], xmm0
mov qword [rbp + 0x60], r13
mov qword [rbp + 0x68], r13
mov r8d, 7
lea rdx, str.cs2.exe
lea rcx, [rbp + 0x50]
call fcn.140028740
lea rcx, [rbp + 0x50]
call fcn.1400364c0
mov ebx, eax
test eax, eax
jne 0x1400397d4
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
xorps xmm0, xmm0
movups xmmword [rbp + 0x50], xmm0
mov qword [rbp + 0x60], r13
mov qword [rbp + 0x68], r13
mov r8d, 7
lea rdx, str.cs2.exe
lea rcx, [rbp + 0x50]
call fcn.140028740
lea rcx, [rbp + 0x50]
call fcn.1400364c0
mov ebx, eax
test eax, eax
je 0x140039794
mov qword [rbp + 0x6b0], r13
mov dword [rbp + 0x6b8], ebx
lea rdx, [rbp + 0x6b0]
lea rcx, [0x14002d800]
call qword [sym.imp.USER32.dll_EnumWindows]
test eax, eax
jne 0x140039811
call qword [sym.imp.KERNEL32.dll_GetLastError]
nop
cmp eax, 0xffffffff
jne 0x140039811
mov rax, qword [rbp + 0x6b0]
test rax, rax
jne 0x140039814
mov rax, r13
mov qword [0x14013d930], rax
nop dword [rax + rax]
call fcn.140036680
lea rcx, str.win32u.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
test rax, rax
je 0x140039859
lea rdx, str.NtUserGetPointerProprietaryId
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14013d8c8], rax
test rax, rax
je 0x140039859
mov dword [0x14013d8d0], ebx
movabs rbx, 0xf96b5f81c570c20e
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x90], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x98], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x9d0], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x9d8], rax
movdqa xmm0, xmmword [rbp + 0x90]
xorps xmm0, xmmword [rbp + 0x9d0]
movdqa xmmword [rbp + 0x90], xmm0
lea rcx, [rbp + 0x90]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov edi, r13d
nop dword [rax]
inc edi
cmp edi, 0x1e
jg 0x14003ac29
mov qword ds:[rbp + 0x6f0], r13
mov qword [rbp + 0x6f8], r13
mov qword [rbp + 0x700], r13
mov qword [rbp + 0x710], r13
mov qword [rbp + 0x718], r13
mov dword [rbp + 0x708], 0x80000002
mov eax, dword [0x14013d8d0]
mov dword [rbp + 0x6e8], eax
lea rcx, [rbp + 0x6e8]
call qword [0x14013d8c8]
mov rax, qword ds:[rbp + 0x710]
mov qword [0x14013d8d8], rax
mov qword [0x14013d838], rax
call fcn.14002d360
mov qword [0x14013d830], rax
mov rcx, qword [0x14013d838]
lea rax, [rcx + 0x19a63a0]
mov qword [0x14013d840], rax
lea rax, [rcx + 0x1a085a0]
mov qword [0x14013d848], rax
lea rax, [rcx + 0x19f6488]
mov qword [0x14013d860], rax
lea rax, [rcx + 0x1810fa8]
mov qword [0x14013d868], rax
lea rax, [rcx + 0x1804c58]
mov qword [0x14013d878], rax
lea rax, [rcx + 0x1a0d658]
mov qword [0x14013d880], rax
test rcx, rcx
setne bl
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
nop dword [rax + rax]
test bl, bl
je 0x1400398d0
cmp edi, 1
jle 0x1400399d8
mov ecx, 0x3a98
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, qword [0x14013ddc0]
nop
call qword [sym.imp.USER32.dll_SetForegroundWindow]
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_Sleep]
mov edx, 6
xor ecx, ecx
call qword [sym.imp.ole32.dll_CoInitializeEx]
mov ebx, r13d
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
lea r8, [rbp + 0x6a8]
mov edx, 8
call qword [sym.imp.ADVAPI32.dll_OpenProcessToken]
nop dword [rax]
test eax, eax
je 0x140039cc8
lea rax, [rbp + 0x6e4]
mov qword [rsp + 0x20], rax
mov r9d, 4
lea r8, [rbp + 0x6e0]
lea edx, [r9 + 0x16]
mov rcx, qword [rbp + 0x6a8]
call qword [sym.imp.ADVAPI32.dll_GetTokenInformation]
test eax, eax
je 0x140039bf2
mov ebx, 1
jmp 0x140039bf8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movabs rax, 0x8d4b3be4a96acf2b
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xa0], rax
movabs rax, 0xab4cba2cdf63129d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xa8], rax
movabs rax, 0x58ba663aff95100a
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xb0], rax
movabs rax, 0x7060e7a7520407d7
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xb8], rax
movabs rax, 0x88a552ff4fc907ff
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xc0], rax
movabs rax, 0xcef8bdc22b238765
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xc8], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x980], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x988], rax
movabs r12, 0x78dd08538bf4626f
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x990], rax
movabs r14, 0x19408ac226777ea4
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x998], rax
movabs rax, 0xe7c911f561a66191
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x9a0], rax
movabs rax, 0xced693ec4c4dee16
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x9a8], rax
vmovdqu ymm0, ymmword [rbp + 0xa0]
vpxor ymm1, ymm0, ymmword [rbp + 0x980]
vmovdqa ymmword [rbp + 0xa0], ymm1
vmovdqa xmm0, xmmword [rbp + 0xc0]
vxorps xmm0, xmm0, xmmword [rbp + 0x9a0]
vmovdqa xmmword [rbp + 0xc0], xmm0
lea rdx, [rbp + 0xa0]
vzeroupper
call fcn.140005180
lea rdx, [0x140005360]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 0x2710
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rcx, qword ds:[rbp + 0x6a8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test ebx, ebx
je 0x140039cce
cmp dword [rbp + 0x6e0], 0
jne 0x140039cce
lea rcx, [rbp + 0x6a0]
call fcn.14008dd40
test eax, eax
jne 0x140039cce
lea rcx, [rbp + 0x7e0]
call qword [sym.imp.KERNEL32.dll_GetStartupInfoW]
nop dword [rax]
call qword [sym.imp.KERNEL32.dll_GetCommandLineW]
mov r8, rax
lea rax, [rbp + 0x6c0]
mov qword [rsp + 0x50], rax
lea rax, [rbp + 0x7e0]
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x40], r13
mov qword [rsp + 0x38], r13
mov dword [rsp + 0x30], r13d
mov dword [rsp + 0x28], r13d
mov qword [rsp + 0x20], r13
xor r9d, r9d
xor edx, edx
mov rcx, qword [rbp + 0x6a0]
call qword [sym.imp.ADVAPI32.dll_CreateProcessAsUserW]
test eax, eax
je 0x140039cb3
mov rcx, qword [rbp + 0x6c0]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp + 0x6c8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ExitProcess]
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rcx, qword [rbp + 0x6a0]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x140039cce
call qword [sym.imp.KERNEL32.dll_GetLastError]
xor edx, edx
mov rcx, qword [0x14013ddc0]
call qword [sym.imp.USER32.dll_ShowWindow]
nop dword [rax]
call fcn.140038de0
mov qword [rbp + 0x728], r13
mov qword [rbp + 0x730], r13
mov qword [rbp + 0x738], r13
mov qword [rbp + 0x748], r13
mov qword [rbp + 0x750], r13
mov dword [rbp + 0x740], 0x80000003
mov eax, dword [0x14013d8d0]
mov dword [rbp + 0x720], eax
lea rcx, [rbp + 0x720]
call qword [0x14013d8c8]
mov rdx, qword [rbp + 0x750]
mov qword [0x14013d8e0], rdx
add rdx, 0x5207d4
lea r8, [rbp + 0xe0]
call fcn.140004d30
cmp qword [rbp + 0xe0], 0x36bb
sete byte [0x14013d9c1]
mov ecx, 0x38
call fcn.1400974ec
mov rdx, rax
mov qword [0x14013d950], rax
mov rax, qword [0x14013e440]
cmp qword [rax + 0x18], 0xf
jbe 0x140039d85
mov rax, qword [rax]
mov qword [rdx], rax
mov rcx, qword [0x14013e440]
add rcx, 0x20
cmp qword [rcx + 0x18], 0xf
jbe 0x140039d9d
mov rcx, qword [rcx]
mov qword [rdx + 8], rcx
mov rax, qword [0x14013e440]
add rax, 0x40
cmp qword [rax + 0x18], 0xf
jbe 0x140039db6
mov rax, qword [rax]
mov qword [rdx + 0x10], rax
mov rax, qword [0x14013e440]
add rax, 0x60
cmp qword [rax + 0x18], 0xf
jbe 0x140039dcf
mov rax, qword [rax]
mov qword [rdx + 0x18], rax
mov rax, qword [0x14013e440]
sub rax, 0xffffffffffffff80
cmp qword [rax + 0x18], 0xf
jbe 0x140039de8
mov rax, qword [rax]
mov qword ds:[rdx + 0x20], rax
mov rax, qword [0x14013e440]
add rax, 0xa0
cmp qword [rax + 0x18], 0xf
jbe 0x140039e05
mov rax, qword [rax]
mov qword [rdx + 0x28], rax
mov rax, qword [0x14013e440]
add rax, 0xc0
cmp qword [rax + 0x18], 0xf
jbe 0x140039e20
mov rax, qword [rax]
mov qword [rdx + 0x30], rax
mov rbx, qword [0x14013e440]
mov rdi, qword [0x14013e448]
cmp rbx, rdi
je 0x14003a7f4
movabs r13, 0x7fffffffffffffff
lea rdx, [0x14011e0d0]
nop dword [rax]
mov rcx, qword ds:[rbx + 0x10]
mov rax, r13
sub rax, rcx
cmp rax, 3
jb 0x14003b42c
mov r9, rbx
cmp qword [rbx + 0x18], 0xf
jbe 0x140039e77
mov r9, qword [rbx]
mov qword [rsp + 0x30], 3
mov qword [rsp + 0x28], rdx
mov qword [rsp + 0x20], rcx
lea rcx, [rbp + 0x2f0]
call fcn.1400296c0
nop
lea r8, [rbp + 0x2f0]
lea rdx, [rbp + 0x590]
call fcn.140028040
mov rcx, qword [rax]
mov eax, 0x40
cmp byte [rcx + 0x50], 1
je 0x140039ebc
mov byte [rcx + 0x50], 1
mov byte [rax + rcx], 0
lea rcx, [rbp + 0x2f0]
call fcn.140004ca0
mov rcx, qword ds:[rbx + 0x10]
mov rax, r13
sub rax, rcx
cmp rax, 7
jb 0x14003b426
mov r9, rbx
cmp qword [rbx + 0x18], 0xf
jbe 0x140039ef7
mov r9, qword [rbx]
mov qword [rsp + 0x30], 7
lea rax, [0x14011e0f8]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea rcx, [rbp + 0x2d0]
call fcn.1400296c0
nop
lea r8, [rbp + 0x2d0]
lea rdx, [rbp + 0x5a0]
call fcn.140028040
mov rcx, qword [rax]
mov eax, 0x40
cmp byte [rcx + 0x50], 0
je 0x140039f43
mov byte [rcx + 0x50], 0
mov dword [rcx + rax], 1
lea rcx, [rbp + 0x2d0]
call fcn.140004ca0
mov rcx, qword [rbx + 0x10]
mov rax, r13
sub rax, rcx
cmp rax, 7
jb 0x14003b41e
mov r9, rbx
cmp qword [rbx + 0x18], 0xf
jbe 0x140039f77
mov r9, qword [rbx]
mov qword [rsp + 0x30], 7
lea rax, [0x14011e100]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea rcx, [rbp + 0x2b0]
call fcn.1400296c0
nop
lea r8, [rbp + 0x2b0]
lea rdx, [rbp + 0x5b0]
call fcn.140028040
mov rcx, qword [rax]
mov eax, 0x40
cmp byte [rcx + 0x50], 0
je 0x140039fc3
mov byte [rcx + 0x50], 0
mov dword [rcx + rax], 1
lea rcx, [rbp + 0x2b0]
call fcn.140004ca0
mov rcx, qword [rbx + 0x10]
mov rax, r13
sub rax, rcx
cmp rax, 6
jb 0x14003b418
mov r9, rbx
cmp qword [rbx + 0x18], 0xf
jbe 0x140039ff7
mov r9, qword [rbx]
mov qword [rsp + 0x30], 6
lea rax, [0x14011e108]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea rcx, [rbp + 0x330]
call fcn.1400296c0
nop
lea r8, [rbp + 0x330]
lea rdx, [rbp + 0x5c0]
call fcn.140028040
mov rcx, qword [rax]
mov eax, 0x40
cmp byte [rcx + 0x50], 1
je 0x14003a043
mov byte [rcx + 0x50], 1
mov byte [rax + rcx], 0
lea rcx, [rbp + 0x330]
call fcn.140004ca0
mov rcx, qword ds:[rbx + 0x10]
mov rax, r13
sub rax, rcx
cmp rax, 7
jb 0x14003b412
mov r9, rbx
cmp qword [rbx + 0x18], 0xf
jbe 0x14003a077
mov r9, qword [rbx]
mov qword [rsp + 0x30], 7
lea rax, [0x14011e110]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea rcx, [rbp + 0x350]
call fcn.1400296c0
nop
lea r8, [rbp + 0x350]
lea rdx, [rbp + 0x5d0]
call fcn.140028040
mov rcx, qword [rax]
mov eax, 0x40
cmp byte [rcx + 0x50], 0
je 0x14003a0c3
mov byte [rcx + 0x50], 0
mov dword [rcx + rax], 1
lea rcx, [rbp + 0x350]
call fcn.140004ca0
mov rcx, qword [rbx + 0x10]
mov rax, r13
sub rax, rcx
cmp rax, 7
jb 0x14003b40c
mov r9, rbx
cmp qword [rbx + 0x18], 0xf
jbe 0x14003a0f7
mov r9, qword [rbx]
mov qword [rsp + 0x30], 7
lea rax, [0x14011e118]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea rcx, [rbp + 0x370]
call fcn.1400296c0
nop
lea r8, [rbp + 0x370]
lea rdx, [rbp + 0x5e0]
call fcn.140028040
mov rcx, qword [rax]
mov eax, 0x40
cmp byte [rcx + 0x50], 0
je 0x14003a143
mov byte [rcx + 0x50], 0
mov dword [rcx + rax], 1
lea rcx, [rbp + 0x370]
call fcn.140004ca0
mov rcx, qword [rbx + 0x10]
mov rax, r13
sub rax, rcx
cmp rax, 7
jb 0x14003b406
mov r9, rbx
cmp qword [rbx + 0x18], 0xf
jbe 0x14003a177
mov r9, qword [rbx]
mov qword [rsp + 0x30], 7
lea rax, [0x14011e120]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea rcx, [rbp + 0x390]
call fcn.1400296c0
nop
lea r8, [rbp + 0x390]
lea rdx, [rbp + 0x5f0]
call fcn.140028040
mov rcx, qword [rax]
mov eax, 0x40
cmp byte [rcx + 0x50], 1
je 0x14003a1c3
mov byte [rcx + 0x50], 1
mov byte [rcx + rax], 0
lea rcx, [rbp + 0x390]
call fcn.140004ca0
mov rcx, qword ds:[rbx + 0x10]
mov rax, r13
sub rax, rcx
cmp rax, 0xf
jb 0x14003b3fe
mov r9, rbx
cmp qword [rbx + 0x18], 0xf
jbe 0x14003a1f7
mov r9, qword [rbx]
mov qword [rsp + 0x30], 0xf
lea rax, [0x14011e128]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea rcx, [rbp + 0x3b0]
call fcn.1400296c0
nop
lea r8, [rbp + 0x3b0]
lea rdx, [rbp + 0x600]
call fcn.140028040
mov rcx, qword [rax]
mov eax, 0x40
cmp byte [rcx + 0x50], 1
je 0x14003a243
mov byte [rcx + 0x50], 1
mov byte [rcx + rax], 0
lea rcx, [rbp + 0x3b0]
call fcn.140004ca0
mov rcx, qword ds:[rbx + 0x10]
mov rax, r13
sub rax, rcx
cmp rax, 6
jb 0x14003b3f8
mov r9, rbx
cmp qword [rbx + 0x18], 0xf
jbe 0x14003a277
mov r9, qword [rbx]
mov qword [rsp + 0x30], 6
lea rax, [0x14011e0d4]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea rcx, [rbp + 0x3d0]
call fcn.1400296c0
nop
lea r8, [rbp + 0x3d0]
lea rdx, [rbp + 0x610]
call fcn.140028040
mov rcx, qword [rax]
xor eax, eax
lea edx, [rax + 0x40]
cmp byte [rcx + 0x50], al
je 0x14003a2c1
mov byte [rcx + 0x50], al
mov dword [rdx + rcx], eax
lea rcx, [rbp + 0x3d0]
call fcn.140004ca0
mov rcx, qword ds:[rbx + 0x10]
mov rax, r13
sub rax, rcx
cmp rax, 3
jb 0x14003b3f2
mov r9, rbx
cmp qword [rbx + 0x18], 0xf
jbe 0x14003a2f7
mov r9, qword [rbx]
mov qword [rsp + 0x30], 3
lea rax, [0x14011e0dc]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea rcx, [rbp + 0x3f0]
call fcn.1400296c0
nop
lea r8, [rbp + 0x3f0]
lea rdx, [rbp + 0x550]
call fcn.140028040
mov rcx, qword ds:[rax]
mov dword [rcx + 0x40], 0x3f800000
cmp byte [rcx + 0x50], 2
je 0x14003a346
mov byte [rcx + 0x50], 2
lea rcx, [rbp + 0x3f0]
call fcn.140004ca0
mov rcx, qword ds:[rbx + 0x10]
mov rax, r13
sub rax, rcx
cmp rax, 0x11
jb 0x14003b3ec
mov r9, rbx
cmp qword [rbx + 0x18], 0xf
jbe 0x14003a377
mov r9, qword [rbx]
mov qword [rsp + 0x30], 0x11
lea rax, [0x14011e160]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea rcx, [rbp + 0x410]
call fcn.1400296c0
nop
lea r8, [rbp + 0x410]
lea rdx, [rbp + 0x620]
call fcn.140028040
mov rcx, qword [rax]
mov eax, 0xc8
mov edx, 0x40
cmp byte [rcx + 0x50], 0
je 0x14003a3c8
mov byte [rcx + 0x50], 0
mov dword [rdx + rcx], eax
lea rcx, [rbp + 0x410]
call fcn.140004ca0
mov rcx, qword [rbx + 0x10]
mov rax, r13
sub rax, rcx
cmp rax, 7
jb 0x14003b3e6
mov r9, rbx
cmp qword [rbx + 0x18], 0xf
jbe 0x14003a3f8
mov r9, qword [rbx]
mov qword [rsp + 0x30], 7
lea rax, [0x14011e178]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea rcx, [rbp + 0x430]
call fcn.1400296c0
nop
lea r8, [rbp + 0x430]
lea rdx, [rbp + 0x630]
call fcn.140028040
mov rcx, qword ds:[rax]
mov eax, 0x40
cmp byte [rcx + 0x50], 1
je 0x14003a446
mov byte [rcx + 0x50], 1
mov byte [rax + rcx], 0
lea rcx, [rbp + 0x430]
call fcn.140004ca0
mov rcx, qword [rbx + 0x10]
mov rax, r13
sub rax, rcx
cmp rax, 0xc
jb 0x14003b3de
mov r9, rbx
cmp qword [rbx + 0x18], 0xf
jbe 0x14003a477
mov r9, qword [rbx]
mov qword [rsp + 0x30], 0xc
lea rax, [0x14011e180]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea rcx, [rbp + 0x450]
call fcn.1400296c0
nop
lea r8, [rbp + 0x450]
lea rdx, [rbp + 0x640]
call fcn.140028040
mov rcx, qword [rax]
mov eax, 0xf
lea edx, [rax + 0x31]
cmp byte [rcx + 0x50], 0
je 0x14003a4c6
mov byte [rcx + 0x50], 0
mov dword [rdx + rcx], eax
lea rcx, [rbp + 0x450]
call fcn.140004ca0
mov rcx, qword ds:[rbx + 0x10]
mov rax, r13
sub rax, rcx
cmp rax, 0xf
jb 0x14003b3d8
mov r9, rbx
cmp qword [rbx + 0x18], 0xf
jbe 0x14003a4f7
mov r9, qword [rbx]
mov qword [rsp + 0x30], 0xf
lea rax, [0x14011e190]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea rcx, [rbp + 0x470]
call fcn.1400296c0
nop
lea r8, [rbp + 0x470]
lea rdx, [rbp + 0x650]
call fcn.140028040
mov rcx, qword ds:[rax]
mov dword [rcx + 0x40], 0x3f800000
cmp byte [rcx + 0x50], 2
je 0x14003a546
mov byte [rcx + 0x50], 2
lea rcx, [rbp + 0x470]
call fcn.140004ca0
mov rcx, qword ds:[rbx + 0x10]
mov rax, r13
sub rax, rcx
cmp rax, 0x13
jb 0x14003b3d2
mov r9, rbx
cmp qword [rbx + 0x18], 0xf
jbe 0x14003a577
mov r9, qword [rbx]
mov qword [rsp + 0x30], 0x13
lea rax, [0x14011e1d0]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea rcx, [rbp + 0x490]
call fcn.1400296c0
nop
lea r8, [rbp + 0x490]
lea rdx, [rbp + 0x660]
call fcn.140028040
mov rcx, qword [rax]
mov eax, 0x40
cmp byte [rcx + 0x50], 1
je 0x14003a5c3
mov byte [rcx + 0x50], 1
mov byte [rcx + rax], 0
lea rcx, [rbp + 0x490]
call fcn.140004ca0
mov rcx, qword ds:[rbx + 0x10]
mov rax, r13
sub rax, rcx
cmp rax, 0xc
jb 0x14003b3cc
mov r9, rbx
cmp qword [rbx + 0x18], 0xf
jbe 0x14003a5f7
mov r9, qword [rbx]
mov qword [rsp + 0x30], 0xc
lea rax, [0x14011e1a0]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea rcx, [rbp + 0x4b0]
call fcn.1400296c0
nop
lea r8, [rbp + 0x4b0]
lea rdx, [rbp + 0x670]
call fcn.140028040
mov rcx, qword [rax]
mov eax, 0x40
cmp byte [rcx + 0x50], 1
je 0x14003a643
mov byte [rcx + 0x50], 1
mov byte [rax + rcx], 0
lea rcx, [rbp + 0x4b0]
call fcn.140004ca0
movaps xmm6, xmmword [0x140125de0]
movups xmmword [rbp + 0x680], xmm6
mov rcx, qword [rbx + 0x10]
mov rax, r13
sub rax, rcx
cmp rax, 8
jb 0x14003b3c6
mov r9, rbx
cmp qword [rbx + 0x18], 0xf
jbe 0x14003a682
mov r9, qword [rbx]
mov qword [rsp + 0x30], 8
lea rax, [0x14011e1b0]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea rcx, [rbp + 0x4d0]
call fcn.1400296c0
nop
lea r8, [rbp + 0x4d0]
lea rdx, [rbp + 0x690]
call fcn.140028040
mov rcx, qword [rax]
cmp byte [rcx + 0x50], 3
movups xmmword [rcx + 0x40], xmm6
je 0x14003a6cd
mov byte [rcx + 0x50], 3
lea rcx, [rbp + 0x4d0]
call fcn.140004ca0
mov rcx, qword [rbx + 0x10]
mov rax, r13
sub rax, rcx
cmp rax, 0xb
jb 0x14003b3bc
mov r9, rbx
cmp qword [rbx + 0x18], 0xf
jbe 0x14003a6fa
mov r9, qword [rbx]
mov qword ss:[rsp + 0x30], 0xb
lea rax, [0x14011e1c0]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea rcx, [rbp + 0x310]
call fcn.1400296c0
nop
lea r8, [rbp + 0x310]
lea rdx, [rbp + 0x580]
call fcn.140028040
mov rcx, qword [rax]
mov eax, 0x40
cmp byte [rcx + 0x50], 1
je 0x14003a74b
mov byte [rcx + 0x50], 1
mov byte [rcx + rax], 0
lea rcx, [rbp + 0x310]
call fcn.140004ca0
mov rcx, qword [rbx + 0x10]
mov rax, r13
sub rax, rcx
cmp rax, 9
jb 0x14003b3b6
mov r9, rbx
cmp qword [rbx + 0x18], 0xf
jbe 0x14003a77c
mov r9, qword [rbx]
mov qword ss:[rsp + 0x30], 9
lea rax, [0x14011e0e0]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea rcx, [rbp + 0x4f0]
call fcn.1400296c0
nop
lea r8, [rbp + 0x4f0]
lea rdx, [rbp + 0x560]
call fcn.140028040
mov rcx, qword [rax]
mov eax, 5
lea edx, [rax + 0x3b]
cmp byte [rcx + 0x50], 0
je 0x14003a7ce
mov byte [rcx + 0x50], 0
mov dword [rdx + rcx], eax
lea rcx, [rbp + 0x4f0]
call fcn.140004ca0
add rbx, 0x20
cmp rbx, rdi
lea rdx, [0x14011e0d0]
jne 0x140039e50
xor r13d, r13d
call fcn.14008ef00
movabs rax, 0xad0e3be0ab66dc2a
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x20], rax
movabs rax, 0xaf0dee31f1685d9d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x28], rax
movabs rax, 0x78dd08538bf41617
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x30], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x38], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0xb00], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0xb08], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0xb10], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0xb18], rax
vmovdqu ymm0, ymmword [rbp + 0x20]
vpxor ymm1, ymm0, ymmword [rbp + 0xb00]
vmovdqa ymmword [rbp + 0x20], ymm1
lea rax, [rbp + 0x20]
mov qword [rbp + 0xf0], rax
lea rcx, [rbp + 0x20]
mov rdi, 0xffffffffffffffff
mov rax, rdi
vzeroupper
inc rax
cmp byte [rcx + rax], 0
jne 0x14003a8b1
mov qword [rbp + 0xf8], rax
call fcn.140096200
movaps xmm0, xmmword [rbp + 0xf0]
movdqa xmmword [rbp + 0x2a0], xmm0
lea r8, [rbp + 0x2a0]
mov edx, eax
lea rcx, [rbp + 0x260]
call fcn.140006100
nop
lea rcx, [rbp + 0x260]
call fcn.140007920
movzx ebx, al
lea rcx, [rbp + 0x260]
call fcn.140004c20
test bl, bl
je 0x14003a914
mov dword [0x14013c120], 0x28
mov ecx, 8
call fcn.140096ed0
lea rcx, [0x14002d880]
mov qword [rax], rcx
mov qword [rbp + 0x6d8], rax
lea rcx, [rbp + 0x78]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r13d
mov r9, rax
lea r8, [0x14002c080]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x70], rax
test rax, rax
je 0x14003ac19
mov qword [rbp + 0x6d8], r13
cmp dword [rbp + 0x78], 0
je 0x14003ac0d
movaps xmm0, xmmword [rbp + 0x70]
movdqa xmmword [rbp + 0x290], xmm0
lea rcx, [rbp + 0x290]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x14003ac0d
xorps xmm0, xmm0
movaps xmmword [rbp + 0x570], xmm0
movdqa xmmword [rbp + 0x70], xmm0
lea rax, [rbp + 0x510]
mov qword [rbp + 0x280], rax
lea rax, vtable.std::_Func_impl_no_alloc_void____cdecl___void___void___.0
mov qword [rbp + 0x510], rax
lea rax, [0x14001ec60]
mov qword [rbp + 0x518], rax
lea rax, [rbp + 0x510]
mov qword [rbp + 0x548], rax
lea rax, [rbp + 0x120]
mov qword [rbp + 0xf0], rax
movabs rax, 0xf91b2fe09a4fea3e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x40], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x48], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x9c0], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x9c8], rax
movdqa xmm0, xmmword [rbp + 0x40]
xorps xmm0, xmmword [rbp + 0x9c0]
movdqa xmmword [rbp + 0x40], xmm0
xorps xmm0, xmm0
movups xmmword [rbp + 0x120], xmm0
mov qword [rbp + 0x130], r13
mov qword [rbp + 0x138], r13
lea rax, [rbp + 0x40]
mov r8, rdi
inc r8
cmp byte [rax + r8], 0
jne 0x14003aa55
lea rdx, [rbp + 0x40]
lea rcx, [rbp + 0x120]
call fcn.1400082c0
nop
movabs rax, 0xd4193af5ab76c12e
mov qword [rbp + 0x6d8], rax
mov rax, qword [rbp + 0x6d8]
mov qword [rbp + 0x20], rax
movabs rax, 0xe903ff33d37646a1
mov qword [rbp + 0x6d8], rax
mov rax, qword [rbp + 0x6d8]
mov qword [rbp + 0x28], rax
mov qword [rbp + 0x6d8], r12
mov rax, qword [rbp + 0x6d8]
mov qword [rbp + 0x30], rax
mov qword [rbp + 0x6d8], r14
mov rax, qword [rbp + 0x6d8]
mov qword [rbp + 0x38], rax
mov qword [rbp + 0x6d8], r15
mov rax, qword [rbp + 0x6d8]
mov qword [rbp + 0x980], rax
mov qword [rbp + 0x6d8], rsi
mov rax, qword [rbp + 0x6d8]
mov qword [rbp + 0x988], rax
mov qword [rbp + 0x6d8], r12
mov rax, qword [rbp + 0x6d8]
mov qword [rbp + 0x990], rax
mov qword [rbp + 0x6d8], r14
mov rax, qword [rbp + 0x6d8]
mov qword [rbp + 0x998], rax
vmovdqu ymm0, ymmword [rbp + 0x20]
vpxor ymm1, ymm0, ymmword [rbp + 0x980]
vmovdqa ymmword [rbp + 0x20], ymm1
vxorps xmm0, xmm0, xmm0
vmovups xmmword [rbp + 0x160], xmm0
mov qword [rbp + 0x170], r13
mov qword [rbp + 0x178], r13
lea rax, [rbp + 0x20]
vzeroupper
inc rdi
cmp byte [rax + rdi], 0
jne 0x14003ab53
mov r8, rdi
lea rdx, [rbp + 0x20]
lea rcx, [rbp + 0x160]
call fcn.1400082c0
nop
lea r9, [rbp + 0x510]
lea r8, [rbp + 0x120]
lea rdx, [rbp + 0x160]
call fcn.14008c920
nop
lea rax, vtable.std::wstring_convert_class_std::codecvt_utf8_wchar_t__1114111__0___wchar_t__class_std::allocator_wchar_t___class_std::allocator_char__.0
mov qword [rbp + 0x760], rax
lea rcx, [rbp + 0x7a0]
call fcn.140004c20
lea rcx, [rbp + 0x780]
call fcn.140004ca0
mov rcx, qword [rbp + 0x778]
test rcx, rcx
je 0x14003abd6
mov rax, qword [rcx]
call qword [rax + 0x10]
test rax, rax
je 0x14003abd6
mov r8, qword [rax]
mov edx, 1
mov rcx, rax
call qword [r8]
xor eax, eax
mov rcx, qword [rbp + 0xb28]
xor rcx, rsp
call fcn.140096d90
lea r11, [rsp + 0xbd0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp + 0x78], r13d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
movabs rax, 0xf96b5f81c570c20e
mov qword [rbp + 0x6d8], rax
mov rax, qword [rbp + 0x6d8]
mov qword [rbp + 0xa0], rax
mov qword [rbp + 0x6d8], rsi
mov rax, qword [rbp + 0x6d8]
mov qword [rbp + 0xa8], rax
mov qword [rbp + 0x6d8], r15
mov rax, qword [rbp + 0x6d8]
mov qword [rbp + 0x980], rax
mov qword [rbp + 0x6d8], rsi
mov rax, qword [rbp + 0x6d8]
mov qword [rbp + 0x988], rax
movdqa xmm0, xmmword [rbp + 0xa0]
xorps xmm0, xmmword [rbp + 0x980]
movdqa xmmword [rbp + 0xa0], xmm0
lea rcx, [rbp + 0xa0]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov edx, 5
mov rcx, qword [0x14013ddc0]
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movabs rax, 0x8d4b3be4a96acf2b
mov qword [rbp + 0x6d8], rax
mov rax, qword [rbp + 0x6d8]
mov qword [rbp + 0x180], rax
movabs rax, 0xfb57e839ce77129d
mov qword [rbp + 0x6d8], rax
mov rax, qword [rbp + 0x6d8]
mov qword [rbp + 0x188], rax
movabs rax, 0x58f37a36fd9d100b
mov qword [rbp + 0x6d8], rax
mov rax, qword [rbp + 0x6d8]
mov qword [rbp + 0x190], rax
movabs rax, 0x3934e9a3521911e7
mov qword [rbp + 0x6d8], rax
mov rax, qword [rbp + 0x6d8]
mov qword [rbp + 0x198], rax
movabs rax, 0x95a677d518d600cb
mov qword [rbp + 0x6d8], rax
mov rax, qword [rbp + 0x6d8]
mov qword [rbp + 0x1a0], rax
movabs rax, 0xbaa4fc9c3c389d36
mov qword [rbp + 0x6d8], rax
mov rax, qword [rbp + 0x6d8]
mov qword [rbp + 0x1a8], rax
movabs rax, 0x4102d0e1c7629ebd
mov qword [rbp + 0x6d8], rax
mov rax, qword [rbp + 0x6d8]
mov qword [rbp + 0x1b0], rax
movabs rax, 0x5009915ac7aea2dd
mov qword [rbp + 0x6d8], rax
mov rax, qword [rbp + 0x6d8]
mov qword [rbp + 0x1b8], rax
movabs rax, 0x5285ae6f191c4d95
mov qword [rbp + 0x6d8], rax
mov rax, qword [rbp + 0x6d8]
mov qword [rbp + 0x1c0], rax
movabs rax, 0xc36cf84fed2c7253
mov qword [rbp + 0x6d8], rax
mov rax, qword [rbp + 0x6d8]
mov qword [rbp + 0x1c8], rax
movabs rax, 0x948975b1f5752f2
mov qword [rbp + 0x6d8], rax
mov rax, qword [rbp + 0x6d8]
mov qword [rbp + 0x1d0], rax
movabs rax, 0xe0ef1bb9970a52cc
mov qword [rbp + 0x6d8], rax
mov rax, qword [rbp + 0x6d8]
mov qword [rbp + 0x1d8], rax
movabs rax, 0x32ed25ae4bc7fe51
mov qword [rbp + 0x6d8], rax
mov rax, qword [rbp + 0x6d8]
mov qword [rbp + 0x1e0], rax
movabs rax, 0xcc244db6f6aa337a
mov qword [rbp + 0x6d8], rax
mov rax, qword [rbp + 0x6d8]
mov qword [rbp + 0x1e8], rax
movabs rax, 0xe8012bcf71c49fa2
mov qword [rbp + 0x6d8], rax
mov rax, qword [rbp + 0x6d8]
mov qword [rbp + 0x1f0], rax
movabs rax, 0x4c3a7d4bb6238999
mov qword [rbp + 0x6d8], rax
mov rax, qword [rbp + 0x6d8]
mov qword [rbp + 0x1f8], rax
movabs rax, 0x8bd750d3929f10b9
mov qword [rbp + 0x6d8], rax
mov rax, qword [rbp + 0x6d8]
mov qword [rbp + 0x200], rax
movabs rax, 0xccf96928d7b6a2e1
mov qword [rbp + 0x6d8], rax
mov rax, qword [rbp + 0x6d8]
mov qword [rbp + 0x208], rax
movabs rax, 0x53cda96c4cb51d13
mov qword [rbp + 0x6d8], rax
mov rax, qword [rbp + 0x6d8]
mov qword [rbp + 0x210], rax
movabs rax, 0xe863f1015938f5e1
mov qword [rbp + 0x6d8], rax
mov rax, qword [rbp + 0x6d8]
mov qword [rbp + 0x218], rax
movabs rax, 0x70cca4519a388f4d
mov qword [rbp + 0x6d8], rax
mov rax, qword [rbp + 0x6d8]
mov qword [rbp + 0x220], rax
movabs rax, 0xb36c73bc759e5243
mov qword [rbp + 0x6d8], rax
mov rax, qword [rbp + 0x6d8]
mov qword [rbp + 0x228], rax
movabs rax, 0xb710ad47e25dd46
mov qword [rbp + 0x6d8], rax
mov rax, qword [rbp + 0x6d8]
mov qword [rbp + 0x230], rax
movabs rax, 0x8d936882128822b2
mov qword [rbp + 0x6d8], rax
mov rax, qword [rbp + 0x6d8]
mov qword [rbp + 0x238], rax
movabs rax, 0x73875e5d6674f8e5
mov qword [rbp + 0x6d8], rax
mov rax, qword [rbp + 0x6d8]
mov qword [rbp + 0x240], rax
movabs rax, 0x7884f2d094982dc0
mov qword [rbp + 0x6d8], rax
mov rax, qword [rbp + 0x6d8]
mov qword [rbp + 0x248], rax
mov qword [rbp + 0x6d8], r15
mov rax, qword [rbp + 0x6d8]
mov qword [rbp + 0xa00], rax
mov qword [rbp + 0x6d8], rsi
mov rax, qword [rbp + 0x6d8]
mov qword [rbp + 0xa08], rax
mov qword [rbp + 0x6d8], r12
mov rax, qword [rbp + 0x6d8]
mov qword [rbp + 0xa10], rax
mov qword [rbp + 0x6d8], r14
mov rax, qword [rbp + 0x6d8]
mov qword [rbp + 0xa18], rax
movabs rax, 0xe7c911f561a66191
mov qword [rbp + 0x6d8], rax
mov rax, qword [rbp + 0x6d8]
mov qword [rbp + 0xa20], rax
movabs rax, 0xced693ec4c4dee16
mov qword [rbp + 0x6d8], rax
mov rax, qword [rbp + 0x6d8]
mov qword [rbp + 0xa28], rax
movabs rax, 0x2e7bf0878e689493
mov qword [rbp + 0x6d8], rax
mov rax, qword [rbp + 0x6d8]
mov qword [rbp + 0xa30], rax
movabs rax, 0x3562f836e7ca85a8
mov qword [rbp + 0x6d8], rax
mov rax, qword [rbp + 0x6d8]
mov qword [rbp + 0xa38], rax
movabs rax, 0x72fdc709397339b5
mov qword [rbp + 0x6d8], rax
mov rax, qword [rbp + 0x6d8]
mov qword [rbp + 0xa40], rax
movabs rax, 0xb01e8d20940c063a
mov qword [rbp + 0x6d8], rax
mov rax, qword [rbp + 0x6d8]
mov qword [rbp + 0xa48], rax
movabs rax, 0x703ae37b33313e97
mov qword [rbp + 0x6d8], rax
mov rax, qword [rbp + 0x6d8]
mov qword [rbp + 0xa50], rax
movabs rax, 0x94cf7ecaf26226ec
mov qword [rbp + 0x6d8], rax
mov rax, qword [rbp + 0x6d8]
mov qword [rbp + 0xa58], rax
movabs rax, 0x1fe71fdd2ca99739
mov qword [rbp + 0x6d8], rax
mov rax, qword [rbp + 0x6d8]
mov qword [rbp + 0xa60], rax
movabs rax, 0xec4121d497d95a3e
mov qword [rbp + 0x6d8], rax
mov rax, qword [rbp + 0x6d8]
mov qword [rbp + 0xa68], rax
movabs rax, 0x9c6f4aef03b1f0db
mov qword [rbp + 0x6d8], rax
mov rax, qword [rbp + 0x6d8]
mov qword [rbp + 0xa70], rax
movabs rax, 0x61300e3ec44afff0
mov qword [rbp + 0x6d8], rax
mov rax, qword [rbp + 0x6d8]
mov qword [rbp + 0xa78], rax
movabs rax, 0xabb23cb1f3ec79fd
mov qword [rbp + 0x6d8], rax
mov rax, qword [rbp + 0x6d8]
mov qword [rbp + 0xa80], rax
movabs rax, 0xa38a0008b2c4cd82
mov qword [rbp + 0x6d8], rax
mov rax, qword [rbp + 0x6d8]
mov qword [rbp + 0xa88], rax
movabs rax, 0x7ec7c70325c17c7f
mov qword [rbp + 0x6d8], rax
mov rax, qword [rbp + 0x6d8]
mov qword [rbp + 0xa90], rax
movabs rax, 0x8402857237519bb4
mov qword [rbp + 0x6d8], rax
mov rax, qword [rbp + 0x6d8]
mov qword [rbp + 0xa98], rax
movabs rax, 0x18afcd25f459af21
mov qword [rbp + 0x6d8], rax
mov rax, qword [rbp + 0x6d8]
mov qword [rbp + 0xaa0], rax
movabs rax, 0xd8051f9c06ea3326
mov qword [rbp + 0x6d8], rax
mov rax, qword [rbp + 0x6d8]
mov qword [rbp + 0xaa8], rax
movabs rax, 0x7f186fb71f63fd23
mov qword [rbp + 0x6d8], rax
mov rax, qword [rbp + 0x6d8]
mov qword [rbp + 0xab0], rax
movabs rax, 0xe8e709e662dd0fb8
mov qword [rbp + 0x6d8], rax
mov rax, qword [rbp + 0x6d8]
mov qword [rbp + 0xab8], rax
movabs rax, 0xf03139081d8fc5
mov qword [rbp + 0x6d8], rax
mov rax, qword [rbp + 0x6d8]
mov qword [rbp + 0xac0], rax
movabs rax, 0x7884f2d094982dca
mov qword [rbp + 0x6d8], rax
mov rax, qword [rbp + 0x6d8]
mov qword [rbp + 0xac8], rax
vmovdqu ymm0, ymmword [rbp + 0xa00]
vpxor ymm1, ymm0, ymmword [rbp + 0x180]
vmovdqa ymmword [rbp + 0x180], ymm1
vmovdqu ymm0, ymmword [rbp + 0x1a0]
vpxor ymm1, ymm0, ymmword [rbp + 0xa20]
vmovdqa ymmword [rbp + 0x1a0], ymm1
vmovdqu ymm0, ymmword [rbp + 0x1c0]
vpxor ymm1, ymm0, ymmword [rbp + 0xa40]
vmovdqa ymmword [rbp + 0x1c0], ymm1
vmovdqu ymm0, ymmword [rbp + 0x1e0]
vpxor ymm1, ymm0, ymmword [rbp + 0xa60]
vmovdqa ymmword [rbp + 0x1e0], ymm1
vmovdqu ymm0, ymmword [rbp + 0x200]
vpxor ymm1, ymm0, ymmword [rbp + 0xa80]
vmovdqa ymmword [rbp + 0x200], ymm1
vmovdqu ymm0, ymmword [rbp + 0x220]
vpxor ymm1, ymm0, ymmword [rbp + 0xaa0]
vmovdqa ymmword [rbp + 0x220], ymm1
vmovdqa xmm2, xmmword [rbp + 0x240]
vxorps xmm2, xmm2, xmmword [rbp + 0xac0]
vmovdqa xmmword [rbp + 0x240], xmm2
lea rdx, [rbp + 0x180]
vzeroupper
call fcn.140005180
mov ecx, 0xea60
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
call fcn.1400057e0
int3
nop dword [rax]
call fcn.1400057e0
int3
call fcn.1400057e0
int3
call fcn.1400057e0
int3
call fcn.1400057e0
int3
call fcn.1400057e0
int3
nop
call fcn.1400057e0
int3
call fcn.1400057e0
int3
call fcn.1400057e0
int3
call fcn.1400057e0
int3
call fcn.1400057e0
int3
nop
call fcn.1400057e0
int3
call fcn.1400057e0
int3
call fcn.1400057e0
int3
call fcn.1400057e0
int3
call fcn.1400057e0
int3
nop
call fcn.1400057e0
int3
call fcn.1400057e0
int3
call fcn.1400057e0
int3