Function at 0x14000b990
Capabilities:
Query service status

Disassembly:
push rbp
push rdi
mov eax, 0x19c8
call fcn.140073030
sub rsp, rax
lea rbp, [rsp + 0x50]
and rbp, 0xffffffffffffffe0
mov rax, qword [0x14008f060]
xor rax, rsp
mov qword [rbp + 0x1960], rax
mov r8d, 1
xor edx, edx
xor ecx, ecx
call qword [sym.imp.ADVAPI32.dll_OpenSCManagerW]
mov qword [rbp + 0xd8], rax
cmp qword [rbp + 0xd8], 0
jne 0x14000c17b
lea rax, [rbp]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rbp + 1]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rbp + 2]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rbp + 3]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rbp + 4]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rbp + 5]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
movzx eax, byte [rbp]
mov byte [rbp + 0x18], al
movzx eax, byte [rbp + 1]
mov byte [rbp + 0x20], al
movzx eax, byte [rbp + 2]
mov byte [rbp + 0x28], al
movabs rax, 0x488de1de03a26c2e
mov qword [rbp + 0x6c8], rax
mov rax, qword [rbp + 0x6c8]
mov qword [rbp + 0x6d0], rax
mov rax, qword [rbp + 0x6d0]
mov qword [rbp + 0x2c0], rax
movabs rax, 0xfa669a06cad10ac6
mov qword [rbp + 0x6d8], rax
mov rax, qword [rbp + 0x6d8]
mov qword [rbp + 0x6e0], rax
mov rax, qword [rbp + 0x6e0]
mov qword [rbp + 0x2c8], rax
mov rax, qword [rbp + 0x7d8]
mov qword [rbp + 0x280], rax
movabs rax, 0x48ea8fb76dd00d79
mov qword [rbp + 0x6e8], rax
mov rax, qword [rbp + 0x6e8]
mov qword [rbp + 0x1940], rax
movabs rax, 0xfa669a06cad10ac6
mov qword [rbp + 0x6f0], rax
mov rax, qword [rbp + 0x6f0]
mov qword [rbp + 0x1948], rax
xor eax, eax
cmp eax, 1
je 0x14000bb03
jmp 0x14000bb4b
vmovdqu ymm0, ymmword [rbp + 0x1940]
vmovdqu ymmword [rbp + 0x880], ymm0
vmovdqu ymm0, ymmword [rbp + 0x2c0]
vmovdqu ymmword [rbp + 0x860], ymm0
vmovdqu ymm0, ymmword [rbp + 0x860]
vpxor ymm0, ymm0, ymmword [rbp + 0x880]
vmovdqu ymmword [rbp + 0x8a0], ymm0
vmovdqu ymm0, ymmword [rbp + 0x8a0]
vmovdqa ymmword [rbp + 0x2c0], ymm0
xor eax, eax
cmp eax, 1
je 0x14000bb54
jmp 0x14000bba5
lea rax, [rbp + 0x1960]
vmovdqu ymm0, ymmword [rax]
vmovdqu ymmword [rbp + 0x8e0], ymm0
lea rax, [rbp + 0x2e0]
vmovdqu ymm0, ymmword [rax]
vmovdqu ymmword [rbp + 0x8c0], ymm0
vmovdqu ymm0, ymmword [rbp + 0x8c0]
vpxor ymm0, ymm0, ymmword [rbp + 0x8e0]
vmovdqu ymmword [rbp + 0x900], ymm0
lea rax, [rbp + 0x2e0]
vmovdqu ymm0, ymmword [rbp + 0x900]
vmovdqu ymmword [rax], ymm0
lea rax, [rbp + 0x1940]
movdqu xmm0, xmmword [rax]
movdqa xmmword [rbp + 0x720], xmm0
lea rax, [rbp + 0x2c0]
movdqu xmm0, xmmword [rax]
movdqa xmmword [rbp + 0x710], xmm0
movdqa xmm0, xmmword [rbp + 0x710]
pxor xmm0, xmmword [rbp + 0x720]
movdqa xmmword [rbp + 0x730], xmm0
lea rax, [rbp + 0x2c0]
movdqa xmm0, xmmword [rbp + 0x730]
movdqu xmmword [rax], xmm0
lea rax, [rbp + 0x2c0]
mov qword [rbp + 0x280], rax
movzx eax, byte [rbp + 3]
mov byte [rbp + 0x30], al
movzx eax, byte [rbp + 4]
mov byte [rbp + 0x38], al
movzx eax, byte [rbp + 5]
mov byte [rbp + 0x40], al
movabs rax, 0x3a8febd908b6683d
mov qword [rbp + 0x6f8], rax
mov rax, qword [rbp + 0x6f8]
mov qword [rbp + 0x340], rax
mov rax, qword [rbp + 0x340]
mov qword [rbp + 0x160], rax
movabs rax, 0xda03d826b3b047e6
mov qword [rbp + 0x348], rax
mov rax, qword [rbp + 0x348]
mov qword [rbp + 0x350], rax
mov rax, qword [rbp + 0x350]
mov qword [rbp + 0x168], rax
movabs rax, 0xe518f8c5bff19186
mov qword [rbp + 0x358], rax
mov rax, qword [rbp + 0x358]
mov qword [rbp + 0x360], rax
mov rax, qword [rbp + 0x360]
mov qword [rbp + 0x170], rax
movabs rax, 0x3a7c623d72b66fae
mov qword [rbp + 0x368], rax
mov rax, qword [rbp + 0x368]
mov qword [rbp + 0x370], rax
mov rax, qword [rbp + 0x370]
mov qword [rbp + 0x178], rax
movabs rax, 0x8ab98a519cbde74b
mov qword [rbp + 0x378], rax
mov rax, qword [rbp + 0x378]
mov qword [rbp + 0x380], rax
mov rax, qword [rbp + 0x380]
mov qword [rbp + 0x180], rax
movabs rax, 0x35ec67ed28e9229b
mov qword [rbp + 0x388], rax
mov rax, qword [rbp + 0x388]
mov qword [rbp + 0x390], rax
mov rax, qword [rbp + 0x390]
mov qword [rbp + 0x188], rax
movabs rax, 0x6ae59fa3c749452
mov qword [rbp + 0x398], rax
mov rax, qword [rbp + 0x398]
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x190], rax
movabs rax, 0x1e785e8aae7f9d9f
mov qword [rbp + 0x3a8], rax
mov rax, qword [rbp + 0x3a8]
mov qword [rbp + 0x3b0], rax
mov rax, qword [rbp + 0x3b0]
mov qword [rbp + 0x198], rax
mov rax, qword [rbp + 0x7e0]
mov qword [rbp + 0x288], rax
movabs rax, 0x48ea8fb76dd00d79
mov qword [rbp + 0x3b8], rax
mov rax, qword [rbp + 0x3b8]
mov qword [rbp + 0x1760], rax
movabs rax, 0xfa669a06cad10ac6
mov qword [rbp + 0x3c0], rax
mov rax, qword [rbp + 0x3c0]
mov qword [rbp + 0x1768], rax
movabs rax, 0xc57c9da9dd90ffc3
mov qword [rbp + 0x3c8], rax
mov rax, qword [rbp + 0x3c8]
mov qword [rbp + 0x1770], rax
movabs rax, 0x552f42581ae24f88
mov qword [rbp + 0x3d0], rax
mov rax, qword [rbp + 0x3d0]
mov qword [rbp + 0x1778], rax
movabs rax, 0xc799ef23fdca932d
mov qword [rbp + 0x3d8], rax
mov rax, qword [rbp + 0x3d8]
mov qword [rbp + 0x1780], rax
movabs rax, 0x67cc138266c95bfa
mov qword [rbp + 0x3e0], rax
mov rax, qword [rbp + 0x3e0]
mov qword [rbp + 0x1788], rax
movabs rax, 0x63dc2b957f54fa27
mov qword [rbp + 0x3e8], rax
mov rax, qword [rbp + 0x3e8]
mov qword [rbp + 0x1790], rax
movabs rax, 0x1e785ea4d713e9fc
mov qword [rbp + 0x3f0], rax
mov rax, qword [rbp + 0x3f0]
mov qword [rbp + 0x1798], rax
xor eax, eax
test eax, eax
je 0x14000be8f
jmp 0x14000bed7
vmovdqa ymm0, ymmword [rbp + 0x1760]
vmovdqu ymmword [rbp + 0x940], ymm0
vmovdqa ymm0, ymmword [rbp + 0x160]
vmovdqu ymmword [rbp + 0x920], ymm0
vmovdqu ymm0, ymmword [rbp + 0x920]
vpxor ymm0, ymm0, ymmword [rbp + 0x940]
vmovdqu ymmword [rbp + 0x960], ymm0
vmovdqu ymm0, ymmword [rbp + 0x960]
vmovdqa ymmword [rbp + 0x160], ymm0
xor eax, eax
test eax, eax
je 0x14000bedf
jmp 0x14000bf30
lea rax, [rbp + 0x1780]
vmovdqu ymm0, ymmword [rax]
vmovdqu ymmword [rbp + 0x9a0], ymm0
lea rax, [rbp + 0x180]
vmovdqu ymm0, ymmword [rax]
vmovdqu ymmword [rbp + 0x980], ymm0
vmovdqu ymm0, ymmword [rbp + 0x980]
vpxor ymm0, ymm0, ymmword [rbp + 0x9a0]
vmovdqu ymmword [rbp + 0x9c0], ymm0
lea rax, [rbp + 0x180]
vmovdqu ymm0, ymmword [rbp + 0x9c0]
vmovdqu ymmword [rax], ymm0
xor eax, eax
cmp eax, 1
je 0x14000bf39
jmp 0x14000bf8a
lea rax, [rbp + 0x17a0]
vmovdqu ymm0, ymmword [rax]
vmovdqu ymmword [rbp + 0xa00], ymm0
lea rax, [rbp + 0x1a0]
vmovdqu ymm0, ymmword [rax]
vmovdqu ymmword [rbp + 0x9e0], ymm0
vmovdqu ymm0, ymmword [rbp + 0x9e0]
vpxor ymm0, ymm0, ymmword [rbp + 0xa00]
vmovdqu ymmword [rbp + 0xa20], ymm0
lea rax, [rbp + 0x1a0]
vmovdqu ymm0, ymmword [rbp + 0xa20]
vmovdqu ymmword [rax], ymm0
xor eax, eax
cmp eax, 1
je 0x14000bf93
jmp 0x14000bfe4
lea rax, [rbp + 0x17c0]
vmovdqu ymm0, ymmword [rax]
vmovdqu ymmword [rbp + 0xa40], ymm0
lea rax, [rbp + 0x1c0]
vmovdqu ymm0, ymmword [rax]
vmovdqu ymmword [rbp + 0x840], ymm0
vmovdqu ymm0, ymmword [rbp + 0x840]
vpxor ymm0, ymm0, ymmword [rbp + 0xa40]
vmovdqu ymmword [rbp + 0xa60], ymm0
lea rax, [rbp + 0x1c0]
vmovdqu ymm0, ymmword [rbp + 0xa60]
vmovdqu ymmword [rax], ymm0
xor eax, eax
cmp eax, 1
je 0x14000bfed
jmp 0x14000c03e
lea rax, [rbp + 0x17e0]
vmovdqu ymm0, ymmword [rax]
vmovdqu ymmword [rbp + 0xaa0], ymm0
lea rax, [rbp + 0x1e0]
vmovdqu ymm0, ymmword [rax]
vmovdqu ymmword [rbp + 0xa80], ymm0
vmovdqu ymm0, ymmword [rbp + 0xa80]
vpxor ymm0, ymm0, ymmword [rbp + 0xaa0]
vmovdqu ymmword [rbp + 0xac0], ymm0
lea rax, [rbp + 0x1e0]
vmovdqu ymm0, ymmword [rbp + 0xac0]
vmovdqu ymmword [rax], ymm0
xor eax, eax
cmp eax, 1
je 0x14000c047
jmp 0x14000c098
lea rax, [rbp + 0x1800]
vmovdqu ymm0, ymmword [rax]
vmovdqu ymmword [rbp + 0xb00], ymm0
lea rax, [rbp + 0x200]
vmovdqu ymm0, ymmword [rax]
vmovdqu ymmword [rbp + 0xae0], ymm0
vmovdqu ymm0, ymmword [rbp + 0xae0]
vpxor ymm0, ymm0, ymmword [rbp + 0xb00]
vmovdqu ymmword [rbp + 0xb20], ymm0
lea rax, [rbp + 0x200]
vmovdqu ymm0, ymmword [rbp + 0xb20]
vmovdqu ymmword [rax], ymm0
xor eax, eax
cmp eax, 1
je 0x14000c0a1
jmp 0x14000c0f2
lea rax, [rbp + 0x1820]
vmovdqu ymm0, ymmword [rax]
vmovdqu ymmword [rbp + 0xb60], ymm0
lea rax, [rbp + 0x220]
vmovdqu ymm0, ymmword [rax]
vmovdqu ymmword [rbp + 0xb40], ymm0
vmovdqu ymm0, ymmword [rbp + 0xb40]
vpxor ymm0, ymm0, ymmword [rbp + 0xb60]
vmovdqu ymmword [rbp + 0xb80], ymm0
lea rax, [rbp + 0x220]
vmovdqu ymm0, ymmword [rbp + 0xb80]
vmovdqu ymmword [rax], ymm0
xor eax, eax
cmp eax, 1
je 0x14000c0fb
jmp 0x14000c14c
lea rax, [rbp + 0x1840]
vmovdqu ymm0, ymmword [rax]
vmovdqu ymmword [rbp + 0xbc0], ymm0
lea rax, [rbp + 0x240]
vmovdqu ymm0, ymmword [rax]
vmovdqu ymmword [rbp + 0xba0], ymm0
vmovdqu ymm0, ymmword [rbp + 0xba0]
vpxor ymm0, ymm0, ymmword [rbp + 0xbc0]
vmovdqu ymmword [rbp + 0xbe0], ymm0
lea rax, [rbp + 0x240]
vmovdqu ymm0, ymmword [rbp + 0xbe0]
vmovdqu ymmword [rax], ymm0
lea rax, [rbp + 0x160]
mov qword [rbp + 0x288], rax
mov r9d, Ordinal_50
mov r8, qword [rbp + 0x280]
mov rdx, qword [rbp + 0x288]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x14000d918
mov r8d, 4
lea rdx, str.WinDefend
mov rcx, qword [rbp + 0xd8]
call qword [sym.imp.ADVAPI32.dll_OpenServiceW]
mov qword [rbp + 0xe0], rax
cmp qword [rbp + 0xe0], 0
jne 0x14000c953
mov rcx, qword [rbp + 0xd8]
call qword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
lea rax, [rbp + 6]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rbp + 7]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rbp + 8]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rbp + 9]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rbp + 0xa]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rbp + 0xb]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
movzx eax, byte [rbp + 6]
mov byte [rbp + 0x48], al
movzx eax, byte [rbp + 7]
mov byte [rbp + 0x50], al
movzx eax, byte [rbp + 8]
mov byte [rbp + 0x58], al
movabs rax, 0x488de1de03a26c2e
mov qword [rbp + 0x3f8], rax
mov rax, qword [rbp + 0x3f8]
mov qword [rbp + 0x400], rax
mov rax, qword [rbp + 0x400]
mov qword [rbp + 0x2e0], rax
movabs rax, 0xfa669a06cad10ac6
mov qword [rbp + 0x408], rax
mov rax, qword [rbp + 0x408]
mov qword [rbp + 0x410], rax
mov rax, qword [rbp + 0x410]
mov qword [rbp + 0x2e8], rax
mov rax, qword [rbp + 0x7e8]
mov qword [rbp + 0x290], rax
movabs rax, 0x48ea8fb76dd00d79
mov qword [rbp + 0x418], rax
mov rax, qword [rbp + 0x418]
mov qword [rbp + 0x18e0], rax
movabs rax, 0xfa669a06cad10ac6
mov qword [rbp + 0x420], rax
mov rax, qword [rbp + 0x420]
mov qword [rbp + 0x18e8], rax
xor eax, eax
cmp eax, 1
je 0x14000c2db
jmp 0x14000c323
vmovdqu ymm0, ymmword [rbp + 0x18e0]
vmovdqu ymmword [rbp + 0xc20], ymm0
vmovdqu ymm0, ymmword [rbp + 0x2e0]
vmovdqu ymmword [rbp + 0xc00], ymm0
vmovdqu ymm0, ymmword [rbp + 0xc00]
vpxor ymm0, ymm0, ymmword [rbp + 0xc20]
vmovdqu ymmword [rbp + 0xc40], ymm0
vmovdqu ymm0, ymmword [rbp + 0xc40]
vmovdqa ymmword [rbp + 0x2e0], ymm0
xor eax, eax
cmp eax, 1
je 0x14000c32c
jmp 0x14000c37d
lea rax, [rbp + 0x1900]
vmovdqu ymm0, ymmword [rax]
vmovdqu ymmword [rbp + 0xc80], ymm0
lea rax, [rbp + 0x300]
vmovdqu ymm0, ymmword [rax]
vmovdqu ymmword [rbp + 0xc60], ymm0
vmovdqu ymm0, ymmword [rbp + 0xc60]
vpxor ymm0, ymm0, ymmword [rbp + 0xc80]
vmovdqu ymmword [rbp + 0xca0], ymm0
lea rax, [rbp + 0x300]
vmovdqu ymm0, ymmword [rbp + 0xca0]
vmovdqu ymmword [rax], ymm0
lea rax, [rbp + 0x18e0]
movdqu xmm0, xmmword [rax]
movdqa xmmword [rbp + 0x750], xmm0
lea rax, [rbp + 0x2e0]
movdqu xmm0, xmmword [rax]
movdqa xmmword [rbp + 0x740], xmm0
movdqa xmm0, xmmword [rbp + 0x740]
pxor xmm0, xmmword [rbp + 0x750]
movdqa xmmword [rbp + 0x760], xmm0
lea rax, [rbp + 0x2e0]
movdqa xmm0, xmmword [rbp + 0x760]
movdqu xmmword [rax], xmm0
lea rax, [rbp + 0x2e0]
mov qword [rbp + 0x290], rax
movzx eax, byte [rbp + 9]
mov byte [rbp + 0x60], al
movzx eax, byte [rbp + 0xa]
mov byte [rbp + 0x68], al
movzx eax, byte [rbp + 0xb]
mov byte [rbp + 0x70], al
movabs rax, 0x3a8febd908b6683d
mov qword [rbp + 0x428], rax
mov rax, qword [rbp + 0x428]
mov qword [rbp + 0x430], rax
mov rax, qword [rbp + 0x430]
mov qword [rbp + 0x1c0], rax
movabs rax, 0xda03d826b3b047e6
mov qword [rbp + 0x438], rax
mov rax, qword [rbp + 0x438]
mov qword [rbp + 0x440], rax
mov rax, qword [rbp + 0x440]
mov qword [rbp + 0x1c8], rax
movabs rax, 0xe518f8c5bff19186
mov qword [rbp + 0x448], rax
mov rax, qword [rbp + 0x448]
mov qword [rbp + 0x450], rax
mov rax, qword [rbp + 0x450]
mov qword [rbp + 0x1d0], rax
movabs rax, 0x3a7c623d72b66fae
mov qword [rbp + 0x458], rax
mov rax, qword [rbp + 0x458]
mov qword [rbp + 0x460], rax
mov rax, qword [rbp + 0x460]
mov qword [rbp + 0x1d8], rax
movabs rax, 0x8ab98a519cbde74b
mov qword [rbp + 0x468], rax
mov rax, qword [rbp + 0x468]
mov qword [rbp + 0x470], rax
mov rax, qword [rbp + 0x470]
mov qword [rbp + 0x1e0], rax
movabs rax, 0x35ec67ed28e9229b
mov qword [rbp + 0x478], rax
mov rax, qword [rbp + 0x478]
mov qword [rbp + 0x480], rax
mov rax, qword [rbp + 0x480]
mov qword [rbp + 0x1e8], rax
movabs rax, 0x6ae59fa3c749452
mov qword [rbp + 0x488], rax
mov rax, qword [rbp + 0x488]
mov qword [rbp + 0x490], rax
mov rax, qword [rbp + 0x490]
mov qword [rbp + 0x1f0], rax
movabs rax, 0x1e785e8aae7f9d9f
mov qword [rbp + 0x498], rax
mov rax, qword [rbp + 0x498]
mov qword [rbp + 0x4a0], rax
mov rax, qword [rbp + 0x4a0]
mov qword [rbp + 0x1f8], rax
mov rax, qword [rbp + 0x7f8]
mov qword [rbp + 0x298], rax
movabs rax, 0x48ea8fb76dd00d79
mov qword [rbp + 0x4a8], rax
mov rax, qword [rbp + 0x4a8]
mov qword [rbp + 0x17c0], rax
movabs rax, 0xfa669a06cad10ac6
mov qword [rbp + 0x4b0], rax
mov rax, qword [rbp + 0x4b0]
mov qword [rbp + 0x17c8], rax
movabs rax, 0xc57c9da9dd90ffc3
mov qword [rbp + 0x4b8], rax
mov rax, qword [rbp + 0x4b8]
mov qword [rbp + 0x17d0], rax
movabs rax, 0x552f42581ae24f88
mov qword [rbp + 0x4c0], rax
mov rax, qword [rbp + 0x4c0]
mov qword [rbp + 0x17d8], rax
movabs rax, 0xc799ef23fdca932d
mov qword [rbp + 0x4c8], rax
mov rax, qword [rbp + 0x4c8]
mov qword [rbp + 0x17e0], rax
movabs rax, 0x67cc138266c95bfa
mov qword [rbp + 0x4d0], rax
mov rax, qword [rbp + 0x4d0]
mov qword [rbp + 0x17e8], rax
movabs rax, 0x63dc2b957f54fa27
mov qword [rbp + 0x4d8], rax
mov rax, qword [rbp + 0x4d8]
mov qword [rbp + 0x17f0], rax
movabs rax, 0x1e785ea4d713e9fc
mov qword [rbp + 0x4e0], rax
mov rax, qword [rbp + 0x4e0]
mov qword [rbp + 0x17f8], rax
xor eax, eax
test eax, eax
je 0x14000c667
jmp 0x14000c6af
vmovdqa ymm0, ymmword [rbp + 0x17c0]
vmovdqu ymmword [rbp + 0xce0], ymm0
vmovdqa ymm0, ymmword [rbp + 0x1c0]
vmovdqu ymmword [rbp + 0xcc0], ymm0
vmovdqu ymm0, ymmword [rbp + 0xcc0]
vpxor ymm0, ymm0, ymmword [rbp + 0xce0]
vmovdqu ymmword [rbp + 0xd00], ymm0
vmovdqu ymm0, ymmword [rbp + 0xd00]
vmovdqa ymmword [rbp + 0x1c0], ymm0
xor eax, eax
test eax, eax
je 0x14000c6b7
jmp 0x14000c708
lea rax, [rbp + 0x17e0]
vmovdqu ymm0, ymmword [rax]
vmovdqu ymmword [rbp + 0xd40], ymm0
lea rax, [rbp + 0x1e0]
vmovdqu ymm0, ymmword [rax]
vmovdqu ymmword [rbp + 0xd20], ymm0
vmovdqu ymm0, ymmword [rbp + 0xd20]
vpxor ymm0, ymm0, ymmword [rbp + 0xd40]
vmovdqu ymmword [rbp + 0xd60], ymm0
lea rax, [rbp + 0x1e0]
vmovdqu ymm0, ymmword [rbp + 0xd60]
vmovdqu ymmword [rax], ymm0
xor eax, eax
cmp eax, 1
je 0x14000c711
jmp 0x14000c762
lea rax, [rbp + 0x1800]
vmovdqu ymm0, ymmword [rax]
vmovdqu ymmword [rbp + 0xda0], ymm0
lea rax, [rbp + 0x200]
vmovdqu ymm0, ymmword [rax]
vmovdqu ymmword [rbp + 0xd80], ymm0
vmovdqu ymm0, ymmword [rbp + 0xd80]
vpxor ymm0, ymm0, ymmword [rbp + 0xda0]
vmovdqu ymmword [rbp + 0xdc0], ymm0
lea rax, [rbp + 0x200]
vmovdqu ymm0, ymmword [rbp + 0xdc0]
vmovdqu ymmword [rax], ymm0
xor eax, eax
cmp eax, 1
je 0x14000c76b
jmp 0x14000c7bc
lea rax, [rbp + 0x1820]
vmovdqu ymm0, ymmword [rax]
vmovdqu ymmword [rbp + 0xe00], ymm0
lea rax, [rbp + 0x220]
vmovdqu ymm0, ymmword [rax]
vmovdqu ymmword [rbp + 0xde0], ymm0
vmovdqu ymm0, ymmword [rbp + 0xde0]
vpxor ymm0, ymm0, ymmword [rbp + 0xe00]
vmovdqu ymmword [rbp + 0xe20], ymm0
lea rax, [rbp + 0x220]
vmovdqu ymm0, ymmword [rbp + 0xe20]
vmovdqu ymmword [rax], ymm0
xor eax, eax
cmp eax, 1
je 0x14000c7c5
jmp 0x14000c816
lea rax, [rbp + 0x1840]
vmovdqu ymm0, ymmword [rax]
vmovdqu ymmword [rbp + 0xe60], ymm0
lea rax, [rbp + 0x240]
vmovdqu ymm0, ymmword [rax]
vmovdqu ymmword [rbp + 0xe40], ymm0
vmovdqu ymm0, ymmword [rbp + 0xe40]
vpxor ymm0, ymm0, ymmword [rbp + 0xe60]
vmovdqu ymmword [rbp + 0xe80], ymm0
lea rax, [rbp + 0x240]
vmovdqu ymm0, ymmword [rbp + 0xe80]
vmovdqu ymmword [rax], ymm0
xor eax, eax
cmp eax, 1
je 0x14000c81f
jmp 0x14000c870
lea rax, [rbp + 0x1860]
vmovdqu ymm0, ymmword [rax]
vmovdqu ymmword [rbp + 0xec0], ymm0
lea rax, [rbp + 0x260]
vmovdqu ymm0, ymmword [rax]
vmovdqu ymmword [rbp + 0xea0], ymm0
vmovdqu ymm0, ymmword [rbp + 0xea0]
vpxor ymm0, ymm0, ymmword [rbp + 0xec0]
vmovdqu ymmword [rbp + 0xee0], ymm0
lea rax, [rbp + 0x260]
vmovdqu ymm0, ymmword [rbp + 0xee0]
vmovdqu ymmword [rax], ymm0
xor eax, eax
cmp eax, 1
je 0x14000c879
jmp 0x14000c8ca
lea rax, [rbp + 0x1880]
vmovdqu ymm0, ymmword [rax]
vmovdqu ymmword [rbp + 0xf20], ymm0
lea rax, [rbp + 0x280]
vmovdqu ymm0, ymmword [rax]
vmovdqu ymmword [rbp + 0xf00], ymm0
vmovdqu ymm0, ymmword [rbp + 0xf00]
vpxor ymm0, ymm0, ymmword [rbp + 0xf20]
vmovdqu ymmword [rbp + 0xf40], ymm0
lea rax, [rbp + 0x280]
vmovdqu ymm0, ymmword [rbp + 0xf40]
vmovdqu ymmword [rax], ymm0
xor eax, eax
cmp eax, 1
je 0x14000c8d3
jmp 0x14000c924
lea rax, [rbp + 0x18a0]
vmovdqu ymm0, ymmword [rax]
vmovdqu ymmword [rbp + 0xf80], ymm0
lea rax, [rbp + 0x2a0]
vmovdqu ymm0, ymmword [rax]
vmovdqu ymmword [rbp + 0xf60], ymm0
vmovdqu ymm0, ymmword [rbp + 0xf60]
vpxor ymm0, ymm0, ymmword [rbp + 0xf80]
vmovdqu ymmword [rbp + 0xfa0], ymm0
lea rax, [rbp + 0x2a0]
vmovdqu ymm0, ymmword [rbp + 0xfa0]
vmovdqu ymmword [rax], ymm0
lea rax, [rbp + 0x1c0]
mov qword [rbp + 0x298], rax
mov r9d, Ordinal_50
mov r8, qword [rbp + 0x290]
mov rdx, qword [rbp + 0x298]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x14000d918
lea rax, [rbp + 0x1720]
mov qword [rsp + 0x20], rax
mov r9d, Ordinal_41
lea r8, [rbp + 0x1728]
xor edx, edx
mov rcx, qword [rbp + 0xe0]
call qword [sym.imp.ADVAPI32.dll_QueryServiceStatusEx]
test eax, eax
jne 0x14000d148
mov rcx, qword [rbp + 0xd8]
call qword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
mov rcx, qword [rbp + 0xe0]
call qword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
lea rax, [rbp + 0xc]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rbp + 0xd]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rbp + 0xe]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rbp + 0xf]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rbp + 0x10]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rbp + 0x11]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
movzx eax, byte [rbp + 0xc]
mov byte [rbp + 0x78], al
movzx eax, byte [rbp + 0xd]
mov byte [rbp + 0x80], al
movzx eax, byte [rbp + 0xe]
mov byte [rbp + 0x88], al
movabs rax, 0x488de1de03a26c2e
mov qword [rbp + 0x4e8], rax
mov rax, qword [rbp + 0x4e8]
mov qword [rbp + 0x4f0], rax
mov rax, qword [rbp + 0x4f0]
mov qword [rbp + 0x300], rax
movabs rax, 0xfa669a06cad10ac6
mov qword [rbp + 0x4f8], rax
mov rax, qword [rbp + 0x4f8]
mov qword [rbp + 0x500], rax
mov rax, qword [rbp + 0x500]
mov qword [rbp + 0x308], rax
mov rax, qword [rbp + 0x7d0]
mov qword [rbp + 0x2a0], rax
movabs rax, 0x48ea8fb76dd00d79
mov qword [rbp + 0x508], rax
mov rax, qword [rbp + 0x508]
mov qword [rbp + 0x1920], rax
movabs rax, 0xfa669a06cad10ac6
mov qword [rbp + 0x510], rax
mov rax, qword [rbp + 0x510]
mov qword [rbp + 0x1928], rax
xor eax, eax
cmp eax, 1
je 0x14000cac7
jmp 0x14000cb0f
vmovdqu ymm0, ymmword [rbp + 0x1920]
vmovdqu ymmword [rbp + 0xfe0], ymm0
vmovdqu ymm0, ymmword [rbp + 0x300]
vmovdqu ymmword [rbp + 0xfc0], ymm0
vmovdqu ymm0, ymmword [rbp + 0xfc0]
vpxor ymm0, ymm0, ymmword [rbp + 0xfe0]
vmovdqu ymmword [rbp + 0x1000], ymm0
vmovdqu ymm0, ymmword [rbp + 0x1000]
vmovdqa ymmword [rbp + 0x300], ymm0
xor eax, eax
cmp eax, 1
je 0x14000cb18
jmp 0x14000cb69
lea rax, [rbp + 0x1940]
vmovdqu ymm0, ymmword [rax]
vmovdqu ymmword [rbp + 0x1040], ymm0
lea rax, [rbp + 0x320]
vmovdqu ymm0, ymmword [rax]
vmovdqu ymmword [rbp + 0x1020], ymm0
vmovdqu ymm0, ymmword [rbp + 0x1020]
vpxor ymm0, ymm0, ymmword [rbp + 0x1040]
vmovdqu ymmword [rbp + 0x1060], ymm0
lea rax, [rbp + 0x320]
vmovdqu ymm0, ymmword [rbp + 0x1060]
vmovdqu ymmword [rax], ymm0
lea rax, [rbp + 0x1920]
movdqu xmm0, xmmword [rax]
movdqa xmmword [rbp + 0x780], xmm0
lea rax, [rbp + 0x300]
movdqu xmm0, xmmword [rax]
movdqa xmmword [rbp + 0x770], xmm0
movdqa xmm0, xmmword [rbp + 0x770]
pxor xmm0, xmmword [rbp + 0x780]
movdqa xmmword [rbp + 0x790], xmm0
lea rax, [rbp + 0x300]
movdqa xmm0, xmmword [rbp + 0x790]
movdqu xmmword [rax], xmm0
lea rax, [rbp + 0x300]
mov qword [rbp + 0x2a0], rax
movzx eax, byte [rbp + 0xf]
mov byte [rbp + 0x90], al
movzx eax, byte [rbp + 0x10]
mov byte [rbp + 0x98], al
movzx eax, byte [rbp + 0x11]
mov byte [rbp + 0xa0], al
movabs rax, 0x3a8febd908b6683d
mov qword [rbp + 0x518], rax
mov rax, qword [rbp + 0x518]
mov qword [rbp + 0x520], rax
mov rax, qword [rbp + 0x520]
mov qword [rbp + 0x220], rax
movabs rax, 0xda03d826b3b047e6
mov qword [rbp + 0x528], rax
mov rax, qword [rbp + 0x528]
mov qword [rbp + 0x530], rax
mov rax, qword [rbp + 0x530]
mov qword [rbp + 0x228], rax
movabs rax, 0xe518f8c5bff19186
mov qword [rbp + 0x538], rax
mov rax, qword [rbp + 0x538]
mov qword [rbp + 0x540], rax
mov rax, qword [rbp + 0x540]
mov qword [rbp + 0x230], rax
movabs rax, 0x3a7c623d72b66fae
mov qword [rbp + 0x548], rax
mov rax, qword [rbp + 0x548]
mov qword [rbp + 0x550], rax
mov rax, qword [rbp + 0x550]
mov qword [rbp + 0x238], rax
movabs rax, 0x8ab98a519cbde74b
mov qword [rbp + 0x558], rax
mov rax, qword [rbp + 0x558]
mov qword [rbp + 0x560], rax
mov rax, qword [rbp + 0x560]
mov qword [rbp + 0x240], rax
movabs rax, 0x35ec67ed28e9229b
mov qword [rbp + 0x568], rax
mov rax, qword [rbp + 0x568]
mov qword [rbp + 0x570], rax
mov rax, qword [rbp + 0x570]
mov qword [rbp + 0x248], rax
movabs rax, 0x6ae59fa3c749452
mov qword [rbp + 0x578], rax
mov rax, qword [rbp + 0x578]
mov qword [rbp + 0x580], rax
mov rax, qword [rbp + 0x580]
mov qword [rbp + 0x250], rax
movabs rax, 0x1e785e8aae7f9d9f
mov qword [rbp + 0x588], rax
mov rax, qword [rbp + 0x588]
mov qword [rbp + 0x590], rax
mov rax, qword [rbp + 0x590]
mov qword [rbp + 0x258], rax
mov rax, qword [rbp + 0x800]
mov qword [rbp + 0x2a8], rax
movabs rax, 0x48ea8fb76dd00d79
mov qword [rbp + 0x598], rax
mov rax, qword [rbp + 0x598]
mov qword [rbp + 0x1820], rax
movabs rax, 0xfa669a06cad10ac6
mov qword [rbp + 0x5a0], rax
mov rax, qword [rbp + 0x5a0]
mov qword [rbp + 0x1828], rax
movabs rax, 0xc57c9da9dd90ffc3
mov qword [rbp + 0x5a8], rax
mov rax, qword [rbp + 0x5a8]
mov qword [rbp + 0x1830], rax
movabs rax, 0x552f42581ae24f88
mov qword [rbp + 0x5b0], rax
mov rax, qword [rbp + 0x5b0]
mov qword [rbp + 0x1838], rax
movabs rax, 0xc799ef23fdca932d
mov qword [rbp + 0x5b8], rax
mov rax, qword [rbp + 0x5b8]
mov qword [rbp + 0x1840], rax
movabs rax, 0x67cc138266c95bfa
mov qword [rbp + 0x5c0], rax
mov rax, qword [rbp + 0x5c0]
mov qword [rbp + 0x1848], rax
movabs rax, 0x63dc2b957f54fa27
mov qword [rbp + 0x5c8], rax
mov rax, qword [rbp + 0x5c8]
mov qword [rbp + 0x1850], rax
movabs rax, 0x1e785ea4d713e9fc
mov qword [rbp + 0x5d0], rax
mov rax, qword [rbp + 0x5d0]
mov qword [rbp + 0x1858], rax
xor eax, eax
test eax, eax
je 0x14000ce5c
jmp 0x14000cea4
vmovdqa ymm0, ymmword [rbp + 0x1820]
vmovdqu ymmword [rbp + 0x10a0], ymm0
vmovdqa ymm0, ymmword [rbp + 0x220]
vmovdqu ymmword [rbp + 0x1080], ymm0
vmovdqu ymm0, ymmword [rbp + 0x1080]
vpxor ymm0, ymm0, ymmword [rbp + 0x10a0]
vmovdqu ymmword [rbp + 0x10c0], ymm0
vmovdqu ymm0, ymmword [rbp + 0x10c0]
vmovdqa ymmword [rbp + 0x220], ymm0
xor eax, eax
test eax, eax
je 0x14000ceac
jmp 0x14000cefd
lea rax, [rbp + 0x1840]
vmovdqu ymm0, ymmword [rax]
vmovdqu ymmword [rbp + 0x1100], ymm0
lea rax, [rbp + 0x240]
vmovdqu ymm0, ymmword [rax]
vmovdqu ymmword [rbp + 0x10e0], ymm0
vmovdqu ymm0, ymmword [rbp + 0x10e0]
vpxor ymm0, ymm0, ymmword [rbp + 0x1100]
vmovdqu ymmword [rbp + 0x1120], ymm0
lea rax, [rbp + 0x240]
vmovdqu ymm0, ymmword [rbp + 0x1120]
vmovdqu ymmword [rax], ymm0
xor eax, eax
cmp eax, 1
je 0x14000cf06
jmp 0x14000cf57
lea rax, [rbp + 0x1860]
vmovdqu ymm0, ymmword [rax]
vmovdqu ymmword [rbp + 0x1160], ymm0
lea rax, [rbp + 0x260]
vmovdqu ymm0, ymmword [rax]
vmovdqu ymmword [rbp + 0x1140], ymm0
vmovdqu ymm0, ymmword [rbp + 0x1140]
vpxor ymm0, ymm0, ymmword [rbp + 0x1160]
vmovdqu ymmword [rbp + 0x1180], ymm0
lea rax, [rbp + 0x260]
vmovdqu ymm0, ymmword [rbp + 0x1180]
vmovdqu ymmword [rax], ymm0
xor eax, eax
cmp eax, 1
je 0x14000cf60
jmp 0x14000cfb1
lea rax, [rbp + 0x1880]
vmovdqu ymm0, ymmword [rax]
vmovdqu ymmword [rbp + 0x11c0], ymm0
lea rax, [rbp + 0x280]
vmovdqu ymm0, ymmword [rax]
vmovdqu ymmword [rbp + 0x11a0], ymm0
vmovdqu ymm0, ymmword [rbp + 0x11a0]
vpxor ymm0, ymm0, ymmword [rbp + 0x11c0]
vmovdqu ymmword [rbp + 0x11e0], ymm0
lea rax, [rbp + 0x280]
vmovdqu ymm0, ymmword [rbp + 0x11e0]
vmovdqu ymmword [rax], ymm0
xor eax, eax
cmp eax, 1
je 0x14000cfba
jmp 0x14000d00b
lea rax, [rbp + 0x18a0]
vmovdqu ymm0, ymmword [rax]
vmovdqu ymmword [rbp + 0x1220], ymm0
lea rax, [rbp + 0x2a0]
vmovdqu ymm0, ymmword [rax]
vmovdqu ymmword [rbp + 0x1200], ymm0
vmovdqu ymm0, ymmword [rbp + 0x1200]
vpxor ymm0, ymm0, ymmword [rbp + 0x1220]
vmovdqu ymmword [rbp + 0x1240], ymm0
lea rax, [rbp + 0x2a0]
vmovdqu ymm0, ymmword [rbp + 0x1240]
vmovdqu ymmword [rax], ymm0
xor eax, eax
cmp eax, 1
je 0x14000d014
jmp 0x14000d065
lea rax, [rbp + 0x18c0]
vmovdqu ymm0, ymmword [rax]
vmovdqu ymmword [rbp + 0x1280], ymm0
lea rax, [rbp + 0x2c0]
vmovdqu ymm0, ymmword [rax]
vmovdqu ymmword [rbp + 0x1260], ymm0
vmovdqu ymm0, ymmword [rbp + 0x1260]
vpxor ymm0, ymm0, ymmword [rbp + 0x1280]
vmovdqu ymmword [rbp + 0x12a0], ymm0
lea rax, [rbp + 0x2c0]
vmovdqu ymm0, ymmword [rbp + 0x12a0]
vmovdqu ymmword [rax], ymm0
xor eax, eax
cmp eax, 1
je 0x14000d06e
jmp 0x14000d0bf
lea rax, [rbp + 0x18e0]
vmovdqu ymm0, ymmword [rax]
vmovdqu ymmword [rbp + 0x12e0], ymm0
lea rax, [rbp + 0x2e0]
vmovdqu ymm0, ymmword [rax]
vmovdqu ymmword [rbp + 0x12c0], ymm0
vmovdqu ymm0, ymmword [rbp + 0x12c0]
vpxor ymm0, ymm0, ymmword [rbp + 0x12e0]
vmovdqu ymmword [rbp + 0x1300], ymm0
lea rax, [rbp + 0x2e0]
vmovdqu ymm0, ymmword [rbp + 0x1300]
vmovdqu ymmword [rax], ymm0
xor eax, eax
cmp eax, 1
je 0x14000d0c8
jmp 0x14000d119
lea rax, [rbp + 0x1900]
vmovdqu ymm0, ymmword [rax]
vmovdqu ymmword [rbp + 0x1340], ymm0
lea rax, [rbp + 0x300]
vmovdqu ymm0, ymmword [rax]
vmovdqu ymmword [rbp + 0x1320], ymm0
vmovdqu ymm0, ymmword [rbp + 0x1320]
vpxor ymm0, ymm0, ymmword [rbp + 0x1340]
vmovdqu ymmword [rbp + 0x1360], ymm0
lea rax, [rbp + 0x300]
vmovdqu ymm0, ymmword [rbp + 0x1360]
vmovdqu ymmword [rax], ymm0
lea rax, [rbp + 0x220]
mov qword [rbp + 0x2a8], rax
mov r9d, Ordinal_50
mov r8, qword [rbp + 0x2a0]
mov rdx, qword [rbp + 0x2a8]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x14000d918
cmp dword [rbp + 0x172c], 4
jne 0x14000d918
mov rcx, qword [rbp + 0xd8]
call qword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
mov rcx, qword [rbp + 0xe0]
call qword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
lea rax, [rbp + 0x12]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rbp + 0x13]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rbp + 0x14]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rbp + 0x15]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rbp + 0x16]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rbp + 0x17]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
movzx eax, byte [rbp + 0x12]
mov byte [rbp + 0xa8], al
movzx eax, byte [rbp + 0x13]
mov byte [rbp + 0xb0], al
movzx eax, byte [rbp + 0x14]
mov byte [rbp + 0xb8], al
movabs rax, 0x488de1de03a26c2e
mov qword [rbp + 0x5d8], rax
mov rax, qword [rbp + 0x5d8]
mov qword [rbp + 0x5e0], rax
mov rax, qword [rbp + 0x5e0]
mov qword [rbp + 0x320], rax
movabs rax, 0xfa669a06cad10ac6
mov qword [rbp + 0x5e8], rax
mov rax, qword [rbp + 0x5e8]
mov qword [rbp + 0x5f0], rax
mov rax, qword [rbp + 0x5f0]
mov qword [rbp + 0x328], rax
mov rax, qword [rbp + 0x7f0]
mov qword [rbp + 0x2b8], rax
movabs rax, 0x48ea8fb76dd00d79
mov qword [rbp + 0x5f8], rax
mov rax, qword [rbp + 0x5f8]
mov qword [rbp + 0x1900], rax
movabs rax, 0xfa669a06cad10ac6
mov qword [rbp + 0x600], rax
mov rax, qword [rbp + 0x600]
mov qword [rbp + 0x1908], rax
xor eax, eax
cmp eax, 1
je 0x14000d29c
jmp 0x14000d2e4
vmovdqu ymm0, ymmword [rbp + 0x1900]
vmovdqu ymmword [rbp + 0x13a0], ymm0
vmovdqu ymm0, ymmword [rbp + 0x320]
vmovdqu ymmword [rbp + 0x1380], ymm0
vmovdqu ymm0, ymmword [rbp + 0x1380]
vpxor ymm0, ymm0, ymmword [rbp + 0x13a0]
vmovdqu ymmword [rbp + 0x13c0], ymm0
vmovdqu ymm0, ymmword [rbp + 0x13c0]
vmovdqa ymmword [rbp + 0x320], ymm0
xor eax, eax
cmp eax, 1
je 0x14000d2ed
jmp 0x14000d33e
lea rax, [rbp + 0x1920]
vmovdqu ymm0, ymmword [rax]
vmovdqu ymmword [rbp + 0x1400], ymm0
lea rax, [rbp + 0x340]
vmovdqu ymm0, ymmword [rax]
vmovdqu ymmword [rbp + 0x13e0], ymm0
vmovdqu ymm0, ymmword [rbp + 0x13e0]
vpxor ymm0, ymm0, ymmword [rbp + 0x1400]
vmovdqu ymmword [rbp + 0x1420], ymm0
lea rax, [rbp + 0x340]
vmovdqu ymm0, ymmword [rbp + 0x1420]
vmovdqu ymmword [rax], ymm0
lea rax, [rbp + 0x1900]
movdqu xmm0, xmmword [rax]
movdqa xmmword [rbp + 0x7b0], xmm0
lea rax, [rbp + 0x320]
movdqu xmm0, xmmword [rax]
movdqa xmmword [rbp + 0x7a0], xmm0
movdqa xmm0, xmmword [rbp + 0x7a0]
pxor xmm0, xmmword [rbp + 0x7b0]
movdqa xmmword [rbp + 0x7c0], xmm0
lea rax, [rbp + 0x320]
movdqa xmm0, xmmword [rbp + 0x7c0]
movdqu xmmword [rax], xmm0
lea rax, [rbp + 0x320]
mov qword [rbp + 0x2b8], rax
movzx eax, byte [rbp + 0x15]
mov byte [rbp + 0xc0], al
movzx eax, byte [rbp + 0x16]
mov byte [rbp + 0xc8], al
movzx eax, byte [rbp + 0x17]
mov byte [rbp + 0xd0], al
movabs rax, 0x3a8febd908b6683d
mov qword [rbp + 0x608], rax
mov rax, qword [rbp + 0x608]
mov qword [rbp + 0x610], rax
mov rax, qword [rbp + 0x610]
mov qword [rbp + 0x100], rax
movabs rax, 0x9807f443eaa243e6
mov qword [rbp + 0x618], rax
mov rax, qword [rbp + 0x618]
mov qword [rbp + 0x620], rax
mov rax, qword [rbp + 0x620]
mov qword [rbp + 0x108], rax
movabs rax, 0xad28bd8ffdf49aaf
mov qword [rbp + 0x628], rax
mov rax, qword [rbp + 0x628]
mov qword [rbp + 0x630], rax
mov rax, qword [rbp + 0x630]
mov qword [rbp + 0x110], rax
movabs rax, 0x3458363e75b16fed
mov qword [rbp + 0x638], rax
mov rax, qword [rbp + 0x638]
mov qword [rbp + 0x640], rax
mov rax, qword [rbp + 0x640]
mov qword [rbp + 0x118], rax
movabs rax, 0x89b99642b0eaf65f
mov qword [rbp + 0x648], rax
mov rax, qword [rbp + 0x648]
mov qword [rbp + 0x650], rax
mov rax, qword [rbp + 0x650]
mov qword [rbp + 0x120], rax
movabs rax, 0x24ec7df734e92f95
mov qword [rbp + 0x658], rax
mov rax, qword [rbp + 0x658]
mov qword [rbp + 0x660], rax
mov rax, qword [rbp + 0x660]
mov qword [rbp + 0x128], rax
movabs rax, 0x1ab05ff61a268848
mov qword [rbp + 0x668], rax
mov rax, qword [rbp + 0x668]
mov qword [rbp + 0x670], rax
mov rax, qword [rbp + 0x670]
mov qword [rbp + 0x130], rax
movabs rax, 0x1e785ea4d713e9d2
mov qword [rbp + 0x678], rax
mov rax, qword [rbp + 0x678]
mov qword [rbp + 0x680], rax
mov rax, qword [rbp + 0x680]
mov qword [rbp + 0x138], rax
mov rax, qword [rbp + 0x700]
mov qword [rbp + 0x2b0], rax
movabs rax, 0x48ea8fb76dd00d79
mov qword [rbp + 0x688], rax
mov rax, qword [rbp + 0x688]
mov qword [rbp + 0x1880], rax
movabs rax, 0xfa669a06cad10ac6
mov qword [rbp + 0x690], rax
mov rax, qword [rbp + 0x690]
mov qword [rbp + 0x1888], rax
movabs rax, 0xc57c9da9dd90ffc3
mov qword [rbp + 0x698], rax
mov rax, qword [rbp + 0x698]
mov qword [rbp + 0x1890], rax
movabs rax, 0x552f42581ae24f88
mov qword [rbp + 0x6a0], rax
mov rax, qword [rbp + 0x6a0]
mov qword [rbp + 0x1898], rax
movabs rax, 0xc799ef23fdca932d
mov qword [rbp + 0x6a8], rax
mov rax, qword [rbp + 0x6a8]
mov qword [rbp + 0x18a0], rax
movabs rax, 0x67cc138266c95bfa
mov qword [rbp + 0x6b0], rax
mov rax, qword [rbp + 0x6b0]
mov qword [rbp + 0x18a8], rax
movabs rax, 0x63dc2b957f54fa27
mov qword [rbp + 0x6b8], rax
mov rax, qword [rbp + 0x6b8]
mov qword [rbp + 0x18b0], rax
movabs rax, 0x1e785ea4d713e9fc
mov qword [rbp + 0x6c0], rax
mov rax, qword [rbp + 0x6c0]
mov qword [rbp + 0x18b8], rax
xor eax, eax
test eax, eax
je 0x14000d631
jmp 0x14000d679
vmovdqa ymm0, ymmword [rbp + 0x1880]
vmovdqu ymmword [rbp + 0x1460], ymm0
vmovdqa ymm0, ymmword [rbp + 0x100]
vmovdqu ymmword [rbp + 0x1440], ymm0
vmovdqu ymm0, ymmword [rbp + 0x1440]
vpxor ymm0, ymm0, ymmword [rbp + 0x1460]
vmovdqu ymmword [rbp + 0x1480], ymm0
vmovdqu ymm0, ymmword [rbp + 0x1480]
vmovdqa ymmword [rbp + 0x100], ymm0
xor eax, eax
test eax, eax
je 0x14000d681
jmp 0x14000d6d2
lea rax, [rbp + 0x18a0]
vmovdqu ymm0, ymmword [rax]
vmovdqu ymmword [rbp + 0x14c0], ymm0
lea rax, [rbp + 0x120]
vmovdqu ymm0, ymmword [rax]
vmovdqu ymmword [rbp + 0x14a0], ymm0
vmovdqu ymm0, ymmword [rbp + 0x14a0]
vpxor ymm0, ymm0, ymmword [rbp + 0x14c0]
vmovdqu ymmword [rbp + 0x14e0], ymm0
lea rax, [rbp + 0x120]
vmovdqu ymm0, ymmword [rbp + 0x14e0]
vmovdqu ymmword [rax], ymm0
xor eax, eax
cmp eax, 1
je 0x14000d6db
jmp 0x14000d72c
lea rax, [rbp + 0x18c0]
vmovdqu ymm0, ymmword [rax]
vmovdqu ymmword [rbp + 0x1520], ymm0
lea rax, [rbp + 0x140]
vmovdqu ymm0, ymmword [rax]
vmovdqu ymmword [rbp + 0x1500], ymm0
vmovdqu ymm0, ymmword [rbp + 0x1500]
vpxor ymm0, ymm0, ymmword [rbp + 0x1520]
vmovdqu ymmword [rbp + 0x1540], ymm0
lea rax, [rbp + 0x140]
vmovdqu ymm0, ymmword [rbp + 0x1540]
vmovdqu ymmword [rax], ymm0
xor eax, eax
cmp eax, 1
je 0x14000d735
jmp 0x14000d786
lea rax, [rbp + 0x18e0]
vmovdqu ymm0, ymmword [rax]
vmovdqu ymmword [rbp + 0x1580], ymm0
lea rax, [rbp + 0x160]
vmovdqu ymm0, ymmword [rax]
vmovdqu ymmword [rbp + 0x1560], ymm0
vmovdqu ymm0, ymmword [rbp + 0x1560]
vpxor ymm0, ymm0, ymmword [rbp + 0x1580]
vmovdqu ymmword [rbp + 0x15a0], ymm0
lea rax, [rbp + 0x160]
vmovdqu ymm0, ymmword [rbp + 0x15a0]
vmovdqu ymmword [rax], ymm0
xor eax, eax
cmp eax, 1
je 0x14000d78f
jmp 0x14000d7e0
lea rax, [rbp + 0x1900]
vmovdqu ymm0, ymmword [rax]
vmovdqu ymmword [rbp + 0x15e0], ymm0
lea rax, [rbp + 0x180]
vmovdqu ymm0, ymmword [rax]
vmovdqu ymmword [rbp + 0x15c0], ymm0
vmovdqu ymm0, ymmword [rbp + 0x15c0]
vpxor ymm0, ymm0, ymmword [rbp + 0x15e0]
vmovdqu ymmword [rbp + 0x1600], ymm0
lea rax, [rbp + 0x180]
vmovdqu ymm0, ymmword [rbp + 0x1600]
vmovdqu ymmword [rax], ymm0
xor eax, eax
cmp eax, 1
je 0x14000d7e9
jmp 0x14000d83a
lea rax, [rbp + 0x1920]
vmovdqu ymm0, ymmword [rax]
vmovdqu ymmword [rbp + 0x1640], ymm0
lea rax, [rbp + 0x1a0]
vmovdqu ymm0, ymmword [rax]
vmovdqu ymmword [rbp + 0x1620], ymm0
vmovdqu ymm0, ymmword [rbp + 0x1620]
vpxor ymm0, ymm0, ymmword [rbp + 0x1640]
vmovdqu ymmword [rbp + 0x1660], ymm0
lea rax, [rbp + 0x1a0]
vmovdqu ymm0, ymmword [rbp + 0x1660]
vmovdqu ymmword [rax], ymm0
xor eax, eax
cmp eax, 1
je 0x14000d843
jmp 0x14000d894
lea rax, [rbp + 0x1940]
vmovdqu ymm0, ymmword [rax]
vmovdqu ymmword [rbp + 0x16a0], ymm0
lea rax, [rbp + 0x1c0]
vmovdqu ymm0, ymmword [rax]
vmovdqu ymmword [rbp + 0x1680], ymm0
vmovdqu ymm0, ymmword [rbp + 0x1680]
vpxor ymm0, ymm0, ymmword [rbp + 0x16a0]
vmovdqu ymmword [rbp + 0x16c0], ymm0
lea rax, [rbp + 0x1c0]
vmovdqu ymm0, ymmword [rbp + 0x16c0]
vmovdqu ymmword [rax], ymm0
xor eax, eax
cmp eax, 1
je 0x14000d89d
jmp 0x14000d8ee
lea rax, [rbp + 0x1960]
vmovdqu ymm0, ymmword [rax]
vmovdqu ymmword [rbp + 0x1700], ymm0
lea rax, [rbp + 0x1e0]
vmovdqu ymm0, ymmword [rax]
vmovdqu ymmword [rbp + 0x16e0], ymm0
vmovdqu ymm0, ymmword [rbp + 0x16e0]
vpxor ymm0, ymm0, ymmword [rbp + 0x1700]
vmovdqu ymmword [rbp + 0x820], ymm0
lea rax, [rbp + 0x1e0]
vmovdqu ymm0, ymmword [rbp + 0x820]
vmovdqu ymmword [rax], ymm0
lea rax, [rbp + 0x100]
mov qword [rbp + 0x2b0], rax
mov r9d, Ordinal_50
mov r8, qword [rbp + 0x2b8]
mov rdx, qword [rbp + 0x2b0]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
mov rcx, qword [rbp + 0x1960]
xor rcx, rsp
call fcn.140072540
add rsp, 0x19c8
pop rdi
pop rbp
ret