Function at 0x14000c7f0
Capabilities:
Contain obfuscated stackstrings
Create process on windows

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
sub rsp, 0x460
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
lea rbp, [rsp + 0x60]
and rbp, 0xffffffffffffffe0
mov rax, qword [0x1400ad280]
xor rax, rsp
mov qword [rbp + 0x3c0], rax
xor r13d, r13d
lea rcx, [rbp + 0x60]
call fcn.14000b880
nop
mov rdx, rax
lea rcx, [rbp + 0x20]
call fcn.14000b1b0
mov rdx, rax
lea rcx, [0x1400b41b8]
call fcn.140016da0
mov rdx, qword [rbp + 0x38]
cmp rdx, 0xf
jbe 0x14000c899
inc rdx
mov rcx, qword [rbp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000c894
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000de52
call fcn.14004e370
movdqa xmm6, xmmword [0x14009b790]
movdqu xmmword [rbp + 0x30], xmm6
mov byte [rbp + 0x20], 0
mov rdx, qword [rbp + 0x78]
cmp rdx, 0xf
jbe 0x14000c8e5
inc rdx
mov rcx, qword [rbp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000c8e0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000de58
call fcn.14004e370
movdqu xmmword [rbp + 0x70], xmm6
mov byte [rbp + 0x60], 0
cmp qword [0x1400b40e0], 0xa
jne 0x14000ddcf
cmp qword [0x1400b4100], 0x40
jne 0x14000ddcf
mov dword [rbp + 0x356], 0x3d7669
mov dword [rbp + 0x350], 0x696e6926
mov word [rbp + 0x354], 0x5f74
mov byte [rbp + 0x35a], 0
lea rdx, [0x1400b40d0]
lea rcx, [rbp + 0x3a0]
call fcn.14000b5e0
mov r12, rax
mov dword [rbp + 0x376], 0x3d6469
mov dword [rbp + 0x370], 0x6e776f26
mov word [rbp + 0x374], 0x7265
mov byte [rbp + 0x37a], 0
lea rdx, [0x1400b40b0]
lea rcx, [rbp + 0x1a0]
call fcn.14000b5e0
mov r15, rax
mov word [rbp + 5], 0x3d
mov dword [rbp], 0x6d616e26
mov byte [rbp + 4], 0x65
mov byte [rbp + 7], 0
lea rax, [rbp + 0x200]
mov qword [rbp + 0x10], rax
lea rdx, [0x1400b4058]
lea rcx, [rbp + 0x200]
call fcn.140016f80
mov rdi, rax
lea rax, [rbp + 0x220]
mov qword [rbp + 8], rax
lea rdx, [0x1400b40f0]
lea rcx, [rbp + 0x220]
call fcn.140016f80
mov rbx, rax
lea rdx, [0x1400b41b8]
lea rcx, [rbp + 0x240]
call fcn.140016f80
nop
mov r9, rdi
mov r8, rbx
mov rdx, rax
lea rcx, [rbp + 0x180]
call fcn.14000b9b0
mov r14, rax
mov word [rbp + 0x277], 0x3d
mov dword [rbp + 0x270], 0x636e6526
mov word [rbp + 0x274], 0x656b
mov byte [rbp + 0x276], 0x79
mov byte [rbp + 0x279], 0
lea rax, [rbp + 0x1c0]
mov qword [rbp + 0x18], rax
lea rdx, [0x1400b4058]
lea rcx, [rbp + 0x1c0]
call fcn.140016f80
mov rdi, rax
lea rax, [rbp + 0x2c0]
mov qword [rbp + 0x10], rax
lea rdx, [0x1400b40f0]
lea rcx, [rbp + 0x2c0]
call fcn.140016f80
mov rbx, rax
lea rdx, [0x1400b4110]
lea rcx, [rbp + 0x310]
call fcn.140016f80
nop
mov r9, rdi
mov r8, rbx
mov rdx, rax
lea rcx, [rbp + 0x160]
call fcn.14000b9b0
mov rbx, rax
mov dword [rbp + 0x12], 0x3d7265
mov word [rbp + 0x10], 0x7626
mov byte [rbp + 0x16], 0
mov word [rbp + 0xb], 0x74
mov word [rbp + 8], 0x6e69
mov byte [rbp + 0xa], 0x69
mov byte [rbp + 0xd], 0
xorps xmm0, xmm0
movups xmmword [rbp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x50], xmm1
lea rax, [rbp + 8]
mov rsi, 0xffffffffffffffff
mov r8, rsi
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x14000cae0
lea rdx, [rbp + 8]
lea rcx, [rbp + 0x40]
call fcn.14001e710
nop
lea rdx, [rbp + 0x40]
lea rcx, [rbp + 0x140]
call fcn.14000b5e0
nop
mov dword [rbp + 0xa], 0x3d6570
mov word [rbp + 8], 0x7974
mov byte [rbp + 0xe], 0
lea rcx, [rbp + 8]
mov r9, rsi
inc r9
cmp byte [rcx + r9], 0
jne 0x14000cb21
lea r8, [rbp + 8]
xor edx, edx
mov rcx, rax
call fcn.140021fa0
xorps xmm0, xmm0
movups xmmword [rbp + 0xa0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xb0], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0xa0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0xb0], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea rax, [rbp + 0x10]
mov r8, rsi
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x14000cb80
lea rdx, [rbp + 0x10]
lea rcx, [rbp + 0xa0]
call fcn.140016cb0
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0xe0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0xf0], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov r9, rbx
lea r8, [rbp + 0xe0]
lea rcx, [rbp + 0x20]
call fcn.1400220a0
nop
lea rax, [rbp + 0x270]
mov r8, rsi
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x14000cbe0
lea rdx, [rbp + 0x270]
lea rcx, [rbp + 0x20]
call fcn.140016cb0
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0xc0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0xd0], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov r9, r14
lea r8, [rbp + 0xc0]
lea rcx, [rbp + 0x60]
call fcn.1400220a0
nop
lea rax, [rbp]
mov r8, rsi
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x14000cc40
lea rdx, [rbp]
lea rcx, [rbp + 0x60]
call fcn.140016cb0
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x270], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x280], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov r9, r15
lea r8, [rbp + 0x270]
lea rcx, [rbp + 0x120]
call fcn.1400220a0
nop
lea rax, [rbp + 0x370]
mov r8, rsi
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x14000cca0
lea rdx, [rbp + 0x370]
lea rcx, [rbp + 0x120]
call fcn.140016cb0
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x370], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x380], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov r9, r12
lea r8, [rbp + 0x370]
lea rcx, [rbp + 0x100]
call fcn.1400220a0
nop
lea rax, [rbp + 0x350]
mov r8, rsi
inc r8
cmp byte [rax + r8], 0
jne 0x14000cd02
lea rdx, [rbp + 0x350]
lea rcx, [rbp + 0x100]
call fcn.140016cb0
xorps xmm0, xmm0
movups xmmword [rbp + 0x80], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x90], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x80], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x90], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea rdx, [0x1400b4058]
cmp qword [0x1400b4070], 0xf
cmova rdx, qword [0x1400b4058]
mov r8, qword [0x1400b4068]
lea rcx, [rbp + 0x80]
call fcn.140016cb0
movups xmm8, xmmword [rax]
movups xmmword [rbp + 0x330], xmm8
movups xmm7, xmmword [rax + 0x10]
movups xmmword [rbp + 0x340], xmm7
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [rbp + 0x98]
cmp rdx, 0xf
jbe 0x14000cde9
inc rdx
mov rcx, qword [rbp + 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000cde4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000de5e
call fcn.14004e370
movdqu xmmword [rbp + 0x90], xmm6
mov byte [rbp + 0x80], 0
mov rdx, qword [rbp + 0x118]
cmp rdx, 0xf
jbe 0x14000ce39
inc rdx
mov rcx, qword [rbp + 0x100]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000ce34
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000de64
call fcn.14004e370
movdqu xmmword [rbp + 0x110], xmm6
mov byte [rbp + 0x100], 0
mov rdx, qword [rbp + 0x388]
cmp rdx, 0xf
jbe 0x14000ce89
inc rdx
mov rcx, qword [rbp + 0x370]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000ce84
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000de6a
call fcn.14004e370
movdqu xmmword [rbp + 0x380], xmm6
mov byte [rbp + 0x370], 0
mov rdx, qword [rbp + 0x138]
cmp rdx, 0xf
jbe 0x14000ced9
inc rdx
mov rcx, qword [rbp + 0x120]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000ced4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000de70
call fcn.14004e370
movdqu xmmword [rbp + 0x130], xmm6
mov byte [rbp + 0x120], 0
mov rdx, qword [rbp + 0x288]
cmp rdx, 0xf
jbe 0x14000cf29
inc rdx
mov rcx, qword [rbp + 0x270]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000cf24
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000de76
call fcn.14004e370
movdqu xmmword [rbp + 0x280], xmm6
mov byte [rbp + 0x270], 0
mov rdx, qword [rbp + 0x78]
cmp rdx, 0xf
jbe 0x14000cf73
inc rdx
mov rcx, qword [rbp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000cf6e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000de7c
call fcn.14004e370
movdqu xmmword [rbp + 0x70], xmm6
mov byte [rbp + 0x60], 0
mov rdx, qword [rbp + 0xd8]
cmp rdx, 0xf
jbe 0x14000cfbd
inc rdx
mov rcx, qword [rbp + 0xc0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000cfb8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000de82
call fcn.14004e370
movdqu xmmword [rbp + 0xd0], xmm6
mov byte [rbp + 0xc0], 0
mov rdx, qword [rbp + 0x38]
cmp rdx, 0xf
jbe 0x14000d007
inc rdx
mov rcx, qword [rbp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000d002
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000de88
call fcn.14004e370
movdqu xmmword [rbp + 0x30], xmm6
mov byte [rbp + 0x20], 0
mov rdx, qword [rbp + 0xf8]
cmp rdx, 0xf
jbe 0x14000d051
inc rdx
mov rcx, qword [rbp + 0xe0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000d04c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000de8e
call fcn.14004e370
movdqu xmmword [rbp + 0xf0], xmm6
mov byte [rbp + 0xe0], 0
mov rdx, qword [rbp + 0xb8]
cmp rdx, 0xf
jbe 0x14000d0a1
inc rdx
mov rcx, qword [rbp + 0xa0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000d09c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000de94
call fcn.14004e370
movdqu xmmword [rbp + 0xb0], xmm6
mov byte [rbp + 0xa0], 0
mov rdx, qword [rbp + 0x158]
cmp rdx, 0xf
jbe 0x14000d0f1
inc rdx
mov rcx, qword [rbp + 0x140]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000d0ec
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000de9a
call fcn.14004e370
movdqu xmmword [rbp + 0x150], xmm6
mov byte [rbp + 0x140], 0
mov rdx, qword [rbp + 0x58]
cmp rdx, 0xf
jbe 0x14000d13b
inc rdx
mov rcx, qword [rbp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000d136
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000dea0
call fcn.14004e370
movdqu xmmword [rbp + 0x50], xmm6
mov byte [rbp + 0x40], 0
mov rdx, qword [rbp + 0x178]
cmp rdx, 0xf
jbe 0x14000d185
inc rdx
mov rcx, qword [rbp + 0x160]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000d180
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000dea6
call fcn.14004e370
movdqu xmmword [rbp + 0x170], xmm6
mov byte [rbp + 0x160], 0
mov rdx, qword [rbp + 0x198]
cmp rdx, 0xf
jbe 0x14000d1d5
inc rdx
mov rcx, qword [rbp + 0x180]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000d1d0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000deac
call fcn.14004e370
movdqu xmmword [rbp + 0x190], xmm6
mov byte [rbp + 0x180], 0
mov rdx, qword [rbp + 0x1b8]
cmp rdx, 0xf
jbe 0x14000d225
inc rdx
mov rcx, qword [rbp + 0x1a0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000d220
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000deb2
call fcn.14004e370
movdqu xmmword [rbp + 0x1b0], xmm6
mov byte [rbp + 0x1a0], 0
mov rdx, qword [rbp + 0x3b8]
cmp rdx, 0xf
jbe 0x14000d275
inc rdx
mov rcx, qword [rbp + 0x3a0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000d270
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000deb8
call fcn.14004e370
movdqu xmmword [rbp + 0x3b0], xmm6
mov byte [rbp + 0x3a0], 0
xorps xmm0, xmm0
movups xmmword [rbp + 0x350], xmm0
mov qword [rbp + 0x360], r13
mov qword [rbp + 0x368], r13
lea r15, [rbp + 0x330]
movq rcx, xmm8
movdqa xmm0, xmm7
psrldq xmm0, 8
movq rax, xmm0
cmp rax, 0xf
cmova r15, rcx
movabs r14, 0x7fffffffffffffff
movq rdi, xmm7
cmp rdi, r14
ja 0x14000debe
cmp rdi, 0xf
ja 0x14000d2fe
mov qword [rbp + 0x360], rdi
mov qword [rbp + 0x368], 0xf
movups xmm0, xmmword [r15]
movups xmmword [rbp + 0x350], xmm0
jmp 0x14000d398
mov rbx, rdi
or rbx, 0xf
cmp rbx, r14
jbe 0x14000d33d
mov rbx, r14
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.14004e46c
mov rcx, rax
test rax, rax
je 0x14000dec4
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x14000d374
mov eax, 0x16
cmp rbx, rax
cmovb rbx, rax
lea rcx, [rbx + 1]
test rcx, rcx
jne 0x14000d357
mov rax, r13
jmp 0x14000d374
cmp rcx, 0x1000
jb 0x14000d36f
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14000dcc5
jmp 0x14000d31b
call fcn.14004e46c
mov qword [rbp + 0x350], rax
mov qword [rbp + 0x360], rdi
mov qword [rbp + 0x368], rbx
lea r8, [rdi + 1]
mov rdx, r15
mov rcx, rax
call fcn.140081080
lea rdx, [rbp + 0x350]
lea rcx, [rbp + 0x2a0]
call fcn.1400115b0
nop
lea rax, [rbp + 0x310]
mov qword [rbp + 0x18], rax
lea rdx, [0x1400b4058]
lea rcx, [rbp + 0x310]
call fcn.140016f80
mov rdi, rax
lea rax, [rbp + 0x2c0]
mov qword [rbp], rax
lea rdx, [0x1400b40f0]
lea rcx, [rbp + 0x2c0]
call fcn.140016f80
mov rbx, rax
lea rdx, [rbp + 0x2a0]
lea rcx, [rbp + 0x1c0]
call fcn.140016f80
nop
mov r9, rdi
mov r8, rbx
mov rdx, rax
lea rcx, [rbp + 0x3a0]
call fcn.14000bcc0
mov rbx, rax
lea rax, [rbp + 0x2a0]
cmp rax, rbx
je 0x14000d49a
mov rdx, qword [rbp + 0x2b8]
cmp rdx, 0xf
jbe 0x14000d467
inc rdx
mov rcx, qword [rbp + 0x2a0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000d462
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000deca
call fcn.14004e370
movdqu xmmword [rbp + 0x2b0], xmm6
mov byte [rbp + 0x2a0], 0
movups xmm0, xmmword [rbx]
movups xmmword [rbp + 0x2a0], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rbp + 0x2b0], xmm1
mov qword [rbx + 0x10], r13
mov qword [rbx + 0x18], 0xf
mov byte [rbx], 0
mov rdx, qword [rbp + 0x3b8]
cmp rdx, 0xf
jbe 0x14000d4db
inc rdx
mov rcx, qword [rbp + 0x3a0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000d4d6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000deca
call fcn.14004e370
movdqu xmmword [rbp + 0x3b0], xmm6
mov byte [rbp + 0x3a0], 0
mov qword [rbp + 0x1f8], r13
lea r8, [rbp + 0x1c0]
lea rdx, [rbp + 0x2a0]
lea rcx, [rbp + 0x290]
call fcn.14001d790
nop
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
movabs rax, 0x31add906168c776
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x350], rax
movabs r15, 0x34b67fd49373b712
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x358], rax
movabs r12, 0x369aef5020bb205
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x370], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x378], rax
movdqa xmm0, xmmword [rbp + 0x350]
xorps xmm0, xmmword [rbp + 0x370]
movdqa xmmword [rbp + 0x350], xmm0
xorps xmm0, xmm0
movups xmmword [rbp + 0x20], xmm0
mov qword [rbp + 0x30], r13
mov qword [rbp + 0x38], r13
lea rax, [rbp + 0x350]
mov r8, rsi
inc r8
cmp byte [rax + r8], 0
jne 0x14000d5a1
lea rdx, [rbp + 0x350]
lea rcx, [rbp + 0x20]
call fcn.14001e710
lea rdx, [rbp + 0x20]
lea rcx, [rbp + 0x290]
call fcn.140015070
cmp byte [rax], 4
jne 0x14000ded0
cmp byte [rax + 8], 0
je 0x14000d97a
movabs rax, 0x6a07c19c7178d776
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x350], rax
movabs rax, 0x34b67fd49373b776
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x358], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x370], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x378], rax
movdqa xmm0, xmmword [rbp + 0x350]
xorps xmm0, xmmword [rbp + 0x370]
movdqa xmmword [rbp + 0x350], xmm0
xorps xmm0, xmm0
movups xmmword [rbp + 0x20], xmm0
mov qword [rbp + 0x30], r13
mov qword [rbp + 0x38], r13
lea rax, [rbp + 0x350]
mov r8, rsi
nop
inc r8
cmp byte [rax + r8], 0
jne 0x14000d660
lea rdx, [rbp + 0x350]
lea rcx, [rbp + 0x20]
call fcn.14001e710
lea rdx, [rbp + 0x20]
lea rcx, [rbp + 0x290]
call fcn.140015070
cmp byte [rax], 3
jne 0x14000df10
mov r8, qword [rax + 8]
mov rdx, r8
cmp qword [r8 + 0x18], 0xf
jbe 0x14000d6a4
mov rdx, qword [r8]
mov r8, qword [r8 + 0x10]
lea rbx, [0x1400b4198]
mov rcx, rbx
call fcn.14001a960
cmp qword [0x1400b41a8], 0
je 0x14000df50
movabs rax, 0x369aef5020bb20f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x350], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x358], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x370], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x378], rax
movdqa xmm0, xmmword [rbp + 0x350]
xorps xmm0, xmmword [rbp + 0x370]
movdqa xmmword [rbp + 0x350], xmm0
lea rdx, [rbp + 0x350]
lea rcx, [0x1400b2200]
call fcn.14001d090
movabs rax, 0x6a1dc0906a7fc744
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x40], rax
movabs rax, 0x67965eb0f607d671
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x48], rax
movabs rax, 0xba251dd078b49252
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x50], rax
movabs rax, 0xf9954b4e652e3d78
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x58], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x3a0], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x3a8], rax
movabs rax, 0xf30573bf11c7e137
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x3b0], rax
movabs rax, 0xf9954b4e45141d3c
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x3b8], rax
vmovdqu ymm0, ymmword [rbp + 0x40]
vpxor ymm1, ymm0, ymmword [rbp + 0x3a0]
vmovdqa ymmword [rbp + 0x40], ymm1
lea rax, [rbp + 0x40]
vzeroupper
inc rsi
cmp byte [rax + rsi], 0
jne 0x14000d7f6
mov rax, qword [0x1400b41a8]
sub r14, rax
cmp r14, rsi
jb 0x14000df58
cmp qword [0x1400b41b0], 0xf
cmova rbx, qword [0x1400b4198]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], rsi
lea r9, [rbp + 0x40]
lea rcx, [rbp + 0x3a0]
call fcn.140022290
nop
mov edx, 1
lea rcx, [rbp + 0x3a0]
call fcn.140009bd0
nop
mov rdx, qword [rbp + 0x3b8]
cmp rdx, 0xf
jbe 0x14000d896
inc rdx
mov rcx, qword [rbp + 0x3a0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000d890
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000df5e
call fcn.14004e370
nop
movzx edx, byte [rbp + 0x290]
lea rcx, [rbp + 0x298]
call fcn.14001a0b0
nop
mov rdx, qword [rbp + 0x2b8]
cmp rdx, 0xf
jbe 0x14000d8eb
inc rdx
mov rcx, qword [rbp + 0x2a0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000d8e6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000df64
call fcn.14004e370
movdqu xmmword [rbp + 0x2b0], xmm6
mov byte [rbp + 0x2a0], 0
mov rdx, qword [rbp + 0x348]
cmp rdx, 0xf
jbe 0x14000d93b
inc rdx
mov rcx, qword [rbp + 0x330]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000d936
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000df6a
call fcn.14004e370
mov rcx, qword [rbp + 0x3c0]
xor rcx, rsp
call fcn.14004e350
lea r11, [rsp + 0x460]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
movabs rax, 0x750dc799637ddc6c
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x370], rax
movabs rax, 0x34b67fd49373c577
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x378], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x350], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x358], rax
movdqa xmm0, xmmword [rbp + 0x370]
xorps xmm0, xmmword [rbp + 0x350]
movdqa xmmword [rbp + 0x370], xmm0
movabs r14, 0x30cc9947178d768
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x350], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x358], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x270], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x278], rax
movdqa xmm0, xmmword [rbp + 0x350]
xorps xmm0, xmmword [rbp + 0x270]
movdqa xmmword [rbp + 0x350], xmm0
xorps xmm0, xmm0
movups xmmword [rbp + 0x20], xmm0
mov qword [rbp + 0x30], r13
mov qword [rbp + 0x38], r13
lea rax, [rbp + 0x350]
mov r8, rsi
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x14000da60
lea rdx, [rbp + 0x350]
lea rcx, [rbp + 0x20]
call fcn.14001e710
lea rdx, [rbp + 0x20]
lea rcx, [rbp + 0x290]
call fcn.140015070
mov rdi, rax
mov byte [rbp + 0x350], 0
xor eax, eax
mov qword [rbp + 0x358], rax
xor edx, edx
lea rcx, [rbp + 0x358]
call fcn.14001a0b0
mov byte [rbp + 0x350], 3
mov ecx, 0x20
call fcn.14004e46c
mov rbx, rax
lea rax, [rbp + 0x260]
mov qword [rbp + 0x270], rax
xorps xmm0, xmm0
movups xmmword [rbx], xmm0
mov qword [rbx + 0x10], r13
mov qword [rbx + 0x18], r13
lea rax, [rbp + 0x370]
inc rsi
cmp byte [rax + rsi], 0
jne 0x14000dae2
mov r8, rsi
lea rdx, [rbp + 0x370]
mov rcx, rbx
call fcn.14001e710
mov qword [rbp + 0x278], r13
mov qword [rbp + 0x358], rbx
lea rdx, [rbp + 0x350]
mov rcx, rdi
call fcn.140021b20
movzx ebx, al
movzx edx, byte [rbp + 0x350]
lea rcx, [rbp + 0x358]
call fcn.14001a0b0
nop
lea rdx, [rbp + 0x350]
lea rcx, [rbp + 0x290]
test bl, bl
jne 0x14000dccb
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x350], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x358], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x370], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x378], rax
movdqa xmm0, xmmword [rbp + 0x350]
xorps xmm0, xmmword [rbp + 0x370]
movdqa xmmword [rbp + 0x350], xmm0
call fcn.14001d8b0
mov rdx, rax
lea rcx, [rbp + 0x310]
call fcn.14001d900
mov r8, rax
movabs rax, 0x2353dd80766ac656
mov qword [rbp], rax
mov rcx, qword [rbp]
mov qword [rbp + 0x350], rcx
mov qword [rbp], r15
mov rcx, qword [rbp]
mov qword [rbp + 0x358], rcx
mov qword [rbp], r12
mov rcx, qword [rbp]
mov qword [rbp + 0x370], rcx
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x378], rax
movdqa xmm0, xmmword [rbp + 0x350]
xorps xmm0, xmmword [rbp + 0x370]
movdqa xmmword [rbp + 0x350], xmm0
lea rdx, [rbp + 0x350]
lea rcx, [rbp + 0x2c0]
call fcn.14001c830
nop
lea rcx, [rbp + 0x310]
call fcn.140016d40
movabs rax, 0x369aef5020bb20f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x350], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x358], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x370], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x378], rax
movdqa xmm0, xmmword [rbp + 0x350]
xorps xmm0, xmmword [rbp + 0x370]
movdqa xmmword [rbp + 0x350], xmm0
lea rdx, [rbp + 0x350]
lea rcx, [0x1400b2200]
call fcn.14001d090
mov edx, 1
lea rcx, [rbp + 0x2c0]
call fcn.140009bd0
mov ecx, 0x1194
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 1
call fcn.14005ccfc
nop
call fcn.1400020f0
nop
movabs rax, 0x6708c1996c7cdd61
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x350], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x358], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x270], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x278], rax
movdqa xmm0, xmmword [rbp + 0x350]
xorps xmm0, xmmword [rbp + 0x270]
movdqa xmmword [rbp + 0x350], xmm0
call fcn.14001d8b0
lea rdx, [rbp + 0x310]
mov rcx, rax
call fcn.14001cc50
lea rcx, [rbp + 0x310]
call fcn.140016ca0
mov r8, rax
movabs rax, 0x369aef56c6ec26a
mov qword [rbp], rax
mov rcx, qword [rbp]
mov qword [rbp + 0x370], rcx
mov qword [rbp], r15
mov rcx, qword [rbp]
mov qword [rbp + 0x378], rcx
mov qword [rbp], r12
mov rcx, qword [rbp]
mov qword [rbp + 0x350], rcx
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x358], rax
movdqa xmm0, xmmword [rbp + 0x370]
xorps xmm0, xmmword [rbp + 0x350]
movdqa xmmword [rbp + 0x370], xmm0
mov dword [rsp + 0x28], 1
mov qword [rsp + 0x20], r13
xor r9d, r9d
lea rdx, [rbp + 0x370]
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
xor ecx, ecx
call fcn.14005ccfc
nop
movdqa xmm0, xmmword [0x14009b8a0]
movdqu xmmword [rbp + 0x2c0], xmm0
movdqa xmm1, xmmword [0x14009b8c0]
movdqu xmmword [rbp + 0x2d0], xmm1
movdqa xmm0, xmmword [0x14009b8b0]
movdqu xmmword [rbp + 0x2e0], xmm0
movdqa xmm1, xmmword [0x14009b870]
movdqu xmmword [rbp + 0x2f0], xmm1
mov dword [rbp + 0x300], 0x3831026e
mov dword [rbp + 0x304], 0x25377d3c
mov word [rbp + 0x308], 0x26
mov byte [rbp + 0x30a], 1
lea rdx, [rbp + 0x2c0]
call fcn.14000df70
mov ecx, 0x1194
call qword [sym.imp.KERNEL32.dll_Sleep]
xor ecx, ecx
call fcn.14005ccfc
nop
call fcn.140065360
nop
call fcn.140065360
nop
call fcn.140065360
nop
call fcn.140065360
nop
call fcn.140065360
nop
call fcn.140065360
nop
call fcn.140065360
nop
call fcn.140065360
nop
call fcn.140065360
nop
call fcn.140065360
nop
call fcn.140065360
nop
call fcn.140065360
nop
call fcn.140065360
nop
call fcn.140065360
nop
call fcn.140065360
nop
call fcn.140065360
nop
call fcn.140065360
nop
call fcn.140065360
int3
call fcn.140002190
int3
call fcn.140065360
nop
call fcn.140065360
nop
mov rcx, rax
call fcn.14001a5b0
mov qword [rbp], rax
lea r8, [rbp]
lea rcx, [rbp + 0x310]
call fcn.14002dfc0
nop
mov r8, rax
lea rcx, [rbp + 0x2c0]
call fcn.14002dd80
lea rdx, [0x1400ab2e8]
lea rcx, [rbp + 0x2c0]
call fcn.14005085c
nop
mov rcx, rax
call fcn.14001a5b0
mov qword [rbp], rax
lea r8, [rbp]
lea rcx, [rbp + 0x310]
call fcn.14002dcd0
nop
mov r8, rax
lea rcx, [rbp + 0x2c0]
call fcn.14002dd80
lea rdx, [0x1400ab2e8]
lea rcx, [rbp + 0x2c0]
call fcn.14005085c
nop
xor ecx, ecx
call fcn.14005ccfc
int3
call fcn.140002190
int3
call fcn.140065360
nop
call fcn.140065360
nop
call fcn.140065360
int3