Function at 0x1400022a0
Capabilities:
Execute command

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x37]
sub rsp, 0xc0
mov rax, qword [section..data]
xor rax, rsp
mov qword [rbp + 0x2f], rax
xor ebx, ebx
movabs r15, 0x7fffffffffffffff
movabs r13, 0xb2f4fc0794908cf3
movabs r14, 0x4e94914f0000
movabs r12, 0x431bde82d7b634db
xorps xmm0, xmm0
mov edi, 0x6478
movups xmmword [rbp + 0xf], xmm0
mov qword [rbp + 0x1f], 5
mov qword [rbp + 0x27], 0xf
mov eax, dword [str.Kae01]
mov dword [rbp + 0xf], eax
movzx eax, byte [0x14000552c]
mov byte [rbp + 0x13], al
mov byte [rbp + 0x14], 0
lea rdx, [rbp + 0xf]
lea rcx, [rbp - 0x11]
call fcn.140001360
nop
lea rdx, [rbp - 0x11]
cmp qword [rbp + 7], 0xf
cmova rdx, qword [rbp - 0x11]
mov r8, qword [rbp - 1]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002dd0
mov rcx, rax
lea rdx, [0x140002720]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rax, [rbp - 0x41]
mov qword [rbp - 0x21], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x41], xmm0
mov qword [rbp - 0x31], 2
mov qword [rbp - 0x29], 0xf
mov word [rbp - 0x41], di
mov byte [rbp - 0x3f], 0
movups xmmword [rbp - 0x69], xmm0
mov qword [rbp - 0x59], rbx
mov qword [rbp - 0x51], rbx
lea rsi, [rbp - 0x11]
cmp qword [rbp + 7], 0xf
cmova rsi, qword [rbp - 0x11]
mov rdi, qword [rbp - 1]
cmp rdi, r15
ja 0x140002636
cmp rdi, 0xf
ja 0x1400023d7
mov qword [rbp - 0x59], rdi
mov qword [rbp - 0x51], 0xf
movups xmm0, xmmword [rsi]
movups xmmword [rbp - 0x69], xmm0
jmp 0x140002469
mov rbx, rdi
or rbx, 0xf
cmp rbx, r15
jbe 0x1400023f6
mov rbx, r15
movabs rax, 0x8000000000000000
add rax, 0x27
jmp 0x14000241d
cmp rbx, 0x16
mov eax, 0x16
cmovb rbx, rax
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x14000243f
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140002622
mov rcx, rax
call fcn.14000325c
mov rcx, rax
test rax, rax
je 0x14000261b
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x14000244d
test rcx, rcx
je 0x14000244b
call fcn.14000325c
jmp 0x14000244d
xor eax, eax
mov qword [rbp - 0x69], rax
mov qword [rbp - 0x59], rdi
mov qword [rbp - 0x51], rbx
lea r8, [rdi + 1]
mov rdx, rsi
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
nop
lea rdx, [rbp - 0x41]
lea rcx, [rbp - 0x69]
call fcn.140001e50
test al, al
je 0x140002487
lea rcx, str.cmd.exe__c_calc.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp - 0x49]
call fcn.1400011c0
mov rax, qword [rbp - 0x49]
movabs rcx, 0x7ffffff207b8a7ff
cmp rax, rcx
jge 0x1400024b2
movabs rdi, 0xdf8475800
add rdi, rax
jmp 0x1400024b5
mov rdi, r15
call qword [sym.imp.MSVCP140.dll__Query_perf_frequency]
mov rbx, rax
call qword [sym.imp.MSVCP140.dll__Query_perf_counter]
mov rcx, rax
cmp rbx, 0x989680
jne 0x1400024d6
imul rax, rcx, 0x64
jmp 0x140002545
cmp rbx, 0x16e3600
jne 0x14000252a
mov rax, r13
imul rcx
add rdx, rcx
sar rdx, 0x18
mov rax, rdx
shr rax, 0x3f
add rdx, rax
imul r9, rdx, 0x3b9aca00
imul rax, rdx, 0x16e3600
sub rcx, rax
imul r8, rcx, 0x3b9aca00
mov rax, r13
imul r8
add rdx, r8
sar rdx, 0x18
mov rax, rdx
shr rax, 0x3f
add rax, rdx
add rax, r9
jmp 0x140002545
cqo
idiv rbx
imul rcx, rax, 0x3b9aca00
imul rax, rdx, 0x3b9aca00
cqo
idiv rbx
add rax, rcx
cmp rax, rdi
jge 0x140002593
mov rcx, rdi
sub rcx, rax
cmp rcx, r14
jl 0x140002564
mov ecx, 0x5265c00
call sub.KERNEL32.dll_Sleep
jmp 0x1400024b5
mov rax, r12
imul rcx
sar rdx, 0x12
mov rax, rdx
shr rax, 0x3f
add rdx, rax
imul rax, rdx, 0xf4240
cmp rax, rcx
jge 0x140002587
inc rdx
mov ecx, edx
call sub.KERNEL32.dll_Sleep
jmp 0x1400024b5
mov rdx, qword [rbp + 7]
cmp rdx, 0xf
jbe 0x1400025ca
inc rdx
mov rcx, qword [rbp - 0x11]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400025c5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140002628
call fcn.140003298
xor ebx, ebx
mov qword [rbp - 1], rbx
mov qword [rbp + 7], 0xf
mov byte [rbp - 0x11], bl
mov rdx, qword [rbp + 0x27]
cmp rdx, 0xf
jbe 0x1400022fc
inc rdx
mov rcx, qword [rbp + 0xf]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002611
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000262f
call fcn.140003298
jmp 0x1400022fc
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140001100
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call fcn.1400011a0
int3