Function at 0x7ff7e1aa4470
Capabilities:
Create process on windows
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x2f0]
sub rsp, 0x3f0
mov rax, qword [0x7ff7e1d8f600]
xor rax, rsp
mov qword [rbp + 0x2e0], rax
mov r13, rcx
lea rcx, [rbp]
call fcn.7ff7e1aa3400
nop
mov rdx, rax
lea rcx, [rbp + 0x2a0]
call fcn.7ff7e1aa2d20
mov rdx, rax
lea rcx, [r13 + 0x108]
call fcn.7ff7e1a9d450
mov rdx, qword [rbp + 0x2b8]
cmp rdx, 0x10
jb 0x7ff7e1aa4514
inc rdx
mov rcx, qword [rbp + 0x2a0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff7e1aa450f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x7ff7e1aa5471
call fcn.7ff7e1c651d8
mov qword [rbp + 0x2b0], 0
mov qword [rbp + 0x2b8], 0xf
mov byte [rbp + 0x2a0], 0
mov rdx, qword [rbp + 0x18]
cmp rdx, 0x10
jb 0x7ff7e1aa456c
inc rdx
mov rcx, qword [rbp]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff7e1aa4567
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x7ff7e1aa5477
call fcn.7ff7e1c651d8
cmp qword [r13 + 0x30], 0xa
jne 0x7ff7e1aa5409
cmp qword [r13 + 0x50], 0x40
jne 0x7ff7e1aa5409
mov dword [rsp + 0x68], 0xa0c0846
mov dword [rsp + 0x6c], 0x110f3a10
mov word [rsp + 0x70], 0x55
mov byte [rsp + 0x72], 1
xor ecx, ecx
lea eax, [rcx + 0x60]
xor byte [rsp + rcx + 0x68], al
inc rcx
cmp rcx, 9
jb 0x7ff7e1aa45a0
mov byte [rsp + 0x72], 0
lea rdx, [r13 + 0x20]
lea rcx, [rbp + 0x170]
call fcn.7ff7e1aa3150
mov r15, rax
mov dword [rsp + 0x58], 0xd150e46
mov dword [rsp + 0x5c], 0x30f1701
mov word [rsp + 0x60], 0x55
mov byte [rsp + 0x62], 1
xor ecx, ecx
nop word [rax + rax]
lea eax, [rcx + 0x60]
xor byte [rsp + rcx + 0x58], al
inc rcx
cmp rcx, 9
jb 0x7ff7e1aa45f0
mov byte [rsp + 0x62], 0
mov rdx, r13
lea rcx, [rbp + 0x150]
call fcn.7ff7e1aa3150
mov r14, rax
mov dword [rsp + 0x40], 0xe030f46
mov dword [rsp + 0x44], 0x1005801
xor ecx, ecx
nop dword [rax]
lea eax, [rcx + 0x60]
xor byte [rsp + rcx + 0x40], al
inc rcx
cmp rcx, 6
jb 0x7ff7e1aa4630
mov byte [rsp + 0x47], 0
lea rax, [rbp + 0x230]
mov qword [rsp + 0x38], rax
lea rdx, [0x7ff7e1dcc598]
lea rcx, [rbp + 0x230]
call fcn.7ff7e1ab2f90
mov rdi, rax
lea rax, [rbp + 0x250]
mov qword [rsp + 0x30], rax
lea rdx, [r13 + 0x40]
lea rcx, [rbp + 0x250]
call fcn.7ff7e1ab2f90
mov rbx, rax
lea rdx, [r13 + 0x108]
lea rcx, [rbp + 0x1f0]
call fcn.7ff7e1ab2f90
nop
mov r9, rdi
mov r8, rbx
mov rdx, rax
lea rcx, [rbp + 0x130]
call fcn.7ff7e1aa3550
mov rsi, rax
mov dword [rsp + 0x48], 0xc0446
mov dword [rsp + 0x4c], 0x5a1f000f
mov word [rsp + 0x50], 0x100
xor ecx, ecx
nop dword [rax + rax]
lea eax, [rcx + 0x60]
xor byte [rsp + rcx + 0x48], al
inc rcx
cmp rcx, 8
jb 0x7ff7e1aa46d0
mov byte [rsp + 0x51], 0
lea rax, [rbp + 0x20]
mov qword [rsp + 0x78], rax
lea rdx, [0x7ff7e1dcc598]
lea rcx, [rbp + 0x20]
call fcn.7ff7e1ab2f90
mov rdi, rax
lea rax, [rbp + 0x190]
mov qword [rsp + 0x38], rax
lea rdx, [r13 + 0x40]
lea rcx, [rbp + 0x190]
call fcn.7ff7e1ab2f90
mov rbx, rax
lea rdx, [r13 + 0x60]
lea rcx, [rbp + 0x2c0]
call fcn.7ff7e1ab2f90
nop
mov r9, rdi
mov r8, rbx
mov rdx, rax
lea rcx, [rbp + 0x110]
call fcn.7ff7e1aa3550
mov rbx, rax
mov dword [rsp + 0x38], 0x11071746
mov word [rsp + 0x3c], 0x59
mov byte [rsp + 0x3e], 1
xor edi, edi
mov ecx, edi
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx + 0x60]
xor byte [rsp + rcx + 0x38], al
inc rcx
cmp rcx, 5
jb 0x7ff7e1aa4770
mov byte [rsp + 0x3e], dil
mov dword [rsp + 0x30], 0x170b0f09
mov word [rsp + 0x34], 0x100
mov rcx, rdi
nop word [rax + rax]
lea eax, [rcx + 0x60]
xor byte [rsp + rcx + 0x30], al
inc rcx
cmp rcx, 4
jb 0x7ff7e1aa47a0
mov byte [rsp + 0x35], dil
mov qword [rbp - 0x80], rdi
mov qword [rbp - 0x70], rdi
mov qword [rbp - 0x68], 0xf
mov byte [rbp - 0x80], 0
lea rax, [rsp + 0x30]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], 0
jne 0x7ff7e1aa47d5
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x80]
call fcn.7ff7e1a9d210
nop
lea rdx, [rbp - 0x80]
lea rcx, [rbp + 0xf0]
call fcn.7ff7e1aa3150
mov r10, rax
mov dword [rsp + 0x30], 0x6121814
mov word [rsp + 0x34], 0x59
mov byte [rsp + 0x36], 1
mov rcx, rdi
nop dword [rax + rax]
lea eax, [rcx + 0x60]
xor byte [rsp + rcx + 0x30], al
inc rcx
cmp rcx, 5
jb 0x7ff7e1aa4820
mov byte [rsp + 0x36], 0
lea rax, [rsp + 0x30]
mov r9, 0xffffffffffffffff
inc r9
cmp byte [rax + r9], 0
jne 0x7ff7e1aa4841
lea r8, [rsp + 0x30]
xor edx, edx
mov rcx, r10
call fcn.7ff7e1abba40
mov qword [rbp - 0x20], rdi
mov qword [rbp - 0x10], rdi
mov qword [rbp - 8], rdi
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x20], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x10], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea rax, [rsp + 0x38]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], 0
jne 0x7ff7e1aa4890
lea rdx, [rsp + 0x38]
lea rcx, [rbp - 0x20]
call fcn.7ff7e1a9d6a0
movups xmm0, xmmword [rax]
movups xmmword [rbp], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x10], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov r9, rbx
lea r8, [rbp]
lea rcx, [rbp + 0xd0]
call fcn.7ff7e1abbb40
nop
lea rax, [rsp + 0x48]
mov rbx, 0xffffffffffffffff
mov r8, rbx
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x7ff7e1aa48f0
lea rdx, [rsp + 0x48]
lea rcx, [rbp + 0xd0]
call fcn.7ff7e1a9d6a0
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x1d0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x1e0], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov r9, rsi
lea r8, [rbp + 0x1d0]
lea rcx, [rbp + 0xb0]
call fcn.7ff7e1abbb40
nop
lea rax, [rsp + 0x40]
mov r8, rbx
nop
inc r8
cmp byte [rax + r8], 0
jne 0x7ff7e1aa4950
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0xb0]
call fcn.7ff7e1a9d6a0
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x1b0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x1c0], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov r9, r14
lea r8, [rbp + 0x1b0]
lea rcx, [rbp + 0x90]
call fcn.7ff7e1abbb40
nop
lea rax, [rsp + 0x58]
mov r8, rbx
nop
inc r8
cmp byte [rax + r8], 0
jne 0x7ff7e1aa49b0
lea rdx, [rsp + 0x58]
lea rcx, [rbp + 0x90]
call fcn.7ff7e1a9d6a0
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x60], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x50], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov r9, r15
lea r8, [rbp - 0x60]
lea rcx, [rbp + 0x70]
call fcn.7ff7e1abbb40
nop
lea rax, [rsp + 0x68]
mov r8, rbx
inc r8
cmp byte [rax + r8], 0
jne 0x7ff7e1aa4a02
lea rdx, [rsp + 0x68]
lea rcx, [rbp + 0x70]
call fcn.7ff7e1a9d6a0
mov qword [rbp - 0x40], rdi
mov qword [rbp - 0x30], rdi
mov qword [rbp - 0x28], rdi
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x40], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x30], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea rdx, [0x7ff7e1dcc598]
cmp qword [0x7ff7e1dcc5b0], 0x10
cmovae rdx, qword [0x7ff7e1dcc598]
mov r8, qword [0x7ff7e1dcc5a8]
lea rcx, [rbp - 0x40]
call fcn.7ff7e1a9d6a0
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x2a0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x2b0], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [rbp - 0x28]
cmp rdx, 0x10
jb 0x7ff7e1aa4aca
inc rdx
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff7e1aa4ac5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x7ff7e1aa547d
call fcn.7ff7e1c651d8
mov qword [rbp - 0x30], rdi
mov qword [rbp - 0x28], 0xf
mov byte [rbp - 0x40], 0
mov rdx, qword [rbp + 0x88]
cmp rdx, 0x10
jb 0x7ff7e1aa4b18
inc rdx
mov rcx, qword [rbp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff7e1aa4b13
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x7ff7e1aa5483
call fcn.7ff7e1c651d8
mov qword [rbp + 0x80], rdi
mov qword [rbp + 0x88], 0xf
mov byte [rbp + 0x70], 0
mov rdx, qword [rbp - 0x48]
cmp rdx, 0x10
jb 0x7ff7e1aa4b6a
inc rdx
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff7e1aa4b64
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x7ff7e1aa5489
call fcn.7ff7e1c651d8
nop
mov rdx, qword [rbp + 0xa8]
cmp rdx, 0x10
jb 0x7ff7e1aa4bab
inc rdx
mov rcx, qword [rbp + 0x90]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff7e1aa4ba6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x7ff7e1aa548f
call fcn.7ff7e1c651d8
mov qword [rbp + 0xa0], rdi
mov qword [rbp + 0xa8], 0xf
mov byte [rbp + 0x90], 0
mov rdx, qword [rbp + 0x1c8]
cmp rdx, 0x10
jb 0x7ff7e1aa4c06
inc rdx
mov rcx, qword [rbp + 0x1b0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff7e1aa4c00
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x7ff7e1aa5495
call fcn.7ff7e1c651d8
nop
mov rdx, qword [rbp + 0xc8]
cmp rdx, 0x10
jb 0x7ff7e1aa4c47
inc rdx
mov rcx, qword [rbp + 0xb0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff7e1aa4c42
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x7ff7e1aa549b
call fcn.7ff7e1c651d8
mov qword [rbp + 0xc0], rdi
mov qword [rbp + 0xc8], 0xf
mov byte [rbp + 0xb0], 0
mov rdx, qword [rbp + 0x1e8]
cmp rdx, 0x10
jb 0x7ff7e1aa4ca2
inc rdx
mov rcx, qword [rbp + 0x1d0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff7e1aa4c9c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x7ff7e1aa54a1
call fcn.7ff7e1c651d8
nop
mov rdx, qword [rbp + 0xe8]
cmp rdx, 0x10
jb 0x7ff7e1aa4ce3
inc rdx
mov rcx, qword [rbp + 0xd0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff7e1aa4cde
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x7ff7e1aa54a7
call fcn.7ff7e1c651d8
mov qword [rbp + 0xe0], rdi
mov qword [rbp + 0xe8], 0xf
mov byte [rbp + 0xd0], 0
mov rdx, qword [rbp + 0x18]
cmp rdx, 0x10
jb 0x7ff7e1aa4d38
inc rdx
mov rcx, qword [rbp]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff7e1aa4d32
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x7ff7e1aa54ad
call fcn.7ff7e1c651d8
nop
mov rdx, qword [rbp - 8]
cmp rdx, 0x10
jb 0x7ff7e1aa4d73
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff7e1aa4d6e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x7ff7e1aa54b3
call fcn.7ff7e1c651d8
mov qword [rbp - 0x10], rdi
mov qword [rbp - 8], 0xf
mov byte [rbp - 0x20], 0
mov rdx, qword [rbp + 0x108]
cmp rdx, 0x10
jb 0x7ff7e1aa4dc4
inc rdx
mov rcx, qword [rbp + 0xf0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff7e1aa4dbf
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x7ff7e1aa54b9
call fcn.7ff7e1c651d8
mov qword [rbp + 0x100], rdi
mov qword [rbp + 0x108], 0xf
mov byte [rbp + 0xf0], 0
mov rdx, qword [rbp - 0x68]
cmp rdx, 0x10
jb 0x7ff7e1aa4e18
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff7e1aa4e13
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x7ff7e1aa54bf
call fcn.7ff7e1c651d8
mov qword [rbp - 0x70], rdi
mov qword [rbp - 0x68], 0xf
mov byte [rbp - 0x80], 0
mov rdx, qword [rbp + 0x128]
cmp rdx, 0x10
jb 0x7ff7e1aa4e69
inc rdx
mov rcx, qword [rbp + 0x110]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff7e1aa4e64
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x7ff7e1aa54c5
call fcn.7ff7e1c651d8
mov qword [rbp + 0x120], rdi
mov qword [rbp + 0x128], 0xf
mov byte [rbp + 0x110], 0
mov rdx, qword [rbp + 0x148]
cmp rdx, 0x10
jb 0x7ff7e1aa4ec3
inc rdx
mov rcx, qword [rbp + 0x130]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff7e1aa4ebe
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x7ff7e1aa54cb
call fcn.7ff7e1c651d8
mov qword [rbp + 0x140], rdi
mov qword [rbp + 0x148], 0xf
mov byte [rbp + 0x130], 0
mov rdx, qword [rbp + 0x168]
cmp rdx, 0x10
jb 0x7ff7e1aa4f1d
inc rdx
mov rcx, qword [rbp + 0x150]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff7e1aa4f18
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x7ff7e1aa54d1
call fcn.7ff7e1c651d8
mov qword [rbp + 0x160], rdi
mov qword [rbp + 0x168], 0xf
mov byte [rbp + 0x150], 0
mov rdx, qword [rbp + 0x188]
cmp rdx, 0x10
jb 0x7ff7e1aa4f77
inc rdx
mov rcx, qword [rbp + 0x170]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff7e1aa4f72
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x7ff7e1aa54d7
call fcn.7ff7e1c651d8
mov qword [rbp + 0x180], rdi
mov qword [rbp + 0x188], 0xf
mov byte [rbp + 0x170], 0
mov qword [rbp - 0x60], rdi
mov qword [rbp - 0x50], rdi
mov qword [rbp - 0x48], rdi
lea rdi, [rbp + 0x2a0]
cmp qword [rbp + 0x2b8], 0x10
cmovae rdi, qword [rbp + 0x2a0]
movabs rax, 0x7fffffffffffffff
mov rsi, qword [rbp + 0x2b0]
cmp rsi, 0x10
jae 0x7ff7e1aa4fd8
movups xmm0, xmmword [rdi]
movups xmmword [rbp - 0x60], xmm0
mov ebx, 0xf
jmp 0x7ff7e1aa5051
mov rbx, rsi
or rbx, 0xf
cmp rbx, rax
cmova rbx, rax
mov rcx, rbx
add rcx, 1
mov rax, 0xffffffffffffffff
cmovb rcx, rax
cmp rcx, 0x1000
jb 0x7ff7e1aa5030
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x7ff7e1aa54dd
mov rcx, rax
call fcn.7ff7e1c64f38
mov rcx, rax
test rax, rax
je 0x7ff7e1aa54e3
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x7ff7e1aa503e
test rcx, rcx
je 0x7ff7e1aa503c
call fcn.7ff7e1c64f38
jmp 0x7ff7e1aa503e
xor eax, eax
mov qword [rbp - 0x60], rax
lea r8, [rsi + 1]
mov rdx, rdi
mov rcx, rax
call fcn.7ff7e1c675a0
mov qword [rbp - 0x50], rsi
mov qword [rbp - 0x48], rbx
lea rdx, [rbp - 0x60]
lea rcx, [rbp + 0x280]
call fcn.7ff7e1aa9620
nop
lea rax, [rbp + 0x2c0]
mov qword [rsp + 0x78], rax
lea rdx, [0x7ff7e1dcc598]
lea rcx, [rbp + 0x2c0]
call fcn.7ff7e1ab2f90
mov r14, rax
lea rax, [rbp + 0x190]
mov qword [rsp + 0x40], rax
lea rdx, [r13 + 0x40]
lea rcx, [rbp + 0x190]
call fcn.7ff7e1ab2f90
mov r15, rax
xor r12d, r12d
mov qword [rbp - 0x80], r12
mov qword [rbp - 0x70], r12
mov qword [rbp - 0x68], r12
mov rdi, qword [rbp + 0x290]
lea rsi, [rbp + 0x280]
cmp qword [rbp + 0x298], 0x10
cmovae rsi, qword [rbp + 0x280]
cmp rdi, 0x10
jae 0x7ff7e1aa50ef
movups xmm0, xmmword [rsi]
movups xmmword [rbp - 0x80], xmm0
lea ebx, [r12 + 0xf]
jmp 0x7ff7e1aa5173
mov rbx, rdi
or rbx, 0xf
movabs rax, 0x7fffffffffffffff
cmp rbx, rax
cmova rbx, rax
mov rcx, rbx
add rcx, 1
mov rax, 0xffffffffffffffff
cmovb rcx, rax
cmp rcx, 0x1000
jb 0x7ff7e1aa5151
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x7ff7e1aa54e9
mov rcx, rax
call fcn.7ff7e1c64f38
mov rcx, rax
test rax, rax
je 0x7ff7e1aa54ef
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x7ff7e1aa5160
test rcx, rcx
je 0x7ff7e1aa515d
call fcn.7ff7e1c64f38
jmp 0x7ff7e1aa5160
mov rax, r12
mov qword [rbp - 0x80], rax
lea r8, [rdi + 1]
mov rdx, rsi
mov rcx, rax
call fcn.7ff7e1c675a0
mov qword [rbp - 0x70], rdi
mov qword [rbp - 0x68], rbx
mov r9, r14
mov r8, r15
lea rdx, [rbp - 0x80]
lea rcx, [rbp]
call fcn.7ff7e1aa3850
mov rbx, rax
lea rax, [rbp + 0x280]
cmp rax, rbx
je 0x7ff7e1aa5220
mov rdx, qword [rbp + 0x298]
cmp rdx, 0x10
jb 0x7ff7e1aa51e2
inc rdx
mov rcx, qword [rbp + 0x280]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff7e1aa51dd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x7ff7e1aa54ef
call fcn.7ff7e1c651d8
movdqa xmm0, xmmword [0x7ff7e1d5dfc0]
movdqu xmmword [rbp + 0x290], xmm0
mov byte [rbp + 0x280], 0
movups xmm0, xmmword [rbx]
movups xmmword [rbp + 0x280], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rbp + 0x290], xmm1
mov qword [rbx + 0x10], r12
mov qword [rbx + 0x18], 0xf
mov byte [rbx], 0
nop dword [rax]
mov rdx, qword [rbp + 0x18]
cmp rdx, 0x10
jb 0x7ff7e1aa525b
inc rdx
mov rcx, qword [rbp]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff7e1aa5256
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x7ff7e1aa54ef
call fcn.7ff7e1c651d8
mov qword [rbp + 0x228], r12
lea r8, [rbp + 0x1f0]
lea rdx, [rbp + 0x280]
lea rcx, [rbp + 0x270]
call fcn.7ff7e1ab7f60
nop
lea rdx, [0x7ff7e1d5a6c0]
lea rcx, [rbp + 0x270]
call fcn.7ff7e1ab80b0
cmp byte [rax], 4
jne 0x7ff7e1aa54f5
lea rcx, [rbp + 0x270]
cmp byte [rax + 8], 0
je 0x7ff7e1aa5334
lea rdx, [0x7ff7e1d5a6c8]
call fcn.7ff7e1ab80b0
cmp byte [rax], 3
jne 0x7ff7e1aa5546
mov rdx, qword [rax + 8]
mov r8, qword [rdx + 0x10]
cmp qword [rdx + 0x18], 0x10
jb 0x7ff7e1aa52d1
mov rdx, qword [rdx]
lea rcx, [r13 + 0xe8]
call fcn.7ff7e1a9d210
nop
lea rcx, [rbp + 0x270]
call fcn.7ff7e1ab18a0
nop
lea rcx, [rbp + 0x280]
call fcn.7ff7e1a9d3f0
nop
lea rcx, [rbp + 0x2a0]
call fcn.7ff7e1a9d3f0
mov rcx, qword [rbp + 0x2e0]
xor rcx, rsp
call fcn.7ff7e1c64cb0
lea r11, [rsp + 0x3f0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
lea rdx, [0x7ff7e1d4b298]
call fcn.7ff7e1ab80b0
mov rcx, rax
call fcn.7ff7e1ab83e0
test al, al
jne 0x7ff7e1aa53b1
lea rdx, [0x7ff7e1d5a6fc]
lea rcx, [0x7ff7e1d998d0]
call fcn.7ff7e1ab7cf0
lea rdx, [0x7ff7e1d4b298]
lea rcx, [rbp + 0x270]
call fcn.7ff7e1ab80b0
mov rdx, rax
lea rcx, [rbp + 0x2c0]
call fcn.7ff7e1ab8480
nop
mov rdx, rax
lea rcx, [0x7ff7e1d998d0]
call fcn.7ff7e1ab8520
nop
lea rcx, [rbp + 0x2c0]
call fcn.7ff7e1a9d3f0
mov ecx, 0x1194
call qword [sym.imp.kernel32.dll_Sleep]
xor ecx, ecx
call fcn.7ff7e1c8213c
int3
lea rdx, [0x7ff7e1d5a6e8]
lea rcx, [rbp + 0x270]
call fcn.7ff7e1ab80b0
lea rdx, [rbp + 0x2c0]
mov rcx, rax
call fcn.7ff7e1ab8320
lea rcx, [rbp + 0x2c0]
call fcn.7ff7e1a9d3e0
mov r8, rax
mov dword [rsp + 0x28], 1
mov qword [rsp + 0x20], r12
xor r9d, r9d
lea rdx, [0x7ff7e1d5a6f4]
xor ecx, ecx
call qword [sym.imp.shell32.dll_ShellExecuteA]
xor ecx, ecx
call fcn.7ff7e1c8213c
nop
movdqa xmm0, xmmword [0x7ff7e1d5e0d0]
movdqa xmmword [rbp + 0x20], xmm0
movdqa xmm1, xmmword [0x7ff7e1d5e0a0]
movdqa xmmword [rbp + 0x30], xmm1
movdqa xmm0, xmmword [0x7ff7e1d5e5e0]
movdqa xmmword [rbp + 0x40], xmm0
movdqa xmm1, xmmword [0x7ff7e1d5e5f0]
movdqa xmmword [rbp + 0x50], xmm1
mov dword [rbp + 0x60], 0xcac3ec80
mov dword [rbp + 0x64], 0xd7c58bca
mov word [rbp + 0x68], 0xd8
mov byte [rbp + 0x6a], 1
lea rdx, [rbp + 0x20]
call fcn.7ff7e1aa55a0
mov ecx, 0x1194
call qword [sym.imp.kernel32.dll_Sleep]
xor ecx, ecx
call fcn.7ff7e1c8213c
nop
call fcn.7ff7e1c81cbc
nop
call fcn.7ff7e1c81cbc
nop
call fcn.7ff7e1c81cbc
nop
call fcn.7ff7e1c81cbc
nop
call fcn.7ff7e1c81cbc
nop
call fcn.7ff7e1c81cbc
nop
call fcn.7ff7e1c81cbc
nop
call fcn.7ff7e1c81cbc
nop
call fcn.7ff7e1c81cbc
nop
call fcn.7ff7e1c81cbc
nop
call fcn.7ff7e1c81cbc
nop
call fcn.7ff7e1c81cbc
nop
call fcn.7ff7e1c81cbc
nop
call fcn.7ff7e1c81cbc
nop
call fcn.7ff7e1c81cbc
nop
call fcn.7ff7e1c81cbc
nop
call fcn.7ff7e1c81cbc
nop
call fcn.7ff7e1c81cbc
int3
call fcn.7ff7e1a9d0f0
int3
call fcn.7ff7e1c81cbc
nop
call fcn.7ff7e1a9d0f0
int3
call fcn.7ff7e1c81cbc
nop
mov rcx, rax
call fcn.7ff7e1ab58b0
mov rdx, rax
lea rcx, [rbp + 0x2c0]
call fcn.7ff7e1a9d1b0
nop
mov r8, rax
lea rdx, [0x7ff7e1d5dd50]
lea rcx, [rbp + 0x190]
call fcn.7ff7e1ab7880
nop
mov r8, rax
mov edx, 0x12e
lea rcx, [rbp + 0x20]
call fcn.7ff7e1aa1ef0
lea rdx, [0x7ff7e1d87bf8]
lea rcx, [rbp + 0x20]
call fcn.7ff7e1c674c8
nop
mov rcx, rax
call fcn.7ff7e1ab58b0
mov rdx, rax
lea rcx, [rbp + 0x2c0]
call fcn.7ff7e1a9d1b0
nop
mov r8, rax
lea rdx, [0x7ff7e1d5dd30]
lea rcx, [rbp + 0x190]
call fcn.7ff7e1ab7880
nop
mov r8, rax
mov edx, 0x12e
lea rcx, [rbp + 0x20]
call fcn.7ff7e1aa1ef0
lea rdx, [0x7ff7e1d87bf8]
lea rcx, [rbp + 0x20]
call fcn.7ff7e1c674c8
int3