Function at 0x14000b110
Capabilities:
Contain obfuscated stackstrings
Encode data using xor
Execute command

Disassembly:
mov qword [rsp + 8], rbx
push rbp
lea rbp, [rsp - 0x5b0]
sub rsp, 0x6b0
movdqa xmm0, xmmword [0x140073930]
xor ebx, ebx
movdqu xmmword [rbp - 0x40], xmm0
mov ecx, ebx
mov dword [rbp - 0x30], 0x62786235
mov dword [rbp - 0x2c], 0x342f222f
mov word [rbp - 0x28], Ordinal_35
mov byte [rbp - 0x26], 1
nop
lea eax, [rcx - 5]
xor byte [rbp + rcx - 0x40], al
inc rcx
cmp rcx, 0x19
jb 0x14000b150
lea rcx, [rbp - 0x40]
mov byte [rbp - 0x26], bl
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x140073b10]
mov rcx, rbx
movdqu xmmword [rsp + 0x20], xmm0
mov dword [rsp + 0x30], 0x3c7f697d
mov dword [rsp + 0x34], 0x677f2e2f
mov dword [rsp + 0x38], 0x2827347f
mov dword [rsp + 0x3c], 0x1002931
nop
lea eax, [rcx - 5]
xor byte [rsp + rcx + 0x20], al
inc rcx
cmp rcx, 0x1e
jb 0x14000b1a0
lea rcx, [rsp + 0x20]
mov byte [rsp + 0x3f], bl
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x140073ca0]
mov rcx, rbx
movdqa xmm1, xmmword [0x140073a10]
movdqu xmmword [rbp + 0x308], xmm0
mov word [rbp + 0x328], Ordinal_46
movdqu xmmword [rbp + 0x318], xmm1
mov byte [rbp + 0x32a], 1
lea eax, [rcx - 5]
xor byte [rbp + rcx + 0x308], al
inc rcx
cmp rcx, 0x21
jb 0x14000b1f2
lea rcx, [rbp + 0x308]
mov byte [rbp + 0x32a], bl
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x140073c30]
mov rcx, rbx
movdqa xmm1, xmmword [0x1400739f0]
movdqu xmmword [rbp + 0x330], xmm0
mov word [rbp + 0x350], Ordinal_46
movdqu xmmword [rbp + 0x340], xmm1
mov byte [rbp + 0x352], 1
nop dword [rax + rax]
lea eax, [rcx - 5]
xor byte [rbp + rcx + 0x330], al
inc rcx
cmp rcx, 0x21
jb 0x14000b250
lea rcx, [rbp + 0x330]
mov byte [rbp + 0x352], bl
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x140073c30]
mov rcx, rbx
movdqa xmm1, xmmword [0x140073a00]
movdqu xmmword [rbp + 0x358], xmm0
mov word [rbp + 0x378], Ordinal_46
movdqu xmmword [rbp + 0x368], xmm1
mov byte [rbp + 0x37a], 1
nop dword [rax]
lea eax, [rcx - 5]
xor byte [rbp + rcx + 0x358], al
inc rcx
cmp rcx, 0x21
jb 0x14000b2b0
lea rcx, [rbp + 0x358]
mov byte [rbp + 0x37a], bl
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x140073c30]
mov rcx, rbx
movdqa xmm1, xmmword [0x1400739e0]
movdqu xmmword [rbp + 0x380], xmm0
mov word [rbp + 0x3a0], Ordinal_46
movdqu xmmword [rbp + 0x390], xmm1
mov byte [rbp + 0x3a2], 1
nop dword [rax]
lea eax, [rcx - 5]
xor byte [rbp + rcx + 0x380], al
inc rcx
cmp rcx, 0x21
jb 0x14000b310
lea rcx, [rbp + 0x380]
mov byte [rbp + 0x3a2], bl
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x140073c10]
mov rcx, rbx
movdqu xmmword [rsp + 0x60], xmm0
mov dword [rsp + 0x70], 0x60332c60
mov dword [rsp + 0x74], 0x20317c7a
mov dword [rsp + 0x78], 0x24322d
mov byte [rsp + 0x7c], 1
nop dword [rax]
nop dword [rax + rax]
lea eax, [rcx - 5]
xor byte [rsp + rcx + 0x60], al
inc rcx
cmp rcx, 0x1b
jb 0x14000b370
lea rcx, [rsp + 0x60]
mov byte [rsp + 0x7c], bl
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x140073b30]
mov rcx, rbx
movdqu xmmword [rbp], xmm0
mov dword [rbp + 0x10], 0x28333e2b
mov word [rbp + 0x14], 0x3e
mov byte [rbp + 0x16], 1
lea eax, [rcx - 5]
xor byte [rbp + rcx], al
inc rcx
cmp rcx, 0x15
jb 0x14000b3b0
lea rcx, [rbp]
mov byte [rbp + 0x16], bl
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x140073930]
mov rcx, rbx
movdqu xmmword [rbp - 0x20], xmm0
mov dword [rbp - 0x10], 0x62786235
mov dword [rbp - 0xc], 0x342f222f
mov word [rbp - 8], Ordinal_35
mov byte [rbp - 6], 1
nop word [rax + rax]
lea eax, [rcx - 5]
xor byte [rbp + rcx - 0x20], al
inc rcx
cmp rcx, 0x19
jb 0x14000b400
lea rcx, [rbp - 0x20]
mov byte [rbp - 6], bl
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x140073b10]
mov rcx, rbx
movdqu xmmword [rsp + 0x40], xmm0
mov dword [rsp + 0x50], 0x3c7f697d
mov dword [rsp + 0x54], 0x677f2e2f
mov dword [rsp + 0x58], 0x2827347f
mov dword [rsp + 0x5c], 0x1002931
nop
lea eax, [rcx - 5]
xor byte [rsp + rcx + 0x40], al
inc rcx
cmp rcx, 0x1e
jb 0x14000b450
lea rcx, [rsp + 0x40]
mov byte [rsp + 0x5f], bl
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x140073ca0]
mov rcx, rbx
movdqa xmm1, xmmword [0x140073a10]
movdqu xmmword [rbp + 0x3a8], xmm0
mov word [rbp + 0x3c8], Ordinal_46
movdqu xmmword [rbp + 0x3b8], xmm1
mov byte [rbp + 0x3ca], 1
lea eax, [rcx - 5]
xor byte [rbp + rcx + 0x3a8], al
inc rcx
cmp rcx, 0x21
jb 0x14000b4a2
lea rcx, [rbp + 0x3a8]
mov byte [rbp + 0x3ca], bl
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x140073c30]
mov rcx, rbx
movdqa xmm1, xmmword [0x1400739f0]
movdqu xmmword [rbp + 0x3d0], xmm0
mov word [rbp + 0x3f0], Ordinal_46
movdqu xmmword [rbp + 0x3e0], xmm1
mov byte [rbp + 0x3f2], 1
nop dword [rax + rax]
lea eax, [rcx - 5]
xor byte [rbp + rcx + 0x3d0], al
inc rcx
cmp rcx, 0x21
jb 0x14000b500
lea rcx, [rbp + 0x3d0]
mov byte [rbp + 0x3f2], bl
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x140073c30]
mov rcx, rbx
movdqa xmm1, xmmword [0x140073a00]
movdqu xmmword [rbp + 0x3f8], xmm0
mov word [rbp + 0x418], Ordinal_46
movdqu xmmword [rbp + 0x408], xmm1
mov byte [rbp + 0x41a], 1
nop dword [rax]
lea eax, [rcx - 5]
xor byte [rbp + rcx + 0x3f8], al
inc rcx
cmp rcx, 0x21
jb 0x14000b560
lea rcx, [rbp + 0x3f8]
mov byte [rbp + 0x41a], bl
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x140073c30]
mov rcx, rbx
movdqa xmm1, xmmword [0x1400739e0]
movdqu xmmword [rbp + 0x420], xmm0
mov word [rbp + 0x440], Ordinal_46
movdqu xmmword [rbp + 0x430], xmm1
mov byte [rbp + 0x442], 1
nop dword [rax]
lea eax, [rcx - 5]
xor byte [rbp + rcx + 0x420], al
inc rcx
cmp rcx, 0x21
jb 0x14000b5c0
lea rcx, [rbp + 0x420]
mov byte [rbp + 0x442], bl
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x140073c10]
mov rcx, rbx
movdqu xmmword [rbp - 0x80], xmm0
mov dword [rbp - 0x70], 0x60332c60
mov dword [rbp - 0x6c], 0x20317c7a
mov dword [rbp - 0x68], 0x24322d
mov byte [rbp - 0x64], 1
nop
lea eax, [rcx - 5]
xor byte [rbp + rcx - 0x80], al
inc rcx
cmp rcx, 0x1b
jb 0x14000b610
lea rcx, [rbp - 0x80]
mov byte [rbp - 0x64], bl
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x140073b30]
mov rcx, rbx
movdqu xmmword [rbp + 0x18], xmm0
mov dword [rbp + 0x28], 0x28333e2b
mov word [rbp + 0x2c], 0x3e
mov byte [rbp + 0x2e], 1
nop
lea eax, [rcx - 5]
xor byte [rbp + rcx + 0x18], al
inc rcx
cmp rcx, 0x15
jb 0x14000b650
lea rcx, [rbp + 0x18]
mov byte [rbp + 0x2e], bl
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x140073940]
mov rcx, rbx
movdqa xmm1, xmmword [0x140073c90]
movdqu xmmword [rbp + 0x78], xmm0
mov dword [rbp + 0x98], 0x203d7963
movdqu xmmword [rbp + 0x88], xmm1
mov dword [rbp + 0x9c], 0x24d5571
mov dword [rbp + 0xa0], 0x17031a11
mov word [rbp + 0xa4], 0x100
nop dword [rax]
nop dword [rax + rax]
lea eax, [rcx - 5]
xor byte [rbp + rcx + 0x78], al
inc rcx
cmp rcx, 0x2c
jb 0x14000b6c0
lea rcx, [rbp + 0x78]
mov byte [rbp + 0xa5], bl
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x140073940]
mov rcx, rbx
movdqa xmm1, xmmword [0x140073970]
movdqu xmmword [rbp + 0x48], xmm0
mov dword [rbp + 0x68], 0x3e78647e
movdqu xmmword [rbp + 0x58], xmm1
mov dword [rbp + 0x6c], 0x4e544e21
mov dword [rbp + 0x70], 0x1b1603
mov word [rbp + 0x74], reloc.WLDAP32.dll_Ordinal_22
mov byte [rbp + 0x76], 1
nop dword [rax]
lea eax, [rcx - 5]
xor byte [rbp + rcx + 0x48], al
inc rcx
cmp rcx, 0x2d
jb 0x14000b720
lea rcx, [rbp + 0x48]
mov byte [rbp + 0x76], bl
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x140073ca0]
mov rcx, rbx
movdqa xmm1, xmmword [0x140073a10]
movdqu xmmword [rbp + 0x448], xmm0
mov word [rbp + 0x468], Ordinal_46
movdqu xmmword [rbp + 0x458], xmm1
mov byte [rbp + 0x46a], 1
lea eax, [rcx - 5]
xor byte [rbp + rcx + 0x448], al
inc rcx
cmp rcx, 0x21
jb 0x14000b770
lea rcx, [rbp + 0x448]
mov byte [rbp + 0x46a], bl
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x140073a60]
mov rcx, rbx
movdqa xmm1, xmmword [0x140073b80]
movdqa xmmword [rbp + 0xb0], xmm0
movdqa xmm0, xmmword [str.rzwqE_v]
movdqa xmmword [rbp + 0xd0], xmm0
movdqa xmmword [rbp + 0xc0], xmm1
mov dword [rbp + 0xe0], 0x7a020c6d
mov dword [rbp + 0xe4], 0x475f0e0f
mov dword [rbp + 0xe8], 0x807145f
mov dword [rbp + 0xec], 0x1000911
lea eax, [rcx - 5]
xor byte [rbp + rcx + 0xb0], al
inc rcx
cmp rcx, 0x3e
jb 0x14000b7f1
lea rcx, [rbp + 0xb0]
mov byte [rbp + 0xef], bl
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x140073a60]
mov rcx, rbx
movdqa xmm1, xmmword [0x140073c80]
movdqa xmmword [rbp + 0x510], xmm0
movdqa xmm0, xmmword [str.hyxES_b]
movdqa xmmword [rbp + 0x520], xmm1
movdqa xmm1, xmmword [0x1400737f0]
movdqa xmmword [rbp + 0x530], xmm0
movdqa xmmword [rbp + 0x540], xmm1
mov byte [rbp + 0x550], 1
lea eax, [rcx - 5]
xor byte [rbp + rcx + 0x510], al
inc rcx
cmp rcx, 0x3f
jb 0x14000b861
lea rcx, [rbp + 0x510]
mov byte [rbp + 0x550], bl
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x140073a60]
mov rcx, rbx
movdqa xmm1, xmmword [str.JKH_N_T2ve5fewz]
movdqa xmmword [rbp + 0x470], xmm0
movdqa xmm0, xmmword [0x140073800]
movdqa xmmword [rbp + 0x480], xmm1
movdqa xmm1, xmmword [0x140073890]
movdqa xmmword [rbp + 0x490], xmm0
movdqa xmmword [rbp + 0x4a0], xmm1
mov word [rbp + 0x4b0], 0x100
lea eax, [rcx - 5]
xor byte [rbp + rcx + 0x470], al
inc rcx
cmp rcx, 0x40
jb 0x14000b8d3
lea rcx, [rbp + 0x470]
mov byte [rbp + 0x4b1], bl
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x140073a60]
mov rcx, rbx
movdqa xmm1, xmmword [0x140073bd0]
movdqu xmmword [rbp + 0x1b0], xmm0
mov dword [rbp + 0x1e0], 0x5b43120b
movdqa xmm0, xmmword [0x140073c50]
movdqu xmmword [rbp + 0x1d0], xmm0
mov dword [rbp + 0x1e4], 0xc031043
movdqu xmmword [rbp + 0x1c0], xmm1
mov dword [rbp + 0x1e8], 0x1000515
nop word [rax + rax]
lea eax, [rcx - 5]
xor byte [rbp + rcx + 0x1b0], al
inc rcx
cmp rcx, 0x3a
jb 0x14000b950
lea rcx, [rbp + 0x1b0]
mov byte [rbp + 0x1eb], bl
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x140073a60]
mov rcx, rbx
movdqa xmm1, xmmword [0x140073b50]
movdqu xmmword [rbp + 0x130], xmm0
mov dword [rbp + 0x160], 0x100d7804
movdqa xmm0, xmmword [0x140073880]
movdqu xmmword [rbp + 0x150], xmm0
mov dword [rbp + 0x164], 0x125d4541
movdqu xmmword [rbp + 0x140], xmm1
mov dword [rbp + 0x168], 0x7130a01
mov word [rbp + 0x16c], 0x100
lea eax, [rcx - 5]
xor byte [rbp + rcx + 0x130], al
inc rcx
cmp rcx, 0x3c
jb 0x14000b9d0
lea rcx, [rbp + 0x130]
mov byte [rbp + 0x16d], bl
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x140073a60]
mov rcx, rbx
movdqa xmm1, xmmword [0x140073bb0]
movdqu xmmword [rbp + 0x170], xmm0
mov dword [rbp + 0x1a0], 0x40130c7f
movdqa xmm0, xmmword [str.znv4]
movdqu xmmword [rbp + 0x190], xmm0
mov dword [rbp + 0x1a4], 0x115c5a
movdqu xmmword [rbp + 0x180], xmm1
mov dword [rbp + 0x1a8], 0x4120d
mov byte [rbp + 0x1ac], 1
nop
lea eax, [rcx - 5]
xor byte [rbp + rcx + 0x170], al
inc rcx
cmp rcx, 0x3b
jb 0x14000ba50
lea rcx, [rbp + 0x170]
mov byte [rbp + 0x1ac], bl
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x140073a60]
mov rcx, rbx
movdqa xmm1, xmmword [0x140073bc0]
movdqu xmmword [rbp + 0x1f0], xmm0
mov dword [rbp + 0x220], 0x5b43120b
movdqa xmm0, xmmword [0x140073c60]
movdqu xmmword [rbp + 0x210], xmm0
mov dword [rbp + 0x224], 0xc031043
movdqu xmmword [rbp + 0x200], xmm1
mov dword [rbp + 0x228], 0x1000515
nop word [rax + rax]
lea eax, [rcx - 5]
xor byte [rbp + rcx + 0x1f0], al
inc rcx
cmp rcx, 0x3a
jb 0x14000bad0
lea rcx, [rbp + 0x1f0]
mov byte [rbp + 0x22b], bl
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x140073a60]
mov rcx, rbx
movdqa xmm1, xmmword [0x140073b80]
movdqa xmmword [rbp + 0xf0], xmm0
movdqa xmm0, xmmword [str.rzwqE_v]
movdqa xmmword [rbp + 0x110], xmm0
movdqa xmmword [rbp + 0x100], xmm1
mov dword [rbp + 0x120], 0x7a020c6d
mov dword [rbp + 0x124], 0x475f0e0f
mov dword [rbp + 0x128], 0x807145f
mov dword [rbp + 0x12c], 0x1000911
lea eax, [rcx - 5]
xor byte [rbp + rcx + 0xf0], al
inc rcx
cmp rcx, 0x3e
jb 0x14000bb51
lea rcx, [rbp + 0xf0]
mov byte [rbp + 0x12f], bl
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x140073a60]
mov rcx, rbx
movdqa xmm1, xmmword [0x1400739a0]
movdqu xmmword [rbp + 0x230], xmm0
mov dword [rbp + 0x260], 0x101f0c47
movdqa xmm0, xmmword [0x140073ae0]
movdqu xmmword [rbp + 0x250], xmm0
mov dword [rbp + 0x264], 0x1000109
movdqu xmmword [rbp + 0x240], xmm1
nop
lea eax, [rcx - 5]
xor byte [rbp + rcx + 0x230], al
inc rcx
cmp rcx, 0x36
jb 0x14000bbc0
lea rcx, [rbp + 0x230]
mov byte [rbp + 0x267], bl
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x140073a60]
mov rcx, rbx
movdqa xmm1, xmmword [0x140073c80]
movdqa xmmword [rbp + 0x560], xmm0
movdqa xmm0, xmmword [str.hyxES_b]
movdqa xmmword [rbp + 0x570], xmm1
movdqa xmm1, xmmword [0x1400737f0]
movdqa xmmword [rbp + 0x580], xmm0
movdqa xmmword [rbp + 0x590], xmm1
mov byte [rbp + 0x5a0], 1
lea eax, [rcx - 5]
xor byte [rbp + rcx + 0x560], al
inc rcx
cmp rcx, 0x3f
jb 0x14000bc30
lea rcx, [rbp + 0x560]
mov byte [rbp + 0x5a0], bl
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x140073a60]
mov rcx, rbx
movdqa xmm1, xmmword [str.JKH_N_T2ve5fewz]
movdqa xmmword [rbp + 0x4c0], xmm0
movdqa xmm0, xmmword [0x140073800]
movdqa xmmword [rbp + 0x4d0], xmm1
movdqa xmm1, xmmword [0x140073890]
movdqa xmmword [rbp + 0x4e0], xmm0
movdqa xmmword [rbp + 0x4f0], xmm1
mov word [rbp + 0x500], 0x100
lea eax, [rcx - 5]
xor byte [rbp + rcx + 0x4c0], al
inc rcx
cmp rcx, 0x40
jb 0x14000bca2
lea rcx, [rbp + 0x4c0]
mov byte [rbp + 0x501], bl
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x140073ca0]
mov rcx, rbx
movdqa xmm1, xmmword [0x140073a10]
movdqu xmmword [rbp + 0x268], xmm0
mov word [rbp + 0x288], Ordinal_46
movdqu xmmword [rbp + 0x278], xmm1
mov byte [rbp + 0x28a], 1
nop dword [rax + rax]
lea eax, [rcx - 5]
xor byte [rbp + rcx + 0x268], al
inc rcx
cmp rcx, 0x21
jb 0x14000bd00
lea rcx, [rbp + 0x268]
mov byte [rbp + 0x28a], bl
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x140073c30]
mov rcx, rbx
movdqa xmm1, xmmword [0x1400739f0]
movdqu xmmword [rbp + 0x290], xmm0
mov word [rbp + 0x2b0], Ordinal_46
movdqu xmmword [rbp + 0x2a0], xmm1
mov byte [rbp + 0x2b2], 1
nop dword [rax]
lea eax, [rcx - 5]
xor byte [rbp + rcx + 0x290], al
inc rcx
cmp rcx, 0x21
jb 0x14000bd60
lea rcx, [rbp + 0x290]
mov byte [rbp + 0x2b2], bl
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x140073c30]
mov rcx, rbx
movdqa xmm1, xmmword [0x140073a00]
movdqu xmmword [rbp + 0x2b8], xmm0
mov word [rbp + 0x2d8], Ordinal_46
movdqu xmmword [rbp + 0x2c8], xmm1
mov byte [rbp + 0x2da], 1
nop dword [rax]
lea eax, [rcx - 5]
xor byte [rbp + rcx + 0x2b8], al
inc rcx
cmp rcx, 0x21
jb 0x14000bdc0
lea rcx, [rbp + 0x2b8]
mov byte [rbp + 0x2da], bl
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x140073c30]
mov rcx, rbx
movdqa xmm1, xmmword [0x1400739e0]
movdqu xmmword [rbp + 0x2e0], xmm0
mov word [rbp + 0x300], Ordinal_46
movdqu xmmword [rbp + 0x2f0], xmm1
mov byte [rbp + 0x302], 1
nop dword [rax]
lea eax, [rcx - 5]
xor byte [rbp + rcx + 0x2e0], al
inc rcx
cmp rcx, 0x21
jb 0x14000be20
lea rcx, [rbp + 0x2e0]
mov byte [rbp + 0x302], bl
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x140073c10]
mov rcx, rbx
movdqu xmmword [rbp - 0x60], xmm0
mov dword [rbp - 0x50], 0x60332c60
mov dword [rbp - 0x4c], 0x20317c7a
mov dword [rbp - 0x48], 0x24322d
mov byte [rbp - 0x44], 1
nop
lea eax, [rcx - 5]
xor byte [rbp + rcx - 0x60], al
inc rcx
cmp rcx, 0x1b
jb 0x14000be70
lea rcx, [rbp - 0x60]
mov byte [rbp - 0x44], bl
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x140073b30]
movdqu xmmword [rbp + 0x30], xmm0
mov dword [rbp + 0x40], 0x28333e2b
mov word [rbp + 0x44], 0x3e
mov byte [rbp + 0x46], 1
nop dword [rax + rax]
lea eax, [rbx - 5]
xor byte [rbp + rbx + 0x30], al
inc rbx
cmp rbx, 0x15
jb 0x14000beb0
lea rcx, [rbp + 0x30]
mov byte [rbp + 0x46], 0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov rbx, qword [rsp + 0x6c0]
add rsp, 0x6b0
pop rbp
ret