Function at 0x14001e460
Capabilities:
Execute command
Move file
Set console window title

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
sub rsp, 0x4d0
lea rbp, [rsp + 0x60]
and rbp, 0xffffffffffffffe0
xor r15d, r15d
call fcn.14003a5d0
movabs rax, 0x7c23f7d08d750e67
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xc0], rax
movabs rax, 0xfb7effe869c44dde
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xc8], rax
movabs r14, 0x190d85b5ea126705
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x260], rax
movabs rsi, 0xfb7effe869c428a6
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x268], rax
movdqa xmm0, xmmword [rbp + 0xc0]
xorps xmm0, xmmword [rbp + 0x260]
movdqa xmmword [rbp + 0xc0], xmm0
xorps xmm0, xmm0
movups xmmword [rbp + 0x60], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x70], xmm1
lea rax, [rbp + 0xc0]
mov rdi, 0xffffffffffffffff
mov r8, rdi
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], r15b
jne 0x14001e530
lea rdx, [rbp + 0xc0]
lea rcx, [rbp + 0x60]
call fcn.14000a400
nop
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rbx, rax
lea rdx, [rbp + 0x270]
mov rcx, rax
call qword [sym.imp.USER32.dll_GetWindowRect]
mov dword [rsp + 0x28], 1
mov dword [rsp + 0x20], Ordinal_301
mov r9d, 0x258
mov r8d, dword [rbp + 0x274]
mov edx, dword [rbp + 0x270]
mov rcx, rbx
call qword [sym.imp.USER32.dll_MoveWindow]
lea rcx, [rbp + 0x2d0]
call fcn.140011560
mov r9, rax
movabs rax, 0x190d85b58f6a022b
mov qword [rbp], rax
mov rcx, qword [rbp]
mov qword [rbp + 0xd0], rcx
mov qword [rbp], rsi
mov rcx, qword [rbp]
mov qword [rbp + 0xd8], rcx
mov qword [rbp], r14
mov rcx, qword [rbp]
mov qword [rbp + 0x280], rcx
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x288], rax
movdqa xmm0, xmmword [rbp + 0xd0]
xorps xmm0, xmmword [rbp + 0x280]
movdqa xmmword [rbp + 0xd0], xmm0
lea rax, [rbp + 0xd0]
mov r8, rdi
inc r8
cmp byte [rax + r8], 0
jne 0x14001e605
lea rdx, [rbp + 0xd0]
mov rcx, r9
call fcn.140022ad0
lea rcx, [rbp + 0x60]
cmp rcx, rax
je 0x14001e642
mov r8, qword [rax + 0x10]
cmp qword [rax + 0x18], 0xf
jbe 0x14001e635
mov rax, qword [rax]
mov rdx, rax
lea rcx, [rbp + 0x60]
call fcn.14000c4d0
nop
mov rdx, qword [rbp + 0x2e8]
cmp rdx, 0xf
jbe 0x14001e686
inc rdx
mov rcx, qword [rbp + 0x2d0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001e681
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001e681
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14009d4d4
movdqa xmm0, xmmword [0x1400bd100]
movdqu xmmword [rbp + 0x2e0], xmm0
mov byte [rbp + 0x2d0], 0
lea rbx, [rbp + 0x60]
cmp qword [rbp + 0x78], 0xf
cmova rbx, qword [rbp + 0x60]
mov r8d, 0x104
lea rdx, [rbp + 0x360]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
lea rcx, [rbp + 0x360]
mov rax, rdi
nop word [rax + rax]
inc rax
cmp byte [rcx + rax], 0
jne 0x14001e6d0
cmp rax, 4
jb 0x14001e6ef
mov rdx, rbx
lea rcx, [rbp + 0x360]
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_rename]
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rbx, rax
mov edx, 0xfffffff0
mov rcx, rax
call qword [sym.imp.USER32.dll_GetWindowLongA]
and eax, 0xfffcffff
mov r8d, eax
mov edx, 0xfffffff0
mov rcx, rbx
call qword [sym.imp.USER32.dll_SetWindowLongA]
mov dword [rsp + 0x30], reloc.WLDAP32.dll_Ordinal_35
mov dword [rsp + 0x28], r15d
mov dword [rsp + 0x20], r15d
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, rbx
call qword [sym.imp.USER32.dll_SetWindowPos]
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
xor r8d, r8d
lea edx, [r8 + 1]
call qword [sym.imp.USER32.dll_ShowScrollBar]
movabs rax, 0x7079e6d0847c0866
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x150], rax
movabs rax, 0xfb7effc647ea4fc8
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x158], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x1c0], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x1c8], rax
movdqa xmm0, xmmword [rbp + 0x150]
xorps xmm0, xmmword [rbp + 0x1c0]
movdqa xmmword [rbp + 0x150], xmm0
lea rcx, [rbp + 0x150]
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleA]
lea rcx, [0x1400ce790]
call fcn.140047600
cmp byte [0x1400ce9a0], 0
je 0x14001f194
lea rcx, [0x1400ce790]
call fcn.140043330
test al, al
jne 0x14001f26b
movabs rax, 0x190d85b5ea324a25
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xe0], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0xe8], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x1d0], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x1d8], rax
movdqa xmm0, xmmword [rbp + 0xe0]
xorps xmm0, xmmword [rbp + 0x1d0]
movdqa xmmword [rbp + 0xe0], xmm0
lea rax, [rbp + 0xe0]
mov r8, rdi
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x14001e860
lea rdx, [rbp + 0xe0]
lea rcx, [rbp + 0x60]
call fcn.140022ad0
movabs rax, 0x5f41cae2b3403243
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xf0], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0xf8], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x1e0], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x1e8], rax
movdqa xmm0, xmmword [rbp + 0xf0]
xorps xmm0, xmmword [rbp + 0x1e0]
movdqa xmmword [rbp + 0xf0], xmm0
lea rax, [rbp + 0xf0]
mov r8, rdi
inc r8
cmp byte [rax + r8], 0
jne 0x14001e8e1
lea rdx, [rbp + 0xf0]
lea rcx, [rbp + 0x60]
call fcn.140022ad0
lea rcx, [rbp + 0x60]
cmp qword [rbp + 0x78], 0xf
cmova rcx, qword [rbp + 0x60]
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleA]
call fcn.14001cc30
test al, al
jne 0x14001e91d
call fcn.14001d1a0
movabs rax, 0x190d85b5ea610b66
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x160], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x168], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x1f0], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x1f8], rax
movdqa xmm0, xmmword [rbp + 0x160]
xorps xmm0, xmmword [rbp + 0x1f0]
movdqa xmmword [rbp + 0x160], xmm0
lea rcx, [rbp + 0x160]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movabs rax, 0x190d85b5ea12670f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x170], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x178], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x200], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x208], rax
movdqa xmm0, xmmword [rbp + 0x170]
xorps xmm0, xmmword [rbp + 0x200]
movdqa xmmword [rbp + 0x170], xmm0
lea rcx, [rbp + 0x170]
call fcn.14000ea70
call qword [sym.imp.MSVCP140.dll__Xtime_get_ticks]
mov rcx, rax
movabs rax, 0xd6bf94d5e57a42bd
imul rcx
add rdx, rcx
sar rdx, 0x17
mov rax, rdx
shr rax, 0x3f
add rdx, rax
mov qword [rbp + 0x180], rdx
lea rdx, [rbp + 0x180]
lea rcx, [rbp + 0x330]
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__localtime64_s]
movabs rax, 0x190d85958e7d0842
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x100], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x108], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x210], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x218], rax
movdqa xmm0, xmmword [rbp + 0x100]
xorps xmm0, xmmword [rbp + 0x210]
movdqa xmmword [rbp + 0x100], xmm0
xorps xmm0, xmm0
movups xmmword [rbp + 8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x18], xmm1
lea rax, [rbp + 0x100]
mov r8, rdi
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x14001eab0
lea rdx, [rbp + 0x100]
lea rcx, [rbp + 8]
call fcn.14000a400
nop
mov eax, dword [rbp + 0x338]
cmp eax, 4
jl 0x14001eb6a
cmp eax, 0xc
jge 0x14001eb73
movabs rax, 0x396aebdc84600868
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x110], rax
movabs rax, 0xfb7effe869c42886
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x118], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x220], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x228], rax
movdqa xmm0, xmmword [rbp + 0x110]
xorps xmm0, xmmword [rbp + 0x220]
movdqa xmmword [rbp + 0x110], xmm0
lea rax, [rbp + 0x110]
mov r8, rdi
inc r8
cmp byte [rax + r8], 0
jne 0x14001eb54
lea rdx, [rbp + 0x110]
jmp 0x14001ed21
cmp eax, 0xc
jl 0x14001ec06
cmp eax, 0x11
jge 0x14001ec0f
movabs rax, 0x7662ebc78f660164
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x120], rax
movabs rax, 0xfb7effe869e408c8
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x128], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x230], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x238], rax
movdqa xmm0, xmmword [rbp + 0x120]
xorps xmm0, xmmword [rbp + 0x230]
movdqa xmmword [rbp + 0x120], xmm0
lea rax, [rbp + 0x120]
mov r8, rdi
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x14001ebf0
lea rdx, [rbp + 0x120]
jmp 0x14001ed21
cmp eax, 0x11
jl 0x14001eca3
cmp eax, 0x15
jge 0x14001eca3
movabs rax, 0x396aebdc84771160
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x130], rax
movabs rax, 0xfb7effe869c42886
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x138], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x240], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x248], rax
movdqa xmm0, xmmword [rbp + 0x130]
xorps xmm0, xmmword [rbp + 0x240]
movdqa xmmword [rbp + 0x130], xmm0
lea rax, [rbp + 0x130]
mov r8, rdi
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x14001ec90
lea rdx, [rbp + 0x130]
jmp 0x14001ed21
movabs rax, 0x192da5c182750e6b
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x140], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x148], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x250], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x258], rax
movdqa xmm0, xmmword [rbp + 0x140]
xorps xmm0, xmmword [rbp + 0x250]
movdqa xmmword [rbp + 0x140], xmm0
lea rax, [rbp + 0x140]
mov r8, rdi
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x14001ed10
lea rdx, [rbp + 0x140]
lea rcx, [rbp + 8]
call fcn.140022ad0
movabs rax, 0x397ef6d098424724
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1a0], rax
movabs rax, 0x940adfba2c9066e3
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1a8], rax
movabs rax, 0x5a18d31fb5428ed7
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1b0], rax
movabs rax, 0xc69b16463ae14f0d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1b8], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x300], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x308], rax
movabs rax, 0x2f76ba6bdb2dedf7
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x310], rax
movabs rcx, 0xc69b164630eb6168
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x318], rax
vmovdqu ymm0, ymmword [rbp + 0x1a0]
vpxor ymm1, ymm0, ymmword [rbp + 0x300]
vmovdqa ymmword [rbp + 0x1a0], ymm1
mov r13, qword [0x1400ce8e0]
lea rax, [rbp + 0x1a0]
mov rbx, rdi
vzeroupper
nop word [rax + rax]
inc rbx
cmp byte [rax + rbx], 0
jne 0x14001ee10
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
sub rax, r13
cmp rax, rbx
jb 0x14001f188
lea r15, [0x1400ce8d0]
mov rax, r15
cmp qword [0x1400ce8e8], 0xf
cmova rax, qword [0x1400ce8d0]
mov qword [rbp], rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x80], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x90], xmm1
lea r12, [rbx + r13]
mov esi, reloc.WS2_32.dll_ntohs
lea r14, [rbp + 0x80]
cmp r12, rsi
jbe 0x14001ef03
mov rsi, r12
or rsi, 0xf
cmp rsi, rcx
jbe 0x14001eebe
mov rsi, rcx
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.14009d5fc
test rax, rax
je 0x14001ef97
lea r14, [rax + 0x27]
and r14, 0xffffffffffffffe0
mov qword [r14 - 8], rax
mov rax, qword [rbp]
jmp 0x14001eefc
mov ecx, reloc.WLDAP32.dll_Ordinal_22
cmp rsi, rcx
cmovb rsi, rcx
lea rcx, [rsi + 1]
cmp rcx, 0x1000
jb 0x14001eee6
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14001f18e
jmp 0x14001ee9b
test rcx, rcx
je 0x14001eef9
call fcn.14009d5fc
mov r14, rax
mov rax, qword [rbp]
jmp 0x14001eefc
xor r14d, r14d
mov qword [rbp + 0x80], r14
mov qword [rbp + 0x90], r12
mov qword [rbp + 0x98], rsi
mov r8, r13
mov rdx, rax
mov rcx, r14
call sub.VCRUNTIME140.dll_memcpy
lea rcx, [r14 + r13]
mov r8, rbx
lea rdx, [rbp + 0x1a0]
call sub.VCRUNTIME140.dll_memcpy
mov byte [r14 + r12], 0
lea rdx, [rbp + 0x80]
cmp qword [rbp + 0x98], 0xf
cmova rdx, qword [rbp + 0x80]
mov r8, qword [rbp + 0x90]
lea rcx, [rbp + 8]
call fcn.140022ad0
nop
mov rdx, qword [rbp + 0x98]
cmp rdx, 0xf
jbe 0x14001efa3
inc rdx
mov rcx, qword [rbp + 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001ef9e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001ef9e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14009d4d4
movdqa xmm0, xmmword [0x1400bd100]
movdqu xmmword [rbp + 0x90], xmm0
mov byte [rbp + 0x80], 0
lea rax, [rbp + 0x290]
mov qword [rbp], rax
lea rdx, [rbp + 8]
cmp qword [rbp + 0x20], 0xf
cmova rdx, qword [rbp + 8]
xorps xmm0, xmm0
movups xmmword [rbp + 0x290], xmm0
xor ebx, ebx
mov qword [rbp + 0x2a0], rbx
mov qword [rbp + 0x2a8], rbx
mov r8, rdi
inc r8
cmp byte [rdx + r8], bl
jne 0x14001eff0
lea rcx, [rbp + 0x290]
call fcn.14000a400
nop
cmp qword [0x1400ce8e8], 0xf
cmova r15, qword [0x1400ce8d0]
xorps xmm0, xmm0
movups xmmword [rbp + 0x2b0], xmm0
mov qword [rbp + 0x2c0], rbx
mov qword [rbp + 0x2c8], rbx
nop
inc rdi
cmp byte [r15 + rdi], 0
jne 0x14001f030
mov r8, rdi
mov rdx, r15
lea rcx, [rbp + 0x2b0]
call fcn.14000a400
nop
lea rdx, [rbp + 0x290]
lea rcx, [rbp + 0x2b0]
call fcn.1400249f0
call qword [sym.imp.api_ms_win_crt_conio_l1_1_0.dll__getch]
cmp eax, 0xd
jne 0x14001f060
movabs rax, 0x190d85b5ea324725
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x40], rax
movabs rcx, 0xfb7effe869c428a6
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x48], rax
movabs rax, 0x190d85b5ea126705
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xa0], rax
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0xa8], rax
movdqa xmm0, xmmword [rbp + 0x40]
xorps xmm0, xmmword [rbp + 0xa0]
movdqa xmmword [rbp + 0x40], xmm0
lea rcx, [rbp + 0x40]
call fcn.14000ea70
nop
mov rdx, qword [rbp + 0x20]
cmp rdx, 0xf
jbe 0x14001f118
inc rdx
mov rcx, qword [rbp + 8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001f113
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001f113
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14009d4d4
movdqa xmm0, xmmword [0x1400bd100]
movdqu xmmword [rbp + 0x18], xmm0
mov byte [rbp + 8], 0
mov rdx, qword [rbp + 0x78]
cmp rdx, 0xf
jbe 0x14001f167
inc rdx
mov rcx, qword [rbp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001f162
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001f162
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14009d4d4
lea r11, [rsp + 0x4d0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.140001be0
nop
call fcn.140001b40
nop
lea rcx, [0x1400ce9a8]
call fcn.140002060
mov rdx, rax
movabs rax, 0x766ea5c785601540
mov qword [rbp], rax
mov rcx, qword [rbp]
mov qword [rbp + 0xa0], rcx
movabs rax, 0x9c10969c0aa146c8
mov qword [rbp], rax
mov rcx, qword [rbp]
mov qword [rbp + 0xa8], rcx
movabs rax, 0x2f76ba61a808cdcd
mov qword [rbp], rax
mov rcx, qword [rbp]
mov qword [rbp + 0xb0], rcx
movabs rcx, 0xc69b164630eb6168
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0xb8], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x40], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x48], rax
movabs rax, 0x2f76ba6bdb2dedf7
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x50], rax
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x58], rax
vmovdqu ymm0, ymmword [rbp + 0x40]
vpxor ymm1, ymm0, ymmword [rbp + 0xa0]
vmovdqa ymmword [rbp + 0xa0], ymm1
lea rcx, [rbp + 0xa0]
vzeroupper
call fcn.140024840
call fcn.140011540
int3
lea rcx, [0x1400ce630]
call fcn.140002060
mov rdx, rax
movabs rax, 0x190d85b5ea181420
mov qword [rbp], rax
mov rcx, qword [rbp]
mov qword [rbp + 0x40], rcx
mov qword [rbp], rsi
mov rcx, qword [rbp]
mov qword [rbp + 0x48], rcx
mov qword [rbp], r14
mov rcx, qword [rbp]
mov qword [rbp + 0xa0], rcx
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0xa8], rax
movdqa xmm0, xmmword [rbp + 0x40]
xorps xmm0, xmmword [rbp + 0xa0]
movdqa xmmword [rbp + 0x40], xmm0
lea rcx, [rbp + 0x40]
call fcn.140024840
call fcn.140011540
int3