Function at 0x1400017f0
Capabilities:
Enumerate processes
Set console window title

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
sub rsp, 0x480
lea rbp, [rsp + 0x50]
and rbp, 0xffffffffffffffe0
mov rax, qword [section..data]
xor rax, rsp
mov qword [rbp + 0x420], rax
mov rdi, rdx
mov ebx, ecx
xor esi, esi
movabs rax, 0x4275cfaab70d5c94
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x90], rax
movabs rax, 0x254b3da66bf83b60
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x98], rax
movabs r15, 0xb558ef3f2590fd5
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x340], rax
movabs r14, 0x253952d2089d510e
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x348], rax
movdqa xmm0, xmmword [rbp + 0x90]
xorps xmm0, xmmword [rbp + 0x340]
movdqa xmmword [rbp + 0x90], xmm0
lea rcx, [rbp + 0x90]
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleA]
cmp ebx, 2
jne 0x1400025b5
mov rdx, qword [rdi + 8]
test rdx, rdx
je 0x1400025b5
xorps xmm0, xmm0
movups xmmword [rbp + 0x160], xmm0
mov qword [rbp + 0x170], rsi
mov qword [rbp + 0x178], rsi
mov r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp byte [rdx + r8], sil
jne 0x1400018f0
lea rcx, [rbp + 0x160]
call fcn.140002840
nop
movabs rax, 0xb558ef39e356bfb
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x50], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x58], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x350], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x358], rax
movdqa xmm0, xmmword [rbp + 0x50]
xorps xmm0, xmmword [rbp + 0x350]
movdqa xmmword [rbp + 0x50], xmm0
mov rax, qword [rbp + 0x170]
lea rcx, [rax - 4]
xorps xmm0, xmm0
movups xmmword [rbp + 0x20], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x30], xmm1
cmp rax, rcx
jb 0x1400027b9
sub rax, rcx
mov r8, 0xffffffffffffffff
cmp rax, r8
cmovb r8, rax
lea rdx, [rbp + 0x160]
cmp qword [rbp + 0x178], 0xf
cmova rdx, qword [rbp + 0x160]
add rdx, rcx
lea rcx, [rbp + 0x20]
call fcn.140002840
lea rcx, [rbp + 0x50]
mov rax, 0xffffffffffffffff
nop dword [rax]
inc rax
cmp byte [rcx + rax], 0
jne 0x1400019c0
lea rcx, [rbp + 0x20]
mov rbx, qword [rbp + 0x20]
mov rdi, qword [rbp + 0x38]
cmp rdi, 0xf
cmova rcx, rbx
mov r8, qword [rbp + 0x30]
cmp r8, rax
jne 0x1400019f8
lea rdx, [rbp + 0x50]
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x1400019f8
xor sil, sil
jmp 0x1400019fb
mov sil, 1
cmp rdi, 0xf
jbe 0x140001a35
lea rdx, [rdi + 1]
mov rax, rbx
cmp rdx, 0x1000
jb 0x140001a2d
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140001a2d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rbx
call fcn.140002eb4
movdqa xmm0, xmmword [0x140004480]
movdqu xmmword [rbp + 0x30], xmm0
mov byte [rbp + 0x20], 0
test sil, sil
je 0x140001b1b
movabs rax, 0x2b30ecd3862a7a98
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x20], rax
movabs rax, 0x43193ebe6cb3716f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x28], rax
movabs rax, 0x87ae20131056bbbe
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x30], rax
movabs r12, 0x8db925f04ae092a8
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x38], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x2c0], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x2c8], rax
movabs r13, 0x87ae20193133d7d7
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x2d0], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x2d8], rax
vmovdqu ymm0, ymmword [rbp + 0x20]
vpxor ymm1, ymm0, ymmword [rbp + 0x2c0]
vmovdqa ymmword [rbp + 0x20], ymm1
lea rcx, [rbp + 0x20]
vzeroupper
call fcn.140001010
mov ecx, 0x1388
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x140002561
movabs rax, 0x6321ae878729619c
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xe0], rax
movabs rax, 0x565c31bd7aed716b
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xe8], rax
movabs rax, 0xeec65739575cf7a4
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xf0], rax
movabs rax, 0xfa99509f33c0facb
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xf8], rax
movabs rax, 0x48194d1353f0b598
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x100], rax
movabs rax, 0x84786042a3ffefcc
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x108], rax
movabs rax, 0x4d198233932a15fe
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x110], rax
movabs rax, 0xf7abb6baa24a705c
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x118], rax
movabs rax, 0x2a32400ee250c04d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x120], rax
movabs rax, 0xc58d7eca943de13c
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x128], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x380], rax
movabs rsi, 0x253952d2089d510e
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x388], rax
movabs r13, 0x87ae20193133d7d7
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x390], rax
movabs r12, 0x8db925f04ae092a8
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x398], rax
movabs rax, 0x213922677384dbf9
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x3a0], rax
movabs rax, 0xac584e36c09a85a2
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x3a8], rax
movabs rax, 0x286ded5db3106d9b
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x3b0], rax
movabs rax, 0x92dfd9d48d2e112c
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x3b8], rax
movabs rax, 0x357386bcc34a13d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x3c0], rax
movabs rax, 0xc58d7eca943de136
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x3c8], rax
vmovdqu ymm0, ymmword [rbp + 0xe0]
vpxor ymm1, ymm0, ymmword [rbp + 0x380]
vmovdqa ymmword [rbp + 0xe0], ymm1
vmovdqu ymm0, ymmword [rbp + 0x3a0]
vpxor ymm0, ymm0, ymmword [rbp + 0x100]
vmovdqa ymmword [rbp + 0x100], ymm0
vmovdqa xmm1, xmmword [rbp + 0x120]
vxorps xmm1, xmm1, xmmword [rbp + 0x3c0]
vmovdqa xmmword [rbp + 0x120], xmm1
lea rcx, [rbp + 0xe0]
vzeroupper
call fcn.140001010
movabs rdi, 0xb558ef397216afb
xorps xmm0, xmm0
movups xmmword [rbp + 0x140], xmm0
mov qword [rbp + 0x150], 0
mov qword [rbp + 0x158], 0xf
mov byte [rbp + 0x140], 0
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
mov rax, qword [rbx]
movsxd rcx, dword [rax + 4]
add rcx, rbx
mov dl, 0xa
call qword [sym.imp.MSVCP140.dll_public:_char___cdecl_std::basic_ios_char__struct_std::char_traits_char__::widen_char_const___ptr64]
movzx r8d, al
lea rdx, [rbp + 0x140]
mov rcx, rbx
call fcn.140002c40
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x60], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x68], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x360], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x368], rax
movdqa xmm0, xmmword [rbp + 0x60]
xorps xmm0, xmmword [rbp + 0x360]
movdqa xmmword [rbp + 0x60], xmm0
lea rax, [rbp + 0x60]
mov rdi, 0xffffffffffffffff
nop dword [rax + rax]
inc rdi
cmp byte [rax + rdi], 0
jne 0x140001e10
lea rsi, [rbp + 0x140]
cmp qword [rbp + 0x158], 0xf
cmova rsi, qword [rbp + 0x140]
mov rax, qword [rbp + 0x150]
cmp rdi, rax
ja 0x140001eae
sub rax, rdi
test rdi, rdi
je 0x140001f87
lea r14, [rax + rsi]
movq rax, xmm0
movsx r15d, al
lea r8, [r14 + 1]
sub r8, rsi
mov edx, r15d
mov rcx, rsi
call sub.VCRUNTIME140.dll_memchr
mov rbx, rax
test rax, rax
je 0x140001ea4
nop
mov r8, rdi
lea rdx, [rbp + 0x60]
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x140001f70
inc rbx
lea r8, [r14 + 1]
sub r8, rbx
mov edx, r15d
mov rcx, rbx
call sub.VCRUNTIME140.dll_memchr
mov rbx, rax
test rax, rax
jne 0x140001e70
movabs r15, 0xb558ef3f2590fd5
movabs rax, 0xb558ef397216afb
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x40], rax
movabs rsi, 0x253952d2089d510e
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x48], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x370], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x378], rax
movdqa xmm0, xmmword [rbp + 0x40]
xorps xmm0, xmmword [rbp + 0x370]
movdqa xmmword [rbp + 0x40], xmm0
lea rax, [rbp + 0x40]
mov rdi, 0xffffffffffffffff
inc rdi
cmp byte [rax + rdi], 0
jne 0x140001f14
mov rcx, qword [rbp + 0x150]
mov rdx, qword [rbp + 0x158]
mov rax, rdx
sub rax, rcx
cmp rdi, rax
ja 0x14000207a
lea rax, [rdi + rcx]
mov qword [rbp + 0x150], rax
lea rbx, [rbp + 0x140]
cmp rdx, 0xf
cmova rbx, qword [rbp + 0x140]
add rbx, rcx
mov r8, rdi
lea rdx, [rbp + 0x40]
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + rdi], 0
jmp 0x140001f91
sub rbx, rsi
movabs r15, 0xb558ef3f2590fd5
cmp rbx, 0xffffffffffffffff
je 0x140001eae
movabs rsi, 0x253952d2089d510e
xor edx, edx
mov r8d, 0x130
lea rcx, [rbp + 0x180]
call sub.VCRUNTIME140.dll_memset
lea rdi, [rbp + 0x140]
cmp qword [rbp + 0x158], 0xf
cmova rdi, qword [rbp + 0x140]
xor edx, edx
lea ecx, [rdx + 2]
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rbx, rax
cmp rax, 0xffffffffffffffff
je 0x140002026
mov dword [rbp + 0x180], 0x130
lea rdx, [rbp + 0x180]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_Process32First]
test eax, eax
je 0x14000201c
nop
mov rdx, rdi
lea rcx, [rbp + 0x1ac]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__stricmp]
mov rcx, rbx
test eax, eax
je 0x140002097
lea rdx, [rbp + 0x180]
call qword [sym.imp.KERNEL32.dll_Process32Next]
test eax, eax
jne 0x140001ff0
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
mov rdx, qword [rbp + 0x158]
movabs rdi, 0xb558ef397216afb
cmp rdx, 0xf
jbe 0x140001d66
inc rdx
mov rcx, qword [rbp + 0x140]
cmp rdx, 0x1000
mov rax, rcx
jb 0x140002070
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400025ae
call fcn.140002eb4
jmp 0x140001d66
mov qword [rsp + 0x20], rdi
lea r9, [rbp + 0x40]
mov rdx, rdi
lea rcx, [rbp + 0x140]
call fcn.140002ab0
jmp 0x140001f91
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov edi, dword [rbp + 0x188]
lea rdx, [rbp + 0x140]
test edi, edi
jne 0x14000218e
cmp qword [rbp + 0x158], 0xf
cmova rdx, qword [rbp + 0x140]
movabs rax, 0x7f3ae0d3d52a2af2
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xa0], rax
movabs rax, 0x51536bc7df2372e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xa8], rax
movabs rax, 0xeecf4778114aa5a3
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xb0], rax
movabs rax, 0x8db925f04aeab3c6
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xb8], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x3e0], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x3e8], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x3f0], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x3f8], rax
vmovdqu ymm0, ymmword [rbp + 0xa0]
vpxor ymm1, ymm0, ymmword [rbp + 0x3e0]
vmovdqa ymmword [rbp + 0xa0], ymm1
lea rcx, [rbp + 0xa0]
vzeroupper
call fcn.140001010
jmp 0x140002026
cmp qword [rbp + 0x158], 0xf
cmova rdx, qword [rbp + 0x140]
movabs rax, 0x653cfa909733619c
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xc0], rax
movabs rax, 0x193da666f47169
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xc8], rax
movabs rax, 0x87ae20131f1df9a4
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xd0], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0xd8], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x400], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x408], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x410], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x418], rax
vmovdqu ymm0, ymmword [rbp + 0xc0]
vpxor ymm1, ymm0, ymmword [rbp + 0x400]
vmovdqa ymmword [rbp + 0xc0], ymm1
lea rcx, [rbp + 0xc0]
vzeroupper
call fcn.140001010
mov r8d, edi
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov r15, rax
test rax, rax
je 0x140002507
xorps xmm0, xmm0
movups xmmword [rbp + 0x70], xmm0
xor edx, edx
mov qword [rbp + 0x80], rdx
mov qword [rbp + 0x88], rdx
lea r14, [rbp + 0x160]
cmp qword [rbp + 0x178], 0xf
cmova r14, qword [rbp + 0x160]
movabs rbx, 0x7fffffffffffffff
mov rsi, qword [rbp + 0x170]
cmp rsi, rbx
ja 0x1400027ad
cmp rsi, 0xf
ja 0x1400022e4
mov qword [rbp + 0x80], rsi
mov qword [rbp + 0x88], 0xf
movups xmm0, xmmword [r14]
movups xmmword [rbp + 0x70], xmm0
jmp 0x14000237e
mov rax, rsi
or rax, 0xf
cmp rax, rbx
jbe 0x14000231c
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.140002e70
mov rcx, rax
test rax, rax
je 0x140002347
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x14000235d
mov rbx, rax
mov ecx, 0x16
cmp rax, rcx
cmovb rbx, rcx
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x14000234e
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x1400027b3
jmp 0x1400022fe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x14000235a
call fcn.140002e70
jmp 0x14000235d
mov rax, rdx
mov qword [rbp + 0x70], rax
mov qword [rbp + 0x80], rsi
mov qword [rbp + 0x88], rbx
lea r8, [rsi + 1]
mov rdx, r14
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
lea r8, [rbp + 0x70]
mov edx, edi
mov rcx, r15
call fcn.140001520
mov rcx, r15
test al, al
jne 0x14000246e
call qword [sym.imp.KERNEL32.dll_CloseHandle]
movabs rax, 0x7f75ea969e306e93
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x2c0], rax
movabs rax, 0x515a37b866f47161
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x2c8], rax
movabs rax, 0x87ae20193133ddf6
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x2d0], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x2d8], rax
movabs rax, 0xb558ef3f2590fd5
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x300], rax
movabs r14, 0x253952d2089d510e
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x308], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x310], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x318], rax
vmovdqu ymm0, ymmword [rbp + 0x2c0]
vpxor ymm1, ymm0, ymmword [rbp + 0x300]
vmovdqa ymmword [rbp + 0x2c0], ymm1
lea rcx, [rbp + 0x2c0]
vzeroupper
jmp 0x1400024f6
call qword [sym.imp.KERNEL32.dll_CloseHandle]
movabs rax, 0x6f30fa909733619c
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x300], rax
movabs rax, 0x253952d2089d5b2f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x308], rax
movabs rax, 0xb558ef3f2590fd5
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x2c0], rax
movabs r14, 0x253952d2089d510e
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x2c8], rax
movdqa xmm0, xmmword [rbp + 0x300]
xorps xmm0, xmmword [rbp + 0x2c0]
movdqa xmmword [rbp + 0x300], xmm0
lea rcx, [rbp + 0x300]
call fcn.140001010
mov ecx, 0x1388
call qword [sym.imp.KERNEL32.dll_Sleep]
nop
mov rdx, qword [rbp + 0x158]
cmp rdx, 0xf
jbe 0x140002544
inc rdx
mov rcx, qword [rbp + 0x140]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000253f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400025ae
call fcn.140002eb4
mov qword [rbp + 0x150], 0
mov qword [rbp + 0x158], 0xf
mov byte [rbp + 0x140], 0
mov rdx, qword [rbp + 0x178]
cmp rdx, 0xf
jbe 0x14000277b
inc rdx
mov rcx, qword [rbp + 0x160]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400025a4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400025a4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140002eb4
jmp 0x14000277b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
movabs rax, 0x6f3befd395387d91
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x2c0], rax
movabs rax, 0x4d4d72a267ef352e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x2c8], rax
movabs rax, 0xeec800755d57f7b2
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x2d0], rax
movabs rax, 0xadd6519e25c0f7c4
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x2d8], rax
movabs rax, 0x15c5a0253e1b38d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x2e0], rax
movabs rax, 0x8c3e2116a5f6ecc4
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x2e8], rax
movabs rax, 0x4d078334937505ef
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x2f0], rax
movabs rax, 0x92dfd3f5ff41654f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x2f8], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x300], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x308], rax
movabs r13, 0x87ae20193133d7d7
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x310], rax
movabs r12, 0x8db925f04ae092a8
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x318], rax
movabs rax, 0x213922677384dbf9
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x320], rax
movabs rax, 0xac584e36c09a85a2
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x328], rax
movabs rax, 0x286ded5db3106d9b
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x330], rax
movabs rax, 0x92dfd9d48d2e112c
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x338], rax
vmovdqu ymm0, ymmword [rbp + 0x300]
vpxor ymm1, ymm0, ymmword [rbp + 0x2c0]
vmovdqa ymmword [rbp + 0x2c0], ymm1
vmovdqu ymm0, ymmword [rbp + 0x2e0]
vpxor ymm1, ymm0, ymmword [rbp + 0x320]
vmovdqa ymmword [rbp + 0x2e0], ymm1
lea rcx, [rbp + 0x2c0]
vzeroupper
call fcn.140001010
mov ecx, 0x1388
call qword [sym.imp.KERNEL32.dll_Sleep]
xor eax, eax
mov rcx, qword [rbp + 0x420]
xor rcx, rsp
call fcn.140002e50
lea r11, [rsp + 0x480]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.140001210
nop
call fcn.140001170
nop
call fcn.140002820
int3