Function at 0x140005130
Capabilities:
Access peb ldr_data
Encode data using xor
Enumerate processes
Execute command
Hash data using fnv
Resolve function by parsing pe exports
Set console window title
Terminate process
Terminate process by name

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
sub rsp, 0x430
lea rbp, [rsp + 0x50]
and rbp, 0xffffffffffffffe0
mov rax, qword [0x1400868c0]
xor rax, rsp
mov qword [rbp + 0x3d0], rax
xor esi, esi
mov ebx, esi
mov qword [rbp + 0x60], rsi
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
lea r8, [rbp + 0x60]
lea edx, [rsi + 8]
call qword [sym.imp.ADVAPI32.dll_OpenProcessToken]
test eax, eax
je 0x1400051bc
mov dword [rbp + 0x350], 4
lea rax, [rbp + 0x350]
mov qword [rsp + 0x20], rax
lea r9d, [rsi + 4]
lea r8, [rbp + 0x68]
lea edx, [rsi + 0x14]
mov rcx, qword [rbp + 0x60]
call qword [sym.imp.ADVAPI32.dll_GetTokenInformation]
test eax, eax
cmovne ebx, dword [rbp + 0x68]
mov rcx, qword [rbp + 0x60]
test rcx, rcx
je 0x1400051cb
call qword [sym.imp.KERNEL32.dll_CloseHandle]
movabs r14, 0x3de5f7fad9e5a193
movabs r13, 0xbc4214d7de34c7cc
test ebx, ebx
jne 0x1400055db
xorps xmm0, xmm0
movups xmmword [rbp + 0x90], xmm0
mov rbx, rsi
mov qword [rbp + 0xa0], rbx
mov edi, reloc.WS2_32.dll_ntohs
mov r14d, edi
mov qword [rbp + 0xa8], rdi
mov byte [rbp + 0x90], bl
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
lea ecx, [rax + rax*4]
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_srand]
movabs r15, 0x842108421084211
lea r12, str.ABCDEFGHIJKLMNOPQRSTUVWXYabcdefghijklmnopqrstuvwxyzZ1234567890
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
movsxd rcx, eax
mov rax, r15
mul rcx
mov rax, rcx
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 5
imul rax, rax, 0x3e
sub rcx, rax
movzx r9d, byte [rcx + r12]
cmp rbx, r14
jae 0x14000528b
lea rax, [rbx + 1]
mov qword [rbp + 0xa0], rax
lea rax, [rbp + 0x90]
cmp r14, 0xf
cmova rax, qword [rbp + 0x90]
mov byte [rax + rbx], r9b
mov byte [rax + rbx + 1], 0
jmp 0x14000529e
xor r8d, r8d
lea edx, [r8 + 1]
lea rcx, [rbp + 0x90]
call fcn.140003af0
inc esi
cmp esi, 0x10
jae 0x1400052b8
mov r14, qword [rbp + 0xa8]
mov rbx, qword [rbp + 0xa0]
jmp 0x140005232
movabs rax, 0x3de5f7fad9e5a193
mov qword [rbp + 0x360], rax
mov qword [rbp + 0x368], r13
movabs rax, 0x65b0b9b38dc5ddb3
mov qword [rbp + 0x350], rax
mov qword [rbp + 0x358], r13
movaps xmm0, xmmword [rbp + 0x350]
xorps xmm0, xmmword [rbp + 0x360]
movdqa xmmword [rbp + 0x360], xmm0
lea rax, [rbp + 0x360]
mov rbx, 0xffffffffffffffff
nop dword [rax]
inc rbx
cmp byte [rax + rbx], 0
jne 0x140005310
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
mov r15, qword [rbp + 0xa0]
sub rax, r15
cmp rax, rbx
jb 0x140005e56
lea rax, [rbp + 0x90]
mov r14, qword [rbp + 0x90]
mov r13, qword [rbp + 0xa8]
cmp r13, 0xf
cmova rax, r14
mov qword [rbp + 0x350], rax
xorps xmm0, xmm0
movups xmmword [rbp], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x10], xmm1
lea r12, [r15 + rbx]
lea rsi, [rbp]
cmp r12, 0xf
jbe 0x140005408
mov rdi, r12
or rdi, 0xf
cmp rdi, rcx
jbe 0x1400053bd
mov rdi, rcx
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.1400693e0
test rax, rax
je 0x1400053e5
lea rsi, [rax + 0x27]
and rsi, 0xffffffffffffffe0
mov qword [rsi - 8], rax
mov rax, qword [rbp + 0x350]
jmp 0x140005404
mov ecx, reloc.WLDAP32.dll_Ordinal_22
cmp rdi, rcx
cmovb rdi, rcx
lea rcx, [rdi + 1]
cmp rcx, 0x1000
jb 0x1400053ec
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140005e5c
jmp 0x14000539b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x140005402
call fcn.1400693e0
mov rsi, rax
mov rax, qword [rbp + 0x350]
jmp 0x140005404
xor esi, esi
mov qword [rbp], rsi
mov qword [rbp + 0x10], r12
mov qword [rbp + 0x18], rdi
mov r8, r15
mov rdx, rax
mov rcx, rsi
call sub.VCRUNTIME140.dll_memcpy
lea rcx, [r15 + rsi]
mov r8, rbx
lea rdx, [rbp + 0x360]
call sub.VCRUNTIME140.dll_memcpy
mov byte [rsi + r12], 0
cmp r13, 0xf
jbe 0x14000546d
lea rdx, [r13 + 1]
mov rax, r14
cmp rdx, 0x1000
jb 0x140005465
add rdx, 0x27
mov r14, qword [r14 - 8]
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140005519
mov rcx, r14
call fcn.1400691fc
lea r8, [rbp]
cmp qword [rbp + 0x18], 0xf
cmova r8, qword [rbp]
movabs r14, 0x3de5f7fad9e5a193
mov qword [rbp + 0x350], r14
movabs r13, 0xbc4214d7de34c7cc
mov qword [rbp + 0x358], r13
movabs rax, 0x72b7a5bff9d7f0cb
mov qword [rbp + 0x360], rax
movabs rax, 0xbc4214d7de34e99e
mov qword [rbp + 0x368], rax
movaps xmm0, xmmword [rbp + 0x360]
xorps xmm0, xmmword [rbp + 0x350]
movdqa xmmword [rbp + 0x3c0], xmm0
xor r9d, r9d
lea rdx, [rbp + 0x3c0]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
mov rdx, qword [rbp + 0x18]
cmp rdx, 0xf
jbe 0x140005525
inc rdx
mov rcx, qword [rbp]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005520
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140005520
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400691fc
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x1400055b6
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x1400055b6
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [rbx + r9*4]
mov ecx, dword [rcx + r10]
add rcx, r10
mov r8d, 0x811c9dc5
movzx edx, byte [rcx]
inc rcx
test dl, dl
je 0x1400055b1
nop
movsx edx, dl
xor edx, r8d
imul r8d, edx, 0x1000193
movzx edx, byte [rcx]
lea rcx, [rcx + 1]
test dl, dl
jne 0x140005590
cmp r8d, 0xcded1a85
je 0x1400055bb
test r9d, r9d
jne 0x140005570
mov rax, qword [rax]
jmp 0x140005540
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r10
mov ecx, 0xffffffff
call rdx
xor esi, esi
mov qword [rbp + 0x3a0], r14
mov qword [rbp + 0x3a8], r13
movabs rbx, 0x761df59c2dcd5695
mov qword [rbp + 0x3b0], rbx
movabs rdi, 0xf6b57959a057c366
mov qword [rbp + 0x3b8], rdi
movabs rax, 0x1d99d7a28cabe8c7
mov qword [rbp], rax
movabs rax, 0x8e612be8e10bf8f3
mov qword [rbp + 8], rax
movabs rax, 0x761df59c2dfe6fac
mov qword [rbp + 0x10], rax
mov qword [rbp + 0x18], rdi
movups xmm0, xmmword [rbp]
movaps xmmword [rbp + 0x380], xmm0
movups xmm1, xmmword [rbp + 0x10]
movaps xmmword [rbp + 0x390], xmm1
vmovdqu ymm0, ymmword [rbp + 0x380]
vpxor ymm1, ymm0, ymmword [rbp + 0x3a0]
vmovdqa ymmword [rbp + 0x380], ymm1
lea rcx, [rbp + 0x380]
vzeroupper
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleA]
mov qword [rbp + 0x380], r14
mov qword [rbp + 0x388], r13
mov qword [rbp + 0x390], rbx
mov qword [rbp + 0x398], rdi
movabs rax, 0x52a6d7a7e7beab99
mov qword [rbp + 0x40], rax
movabs rax, 0xdb2c7da3bd51a9a2
mov qword [rbp + 0x48], rax
movabs rax, 0x57c97fd59ac32b5
mov qword [rbp + 0x50], rax
movabs rax, 0xf6b57959a079ed03
mov qword [rbp + 0x58], rax
movups xmm0, xmmword [rbp + 0x40]
movaps xmmword [rbp + 0x3a0], xmm0
movups xmm1, xmmword [rbp + 0x50]
movaps xmmword [rbp + 0x3b0], xmm1
vmovdqu ymm0, ymmword [rbp + 0x3a0]
vpxor ymm1, ymm0, ymmword [rbp + 0x380]
vmovdqa ymmword [rbp + 0x3a0], ymm1
lea rdx, [rbp + 0x3a0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
vzeroupper
call fcn.1400032b0
lea rcx, [0x140086ea0]
call fcn.140012cd0
mov qword [rbp + 0x350], r14
mov qword [rbp + 0x358], r13
movabs rax, 0x3de5f7fad996cdf0
mov qword [rbp + 0x360], rax
mov qword [rbp + 0x368], r13
movaps xmm0, xmmword [rbp + 0x360]
xorps xmm0, xmmword [rbp + 0x350]
movdqa xmmword [rbp + 0x360], xmm0
lea rcx, [rbp + 0x360]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xorps xmm0, xmm0
movups xmmword [rbp + 0xf0], xmm0
movdqa xmm1, xmmword [0x14006d470]
movdqu xmmword [rbp + 0x100], xmm1
mov byte [rbp + 0xf0], 0
movups xmmword [rbp + 0xd0], xmm0
movdqu xmmword [rbp + 0xe0], xmm1
mov byte [rbp + 0xd0], 0
movups xmmword [rbp + 0xb0], xmm0
movdqu xmmword [rbp + 0xc0], xmm1
mov byte [rbp + 0xb0], 0
mov qword [rbp + 0x380], r14
mov qword [rbp + 0x388], r13
mov qword [rbp + 0x390], rbx
mov qword [rbp + 0x398], rdi
movabs rax, 0x498bb2da84dbfa99
mov qword [rbp + 0x20], rax
movabs rax, 0xd22777beb214b5a9
mov qword [rbp + 0x28], rax
movabs rax, 0x761df59c0df733e6
mov qword [rbp + 0x30], rax
mov qword [rbp + 0x38], rdi
movups xmm0, xmmword [rbp + 0x20]
movaps xmmword [rbp + 0x3a0], xmm0
movups xmm1, xmmword [rbp + 0x30]
movaps xmmword [rbp + 0x3b0], xmm1
vmovdqu ymm0, ymmword [rbp + 0x3a0]
vpxor ymm1, ymm0, ymmword [rbp + 0x380]
vmovdqa ymmword [rbp + 0x3a0], ymm1
lea rdx, [rbp + 0x3a0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
vzeroupper
call fcn.1400032b0
lea rdx, [rbp + 0xb0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call fcn.140003050
lea rdx, [rbp + 0xb0]
lea rcx, [rbp + 0x380]
call fcn.140003d60
mov rdx, rax
lea rcx, [0x140086ea0]
call fcn.140014510
cmp byte [0x1400870b8], 0
jne 0x1400058cb
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea r8, [0x1400870c0]
lea rdx, str._n___error:
lea rcx, [rbp + 0x380]
call fcn.140003510
nop
mov rdx, rax
mov rcx, rbx
call fcn.140003290
nop
lea rcx, [rbp + 0x380]
call fcn.140004610
mov ecx, 0x1388
call qword [sym.imp.KERNEL32.dll_Sleep]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x70], xmm0
mov qword [rbp + 0x80], rax
movups xmmword [rbp + 0x20], xmm0
mov qword [rbp + 0x30], rsi
mov qword [rbp + 0x38], rsi
lea r8d, [rax + 6]
lea rdx, str.405824
lea rcx, [rbp + 0x20]
call fcn.140003580
lea r8, [rbp + 0x20]
lea rdx, [rbp + 0x70]
lea rcx, [0x140086ea0]
call fcn.140010750
nop
cmp byte [0x1400870b8], 0
jne 0x14000597f
mov qword [rbp + 0x3c0], r14
mov qword [rbp + 0x3c8], r13
movabs rax, 0x5297859ff9b89fc8
mov qword [rbp + 0x90], rax
movabs rax, 0xbc4214e2e802e7be
mov qword [rbp + 0x98], rax
movaps xmm0, xmmword [rbp + 0x90]
xorps xmm0, xmmword [rbp + 0x3c0]
movdqa xmmword [rbp + 0x3c0], xmm0
lea rcx, [rbp + 0x3c0]
call fcn.140002ff0
mov ecx, 0x1388
call qword [sym.imp.KERNEL32.dll_Sleep]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov dword [rbp + 0x110], 0x238
xor edx, edx
lea ecx, [rdx + 2]
call sub.KERNEL32.dll_CreateToolhelp32Snapshot
mov rbx, rax
lea rdx, [rbp + 0x110]
mov rcx, rax
call sub.KERNEL32.dll_Process32FirstW
cmp eax, 1
jne 0x1400059ec
lea rdx, [rbp + 0x110]
mov rcx, rbx
call sub.KERNEL32.dll_Process32NextW
cmp eax, 1
jne 0x1400059ec
nop
lea rdx, str.java.exe
lea rcx, [rbp + 0x13c]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x140005a56
lea rdx, [rbp + 0x110]
mov rcx, rbx
call sub.KERNEL32.dll_Process32NextW
cmp eax, 1
je 0x1400059c0
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, str.____Process_not_found_n
call fcn.140002ff0
lea rcx, str.pause
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
nop
mov rcx, qword [rbp + 0x70]
test rcx, rcx
je 0x140005ddc
mov rdx, qword [rbp + 0x80]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005dc8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140005dc8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov ebx, dword [rbp + 0x118]
test ebx, ebx
je 0x1400059f5
mov edx, ebx
lea rcx, str.____Process_pid:__d_n
call fcn.140002ff0
mov r8d, ebx
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
jne 0x140005b44
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.OpenProcess_failed:_0x_X_n
call fcn.140002ff0
lea rcx, str.PAUSE
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
nop
mov rcx, qword [rbp + 0x70]
test rcx, rcx
je 0x140005af8
mov rdx, qword [rbp + 0x80]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005ae4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140005a4f
call fcn.1400691fc
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x70], xmm0
mov qword [rbp + 0x80], rsi
mov rdx, qword [rbp + 0xc8]
cmp rdx, 0xf
jbe 0x140005b3a
inc rdx
mov rcx, qword [rbp + 0xb0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005b34
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140005e14
call fcn.1400691fc
nop
mov eax, 0xfffffffe
jmp 0x140005e26
mov dword [rbp + 0x350], esi
lea rdx, [rbp + 0x350]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_IsWow64Process]
test eax, eax
jne 0x140005b74
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.Cant_confirm_target_process_architecture:_0x_X_n
call fcn.140002ff0
jmp 0x140005b99
mov dword [rbp + 0x68], esi
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
lea rdx, [rbp + 0x68]
call qword [sym.imp.KERNEL32.dll_IsWow64Process]
mov eax, dword [rbp + 0x68]
cmp dword [rbp + 0x350], eax
je 0x140005c54
lea rcx, str.Invalid_Process_Architecture._n
call fcn.140002ff0
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, str.PAUSE
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
nop
mov rcx, qword [rbp + 0x70]
test rcx, rcx
je 0x140005c08
mov rdx, qword [rbp + 0x80]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005bf4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140005a4f
call fcn.1400691fc
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x70], xmm0
mov qword [rbp + 0x80], rsi
mov rdx, qword [rbp + 0xc8]
cmp rdx, 0xf
jbe 0x140005c4a
inc rdx
mov rcx, qword [rbp + 0xb0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005c44
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140005e14
call fcn.1400691fc
nop
mov eax, 0xfffffffd
jmp 0x140005e26
lea rcx, str.____Mapping..._n
call fcn.140002ff0
mov rdx, qword [rbp + 0x70]
mov rcx, rbx
call fcn.1400026f0
mov rcx, rbx
test al, al
jne 0x140005d2f
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, str.____Error_while_mapping._n
call fcn.140002ff0
lea rcx, str.PAUSE
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
nop
mov rcx, qword [rbp + 0x70]
test rcx, rcx
je 0x140005ce3
mov rdx, qword [rbp + 0x80]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005ccf
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140005a4f
call fcn.1400691fc
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x70], xmm0
mov qword [rbp + 0x80], rsi
mov rdx, qword [rbp + 0xc8]
cmp rdx, 0xf
jbe 0x140005d25
inc rdx
mov rcx, qword [rbp + 0xb0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005d1f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140005e14
call fcn.1400691fc
nop
mov eax, 0xfffffffc
jmp 0x140005e26
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [0x14006d454]
call fcn.140002ff0
mov edx, Ordinal_301
mov ecx, 0x1f4
call qword [sym.imp.KERNEL32.dll_Beep]
nop
mov rcx, qword [rbp + 0x70]
test rcx, rcx
je 0x140005d9e
mov rdx, qword [rbp + 0x80]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005d8a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140005a4f
call fcn.1400691fc
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x70], xmm0
mov qword [rbp + 0x80], rsi
lea rcx, [rbp + 0xb0]
call fcn.140004610
nop
lea rcx, [rbp + 0xd0]
call fcn.140004610
nop
lea rcx, [rbp + 0xf0]
call fcn.140004610
xor eax, eax
jmp 0x140005e26
call fcn.1400691fc
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x70], xmm0
mov qword [rbp + 0x80], rsi
mov rdx, qword [rbp + 0xc8]
cmp rdx, 0xf
jbe 0x140005e21
inc rdx
mov rcx, qword [rbp + 0xb0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005e1b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140005e1b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400691fc
nop
mov eax, 0xffffffff
mov rcx, qword [rbp + 0x3d0]
xor rcx, rsp
call fcn.1400692f0
lea r11, [rsp + 0x430]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.1400050d0
nop
call fcn.140004f60
int3