Function at 0x140014980
Capabilities:
Create thread
Persist via windows service
Set registry value

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x418]
sub rsp, 0x4f0
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
movaps xmmword [rax - 0x68], xmm9
mov rax, qword [0x1406e22c0]
xor rax, rsp
mov qword [rbp + 0x3a0], rax
mov r14, rcx
xor r15d, r15d
xor sil, sil
movabs rdi, 0x4e94914effff
lea r12d, [r15 + 1]
movabs r13, 0x4bcb462767bea804
movss xmm7, dword [0x140530a1c]
movss xmm6, dword [0x140530b9c]
movss xmm8, dword [0x140530a5c]
movss xmm9, dword [0x1405309e0]
nop dword [rax]
movabs rbx, 0x3ce5a1ba99e4b63b
cmp byte [0x140731287], 0
je 0x140014a6d
movss xmm0, dword [0x1407314c8]
comiss xmm0, xmm7
jbe 0x140014a43
mov byte [0x140731287], 0
mov dword [0x1407314c8], 0
jmp 0x140014a6d
lea rcx, [rbp + 0x220]
call fcn.140001560
mov rax, qword [rax]
sub rax, qword [0x1407314c0]
xorps xmm0, xmm0
cvtsi2ss xmm0, rax
divss xmm0, xmm6
movss dword [0x1407314c8], xmm0
cmp byte [0x140731297], 0
je 0x140014ac1
movss xmm0, dword [0x140731290]
comiss xmm0, xmm8
jbe 0x140014a97
mov byte [0x140731297], 0
mov dword [0x140731290], 0
jmp 0x140014ac1
lea rcx, [rbp + 0x228]
call fcn.140001560
mov rax, qword [rax]
sub rax, qword [0x1407314c0]
xorps xmm0, xmm0
cvtsi2ss xmm0, rax
divss xmm0, xmm6
movss dword [0x140731290], xmm0
mov dword [rsp + 0x20], r12d
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x320]
call qword [sym.imp.USER32.dll_PeekMessageW]
test eax, eax
je 0x140014b30
nop
lea rcx, [rbp + 0x320]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rbp + 0x320]
call qword [sym.imp.USER32.dll_DispatchMessageW]
movzx esi, sil
cmp dword [rbp + 0x328], 0x12
cmove esi, r12d
mov dword [rsp + 0x20], r12d
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x320]
call qword [sym.imp.USER32.dll_PeekMessageW]
test eax, eax
jne 0x140014ae0
test sil, sil
jne 0x1400157a0
mov rax, qword [0x1407314f0]
test rax, rax
je 0x140014b45
mov rcx, qword [rax + 0xa0]
jmp 0x140014b48
mov rcx, r15
cmp qword [rcx + 0x18], 0
jne 0x140014b6b
test rax, rax
je 0x140014b6b
mov rcx, qword [rax + 0xa0]
test rcx, rcx
je 0x140014b6b
cmp qword [rcx], 0
je 0x140014b6b
call fcn.1400b2250
call fcn.1400b2c50
call fcn.14008fa20
mov rax, qword [0x140731520]
test rax, rax
je 0x140014d53
cmp byte [rax + 0x10], 0
je 0x140014d53
lea rax, [rbp + 0x110]
mov qword [rsp + 0x58], rax
movabs rax, 0x3c81d3d5fa97df5f
mov qword [rsp + 0x50], rax
mov rax, qword [rsp + 0x50]
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x50], r13
mov rax, qword [rsp + 0x50]
mov qword [rsp + 0x78], rax
mov qword [rsp + 0x50], rbx
mov rax, qword [rsp + 0x50]
mov qword [rbp + 0x390], rax
mov qword [rsp + 0x50], r13
mov rax, qword [rsp + 0x50]
mov qword [rbp + 0x398], rax
movdqa xmm0, xmmword [rsp + 0x70]
xorps xmm0, xmmword [rbp + 0x390]
movdqa xmmword [rsp + 0x70], xmm0
xorps xmm0, xmm0
movups xmmword [rbp + 0x110], xmm0
mov qword [rbp + 0x120], r15
mov qword [rbp + 0x128], r15
lea rax, [rsp + 0x70]
mov r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140014c20
lea rdx, [rsp + 0x70]
lea rcx, [rbp + 0x110]
call fcn.140005c10
nop
movabs rax, 0x4f82cfd3ed90d348
mov qword [rsp + 0x50], rax
mov rax, qword [rsp + 0x50]
mov qword [rsp + 0x60], rax
movabs rax, 0x4bcb464908cdc22a
mov qword [rsp + 0x50], rax
mov rax, qword [rsp + 0x50]
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x50], rbx
mov rax, qword [rsp + 0x50]
mov qword [rbp + 0x380], rax
mov qword [rsp + 0x50], r13
mov rax, qword [rsp + 0x50]
mov qword [rbp + 0x388], rax
movdqa xmm0, xmmword [rsp + 0x60]
xorps xmm0, xmmword [rbp + 0x380]
movdqa xmmword [rsp + 0x60], xmm0
xorps xmm0, xmm0
movups xmmword [rbp + 0xd0], xmm0
mov qword [rbp + 0xe0], r15
mov qword [rbp + 0xe8], r15
lea rax, [rsp + 0x60]
mov r8, 0xffffffffffffffff
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140014cd0
lea rdx, [rsp + 0x60]
lea rcx, [rbp + 0xd0]
call fcn.140005c10
nop
lea r9, [rbp + 0x110]
lea r8, [rbp + 0xd0]
lea rdx, [rbp + 0x240]
call fcn.140078fa0
mov rcx, rax
cmp qword [rax + 0x18], 0xf
jbe 0x140014d13
mov rcx, qword [rax]
mov qword [rsp + 0x20], 4
lea r9, [0x140502108]
xor r8d, r8d
mov rdx, qword [rax + 0x10]
call fcn.14001ae50
mov rbx, rax
lea rcx, [rbp + 0x240]
call fcn.140019170
cmp rbx, 0xffffffffffffffff
jne 0x140014d49
call fcn.1400ce380
mov rcx, r14
call fcn.140013960
jmp 0x140014d6b
mov rcx, r14
cmp dword [reloc.OLEAUT32.dll_SysReAllocString], 1
jne 0x140014d66
call fcn.1400086b0
jmp 0x140014d6b
call fcn.140009930
call fcn.140092580
mov rcx, qword [r14 + 0x10]
mov rax, qword [rcx]
xor r8d, r8d
lea edx, [r8 + 7]
call qword [rax + 0x1c8]
mov rcx, qword [r14 + 0x10]
mov rax, qword [rcx]
xor r8d, r8d
lea edx, [r8 + 0x1b]
call qword [rax + 0x1c8]
mov rcx, qword [r14 + 0x10]
mov rax, qword [rcx]
xor r8d, r8d
mov edx, 0xae
call qword [rax + 0x1c8]
mov rcx, qword [r14 + 0x10]
mov rax, qword [rcx]
mov dword [rsp + 0x30], r15d
movss dword [rsp + 0x28], xmm9
mov dword [rsp + 0x20], 0xff000000
mov r9d, 3
xor r8d, r8d
xor edx, edx
call qword [rax + 0x158]
mov rcx, qword [r14 + 0x10]
mov rax, qword [rcx]
call qword [rax + pe_nt_image_headers64]
test eax, eax
js 0x140014e1d
mov rax, qword [0x1407314f0]
mov rax, qword [rax + 0x4090]
mov rcx, qword [rax]
add rcx, 0x48
mov rax, r15
cmp byte [rcx], al
cmovne rax, rcx
mov rcx, rax
call fcn.1400b1c90
mov rcx, qword [r14 + 0x10]
mov rax, qword [rcx]
call qword [rax + 0x150]
mov rax, qword [0x140731520]
test rax, rax
je 0x1400156b3
cmp byte [rax + 0x10], 0
je 0x1400156b3
cmp dword [0x1407314d8], 0x23c
je 0x1400156b3
lea rcx, [0x140731518]
call fcn.1400d6df0
lea rdx, [rbp + 0x2d0]
call fcn.1400d4590
nop
movabs rax, 0x3ce5a1d6fc90d872
mov qword [rsp + 0x50], rax
mov rax, qword [rsp + 0x50]
mov qword [rbp - 0x80], rax
mov qword [rsp + 0x50], r13
mov rax, qword [rsp + 0x50]
mov qword [rbp - 0x78], rax
movabs rbx, 0x3ce5a1ba99e4b63b
mov qword [rsp + 0x50], rbx
mov rax, qword [rsp + 0x50]
mov qword [rbp + 0x360], rax
mov qword [rsp + 0x50], r13
mov rax, qword [rsp + 0x50]
mov qword [rbp + 0x368], rax
movdqa xmm0, xmmword [rbp - 0x80]
xorps xmm0, xmmword [rbp + 0x360]
movdqa xmmword [rbp - 0x80], xmm0
lea rcx, [rbp - 0x80]
mov rax, 0xffffffffffffffff
nop
inc rax
cmp byte [rcx + rax], 0
jne 0x140014ed0
lea rcx, [rbp + 0x2d0]
cmp qword [rbp + 0x2e8], 0xf
cmova rcx, qword [rbp + 0x2d0]
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x80]
xor r8d, r8d
mov rdx, qword [rbp + 0x2e0]
call fcn.14001ae50
cmp rax, 0xffffffffffffffff
je 0x140014f1e
mov rax, qword [0x140731518]
mov dword [rax + 4], r12d
jmp 0x140014fce
movabs rax, 0x3ce5a1ba99a0fb7a
mov qword [rsp + 0x50], rax
mov rax, qword [rsp + 0x50]
mov qword [rbp - 0x70], rax
mov qword [rsp + 0x50], r13
mov rax, qword [rsp + 0x50]
mov qword [rbp - 0x68], rax
mov qword [rsp + 0x50], rbx
mov rax, qword [rsp + 0x50]
mov qword [rbp + 0x370], rax
mov qword [rsp + 0x50], r13
mov rax, qword [rsp + 0x50]
mov qword [rbp + 0x378], rax
movdqa xmm0, xmmword [rbp - 0x70]
xorps xmm0, xmmword [rbp + 0x370]
movdqa xmmword [rbp - 0x70], xmm0
lea rcx, [rbp - 0x70]
mov rax, 0xffffffffffffffff
inc rax
cmp byte [rcx + rax], 0
jne 0x140014f82
lea rcx, [rbp + 0x2d0]
cmp qword [rbp + 0x2e8], 0xf
cmova rcx, qword [rbp + 0x2d0]
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x70]
xor r8d, r8d
mov rdx, qword [rbp + 0x2e0]
call fcn.14001ae50
cmp rax, 0xffffffffffffffff
je 0x140014fce
mov rax, qword [0x140731518]
mov dword [rax + 4], 2
lea rcx, [rbp + 0x310]
call qword [sym.imp.KERNEL32.dll_GetSystemPowerStatus]
test eax, eax
je 0x140014ff5
cmp byte [rbp + 0x310], 0
je 0x140014ff1
test byte [rbp + 0x311], 8
je 0x140014ff5
mov cl, 1
jmp 0x140014ff7
xor ecx, ecx
mov rax, qword [0x140731518]
mov byte [rax], cl
xorps xmm0, xmm0
movups xmmword [rbp + 0xf0], xmm0
mov qword [rbp + 0x100], r15
mov qword [rbp + 0x108], r15
mov r8d, reloc.WS2_32.dll_ntohl
lea rdx, str.registryTweaks
lea rcx, [rbp + 0xf0]
call fcn.140005c10
lea r8, [0x140731294]
lea rdx, [rbp + 0xf0]
call fcn.1400d7720
xorps xmm0, xmm0
movups xmmword [rbp + 0xb0], xmm0
mov qword [rbp + 0xc0], r15
mov qword [rbp + 0xc8], r15
mov r8d, reloc.WS2_32.dll_listen
lea rdx, str.windowsTweaks
lea rcx, [rbp + 0xb0]
call fcn.140005c10
lea r8, [0x140731260]
lea rdx, [rbp + 0xb0]
call fcn.1400d7720
xorps xmm0, xmm0
movups xmmword [rbp + 0x90], xmm0
mov qword [rbp + 0xa0], r15
mov qword [rbp + 0xa8], r15
mov r8d, reloc.WS2_32.dll_listen
lea rdx, str.latencyTweaks
lea rcx, [rbp + 0x90]
call fcn.140005c10
lea r8, [0x140731277]
lea rdx, [rbp + 0x90]
call fcn.1400d7720
xorps xmm0, xmm0
movups xmmword [rbp + 0x70], xmm0
mov qword [rbp + 0x80], r15
mov qword [rbp + 0x88], r15
mov r8d, reloc.WS2_32.dll_listen
lea rdx, str.optimizedBios
lea rcx, [rbp + 0x70]
call fcn.140005c10
lea r8, [0x140731261]
lea rdx, [rbp + 0x70]
call fcn.1400d7720
xorps xmm0, xmm0
movups xmmword [rbp + 0x50], xmm0
mov qword [rbp + 0x60], r15
mov qword [rbp + 0x68], r15
mov r8d, reloc.WS2_32.dll_ntohs
lea rdx, str.networkThrottle
lea rcx, [rbp + 0x50]
call fcn.140005c10
lea r8, [0x140731285]
lea rdx, [rbp + 0x50]
call fcn.1400d7720
xorps xmm0, xmm0
movups xmmword [rbp + 0x10], xmm0
mov qword [rbp + 0x20], r15
mov qword [rbp + 0x28], r15
mov r8d, reloc.WS2_32.dll_ntohs
lea rdx, str.networkSettings
lea rcx, [rbp + 0x10]
call fcn.140005c10
lea r8, [0x140731276]
lea rdx, [rbp + 0x10]
call fcn.1400d7720
movabs rax, 0x6e8dd2dfeb82d349
mov qword [rsp + 0x50], rax
mov rax, qword [rsp + 0x50]
mov qword [rbp - 0x60], rax
movabs rax, 0x4bcb462767dbdc65
mov qword [rsp + 0x50], rax
mov rax, qword [rsp + 0x50]
mov qword [rbp - 0x58], rax
mov qword [rsp + 0x50], rbx
mov rax, qword [rsp + 0x50]
mov qword [rbp + 0x350], rax
mov qword [rsp + 0x50], r13
mov rax, qword [rsp + 0x50]
mov qword [rbp + 0x358], rax
movdqa xmm0, xmmword [rbp - 0x60]
xorps xmm0, xmmword [rbp + 0x350]
movdqa xmmword [rbp - 0x60], xmm0
xorps xmm0, xmm0
movups xmmword [rbp + 0x130], xmm0
mov qword [rbp + 0x140], r15
mov qword [rbp + 0x148], r15
lea rax, [rbp - 0x60]
mov r8, 0xffffffffffffffff
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140015200
lea rdx, [rbp - 0x60]
lea rcx, [rbp + 0x130]
call fcn.140005c10
lea r8, [0x140731531]
lea rdx, [rbp + 0x130]
call fcn.1400d7720
lea rax, [rbp + 0x150]
mov qword [rsp + 0x58], rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x150], xmm0
mov qword [rbp + 0x160], r15
mov qword [rbp + 0x168], r15
mov r8d, 3
lea rdx, [0x1405049c0]
lea rcx, [rbp + 0x150]
call fcn.140005c10
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x170], xmm0
mov qword [rbp + 0x180], r15
mov qword [rbp + 0x188], r15
mov r8d, reloc.WS2_32.dll_listen
lea rdx, str.settings.json
lea rcx, [rbp + 0x170]
call fcn.140005c10
nop
lea r9, [rbp + 0x150]
lea r8, [rbp + 0x170]
lea rdx, [rbp + 0x260]
call fcn.140078fa0
lea rcx, [rbp + 0x260]
call fcn.140019170
lea rax, [rbp + 0x190]
mov qword [rsp + 0x58], rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x190], xmm0
mov qword [rbp + 0x1a0], r15
mov qword [rbp + 0x1a8], r15
mov r8d, 4
lea rdx, str.path
lea rcx, [rbp + 0x190]
call fcn.140005c10
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x1b0], xmm0
mov qword [rbp + 0x1c0], r15
mov qword [rbp + 0x1c8], r15
mov r8d, reloc.WS2_32.dll_listen
lea rdx, str.settings.json
lea rcx, [rbp + 0x1b0]
call fcn.140005c10
nop
lea r9, [rbp + 0x190]
lea r8, [rbp + 0x1b0]
lea rdx, [rbp + 0x280]
call fcn.140078fa0
mov rdx, rax
lea rcx, [0x14072e788]
call fcn.1400185b0
lea rcx, [rbp + 0x280]
call fcn.140019170
xorps xmm0, xmm0
movups xmmword [rbp + 0x2f0], xmm0
mov qword [rbp + 0x300], r15
mov qword [rbp + 0x308], r15
mov r8d, 4
lea rdx, [0x140502108]
lea rcx, [rbp + 0x2f0]
call fcn.140005c10
nop
mov edi, dword [rbp + 0x300]
inc edi
lea rbx, [rbp + 0x2f0]
cmp qword [rbp + 0x308], 0xf
cmova rbx, qword [rbp + 0x2f0]
xorps xmm0, xmm0
movups xmmword [rbp - 0x30], xmm0
mov qword [rbp - 0x20], r15
mov qword [rbp - 0x18], r15
mov r8d, 8
lea rdx, str.sendData
lea rcx, [rbp - 0x30]
call fcn.140005c10
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x10], xmm0
mov qword [rbp], r15
mov qword [rbp + 8], r15
mov r8d, Ordinal_41
lea rdx, str.SystemCurrentControlSetServices_sp64
lea rcx, [rbp - 0x10]
call fcn.140005c10
lea rdx, [rbp - 0x10]
cmp qword [rbp + 8], 0xf
cmova rdx, qword [rbp - 0x10]
mov qword [rsp + 0x40], r15
lea rax, [rbp + 0x2c0]
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], 2
mov dword [rsp + 0x20], r15d
xor r9d, r9d
xor r8d, r8d
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegCreateKeyExA]
test eax, eax
jne 0x140015483
lea rdx, [rbp - 0x30]
cmp qword [rbp - 0x18], 0xf
cmova rdx, qword [rbp - 0x30]
mov dword [rsp + 0x28], edi
mov qword [rsp + 0x20], rbx
mov r9d, r12d
xor r8d, r8d
mov rcx, qword [rbp + 0x2c0]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rcx, qword [rbp + 0x2c0]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea rcx, [rbp - 0x10]
call fcn.140019170
nop
lea rcx, [rbp - 0x30]
call fcn.140019170
xorps xmm0, xmm0
movups xmmword [rbp + 0x1d0], xmm0
mov qword [rbp + 0x1e0], r15
mov qword [rbp + 0x1e8], r15
mov r8d, 8
lea rdx, str.sendData
lea rcx, [rbp + 0x1d0]
call fcn.140005c10
lea r8, [0x140731295]
lea rdx, [rbp + 0x1d0]
call fcn.1400d7720
lea rax, [rbp + 0x1f0]
mov qword [rsp + 0x58], rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x1f0], xmm0
mov qword [rbp + 0x200], r15
mov qword [rbp + 0x208], r15
mov r8d, 5
lea rdx, str.aggro
lea rcx, [rbp + 0x1f0]
call fcn.140005c10
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x30], xmm0
mov qword [rbp + 0x40], r15
mov qword [rbp + 0x48], r15
mov r8d, reloc.WS2_32.dll_listen
lea rdx, str.settings.json
lea rcx, [rbp + 0x30]
call fcn.140005c10
nop
lea r9, [rbp + 0x1f0]
lea r8, [rbp + 0x30]
lea rdx, [rbp + 0x2a0]
call fcn.140078fa0
mov rcx, rax
cmp qword [rax + 0x18], 0xf
jbe 0x140015562
mov rcx, qword [rax]
mov qword [rsp + 0x20], 4
lea r9, [0x140502108]
xor r8d, r8d
mov rdx, qword [rax + 0x10]
call fcn.14001ae50
cmp rax, 0xffffffffffffffff
setne cl
mov rax, qword [0x140731518]
mov byte [rax + 2], cl
lea rcx, [rbp + 0x2a0]
call fcn.140019170
cmp byte [0x140731272], 0
je 0x1400155cf
mov rcx, qword [0x140731518]
call fcn.1400d9be0
mov rcx, qword [0x140731518]
call fcn.1400d9f60
mov rcx, qword [0x140731518]
call fcn.1400da2d0
mov byte [0x140731272], 0
mov rcx, r12
call fcn.1402978c0
mov qword [rbp + 0x2c8], rax
lea rcx, [rbp - 0x48]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r15d
mov r9, rax
lea r8, [0x14001cc00]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp - 0x50], rax
test rax, rax
je 0x140015790
mov qword [rbp + 0x2c8], r15
cmp dword [rbp - 0x48], 0
je 0x140015786
movaps xmm0, xmmword [rbp - 0x50]
movdqa xmmword [rbp + 0x210], xmm0
lea rcx, [rbp + 0x210]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x140015786
xorps xmm0, xmm0
movaps xmmword [rbp + 0x230], xmm0
movdqa xmmword [rbp - 0x50], xmm0
mov dword [rsp + 0x30], reloc.WLDAP32.dll_Ordinal_22
mov dword [rsp + 0x28], 0x18c
mov dword [rsp + 0x20], 0x23c
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, qword [r14]
call qword [sym.imp.USER32.dll_SetWindowPos]
mov dword [r14 + 0x18], 0x23c
mov dword [r14 + 0x1c], 0x18c
mov rcx, r14
call fcn.140015fc0
nop
lea rcx, [rbp + 0x2f0]
call fcn.140019170
nop
lea rcx, [rbp + 0x2d0]
call fcn.140019170
movabs rdi, 0x4e94914effff
mov rcx, qword [r14 + 0x10]
mov rax, qword [rcx]
mov qword [rsp + 0x20], r15
xor r9d, r9d
xor r8d, r8d
xor edx, edx
call qword [rax + 0x88]
cmp eax, 0x88760868
jne 0x1400156ed
mov rcx, qword [r14 + 0x10]
mov rax, qword [rcx]
call qword [rax + SafeArrayPutElement]
cmp eax, 0x88760869
jne 0x1400156ed
mov rcx, r14
call fcn.140015fc0
lea rcx, [rbp - 0x40]
call fcn.140001560
mov rbx, qword [rbp - 0x40]
movabs rax, 0x7fffffffff1b1e3e
cmp rbx, rax
jg 0x140015712
add rbx, 0xe4e1c0
jmp 0x140015720
movabs rbx, 0x7fffffffffffffff
nop dword [rax]
lea rcx, [rbp - 0x38]
call fcn.140001560
mov rax, qword [rbp - 0x38]
cmp rbx, rax
je 0x140014a10
jl 0x140014a10
mov rcx, rbx
sub rcx, rax
cmp rcx, rdi
jg 0x14001577a
movabs rax, 0x431bde82d7b634db
imul rcx
sar rdx, 0x12
mov rax, rdx
shr rax, 0x3f
add rdx, rax
imul rax, rdx, 0xf4240
cmp rax, rcx
jge 0x140015771
inc rdx
mov ecx, edx
call sub.KERNEL32.dll_Sleep
jmp 0x140015720
mov ecx, 0x5265c00
call sub.KERNEL32.dll_Sleep
jmp 0x140015720
mov ecx, r12d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp - 0x48], r15d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov rcx, qword [rbp + 0x3a0]
xor rcx, rsp
call fcn.140297700
lea r11, [rsp + 0x4f0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret