Function at 0x7ff7aa5bd0e0
Capabilities:
Encrypt data using rc4 ksa

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1380]
mov eax, 0x1480
call fcn.7ff7aa6d8190
sub rsp, rax
mov rax, qword [0x7ff7aa74f840]
xor rax, rsp
mov qword [rbp + 0x1370], rax
mov r15, rcx
mov byte [rsp + 0x40], 0
xor ecx, ecx
mov dword [rsp + 0x44], 1
xor eax, eax
mov dword [rsp + 0x48], ecx
xor r14b, r14b
mov dword [rsp + 0x4c], ecx
mov rdi, qword [r15]
mov r12d, ecx
mov r13d, ecx
mov dword [rsp + 0x54], ecx
mov dword [rsp + 0x50], ecx
mov qword [r15 + 0x10], rcx
mov qword [r15 + 8], rcx
mov qword [r15 + 0x18], rcx
mov byte [rsp + 0x41], r14b
mov r14d, ecx
mov rcx, rdi
mov word [rbp + 0xf60], ax
mov byte [rbp + 0xf62], al
call fcn.7ff7aa5bb940
test eax, eax
je 0x7ff7aa5bde89
nop
mov rcx, rdi
call fcn.7ff7aa5b4600
mov rcx, rdi
mov esi, eax
call fcn.7ff7aa5b4600
shl esi, 0x10
mov rcx, rdi
add esi, eax
call fcn.7ff7aa5b4600
mov rcx, rdi
mov ebx, eax
call fcn.7ff7aa5b4600
shl ebx, 0x10
lea ecx, [rax + rbx]
mov eax, esi
mov ebx, ecx
shl rbx, 0x20
or rbx, rax
mov qword [rsp + 0x58], rbx
cmp ecx, 0x49484452
ja 0x7ff7aa5bd53e
je 0x7ff7aa5bd2c9
cmp ecx, 0x43674249
je 0x7ff7aa5bd2ba
cmp ecx, 0x49444154
je 0x7ff7aa5bd221
cmp ecx, 0x49454e44
jne 0x7ff7aa5bd552
cmp dword [rsp + 0x44], 0
jne 0x7ff7aa5bde6d
mov rbx, qword [r15 + 8]
test rbx, rbx
jne 0x7ff7aa5bd859
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
lea rax, [0x7ff7aa721770]
jmp 0x7ff7aa5bde80
cmp dword [rsp + 0x44], 0
jne 0x7ff7aa5bde6d
cmp byte [rsp + 0x40], 0
je 0x7ff7aa5bd23c
test r12d, r12d
je 0x7ff7aa5bdcbd
cmp ebx, 0x40000000
ja 0x7ff7aa5bdced
mov esi, dword [rsp + 0x48]
lea eax, [rbx + rsi]
cmp eax, esi
jl 0x7ff7aa5bde89
cmp eax, r14d
jbe 0x7ff7aa5bd295
test r14d, r14d
jne 0x7ff7aa5bd26e
mov r14d, 0x1000
cmp ebx, r14d
cmova r14d, ebx
cmp eax, r14d
jbe 0x7ff7aa5bd27b
add r14d, r14d
cmp eax, r14d
ja 0x7ff7aa5bd273
mov rcx, qword [r15 + 8]
mov edx, r14d
call qword [sym.imp.ucrtbase.dll_realloc]
test rax, rax
je 0x7ff7aa5bdc62
mov qword [r15 + 8], rax
mov rdx, rsi
mov r8d, ebx
add rdx, qword [r15 + 8]
mov rcx, rdi
call fcn.7ff7aa5b4530
test eax, eax
je 0x7ff7aa5bdcd5
add esi, ebx
mov dword [rsp + 0x48], esi
jmp 0x7ff7aa5bd844
mov dword [rsp + 0x50], 1
test esi, esi
jmp 0x7ff7aa5bd56d
cmp dword [rsp + 0x44], 0
je 0x7ff7aa5bddad
mov dword [rsp + 0x44], 0
cmp esi, 0xd
jne 0x7ff7aa5bdd95
mov rcx, rdi
call fcn.7ff7aa5b4600
mov rcx, rdi
mov ebx, eax
call fcn.7ff7aa5b4600
shl ebx, 0x10
mov rcx, rdi
add eax, ebx
mov dword [rdi], eax
call fcn.7ff7aa5b4600
mov rcx, rdi
mov ebx, eax
call fcn.7ff7aa5b4600
shl ebx, 0x10
add eax, ebx
mov dword [rdi + 4], eax
cmp eax, 0x1000000
ja 0x7ff7aa5bd512
cmp dword [rdi], 0x1000000
ja 0x7ff7aa5bd512
mov rax, qword [rdi + 0xc0]
cmp rax, qword [rdi + 0xc8]
jae 0x7ff7aa5bd34e
movzx ecx, byte [rax]
inc rax
mov qword [rdi + 0xc0], rax
jmp 0x7ff7aa5bd374
cmp dword [rdi + 0x30], 0
je 0x7ff7aa5bd372
mov rcx, rdi
call fcn.7ff7aa5b44b0
mov rax, qword [rdi + 0xc0]
movzx ecx, byte [rax]
inc rax
mov qword [rdi + 0xc0], rax
jmp 0x7ff7aa5bd374
xor cl, cl
movzx eax, cl
mov dword [r15 + 0x20], eax
cmp eax, 0x10
ja 0x7ff7aa5bdd7d
mov ecx, 0x10116
bt ecx, eax
jae 0x7ff7aa5bdd7d
mov rax, qword [rdi + 0xc0]
cmp rax, qword [rdi + 0xc8]
jae 0x7ff7aa5bd3b1
movzx ecx, byte [rax]
inc rax
mov qword [rdi + 0xc0], rax
jmp 0x7ff7aa5bd3d7
cmp dword [rdi + 0x30], 0
je 0x7ff7aa5bd3d5
mov rcx, rdi
call fcn.7ff7aa5b44b0
mov rax, qword [rdi + 0xc0]
movzx ecx, byte [rax]
inc rax
mov qword [rdi + 0xc0], rax
jmp 0x7ff7aa5bd3d7
xor cl, cl
movzx ebx, cl
mov dword [rsp + 0x54], ebx
cmp ebx, 6
ja 0x7ff7aa5bdd05
cmp ebx, 3
jne 0x7ff7aa5bd400
cmp dword [r15 + 0x20], 0x10
je 0x7ff7aa5bdd05
movzx esi, bl
mov byte [rsp + 0x40], bl
jmp 0x7ff7aa5bd40e
test bl, 1
jne 0x7ff7aa5bdd05
movzx esi, byte [rsp + 0x40]
cmp rax, qword [rdi + 0xc8]
jb 0x7ff7aa5bd42c
cmp dword [rdi + 0x30], 0
je 0x7ff7aa5bd441
mov rcx, rdi
call fcn.7ff7aa5b44b0
mov rax, qword [rdi + 0xc0]
movzx ecx, byte [rax]
inc rax
mov qword [rdi + 0xc0], rax
test cl, cl
jne 0x7ff7aa5bdd1d
cmp rax, qword [rdi + 0xc8]
jb 0x7ff7aa5bd45f
cmp dword [rdi + 0x30], 0
je 0x7ff7aa5bd474
mov rcx, rdi
call fcn.7ff7aa5b44b0
mov rax, qword [rdi + 0xc0]
movzx ecx, byte [rax]
inc rax
mov qword [rdi + 0xc0], rax
test cl, cl
jne 0x7ff7aa5bdd35
cmp rax, qword [rdi + 0xc8]
jae 0x7ff7aa5bd48c
movzx ecx, byte [rax]
inc rax
mov qword [rdi + 0xc0], rax
jmp 0x7ff7aa5bd4b2
cmp dword [rdi + 0x30], 0
je 0x7ff7aa5bd4b0
mov rcx, rdi
call fcn.7ff7aa5b44b0
mov rax, qword [rdi + 0xc0]
movzx ecx, byte [rax]
inc rax
mov qword [rdi + 0xc0], rax
jmp 0x7ff7aa5bd4b2
xor cl, cl
movzx r13d, cl
mov dword [rsp + 0x4c], r13d
cmp r13d, 1
ja 0x7ff7aa5bdd65
mov ecx, dword [rdi]
test ecx, ecx
je 0x7ff7aa5bdd4d
mov r9d, dword [rdi + 4]
test r9d, r9d
je 0x7ff7aa5bdd4d
xor edx, edx
mov eax, 0x40000000
div ecx
test sil, sil
jne 0x7ff7aa5bd52a
xor edx, edx
mov r8d, ebx
shr r8d, 2
mov ecx, ebx
and ecx, 2
and r8d, 1
or ecx, 1
add r8d, ecx
div r8d
mov dword [rdi + 8], r8d
cmp eax, r9d
jae 0x7ff7aa5bd844
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
lea rax, [0x7ff7aa7214f0]
jmp 0x7ff7aa5bde80
shr eax, 2
mov dword [rdi + 8], 1
cmp eax, r9d
jb 0x7ff7aa5bd512
jmp 0x7ff7aa5bd844
cmp ecx, 0x504c5445
je 0x7ff7aa5bd702
cmp ecx, 0x74524e53
je 0x7ff7aa5bd5cc
cmp dword [rsp + 0x44], 0
jne 0x7ff7aa5bde6d
mov ecx, dword [rsp + 0x5c]
bt ecx, 0x1d
jae 0x7ff7aa5bddc5
test ebx, ebx
je 0x7ff7aa5bd844
jns 0x7ff7aa5bd588
mov rax, qword [rdi + 0xc8]
mov qword [rdi + 0xc0], rax
jmp 0x7ff7aa5bd844
cmp qword [rdi + 0x10], 0
je 0x7ff7aa5bd5bd
mov ecx, dword [rdi + 0xc8]
sub ecx, dword [rdi + 0xc0]
cmp ecx, ebx
jge 0x7ff7aa5bd5bd
mov rax, qword [rdi + 0xc8]
sub ebx, ecx
mov rcx, qword [rdi + 0x28]
mov edx, ebx
mov qword [rdi + 0xc0], rax
call qword [rdi + 0x18]
jmp 0x7ff7aa5bd844
movsxd rax, ebx
add qword [rdi + 0xc0], rax
jmp 0x7ff7aa5bd844
cmp dword [rsp + 0x44], 0
jne 0x7ff7aa5bde6d
cmp qword [r15 + 8], 0
jne 0x7ff7aa5bde43
cmp byte [rsp + 0x40], 0
je 0x7ff7aa5bd66e
test r12d, r12d
je 0x7ff7aa5bde19
cmp ebx, r12d
ja 0x7ff7aa5bde04
xor esi, esi
mov byte [rsp + 0x40], 4
test ebx, ebx
je 0x7ff7aa5bd844
nop
mov rax, qword [rdi + 0xc0]
cmp rax, qword [rdi + 0xc8]
jae 0x7ff7aa5bd62f
movzx edx, byte [rax]
inc rax
mov qword [rdi + 0xc0], rax
jmp 0x7ff7aa5bd655
cmp dword [rdi + 0x30], 0
je 0x7ff7aa5bd653
mov rcx, rdi
call fcn.7ff7aa5b44b0
mov rax, qword [rdi + 0xc0]
movzx edx, byte [rax]
inc rax
mov qword [rdi + 0xc0], rax
jmp 0x7ff7aa5bd655
xor dl, dl
lea eax, [rsi*4 + 3]
inc esi
mov byte [rbp + rax + 0xf70], dl
cmp esi, ebx
jb 0x7ff7aa5bd610
jmp 0x7ff7aa5bd844
mov ecx, dword [rdi + 8]
test cl, 1
je 0x7ff7aa5bde2e
lea eax, [rcx + rcx]
cmp ebx, eax
jne 0x7ff7aa5bde04
xor esi, esi
mov byte [rsp + 0x41], 1
cmp dword [r15 + 0x20], 0x10
jne 0x7ff7aa5bd6bd
test ecx, ecx
jle 0x7ff7aa5bd844
lea rbx, [rbp + 0xf64]
mov rcx, rdi
call fcn.7ff7aa5b4600
inc esi
mov word [rbx], ax
lea rbx, [rbx + 2]
cmp esi, dword [rdi + 8]
jl 0x7ff7aa5bd6a2
jmp 0x7ff7aa5bd844
test ecx, ecx
jle 0x7ff7aa5bd844
lea rbx, [rbp + 0xf60]
lea r13, [0x7ff7aa7191f8]
mov rcx, rdi
call fcn.7ff7aa5b4600
movsxd rcx, dword [r15 + 0x20]
lea rbx, [rbx + 1]
movzx eax, al
inc esi
movzx edx, byte [rcx + r13]
imul eax, edx
mov byte [rbx - 1], al
cmp esi, dword [rdi + 8]
jl 0x7ff7aa5bd6d3
mov r13d, dword [rsp + 0x4c]
jmp 0x7ff7aa5bd844
cmp dword [rsp + 0x44], 0
jne 0x7ff7aa5bde6d
cmp esi, 0x300
ja 0x7ff7aa5bde58
mov eax, 0xaaaaaaab
mul esi
mov r12d, edx
shr r12d, 1
lea eax, [r12 + r12*2]
cmp eax, esi
jne 0x7ff7aa5bde58
xor esi, esi
test r12d, r12d
je 0x7ff7aa5bd844
nop dword [rax]
mov rdx, qword [rdi + 0xc0]
cmp rdx, qword [rdi + 0xc8]
jae 0x7ff7aa5bd75f
movzx ecx, byte [rdx]
inc rdx
mov qword [rdi + 0xc0], rdx
jmp 0x7ff7aa5bd786
cmp dword [rdi + 0x30], 0
je 0x7ff7aa5bd784
mov rcx, rdi
call fcn.7ff7aa5b44b0
mov rax, qword [rdi + 0xc0]
movzx ecx, byte [rax]
lea rdx, [rax + 1]
mov qword [rdi + 0xc0], rdx
jmp 0x7ff7aa5bd786
xor cl, cl
lea ebx, [rsi*4]
mov byte [rbp + rbx + 0xf70], cl
cmp rdx, qword [rdi + 0xc8]
jae 0x7ff7aa5bd7ad
movzx r8d, byte [rdx]
inc rdx
mov qword [rdi + 0xc0], rdx
jmp 0x7ff7aa5bd7d6
cmp dword [rdi + 0x30], 0
je 0x7ff7aa5bd7d3
mov rcx, rdi
call fcn.7ff7aa5b44b0
mov rax, qword [rdi + 0xc0]
movzx r8d, byte [rax]
lea rdx, [rax + 1]
mov qword [rdi + 0xc0], rdx
jmp 0x7ff7aa5bd7d6
xor r8b, r8b
lea eax, [rbx + 1]
mov byte [rbp + rax + 0xf70], r8b
cmp rdx, qword [rdi + 0xc8]
jae 0x7ff7aa5bd7fb
movzx r8d, byte [rdx]
lea rax, [rdx + 1]
mov qword [rdi + 0xc0], rax
jmp 0x7ff7aa5bd823
cmp dword [rdi + 0x30], 0
je 0x7ff7aa5bd820
mov rcx, rdi
call fcn.7ff7aa5b44b0
mov rax, qword [rdi + 0xc0]
movzx r8d, byte [rax]
inc rax
mov qword [rdi + 0xc0], rax
jmp 0x7ff7aa5bd823
xor r8b, r8b
lea eax, [rbx + 2]
inc esi
mov byte [rbp + rax + 0xf70], r8b
lea eax, [rbx + 3]
mov byte [rbp + rax + 0xf70], 0xff
cmp esi, r12d
jb 0x7ff7aa5bd740
mov rcx, rdi
call fcn.7ff7aa5b4600
mov rcx, rdi
call fcn.7ff7aa5b4600
jmp 0x7ff7aa5bd180
mov eax, dword [r15 + 0x20]
imul eax, dword [rdi]
add eax, 7
shr eax, 3
imul eax, dword [rdi + 8]
inc eax
imul eax, dword [rdi + 4]
movsxd rsi, eax
mov rcx, rsi
call qword [sym.imp.ucrtbase.dll_malloc]
mov rcx, rax
test rax, rax
jne 0x7ff7aa5bd88d
mov qword [r15 + 0x10], rax
jmp 0x7ff7aa5bde89
movsxd rax, dword [rsp + 0x48]
mov r12d, dword [rsp + 0x50]
add rax, rbx
mov qword [rsp + 0x68], rax
lea rax, [rsi + rcx]
xor esi, esi
mov qword [rbp - 0x80], rcx
mov edx, esi
mov qword [rsp + 0x78], rcx
test r12d, r12d
mov qword [rsp + 0x60], rbx
lea rcx, [rsp + 0x60]
mov qword [rbp - 0x78], rax
sete dl
mov dword [rbp - 0x70], 1
call fcn.7ff7aa5bb770
test eax, eax
je 0x7ff7aa5bdcaa
mov rax, qword [rbp - 0x80]
mov ebx, dword [rsp + 0x78]
sub ebx, dword [rbp - 0x80]
mov qword [r15 + 0x10], rax
test rax, rax
je 0x7ff7aa5bde89
mov rcx, qword [r15 + 8]
call qword [sym.imp.ucrtbase.dll_free]
mov qword [r15 + 8], rsi
mov eax, dword [rdi + 8]
movzx esi, byte [rsp + 0x40]
lea r9d, [rax + 1]
cmp r9d, 4
jne 0x7ff7aa5bd919
test sil, sil
je 0x7ff7aa5bd9b4
movzx r14d, byte [rsp + 0x41]
test r14b, r14b
jne 0x7ff7aa5bd927
mov r9d, eax
mov eax, dword [rsp + 0x54]
mov r8d, ebx
mov dword [rdi + 0xc], r9d
mov rcx, r15
mov rdx, qword [r15 + 0x10]
mov dword [rsp + 0x30], r13d
mov dword [rsp + 0x28], eax
mov eax, dword [r15 + 0x20]
mov dword [rsp + 0x20], eax
call fcn.7ff7aa5bcc70
test eax, eax
je 0x7ff7aa5bde89
test r14b, r14b
je 0x7ff7aa5bda70
mov rcx, qword [r15]
mov eax, dword [rcx + 4]
imul eax, dword [rcx]
cmp dword [r15 + 0x20], 0x10
mov rcx, qword [r15 + 0x18]
jne 0x7ff7aa5bd9fd
test eax, eax
je 0x7ff7aa5bda70
cmp dword [rdi + 0xc], 2
jne 0x7ff7aa5bd9bf
movzx r8d, word [rbp + 0xf64]
xor r13d, r13d
mov edx, eax
cmp word [rcx], r8w
lea rcx, [rcx + 4]
mov eax, 0xffff
cmove ax, r13w
mov word [rcx - 2], ax
sub rdx, 1
jne 0x7ff7aa5bd993
jmp 0x7ff7aa5bda73
movzx r14d, byte [rsp + 0x41]
jmp 0x7ff7aa5bd927
movzx edx, word [rbp + 0xf68]
movzx r8d, word [rbp + 0xf66]
movzx r9d, word [rbp + 0xf64]
xor r13d, r13d
cmp word [rcx], r9w
jne 0x7ff7aa5bd9f1
cmp word [rcx + 2], r8w
jne 0x7ff7aa5bd9f1
cmp word [rcx + 4], dx
jne 0x7ff7aa5bd9f1
mov word [rcx + 6], r13w
add rcx, 8
sub rax, 1
jne 0x7ff7aa5bd9d6
jmp 0x7ff7aa5bda73
test eax, eax
je 0x7ff7aa5bda70
cmp dword [rdi + 0xc], 2
jne 0x7ff7aa5bda3b
movzx r8d, byte [rbp + 0xf60]
xor r13d, r13d
mov edx, eax
nop dword [rax]
nop dword [rax + rax]
cmp byte [rcx], r8b
lea rcx, [rcx + 2]
mov eax, 0xff
cmove eax, r13d
mov byte [rcx - 1], al
sub rdx, 1
jne 0x7ff7aa5bda20
jmp 0x7ff7aa5bda73
movzx edx, byte [rbp + 0xf62]
movzx r8d, byte [rbp + 0xf61]
movzx r9d, byte [rbp + 0xf60]
cmp byte [rcx], r9b
jne 0x7ff7aa5bda66
cmp byte [rcx + 1], r8b
jne 0x7ff7aa5bda66
cmp byte [rcx + 2], dl
jne 0x7ff7aa5bda66
mov byte [rcx + 3], 0
add rcx, 4
sub rax, 1
jne 0x7ff7aa5bda52
xor r13d, r13d
test r12d, r12d
je 0x7ff7aa5bdbba
mov rax, qword gs:[0x58]
mov rdx, qword [rax]
mov eax, 0x1c
cmp dword [rax + rdx], 0
je 0x7ff7aa5bda9d
mov eax, 0x20
mov eax, dword [rax + rdx]
jmp 0x7ff7aa5bdaa3
mov eax, dword [0x7ff7aa7eaa10]
test eax, eax
je 0x7ff7aa5bdbba
cmp dword [rdi + 0xc], 2
jle 0x7ff7aa5bdbba
mov rax, qword [r15]
mov r10, qword [r15 + 0x18]
mov ecx, dword [rax + 4]
imul ecx, dword [rax]
cmp dword [rax + 0xc], 3
jne 0x7ff7aa5bdaff
test ecx, ecx
je 0x7ff7aa5bdbba
mov edx, ecx
nop dword [rax]
nop word [rax + rax]
movzx ecx, byte [r10]
movzx eax, byte [r10 + 2]
mov byte [r10], al
mov byte [r10 + 2], cl
lea r10, [r10 + 3]
sub rdx, 1
jne 0x7ff7aa5bdae0
jmp 0x7ff7aa5bdbba
mov eax, 0x24
cmp dword [rax + rdx], 0
je 0x7ff7aa5bdb14
mov eax, 0x18
mov eax, dword [rax + rdx]
jmp 0x7ff7aa5bdb1a
mov eax, dword [0x7ff7aa7eaa08]
test ecx, ecx
je 0x7ff7aa5bdbba
test eax, eax
je 0x7ff7aa5bdb9a
mov ebx, ecx
nop dword [rax + rax]
movzx eax, byte [r10 + 3]
movzx r11d, byte [r10]
movzx ecx, byte [r10 + 2]
test al, al
je 0x7ff7aa5bdb84
mov r8d, eax
mov r9d, eax
movzx eax, byte [r10 + 1]
xor edx, edx
imul eax, eax, 0xff
shr r8d, 1
add eax, r8d
div r9d
xor edx, edx
mov byte [r10 + 1], al
imul eax, r11d, 0xff
add eax, r8d
div r9d
xor edx, edx
mov r11d, eax
imul eax, ecx, 0xff
add eax, r8d
div r9d
jmp 0x7ff7aa5bdb87
movzx eax, cl
mov byte [r10], al
mov byte [r10 + 2], r11b
add r10, 4
sub rbx, 1
jne 0x7ff7aa5bdb30
jmp 0x7ff7aa5bdbba
mov edx, ecx
nop dword [rax]
movzx ecx, byte [r10]
movzx eax, byte [r10 + 2]
mov byte [r10], al
mov byte [r10 + 2], cl
lea r10, [r10 + 4]
sub rdx, 1
jne 0x7ff7aa5bdba0
test sil, sil
je 0x7ff7aa5bdc7a
movzx eax, sil
mov dword [rdi + 8], eax
mov dword [rdi + 0xc], 4
mov rax, qword [r15]
mov rbx, qword [r15 + 0x18]
mov esi, dword [rax + 4]
imul esi, dword [rax]
test esi, esi
js 0x7ff7aa5bdc62
cmp esi, 0x1fffffff
jg 0x7ff7aa5bdc62
lea eax, [rsi*4]
movsxd rcx, eax
call qword [sym.imp.ucrtbase.dll_malloc]
mov r14, rax
test rax, rax
je 0x7ff7aa5bdc62
test esi, esi
je 0x7ff7aa5bdc52
lea r8, [rax + 2]
mov r9d, esi
movzx edx, byte [rbx]
lea r8, [r8 + 4]
lea rbx, [rbx + 1]
movzx eax, byte [rbp + rdx*4 + 0xf70]
movzx ecx, byte [rbp + rdx*4 + 0xf73]
mov byte [r8 - 6], al
movzx eax, byte [rbp + rdx*4 + 0xf71]
mov byte [r8 - 5], al
movzx eax, byte [rbp + rdx*4 + 0xf72]
mov byte [r8 - 4], al
mov byte [r8 - 3], cl
sub r9, 1
jne 0x7ff7aa5bdc11
mov rcx, qword [r15 + 0x18]
call qword [sym.imp.ucrtbase.dll_free]
mov qword [r15 + 0x18], r14
jmp 0x7ff7aa5bdc82
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
lea rax, [0x7ff7aa721340]
jmp 0x7ff7aa5bde80
test r14b, r14b
je 0x7ff7aa5bdc82
inc dword [rdi + 8]
mov rcx, qword [r15 + 0x10]
call qword [sym.imp.ucrtbase.dll_free]
mov rcx, rdi
mov qword [r15 + 0x10], r13
call fcn.7ff7aa5b4600
mov rcx, rdi
call fcn.7ff7aa5b4600
mov eax, 1
jmp 0x7ff7aa5bde8b
mov rcx, qword [rbp - 0x80]
call qword [sym.imp.ucrtbase.dll_free]
mov qword [r15 + 0x10], rsi
jmp 0x7ff7aa5bde89
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
lea rax, [0x7ff7aa721720]
jmp 0x7ff7aa5bde80
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
lea rax, [0x7ff7aa721738]
jmp 0x7ff7aa5bde80
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
lea rax, [0x7ff7aa721748]
jmp 0x7ff7aa5bde80
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
lea rax, [0x7ff7aa721678]
jmp 0x7ff7aa5bde80
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
lea rax, [0x7ff7aa721668]
jmp 0x7ff7aa5bde80
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
lea rax, [0x7ff7aa7216a0]
jmp 0x7ff7aa5bde80
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
lea rax, [0x7ff7aa7216c8]
jmp 0x7ff7aa5bde80
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
lea rax, [0x7ff7aa721688]
jmp 0x7ff7aa5bde80
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
lea rax, [0x7ff7aa721640]
jmp 0x7ff7aa5bde80
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
lea rax, [0x7ff7aa721658]
jmp 0x7ff7aa5bde80
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
lea rax, [0x7ff7aa721620]
jmp 0x7ff7aa5bde80
mov eax, ecx
mov byte [0x7ff7aa7e8a3b], cl
shr eax, 0x18
mov byte [0x7ff7aa7e8a38], al
mov eax, ecx
shr eax, 0x10
mov byte [0x7ff7aa7e8a39], al
mov eax, ecx
shr eax, 8
mov byte [0x7ff7aa7e8a3a], al
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
lea rax, [0x7ff7aa7e8a38]
jmp 0x7ff7aa5bde80
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
lea rax, [0x7ff7aa7216f8]
jmp 0x7ff7aa5bde80
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
lea rax, [0x7ff7aa721708]
jmp 0x7ff7aa5bde80
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
lea rax, [0x7ff7aa721728]
jmp 0x7ff7aa5bde80
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
lea rax, [0x7ff7aa7216d8]
jmp 0x7ff7aa5bde80
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
lea rax, [0x7ff7aa7216e8]
jmp 0x7ff7aa5bde80
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
lea rax, [0x7ff7aa7216b8]
mov edx, 0x28
mov qword [rdx + rcx], rax
xor eax, eax
mov rcx, qword [rbp + 0x1370]
xor rcx, rsp
call fcn.7ff7aa6d76b0
lea r11, [rsp + 0x1480]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret