Function at 0x7ff668c4be50
Capabilities:
Access peb ldr_data
Delete file
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x760]
sub rsp, 0x860
mov rax, qword [0x7ff668cee700]
xor rax, rsp
mov qword [rbp + 0x750], rax
xor esi, esi
mov dword [rsp + 0x58], esi
movabs rax, 0xa800756944633086
mov qword [rsp + 0x60], rax
movabs rax, 0x9da3b6608df390db
mov qword [rsp + 0x68], rax
movabs r10, 0xcc6e1c3e155644d7
mov qword [rbp + 0x5a0], r10
movabs r9, 0x9da3d80feebae7b4
mov qword [rbp + 0x5a8], r9
movdqa xmm0, xmmword [rsp + 0x60]
pxor xmm0, xmmword [rbp + 0x5a0]
movdqa xmmword [rsp + 0x60], xmm0
lea rax, [rsp + 0x60]
mov qword [rbp + 0x370], rax
movabs rax, 0xcc6e7b5c716272af
mov qword [rbp - 0x10], rax
mov qword [rbp - 8], r9
mov qword [rbp + 0x5a0], r10
mov qword [rbp + 0x5a8], r9
movdqa xmm0, xmmword [rbp - 0x10]
pxor xmm0, xmmword [rbp + 0x5a0]
movdqa xmmword [rbp - 0x10], xmm0
lea rax, [rbp - 0x10]
mov qword [rbp + 0x378], rax
movabs rax, 0xbe287b5c51382d80
mov qword [rbp + 0x280], rax
movabs rax, 0xeed0b963addf8ad5
mov qword [rbp + 0x288], rax
movabs r8, 0x6b8bc81cf9848969
mov qword [rbp + 0x290], r8
movabs rdx, 0xf90b44357332d48e
mov qword [rbp + 0x298], rdx
mov qword [rbp + 0x580], r10
mov qword [rbp + 0x588], r9
mov qword [rbp + 0x590], r8
mov qword [rbp + 0x598], rdx
movdqa xmm0, xmmword [rbp + 0x280]
pxor xmm0, xmmword [rbp + 0x580]
movdqa xmmword [rbp + 0x280], xmm0
movdqa xmm1, xmmword [rbp + 0x290]
pxor xmm1, xmmword [rbp + 0x590]
movdqa xmmword [rbp + 0x290], xmm1
lea rax, [rbp + 0x280]
mov qword [rbp + 0x380], rax
movabs rax, 0xbe28684954383184
mov qword [rbp + 0x20], rax
movabs rax, 0x9da3d80feedf8ad5
mov qword [rbp + 0x28], rax
mov qword [rbp + 0x5a0], r10
mov qword [rbp + 0x5a8], r9
movdqa xmm0, xmmword [rbp + 0x20]
pxor xmm0, xmmword [rbp + 0x5a0]
movdqa xmmword [rbp + 0x20], xmm0
lea rax, [rbp + 0x20]
mov qword [rbp + 0x388], rax
movabs rax, 0xfc402b483517009e
mov qword [rbp + 0x10], rax
movabs rax, 0x9d97e936de8dd69a
mov qword [rbp + 0x18], rax
mov qword [rbp + 0x5a0], r10
mov qword [rbp + 0x5a8], r9
movdqa xmm0, xmmword [rbp + 0x10]
pxor xmm0, xmmword [rbp + 0x5a0]
movdqa xmmword [rbp + 0x10], xmm0
lea rax, [rbp + 0x10]
mov qword [rbp + 0x390], rax
movabs rax, 0x841d6f5b76393687
mov qword [rbp], rax
movabs rax, 0x9da3d87d8bd184d5
mov qword [rbp + 8], rax
mov qword [rbp + 0x5a0], r10
mov qword [rbp + 0x5a8], r9
movdqa xmm0, xmmword [rbp]
pxor xmm0, xmmword [rbp + 0x5a0]
movdqa xmmword [rbp], xmm0
lea rax, [rbp]
mov qword [rbp + 0x398], rax
movabs rcx, 0xa22b3c4a74332c94
mov qword [rbp + 0x260], rcx
movabs rax, 0xaa8dee2f8bd48ed3
mov qword [rbp + 0x268], rax
mov qword [rbp + 0x270], r8
mov qword [rbp + 0x278], rdx
mov qword [rbp + 0x580], r10
mov qword [rbp + 0x588], r9
mov qword [rbp + 0x590], r8
mov qword [rbp + 0x598], rdx
movdqa xmm0, xmmword [rbp + 0x260]
pxor xmm0, xmmword [rbp + 0x580]
movdqa xmmword [rbp + 0x260], xmm0
movdqa xmm1, xmmword [rbp + 0x270]
pxor xmm1, xmmword [rbp + 0x590]
movdqa xmmword [rbp + 0x270], xmm1
lea rax, [rbp + 0x260]
mov qword [rbp + 0x3a0], rax
mov qword [rbp + 0x240], rcx
movabs rax, 0xa58dee2f8bd48ed3
mov qword [rbp + 0x248], rax
mov qword [rbp + 0x250], r8
mov qword [rbp + 0x258], rdx
mov qword [rbp + 0x580], r10
mov qword [rbp + 0x588], r9
mov qword [rbp + 0x590], r8
mov qword [rbp + 0x598], rdx
movdqa xmm0, xmmword [rbp + 0x240]
pxor xmm0, xmmword [rbp + 0x580]
movdqa xmmword [rbp + 0x240], xmm0
movdqa xmm1, xmmword [rbp + 0x250]
pxor xmm1, xmmword [rbp + 0x590]
movdqa xmmword [rbp + 0x250], xmm1
lea rax, [rbp + 0x240]
mov qword [rbp + 0x3a8], rax
mov qword [rbp + 0x2c0], rcx
movabs rax, 0xa48dee2f8bd48ed3
mov qword [rbp + 0x2c8], rax
mov qword [rbp + 0x2d0], r8
mov qword [rbp + 0x2d8], rdx
mov qword [rbp + 0x580], r10
mov qword [rbp + 0x588], r9
mov qword [rbp + 0x590], r8
mov qword [rbp + 0x598], rdx
movdqa xmm0, xmmword [rbp + 0x2c0]
pxor xmm0, xmmword [rbp + 0x580]
movdqa xmmword [rbp + 0x2c0], xmm0
movdqa xmm1, xmmword [rbp + 0x2d0]
pxor xmm1, xmmword [rbp + 0x590]
movdqa xmmword [rbp + 0x2d0], xmm1
lea rax, [rbp + 0x2c0]
mov qword [rbp + 0x3b0], rax
mov qword [rbp + 0x2a0], rcx
movabs rax, 0xad8def2f8bd48ed3
mov qword [rbp + 0x2a8], rax
mov qword [rbp + 0x2b0], r8
mov qword [rbp + 0x2b8], rdx
mov qword [rbp + 0x580], r10
mov qword [rbp + 0x588], r9
mov qword [rbp + 0x590], r8
mov qword [rbp + 0x598], rdx
movdqa xmm0, xmmword [rbp + 0x2a0]
pxor xmm0, xmmword [rbp + 0x580]
movdqa xmmword [rbp + 0x2a0], xmm0
movdqa xmm1, xmmword [rbp + 0x2b0]
pxor xmm1, xmmword [rbp + 0x590]
movdqa xmmword [rbp + 0x2b0], xmm1
lea rax, [rbp + 0x2a0]
mov qword [rbp + 0x3b8], rax
mov qword [rbp + 0x600], rcx
movabs rax, 0xac8def2f8bd48ed3
mov qword [rbp + 0x608], rax
mov qword [rbp + 0x610], r8
mov qword [rbp + 0x618], rdx
mov qword [rbp + 0x580], r10
mov qword [rbp + 0x588], r9
mov qword [rbp + 0x590], r8
mov qword [rbp + 0x598], rdx
movdqa xmm0, xmmword [rbp + 0x600]
pxor xmm0, xmmword [rbp + 0x580]
movdqa xmmword [rbp + 0x600], xmm0
movdqa xmm1, xmmword [rbp + 0x610]
pxor xmm1, xmmword [rbp + 0x590]
movdqa xmmword [rbp + 0x610], xmm1
lea rax, [rbp + 0x600]
mov qword [rbp + 0x3c0], rax
mov qword [rbp + 0x620], rcx
movabs rax, 0xaf8def2f8bd48ed3
mov qword [rbp + 0x628], rax
mov qword [rbp + 0x630], r8
mov qword [rbp + 0x638], rdx
mov qword [rbp + 0x580], r10
mov qword [rbp + 0x588], r9
mov qword [rbp + 0x590], r8
mov qword [rbp + 0x598], rdx
movdqa xmm0, xmmword [rbp + 0x620]
pxor xmm0, xmmword [rbp + 0x580]
movdqa xmmword [rbp + 0x620], xmm0
movdqa xmm1, xmmword [rbp + 0x630]
pxor xmm1, xmmword [rbp + 0x590]
movdqa xmmword [rbp + 0x630], xmm1
lea rax, [rbp + 0x620]
mov qword [rbp + 0x3c8], rax
mov qword [rbp + 0x640], rcx
movabs rax, 0xae8def2f8bd48ed3
mov qword [rbp + 0x648], rax
mov qword [rbp + 0x650], r8
mov qword [rbp + 0x658], rdx
mov qword [rbp + 0x580], r10
mov qword [rbp + 0x588], r9
mov qword [rbp + 0x590], r8
mov qword [rbp + 0x598], rdx
movdqa xmm0, xmmword [rbp + 0x640]
pxor xmm0, xmmword [rbp + 0x580]
movdqa xmmword [rbp + 0x640], xmm0
movdqa xmm1, xmmword [rbp + 0x650]
pxor xmm1, xmmword [rbp + 0x590]
movdqa xmmword [rbp + 0x650], xmm1
lea rax, [rbp + 0x640]
mov qword [rbp + 0x3d0], rax
mov qword [rbp + 0x5c0], rcx
movabs rax, 0xa98def2f8bd48ed3
mov qword [rbp + 0x5c8], rax
mov qword [rbp + 0x5d0], r8
mov qword [rbp + 0x5d8], rdx
mov qword [rbp + 0x580], r10
mov qword [rbp + 0x588], r9
mov qword [rbp + 0x590], r8
mov qword [rbp + 0x598], rdx
movdqa xmm0, xmmword [rbp + 0x5c0]
pxor xmm0, xmmword [rbp + 0x580]
movdqa xmmword [rbp + 0x5c0], xmm0
movdqa xmm1, xmmword [rbp + 0x5d0]
pxor xmm1, xmmword [rbp + 0x590]
movdqa xmmword [rbp + 0x5d0], xmm1
lea rax, [rbp + 0x5c0]
mov qword [rbp + 0x3d8], rax
mov qword [rbp + 0x5a0], rcx
movabs rax, 0xa88def2f8bd48ed3
mov qword [rbp + 0x5a8], rax
mov qword [rbp + 0x5b0], r8
mov qword [rbp + 0x5b8], rdx
mov qword [rbp + 0x580], r10
mov qword [rbp + 0x588], r9
mov qword [rbp + 0x590], r8
mov qword [rbp + 0x598], rdx
movdqa xmm0, xmmword [rbp + 0x5a0]
pxor xmm0, xmmword [rbp + 0x580]
movdqa xmmword [rbp + 0x5a0], xmm0
movdqa xmm1, xmmword [rbp + 0x5b0]
pxor xmm1, xmmword [rbp + 0x590]
movdqa xmmword [rbp + 0x5b0], xmm1
lea rax, [rbp + 0x5a0]
mov qword [rbp + 0x3e0], rax
mov qword [rbp - 0x30], rcx
movabs rax, 0xab8def2f8bd48ed3
mov qword [rbp - 0x28], rax
mov qword [rbp - 0x20], r8
mov qword [rbp - 0x18], rdx
mov qword [rbp + 0x580], r10
mov qword [rbp + 0x588], r9
mov qword [rbp + 0x590], r8
mov qword [rbp + 0x598], rdx
movdqa xmm0, xmmword [rbp - 0x30]
pxor xmm0, xmmword [rbp + 0x580]
movdqa xmmword [rbp - 0x30], xmm0
movdqa xmm1, xmmword [rbp - 0x20]
pxor xmm1, xmmword [rbp + 0x590]
movdqa xmmword [rbp - 0x20], xmm1
lea rax, [rbp - 0x30]
mov qword [rbp + 0x3e8], rax
mov qword [rbp - 0x50], rcx
movabs rax, 0xaa8def2f8bd48ed3
mov qword [rbp - 0x48], rax
mov qword [rbp - 0x40], r8
mov qword [rbp - 0x38], rdx
mov qword [rbp + 0x580], r10
mov qword [rbp + 0x588], r9
mov qword [rbp + 0x590], r8
mov qword [rbp + 0x598], rdx
movdqa xmm0, xmmword [rbp - 0x50]
pxor xmm0, xmmword [rbp + 0x580]
movdqa xmmword [rbp - 0x50], xmm0
movdqa xmm1, xmmword [rbp - 0x40]
pxor xmm1, xmmword [rbp + 0x590]
movdqa xmmword [rbp - 0x40], xmm1
lea rax, [rbp - 0x50]
mov qword [rbp + 0x3f0], rax
mov qword [rsp + 0x70], rcx
movabs rax, 0xa58def2f8bd48ed3
mov qword [rsp + 0x78], rax
mov qword [rbp - 0x80], r8
mov qword [rbp - 0x78], rdx
mov qword [rbp + 0x580], r10
mov qword [rbp + 0x588], r9
mov qword [rbp + 0x590], r8
mov qword [rbp + 0x598], rdx
movdqa xmm0, xmmword [rsp + 0x70]
pxor xmm0, xmmword [rbp + 0x580]
movdqa xmmword [rsp + 0x70], xmm0
movdqa xmm1, xmmword [rbp - 0x80]
pxor xmm1, xmmword [rbp + 0x590]
movdqa xmmword [rbp - 0x80], xmm1
lea rax, [rsp + 0x70]
mov qword [rbp + 0x3f8], rax
mov qword [rbp - 0x70], rcx
movabs rax, 0xa48def2f8bd48ed3
mov qword [rbp - 0x68], rax
mov qword [rbp - 0x60], r8
mov qword [rbp - 0x58], rdx
mov qword [rbp + 0x580], r10
mov qword [rbp + 0x588], r9
mov qword [rbp + 0x590], r8
mov qword [rbp + 0x598], rdx
movdqa xmm0, xmmword [rbp - 0x70]
pxor xmm0, xmmword [rbp + 0x580]
movdqa xmmword [rbp - 0x70], xmm0
movdqa xmm1, xmmword [rbp - 0x60]
pxor xmm1, xmmword [rbp + 0x590]
movdqa xmmword [rbp - 0x60], xmm1
lea rax, [rbp - 0x70]
mov qword [rbp + 0x400], rax
mov qword [rbp + 0x5e0], rcx
movabs rax, 0xad8de02f8bd48ed3
mov qword [rbp + 0x5e8], rax
mov qword [rbp + 0x5f0], r8
mov qword [rbp + 0x5f8], rdx
mov qword [rbp + 0x580], r10
mov qword [rbp + 0x588], r9
mov qword [rbp + 0x590], r8
mov qword [rbp + 0x598], rdx
movdqa xmm0, xmmword [rbp + 0x5e0]
pxor xmm0, xmmword [rbp + 0x580]
movdqa xmmword [rbp + 0x5e0], xmm0
movdqa xmm1, xmmword [rbp + 0x5f0]
pxor xmm1, xmmword [rbp + 0x590]
movdqa xmmword [rbp + 0x5f0], xmm1
lea rax, [rbp + 0x5e0]
mov qword [rbp + 0x408], rax
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x2e0], xmm0
mov qword [rbp + 0x2f0], rsi
mov ecx, 0xa0
call fcn.7ff668cb8f08
mov qword [rbp + 0x2e0], rax
mov qword [rbp + 0x2e8], rax
lea rdi, [rax + 0xa0]
mov qword [rbp + 0x2f0], rdi
mov r8d, 0xa0
lea rdx, [rbp + 0x370]
mov rcx, rax
call sub.vcruntime140.dll_memmove
mov qword [rbp + 0x2e8], rdi
mov rbx, qword [rbp + 0x2e0]
cmp rbx, rdi
je 0x7ff668c35e46
xor edx, edx
mov rcx, qword [rbx]
call qword [sym.imp.user32.dll_FindWindowA]
test rax, rax
jne 0x7ff668c34373
mov rdx, qword [rbx]
xor ecx, ecx
call qword [sym.imp.user32.dll_FindWindowA]
test rax, rax
jne 0x7ff668c34373
add rbx, 8
cmp rbx, rdi
jne 0x7ff668c34345
jmp 0x7ff668c35e3f
call qword [sym.imp.msvcp140.dll__Query_perf_frequency]
mov rbx, rax
call qword [sym.imp.msvcp140.dll__Query_perf_counter]
cmp rbx, 0x989680
jne 0x7ff668c34391
imul rax, rax, 0x64
jmp 0x7ff668c343ac
cqo
idiv rbx
imul rcx, rax, 0x3b9aca00
imul rax, rdx, 0x3b9aca00
cqo
idiv rbx
add rax, rcx
movabs rcx, 0x7fffffff4d2fa1ff
cmp rax, rcx
jge 0x7ff668c343ca
mov ecx, 0xb2d05e00
add rcx, rax
mov qword [rsp + 0x58], rcx
jmp 0x7ff668c343d9
movabs rax, 0x7fffffffffffffff
mov qword [rsp + 0x58], rax
lea rcx, [rsp + 0x58]
call fcn.7ff668c48a30
mov qword [rbp + 0x50], rsi
mov qword [rbp + 0x60], rsi
mov qword [rbp + 0x68], 0xf
mov byte [rbp + 0x50], 0
mov r8d, 8
lea rdx, str.log.temp
lea rcx, [rbp + 0x50]
call fcn.7ff668bf3ef0
nop
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x7ff668c34496
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x7ff668c34496
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [rbx + r9*4]
mov ecx, dword [rcx + r10]
add rcx, r10
mov r8d, 0x811c9dc5
movzx edx, byte [rcx]
inc rcx
test dl, dl
je 0x7ff668c34491
nop
movsx edx, dl
xor edx, r8d
imul r8d, edx, 0x1000193
movzx edx, byte [rcx]
lea rcx, [rcx + 1]
test dl, dl
jne 0x7ff668c34470
cmp r8d, 0xb0327e93
je 0x7ff668c3449b
test r9d, r9d
jne 0x7ff668c34450
mov rax, qword [rax]
jmp 0x7ff668c34420
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r10
xor ecx, ecx
call rdx
mov r15d, eax
mov dword [rsp + 0x58], eax
mov rcx, qword gs:[0x60]
mov rcx, qword [rcx + 0x18]
mov rcx, qword [rcx + 0x10]
nop
mov r10, qword [rcx + 0x30]
movsxd rdx, dword [r10 + 0x3c]
mov edi, dword [rdx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x7ff668c34546
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x7ff668c34546
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rax, [rbx + r9*4]
mov edx, dword [rax + r10]
add rdx, r10
mov r8d, 0x811c9dc5
movzx eax, byte [rdx]
inc rdx
test al, al
je 0x7ff668c34541
nop
movsx eax, al
xor eax, r8d
imul r8d, eax, 0x1000193
movzx eax, byte [rdx]
lea rdx, [rdx + 1]
test al, al
jne 0x7ff668c34520
cmp r8d, 0xb0327e93
je 0x7ff668c3454b
test r9d, r9d
jne 0x7ff668c34500
mov rcx, qword [rcx]
jmp 0x7ff668c344d0
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r10
mov ecx, 1
call rdx
mov r12d, eax
movabs rax, 0xa250edbadda2c657
mov qword [rbp - 0x70], rax
movabs rax, 0x4e236c03db967b30
mov qword [rbp - 0x68], rax
movabs rcx, 0xa209acf68df18f13
mov qword [rbp + 0x5e0], rcx
mov qword [rbp + 0x5e8], rax
movdqa xmm0, xmmword [rbp - 0x70]
pxor xmm0, xmmword [rbp + 0x5e0]
movdqa xmmword [rbp - 0x70], xmm0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp - 0x70]
call qword [sym.imp.gdi32.dll_CreateDCA]
mov rsi, rax
mov qword [rbp + 0x5e0], rax
mov rcx, qword gs:[0x60]
mov rcx, qword [rcx + 0x18]
mov rcx, qword [rcx + 0x10]
nop
mov r10, qword [rcx + 0x30]
movsxd rdx, dword [r10 + 0x3c]
mov edi, dword [rdx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x7ff668c34656
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x7ff668c34656
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rax, [rbx + r9*4]
mov edx, dword [rax + r10]
add rdx, r10
mov r8d, 0x811c9dc5
movzx eax, byte [rdx]
inc rdx
test al, al
je 0x7ff668c34651
nop
movsx eax, al
xor eax, r8d
imul r8d, eax, 0x1000193
movzx eax, byte [rdx]
lea rdx, [rdx + 1]
test al, al
jne 0x7ff668c34630
cmp r8d, 0xd1420ada
je 0x7ff668c3465b
test r9d, r9d
jne 0x7ff668c34610
mov rcx, qword [rcx]
jmp 0x7ff668c345e0
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r10
mov rcx, rsi
call rdx
mov r14, rax
mov r8d, r12d
mov edx, r15d
mov rcx, rsi
call qword [sym.imp.gdi32.dll_CreateCompatibleBitmap]
mov r15, rax
mov rdx, rax
mov rcx, r14
call qword [sym.imp.gdi32.dll_SelectObject]
mov r13, rax
mov rcx, qword gs:[0x60]
mov rcx, qword [rcx + 0x18]
mov rcx, qword [rcx + 0x10]
nop dword [rax]
mov r11, qword [rcx + 0x30]
movsxd rdx, dword [r11 + 0x3c]
mov edi, dword [rdx + r11 + 0x88]
add rdi, r11
cmp rdi, r11
je 0x7ff668c34726
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x7ff668c34726
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rax, [rbx + r9*4]
mov edx, dword [rax + r11]
add rdx, r11
mov r8d, 0x811c9dc5
movzx eax, byte [rdx]
inc rdx
test al, al
je 0x7ff668c34721
nop
movsx eax, al
xor eax, r8d
imul r8d, eax, 0x1000193
movzx eax, byte [rdx]
lea rdx, [rdx + 1]
test al, al
jne 0x7ff668c34700
cmp r8d, 0x2a7904ce
je 0x7ff668c3472b
test r9d, r9d
jne 0x7ff668c346e0
mov rcx, qword [rcx]
jmp 0x7ff668c346b0
mov ecx, dword [rdi + 0x1c]
add rcx, r11
mov eax, dword [rdi + 0x24]
add rax, r11
movzx eax, word [rax + r9*2]
mov r10d, dword [rcx + rax*4]
add r10, r11
mov dword [rsp + 0x40], 0xcc0020
xor eax, eax
mov dword [rsp + 0x38], eax
mov dword [rsp + 0x30], eax
mov qword [rsp + 0x28], rsi
mov dword [rsp + 0x20], r12d
mov ebx, dword [rsp + 0x58]
mov r9d, ebx
xor r8d, r8d
xor edx, edx
mov rcx, r14
call r10
mov dword [rbp + 0x338], 0x2c
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x33c], xmm0
movups xmmword [rbp + 0x34c], xmm0
mov qword [rbp + 0x35c], rax
mov dword [rbp + 0x33c], ebx
mov eax, r12d
neg eax
mov dword [rbp + 0x340], eax
mov dword [rbp + 0x344], 0x180001
mov eax, ebx
imul eax, r12d
lea eax, [rax + rax*2]
movsxd rcx, eax
call fcn.7ff668cb8f4c
mov rsi, rax
mov rcx, qword gs:[0x60]
mov rcx, qword [rcx + 0x18]
mov rcx, qword [rcx + 0x10]
nop word [rax + rax]
mov r11, qword [rcx + 0x30]
movsxd rdx, dword [r11 + 0x3c]
mov edi, dword [rdx + r11 + 0x88]
add rdi, r11
cmp rdi, r11
je 0x7ff668c34856
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x7ff668c34856
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rax, [r11 + r9*4]
mov edx, dword [rax + rbx]
add rdx, r11
mov r8d, 0x811c9dc5
movzx eax, byte [rdx]
inc rdx
test al, al
je 0x7ff668c34851
nop dword [rax]
movsx eax, al
xor eax, r8d
imul r8d, eax, 0x1000193
movzx eax, byte [rdx]
lea rdx, [rdx + 1]
test al, al
jne 0x7ff668c34830
cmp r8d, 0xe713c7a8
je 0x7ff668c3485b
test r9d, r9d
jne 0x7ff668c34810
mov rcx, qword [rcx]
jmp 0x7ff668c347e0
mov ecx, dword [rdi + 0x1c]
add rcx, r11
mov eax, dword [rdi + 0x24]
add rax, r11
movzx eax, word [rax + r9*2]
mov r10d, dword [rcx + rax*4]
add r10, r11
xor ebx, ebx
mov dword [rsp + 0x30], ebx
lea rax, [rbp + 0x338]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rsi
mov r9d, r12d
xor r8d, r8d
mov rdx, r15
mov rcx, r14
call r10
movabs rax, 0xd264c982a396e07f
mov qword [rsp + 0x70], rax
movabs rax, 0x4e236c03db967b30
mov qword [rsp + 0x78], rax
movabs rcx, 0xa209acf68df18f13
mov qword [rbp + 0x5c0], rcx
mov qword [rbp + 0x5c8], rax
movdqa xmm0, xmmword [rsp + 0x70]
pxor xmm0, xmmword [rbp + 0x5c0]
movdqa xmmword [rsp + 0x70], xmm0
mov ecx, dword [rsp + 0x58]
lea eax, [rcx + rcx*2]
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rsi
lea r9d, [rbx + 3]
mov r8d, r12d
mov edx, ecx
lea rcx, [rsp + 0x70]
call fcn.7ff668c53710
mov rcx, rsi
call fcn.7ff668cb8f00
mov rdx, r13
mov rcx, r14
call qword [sym.imp.gdi32.dll_SelectObject]
mov rcx, r15
call qword [sym.imp.gdi32.dll_DeleteObject]
mov rcx, r14
call qword [sym.imp.gdi32.dll_DeleteDC]
mov rcx, qword [rbp + 0x5e0]
call qword [sym.imp.gdi32.dll_DeleteDC]
xor edx, edx
mov r8d, 0x110
lea rcx, [rbp + 0x470]
call sub.vcruntime140.dll_memset
mov r15d, 1
mov dword [rsp + 0x20], r15d
lea r9d, [rbx + 0x40]
lea r8d, [rbx + 0x20]
lea rdx, [rbp + 0x50]
lea rcx, [rbp + 0x470]
call fcn.7ff668c559b0
nop
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x2c0], xmm0
mov qword [rbp + 0x2d0], rax
mov qword [rbp + 0x5a0], rbx
mov word [rbp + 0x5a8], r15w
mov rax, qword [rbp + 0x470]
movsxd rcx, dword [rax + 4]
mov rax, qword [rbp + rcx + 0x4b8]
mov qword [rsp + 0x70], rax
test rax, rax
sete byte [rsp + 0x78]
mov byte [rsp + 0x79], bl
movaps xmm0, xmmword [rbp + 0x5a0]
movdqa xmmword [rbp + 0x5c0], xmm0
movaps xmm1, xmmword [rsp + 0x70]
movdqa xmmword [rbp + 0x5a0], xmm1
lea r9, [rsp + 0x51]
lea r8, [rbp + 0x5c0]
lea rdx, [rbp + 0x5a0]
lea rcx, [rbp + 0x2c0]
call fcn.7ff668c56420
nop
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop dword [rax + rax]
mov r11, qword [rax + 0x30]
movsxd rcx, dword [r11 + 0x3c]
mov edi, dword [rcx + r11 + 0x88]
add rdi, r11
cmp rdi, r11
je 0x7ff668c34a86
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x7ff668c34a86
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r11]
add rdx, r11
mov r8d, 0x811c9dc5
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x7ff668c34a81
nop
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x7ff668c34a60
cmp r8d, 0xe23b96e7
je 0x7ff668c34a8b
test r9d, r9d
jne 0x7ff668c34a40
mov rax, qword [rax]
jmp 0x7ff668c34a10
mov ecx, dword [rdi + 0x1c]
add rcx, r11
mov eax, dword [rdi + 0x24]
add rax, r11
movzx eax, word [rax + r9*2]
mov r10d, dword [rcx + rax*4]
add r10, r11
movabs rax, 0xc770e99af985ee51
mov qword [rbp - 0x50], rax
movabs r14, 0x4e236c03db967b30
mov qword [rbp - 0x48], r14
movabs rsi, 0xa209acf68df18f13
mov qword [rbp + 0x640], rsi
mov qword [rbp + 0x648], r14
movdqa xmm0, xmmword [rbp - 0x50]
pxor xmm0, xmmword [rbp + 0x640]
movdqa xmmword [rbp - 0x50], xmm0
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
mov edx, r15d
lea rcx, [rbp - 0x50]
call r10
mov r12, rax
mov rcx, qword gs:[0x60]
mov rcx, qword [rcx + 0x18]
mov rcx, qword [rcx + 0x10]
nop word [rax + rax]
mov r11, qword [rcx + 0x30]
movsxd rdx, dword [r11 + 0x3c]
mov edi, dword [rdx + r11 + 0x88]
add rdi, r11
cmp rdi, r11
je 0x7ff668c34b96
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x7ff668c34b96
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rax, [rbx + r9*4]
mov edx, dword [rax + r11]
add rdx, r11
mov r8d, 0x811c9dc5
movzx eax, byte [rdx]
inc rdx
test al, al
je 0x7ff668c34b91
nop
movsx eax, al
xor eax, r8d
imul r8d, eax, 0x1000193
movzx eax, byte [rdx]
lea rdx, [rdx + 1]
test al, al
jne 0x7ff668c34b70
cmp r8d, 0xbc1ee529
je 0x7ff668c34b9b
test r9d, r9d
jne 0x7ff668c34b50
mov rcx, qword [rcx]
jmp 0x7ff668c34b20
mov ecx, dword [rdi + 0x1c]
add rcx, r11
mov eax, dword [rdi + 0x24]
add rax, r11
movzx eax, word [rax + r9*2]
mov r10d, dword [rcx + rax*4]
add r10, r11
movabs rax, 0xc77dc29fa398ff72
mov qword [rbp + 0x30], rax
movabs rax, 0x2b500266a8ff175c
mov qword [rbp + 0x38], rax
movabs rax, 0xb78357c6c7cd6ed3
mov qword [rbp + 0x40], rax
movabs r13, 0xc40024d1b7def752
mov qword [rbp + 0x48], r13
mov qword [rbp + 0x660], rsi
mov qword [rbp + 0x668], r14
movabs rsi, 0xb78357a4b2a10dfd
mov qword [rbp + 0x670], rsi
mov qword [rbp + 0x678], r13
movdqa xmm0, xmmword [rbp + 0x30]
pxor xmm0, xmmword [rbp + 0x660]
movdqa xmmword [rbp + 0x30], xmm0
movdqa xmm1, xmmword [rbp + 0x40]
pxor xmm1, xmmword [rbp + 0x670]
movdqa xmmword [rbp + 0x40], xmm1
xor eax, eax
mov r8d, 0x1bb
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x28], 3
mov qword [rsp + 0x20], rax
xor r9d, r9d
lea rdx, [rbp + 0x30]
mov rcx, r12
call r10
mov r15, rax
mov rcx, qword gs:[0x60]
mov rcx, qword [rcx + 0x18]
mov rcx, qword [rcx + 0x10]
nop dword [rax]
nop dword [rax + rax]
mov r11, qword [rcx + 0x30]
movsxd rdx, dword [r11 + 0x3c]
mov edi, dword [rdx + r11 + 0x88]
add rdi, r11
cmp rdi, r11
je 0x7ff668c34cf6
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x7ff668c34cf6
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rax, [rbx + r9*4]
mov edx, dword [rax + r11]
add rdx, r11
mov r8d, 0x811c9dc5
movzx eax, byte [rdx]
inc rdx
test al, al
je 0x7ff668c34cf1
nop
movsx eax, al
xor eax, r8d
imul r8d, eax, 0x1000193
movzx eax, byte [rdx]
lea rdx, [rdx + 1]
test al, al
jne 0x7ff668c34cd0
cmp r8d, 0x6e003e7d
je 0x7ff668c34cfb
test r9d, r9d
jne 0x7ff668c34cb0
mov rcx, qword [rcx]
jmp 0x7ff668c34c80
mov ecx, dword [rdi + 0x1c]
add rcx, r11
mov eax, dword [rdi + 0x24]
add rax, r11
movzx eax, word [rax + r9*2]
mov r10d, dword [rcx + rax*4]
add r10, r11
movabs rax, 0x8d6cc092e390e73c
mov qword [rbp + 0xb0], rax
movabs rax, 0x2b570d67b2fa1a46
mov qword [rbp + 0xb8], rax
movabs rax, 0xb78357a4c2c97dd3
mov qword [rbp + 0xc0], rax
mov qword [rbp + 0xc8], r13
movabs rbx, 0xa209acf68df18f13
mov qword [rbp + 0x680], rbx
mov qword [rbp + 0x688], r14
mov qword [rbp + 0x690], rsi
mov qword [rbp + 0x698], r13
movdqa xmm0, xmmword [rbp + 0xb0]
pxor xmm0, xmmword [rbp + 0x680]
movdqa xmmword [rbp + 0xb0], xmm0
movdqa xmm1, xmmword [rbp + 0xc0]
pxor xmm1, xmmword [rbp + 0x690]
movdqa xmmword [rbp + 0xc0], xmm1
xor edi, edi
mov qword [rsp + 0x38], rdi
mov dword [rsp + 0x30], 0x4c00000
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rdi
xor r9d, r9d
lea r8, [rbp + 0xb0]
lea rdx, [0x7ff668cd21c8]
mov rcx, r15
call r10
mov r14, rax
call qword [sym.imp.kernel32.dll_GetTickCount64]
mov rdx, rax
lea rcx, [rbp + 0x140]
call fcn.7ff668c29fe0
nop
lea r9d, [rdi + 0x1b]
lea r8, str.___________________________
xor edx, edx
lea rcx, [rbp + 0x140]
call fcn.7ff668c464d0
mov rdx, rax
lea rcx, [rbp + 0x318]
call fcn.7ff668bf3e60
lea esi, [rdi + 6]
mov rdx, qword [rbp + 0x158]
cmp rdx, 0x10
jb 0x7ff668c34e5b
inc rdx
mov rcx, qword [rbp + 0x140]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff668c34e56
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x7ff668c34e56
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.7ff668cb8f00
mov qword [rbp + 0x150], rdi
mov qword [rbp + 0x158], 0xf
mov byte [rbp + 0x140], 0
movabs rax, 0xd068dc9ff99dfa7e
mov qword [rbp + 0x90], rax
movabs rax, 0x2a0e0171b4f05444
mov qword [rbp + 0x98], rax
movabs rax, 0xc2ec358489c0799c
mov qword [rbp + 0xa0], rax
movabs rax, 0xc40019a8c5bf933c
mov qword [rbp + 0xa8], rax
mov qword [rbp + 0x6a0], rbx
movabs rax, 0x4e236c03db967b30
mov qword [rbp + 0x6a8], rax
movabs rax, 0xb78357a4b2a10dfd
mov qword [rbp + 0x6b0], rax
mov qword [rbp + 0x6b8], r13
movdqa xmm0, xmmword [rbp + 0x90]
pxor xmm0, xmmword [rbp + 0x6a0]
movdqa xmmword [rbp + 0x90], xmm0
movdqa xmm1, xmmword [rbp + 0xa0]
pxor xmm1, xmmword [rbp + 0x6b0]
movdqa xmmword [rbp + 0xa0], xmm1
lea r8, [rbp + 0x318]
lea rdx, [rbp + 0x90]
lea rcx, [rbp + 0x580]
call fcn.7ff668c42ce0
nop
lea rdx, [rbp + 0x50]
lea rcx, [rbp + 0x260]
call fcn.7ff668bf4d40
nop
mov qword [rbp + 0x240], rdi
mov qword [rbp + 0x250], rdi
mov qword [rbp + 0x258], 0xf
mov byte [rbp + 0x240], 0
mov r8d, 5
lea rdx, str..temp
lea rcx, [rbp + 0x240]
call fcn.7ff668bf3ef0
nop
mov rbx, 0xffffffffffffffff
mov rax, qword [rbp + 0x270]
mov r8, qword [rbp + 0x250]
cmp rax, r8
jb 0x7ff668c34feb
sub rax, r8
lea rcx, [rsp + 0x52]
mov qword [rsp + 0x20], rcx
mov r9, rbx
mov r8, rax
lea rdx, [rbp + 0x260]
lea rcx, [rbp + 0x1e8]
call fcn.7ff668c563c0
lea esi, [rbx + 0x10]
lea rdx, [rbp + 0x240]
lea rcx, [rbp + 0x1e8]
call fcn.7ff668c566c0
mov r8, qword [rbp + 0x250]
test al, al
mov rax, qword [rbp + 0x270]
je 0x7ff668c34feb
mov dil, 1
jmp 0x7ff668c34ff4
xor dil, dil
test sil, 1
je 0x7ff668c35066
mov rdx, qword [rbp + 0x200]
cmp rdx, 0x10
jb 0x7ff668c35046
inc rdx
mov rcx, qword [rbp + 0x1e8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff668c35033
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x7ff668c35033
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.7ff668cb8f00
mov rax, qword [rbp + 0x270]
mov r8, qword [rbp + 0x250]
test dil, dil
je 0x7ff668c35066
mov rdx, rax
sub rdx, r8
cmp rax, rdx
jb 0x7ff668c35eb9
lea rcx, [rbp + 0x260]
call fcn.7ff668c429a0
movabs rax, 0xc66cde83f981ee70
mov qword [rsp + 0x60], rax
movabs rax, 0x4e236c03bcf80b1e
mov qword [rsp + 0x68], rax
movabs rsi, 0xa209acf68df18f13
mov qword [rbp + 0x620], rsi
movabs rdi, 0x4e236c03db967b30
mov qword [rbp + 0x628], rdi
movdqa xmm0, xmmword [rsp + 0x60]
pxor xmm0, xmmword [rbp + 0x620]
movdqa xmmword [rsp + 0x60], xmm0
lea rax, [rsp + 0x60]
nop
inc rbx
cmp byte [rax + rbx], 0
jne 0x7ff668c350c0
mov r8, rbx
lea rdx, [rsp + 0x60]
lea rcx, [rbp + 0x260]
call fcn.7ff668bf3ef0
xor edx, edx
mov r8d, 0xf8
lea rcx, [rbp + 0x370]
call sub.vcruntime140.dll_memset
mov edx, 1
lea rcx, [rbp + 0x370]
call fcn.7ff668c55870
nop
lea rdx, [0x7ff668cd6f20]
lea rcx, [rbp + 0x380]
call fcn.7ff668c43130
mov rcx, rax
lea rdx, [rbp + 0x318]
call fcn.7ff668c1d9a0
mov rcx, rax
lea rdx, [0x7ff668cd231c]
call fcn.7ff668c43130
movabs rax, 0x8f7dc293f99fe050
mov qword [rbp + 0x100], rax
movabs rax, 0x3a4a1f6cabe51274
mov qword [rbp + 0x108], rax
movabs rax, 0xc5ec318488cf6294
mov qword [rbp + 0x110], rax
movabs rax, 0xe43b45a5d6bada3f
mov qword [rbp + 0x118], rax
movabs rax, 0x38df0ca7c03e9209
mov qword [rbp + 0x120], rax
movabs rax, 0x8d585457d267c7d8
mov qword [rbp + 0x128], rax
movabs rax, 0x52e8dd8d78540a54
mov qword [rbp + 0x130], rax
movabs rcx, 0x7c41df758b6bde06
mov qword [rbp + 0x138], rcx
mov qword [rbp + 0x710], rsi
mov qword [rbp + 0x718], rdi
movabs rsi, 0xb78357a4b2a10dfd
mov qword [rbp + 0x720], rsi
mov qword [rbp + 0x728], r13
movabs rdi, 0x51b92e9aa553f367
mov qword [rbp + 0x730], rdi
movabs rbx, 0xe1313277e945a2b4
mov qword [rbp + 0x738], rbx
movabs rax, 0x52cae0e815356431
mov qword [rbp + 0x740], rax
mov qword [rbp + 0x748], rcx
movdqa xmm0, xmmword [rbp + 0x100]
pxor xmm0, xmmword [rbp + 0x710]
movdqa xmmword [rbp + 0x100], xmm0
movdqa xmm1, xmmword [rbp + 0x110]
pxor xmm1, xmmword [rbp + 0x720]
movdqa xmmword [rbp + 0x110], xmm1
movdqa xmm0, xmmword [rbp + 0x120]
pxor xmm0, xmmword [rbp + 0x730]
movdqa xmmword [rbp + 0x120], xmm0
movdqa xmm1, xmmword [rbp + 0x130]
pxor xmm1, xmmword [rbp + 0x740]
movdqa xmmword [rbp + 0x130], xmm1
lea rdx, [rbp + 0x100]
lea rcx, [rbp + 0x380]
call fcn.7ff668c43130
mov rcx, rax
lea rdx, [rbp + 0x260]
call fcn.7ff668c1d9a0
mov rcx, rax
lea rdx, [0x7ff668cd999c]
call fcn.7ff668c43130
movabs rax, 0x8f7dc293f99fe050
mov qword [rbp + 0x70], rax
movabs rax, 0x234a4c39bee60264
mov qword [rbp + 0x78], rax
movabs rax, 0xbae439d49dc46a9c
mov qword [rbp + 0x80], rax
movabs rax, 0xc40024d1b7def758
mov qword [rbp + 0x88], rax
movabs rcx, 0xa209acf68df18f13
mov qword [rbp + 0x6c0], rcx
movabs rax, 0x4e236c03db967b30
mov qword [rbp + 0x6c8], rax
mov qword [rbp + 0x6d0], rsi
mov qword [rbp + 0x6d8], r13
movdqa xmm0, xmmword [rbp + 0x70]
pxor xmm0, xmmword [rbp + 0x6c0]
movdqa xmmword [rbp + 0x70], xmm0
movdqa xmm1, xmmword [rbp + 0x80]
pxor xmm1, xmmword [rbp + 0x6d0]
movdqa xmmword [rbp + 0x80], xmm1
lea rdx, [rbp + 0x70]
lea rcx, [rbp + 0x380]
call fcn.7ff668c43130
movabs rax, 0x8f7dc293f99fe050
mov qword [rbp + 0xd0], rax
movabs rax, 0x3c460a70b5f70964
mov qword [rbp + 0xd8], rax
movabs rax, 0xd9ea33cbd1cf48d0
mov qword [rbp + 0xe0], rax
movabs rax, 0xb6614ab8d5fecd35
mov qword [rbp + 0xe8], rax
movabs rax, 0x51b92e90a859fe1e
mov qword [rbp + 0xf0], rax
mov qword [rbp + 0xf8], rbx
movabs rax, 0xa209acf68df18f13
mov qword [rbp + 0x6e0], rax
movabs rax, 0x4e236c03db967b30
mov qword [rbp + 0x6e8], rax
mov qword [rbp + 0x6f0], rsi
mov qword [rbp + 0x6f8], r13
mov qword [rbp + 0x700], rdi
mov qword [rbp + 0x708], rbx
movdqa xmm0, xmmword [rbp + 0xd0]
pxor xmm0, xmmword [rbp + 0x6e0]
movdqa xmmword [rbp + 0xd0], xmm0
movdqa xmm1, xmmword [rbp + 0xe0]
pxor xmm1, xmmword [rbp + 0x6f0]
movdqa xmmword [rbp + 0xe0], xmm1
movdqa xmm0, xmmword [rbp + 0xf0]
pxor xmm0, xmmword [rbp + 0x700]
movdqa xmmword [rbp + 0xf0], xmm0
lea rdx, [rbp + 0xd0]
lea rcx, [rbp + 0x380]
call fcn.7ff668c43130
lea rdx, [rbp + 0x280]
lea rcx, [rbp + 0x388]
call fcn.7ff668c56310
nop
lea r8, [rbp + 0x318]
lea rdx, str._r_n__
lea rcx, [rbp + 0x180]
call fcn.7ff668c42ce0
nop
mov r8d, 4
lea rdx, str.___r_n
mov rcx, rax
call fcn.7ff668bf4060
mov rdx, rax
lea rcx, [rbp + 0x2f8]
call fcn.7ff668bf3e60
nop
mov rdx, qword [rbp + 0x198]
cmp rdx, 0x10
jb 0x7ff668c354e2
inc rdx
mov rcx, qword [rbp + 0x180]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff668c354dd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x7ff668c354dd
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.7ff668cb8f00
xor esi, esi
mov qword [rbp + 0x190], rsi
mov qword [rbp + 0x198], 0xf
mov byte [rbp + 0x180], sil
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x2a0], xmm0
mov qword [rbp + 0x2b0], rax
mov r8, qword [rbp + 0x2c8]
sub r8, qword [rbp + 0x2c0]
mov rbx, qword [rbp + 0x308]
add rbx, qword [rbp + 0x290]
add rbx, r8
lea r8, [rsp + 0x50]
movzx edx, byte [rsp + 0x50]
lea rcx, [rbp + 0x2a0]
call fcn.7ff668c56590
lea r8, [rsp + 0x53]
mov rdx, rbx
lea rcx, [rbp + 0x2a0]
call fcn.7ff668c565b0
nop
lea rdx, [rbp + 0x1d8]
lea rcx, [rbp + 0x2a0]
call fcn.7ff668c55b00
mov rdi, qword [rax]
lea rdx, [rbp + 0x1d0]
lea rcx, [rbp + 0x280]
call fcn.7ff668c560e0
mov rbx, qword [rax]
lea rdx, [rbp + 0x1e0]
lea rcx, [rbp + 0x280]
call fcn.7ff668c56100
mov r9, rdi
mov r8, rbx
mov rdx, qword [rax]
lea rcx, [rbp + 0x208]
call fcn.7ff668c56550
lea rdx, [rbp + 0x210]
lea rcx, [rbp + 0x2a0]
call fcn.7ff668c55b00
mov r8, qword [rbp + 0x290]
lea rdx, [rbp + 0x1a0]
mov rcx, rax
call fcn.7ff668c55ae0
mov rdi, qword [rax]
lea rdx, [rbp + 0x1a8]
lea rcx, [rbp + 0x2c0]
call fcn.7ff668c55af0
mov rbx, qword [rax]
lea rdx, [rbp + 0x1b0]
lea rcx, [rbp + 0x2c0]
call fcn.7ff668c55b00
mov r9, rdi
mov r8, rbx
mov rdx, qword [rax]
lea rcx, [rbp + 0x1b8]
call fcn.7ff668c56550
lea rdx, [rbp + 0x1c0]
lea rcx, [rbp + 0x2a0]
call fcn.7ff668c55b00
mov r8, qword [rbp + 0x290]
lea rdx, [rbp + 0x1c8]
mov rcx, rax
call fcn.7ff668c55ae0
mov r8, qword [rbp + 0x2c8]
sub r8, qword [rbp + 0x2c0]
lea rdx, [rbp]
mov rcx, rax
call fcn.7ff668c55ae0
mov rdi, qword [rax]
lea rdx, [rbp + 0x10]
lea rcx, [rbp + 0x2f8]
call fcn.7ff668c560e0
mov rbx, qword [rax]
lea rdx, [rbp + 0x20]
lea rcx, [rbp + 0x2f8]
call fcn.7ff668c56100
mov r9, rdi
mov r8, rbx
mov rdx, qword [rax]
lea rcx, [rbp - 0x10]
call fcn.7ff668c56550
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop dword [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x7ff668c35726
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x7ff668c35726
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rbx]
add rdx, r10
mov r8d, 0x811c9dc5
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x7ff668c35721
nop dword [rax]
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x7ff668c35700
cmp r8d, 0xe71d2bb0
je 0x7ff668c3572b
test r9d, r9d
jne 0x7ff668c356e0
mov rax, qword [rax]
jmp 0x7ff668c356b0
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov ebx, dword [rcx + rax*4]
add rbx, r10
movabs rax, 0x8f7dc293f99fe050
mov qword [rbp - 0x30], rax
movabs rax, 0x4e234c39bee60264
mov qword [rbp - 0x28], rax
movabs rax, 0xa209acf68df18f13
mov qword [rbp + 0x600], rax
movabs rax, 0x4e236c03db967b30
mov qword [rbp + 0x608], rax
movdqa xmm0, xmmword [rbp - 0x30]
pxor xmm0, xmmword [rbp + 0x600]
movdqa xmmword [rbp - 0x30], xmm0
lea r8, [rbp + 0x580]
lea rdx, [rbp - 0x30]
lea rcx, [rbp + 0x218]
call fcn.7ff668c42ce0
nop
mov r8d, 2
lea rdx, [0x7ff668cd231c]
mov rcx, rax
call fcn.7ff668bf4060
mov rdx, rax
lea rcx, [rbp + 0x160]
call fcn.7ff668bf3e60
nop
lea rcx, [rbp + 0x160]
call fcn.7ff668bf4050
mov r9d, 0x20000000
mov r8d, 0xffffffff
mov rdx, rax
mov rcx, r14
call rbx
nop
mov rdx, qword [rbp + 0x178]
cmp rdx, 0x10
jb 0x7ff668c35834
inc rdx
mov rcx, qword [rbp + 0x160]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff668c3582f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x7ff668c3582f
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.7ff668cb8f00
mov qword [rbp + 0x170], rsi
mov qword [rbp + 0x178], 0xf
mov byte [rbp + 0x160], 0
mov rdx, qword [rbp + 0x230]
cmp rdx, 0x10
jb 0x7ff668c35891
inc rdx
mov rcx, qword [rbp + 0x218]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff668c3588c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x7ff668c3588c
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.7ff668cb8f00
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop word [rax + rax]
mov r11, qword [rax + 0x30]
movsxd rcx, dword [r11 + 0x3c]
mov edi, dword [rcx + r11 + 0x88]
add rdi, r11
cmp rdi, r11
je 0x7ff668c35926
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x7ff668c35926
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [r11 + r9*4]
mov edx, dword [rcx + rbx]
add rdx, r11
mov r8d, 0x811c9dc5
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x7ff668c35921
nop dword [rax]
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x7ff668c35900
cmp r8d, 0xbad8ab23
je 0x7ff668c3592b
test r9d, r9d
jne 0x7ff668c358e0
mov rax, qword [rax]
jmp 0x7ff668c358b0
mov ecx, dword [rdi + 0x1c]
add rcx, r11
mov eax, dword [rdi + 0x24]
add rax, r11
movzx eax, word [rax + r9*2]
mov r10d, dword [rcx + rax*4]
add r10, r11
mov rax, qword [rbp + 0x2a8]
mov r9, qword [rbp + 0x2a0]
sub rax, r9
mov dword [rsp + 0x20], eax
xor r8d, r8d
xor edx, edx
mov rcx, r14
call r10
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop dword [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x7ff668c359f6
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x7ff668c359f6
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
mov r8d, 0x811c9dc5
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x7ff668c359f1
nop
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x7ff668c359d0
cmp r8d, 0x4ddde966
je 0x7ff668c359fb
test r9d, r9d
jne 0x7ff668c359b0
mov rax, qword [rax]
jmp 0x7ff668c35980
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r10
mov rcx, r14
call rdx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x7ff668c35aa6
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x7ff668c35aa6
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
mov r8d, 0x811c9dc5
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x7ff668c35aa1
nop
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x7ff668c35a80
cmp r8d, 0x4ddde966
je 0x7ff668c35aab
test r9d, r9d
jne 0x7ff668c35a60
mov rax, qword [rax]
jmp 0x7ff668c35a30
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r10
mov rcx, r15
call rdx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x7ff668c35b56
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x7ff668c35b56
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
mov r8d, 0x811c9dc5
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x7ff668c35b51
nop
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x7ff668c35b30
cmp r8d, 0x4ddde966
je 0x7ff668c35b5b
test r9d, r9d
jne 0x7ff668c35b10
mov rax, qword [rax]
jmp 0x7ff668c35ae0
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r10
mov rcx, r12
call rdx
nop
lea rcx, [rbp + 0x2a0]
call fcn.7ff668c45100
nop
mov rdx, qword [rbp + 0x310]
cmp rdx, 0x10
jb 0x7ff668c35bc9
inc rdx
mov rcx, qword [rbp + 0x2f8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff668c35bc4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x7ff668c35bc4
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.7ff668cb8f00
mov qword [rbp + 0x308], rsi
mov qword [rbp + 0x310], 0xf
mov byte [rbp + 0x2f8], 0
mov rdx, qword [rbp + 0x298]
cmp rdx, 0x10
jb 0x7ff668c35c26
inc rdx
mov rcx, qword [rbp + 0x280]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff668c35c21
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x7ff668c35c21
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.7ff668cb8f00
mov qword [rbp + 0x290], rsi
mov qword [rbp + 0x298], 0xf
mov byte [rbp + 0x280], 0
lea rcx, [rbp + 0x408]
call fcn.7ff668c55810
lea rcx, [rbp + 0x408]
call qword [sym.imp.msvcp140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
nop
mov rdx, qword [rbp + 0x258]
cmp rdx, 0x10
jb 0x7ff668c35c9d
inc rdx
mov rcx, qword [rbp + 0x240]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff668c35c98
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x7ff668c35c98
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.7ff668cb8f00
mov qword [rbp + 0x250], rsi
mov qword [rbp + 0x258], 0xf
mov byte [rbp + 0x240], 0
mov rdx, qword [rbp + 0x278]
cmp rdx, 0x10
jb 0x7ff668c35cfa
inc rdx
mov rcx, qword [rbp + 0x260]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff668c35cf5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x7ff668c35cf5
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.7ff668cb8f00
mov qword [rbp + 0x270], rsi
mov qword [rbp + 0x278], 0xf
mov byte [rbp + 0x260], 0
mov rdx, qword [rbp + 0x598]
cmp rdx, 0x10
jb 0x7ff668c35d57
inc rdx
mov rcx, qword [rbp + 0x580]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff668c35d52
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x7ff668c35d52
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.7ff668cb8f00
mov qword [rbp + 0x590], rsi
mov qword [rbp + 0x598], 0xf
mov byte [rbp + 0x580], 0
mov rdx, qword [rbp + 0x330]
cmp rdx, 0x10
jb 0x7ff668c35db4
inc rdx
mov rcx, qword [rbp + 0x318]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff668c35daf
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x7ff668c35daf
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.7ff668cb8f00
mov qword [rbp + 0x328], rsi
mov qword [rbp + 0x330], 0xf
mov byte [rbp + 0x318], 0
lea rcx, [rbp + 0x2c0]
call fcn.7ff668c45100
nop
lea rcx, [rbp + 0x520]
call fcn.7ff668c55950
lea rcx, [rbp + 0x520]
call qword [sym.imp.msvcp140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
nop
mov rdx, qword [rbp + 0x68]
cmp rdx, 0x10
jb 0x7ff668c35e32
inc rdx
mov rcx, qword [rbp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff668c35e2d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x7ff668c35e2d
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.7ff668cb8f00
lea rcx, str.log.temp
call qword [sym.imp.ucrtbase.dll_remove]
mov rbx, qword [rbp + 0x2e0]
test rbx, rbx
je 0x7ff668c35e89
mov rdx, qword [rbp + 0x2f0]
sub rdx, rbx
and rdx, 0xfffffffffffffff8
mov rax, rbx
cmp rdx, 0x1000
jb 0x7ff668c35e81
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x7ff668c35e81
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rbx
call fcn.7ff668cb8f00
mov rcx, qword [rbp + 0x750]
xor rcx, rsp
call fcn.7ff668cb8ee0
lea r11, [rsp + 0x860]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.7ff668c42980
nop
int3
add rcx, 8
jmp 0x7ff668c339f0