Function at 0x7ff7eaa34d00
Capabilities:
Delete file
Execute command

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
sub rsp, 0x270
lea rbp, [rsp + 0x50]
and rbp, 0xffffffffffffffe0
xor r14d, r14d
lea rax, [rbp + 0x40]
mov qword [rbp + 0x10], rax
movabs rax, 0x2dc6ed961b7acd8d
mov qword [rbp], rax
movabs r15, 0x4fbe92f8fd63bef8
mov qword [rbp + 8], r15
movabs rbx, 0x48ab8cf8691fbef8
mov qword [rbp + 0x20], rbx
mov qword [rbp + 0x28], r15
movdqa xmm0, xmmword [rbp]
xorps xmm0, xmmword [rbp + 0x20]
movdqa xmmword [rbp], xmm0
xorps xmm0, xmm0
movups xmmword [rbp + 0x40], xmm0
mov qword [rbp + 0x50], r14
mov qword [rbp + 0x58], r14
lea rax, [rbp]
mov rdi, 0xffffffffffffffff
mov r8, rdi
nop dword [rax]
inc r8
cmp byte [rax + r8], r14b
jne 0x7ff7eaa34d90
lea rdx, [rbp]
lea rcx, [rbp + 0x40]
call fcn.7ff7eaa3b8e0
nop
movabs r13, 0x21dfef9d1d4384bb
mov qword [rbp + 0xc0], r13
movabs rax, 0x21d7f597913fc78c
mov qword [rbp + 0xc8], rax
movabs rax, 0x85b6009654e4d4d6
mov qword [rbp + 0xd0], rax
movabs rsi, 0x26d886f854dbbef8
mov qword [rbp + 0xd8], rsi
mov qword [rbp + 0x120], rbx
mov qword [rbp + 0x128], r15
movabs r12, 0x85b600f83b97bef8
mov qword [rbp + 0x130], r12
mov qword [rbp + 0x138], rsi
vmovdqu ymm0, ymmword [rbp + 0xc0]
vpxor ymm1, ymm0, ymmword [rbp + 0x120]
vmovdqa ymmword [rbp + 0xc0], ymm1
vxorps xmm0, xmm0, xmm0
vmovups xmmword [rbp + 0x100], xmm0
mov qword [rbp + 0x110], r14
mov qword [rbp + 0x118], r14
lea rax, [rbp + 0xc0]
mov r8, rdi
vzeroupper
inc r8
cmp byte [rax + r8], 0
jne 0x7ff7eaa34e50
lea rdx, [rbp + 0xc0]
lea rcx, [rbp + 0x100]
call fcn.7ff7eaa3b8e0
nop
lea r8, [rbp + 0x40]
lea rdx, [rbp + 0x100]
lea rcx, [rbp + 0x1e0]
call fcn.7ff7eaa33630
nop
lea rax, [rbp + 0x20]
mov qword [rbp], rax
movabs rax, 0x2cd9e38f1a6cdf88
mov qword [rbp + 0x10], rax
mov qword [rbp + 0x18], r15
mov qword [rbp + 0x20], rbx
mov qword [rbp + 0x28], r15
movdqa xmm0, xmmword [rbp + 0x10]
xorps xmm0, xmmword [rbp + 0x20]
movdqa xmmword [rbp + 0x10], xmm0
xorps xmm0, xmm0
movups xmmword [rbp + 0x20], xmm0
mov qword [rbp + 0x30], r14
mov qword [rbp + 0x38], r14
lea rax, [rbp + 0x10]
mov r8, rdi
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x7ff7eaa34ed0
lea rdx, [rbp + 0x10]
lea rcx, [rbp + 0x20]
call fcn.7ff7eaa3b8e0
nop
mov qword [rbp + 0xc0], r13
movabs rax, 0x21d7f597913fc78c
mov qword [rbp + 0xc8], rax
movabs rax, 0x85b6009654e4d4d6
mov qword [rbp + 0xd0], rax
mov qword [rbp + 0xd8], rsi
mov qword [rbp + 0x120], rbx
mov qword [rbp + 0x128], r15
mov qword [rbp + 0x130], r12
mov qword [rbp + 0x138], rsi
vmovdqu ymm0, ymmword [rbp + 0xc0]
vpxor ymm1, ymm0, ymmword [rbp + 0x120]
vmovdqa ymmword [rbp + 0xc0], ymm1
vxorps xmm0, xmm0, xmm0
vmovups xmmword [rbp + 0x80], xmm0
mov qword [rbp + 0x90], r14
mov qword [rbp + 0x98], r14
lea rax, [rbp + 0xc0]
mov r8, rdi
vzeroupper
inc r8
cmp byte [rax + r8], 0
jne 0x7ff7eaa34f73
lea rdx, [rbp + 0xc0]
lea rcx, [rbp + 0x80]
call fcn.7ff7eaa3b8e0
nop
lea r8, [rbp + 0x20]
lea rdx, [rbp + 0x80]
lea rcx, [rbp + 0x180]
call fcn.7ff7eaa33630
nop
lea rcx, [rbp + 0xe0]
call fcn.7ff7eaa34690
mov r13, rax
movabs rax, 0x48abb19c0068d6de
mov qword [rbp + 0x10], rax
mov qword [rbp + 0x18], r15
mov qword [rbp + 0x20], rbx
mov qword [rbp + 0x28], r15
movdqa xmm0, xmmword [rbp + 0x10]
xorps xmm0, xmmword [rbp + 0x20]
movdqa xmmword [rbp + 0x10], xmm0
lea rdx, [rbp + 0x180]
lea rcx, [rbp + 0x1c0]
call fcn.7ff7eaa386e0
mov r12, rax
movabs rax, 0x3ac4fb8b1a7ecede
mov qword [rbp], rax
movabs rax, 0x4fbe92f8fd63839c
mov qword [rbp + 8], rax
mov qword [rbp + 0x20], rbx
mov qword [rbp + 0x28], r15
movdqa xmm0, xmmword [rbp]
xorps xmm0, xmmword [rbp + 0x20]
movdqa xmmword [rbp], xmm0
lea rdx, [rbp + 0x1e0]
lea rcx, [rbp + 0x1a0]
call fcn.7ff7eaa386e0
mov rsi, rax
movabs rax, 0x2484a3c2196bca90
mov qword [rbp + 0x140], rax
movabs rax, 0x2acabc8a9807df97
mov qword [rbp + 0x148], rax
movabs rax, 0xf5c52e814ffeca9b
mov qword [rbp + 0x150], rax
movabs rax, 0x42b9e9947bbedd99
mov qword [rbp + 0x158], rax
movabs rax, 0x8ebbf4903141cc9d
mov qword [rbp + 0x160], rax
movabs rax, 0x3ff2e799bbc1db8b
mov qword [rbp + 0x168], rax
movabs rdx, 0x8143f8f8c1e7bef8
mov qword [rbp + 0x170], rdx
movabs rcx, 0x2625def8c96bbef8
mov qword [rbp + 0x178], rcx
mov qword [rbp + 0x80], rbx
mov qword [rbp + 0x88], r15
movabs rax, 0x85b600f83b97bef8
mov qword [rbp + 0x90], rax
movabs rax, 0x26d886f854dbbef8
mov qword [rbp + 0x98], rax
movabs rax, 0xfb8484f8416fbef8
mov qword [rbp + 0xa0], rax
movabs rax, 0x2978af8d5b3bef8
mov qword [rbp + 0xa8], rax
mov qword [rbp + 0xb0], rdx
mov qword [rbp + 0xb8], rcx
vmovdqu ymm0, ymmword [rbp + 0x140]
vpxor ymm1, ymm0, ymmword [rbp + 0x80]
vmovdqa ymmword [rbp + 0x140], ymm1
vmovdqu ymm0, ymmword [rbp + 0x160]
vpxor ymm1, ymm0, ymmword [rbp + 0xa0]
vmovdqa ymmword [rbp + 0x160], ymm1
lea rax, [rbp + 0x140]
mov rbx, rdi
vzeroupper
inc rbx
cmp byte [rax + rbx], 0
jne 0x7ff7eaa35163
mov r8, qword [rsi + 0x10]
mov rcx, qword [rsi + 0x18]
mov rax, rcx
sub rax, r8
cmp rbx, rax
ja 0x7ff7eaa35226
lea rax, [r8 + rbx]
mov qword [rsi + 0x10], rax
mov r14, rsi
cmp rcx, 0xf
jbe 0x7ff7eaa35197
mov r14, qword [rsi]
lea rax, [rbp + 0x140]
add rax, rbx
cmp rax, r14
jbe 0x7ff7eaa351d6
lea rax, [r14 + r8]
lea rcx, [rbp + 0x140]
cmp rcx, rax
ja 0x7ff7eaa351d6
lea rax, [rbp + 0x140]
cmp r14, rax
ja 0x7ff7eaa351c7
xor r15d, r15d
jmp 0x7ff7eaa351d9
lea rax, [rbp + 0x140]
mov r15, r14
sub r15, rax
jmp 0x7ff7eaa351d9
mov r15, rbx
lea rcx, [r14 + rbx]
inc r8
mov rdx, r14
call fcn.7ff7eaa532b0
mov r8, r15
lea rdx, [rbp + 0x140]
mov rcx, r14
call fcn.7ff7eaa532aa
lea rcx, [r14 + r15]
mov r8, rbx
sub r8, r15
lea rax, [r15 + rbx]
lea rdx, [rbp + 0x140]
add rdx, rax
call fcn.7ff7eaa532aa
movabs r15, 0x4fbe92f8fd63bef8
xor r14d, r14d
jmp 0x7ff7eaa35245
mov qword [rsp + 0x28], rbx
lea rax, [rbp + 0x140]
mov qword [rsp + 0x20], rax
mov rdx, rbx
mov rcx, rsi
call fcn.7ff7eaa42cb0
mov rsi, rax
xorps xmm0, xmm0
movups xmmword [rbp + 0xc0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xd0], xmm1
movups xmm0, xmmword [rsi]
movups xmmword [rbp + 0xc0], xmm0
movups xmm1, xmmword [rsi + 0x10]
movups xmmword [rbp + 0xd0], xmm1
mov qword [rsi + 0x10], r14
mov qword [rsi + 0x18], 0xf
mov byte [rsi], 0
lea rax, [rbp]
mov r8, rdi
inc r8
cmp byte [rax + r8], 0
jne 0x7ff7eaa35285
lea rdx, [rbp]
lea rcx, [rbp + 0xc0]
call fcn.7ff7eaa39e20
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x40], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x50], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov r9, r12
lea r8, [rbp + 0x40]
lea rcx, [rbp + 0x120]
call fcn.7ff7eaa3d640
nop
lea rax, [rbp + 0x10]
mov r8, rdi
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x7ff7eaa352e0
lea rdx, [rbp + 0x10]
lea rcx, [rbp + 0x120]
call fcn.7ff7eaa39e20
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x80], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x90], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov r9, r13
lea r8, [rbp + 0x80]
lea rcx, [rbp + 0x200]
call fcn.7ff7eaa3d640
lea rdx, [rbp + 0x200]
lea rcx, [rbp + 0x100]
call fcn.7ff7eaa51320
nop
mov rdx, qword [rbp + 0x98]
cmp rdx, 0xf
jbe 0x7ff7eaa3538d
inc rdx
mov rcx, qword [rbp + 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff7eaa35387
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x7ff7eaa35387
jmp qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
call fcn.7ff7eaa524a0
nop
mov rdx, qword [rbp + 0x138]
cmp rdx, 0xf
jbe 0x7ff7eaa353d1
inc rdx
mov rcx, qword [rbp + 0x120]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff7eaa353cc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x7ff7eaa353cc
jmp qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
call fcn.7ff7eaa524a0
movdqa xmm0, xmmword [0x7ff7eaa67890]
movdqu xmmword [rbp + 0x130], xmm0
mov byte [rbp + 0x120], 0
mov rdx, qword [rbp + 0x58]
cmp rdx, 0xf
jbe 0x7ff7eaa35427
inc rdx
mov rcx, qword [rbp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff7eaa35421
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x7ff7eaa35421
jmp qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
call fcn.7ff7eaa524a0
nop
mov rdx, qword [rbp + 0xd8]
cmp rdx, 0xf
jbe 0x7ff7eaa3546b
inc rdx
mov rcx, qword [rbp + 0xc0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff7eaa35466
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x7ff7eaa35466
jmp qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
call fcn.7ff7eaa524a0
movdqa xmm0, xmmword [0x7ff7eaa67890]
movdqu xmmword [rbp + 0xd0], xmm0
mov byte [rbp + 0xc0], 0
mov rdx, qword [rbp + 0x1b8]
cmp rdx, 0xf
jbe 0x7ff7eaa354c6
inc rdx
mov rcx, qword [rbp + 0x1a0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff7eaa354c1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x7ff7eaa354c1
jmp qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
call fcn.7ff7eaa524a0
movdqa xmm0, xmmword [0x7ff7eaa67890]
movdqu xmmword [rbp + 0x1b0], xmm0
mov byte [rbp + 0x1a0], 0
mov rdx, qword [rbp + 0x1d8]
cmp rdx, 0xf
jbe 0x7ff7eaa35521
inc rdx
mov rcx, qword [rbp + 0x1c0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff7eaa3551c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x7ff7eaa3551c
jmp qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
call fcn.7ff7eaa524a0
movdqa xmm0, xmmword [0x7ff7eaa67890]
movdqu xmmword [rbp + 0x1d0], xmm0
mov byte [rbp + 0x1c0], 0
mov rdx, qword [rbp + 0xf8]
cmp rdx, 0xf
jbe 0x7ff7eaa3557c
inc rdx
mov rcx, qword [rbp + 0xe0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff7eaa35577
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x7ff7eaa35577
jmp qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
call fcn.7ff7eaa524a0
movdqa xmm0, xmmword [0x7ff7eaa67890]
movdqu xmmword [rbp + 0xf0], xmm0
mov byte [rbp + 0xe0], 0
movabs rax, 0x48d2e08c0178d796
mov qword [rbp], rax
mov qword [rbp + 8], r15
movabs r12, 0x48ab8cf8691fbef8
mov qword [rbp + 0x20], r12
mov qword [rbp + 0x28], r15
movdqa xmm0, xmmword [rbp]
xorps xmm0, xmmword [rbp + 0x20]
movdqa xmmword [rbp], xmm0
lea rcx, [rbp]
mov rax, rdi
nop dword [rax]
inc rax
cmp byte [rcx + rax], 0
jne 0x7ff7eaa355d0
lea rcx, [rbp + 0x100]
mov rsi, qword [rbp + 0x100]
mov r14, qword [rbp + 0x118]
cmp r14, 0xf
cmova rcx, rsi
mov rbx, qword [rbp + 0x110]
cmp rbx, rax
jne 0x7ff7eaa35625
mov r8, rbx
lea rdx, [rbp]
call fcn.7ff7eaa532a4
test eax, eax
jne 0x7ff7eaa35625
mov byte [0x7ff7eb4c3786], 1
mov byte [0x7ff7eb4c3787], 1
jmp 0x7ff7eaa35d91
movabs rax, 0x48abed93047acc88
mov qword [rbp], rax
mov qword [rbp + 8], r15
mov qword [rbp + 0x20], r12
mov qword [rbp + 0x28], r15
movdqa xmm0, xmmword [rbp]
xorps xmm0, xmmword [rbp + 0x20]
movdqa xmmword [rbp], xmm0
lea rcx, [rbp]
mov rax, rdi
inc rax
cmp byte [rcx + rax], 0
jne 0x7ff7eaa35654
lea rcx, [rbp + 0x100]
cmp r14, 0xf
cmova rcx, rsi
cmp rbx, rax
jne 0x7ff7eaa3568d
mov r8, rbx
lea rdx, [rbp]
call fcn.7ff7eaa532a4
test eax, eax
jne 0x7ff7eaa3568d
mov byte [0x7ff7eb4c3787], 1
jmp 0x7ff7eaa35d91
movabs rax, 0x3fc3d39c0c7bda99
mov qword [rbp], rax
movabs r13, 0x4fbe92f8fd63da91
mov qword [rbp + 8], r13
mov qword [rbp + 0x20], r12
mov qword [rbp + 0x28], r15
movdqa xmm0, xmmword [rbp]
xorps xmm0, xmmword [rbp + 0x20]
movdqa xmmword [rbp], xmm0
lea rcx, [rbp]
mov rax, rdi
inc rax
cmp byte [rcx + rax], 0
jne 0x7ff7eaa356c6
lea rcx, [rbp + 0x100]
cmp r14, 0xf
cmova rcx, rsi
cmp rbx, rax
jne 0x7ff7eaa356f7
mov r8, rbx
lea rdx, [rbp]
call fcn.7ff7eaa532a4
test eax, eax
je 0x7ff7eaa35d91
movabs rax, 0x3fc3d38a066dcc9d
mov qword [rbp], rax
mov qword [rbp + 8], r13
mov qword [rbp + 0x20], r12
mov qword [rbp + 0x28], r15
movdqa xmm0, xmmword [rbp]
xorps xmm0, xmmword [rbp + 0x20]
movdqa xmmword [rbp], xmm0
lea rcx, [rbp]
mov rax, rdi
inc rax
cmp byte [rcx + rax], 0
jne 0x7ff7eaa35726
lea rcx, [rbp + 0x100]
cmp r14, 0xf
cmova rcx, rsi
cmp rbx, rax
jne 0x7ff7eaa35961
mov r8, rbx
lea rdx, [rbp]
call fcn.7ff7eaa532a4
test eax, eax
jne 0x7ff7eaa35961
movabs rax, 0x488bd1d84d3fe5f2
mov qword [rbp], rax
mov qword [rbp + 8], r15
mov qword [rbp + 0x20], r12
mov qword [rbp + 0x28], r15
movdqa xmm0, xmmword [rbp]
xorps xmm0, xmmword [rbp + 0x20]
movdqa xmmword [rbp], xmm0
lea rdx, [rbp]
mov rcx, qword [0x7ff7eaa55340]
call fcn.7ff7eaa3b020
movabs rcx, 0x2bcefe8a067cd091
mov qword [rbp + 0x80], rcx
movabs rcx, 0x2ec9f68a9c0b9e8c
mov qword [rbp + 0x88], rcx
movabs rcx, 0xf7962c9c52b7db8a
mov qword [rbp + 0x90], rcx
movabs rcx, 0x4fafeed820becd9d
mov qword [rbp + 0x98], rcx
movabs rcx, 0x94edf09b241c9e9c
mov qword [rbp + 0xa0], rcx
movabs rcx, 0x6bfbe9d8bbda9e96
mov qword [rbp + 0xa8], rcx
movabs rcx, 0xe42d9988e193d09d
mov qword [rbp + 0xb0], rcx
movabs rcx, 0x2625def8c96b9094
mov qword [rbp + 0xb8], rcx
mov qword [rbp + 0x40], r12
mov qword [rbp + 0x48], r15
movabs rdi, 0x85b600f83b97bef8
mov qword [rbp + 0x50], rdi
movabs rbx, 0x26d886f854dbbef8
mov qword [rbp + 0x58], rbx
movabs rdx, 0xfb8484f8416fbef8
mov qword [rbp + 0x60], rdx
movabs rdx, 0x2978af8d5b3bef8
mov qword [rbp + 0x68], rdx
movabs rdx, 0x8143f8f8c1e7bef8
mov qword [rbp + 0x70], rdx
movabs rcx, 0x2625def8c96bbef8
mov qword [rbp + 0x78], rcx
vmovdqu ymm0, ymmword [rbp + 0x80]
vpxor ymm1, ymm0, ymmword [rbp + 0x40]
vmovdqa ymmword [rbp + 0x80], ymm1
vmovdqu ymm0, ymmword [rbp + 0xa0]
vpxor ymm1, ymm0, ymmword [rbp + 0x60]
vmovdqa ymmword [rbp + 0xa0], ymm1
lea rdx, [rbp + 0x80]
mov rcx, rax
vzeroupper
call fcn.7ff7eaa3b020
movabs rcx, 0x48ab8cf8691f9ef2
mov qword [rbp + 0x10], rcx
mov qword [rbp + 0x18], r15
mov qword [rbp + 0x20], r12
mov qword [rbp + 0x28], r15
movdqa xmm0, xmmword [rbp + 0x10]
xorps xmm0, xmmword [rbp + 0x20]
movdqa xmmword [rbp + 0x10], xmm0
lea rdx, [rbp + 0x10]
mov rcx, rax
call fcn.7ff7eaa3b020
movabs rax, 0x21dfef9d1d4384bb
mov qword [rbp + 0xc0], rax
movabs rax, 0x21d7f597913fc78c
mov qword [rbp + 0xc8], rax
movabs rax, 0x85b6009654e4d4d6
mov qword [rbp + 0xd0], rax
mov qword [rbp + 0xd8], rbx
mov qword [rbp + 0xe0], r12
mov qword [rbp + 0xe8], r15
mov qword [rbp + 0xf0], rdi
mov qword [rbp + 0xf8], rbx
vmovdqu ymm0, ymmword [rbp + 0xc0]
vpxor ymm1, ymm0, ymmword [rbp + 0xe0]
vmovdqa ymmword [rbp + 0xc0], ymm1
lea rcx, [rbp + 0xc0]
jmp 0x7ff7eaa35d7a
movabs rax, 0x21c0ee991a6bdb96
mov qword [rbp], rax
mov qword [rbp + 8], r15
mov qword [rbp + 0x20], r12
mov qword [rbp + 0x28], r15
movdqa xmm0, xmmword [rbp]
xorps xmm0, xmmword [rbp + 0x20]
movdqa xmmword [rbp], xmm0
lea rcx, [rbp]
mov rax, rdi
inc rax
cmp byte [rcx + rax], 0
jne 0x7ff7eaa35990
lea rcx, [rbp + 0x100]
cmp r14, 0xf
cmova rcx, rsi
cmp rbx, rax
jne 0x7ff7eaa35a80
mov r8, rbx
lea rdx, [rbp]
call fcn.7ff7eaa532a4
test eax, eax
jne 0x7ff7eaa35a80
movabs rax, 0x488bd1d84d3fe5f2
mov qword [rbp], rax
mov qword [rbp + 8], r15
mov qword [rbp + 0x20], r12
mov qword [rbp + 0x28], r15
movdqa xmm0, xmmword [rbp]
xorps xmm0, xmmword [rbp + 0x20]
movdqa xmmword [rbp], xmm0
lea rdx, [rbp]
mov rcx, qword [0x7ff7eaa55340]
call fcn.7ff7eaa3b020
movabs rcx, 0x2bd8ee8d1a3fd196
mov qword [rbp + 0x40], rcx
movabs rcx, 0x67d0fd918913d78a
mov qword [rbp + 0x48], rcx
movabs rcx, 0xa5cf759a1bbb978b
mov qword [rbp + 0x50], rcx
movabs rcx, 0x26d8a88c35bed69b
mov qword [rbp + 0x58], rcx
mov qword [rbp + 0x80], r12
mov qword [rbp + 0x88], r15
movabs rdi, 0x85b600f83b97bef8
mov qword [rbp + 0x90], rdi
movabs rbx, 0x26d886f854dbbef8
mov qword [rbp + 0x98], rbx
vmovdqu ymm0, ymmword [rbp + 0x40]
vpxor ymm1, ymm0, ymmword [rbp + 0x80]
vmovdqa ymmword [rbp + 0x40], ymm1
lea rdx, [rbp + 0x40]
jmp 0x7ff7eaa35cdb
movabs rax, 0x29c9d38a066dcc9d
mov qword [rbp], rax
movabs rax, 0x4fbe92f89906d096
mov qword [rbp + 8], rax
mov qword [rbp + 0x20], r12
mov qword [rbp + 0x28], r15
movdqa xmm0, xmmword [rbp]
xorps xmm0, xmmword [rbp + 0x20]
movdqa xmmword [rbp], xmm0
lea rax, [rbp]
inc rdi
cmp byte [rax + rdi], 0
jne 0x7ff7eaa35ab6
lea rcx, [rbp + 0x100]
cmp r14, 0xf
cmova rcx, rsi
cmp rbx, rdi
jne 0x7ff7eaa35b98
mov r8, rbx
lea rdx, [rbp]
call fcn.7ff7eaa532a4
test eax, eax
jne 0x7ff7eaa35b98
movabs rax, 0x488bd1d84d3fe5f2
mov qword [rbp], rax
mov qword [rbp + 8], r15
mov qword [rbp + 0x20], r12
mov qword [rbp + 0x28], r15
movdqa xmm0, xmmword [rbp]
xorps xmm0, xmmword [rbp + 0x20]
movdqa xmmword [rbp], xmm0
lea rdx, [rbp]
mov rcx, qword [0x7ff7eaa55340]
call fcn.7ff7eaa3b020
movabs rcx, 0x2bc8edd81b6ad181
mov qword [rbp + 0x80], rcx
movabs rcx, 0x3cdffad8890dcb97
mov qword [rbp + 0x88], rcx
movabs rcx, 0xe4d420965ef2dcd8
mov qword [rbp + 0x90], rcx
movabs rcx, 0x4aa8a6d430bed096
mov qword [rbp + 0x98], rcx
movabs rcx, 0x95ebe7d8241cdf9d
mov qword [rbp + 0xa0], rcx
movabs rcx, 0x72e2f9d8a1d0df8c
mov qword [rbp + 0xa8], rcx
movabs rcx, 0x8143f8d6b595d188
jmp 0x7ff7eaa35c40
movabs rax, 0x488bd1d84d3fe5f2
mov qword [rbp], rax
mov qword [rbp + 8], r15
mov qword [rbp + 0x20], r12
mov qword [rbp + 0x28], r15
movdqa xmm0, xmmword [rbp]
xorps xmm0, xmmword [rbp + 0x20]
movdqa xmmword [rbp], xmm0
lea rdx, [rbp]
mov rcx, qword [0x7ff7eaa55340]
call fcn.7ff7eaa3b020
movabs rcx, 0x2bcefe8a067cd091
mov qword [rbp + 0x80], rcx
movabs rcx, 0x2ed0e09d8e169e8c
mov qword [rbp + 0x88], rcx
movabs rcx, 0xe4c6208a54b7db95
mov qword [rbp + 0x90], rcx
movabs rcx, 0x6f4e28a3baccd8b
mov qword [rbp + 0x98], rcx
movabs rcx, 0x9eeaa48a241bd09d
mov qword [rbp + 0xa0], rcx
movabs rcx, 0x22f9e39fbadf9e8f
mov qword [rbp + 0xa8], rcx
movabs rcx, 0x8143f8d6a093df9c
movabs rdx, 0xfb8484f8416fbef8
mov qword [rbp + 0x60], rdx
movabs rdi, 0x85b600f83b97bef8
movabs rbx, 0x26d886f854dbbef8
movabs rdx, 0x2978af8d5b3bef8
mov qword [rbp + 0xb0], rcx
mov qword [rbp + 0x40], r12
mov qword [rbp + 0x48], r15
mov qword [rbp + 0x50], rdi
mov qword [rbp + 0x58], rbx
vmovdqu ymm0, ymmword [rbp + 0x80]
mov qword [rbp + 0x68], rdx
movabs rcx, 0x2625def8c96bbef8
vpxor ymm1, ymm0, ymmword [rbp + 0x40]
movabs rdx, 0x8143f8f8c1e7bef8
mov qword [rbp + 0xb8], rcx
vmovdqa ymmword [rbp + 0x80], ymm1
mov qword [rbp + 0x70], rdx
mov qword [rbp + 0x78], rcx
vmovdqu ymm0, ymmword [rbp + 0xa0]
vpxor ymm1, ymm0, ymmword [rbp + 0x60]
lea rdx, [rbp + 0x80]
vmovdqa ymmword [rbp + 0xa0], ymm1
mov rcx, rax
vzeroupper
call fcn.7ff7eaa3b020
movabs rcx, 0x48ab8cf8691f9ef2
mov qword [rbp + 0x10], rcx
mov qword [rbp + 0x18], r15
mov qword [rbp + 0x20], r12
mov qword [rbp + 0x28], r15
movdqa xmm0, xmmword [rbp + 0x10]
xorps xmm0, xmmword [rbp + 0x20]
movdqa xmmword [rbp + 0x10], xmm0
lea rdx, [rbp + 0x10]
mov rcx, rax
call fcn.7ff7eaa3b020
movabs rax, 0x21dfef9d1d4384bb
mov qword [rbp + 0x40], rax
movabs rax, 0x21d7f597913fc78c
mov qword [rbp + 0x48], rax
movabs rax, 0x85b6009654e4d4d6
mov qword [rbp + 0x50], rax
mov qword [rbp + 0x58], rbx
mov qword [rbp + 0xe0], r12
mov qword [rbp + 0xe8], r15
mov qword [rbp + 0xf0], rdi
mov qword [rbp + 0xf8], rbx
vmovdqu ymm0, ymmword [rbp + 0x40]
vpxor ymm1, ymm0, ymmword [rbp + 0xe0]
vmovdqa ymmword [rbp + 0x40], ymm1
lea rcx, [rbp + 0x40]
vzeroupper
call qword [sym.imp.ucrtbase.dll_remove]
lea rcx, [0x7ff7eaa55e4c]
call qword [sym.imp.ucrtbase.dll_system]
nop
cmp r14, 0xf
jbe 0x7ff7eaa35dcc
lea rdx, [r14 + 1]
mov rax, rsi
cmp rdx, 0x1000
jb 0x7ff7eaa35dc3
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x7ff7eaa35dc3
jmp qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
mov rcx, rsi
call fcn.7ff7eaa524a0
nop
mov rdx, qword [rbp + 0x198]
cmp rdx, 0xf
jbe 0x7ff7eaa35e10
inc rdx
mov rcx, qword [rbp + 0x180]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff7eaa35e0b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x7ff7eaa35e0b
jmp qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
call fcn.7ff7eaa524a0
movdqa xmm0, xmmword [0x7ff7eaa67890]
movdqu xmmword [rbp + 0x190], xmm0
mov byte [rbp + 0x180], 0
mov rdx, qword [rbp + 0x1f8]
cmp rdx, 0xf
jbe 0x7ff7eaa35e6b
inc rdx
mov rcx, qword [rbp + 0x1e0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff7eaa35e66
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x7ff7eaa35e66
jmp qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
call fcn.7ff7eaa524a0
lea r11, [rsp + 0x270]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret