Function at 0x7ff627a0c720
Capabilities:
Contain obfuscated stackstrings
Enumerate processes
Terminate process
Terminate process by name

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x510]
sub rsp, 0x610
mov rax, qword [0x7ff627aa8040]
xor rax, rsp
mov qword [rbp + 0x500], rax
xor r13d, r13d
mov dword [rbp - 0x28], r13d
call fcn.7ff627a0b570
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x128], xmm1
mov qword [rbp + 0x138], r13
lea rdi, [0x7ff627a94120]
lea rsi, [0x7ff627a8e680]
sub rdi, rsi
je 0x7ff627a0c7ba
mov rdx, rdi
lea rcx, [rbp + 0x128]
call fcn.7ff627a11d50
mov rbx, qword [rbp + 0x128]
mov r8, rdi
mov rdx, rsi
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcpy_1
lea rdx, [rbx + rdi]
mov qword [rbp + 0x130], rdx
jmp 0x7ff627a0c7c1
mov rdx, qword [rbp + 0x130]
sub rdx, qword [rbp + 0x128]
je 0x7ff627a0edb3
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0xd0], xmm0
movups xmmword [rbp + 0xe0], xmm0
movups xmmword [rbp + 0xf0], xmm0
movups xmmword [rbp + 0x100], xmm0
mov qword [rbp + 0x110], rax
movdqu xmmword [rbp - 0x18], xmm0
mov qword [rbp - 8], r13
lea rcx, [rbp - 0x18]
call fcn.7ff627a11d50
mov rdi, qword [rbp - 0x18]
mov rbx, qword [rbp + 0x128]
mov rsi, qword [rbp + 0x130]
mov r8, rsi
sub r8, rbx
mov rdx, rbx
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy_1
sub rsi, rbx
add rsi, rdi
mov rax, qword [rbp - 8]
mov qword [rbp - 8], r13
mov qword [rbp - 0x10], r13
mov rcx, qword [rbp - 0x18]
mov qword [rbp - 0x18], r13
mov qword [rbp + 0xd0], rcx
mov qword [rbp + 0xd8], rsi
mov qword [rbp + 0xe0], rax
mov qword [rbp + 0xe8], r13
xorps xmm0, xmm0
movdqa xmmword [rbp + 0xf0], xmm0
mov qword [rbp + 0x108], r13
mov qword [rbp + 0x110], r13
mov qword [rbp + 0x100], rcx
movsxd rax, dword [rcx + 0x3c]
add rcx, rax
mov qword [rbp + 0x108], rcx
movzx eax, word [rcx + 0x14]
add rcx, 0x18
add rcx, rax
mov qword [rbp + 0x110], rcx
call fcn.7ff627a0ad70
test al, al
jne 0x7ff627a0c9a8
lea rdx, [rbp + 0x48]
call fcn.7ff627a0eeb0
mov r9, rax
lea r8, [rax + 2]
mov r10, 0xfffffffffffffffe
sub r10, rax
nop dword [rax + rax]
movzx ecx, byte [r9]
xor byte [r8 - 1], cl
movzx ecx, byte [r9]
xor byte [r8], cl
movzx eax, byte [r9]
xor byte [r8 + 1], al
movzx eax, byte [r9]
xor byte [r8 + 2], al
movzx eax, byte [r9]
xor byte [r8 + 3], al
movzx eax, byte [r9]
xor byte [r8 + 4], al
movzx eax, byte [r9]
xor byte [r8 + 5], al
movzx eax, byte [r9]
xor byte [r8 + 6], al
movzx eax, byte [r9]
xor byte [r8 + 7], al
movzx eax, byte [r9]
xor byte [r8 + 8], al
movzx eax, byte [r9]
xor byte [r8 + 9], al
movzx eax, byte [r9]
xor byte [r8 + 0xa], al
movzx eax, byte [r9]
xor byte [r8 + 0xb], al
movzx eax, byte [r9]
xor byte [r8 + 0xc], al
movzx eax, byte [r9]
xor byte [r8 + 0xd], al
movzx eax, byte [r9]
xor byte [r8 + 0xe], al
movzx eax, byte [r9]
xor byte [r8 + 0xf], al
movzx eax, byte [r9]
xor byte [r8 + 0x10], al
movzx eax, byte [r9]
xor byte [r8 + 0x11], al
movzx eax, byte [r9]
xor byte [r8 + 0x12], al
movzx eax, byte [r9]
xor byte [r8 + 0x13], al
movzx eax, byte [r9]
xor byte [r8 + 0x14], al
lea rdx, [r10 + r8]
movzx eax, byte [rdx + r9 + 0x17]
xor al, byte [r9]
mov byte [rdx + r9 + 0x17], al
lea r8, [r8 + 0x17]
lea rax, [r10 + r8]
cmp rax, 0x2e
jae 0x7ff627a0ed98
jmp 0x7ff627a0c8d0
lea rcx, [rbp + 0x120]
call fcn.7ff627a05470
lea rax, [0x7ff627a8e4f0]
mov qword [rbp + 8], rax
lea rax, [rbp + 8]
mov qword [rbp + 0x40], rax
lea rdx, [rbp + 8]
lea rcx, [rbp + 0xd0]
call fcn.7ff627a047a0
mov r9, qword [rbp + 0xe8]
mov rdi, qword [rbp + 0xf0]
cmp r9, rdi
je 0x7ff627a0c9f4
mov rdi, r9
mov qword [rbp + 0xf0], r9
mov r8, qword [rbp + 0x108]
mov ebx, dword [r8 + 0x50]
mov rcx, rdi
sub rcx, r9
cmp rbx, rcx
jae 0x7ff627a0ca10
lea rax, [r9 + rbx]
jmp 0x7ff627a0ca62
jbe 0x7ff627a0ca69
mov rax, qword [rbp + 0xf8]
sub rax, r9
cmp rbx, rax
jbe 0x7ff627a0ca40
mov rdx, rbx
lea rcx, [rbp + 0xe8]
call fcn.7ff627a04990
mov r8, qword [rbp + 0x108]
mov r9, qword [rbp + 0xe8]
jmp 0x7ff627a0ca69
sub rbx, rcx
mov r8, rbx
xor edx, edx
mov rcx, rdi
call sub.VCRUNTIME140.dll_memset
lea rax, [rbx + rdi]
mov r8, qword [rbp + 0x108]
mov r9, qword [rbp + 0xe8]
mov qword [rbp + 0xf0], rax
mov eax, dword [r8 + 0x54]
test eax, eax
je 0x7ff627a0ca91
mov r8d, eax
mov rdx, qword [rbp + 0xd0]
mov rcx, r9
call sub.VCRUNTIME140.dll_memcpy_1
mov r8, qword [rbp + 0x108]
mov r9, qword [rbp + 0xe8]
mov rbx, r13
cmp r13w, word [r8 + 6]
jae 0x7ff627a0caea
mov rdi, r13
nop
mov rdx, qword [rbp + 0x110]
mov ecx, dword [rdx + rdi + 0xc]
add rcx, r9
mov r10d, dword [rdx + rdi + 0x10]
mov edx, dword [rdx + rdi + 0x14]
add rdx, qword [rbp + 0xd0]
test r10d, r10d
je 0x7ff627a0cad9
mov r8d, r10d
call sub.VCRUNTIME140.dll_memcpy_1
mov r8, qword [rbp + 0x108]
mov r9, qword [rbp + 0xe8]
inc rbx
add rdi, 0x28
movzx eax, word [r8 + 6]
cmp rbx, rax
jb 0x7ff627a0caa0
mov esi, dword [r8 + 0x50]
mov r12d, 4
mov ebx, r12d
mov rax, qword gs:[0x58]
add rbx, qword [rax]
mov eax, dword [rbx]
cmp dword [0x7ff627aa9c60], eax
jle 0x7ff627a0cb44
lea rcx, [0x7ff627aa9c60]
call fcn.7ff627a83400
cmp dword [0x7ff627aa9c60], 0xffffffff
jne 0x7ff627a0cb44
xor r8d, r8d
lea rdx, [0x7ff627a89130]
call fcn.7ff627a04b30
mov qword [0x7ff627aa9c28], rax
lea rcx, [0x7ff627aa9c60]
call fcn.7ff627a83394
mov rdi, qword [0x7ff627aa9c28]
mov eax, dword [rbx]
cmp dword [0x7ff627aa9c48], eax
jle 0x7ff627a0cb9a
lea rcx, [0x7ff627aa9c48]
call fcn.7ff627a83400
cmp dword [0x7ff627aa9c48], 0xffffffff
jne 0x7ff627a0cb9a
lea rcx, [0x7ff627a89108]
call qword [sym.imp.kernel32.dll_GetModuleHandleA]
lea rdx, [0x7ff627a89118]
mov rcx, rax
call qword [sym.imp.kernel32.dll_GetProcAddress]
mov qword [0x7ff627aa9c38], rax
lea rcx, [0x7ff627aa9c48]
call fcn.7ff627a83394
mov rcx, qword [0x7ff627aa94f0]
mov rdx, rdi
call fcn.7ff627a05170
mov rax, qword [0x7ff627aa9c38]
mov rdx, rsi
xor ecx, ecx
call rax
mov r15, rax
mov qword [rbp + 0xc0], rax
mov rcx, qword [0x7ff627aa94f0]
call fcn.7ff627a05370
mov rcx, qword [rbp + 0x108]
test byte [rcx + 0x16], 1
jne 0x7ff627a0ccdb
mov rcx, qword [rbp + 0xe8]
call qword [sym.imp.dbghelp.dll_ImageNtHeader]
mov r14, rax
mov r8d, 5
lea r9, [rbp + 0x160]
mov dl, 1
mov rcx, rax
call qword [sym.imp.dbghelp.dll_ImageDirectoryEntryToData]
mov rbx, rax
mov rdi, r15
sub rdi, qword [r14 + 0x30]
je 0x7ff627a0ccd4
mov ecx, dword [rbp + 0x160]
test ecx, ecx
je 0x7ff627a0ccd4
lea rsi, [rax + rcx]
cmp rax, rsi
jae 0x7ff627a0ccd4
lea r12, [0x7ff627a00000]
nop dword [rax + rax]
xor r9d, r9d
mov r8d, dword [rbx]
mov rdx, qword [rbp + 0xe8]
mov rcx, r14
call qword [sym.imp.dbghelp.dll_ImageRvaToVa]
mov r9, rax
mov r8d, dword [rbx + 4]
sub r8d, 8
shr r8d, 1
lea rbx, [rbx + 8]
mov r10d, r13d
je 0x7ff627a0ccc5
nop dword [rax]
movzx edx, word [rbx]
mov ecx, edx
shr ecx, 0xc
cmp ecx, 0xa
ja case.0x7ff627a0cc88.5
mov ecx, dword [r12 + rcx*4 + 0xee34]
add rcx, r12
jmp rcx
and edx, 0xfff
add rdx, r9
mov rax, rdi
shr rax, 0x10
add word [rdx], ax
jmp case.0x7ff627a0cc88.0
and edx, 0xfff
add rdx, r9
add word [rdx], di
jmp case.0x7ff627a0cc88.0
and edx, 0xfff
add rdx, r9
add qword [rdx], rdi
inc r10d
add rbx, 2
cmp r10d, r8d
jb 0x7ff627a0cc70
cmp rbx, rsi
jb 0x7ff627a0cc40
mov r12d, 4
mov rcx, qword [rbp + 0x108]
mov ebx, dword [rcx + 0x50]
mov rsi, qword [rbp + 0xe8]
mov rax, qword gs:[0x58]
mov rdi, qword [rax]
mov eax, r12d
mov ecx, dword [rax + rdi]
cmp dword [0x7ff627aa9c4c], ecx
jle 0x7ff627a0cd36
lea rcx, [0x7ff627aa9c4c]
call fcn.7ff627a83400
cmp dword [0x7ff627aa9c4c], 0xffffffff
jne 0x7ff627a0cd36
xor r8d, r8d
lea rdx, [0x7ff627a89140]
call fcn.7ff627a04b30
mov qword [0x7ff627aa9c58], rax
lea rcx, [0x7ff627aa9c4c]
call fcn.7ff627a83394
mov qword [rsp + 0x20], rbx
mov r9, rsi
mov r8, r15
call fcn.7ff627a065b0
mov rax, qword [rbp + 0x108]
mov ebx, dword [rax + 0x28]
add rbx, r15
mov esi, dword [rax + 0x50]
mov eax, r12d
mov ecx, dword [rax + rdi]
cmp dword [0x7ff627aa9d1c], ecx
jle 0x7ff627a0cda9
lea rcx, [0x7ff627aa9d1c]
call fcn.7ff627a83400
cmp dword [0x7ff627aa9d1c], 0xffffffff
jne 0x7ff627a0cda9
lea rcx, [0x7ff627a89108]
call qword [sym.imp.kernel32.dll_GetModuleHandleA]
lea rdx, [0x7ff627a89118]
mov rcx, rax
call qword [sym.imp.kernel32.dll_GetProcAddress]
mov qword [0x7ff627aa9ce0], rax
lea rcx, [0x7ff627aa9d1c]
call fcn.7ff627a83394
mov rcx, qword [0x7ff627aa94f0]
mov rdx, rbx
call fcn.7ff627a05170
mov rdx, rsi
mov rcx, r15
call qword [0x7ff627aa9ce0]
mov rcx, qword [0x7ff627aa94f0]
call fcn.7ff627a05370
xorps xmm0, xmm0
movups xmmword [rbp + 8], xmm0
mov qword [rbp + 0x18], r13
mov qword [rbp + 0x20], r13
mov r8d, 9
lea rdx, [0x7ff627a94390]
lea rcx, [rbp + 8]
call fcn.7ff627a04190
nop
lea rcx, [rbp + 8]
call fcn.7ff627a0ba90
nop
mov rdx, qword [rbp + 0x20]
cmp rdx, 0xf
jbe 0x7ff627a0ce3e
inc rdx
mov rcx, qword [rbp + 8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff627a0ce39
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x7ff627a0ce39
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.7ff627a83324
lea rcx, [rbp + 0x168]
call fcn.7ff627a2eb30
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x140], xmm0
mov qword [rbp + 0x150], r13
mov qword [rbp + 0x158], r13
mov r8d, 0x10
lea rdx, [0x7ff627a89118]
lea rcx, [rbp + 0x140]
call fcn.7ff627a04190
nop
lea rcx, [rbp + 0x140]
cmp qword [rbp + 0x158], 0xf
cmova rcx, qword [rbp + 0x140]
mov r12d, 0x16
mov r8, qword [rbp + 0x150]
cmp r8, 0x11
jne 0x7ff627a0cebf
lea rdx, [0x7ff627a943a0]
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x7ff627a0cebf
mov edi, dword [rbp - 0x28]
jmp 0x7ff627a0d2ee
mov rdx, qword [0x7ff627aa94f0]
lea rcx, [rbp + 0x48]
call fcn.7ff627a08fd0
mov r12, rax
movabs rdx, 0x7fffffffffffffff
mov rcx, rdx
mov rsi, qword [rbp + 0x150]
sub rcx, rsi
cmp rcx, 0x1a
jb 0x7ff627a0ee2c
lea r15, [rbp + 0x140]
mov r13, qword [rbp + 0x140]
cmp qword [rbp + 0x158], 0xf
cmova r15, r13
xorps xmm0, xmm0
movups xmmword [rbp - 0x78], xmm0
xor eax, eax
mov qword [rbp - 0x68], rax
mov qword [rbp - 0x60], rax
lea r14, [rsi + 0x1a]
mov ebx, 0xf
lea rdi, [rbp - 0x78]
movabs rcx, 0x8000000000000000
cmp r14, rbx
jbe 0x7ff627a0cfa6
mov rbx, r14
or rbx, 0xf
cmp rbx, rdx
jbe 0x7ff627a0cf6c
mov rbx, rdx
lea rax, [rcx + 0x27]
mov rcx, rax
call fcn.7ff627a832e0
test rax, rax
je 0x7ff627a0d08a
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x7ff627a0cfa2
cmp rbx, 0x16
mov ecx, 0x16
cmovb rbx, rcx
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x7ff627a0cf95
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x7ff627a0eda7
jmp 0x7ff627a0cf4d
test rcx, rcx
je 0x7ff627a0cf9f
call fcn.7ff627a832e0
mov rdi, rax
mov qword [rbp - 0x78], rdi
mov qword [rbp - 0x68], r14
mov qword [rbp - 0x60], rbx
mov r8, rsi
mov rdx, r15
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
movups xmm0, xmmword [0x7ff627a943b8]
movups xmmword [rsi + rdi], xmm0
movsd xmm0, qword [0x7ff627a943c8]
movsd qword [rsi + rdi + 0x10], xmm0
movzx eax, word [0x7ff627a943d0]
mov word [rsi + rdi + 0x18], ax
mov byte [rdi + r14], 0
mov r9, r12
lea r8, [rbp - 0x78]
lea rcx, [rsp + 0x68]
call fcn.7ff627a11fe0
nop
lea rcx, [rsp + 0x68]
call fcn.7ff627a0ba90
nop
mov rdx, qword [rbp - 0x80]
cmp rdx, 0xf
jbe 0x7ff627a0d042
inc rdx
mov rcx, qword [rsp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff627a0d03d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x7ff627a0d03d
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.7ff627a83324
mov qword [rsp + 0x78], 0
mov qword [rbp - 0x80], 0xf
mov byte [rsp + 0x68], 0
mov rdx, qword [rbp - 0x60]
cmp rdx, 0xf
jbe 0x7ff627a0d097
inc rdx
mov rcx, qword [rbp - 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff627a0d091
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x7ff627a0d091
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.7ff627a83324
nop
mov rdx, qword [rbp + 0x60]
cmp rdx, 0xf
jbe 0x7ff627a0d0d5
inc rdx
mov rcx, qword [rbp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff627a0d0d0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x7ff627a0d0d0
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.7ff627a83324
movzx edx, word [0x7ff627aa9504]
lea rcx, [rbp + 0x48]
call fcn.7ff627a06f00
mov r12, rax
movabs rax, 0x7fffffffffffffff
mov rcx, rax
sub rcx, rsi
cmp rcx, 0xb
jb 0x7ff627a0ed92
lea r15, [rbp + 0x140]
cmp qword [rbp + 0x158], 0xf
cmova r15, r13
xorps xmm0, xmm0
movups xmmword [rbp - 0x78], xmm0
xor r13d, r13d
mov qword [rbp - 0x68], r13
mov qword [rbp - 0x60], r13
lea r14, [rsi + 0xb]
mov edi, 0xf
lea rbx, [rbp - 0x78]
cmp r14, rdi
jbe 0x7ff627a0d1b4
mov rdi, r14
or rdi, 0xf
cmp rdi, rax
jbe 0x7ff627a0d175
mov rdi, rax
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.7ff627a832e0
test rax, rax
je 0x7ff627a0d296
lea rbx, [rax + 0x27]
and rbx, 0xffffffffffffffe0
mov qword [rbx - 8], rax
jmp 0x7ff627a0d1b0
cmp rdi, 0x16
mov eax, 0x16
cmovb rdi, rax
lea rcx, [rdi + 1]
cmp rcx, 0x1000
jb 0x7ff627a0d19e
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x7ff627a0edad
jmp 0x7ff627a0d156
test rcx, rcx
je 0x7ff627a0d1ad
call fcn.7ff627a832e0
mov rbx, rax
jmp 0x7ff627a0d1b0
mov rbx, r13
mov qword [rbp - 0x78], rbx
mov qword [rbp - 0x68], r14
mov qword [rbp - 0x60], rdi
mov r8, rsi
mov rdx, r15
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcpy
movsd xmm0, qword [0x7ff627a943d8]
movsd qword [rbx + rsi], xmm0
movzx eax, word [0x7ff627a943e0]
mov word [rbx + rsi + 8], ax
movzx eax, byte [0x7ff627a943e2]
mov byte [rbx + rsi + 0xa], al
mov byte [rbx + r14], r13b
mov r9, r12
lea r8, [rbp - 0x78]
lea rcx, [rsp + 0x68]
call fcn.7ff627a11fe0
mov edi, 0xf0
lea rcx, [rsp + 0x68]
call fcn.7ff627a0ba90
nop
mov rdx, qword [rbp - 0x80]
cmp rdx, 0xf
jbe 0x7ff627a0d252
inc rdx
mov rcx, qword [rsp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff627a0d24d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x7ff627a0d24d
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.7ff627a83324
mov qword [rsp + 0x78], r13
mov qword [rbp - 0x80], 0xf
mov byte [rsp + 0x68], 0
mov rdx, qword [rbp - 0x60]
cmp rdx, 0xf
jbe 0x7ff627a0d2a3
inc rdx
mov rcx, qword [rbp - 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff627a0d29d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x7ff627a0d29d
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.7ff627a83324
nop
mov rdx, qword [rbp + 0x60]
cmp rdx, 0xf
jbe 0x7ff627a0d2e1
inc rdx
mov rcx, qword [rbp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff627a0d2dc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x7ff627a0d2dc
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.7ff627a83324
mov r12d, 0x16
mov r15, qword [rbp + 0xc0]
xor edx, edx
mov r8d, pe_nt_image_headers64
lea rcx, [rbp + 0x2b0]
call sub.VCRUNTIME140.dll_memset
lea rcx, [rbp + 0x2b0]
call fcn.7ff627a0fa80
nop
lea rdx, [0x7ff627a943e8]
lea rcx, [rbp + 0x2c0]
call fcn.7ff627a03cc0
lea rdx, [0x7ff627a09150]
mov rcx, rax
call qword [sym.imp.msvcp140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::operator___class_std::basic_ios_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ios_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rbx, rax
call fcn.7ff627a0bc50
lea rcx, [rax + 0x10]
call fcn.7ff627a117d0
mov rdx, rax
mov rcx, rbx
call qword [sym.imp.msvcp140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_long_unsigned___int64_____ptr64]
lea rdx, [0x7ff627a03e90]
mov rcx, rax
call qword [sym.imp.msvcp140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::operator___class_std::basic_istream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_istream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x78], xmm0
mov qword [rbp - 0x68], r13
mov qword [rbp - 0x60], 0xf
mov byte [rbp - 0x78], 0
or edi, 2
mov dword [rbp - 0x28], edi
xor eax, eax
movups xmmword [rbp + 8], xmm0
mov qword [rbp + 0x18], rax
mov ecx, dword [rbp + 0x338]
mov eax, ecx
and al, 0x22
cmp al, 2
je 0x7ff627a0d3c5
mov rax, qword [rbp + 0x308]
mov rbx, qword [rax]
test rbx, rbx
je 0x7ff627a0d3c5
mov rax, qword [rbp + 0x2e8]
mov r9, qword [rax]
cmp rbx, qword [rbp + 0x330]
cmovb rbx, qword [rbp + 0x330]
sub rbx, r9
mov rax, rbx
jmp 0x7ff627a0d406
mov rax, r13
test cl, 4
jne 0x7ff627a0d3fe
mov rax, qword [rbp + 0x300]
mov rcx, qword [rax]
mov rax, r13
test rcx, rcx
je 0x7ff627a0d3fe
mov rax, qword [rbp + 0x2e0]
mov r9, qword [rax]
mov rax, qword [rbp + 0x318]
movsxd rbx, dword [rax]
add rbx, rcx
sub rbx, r9
mov rax, rbx
jmp 0x7ff627a0d406
mov rbx, qword [rbp + 0x10]
mov r9, qword [rbp + 8]
test r9, r9
je 0x7ff627a0d433
lea rcx, [rbp - 0x78]
cmp rax, 0xf
ja 0x7ff627a0d42b
mov qword [rbp - 0x68], rbx
mov r8, rbx
mov rdx, r9
call sub.VCRUNTIME140.dll_memcpy_1
mov byte [rbp + rbx - 0x78], 0
jmp 0x7ff627a0d433
mov rdx, rbx
call fcn.7ff627a11bf0
and edi, 0xfffffffd
or edi, 1
lea rcx, [rbp - 0x78]
call fcn.7ff627a0ba90
nop
mov rdx, qword [rbp - 0x60]
cmp rdx, 0xf
jbe 0x7ff627a0d481
inc rdx
mov rcx, qword [rbp - 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff627a0d47c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x7ff627a0d47c
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.7ff627a83324
xor edx, edx
mov r8d, pe_nt_image_headers64
lea rcx, [rbp + 0x1b0]
call sub.VCRUNTIME140.dll_memset
lea rcx, [rbp + 0x1b0]
call fcn.7ff627a0fa80
nop
lea rdx, [0x7ff627a943f8]
lea rcx, [rbp + 0x1c0]
call fcn.7ff627a03cc0
lea rdx, [0x7ff627a09150]
mov rcx, rax
call qword [sym.imp.msvcp140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::operator___class_std::basic_ios_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ios_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rbx, rax
call fcn.7ff627a0bc50
mov rdx, rax
mov rcx, rbx
call qword [sym.imp.msvcp140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_long_unsigned___int64_____ptr64]
lea rdx, [0x7ff627a03e90]
mov rcx, rax
call qword [sym.imp.msvcp140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::operator___class_std::basic_istream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_istream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x78], xmm0
mov qword [rbp - 0x68], r13
mov qword [rbp - 0x60], 0xf
mov byte [rbp - 0x78], 0
or edi, 8
mov dword [rbp - 0x28], edi
xor eax, eax
movups xmmword [rbp + 8], xmm0
mov qword [rbp + 0x18], rax
mov ecx, dword [rbp + 0x238]
mov eax, ecx
and al, 0x22
cmp al, 2
je 0x7ff627a0d54f
mov rax, qword [rbp + 0x208]
mov rbx, qword [rax]
test rbx, rbx
je 0x7ff627a0d54f
mov rax, qword [rbp + 0x1e8]
mov r9, qword [rax]
cmp rbx, qword [rbp + 0x230]
cmovb rbx, qword [rbp + 0x230]
sub rbx, r9
mov rax, rbx
jmp 0x7ff627a0d590
mov rax, r13
test cl, 4
jne 0x7ff627a0d588
mov rax, qword [rbp + 0x200]
mov rcx, qword [rax]
mov rax, r13
test rcx, rcx
je 0x7ff627a0d588
mov rax, qword [rbp + 0x1e0]
mov r9, qword [rax]
mov rax, qword [rbp + 0x218]
movsxd rbx, dword [rax]
add rbx, rcx
sub rbx, r9
mov rax, rbx
jmp 0x7ff627a0d590
mov rbx, qword [rbp + 0x10]
mov r9, qword [rbp + 8]
test r9, r9
je 0x7ff627a0d5be
lea rcx, [rbp - 0x78]
cmp rax, 0xf
ja 0x7ff627a0d5b5
mov qword [rbp - 0x68], rbx
mov r8, rbx
mov rdx, r9
call sub.VCRUNTIME140.dll_memcpy_1
mov byte [rbp + rbx - 0x78], 0
jmp 0x7ff627a0d5be
mov rdx, rbx
call fcn.7ff627a11bf0
nop
lea rcx, [rbp - 0x78]
call fcn.7ff627a0ba90
nop
mov rdx, qword [rbp - 0x60]
cmp rdx, 0xf
jbe 0x7ff627a0d606
inc rdx
mov rcx, qword [rbp - 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff627a0d601
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x7ff627a0d601
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.7ff627a83324
mov dword [rbp - 0x40], 0x616f4c79
mov dword [rbp - 0x3c], 0x676e6964
mov dword [rbp - 0x38], 0xa2e2e2e
mov byte [rbp - 0x34], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x68], xmm0
mov qword [rsp + 0x78], r13
mov qword [rbp - 0x80], r13
lea rax, [rbp - 0x3f]
mov rbx, 0xffffffffffffffff
mov r8, rbx
nop
inc r8
cmp byte [rax + r8], 0
jne 0x7ff627a0d640
lea rdx, [rbp - 0x3f]
lea rcx, [rsp + 0x68]
call fcn.7ff627a04190
nop
xor edx, edx
lea rcx, [rsp + 0x68]
call fcn.7ff627a0af90
nop
mov rdx, qword [rbp - 0x80]
cmp rdx, 0xf
jbe 0x7ff627a0d6a5
inc rdx
mov rcx, qword [rsp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff627a0d6a0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x7ff627a0d6a0
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.7ff627a83324
mov ecx, 0x5dc
call qword [sym.imp.kernel32.dll_Sleep]
mov rax, qword [rbp + 0x108]
mov r14d, dword [rax + 0x54]
mov rax, qword gs:[0x58]
mov rdi, qword [rax]
mov eax, 4
mov ecx, dword [rax + rdi]
cmp dword [0x7ff627aa9c30], ecx
jle 0x7ff627a0d70e
lea rcx, [0x7ff627aa9c30]
call fcn.7ff627a83400
cmp dword [0x7ff627aa9c30], 0xffffffff
jne 0x7ff627a0d70e
xor r8d, r8d
lea rdx, [0x7ff627a89150]
call fcn.7ff627a04b30
mov qword [0x7ff627aa9c18], rax
lea rcx, [0x7ff627aa9c30]
call fcn.7ff627a83394
mov rsi, qword [0x7ff627aa9c18]
mov eax, 4
mov r8d, dword [rax + rdi]
cmp dword [0x7ff627aa9cc0], r8d
jle 0x7ff627a0d76c
lea rcx, [0x7ff627aa9cc0]
call fcn.7ff627a83400
cmp dword [0x7ff627aa9cc0], 0xffffffff
jne 0x7ff627a0d76c
lea rcx, [0x7ff627a89108]
call qword [sym.imp.kernel32.dll_GetModuleHandleA]
lea rdx, [0x7ff627a89118]
mov rcx, rax
call qword [sym.imp.kernel32.dll_GetProcAddress]
mov qword [0x7ff627aa9c20], rax
lea rcx, [0x7ff627aa9cc0]
call fcn.7ff627a83394
mov rcx, qword [0x7ff627aa94f0]
mov rdx, rsi
call fcn.7ff627a05170
mov rdx, r14
mov rcx, r15
call qword [0x7ff627aa9c20]
mov rcx, qword [0x7ff627aa94f0]
call fcn.7ff627a05370
mov rcx, qword [0x7ff627aa94f8]
call qword [sym.imp.kernel32.dll_CloseHandle]
test eax, eax
je 0x7ff627a0d7b1
call fcn.7ff627a0a900
test al, al
je 0x7ff627a0d7b1
mov al, 1
jmp 0x7ff627a0d7b3
xor al, al
mov qword [rsp + 0x78], r13
mov qword [rbp - 0x80], r13
test al, al
jne 0x7ff627a0dac3
xorps xmm0, xmm0
movups xmmword [rsp + 0x68], xmm0
mov r8d, 0x62
lea rdx, [0x7ff627a94410]
lea rcx, [rsp + 0x68]
call fcn.7ff627a04190
nop
xor edx, edx
lea rcx, [rsp + 0x68]
call fcn.7ff627a0af90
nop
mov rdx, qword [rbp - 0x80]
cmp rdx, 0xf
jbe 0x7ff627a0d830
inc rdx
mov rcx, qword [rsp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff627a0d82b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x7ff627a0d82b
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.7ff627a83324
xorps xmm0, xmm0
movups xmmword [rsp + 0x68], xmm0
mov qword [rsp + 0x78], r13
mov qword [rbp - 0x80], r13
mov r8d, 0x2c
lea rdx, [0x7ff627a94478]
lea rcx, [rsp + 0x68]
call fcn.7ff627a04190
nop
lea rcx, [rsp + 0x68]
call fcn.7ff627a0ba90
nop
mov rdx, qword [rbp - 0x80]
cmp rdx, 0xf
jbe 0x7ff627a0d8a4
inc rdx
mov rcx, qword [rsp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff627a0d89e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x7ff627a0d89e
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.7ff627a83324
nop
mov rax, qword [rbp + 0x1b0]
movsxd rcx, dword [rax + 4]
lea rbx, [0x7ff627a8e668]
mov qword [rbp + rcx + 0x1b0], rbx
mov rax, qword [rbp + 0x1b0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x98]
mov dword [rbp + rcx + 0x1ac], edx
lea rcx, [rbp + 0x1c8]
call fcn.7ff627a10e40
lea rcx, [rbp + 0x1d0]
call qword [sym.imp.msvcp140.dll_public_virtual:_void___cdecl_std::basic_iostream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x248]
call qword [sym.imp.msvcp140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
nop
mov rax, qword [rbp + 0x2b0]
movsxd rcx, dword [rax + 4]
mov qword [rbp + rcx + 0x2b0], rbx
mov rax, qword [rbp + 0x2b0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x98]
mov dword [rbp + rcx + 0x2ac], edx
lea rcx, [rbp + 0x2c8]
call fcn.7ff627a10e40
lea rcx, [rbp + 0x2d0]
call qword [sym.imp.msvcp140.dll_public_virtual:_void___cdecl_std::basic_iostream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x348]
call qword [sym.imp.msvcp140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
nop
mov rdx, qword [rbp + 0x158]
cmp rdx, 0xf
jbe 0x7ff627a0d991
inc rdx
mov rcx, qword [rbp + 0x140]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff627a0d98b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x7ff627a0ec4e
call fcn.7ff627a83324
nop
mov rdx, qword [rbp + 0x180]
cmp rdx, 7
jbe 0x7ff627a0d9d8
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x168]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff627a0d9d2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x7ff627a0ec98
call fcn.7ff627a83324
nop
mov rcx, qword [rbp + 0xe8]
test rcx, rcx
je 0x7ff627a0da2a
mov rdx, qword [rbp + 0xf8]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff627a0da13
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x7ff627a0ed2a
call fcn.7ff627a83324
mov qword [rbp + 0xe8], r13
xorps xmm0, xmm0
movdqa xmmword [rbp + 0xf0], xmm0
mov rcx, qword [rbp + 0xd0]
test rcx, rcx
je 0x7ff627a0da7c
mov rdx, qword [rbp + 0xe0]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff627a0da65
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x7ff627a0ed2a
call fcn.7ff627a83324
xorps xmm0, xmm0
movdqa xmmword [rbp + 0xd0], xmm0
mov qword [rbp + 0xe0], r13
mov rcx, qword [rbp + 0x128]
test rcx, rcx
je 0x7ff627a0dabc
mov rdx, qword [rbp + 0x138]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff627a0dab7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x7ff627a0ed8b
call fcn.7ff627a83324
mov al, 1
jmp 0x7ff627a0e2b7
movdqa xmm0, xmmword [0x7ff627a98980]
movdqu xmmword [rbp + 8], xmm0
mov dword [rbp + 0x18], 0x65767265
mov dword [rbp + 0x1c], 0x2e2e7372
mov word [rbp + 0x20], 0xa2e
mov byte [rbp + 0x22], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x68], xmm0
lea rax, [rbp + 9]
mov r8, rbx
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x7ff627a0db00
lea rdx, [rbp + 9]
lea rcx, [rsp + 0x68]
call fcn.7ff627a04190
nop
xor edx, edx
lea rcx, [rsp + 0x68]
call fcn.7ff627a0af90
nop
mov rdx, qword [rbp - 0x80]
cmp rdx, 0xf
jbe 0x7ff627a0db65
inc rdx
mov rcx, qword [rsp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff627a0db60
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x7ff627a0db60
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.7ff627a83324
xorps xmm0, xmm0
movups xmmword [rsp + 0x68], xmm0
mov qword [rsp + 0x78], r13
mov qword [rbp - 0x80], r13
mov r8, r12
lea rdx, [0x7ff627a944a8]
lea rcx, [rsp + 0x68]
call fcn.7ff627a04190
nop
lea rcx, [rsp + 0x68]
call fcn.7ff627a0ba90
nop
mov rdx, qword [rbp - 0x80]
cmp rdx, 0xf
jbe 0x7ff627a0dbd5
inc rdx
mov rcx, qword [rsp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff627a0dbd0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x7ff627a0dbd0
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.7ff627a83324
xorps xmm0, xmm0
movups xmmword [rsp + 0x68], xmm0
mov qword [rsp + 0x78], r13
mov qword [rbp - 0x80], r13
mov r8d, 0x21
lea rdx, [0x7ff627a944c0]
lea rcx, [rsp + 0x68]
call fcn.7ff627a04190
lea rdx, [rsp + 0x68]
lea rcx, [rbp + 0x188]
call fcn.7ff627a0c280
nop
lea rcx, [rbp + 0x188]
mov r14, qword [rbp + 0x1a0]
cmp r14, 0xf
seta r15b
mov rdi, qword [rbp + 0x188]
cmova rcx, rdi
mov rsi, qword [rbp + 0x198]
cmp rsi, 2
jne 0x7ff627a0dcce
mov r8, rsi
lea rdx, [0x7ff627a944e4]
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x7ff627a0dcce
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], r13
mov qword [rsp + 0x58], r13
lea r8d, [rsi + 0x13]
lea rdx, [0x7ff627a944e8]
lea rcx, [rsp + 0x40]
call fcn.7ff627a04190
nop
lea rcx, [rsp + 0x40]
call fcn.7ff627a0ba90
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x7ff627a0de8f
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff627a0de8a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x7ff627a0de8a
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
int3
lea rcx, [rbp + 0x188]
test r15b, r15b
cmovne rcx, rdi
cmp rsi, 4
jne 0x7ff627a0de15
mov r8, rsi
lea rdx, [0x7ff627a94500]
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x7ff627a0de15
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], r13
mov qword [rsp + 0x58], r13
lea r8d, [rsi + 0x47]
lea rdx, [0x7ff627a94510]
lea rcx, [rsp + 0x40]
call fcn.7ff627a04190
nop
xor edx, edx
lea rcx, [rsp + 0x40]
call fcn.7ff627a0af90
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x7ff627a0dd72
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff627a0dd6d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x7ff627a0dd6d
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.7ff627a83324
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], r13
mov qword [rsp + 0x58], r13
mov r8d, 0x2a
lea rdx, [0x7ff627a94560]
lea rcx, [rsp + 0x40]
call fcn.7ff627a04190
nop
lea rcx, [rsp + 0x40]
call fcn.7ff627a0ba90
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x7ff627a0dde7
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff627a0dde2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x7ff627a0dde2
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.7ff627a83324
mov r9d, 0x30
lea r8, [0x7ff627a9458c]
lea rdx, [0x7ff627a945a0]
xor ecx, ecx
call qword [sym.imp.user32.dll_MessageBoxA]
cmp eax, 1
jne 0x7ff627a0de8f
xor ecx, ecx
call qword [sym.imp.ucrtbase.dll_exit]
int3
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], r13
mov qword [rsp + 0x58], r13
mov r8d, 0x3e
lea rdx, [0x7ff627a945e8]
lea rcx, [rsp + 0x40]
call fcn.7ff627a04190
nop
mov edx, 1
lea rcx, [rsp + 0x40]
call fcn.7ff627a0af90
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x7ff627a0de8f
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff627a0de8a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x7ff627a0de8a
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.7ff627a83324
mov ecx, 0x1f4
call qword [sym.imp.kernel32.dll_Sleep]
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov edx, 0xc0000000
lea r8d, [r9 + 3]
lea rcx, [0x7ff627a94168]
call qword [sym.imp.kernel32.dll_CreateFileW]
mov qword [0x7ff627aa9520], rax
test rax, rax
je 0x7ff627a0ea4d
cmp rax, 0xffffffffffffffff
je 0x7ff627a0ea4d
movdqa xmm0, xmmword [0x7ff627a98990]
movdqu xmmword [rbp - 0x40], xmm0
mov dword [rbp - 0x30], 0x78652e61
mov word [rbp - 0x2c], 0x65
xor edx, edx
lea ecx, [rdx + 2]
call qword [sym.imp.kernel32.dll_CreateToolhelp32Snapshot]
mov rsi, rax
mov dword [rbp + 0x3d0], 0x130
lea rdx, [rbp + 0x3d0]
mov rcx, rax
call qword [sym.imp.kernel32.dll_Process32First]
test eax, eax
je 0x7ff627a0df52
lea rdx, [rbp - 0x3f]
lea rcx, [rbp + 0x3fc]
call qword [sym.imp.kernel32.dll_lstrcmpiA]
mov rcx, rsi
test eax, eax
je 0x7ff627a0dfdc
lea rdx, [rbp + 0x3d0]
call qword [sym.imp.kernel32.dll_Process32Next]
test eax, eax
jne 0x7ff627a0df25
mov rcx, rsi
call qword [sym.imp.kernel32.dll_CloseHandle]
mov eax, r13d
mov dword [0x7ff627aa9528], eax
test eax, eax
jne 0x7ff627a0e2e7
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], r13
mov qword [rsp + 0x58], r13
lea r8d, [rax + 0x62]
lea rdx, [0x7ff627a94410]
lea rcx, [rsp + 0x40]
call fcn.7ff627a04190
nop
xor edx, edx
lea rcx, [rsp + 0x40]
call fcn.7ff627a0af90
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x7ff627a0dff2
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff627a0dfed
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x7ff627a0dfed
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.kernel32.dll_CloseHandle]
mov eax, dword [rbp + 0x3d8]
jmp 0x7ff627a0df5e
call fcn.7ff627a83324
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], r13
mov qword [rsp + 0x58], r13
mov r8, r12
lea rdx, [0x7ff627a94640]
lea rcx, [rsp + 0x40]
call fcn.7ff627a04190
nop
lea rcx, [rsp + 0x40]
call fcn.7ff627a0ba90
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x7ff627a0e065
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff627a0e05f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x7ff627a0e05f
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.7ff627a83324
nop
cmp r14, 0xf
jbe 0x7ff627a0e09d
lea rdx, [r14 + 1]
mov rax, rdi
cmp rdx, 0x1000
jb 0x7ff627a0e094
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x7ff627a0e4f2
mov rcx, rdi
call fcn.7ff627a83324
nop
mov rax, qword [rbp + 0x1b0]
movsxd rcx, dword [rax + 4]
lea rbx, [0x7ff627a8e668]
mov qword [rbp + rcx + 0x1b0], rbx
mov rax, qword [rbp + 0x1b0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x98]
mov dword [rbp + rcx + 0x1ac], edx
lea rcx, [rbp + 0x1c8]
call fcn.7ff627a10e40
lea rcx, [rbp + 0x1d0]
call qword [sym.imp.msvcp140.dll_public_virtual:_void___cdecl_std::basic_iostream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x248]
call qword [sym.imp.msvcp140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
nop
mov rax, qword [rbp + 0x2b0]
movsxd rcx, dword [rax + 4]
mov qword [rbp + rcx + 0x2b0], rbx
mov rax, qword [rbp + 0x2b0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x98]
mov dword [rbp + rcx + 0x2ac], edx
lea rcx, [rbp + 0x2c8]
call fcn.7ff627a10e40
lea rcx, [rbp + 0x2d0]
call qword [sym.imp.msvcp140.dll_public_virtual:_void___cdecl_std::basic_iostream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x348]
call qword [sym.imp.msvcp140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
nop
mov rdx, qword [rbp + 0x158]
cmp rdx, 0xf
jbe 0x7ff627a0e18a
inc rdx
mov rcx, qword [rbp + 0x140]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff627a0e184
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x7ff627a0e5e5
call fcn.7ff627a83324
nop
mov rdx, qword [rbp + 0x180]
cmp rdx, 7
jbe 0x7ff627a0e1d1
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x168]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff627a0e1cb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x7ff627a0e62f
call fcn.7ff627a83324
nop
mov rcx, qword [rbp + 0xe8]
test rcx, rcx
je 0x7ff627a0e223
mov rdx, qword [rbp + 0xf8]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff627a0e20c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x7ff627a0e6c1
call fcn.7ff627a83324
mov qword [rbp + 0xe8], r13
xorps xmm0, xmm0
movdqa xmmword [rbp + 0xf0], xmm0
mov rcx, qword [rbp + 0xd0]
test rcx, rcx
je 0x7ff627a0e275
mov rdx, qword [rbp + 0xe0]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff627a0e25e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x7ff627a0e6c1
call fcn.7ff627a83324
xorps xmm0, xmm0
movdqa xmmword [rbp + 0xd0], xmm0
mov qword [rbp + 0xe0], r13
mov rcx, qword [rbp + 0x128]
test rcx, rcx
je 0x7ff627a0e2b5
mov rdx, qword [rbp + 0x138]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff627a0e2b0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x7ff627a0e722
call fcn.7ff627a83324
xor al, al
mov rcx, qword [rbp + 0x500]
xor rcx, rsp
call fcn.7ff627a832c0
lea r11, [rsp + 0x610]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov qword [rbp + 0xc0], r13
mov dword [rbp + 0xb0], 0x85b3e12
mov dword [rbp + 0xb4], eax
lea rax, [rbp + 0xc0]
mov qword [rbp + 0xb8], rax
mov qword [rsp + 0x38], r13
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], r13d
mov qword [rsp + 0x20], r13
mov r9d, 0x10
lea r8, [rbp + 0xb0]
mov edx, 0x2201c8
mov rcx, qword [0x7ff627aa9520]
call qword [sym.imp.kernel32.dll_DeviceIoControl]
mov rax, qword [rbp + 0xc0]
mov qword [0x7ff627aa9530], rax
call fcn.7ff627a0bc50
lea rcx, [rax + 0xd8]
call fcn.7ff627a117d0
lea rcx, [rax + 0x150]
call fcn.7ff627a117d0
mov qword [rbp + 0xc0], rax
mov qword [0x7ff627aa9548], rax
mov dword [rbp - 0x58], 0x616c5079
mov dword [rbp - 0x54], 0x73726579
mov byte [rbp - 0x50], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], r13
mov qword [rsp + 0x58], r13
lea rax, [rbp - 0x57]
inc rbx
cmp byte [rax + rbx], 0
jne 0x7ff627a0e3a0
mov r8, rbx
lea rdx, [rbp - 0x57]
lea rcx, [rsp + 0x40]
call fcn.7ff627a04190
lea r8, [rsp + 0x40]
lea rdx, [rbp + 0x78]
lea rcx, [rbp + 0xc0]
call fcn.7ff627a0f760
mov rax, qword [rbp + 0x78]
test rax, rax
jne 0x7ff627a0e729
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], r13
mov qword [rsp + 0x58], r13
lea r8d, [rax + 0x62]
lea rdx, [0x7ff627a94410]
lea rcx, [rsp + 0x40]
call fcn.7ff627a04190
nop
xor edx, edx
lea rcx, [rsp + 0x40]
call fcn.7ff627a0af90
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x7ff627a0e451
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff627a0e44c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x7ff627a0e44c
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.7ff627a83324
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], r13
mov qword [rsp + 0x58], r13
mov r8d, 0x18
lea rdx, [0x7ff627a94658]
lea rcx, [rsp + 0x40]
call fcn.7ff627a04190
nop
lea rcx, [rsp + 0x40]
call fcn.7ff627a0ba90
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x7ff627a0e4c7
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff627a0e4c1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x7ff627a0e4c1
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.7ff627a83324
nop
cmp r14, 0xf
jbe 0x7ff627a0e502
lea rdx, [r14 + 1]
mov rax, rdi
cmp rdx, 0x1000
jb 0x7ff627a0e4f9
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x7ff627a0e4f9
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rdi
call fcn.7ff627a83324
nop
mov rax, qword [rbp + 0x1b0]
movsxd rcx, dword [rax + 4]
lea rbx, [0x7ff627a8e668]
mov qword [rbp + rcx + 0x1b0], rbx
mov rax, qword [rbp + 0x1b0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x98]
mov dword [rbp + rcx + 0x1ac], edx
lea rcx, [rbp + 0x1c8]
call fcn.7ff627a10e40
lea rcx, [rbp + 0x1d0]
call qword [sym.imp.msvcp140.dll_public_virtual:_void___cdecl_std::basic_iostream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x248]
call qword [sym.imp.msvcp140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
nop
mov rax, qword [rbp + 0x2b0]
movsxd rcx, dword [rax + 4]
mov qword [rbp + rcx + 0x2b0], rbx
mov rax, qword [rbp + 0x2b0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x98]
mov dword [rbp + rcx + 0x2ac], edx
lea rcx, [rbp + 0x2c8]
call fcn.7ff627a10e40
lea rcx, [rbp + 0x2d0]
call qword [sym.imp.msvcp140.dll_public_virtual:_void___cdecl_std::basic_iostream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x348]
call qword [sym.imp.msvcp140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
nop
mov rdx, qword [rbp + 0x158]
cmp rdx, 0xf
jbe 0x7ff627a0e5f2
inc rdx
mov rcx, qword [rbp + 0x140]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff627a0e5ec
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x7ff627a0e5ec
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.7ff627a83324
nop
mov rdx, qword [rbp + 0x180]
cmp rdx, 7
jbe 0x7ff627a0e63c
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x168]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff627a0e636
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x7ff627a0e636
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.7ff627a83324
nop
mov rcx, qword [rbp + 0xe8]
test rcx, rcx
je 0x7ff627a0e68a
mov rdx, qword [rbp + 0xf8]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff627a0e673
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x7ff627a0e6c1
call fcn.7ff627a83324
mov qword [rbp + 0xe8], r13
xorps xmm0, xmm0
movdqa xmmword [rbp + 0xf0], xmm0
mov rcx, qword [rbp + 0xd0]
test rcx, rcx
je 0x7ff627a0e6df
mov rdx, qword [rbp + 0xe0]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff627a0e6c8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x7ff627a0e6c8
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.7ff627a83324
xorps xmm0, xmm0
movdqa xmmword [rbp + 0xd0], xmm0
mov qword [rbp + 0xe0], r13
mov rcx, qword [rbp + 0x128]
test rcx, rcx
je 0x7ff627a0e2b5
mov rdx, qword [rbp + 0x138]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff627a0e2b0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x7ff627a0e2b0
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
nop
mov qword [0x7ff627aa9560], rax
call fcn.7ff627a0bc50
lea rcx, [rax + 0x10]
call fcn.7ff627a117d0
test rax, rax
jne 0x7ff627a0e80a
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], r13
mov qword [rsp + 0x58], r13
lea r8d, [rax + 0x62]
lea rdx, [0x7ff627a94410]
lea rcx, [rsp + 0x40]
call fcn.7ff627a04190
nop
xor edx, edx
lea rcx, [rsp + 0x40]
call fcn.7ff627a0af90
nop
lea rcx, [rsp + 0x40]
call fcn.7ff627a03850
lea rdx, [0x7ff627a94678]
lea rcx, [rbp + 0x48]
call fcn.7ff627a038b0
nop
lea rcx, [rbp + 0x48]
call fcn.7ff627a0ba90
nop
lea rcx, [rbp + 0x48]
call fcn.7ff627a03850
nop
lea rcx, [rbp + 0x188]
call fcn.7ff627a03850
nop
lea rcx, [rbp + 0x1b0]
call fcn.7ff627a0f020
nop
lea rcx, [rbp + 0x2b0]
call fcn.7ff627a0f020
nop
lea rcx, [rbp + 0x140]
call fcn.7ff627a03850
nop
lea rcx, [rbp + 0x168]
call fcn.7ff627a02850
nop
lea rcx, [rbp + 0xd0]
call fcn.7ff627a0ef70
nop
lea rcx, [rbp + 0x128]
call fcn.7ff627a04930
jmp 0x7ff627a0e2b5
mov qword [0x7ff627aa9540], rax
lea rcx, [rbp + 0x3b0]
call fcn.7ff627a03a10
nop
lea rdx, [rbp + 0x80]
lea rcx, [rbp + 0x78]
call fcn.7ff627a0fa20
lea rdx, [rbp - 0x20]
mov rcx, rax
call fcn.7ff627a0fa50
cmp qword [rbp - 0x20], 0
je 0x7ff627a0e868
lea rdx, [rbp + 0x48]
lea rcx, [rbp - 0x20]
call fcn.7ff627a0f430
mov rdx, rax
lea rcx, [rbp + 0x3b0]
call fcn.7ff627a10f80
lea rcx, [rbp + 0x48]
call fcn.7ff627a03850
jmp 0x7ff627a0e896
lea rdx, [rbp + 0x88]
call fcn.7ff627a0ef10
lea rdx, [rax + 1]
movzx ecx, byte [rax]
xor byte [rdx], cl
xor byte [rax + 2], cl
xor byte [rax + 3], cl
xor byte [rax + 4], cl
mov byte [rax + 5], 0
lea rcx, [rbp + 0x3b0]
call fcn.7ff627a10f00
call fcn.7ff627a25aa0
test rax, rax
jne 0x7ff627a0e8ac
lea rcx, [rbp + 0x3b0]
jmp 0x7ff627a0e7a5
lea rdx, [0x7ff627a94698]
lea rcx, [rbp + 0x48]
call fcn.7ff627a038b0
mov r8, rax
lea rdx, [rbp + 0x90]
lea rcx, [rbp + 0xc0]
call fcn.7ff627a0f760
mov rbx, rax
lea rdx, [0x7ff627a946a4]
lea rcx, [rsp + 0x40]
call fcn.7ff627a038b0
mov r8, rax
lea rdx, [rbp + 0x98]
mov rcx, rbx
call fcn.7ff627a0f760
lea rdx, [0x7ff627a946b0]
lea rcx, [rbp + 0x48]
call fcn.7ff627a038b0
nop
lea rcx, [rbp + 0x48]
call fcn.7ff627a0ba90
nop
lea rcx, [rbp + 0x48]
call fcn.7ff627a03850
lea rdx, [0x7ff627a08410]
lea rcx, [rbp + 0xa0]
call fcn.7ff627a08650
nop
mov rcx, rax
call fcn.7ff627a06ff0
nop
cmp dword [rbp + 0xa8], 0
je 0x7ff627a0e949
call qword [sym.imp.ucrtbase.dll_terminate]
int3
lea rcx, [rbp - 0x18]
call fcn.7ff627a11870
nop
mov rcx, rax
call fcn.7ff627a06ff0
nop
cmp dword [rbp - 0x10], 0
je 0x7ff627a0e969
call qword [sym.imp.ucrtbase.dll_terminate]
int3
lea rdx, [rsp + 0x40]
call fcn.7ff627a0ef20
lea rdx, [rax + 1]
movzx ecx, byte [rax]
xor byte [rdx], cl
xor byte [rax + 2], cl
xor byte [rax + 3], cl
xor byte [rax + 4], cl
xor byte [rax + 5], cl
xor byte [rax + 6], cl
xor byte [rax + 7], cl
xor byte [rax + 8], cl
xor byte [rax + 9], cl
xor byte [rax + 0xa], cl
xor byte [rax + 0xb], cl
xor byte [rax + 0xc], cl
xor byte [rax + 0xd], cl
xor byte [rax + 0xe], cl
xor byte [rax + 0xf], cl
xor byte [rax + 0x10], cl
xor byte [rax + 0x11], cl
xor byte [rax + 0x12], cl
xor byte [rax + 0x13], cl
xor byte [rax + 0x14], cl
xor byte [rax + 0x15], cl
xor byte [rax + 0x16], cl
xor byte [rax + 0x17], cl
xor byte [rax + 0x18], cl
xor byte [rax + 0x19], cl
xor byte [rax + 0x1a], cl
xor byte [rax + 0x1b], cl
xor byte [rax + 0x1c], cl
xor byte [rax + 0x1d], cl
xor byte [rax + 0x1e], cl
xor byte [rax + 0x1f], cl
xor byte [rax + 0x20], cl
xor byte [rax + 0x21], cl
xor byte [rax + 0x22], cl
xor byte [rax + 0x23], cl
xor byte [rax + 0x24], cl
mov byte [rax + 0x25], 0
lea rcx, [rbp + 0x48]
call fcn.7ff627a038b0
nop
xor edx, edx
lea rcx, [rbp + 0x48]
call fcn.7ff627a0af90
nop
lea rcx, [rbp + 0x48]
call fcn.7ff627a03850
mov ecx, 4
call qword [sym.imp.kernel32.dll_Sleep]
nop dword [rax]
nop word [rax + rax]
mov dword [rbp - 0x48], 0x626f5264
mov dword [rbp - 0x44], 0x786f6c
lea rdx, [rbp - 0x47]
xor ecx, ecx
call qword [sym.imp.user32.dll_FindWindowA]
test rax, rax
jne 0x7ff627a0ea20
call fcn.7ff627a0af60
xor ecx, ecx
call qword [sym.imp.ucrtbase.dll_exit]
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x18], xmm0
mov qword [rbp - 8], r13
mov qword [rbp], r13
mov r8d, 0x62
lea rdx, [0x7ff627a94410]
lea rcx, [rbp - 0x18]
call fcn.7ff627a04190
nop
xor edx, edx
lea rcx, [rbp - 0x18]
call fcn.7ff627a0af90
nop
mov rdx, qword [rbp]
cmp rdx, 0xf
jbe 0x7ff627a0eabd
inc rdx
mov rcx, qword [rbp - 0x18]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff627a0eab8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x7ff627a0eab8
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.7ff627a83324
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], r13
mov qword [rsp + 0x58], r13
mov r8, r12
lea rdx, [0x7ff627a94628]
lea rcx, [rsp + 0x40]
call fcn.7ff627a04190
nop
lea rcx, [rsp + 0x40]
call fcn.7ff627a0ba90
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x7ff627a0eb30
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff627a0eb2a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x7ff627a0eb2a
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.7ff627a83324
nop
cmp r14, 0xf
jbe 0x7ff627a0eb6b
lea rdx, [r14 + 1]
mov rax, rdi
cmp rdx, 0x1000
jb 0x7ff627a0eb62
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x7ff627a0eb62
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rdi
call fcn.7ff627a83324
nop
mov rax, qword [rbp + 0x1b0]
movsxd rcx, dword [rax + 4]
lea rbx, [0x7ff627a8e668]
mov qword [rbp + rcx + 0x1b0], rbx
mov rax, qword [rbp + 0x1b0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x98]
mov dword [rbp + rcx + 0x1ac], edx
lea rcx, [rbp + 0x1c8]
call fcn.7ff627a10e40
lea rcx, [rbp + 0x1d0]
call qword [sym.imp.msvcp140.dll_public_virtual:_void___cdecl_std::basic_iostream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x248]
call qword [sym.imp.msvcp140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
nop
mov rax, qword [rbp + 0x2b0]
movsxd rcx, dword [rax + 4]
mov qword [rbp + rcx + 0x2b0], rbx
mov rax, qword [rbp + 0x2b0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x98]
mov dword [rbp + rcx + 0x2ac], edx
lea rcx, [rbp + 0x2c8]
call fcn.7ff627a10e40
lea rcx, [rbp + 0x2d0]
call qword [sym.imp.msvcp140.dll_public_virtual:_void___cdecl_std::basic_iostream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x348]
call qword [sym.imp.msvcp140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
nop
mov rdx, qword [rbp + 0x158]
cmp rdx, 0xf
jbe 0x7ff627a0ec5b
inc rdx
mov rcx, qword [rbp + 0x140]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff627a0ec55
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x7ff627a0ec55
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.7ff627a83324
nop
mov rdx, qword [rbp + 0x180]
cmp rdx, 7
jbe 0x7ff627a0eca5
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x168]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff627a0ec9f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x7ff627a0ec9f
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.7ff627a83324
nop
mov rcx, qword [rbp + 0xe8]
test rcx, rcx
je 0x7ff627a0ecf3
mov rdx, qword [rbp + 0xf8]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff627a0ecdc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x7ff627a0ed2a
call fcn.7ff627a83324
mov qword [rbp + 0xe8], r13
xorps xmm0, xmm0
movdqa xmmword [rbp + 0xf0], xmm0
mov rcx, qword [rbp + 0xd0]
test rcx, rcx
je 0x7ff627a0ed48
mov rdx, qword [rbp + 0xe0]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff627a0ed31
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x7ff627a0ed31
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.7ff627a83324
xorps xmm0, xmm0
movdqa xmmword [rbp + 0xd0], xmm0
mov qword [rbp + 0xe0], r13
mov rcx, qword [rbp + 0x128]
test rcx, rcx
je 0x7ff627a0e2b5
mov rdx, qword [rbp + 0x138]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff627a0e2b0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x7ff627a0e2b0
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
nop
call fcn.7ff627a02060
nop
mov byte [r9 + 0x2f], 0
lea rcx, [r9 + 1]
call fcn.7ff627a0c0a0
nop
call fcn.7ff627a01fc0
nop
call fcn.7ff627a01fc0
nop
lea rdx, [rbp + 0x48]
call fcn.7ff627a0ee60
lea rcx, [rax + 1]
movzx edx, byte [rax]
xor byte [rcx], dl
xor byte [rax + 2], dl
xor byte [rax + 3], dl
xor byte [rax + 4], dl
xor byte [rax + 5], dl
xor byte [rax + 6], dl
xor byte [rax + 7], dl
xor byte [rax + 8], dl
xor byte [rax + 9], dl
xor byte [rax + 0xa], dl
xor byte [rax + 0xb], dl
xor byte [rax + 0xc], dl
xor byte [rax + 0xd], dl
xor byte [rax + 0xe], dl
xor byte [rax + 0xf], dl
xor byte [rax + 0x10], dl
xor byte [rax + 0x11], dl
xor byte [rax + 0x12], dl
xor byte [rax + 0x13], dl
xor byte [rax + 0x14], dl
xor byte [rax + 0x15], dl
xor byte [rax + 0x16], dl
xor byte [rax + 0x17], dl
xor byte [rax + 0x18], dl
xor byte [rax + 0x19], dl
xor byte [rax + 0x1a], dl
xor byte [rax + 0x1b], dl
xor byte [rax + 0x1c], dl
xor byte [rax + 0x1d], dl
xor byte [rax + 0x1e], dl
xor byte [rax + 0x1f], dl
xor byte [rax + 0x20], dl
mov byte [rax + 0x21], 0
call fcn.7ff627a0c0a0
nop
call fcn.7ff627a02060
int3