Function at 0x7ff65ecbd4a0
Capabilities:
Contain obfuscated stackstrings
Encode data using xor
Get hostname
Get session user name

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0xd0]
sub rsp, 0x1d0
mov rax, qword [str.e41k2]
xor rax, rsp
mov qword [rbp + 0xc0], rax
mov qword [rsp + 0x38], rdx
mov rdi, rcx
mov qword [rsp + 0x40], rcx
mov qword [rsp + 0x68], rdx
xor r12d, r12d
mov dword [rsp + 0x30], r12d
call fcn.7ff65ec983f0
mov dword [rsp + 0x30], 1
mov dword [rsp + 0x34], 0x10
mov dword [rbp - 0x70], 0x63616d55
mov dword [rbp - 0x6c], 0x6b7a7b7e
mov dword [rbp - 0x68], 0x636f607c
mov word [rbp - 0x64], 0x536b
mov ebx, 0x14
mov rax, qword gs:[0x58]
add rbx, qword [rax]
mov eax, dword [rbx]
cmp dword [0x7ff65f42f66c], eax
jg 0x7ff65ecbe59e
lea rdx, [0x7ff65f42f698]
cmp byte [0x7ff65f42f6a6], 0
je 0x7ff65ecbd55d
mov rax, r12
nop dword [rax]
xor byte [rax + rdx], 0x2e
inc rax
cmp rax, 0xf
jb 0x7ff65ecbd550
mov qword [rbp - 0x20], r12
mov qword [rbp - 0x10], r12
mov qword [rbp - 8], 0xf
mov byte [rbp - 0x20], 0
mov r13, 0xffffffffffffffff
mov r8, r13
nop dword [rax + rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x7ff65ecbd580
lea rcx, [rbp - 0x20]
call fcn.7ff65ec85ad0
nop
mov eax, dword [rbx]
cmp dword [0x7ff65f42f6b0], eax
jg 0x7ff65ecbe5fc
movzx eax, byte [0x7ff65f42f692]
test al, al
je 0x7ff65ecbd5fb
xor byte [0x7ff65f42f688], 0x2e
xor byte [0x7ff65f42f689], 0x2e
xor byte [0x7ff65f42f68a], 0x2e
xor byte [0x7ff65f42f68b], 0x2e
xor byte [0x7ff65f42f68c], 0x2e
xor byte [0x7ff65f42f68d], 0x2e
xor byte [0x7ff65f42f68e], 0x2e
xor byte [0x7ff65f42f68f], 0x2e
xor byte [0x7ff65f42f690], 0x2e
xor byte [0x7ff65f42f691], 0x2e
xor al, 0x2e
mov byte [0x7ff65f42f692], al
mov qword [rbp - 0x40], r12
mov qword [rbp - 0x30], r12
mov qword [rbp - 0x28], 0xf
mov byte [rbp - 0x40], 0
lea rdx, [0x7ff65f42f688]
mov r8, r13
nop dword [rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x7ff65ecbd620
lea rcx, [rbp - 0x40]
call fcn.7ff65ec85ad0
nop
mov eax, dword [rbx]
cmp dword [0x7ff65f42f6a8], eax
jg 0x7ff65ecbe656
movzx eax, byte [0x7ff65f42f680]
test al, al
je 0x7ff65ecbd68d
xor byte [0x7ff65f42f678], 0x2e
xor byte [0x7ff65f42f679], 0x2e
xor byte [0x7ff65f42f67a], 0x2e
xor byte [0x7ff65f42f67b], 0x2e
xor byte [0x7ff65f42f67c], 0x2e
xor byte [0x7ff65f42f67d], 0x2e
xor byte [0x7ff65f42f67e], 0x2e
xor byte [0x7ff65f42f67f], 0x2e
xor al, 0x2e
mov byte [0x7ff65f42f680], al
mov qword [rbp + 0x80], r12
mov qword [rbp + 0x90], r12
mov qword [rbp + 0x98], 0xf
mov byte [rbp + 0x80], 0
lea rdx, [0x7ff65f42f678]
mov r8, r13
nop word [rax + rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x7ff65ecbd6c0
lea rcx, [rbp + 0x80]
call fcn.7ff65ec85ad0
nop
mov eax, dword [rbx]
cmp dword [0x7ff65f42f6ac], eax
jg 0x7ff65ecbe6a7
movzx eax, byte [0x7ff65f42f685]
test al, al
je 0x7ff65ecbd6ff
xor byte [0x7ff65f42f684], 0x2e
xor al, 0x2e
mov byte [0x7ff65f42f685], al
mov qword [rbp + 0x40], r12
mov qword [rbp + 0x50], r12
mov qword [rbp + 0x58], 0xf
mov byte [rbp + 0x40], 0
lea rdx, [0x7ff65f42f684]
mov r8, r13
nop dword [rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x7ff65ecbd720
lea rcx, [rbp + 0x40]
call fcn.7ff65ec85ad0
nop
mov eax, dword [rbx]
cmp dword [0x7ff65f42f668], eax
jg 0x7ff65ecbe6e6
movzx eax, byte [0x7ff65f42f671]
test al, al
je 0x7ff65ecbd75c
xor byte [0x7ff65f42f670], 0x2e
xor al, 0x2e
mov byte [0x7ff65f42f671], al
mov qword [rbp + 0x20], r12
mov qword [rbp + 0x30], r12
mov qword [rbp + 0x38], 0xf
mov byte [rbp + 0x20], 0
lea rdx, [0x7ff65f42f670]
mov r8, r13
nop word [rax + rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x7ff65ecbd780
lea rcx, [rbp + 0x20]
call fcn.7ff65ec85ad0
nop
lea rdx, [rsp + 0x34]
lea rcx, [rbp + 0xa0]
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
test eax, eax
je 0x7ff65ecbdaf8
mov qword [rbp], r12
mov qword [rbp + 0x10], r12
mov qword [rbp + 0x18], 7
mov word [rbp], r12w
lea rax, [rbp + 0xa0]
mov r8, r13
nop dword [rax]
inc r8
cmp word [rax + r8*2], 0
jne 0x7ff65ecbd7d0
lea rdx, [rbp + 0xa0]
lea rcx, [rbp]
call fcn.7ff65ec85900
nop
lea rdx, [rbp]
lea rcx, [rsp + 0x48]
call fcn.7ff65ecbd290
mov rdx, rax
lea rcx, [rbp + 0x60]
call fcn.7ff65ecbd130
mov r15, rax
mov qword [rsp + 0x70], r12
mov qword [rbp - 0x80], r12
mov qword [rbp - 0x78], 0xf
mov byte [rsp + 0x70], 0
mov esi, 0xa
cmp qword [rax + 0x10], rsi
cmovb rsi, qword [rax + 0x10]
cmp qword [rax + 0x18], 0x10
jb 0x7ff65ecbd837
mov r15, qword [rax]
movabs rax, 0x7fffffffffffffff
mov ecx, 0x16
cmp rsi, 0xf
ja 0x7ff65ecbd867
mov qword [rbp - 0x80], rsi
mov r8, rsi
mov rdx, r15
lea rcx, [rsp + 0x70]
call fcn.7ff65efe2f30
mov byte [rsp + rsi + 0x70], 0
jmp 0x7ff65ecbd8b3
cmp rsi, rax
ja 0x7ff65ecbe725
mov r14, rsi
or r14, 0xf
cmp r14, rax
jbe 0x7ff65ecbd881
mov r14, rax
jmp 0x7ff65ecbd888
cmp r14, rcx
cmovb r14, rcx
lea rcx, [r14 + 1]
call fcn.7ff65ec844e0
mov rbx, rax
mov qword [rbp - 0x80], rsi
mov qword [rbp - 0x78], r14
mov r8, rsi
mov rdx, r15
mov rcx, rax
call fcn.7ff65efe2f30
mov byte [rbx + rsi], 0
mov qword [rsp + 0x70], rbx
mov dword [rsp + 0x30], 3
lea r8, [rbp + 0x40]
cmp qword [rbp + 0x58], 0x10
cmovae r8, qword [rbp + 0x40]
mov r9, qword [rbp + 0x50]
lea rcx, [rsp + 0x70]
call fcn.7ff65ecc18e0
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x60], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x50], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov eax, 7
mov dword [rsp + 0x30], eax
mov rax, qword [rbp - 0x20]
mov r14, qword [rbp - 0x10]
test r14, r14
je 0x7ff65ecbd9dc
mov rcx, r12
nop dword [rax]
nop word [rax + rax]
lea rsi, [rbp - 0x20]
cmp qword [rbp - 8], 0x10
cmovae rsi, rax
mov r13, rdi
cmp qword [rdi + 0x18], 0x10
jb 0x7ff65ecbd93a
mov r13, qword [rdi]
mov rax, qword [rdi + 0x10]
cmp r14, rax
ja 0x7ff65ecbd9d4
sub rax, r14
cmp rcx, rax
ja 0x7ff65ecbd9d4
lea r15, [rax + r13]
add rcx, r13
movsx r12d, byte [rsi]
lea r8, [r15 + 1]
sub r8, rcx
mov edx, r12d
call fcn.7ff65efe3780
test rax, rax
mov rbx, rax
je 0x7ff65ecbd9d4
mov r8, r14
mov rdx, rsi
mov rcx, rax
call fcn.7ff65efe2e30
test eax, eax
je 0x7ff65ecbd996
inc rbx
lea r8, [r15 + 1]
sub r8, rbx
mov rcx, rbx
jmp 0x7ff65ecbd965
sub rbx, r13
cmp rbx, 0xffffffffffffffff
je 0x7ff65ecbd9d4
lea r9, [rbp - 0x60]
cmp qword [rbp - 0x48], 0x10
cmovae r9, qword [rbp - 0x60]
mov rax, qword [rbp - 0x50]
mov qword [rsp + 0x20], rax
mov r8, r14
mov rdx, rbx
mov rcx, rdi
call fcn.7ff65ec985c0
mov rcx, qword [rbp - 0x50]
add rcx, rbx
mov rax, qword [rbp - 0x20]
jmp 0x7ff65ecbd920
xor r12d, r12d
lea r13, [r12 - 1]
mov rdx, qword [rbp - 0x48]
cmp rdx, 0x10
jb 0x7ff65ecbda18
inc rdx
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff65ecbda12
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x7ff65ecbe72b
call fcn.7ff65efe070c
nop
mov rdx, qword [rbp - 0x78]
cmp rdx, 0x10
jb 0x7ff65ecbda54
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff65ecbda4f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x7ff65ecbe731
call fcn.7ff65efe070c
mov qword [rbp - 0x80], r12
mov qword [rbp - 0x78], 0xf
mov byte [rsp + 0x70], 0
mov rdx, qword [rbp + 0x78]
cmp rdx, 0x10
jb 0x7ff65ecbdaa0
inc rdx
mov rcx, qword [rbp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff65ecbda9b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x7ff65ecbe737
call fcn.7ff65efe070c
mov qword [rbp + 0x70], r12
mov qword [rbp + 0x78], 0xf
mov byte [rbp + 0x60], 0
mov rdx, qword [rbp + 0x18]
cmp rdx, 8
jb 0x7ff65ecbdd54
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff65ecbdd4f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x7ff65ecbe592
jmp 0x7ff65ecbdd4f
mov qword [rsp + 0x70], r12
mov qword [rbp - 0x80], r12
mov qword [rbp - 0x78], 0xf
mov byte [rsp + 0x70], 0
mov esi, 0xa
cmp qword [0x7ff65f42ca68], rsi
cmovb rsi, qword [0x7ff65f42ca68]
lea r15, [0x7ff65f42ca58]
cmp qword [0x7ff65f42ca70], 0x10
cmovae r15, qword [0x7ff65f42ca58]
movabs rax, 0x7fffffffffffffff
mov ecx, 0x16
cmp rsi, 0xf
ja 0x7ff65ecbdb69
mov qword [rbp - 0x80], rsi
mov r8, rsi
mov rdx, r15
lea rcx, [rsp + 0x70]
call fcn.7ff65efe2f30
mov byte [rsp + rsi + 0x70], 0
jmp 0x7ff65ecbdbb5
cmp rsi, rax
ja 0x7ff65ecbe73d
mov r14, rsi
or r14, 0xf
cmp r14, rax
jbe 0x7ff65ecbdb83
mov r14, rax
jmp 0x7ff65ecbdb8a
cmp r14, rcx
cmovb r14, rcx
lea rcx, [r14 + 1]
call fcn.7ff65ec844e0
mov rbx, rax
mov qword [rbp - 0x80], rsi
mov qword [rbp - 0x78], r14
mov r8, rsi
mov rdx, r15
mov rcx, rax
call fcn.7ff65efe2f30
mov byte [rbx + rsi], 0
mov qword [rsp + 0x70], rbx
mov dword [rsp + 0x30], 9
lea r8, [rbp + 0x40]
cmp qword [rbp + 0x58], 0x10
cmovae r8, qword [rbp + 0x40]
mov r9, qword [rbp + 0x50]
lea rcx, [rsp + 0x70]
call fcn.7ff65ecc18e0
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x60], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x50], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov eax, 0x19
mov dword [rsp + 0x30], eax
mov rax, qword [rbp - 0x20]
mov r14, qword [rbp - 0x10]
test r14, r14
je 0x7ff65ecbdcdc
mov rcx, r12
nop dword [rax]
nop dword [rax + rax]
lea rsi, [rbp - 0x20]
cmp qword [rbp - 8], 0x10
cmovae rsi, rax
mov r13, rdi
cmp qword [rdi + 0x18], 0x10
jb 0x7ff65ecbdc3a
mov r13, qword [rdi]
mov rax, qword [rdi + 0x10]
cmp r14, rax
ja 0x7ff65ecbdcd4
sub rax, r14
cmp rcx, rax
ja 0x7ff65ecbdcd4
lea r15, [rax + r13]
add rcx, r13
movsx r12d, byte [rsi]
lea r8, [r15 + 1]
sub r8, rcx
mov edx, r12d
call fcn.7ff65efe3780
test rax, rax
mov rbx, rax
je 0x7ff65ecbdcd4
mov r8, r14
mov rdx, rsi
mov rcx, rax
call fcn.7ff65efe2e30
test eax, eax
je 0x7ff65ecbdc96
inc rbx
lea r8, [r15 + 1]
sub r8, rbx
mov rcx, rbx
jmp 0x7ff65ecbdc65
sub rbx, r13
cmp rbx, 0xffffffffffffffff
je 0x7ff65ecbdcd4
lea r9, [rbp - 0x60]
cmp qword [rbp - 0x48], 0x10
cmovae r9, qword [rbp - 0x60]
mov rax, qword [rbp - 0x50]
mov qword [rsp + 0x20], rax
mov r8, r14
mov rdx, rbx
mov rcx, rdi
call fcn.7ff65ec985c0
mov rcx, qword [rbp - 0x50]
add rcx, rbx
mov rax, qword [rbp - 0x20]
jmp 0x7ff65ecbdc20
xor r12d, r12d
lea r13, [r12 - 1]
mov rdx, qword [rbp - 0x48]
cmp rdx, 0x10
jb 0x7ff65ecbdd18
inc rdx
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff65ecbdd12
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x7ff65ecbe743
call fcn.7ff65efe070c
nop
mov rdx, qword [rbp - 0x78]
cmp rdx, 0x10
jb 0x7ff65ecbdd54
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff65ecbdd4f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x7ff65ecbe749
call fcn.7ff65efe070c
lea rdx, [rsp + 0x34]
lea rcx, [rbp + 0xa0]
call qword [sym.imp.ADVAPI32.dll_GetUserNameW]
test eax, eax
je 0x7ff65ecbe0b3
mov qword [rbp], r12
mov qword [rbp + 0x10], r12
mov qword [rbp + 0x18], 7
mov word [rbp], r12w
lea rax, [rbp + 0xa0]
nop word [rax + rax]
inc r13
cmp word [rax + r13*2], 0
jne 0x7ff65ecbdd90
mov r8, r13
lea rdx, [rbp + 0xa0]
lea rcx, [rbp]
call fcn.7ff65ec85900
nop
lea rdx, [rbp]
lea rcx, [rsp + 0x48]
call fcn.7ff65ecbd290
mov rdx, rax
lea rcx, [rbp + 0x60]
call fcn.7ff65ecbd130
mov r14, rax
mov qword [rsp + 0x70], r12
mov qword [rbp - 0x80], r12
mov qword [rbp - 0x78], 0xf
mov byte [rsp + 0x70], 0
mov esi, 0xa
cmp qword [rax + 0x10], rsi
cmovb rsi, qword [rax + 0x10]
cmp qword [rax + 0x18], 0x10
jb 0x7ff65ecbddfa
mov r14, qword [rax]
cmp rsi, 0xf
ja 0x7ff65ecbde1b
mov qword [rbp - 0x80], rsi
mov r8, rsi
mov rdx, r14
lea rcx, [rsp + 0x70]
call fcn.7ff65efe2f30
mov byte [rsp + rsi + 0x70], 0
jmp 0x7ff65ecbde75
movabs r15, 0x7fffffffffffffff
cmp rsi, r15
ja 0x7ff65ecbe74f
mov rax, rsi
or rax, 0xf
cmp rax, r15
ja 0x7ff65ecbde4a
mov r15, rax
cmp rax, 0x16
mov eax, 0x16
cmovb r15, rax
lea rcx, [r15 + 1]
call fcn.7ff65ec844e0
mov rbx, rax
mov qword [rbp - 0x80], rsi
mov qword [rbp - 0x78], r15
mov r8, rsi
mov rdx, r14
mov rcx, rax
call fcn.7ff65efe2f30
mov byte [rbx + rsi], 0
mov qword [rsp + 0x70], rbx
mov ebx, dword [rsp + 0x30]
or ebx, 0x20
mov dword [rsp + 0x30], ebx
lea r8, [rbp + 0x20]
cmp qword [rbp + 0x38], 0x10
cmovae r8, qword [rbp + 0x20]
mov r9, qword [rbp + 0x30]
lea rcx, [rsp + 0x70]
call fcn.7ff65ecc18e0
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x60], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x50], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
or ebx, 0x40
mov dword [rsp + 0x30], ebx
mov rax, qword [rbp - 0x40]
mov r14, qword [rbp - 0x30]
test r14, r14
je 0x7ff65ecbdf97
mov rcx, r12
nop word [rax + rax]
lea rsi, [rbp - 0x40]
cmp qword [rbp - 0x28], 0x10
cmovae rsi, rax
mov r13, rdi
cmp qword [rdi + 0x18], 0x10
jb 0x7ff65ecbdefa
mov r13, qword [rdi]
mov rax, qword [rdi + 0x10]
cmp r14, rax
ja 0x7ff65ecbdf94
sub rax, r14
cmp rcx, rax
ja 0x7ff65ecbdf94
lea r15, [rax + r13]
add rcx, r13
movsx r12d, byte [rsi]
lea r8, [r15 + 1]
sub r8, rcx
mov edx, r12d
call fcn.7ff65efe3780
test rax, rax
mov rbx, rax
je 0x7ff65ecbdf94
mov r8, r14
mov rdx, rsi
mov rcx, rax
call fcn.7ff65efe2e30
test eax, eax
je 0x7ff65ecbdf56
inc rbx
lea r8, [r15 + 1]
sub r8, rbx
mov rcx, rbx
jmp 0x7ff65ecbdf25
sub rbx, r13
cmp rbx, 0xffffffffffffffff
je 0x7ff65ecbdf94
lea r9, [rbp - 0x60]
cmp qword [rbp - 0x48], 0x10
cmovae r9, qword [rbp - 0x60]
mov rax, qword [rbp - 0x50]
mov qword [rsp + 0x20], rax
mov r8, r14
mov rdx, rbx
mov rcx, rdi
call fcn.7ff65ec985c0
mov rcx, qword [rbp - 0x50]
add rcx, rbx
mov rax, qword [rbp - 0x40]
jmp 0x7ff65ecbdee0
xor r12d, r12d
mov rdx, qword [rbp - 0x48]
cmp rdx, 0x10
jb 0x7ff65ecbdfd3
inc rdx
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff65ecbdfcd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x7ff65ecbe755
call fcn.7ff65efe070c
nop
mov rdx, qword [rbp - 0x78]
cmp rdx, 0x10
jb 0x7ff65ecbe00f
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff65ecbe00a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x7ff65ecbe75b
call fcn.7ff65efe070c
mov qword [rbp - 0x80], r12
mov qword [rbp - 0x78], 0xf
mov byte [rsp + 0x70], 0
mov rdx, qword [rbp + 0x78]
cmp rdx, 0x10
jb 0x7ff65ecbe05b
inc rdx
mov rcx, qword [rbp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff65ecbe056
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x7ff65ecbe761
call fcn.7ff65efe070c
mov qword [rbp + 0x70], r12
mov qword [rbp + 0x78], 0xf
mov byte [rbp + 0x60], 0
mov rdx, qword [rbp + 0x18]
cmp rdx, 8
jb 0x7ff65ecbe30f
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff65ecbe30a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x7ff65ecbe598
jmp 0x7ff65ecbe30a
mov qword [rsp + 0x70], r12
mov qword [rbp - 0x80], r12
mov qword [rbp - 0x78], 0xf
mov byte [rsp + 0x70], 0
mov esi, 0xa
cmp qword [0x7ff65f42ca68], rsi
cmovb rsi, qword [0x7ff65f42ca68]
lea r14, [0x7ff65f42ca58]
cmp qword [0x7ff65f42ca70], 0x10
cmovae r14, qword [0x7ff65f42ca58]
cmp rsi, 0xf
ja 0x7ff65ecbe115
mov qword [rbp - 0x80], rsi
mov r8, rsi
mov rdx, r14
lea rcx, [rsp + 0x70]
call fcn.7ff65efe2f30
mov byte [rsp + rsi + 0x70], 0
jmp 0x7ff65ecbe16f
movabs r15, 0x7fffffffffffffff
cmp rsi, r15
ja 0x7ff65ecbe767
mov rax, rsi
or rax, 0xf
cmp rax, r15
ja 0x7ff65ecbe144
mov r15, rax
cmp rax, 0x16
mov eax, 0x16
cmovb r15, rax
lea rcx, [r15 + 1]
call fcn.7ff65ec844e0
mov rbx, rax
mov qword [rbp - 0x80], rsi
mov qword [rbp - 0x78], r15
mov r8, rsi
mov rdx, r14
mov rcx, rax
call fcn.7ff65efe2f30
mov byte [rbx + rsi], 0
mov qword [rsp + 0x70], rbx
mov ebx, dword [rsp + 0x30]
bts ebx, 7
mov dword [rsp + 0x30], ebx
lea r8, [rbp + 0x20]
cmp qword [rbp + 0x38], 0x10
cmovae r8, qword [rbp + 0x20]
mov r9, qword [rbp + 0x30]
lea rcx, [rsp + 0x70]
call fcn.7ff65ecc18e0
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x60], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x50], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
bts ebx, 8
mov dword [rsp + 0x30], ebx
mov rax, qword [rbp - 0x40]
mov r14, qword [rbp - 0x30]
test r14, r14
je 0x7ff65ecbe297
mov rcx, r12
nop dword [rax]
nop word [rax + rax]
lea rsi, [rbp - 0x40]
cmp qword [rbp - 0x28], 0x10
cmovae rsi, rax
mov r13, rdi
cmp qword [rdi + 0x18], 0x10
jb 0x7ff65ecbe1fa
mov r13, qword [rdi]
mov rax, qword [rdi + 0x10]
cmp r14, rax
ja 0x7ff65ecbe294
sub rax, r14
cmp rcx, rax
ja 0x7ff65ecbe294
lea r15, [rax + r13]
add rcx, r13
movsx r12d, byte [rsi]
lea r8, [r15 + 1]
sub r8, rcx
mov edx, r12d
call fcn.7ff65efe3780
test rax, rax
mov rbx, rax
je 0x7ff65ecbe294
mov r8, r14
mov rdx, rsi
mov rcx, rax
call fcn.7ff65efe2e30
test eax, eax
je 0x7ff65ecbe256
inc rbx
lea r8, [r15 + 1]
sub r8, rbx
mov rcx, rbx
jmp 0x7ff65ecbe225
sub rbx, r13
cmp rbx, 0xffffffffffffffff
je 0x7ff65ecbe294
lea r9, [rbp - 0x60]
cmp qword [rbp - 0x48], 0x10
cmovae r9, qword [rbp - 0x60]
mov rax, qword [rbp - 0x50]
mov qword [rsp + 0x20], rax
mov r8, r14
mov rdx, rbx
mov rcx, rdi
call fcn.7ff65ec985c0
mov rcx, qword [rbp - 0x50]
add rcx, rbx
mov rax, qword [rbp - 0x40]
jmp 0x7ff65ecbe1e0
xor r12d, r12d
mov rdx, qword [rbp - 0x48]
cmp rdx, 0x10
jb 0x7ff65ecbe2d3
inc rdx
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff65ecbe2cd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x7ff65ecbe76d
call fcn.7ff65efe070c
nop
mov rdx, qword [rbp - 0x78]
cmp rdx, 0x10
jb 0x7ff65ecbe30f
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff65ecbe30a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x7ff65ecbe773
call fcn.7ff65efe070c
mov qword [rsp + 0x70], r12
mov qword [rbp - 0x80], r12
mov qword [rbp - 0x78], 0xf
mov byte [rsp + 0x70], 0
cmp qword [0x7ff65f42ca68], 0xa
mov r8d, 0xa
cmovb r8, qword [0x7ff65f42ca68]
cmp qword [0x7ff65f42ca70], 0x10
lea rdx, [0x7ff65f42ca58]
cmovae rdx, qword [0x7ff65f42ca58]
lea rcx, [rsp + 0x70]
call fcn.7ff65ec85ad0
or dword [rsp + 0x30], 0x200
mov r15, qword [rbp + 0x98]
mov rsi, qword [rbp + 0x80]
mov r14, qword [rbp + 0x90]
test r14, r14
je 0x7ff65ecbe3f2
mov rbx, qword [rbp - 0x80]
nop dword [rax]
nop word [rax + rax]
lea r9, [rbp + 0x80]
cmp r15, 0x10
cmovae r9, rsi
mov rcx, rdi
cmp qword [rdi + 0x18], 0x10
jb 0x7ff65ecbe3ac
mov rcx, qword [rdi]
mov qword [rsp + 0x20], r14
mov r8, r12
mov rdx, qword [rdi + 0x10]
call fcn.7ff65ec99470
mov r12, rax
cmp rax, 0xffffffffffffffff
je 0x7ff65ecbe3f2
lea r9, [rsp + 0x70]
cmp qword [rbp - 0x78], 0x10
cmovae r9, qword [rsp + 0x70]
mov qword [rsp + 0x20], rbx
mov r8, r14
mov rdx, rax
mov rcx, rdi
call fcn.7ff65ec985c0
mov rbx, qword [rbp - 0x80]
add r12, rbx
jmp 0x7ff65ecbe390
mov rdx, qword [rbp - 0x78]
cmp rdx, 0x10
jb 0x7ff65ecbe42f
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff65ecbe429
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x7ff65ecbe779
call fcn.7ff65efe070c
nop
mov rdx, qword [rbp + 0x38]
cmp rdx, 0x10
jb 0x7ff65ecbe46b
inc rdx
mov rcx, qword [rbp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff65ecbe465
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x7ff65ecbe77f
call fcn.7ff65efe070c
nop
mov rdx, qword [rbp + 0x58]
cmp rdx, 0x10
jb 0x7ff65ecbe4a7
inc rdx
mov rcx, qword [rbp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff65ecbe4a1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x7ff65ecbe785
call fcn.7ff65efe070c
nop
cmp r15, 0x10
jb 0x7ff65ecbe4df
lea rdx, [r15 + 1]
mov rax, rsi
cmp rdx, 0x1000
jb 0x7ff65ecbe4d6
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x7ff65ecbe78b
mov rcx, rsi
call fcn.7ff65efe070c
nop
mov rax, qword [rbp - 0x28]
cmp rax, 0x10
jb 0x7ff65ecbe51c
lea rdx, [rax + 1]
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff65ecbe516
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x7ff65ecbe791
call fcn.7ff65efe070c
nop
mov rax, qword [rbp - 8]
cmp rax, 0x10
jb 0x7ff65ecbe555
lea rdx, [rax + 1]
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff65ecbe54f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x7ff65ecbe58c
call fcn.7ff65efe070c
nop
mov rcx, qword [rsp + 0x38]
call fcn.7ff65ec85a50
mov rax, rdi
mov rcx, qword [rbp + 0xc0]
xor rcx, rsp
call fcn.7ff65efe06b0
mov rbx, qword [rsp + 0x220]
add rsp, 0x1d0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.7ff65efe777c
nop
call fcn.7ff65efe777c
int3
call fcn.7ff65efe777c
nop
lea rcx, [0x7ff65f42f66c]
call fcn.7ff65efe08c8
cmp dword [0x7ff65f42f66c], 0xffffffff
jne 0x7ff65ecbd539
movsd xmm0, qword [rbp - 0x70]
movsd qword [0x7ff65f42f698], xmm0
mov eax, dword [rbp - 0x68]
mov dword [0x7ff65f42f6a0], eax
movzx eax, word [rbp - 0x64]
mov word [0x7ff65f42f6a4], ax
mov byte [0x7ff65f42f6a6], 0x2e
lea rcx, [0x7ff65f0194b0]
call fcn.7ff65efe0c10
lea rcx, [0x7ff65f42f66c]
call fcn.7ff65efe0868
jmp 0x7ff65ecbd539
lea rcx, [0x7ff65f42f6b0]
call fcn.7ff65efe08c8
cmp dword [0x7ff65f42f6b0], 0xffffffff
jne 0x7ff65ecbd5a2
mov dword [0x7ff65f42f688], 0x6b7d7b55
mov dword [0x7ff65f42f68c], 0x636f607c
mov word [0x7ff65f42f690], 0x536b
mov byte [0x7ff65f42f692], 0x2e
lea rcx, [0x7ff65f019490]
call fcn.7ff65efe0c10
lea rcx, [0x7ff65f42f6b0]
call fcn.7ff65efe0868
jmp 0x7ff65ecbd5a2
lea rcx, [0x7ff65f42f6a8]
call fcn.7ff65efe08c8
cmp dword [0x7ff65f42f6a8], 0xffffffff
jne 0x7ff65ecbd642
mov dword [0x7ff65f42f678], 0x606f7c55
mov dword [0x7ff65f42f67c], 0x5363616a
mov byte [0x7ff65f42f680], 0x2e
lea rcx, [0x7ff65f019470]
call fcn.7ff65efe0c10
lea rcx, [0x7ff65f42f6a8]
call fcn.7ff65efe0868
jmp 0x7ff65ecbd642
lea rcx, [0x7ff65f42f6ac]
call fcn.7ff65efe08c8
cmp dword [0x7ff65f42f6ac], 0xffffffff
jne 0x7ff65ecbd6e5
mov word [0x7ff65f42f684], 0x2e6d
lea rcx, [0x7ff65f019460]
call fcn.7ff65efe0c10
lea rcx, [0x7ff65f42f6ac]
call fcn.7ff65efe0868
jmp 0x7ff65ecbd6e5
lea rcx, [0x7ff65f42f668]
call fcn.7ff65efe08c8
cmp dword [0x7ff65f42f668], 0xffffffff
jne 0x7ff65ecbd742
mov word [0x7ff65f42f670], 0x2e7b
lea rcx, [0x7ff65f019450]
call fcn.7ff65efe0c10
lea rcx, [0x7ff65f42f668]
call fcn.7ff65efe0868
jmp 0x7ff65ecbd742
call fcn.7ff65ec84720
nop
call fcn.7ff65efe777c
nop
call fcn.7ff65efe777c
nop
call fcn.7ff65efe777c
nop
call fcn.7ff65ec84720
nop
call fcn.7ff65efe777c
nop
call fcn.7ff65efe777c
nop
call fcn.7ff65ec84720
nop
call fcn.7ff65efe777c
nop
call fcn.7ff65efe777c
nop
call fcn.7ff65efe777c
nop
call fcn.7ff65ec84720
nop
call fcn.7ff65efe777c
nop
call fcn.7ff65efe777c
int3
call fcn.7ff65efe777c
nop
call fcn.7ff65efe777c
nop
call fcn.7ff65efe777c
nop
call fcn.7ff65efe777c
nop
call fcn.7ff65efe777c
int3