Function at 0x7ff65c59b0c0
Capabilities:
Authenticate hmac
Contain obfuscated stackstrings
Create process on windows
Parse pe header
Terminate process

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x130]
sub rsp, 0x230
lea rdi, [rbp + 0x158]
movabs rax, 0xff00ff00ff00ff00
mov qword [rbp - 0x68], rax
mov qword [rbp - 0x60], rdi
mov r12, qword [rdi]
xor r12, rax
mov qword [rbp - 0x70], r12
mov qword [rdi], 0
mov r8d, 0x104
lea rdx, [rbp + 0x20]
xor ecx, ecx
call qword [sym.imp.kernel32.dll_GetModuleFileNameA]
test eax, eax
je 0x7ff65c59c8f3
mov dword [rbp - 0x50], 0x70
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp - 0x4c], xmm0
movups xmmword [rbp - 0x3c], xmm0
movups xmmword [rbp - 0x2c], xmm0
movups xmmword [rbp - 0x1c], xmm0
movups xmmword [rbp - 0xc], xmm0
movups xmmword [rbp + 4], xmm0
mov qword [rbp + 0x14], rax
mov dword [rbp + 0x1c], eax
mov dword [rsp + 0x70], 0xd2c0d8da
mov word [rsp + 0x74], 0x71c7
movups xmmword [rsp + 0x76], xmm0
movabs rdx, 0x28834bbbd2d2ae1a
movabs r13, 0x3b87dd660b978aa6
movabs r10, 0xec696ab493a99fe2
mov r14, qword [0x7ff65c7ab3c0]
mov r15, qword [0x7ff65c7ab3b8]
movzx r11d, byte [rbp + 0x160]
nop
mov r8, r15
mov r9, r14
nop word [rax + rax]
xor ebx, ebx
movabs rcx, 0xf067841cfca438e
cmp rbx, 0x16
jae 0x7ff65c59be4a
movzx edi, byte [rsp + rbx + 0x70]
movzx esi, dil
nop
cmp r8, rbx
ja 0x7ff65c59be41
lea rax, [r9 + 1]
cmp r8, rax
jae 0x7ff65c59b1fb
add rcx, rbx
mov rax, rcx
and rax, rdi
imul r11, rax, 0xfffffffffffffffe
add r11, rcx
add r11, rdi
add r11b, 0x1e
jmp 0x7ff65c59b234
je 0x7ff65c59bdbf
inc rax
cmp r8, rax
je 0x7ff65c59bd55
lea rax, [r9 + 4]
cmp r8, rax
je 0x7ff65c59bd15
lea rax, [r9 + 5]
cmp r8, rax
je 0x7ff65c59bcdc
lea rax, [r9 + 3]
cmp r8, rax
je 0x7ff65c59bcaf
movzx esi, dil
nop dword [rax + rax]
cmp r9, rbx
ja 0x7ff65c59be38
lea rax, [r9 + 0x64]
cmp r8, rax
jae 0x7ff65c59b260
lea rdx, [rbx + r13]
mov ecx, 0x3b
jmp 0x7ff65c59b470
lea rax, [r9 + 1]
cmp r8, rax
je 0x7ff65c59bc55
inc rax
cmp r8, rax
je 0x7ff65c59bc28
lea rax, [r9 + 3]
cmp r8, rax
je 0x7ff65c59bc09
lea rax, [r9 + 4]
cmp r8, rax
je 0x7ff65c59bbef
lea rax, [r9 + 5]
cmp r8, rax
je 0x7ff65c59bbd0
lea rax, [r9 + r8]
cmp rax, rbx
jbe 0x7ff65c59b922
nop dword [rax]
lea rcx, [r9 + 6]
cmp r8, rcx
je 0x7ff65c59b903
lea rax, [r9 + 0xa]
cmp r8, rax
je 0x7ff65c59b8c9
lea rax, [r9 + 0x28]
cmp r8, rax
je 0x7ff65c59b892
lea rax, [r9 + 0x64]
cmp r8, rax
je 0x7ff65c59b86c
lea rax, [r9 + 0x3e8]
cmp r8, rax
je 0x7ff65c59b849
lea rax, [r9 + 0x61]
cmp r8, rax
je 0x7ff65c59b822
lea rax, [r9 + 9]
cmp r8, rax
je 0x7ff65c59b7fb
lea rax, [r9 + 0x20]
cmp r8, rax
je 0x7ff65c59b7d5
lea rax, [r9 + 0x42]
cmp r8, rax
je 0x7ff65c59b7b2
lea rax, [r9 + 0x200]
cmp r8, rax
je 0x7ff65c59b2b0
mov r8, rcx
lea r9, [rcx + 0x1000]
lea rcx, [r9 + 0xa]
cmp r8, rcx
jb 0x7ff65c59be19
lea rax, [r9 + 0x28]
cmp r8, rax
jb 0x7ff65c59bdfe
lea rax, [r9 + 0x64]
cmp r8, rax
jb 0x7ff65c59b4c4
lea rax, [r9 + 0x3e8]
cmp r8, rax
jb 0x7ff65c59b491
lea rax, [r9 + 5]
cmp r8, rax
jb 0x7ff65c59b468
lea rax, [r9 + 9]
cmp r8, rax
jb 0x7ff65c59b755
lea rax, [r9 + 0x20]
cmp r8, rax
jb 0x7ff65c59b707
lea rax, [r9 + 0x42]
cmp r8, rax
jb 0x7ff65c59b6bb
lea rax, [r9 + 0x200]
cmp r8, rax
jb 0x7ff65c59b680
lea rax, [r9 + 0x1000]
cmp r8, rax
jb 0x7ff65c59b2b0
mov r8, rcx
lea r9, [rcx + 0x41]
lea rcx, [r9 + 0x28]
cmp r8, rcx
ja 0x7ff65c59b65b
lea rax, [r9 + 0x64]
cmp r8, rax
ja 0x7ff65c59b632
lea rax, [r9 + 2]
cmp r8, rax
ja 0x7ff65c59b609
lea rax, [r9 + 5]
cmp r8, rax
ja 0x7ff65c59b5e4
lea rax, [r9 + 9]
cmp r8, rax
ja 0x7ff65c59b5bf
lea rax, [r9 + 0x20]
cmp r8, rax
ja 0x7ff65c59b597
lea rax, [r9 + 0x42]
cmp r8, rax
ja 0x7ff65c59b55e
lea rax, [r9 + 0x200]
cmp r8, rax
ja 0x7ff65c59b522
lea rax, [r9 + 0x1000]
cmp r8, rax
ja 0x7ff65c59b4f6
lea rax, [r9 + 0x41]
cmp r8, rax
ja 0x7ff65c59b2b0
mov r8, rcx
lea r9, [rcx + 0x10]
jmp 0x7ff65c59b2b0
add rdx, rbx
mov ecx, 0x25
movzx eax, dl
and al, dil
sub cl, al
lea r11d, [rcx + rcx]
add r11b, sil
add r11b, dl
movabs rdx, 0x28834bbbd2d2ae1a
jmp 0x7ff65c59b2a0
movabs rdx, 0xa765b38333e26fe
add rdx, rbx
movzx eax, dl
and al, dil
mov ecx, 7
sub cl, al
lea r11d, [rcx + rcx]
add r11b, sil
add r11b, dl
movabs rdx, 0x28834bbbd2d2ae1a
jmp 0x7ff65c59b240
lea rdx, [rbx + r10]
movzx eax, dl
and al, dil
add al, al
movzx r11d, sil
sub r11b, al
sub dl, 0x2e
add r11b, dl
movabs rdx, 0x28834bbbd2d2ae1a
movabs rcx, 0xf067841cfca438e
jmp 0x7ff65c59b1d0
movabs rdx, 0xdc3eeb305cbc5530
add rdx, rbx
movzx eax, dl
and al, dil
add al, al
movzx r11d, sil
sub r11b, al
sub r11b, 0x50
add r11b, dl
movzx r10d, bl
jmp 0x7ff65c59bc6f
movabs rdx, 0xbe31faacbd27ce14
add rdx, rbx
movzx eax, dl
and al, dil
mov ecx, 0x3a
sub cl, al
lea r11d, [rcx + rcx]
add r11b, sil
add r11b, dl
inc r9
dec rbx
inc rbx
movabs rdx, 0x28834bbbd2d2ae1a
jmp 0x7ff65c59b1b2
movabs rdx, 0xa0250a291d9346f8
add rdx, rbx
movzx eax, dl
and al, dil
mov ecx, 0x1c
sub cl, al
lea r11d, [rcx + rcx]
add r11b, sil
add r11b, dl
dec rbx
inc rbx
movabs rdx, 0x28834bbbd2d2ae1a
jmp 0x7ff65c59b1b2
movabs rdx, 0x821819a57dfebfdc
add rdx, rbx
movzx eax, dl
and al, dil
add al, al
movzx r11d, sil
sub r11b, al
sub r11b, 4
add r11b, dl
jmp 0x7ff65c59bcf5
movabs rcx, 0x640b2921de6a38c0
add rcx, rbx
movzx eax, cl
and al, dil
add al, al
sub sil, al
lea r11d, [rcx + rsi]
sub r11b, 0x40
jmp 0x7ff65c59bd2f
movabs rcx, 0x45fe389e3ed5b1a4
add rcx, rbx
movzx eax, cl
and al, dil
add al, al
sub sil, al
lea r11d, [rcx + rsi]
sub r11b, 0x7c
jmp 0x7ff65c59bd32
movabs rdx, 0x27f1481a9f412a88
add rdx, rbx
movzx eax, dl
and al, dil
mov ecx, 0x24
sub cl, al
lea r11d, [rcx + rcx]
add r11b, sil
add r11b, dl
jmp 0x7ff65c59bd73
movabs rdx, 0x9e45796ffaca36c
add rdx, rbx
movzx eax, dl
and al, dil
mov ecx, 6
sub cl, al
lea r11d, [rcx + rcx]
add r11b, sil
add r11b, dl
jmp 0x7ff65c59bd96
movabs rcx, 0xebd7671360181c50
add rcx, rbx
movzx eax, cl
and al, dil
add al, al
sub sil, al
lea r11d, [rcx + rsi]
sub r11b, 0x30
jmp 0x7ff65c59bde1
movabs rdx, 0xa0b70dca5124ca8a
add rdx, rbx
movzx eax, dl
and al, dil
mov ecx, 0x1d
sub cl, al
lea r11d, [rcx + rcx]
add r11b, sil
add r11b, dl
mov byte [rsp + rbx + 0x70], r11b
inc rbx
movabs rdx, 0x28834bbbd2d2ae1a
jmp 0x7ff65c59b1b2
movabs rcx, 0x82aa1d46b190436e
add rcx, rbx
movzx eax, cl
and al, dil
add al, al
sub sil, al
lea r11d, [rcx + rsi]
sub r11b, 2
cmp r9, 0x10
jb 0x7ff65c59b6a4
movzx r10d, bl
lea ecx, [r10 - 0x6c]
movzx eax, cl
and al, dil
add al, al
sub cl, al
add cl, dil
lea r11d, [rcx*2 - 0x18]
movzx esi, dil
jmp 0x7ff65c59bc6f
movabs rcx, 0x649d2cc311fbbc52
add rcx, rbx
movzx eax, dil
and al, cl
add al, al
sub sil, al
lea r11d, [rcx + rsi]
sub r11b, 0x3e
cmp r8, 8
jae 0x7ff65c59bb92
lea rax, [r9 + 0x61]
cmp r8, rax
jbe 0x7ff65c59baba
lea ecx, [rbx + 0x7c]
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [rdi + rcx]
sub r11b, 0x64
jmp 0x7ff65c59b6db
movabs rcx, 0x46903c3f72673536
add rcx, rbx
movzx eax, dil
and al, cl
add al, al
sub sil, al
lea r11d, [rcx + rsi]
sub r11b, 0x7a
lea rax, [r9 + r8]
cmp rax, 4
je 0x7ff65c59bbb0
lea rax, [r9 + 0x3e8]
cmp r8, rax
jbe 0x7ff65c59ba07
lea edx, [rbx - 0x2a]
movzx eax, dl
and al, dil
mov ecx, 0x13
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, dil
jmp 0x7ff65c59b727
movabs rax, 0x652f3064458d3fe4
add rax, rbx
and dil, al
add dil, dil
sub sil, dil
lea r11d, [rax + rsi]
sub r11b, 0x3c
jmp 0x7ff65c59bde1
movabs rcx, 0x47223fe0a5f8b8c8
add rcx, rbx
and dil, cl
add dil, dil
movzx r11d, sil
sub r11b, dil
sub r11b, 0x78
add r11b, cl
jmp 0x7ff65c59bd96
movabs rcx, 0x29154f5d066431ac
add rcx, rbx
and dil, cl
mov eax, 0x26
sub al, dil
lea r11d, [rax + rax]
add r11b, sil
add r11b, cl
jmp 0x7ff65c59bd73
movabs rcx, 0xb085ed966cfaa90
add rcx, rbx
and dil, cl
mov eax, 8
sub al, dil
lea r11d, [rax + rax]
add r11b, sil
add r11b, cl
jmp 0x7ff65c59bd32
movabs rax, 0xecfb6e55c73b2374
add rax, rbx
and dil, al
add dil, dil
sub sil, dil
lea r11d, [rax + rsi]
sub r11b, 0x2c
jmp 0x7ff65c59bd2f
movabs rcx, 0xceee7dd227a69c58
add rcx, rbx
and dil, cl
add dil, dil
movzx r11d, sil
sub r11b, dil
sub r11b, 0x68
add r11b, cl
jmp 0x7ff65c59bcf5
movabs rcx, 0xb0e18d4e8812153c
add rcx, rbx
and dil, cl
mov eax, 0x2e
sub al, dil
lea r11d, [rax + rax]
add r11b, sil
add r11b, cl
dec rbx
inc rbx
movabs rdx, 0x28834bbbd2d2ae1a
jmp 0x7ff65c59b1b2
movabs rcx, 0x92d49ccae87d8e20
add rcx, rbx
and dil, cl
mov eax, 0x10
sub al, dil
lea r11d, [rax + rax]
add r11b, sil
add r11b, cl
inc r9
dec rbx
inc rbx
movabs rdx, 0x28834bbbd2d2ae1a
jmp 0x7ff65c59b1b2
movzx r10d, bl
lea ecx, [r10 + 4]
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [rdi + rcx]
sub r11b, 0x1c
jmp 0x7ff65c59bc6f
lea rcx, [r9 + 4]
cmp r8, rcx
jae 0x7ff65c59b94a
lea edx, [rbx - 0x72]
movzx eax, dl
and al, dil
mov ecx, 0xf
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, dil
jmp 0x7ff65c59b775
lea rax, [r9 + 1]
cmp r8, rax
jne 0x7ff65c59b96d
lea ecx, [rbx + 0x4c]
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [rdi + rcx]
sub r11b, 0x14
jmp 0x7ff65c59bde1
inc rax
cmp r8, rax
jne 0x7ff65c59b994
lea edx, [rbx + 0x68]
movzx eax, dl
and al, dil
mov ecx, 0x14
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, dil
jmp 0x7ff65c59bd96
lea rax, [r9 + 3]
cmp r8, rax
jne 0x7ff65c59b9b7
lea ecx, [rbx - 0x60]
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [rdi + rcx]
sub r11b, 0x60
jmp 0x7ff65c59bd32
cmp r8, rcx
jne 0x7ff65c59b9db
lea edx, [rbx - 0x28]
movzx eax, dl
and al, dil
mov ecx, 0xc
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, dil
jmp 0x7ff65c59bcf5
lea rax, [r9 + 2]
cmp r8, rax
jne 0x7ff65c59b775
movzx r10d, bl
lea ecx, [r10 + 0x2c]
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [rdi + rcx]
sub r11b, 0x34
jmp 0x7ff65c59bc6f
lea rcx, [r9 + 1]
cmp r8, rcx
jne 0x7ff65c59ba38
movzx r10d, bl
lea edx, [r10 - 0xe]
movzx eax, dl
and al, dil
mov ecx, 0x31
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, dil
movzx esi, dil
jmp 0x7ff65c59bc6f
lea rax, [r9 + 3]
cmp r8, rax
jne 0x7ff65c59ba6b
lea ecx, [rbx + 0x2a]
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [rdi + rcx]
sub r11b, 0x26
dec rbx
inc rbx
movabs rdx, 0x28834bbbd2d2ae1a
jmp 0x7ff65c59b1b2
lea rax, [rcx + 1]
cmp r8, rax
jne 0x7ff65c59ba93
lea edx, [rbx + 0x46]
movzx eax, dl
and al, dil
mov ecx, 0xb
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, dil
jmp 0x7ff65c59bcf1
lea rax, [r9 + 5]
cmp r8, rax
jne 0x7ff65c59b727
lea ecx, [rbx + 0x7e]
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [rdi + rcx]
sub r11b, 0x72
jmp 0x7ff65c59bd32
lea rax, [r9 + 1]
cmp r8, rax
jne 0x7ff65c59badd
lea ecx, [rbx - 0x68]
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [rdi + rcx]
sub r11b, 0x28
jmp 0x7ff65c59bde1
inc rax
cmp r8, rax
jne 0x7ff65c59baff
lea ecx, [rbx + 8]
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [rdi + rcx]
sub r11b, 0x38
jmp 0x7ff65c59bd2f
lea rax, [r9 + 6]
cmp r8, rax
jne 0x7ff65c59bb27
lea edx, [rbx + 0x24]
movzx eax, dl
and al, dil
mov ecx, 2
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, dil
jmp 0x7ff65c59bcf1
lea rax, [r9 + 5]
cmp r8, rax
jne 0x7ff65c59bb62
lea edx, [rbx + 0x5c]
movzx eax, dl
and al, dil
mov ecx, 0x3e
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, dil
inc r9
dec rbx
inc rbx
movabs rdx, 0x28834bbbd2d2ae1a
jmp 0x7ff65c59b1b2
lea rax, [r9 + 9]
cmp r8, rax
jne 0x7ff65c59b6db
movzx r10d, bl
lea ecx, [r10 + 0x78]
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [rdi + rcx]
sub r11b, 0x48
movzx esi, dil
jmp 0x7ff65c59bc6f
lea edx, [rbx - 0x50]
movzx eax, dl
and al, dil
movzx ecx, dil
sub cl, al
add cl, 0x18
lea r11d, [rcx + rcx]
add r11b, dl
jmp 0x7ff65c59bcf1
lea edx, [rbx - 0x34]
movzx eax, dl
and al, dil
mov ecx, 0x36
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
movzx esi, dil
jmp 0x7ff65c59bd73
lea edx, [rbx + 0x6a]
movzx eax, dl
and al, dil
mov ecx, 0xd
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, dil
jmp 0x7ff65c59bd73
lea ecx, [rbx + 0x4e]
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [rdi + rcx]
sub r11b, 0x22
jmp 0x7ff65c59bd32
lea edx, [rbx + 0x16]
movzx eax, dl
and al, dil
mov ecx, 0x33
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, dil
jmp 0x7ff65c59bcf5
lea ecx, [rbx - 0x22]
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [rdi + rcx]
sub r11b, 0x12
inc r9
dec rbx
inc rbx
movabs rdx, 0x28834bbbd2d2ae1a
jmp 0x7ff65c59b1b2
movzx r10d, bl
lea ecx, [r10 - 0x3e]
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [rdi + rcx]
sub r11b, 0x4e
add r10b, 0x22
movzx eax, r10b
and al, sil
mov ecx, 9
sub cl, al
add cl, cl
add cl, r10b
add cl, sil
mov byte [rsp + rbx + 0x70], cl
movabs r10, 0xec696ab493a99fe2
inc r9
dec rbx
inc rbx
movabs rdx, 0x28834bbbd2d2ae1a
jmp 0x7ff65c59b1b2
lea ecx, [rbx + 0x6e]
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [rdi + rcx]
sub r11b, 2
inc r9
dec rbx
inc rbx
movabs rdx, 0x28834bbbd2d2ae1a
jmp 0x7ff65c59b1b2
lea ecx, [rbx + 0x36]
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [rdi + rcx]
sub r11b, 0x7a
movzx esi, dil
lea ecx, [rbx + 0x3e]
movzx eax, cl
and al, sil
mov edx, 0x27
sub dl, al
add dl, dl
add dl, cl
add dl, sil
add dl, r11b
mov byte [rsp + rbx + 0x70], dl
jmp 0x7ff65c59bd2f
lea edx, [rbx + 0x1a]
movzx eax, dl
and al, dil
mov ecx, 0x25
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, dil
add r8, r9
movzx eax, r11b
mov rcx, 0xffffffffffffffff
sub rcx, rax
add rbx, rcx
inc rbx
movabs rdx, 0x28834bbbd2d2ae1a
jmp 0x7ff65c59b1b2
movabs rax, 0x692d49ccae87d8e2
add rax, rbx
and dil, al
add dil, dil
sub al, dil
lea r11d, [rsi + rax]
sub r11b, 0x2e
lea ecx, [rbx + 0x5a]
movzx eax, cl
and al, sil
add al, al
sub cl, al
sub cl, 0x76
add cl, sil
movzx eax, cl
mov byte [rsp + rbx + 0x70], al
inc r9
add rax, r9
sub rbx, rax
lea ecx, [rbx - 0x18]
movzx eax, cl
and al, sil
add al, al
sub cl, al
sub cl, 0x58
add cl, sil
mov byte [rsp + rbx + 0x70], cl
inc r8
mov rax, 0xffffffffffffffff
sub rax, r8
add rbx, rax
jmp 0x7ff65c59bde1
movabs rcx, 0x2d1368c56f5ecaaa
add rcx, rbx
and dil, cl
mov eax, 0x2d
sub al, dil
lea r11d, [rax + rax]
add r11b, sil
add r11b, cl
movzx eax, byte [rsp + rbx + 0x70]
add rax, r9
add rbx, rax
inc rbx
movabs rdx, 0x28834bbbd2d2ae1a
jmp 0x7ff65c59b1b2
sub bl, 0x3a
movzx eax, dil
and al, bl
add al, al
sub dil, al
lea r11d, [rbx + rdi]
sub r11b, 0x6a
jmp 0x7ff65c59b1a6
sub bl, 0x56
movzx eax, dil
and al, bl
mov ecx, 0x2d
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dil
add r11b, bl
jmp 0x7ff65c59b19e
lea rax, [rbp + 0x16562d8]
jmp 0x7ff65c59be4f
lea rax, [rbp + 0xefa666]
jmp 0x7ff65c59be4f
lea rax, [rsp + 0x70]
mov qword [rbp - 0x40], rax
lea rax, [rbp + 0x20]
mov qword [rbp - 0x38], rax
mov qword [rbp - 0x48], 0
mov dword [rbp - 0x20], 1
lea rcx, [rbp - 0x50]
call qword [sym.imp.shell32.dll_ShellExecuteExA]
test eax, eax
jne 0x7ff65c59c924
call qword [sym.imp.kernel32.dll_GetLastError]
cmp eax, 0x4c7
jne 0x7ff65c59c8ec
mov dword [rsp + 0x20], 0x1bdfd1e2
mov dword [rsp + 0x24], 0xcddbc8cd
mov dword [rsp + 0x28], 0x2527331e
mov dword [rsp + 0x2c], 0x23233035
mov dword [rsp + 0x30], 0xeb393de6
mov dword [rsp + 0x34], 0x3e202129
mov dword [rsp + 0x38], 0x2120f137
mov dword [rsp + 0x3c], 0x3b3f2339
mov dword [rsp + 0x40], 0x2e3f3031
mov dword [rsp + 0x44], 0x38303afa
mov dword [rsp + 0x48], 0x8140228
mov dword [rsp + 0x4c], 0xedca0b13
mov byte [rsp + 0x50], 0xe6
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x51], xmm0
mov qword [rsp + 0x61], rax
mov byte [rsp + 0x69], al
movabs r13, 0x7b217718cdf7bc77
mov r14, qword [0x7ff65c7ab3c0]
mov r15, qword [0x7ff65c7ab3b8]
movzx r8d, byte [rbp + 0x160]
nop word [rax + rax]
mov rax, r15
mov r9, r14
nop word [rax + rax]
xor r11d, r11d
cmp r11, 0x4a
jae 0x7ff65c59c8db
movzx r10d, byte [rsp + r11 + 0x20]
mov esi, r10d
cmp rax, r11
ja 0x7ff65c59c8d2
lea rcx, [r9 + 1]
cmp rax, rcx
jae 0x7ff65c59bf82
lea rdx, [r11 + r13]
mov rcx, rsi
and rcx, rdx
imul r8, rcx, 0xfffffffffffffffe
add r8, rsi
add r8, rdx
sub r8b, 0x41
jmp 0x7ff65c59bfc0
je 0x7ff65c59c85d
lea rcx, [r9 + 3]
cmp rax, rcx
je 0x7ff65c59c7cf
lea rcx, [r9 + 5]
cmp rax, rcx
je 0x7ff65c59c77f
lea rcx, [r9 + 2]
cmp rax, rcx
je 0x7ff65c59c75e
lea rcx, [r9 + 6]
cmp rax, rcx
je 0x7ff65c59c71b
nop dword [rax]
cmp r9, r11
ja 0x7ff65c59c8c9
lea rcx, [r9 + 0x200]
cmp rax, rcx
jae 0x7ff65c59bfed
lea edx, [r11 - 0x3d]
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
lea r8d, [r10 + rdx]
sub r8b, 0x55
jmp 0x7ff65c59c030
lea rdx, [r9 + 1]
cmp rax, rdx
je 0x7ff65c59c6ff
lea rcx, [r9 + 3]
cmp rax, rcx
je 0x7ff65c59c6de
lea rcx, [r9 + 5]
cmp rax, rcx
je 0x7ff65c59c6c3
lea rcx, [rdx + 1]
cmp rax, rcx
je 0x7ff65c59c6a8
lea rcx, [r9 + 6]
cmp rax, rcx
je 0x7ff65c59c67e
nop
mov rbx, rax
lea rcx, [r9 + rax]
cmp rcx, r11
jbe 0x7ff65c59c2bd
lea rcx, [r9 + 6]
cmp rax, rcx
je 0x7ff65c59c29a
lea rcx, [r9 + 1]
cmp rax, rcx
je 0x7ff65c59c276
lea rcx, [r9 + 0x61]
cmp rax, rcx
je 0x7ff65c59c251
lea rcx, [r9 + 0x80]
cmp rax, rcx
je 0x7ff65c59c232
lea rcx, [r9 + 0x20]
cmp rax, rcx
je 0x7ff65c59c213
lea rax, [r9 + 4]
lea r9, [rax + 6]
lea rcx, [r9 + 0x5a]
cmp rax, rcx
jb 0x7ff65c59c8ac
lea rcx, [r9 + 0x400]
cmp rax, rcx
jb 0x7ff65c59c88f
lea rcx, [r9 + 0x42]
cmp rax, rcx
jb 0x7ff65c59c156
lea rcx, [r9 + 0xa]
cmp rax, rcx
jb 0x7ff65c59c13b
lea rcx, [r9 + 4]
cmp rax, rcx
jb 0x7ff65c59c120
lea rax, [r9 + 0x7a]
lea r9, [rax + 0x5a]
lea rcx, [r9 + 0x200]
cmp rax, rcx
ja 0x7ff65c59c1e5
lea rcx, [r9 + 0x28]
cmp rax, rcx
ja 0x7ff65c59c1ca
lea rcx, [r9 + 8]
cmp rax, rcx
ja 0x7ff65c59c1ab
lea rcx, [r9 + 2]
cmp rax, rcx
ja 0x7ff65c59c190
lea rcx, [r9 + 0x7a]
cmp rax, rcx
ja 0x7ff65c59c171
lea rax, [r9 + 0x64]
lea r9, [rax + 0x200]
jmp 0x7ff65c59c040
lea edx, [r11 - 0x63]
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
lea r8d, [r10 + rdx]
sub r8b, 0x4b
jmp 0x7ff65c59c030
lea edx, [r11 - 0x51]
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
lea r8d, [r10 + rdx]
add r8b, 0x37
jmp 0x7ff65c59bfc0
lea edx, [r11 - 0x3f]
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
lea r8d, [r10 + rdx]
sub r8b, 0x47
jmp 0x7ff65c59bf56
lea r8d, [r11 + 0x60]
movzx ecx, r8b
and cl, r10b
mov edx, 0x30
sub dl, cl
add dl, dl
add r8b, dl
add r8b, r10b
jmp 0x7ff65c59c7b3
lea edx, [r11 + 0x72]
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
lea r8d, [r10 + rdx]
sub r8b, 0x1e
jmp 0x7ff65c59c7b6
lea r8d, [r11 - 0x7c]
movzx ecx, r8b
and cl, r10b
mov edx, 0x32
sub dl, cl
add dl, dl
add r8b, dl
add r8b, r10b
jmp 0x7ff65c59c7f0
lea edx, [r11 - 0x6a]
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
lea r8d, [r10 + rdx]
sub r8b, 0x1a
jmp 0x7ff65c59c81e
lea r8d, [r11 - 0x58]
movzx ecx, r8b
and cl, r10b
mov edx, 0x34
sub dl, cl
add dl, dl
add r8b, dl
add r8b, r10b
movzx ecx, byte [rsp + r11 + 0x20]
add rcx, r9
add r11, rcx
inc r11
jmp 0x7ff65c59bf43
lea r8d, [r11 - 0x26]
movzx ecx, r8b
and cl, r10b
mov edx, 5
sub dl, cl
add dl, dl
add r8b, dl
add r8b, r10b
jmp 0x7ff65c59c7b3
lea edx, [r11 - 0x14]
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
lea r8d, [r10 + rdx]
sub r8b, 0x74
movzx ebx, r11b
jmp 0x7ff65c59c798
lea r8d, [r11 - 2]
movzx ecx, r8b
and cl, r10b
mov edx, 7
sub dl, cl
add dl, dl
add r8b, dl
add r8b, r10b
dec r11
inc r11
jmp 0x7ff65c59bf43
lea edx, [r11 + 0x10]
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
lea r8d, [r10 + rdx]
sub r8b, 0x70
inc r9
dec r11
inc r11
jmp 0x7ff65c59bf43
lea r8d, [r11 + 0x22]
movzx ecx, r8b
and cl, r10b
mov edx, 9
sub dl, cl
add dl, dl
add r8b, dl
add r8b, r10b
movzx esi, r11b
jmp 0x7ff65c59c734
lea rcx, [r9 + 0x200]
cmp rax, rcx
jae 0x7ff65c59c37a
lea ecx, [r11 + 0x77]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r8d, [r10 + rcx]
sub r8b, 0x41
lea rax, [rbx + r9]
cmp rax, 0x64
je 0x7ff65c59c661
lea rax, [r9 + 9]
cmp rbx, rax
jbe 0x7ff65c59c487
lea ecx, [r11 + 0x5b]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r8d, [r10 + rcx]
sub r8b, 0x7d
mov rax, rbx
cmp rax, 9
jae 0x7ff65c59c63f
lea rcx, [r9 + 1]
cmp rax, rcx
jbe 0x7ff65c59c592
lea r8d, [r11 + 0x1e]
movzx ecx, r8b
and cl, r10b
mov edx, 0x17
sub dl, cl
add dl, dl
add r8b, dl
add r8b, r10b
cmp r9, 1
jb 0x7ff65c59c632
lea edx, [r11 + 0x6a]
movzx ecx, dl
and cl, r10b
mov r8d, 0xd
sub r8b, cl
add r8b, r8b
add r8b, dl
add r8b, r10b
add r8b, r8b
movzx esi, r11b
jmp 0x7ff65c59c734
lea rcx, [r9 + 1]
cmp rax, rcx
jne 0x7ff65c59c3b1
lea r8d, [r11 - 0x7a]
movzx ecx, r8b
and cl, r10b
mov edx, 0x2b
sub dl, cl
add dl, dl
add r8b, dl
add r8b, r10b
movzx ecx, byte [rsp + r11 + 0x20]
add rcx, r9
add r11, rcx
inc r11
jmp 0x7ff65c59bf43
inc rcx
cmp rax, rcx
jne 0x7ff65c59c3d4
lea edx, [r11 + 0x74]
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
lea r8d, [r10 + rdx]
sub r8b, 0x2c
jmp 0x7ff65c59c81e
lea rcx, [r9 + 5]
cmp rax, rcx
jne 0x7ff65c59c3fc
lea edx, [r11 + 0x2c]
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
lea r8d, [r10 + rdx]
sub r8b, 0x34
movzx ebx, r11b
jmp 0x7ff65c59c798
lea rcx, [r9 + 6]
cmp rax, rcx
jne 0x7ff65c59c42a
lea r8d, [r11 + 0x1a]
movzx ecx, r8b
and cl, r10b
mov edx, 0x25
sub dl, cl
add dl, dl
add r8b, dl
add r8b, r10b
dec r11
inc r11
jmp 0x7ff65c59bf43
lea rcx, [r9 + 3]
cmp rax, rcx
jne 0x7ff65c59c457
lea edx, [r11 + 8]
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
lea r8d, [r10 + rdx]
sub r8b, 0x38
inc r9
dec r11
inc r11
jmp 0x7ff65c59bf43
lea rcx, [r9 + 2]
cmp rax, rcx
jne 0x7ff65c59c2e3
lea r8d, [r11 - 0xa]
movzx ecx, r8b
and cl, r10b
mov edx, 0x23
sub dl, cl
add dl, dl
add r8b, dl
add r8b, r10b
movzx esi, r11b
jmp 0x7ff65c59c734
lea rax, [r9 + 1]
cmp rbx, rax
jne 0x7ff65c59c4b1
lea ecx, [r11 + 0x49]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r8d, [r10 + rcx]
inc r8b
movzx esi, r11b
mov rax, rbx
jmp 0x7ff65c59c734
inc rax
cmp rbx, rax
jne 0x7ff65c59c4e0
lea ecx, [r11 + 0x37]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r8d, [r10 + rcx]
add r8b, 0x7f
mov rax, rbx
inc r9
dec r11
inc r11
jmp 0x7ff65c59bf43
lea rax, [r9 + 5]
cmp rbx, rax
jne 0x7ff65c59c507
lea ecx, [r11 + 1]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r8d, [r10 + rcx]
sub r8b, 7
mov rax, rbx
jmp 0x7ff65c59c7b3
lea rax, [r9 + 4]
cmp rbx, rax
jne 0x7ff65c59c52e
lea ecx, [r11 - 0x11]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r8d, [r10 + rcx]
add r8b, 0x77
mov rax, rbx
jmp 0x7ff65c59c7b6
lea rax, [r9 + 3]
cmp rbx, rax
jne 0x7ff65c59c555
lea ecx, [r11 - 0x23]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r8d, [r10 + rcx]
sub r8b, 0xb
mov rax, rbx
jmp 0x7ff65c59c7f0
mov rax, rbx
lea rcx, [r9 + 2]
cmp rbx, rcx
jne 0x7ff65c59c317
lea ecx, [r11 - 0x47]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r8d, [r10 + rcx]
sub r8b, 0xf
mov rax, rbx
movzx ecx, byte [rsp + r11 + 0x20]
add rcx, r9
add r11, rcx
inc r11
jmp 0x7ff65c59bf43
jne 0x7ff65c59c5be
lea edx, [r11 + 0xc]
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
lea r8d, [r10 + rdx]
sub r8b, 0x54
movzx ecx, byte [rsp + r11 + 0x20]
add rcx, r9
add r11, rcx
inc r11
jmp 0x7ff65c59bf43
lea rcx, [r9 + 3]
cmp rax, rcx
jne 0x7ff65c59c5e2
lea edx, [r11 - 0x18]
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
lea r8d, [r10 + rdx]
sub r8b, 0x58
jmp 0x7ff65c59c7f0
lea rcx, [r9 + 2]
cmp rax, rcx
jne 0x7ff65c59c606
lea edx, [r11 - 0x3c]
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
lea r8d, [r10 + rdx]
sub r8b, 0x5c
jmp 0x7ff65c59c7b3
lea rcx, [r9 + 7]
cmp rax, rcx
jne 0x7ff65c59c348
lea edx, [r11 + 0x7c]
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
lea r8d, [r10 + rdx]
sub r8b, 0x64
movzx esi, r11b
jmp 0x7ff65c59c734
mov byte [rsp + r11 + 0x20], r8b
inc r11
jmp 0x7ff65c59bf43
lea edx, [r11 + 0x58]
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
lea r8d, [r10 + rdx]
sub r8b, 0x68
add r8b, r10b
movzx ebx, r11b
jmp 0x7ff65c59c798
lea edx, [r11 + 0x46]
movzx eax, dl
and al, r10b
mov ecx, 0xb
sub cl, al
lea r8d, [rcx + rcx]
mov rax, rbx
jmp 0x7ff65c59c7ed
lea edx, [r11 + 0x21]
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
lea r8d, [r10 + rdx]
add r8b, 0x19
movzx ecx, byte [rsp + r11 + 0x20]
add rcx, r9
add r11, rcx
inc r11
jmp 0x7ff65c59bf43
lea edx, [r11 + 0x45]
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
lea r8d, [r10 + rdx]
add r8b, 0x1d
jmp 0x7ff65c59c7f0
lea edx, [r11 + 0x57]
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
lea r8d, [r10 + rdx]
sub r8b, 0x61
jmp 0x7ff65c59c7b6
lea edx, [r11 - 0x73]
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
lea r8d, [r10 + rdx]
add r8b, 0x25
dec r11
inc r11
jmp 0x7ff65c59bf43
lea edx, [r11 - 0x4f]
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
lea r8d, [r10 + rdx]
add r8b, 0x29
movzx esi, r11b
jmp 0x7ff65c59c734
movzx esi, r11b
lea edx, [rsi - 0x2b]
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
lea r8d, [r10 + rdx]
add r8b, 0x2d
sub sil, 0x1f
movzx ecx, sil
and cl, r10b
add cl, cl
sub sil, cl
sub sil, 0x27
add sil, r10b
mov byte [rsp + r11 + 0x20], sil
inc r9
dec r11
inc r11
jmp 0x7ff65c59bf43
lea edx, [r11 - 7]
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
lea r8d, [r10 + rdx]
add r8b, 0x31
dec r11
inc r11
jmp 0x7ff65c59bf43
movzx ebx, r11b
lea edx, [rbx + 0xb]
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
lea r8d, [r10 + rdx]
sub r8b, 0x4d
sub bl, 0x31
movzx ecx, bl
and cl, r10b
add cl, cl
sub bl, cl
add bl, 0x57
add bl, r8b
add bl, r10b
mov byte [rsp + r11 + 0x20], bl
add rax, r9
movzx ecx, r8b
mov rdx, 0xffffffffffffffff
sub rdx, rcx
add r11, rdx
inc r11
jmp 0x7ff65c59bf43
movabs rdx, 0x5dea41ada1c62741
add rdx, r11
and sil, dl
add sil, sil
movzx r8d, r10b
sub r8b, sil
add r8b, 0x39
add r8b, dl
movzx esi, r11b
sub sil, 0x43
movzx ecx, r10b
and cl, sil
add cl, cl
movzx edx, r10b
sub dl, cl
sub dl, 0x2b
add dl, sil
movzx ecx, dl
mov byte [rsp + r11 + 0x20], cl
inc r9
add rcx, r9
sub r11, rcx
lea edx, [r11 + 0x34]
movzx ecx, r10b
and cl, dl
add cl, cl
sub r10b, cl
sub r10b, 0x6c
add r10b, dl
mov byte [rsp + r11 + 0x20], r10b
inc rax
mov rcx, 0xffffffffffffffff
sub rcx, rax
add r11, rcx
movzx ecx, byte [rsp + r11 + 0x20]
add rcx, r9
add r11, rcx
inc r11
jmp 0x7ff65c59bf43
movabs rcx, 0x7164654a69e73565
add rcx, r11
and sil, cl
add sil, sil
sub r10b, sil
lea r8d, [rcx + r10]
add r8b, 0x3d
movzx ecx, byte [rsp + r11 + 0x20]
add rcx, r9
add r11, rcx
inc r11
jmp 0x7ff65c59bf43
sub r11b, 0x2d
movzx ecx, r11b
and cl, r10b
add cl, cl
sub r11b, cl
lea r8d, [r10 + r11]
add r8b, 0x3b
jmp 0x7ff65c59bf40
sub r11b, 0x1b
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
lea r8d, [r10 + r11]
sub r8b, 0x43
jmp 0x7ff65c59bf30
lea rdx, [rbp + 0x1729f14]
jmp 0x7ff65c59c8e0
lea rdx, [rbp + 0x6a5b8b]
jmp 0x7ff65c59c8e0
lea rdx, [rsp + 0x20]
mov rcx, qword [sym.imp.msvcp140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.7ff65c5149d0
lea rdi, [rbp + 0x158]
movabs rax, 0xff00ff00ff00ff00
xor r12, rax
mov qword [rdi], r12
lea r11, [rsp + 0x230]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
xor ecx, ecx
call qword [sym.imp.ucrtbase.dll_exit]
int3