Function at 0x7ff65c4f53d0
Capabilities:
Enumerate processes
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
sub rsp, 0x2d0
lea rbp, [rsp + 0x60]
and rbp, 0xffffffffffffffe0
xor r14d, r14d
movabs rax, 0x5f5b34d17e0d7a03
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x100], rax
movabs rax, 0xd87de356ce738ac5
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x108], rax
movabs rax, 0xa6b0db1fc0bf9c69
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x110], rax
movabs rax, 0x440dfbe111cd9f6d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x118], rax
movabs rax, 0xbb8738b33b948671
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x120], rax
movabs rax, 0xde9b9bbf0f13ecf2
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x128], rax
movabs r12, 0x666e00aa2223265f
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x20], rax
movabs r15, 0xb94fd363ab45bff0
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x28], rax
movabs rdi, 0xc2d2e32ceddea851
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x30], rax
movabs rbx, 0x7438ccd529aefe5a
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x38], rax
movabs rax, 0xdde108d60cf6bf13
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x40], rax
movabs rax, 0xde9b9bbf0f139194
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x48], rax
vmovdqu ymm0, ymmword [rbp + 0x100]
vpxor ymm1, ymm0, ymmword [rbp + 0x20]
vmovdqa ymmword [rbp + 0x100], ymm1
vmovdqa xmm0, xmmword [rbp + 0x120]
vxorps xmm0, xmm0, xmmword [rbp + 0x40]
vmovdqa xmmword [rbp + 0x120], xmm0
lea rax, [rbp + 0x100]
mov qword [rbp + 0x80], rax
lea rcx, [rbp + 0x100]
mov rsi, 0xffffffffffffffff
mov rax, rsi
vzeroupper
inc rax
cmp byte [rcx + rax], r14b
jne 0x7ff65c4f5561
mov qword [rbp + 0x88], rax
movaps xmm0, xmmword [rbp + 0x80]
movdqa xmmword [rbp + 0x20], xmm0
xor r8d, r8d
lea rdx, [rbp + 0x20]
lea rcx, [rbp + 0xc0]
call fcn.7ff65c4f8cd0
nop
lea rdx, [rbp + 0xc0]
lea rcx, [rbp + 0x80]
call fcn.7ff65c4f7600
lea rcx, [rbp + 0x80]
cmp qword [rbp + 0x98], 7
cmova rcx, qword [rbp + 0x80]
mov qword [rsp + 0x30], r14
mov dword [rsp + 0x28], r14d
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov edx, 0xc0000000
mov r8d, 3
call qword [sym.imp.kernel32.dll_CreateFileW]
mov qword [0x7ff65c7a3630], rax
lea rcx, [rbp + 0x80]
call fcn.7ff65c4f7d90
nop
lea rcx, [rbp + 0xc0]
call fcn.7ff65c4f7d90
movabs rax, 0xa3e78c54e41490d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x20], rax
movabs rax, 0xd83bb621d920c691
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x28], rax
movabs rax, 0xc2d2e32c88a6cd7f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x30], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x38], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x80], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x88], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x90], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x98], rax
vmovdqu ymm0, ymmword [rbp + 0x80]
vpxor ymm1, ymm0, ymmword [rbp + 0x20]
vmovdqa ymmword [rbp + 0x20], ymm1
xor edx, edx
mov ecx, 2
vzeroupper
call qword [sym.imp.kernel32.dll_CreateToolhelp32Snapshot]
mov rbx, rax
mov dword [rbp + 0x140], 0x130
lea rdx, [rbp + 0x140]
mov rcx, rax
call qword [sym.imp.kernel32.dll_Process32First]
test eax, eax
je 0x7ff65c4f56fd
nop
lea rdx, [rbp + 0x20]
lea rcx, [rbp + 0x16c]
call qword [sym.imp.ucrtbase.dll__mbsicmp]
mov rcx, rbx
test eax, eax
je 0x7ff65c4f57b1
lea rdx, [rbp + 0x140]
call qword [sym.imp.kernel32.dll_Process32Next]
test eax, eax
jne 0x7ff65c4f56d0
mov rcx, rbx
call qword [sym.imp.kernel32.dll_CloseHandle]
xor edi, edi
mov eax, edi
mov dword [0x7ff65c7a3638], eax
mov dword [rbp + 0x20], 0x4248ca73
mov dword [rbp + 0x24], 0xb7b63af7
xor eax, eax
mov qword [rbp + 0x28], rax
mov dword [rbp + 0x30], eax
mov word [rbp + 0x34], ax
mov byte [rbp + 0x36], al
movabs r13, 0xc936798aff61f4b8
movabs r12, 0x8177f866f3091318
mov r14, qword [0x7ff65c7ab3c0]
mov r15, qword [0x7ff65c7ab3b8]
movzx r11d, byte [rbp + 0x60]
nop word [rax + rax]
mov rax, r15
mov r9, r14
nop word [rax + rax]
mov rbx, rdi
cmp rbx, 0x17
jae 0x7ff65c4f63a0
movzx r10d, byte [rbp + rbx + 0x20]
mov edi, r10d
cmp rax, rbx
ja 0x7ff65c4f6397
lea rcx, [r9 + 1]
cmp rax, rcx
jae 0x7ff65c4f57c4
lea r11, [rbx + r13]
movzx ecx, dil
and cl, r11b
add cl, cl
sub r11b, cl
sub r11b, 8
add r11b, r10b
jmp 0x7ff65c4f57f1
call qword [sym.imp.kernel32.dll_CloseHandle]
mov eax, dword [rbp + 0x148]
xor edi, edi
jmp 0x7ff65c4f570a
je 0x7ff65c4f6323
lea rcx, [r9 + 3]
cmp rax, rcx
je 0x7ff65c4f62f0
lea rcx, [r9 + 5]
cmp rax, rcx
je 0x7ff65c4f62c2
lea rcx, [r9 + 2]
cmp rax, rcx
je 0x7ff65c4f6279
cmp r9, rbx
ja 0x7ff65c4f638e
lea rcx, [r9 + 0x80]
cmp rax, rcx
jae 0x7ff65c4f5825
lea rdx, [rbx + r12]
movzx ecx, dil
and cl, dl
mov r8d, 0x2c
sub r8b, cl
lea r11d, [r8 + r8]
add r11b, dl
add r11b, r10b
jmp 0x7ff65c4f5870
lea rdx, [r9 + 1]
cmp rax, rdx
je 0x7ff65c4f626b
lea rcx, [r9 + 3]
cmp rax, rcx
je 0x7ff65c4f6244
lea rcx, [rdx + 1]
cmp rax, rcx
je 0x7ff65c4f61ee
lea rcx, [r9 + 4]
cmp rax, rcx
je 0x7ff65c4f61ba
lea rcx, [r9 + 5]
cmp rax, rcx
je 0x7ff65c4f618f
nop word [rax + rax]
lea rcx, [r9 + rax]
cmp rcx, rbx
jbe 0x7ff65c4f5e2e
nop dword [rax]
lea rcx, [r9 + 8]
cmp rax, rcx
je 0x7ff65c4f5e0e
lea rcx, [r9 + 0x41]
cmp rax, rcx
je 0x7ff65c4f5de7
lea rcx, [r9 + 5]
cmp rax, rcx
je 0x7ff65c4f5dc0
lea rcx, [r9 + 0x61]
cmp rax, rcx
je 0x7ff65c4f5daf
lea rcx, [r9 + 3]
cmp rax, rcx
je 0x7ff65c4f5d7b
lea rcx, [r9 + 0x400]
cmp rax, rcx
je 0x7ff65c4f5d4a
lea rcx, [r9 + 0x10]
cmp rax, rcx
je 0x7ff65c4f5d2c
lea rcx, [r9 + 0x200]
cmp rax, rcx
je 0x7ff65c4f5d0b
lea rcx, [r9 + 9]
cmp rax, rcx
je 0x7ff65c4f5cdc
lea rcx, [r9 + 0x64]
cmp rax, rcx
je 0x7ff65c4f5880
lea rax, [r9 + 0x41]
lea r9, [rax + 6]
lea rcx, [r9 + 0x42]
cmp rax, rcx
jb 0x7ff65c4f6371
lea rcx, [r9 + 0x61]
cmp rax, rcx
jb 0x7ff65c4f6354
lea rcx, [r9 + 0x28]
cmp rax, rcx
jb 0x7ff65c4f5a6b
lea rcx, [r9 + 0x400]
cmp rax, rcx
jb 0x7ff65c4f5a4b
lea rcx, [r9 + 0x10]
cmp rax, rcx
jb 0x7ff65c4f5a2b
lea rcx, [r9 + 1]
cmp rax, rcx
jb 0x7ff65c4f5c8b
lea rcx, [r9 + 9]
cmp rax, rcx
jb 0x7ff65c4f5c47
lea rcx, [r9 + 0x5a]
cmp rax, rcx
jb 0x7ff65c4f5bff
lea rcx, [r9 + 6]
cmp rax, rcx
jb 0x7ff65c4f5bd6
lea rcx, [r9 + 0x7a]
cmp rax, rcx
jb 0x7ff65c4f5880
lea rax, [r9 + 5]
lea r9, [rax + 4]
lea rcx, [r9 + 0x28]
cmp rax, rcx
ja 0x7ff65c4f5ba7
lea rcx, [r9 + 3]
cmp rax, rcx
ja 0x7ff65c4f5b86
lea rcx, [r9 + 0x10]
cmp rax, rcx
ja 0x7ff65c4f5b68
lea rcx, [r9 + 1]
cmp rax, rcx
ja 0x7ff65c4f5b37
lea rcx, [r9 + 9]
cmp rax, rcx
ja 0x7ff65c4f5b10
lea rcx, [r9 + 0x5a]
cmp rax, rcx
ja 0x7ff65c4f5af0
lea rcx, [r9 + 0x64]
cmp rax, rcx
ja 0x7ff65c4f5acf
lea rcx, [r9 + 0x7a]
cmp rax, rcx
ja 0x7ff65c4f5aab
lea rcx, [r9 + 0x40]
cmp rax, rcx
ja 0x7ff65c4f5a8b
lea rcx, [r9 + 0x1000]
cmp rax, rcx
ja 0x7ff65c4f5880
lea rax, [r9 + 3]
lea r9, [rax + 0x20]
jmp 0x7ff65c4f5880
lea r8d, [rbx - 0x18]
movzx ecx, r10b
and cl, r8b
add cl, cl
movzx r11d, r10b
sub r11b, cl
sub r11b, 0x58
add r11b, r8b
jmp 0x7ff65c4f5870
lea r8d, [rbx + 0x78]
movzx ecx, r10b
and cl, r8b
add cl, cl
movzx r11d, r10b
sub r11b, cl
sub r11b, 0x48
add r11b, r8b
jmp 0x7ff65c4f57f1
lea r8d, [rbx + 8]
movzx ecx, r10b
and cl, r8b
add cl, cl
movzx r11d, r10b
sub r11b, cl
sub r11b, 0x38
add r11b, r8b
jmp 0x7ff65c4f5786
lea r8d, [rbx - 0x40]
movzx ecx, r10b
and cl, r8b
add cl, cl
movzx r11d, r10b
sub r11b, cl
sub r11b, 0x40
movzx edi, bl
jmp 0x7ff65c4f6295
lea edx, [rbx + 0x50]
movzx ecx, r10b
and cl, dl
add cl, cl
sub r10b, cl
lea r11d, [rdx + r10]
sub r11b, 0x30
inc r9
dec rbx
inc rbx
jmp 0x7ff65c4f5773
lea edx, [rbx - 0x20]
movzx ecx, r10b
and cl, dl
add cl, cl
sub r10b, cl
lea r11d, [rdx + r10]
sub r11b, 0x20
dec rbx
inc rbx
jmp 0x7ff65c4f5773
lea r8d, [rbx + 0x70]
movzx ecx, r10b
and cl, r8b
add cl, cl
movzx r11d, r10b
sub r11b, cl
sub r11b, 0x10
movzx edi, bl
jmp 0x7ff65c4f620a
movzx ecx, r10b
and cl, bl
add cl, cl
sub r10b, cl
lea r11d, [rbx + r10]
add rax, r9
movzx ecx, r11b
mov rdx, rsi
sub rdx, rcx
add rbx, rdx
inc rbx
jmp 0x7ff65c4f5773
lea r8d, [rbx - 0x70]
movzx ecx, r10b
and cl, r8b
mov edx, 8
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, r10b
add r11b, r8b
movzx ecx, r11b
mov rdx, rsi
sub rdx, rcx
add rbx, rdx
inc rbx
jmp 0x7ff65c4f5773
lea r8d, [rbx + 0x20]
movzx ecx, r10b
and cl, r8b
mov edx, 0x10
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, r10b
jmp 0x7ff65c4f612a
lea r8d, [rbx - 0x50]
movzx ecx, r10b
and cl, r8b
mov edx, 0x18
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, r10b
add r11b, r8b
jmp 0x7ff65c4f6156
lea r8d, [rbx + 0x40]
movzx ecx, r10b
and cl, r8b
mov edx, 0x20
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, r10b
add r11b, r8b
movzx ecx, byte [rbp + rbx + 0x20]
add rcx, r9
add rbx, rcx
inc rbx
jmp 0x7ff65c4f5773
lea r8d, [rbx - 0x58]
movzx ecx, r10b
and cl, r8b
mov edx, 0x34
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, r10b
add r11b, r8b
mov byte [rbp + rbx + 0x20], r11b
inc rbx
jmp 0x7ff65c4f5773
lea r8d, [rbx + 0x38]
movzx ecx, r10b
and cl, r8b
mov edx, 0x3c
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, r10b
add r11b, r8b
cmp r9, 0x20
jb 0x7ff65c4f5bf2
movzx edi, bl
lea r8d, [rdi + 0x50]
movzx ecx, r10b
and cl, r8b
add cl, cl
movzx edx, r10b
sub dl, cl
add dl, r8b
lea r11d, [rdx*2 - 0x60]
jmp 0x7ff65c4f6298
lea r8d, [rbx - 0x38]
movzx ecx, r10b
and cl, r8b
add cl, cl
movzx r11d, r10b
sub r11b, cl
sub r11b, 0x78
add r11b, r8b
cmp rax, 4
jae 0x7ff65c4f60eb
lea rcx, [r9 + 0x28]
cmp rax, rcx
jbe 0x7ff65c4f604c
lea r8d, [rbx - 0x10]
movzx ecx, r10b
and cl, r8b
mov edx, 0x38
jmp 0x7ff65c4f5c0f
lea r8d, [rbx + 0x58]
movzx ecx, r10b
and cl, r8b
add cl, cl
movzx r11d, r10b
sub r11b, cl
sub r11b, 0x68
add r11b, r8b
lea rcx, [r9 + rax]
cmp rcx, 6
je 0x7ff65c4f610d
lea rcx, [r9 + 0x42]
cmp rax, rcx
jbe 0x7ff65c4f5f56
lea r8d, [rbx - 0x28]
movzx ecx, r10b
and cl, r8b
mov edx, 0xc
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, r10b
jmp 0x7ff65c4f5c5f
lea r8d, [rbx - 0x70]
movzx ecx, r10b
and cl, r8b
mov edx, 8
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, r10b
add r11b, r8b
movzx ecx, byte [rbp + rbx + 0x20]
add rcx, r9
add rbx, rcx
inc rbx
jmp 0x7ff65c4f5773
lea r8d, [rbx + 0x20]
movzx ecx, r10b
and cl, r8b
mov edx, 0x10
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, r10b
add r11b, r8b
jmp 0x7ff65c4f6156
lea r8d, [rbx - 0x50]
movzx ecx, r10b
and cl, r8b
mov edx, 0x18
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, r10b
jmp 0x7ff65c4f612a
lea r8d, [rbx + 0x40]
movzx ecx, r10b
and cl, r8b
mov edx, 0x20
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, r10b
add r11b, r8b
movzx ecx, r11b
mov rdx, rsi
sub rdx, rcx
add rbx, rdx
inc rbx
jmp 0x7ff65c4f5773
lea r8d, [rbx - 0x30]
movzx ecx, r10b
and cl, r8b
mov edx, 0x28
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, r10b
add r11b, r8b
add rax, r9
movzx ecx, r11b
mov rdx, rsi
sub rdx, rcx
add rbx, rdx
inc rbx
jmp 0x7ff65c4f5773
movzx edi, bl
lea r8d, [rdi + 0x60]
mov edx, 0x30
jmp 0x7ff65c4f61fa
lea r8d, [rbx - 0x10]
movzx ecx, r10b
and cl, r8b
mov edx, 0x38
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, r10b
add r11b, r8b
dec rbx
inc rbx
jmp 0x7ff65c4f5773
lea edx, [rbx + 0x80]
movzx ecx, r10b
and cl, dl
add cl, cl
sub r10b, cl
lea r11d, [rdx + r10]
add r11b, 0x80
inc r9
dec rbx
inc rbx
jmp 0x7ff65c4f5773
movzx edi, bl
lea r8d, [rdi + 0x10]
movzx ecx, r10b
and cl, r8b
add cl, cl
movzx r11d, r10b
sub r11b, cl
sub r11b, 0x70
jmp 0x7ff65c4f6295
lea rcx, [r9 + 0x64]
cmp rax, rcx
jae 0x7ff65c4f5e54
lea r8d, [rbx - 0x48]
movzx ecx, r10b
and cl, r8b
add cl, cl
movzx r11d, r10b
sub r11b, cl
sub r11b, 8
jmp 0x7ff65c4f5ca3
lea rcx, [r9 + 1]
cmp rax, rcx
jne 0x7ff65c4f5e86
lea edx, [rbx + 0x30]
movzx ecx, r10b
and cl, dl
add cl, cl
sub r10b, cl
lea r11d, [rdx + r10]
sub r11b, 0x50
movzx ecx, byte [rbp + rbx + 0x20]
add rcx, r9
add rbx, rcx
inc rbx
jmp 0x7ff65c4f5773
inc rcx
cmp rax, rcx
jne 0x7ff65c4f5eae
lea r8d, [rbx - 0x60]
movzx ecx, r10b
and cl, r8b
add cl, cl
movzx r11d, r10b
sub r11b, cl
sub r11b, 0x60
add r11b, r8b
jmp 0x7ff65c4f6156
lea rcx, [r9 + 4]
cmp rax, rcx
jne 0x7ff65c4f5ee5
lea edx, [rbx + 0x80]
movzx ecx, r10b
and cl, dl
add cl, cl
sub r10b, cl
lea r11d, [rdx + r10]
add r11b, 0x80
movzx ecx, r11b
mov rdx, rsi
sub rdx, rcx
add rbx, rdx
inc rbx
jmp 0x7ff65c4f5773
lea rcx, [r9 + 5]
cmp rax, rcx
jne 0x7ff65c4f5f22
lea r8d, [rbx - 0x10]
movzx ecx, r10b
and cl, r8b
mov edx, 0x38
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, r10b
add r11b, r8b
add rax, r9
movzx ecx, r11b
mov rdx, rsi
sub rdx, rcx
add rbx, rdx
inc rbx
jmp 0x7ff65c4f5773
lea rcx, [r9 + 2]
cmp rax, rcx
jne 0x7ff65c4f5ca6
lea r8d, [rbx - 0x30]
movzx ecx, r10b
and cl, r8b
mov edx, 0x28
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, r10b
add r11b, r8b
dec rbx
inc rbx
jmp 0x7ff65c4f5773
lea rcx, [r9 + 1]
cmp rax, rcx
jne 0x7ff65c4f5f70
movzx edi, bl
lea r8d, [rdi + 0x48]
mov edx, 4
jmp 0x7ff65c4f6285
inc rcx
cmp rax, rcx
jne 0x7ff65c4f5f99
lea edx, [rbx + 0x28]
movzx ecx, r10b
and cl, dl
add cl, cl
sub r10b, cl
lea r11d, [rdx + r10]
sub r11b, 0x18
dec rbx
inc rbx
jmp 0x7ff65c4f5773
lea rcx, [r9 + 2]
cmp rax, rcx
jne 0x7ff65c4f5fd0
lea edx, [rbx + 8]
movzx ecx, r10b
and cl, dl
add cl, cl
sub r10b, cl
lea r11d, [rdx + r10]
sub r11b, 0x38
add rax, r9
movzx ecx, r11b
mov rdx, rsi
sub rdx, rcx
add rbx, rdx
inc rbx
jmp 0x7ff65c4f5773
lea rcx, [r9 + 4]
cmp rax, rcx
jne 0x7ff65c4f5ff0
lea edx, [rbx + 0x78]
movzx ecx, r10b
and cl, dl
add cl, cl
sub r10b, cl
lea r11d, [rdx + r10]
jmp 0x7ff65c4f630a
lea rcx, [r9 + 7]
cmp rax, rcx
jne 0x7ff65c4f6016
lea r8d, [rbx - 0x18]
movzx ecx, r10b
and cl, r8b
add cl, cl
movzx r11d, r10b
sub r11b, cl
sub r11b, 0x58
jmp 0x7ff65c4f612a
lea rcx, [r9 + 6]
cmp rax, rcx
jne 0x7ff65c4f5c62
lea edx, [rbx - 0x38]
movzx ecx, r10b
and cl, dl
add cl, cl
sub r10b, cl
lea r11d, [rdx + r10]
sub r11b, 0x78
movzx ecx, byte [rbp + rbx + 0x20]
add rcx, r9
add rbx, rcx
inc rbx
jmp 0x7ff65c4f5773
lea rcx, [r9 + 1]
cmp rax, rcx
jne 0x7ff65c4f6084
lea r8d, [rbx + 0x60]
movzx ecx, r10b
and cl, r8b
mov edx, 0x30
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, r10b
add r11b, r8b
movzx ecx, byte [rbp + rbx + 0x20]
add rcx, r9
add rbx, rcx
inc rbx
jmp 0x7ff65c4f5773
inc rcx
cmp rax, rcx
jne 0x7ff65c4f60aa
lea r8d, [rbx + 0x40]
movzx ecx, r10b
and cl, r8b
mov edx, 0x20
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, r10b
jmp 0x7ff65c4f612a
lea rcx, [r9 + 5]
cmp rax, rcx
jne 0x7ff65c4f60c4
movzx edi, bl
lea r8d, [rdi - 0x70]
mov edx, 8
jmp 0x7ff65c4f61fa
lea rcx, [r9 + 4]
cmp rax, rcx
jne 0x7ff65c4f5c1b
movzx ecx, r10b
and cl, bl
add cl, cl
sub r10b, cl
lea r11d, [rbx + r10]
dec rbx
inc rbx
jmp 0x7ff65c4f5773
movzx edi, bl
lea r8d, [rdi - 0x40]
movzx ecx, r10b
and cl, r8b
add cl, cl
movzx r11d, byte [rbp + rbx + 0x20]
sub r11b, cl
sub r11b, 0x40
jmp 0x7ff65c4f6207
lea r8d, [rbx + 0x30]
movzx ecx, r10b
and cl, r8b
add cl, cl
movzx r11d, r10b
sub r11b, cl
sub r11b, byte [rbp + rbx + 0x20]
sub r11b, 0x50
add r11b, r8b
lea r8d, [rbx - 0x18]
movzx ecx, r10b
and cl, r8b
add cl, cl
movzx edx, r10b
sub dl, cl
sub dl, 0x58
add dl, r8b
movzx ecx, dl
mov byte [rbp + rbx + 0x20], cl
inc r9
add rcx, r9
sub rbx, rcx
lea edx, [rbx - 0x60]
movzx ecx, r10b
and cl, dl
add cl, cl
sub r10b, cl
sub r10b, 0x60
add r10b, dl
mov byte [rbp + rbx + 0x20], r10b
inc rax
mov rcx, rsi
sub rcx, rax
add rbx, rcx
movzx ecx, byte [rbp + rbx + 0x20]
add rcx, r9
add rbx, rcx
inc rbx
jmp 0x7ff65c4f5773
lea edx, [rbx - 0x48]
movzx ecx, r10b
and cl, dl
add cl, cl
sub r10b, cl
lea r11d, [rdx + r10]
sub r11b, 8
movzx ecx, r11b
mov rdx, rsi
sub rdx, rcx
add rbx, rdx
inc rbx
jmp 0x7ff65c4f5773
lea r8d, [rbx + 0x48]
movzx ecx, r10b
and cl, r8b
mov edx, 4
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, r10b
add r11b, r8b
add rax, r9
movzx ecx, r11b
mov rdx, rsi
sub rdx, rcx
add rbx, rdx
inc rbx
jmp 0x7ff65c4f5773
movzx edi, bl
lea r8d, [rdi - 0x28]
mov edx, 0xc
movzx ecx, r10b
and cl, r8b
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, r10b
add r11b, r8b
add dil, 0x78
movzx ecx, r10b
and cl, dil
add cl, cl
sub r10b, cl
sub r10b, 0x48
add r10b, r11b
add r10b, dil
mov byte [rbp + rbx + 0x20], r10b
add rax, r9
movzx ecx, r11b
mov rdx, rsi
sub rdx, rcx
add rbx, rdx
inc rbx
jmp 0x7ff65c4f5773
lea r8d, [rbx + 0x68]
movzx ecx, r10b
and cl, r8b
mov edx, 0x14
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, r10b
add r11b, r8b
dec rbx
inc rbx
jmp 0x7ff65c4f5773
movzx edi, bl
lea r8d, [rdi - 0x78]
mov edx, 0x24
jmp 0x7ff65c4f6285
movzx edi, bl
lea r8d, [rdi - 0x58]
mov edx, 0x34
movzx ecx, r10b
and cl, r8b
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, r10b
add r11b, r8b
add dil, 8
movzx ecx, r10b
and cl, dil
add cl, cl
sub r10b, cl
sub r10b, 0x38
add r10b, dil
mov byte [rbp + rbx + 0x20], r10b
inc r9
dec rbx
inc rbx
jmp 0x7ff65c4f5773
lea edx, [rbx - 0x18]
movzx ecx, r10b
and cl, dl
add cl, cl
sub r10b, cl
lea r11d, [rdx + r10]
sub r11b, 0x58
add rax, r9
movzx ecx, r11b
mov rdx, rsi
sub rdx, rcx
add rbx, rdx
inc rbx
jmp 0x7ff65c4f5773
movabs rcx, 0x12ea45e2fa719a78
add rcx, rbx
and dil, cl
add dil, dil
sub cl, dil
lea r11d, [r10 + rcx]
sub r11b, 0x48
movzx ecx, r11b
mov rdx, rsi
sub rdx, rcx
add rbx, rdx
inc rbx
jmp 0x7ff65c4f5773
movabs rcx, 0x5ba36ca0fe25de28
add rcx, rbx
and dil, cl
add dil, dil
sub cl, dil
lea r11d, [r10 + rcx]
sub r11b, 0x18
movzx ecx, byte [rbp + rbx + 0x20]
add rcx, r9
add rbx, rcx
inc rbx
jmp 0x7ff65c4f5773
sub bl, 0x68
movzx ecx, r10b
and cl, bl
add cl, cl
sub r10b, cl
lea r11d, [rbx + r10]
sub r11b, 0x28
xor edi, edi
jmp 0x7ff65c4f5770
add bl, 0x28
movzx eax, r10b
and al, bl
add al, al
sub r10b, al
lea r11d, [rbx + r10]
sub r11b, 0x18
xor edi, edi
jmp 0x7ff65c4f5760
mov rax, qword [rbp + 0x1506bc0]
jmp 0x7ff65c4f63a4
mov rax, qword [rbp + 0xf26078]
jmp 0x7ff65c4f63a4
mov rax, qword [rbp + 0x20]
cmp qword [0x7ff65c7a8860], rax
je 0x7ff65c4f63bc
xor r14d, r14d
call r14
xor ecx, ecx
call qword [sym.imp.ucrtbase.dll_exit]
int3
xor edi, edi
mov qword [rbp + 0x68], rdi
mov dword [rbp + 0x41], edi
mov word [rbp + 0x45], di
mov byte [rbp + 0x47], dil
mov dword [rbp + 0x20], 0x85b3b69
call fcn.7ff65c4f3d20
add rax, 0x118
mov qword [rbp + 0x28], rax
lea rax, [rbp + 0x68]
mov qword [rbp + 0x30], rax
mov qword [rbp + 0x38], 8
mov eax, dword [0x7ff65c7a3638]
mov dword [rbp + 0x24], eax
mov byte [rbp + 0x40], dil
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x28], edi
mov qword [rsp + 0x20], rdi
mov r9d, 0x28
lea r8, [rbp + 0x20]
mov edx, 0x225914
mov rcx, qword [0x7ff65c7a3630]
call qword [sym.imp.kernel32.dll_DeviceIoControl]
mov qword [rbp + 0xe0], rdi
mov dword [rbp + 0xa1], edi
mov word [rbp + 0xa5], di
mov byte [rbp + 0xa7], dil
mov dword [rbp + 0x80], 0x85b3b69
mov rax, qword [rbp + 0x68]
add rax, 0x198
mov qword [rbp + 0x88], rax
lea rax, [rbp + 0xe0]
mov qword [rbp + 0x90], rax
mov qword [rbp + 0x98], 8
mov eax, dword [0x7ff65c7a3638]
mov dword [rbp + 0x84], eax
mov byte [rbp + 0xa0], dil
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x28], edi
mov qword [rsp + 0x20], rdi
mov r9d, 0x28
lea r8, [rbp + 0x80]
mov edx, 0x225914
mov rcx, qword [0x7ff65c7a3630]
call qword [sym.imp.kernel32.dll_DeviceIoControl]
mov rax, qword [rbp + 0xe0]
mov qword [rbp + 0x68], rax
movabs rax, 0x50f70d949514908
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xc0], rax
movabs rax, 0xb94fd363ab45bf95
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xc8], rax
movabs r15, 0x666e00aa2223265f
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x80], rax
movabs r14, 0xb94fd363ab45bff0
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x88], rax
movdqa xmm0, xmmword [rbp + 0x80]
xorps xmm0, xmmword [rbp + 0xc0]
movdqa xmmword [rbp + 0xc0], xmm0
xorps xmm0, xmm0
movups xmmword [rbp + 0x20], xmm0
mov qword [rbp + 0x30], rdi
mov qword [rbp + 0x38], rdi
lea rax, [rbp + 0xc0]
mov r8, rsi
inc r8
cmp byte [rax + r8], dil
jne 0x7ff65c4f6562
lea rdx, [rbp + 0xc0]
lea rcx, [rbp + 0x20]
call fcn.7ff65c4f3550
lea r8, [rbp + 0x20]
lea rdx, [rbp + 0xe8]
lea rcx, [rbp + 0x68]
call fcn.7ff65c4f49d0
mov qword [rbp + 0xf0], rdi
mov rcx, qword [rbp + 0xe8]
add rcx, 0x420
mov r8d, 8
lea rdx, [rbp + 0xf0]
call fcn.7ff65c4f3c40
mov qword [rbp], rdi
mov dword [rbp + 0x41], edi
mov word [rbp + 0x45], di
mov byte [rbp + 0x47], dil
mov dword [rbp + 0x20], 0x85b3b69
call fcn.7ff65c4f3d20
add rax, 0x10
mov qword [rbp + 0x28], rax
lea rax, [rbp]
mov qword [rbp + 0x30], rax
mov qword [rbp + 0x38], 8
mov eax, dword [0x7ff65c7a3638]
mov dword [rbp + 0x24], eax
mov byte [rbp + 0x40], dil
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x28], edi
mov qword [rsp + 0x20], rdi
mov r9d, 0x28
lea r8, [rbp + 0x20]
mov edx, 0x225914
mov rcx, qword [0x7ff65c7a3630]
call qword [sym.imp.kernel32.dll_DeviceIoControl]
movabs rax, 0x661d72cf5b424a0f
mov qword [rbp + 8], rax
mov rax, qword [rbp + 8]
mov qword [rbp + 0xc0], rax
mov qword [rbp + 8], r14
mov rax, qword [rbp + 8]
mov qword [rbp + 0xc8], rax
mov qword [rbp + 8], r15
mov rax, qword [rbp + 8]
mov qword [rbp + 0x80], rax
mov qword [rbp + 8], r14
mov rax, qword [rbp + 8]
mov qword [rbp + 0x88], rax
movdqa xmm0, xmmword [rbp + 0x80]
xorps xmm0, xmmword [rbp + 0xc0]
movdqa xmmword [rbp + 0xc0], xmm0
xorps xmm0, xmm0
movups xmmword [rbp + 0x20], xmm0
mov qword [rbp + 0x30], rdi
mov qword [rbp + 0x38], rdi
lea rax, [rbp + 0xc0]
mov r8, rsi
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], dil
jne 0x7ff65c4f66a0
lea rdx, [rbp + 0xc0]
lea rcx, [rbp + 0x20]
call fcn.7ff65c4f3550
lea r8, [rbp + 0x20]
lea rdx, [rbp + 0xc0]
lea rcx, [rbp + 0x68]
call fcn.7ff65c4f49d0
call fcn.7ff65c5174f0
mov rbx, rax
movabs rax, 0x10069de4a444f13
mov qword [rbp + 8], rax
mov rax, qword [rbp + 8]
mov qword [rbp + 0x80], rax
mov qword [rbp + 8], r14
mov rax, qword [rbp + 8]
mov qword [rbp + 0x88], rax
mov qword [rbp + 8], r15
mov rax, qword [rbp + 8]
mov qword [rbp + 0x20], rax
mov qword [rbp + 8], r14
mov rax, qword [rbp + 8]
mov qword [rbp + 0x28], rax
movdqa xmm0, xmmword [rbp + 0x20]
xorps xmm0, xmmword [rbp + 0x80]
movdqa xmmword [rbp + 0x80], xmm0
xorps xmm0, xmm0
movups xmmword [rbp + 0x20], xmm0
mov qword [rbp + 0x30], rdi
mov qword [rbp + 0x38], rdi
lea rax, [rbp + 0x80]
nop
inc rsi
cmp byte [rax + rsi], dil
jne 0x7ff65c4f6740
mov r8, rsi
lea rdx, [rbp + 0x80]
lea rcx, [rbp + 0x20]
call fcn.7ff65c4f3550
lea r8, [rbp + 0x20]
lea rdx, [rbp + 8]
lea rcx, [rbp + 0x68]
call fcn.7ff65c4f49d0
mov rcx, qword [rax]
mov qword [0x7ff65c7aad90], rcx
mov rax, qword [rbp + 0xe0]
mov qword [0x7ff65c7aadb8], rax
mov rax, qword [rbp + 0xe8]
mov qword [0x7ff65c7aadb0], rax
mov rax, qword [rbp + 0xf0]
mov qword [0x7ff65c7aadc0], rax
mov rax, qword [rbp + 0xc0]
mov qword [0x7ff65c7aada8], rax
mov rax, qword [rbp]
mov qword [0x7ff65c7aadc8], rax
mov qword [0x7ff65c7aada0], rbx
lea r11, [rsp + 0x2d0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret