Function at 0x1400a7200
Capabilities:
Access peb ldr_data
Contain obfuscated stackstrings
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x190]
sub rsp, 0x290
movaps xmmword [rsp + 0x280], xmm6
mov rax, qword [0x140365f00]
xor rax, rsp
mov qword [rbp + 0x170], rax
mov r15, r8
mov r14, rdx
mov rsi, rcx
mov qword [rbp + 0xe0], rdx
mov qword [rbp + 0xe8], r8
xor r12d, r12d
mov dword [rsp + 0x58], r12d
call fcn.140093e90
mov dword [rbp - 0x80], 0x3f272068
mov dword [rbp - 0x7c], 0x313d2137
mov word [rbp - 0x78], WSAGetLastError
mov byte [rbp - 0x76], 1
mov dword [rsp + 0x38], 0x3c312168
mov dword [rsp + 0x3c], 0x1006e37
mov dword [rsp + 0x60], 0x22353c68
mov dword [rsp + 0x64], 0x3b3b3a21
mov dword [rsp + 0x68], 0x65333f
mov byte [rsp + 0x6c], 1
mov dword [rsp + 0x58], 0x28352468
mov word [rsp + 0x5c], reloc.WS2_32.dll_WSAGetLastError
mov byte [rsp + 0x5e], 1
mov dword [rbp - 0x70], 0x34233a68
mov dword [rbp - 0x6c], 0x38353d20
mov dword [rbp - 0x68], 0x1006a33
mov dword [rbp + 0xf0], 0x3420363a
mov dword [rbp + 0xf4], 0x3224266f
mov dword [rbp + 0xf8], 0x3c3c3624
mov word [rbp + 0xfc], 0x100
lea r8, [rbp - 0x70]
lea rdx, [rbp + 0xf0]
lea rcx, [rbp - 0x20]
call fcn.140089aa0
nop
mov rdx, r14
cmp qword [r14 + 0x18], 0xf
jbe 0x1400a7313
mov rdx, qword [r14]
mov r8, qword [r14 + 0x10]
mov rcx, rax
call fcn.140003620
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x40], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x30], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea r8, [rsp + 0x58]
lea rdx, [rbp - 0x40]
lea rcx, [rbp + 0x40]
call fcn.140088f70
nop
mov rdx, r15
cmp qword [r15 + 0x18], 0xf
jbe 0x1400a735d
mov rdx, qword [r15]
mov r8, qword [r15 + 0x10]
mov rcx, rax
call fcn.140003620
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x20], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x30], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea r8, [rsp + 0x60]
lea rdx, [rbp + 0x20]
lea rcx, [rbp + 0xc0]
call fcn.140089840
nop
lea rdx, [rsi + 0x240]
mov r8, qword [rdx + 0x10]
cmp qword [rdx + 0x18], 0xf
jbe 0x1400a73b2
mov rdx, qword [rdx]
mov rcx, rax
call fcn.140003620
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0xa0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0xb0], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea r8, [rsp + 0x38]
lea rdx, [rbp + 0xa0]
lea rcx, [rbp + 0x80]
call fcn.140089060
nop
mov rdx, rsi
cmp qword [rsi + 0x18], 0xf
jbe 0x1400a7404
mov rdx, qword [rsi]
mov r8, qword [rsi + 0x10]
mov rcx, rax
call fcn.140003620
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x60], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x70], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea r8, [rbp - 0x80]
lea rdx, [rbp + 0x60]
lea rcx, [rbp - 0x60]
call fcn.140089390
nop
lea rdx, [rsi + 0x20]
cmp qword [rsi + 0x38], 0xf
jbe 0x1400a744f
mov rdx, qword [rsi + 0x20]
mov r8, qword [rsi + 0x30]
mov rcx, rax
call fcn.140003620
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x150], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x160], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov rdx, qword [rbp - 0x48]
cmp rdx, 0xf
jbe 0x1400a74bd
inc rdx
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400a74b8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400a74b8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140130784
movdqa xmm6, xmmword [0x14034bf10]
movdqu xmmword [rbp - 0x50], xmm6
mov byte [rbp - 0x60], 0
mov rdx, qword [rbp + 0x78]
cmp rdx, 0xf
jbe 0x1400a750d
inc rdx
mov rcx, qword [rbp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400a7507
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400a7507
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140130784
nop
mov rdx, qword [rbp + 0x98]
cmp rdx, 0xf
jbe 0x1400a7551
inc rdx
mov rcx, qword [rbp + 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400a754c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400a754c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140130784
movdqu xmmword [rbp + 0x90], xmm6
mov byte [rbp + 0x80], 0
mov rdx, qword [rbp + 0xb8]
cmp rdx, 0xf
jbe 0x1400a75a5
inc rdx
mov rcx, qword [rbp + 0xa0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400a759f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400a759f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140130784
nop
mov rdx, qword [rbp + 0xd8]
cmp rdx, 0xf
jbe 0x1400a75e9
inc rdx
mov rcx, qword [rbp + 0xc0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400a75e4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400a75e4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140130784
movdqu xmmword [rbp + 0xd0], xmm6
mov byte [rbp + 0xc0], 0
mov rdx, qword [rbp + 0x38]
cmp rdx, 0xf
jbe 0x1400a7637
inc rdx
mov rcx, qword [rbp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400a7631
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400a7631
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140130784
nop
mov rdx, qword [rbp + 0x58]
cmp rdx, 0xf
jbe 0x1400a7675
inc rdx
mov rcx, qword [rbp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400a7670
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400a7670
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140130784
movdqu xmmword [rbp + 0x50], xmm6
mov byte [rbp + 0x40], 0
mov rdx, qword [rbp - 0x28]
cmp rdx, 0xf
jbe 0x1400a76bd
inc rdx
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400a76b7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400a76b7
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140130784
nop
mov rdx, qword [rbp - 8]
cmp rdx, 0xf
jbe 0x1400a76fb
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400a76f6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400a76f6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140130784
movdqu xmmword [rbp - 0x10], xmm6
mov byte [rbp - 0x20], 0
lea rax, [rbp - 0x40]
mov qword [rsp + 0x70], rax
lea rdx, [rsi + 0x60]
lea rcx, [rbp - 0x40]
call fcn.14000cc10
mov rbx, rax
lea rdx, [rbp + 0x150]
lea rcx, [rbp + 0x20]
call fcn.14000cc10
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rbp + 0x110]
call fcn.1400a49f0
nop
lea rax, [rbp + 0xf0]
mov qword [rsp + 0x48], rax
lea rdx, [rbp + 0x110]
cmp qword [rbp + 0x128], 0xf
cmova rdx, qword [rbp + 0x110]
xorps xmm0, xmm0
movups xmmword [rbp + 0xf0], xmm0
mov qword [rbp + 0x100], r12
mov qword [rbp + 0x108], r12
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rdx + r8], 0
jne 0x1400a7783
lea rcx, [rbp + 0xf0]
call fcn.1400042a0
nop
lea rax, [rbp - 0x20]
mov qword [rsp + 0x70], rax
lea rdx, [0x140365040]
lea rcx, [rbp - 0x20]
call fcn.14000cc10
mov rbx, rax
lea rdx, [0x140365020]
lea rcx, [rbp + 0x40]
call fcn.14000cc10
nop
lea r8, [rbp + 0xf0]
mov rdx, rbx
mov rcx, rax
call fcn.140091920
xor eax, 0xa5a5
mov edx, eax
shr eax, 8
movzx r8d, al
movzx eax, dl
movabs r13, 0xcbf29ce484222325
xor rax, r13
movabs r12, 0x100000001b3
imul rax, r12
xor r8, rax
imul r8, r12
mov eax, edx
shr eax, 0x10
movzx ecx, al
xor r8, rcx
imul r8, r12
shr rdx, 0x18
xor r8, rdx
imul r8, r12
cmp r8w, 0xdf7f
jne 0x1400a7f13
mov qword [rbp + 0x18], 0
mov byte [rsp + 0x20], 0
mov r9b, 1
lea r8, [rbp - 0x20]
lea rdx, [rbp + 0x110]
lea rcx, [rbp + 0xf0]
call fcn.14008d950
nop
lea rdx, [rsi + 0x20]
lea rcx, [rsp + 0x60]
call fcn.140088820
nop
mov dword [rsp + 0x4c], 0x646972
mov dword [rsp + 0x48], 0x656e776f
mov byte [rsp + 0x50], 0
lea r9, [rsp + 0x30]
lea r8, [rsp + 0x4f]
lea rdx, [rsp + 0x48]
lea rcx, [rbp - 0x60]
call fcn.140004e40
nop
movzx ecx, byte [rbp + 0xf0]
test cl, cl
jne 0x1400a78be
mov byte [rbp + 0xf0], 1
call fcn.14008bdd0
mov qword [rbp + 0xf8], rax
movzx ecx, byte [rbp + 0xf0]
jmp 0x1400a78c5
mov rax, qword [rbp + 0xf8]
cmp cl, 1
jne 0x1400a78d8
lea rdx, [rbp - 0x60]
mov rcx, rax
call fcn.140091170
jmp 0x1400a78dd
mov rax, qword [rsp + 0x48]
lea rdx, [rsp + 0x60]
mov rcx, rax
call fcn.140090da0
movzx ebx, al
mov rdx, qword [rbp - 0x48]
cmp rdx, 0xf
jbe 0x1400a792b
inc rdx
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400a7926
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400a7926
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140130784
movdqu xmmword [rbp - 0x50], xmm6
mov byte [rbp - 0x60], 0
movzx edx, byte [rsp + 0x60]
lea rcx, [rsp + 0x68]
call fcn.140097a60
test bl, bl
jne 0x1400a79f9
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x1400a79d6
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x1400a79d6
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
mov r8d, 0xeba75daa
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x1400a79d1
nop
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x1400a79b0
cmp r8d, 0x1887b22
je 0x1400a79db
test r9d, r9d
jne 0x1400a7990
mov rax, qword [rax]
jmp 0x1400a7960
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r10
mov ecx, 8
call rdx
mov dword [rsp + 0x74], 0x656761
mov dword [rsp + 0x70], 0x7373656d
mov byte [rsp + 0x78], 0
lea r9, [rsp + 0x30]
lea r8, [rsp + 0x77]
lea rdx, [rsp + 0x70]
lea rcx, [rbp - 0x60]
call fcn.140004e40
nop
movzx ecx, byte [rbp + 0xf0]
test cl, cl
jne 0x1400a7a4e
mov byte [rbp + 0xf0], 1
call fcn.14008bdd0
mov qword [rbp + 0xf8], rax
movzx ecx, byte [rbp + 0xf0]
jmp 0x1400a7a55
mov rax, qword [rbp + 0xf8]
cmp cl, 1
jne 0x1400a7a68
lea rdx, [rbp - 0x60]
mov rcx, rax
call fcn.140091170
jmp 0x1400a7a6d
mov rax, qword [rsp + 0x48]
xorps xmm0, xmm0
movups xmmword [rbp + 0x130], xmm0
movdqu xmmword [rbp + 0x140], xmm6
mov byte [rbp + 0x130], 0
mov dword [rsp + 0x58], 0x17fc
cmp byte [rax], 3
jne 0x1400a7aa5
mov rdx, qword [rax + 8]
lea rax, [rbp + 0x130]
cmp rax, rdx
je 0x1400a7ac2
jmp 0x1400a7aa7
xor edx, edx
mov r8, qword [rdx + 0x10]
cmp qword [rdx + 0x18], 0xf
jbe 0x1400a7ab5
mov rdx, qword [rdx]
lea rcx, [rbp + 0x130]
call fcn.14000dae0
nop
mov rdx, qword [rbp - 0x48]
cmp rdx, 0xf
jbe 0x1400a7b00
inc rdx
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400a7afb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400a7afb
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140130784
movdqu xmmword [rbp - 0x50], xmm6
mov byte [rbp - 0x60], 0
mov word [rsp + 0x5b], 0x65
mov word [rsp + 0x58], 0x6f63
mov byte [rsp + 0x5a], 0x64
mov byte [rsp + 0x5d], 0
lea r9, [rsp + 0x30]
lea r8, [rsp + 0x5c]
lea rdx, [rsp + 0x58]
lea rcx, [rbp - 0x20]
call fcn.140004e40
nop
movzx ecx, byte [rbp + 0xf0]
test cl, cl
jne 0x1400a7b61
mov byte [rbp + 0xf0], 1
call fcn.14008bdd0
mov qword [rbp + 0xf8], rax
movzx ecx, byte [rbp + 0xf0]
jmp 0x1400a7b68
mov rax, qword [rbp + 0xf8]
cmp cl, 1
jne 0x1400a7b7b
lea rdx, [rbp - 0x20]
mov rcx, rax
call fcn.140091170
jmp 0x1400a7b80
mov rax, qword [rsp + 0x48]
mov rcx, rax
call fcn.140088dc0
mov edx, eax
shr eax, 8
movzx edi, al
movzx eax, dl
xor rax, r13
imul rax, r12
xor rdi, rax
imul rdi, r12
mov eax, edx
shr eax, 0x10
movzx ecx, al
xor rdi, rcx
imul rdi, r12
shr rdx, 0x18
xor rdi, rdx
imul rdi, r12
mov rdx, qword [rbp - 8]
cmp rdx, 0xf
jbe 0x1400a7bf9
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400a7bf4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400a7bf4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140130784
mov dword [rsp + 0x4c], 0x737365
mov dword [rsp + 0x48], 0x63637573
mov byte [rsp + 0x50], 0
lea r9, [rsp + 0x30]
lea r8, [rsp + 0x4f]
lea rdx, [rsp + 0x48]
lea rcx, [rbp - 0x40]
call fcn.140004e40
nop
mov ebx, 0x1effd
mov dword [rsp + 0x58], ebx
movzx ecx, byte [rbp + 0xf0]
test cl, cl
jne 0x1400a7c57
mov byte [rbp + 0xf0], 1
call fcn.14008bdd0
mov qword [rbp + 0xf8], rax
movzx ecx, byte [rbp + 0xf0]
jmp 0x1400a7c5e
mov rax, qword [rbp + 0xf8]
cmp cl, 1
jne 0x1400a7c74
lea rdx, [rbp - 0x40]
mov rcx, rax
call fcn.140091170
mov rcx, rax
jmp 0x1400a7c79
mov rcx, qword [rsp + 0x48]
lea rax, [rcx + 8]
cmp byte [rcx], 4
mov r12d, 0
cmovne rax, r12
cmp byte [rax], r12b
je 0x1400a7d37
mov dword [rsp + 0x3c], 0x737365
mov dword [rsp + 0x38], 0x63637573
mov byte [rsp + 0x40], r12b
lea r9, [rsp + 0x30]
lea r8, [rsp + 0x3f]
lea rdx, [rsp + 0x38]
lea rcx, [rbp - 0x20]
call fcn.140004e40
nop
mov ebx, 0x19efff
mov dword [rsp + 0x58], ebx
movzx ecx, byte [rbp + 0xf0]
test cl, cl
jne 0x1400a7cf1
mov byte [rbp + 0xf0], 1
call fcn.14008bdd0
mov qword [rbp + 0xf8], rax
movzx ecx, byte [rbp + 0xf0]
jmp 0x1400a7cf8
mov rax, qword [rbp + 0xf8]
cmp cl, 1
jne 0x1400a7d0e
lea rdx, [rbp - 0x20]
mov rcx, rax
call fcn.140091170
mov rcx, rax
jmp 0x1400a7d13
mov rcx, qword [rsp + 0x48]
lea rax, [rcx + 8]
cmp byte [rcx], 4
cmovne rax, r12
cmp byte [rax], 0
je 0x1400a7d32
movabs rax, 0xcbe5c873d26645f1
cmp rdi, rax
je 0x1400a7d37
xor dil, dil
jmp 0x1400a7d3a
mov dil, 1
test bl, 2
je 0x1400a7d4c
and ebx, 0xfffffffd
lea rcx, [rbp - 0x20]
call fcn.140003410
nop
test bl, 1
je 0x1400a7d5a
lea rcx, [rbp - 0x40]
call fcn.140003410
test dil, dil
je 0x1400a7e2e
lea rax, [rsp + 0x60]
mov qword [rsp + 0x48], rax
xor eax, eax
mov byte [rsp + 0x60], 4
mov byte [rsp + 0x38], al
mov rax, qword [rsp + 0x38]
mov qword [rsp + 0x68], rax
mov dword [rsp + 0x3c], 0x737365
mov dword [rsp + 0x38], 0x63637573
mov byte [rsp + 0x40], 0
lea r9, [rsp + 0x30]
lea r8, [rsp + 0x3f]
lea rdx, [rsp + 0x38]
lea rcx, [rbp - 0x20]
call fcn.140004e40
nop
movzx ecx, byte [rbp + 0xf0]
test cl, cl
jne 0x1400a7dd7
mov byte [rbp + 0xf0], 1
call fcn.14008bdd0
mov qword [rbp + 0xf8], rax
movzx ecx, byte [rbp + 0xf0]
jmp 0x1400a7dde
mov rax, qword [rbp + 0xf8]
cmp cl, 1
jne 0x1400a7df1
lea rdx, [rbp - 0x20]
mov rcx, rax
call fcn.140091170
jmp 0x1400a7df6
mov rax, qword [rsp + 0x48]
lea rdx, [rsp + 0x60]
mov rcx, rax
call fcn.140090d60
nop
lea rcx, [rbp - 0x20]
call fcn.140003410
lea rdx, [rbp + 0xf0]
lea rcx, [rsp + 0x60]
call fcn.14008ff40
mov rdx, rax
mov rcx, rsi
call fcn.14009f990
jmp 0x1400a7eda
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x1400a7eb6
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x1400a7eb6
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rbx]
add rdx, r10
mov r8d, 0x91cabd0f
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x1400a7eb1
nop dword [rax]
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x1400a7e90
cmp r8d, 0xc89afa8f
je 0x1400a7ebb
test r9d, r9d
jne 0x1400a7e70
mov rax, qword [rax]
jmp 0x1400a7e40
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r10
mov ecx, 9
call rdx
nop
mov r8, qword [rbp + 0x148]
cmp r8, 0xf
jbe 0x1400a7efb
mov rdx, qword [rbp + 0x130]
lea rcx, [rbp + 0x130]
call fcn.140003e40
nop
movzx edx, byte [rbp + 0xf0]
lea rcx, [rbp + 0xf8]
call fcn.140097a60
jmp 0x1400a7fcc
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop dword [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x1400a7fa6
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x1400a7fa6
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [r10 + r9*4]
mov ecx, dword [rcx + rbx]
add rcx, r10
mov r8d, 0x9b8a0f1f
movzx edx, byte [rcx]
inc rcx
test dl, dl
je 0x1400a7fa1
nop dword [rax]
movsx edx, dl
xor edx, r8d
imul r8d, edx, 0x1000193
movzx edx, byte [rcx]
lea rcx, [rcx + 1]
test dl, dl
jne 0x1400a7f80
cmp r8d, 0x4e72039f
je 0x1400a7fab
test r9d, r9d
jne 0x1400a7f60
mov rax, qword [rax]
jmp 0x1400a7f30
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r10
mov ecx, 7
call rdx
xor r12d, r12d
mov rdx, qword [rbp + 0x128]
cmp rdx, 0xf
jbe 0x1400a8010
inc rdx
mov rcx, qword [rbp + 0x110]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400a800b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400a800b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140130784
movdqu xmmword [rbp + 0x120], xmm6
mov byte [rbp + 0x110], 0
mov rdx, qword [rbp + 0x168]
cmp rdx, 0xf
jbe 0x1400a8064
inc rdx
mov rcx, qword [rbp + 0x150]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400a805e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400a805e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140130784
nop
mov rdx, qword [r14 + 0x18]
cmp rdx, 0xf
jbe 0x1400a809e
mov rcx, qword [r14]
inc rdx
cmp rdx, 0x1000
jb 0x1400a8099
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1400a8126
mov rcx, r8
call fcn.140130784
mov qword [r14 + 0x10], r12
mov qword [r14 + 0x18], reloc.WS2_32.dll_ntohs
mov byte [r14], 0
mov rdx, qword [r15 + 0x18]
cmp rdx, 0xf
jbe 0x1400a80e4
inc rdx
mov rcx, qword [r15]
cmp rdx, 0x1000
jb 0x1400a80df
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1400a812d
mov rcx, r8
call fcn.140130784
mov qword [r15 + 0x10], r12
mov qword [r15 + 0x18], reloc.WS2_32.dll_ntohs
mov byte [r15], 0
mov rcx, qword [rbp + 0x170]
xor rcx, rsp
call fcn.1401304e0
mov rbx, qword [rsp + 0x2e8]
movaps xmm6, xmmword [rsp + 0x280]
add rsp, 0x290
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3