Function at 0x14015d948
Capabilities:
Access peb ldr_data
Authenticate hmac
Encode data using xor
Enumerate process modules
Hash data using fnv
Parse pe header
Resolve function by fnv-1a hash
Resolve function by parsing pe exports

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x22c8]
mov eax, 0x23a0
call fcn.1401cb0e0
sub rsp, rax
mov rax, qword [0x14030ff40]
xor rax, rsp
mov qword [rbp + 0x2290], rax
mov r8d, ecx
xor edx, edx
mov ecx, 0x410
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
mov qword [rbp - 8], rax
test rax, rax
jne 0x14015d9a9
lea eax, [rbx + 1]
jmp 0x1401610e9
lea r9, [rbp + 0x40]
mov r8d, 0x2000
lea rdx, [rbp + 0x70]
mov rcx, rax
call sub.KERNEL32.dll_K32EnumProcessModules
test eax, eax
je 0x1401610de
xor ecx, ecx
mov dword [rbp - 0x60], ecx
test dword [rbp + 0x40], 0xfffffff8
jbe 0x1401610de
lea r12d, [rcx + 1]
lea r13d, [rcx + 8]
mov dil, byte [rsp + 0x40]
mov qword [rsp + 0x28], rdi
mov r14b, byte [rsp + 0x40]
mov qword [rsp + 0x30], r14
mov r15b, byte [rsp + 0x40]
mov qword [rsp + 0x38], r15
mov sil, byte [rsp + 0x40]
mov qword [rsp + 0x20], rsi
mov r9d, 0x104
lea r8, [rbp + 0x2070]
mov rdx, qword [rbp + rcx*8 + 0x70]
mov rcx, rbx
call sub.KERNEL32.dll_K32GetModuleFileNameExA
test eax, eax
je 0x1401610c7
lea rcx, [rbp + 0x2070]
call qword [sym.imp.SHLWAPI.dll_PathFindFileNameA]
test rax, rax
je 0x14015da5f
lea rcx, [rbp + 0x2070]
call qword [sym.imp.SHLWAPI.dll_PathFindFileNameA]
mov r8, rax
mov edx, 0x104
lea rcx, [rbp + 0x2180]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcpy_s]
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x48], xmm0
mov qword [rbp + 0x58], rax
mov dword [rbp - 0x30], 0xaf405f9e
mov dword [rbp - 0x2c], 0xab5a90ac
mov word [rbp - 0x28], 0x9192
mov byte [rbp - 0x26], ntohl
movups xmmword [rbp - 0x25], xmm0
mov dword [rbp - 0x15], eax
call fcn.1400a1a30
mov rbx, qword [rax]
call fcn.1400a1a40
mov r11, qword [rax]
xor r10d, r10d
cmp r10, 0x1f
jae 0x14015e523
movzx r8d, byte [rbp + r10 - 0x30]
mov r9b, r8b
cmp rbx, r10
ja 0x14015e51a
lea rax, [r11 + 1]
cmp rbx, rax
jae 0x14015daeb
movabs rcx, 0x1e203225330e532d
add rcx, r10
mov rax, r8
and rax, rcx
imul rdi, rax, 0xfffffffffffffffe
add rdi, r8
add rdi, rcx
sub dil, 0x3b
mov qword [rsp + 0x28], rdi
jmp 0x14015db25
je 0x14015e497
lea rax, [r11 + 3]
cmp rbx, rax
je 0x14015e418
lea rax, [r11 + 5]
cmp rbx, rax
je 0x14015e3bf
lea rax, [r11 + 4]
cmp rbx, rax
je 0x14015e391
lea rax, [r11 + 8]
cmp rbx, rax
je 0x14015e34e
mov r9b, r8b
cmp r11, r10
ja 0x14015e511
lea rax, [r11 + 0xa]
cmp rbx, rax
jae 0x14015db5b
movabs rdx, 0x78a41d0d302cd2b1
add rdx, r10
mov al, r8b
and al, dl
add al, al
mov cl, r8b
sub cl, al
add cl, 0x29
jmp 0x14015dd6b
lea rax, [r11 + 1]
cmp rbx, rax
je 0x14015e330
lea rax, [r11 + 2]
cmp rbx, rax
je 0x14015e312
lea rax, [r11 + 3]
cmp rbx, rax
je 0x14015e2f1
lea rax, [r11 + 5]
cmp rbx, rax
je 0x14015e2cb
lea rax, [r11 + rbx]
cmp rax, r10
jbe 0x14015e046
lea rax, [r11 + 0x200]
cmp rbx, rax
je 0x14015e02e
lea rax, [r11 + 0x2a]
cmp rbx, rax
je 0x14015e020
lea rax, [r11 + 0x5a]
cmp rbx, rax
je 0x14015e007
lea rax, [r11 + 0x41]
cmp rbx, rax
je 0x14015dfed
lea rcx, [r11 + 0x7a]
cmp rbx, rcx
je 0x14015dfd7
lea rax, [r11 + 5]
cmp rbx, rax
je 0x14015dfb4
lea rax, [r11 + 4]
cmp rbx, rax
je 0x14015df97
lea rax, [r11 + 3]
cmp rbx, rax
je 0x14015df76
lea rax, [r11 + 2]
cmp rbx, rax
je 0x14015df5b
lea rax, [r11 + 1]
cmp rbx, rax
je 0x14015db9c
mov rbx, rcx
lea r11, [rcx + 0xa]
lea rax, [r11 + 0x61]
cmp rcx, rax
jb 0x14015e4f0
lea rax, [r11 + 0x1000]
cmp rcx, rax
jb 0x14015e4cf
lea rax, [r11 + 0x400]
cmp rcx, rax
jb 0x14015dda5
lea rax, [r11 + 2]
cmp rcx, rax
jb 0x14015dd7a
lea rax, [r11 + 1]
cmp rcx, rax
jb 0x14015dd4f
lea rax, [r11 + 0x2a]
cmp rcx, rax
jb 0x14015df41
lea rax, [r11 + 0x5a]
cmp rcx, rax
jb 0x14015df29
lea rax, [r11 + 0x41]
cmp rcx, rax
jb 0x14015dee5
lea rax, [r11 + 6]
cmp rcx, rax
jb 0x14015dec0
lea rax, [r11 + 5]
cmp rcx, rax
jb 0x14015db9c
lea rbx, [r11 + 0x200]
lea r11, [rbx + 4]
lea rax, [r11 + 0x80]
cmp rbx, rax
ja 0x14015dea6
lea rax, [r11 + 0x5a]
cmp rbx, rax
ja 0x14015de8e
lea rax, [r11 + 0x41]
cmp rbx, rax
ja 0x14015de72
lea rax, [r11 + 0x7a]
cmp rbx, rax
ja 0x14015de57
lea rcx, [r11 + 0x61]
cmp rbx, rcx
ja 0x14015de3b
lea rax, [r11 + 0x1000]
cmp rbx, rax
ja 0x14015de21
lea rax, [r11 + 3]
cmp rbx, rax
ja 0x14015de05
lea rax, [r11 + 2]
cmp rbx, rax
ja 0x14015ddec
lea rax, [r11 + 1]
cmp rbx, rax
ja 0x14015ddd0
lea rax, [r11 + 0x2a]
cmp rbx, rax
ja 0x14015db9c
mov rbx, rcx
lea r11, [rcx + 9]
jmp 0x14015db9c
movabs rdx, 0x5b7b3a32b8c7296f
add rdx, r10
mov al, r8b
and al, dl
add al, al
mov cl, r8b
sub cl, al
sub cl, 9
add cl, dl
mov dil, cl
mov qword [rsp + 0x28], rdi
jmp 0x14015db8f
movabs rdx, 0x1f3ad5e852aa8315
add rdx, r10
mov al, r8b
and al, dl
add al, al
mov cl, r8b
sub cl, al
add cl, 0x6d
add cl, dl
mov dil, cl
mov qword [rsp + 0x28], rdi
jmp 0x14015db28
movabs rdx, 0xe2fa719dec8ddcbb
add rdx, r10
mov al, r8b
and al, dl
add al, al
mov cl, r8b
sub cl, al
sub cl, 0x1d
add cl, dl
mov dil, cl
mov qword [rsp + 0x28], rdi
jmp 0x14015dab1
lea edx, [r10 - 0x78]
mov al, r8b
and al, dl
mov ecx, 0x24
sub cl, al
add cl, cl
add cl, r8b
add cl, dl
jmp 0x14015e36d
lea ecx, [r10 + 0x2e]
mov al, r8b
and al, cl
add al, al
sub r8b, al
sub cl, 0x42
add cl, r8b
jmp 0x14015e15e
lea edx, [r10 - 0x2c]
mov al, r8b
and al, dl
mov ecx, reloc.WLDAP32.dll_Ordinal_26
sub cl, al
add cl, cl
add cl, r8b
add cl, dl
jmp 0x14015e3ad
lea edx, [r10 + 0x7a]
mov al, r8b
and al, dl
add al, al
mov cl, r8b
sub cl, al
sub cl, 0x56
add cl, dl
jmp 0x14015e3de
lea edx, [r10 + 0x20]
mov al, r8b
and al, dl
mov ecx, reloc.WS2_32.dll_recv
sub cl, al
add cl, cl
add cl, r8b
add cl, dl
jmp 0x14015e2e7
lea ecx, [r10 - 0x3a]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea edi, [rcx + r8]
sub dil, 0x6a
jmp 0x14015dfcd
lea edx, [r10 + 0x6c]
mov al, r8b
and al, dl
mov ecx, 6
sub cl, al
add cl, cl
add cl, r8b
add cl, dl
jmp 0x14015e437
lea edx, [r10 + 0x12]
mov al, r8b
and al, dl
add al, al
mov cl, r8b
sub cl, al
sub cl, 0x7e
jmp 0x14015df8b
lea ecx, [r10 - 0x48]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea edi, [rcx + r8]
sub dil, r13b
jmp 0x14015e4b6
lea ecx, [r10 - 0x29]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea edi, [rcx + r8]
add dil, 0x1f
mov qword [rsp + 0x28], rdi
mov byte [rbp + r10 - 0x30], dil
jmp 0x14015e4c7
lea edx, [r10 + 0x7d]
mov al, r8b
and al, dl
add al, al
mov cl, r8b
sub cl, al
sub cl, 0x6b
add cl, dl
mov dil, cl
mov qword [rsp + 0x28], rdi
mov r9b, r10b
cmp r11, 0x28
jb 0x14015dedb
sub r9b, 0x12
mov al, r8b
and al, r9b
add al, al
mov cl, r8b
sub cl, al
add cl, r9b
add cl, cl
sub cl, 4
jmp 0x14015e36d
lea edx, [r10 + 0x23]
mov al, r8b
and al, dl
add al, al
mov cl, r8b
sub cl, al
add cl, 0xb
jmp 0x14015e0a8
lea edx, [r10 - 0x37]
mov al, r8b
and al, dl
add al, al
mov cl, r8b
sub cl, al
sub cl, 0x7f
add cl, dl
jmp 0x14015e072
lea ecx, [r10 + 0x26]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea edi, [rcx + r8]
sub dil, 0xa
jmp 0x14015e4b6
lea edx, [r10 - 0x34]
mov al, r8b
and al, dl
mov ecx, gethostname
sub cl, al
add cl, cl
add cl, r8b
add cl, dl
mov qword [rsp + 0x28], rcx
jmp 0x14015e467
mov r9b, r10b
lea edx, [r9 + 0x72]
mov al, r8b
and al, dl
add al, al
mov cl, r8b
sub cl, al
sub cl, 0x1e
add cl, dl
jmp 0x14015e43a
lea edx, [r10 + 0x18]
mov ecx, Ordinal_46
mov al, r8b
and al, dl
sub cl, al
lea edi, [rcx + rcx]
add dil, r8b
add dil, dl
mov qword [rsp + 0x28], rdi
jmp 0x14015e405
lea ecx, [r10 - 0x42]
mov al, r8b
and al, cl
add al, al
sub r8b, al
sub cl, 0x32
jmp 0x14015e2e4
lea edx, [r10 + 0x64]
mov al, r8b
and al, dl
mov ecx, Ordinal_35
sub cl, al
add cl, cl
add cl, r8b
jmp 0x14015de34
lea ecx, [r10 + 0xa]
mov al, r8b
and al, cl
add al, al
sub r8b, al
sub cl, 0x46
add cl, r8b
jmp 0x14015e3ad
lea edx, [r10 - 0x50]
mov ecx, Ordinal_27
jmp 0x14015e150
lea edx, [r10 + 0x56]
mov al, r8b
and al, dl
add al, al
mov cl, r8b
sub cl, al
sub cl, 0x5a
jmp 0x14015dde5
lea rax, [r11 + 0x200]
cmp rbx, rax
jae 0x14015e0f3
movabs rcx, 0x1e203225330e532d
add rcx, r10
mov al, cl
and al, r8b
add al, al
sub cl, al
sub cl, 0x3b
add cl, r8b
mov dil, cl
mov qword [rsp + 0x28], rdi
lea rax, [r11 + rbx]
cmp rax, 0x40
je 0x14015e2ad
lea rax, [r11 + 0xa]
cmp rbx, rax
jbe 0x14015e18d
lea edx, [r10 - 0x47]
mov al, r8b
and al, dl
add al, al
mov cl, r8b
sub cl, al
sub cl, 0xf
add cl, dl
mov dil, cl
mov qword [rsp + 0x28], rdi
cmp rbx, 0x200
jae 0x14015e295
lea rax, [r11 + 4]
cmp rbx, rax
jbe 0x14015e216
mov r9b, r10b
lea edx, [r9 + 0x6a]
mov al, r8b
and al, dl
mov ecx, reloc.WS2_32.dll_listen
sub cl, al
add cl, cl
add cl, r8b
add cl, dl
mov dil, cl
mov qword [rsp + 0x28], rdi
jmp 0x14015df05
lea rax, [r11 + 1]
cmp rbx, rax
jne 0x14015e118
lea edx, [r10 + 0x62]
mov al, r8b
and al, dl
mov ecx, reloc.WLDAP32.dll_Ordinal_41
sub cl, al
add cl, cl
add cl, r8b
add cl, dl
jmp 0x14015e4b3
lea rax, [r11 + 3]
cmp rbx, rax
jne 0x14015e13e
mov r9b, r10b
lea edx, [r9 + 0x16]
mov al, r8b
and al, dl
mov ecx, 0x33
sub cl, al
add cl, cl
add cl, r8b
jmp 0x14015dfad
lea rax, [r11 + 5]
cmp rbx, rax
jne 0x14015e168
lea edx, [r10 - 0x28]
mov ecx, ntohl
mov al, r8b
and al, dl
sub cl, al
add cl, cl
add cl, r8b
add cl, dl
mov qword [rsp + 0x28], rcx
jmp 0x14015e38c
lea rax, [r11 + 4]
cmp rbx, rax
jne 0x14015e07a
lea edx, [r10 + 0x32]
mov al, r8b
and al, dl
add al, al
mov cl, r8b
sub cl, al
sub cl, 0x5e
jmp 0x14015dde5
lea rax, [r11 + 1]
cmp rbx, rax
jne 0x14015e1ae
lea edx, [r10 + 0x13]
mov al, r8b
and al, dl
add al, al
mov cl, r8b
sub cl, al
add cl, 0x7b
jmp 0x14015dde5
lea rax, [r11 + 3]
cmp rbx, rax
jne 0x14015e1cf
lea edx, [r10 + 0x21]
mov al, r8b
and al, dl
add al, al
mov cl, r8b
sub cl, al
add cl, 0x19
jmp 0x14015de34
lea rax, [r11 + 5]
cmp rbx, rax
jne 0x14015e1ee
lea ecx, [r10 + 0x7b]
mov al, r8b
and al, cl
add al, al
sub r8b, al
sub cl, 0x5d
jmp 0x14015e2e4
lea rax, [r11 + 2]
cmp rbx, rax
jne 0x14015e0b2
lea ecx, [r10 - 0x1d]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea edi, [rcx + r8]
sub dil, 0x35
jmp 0x14015e4b6
lea rax, [r11 + 1]
cmp rbx, rax
jne 0x14015e23a
lea ecx, [r10 - 0x3c]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea edi, [rcx + r8]
sub dil, 0x5c
jmp 0x14015e4b6
lea rax, [r11 + 2]
cmp rbx, rax
jne 0x14015e25e
mov r9b, r10b
lea edx, [r9 + 0x78]
mov al, r8b
and al, dl
add al, al
mov cl, r8b
sub cl, al
sub cl, 0x48
jmp 0x14015dfad
lea rax, [r11 + 3]
cmp rbx, rax
jne 0x14015e275
lea edx, [r10 - 0x2e]
mov ecx, reloc.WLDAP32.dll_Ordinal_33
jmp 0x14015dfbd
lea rax, [r11 + 5]
cmp rbx, rax
jne 0x14015df02
lea ecx, [r10 + 0x2c]
mov al, r8b
and al, cl
add al, al
sub r8b, al
sub cl, 0x34
jmp 0x14015e2e4
lea edx, [r10 + 0x48]
mov al, r8b
and al, dl
mov cl, r8b
sub cl, al
add cl, 4
add cl, cl
jmp 0x14015de34
mov r9b, r10b
lea edx, [r9 - 0x5e]
mov al, r8b
and al, dl
add al, al
mov cl, r8b
sub cl, al
sub cl, r8b
sub cl, 0x6e
jmp 0x14015dfad
movabs rcx, 0xa5e612812ebc1273
add rcx, r10
mov al, cl
and al, r8b
add al, al
sub cl, al
sub cl, 0x25
add cl, r8b
mov qword [rsp + 0x28], rcx
jmp 0x14015e3fd
movabs rcx, 0x69a5ae36c89f6c19
add rcx, r10
mov al, cl
and al, r8b
add al, al
sub cl, al
add cl, 0x51
add cl, r8b
jmp 0x14015e3de
movabs rcx, 0x2d6549ec6282c5bf
add rcx, r10
mov al, cl
and al, r8b
add al, al
sub cl, al
sub cl, 0x39
jmp 0x14015e018
movabs rcx, 0xb4e481579649790b
add rcx, r10
mov al, cl
and al, r8b
add al, al
sub cl, al
sub cl, 0x4d
add cl, r8b
jmp 0x14015e36d
movabs rcx, 0x3c63b8c2ca102c57
add rcx, r10
mov al, cl
and al, r8b
add al, al
sub cl, al
sub cl, 0x61
add cl, r9b
mov r8b, r9b
mov qword [rsp + 0x28], rcx
lea ecx, [r10 + 0x1b]
mov al, r8b
and al, cl
add al, al
sub r8b, al
add r8b, 0x43
add r8b, cl
mov byte [rbp + r10 - 0x30], r8b
add r11, r12
jmp 0x14015e3b2
movabs rcx, 0xc3e2f02dfdd6dfa3
add rcx, r10
mov al, cl
and al, r8b
add al, al
sub cl, al
sub cl, 0x75
add cl, r9b
mov qword [rsp + 0x28], rcx
sub r10, r12
mov rdi, qword [rsp + 0x28]
jmp 0x14015e4c7
movabs rcx, 0x87a28be397ba3949
add rcx, r10
mov al, cl
and al, r8b
add al, al
sub cl, al
add cl, r9b
add cl, r12b
mov r8b, r9b
mov qword [rsp + 0x28], rcx
lea edx, [r10 + 0x75]
mov al, r8b
and al, dl
add al, al
sub cl, al
sub cl, 0x33
add cl, r8b
add cl, dl
mov byte [rbp + r10 - 0x30], cl
add rbx, r11
mov rdi, qword [rsp + 0x28]
movzx eax, dil
or rcx, 0xffffffffffffffff
sub rcx, rax
add r10, rcx
jmp 0x14015e4c7
movabs rcx, 0xd2e15f046564463b
add rcx, r10
mov al, cl
and al, r8b
add al, al
sub cl, al
add cl, 0x63
add cl, r9b
mov r8b, r9b
mov r9b, r10b
mov qword [rsp + 0x28], rcx
sub r9b, 0x31
mov al, r8b
and al, r9b
add al, al
mov cl, r8b
sub cl, al
add cl, 0x57
add cl, r9b
movzx eax, cl
mov byte [rbp + r10 - 0x30], al
add r11, r12
add rax, r11
sub r10, rax
lea edx, [r10 - 4]
mov al, r8b
and al, dl
mov ecx, reloc.WS2_32.dll_ntohl
sub cl, al
add cl, cl
add cl, r8b
add cl, dl
mov byte [rbp + r10 - 0x30], cl
add rbx, r12
or rax, 0xffffffffffffffff
sub rax, rbx
add r10, rax
mov rdi, qword [rsp + 0x28]
jmp 0x14015e4bb
movabs rcx, 0x5a60966f992af987
add rcx, r10
mov al, cl
and al, r8b
add al, al
sub cl, al
add cl, 0x4f
add cl, r9b
mov dil, cl
mov qword [rsp + 0x28], rdi
movzx eax, byte [rbp + r10 - 0x30]
add rax, r11
add r10, rax
add r10, r12
jmp 0x14015da9e
add r10b, 0x61
mov al, r8b
and al, r10b
add al, al
sub r8b, al
lea edi, [r10 + r8]
add dil, 0x59
mov qword [rsp + 0x28], rdi
jmp 0x14015da9b
add r10b, 7
mov al, r8b
and al, r10b
add al, al
sub r8b, al
lea edi, [r10 + r8]
sub dil, 0x31
mov qword [rsp + 0x28], rdi
jmp 0x14015da8b
lea rax, [rbp + 0x15fe20c]
jmp 0x14015e527
lea rax, [rbp + 0x12e3539]
jmp 0x14015e527
lea rax, [rbp - 0x30]
mov qword [rbp + 0x20], rax
mov dword [rbp - 0x80], 0xa1b1b0a2
mov dword [rbp - 0x7c], 0xdba2dade
mov dword [rbp - 0x78], 0x9f9089dc
mov byte [rbp - 0x74], 0xe2
xor eax, eax
mov dword [rbp - 0x73], eax
mov word [rbp - 0x6f], ax
mov byte [rbp - 0x6d], al
call fcn.1400a1a30
mov rbx, qword [rax]
call fcn.1400a1a40
mov r10, qword [rax]
xor edi, edi
cmp rdi, 0x14
jae 0x14015ef54
movzx r9d, byte [rbp + rdi - 0x80]
mov edx, r9d
mov r8b, dil
mov r11b, r8b
cmp rbx, rdi
ja 0x14015ef4b
lea rax, [r10 + 1]
cmp rbx, rax
jae 0x14015e5b5
movabs rcx, 0x9ce697828fd83d5d
add rcx, rdi
mov rax, rdx
and rax, rcx
imul r14, rax, 0xfffffffffffffffe
add r14, rdx
add r14, rcx
add r14b, 0x75
mov qword [rsp + 0x30], r14
jmp 0x14015e5d5
je 0x14015eecd
lea rax, [r10 + 3]
cmp rbx, rax
je 0x14015eeaa
lea rax, [r10 + 7]
cmp rbx, rax
je 0x14015ee77
mov r8b, dil
cmp r10, rdi
ja 0x14015ef42
lea rax, [r10 + 0xa]
cmp rbx, rax
jae 0x14015e5ff
lea ecx, [r8 - 0x5f]
mov al, cl
and al, r9b
add al, al
sub cl, al
sub cl, 0x67
jmp 0x14015e80a
lea rax, [r10 + 1]
cmp rbx, rax
je 0x14015ee5f
lea rax, [r10 + 3]
cmp rbx, rax
je 0x14015ee47
lea rax, [r10 + 5]
cmp rbx, rax
je 0x14015ee11
lea rax, [r10 + 7]
cmp rbx, rax
je 0x14015eda1
lea rax, [rbx + r10]
cmp rax, rdi
jbe 0x14015eac0
lea rax, [r10 + 0x1000]
cmp rbx, rax
je 0x14015eaa5
lea rax, [r10 + 0x40]
cmp rbx, rax
je 0x14015ea87
lea rax, [r10 + 0x7a]
cmp rbx, rax
je 0x14015ea69
lea rax, [r10 + 6]
cmp rbx, rax
je 0x14015ea50
lea rax, [r10 + 0x64]
cmp rbx, rax
je 0x14015ea35
lea rax, [r10 + 0x5a]
cmp rbx, rax
je 0x14015ea19
lea rax, [r10 + 0x200]
cmp rbx, rax
je 0x14015ea01
lea rax, [r10 + 1]
cmp rbx, rax
je 0x14015e9e1
lea rax, [r10 + 0x10]
cmp rbx, rax
je 0x14015e9c5
lea rax, [r10 + 0x400]
cmp rbx, rax
je 0x14015e640
lea rbx, [r10 + 3]
lea r10, [rbx + 0x28]
lea rax, [r10 + 0x28]
cmp rbx, rax
jb 0x14015ef21
lea rax, [r10 + 0x61]
cmp rbx, rax
jb 0x14015ef00
lea rax, [r10 + 0x42]
cmp rbx, rax
jb 0x14015e83a
lea rax, [r10 + 0x41]
cmp rbx, rax
jb 0x14015e81a
lea rax, [r10 + 8]
cmp rbx, rax
jb 0x14015e7fa
lea rax, [r10 + 0x80]
cmp rbx, rax
jb 0x14015e9b0
lea rax, [r10 + 0xa]
cmp rbx, rax
jb 0x14015e99b
lea rax, [r10 + 0x3e8]
cmp rbx, rax
jb 0x14015e986
lea rax, [r10 + 2]
cmp rbx, rax
jb 0x14015e960
lea rax, [r10 + 0x20]
cmp rbx, rax
jb 0x14015e640
lea rbx, [r10 + 0x1000]
lea r10, [rbx + 0x1000]
lea rax, [r10 + 4]
cmp rbx, rax
ja 0x14015e93f
lea rax, [r10 + 0x40]
cmp rbx, rax
ja 0x14015e921
lea rax, [r10 + 0x7a]
cmp rbx, rax
ja 0x14015e905
lea rax, [r10 + 0x64]
cmp rbx, rax
ja 0x14015e8e5
lea rax, [r10 + 0x5a]
cmp rbx, rax
ja 0x14015e8c7
lea rax, [r10 + 9]
cmp rbx, rax
ja 0x14015e8ab
lea rax, [r10 + 0x200]
cmp rbx, rax
ja 0x14015e890
lea rax, [r10 + 0x10]
cmp rbx, rax
ja 0x14015e875
lea rax, [r10 + 0x400]
cmp rbx, rax
ja 0x14015e85a
lea rax, [r10 + 3]
cmp rbx, rax
ja 0x14015e640
lea rbx, [r10 + 0x28]
lea r10, [rbx + 0x28]
jmp 0x14015e640
lea ecx, [r8 + 0x7f]
mov al, cl
and al, r9b
add al, al
sub cl, al
sub cl, 0x79
add cl, r9b
mov r14b, cl
mov qword [rsp + 0x30], r14
jmp 0x14015e633
lea ecx, [r8 - 0x3b]
mov al, cl
and al, r9b
add al, al
sub cl, al
sub cl, 0x63
add cl, r9b
mov r14b, cl
mov qword [rsp + 0x30], r14
jmp 0x14015e5d8
lea ecx, [r8 + 0xb]
mov al, cl
and al, r9b
add al, al
sub cl, al
sub cl, 0x4d
add cl, r9b
mov r14b, cl
mov qword [rsp + 0x30], r14
jmp 0x14015e578
add r8b, r13b
mov al, r9b
and al, r8b
add al, al
mov cl, r9b
sub cl, al
sub cl, 0x38
add cl, r8b
jmp 0x14015ee8a
add r8b, 0x4e
mov al, r9b
and al, r8b
add al, al
sub r9b, al
lea ecx, [r8 + r9]
sub cl, 0x22
jmp 0x14015eea5
sub r8b, 0x6c
mov al, r9b
and al, r8b
add al, al
sub r9b, al
lea ecx, [r8 + r9]
sub cl, 0xc
jmp 0x14015eec0
lea edx, [r8 - 0x26]
mov al, r9b
and al, dl
mov ecx, 5
sub cl, al
add cl, cl
add cl, r9b
add cl, dl
jmp 0x14015ed65
add r8b, 0x20
mov al, r9b
and al, r8b
mov ecx, reloc.WS2_32.dll_recv
sub cl, al
add cl, cl
add cl, r9b
add cl, r8b
jmp 0x14015ee27
add r8b, 0x66
mov al, r9b
and al, r8b
mov ecx, reloc.WLDAP32.dll_Ordinal_27
sub cl, al
lea r14d, [rcx + rcx]
add r14b, r9b
add r14b, r8b
jmp 0x14015ebf0
lea edx, [r8 - 0x54]
mov al, r9b
and al, dl
mov ecx, Ordinal_41
sub cl, al
add cl, cl
add cl, r9b
add cl, dl
jmp 0x14015edb4
sub r8b, 0xe
mov al, r9b
and al, r8b
mov ecx, Ordinal_50
sub cl, al
add cl, cl
add cl, r9b
add cl, r8b
jmp 0x14015e9f7
add r8b, 0x38
mov al, r9b
and al, r8b
mov ecx, reloc.WLDAP32.dll_Ordinal_60
sub cl, al
add cl, cl
add cl, r9b
add cl, r8b
mov r14b, cl
jmp 0x14015eee8
add r8b, 0x67
mov al, r8b
and al, r9b
add al, al
sub r8b, al
lea r14d, [r9 + r8]
add r14b, 0x2f
mov qword [rsp + 0x30], r14
mov byte [rbp + rdi - 0x80], r14b
jmp 0x14015eef8
lea ecx, [r8 - 0x53]
mov al, cl
and al, r9b
add al, al
sub cl, al
add cl, 0x45
jmp 0x14015eb52
lea ecx, [r8 - 0xd]
mov al, cl
and al, r9b
add al, al
sub cl, al
add cl, 0x5b
jmp 0x14015eb16
lea ecx, [r8 + 0x39]
mov al, cl
and al, r9b
add al, al
sub cl, al
add cl, 0x71
jmp 0x14015eae0
sub r8b, 0x3a
mov al, r8b
and al, r9b
add al, al
sub r8b, al
lea r14d, [r9 + r8]
sub r14b, 0x6a
jmp 0x14015eee8
add r8b, 0xc
mov al, r8b
and al, r9b
add al, al
sub r8b, al
lea ecx, [r9 + r8]
sub cl, 0x54
mov qword [rsp + 0x30], rcx
jmp 0x14015ede0
lea ecx, [r8 + 0x52]
mov al, cl
and al, r9b
add al, al
sub cl, al
sub cl, 0x3e
add cl, r9b
jmp 0x14015edb4
sub r8b, 0x68
mov al, r8b
and al, r9b
add al, al
sub r8b, al
lea r14d, [r9 + r8]
sub r14b, 0x28
jmp 0x14015ebf0
sub r8b, 0x22
mov al, r8b
and al, r9b
add al, al
sub r8b, al
lea ecx, [r9 + r8]
sub cl, 0x12
jmp 0x14015ee27
lea edx, [r8 + 0x24]
mov al, dl
and al, r9b
mov ecx, 2
sub cl, al
add cl, cl
add cl, dl
jmp 0x14015ed62
add r8b, 0x6a
mov al, r8b
and al, r9b
mov ecx, reloc.WS2_32.dll_listen
sub cl, al
add cl, cl
add cl, r8b
add cl, r9b
jmp 0x14015eec0
sub r8b, 0x50
mov al, r8b
and al, r9b
mov ecx, Ordinal_27
sub cl, al
add cl, cl
add cl, r8b
add cl, r9b
jmp 0x14015eea5
sub r8b, 0xa
mov al, r8b
and al, r9b
mov ecx, reloc.WLDAP32.dll_Ordinal_35
sub cl, al
add cl, cl
add cl, r8b
jmp 0x14015ee87
lea rax, [r10 + 0x200]
cmp rbx, rax
jae 0x14015eb87
lea ecx, [r8 + 0x5d]
mov al, cl
and al, r9b
add al, al
sub cl, al
add cl, 0x75
add cl, r9b
mov r14b, cl
mov qword [rsp + 0x30], r14
lea rax, [rbx + r10]
cmp rax, 0x2a
je 0x14015ed8a
lea rax, [r10 + 0x2a]
cmp rbx, rax
jbe 0x14015ec64
lea ecx, [r8 + 0x29]
mov al, cl
and al, r9b
add al, al
sub cl, al
sub cl, 0x1f
add cl, r9b
mov r14b, cl
mov qword [rsp + 0x30], r14
cmp rbx, 0x200
jae 0x14015ed4f
lea rax, [r10 + 0x200]
cmp rbx, rax
jbe 0x14015ecf2
lea edx, [r8 - 0x36]
mov al, dl
and al, r9b
mov ecx, 0x3d
sub cl, al
add cl, cl
add cl, dl
add cl, r9b
mov r14b, cl
mov qword [rsp + 0x30], r14
cmp r10, 0x2a
jb 0x14015e97c
add r8b, 0xe
mov al, r8b
and al, r9b
mov ecx, reloc.WS2_32.dll_ntohs
sub cl, al
add cl, cl
add cl, r8b
add cl, r9b
add cl, cl
jmp 0x14015ee8a
lea rax, [r10 + 1]
cmp rbx, rax
jne 0x14015ebae
add r8b, 0x42
mov ecx, Ordinal_27
mov al, r8b
and al, r9b
sub cl, al
add cl, cl
add cl, r8b
add cl, r9b
jmp 0x14015e958
lea rax, [r10 + 2]
cmp rbx, rax
jne 0x14015ebd0
lea edx, [r8 - 0x4a]
mov al, dl
and al, r9b
mov ecx, 3
sub cl, al
add cl, cl
add cl, dl
jmp 0x14015ea11
lea rax, [r10 + 4]
cmp rbx, rax
jne 0x14015ebfa
add r8b, 0x70
mov al, r8b
and al, r9b
add al, al
sub r8b, al
lea r14d, [r9 + r8]
sub r14b, 0x10
mov qword [rsp + 0x30], r14
jmp 0x14015ee34
lea rax, [r10 + 3]
cmp rbx, rax
jne 0x14015ec1e
add r8b, 0x2a
mov al, r8b
and al, r9b
add al, al
sub r8b, al
lea ecx, [r9 + r8]
sub cl, 0x26
jmp 0x14015ee27
lea rax, [r10 + 6]
cmp rbx, rax
jne 0x14015ec3c
lea ecx, [r8 - 0x1c]
mov al, cl
and al, r9b
add al, al
sub cl, al
sub cl, 0x3c
jmp 0x14015ed62
lea rax, [r10 + 9]
cmp rbx, rax
jne 0x14015eaeb
add r8b, 0x12
mov al, r8b
and al, r9b
add al, al
sub r8b, al
lea ecx, [r9 + r8]
sub cl, 0x7e
jmp 0x14015ee8a
lea rax, [r10 + 1]
cmp rbx, rax
jne 0x14015ec88
sub r8b, 0x1d
mov al, r8b
and al, r9b
add al, al
sub r8b, al
lea ecx, [r9 + r8]
sub cl, 0x35
jmp 0x14015ee8a
lea rax, [r10 + 3]
cmp rbx, rax
jne 0x14015ecac
add r8b, 0x57
mov al, r8b
and al, r9b
add al, al
sub r8b, al
lea ecx, [r9 + r8]
sub cl, 0x61
jmp 0x14015eec0
lea rax, [r10 + 5]
cmp rbx, rax
jne 0x14015ecd0
sub r8b, 0x35
mov al, r8b
and al, r9b
add al, al
sub r8b, al
lea ecx, [r9 + r8]
add cl, 0x73
jmp 0x14015ee27
lea rax, [r10 + 7]
cmp rbx, rax
jne 0x14015eb21
lea ecx, [r8 + 0x3f]
mov al, cl
and al, r9b
add al, al
sub cl, al
add cl, 0x47
jmp 0x14015ea11
lea rax, [r10 + 1]
cmp rbx, rax
jne 0x14015ed09
sub r8b, 0x7c
mov ecx, reloc.WLDAP32.dll_Ordinal_50
jmp 0x14015eb99
lea rax, [r10 + 3]
cmp rbx, rax
jne 0x14015ed30
add r8b, 0x6c
mov al, r8b
and al, r9b
mov ecx, 6
sub cl, al
add cl, cl
add cl, r8b
add cl, r9b
jmp 0x14015ee27
lea rax, [r10 + 6]
cmp rbx, rax
jne 0x14015eb5d
lea ecx, [r8 + 0x26]
mov al, cl
and al, r9b
add al, al
sub cl, al
sub cl, 0xa
jmp 0x14015ed62
lea ecx, [r8 - 0x38]
mov al, cl
and al, r9b
add al, al
sub cl, al
sub cl, 0x78
add cl, r9b
add cl, r9b
mov qword [rsp + 0x30], rcx
add r8b, 0x25
mov al, r9b
and al, r8b
add al, al
sub cl, al
sub cl, 3
add cl, r9b
add cl, r8b
mov byte [rbp + rdi - 0x80], cl
jmp 0x14015ee2c
lea edx, [r8 - 0x7e]
mov al, dl
and al, r9b
mov ecx, reloc.WS2_32.dll_gethostname
sub cl, al
add cl, cl
jmp 0x14015e91a
lea ecx, [r8 - 0x49]
mov al, cl
and al, r9b
add al, al
sub cl, al
add cl, r9b
sub cl, r12b
mov qword [rsp + 0x30], rcx
sub r8b, 0x21
mov al, r9b
and al, r8b
add al, al
mov cl, r9b
sub cl, al
sub cl, 0x19
add cl, r8b
movzx eax, cl
mov byte [rbp + rdi - 0x80], al
add r10, r12
add rax, r10
sub rdi, rax
lea edx, [rdi + 0x3c]
mov al, r9b
and al, dl
mov ecx, reloc.WLDAP32.dll_Ordinal_46
sub cl, al
add cl, cl
add cl, r9b
add cl, dl
mov byte [rbp + rdi - 0x80], cl
add rbx, r12
or rax, 0xffffffffffffffff
sub rax, rbx
add rdi, rax
mov r14, qword [rsp + 0x30]
jmp 0x14015eeed
add r8b, 0x43
mov al, r8b
and al, r9b
add al, al
sub r8b, al
lea ecx, [r9 + r8]
add cl, 0x2b
mov qword [rsp + 0x30], rcx
add rbx, r10
mov r14, qword [rsp + 0x30]
movzx eax, r14b
or rcx, 0xffffffffffffffff
sub rcx, rax
add rdi, rcx
jmp 0x14015eef8
sub r8b, 0x31
mov al, r8b
and al, r9b
add al, al
sub r8b, al
lea ecx, [r9 + r8]
add cl, 0x57
jmp 0x14015eec0
add r8b, 0x5b
mov al, r8b
and al, r9b
add al, al
sub r8b, al
lea ecx, [r9 + r8]
sub cl, 0x7d
jmp 0x14015ee8a
lea ecx, [r11 - 0x19]
mov al, cl
and al, r9b
add al, al
sub cl, al
sub cl, 0x51
add cl, r9b
add r11b, 0x6b
mov al, r9b
and al, r11b
add al, al
sub r9b, al
add r9b, 0x13
add r9b, r11b
mov byte [rbp + rdi - 0x80], r9b
add r10, r12
jmp 0x14015eec0
add r11b, 0x73
mov al, r11b
and al, r9b
add al, al
sub r11b, al
lea ecx, [r9 + r11]
sub cl, 0x25
mov qword [rsp + 0x30], rcx
sub rdi, r12
mov r14, rcx
jmp 0x14015eef8
movabs rax, 0xd6b3c687af88b817
add rax, rdi
and dl, al
add dl, dl
sub al, dl
lea r14d, [r9 + rax]
add r14b, 0x5f
mov qword [rsp + 0x30], r14
movzx eax, byte [rbp + rdi - 0x80]
add rax, r10
add rdi, rax
add rdi, r12
jmp 0x14015e562
add r8b, 0x51
mov al, r9b
and al, r8b
add al, al
sub r9b, al
lea r14d, [r8 + r9]
sub r14b, 0x37
mov qword [rsp + 0x30], r14
jmp 0x14015e560
sub r8b, 0x69
mov al, r9b
and al, r8b
add al, al
sub r9b, al
lea r14d, [r8 + r9]
sub r14b, 0x21
mov qword [rsp + 0x30], r14
jmp 0x14015e550
lea rax, [rbp + 0x14939fc]
jmp 0x14015ef58
lea rax, [rbp + 0x617759]
jmp 0x14015ef58
lea rax, [rbp - 0x80]
mov qword [rbp + 0x28], rax
mov dword [rbp - 0x50], 0x91e1e0d2
mov dword [rbp - 0x4c], 0x9b929a9e
mov dword [rbp - 0x48], 0x9fe0e99c
mov byte [rbp - 0x44], reloc.WLDAP32.dll_Ordinal_50
xorps xmm0, xmm0
movups xmmword [rbp - 0x43], xmm0
mov edi, gethostname
call fcn.1400a1a30
mov rbx, qword [rax]
call fcn.1400a1a40
mov r10, qword [rax]
mov r14b, 0x3f
xor r11d, r11d
cmp r11, 0x1d
jae 0x14015f8e9
movzx r9d, byte [rbp + r11 - 0x50]
mov edx, r9d
cmp rbx, r11
ja 0x14015f8e0
lea rax, [r10 + 1]
cmp rbx, rax
jae 0x14015efe4
movabs rcx, 0xa29b93e54228e6b5
add rcx, r11
mov rax, rdx
and rax, rcx
imul r15, rax, 0xfffffffffffffffe
add r15, rdx
add r15, rcx
add r15b, 0xd
mov qword [rsp + 0x38], r15
jmp 0x14015f011
je 0x14015f861
lea rax, [r10 + 2]
cmp rbx, rax
je 0x14015f830
lea rax, [r10 + 3]
cmp rbx, rax
je 0x14015f80e
lea rax, [r10 + 7]
cmp rbx, rax
je 0x14015f7d6
mov r8b, r11b
cmp r10, r11
ja 0x14015f8d7
lea rax, [r10 + 0xa]
cmp rbx, rax
jae 0x14015f03b
lea ecx, [r8 - 0x27]
mov al, cl
and al, r9b
add al, al
sub cl, al
add cl, 0x11
jmp 0x14015f23b
lea rax, [r10 + 1]
cmp rbx, rax
je 0x14015f7c4
lea rax, [r10 + 2]
cmp rbx, rax
je 0x14015f7ac
lea rax, [r10 + 3]
cmp rbx, rax
je 0x14015f786
lea rax, [r10 + 9]
cmp rbx, rax
je 0x14015f76a
lea rax, [rbx + r10]
cmp rax, r11
jbe 0x14015f4fc
lea rax, [r10 + 0x7a]
cmp rbx, rax
je 0x14015f4e7
lea rax, [r10 + 6]
cmp rbx, rax
je 0x14015f4cc
lea rax, [r10 + 0x64]
cmp rbx, rax
je 0x14015f4b1
lea rax, [r10 + 9]
cmp rbx, rax
je 0x14015f498
lea rax, [r10 + 0x200]
cmp rbx, rax
je 0x14015f47d
lea rax, [r10 + 1]
cmp rbx, rax
je 0x14015f46f
lea rax, [r10 + 0x10]
cmp rbx, rax
je 0x14015f453
lea rax, [r10 + 3]
cmp rbx, rax
je 0x14015f434
lea rax, [r10 + 0x28]
cmp rbx, rax
je 0x14015f413
lea rax, [r10 + 0x61]
cmp rbx, rax
je 0x14015f07c
lea rbx, [r10 + 5]
lea r10, [rbx + 5]
lea rax, [r10 + 0x42]
cmp rbx, rax
jb 0x14015f8b6
lea rax, [r10 + 0x41]
cmp rbx, rax
jb 0x14015f896
lea rax, [r10 + 0x80]
cmp rbx, rax
jb 0x14015f26b
lea rax, [r10 + 0x2a]
cmp rbx, rax
jb 0x14015f24b
lea rax, [r10 + 0xa]
cmp rbx, rax
jb 0x14015f22b
lea rax, [r10 + 0x3e8]
cmp rbx, rax
jb 0x14015f3fe
lea rax, [r10 + 0x20]
cmp rbx, rax
jb 0x14015f3e9
lea rax, [r10 + 0x1000]
cmp rbx, rax
jb 0x14015f3aa
lea rax, [r10 + 4]
cmp rbx, rax
jb 0x14015f384
lea rax, [r10 + 0x7a]
cmp rbx, rax
jb 0x14015f07c
mov rbx, rax
lea r10, [rax + 6]
lea rax, [r10 + 6]
cmp rbx, rax
ja 0x14015f368
lea rax, [r10 + 0x5a]
cmp rbx, rax
ja 0x14015f34d
lea rax, [r10 + 9]
cmp rbx, rax
ja 0x14015f334
lea rax, [r10 + 0x200]
cmp rbx, rax
ja 0x14015f314
lea rax, [r10 + 1]
cmp rbx, rax
ja 0x14015f2f5
lea rax, [r10 + 0x400]
cmp rbx, rax
ja 0x14015f2d9
lea rax, [r10 + 3]
cmp rbx, rax
ja 0x14015f2be
lea rax, [r10 + 0x28]
cmp rbx, rax
ja 0x14015f2a1
lea rax, [r10 + 5]
cmp rbx, rax
ja 0x14015f28c
lea rax, [r10 + 0x42]
cmp rbx, rax
ja 0x14015f07c
mov rbx, rax
lea r10, [rax + 0x41]
jmp 0x14015f07c
lea ecx, [r8 + 0x47]
mov al, cl
and al, r9b
add al, al
sub cl, al
add cl, 0xf
add cl, r9b
mov r15b, cl
mov qword [rsp + 0x38], r15
jmp 0x14015f06f
lea ecx, [r8 - 0x23]
mov al, cl
and al, r9b
add al, al
sub cl, al
sub cl, 0xb
add cl, r9b
mov r15b, cl
mov qword [rsp + 0x38], r15
jmp 0x14015f014
add r8b, 0x73
mov al, r8b
and al, r9b
add al, al
sub r8b, al
lea r15d, [r9 + r8]
sub r15b, 0x25
mov qword [rsp + 0x38], r15
jmp 0x14015efaa
lea ecx, [r8 - 0x38]
mov al, cl
and al, r9b
add al, al
sub cl, al
sub cl, 0x78
jmp 0x14015f7e9
add r8b, 0x5e
mov al, r8b
and al, r9b
mov ecx, edi
sub cl, al
add cl, cl
add cl, r8b
add cl, r9b
mov dl, cl
jmp 0x14015f809
sub r8b, 0xc
mov al, r8b
and al, r9b
mov ecx, Ordinal_46
sub cl, al
add cl, cl
add cl, r8b
jmp 0x14015f81e
lea edx, [r8 - 0x76]
mov al, dl
and al, r9b
mov ecx, Ordinal_33
sub cl, al
add cl, cl
add dl, cl
add dl, r9b
jmp 0x14015f6d3
add r8b, 0x20
mov al, r8b
and al, r9b
mov ecx, reloc.WS2_32.dll_recv
sub cl, al
lea edx, [rcx + rcx]
add dl, r8b
add dl, r9b
jmp 0x14015f79c
sub r8b, 0x4a
mov ecx, 3
mov al, r8b
and al, r9b
sub cl, al
lea r15d, [rcx + rcx]
add r15b, r8b
add r15b, r9b
jmp 0x14015f84c
lea ecx, [r8 + 0x4c]
mov al, cl
and al, r9b
add al, al
sub cl, al
lea edx, [r9 + rcx]
sub dl, 0x14
jmp 0x14015f70a
sub r8b, 0x1e
mov al, r8b
and al, r9b
add al, al
sub r8b, al
lea edx, [r9 + r8]
sub dl, 0x2e
jmp 0x14015f732
add r8b, 0x78
mov al, r8b
and al, r9b
add al, al
sub r8b, al
lea r15d, [r9 + r8]
sub r15b, 0x48
jmp 0x14015f87d
sub r8b, 0x11
mov al, r8b
and al, r9b
add al, al
sub r8b, al
lea r15d, [r9 + r8]
add r15b, 0x77
mov qword [rsp + 0x38], r15
mov byte [rbp + r11 - 0x50], r15b
jmp 0x14015f88e
lea ecx, [r8 - 0x7b]
mov al, cl
and al, r9b
add al, al
sub cl, al
add cl, 0x5d
add cl, r9b
mov r15b, cl
mov qword [rsp + 0x38], r15
cmp r10, 2
jb 0x14015f3a0
lea ecx, [r8 + 0x1e]
mov al, cl
and al, r9b
mov edx, reloc.WS2_32.dll_socket
sub dl, al
add dl, dl
add dl, cl
add dl, r9b
add dl, dl
jmp 0x14015f7ee
lea ecx, [r8 + 0x1b]
mov al, cl
and al, r9b
add al, al
sub cl, al
add cl, 0x43
jmp 0x14015f54e
lea ecx, [r8 - 0x4f]
mov al, cl
and al, r9b
add al, al
sub cl, al
add cl, 0x29
jmp 0x14015f515
add r8b, 0x16
mov ecx, 0x33
mov al, r8b
and al, r9b
sub cl, al
add cl, cl
add cl, r8b
add cl, r9b
mov r15b, cl
jmp 0x14015f87d
sub r8b, 0x54
mov ecx, Ordinal_41
mov al, r8b
and al, r9b
sub cl, al
lea edx, [rcx + rcx]
add dl, r8b
add dl, r9b
jmp 0x14015f732
lea edx, [r8 + 0x42]
mov al, dl
and al, r9b
mov ecx, Ordinal_27
sub cl, al
add cl, cl
add dl, cl
add dl, r9b
jmp 0x14015f70a
sub r8b, 0x28
mov ecx, ntohl
jmp 0x14015f31d
add r8b, 0x6e
mov al, r8b
and al, r9b
add al, al
sub r8b, al
lea edx, [r9 + r8]
sub dl, 2
jmp 0x14015f79c
lea ecx, [r8 + 4]
mov al, cl
and al, r9b
add al, al
sub cl, al
lea edx, [r9 + rcx]
sub dl, 0x1c
jmp 0x14015f6d3
sub r8b, 0x66
mov al, r8b
and al, r9b
add al, al
sub r8b, al
lea edx, [r9 + r8]
sub dl, 0x36
jmp 0x14015f823
add r8b, 0x30
mov al, r8b
and al, r9b
add al, al
sub r8b, al
lea edx, [r9 + r8]
sub dl, 0x50
jmp 0x14015f809
lea ecx, [r8 - 0x3a]
mov al, cl
and al, r9b
add al, al
sub cl, al
sub cl, 0x6a
jmp 0x14015f7e9
lea rax, [r10 + 1]
cmp rbx, rax
jae 0x14015f57d
lea ecx, [r8 - 0x4b]
mov al, cl
and al, r9b
add al, al
sub cl, al
add cl, 0xd
add cl, r9b
mov r15b, cl
mov qword [rsp + 0x38], r15
lea rax, [rbx + r10]
cmp rax, 0xa
je 0x14015f6f6
lea rax, [r10 + 0x3e8]
cmp rbx, rax
jbe 0x14015f5d3
lea ecx, [r8 + 0x21]
mov al, cl
and al, r9b
add al, al
sub cl, al
add cl, 0x19
add cl, r9b
mov r15b, cl
mov qword [rsp + 0x38], r15
cmp rbx, r12
jae 0x14015f6be
lea rax, [r10 + 1]
cmp rbx, rax
jne 0x14015f684
add r8b, 0x64
mov ecx, Ordinal_35
jmp 0x14015f41c
jne 0x14015f58d
sub r8b, 0x4e
mov ecx, reloc.WS2_32.dll_recvfrom
jmp 0x14015f41c
lea rax, [r10 + 3]
cmp rbx, rax
jne 0x14015f5b1
add r8b, 0x2e
mov al, r8b
and al, r9b
add al, al
sub r8b, al
lea edx, [r9 + r8]
sub dl, 0x42
jmp 0x14015f823
lea rax, [r10 + 7]
cmp rbx, rax
jne 0x14015f520
lea ecx, [r8 + 2]
mov al, cl
and al, r9b
add al, al
sub cl, al
sub cl, 0xe
jmp 0x14015f7e9
lea rax, [r10 + 1]
cmp rbx, rax
jne 0x14015f5f1
lea ecx, [r8 - 0x75]
mov al, cl
and al, r9b
add al, al
sub cl, al
add cl, 0x33
jmp 0x14015f7e9
lea rax, [r10 + 2]
cmp rbx, rax
jne 0x14015f615
add r8b, 0x5f
mov al, r8b
and al, r9b
add al, al
sub r8b, al
lea edx, [r9 + r8]
add dl, 0x67
jmp 0x14015f823
lea rax, [r10 + 3]
cmp rbx, rax
jne 0x14015f639
add r8b, 0x33
mov al, r8b
and al, r9b
add al, al
sub r8b, al
lea edx, [r9 + r8]
sub dl, 0x65
jmp 0x14015f79c
lea rax, [r10 + 7]
cmp rbx, rax
jne 0x14015f65b
lea ecx, [r8 + 7]
mov al, cl
and al, r9b
add al, al
sub cl, al
lea edx, [r9 + rcx]
sub dl, 0x31
jmp 0x14015f70a
lea rax, [r10 + 9]
cmp rbx, rax
jne 0x14015f559
sub r8b, 0x25
mov al, r8b
and al, r9b
add al, al
sub r8b, al
lea r15d, [r9 + r8]
add r15b, 3
jmp 0x14015f87d
lea rax, [r10 + 2]
cmp rbx, rax
jne 0x14015f69b
sub r8b, 0x32
mov ecx, Ordinal_50
jmp 0x14015f43d
lea rax, [r10 + 3]
cmp rbx, rax
jne 0x14015f3c5
lea ecx, [r8 + 0x76]
mov al, cl
and al, r9b
add al, al
sub cl, al
lea edx, [r9 + rcx]
sub dl, 0x3a
jmp 0x14015f6d3
lea edx, [r8 - 0x78]
mov al, dl
and al, r9b
mov cl, r9b
sub cl, al
add cl, 0x24
add cl, cl
add dl, cl
add r8b, 0x3d
mov al, r8b
and al, r9b
add al, al
sub r8b, al
add r8b, 0x55
add r8b, dl
add r8b, r9b
mov byte [rbp + r11 - 0x50], r8b
jmp 0x14015f79c
lea edx, [r8 - 0xe]
mov al, dl
and al, r9b
mov ecx, Ordinal_50
sub cl, al
add cl, cl
add dl, cl
sub r8b, 0x59
mov al, r8b
and al, r9b
add al, al
sub r8b, al
add r8b, 0x6f
add r8b, r9b
movzx eax, r8b
mov byte [rbp + r11 - 0x50], al
add r10, r12
add rax, r10
sub r11, rax
mov qword [rsp + 0x38], rdx
lea edx, [r11 + 0x5c]
mov al, dl
and al, r9b
mov ecx, 0x3e
sub cl, al
add cl, cl
add cl, dl
add cl, r9b
mov byte [rbp + r11 - 0x50], cl
add rbx, r12
or rax, 0xffffffffffffffff
sub rax, rbx
add r11, rax
mov r15, qword [rsp + 0x38]
jmp 0x14015f882
sub r8b, 0x6d
mov al, r8b
and al, r9b
add al, al
sub r8b, al
lea r15d, [r9 + r8]
sub r15b, 5
jmp 0x14015f87d
sub r8b, 0x15
mov al, r8b
and al, r9b
add al, al
sub r8b, al
lea edx, [r9 + r8]
sub dl, 0x6d
mov qword [rsp + 0x38], rdx
add rbx, r10
mov r15, rdx
jmp 0x14015f851
add r8b, 0x17
mov al, r8b
and al, r9b
add al, al
sub r8b, al
lea edx, [r9 + r8]
add dl, 0x5f
jmp 0x14015f823
lea ecx, [r8 + 0x43]
mov al, cl
and al, r9b
add al, al
sub cl, al
add cl, 0x2b
jmp 0x14015f7e9
mov r8b, r11b
lea ecx, [r8 + 0x6f]
mov al, cl
and al, r9b
add al, al
sub cl, al
sub cl, 9
add cl, r9b
mov dl, cl
sub r8b, 0x2d
mov al, r8b
and al, r9b
add al, al
sub r8b, al
add r8b, 0x3b
add r8b, r9b
mov byte [rbp + r11 - 0x50], r8b
add r10, r12
jmp 0x14015f823
lea ecx, [r11 - 0x65]
mov al, cl
and al, r9b
add al, al
sub cl, al
sub cl, 0x3d
add cl, r9b
mov dl, cl
mov qword [rsp + 0x38], rdx
sub r11, r12
mov r15, rdx
jmp 0x14015f88e
movabs rax, 0xb778330f53701c5d
add rax, r11
and dl, al
add dl, dl
sub r9b, dl
lea r15d, [rax + r9]
add r15b, 0x75
mov qword [rsp + 0x38], r15
movzx eax, r15b
or rcx, 0xffffffffffffffff
sub rcx, rax
add r11, rcx
jmp 0x14015f88e
movabs rax, 0xe7d2bbafc67ab41f
add rax, r11
and dl, al
add dl, dl
sub r9b, dl
lea r15d, [rax + r9]
add r15b, 0x27
mov qword [rsp + 0x38], r15
movzx eax, byte [rbp + r11 - 0x50]
add rax, r10
add r11, rax
add r11, r12
jmp 0x14015ef97
add r8b, 9
mov al, r8b
and al, r9b
add al, al
sub r8b, al
lea r15d, [r9 + r8]
sub r15b, r14b
mov qword [rsp + 0x38], r15
jmp 0x14015ef94
sub r8b, 0x61
mov al, r8b
and al, r9b
add al, al
sub r8b, al
lea r15d, [r9 + r8]
sub r15b, 0x59
mov qword [rsp + 0x38], r15
jmp 0x14015ef81
lea rax, [rbp + 0x17b014c]
jmp 0x14015f8ed
lea rax, [rbp + 0xe3e801]
jmp 0x14015f8ed
lea rax, [rbp - 0x50]
mov qword [rbp + 0x30], rax
mov dword [rsp + 0x50], 0xf7e3c8db
mov dword [rsp + 0x54], 0xf8a8cef6
mov dword [rsp + 0x58], 0xb1d4c6c2
mov dword [rsp + 0x5c], 0x9ea6a5b6
mov dword [rsp + 0x60], 0xfacfc1e6
mov dword [rsp + 0x64], 0xf382c3c5
mov dword [rsp + 0x68], 0x5b8087ce
xor eax, eax
mov qword [rsp + 0x6c], rax
mov dword [rsp + 0x74], eax
mov word [rsp + 0x78], ax
mov byte [rsp + 0x7a], al
call fcn.1400a1a30
mov rbx, qword [rax]
call fcn.1400a1a40
mov r10, qword [rax]
xor r11d, r11d
cmp r11, 0x2b
jae 0x140160361
movzx r8d, byte [rsp + r11 + 0x50]
mov edx, r8d
cmp rbx, r11
ja 0x140160358
lea rax, [r10 + 1]
cmp rbx, rax
jae 0x14015f99d
movabs rcx, 0x5fe37a64f8560111
add rcx, r11
mov rax, rcx
and rax, rdx
imul rsi, rax, 0xfffffffffffffffe
add rsi, rcx
add rsi, rdx
sub sil, 0x77
mov qword [rsp + 0x20], rsi
jmp 0x14015f9ca
je 0x1401602d8
lea rax, [r10 + 2]
cmp rbx, rax
je 0x14016025f
lea rax, [r10 + 3]
cmp rbx, rax
je 0x14016022b
lea rax, [r10 + 5]
cmp rbx, rax
je 0x14016020b
mov r9b, r11b
cmp r10, r11
ja 0x14016034f
lea rax, [r10 + 0xa]
cmp rbx, rax
jae 0x14015f9f4
lea ecx, [r9 + 0x65]
mov al, cl
and al, r8b
add al, al
sub cl, al
add cl, 0x3d
jmp 0x14015fbfd
lea rax, [r10 + 1]
cmp rbx, rax
je 0x1401601ca
lea rax, [r10 + 3]
cmp rbx, rax
je 0x1401601b2
lea rax, [r10 + 5]
cmp rbx, rax
je 0x140160196
lea rax, [r10 + 4]
cmp rbx, rax
je 0x14016017e
lea rax, [r10 + 8]
cmp rbx, rax
je 0x140160162
lea rax, [rbx + r10]
cmp rax, r11
jbe 0x14015fe80
lea rax, [r10 + 5]
cmp rbx, rax
je 0x14015fe68
lea rax, [r10 + 0x61]
cmp rbx, rax
je 0x14015fe4d
lea rax, [r10 + 0x28]
cmp rbx, rax
je 0x14015fe31
lea rax, [r10 + 3]
cmp rbx, rax
je 0x14015fe1a
lea rax, [r10 + 0x10]
cmp rbx, rax
je 0x14015fdfc
lea rax, [r10 + 1]
cmp rbx, rax
je 0x14015fdde
lea rax, [r10 + 0x200]
cmp rbx, rax
je 0x14015fdd0
lea rax, [r10 + 9]
cmp rbx, rax
je 0x14015fdb2
lea rax, [r10 + 0x64]
cmp rbx, rax
je 0x14015fda7
lea rax, [r10 + 6]
cmp rbx, rax
je 0x14015fa42
lea rbx, [r10 + 0x7a]
lea r10, [rbx + 0x7a]
lea rax, [r10 + 0x40]
cmp rbx, rax
jb 0x14016032e
lea rax, [r10 + 4]
cmp rbx, rax
jb 0x14016030d
lea rax, [r10 + 0x1000]
cmp rbx, rax
jb 0x14015fc2d
lea rax, [r10 + 2]
cmp rbx, rax
jb 0x14015fc0d
lea rax, [r10 + 0x3e8]
cmp rbx, rax
jb 0x14015fbed
lea rax, [r10 + 0xa]
cmp rbx, rax
jb 0x14015fd8d
lea rax, [r10 + 0x2a]
cmp rbx, rax
jb 0x14015fd75
lea rax, [r10 + 8]
cmp rbx, rax
jb 0x14015fd5d
lea rax, [r10 + 0x41]
cmp rbx, rax
jb 0x14015fd37
lea rax, [r10 + 0x42]
cmp rbx, rax
jb 0x14015fa42
lea rbx, [r10 + 5]
lea r10, [rbx + 5]
lea rax, [r10 + 0x61]
cmp rbx, rax
ja 0x14015fd16
lea rax, [r10 + 0x28]
cmp rbx, rax
ja 0x14015fd08
lea rax, [r10 + 3]
cmp rbx, rax
ja 0x14015fcec
lea rax, [r10 + 0x10]
cmp rbx, rax
ja 0x14015fcd0
lea rax, [r10 + 1]
cmp rbx, rax
ja 0x14015fcb5
lea rax, [r10 + 0x200]
cmp rbx, rax
ja 0x14015fc9d
lea rax, [r10 + 9]
cmp rbx, rax
ja 0x14015fc82
lea rax, [r10 + 0x64]
cmp rbx, rax
ja 0x14015fc67
lea rax, [r10 + 6]
cmp rbx, rax
ja 0x14015fc4d
lea rax, [r10 + 0x7a]
cmp rbx, rax
ja 0x14015fa42
lea rbx, [r10 + 0x40]
lea r10, [rbx + 0x40]
jmp 0x14015fa42
lea ecx, [r9 + 0x3b]
mov al, cl
and al, r8b
add al, al
sub cl, al
add cl, 0x63
add cl, r8b
mov sil, cl
mov qword [rsp + 0x20], rsi
jmp 0x14015fa35
lea ecx, [r9 + 0x19]
mov al, cl
and al, r8b
add al, al
sub cl, al
add cl, 0x51
add cl, r8b
mov sil, cl
mov qword [rsp + 0x20], rsi
jmp 0x14015f9cd
sub r9b, 9
mov al, r9b
and al, r8b
add al, al
sub r9b, al
lea esi, [r8 + r9]
add sil, r14b
mov qword [rsp + 0x20], rsi
jmp 0x14015f963
lea edx, [r9 + 0x28]
mov al, r8b
and al, dl
add al, al
mov cl, r8b
sub cl, al
sub cl, 0x18
add cl, dl
jmp 0x1401601dd
add r9b, 6
mov al, r8b
and al, r9b
add al, al
sub r8b, al
lea ecx, [r9 + r8]
sub cl, 0x2a
jmp 0x1401601f8
sub r9b, 0x1c
mov al, r8b
and al, r9b
add al, al
sub r8b, al
lea ecx, [r9 + r8]
sub cl, 0x3c
jmp 0x1401601fb
lea edx, [r9 - 0x3e]
mov al, r8b
and al, dl
add al, al
mov cl, r8b
sub cl, al
sub cl, 0x4e
jmp 0x140160122
sub r9b, 0x60
mov al, r8b
and al, r9b
add al, al
sub r8b, al
lea ecx, [r9 + r8]
sub cl, 0x60
jmp 0x14016021e
add r9b, 0x7e
mov al, r8b
and al, r9b
add al, al
sub r8b, al
lea esi, [r9 + r8]
sub sil, 0x72
jmp 0x140160247
lea edx, [r9 + 0x5c]
mov ecx, 0x3e
mov al, r8b
and al, dl
sub cl, al
add cl, cl
add cl, r8b
add cl, dl
jmp 0x14016027d
add r9b, 0x3a
mov ecx, gethostname
jmp 0x14015fdbb
add r9b, 0x18
mov ecx, Ordinal_46
mov al, r8b
and al, r9b
sub cl, al
add cl, cl
add cl, r8b
add cl, r9b
mov sil, cl
jmp 0x1401602f4
sub r9b, 0x3d
mov al, r8b
and al, r9b
add al, al
sub r8b, al
lea esi, [r9 + r8]
sub sil, 0x55
mov qword [rsp + 0x20], rsi
mov byte [rsp + r11 + 0x50], sil
jmp 0x140160305
lea edx, [r9 - 0x5f]
mov al, r8b
and al, dl
add al, al
mov cl, r8b
sub cl, al
sub cl, 0x67
jmp 0x14015ff15
lea edx, [r9 + 0x7f]
mov al, r8b
and al, dl
add al, al
mov cl, r8b
sub cl, al
sub cl, 0x79
jmp 0x14015fedb
lea edx, [r9 + 0x5d]
mov al, r8b
and al, dl
add al, al
mov cl, r8b
sub cl, al
add cl, 0x75
add cl, dl
jmp 0x14015fea3
add r9b, 0x5e
mov ecx, edi
jmp 0x14015fd1f
add r9b, 0x3c
mov ecx, reloc.WLDAP32.dll_Ordinal_46
mov al, r8b
and al, r9b
sub cl, al
add cl, cl
add cl, r8b
add cl, r9b
jmp 0x14015ff8d
lea edx, [r9 + 0x1a]
mov ecx, Ordinal_41
jmp 0x14015fcf5
sub r9b, r13b
mov ecx, Ordinal_30
mov al, r8b
and al, r9b
sub cl, al
lea esi, [rcx + rcx]
add sil, r8b
add sil, r9b
jmp 0x140160247
sub r9b, 0x2a
mov ecx, reloc.WS2_32.dll_send
mov al, r8b
and al, r9b
sub cl, al
add cl, cl
add cl, r8b
add cl, r9b
jmp 0x14016021e
lea edx, [r9 - 0x4c]
mov al, r8b
and al, dl
mov ecx, 0xa
sub cl, al
add cl, cl
jmp 0x14016011f
sub r9b, 0x6e
mov al, r8b
and al, r9b
mov ecx, r12d
sub cl, al
add cl, cl
add cl, r8b
add cl, r9b
jmp 0x1401601fb
add r9b, 0x70
mov al, r8b
and al, r9b
add al, al
sub r8b, al
lea ecx, [r9 + r8]
sub cl, 0x10
jmp 0x1401601f8
lea edx, [r9 + 0x4e]
mov al, r8b
and al, dl
add al, al
mov cl, r8b
sub cl, al
sub cl, 0x22
jmp 0x14015fc60
lea rax, [r10 + 0x200]
cmp rbx, rax
jae 0x14015ff47
lea ecx, [r9 + 0x11]
mov al, cl
and al, r8b
add al, al
sub cl, al
sub cl, 0x77
add cl, r8b
mov sil, cl
mov qword [rsp + 0x20], rsi
lea rax, [rbx + r10]
cmp rax, 0x3e8
je 0x140160147
lea rax, [r10 + 0xa]
cmp rbx, rax
jbe 0x14015ffe1
lea edx, [r9 + 0xd]
mov al, r8b
and al, dl
add al, al
mov cl, r8b
sub cl, al
sub cl, 0x5b
add cl, dl
mov sil, cl
mov qword [rsp + 0x20], rsi
cmp rbx, 0x200
jae 0x14016010c
lea rax, [r10 + 0x200]
cmp rbx, rax
jbe 0x140160094
lea edx, [r9 + 0x72]
mov al, r8b
and al, dl
add al, al
mov cl, r8b
sub cl, al
sub cl, 0x1e
add cl, dl
mov sil, cl
mov qword [rsp + 0x20], rsi
cmp r10, 0x2a
jb 0x14015fd53
lea edx, [r9 - 0x3a]
mov al, r8b
and al, dl
mov ecx, ntohl
sub cl, al
add cl, cl
add cl, r8b
add cl, dl
add cl, cl
jmp 0x1401601dd
lea rax, [r10 + 1]
cmp rbx, rax
jne 0x14015ff6e
sub r9b, 0x36
mov al, r9b
and al, r8b
mov ecx, 0x3d
sub cl, al
add cl, cl
add cl, r9b
add cl, r8b
jmp 0x14015fd2f
lea rax, [r10 + 2]
cmp rbx, rax
jne 0x14015ff97
sub r9b, 0x14
mov al, r9b
and al, r8b
add al, al
sub r9b, al
lea ecx, [r8 + r9]
sub cl, 0x74
mov qword [rsp + 0x20], rcx
jmp 0x1401602aa
lea rax, [r10 + 3]
cmp rbx, rax
jne 0x14015ffbc
add r9b, 0x30
mov al, r9b
and al, r8b
add al, al
sub r9b, al
lea esi, [r8 + r9]
sub sil, 0x50
jmp 0x140160247
lea rax, [r10 + 5]
cmp rbx, rax
jne 0x14015feab
lea ecx, [r9 + 0x74]
mov al, cl
and al, r8b
add al, al
sub cl, al
sub cl, 0x2c
add cl, r8b
jmp 0x140160124
lea rax, [r10 + 1]
cmp rbx, rax
jne 0x140160002
lea edx, [r9 + 0x2f]
mov al, r8b
and al, dl
add al, al
mov cl, r8b
sub cl, al
sub cl, 0x49
jmp 0x14015fc60
lea rax, [r10 + 3]
cmp rbx, rax
jne 0x140160026
add r9b, 0x73
mov al, r8b
and al, r9b
add al, al
sub r8b, al
lea ecx, [r9 + r8]
sub cl, 0x25
jmp 0x1401601fb
lea rax, [r10 + 5]
cmp rbx, rax
jne 0x14016004b
sub r9b, 0x27
mov al, r8b
and al, r9b
add al, al
sub r8b, al
lea esi, [r9 + r8]
add sil, 0x11
jmp 0x140160247
lea rax, [r10 + 4]
cmp rbx, rax
jne 0x14016006c
lea edx, [r9 - 5]
mov al, r8b
and al, dl
add al, al
mov cl, r8b
sub cl, al
add cl, 0x23
jmp 0x14015fd01
lea rax, [r10 + 8]
cmp rbx, rax
jne 0x14015fee5
add r9b, r14b
mov al, r8b
and al, r9b
add al, al
sub r8b, al
lea esi, [r9 + r8]
add sil, 0x47
jmp 0x1401602f4
lea rax, [r10 + 1]
cmp rbx, rax
jne 0x1401600b9
sub r9b, 0x6c
mov al, r8b
and al, r9b
add al, al
sub r8b, al
lea esi, [r9 + r8]
sub sil, 0xc
jmp 0x1401602f4
lea rax, [r10 + 3]
cmp rbx, rax
jne 0x1401600d0
sub r9b, 6
mov ecx, reloc.WS2_32.dll_setsockopt
jmp 0x14015fde6
lea rax, [r10 + 5]
cmp rbx, rax
jne 0x1401600e7
add r9b, 0x1c
mov ecx, reloc.WLDAP32.dll_Ordinal_30
jmp 0x14015fe05
lea rax, [r10 + 2]
cmp rbx, rax
jne 0x14015ff1f
lea edx, [r9 - 0x5c]
mov al, r8b
and al, dl
add al, al
mov cl, r8b
sub cl, al
sub cl, 0x7c
jmp 0x14015fc60
lea edx, [r9 - 0x18]
mov al, r8b
and al, dl
add al, al
mov cl, r8b
sub cl, al
sub cl, 0x58
add cl, r8b
add cl, dl
sub r9b, 7
mov al, r8b
and al, r9b
add al, al
sub r8b, al
add r8b, 0x31
add r8b, cl
add r8b, r9b
mov byte [rsp + r11 + 0x50], r8b
jmp 0x14016021e
lea edx, [r9 + 0xa]
mov al, r8b
and al, dl
add al, al
mov cl, r8b
sub cl, al
sub cl, r8b
sub cl, 0x46
jmp 0x14015fd01
sub r9b, 0x69
mov al, r9b
and al, r8b
add al, al
sub r9b, al
lea esi, [r8 + r9]
sub sil, 0x21
jmp 0x1401602f4
lea ecx, [r9 + 0x53]
mov al, cl
and al, r8b
add al, al
sub cl, al
sub cl, 0x45
add cl, r8b
jmp 0x14016027d
add r9b, 0x31
mov al, r9b
and al, r8b
add al, al
sub r9b, al
lea esi, [r8 + r9]
sub sil, 0x57
jmp 0x140160247
sub r9b, 0x35
mov al, r9b
and al, r8b
add al, al
sub r9b, al
lea ecx, [r8 + r9]
add cl, 0x73
jmp 0x1401601fb
lea ecx, [r9 - 0x79]
mov al, cl
and al, r8b
add al, al
sub cl, al
add cl, 0x4f
add cl, r8b
sub r9b, 0x29
mov al, r8b
and al, r9b
add al, al
sub r8b, al
add r8b, 0x1f
add r8b, r9b
mov byte [rsp + r11 + 0x50], r8b
add r10, r12
mov qword [rsp + 0x20], rcx
sub r11, r12
mov rsi, rcx
jmp 0x140160305
lea ecx, [r11 - 0x45]
mov al, cl
and al, r8b
add al, al
sub cl, al
sub cl, 0x1d
add cl, r8b
mov qword [rsp + 0x20], rcx
add rbx, r10
mov rsi, rcx
jmp 0x14016024c
movabs rax, 0x5eff4d8cbb060999
add rax, r11
and dl, al
add dl, dl
sub r8b, dl
lea esi, [rax + r8]
sub sil, 0x2f
mov qword [rsp + 0x20], rsi
movzx eax, sil
or rcx, 0xffffffffffffffff
sub rcx, rax
add r11, rcx
jmp 0x140160305
movabs rcx, 0x9f3858c2ca5a0777
add rcx, r11
and dl, cl
add dl, dl
mov al, r8b
sub al, dl
sub cl, 0x41
add cl, al
mov r9b, r11b
mov qword [rsp + 0x20], rcx
add r9b, 0x1b
mov al, r8b
and al, r9b
add al, al
mov cl, r8b
sub cl, al
add cl, 0x43
add cl, r9b
movzx eax, cl
mov byte [rsp + r11 + 0x50], al
add r10, r12
add rax, r10
sub r11, rax
lea ecx, [r11 + 0x2c]
mov al, r8b
and al, cl
add al, al
sub r8b, al
sub r8b, 0x34
add r8b, cl
mov byte [rsp + r11 + 0x50], r8b
add rbx, r12
or rax, 0xffffffffffffffff
sub rax, rbx
add r11, rax
mov rsi, qword [rsp + 0x20]
jmp 0x1401602f9
movabs rax, 0x1faa6f2ee9020333
add rax, r11
and dl, al
add dl, dl
sub r8b, dl
lea esi, [rax + r8]
sub sil, 0x65
mov qword [rsp + 0x20], rsi
movzx eax, byte [rsp + r11 + 0x50]
add rax, r10
add r11, rax
add r11, r12
jmp 0x14015f950
sub r9b, 0x2b
mov al, r8b
and al, r9b
add al, al
sub r8b, al
lea esi, [r9 + r8]
add sil, 0x2d
mov qword [rsp + 0x20], rsi
jmp 0x14015f94d
sub r9b, 0x4d
mov al, r8b
and al, r9b
add al, al
sub r8b, al
lea esi, [r9 + r8]
add sil, 0x1b
mov qword [rsp + 0x20], rsi
jmp 0x14015f93d
lea rax, [rbp + 0x148b6bc]
jmp 0x140160366
lea rax, [rbp + 0x5eb7cd]
jmp 0x140160366
lea rax, [rsp + 0x50]
mov qword [rbp + 0x38], rax
lea rax, [rbp + 0x20]
mov qword [rbp + 0x10], rax
lea rax, [rbp + 0x40]
mov qword [rbp + 0x18], rax
lea r8, [rsp + 0x40]
lea rdx, [rbp + 0x10]
lea rcx, [rbp + 0x48]
call fcn.1401265c8
nop
mov rax, qword [rbp + 0x50]
mov qword [rbp], rax
mov r13, qword [rbp + 0x48]
mov qword [rbp - 0x10], r13
cmp r13, rax
je 0x140161070
mov rdx, qword [r13]
lea rcx, [rbp + 0x2180]
call qword [sym.imp.api_ms_win_crt_multibyte_l1_1_0.dll__mbsstr]
test rax, rax
je 0x14016105a
mov rdx, qword [0x140319e10]
test rdx, rdx
jne 0x14016052d
xor r14d, r14d
mov r15d, 0xcded1a85
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rcx, qword [rcx + 0x10]
lea r13d, [rdx + 8]
movups xmm0, xmmword [rcx + 0x58]
movd eax, xmm0
sub ax, r13w
test r14d, r14d
je 0x14016043a
psrldq xmm0, 8
movq rdx, xmm0
movzx eax, ax
shr rax, 1
lea r8, [rdx + rax*2]
mov r9d, 0x811c9dc5
jmp 0x14016042c
movsx eax, byte [rdx]
xor eax, r9d
imul r9d, eax, 0x1000193
add rdx, 2
cmp rdx, r8
jne 0x14016041b
cmp r9d, r14d
jne 0x14016051a
mov rbx, qword [rcx + 0x30]
movsxd rax, dword [rbx + 0x3c]
mov rax, qword [rax + rbx + 0x88]
mov r9d, eax
add r9, rbx
shr rax, 0x20
cmp r9, rbx
je 0x14016051a
mov r11d, dword [r9 + 0x18]
test r11d, r11d
je 0x14016051a
mov esi, dword [r9 + 0x20]
dec r11d
lea rdx, [rbx + r11*4]
mov r8d, dword [rdx + rsi]
add r8, rbx
mov r10d, 0x811c9dc5
jmp 0x140160491
movsx edx, dl
xor edx, r10d
imul r10d, edx, 0x1000193
mov dl, byte [r8]
add r8, r12
test dl, dl
jne 0x140160484
cmp r10d, r15d
je 0x1401604a7
test r11d, r11d
jne 0x14016046e
jmp 0x14016051a
mov edx, dword [r9 + 0x1c]
add rdx, rbx
mov ecx, dword [r9 + 0x24]
add rcx, rbx
movzx ecx, word [rcx + r11*2]
mov edx, dword [rdx + rcx*4]
add rdx, rbx
cmp rdx, r9
jbe 0x140160522
lea rcx, [r9 + rax]
cmp rdx, rcx
jae 0x140160522
mov eax, 0x811c9dc5
mov r14d, eax
mov r15d, eax
jmp 0x1401604eb
movsx eax, al
xor eax, r14d
imul r14d, eax, 0x1000193
add rdx, r12
mov al, byte [rdx]
cmp al, 0x2e
jne 0x1401604db
jmp 0x140160500
movsx eax, al
xor eax, r15d
imul r15d, eax, 0x1000193
add rdx, r12
mov al, byte [rdx]
test al, al
jne 0x1401604f3
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rcx, qword [rcx + 0x10]
mov rcx, qword [rcx]
jmp 0x1401603ee
mov qword [0x140319e10], rdx
mov r13, qword [rbp - 0x10]
mov ecx, 0x99
call rdx
mov rbx, qword [0x140319e48]
test rbx, rbx
jne 0x1401606a0
xor r14d, r14d
mov r15d, 0xf84eee59
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov r12, qword [rax]
mov rsi, r12
movups xmm0, xmmword [rsi + 0x58]
movd eax, xmm0
sub ax, 8
test r14d, r14d
je 0x1401605b0
psrldq xmm0, 8
movq rcx, xmm0
movzx eax, ax
shr rax, 1
lea rdx, [rcx + rax*2]
mov r8d, 0x811c9dc5
jmp 0x1401605a2
movsx eax, byte [rcx]
xor eax, r8d
imul r8d, eax, 0x1000193
add rcx, 2
cmp rcx, rdx
jne 0x140160591
cmp r8d, r14d
jne 0x140160681
mov rdi, qword [rsi + 0x30]
movsxd rax, dword [rdi + 0x3c]
mov rax, qword [rax + rdi + 0x88]
mov r9d, eax
add r9, rdi
shr rax, 0x20
cmp r9, rdi
je 0x140160681
mov r10d, dword [r9 + 0x18]
test r10d, r10d
je 0x140160681
mov ebx, dword [r9 + 0x20]
dec r10d
lea rcx, [rdi + r10*4]
mov edx, dword [rcx + rbx]
add rdx, rdi
mov r8d, 0x811c9dc5
jmp 0x140160606
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
mov cl, byte [rdx]
inc rdx
test cl, cl
jne 0x1401605f9
cmp r8d, r15d
je 0x14016061b
test r10d, r10d
jne 0x1401605e4
jmp 0x140160681
mov edx, dword [r9 + 0x1c]
add rdx, rdi
mov ecx, dword [r9 + 0x24]
add rcx, rdi
movzx ecx, word [rcx + r10*2]
mov ebx, dword [rdx + rcx*4]
add rbx, rdi
cmp rbx, r9
jbe 0x140160699
lea rcx, [r9 + rax]
cmp rbx, rcx
jae 0x140160699
mov eax, 0x811c9dc5
mov r14d, eax
mov r15d, eax
jmp 0x14016065f
movsx eax, al
xor eax, r14d
imul r14d, eax, 0x1000193
inc rbx
mov al, byte [rbx]
cmp al, 0x2e
jne 0x14016064f
jmp 0x140160674
movsx eax, al
xor eax, r15d
imul r15d, eax, 0x1000193
inc rbx
mov al, byte [rbx]
test al, al
jne 0x140160667
mov rsi, qword [r12]
mov rax, qword [rsi]
mov rsi, rax
cmp rax, r12
je 0x140160697
cmp qword [rax + 0x30], 0
jne 0x140160564
xor ebx, ebx
mov qword [0x140319e48], rbx
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
xor edx, edx
mov rcx, rax
call rbx
mov rdx, qword [0x140319e40]
test rdx, rdx
jne 0x140160819
xor r14d, r14d
mov r15d, 0xb3002016
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov r12, qword [rax]
mov rsi, r12
movups xmm0, xmmword [rsi + 0x58]
movd eax, xmm0
sub ax, 8
test r14d, r14d
je 0x140160729
psrldq xmm0, 8
movq rcx, xmm0
movzx eax, ax
shr rax, 1
lea rdx, [rcx + rax*2]
mov r8d, 0x811c9dc5
jmp 0x14016071b
movsx eax, byte [rcx]
xor eax, r8d
imul r8d, eax, 0x1000193
add rcx, 2
cmp rcx, rdx
jne 0x14016070a
cmp r8d, r14d
jne 0x1401607fa
mov rbx, qword [rsi + 0x30]
movsxd rax, dword [rbx + 0x3c]
mov rax, qword [rax + rbx + 0x88]
mov r9d, eax
add r9, rbx
shr rax, 0x20
cmp r9, rbx
je 0x1401607fa
mov r10d, dword [r9 + 0x18]
test r10d, r10d
je 0x1401607fa
mov edi, dword [r9 + 0x20]
dec r10d
lea rcx, [rbx + r10*4]
mov edx, dword [rcx + rdi]
add rdx, rbx
mov r8d, 0x811c9dc5
jmp 0x14016077f
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
mov cl, byte [rdx]
inc rdx
test cl, cl
jne 0x140160772
cmp r8d, r15d
je 0x140160794
test r10d, r10d
jne 0x14016075d
jmp 0x1401607fa
mov edx, dword [r9 + 0x1c]
add rdx, rbx
mov ecx, dword [r9 + 0x24]
add rcx, rbx
movzx ecx, word [rcx + r10*2]
mov edx, dword [rdx + rcx*4]
add rdx, rbx
cmp rdx, r9
jbe 0x140160812
lea rcx, [r9 + rax]
cmp rdx, rcx
jae 0x140160812
mov eax, 0x811c9dc5
mov r14d, eax
mov r15d, eax
jmp 0x1401607d8
movsx eax, al
xor eax, r14d
imul r14d, eax, 0x1000193
inc rdx
mov al, byte [rdx]
cmp al, 0x2e
jne 0x1401607c8
jmp 0x1401607ed
movsx eax, al
xor eax, r15d
imul r15d, eax, 0x1000193
inc rdx
mov al, byte [rdx]
test al, al
jne 0x1401607e0
mov rsi, qword [r12]
mov rax, qword [rsi]
mov rsi, rax
cmp rax, r12
je 0x140160810
cmp qword [rax + 0x30], 0
jne 0x1401606dd
xor edx, edx
mov qword [0x140319e40], rdx
xor ecx, ecx
call rdx
mov rdx, qword [0x140319e38]
test rdx, rdx
jne 0x140160989
xor r14d, r14d
mov r15d, 0x2fd4df39
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov r12, qword [rax]
mov rsi, r12
movups xmm0, xmmword [rsi + 0x58]
movd eax, xmm0
sub ax, 8
test r14d, r14d
je 0x140160899
psrldq xmm0, 8
movq rcx, xmm0
movzx eax, ax
shr rax, 1
lea rdx, [rcx + rax*2]
mov r8d, 0x811c9dc5
jmp 0x14016088b
movsx eax, byte [rcx]
xor eax, r8d
imul r8d, eax, 0x1000193
add rcx, 2
cmp rcx, rdx
jne 0x14016087a
cmp r8d, r14d
jne 0x14016096a
mov rbx, qword [rsi + 0x30]
movsxd rax, dword [rbx + 0x3c]
mov rax, qword [rax + rbx + 0x88]
mov r9d, eax
add r9, rbx
shr rax, 0x20
cmp r9, rbx
je 0x14016096a
mov r10d, dword [r9 + 0x18]
test r10d, r10d
je 0x14016096a
mov edi, dword [r9 + 0x20]
dec r10d
lea rcx, [rbx + r10*4]
mov edx, dword [rcx + rdi]
add rdx, rbx
mov r8d, 0x811c9dc5
jmp 0x1401608ef
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
mov cl, byte [rdx]
inc rdx
test cl, cl
jne 0x1401608e2
cmp r8d, r15d
je 0x140160904
test r10d, r10d
jne 0x1401608cd
jmp 0x14016096a
mov edx, dword [r9 + 0x1c]
add rdx, rbx
mov ecx, dword [r9 + 0x24]
add rcx, rbx
movzx ecx, word [rcx + r10*2]
mov edx, dword [rdx + rcx*4]
add rdx, rbx
cmp rdx, r9
jbe 0x140160982
lea rcx, [r9 + rax]
cmp rdx, rcx
jae 0x140160982
mov eax, 0x811c9dc5
mov r14d, eax
mov r15d, eax
jmp 0x140160948
movsx eax, al
xor eax, r14d
imul r14d, eax, 0x1000193
inc rdx
mov al, byte [rdx]
cmp al, 0x2e
jne 0x140160938
jmp 0x14016095d
movsx eax, al
xor eax, r15d
imul r15d, eax, 0x1000193
inc rdx
mov al, byte [rdx]
test al, al
jne 0x140160950
mov rsi, qword [r12]
mov rax, qword [rsi]
mov rsi, rax
cmp rax, r12
je 0x140160980
cmp qword [rax + 0x30], 0
jne 0x14016084d
xor edx, edx
mov qword [0x140319e38], rdx
xor ecx, ecx
call rdx
mov rdx, qword [0x140319e30]
test rdx, rdx
jne 0x140160af9
xor r14d, r14d
mov r15d, 0xe80fd3a
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov r12, qword [rax]
mov rsi, r12
movups xmm0, xmmword [rsi + 0x58]
movd eax, xmm0
sub ax, 8
test r14d, r14d
je 0x140160a09
psrldq xmm0, 8
movq rcx, xmm0
movzx eax, ax
shr rax, 1
lea rdx, [rcx + rax*2]
mov r8d, 0x811c9dc5
jmp 0x1401609fb
movsx eax, byte [rcx]
xor eax, r8d
imul r8d, eax, 0x1000193
add rcx, 2
cmp rcx, rdx
jne 0x1401609ea
cmp r8d, r14d
jne 0x140160ada
mov rbx, qword [rsi + 0x30]
movsxd rax, dword [rbx + 0x3c]
mov rax, qword [rax + rbx + 0x88]
mov r9d, eax
add r9, rbx
shr rax, 0x20
cmp r9, rbx
je 0x140160ada
mov r10d, dword [r9 + 0x18]
test r10d, r10d
je 0x140160ada
mov edi, dword [r9 + 0x20]
dec r10d
lea rcx, [rbx + r10*4]
mov edx, dword [rcx + rdi]
add rdx, rbx
mov r8d, 0x811c9dc5
jmp 0x140160a5f
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
mov cl, byte [rdx]
inc rdx
test cl, cl
jne 0x140160a52
cmp r8d, r15d
je 0x140160a74
test r10d, r10d
jne 0x140160a3d
jmp 0x140160ada
mov edx, dword [r9 + 0x1c]
add rdx, rbx
mov ecx, dword [r9 + 0x24]
add rcx, rbx
movzx ecx, word [rcx + r10*2]
mov edx, dword [rdx + rcx*4]
add rdx, rbx
cmp rdx, r9
jbe 0x140160af2
lea rcx, [r9 + rax]
cmp rdx, rcx
jae 0x140160af2
mov eax, 0x811c9dc5
mov r14d, eax
mov r15d, eax
jmp 0x140160ab8
movsx eax, al
xor eax, r14d
imul r14d, eax, 0x1000193
inc rdx
mov al, byte [rdx]
cmp al, 0x2e
jne 0x140160aa8
jmp 0x140160acd
movsx eax, al
xor eax, r15d
imul r15d, eax, 0x1000193
inc rdx
mov al, byte [rdx]
test al, al
jne 0x140160ac0
mov rsi, qword [r12]
mov rax, qword [rsi]
mov rsi, rax
cmp rax, r12
je 0x140160af0
cmp qword [rax + 0x30], 0
jne 0x1401609bd
xor edx, edx
mov qword [0x140319e30], rdx
xor ecx, ecx
call rdx
cmp qword [0x140319e28], 0
jne 0x140160c6b
xor r14d, r14d
mov r15d, 0xa52bcaf9
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov r12, qword [rax]
mov rsi, r12
movups xmm0, xmmword [rsi + 0x58]
movd eax, xmm0
sub ax, 8
test r14d, r14d
je 0x140160b77
psrldq xmm0, 8
movq rcx, xmm0
movzx eax, ax
shr rax, 1
lea rdx, [rcx + rax*2]
mov r8d, 0x811c9dc5
jmp 0x140160b69
movsx eax, byte [rcx]
xor eax, r8d
imul r8d, eax, 0x1000193
add rcx, 2
cmp rcx, rdx
jne 0x140160b58
cmp r8d, r14d
jne 0x140160c4b
mov rbx, qword [rsi + 0x30]
movsxd rax, dword [rbx + 0x3c]
mov rax, qword [rax + rbx + 0x88]
mov r9d, eax
add r9, rbx
shr rax, 0x20
cmp r9, rbx
je 0x140160c4b
mov r10d, dword [r9 + 0x18]
test r10d, r10d
je 0x140160c4b
mov edi, dword [r9 + 0x20]
dec r10d
lea rcx, [rbx + r10*4]
mov edx, dword [rcx + rdi]
add rdx, rbx
mov r8d, 0x811c9dc5
jmp 0x140160bcd
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
mov cl, byte [rdx]
inc rdx
test cl, cl
jne 0x140160bc0
cmp r8d, r15d
je 0x140160be2
test r10d, r10d
jne 0x140160bab
jmp 0x140160c4b
mov edx, dword [r9 + 0x1c]
add rdx, rbx
mov ecx, dword [r9 + 0x24]
add rcx, rbx
movzx ecx, word [rcx + r10*2]
mov r8d, dword [rdx + rcx*4]
add r8, rbx
cmp r8, r9
jbe 0x140160c64
lea rcx, [r9 + rax]
cmp r8, rcx
jae 0x140160c64
mov eax, 0x811c9dc5
mov r14d, eax
mov r15d, eax
jmp 0x140160c27
movsx eax, al
xor eax, r14d
imul r14d, eax, 0x1000193
inc r8
mov al, byte [r8]
cmp al, 0x2e
jne 0x140160c17
jmp 0x140160c3d
movsx eax, al
xor eax, r15d
imul r15d, eax, 0x1000193
inc r8
mov al, byte [r8]
test al, al
jne 0x140160c30
mov rsi, qword [r12]
mov rax, qword [rsi]
mov rsi, rax
cmp rax, r12
je 0x140160c61
cmp qword [rax + 0x30], 0
jne 0x140160b2b
xor r8d, r8d
mov qword [0x140319e28], r8
mov r8, qword [0x140319e58]
test r8, r8
jne 0x140160ce4
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov r10, qword [rax]
mov r8, r10
mov rcx, qword [r8 + 0x60]
movzx eax, word [r8 + 0x58]
shr rax, 1
lea rdx, [rcx + rax*2]
mov r9d, 0x811c9dc5
cmp rcx, rdx
je 0x140160cc8
movsx eax, byte [rcx]
xor eax, r9d
imul r9d, eax, 0x1000193
add rcx, 2
cmp rcx, rdx
jne 0x140160ca9
cmp r9d, 0x610c0de3
je 0x140160d32
mov rax, qword [r8]
mov r8, rax
cmp rax, r10
je 0x140160cda
cmp qword [rax + 0x30], 0
jne 0x140160c8e
xor r8d, r8d
mov qword [0x140319e58], r8
movsxd rax, dword [r8 + 0x3c]
mov r10d, dword [rax + r8 + 0x88]
xor r9d, r9d
mov r11d, dword [r10 + r8 + 0x20]
lea rcx, [r11 + r9*4]
mov edx, dword [rcx + r8]
add rdx, r8
mov ecx, 0x811c9dc5
mov al, byte [rdx]
inc rdx
test al, al
je 0x140160d2d
movsx eax, al
xor eax, ecx
imul ecx, eax, 0x1000193
mov al, byte [rdx]
inc rdx
test al, al
jne 0x140160d11
cmp ecx, 0xe463da3c
je 0x140160d38
inc r9d
jmp 0x140160cf8
mov r8, qword [r8 + 0x30]
jmp 0x140160cdd
mov edx, dword [r10 + r8 + 0x1c]
add rdx, r8
mov ecx, dword [r10 + r8 + 0x24]
add rcx, r8
movzx ecx, word [rcx + r9*2]
mov eax, dword [rdx + rcx*4]
add rax, r8
xor ecx, ecx
call rax
mov r12, rax
mov r10, qword [0x1403192c0]
test r10, r10
jne 0x140160ec1
xor esi, esi
mov r14d, 0x820621f3
mov rcx, qword gs:[0x60]
mov rdx, qword [rcx + 0x18]
mov rcx, qword [rdx + 0x10]
mov r15, qword [rcx]
mov rdi, r15
movups xmm0, xmmword [rdi + 0x58]
movd eax, xmm0
sub ax, 8
test esi, esi
je 0x140160dd4
psrldq xmm0, 8
movq rcx, xmm0
movzx eax, ax
shr rax, 1
lea rdx, [rcx + rax*2]
mov r8d, 0x811c9dc5
jmp 0x140160dc6
movsx eax, byte [rcx]
xor eax, r8d
imul r8d, eax, 0x1000193
add rcx, 2
cmp rcx, rdx
jne 0x140160db5
cmp r8d, esi
jne 0x140160ea1
mov rbx, qword [rdi + 0x30]
movsxd rax, dword [rbx + 0x3c]
mov rax, qword [rax + rbx + 0x88]
mov r11d, eax
add r11, rbx
shr rax, 0x20
cmp r11, rbx
je 0x140160ea1
mov r9d, dword [r11 + 0x18]
test r9d, r9d
je 0x140160ea1
mov r10d, dword [r11 + 0x20]
dec r9d
lea rdx, [rbx + r9*4]
mov r8d, dword [rdx + r10]
add r8, rbx
mov edx, 0x811c9dc5
jmp 0x140160e28
movsx ecx, cl
xor ecx, edx
imul edx, ecx, 0x1000193
mov cl, byte [r8]
inc r8
test cl, cl
jne 0x140160e1d
cmp edx, r14d
je 0x140160e3e
test r9d, r9d
jne 0x140160e08
jmp 0x140160ea1
mov r8d, dword [r11 + 0x1c]
add r8, rbx
mov edx, dword [r11 + 0x24]
add rdx, rbx
movzx edx, word [rdx + r9*2]
mov r10d, dword [r8 + rdx*4]
add r10, rbx
cmp r10, r11
jbe 0x140160eba
lea rcx, [r11 + rax]
cmp r10, rcx
jae 0x140160eba
mov esi, 0x811c9dc5
mov r14d, esi
jmp 0x140160e7e
movsx eax, al
xor eax, esi
imul esi, eax, 0x1000193
inc r10
mov al, byte [r10]
cmp al, 0x2e
jne 0x140160e70
jmp 0x140160e94
movsx eax, al
xor eax, r14d
imul r14d, eax, 0x1000193
inc r10
mov al, byte [r10]
test al, al
jne 0x140160e87
mov rdi, qword [r15]
mov rax, qword [rdi]
mov rdi, rax
cmp rax, r15
je 0x140160eb7
cmp qword [rax + 0x30], 0
jne 0x140160d89
xor r10d, r10d
mov qword [0x1403192c0], r10
lea r9, [rbp + 0x60]
mov edx, 0x5000
mov r8d, 1
mov rcx, r12
call r10
mov r8, qword [0x140319e50]
test r8, r8
jne 0x14016103d
xor esi, esi
mov r14d, 0x33b00bc5
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov r15, qword [rax]
mov rdi, r15
movups xmm0, xmmword [rdi + 0x58]
movd eax, xmm0
sub ax, 8
test esi, esi
je 0x140160f50
psrldq xmm0, 8
movq rcx, xmm0
movzx eax, ax
shr rax, 1
lea rdx, [rcx + rax*2]
mov r8d, 0x811c9dc5
jmp 0x140160f42
movsx eax, byte [rcx]
xor eax, r8d
imul r8d, eax, 0x1000193
add rcx, 2
cmp rcx, rdx
jne 0x140160f31
cmp r8d, esi
jne 0x14016101d
mov r11, qword [rdi + 0x30]
movsxd rax, dword [r11 + 0x3c]
mov rax, qword [rax + r11 + 0x88]
mov r10d, eax
add r10, r11
shr rax, 0x20
cmp r10, r11
je 0x14016101d
mov r9d, dword [r10 + 0x18]
test r9d, r9d
je 0x14016101d
mov ebx, dword [r10 + 0x20]
dec r9d
lea rdx, [r11 + r9*4]
mov r8d, dword [rdx + rbx]
add r8, r11
mov edx, 0x811c9dc5
jmp 0x140160fa4
movsx ecx, cl
xor ecx, edx
imul edx, ecx, 0x1000193
mov cl, byte [r8]
inc r8
test cl, cl
jne 0x140160f99
cmp edx, r14d
je 0x140160fba
test r9d, r9d
jne 0x140160f84
jmp 0x14016101d
mov r8d, dword [r10 + 0x1c]
add r8, r11
mov edx, dword [r10 + 0x24]
add rdx, r11
movzx edx, word [rdx + r9*2]
mov r8d, dword [r8 + rdx*4]
add r8, r11
cmp r8, r10
jbe 0x140161036
lea rcx, [r10 + rax]
cmp r8, rcx
jae 0x140161036
mov esi, 0x811c9dc5
mov r14d, esi
jmp 0x140160ffa
movsx eax, al
xor eax, esi
imul esi, eax, 0x1000193
inc r8
mov al, byte [r8]
cmp al, 0x2e
jne 0x140160fec
jmp 0x140161010
movsx eax, al
xor eax, r14d
imul r14d, eax, 0x1000193
inc r8
mov al, byte [r8]
test al, al
jne 0x140161003
mov rdi, qword [r15]
mov rax, qword [rdi]
mov rdi, rax
cmp rax, r15
je 0x140161033
cmp qword [rax + 0x30], 0
jne 0x140160f05
xor r8d, r8d
mov qword [0x140319e50], r8
mov edx, 0x5000
mov rcx, r12
call r8
mov qword [0], 0x99
mov r12d, 1
add r13, 8
mov qword [rbp - 0x10], r13
cmp r13, qword [rbp]
jne 0x1401603a6
mov r13, qword [rbp + 0x48]
test r13, r13
je 0x1401610a9
mov rdx, qword [rbp + 0x58]
sub rdx, r13
and rdx, 0xfffffffffffffff8
mov rax, r13
cmp rdx, 0x1000
jb 0x1401610a1
add rdx, 0x27
mov r13, qword [r13 - 8]
sub rax, r13
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140161119
mov rcx, r13
call fcn.1401cb090
mov r13d, 8
mov rbx, qword [rbp - 8]
mov r15, qword [rsp + 0x38]
mov r14, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x20]
mov rdi, qword [rsp + 0x28]
mov ecx, dword [rbp - 0x60]
add ecx, r12d
mov dword [rbp - 0x60], ecx
mov eax, dword [rbp + 0x40]
shr eax, 3
cmp ecx, eax
jb 0x14015da09
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor eax, eax
mov rcx, qword [rbp + 0x2290]
xor rcx, rsp
call fcn.1401cb920
lea r11, [rsp + 0x23a0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3