Function at 0x14013ff90
Capabilities:
Access peb ldr_data
Check for peb beingdebugged flag
Check for software breakpoints
Check os version
Get number of processors
Terminate process

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
sub rsp, 0x810
lea rbp, [rsp + 0x70]
and rbp, 0xffffffffffffffe0
mov rax, qword [0x1401dedc0]
xor rax, rsp
mov qword [rbp + 0x790], rax
mov rbx, rcx
call qword [sym.imp.SecureEngineSDK64.dll_Ordinal_125]
mov rdi, qword gs:[0x60]
cmp byte [rdi + 2], 0
jne 0x1401423e6
test byte [0x7ffe02a4], 3
jne 0x1401423e6
movabs rax, 0x9f41b00d26e82bc3
lea rcx, [rbp + 0x90]
mov qword [rbp + 8], rax
movabs r12, 0xf3259e614a8c5fad
mov rax, qword [rbp + 8]
movabs r15, 0x7683bec8ae2de74a
mov qword [rbp + 0x90], rax
movabs rax, 0x7683bec8ae2de726
mov qword [rbp + 8], rax
mov rax, qword [rbp + 8]
mov qword [rbp + 0x98], rax
mov qword [rbp + 8], r12
mov rax, qword [rbp + 8]
mov qword [rbp + 0x3f0], rax
mov qword [rbp + 8], r15
mov rax, qword [rbp + 8]
movdqa xmm0, xmmword [rbp + 0x90]
mov qword [rbp + 0x3f8], rax
xorps xmm0, xmmword [rbp + 0x3f0]
movdqa xmmword [rbp + 0x90], xmm0
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
movzx edi, word [rdi + 0x120]
mov edx, 0x5b9b
mov r8d, 0xa28
mov qword [rbp + 0x20], rax
mov rsi, rax
mov r14d, 0x4563
mov r13d, 0x42ee
mov r9d, 0x3fab
lea r10d, [rdx + 0x1e]
mov r11d, 0x3ad7
cmp di, r8w
je 0x140141843
mov r14d, 0xece
cmp di, r14w
je 0x14014183d
mov ecx, 0x1770
movzx eax, di
sub ax, cx
cmp ax, 2
jbe 0x14014183d
mov ecx, 0x1db0
movzx eax, di
sub ax, cx
cmp ax, 1
jbe 0x14014183d
mov r13d, 0x23f0
cmp di, r13w
je 0x140141837
mov edx, 0x2580
cmp di, dx
je 0x140141a0b
mov eax, 0x2800
cmp di, ax
je 0x140141a0b
mov eax, 0x295a
cmp di, ax
je 0x140141a0b
mov eax, 0x3839
cmp di, ax
je 0x140141a15
cmp di, r11w
je 0x140141a15
cmp di, r9w
je 0x140141a15
mov eax, 0x42ee
cmp di, ax
je 0x140141a2e
mov eax, 0x4563
cmp di, ax
je 0x140141a3b
movzx eax, di
mov ecx, 0x47ba
sub ax, cx
cmp ax, 1
jbe 0x140141a0b
movzx eax, di
mov ecx, 0x4a61
sub ax, cx
cmp ax, 4
jbe 0x140141a0b
mov r9d, 0x55f0
cmp di, r9w
je 0x140141a4e
mov r10d, 0x585d
cmp di, r10w
je 0x140141a5e
mov r11d, 0x5867
cmp di, r11w
je 0x140141820
mov eax, 0x5b9b
cmp di, ax
je 0x140141a72
mov eax, 0x5bb9
cmp di, ax
je 0x140141a79
mov eax, 0x6531
cmp di, ax
je 0x140141820
mov eax, 0x657e
cmp di, ax
je 0x140141820
mov eax, 0x65a0
cmp di, ax
je 0x140141820
mov di, word [0x7ffe0260]
mov rax, qword [rbx]
movzx ecx, di
mov dword [rax + 0x30], ecx
mov ecx, dword [0x7ffe0260]
cmp ecx, r8d
je 0x140141820
cmp ecx, r14d
je 0x140141820
lea eax, [rcx - 0x1770]
cmp eax, 2
jbe 0x140141820
lea eax, [rcx - 0x1db0]
cmp eax, 1
jbe 0x140141820
cmp ecx, r13d
je 0x140141820
cmp ecx, edx
je 0x140141820
mov eax, 0x2800
mov r8d, 0x3839
cmp ecx, eax
je 0x140141973
mov eax, 0x295a
cmp ecx, eax
je 0x140141973
cmp ecx, r8d
je 0x140141973
mov eax, 0x3ad7
mov edx, 0x5b9b
cmp ecx, eax
je 0x14014199b
mov eax, 0x3fab
cmp ecx, eax
je 0x1401419bb
mov eax, 0x42ee
cmp ecx, eax
je 0x1401419c0
mov eax, 0x4563
cmp ecx, eax
je 0x1401419e0
lea eax, [rcx - 0x47ba]
cmp eax, 1
jbe 0x140141978
lea eax, [rcx - 0x4a61]
cmp eax, 4
jbe 0x140141978
cmp ecx, r9d
je 0x140141978
cmp ecx, r10d
lea r10d, [rdx + 0x1e]
je 0x140141a00
cmp ecx, r11d
je 0x140141a00
cmp ecx, edx
je 0x140141a00
cmp ecx, r10d
je 0x140141a00
cmp ecx, 0x6531
je 0x140141a00
cmp ecx, 0x657e
je 0x140141a00
cmp ecx, 0x65a0
je 0x140141a00
mov rcx, rsi
call fcn.14013c8a0
mov rcx, qword [rbx]
movzx edi, ax
mov eax, 0xa28
mov dword [rcx + 0x30], edi
cmp di, ax
je 0x140141820
cmp di, r14w
je 0x140141820
movzx ecx, di
mov eax, 0x1770
sub cx, ax
cmp cx, 2
jbe 0x140141820
movzx eax, di
mov ecx, 0x1db0
sub ax, cx
cmp ax, 1
jbe 0x140141820
cmp di, r13w
je 0x140141820
mov eax, 0x2580
cmp di, ax
je 0x140141820
mov eax, 0x2800
mov r8d, 0x3839
mov r11d, 0x3ad7
mov r9d, 0x3fab
mov r13d, 0x42ee
mov r14d, 0x4563
cmp di, ax
je 0x140141965
mov eax, 0x295a
cmp di, ax
je 0x140141965
cmp di, r8w
je 0x140141965
cmp di, r11w
je 0x140141965
cmp di, r9w
je 0x140141965
cmp di, r13w
je 0x140141965
cmp di, r14w
je 0x140141965
movzx eax, di
mov ecx, 0x47ba
sub ax, cx
cmp ax, 1
jbe 0x140141965
movzx eax, di
mov ecx, 0x4a61
sub ax, cx
cmp ax, 4
jbe 0x140141965
mov eax, 0x55f0
cmp di, ax
je 0x140141965
mov edx, 0x5b9b
mov eax, 0x585d
lea r10d, [rdx + 0x1e]
cmp di, ax
je 0x140141849
mov eax, 0x5867
cmp di, ax
je 0x140141849
cmp di, dx
je 0x140141849
cmp di, r10w
je 0x140141849
mov eax, 0x6531
cmp di, ax
je 0x140141849
mov eax, 0x657e
cmp di, ax
je 0x140141849
mov eax, 0x65a0
cmp di, ax
je 0x140141849
movabs rax, 0xa55cec043fdd2be3
lea rdx, [rbp + 0x180]
mov qword [rbp + 8], rax
movabs r14, 0x1c89944a1d4f33dc
mov rax, qword [rbp + 8]
movabs r13, 0x8cd80d3b269ba09f
mov qword [rbp + 0x180], rax
mov rcx, rsi
movabs rax, 0x13ced2a9db599523
mov qword [rbp + 8], rax
mov rax, qword [rbp + 8]
mov qword [rbp + 0x188], rax
movabs rax, 0x8cd80d3b5fe9cff2
mov qword [rbp + 8], rax
mov rax, qword [rbp + 8]
mov qword [rbp + 0x190], rax
mov qword [rbp + 8], r14
mov rax, qword [rbp + 8]
mov qword [rbp + 0x198], rax
mov qword [rbp + 8], r12
mov rax, qword [rbp + 8]
mov qword [rbp + 0x400], rax
mov qword [rbp + 8], r15
mov rax, qword [rbp + 8]
mov qword [rbp + 0x408], rax
mov qword [rbp + 8], r13
mov rax, qword [rbp + 8]
mov qword [rbp + 0x410], rax
mov qword [rbp + 8], r14
mov rax, qword [rbp + 8]
mov qword [rbp + 0x418], rax
vmovdqu ymm0, ymmword [rbp + 0x400]
vpxor ymm1, ymm0, ymmword [rbp + 0x180]
vmovdqa ymmword [rbp + 0x180], ymm1
vzeroupper
call fcn.14013c500
mov qword [rbp + 0x28], rax
lea rdx, [rbp + 0x40]
movabs rax, 0x9a63f0043ac32be3
mov qword [rbp + 8], rax
movabs rax, 0x7683bec8ae2d8226
mov rcx, qword [rbp + 8]
mov qword [rbp + 0x40], rcx
mov qword [rbp + 8], rax
mov rcx, qword [rbp + 8]
mov qword [rbp + 0x48], rcx
mov qword [rbp + 8], r12
mov rcx, qword [rbp + 8]
mov qword [rbp + 0x3e0], rcx
mov rcx, rsi
mov qword [rbp + 8], r15
mov rax, qword [rbp + 8]
movdqa xmm0, xmmword [rbp + 0x40]
mov qword [rbp + 0x3e8], rax
xorps xmm0, xmmword [rbp + 0x3e0]
movdqa xmmword [rbp + 0x40], xmm0
call fcn.14013c500
mov rsi, rax
mov qword [rbp], rax
movabs rax, 0x9651ff0438cf2be3
lea rdx, [rbp + 0xb0]
mov qword [rbp + 8], rax
movabs rax, 0x76edd1a1da4e8219
mov rcx, qword [rbp + 8]
mov qword [rbp + 0xb0], rcx
mov qword [rbp + 8], rax
mov rcx, qword [rbp + 8]
mov qword [rbp + 0xb8], rcx
mov qword [rbp + 8], r12
mov rcx, qword [rbp + 8]
mov qword [rbp + 0x3d0], rcx
mov rcx, qword [rbp + 0x20]
mov qword [rbp + 8], r15
mov rax, qword [rbp + 8]
movdqa xmm0, xmmword [rbp + 0xb0]
mov qword [rbp + 0x3d8], rax
xorps xmm0, xmmword [rbp + 0x3d0]
movdqa xmmword [rbp + 0xb0], xmm0
call fcn.14013c500
mov qword [rbp + 0x30], rax
movabs rax, 0x964cc8112bc12be3
mov qword [rbp + 8], rax
lea rdx, [rbp + 0x160]
mov rcx, qword [rbp + 8]
movabs rax, 0x1ff7ddadfd4ba83d
mov qword [rbp + 0x160], rcx
mov qword [rbp + 8], rax
movabs rax, 0x8cd80d3b269bcef0
mov rcx, qword [rbp + 8]
mov qword [rbp + 0x168], rcx
mov rcx, qword [rbp + 0x20]
mov qword [rbp + 8], rax
mov rax, qword [rbp + 8]
mov qword [rbp + 0x170], rax
mov qword [rbp + 8], r14
mov rax, qword [rbp + 8]
mov qword [rbp + 0x178], rax
mov qword [rbp + 8], r12
mov rax, qword [rbp + 8]
mov qword [rbp + 0x420], rax
mov qword [rbp + 8], r15
mov rax, qword [rbp + 8]
mov qword [rbp + 0x428], rax
mov qword [rbp + 8], r13
mov rax, qword [rbp + 8]
mov qword [rbp + 0x430], rax
mov qword [rbp + 8], r14
mov rax, qword [rbp + 8]
mov qword [rbp + 0x438], rax
vmovdqu ymm0, ymmword [rbp + 0x420]
vpxor ymm1, ymm0, ymmword [rbp + 0x160]
vmovdqa ymmword [rbp + 0x160], ymm1
vzeroupper
call fcn.14013c500
mov qword [rbp + 0x38], rax
lea rdx, [rbp + 0x140]
movabs rax, 0xa555ff0c24d92be3
mov qword [rbp + 8], rax
movabs rax, 0x15e6edaee15a8223
mov rcx, qword [rbp + 8]
mov qword [rbp + 0x140], rcx
mov qword [rbp + 8], rax
movabs rax, 0x8cd80d3b48f4c9eb
mov rcx, qword [rbp + 8]
mov qword [rbp + 0x148], rcx
mov rcx, qword [rbp + 0x20]
mov qword [rbp + 8], rax
mov rax, qword [rbp + 8]
mov qword [rbp + 0x150], rax
mov qword [rbp + 8], r14
mov rax, qword [rbp + 8]
mov qword [rbp + 0x158], rax
mov qword [rbp + 8], r12
mov rax, qword [rbp + 8]
mov qword [rbp + 0x440], rax
mov qword [rbp + 8], r15
mov rax, qword [rbp + 8]
mov qword [rbp + 0x448], rax
mov qword [rbp + 8], r13
mov rax, qword [rbp + 8]
mov qword [rbp + 0x450], rax
mov qword [rbp + 8], r14
mov rax, qword [rbp + 8]
mov qword [rbp + 0x458], rax
vmovdqu ymm0, ymmword [rbp + 0x440]
vpxor ymm1, ymm0, ymmword [rbp + 0x140]
vmovdqa ymmword [rbp + 0x140], ymm1
vzeroupper
call fcn.14013c500
mov qword [rbp + 8], rax
movabs rax, 0xf340ed0e26cf2be3
mov qword [rbp + 0x18], rax
mov rcx, qword [rbp + 0x18]
mov qword [rbp + 0x50], rcx
mov qword [rbp + 0x18], r15
mov rcx, qword [rbp + 0x18]
mov qword [rbp + 0x58], rcx
mov qword [rbp + 0x18], r12
mov rcx, qword [rbp + 0x18]
mov qword [rbp + 0x18], r15
mov rax, qword [rbp + 0x18]
mov qword [rbp + 0x3c0], rcx
movdqa xmm0, xmmword [rbp + 0x50]
lea rdx, [rbp + 0x50]
mov rcx, qword [rbp + 0x20]
mov qword [rbp + 0x3c8], rax
xorps xmm0, xmmword [rbp + 0x3c0]
movdqa xmmword [rbp + 0x50], xmm0
call fcn.14013c500
cmp qword [rbp + 0x28], 0
mov r8, rax
mov qword [rbp + 0x10], rax
je 0x14014195b
mov rcx, qword [rbp + 0x30]
test rcx, rcx
je 0x14014195b
test rsi, rsi
je 0x14014195b
mov rdx, qword [rbp + 0x38]
test rdx, rdx
je 0x14014195b
mov r9, qword [rbp + 8]
test r9, r9
je 0x14014195b
test rax, rax
je 0x14014195b
movabs rax, 0x9f50fa0e07f83aea
mov qword [rbp + 0x18], rax
mov rax, qword [rbp + 0x18]
mov qword [rbp + 0x120], rax
movabs rax, 0x37e6d2acc04caf2f
mov qword [rbp + 0x18], rax
mov rax, qword [rbp + 0x18]
mov qword [rbp + 0x128], rax
mov qword [rbp + 0x18], r13
mov rax, qword [rbp + 0x18]
mov qword [rbp + 0x130], rax
mov qword [rbp + 0x18], r14
mov rax, qword [rbp + 0x18]
mov qword [rbp + 0x138], rax
mov qword [rbp + 0x18], r12
mov rax, qword [rbp + 0x18]
mov qword [rbp + 0x460], rax
mov qword [rbp + 0x18], r15
mov rax, qword [rbp + 0x18]
mov qword [rbp + 0x468], rax
mov qword [rbp + 0x18], r13
mov rax, qword [rbp + 0x18]
mov qword [rbp + 0x470], rax
mov qword [rbp + 0x18], r14
mov rax, qword [rbp + 0x18]
mov qword [rbp + 0x478], rax
vmovdqu ymm0, ymmword [rbp + 0x460]
vpxor ymm1, ymm0, ymmword [rbp + 0x120]
mov qword [rbp + 0x280], rcx
mov rcx, qword [rbp + 0x20]
mov qword [rbp + 0x290], rdx
lea rdx, [rbp + 0x120]
vmovdqa ymmword [rbp + 0x120], ymm1
mov qword [rbp + 0x288], rsi
mov qword [rbp + 0x298], r9
mov qword [rbp + 0x2a0], r8
vzeroupper
call fcn.14013c500
xor esi, esi
mov qword [rbp + 0x2a8], rax
mov ecx, esi
mov rax, qword [rbp + rcx*8 + 0x280]
cmp byte [rax], 0xcc
je 0x140141943
inc rcx
cmp rcx, 6
jb 0x140140983
mov rdx, qword [rbp + 0x20]
lea r9, [rbp + 0x580]
mov qword [rsp + 0x28], rsi
mov r8d, 2
mov rcx, 0xffffffffffffffff
mov qword [rsp + 0x20], Ordinal_523
call qword [rbp + 0x28]
test eax, eax
js 0x140141820
lea rax, [rbp + 0x580]
mov dword [rsp + 0x28], 0x60
xorps xmm0, xmm0
mov qword [rbp + 0x2d8], rax
lea r9, [rbp + 0x308]
mov dword [rbp + 0x2c8], 0x30
lea r8, [rbp + 0x2c8]
mov qword [rbp + 0x2d0], rsi
mov edx, 0x80100080
mov dword [rbp + 0x2e0], esi
lea rcx, [rbp + 0x2b8]
mov dword [rsp + 0x20], 3
movdqu xmmword [rbp + 0x2e8], xmm0
call qword [rbp]
test eax, eax
js 0x140141820
mov rax, qword [rbp + 0x2b8]
lea r8, [rbp + 0x2c8]
mov qword [rsp + 0x30], rax
lea rcx, [rbp + 0x2c0]
xor r9d, r9d
mov dword [rsp + 0x28], 0x11000000
xorps xmm0, xmm0
mov dword [rbp + 0x2c8], 0x30
mov qword [rbp + 0x2d0], rsi
mov dword [rbp + 0x2e0], esi
lea edx, [r9 + 4]
mov qword [rbp + 0x2d8], rsi
movdqu xmmword [rbp + 0x2e8], xmm0
mov dword [rsp + 0x20], 2
call qword [rbp + 0x30]
test eax, eax
js 0x140141820
mov rcx, qword [rbp + 0x2c0]
lea rax, [rbp + 0x300]
mov dword [rsp + 0x48], 2
lea r8, [rbp + 0x2b0]
mov dword [rsp + 0x40], esi
xor r9d, r9d
mov dword [rsp + 0x38], 1
mov qword [rsp + 0x30], rax
lea rax, [rbp + 0x2f8]
mov qword [rsp + 0x28], rax
lea rdx, [r9 - 1]
mov qword [rsp + 0x20], rsi
mov qword [rbp + 0x2b0], rsi
mov qword [rbp + 0x300], rsi
mov qword [rbp + 0x2f8], rsi
call qword [rbp + 0x38]
test eax, eax
js 0x140141820
mov rcx, qword [rbp + 0x2b0]
call fcn.14013c8a0
movzx edi, ax
mov eax, 0xa28
cmp di, ax
je 0x14014180a
mov eax, 0xece
cmp di, ax
je 0x14014180a
movzx eax, di
mov ecx, 0x1770
sub ax, cx
cmp ax, 2
jbe 0x14014180a
movzx eax, di
mov ecx, 0x1db0
sub ax, cx
cmp ax, 1
jbe 0x14014180a
mov eax, 0x23f0
cmp di, ax
je 0x14014180a
mov eax, 0x2580
cmp di, ax
je 0x14014180a
mov eax, 0x2800
cmp di, ax
je 0x14014180a
mov eax, 0x295a
cmp di, ax
je 0x14014180a
mov eax, 0x3839
cmp di, ax
je 0x14014180a
mov eax, 0x3ad7
cmp di, ax
je 0x14014180a
mov eax, 0x3fab
cmp di, ax
je 0x14014180a
mov eax, 0x42ee
cmp di, ax
je 0x14014180a
mov eax, 0x4563
cmp di, ax
je 0x14014180a
movzx eax, di
mov ecx, 0x47ba
sub ax, cx
cmp ax, 1
jbe 0x14014180a
movzx eax, di
mov ecx, 0x4a61
sub ax, cx
cmp ax, 4
jbe 0x14014180a
mov eax, 0x55f0
cmp di, ax
je 0x14014180a
mov eax, 0x585d
cmp di, ax
je 0x14014180a
mov eax, 0x5867
cmp di, ax
je 0x14014180a
mov eax, 0x5b9b
cmp di, ax
je 0x14014180a
mov eax, 0x5bb9
cmp di, ax
je 0x14014180a
mov eax, 0x6531
cmp di, ax
je 0x14014180a
mov eax, 0x657e
cmp di, ax
je 0x14014180a
mov eax, 0x65a0
cmp di, ax
je 0x14014180a
movabs rax, 0xf340ed0e26cf2be3
lea rdx, [rbp + 0x60]
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x60], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x68], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x3b0], rax
mov qword [rbp], r15
mov rax, qword [rbp]
movdqa xmm0, xmmword [rbp + 0x60]
mov rcx, qword [rbp + 0x2b0]
mov qword [rbp + 0x3b8], rax
xorps xmm0, xmmword [rbp + 0x3b0]
movdqa xmmword [rbp + 0x60], xmm0
call fcn.14013c500
test rax, rax
je 0x140140cfd
movzx ecx, byte [rax]
cmp cl, 0x4c
jne 0x140140cf3
cmp byte [rax + 1], 0x8b
jne 0x140140cfd
movzx ecx, byte [rax + 2]
and cl, 0xc0
cmp cl, 0xc0
jne 0x140140cfd
movzx ecx, byte [rax + 3]
add rax, 3
cmp cl, 0xb8
jne 0x140140cfd
mov ecx, dword [rax + 1]
jmp 0x140140cff
mov ecx, esi
mov rax, qword [rbx]
lea rdx, [rbp + 0x100]
mov dword [rax], ecx
movabs rax, 0x9040ea0e38dc2be3
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x100], rax
movabs rax, 0x1ae2cbbcdc44b13e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x108], rax
movabs rax, 0x8cd8744949f6c5d2
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x110], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x118], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x480], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x488], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x490], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov rcx, qword [rbp + 0x2b0]
mov qword [rbp + 0x498], rax
vmovdqu ymm0, ymmword [rbp + 0x480]
vpxor ymm1, ymm0, ymmword [rbp + 0x100]
vmovdqa ymmword [rbp + 0x100], ymm1
vzeroupper
call fcn.14013c500
test rax, rax
je 0x140140df9
movzx ecx, byte [rax]
cmp cl, 0x4c
jne 0x140140def
cmp byte [rax + 1], 0x8b
jne 0x140140df9
movzx ecx, byte [rax + 2]
and cl, 0xc0
cmp cl, 0xc0
jne 0x140140df9
movzx ecx, byte [rax + 3]
add rax, 3
cmp cl, 0xb8
jne 0x140140df9
mov ecx, dword [rax + 1]
jmp 0x140140dfb
mov ecx, esi
mov rax, qword [rbx]
lea rdx, [rbp + 0x70]
mov dword [rax + 4], ecx
movabs rax, 0x9a63f0043ac32be3
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x70], rax
movabs rax, 0x7683bec8ae2d8226
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x78], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x3a0], rax
mov qword [rbp], r15
mov rax, qword [rbp]
movdqa xmm0, xmmword [rbp + 0x70]
mov rcx, qword [rbp + 0x2b0]
mov qword [rbp + 0x3a8], rax
xorps xmm0, xmmword [rbp + 0x3a0]
movdqa xmmword [rbp + 0x70], xmm0
call fcn.14013c500
test rax, rax
je 0x140140e9d
movzx ecx, byte [rax]
cmp cl, 0x4c
jne 0x140140e93
cmp byte [rax + 1], 0x8b
jne 0x140140e9d
movzx ecx, byte [rax + 2]
and cl, 0xc0
cmp cl, 0xc0
jne 0x140140e9d
movzx ecx, byte [rax + 3]
add rax, 3
cmp cl, 0xb8
jne 0x140140e9d
mov ecx, dword [rax + 1]
jmp 0x140140e9f
mov ecx, esi
mov rax, qword [rbx]
lea rdx, [rbp + 0x80]
mov dword [rax + 8], ecx
movabs rax, 0x9651ff0438cf2be3
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x80], rax
movabs rax, 0x76edd1a1da4e8219
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x88], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x390], rax
mov qword [rbp], r15
mov rax, qword [rbp]
movdqa xmm0, xmmword [rbp + 0x80]
mov rcx, qword [rbp + 0x2b0]
mov qword [rbp + 0x398], rax
xorps xmm0, xmmword [rbp + 0x390]
movdqa xmmword [rbp + 0x80], xmm0
call fcn.14013c500
test rax, rax
je 0x140140f50
movzx ecx, byte [rax]
cmp cl, 0x4c
jne 0x140140f46
cmp byte [rax + 1], 0x8b
jne 0x140140f50
movzx ecx, byte [rax + 2]
and cl, 0xc0
cmp cl, 0xc0
jne 0x140140f50
movzx ecx, byte [rax + 3]
add rax, 3
cmp cl, 0xb8
jne 0x140140f50
mov ecx, dword [rax + 1]
jmp 0x140140f52
mov ecx, esi
mov rax, qword [rbx]
lea rdx, [rbp + 0xe0]
mov dword [rax + 0xc], ecx
movabs rax, 0x964cc8112bc12be3
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xe0], rax
movabs rax, 0x1ff7ddadfd4ba83d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xe8], rax
movabs rax, 0x8cd80d3b269bcef0
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xf0], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0xf8], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x4a0], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x4a8], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x4b0], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov rcx, qword [rbp + 0x2b0]
mov qword [rbp + 0x4b8], rax
vmovdqu ymm0, ymmword [rbp + 0x4a0]
vpxor ymm1, ymm0, ymmword [rbp + 0xe0]
vmovdqa ymmword [rbp + 0xe0], ymm1
vzeroupper
call fcn.14013c500
test rax, rax
je 0x14014104d
movzx ecx, byte [rax]
cmp cl, 0x4c
jne 0x140141043
cmp byte [rax + 1], 0x8b
jne 0x14014104d
movzx ecx, byte [rax + 2]
and cl, 0xc0
cmp cl, 0xc0
jne 0x14014104d
movzx ecx, byte [rax + 3]
add rax, 3
cmp cl, 0xb8
jne 0x14014104d
mov ecx, dword [rax + 1]
jmp 0x14014104f
mov ecx, esi
mov rax, qword [rbx]
lea rdx, [rbp + 0xc0]
mov dword [rax + 0x10], ecx
movabs rax, 0xa555ff0c24d92be3
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xc0], rax
movabs rax, 0x15e6edaee15a8223
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xc8], rax
movabs rax, 0x8cd80d3b48f4c9eb
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xd0], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0xd8], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x4c0], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x4c8], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x4d0], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov rcx, qword [rbp + 0x2b0]
mov qword [rbp + 0x4d8], rax
vmovdqu ymm0, ymmword [rbp + 0x4c0]
vpxor ymm1, ymm0, ymmword [rbp + 0xc0]
vmovdqa ymmword [rbp + 0xc0], ymm1
vzeroupper
call fcn.14013c500
test rax, rax
je 0x14014114a
movzx ecx, byte [rax]
cmp cl, 0x4c
jne 0x140141140
cmp byte [rax + 1], 0x8b
jne 0x14014114a
movzx ecx, byte [rax + 2]
and cl, 0xc0
cmp cl, 0xc0
jne 0x14014114a
movzx ecx, byte [rax + 3]
add rax, 3
cmp cl, 0xb8
jne 0x14014114a
mov ecx, dword [rax + 1]
jmp 0x14014114c
mov ecx, esi
mov rax, qword [rbx]
lea rdx, [rbp + 0x1a0]
mov dword [rax + 0x14], ecx
movabs rax, 0xba5cec043fdd2be3
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1a0], rax
movabs rax, 0x1ff7dfa5dc428124
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1a8], rax
movabs rax, 0xffbd6e5454cbcef0
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1b0], rax
movabs rax, 0x1c89944a1d4f33af
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1b8], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x4e0], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x4e8], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x4f0], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov rcx, qword [rbp + 0x2b0]
mov qword [rbp + 0x4f8], rax
vmovdqu ymm0, ymmword [rbp + 0x4e0]
vpxor ymm1, ymm0, ymmword [rbp + 0x1a0]
vmovdqa ymmword [rbp + 0x1a0], ymm1
vzeroupper
call fcn.14013c500
test rax, rax
je 0x140141251
movzx ecx, byte [rax]
cmp cl, 0x4c
jne 0x140141247
cmp byte [rax + 1], 0x8b
jne 0x140141251
movzx ecx, byte [rax + 2]
and cl, 0xc0
cmp cl, 0xc0
jne 0x140141251
movzx ecx, byte [rax + 3]
add rax, 3
cmp cl, 0xb8
jne 0x140141251
mov ecx, dword [rax + 1]
jmp 0x140141253
mov ecx, esi
mov rax, qword [rbx]
lea rdx, [rbp + 0x1c0]
mov dword [rax + 0x18], ecx
movabs rax, 0x954bd7152fdf2be3
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1c0], rax
movabs rax, 0x18ecd7bccf409525
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1c8], rax
movabs rax, 0x8cd8695a43e9c8cb
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1d0], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x1d8], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x500], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x508], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x510], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov rcx, qword [rbp + 0x2b0]
mov qword [rbp + 0x518], rax
vmovdqu ymm0, ymmword [rbp + 0x500]
vpxor ymm1, ymm0, ymmword [rbp + 0x1c0]
vmovdqa ymmword [rbp + 0x1c0], ymm1
vzeroupper
call fcn.14013c500
test rax, rax
je 0x14014134e
movzx ecx, byte [rax]
cmp cl, 0x4c
jne 0x140141344
cmp byte [rax + 1], 0x8b
jne 0x14014134e
movzx ecx, byte [rax + 2]
and cl, 0xc0
cmp cl, 0xc0
jne 0x14014134e
movzx ecx, byte [rax + 3]
add rax, 3
cmp cl, 0xb8
jne 0x14014134e
mov ecx, dword [rax + 1]
jmp 0x140141350
mov ecx, esi
mov rax, qword [rbx]
lea rdx, [rbp + 0x1e0]
mov dword [rax + 0x1c], ecx
movabs rax, 0xa55cec043fdd2be3
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1e0], rax
movabs rax, 0x13ced2a9db599523
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1e8], rax
movabs rax, 0x8cd80d3b5fe9cff2
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1f0], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x1f8], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x520], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x528], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x530], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov rcx, qword [rbp + 0x2b0]
mov qword [rbp + 0x538], rax
vmovdqu ymm0, ymmword [rbp + 0x520]
vpxor ymm1, ymm0, ymmword [rbp + 0x1e0]
vmovdqa ymmword [rbp + 0x1e0], ymm1
vzeroupper
call fcn.14013c500
test rax, rax
je 0x14014144b
movzx ecx, byte [rax]
cmp cl, 0x4c
jne 0x140141441
cmp byte [rax + 1], 0x8b
jne 0x14014144b
movzx ecx, byte [rax + 2]
and cl, 0xc0
cmp cl, 0xc0
jne 0x14014144b
movzx ecx, byte [rax + 3]
add rax, 3
cmp cl, 0xb8
jne 0x14014144b
mov ecx, dword [rax + 1]
jmp 0x14014144d
mov ecx, esi
mov rax, qword [rbx]
lea rdx, [rbp + 0x200]
mov dword [rax + 0x20], ecx
movabs rax, 0xa05cec043fdd2be3
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x200], rax
movabs rax, 0x10edf7a5cb599433
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x208], rax
movabs rax, 0xe2b7644f47f6d2f0
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x210], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x218], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x540], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x548], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x550], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov rcx, qword [rbp + 0x2b0]
mov qword [rbp + 0x558], rax
vmovdqu ymm0, ymmword [rbp + 0x540]
vpxor ymm1, ymm0, ymmword [rbp + 0x200]
vmovdqa ymmword [rbp + 0x200], ymm1
vzeroupper
call fcn.14013c500
test rax, rax
je 0x140141548
movzx ecx, byte [rax]
cmp cl, 0x4c
jne 0x14014153e
cmp byte [rax + 1], 0x8b
jne 0x140141548
movzx ecx, byte [rax + 2]
and cl, 0xc0
cmp cl, 0xc0
jne 0x140141548
movzx ecx, byte [rax + 3]
add rax, 3
cmp cl, 0xb8
jne 0x140141548
mov ecx, dword [rax + 1]
jmp 0x14014154a
mov ecx, esi
mov rax, qword [rbx]
lea rdx, [rbp + 0x220]
mov dword [rax + 0x24], ecx
movabs rax, 0x904cf2113fc82be3
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x220], rax
movabs rax, 0x15e6d4aae148932b
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x228], rax
movabs rax, 0x8cd80d3b269ba0eb
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x230], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x238], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x560], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x568], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x570], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov rcx, qword [rbp + 0x2b0]
mov qword [rbp + 0x578], rax
vmovdqu ymm0, ymmword [rbp + 0x560]
vpxor ymm1, ymm0, ymmword [rbp + 0x220]
vmovdqa ymmword [rbp + 0x220], ymm1
vzeroupper
call fcn.14013c500
test rax, rax
je 0x140141645
movzx ecx, byte [rax]
cmp cl, 0x4c
jne 0x14014163b
cmp byte [rax + 1], 0x8b
jne 0x140141645
movzx ecx, byte [rax + 2]
and cl, 0xc0
cmp cl, 0xc0
jne 0x140141645
movzx ecx, byte [rax + 3]
add rax, 3
cmp cl, 0xb8
jne 0x140141645
mov ecx, dword [rax + 1]
jmp 0x140141647
mov ecx, esi
mov rax, qword [rbx]
lea rdx, [rbp + 0xa0]
mov dword [rax + 0x28], ecx
movabs rax, 0x8175f0043ac32be3
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xa0], rax
movabs rax, 0x7683bebbdd488425
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xa8], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x380], rax
mov qword [rbp], r15
mov rax, qword [rbp]
movdqa xmm0, xmmword [rbp + 0xa0]
mov rcx, qword [rbp + 0x2b0]
mov qword [rbp + 0x388], rax
xorps xmm0, xmmword [rbp + 0x380]
movdqa xmmword [rbp + 0xa0], xmm0
call fcn.14013c500
test rax, rax
je 0x1401416f8
movzx ecx, byte [rax]
cmp cl, 0x4c
jne 0x1401416ee
cmp byte [rax + 1], 0x8b
jne 0x1401416f8
movzx ecx, byte [rax + 2]
and cl, 0xc0
cmp cl, 0xc0
jne 0x1401416f8
movzx ecx, byte [rax + 3]
add rax, 3
cmp cl, 0xb8
jne 0x1401416f8
mov ecx, dword [rax + 1]
jmp 0x1401416fa
mov ecx, esi
mov rax, qword [rbx]
lea rdx, [rbp + 0x340]
mov dword [rax + 0x2c], ecx
movabs rax, 0xa540ea0838db2be3
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x340], rax
movabs rax, 0x13ced2a9db599523
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x348], rax
movabs rax, 0x8cd80d3b5fe9cff2
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x350], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x358], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x320], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x328], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x330], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov rcx, qword [rbp + 0x2b0]
mov qword [rbp + 0x338], rax
vmovdqu ymm0, ymmword [rbp + 0x320]
vpxor ymm1, ymm0, ymmword [rbp + 0x340]
vmovdqa ymmword [rbp + 0x340], ymm1
vzeroupper
call fcn.14013c500
test rax, rax
je 0x1401417f3
movzx ecx, byte [rax]
cmp cl, 0x4c
jne 0x1401417eb
cmp byte [rax + 1], 0x8b
jne 0x1401417f3
movzx ecx, byte [rax + 2]
and cl, 0xc0
cmp cl, 0xc0
jne 0x1401417f3
movzx ecx, byte [rax + 3]
add rax, 3
cmp cl, 0xb8
jne 0x1401417f3
mov esi, dword [rax + 1]
mov rax, qword [rbx]
mov rcx, 0xffffffffffffffff
mov dword [rax + 0x34], esi
mov rdx, qword [rbp + 0x2b0]
call qword [rbp + reloc.WS2_32.dll_htonl]
mov rcx, qword [rbp + 0x2c0]
mov rsi, qword [rbp + 0x10]
call rsi
mov rcx, qword [rbp + 0x2b8]
call rsi
mov edx, 0x5b9b
mov r10d, 0x5bb9
mov r9d, 0x3fab
mov r11d, 0x3ad7
mov r13d, 0x42ee
mov r14d, 0x4563
mov r8d, 0x3839
mov rax, qword [rbx]
movzx ecx, di
mov dword [rax + 0x30], ecx
cmp ecx, 0x4a62
ja 0x140141e8a
je 0x140141b2a
cmp ecx, r9d
ja 0x140141bce
je 0x140141b2a
mov eax, 0x2800
cmp ecx, eax
je 0x140141a86
mov eax, 0x295a
cmp ecx, eax
je 0x140141a86
cmp ecx, r8d
je 0x140141a86
cmp ecx, r11d
jne 0x140142157
mov rax, qword [rbx]
mov dword [rax], reloc.WS2_32.dll_ntohs
mov rax, qword [rbx]
mov dword [rax + 4], 0x50
mov rax, qword [rbx]
mov dword [rax + 8], 0x33
mov rax, qword [rbx]
mov dword [rax + 0xc], 0x4a
mov rax, qword [rbx]
mov dword [rax + 0x10], 0x28
mov rax, qword [rbx]
mov dword [rax + 0x14], 0x2a
mov rax, qword [rbx]
mov dword [rax + 0x18], Ordinal_29
mov rax, qword [rbx]
mov dword [rax + 0x1c], reloc.WS2_32.dll_listen
mov rax, qword [rbx]
mov dword [rax + 0x20], 0x23
mov rax, qword [rbx]
mov dword [rax + 0x3c], 0x3f
mov rax, qword [rbx]
mov dword [rax + 0x34], 0x3a
mov rax, qword [rbx]
mov dword [rax + 0x40], 0x1e
mov rax, qword [rbx]
mov dword [rax + 0x44], Ordinal_29
mov rax, qword [rbx]
mov dword [rax + 0x38], 0x25
mov rax, qword [rbx]
mov dword [rax + 0x2c], 0x26
mov rax, qword [rbx]
mov dword [rax + 0x24], 0x36
jmp 0x14014261f
xor r9d, r9d
lea r8, str.Metric
xor ecx, ecx
lea rdx, str.Detected_bp
jmp 0x140142605
mov edx, 0xfa6607
jmp 0x140142610
mov edx, 0x5b9b
lea r10d, [rdx + 0x1e]
jmp 0x140141849
mov edx, 0x5b9b
mov r9d, 0x3fab
mov r10d, 0x5bb9
mov r14d, 0x4563
mov r11d, 0x3ad7
mov r13d, 0x42ee
jmp 0x140141849
mov r9d, 0x3fab
mov r10d, 0x5bb9
mov r11d, eax
mov r14d, 0x4563
mov r13d, 0x42ee
jmp 0x140141849
mov r9d, eax
jmp 0x14014197e
mov r9d, 0x3fab
mov r10d, 0x5bb9
mov r11d, 0x3ad7
mov r14d, 0x4563
mov r13d, eax
jmp 0x140141849
mov r9d, 0x3fab
mov r10d, 0x5bb9
mov r14d, eax
mov r11d, 0x3ad7
mov r13d, 0x42ee
jmp 0x140141849
mov r9d, 0x3fab
jmp 0x140141984
mov edx, 0x5b9b
jmp 0x140141837
mov edx, 0x5b9b
mov r14d, 0x4563
mov r13d, 0x42ee
mov r8d, eax
jmp 0x140141849
mov edx, 0x5b9b
mov r13d, eax
jmp 0x14014183d
mov edx, 0x5b9b
mov r14d, eax
mov r13d, 0x42ee
jmp 0x140141843
mov edx, 0x5b9b
mov r9d, 0x3fab
jmp 0x140141837
mov edx, 0x5b9b
mov r9d, 0x3fab
lea r10d, [rdx + 0x1e]
jmp 0x140141837
mov edx, eax
jmp 0x140141825
mov edx, 0x5b9b
mov r10d, eax
jmp 0x14014182b
mov rax, qword [rbx]
mov dword [rax], reloc.WS2_32.dll_ntohs
mov rax, qword [rbx]
mov dword [rax + 4], 0x50
mov rax, qword [rbx]
mov dword [rax + 8], 0x33
mov rax, qword [rbx]
mov dword [rax + 0xc], 0x4a
mov rax, qword [rbx]
mov dword [rax + 0x10], 0x28
mov rax, qword [rbx]
mov dword [rax + 0x14], 0x2a
mov rax, qword [rbx]
mov dword [rax + 0x18], Ordinal_29
mov rax, qword [rbx]
mov dword [rax + 0x1c], reloc.WS2_32.dll_listen
mov rax, qword [rbx]
mov dword [rax + 0x20], 0x23
mov rax, qword [rbx]
mov dword [rax + 0x3c], 0x3f
mov rax, qword [rbx]
mov dword [rax + 0x34], 0x3a
mov rax, qword [rbx]
mov dword [rax + 0x40], 0x1e
mov rax, qword [rbx]
mov dword [rax + 0x44], Ordinal_29
mov rax, qword [rbx]
mov dword [rax + 0x38], 0x25
mov rax, qword [rbx]
mov dword [rax + 0x24], 0x36
mov rax, qword [rbx]
mov dword [rax + 0x2c], 0x26
jmp 0x14014261f
mov rax, qword [rbx]
mov dword [rax], reloc.WS2_32.dll_ntohs
mov rax, qword [rbx]
mov dword [rax + 4], 0x50
mov rax, qword [rbx]
mov dword [rax + 0x2c], 0x26
mov rax, qword [rbx]
mov dword [rax + 8], 0x33
mov rax, qword [rbx]
mov dword [rax + 0xc], 0x4a
mov rax, qword [rbx]
mov dword [rax + 0x10], 0x28
mov rax, qword [rbx]
mov dword [rax + 0x14], 0x2a
mov rax, qword [rbx]
mov dword [rax + 0x18], Ordinal_29
mov rax, qword [rbx]
mov dword [rax + 0x1c], reloc.WS2_32.dll_listen
mov rax, qword [rbx]
mov dword [rax + 0x20], 0x23
mov rax, qword [rbx]
mov dword [rax + 0x3c], 0x3f
mov rax, qword [rbx]
mov dword [rax + 0x34], 0x3a
mov rax, qword [rbx]
mov dword [rax + 0x40], 0x1e
mov rax, qword [rbx]
mov dword [rax + 0x44], Ordinal_29
mov rax, qword [rbx]
mov dword [rax + 0x38], 0x25
mov rax, qword [rbx]
mov dword [rax + 0x24], 0x36
jmp 0x14014261f
cmp ecx, r13d
je 0x140141de6
cmp ecx, r14d
je 0x140141d42
mov eax, 0x47ba
cmp ecx, eax
je 0x140141c9e
mov eax, 0x4a61
cmp ecx, eax
jne 0x140142157
mov rax, qword [rbx]
mov dword [rax], reloc.WS2_32.dll_ntohs
mov rax, qword [rbx]
mov dword [rax + 4], 0x50
mov rax, qword [rbx]
mov dword [rax + 8], 0x33
mov rax, qword [rbx]
mov dword [rax + 0xc], 0x4a
mov rax, qword [rbx]
mov dword [rax + 0x10], 0x28
mov rax, qword [rbx]
mov dword [rax + 0x14], 0x2a
mov rax, qword [rbx]
mov dword [rax + 0x18], Ordinal_29
mov rax, qword [rbx]
mov dword [rax + 0x1c], reloc.WS2_32.dll_listen
mov rax, qword [rbx]
mov dword [rax + 0x20], 0x23
mov rax, qword [rbx]
mov dword [rax + 0x3c], 0x3f
mov rax, qword [rbx]
mov dword [rax + 0x34], 0x3a
mov rax, qword [rbx]
mov dword [rax + 0x40], 0x1e
mov rax, qword [rbx]
mov dword [rax + 0x44], Ordinal_29
mov rax, qword [rbx]
mov dword [rax + 0x2c], 0x26
mov rax, qword [rbx]
mov dword [rax + 0x38], 0x25
mov rax, qword [rbx]
mov dword [rax + 0x24], 0x36
jmp 0x14014261f
mov rax, qword [rbx]
mov dword [rax], reloc.WS2_32.dll_ntohs
mov rax, qword [rbx]
mov dword [rax + 4], 0x50
mov rax, qword [rbx]
mov dword [rax + 8], 0x33
mov rax, qword [rbx]
mov dword [rax + 0xc], 0x4a
mov rax, qword [rbx]
mov dword [rax + 0x2c], 0x26
mov rax, qword [rbx]
mov dword [rax + 0x10], 0x28
mov rax, qword [rbx]
mov dword [rax + 0x14], 0x2a
mov rax, qword [rbx]
mov dword [rax + 0x18], Ordinal_29
mov rax, qword [rbx]
mov dword [rax + 0x1c], reloc.WS2_32.dll_listen
mov rax, qword [rbx]
mov dword [rax + 0x20], 0x23
mov rax, qword [rbx]
mov dword [rax + 0x3c], 0x3f
mov rax, qword [rbx]
mov dword [rax + 0x34], 0x3a
mov rax, qword [rbx]
mov dword [rax + 0x40], 0x1e
mov rax, qword [rbx]
mov dword [rax + 0x44], Ordinal_29
mov rax, qword [rbx]
mov dword [rax + 0x38], 0x25
mov rax, qword [rbx]
mov dword [rax + 0x24], 0x36
jmp 0x14014261f
mov rax, qword [rbx]
mov dword [rax], reloc.WS2_32.dll_ntohs
mov rax, qword [rbx]
mov dword [rax + 4], 0x50
mov rax, qword [rbx]
mov dword [rax + 8], 0x33
mov rax, qword [rbx]
mov dword [rax + 0xc], 0x4a
mov rax, qword [rbx]
mov dword [rax + 0x10], 0x28
mov rax, qword [rbx]
mov dword [rax + 0x14], 0x2a
mov rax, qword [rbx]
mov dword [rax + 0x2c], 0x26
mov rax, qword [rbx]
mov dword [rax + 0x18], Ordinal_29
mov rax, qword [rbx]
mov dword [rax + 0x1c], reloc.WS2_32.dll_listen
mov rax, qword [rbx]
mov dword [rax + 0x20], 0x23
mov rax, qword [rbx]
mov dword [rax + 0x3c], 0x3f
mov rax, qword [rbx]
mov dword [rax + 0x34], 0x3a
mov rax, qword [rbx]
mov dword [rax + 0x40], 0x1e
mov rax, qword [rbx]
mov dword [rax + 0x44], Ordinal_29
mov rax, qword [rbx]
mov dword [rax + 0x38], 0x25
mov rax, qword [rbx]
mov dword [rax + 0x24], 0x36
jmp 0x14014261f
mov rax, qword [rbx]
mov dword [rax], reloc.WS2_32.dll_ntohs
mov rax, qword [rbx]
mov dword [rax + 4], 0x50
mov rax, qword [rbx]
mov dword [rax + 8], 0x33
mov rax, qword [rbx]
mov dword [rax + 0xc], 0x4a
mov rax, qword [rbx]
mov dword [rax + 0x10], 0x28
mov rax, qword [rbx]
mov dword [rax + 0x14], 0x2a
mov rax, qword [rbx]
mov dword [rax + 0x18], Ordinal_29
mov rax, qword [rbx]
mov dword [rax + 0x1c], reloc.WS2_32.dll_listen
mov rax, qword [rbx]
mov dword [rax + 0x20], 0x23
mov rax, qword [rbx]
mov dword [rax + 0x3c], 0x3f
mov rax, qword [rbx]
mov dword [rax + 0x2c], 0x26
mov rax, qword [rbx]
mov dword [rax + 0x34], 0x3a
mov rax, qword [rbx]
mov dword [rax + 0x40], 0x1e
mov rax, qword [rbx]
mov dword [rax + 0x44], Ordinal_29
mov rax, qword [rbx]
mov dword [rax + 0x38], 0x25
mov rax, qword [rbx]
mov dword [rax + 0x24], 0x36
jmp 0x14014261f
cmp ecx, edx
ja 0x140142134
je 0x1401420a4
sub ecx, 0x4a63
je 0x140141d42
sub ecx, 1
je 0x140142000
sub ecx, 1
je 0x140141f5c
cmp ecx, 0xe02
jne 0x140142157
mov rax, qword [rbx]
mov dword [rax], reloc.WS2_32.dll_ntohs
mov rax, qword [rbx]
mov dword [rax + 4], 0x50
mov rax, qword [rbx]
mov dword [rax + 8], 0x33
mov rax, qword [rbx]
mov dword [rax + 0xc], 0x4a
mov rax, qword [rbx]
mov dword [rax + 0x10], 0x28
mov rax, qword [rbx]
mov dword [rax + 0x14], 0x2a
mov rax, qword [rbx]
mov dword [rax + 0x18], Ordinal_29
mov rax, qword [rbx]
mov dword [rax + 0x20], 0x23
mov rax, qword [rbx]
mov dword [rax + 0x40], 0x1e
mov rax, qword [rbx]
mov dword [rax + 0x44], Ordinal_29
mov rax, qword [rbx]
mov dword [rax + 0x3c], 0x3f
mov rax, qword [rbx]
mov dword [rax + 0x2c], 0x26
mov rax, qword [rbx]
mov dword [rax + 0x34], 0x3a
mov rax, qword [rbx]
mov dword [rax + 0x38], 0x25
mov rax, qword [rbx]
mov dword [rax + 0x24], 0x36
jmp 0x14014261f
mov rax, qword [rbx]
mov dword [rax], reloc.WS2_32.dll_ntohs
mov rax, qword [rbx]
mov dword [rax + 4], 0x50
mov rax, qword [rbx]
mov dword [rax + 8], 0x33
mov rax, qword [rbx]
mov dword [rax + 0xc], 0x4a
mov rax, qword [rbx]
mov dword [rax + 0x10], 0x28
mov rax, qword [rbx]
mov dword [rax + 0x2c], 0x26
mov rax, qword [rbx]
mov dword [rax + 0x14], 0x2a
mov rax, qword [rbx]
mov dword [rax + 0x18], Ordinal_29
mov rax, qword [rbx]
mov dword [rax + 0x1c], reloc.WS2_32.dll_listen
mov rax, qword [rbx]
mov dword [rax + 0x20], 0x23
mov rax, qword [rbx]
mov dword [rax + 0x40], 0x1e
mov rax, qword [rbx]
mov dword [rax + 0x44], Ordinal_29
mov rax, qword [rbx]
mov dword [rax + 0x3c], 0x3f
mov rax, qword [rbx]
mov dword [rax + 0x34], 0x3a
mov rax, qword [rbx]
mov dword [rax + 0x38], 0x25
mov rax, qword [rbx]
mov dword [rax + 0x24], 0x36
jmp 0x14014261f
mov rax, qword [rbx]
mov dword [rax], reloc.WS2_32.dll_ntohs
mov rax, qword [rbx]
mov dword [rax + 4], 0x50
mov rax, qword [rbx]
mov dword [rax + 8], 0x33
mov rax, qword [rbx]
mov dword [rax + 0xc], 0x4a
mov rax, qword [rbx]
mov dword [rax + 0x10], 0x28
mov rax, qword [rbx]
mov dword [rax + 0x14], 0x2a
mov rax, qword [rbx]
mov dword [rax + 0x18], Ordinal_29
mov rax, qword [rbx]
mov dword [rax + 0x1c], reloc.WS2_32.dll_listen
mov rax, qword [rbx]
mov dword [rax + 0x20], 0x23
mov rax, qword [rbx]
mov dword [rax + 0x2c], 0x26
mov rax, qword [rbx]
mov dword [rax + 0x3c], 0x3f
mov rax, qword [rbx]
mov dword [rax + 0x34], 0x3a
mov rax, qword [rbx]
mov dword [rax + 0x40], 0x1e
mov rax, qword [rbx]
mov dword [rax + 0x44], Ordinal_29
mov rax, qword [rbx]
mov dword [rax + 0x38], 0x25
mov rax, qword [rbx]
mov dword [rax + 0x24], 0x36
jmp 0x14014261f
mov rax, qword [rbx]
mov dword [rax], reloc.WS2_32.dll_ntohs
mov rax, qword [rbx]
mov dword [rax + 4], 0x50
mov rax, qword [rbx]
mov dword [rax + 8], 0x33
mov rax, qword [rbx]
mov dword [rax + 0xc], 0x4a
mov rax, qword [rbx]
mov dword [rax + 0x10], 0x28
mov rax, qword [rbx]
mov dword [rax + 0x14], 0x2a
mov rax, qword [rbx]
mov dword [rax + 0x18], Ordinal_29
mov rax, qword [rbx]
mov dword [rax + 0x2c], 0x26
mov rax, qword [rbx]
mov dword [rax + 0x40], 0x1e
mov rax, qword [rbx]
mov dword [rax + 0x44], Ordinal_29
mov rax, qword [rbx]
mov dword [rax + 0x3c], 0x3f
mov rax, qword [rbx]
mov dword [rax + 0x34], 0x3a
mov rax, qword [rbx]
mov dword [rax + 0x38], 0x25
mov rax, qword [rbx]
mov dword [rax + 0x24], 0x36
jmp 0x14014261f
sub ecx, r10d
je 0x14014234c
sub ecx, 0x978
je 0x1401422b2
sub ecx, 0x4d
je 0x140142218
cmp ecx, 0x22
je 0x140142160
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov rax, qword [rbx]
mov dword [rax], reloc.WS2_32.dll_ntohs
mov rax, qword [rbx]
mov dword [rax + 4], 0x50
mov rax, qword [rbx]
mov dword [rax + 8], 0x33
mov rax, qword [rbx]
mov dword [rax + 0xc], 0x4a
mov rax, qword [rbx]
mov dword [rax + 0x10], 0x28
mov rax, qword [rbx]
mov dword [rax + 0x14], 0x2a
mov rax, qword [rbx]
mov dword [rax + 0x18], Ordinal_29
mov rax, qword [rbx]
mov dword [rax + 0x2c], 0x26
mov rax, qword [rbx]
mov dword [rax + 0x1c], reloc.WS2_32.dll_listen
mov rax, qword [rbx]
mov dword [rax + 0x20], 0x23
mov rax, qword [rbx]
mov dword [rax + 0x20], 0x23
mov rax, qword [rbx]
mov dword [rax + 0x40], 0x1e
mov rax, qword [rbx]
mov dword [rax + 0x24], 0x36
mov rax, qword [rbx]
mov dword [rax + 0x44], Ordinal_29
mov rax, qword [rbx]
mov dword [rax + 0x3c], 0x3f
mov rax, qword [rbx]
mov dword [rax + 0x34], 0x3a
mov rax, qword [rbx]
mov dword [rax + 0x38], 0x25
mov rax, qword [rbx]
mov dword [rax + 0x2c], 0x26
jmp 0x14014261f
mov rax, qword [rbx]
mov dword [rax], reloc.WS2_32.dll_ntohs
mov rax, qword [rbx]
mov dword [rax + 4], 0x50
mov rax, qword [rbx]
mov dword [rax + 8], 0x33
mov rax, qword [rbx]
mov dword [rax + 0xc], 0x4a
mov rax, qword [rbx]
mov dword [rax + 0x10], 0x28
mov rax, qword [rbx]
mov dword [rax + 0x14], 0x2a
mov rax, qword [rbx]
mov dword [rax + 0x20], 0x23
mov rax, qword [rbx]
mov dword [rax + 0x18], Ordinal_29
mov rax, qword [rbx]
mov dword [rax + 0x40], 0x1e
mov rax, qword [rbx]
mov dword [rax + 0x44], Ordinal_29
mov rax, qword [rbx]
mov dword [rax + 0x3c], 0x3f
mov rax, qword [rbx]
mov dword [rax + 0x2c], 0x26
mov rax, qword [rbx]
mov dword [rax + 0x34], 0x3a
mov rax, qword [rbx]
mov dword [rax + 0x24], 0x36
mov rax, qword [rbx]
mov dword [rax + 0x38], 0x25
jmp 0x14014261f
mov rax, qword [rbx]
mov dword [rax], reloc.WS2_32.dll_ntohs
mov rax, qword [rbx]
mov dword [rax + 4], 0x50
mov rax, qword [rbx]
mov dword [rax + 8], 0x33
mov rax, qword [rbx]
mov dword [rax + 0xc], 0x4a
mov rax, qword [rbx]
mov dword [rax + 0x10], 0x28
mov rax, qword [rbx]
mov dword [rax + 0x14], 0x2a
mov rax, qword [rbx]
mov dword [rax + 0x18], Ordinal_29
mov rax, qword [rbx]
mov dword [rax + 0x20], 0x23
mov rax, qword [rbx]
mov dword [rax + 0x40], 0x1e
mov rax, qword [rbx]
mov dword [rax + 0x2c], 0x26
mov rax, qword [rbx]
mov dword [rax + 0x44], Ordinal_29
mov rax, qword [rbx]
mov dword [rax + 0x3c], 0x3f
mov rax, qword [rbx]
mov dword [rax + 0x34], 0x3a
mov rax, qword [rbx]
mov dword [rax + 0x38], 0x25
mov rax, qword [rbx]
mov dword [rax + 0x24], 0x36
jmp 0x14014261f
mov rax, qword [rbx]
mov dword [rax], reloc.WS2_32.dll_ntohs
mov rax, qword [rbx]
mov dword [rax + 4], 0x50
mov rax, qword [rbx]
mov dword [rax + 8], 0x33
mov rax, qword [rbx]
mov dword [rax + 0xc], 0x4a
mov rax, qword [rbx]
mov dword [rax + 0x10], 0x28
mov rax, qword [rbx]
mov dword [rax + 0x14], 0x2a
mov rax, qword [rbx]
mov dword [rax + 0x20], 0x23
mov rax, qword [rbx]
mov dword [rax + 0x18], Ordinal_29
mov rax, qword [rbx]
mov dword [rax + 0x40], 0x1e
mov rax, qword [rbx]
mov dword [rax + 0x44], Ordinal_29
mov rax, qword [rbx]
mov dword [rax + 0x3c], 0x3f
mov rax, qword [rbx]
mov dword [rax + 0x34], 0x3a
mov rax, qword [rbx]
mov dword [rax + 0x38], 0x25
mov rax, qword [rbx]
mov dword [rax + 0x24], 0x36
mov rax, qword [rbx]
mov dword [rax + 0x2c], 0x26
jmp 0x14014261f
movabs r15, 0x7683bec8ae2de74a
movabs rax, 0xf325fd0838f83ae0
mov qword [rbp + 0x10], rax
movabs r12, 0xf3259e614a8c5fad
mov rax, qword [rbp + 0x10]
movabs rdx, 0x45f3414fc7cb8db3
mov qword [rbp + 0x320], rax
movabs rcx, 0x3e8e7c5ee847f670
mov qword [rbp + 0x10], r15
movabs r13, 0x8cd80d3b269ba09f
mov rax, qword [rbp + 0x10]
movabs r14, 0x1c89944a1d4f33dc
mov qword [rbp + 0x328], rax
mov qword [rbp + 0x10], r12
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x340], rax
mov qword [rbp + 0x10], r15
mov rax, qword [rbp + 0x10]
movdqa xmm0, xmmword [rbp + 0x320]
mov qword [rbp + 0x348], rax
movabs rax, 0x944ada0929f83efa
xorps xmm0, xmmword [rbp + 0x340]
movdqa xmmword [rbp + 0x320], xmm0
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x240], rax
movabs rax, 0x5dccaa1c044dd70
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x248], rax
movabs rax, 0xa4ab615747f8d3e6
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x250], rax
movabs rax, 0x68eaf13e780b13f5
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x258], rax
movabs rax, 0x2cd7d6a05d8d1704
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x260], rax
movabs rax, 0x71725939f77fc3e9
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x268], rax
mov qword [rbp + 0x10], rdx
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x270], rax
mov qword [rbp + 0x10], rcx
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x278], rax
mov qword [rbp + 0x10], r12
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x340], rax
mov qword [rbp + 0x10], r15
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x348], rax
mov qword [rbp + 0x10], r13
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x350], rax
mov qword [rbp + 0x10], r14
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x358], rax
movabs rax, 0x4ba2b4c539ad7361
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x360], rax
movabs rax, 0x801385cd70da68e
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x368], rax
mov qword [rbp + 0x10], rdx
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x370], rax
mov qword [rbp + 0x10], rcx
mov rax, qword [rbp + 0x10]
vmovdqu ymm0, ymmword [rbp + 0x340]
vpxor ymm1, ymm0, ymmword [rbp + 0x240]
vmovdqa ymmword [rbp + 0x240], ymm1
mov qword [rbp + 0x378], rax
vmovdqu ymm0, ymmword [rbp + 0x260]
vpxor ymm1, ymm0, ymmword [rbp + 0x360]
xor r9d, r9d
lea r8, [rbp + 0x320]
vmovdqa ymmword [rbp + 0x260], ymm1
lea rdx, [rbp + 0x240]
xor ecx, ecx
vzeroupper
call qword [sym.imp.USER32.dll_MessageBoxA]
mov edx, 0xdeadc0de
mov rcx, 0xffffffffffffffff
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
xor al, al
mov rcx, qword [rbp + 0x790]
xor rcx, rsp
call fcn.14014b190
lea r11, [rsp + 0x810]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret