Function at 0x1400df270
Capabilities:
Authenticate hmac
Encode data using xor
Parse pe header

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x148
lea rbp, [rsp + 0x80]
movaps xmmword [rbp + 0xb0], xmm15
movaps xmmword [rbp + 0xa0], xmm14
movaps xmmword [rbp + 0x90], xmm13
movaps xmmword [rbp + 0x80], xmm12
movdqa xmmword [rbp + 0x70], xmm11
movdqa xmmword [rbp + 0x60], xmm10
movdqa xmmword [rbp + 0x50], xmm9
movdqa xmmword [rbp + 0x40], xmm8
movdqa xmmword [rbp + 0x30], xmm7
movdqa xmmword [rbp + 0x20], xmm6
mov qword [rbp + 0x18], 0xfffffffffffffffe
mov r15, rdx
mov r13, rcx
mov rsi, qword [rdx + 0x10]
test rsi, rsi
je 0x1400df4d2
movups xmm0, xmmword [0x1402636ae]
movaps xmmword [rbp - 0x10], xmm0
mov rax, qword [0x1402636bb]
mov qword [rbp - 3], rax
mov byte [rbp - 0x10], 0x41
movdqu xmm0, xmmword [rbp - 0xf]
movdqa xmm1, xmm0
pandn xmm1, xmmword [str.123456789:_____]
pand xmm0, xmmword [0x1402587d0]
por xmm0, xmm1
movdqu xmmword [rbp - 0xf], xmm0
xor byte [rbp + 1], 0x41
xor byte [rbp + 2], 0x42
xor byte [rbp + 3], 0x43
xor byte [rbp + 4], 0x44
lea rcx, [rbp - 0x10]
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
mov rbx, rax
cmp qword [r15 + 0x18], 0x10
mov qword [rbp - 0x20], r15
jb 0x1400df352
mov rax, qword [r15]
mov qword [rbp - 0x20], rax
mov qword [rbp - 0x18], rsi
cmp rbx, rsi
jbe 0x1400df512
movabs rax, 0x7473695065736142
mov qword [rbp - 0x60], rax
mov dword [rbp - 0x58], 0x435f6c6f
mov byte [rbp - 0x54], 0
lea rcx, [rbp - 0x60]
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
mov r12, qword [rbp - 0x18]
cmp rax, r12
jbe 0x1400df637
mov rax, qword [0x1402636d3]
mov qword [rbp], rax
movdqu xmm0, xmmword [0x1402636c3]
mov eax, dword [0x1406f0f68]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete cl
cmp dword [0x1406f0f6c], 0xa
movdqa xmmword [rbp - 0x10], xmm0
setl al
or al, cl
xor ecx, ecx
nop word cs:[rax + rax]
test al, al
je 0x1400df3d0
mov dl, byte [rbp + rcx - 0x10]
mov bl, 0xcf
sub bl, cl
and bl, dl
not dl
lea edi, [rcx + 0x30]
and dil, dl
or bl, dil
mov byte [rbp + rcx - 0x10], bl
mov rdx, rcx
or rdx, 1
nop word cs:[rax + rax]
nop
test al, al
je 0x1400df400
mov r8b, byte [rbp + rdx - 0x10]
mov bl, 0xcf
sub bl, dl
and bl, r8b
not r8b
lea edi, [rdx + 0x30]
and dil, r8b
or bl, dil
mov byte [rbp + rdx - 0x10], bl
add rcx, 2
cmp rcx, 0x18
jne 0x1400df3d0
lea rcx, [rbp - 0x10]
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
cmp rax, r12
jbe 0x1400df701
mov eax, dword [0x1402636eb]
mov dword [rbp - 0x40], eax
movdqu xmm0, xmmword [0x1402636db]
movdqa xmmword [rbp - 0x50], xmm0
mov eax, dword [0x1406f0fa0]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete cl
cmp dword [0x1406f0fa4], 0xa
setl r8b
or r8b, cl
mov bl, 0x64
mov ecx, Ordinal_211
xor edx, edx
mov r12, qword [rbp - 0x18]
nop
movzx edi, bl
mov ebx, edi
not ebx
test r8b, r8b
jne 0x1400df4a5
lea eax, [rdx + 0x30]
and eax, ebx
mov esi, ecx
and esi, edi
or esi, eax
mov byte [rbp + rdx - 0x50], sil
jmp 0x1400df4a5
mov byte [rbp + rdx - 0x50], sil
lea eax, [rdx + 0x30]
and eax, ebx
mov esi, ecx
and esi, edi
or esi, eax
mov byte [rbp + rdx - 0x50], sil
test r8b, r8b
je 0x1400df4a0
cmp rdx, 0x13
je 0x1400df598
mov bl, byte [rbp + rdx - 0x4f]
add rcx, 0xffffffffffffffff
add rdx, 1
jmp 0x1400df480
movabs rax, 0x3758425b5d595f65
mov qword [rbp - 0x10], rax
mov eax, dword [0x1406f0c30]
cmp dword [0x1406f0c34], 0xa
mov byte [rbp - 0x10], 0x55
jl 0x1400df6ba
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
je 0x1400df6ba
nop word cs:[rax + rax]
jmp 0x1400df510
test rbx, rbx
je 0x1400df796
mov rsi, qword [rbp - 0x18]
sub rsi, rbx
lea r8, [rsi + 1]
movsx r14d, byte [rbp - 0x10]
mov rcx, qword [rbp - 0x20]
mov edx, r14d
call sub.VCRUNTIME140.dll_memchr
test rax, rax
je 0x1400df35f
mov rdi, rax
mov rax, qword [rbp - 0x20]
add rsi, rax
add rsi, 1
lea r12, [rbp - 0x10]
nop word cs:[rax + rax]
nop dword [rax]
mov rcx, rdi
mov rdx, r12
mov r8, rbx
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x1400df788
add rdi, 1
mov r8, rsi
sub r8, rdi
mov rcx, rdi
mov edx, r14d
call sub.VCRUNTIME140.dll_memchr
mov rdi, rax
test rax, rax
jne 0x1400df560
jmp 0x1400df35f
lea rcx, [rbp - 0x50]
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
mov r14, 0xffffffffffffffff
cmp rax, r12
ja 0x1400df7fb
mov rbx, rax
test rax, rax
je 0x1400df7f8
mov qword [rbp - 0x28], r13
mov r13, r15
mov r15, r12
sub r15, rbx
lea r8, [r15 + 1]
movsx esi, byte [rbp - 0x50]
mov r12, qword [rbp - 0x20]
mov rcx, r12
mov edx, esi
call sub.VCRUNTIME140.dll_memchr
test rax, rax
je 0x1400df82b
mov rdi, rax
add r15, r12
add r15, 1
lea r12, [rbp - 0x50]
nop word [rax + rax]
mov rcx, rdi
mov rdx, r12
mov r8, rbx
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x1400df824
add rdi, 1
mov r8, r15
sub r8, rdi
mov rcx, rdi
mov edx, esi
call sub.VCRUNTIME140.dll_memchr
mov rdi, rax
test rax, rax
jne 0x1400df600
jmp 0x1400df82b
mov rbx, rax
test rax, rax
je 0x1400df840
mov rdi, r12
sub rdi, rbx
lea r8, [rdi + 1]
mov rcx, qword [rbp - 0x20]
mov edx, 0x42
call sub.VCRUNTIME140.dll_memchr
test rax, rax
je 0x1400df38e
mov rsi, rax
mov rax, qword [rbp - 0x20]
add rdi, rax
add rdi, 1
lea r14, [rbp - 0x60]
nop word cs:[rax + rax]
mov rcx, rsi
mov rdx, r14
mov r8, rbx
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x1400df806
add rsi, 1
mov r8, rdi
sub r8, rsi
mov rcx, rsi
mov edx, 0x42
call sub.VCRUNTIME140.dll_memchr
mov rsi, rax
test rax, rax
jne 0x1400df680
jmp 0x1400df38e
mov qword [rbp - 0x30], r15
xor byte [rbp - 0xf], 0x31
xor byte [rbp - 0xe], 0x32
xor byte [rbp - 0xd], 0x33
xor byte [rbp - 0xc], 0x34
xor byte [rbp - 0xb], 0x35
xor byte [rbp - 0xa], 0x36
xor byte [rbp - 9], 0x37
mov rcx, r13
call fcn.1400abec0
lea rsi, [rbp - 0x10]
mov rcx, rsi
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
mov rcx, r13
mov rdx, rsi
mov r8, rax
call fcn.14008d7b0
jmp 0x1400df8b4
mov rbx, rax
test rax, rax
je 0x1400df840
mov rsi, qword [rbp - 0x18]
sub rsi, rbx
lea r8, [rsi + 1]
movsx r14d, byte [rbp - 0x10]
mov rcx, qword [rbp - 0x20]
mov edx, r14d
call sub.VCRUNTIME140.dll_memchr
test rax, rax
je 0x1400df43c
mov rdi, rax
mov rax, qword [rbp - 0x20]
add rsi, rax
add rsi, 1
lea r12, [rbp - 0x10]
nop word cs:[rax + rax]
nop
mov rcx, rdi
mov rdx, r12
mov r8, rbx
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x1400df815
add rdi, 1
mov r8, rsi
sub r8, rdi
mov rcx, rdi
mov edx, r14d
call sub.VCRUNTIME140.dll_memchr
mov rdi, rax
test rax, rax
jne 0x1400df750
jmp 0x1400df43c
sub rdi, qword [rbp - 0x20]
cmp rdi, 0xffffffffffffffff
je 0x1400df35f
mov qword [rbp - 0x30], r15
mov eax, dword [0x1406dfcd0]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete cl
cmp dword [0x1406dfcd4], 0xa
setl al
or al, cl
nop dword [rax + rax]
test al, al
je 0x1400df7c0
mov dword [rbp - 0x10], 0x656c654d
mov word [rbp - 0xc], 0x65
mov rcx, r13
call fcn.1400abec0
lea rsi, [rbp - 0x10]
mov rcx, rsi
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
mov rcx, r13
mov rdx, rsi
mov r8, rax
call fcn.14008d7b0
jmp 0x1400df8b4
xor r14d, r14d
cmp r14, 0xffffffffffffffff
jne 0x1400df840
jmp 0x1400df955
sub rsi, qword [rbp - 0x20]
cmp rsi, 0xffffffffffffffff
jne 0x1400df840
jmp 0x1400df38e
sub rdi, qword [rbp - 0x20]
cmp rdi, 0xffffffffffffffff
jne 0x1400df840
jmp 0x1400df43c
sub rdi, qword [rbp - 0x20]
mov r14, rdi
mov r15, r13
mov r13, qword [rbp - 0x28]
mov r12, qword [rbp - 0x18]
cmp r14, 0xffffffffffffffff
je 0x1400df955
movabs rax, 0x37555c4740535d73
mov qword [rbp - 0x10], rax
mov eax, dword [0x1406f0c30]
cmp dword [0x1406f0c34], 0xa
mov byte [rbp - 0x10], 0x43
jl 0x1400df872
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
je 0x1400df872
nop dword [rax]
jmp 0x1400df870
mov qword [rbp - 0x30], r15
xor byte [rbp - 0xf], 0x31
xor byte [rbp - 0xe], 0x32
xor byte [rbp - 0xd], 0x33
xor byte [rbp - 0xc], 0x34
xor byte [rbp - 0xb], 0x35
xor byte [rbp - 0xa], 0x36
xor byte [rbp - 9], 0x37
mov rcx, r13
call fcn.1400abec0
lea rsi, [rbp - 0x10]
mov rcx, rsi
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
mov rcx, r13
mov rdx, rsi
mov r8, rax
call fcn.14008d7b0
mov rsi, qword [rbp - 0x30]
mov r8, qword [rsi + 0x18]
cmp r8, 0x10
jb 0x1400df8d1
mov rdx, qword [rsi]
add r8, 1
mov rcx, rsi
call fcn.14017a700
movaps xmm0, xmmword [0x1402599c0]
movups xmmword [rsi + 0x10], xmm0
mov byte [rsi], 0
cmp dword [0x1406f0a30], 0xa
jl 0x1400df902
mov eax, dword [0x1406f0a34]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
je 0x1400df902
nop dword [rax]
jmp 0x1400df900
mov rax, r13
movaps xmm6, xmmword [rbp + 0x20]
movaps xmm7, xmmword [rbp + 0x30]
movaps xmm8, xmmword [rbp + 0x40]
movaps xmm9, xmmword [rbp + 0x50]
movaps xmm10, xmmword [rbp + 0x60]
movaps xmm11, xmmword [rbp + 0x70]
movaps xmm12, xmmword [rbp + 0x80]
movaps xmm13, xmmword [rbp + 0x90]
movaps xmm14, xmmword [rbp + 0xa0]
movaps xmm15, xmmword [rbp + 0xb0]
add rsp, 0x148
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
movzx eax, word [0x1402636ff]
mov word [rbp], ax
movdqu xmm0, xmmword [0x1402636ef]
mov eax, dword [0x1406f0bb8]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete cl
cmp dword [0x1406f0bbc], 0xa
movdqa xmmword [rbp - 0x10], xmm0
setl al
or al, cl
xor ecx, ecx
nop dword [rax]
test al, al
je 0x1400df990
mov dl, byte [rbp + rcx - 0x10]
mov bl, 0xcf
sub bl, cl
and bl, dl
not dl
lea edi, [rcx + 0x30]
and dil, dl
or bl, dil
mov byte [rbp + rcx - 0x10], bl
mov rdx, rcx
or rdx, 1
nop word cs:[rax + rax]
nop
test al, al
je 0x1400df9c0
mov r8b, byte [rbp + rdx - 0x10]
mov bl, 0xcf
sub bl, dl
and bl, r8b
not r8b
lea edi, [rdx + 0x30]
and dil, r8b
or bl, dil
mov byte [rbp + rdx - 0x10], bl
add rcx, 2
cmp rcx, 0x12
jne 0x1400df990
lea rcx, [rbp - 0x10]
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
cmp rax, r12
mov qword [rbp - 0x30], r15
jbe 0x1400dfc22
mov r15, qword [rbp - 0x20]
movzx eax, word [0x140263711]
mov word [rbp], ax
movdqu xmm0, xmmword [0x140263701]
mov eax, dword [0x1406f0bb8]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete cl
cmp dword [0x1406f0bbc], 0xa
movdqa xmmword [rbp - 0x10], xmm0
setl al
or al, cl
xor ecx, ecx
mov rsi, qword [rbp - 0x18]
test al, al
je 0x1400dfa40
mov dl, byte [rbp + rcx - 0x10]
mov bl, 0xcf
sub bl, cl
and bl, dl
not dl
lea edi, [rcx + 0x30]
and dil, dl
or bl, dil
mov byte [rbp + rcx - 0x10], bl
mov rdx, rcx
or rdx, 1
nop word cs:[rax + rax]
nop
test al, al
je 0x1400dfa70
mov r8b, byte [rbp + rdx - 0x10]
mov bl, 0xcf
sub bl, dl
and bl, r8b
not r8b
lea edi, [rdx + 0x30]
and dil, r8b
or bl, dil
mov byte [rbp + rdx - 0x10], bl
add rcx, 2
cmp rcx, 0x12
jne 0x1400dfa40
lea rcx, [rbp - 0x10]
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
cmp rax, rsi
jbe 0x1400dfca8
mov rax, qword [0x140263720]
mov qword [rbp - 0xa], rax
mov rax, qword [0x14026371a]
mov qword [rbp - 0x10], rax
mov eax, dword [0x1406e03f8]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete al
cmp dword [0x1406e03fc], 0xa
setl r9b
or r9b, al
mov r8d, dword [0x1406f0e70]
mov r11d, dword [0x1406f0e74]
lea r10d, [r8 - 1]
test r9b, r9b
mov r14, qword [rbp - 0x18]
je 0x1400dfd28
mov ebx, r10d
imul ebx, r8d
and ebx, 1
sete al
cmp r11d, 0xa
setl cl
or cl, al
xor esi, esi
jmp 0x1400dfb2e
mov byte [rbp + rsi - 0x10], al
add rsi, 1
cmp rsi, 0xe
je 0x1400dfb56
mov dl, byte [rbp + rsi - 0x10]
mov al, 0xcf
sub al, sil
and al, dl
not dl
lea edi, [rsi + 0x30]
and dil, dl
or al, dil
test cl, cl
jne 0x1400dfb20
mov byte [rbp + rsi - 0x10], al
nop dword [rax]
test cl, cl
je 0x1400dfb50
jmp 0x1400dfb24
test r9b, r9b
jne 0x1400dfba6
test ebx, ebx
sete al
cmp r11d, 0xa
setl cl
or cl, al
xor ebx, ebx
jmp 0x1400dfb82
mov byte [rbp + rbx - 0x10], al
add rbx, 1
cmp rbx, 0xe
je 0x1400dfb01
mov dl, byte [rbp + rbx - 0x10]
mov al, 0xcf
sub al, bl
and al, dl
not dl
lea esi, [rbx + 0x30]
and sil, dl
or al, sil
test cl, cl
jne 0x1400dfb70
mov byte [rbp + rbx - 0x10], al
nop
test cl, cl
je 0x1400dfba0
jmp 0x1400dfb74
lea rcx, [rbp - 0x10]
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
cmp rax, r14
jbe 0x1400dfd37
movups xmm0, xmmword [0x140263728]
movaps xmmword [rbp - 0x10], xmm0
mov al, byte [0x140263738]
mov byte [rbp], al
mov byte [rbp - 0x10], 0x52
movdqu xmm0, xmmword [rbp - 0xf]
pxor xmm0, xmmword [str.123456789:_____]
movdqu xmmword [rbp - 0xf], xmm0
lea rcx, [rbp - 0x10]
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
cmp rax, qword [rbp - 0x18]
jbe 0x1400dfdad
cmp dword [0x1406e048c], 0xa
jl 0x1400dfe23
mov eax, dword [0x1406e0488]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
je 0x1400dfe23
nop word [rax + rax]
jmp 0x1400dfc20
mov rbx, rax
test rax, rax
je 0x1400e0007
mov rsi, qword [rbp - 0x18]
sub rsi, rbx
lea r8, [rsi + 1]
movsx r14d, byte [rbp - 0x10]
mov rcx, qword [rbp - 0x20]
mov edx, r14d
call sub.VCRUNTIME140.dll_memchr
test rax, rax
je 0x1400dfa00
mov rdi, rax
mov rax, qword [rbp - 0x20]
add rsi, rax
add rsi, 1
lea r12, [rbp - 0x10]
nop word cs:[rax + rax]
nop
mov rcx, rdi
mov rdx, r12
mov r8, rbx
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x1400dfff6
add rdi, 1
mov r8, rsi
sub r8, rdi
mov rcx, rdi
mov edx, r14d
call sub.VCRUNTIME140.dll_memchr
mov rdi, rax
test rax, rax
jne 0x1400dfc70
jmp 0x1400dfa00
mov rbx, rax
test rax, rax
je 0x1400e0167
mov rsi, qword [rbp - 0x18]
sub rsi, rbx
lea r8, [rsi + 1]
movsx r14d, byte [rbp - 0x10]
mov rcx, r15
mov edx, r14d
call sub.VCRUNTIME140.dll_memchr
test rax, rax
je 0x1400dfaac
mov rdi, rax
add rsi, r15
add rsi, 1
lea r12, [rbp - 0x10]
nop word cs:[rax + rax]
mov rcx, rdi
mov rdx, r12
mov r8, rbx
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x1400e015a
add rdi, 1
mov r8, rsi
sub r8, rdi
mov rcx, rdi
mov edx, r14d
call sub.VCRUNTIME140.dll_memchr
mov rdi, rax
test rax, rax
jne 0x1400dfcf0
jmp 0x1400dfaac
mov ebx, r10d
imul ebx, r8d
and ebx, 1
jmp 0x1400dfb5b
mov rbx, rax
test rax, rax
je 0x1400e0399
mov rsi, qword [rbp - 0x18]
sub rsi, rbx
lea r8, [rsi + 1]
movsx r14d, byte [rbp - 0x10]
mov rcx, r15
mov edx, r14d
call sub.VCRUNTIME140.dll_memchr
test rax, rax
je 0x1400dfbb8
mov rdi, rax
add rsi, r15
add rsi, 1
lea r12, [rbp - 0x10]
mov rcx, rdi
mov rdx, r12
mov r8, rbx
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x1400e038c
add rdi, 1
mov r8, rsi
sub r8, rdi
mov rcx, rdi
mov edx, r14d
call sub.VCRUNTIME140.dll_memchr
mov rdi, rax
test rax, rax
jne 0x1400dfd75
jmp 0x1400dfbb8
mov rbx, rax
test rax, rax
je 0x1400e048a
mov rsi, qword [rbp - 0x18]
sub rsi, rbx
lea r8, [rsi + 1]
movsx r14d, byte [rbp - 0x10]
mov rcx, r15
mov edx, r14d
call sub.VCRUNTIME140.dll_memchr
test rax, rax
je 0x1400dfbf5
mov rdi, rax
add rsi, r15
add rsi, 1
lea r12, [rbp - 0x10]
mov rcx, rdi
mov rdx, r12
mov r8, rbx
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x1400e047d
add rdi, 1
mov r8, rsi
sub r8, rdi
mov rcx, rdi
mov edx, r14d
call sub.VCRUNTIME140.dll_memchr
mov rdi, rax
test rax, rax
jne 0x1400dfdeb
jmp 0x1400dfbf5
movabs rax, 0x435f726f74636556
mov qword [rbp - 0x10], rax
mov byte [rbp - 8], 0
lea rcx, [rbp - 0x10]
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
mov r12, qword [rbp - 0x18]
cmp rax, r12
jbe 0x1400e00e6
mov eax, dword [0x140263749]
mov dword [rbp], eax
movdqu xmm0, xmmword [0x140263739]
movdqa xmmword [rbp - 0x10], xmm0
mov eax, dword [0x1406f0fa0]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete cl
cmp dword [0x1406f0fa4], 0xa
setl r8b
or r8b, cl
mov bl, 0x63
mov ecx, Ordinal_211
xor edx, edx
nop word [rax + rax]
movzx edi, bl
mov ebx, edi
not ebx
test r8b, r8b
jne 0x1400dfeb5
lea eax, [rdx + 0x30]
and eax, ebx
mov esi, ecx
and esi, edi
or esi, eax
mov byte [rbp + rdx - 0x10], sil
jmp 0x1400dfeb5
mov byte [rbp + rdx - 0x10], sil
lea eax, [rdx + 0x30]
and eax, ebx
mov esi, ecx
and esi, edi
or esi, eax
mov byte [rbp + rdx - 0x10], sil
test r8b, r8b
je 0x1400dfeb0
cmp rdx, 0x13
je 0x1400dfede
mov bl, byte [rbp + rdx - 0xf]
add rcx, 0xffffffffffffffff
add rdx, 1
jmp 0x1400dfe90
lea rcx, [rbp - 0x10]
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
cmp rax, r12
jbe 0x1400e0316
mov rax, qword [0x140263753]
mov qword [rbp - 0xa], rax
mov rax, qword [0x14026374d]
mov qword [rbp - 0x10], rax
mov eax, dword [0x1406e03f8]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete al
cmp dword [0x1406e03fc], 0xa
setl r9b
or r9b, al
mov r8d, dword [0x1406f0e70]
mov r11d, dword [0x1406f0e74]
lea r10d, [r8 - 1]
test r9b, r9b
mov r14, qword [rbp - 0x18]
je 0x1400e03f8
mov ebx, r10d
imul ebx, r8d
and ebx, 1
sete al
cmp r11d, 0xa
setl cl
or cl, al
xor esi, esi
jmp 0x1400dff6e
mov byte [rbp + rsi - 0x10], al
add rsi, 1
cmp rsi, 0xe
je 0x1400dff96
mov dl, byte [rbp + rsi - 0x10]
mov al, 0xcf
sub al, sil
and al, dl
not dl
lea edi, [rsi + 0x30]
and dil, dl
or al, dil
test cl, cl
jne 0x1400dff60
mov byte [rbp + rsi - 0x10], al
nop dword [rax]
test cl, cl
je 0x1400dff90
jmp 0x1400dff64
test r9b, r9b
jne 0x1400e003f
test ebx, ebx
sete al
cmp r11d, 0xa
setl cl
or cl, al
xor ebx, ebx
jmp 0x1400dffd2
mov byte [rbp + rbx - 0x10], al
add rbx, 1
cmp rbx, 0xe
je 0x1400dff45
mov dl, byte [rbp + rbx - 0x10]
mov al, 0xcf
sub al, bl
and al, dl
not dl
lea esi, [rbx + 0x30]
and sil, dl
or al, sil
test cl, cl
jne 0x1400dffc0
mov byte [rbp + rbx - 0x10], al
nop
test cl, cl
je 0x1400dfff0
jmp 0x1400dffc4
mov r15, qword [rbp - 0x20]
sub rdi, r15
cmp rdi, 0xffffffffffffffff
je 0x1400dfa04
mov dword [rbp - 0x10], 0x726f6853
mov word [rbp - 0xc], 0x7974
mov byte [rbp - 0xa], 0
mov rcx, r13
call fcn.1400abec0
lea rsi, [rbp - 0x10]
mov rcx, rsi
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
mov rcx, r13
mov rdx, rsi
mov r8, rax
call fcn.14008d7b0
jmp 0x1400df8b4
lea rcx, [rbp - 0x10]
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
cmp rax, r14
jbe 0x1400e0407
mov eax, dword [0x14026376a]
mov dword [rbp - 1], eax
movdqu xmm0, xmmword [0x14026375b]
mov eax, dword [0x1406f0fa8]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete cl
cmp dword [0x1406f0fac], 0xa
movdqa xmmword [rbp - 0x10], xmm0
setl al
or al, cl
xor ecx, ecx
mov rsi, qword [rbp - 0x18]
nop dword [rax + rax]
test al, al
je 0x1400e0090
mov dl, byte [rbp + rcx - 0x10]
mov bl, 0xcf
sub bl, cl
and bl, dl
not dl
lea edi, [rcx + 0x30]
and dil, dl
or bl, dil
mov byte [rbp + rcx - 0x10], bl
mov rdx, rcx
or rdx, 1
cmp rdx, 0x13
je 0x1400e01d0
nop
test al, al
je 0x1400e00c0
mov r8b, byte [rbp + rdx - 0x10]
mov bl, 0xcf
sub bl, dl
and bl, r8b
not r8b
lea edi, [rdx + 0x30]
and dil, r8b
or bl, dil
mov byte [rbp + rdx - 0x10], bl
add rcx, 2
jmp 0x1400e0090
mov rbx, rax
test rax, rax
je 0x1400e06c1
mov rdi, r12
sub rdi, rbx
lea r8, [rdi + 1]
mov rcx, r15
mov edx, 0x56
call sub.VCRUNTIME140.dll_memchr
test rax, rax
je 0x1400dfe4b
mov rsi, rax
add rdi, r15
add rdi, 1
lea r14, [rbp - 0x10]
mov rcx, rsi
mov rdx, r14
mov r8, rbx
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x1400e06b4
add rsi, 1
mov r8, rdi
sub r8, rsi
mov rcx, rsi
mov edx, 0x56
call sub.VCRUNTIME140.dll_memchr
mov rsi, rax
test rax, rax
jne 0x1400e0120
jmp 0x1400dfe4b
sub rdi, r15
cmp rdi, 0xffffffffffffffff
je 0x1400dfaac
cmp dword [0x1406df724], 0xa
jl 0x1400e0198
mov eax, dword [0x1406df720]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
je 0x1400e0198
mov eax, dword [0x140263716]
mov ecx, dword [0x140263713]
nop dword [rax]
mov dword [rbp - 0xd], eax
mov dword [rbp - 0x10], ecx
jmp 0x1400e0190
mov dword [rbp - 0x10], 0x6e657246
mov word [rbp - 0xc], 0x797a
mov byte [rbp - 0xa], 0
mov rcx, r13
call fcn.1400abec0
lea rsi, [rbp - 0x10]
mov rcx, rsi
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
mov rcx, r13
mov rdx, rsi
mov r8, rax
call fcn.14008d7b0
jmp 0x1400df8b4
lea rcx, [rbp - 0x10]
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
cmp rax, rsi
jbe 0x1400e0505
movups xmm0, xmmword [0x14026376e]
movaps xmmword [rbp - 0x10], xmm0
mov rax, qword [0x14026377b]
mov qword [rbp - 3], rax
mov byte [rbp - 0x10], 0x41
movdqu xmm0, xmmword [rbp - 0xf]
movdqa xmm1, xmm0
pandn xmm1, xmmword [str.123456789:_____]
pand xmm0, xmmword [0x1402587d0]
por xmm0, xmm1
movdqu xmmword [rbp - 0xf], xmm0
xor byte [rbp + 1], 0x41
xor byte [rbp + 2], 0x42
xor byte [rbp + 3], 0x43
xor byte [rbp + 4], 0x44
lea rcx, [rbp - 0x10]
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
cmp rax, qword [rbp - 0x18]
jbe 0x1400e05ca
mov eax, dword [0x1406dfcd0]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete cl
cmp dword [0x1406dfcd4], 0xa
setl al
or al, cl
test al, al
je 0x1400e025f
mov dword [rbp - 0x10], 0x5f524d44
mov word [rbp - 0xc], 0x43
lea rcx, [rbp - 0x10]
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
mov r12, qword [rbp - 0x18]
cmp rax, r12
jbe 0x1400e0640
mov eax, dword [0x140263792]
mov dword [rbp - 1], eax
movdqu xmm0, xmmword [0x140263783]
mov eax, dword [0x1406f0fa8]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete cl
cmp dword [0x1406f0fac], 0xa
movdqa xmmword [rbp - 0x10], xmm0
setl al
or al, cl
xor ecx, ecx
nop dword [rax]
test al, al
je 0x1400e02c0
mov dl, byte [rbp + rcx - 0x10]
mov bl, 0xcf
sub bl, cl
and bl, dl
not dl
lea edi, [rcx + 0x30]
and dil, dl
or bl, dil
mov byte [rbp + rcx - 0x10], bl
mov rdx, rcx
or rdx, 1
cmp rdx, 0x13
je 0x1400e057b
nop
test al, al
je 0x1400e02f0
mov r8b, byte [rbp + rdx - 0x10]
mov bl, 0xcf
sub bl, dl
and bl, r8b
not r8b
lea edi, [rdx + 0x30]
and dil, r8b
or bl, dil
mov byte [rbp + rdx - 0x10], bl
add rcx, 2
jmp 0x1400e02c0
mov rbx, rax
test rax, rax
je 0x1400e07b8
mov rsi, qword [rbp - 0x18]
sub rsi, rbx
lea r8, [rsi + 1]
movsx r14d, byte [rbp - 0x10]
mov rcx, r15
mov edx, r14d
call sub.VCRUNTIME140.dll_memchr
test rax, rax
je 0x1400dfef0
mov rdi, rax
add rsi, r15
add rsi, 1
lea r12, [rbp - 0x10]
mov rcx, rdi
mov rdx, r12
mov r8, rbx
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x1400e07ab
add rdi, 1
mov r8, rsi
sub r8, rdi
mov rcx, rdi
mov edx, r14d
call sub.VCRUNTIME140.dll_memchr
mov rdi, rax
test rax, rax
jne 0x1400e0354
jmp 0x1400dfef0
sub rdi, r15
cmp rdi, 0xffffffffffffffff
je 0x1400dfbb8
mov eax, dword [0x1406dfcd0]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete cl
cmp dword [0x1406dfcd4], 0xa
setl al
or al, cl
nop word [rax + rax]
test al, al
je 0x1400e03c0
mov dword [rbp - 0x10], 0x736f6847
mov word [rbp - 0xc], reloc.WS2_32.dll_WSACleanup
mov rcx, r13
call fcn.1400abec0
lea rsi, [rbp - 0x10]
mov rcx, rsi
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
mov rcx, r13
mov rdx, rsi
mov r8, rax
call fcn.14008d7b0
jmp 0x1400df8b4
mov ebx, r10d
imul ebx, r8d
and ebx, 1
jmp 0x1400dff9f
mov rbx, rax
test rax, rax
je 0x1400e0993
mov rsi, qword [rbp - 0x18]
sub rsi, rbx
lea r8, [rsi + 1]
movsx r14d, byte [rbp - 0x10]
mov rcx, r15
mov edx, r14d
call sub.VCRUNTIME140.dll_memchr
test rax, rax
je 0x1400e0051
mov rdi, rax
add rsi, r15
add rsi, 1
lea r12, [rbp - 0x10]
mov rcx, rdi
mov rdx, r12
mov r8, rbx
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x1400e0986
add rdi, 1
mov r8, rsi
sub r8, rdi
mov rcx, rdi
mov edx, r14d
call sub.VCRUNTIME140.dll_memchr
mov rdi, rax
test rax, rax
jne 0x1400e0445
jmp 0x1400e0051
sub rdi, r15
cmp rdi, 0xffffffffffffffff
je 0x1400dfbf5
movabs rax, 0x3750535d41575963
mov qword [rbp - 0x10], rax
mov eax, dword [0x1406f0c30]
cmp dword [0x1406f0c34], 0xa
mov byte [rbp - 0x10], 0x53
jl 0x1400e04c2
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
je 0x1400e04c2
nop word cs:[rax + rax]
jmp 0x1400e04c0
xor byte [rbp - 0xf], 0x31
xor byte [rbp - 0xe], 0x32
xor byte [rbp - 0xd], 0x33
xor byte [rbp - 0xc], 0x34
xor byte [rbp - 0xb], 0x35
xor byte [rbp - 0xa], 0x36
xor byte [rbp - 9], 0x37
mov rcx, r13
call fcn.1400abec0
lea rsi, [rbp - 0x10]
mov rcx, rsi
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
mov rcx, r13
mov rdx, rsi
mov r8, rax
call fcn.14008d7b0
jmp 0x1400df8b4
mov rbx, rax
test rax, rax
je 0x1400e0a47
mov rsi, qword [rbp - 0x18]
sub rsi, rbx
lea r8, [rsi + 1]
movsx r14d, byte [rbp - 0x10]
mov rcx, r15
mov edx, r14d
call sub.VCRUNTIME140.dll_memchr
test rax, rax
je 0x1400e01e2
mov rdi, rax
add rsi, r15
add rsi, 1
lea r12, [rbp - 0x10]
mov rcx, rdi
mov rdx, r12
mov r8, rbx
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x1400e0a3a
add rdi, 1
mov r8, rsi
sub r8, rdi
mov rcx, rdi
mov edx, r14d
call sub.VCRUNTIME140.dll_memchr
mov rdi, rax
test rax, rax
jne 0x1400e0543
jmp 0x1400e01e2
lea rcx, [rbp - 0x10]
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
cmp rax, r12
jbe 0x1400e0735
cmp dword [0x1406df79c], 0xa
jl 0x1400e0835
mov eax, dword [0x1406df798]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
je 0x1400e0835
movzx eax, word [0x1402637a6]
movups xmm0, xmmword [0x140263796]
nop dword [rax]
mov word [rbp], ax
movaps xmmword [rbp - 0x10], xmm0
jmp 0x1400e05c0
mov rbx, rax
test rax, rax
je 0x1400e0b20
mov rsi, qword [rbp - 0x18]
sub rsi, rbx
lea r8, [rsi + 1]
movsx r14d, byte [rbp - 0x10]
mov rcx, r15
mov edx, r14d
call sub.VCRUNTIME140.dll_memchr
test rax, rax
je 0x1400e0241
mov rdi, rax
add rsi, r15
add rsi, 1
lea r12, [rbp - 0x10]
mov rcx, rdi
mov rdx, r12
mov r8, rbx
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x1400e0b13
add rdi, 1
mov r8, rsi
sub r8, rdi
mov rcx, rdi
mov edx, r14d
call sub.VCRUNTIME140.dll_memchr
mov rdi, rax
test rax, rax
jne 0x1400e0608
jmp 0x1400e0241
mov rbx, rax
test rax, rax
je 0x1400e0c18
mov rdi, r12
sub rdi, rbx
lea r8, [rdi + 1]
mov rcx, r15
mov edx, 0x44
call sub.VCRUNTIME140.dll_memchr
test rax, rax
je 0x1400e0286
mov rsi, rax
add rdi, r15
add rdi, 1
lea r14, [rbp - 0x10]
mov rcx, rsi
mov rdx, r14
mov r8, rbx
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x1400e0c0b
add rsi, 1
mov r8, rdi
sub r8, rsi
mov rcx, rsi
mov edx, 0x44
call sub.VCRUNTIME140.dll_memchr
mov rsi, rax
test rax, rax
jne 0x1400e067a
jmp 0x1400e0286
sub rsi, r15
cmp rsi, 0xffffffffffffffff
je 0x1400dfe4b
movabs rax, 0x374450535d5b4563
mov qword [rbp - 0x10], rax
mov eax, dword [0x1406f0c30]
cmp dword [0x1406f0c34], 0xa
mov byte [rbp - 0x10], 0x53
jl 0x1400e06f2
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
je 0x1400e06f2
nop dword [rax]
jmp 0x1400e06f0
xor byte [rbp - 0xf], 0x31
xor byte [rbp - 0xe], 0x32
xor byte [rbp - 0xd], 0x33
xor byte [rbp - 0xc], 0x34
xor byte [rbp - 0xb], 0x35
xor byte [rbp - 0xa], 0x36
xor byte [rbp - 9], 0x37
mov rcx, r13
call fcn.1400abec0
lea rsi, [rbp - 0x10]
mov rcx, rsi
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
mov rcx, r13
mov rdx, rsi
mov r8, rax
call fcn.14008d7b0
jmp 0x1400df8b4
mov rbx, rax
test rax, rax
je 0x1400e0d97
mov rsi, qword [rbp - 0x18]
sub rsi, rbx
lea r8, [rsi + 1]
movsx r14d, byte [rbp - 0x10]
mov rcx, r15
mov edx, r14d
call sub.VCRUNTIME140.dll_memchr
test rax, rax
je 0x1400e058d
mov rdi, rax
add rsi, r15
add rsi, 1
lea r12, [rbp - 0x10]
mov rcx, rdi
mov rdx, r12
mov r8, rbx
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x1400e0d8a
add rdi, 1
mov r8, rsi
sub r8, rdi
mov rcx, rdi
mov edx, r14d
call sub.VCRUNTIME140.dll_memchr
mov rdi, rax
test rax, rax
jne 0x1400e0773
jmp 0x1400e058d
sub rdi, r15
cmp rdi, 0xffffffffffffffff
je 0x1400dfef0
movabs rax, 0x3753474050574163
mov qword [rbp - 0x10], rax
mov eax, dword [0x1406f0c30]
cmp dword [0x1406f0c34], 0xa
mov byte [rbp - 0x10], 0x53
jl 0x1400e07f2
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
je 0x1400e07f2
nop word cs:[rax + rax]
nop
jmp 0x1400e07f0
xor byte [rbp - 0xf], 0x31
xor byte [rbp - 0xe], 0x32
xor byte [rbp - 0xd], 0x33
xor byte [rbp - 0xc], 0x34
xor byte [rbp - 0xb], 0x35
xor byte [rbp - 0xa], 0x36
xor byte [rbp - 9], 0x37
mov rcx, r13
call fcn.1400abec0
lea rsi, [rbp - 0x10]
mov rcx, rsi
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
mov rcx, r13
mov rdx, rsi
mov r8, rax
call fcn.14008d7b0
jmp 0x1400df8b4
movzx eax, word [0x1402637a6]
mov word [rbp], ax
movdqu xmm0, xmmword [0x140263796]
mov eax, dword [0x1406f0bb8]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete cl
cmp dword [0x1406f0bbc], 0xa
movdqa xmmword [rbp - 0x10], xmm0
setl al
or al, cl
xor ecx, ecx
mov rsi, qword [rbp - 0x18]
nop word cs:[rax + rax]
nop dword [rax + rax]
test al, al
je 0x1400e0880
mov dl, byte [rbp + rcx - 0x10]
mov bl, 0xcf
sub bl, cl
and bl, dl
not dl
lea edi, [rcx + 0x30]
and dil, dl
or bl, dil
mov byte [rbp + rcx - 0x10], bl
mov rdx, rcx
or rdx, 1
nop word cs:[rax + rax]
nop
test al, al
je 0x1400e08b0
mov r8b, byte [rbp + rdx - 0x10]
mov bl, 0xcf
sub bl, dl
and bl, r8b
not r8b
lea edi, [rdx + 0x30]
and dil, r8b
or bl, dil
mov byte [rbp + rdx - 0x10], bl
add rcx, 2
cmp rcx, 0x12
jne 0x1400e0880
lea rcx, [rbp - 0x10]
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
cmp rax, rsi
jbe 0x1400e0a9d
mov eax, dword [0x1402637b7]
mov dword [rbp - 1], eax
movdqu xmm0, xmmword [0x1402637a8]
mov eax, dword [0x1406f0fa8]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete cl
cmp dword [0x1406f0fac], 0xa
movdqa xmmword [rbp - 0x10], xmm0
setl al
or al, cl
xor ecx, ecx
mov rsi, qword [rbp - 0x18]
nop word cs:[rax + rax]
test al, al
je 0x1400e0930
mov dl, byte [rbp + rcx - 0x10]
mov bl, 0xcf
sub bl, cl
and bl, dl
not dl
lea edi, [rcx + 0x30]
and dil, dl
or bl, dil
mov byte [rbp + rcx - 0x10], bl
mov rdx, rcx
or rdx, 1
cmp rdx, 0x13
je 0x1400e09e9
nop
test al, al
je 0x1400e0960
mov r8b, byte [rbp + rdx - 0x10]
mov bl, 0xcf
sub bl, dl
and bl, r8b
not r8b
lea edi, [rdx + 0x30]
and dil, r8b
or bl, dil
mov byte [rbp + rdx - 0x10], bl
add rcx, 2
jmp 0x1400e0930
sub rdi, r15
cmp rdi, 0xffffffffffffffff
je 0x1400e0051
mov eax, dword [0x1406dfcd0]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete cl
cmp dword [0x1406dfcd4], 0xa
setl al
or al, cl
test al, al
je 0x1400e09b1
mov dword [rbp - 0x10], 0x6b637542
mov word [rbp - 0xc], 0x79
mov rcx, r13
call fcn.1400abec0
lea rsi, [rbp - 0x10]
mov rcx, rsi
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
mov rcx, r13
mov rdx, rsi
mov r8, rax
call fcn.14008d7b0
jmp 0x1400df8b4
lea rcx, [rbp - 0x10]
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
cmp rax, rsi
jbe 0x1400e0b95
cmp dword [0x1406e050c], 0xa
mov r12, qword [rbp - 0x18]
jl 0x1400e0c7b
mov eax, dword [0x1406e0508]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
je 0x1400e0c7b
mov rax, qword [0x1402637c0]
mov rcx, qword [0x1402637bb]
nop
mov qword [rbp - 0xb], rax
mov qword [rbp - 0x10], rcx
jmp 0x1400e0a30
sub rdi, r15
cmp rdi, 0xffffffffffffffff
je 0x1400e01e2
mov eax, dword [0x1406dfcd0]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete cl
cmp dword [0x1406dfcd4], 0xa
setl al
or al, cl
test al, al
je 0x1400e0a65
mov dword [rbp - 0x10], 0x6764754a
mov word [rbp - 0xc], 0x65
mov rcx, r13
call fcn.1400abec0
lea rsi, [rbp - 0x10]
mov rcx, rsi
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
mov rcx, r13
mov rdx, rsi
mov r8, rax
call fcn.14008d7b0
jmp 0x1400df8b4
mov rbx, rax
test rax, rax
je 0x1400e0f0c
mov rsi, qword [rbp - 0x18]
sub rsi, rbx
lea r8, [rsi + 1]
movsx r14d, byte [rbp - 0x10]
mov rcx, r15
mov edx, r14d
call sub.VCRUNTIME140.dll_memchr
test rax, rax
je 0x1400e08ec
mov rdi, rax
add rsi, r15
add rsi, 1
lea r12, [rbp - 0x10]
mov rcx, rdi
mov rdx, r12
mov r8, rbx
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x1400e0eff
add rdi, 1
mov r8, rsi
sub r8, rdi
mov rcx, rdi
mov edx, r14d
call sub.VCRUNTIME140.dll_memchr
mov rdi, rax
test rax, rax
jne 0x1400e0adb
jmp 0x1400e08ec
sub rdi, r15
cmp rdi, 0xffffffffffffffff
je 0x1400e0241
movabs rax, 0x37515a505f5e4472
mov qword [rbp - 0x10], rax
mov eax, dword [0x1406f0c30]
cmp dword [0x1406f0c34], 0xa
mov byte [rbp - 0x10], 0x42
jl 0x1400e0b52
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
je 0x1400e0b52
nop dword [rax]
jmp 0x1400e0b50
xor byte [rbp - 0xf], 0x31
xor byte [rbp - 0xe], 0x32
xor byte [rbp - 0xd], 0x33
xor byte [rbp - 0xc], 0x34
xor byte [rbp - 0xb], 0x35
xor byte [rbp - 0xa], 0x36
xor byte [rbp - 9], 0x37
mov rcx, r13
call fcn.1400abec0
lea rsi, [rbp - 0x10]
mov rcx, rsi
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
mov rcx, r13
mov rdx, rsi
mov r8, rax
call fcn.14008d7b0
jmp 0x1400df8b4
mov rbx, rax
test rax, rax
je 0x1400e1011
mov rsi, qword [rbp - 0x18]
sub rsi, rbx
lea r8, [rsi + 1]
movsx r14d, byte [rbp - 0x10]
mov rcx, r15
mov edx, r14d
call sub.VCRUNTIME140.dll_memchr
test rax, rax
je 0x1400e09fb
mov rdi, rax
add rsi, r15
add rsi, 1
lea r12, [rbp - 0x10]
mov rcx, rdi
mov rdx, r12
mov r8, rbx
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x1400e1004
add rdi, 1
mov r8, rsi
sub r8, rdi
mov rcx, rdi
mov edx, r14d
call sub.VCRUNTIME140.dll_memchr
mov rdi, rax
test rax, rax
jne 0x1400e0bd3
jmp 0x1400e09fb
sub rsi, r15
cmp rsi, 0xffffffffffffffff
je 0x1400e0286
cmp dword [0x1406e048c], 0xa
jl 0x1400e0c42
mov eax, dword [0x1406e0488]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
je 0x1400e0c42
nop word cs:[rax + rax]
nop dword [rax]
jmp 0x1400e0c40
movabs rax, 0x6e61696472617547
mov qword [rbp - 0x10], rax
mov byte [rbp - 8], 0
mov rcx, r13
call fcn.1400abec0
lea rsi, [rbp - 0x10]
mov rcx, rsi
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
mov rcx, r13
mov rdx, rsi
mov r8, rax
call fcn.14008d7b0
jmp 0x1400df8b4
movabs rax, 0x70696e53746c6f42
mov qword [rbp - 0x10], rax
mov dword [rbp - 8], 0x435f7265
mov byte [rbp - 4], 0
lea rcx, [rbp - 0x10]
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
cmp rax, r12
jbe 0x1400e0e15
movzx eax, word [0x1402637d8]
mov word [rbp], ax
movdqu xmm0, xmmword [0x1402637c8]
mov eax, dword [0x1406f0bb8]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete cl
cmp dword [0x1406f0bbc], 0xa
movdqa xmmword [rbp - 0x10], xmm0
setl al
or al, cl
xor ecx, ecx
nop
test al, al
je 0x1400e0ce0
mov dl, byte [rbp + rcx - 0x10]
mov bl, 0xcf
sub bl, cl
and bl, dl
not dl
lea edi, [rcx + 0x30]
and dil, dl
or bl, dil
mov byte [rbp + rcx - 0x10], bl
mov rdx, rcx
or rdx, 1
nop word cs:[rax + rax]
nop
test al, al
je 0x1400e0d10
mov r8b, byte [rbp + rdx - 0x10]
mov bl, 0xcf
sub bl, dl
and bl, r8b
not r8b
lea edi, [rdx + 0x30]
and dil, r8b
or bl, dil
mov byte [rbp + rdx - 0x10], bl
add rcx, 2
cmp rcx, 0x12
jne 0x1400e0ce0
lea rcx, [rbp - 0x10]
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
cmp rax, r12
jbe 0x1400e0e89
cmp dword [0x1406df7b8], 0xa
jl 0x1400e0f44
mov eax, dword [0x1406df7bc]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
je 0x1400e0f44
movzx eax, word [0x1402637ea]
movups xmm0, xmmword [0x1402637da]
nop dword [rax]
mov word [rbp], ax
movaps xmmword [rbp - 0x10], xmm0
jmp 0x1400e0d80
sub rdi, r15
cmp rdi, 0xffffffffffffffff
je 0x1400e058d
movabs rax, 0x375b5a405d535960
mov qword [rbp - 0x10], rax
mov eax, dword [0x1406f0c30]
cmp dword [0x1406f0c34], 0xa
mov byte [rbp - 0x10], 0x50
jl 0x1400e0dd2
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
je 0x1400e0dd2
nop word cs:[rax + rax]
nop dword [rax]
jmp 0x1400e0dd0
xor byte [rbp - 0xf], 0x31
xor byte [rbp - 0xe], 0x32
xor byte [rbp - 0xd], 0x33
xor byte [rbp - 0xc], 0x34
xor byte [rbp - 0xb], 0x35
xor byte [rbp - 0xa], 0x36
xor byte [rbp - 9], 0x37
mov rcx, r13
call fcn.1400abec0
lea rsi, [rbp - 0x10]
mov rcx, rsi
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
mov rcx, r13
mov rdx, rsi
mov r8, rax
call fcn.14008d7b0
jmp 0x1400df8b4
mov rbx, rax
test rax, rax
je 0x1400e14fd
mov rdi, r12
sub rdi, rbx
lea r8, [rdi + 1]
mov rcx, r15
mov edx, 0x42
call sub.VCRUNTIME140.dll_memchr
test rax, rax
je 0x1400e0ca6
mov rsi, rax
add rdi, r15
add rdi, 1
lea r14, [rbp - 0x10]
mov rcx, rsi
mov rdx, r14
mov r8, rbx
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x1400e14f0
add rsi, 1
mov r8, rdi
sub r8, rsi
mov rcx, rsi
mov edx, 0x42
call sub.VCRUNTIME140.dll_memchr
mov rsi, rax
test rax, rax
jne 0x1400e0e4f
jmp 0x1400e0ca6
mov rbx, rax
test rax, rax
je 0x1400e1562
mov rsi, qword [rbp - 0x18]
sub rsi, rbx
lea r8, [rsi + 1]
movsx r14d, byte [rbp - 0x10]
mov rcx, r15
mov edx, r14d
call sub.VCRUNTIME140.dll_memchr
test rax, rax
je 0x1400e0d4c
mov rdi, rax
add rsi, r15
add rsi, 1
lea r12, [rbp - 0x10]
mov rcx, rdi
mov rdx, r12
mov r8, rbx
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x1400e1555
add rdi, 1
mov r8, rsi
sub r8, rdi
mov rcx, rdi
mov edx, r14d
call sub.VCRUNTIME140.dll_memchr
mov rdi, rax
test rax, rax
jne 0x1400e0ec7
jmp 0x1400e0d4c
sub rdi, r15
cmp rdi, 0xffffffffffffffff
je 0x1400e08ec
mov dword [rbp - 0x10], 0x646e6156
mov word [rbp - 0xc], 0x6c61
mov byte [rbp - 0xa], 0
mov rcx, r13
call fcn.1400abec0
lea rsi, [rbp - 0x10]
mov rcx, rsi
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
mov rcx, r13
mov rdx, rsi
mov r8, rax
call fcn.14008d7b0
jmp 0x1400df8b4
mov r15, r13
movzx eax, word [0x1402637ea]
mov word [rbp], ax
movdqu xmm0, xmmword [0x1402637da]
mov eax, dword [0x1406f0bb8]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete cl
cmp dword [0x1406f0bbc], 0xa
movdqa xmmword [rbp - 0x10], xmm0
setl al
or al, cl
xor ecx, ecx
test al, al
je 0x1400e0f7f
mov dl, byte [rbp + rcx - 0x10]
mov bl, 0xcf
sub bl, cl
and bl, dl
not dl
lea edi, [rcx + 0x30]
and dil, dl
or bl, dil
mov byte [rbp + rcx - 0x10], bl
mov rdx, rcx
or rdx, 1
test al, al
je 0x1400e0fa3
mov r8b, byte [rbp + rdx - 0x10]
mov bl, 0xcf
sub bl, dl
and bl, r8b
not r8b
lea edi, [rdx + 0x30]
and dil, r8b
or bl, dil
mov byte [rbp + rdx - 0x10], bl
add rcx, 2
cmp rcx, 0x12
jne 0x1400e0f7f
lea rcx, [rbp - 0x10]
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
cmp rax, qword [rbp - 0x18]
jbe 0x1400e1085
cmp dword [0x1406e048c], 0xa
jl 0x1400e1100
mov eax, dword [0x1406e0488]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
je 0x1400e1100
jmp 0x1400e1002
sub rdi, r15
cmp rdi, 0xffffffffffffffff
je 0x1400e09fb
movabs rax, 0x375a545c4040507d
mov qword [rbp - 0x10], rax
mov eax, dword [0x1406f0c30]
cmp dword [0x1406f0c34], 0xa
mov byte [rbp - 0x10], Ordinal_79
jl 0x1400e1042
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
je 0x1400e1042
nop dword [rax]
jmp 0x1400e1040
xor byte [rbp - 0xf], 0x31
xor byte [rbp - 0xe], 0x32
xor byte [rbp - 0xd], 0x33
xor byte [rbp - 0xc], 0x34
xor byte [rbp - 0xb], 0x35
xor byte [rbp - 0xa], 0x36
xor byte [rbp - 9], 0x37
mov rcx, r13
call fcn.1400abec0
lea rsi, [rbp - 0x10]
mov rcx, rsi
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
mov rcx, r13
mov rdx, rsi
mov r8, rax
call fcn.14008d7b0
jmp 0x1400df8b4
mov rbx, rax
test rax, rax
je 0x1400e163b
mov rsi, qword [rbp - 0x18]
sub rsi, rbx
lea r8, [rsi + 1]
movsx r14d, byte [rbp - 0x10]
mov rcx, qword [rbp - 0x20]
mov edx, r14d
call sub.VCRUNTIME140.dll_memchr
test rax, rax
je 0x1400e0fe0
mov rdi, rax
mov rax, qword [rbp - 0x20]
add rsi, rax
add rsi, 1
lea r12, [rbp - 0x10]
mov rcx, rdi
mov rdx, r12
mov r8, rbx
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x1400e162d
add rdi, 1
mov r8, rsi
sub r8, rdi
mov rcx, rdi
mov edx, r14d
call sub.VCRUNTIME140.dll_memchr
mov rdi, rax
test rax, rax
jne 0x1400e10c8
jmp 0x1400e0fe0
movabs rax, 0x435f6e75475f5344
mov qword [rbp - 0x10], rax
mov byte [rbp - 8], 0
lea rcx, [rbp - 0x10]
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
cmp rax, qword [rbp - 0x18]
jbe 0x1400e15b3
mov rax, qword [0x1402637ec]
mov qword [rbp - 0x10], rax
mov rax, qword [0x1402637f3]
mov qword [rbp - 9], rax
mov eax, dword [0x1406f0e80]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete cl
cmp dword [0x1406f0e84], 0xa
setl al
or al, cl
mov byte [rbp - 0x10], 0x41
cmp al, 1
jne 0x1400e14e8
mov ecx, 2
mov dl, 0xcd
cmp rcx, 0x10
je 0x1400e11ba
lea ebx, [rdx + 1]
and bl, 0xe0
lea edi, [rcx + 0xf]
or dil, bl
xor dil, byte [rbp + rcx - 0x11]
xor dil, 0xe0
mov byte [rbp + rcx - 0x11], dil
test al, al
je 0x1400e14e8
mov ebx, edx
and bl, 0xe0
lea edi, [rcx + 0x10]
or dil, bl
xor dil, byte [rbp + rcx - 0x10]
xor dil, 0xe0
mov byte [rbp + rcx - 0x10], dil
add rcx, 2
add dl, 0xfe
cmp rcx, 0x10
jne 0x1400e1172
lea rcx, [rbp - 0x10]
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
cmp rax, qword [rbp - 0x18]
jbe 0x1400e16d5
mov rax, qword [0x1402637fb]
mov qword [rbp - 0x10], rax
mov rax, qword [0x140263802]
mov qword [rbp - 9], rax
mov eax, dword [0x1406f0e80]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete cl
cmp dword [0x1406f0e84], 0xa
setl al
or al, cl
mov byte [rbp - 0x10], 0x41
cmp al, 1
jne 0x1400e14ea
mov ecx, 2
mov dl, 0xcd
cmp rcx, 0x10
je 0x1400e1262
lea ebx, [rdx + 1]
and bl, 0xe0
lea edi, [rcx + 0xf]
or dil, bl
xor dil, byte [rbp + rcx - 0x11]
xor dil, 0xe0
mov byte [rbp + rcx - 0x11], dil
test al, al
je 0x1400e14ea
lea rcx, [rbp - 0x10]
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
cmp rax, qword [rbp - 0x18]
jbe 0x1400e1798
jmp 0x1400e14e8
jmp 0x1400e14ea
sub rsi, r15
cmp rsi, 0xffffffffffffffff
je 0x1400e0ca6
cmp dword [0x1406e048c], 0xa
jl 0x1400e1519
mov eax, dword [0x1406e0488]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
je 0x1400e1519
jmp 0x1400e1517
movabs rax, 0x726f74617265704f
mov qword [rbp - 0x10], rax
mov byte [rbp - 8], 0
mov rdi, r13
mov rcx, r13
call fcn.1400abec0
lea rsi, [rbp - 0x10]
mov rcx, rsi
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
mov rcx, r13
mov rdx, rsi
mov r8, rax
call fcn.14008d7b0
jmp 0x1400df8b4
sub rdi, r15
cmp rdi, 0xffffffffffffffff
je 0x1400e0d4c
mov eax, dword [0x1406f0dd0]
cmp dword [0x1406f0dd4], 0xa
mov byte [rbp - 0x10], 0x41
jl 0x1400e1582
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
je 0x1400e1582
jmp 0x1400e1580
mov dword [rbp - 0xf], 0x736572
mov rdi, r13
mov rcx, r13
call fcn.1400abec0
lea rsi, [rbp - 0x10]
mov rcx, rsi
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
mov rcx, r13
mov rdx, rsi
mov r8, rax
call fcn.14008d7b0
jmp 0x1400df8b4
mov rbx, rax
test rax, rax
je 0x1400e1697
mov rdi, qword [rbp - 0x18]
sub rdi, rbx
lea r8, [rdi + 1]
mov rcx, qword [rbp - 0x20]
mov edx, 0x44
call sub.VCRUNTIME140.dll_memchr
test rax, rax
je 0x1400e1125
mov rsi, rax
mov rax, qword [rbp - 0x20]
add rdi, rax
add rdi, 1
lea r14, [rbp - 0x10]
mov rcx, rsi
mov rdx, r14
mov r8, rbx
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x1400e1689
add rsi, 1
mov r8, rdi
sub r8, rsi
mov rcx, rsi
mov edx, 0x44
call sub.VCRUNTIME140.dll_memchr
mov rsi, rax
test rax, rax
jne 0x1400e15f3
jmp 0x1400e1125
sub rdi, qword [rbp - 0x20]
cmp rdi, 0xffffffffffffffff
je 0x1400e0fe0
mov eax, dword [0x1406f0dd0]
cmp dword [0x1406f0dd4], 0xa
mov byte [rbp - 0x10], reloc.WLDAP32.dll_Ordinal_79
jl 0x1400e165b
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
je 0x1400e165b
jmp 0x1400e1659
mov dword [rbp - 0xf], 0x6e6964
mov rdi, r15
mov rcx, r15
call fcn.1400abec0
lea rsi, [rbp - 0x10]
mov rcx, rsi
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
mov rcx, r15
mov rdx, rsi
mov r8, rax
call fcn.14008d7b0
jmp 0x1400e16cd
sub rsi, qword [rbp - 0x20]
cmp rsi, 0xffffffffffffffff
je 0x1400e1125
mov dword [rbp - 0x10], 0x6c74754f
mov word [rbp - 0xc], 0x7761
mov byte [rbp - 0xa], 0
mov rdi, r15
mov rcx, r15
call fcn.1400abec0
lea rsi, [rbp - 0x10]
mov rcx, rsi
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
mov rcx, r15
mov rdx, rsi
mov r8, rax
call fcn.14008d7b0
mov r13, r15
jmp 0x1400df8b4
mov rbx, rax
test rax, rax
je 0x1400e1756
mov rsi, qword [rbp - 0x18]
sub rsi, rbx
lea r8, [rsi + 1]
movsx r14d, byte [rbp - 0x10]
mov rcx, qword [rbp - 0x20]
mov edx, r14d
call sub.VCRUNTIME140.dll_memchr
test rax, rax
je 0x1400e11cd
mov rdi, rax
mov rax, qword [rbp - 0x20]
add rsi, rax
add rsi, 1
lea r12, [rbp - 0x10]
mov rcx, rdi
mov rdx, r12
mov r8, rbx
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x1400e1748
add rdi, 1
mov r8, rsi
sub r8, rdi
mov rcx, rdi
mov edx, r14d
call sub.VCRUNTIME140.dll_memchr
mov rdi, rax
test rax, rax
jne 0x1400e1714
jmp 0x1400e11cd
sub rdi, qword [rbp - 0x20]
cmp rdi, 0xffffffffffffffff
je 0x1400e11cd
movabs rax, 0x6f48206b63616c42
mov qword [rbp - 0x10], rax
mov word [rbp - 8], 0x656c
mov byte [rbp - 6], 0
mov rdi, r15
mov rcx, r15
call fcn.1400abec0
lea rsi, [rbp - 0x10]
mov rcx, rsi
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
mov rcx, r15
mov rdx, rsi
mov r8, rax
call fcn.14008d7b0
jmp 0x1400e16cd