Function at 0x140062510
Capabilities:
Access peb ldr_data
Contain obfuscated stackstrings
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r14
push r15
lea rbp, [rsp - 0x47]
sub rsp, 0xd0
mov rax, qword [0x1401e9060]
xor rax, rsp
mov qword [rbp + 0x3f], rax
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x27], xmm0
mov qword [rbp + 0x37], rax
mov dword [rbp - 0x39], 0x18181f1f
mov dword [rbp - 0x35], 0x1000505
xor r15d, r15d
mov ecx, r15d
nop
lea eax, [rcx + 0x2c]
xor byte [rbp + rcx - 0x39], al
inc rcx
cmp rcx, 6
jb 0x140062560
mov byte [rbp - 0x32], r15b
mov qword [rbp - 0x31], r15
mov qword [rbp - 0x21], r15
mov qword [rbp - 0x19], reloc.WS2_32.dll_ntohs
mov r8d, 6
lea rdx, [rbp - 0x39]
lea rcx, [rbp - 0x31]
call fcn.140092f40
lea r8, [rbp - 0x31]
lea rdx, [rbp + 0x27]
lea rcx, [0x140211120]
call fcn.1400a43e0
nop
lea rax, [rbp + 7]
mov qword [rbp - 0x69], rax
lea rcx, [rbp + 7]
call fcn.140056470
mov rbx, rax
mov dword [rbp - 0x11], 0x435e5549
mov dword [rbp - 0xd], 0x4157435f
mov dword [rbp - 9], 0x524e501a
mov word [rbp - 5], 0x100
mov rcx, r15
nop
lea eax, [rcx + 0x2c]
xor byte [rbp + rcx - 0x11], al
inc rcx
cmp rcx, 0xc
jb 0x1400625e0
mov byte [rbp - 4], 0
mov qword [rbp - 0x59], r15
movdqa xmm0, xmmword [0x1401cb6b0]
movdqu xmmword [rbp - 0x49], xmm0
mov byte [rbp - 0x59], 0
mov r8d, ntohs
lea rdx, [rbp - 0x11]
lea rcx, [rbp - 0x59]
call fcn.140092f40
nop
lea rcx, [rbp - 0x59]
call fcn.14004b5f0
nop
mov r8b, 1
mov rdx, rbx
mov ecx, eax
call fcn.140054030
nop
lea rcx, [rbp - 0x59]
call fcn.140092cd0
call fcn.1400559f0
call fcn.140055490
lea rax, [rbp + 7]
mov qword [rbp - 0x69], rax
lea rcx, [rbp + 7]
call fcn.140055c90
mov rbx, rax
movdqa xmm0, xmmword [str.__O_DBQAQPX]
movdqu xmmword [rbp - 0x11], xmm0
mov byte [rbp - 1], 1
mov rdx, r15
lea ecx, [rdx + 0x2c]
xor byte [rbp + rdx - 0x11], cl
inc rdx
cmp rdx, 0xf
jb 0x140062670
mov byte [rbp - 1], 0
mov qword [rbp - 0x59], r15
movdqa xmm0, xmmword [0x1401cb6b0]
movdqu xmmword [rbp - 0x49], xmm0
mov byte [rbp - 0x59], 0
mov r8d, reloc.WS2_32.dll_ntohs
lea rdx, [rbp - 0x11]
lea rcx, [rbp - 0x59]
call fcn.140092f40
nop
lea rcx, [rbp - 0x59]
call fcn.14004b5f0
nop
xor r8d, r8d
mov rdx, rbx
mov ecx, eax
call fcn.140054030
nop
lea rcx, [rbp - 0x59]
call fcn.140092cd0
lea rax, [rbp + 7]
mov qword [rbp - 0x69], rax
lea rcx, [rbp + 7]
call fcn.140056380
mov rbx, rax
movdqa xmm0, xmmword [str.__O_DBQAQPX]
movdqu xmmword [rbp - 0x11], xmm0
mov byte [rbp - 1], 1
mov rdx, r15
nop word [rax + rax]
lea ecx, [rdx + 0x2c]
xor byte [rbp + rdx - 0x11], cl
inc rdx
cmp rdx, 0xf
jb 0x140062700
mov byte [rbp - 1], 0
mov qword [rbp - 0x59], r15
movdqa xmm0, xmmword [0x1401cb6b0]
movdqu xmmword [rbp - 0x49], xmm0
mov byte [rbp - 0x59], 0
mov r8d, reloc.WS2_32.dll_ntohs
lea rdx, [rbp - 0x11]
lea rcx, [rbp - 0x59]
call fcn.140092f40
nop
lea rcx, [rbp - 0x59]
call fcn.14004b5f0
nop
xor r8d, r8d
mov rdx, rbx
mov ecx, eax
call fcn.140054030
nop
lea rcx, [rbp - 0x59]
call fcn.140092cd0
movdqa xmm0, xmmword [str.__O_DBQAQPX]
movdqu xmmword [rbp - 0x11], xmm0
mov byte [rbp - 1], 1
mov rcx, r15
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx + 0x2c]
xor byte [rbp + rcx - 0x11], al
inc rcx
cmp rcx, 0xf
jb 0x140062780
mov byte [rbp - 1], 0
mov qword [rbp - 0x59], r15
movdqa xmm0, xmmword [0x1401cb6b0]
movdqu xmmword [rbp - 0x49], xmm0
mov byte [rbp - 0x59], 0
mov r8d, reloc.WS2_32.dll_ntohs
lea rdx, [rbp - 0x11]
lea rcx, [rbp - 0x59]
call fcn.140092f40
nop
lea rcx, [rbp - 0x59]
call fcn.14004b5f0
mov ecx, eax
call fcn.14004bcd0
nop
lea rcx, [rbp - 0x59]
call fcn.140092cd0
lea rax, [rbp + 7]
mov qword [rbp - 0x69], rax
lea rcx, [rbp + 7]
call fcn.140056380
mov rbx, rax
movdqa xmm0, xmmword [0x1401ccb60]
movdqu xmmword [rbp - 0x11], xmm0
mov word [rbp - 1], 0x59
mov byte [rbp + 1], 1
mov rdx, r15
nop word [rax + rax]
lea ecx, [rdx + 0x2c]
xor byte [rbp + rdx - 0x11], cl
inc rdx
cmp rdx, 0x11
jb 0x140062810
mov byte [rbp + 1], 0
mov qword [rbp - 0x59], r15
movdqa xmm0, xmmword [0x1401cb6b0]
movdqu xmmword [rbp - 0x49], xmm0
mov byte [rbp - 0x59], 0
mov r8d, reloc.WS2_32.dll_recvfrom
lea rdx, [rbp - 0x11]
lea rcx, [rbp - 0x59]
call fcn.140092f40
nop
lea rcx, [rbp - 0x59]
call fcn.14004b5f0
nop
xor r8d, r8d
mov rdx, rbx
mov ecx, eax
call fcn.140054030
nop
lea rcx, [rbp - 0x59]
call fcn.140092cd0
lea rax, [rbp + 7]
mov qword [rbp - 0x69], rax
lea rcx, [rbp + 7]
call fcn.140056380
mov rbx, rax
mov dword [rbp - 0x11], 0x4248594f
mov dword [rbp - 0xd], 0x561c5f5f
mov dword [rbp - 9], 0x100504c
mov rcx, r15
nop word [rax + rax]
lea eax, [rcx + 0x2c]
xor byte [rbp + rcx - 0x11], al
inc rcx
cmp rcx, 0xa
jb 0x1400628a0
mov byte [rbp - 6], 0
mov qword [rbp - 0x59], r15
movdqa xmm0, xmmword [0x1401cb6b0]
movdqu xmmword [rbp - 0x49], xmm0
mov byte [rbp - 0x59], 0
mov r8d, 0xa
lea rdx, [rbp - 0x11]
lea rcx, [rbp - 0x59]
call fcn.140092f40
nop
lea rcx, [rbp - 0x59]
call fcn.14004b5f0
nop
xor r8d, r8d
mov rdx, rbx
mov ecx, eax
call fcn.140054030
nop
lea rcx, [rbp - 0x59]
call fcn.140092cd0
lea rax, [rbp + 7]
mov qword [rbp - 0x69], rax
lea rcx, [rbp + 7]
call fcn.140055c90
mov rbx, rax
mov dword [rbp - 0x11], 0x5c4f5e40
mov dword [rbp - 0xd], 0x4b571f43
mov word [rbp - 9], 0x51
mov byte [rbp - 7], 1
mov rcx, r15
nop dword [rax]
lea eax, [rcx + 0x2c]
xor byte [rbp + rcx - 0x11], al
inc rcx
cmp rcx, 9
jb 0x140062930
mov byte [rbp - 7], 0
mov qword [rbp - 0x59], r15
movdqa xmm0, xmmword [0x1401cb6b0]
movdqu xmmword [rbp - 0x49], xmm0
mov byte [rbp - 0x59], 0
mov r8d, 9
lea rdx, [rbp - 0x11]
lea rcx, [rbp - 0x59]
call fcn.140092f40
nop
lea rcx, [rbp - 0x59]
call fcn.14004b5f0
nop
xor r8d, r8d
mov rdx, rbx
mov ecx, eax
call fcn.140054030
nop
lea rcx, [rbp - 0x59]
call fcn.140092cd0
lea rax, [rbp + 7]
mov qword [rbp - 0x11], rax
lea rcx, [rbp + 7]
call fcn.140056380
mov rbx, rax
mov dword [rbp - 0x69], 0x7c4f4e7c
mov dword [rbp - 0x65], 0x1005246
mov rcx, r15
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx + 0x2c]
xor byte [rbp + rcx - 0x69], al
inc rcx
cmp rcx, 6
jb 0x1400629c0
mov byte [rbp - 0x62], 0
mov qword [rbp - 0x59], r15
movdqa xmm0, xmmword [0x1401cb6b0]
movdqu xmmword [rbp - 0x49], xmm0
mov byte [rbp - 0x59], 0
mov r8d, 6
lea rdx, [rbp - 0x69]
lea rcx, [rbp - 0x59]
call fcn.140092f40
nop
lea rcx, [rbp - 0x59]
call fcn.14004b9a0
nop
xor r8d, r8d
mov rdx, rbx
mov ecx, eax
call fcn.140054030
nop
lea rcx, [rbp - 0x59]
call fcn.140092cd0
lea rax, [rbp + 7]
mov qword [rbp - 0x11], rax
lea rcx, [rbp + 7]
call fcn.140056380
mov rbx, rax
mov dword [rbp - 0x69], 0x484f4468
mov dword [rbp - 0x65], 0x50534364
mov word [rbp - 0x61], 0x5f
mov byte [rbp - 0x5f], 1
mov rcx, r15
nop dword [rax]
lea eax, [rcx + 0x2c]
xor byte [rbp + rcx - 0x69], al
inc rcx
cmp rcx, 9
jb 0x140062a50
mov byte [rbp - 0x5f], 0
mov qword [rbp - 0x59], r15
movdqa xmm0, xmmword [0x1401cb6b0]
movdqu xmmword [rbp - 0x49], xmm0
mov byte [rbp - 0x59], 0
mov r8d, 9
lea rdx, [rbp - 0x69]
lea rcx, [rbp - 0x59]
call fcn.140092f40
nop
lea rcx, [rbp - 0x59]
call fcn.14004b9a0
nop
xor r8d, r8d
mov rdx, rbx
mov ecx, eax
call fcn.140054030
nop
lea rcx, [rbp - 0x59]
call fcn.140092cd0
lea rax, [rbp + 7]
mov qword [rbp - 0x11], rax
lea rcx, [rbp + 7]
call fcn.140056380
mov rbx, rax
mov dword [rbp - 0x69], 0x7d7d68
mov byte [rbp - 0x65], 1
mov rdx, r15
lea ecx, [rdx + 0x2c]
xor byte [rbp + rdx - 0x69], cl
inc rdx
cmp rdx, 3
jb 0x140062ad0
mov byte [rbp - 0x65], 0
mov qword [rbp - 0x59], r15
movdqa xmm0, xmmword [0x1401cb6b0]
movdqu xmmword [rbp - 0x49], xmm0
mov byte [rbp - 0x59], 0
mov r8d, 3
lea rdx, [rbp - 0x69]
lea rcx, [rbp - 0x59]
call fcn.140092f40
nop
lea rcx, [rbp - 0x59]
call fcn.14004b9a0
nop
xor r8d, r8d
mov rdx, rbx
mov ecx, eax
call fcn.140054030
nop
lea rcx, [rbp - 0x59]
call fcn.140092cd0
lea rax, [rbp + 7]
mov qword [rbp - 0x11], rax
lea rcx, [rbp + 7]
call fcn.140055c90
mov rbx, rax
mov dword [rbp - 0x69], 0x4c5d4368
mov dword [rbp - 0x65], 0x565a5251
mov word [rbp - 0x61], 0x100
mov rcx, r15
nop dword [rax]
lea eax, [rcx + 0x2c]
xor byte [rbp + rcx - 0x69], al
inc rcx
cmp rcx, 8
jb 0x140062b60
mov byte [rbp - 0x60], 0
mov qword [rbp - 0x59], r15
movdqa xmm0, xmmword [0x1401cb6b0]
movdqu xmmword [rbp - 0x49], xmm0
mov byte [rbp - 0x59], 0
mov r8d, 8
lea rdx, [rbp - 0x69]
lea rcx, [rbp - 0x59]
call fcn.140092f40
nop
lea rcx, [rbp - 0x59]
call fcn.14004b9a0
nop
xor r8d, r8d
mov rdx, rbx
mov ecx, eax
call fcn.140054030
nop
lea rcx, [rbp - 0x59]
call fcn.140092cd0
movups xmm0, xmmword [str._SEUB]
movups xmmword [rbp - 0x11], xmm0
mov eax, dword [0x1401c9e68]
mov dword [rbp - 1], eax
cmp word [0x1401c9e6a], 0
je 0x140062c12
mov eax, 0x6a
mov word [rbp - 0x11], ax
xor word [rbp - 0xf], 0x32
xor word [rbp - 0xd], 0x33
xor word [rbp - 0xb], 0x34
xor word [rbp - 9], 0x35
xor word [rbp - 7], 0x36
xor word [rbp - 5], 0x37
xor word [rbp - 3], 0x38
xor word [rbp - 1], 0x39
xor word [rbp + 1], 0x3a
lea rcx, [rbp - 0x11]
call fcn.1400610b0
mov esi, eax
test eax, eax
je 0x140062edc
mov rcx, qword gs:[0x60]
mov rcx, qword [rcx + 0x18]
mov rcx, qword [rcx + 0x10]
nop word [rax + rax]
mov r10, qword [rcx + 0x30]
movsxd rax, dword [r10 + 0x3c]
mov ebx, dword [rax + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x140062cb6
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x140062cb6
mov edi, dword [rbx + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rax, [r10 + r9*4]
mov edx, dword [rax + rdi]
add rdx, r10
mov r8d, 0x3aa6db8d
movzx eax, byte [rdx]
inc rdx
test al, al
je 0x140062cb1
nop dword [rax]
movsx eax, al
xor eax, r8d
imul r8d, eax, 0x1000193
movzx eax, byte [rdx]
lea rdx, [rdx + 1]
test al, al
jne 0x140062c90
cmp r8d, 0xf4cca37e
je 0x140062cbb
test r9d, r9d
jne 0x140062c70
mov rcx, qword [rcx]
jmp 0x140062c40
mov ecx, dword [rbx + 0x1c]
add rcx, r10
mov eax, dword [rbx + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov r9d, dword [rcx + rax*4]
add r9, r10
mov r8d, esi
xor edx, edx
mov ecx, 0x1fffff
call r9
mov rsi, rax
test rax, rax
jne 0x140062f22
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x140062d86
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x140062d86
mov edi, dword [rbx + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rdi]
add rdx, r10
mov r8d, 0x47baf18d
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140062d81
nop dword [rax]
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x140062d60
cmp r8d, 0xa4ba42ac
je 0x140062d8b
test r9d, r9d
jne 0x140062d40
mov rax, qword [rax]
jmp 0x140062d10
mov ecx, dword [rbx + 0x1c]
add rcx, r10
mov eax, dword [rbx + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov r14d, dword [rcx + rax*4]
add r14, r10
mov rax, qword gs:[0x58]
mov rdi, qword [rax]
mov ecx, 0xa48
mov eax, dword [rcx + rdi]
mov ebx, 0x5a8
test al, 1
jne 0x140062de6
or eax, 1
mov dword [rcx + rdi], eax
mov word [rbx + rdi + 5], 0x197
mov dword [rbx + rdi], 0x169f1164
mov byte [rbx + rdi + 4], __WSAFDIsSet
lea rcx, [0x14010a1d0]
call fcn.1400fcdbc
nop
add rbx, rdi
cmp byte [rbx + 6], 0
je 0x140062e0a
xor byte [rbx], 0x21
xor byte [rbx + 1], 0x63
xor byte [rbx + 2], 0xed
xor byte [rbx + 3], 0x79
xor byte [rbx + 4], 0xe1
xor byte [rbx + 5], 0x97
mov byte [rbx + 6], 0
movdqa xmm0, xmmword [0x1401cda30]
mov dword [rbp - 1], 0x1f8c1142
mov word [rbp + 3], 0xf695
mov ecx, 0x14d8
mov eax, dword [rcx + rdi]
mov esi, 0x1b8
test al, 1
jne 0x140062e8d
or eax, 1
mov dword [rcx + rdi], eax
lea rcx, [rsi + rdi]
mov byte [rcx + 0x17], 1
lea rax, [rcx + 0x16]
lea rdx, [rbp + 5]
cmp rcx, rdx
ja 0x140062e6b
lea rdx, [rbp - 0x11]
cmp rax, rdx
jb 0x140062e6b
movups xmmword [rcx], xmm0
mov eax, dword [rbp - 1]
mov dword [rcx + 0x10], eax
movzx eax, word [rbp + 3]
mov word [rcx + 0x14], ax
mov byte [rcx + 0x16], 0xc9
jmp 0x140062e80
movups xmmword [rcx], xmm0
mov eax, dword [rbp - 1]
mov dword [rcx + 0x10], eax
movzx eax, word [rbp + 3]
mov word [rcx + 0x14], ax
mov byte [rcx + 0x16], 0xc9
lea rcx, [0x14010a1f0]
call fcn.1400fcdbc
nop
lea rdx, [rdi + rsi]
cmp byte [rdx + 0x17], 0
je 0x140062ed1
movabs r8, 0xb7c997e179ed6321
nop dword [rax]
nop word [rax + rax]
movzx ecx, r15b
and cl, 7
shl cl, 3
mov rax, r8
shr rax, cl
xor byte [r15 + rdx], al
inc r15
cmp r15, 0x17
jb 0x140062eb0
mov byte [rdx + 0x17], 0
xor r9d, r9d
mov r8, rbx
xor ecx, ecx
call r14
xor bl, bl
mov rcx, qword [rbp + 0x27]
test rcx, rcx
je 0x1400634e3
mov rdx, qword [rbp + 0x37]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400634de
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400634de
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov rcx, rsi
call fcn.140060df0
test al, al
jne 0x1400631b6
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x140062fc6
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x140062fc6
mov edi, dword [rbx + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rdi]
add rdx, r10
mov r8d, 0x22c72d6d
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140062fc1
nop dword [rax]
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x140062fa0
cmp r8d, 0x712750ad
je 0x140062fcb
test r9d, r9d
jne 0x140062f80
mov rax, qword [rax]
jmp 0x140062f50
mov ecx, dword [rbx + 0x1c]
add rcx, r10
mov eax, dword [rbx + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r10
mov rcx, rsi
call rdx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x140063076
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x140063076
mov edi, dword [rbx + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rdi]
add rdx, r10
mov r8d, 0xbc515bcb
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140063071
nop dword [rax]
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x140063050
cmp r8d, 0xcb27876a
je 0x14006307b
test r9d, r9d
jne 0x140063030
mov rax, qword [rax]
jmp 0x140063000
mov ecx, dword [rbx + 0x1c]
add rcx, r10
mov eax, dword [rbx + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov r14d, dword [rcx + rax*4]
add r14, r10
mov rax, qword gs:[0x58]
mov rdi, qword [rax]
mov ecx, 0x2b94
mov eax, dword [rcx + rdi]
mov ebx, 0xac0
test al, 1
jne 0x1400630d6
or eax, 1
mov dword [rcx + rdi], eax
mov word [rbx + rdi + 5], Ordinal_301
mov dword [rbx + rdi], 0xd639fd60
mov byte [rbx + rdi + 4], 0xdb
lea rcx, [0x14010a180]
call fcn.1400fcdbc
nop
add rbx, rdi
cmp byte [rbx + 6], 0
je 0x1400630fa
xor byte [rbx], 0x25
xor byte [rbx + 1], 0x8f
xor byte [rbx + 2], 0x4b
xor byte [rbx + 3], 0xb9
xor byte [rbx + 4], 0xa9
xor byte [rbx + 5], 0x27
mov byte [rbx + 6], 0
movdqa xmm0, xmmword [0x1401cbae0]
mov dword [rbp + 0x17], 0xd639ff05
mov dword [rbp + 0x1b], 0x6bc42ca
mov ecx, 0x1aa8
mov eax, dword [rcx + rdi]
mov esi, 0x3f0
test al, 1
jne 0x140063176
or eax, 1
mov dword [rcx + rdi], eax
lea rax, [rsi + rdi]
mov byte [rax + 0x19], 1
lea rcx, [rax + 0x18]
lea rdx, [rbp + 0x1f]
cmp rax, rdx
ja 0x140063158
lea rdx, [rbp + 7]
cmp rcx, rdx
jb 0x140063158
movups xmmword [rax], xmm0
movsd xmm0, qword [rbp + 0x17]
movsd qword [rax + 0x10], xmm0
mov byte [rax + 0x18], 0x25
jmp 0x140063169
movups xmmword [rax], xmm0
movsd xmm0, qword [rbp + 0x17]
movsd qword [rax + 0x10], xmm0
mov byte [rax + 0x18], 0x25
lea rcx, [0x14010a1a0]
call fcn.1400fcdbc
nop
lea rdx, [rsi + rdi]
cmp byte [rdx + 0x19], 0
je 0x140062ed1
movabs r8, 0x73cf27a9b94b8f25
nop
movzx ecx, r15b
and cl, 7
shl cl, 3
mov rax, r8
shr rax, cl
xor byte [r15 + rdx], al
inc r15
cmp r15, 0x19
jb 0x140063190
mov byte [rdx + 0x19], 0
jmp 0x140062ed1
mov rdx, qword [rbp + 0x27]
mov rcx, rsi
call fcn.140047ca0
mov rcx, qword gs:[0x60]
test al, al
mov rax, qword [rcx + 0x18]
mov rax, qword [rax + 0x10]
jne 0x140063440
nop dword [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x140063256
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x140063256
mov edi, dword [rbx + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rdi]
add rdx, r10
mov r8d, 0xaeeb5af5
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140063251
nop dword [rax]
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x140063230
cmp r8d, 0x94473a55
je 0x14006325b
test r9d, r9d
jne 0x140063210
mov rax, qword [rax]
jmp 0x1400631e0
mov ecx, dword [rbx + 0x1c]
add rcx, r10
mov eax, dword [rbx + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r10
mov rcx, rsi
call rdx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x140063306
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x140063306
mov edi, dword [rbx + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rdi]
add rdx, r10
mov r8d, 0x7544c347
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140063301
nop dword [rax]
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x1400632e0
cmp r8d, 0xd4fb4f76
je 0x14006330b
test r9d, r9d
jne 0x1400632c0
mov rax, qword [rax]
jmp 0x140063290
mov ecx, dword [rbx + 0x1c]
add rcx, r10
mov eax, dword [rbx + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov r14d, dword [rcx + rax*4]
add r14, r10
mov rax, qword gs:[0x58]
mov rdi, qword [rax]
mov ecx, 0x1ec
mov eax, dword [rcx + rdi]
mov ebx, 0x2b88
test al, 1
jne 0x140063366
or eax, 1
mov dword [rcx + rdi], eax
mov word [rbx + rdi + 5], 0x183
mov dword [rbx + rdi], 0x44d5d56a
mov byte [rbx + rdi + 4], Ordinal_211
lea rcx, [0x14010a140]
call fcn.1400fcdbc
nop
add rbx, rdi
cmp byte [rbx + 6], 0
je 0x14006338a
xor byte [rbx], 0x2f
xor byte [rbx + 1], 0xa7
xor byte [rbx + 2], 0xa7
xor byte [rbx + 3], 0x2b
xor byte [rbx + 4], 0xa3
xor byte [rbx + 5], 0x83
mov byte [rbx + 6], 0
movdqa xmm0, xmmword [0x1401cbc40]
mov dword [rbp - 1], 0x5ecec94e
mov ecx, 0xf88
mov eax, dword [rcx + rdi]
mov esi, 0xf08
test al, 1
jne 0x1400633f7
or eax, 1
mov dword [rcx + rdi], eax
lea rcx, [rsi + rdi]
mov byte [rcx + 0x15], 1
lea rax, [rcx + 0x14]
lea rdx, [rbp + 3]
cmp rcx, rdx
ja 0x1400633dd
lea rdx, [rbp - 0x11]
cmp rax, rdx
jb 0x1400633dd
movups xmmword [rcx], xmm0
mov eax, dword [rbp - 1]
mov dword [rcx + 0x10], eax
mov byte [rcx + 0x14], 0xa3
jmp 0x1400633ea
movups xmmword [rcx], xmm0
mov eax, dword [rbp - 1]
mov dword [rcx + 0x10], eax
mov byte [rcx + 0x14], 0xa3
lea rcx, [0x14010a160]
call fcn.1400fcdbc
nop
lea rdx, [rsi + rdi]
cmp byte [rdx + 0x15], 0
je 0x140062ed1
movabs r8, 0x61d183a32ba7a72f
nop
movzx ecx, r15b
and cl, 7
shl cl, 3
mov rax, r8
shr rax, cl
xor byte [rdx + r15], al
inc r15
cmp r15, 0x15
jb 0x140063410
mov byte [rdx + 0x15], 0
jmp 0x140062ed1
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x1400634b6
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x1400634b6
mov edi, dword [rbx + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [rdi + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
mov r8d, 0xafb9b693
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x1400634b1
nop
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x140063490
cmp r8d, 0x4cbc7967
je 0x1400634bb
test r9d, r9d
jne 0x140063470
mov rax, qword [rax]
jmp 0x140063440
mov ecx, dword [rbx + 0x1c]
add rcx, r10
mov eax, dword [rbx + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r10
mov rcx, rsi
call rdx
mov bl, 1
jmp 0x140062ede
call fcn.1400fcce4
movzx eax, bl
mov rcx, qword [rbp + 0x3f]
xor rcx, rsp
call fcn.1400fcc80
lea r11, [rsp + 0xd0]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov rsp, r11
pop r15
pop r14
pop rbp
ret