Function at 0x140063a40
Capabilities:
Access peb ldr_data
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x540]
sub rsp, 0x640
mov rax, qword [0x1400e7080]
xor rax, rsp
mov qword [rbp + 0x530], rax
mov r12, rdx
mov qword [rbp - 0x60], rdx
mov r13, rcx
mov qword [rbp - 0x30], rcx
mov qword [rbp - 0x50], rcx
mov qword [rbp + 0x3d0], rdx
xor ebx, ebx
mov dword [rbp - 0x68], ebx
lea rcx, [rbp + 0x3e8]
call fcn.140006090
nop
call fcn.140071330
mov rsi, rax
lea rcx, [rbp + 0x408]
call fcn.140063640
nop
xor edx, edx
lea rcx, [rbp + 0x408]
call fcn.140020880
mov r15, rax
mov r14, r12
cmp qword [r12 + 0x18], 0xf
jbe 0x140063ad0
mov r14, qword [r12]
mov dword [rsp + 0x40], reloc.WS2_32.dll_send
movdqa xmm0, xmmword [0x1400d7850]
movdqu xmmword [rsp + 0x44], xmm0
mov dword [rsp + 0x54], 0x8bf9acb5
mov edx, ebx
mov ecx, edx
lea eax, [rdx + 0x78]
xor byte [rsp + rcx + 0x44], al
inc edx
mov eax, dword [rsp + 0x40]
cmp edx, eax
jb 0x140063af0
mov byte [rsp + rax + 0x44], 0
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
mov r11, qword [rax + 0x30]
movsxd rcx, dword [r11 + 0x3c]
mov edi, dword [rcx + r11 + 0x88]
add rdi, r11
cmp rdi, r11
je 0x140063b96
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140063b96
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [r11 + r9*4]
mov edx, dword [rcx + rbx]
add rdx, r11
mov r8d, 0x811c9dc5
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140063b91
nop dword [rax]
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x140063b70
cmp r8d, 0x70e2d349
je 0x140063b9b
test r9d, r9d
jne 0x140063b50
mov rax, qword [rax]
jmp 0x140063b20
mov ecx, dword [rdi + 0x1c]
add rcx, r11
mov eax, dword [rdi + 0x24]
add rax, r11
movzx eax, word [rax + r9*2]
mov r10d, dword [rcx + rax*4]
add r10, r11
mov r9, r15
mov r8, r14
lea rdx, [rsp + 0x44]
lea rcx, [rbp + 0x430]
call r10
xor r14d, r14d
test rsi, rsi
je 0x140063cc6
mov eax, 0x3d
mov dword [rbp - 0x20], eax
mov dword [rbp - 0x1c], 0xb0e0d10
mov dword [rbp - 0x18], 0x4e515246
mov dword [rbp - 0x14], 0xb2acb7b4
movdqa xmm0, xmmword [0x1400d7860]
movdqa xmmword [rbp - 0x10], xmm0
movdqa xmm1, xmmword [0x1400d7830]
movdqa xmmword [rbp], xmm1
movdqa xmm0, xmmword [0x1400d7820]
movdqa xmmword [rbp + 0x10], xmm0
mov dword [rbp + 0x20], 0xb5d1
mov edx, r14d
test eax, eax
je 0x140063c42
nop word [rax + rax]
mov ecx, edx
lea eax, [rdx + 0x78]
xor byte [rbp + rcx - 0x1c], al
inc edx
mov eax, dword [rbp - 0x20]
cmp edx, eax
jb 0x140063c30
mov byte [rbp + rax - 0x1c], r14b
lea r8, [rbp - 0x1c]
mov edx, 0x2712
mov rcx, rsi
call fcn.140073ca0
lea r8, [rbp + 0x430]
mov edx, 0x271f
mov rcx, rsi
call fcn.140073ca0
lea r8, [0x1400635c0]
mov edx, 0x4e2b
mov rcx, rsi
call fcn.140073ca0
lea r8, [rbp + 0x3e8]
mov edx, 0x2711
mov rcx, rsi
call fcn.140073ca0
mov edx, 0x40
lea r8d, [rdx - 0x3f]
mov rcx, rsi
call fcn.140073ca0
mov edx, 0x51
lea r8d, [rdx - 0x4f]
mov rcx, rsi
call fcn.140073ca0
mov rcx, rsi
call fcn.1400713f0
mov rcx, rsi
call fcn.140071310
mov qword [rbp + 0x18], r14
lea r8, [rbp - 0x20]
lea rdx, [rbp + 0x3e8]
lea rcx, [rbp + 0x3d8]
call fcn.140066110
nop
mov dword [rbp - 0x78], 7
mov dword [rbp - 0x74], 0x18190c0b
mov dword [rbp - 0x70], 0x7f0d0e19
mov edx, r14d
nop word [rax + rax]
mov ecx, edx
lea eax, [rdx + 0x78]
xor byte [rbp + rcx - 0x74], al
inc edx
mov eax, dword [rbp - 0x78]
cmp edx, eax
jb 0x140063d00
mov byte [rbp + rax - 0x74], 0
mov rdi, qword [rsp + 0x60]
movzx eax, byte [rbp + 0x3d8]
test al, al
jne 0x140063d4d
mov byte [rbp + 0x3d8], 1
mov dl, 1
lea rcx, [rbp + 0x30]
call fcn.140066ee0
mov rbx, qword [rbp + 0x30]
mov qword [rbp + 0x3e0], rbx
movzx eax, byte [rbp + 0x3d8]
jmp 0x140063d54
mov rbx, qword [rbp + 0x3e0]
cmp al, 1
jne 0x140063ddc
lea rdx, str.status
lea rcx, [rsp + 0x40]
call fcn.1400022e0
nop
lea r8, [rsp + 0x40]
lea rdx, [rbp + 0x130]
mov rcx, rbx
call fcn.14006c6e0
mov rdi, qword [rax]
add rdi, 0x40
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x140063dc9
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140063dc4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140063dc4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400bee5c
movdqa xmm0, xmmword [0x1400d76f0]
movdqu xmmword [rsp + 0x50], xmm0
mov byte [rsp + 0x40], 0
lea rdx, [rbp - 0x74]
mov rcx, rdi
call fcn.140066310
test al, al
je 0x140064ac4
lea rax, [rbp + 0x2a0]
mov qword [rsp + 0x60], rax
lea rax, [rbp + 0x160]
mov qword [rbp + 0x30], rax
mov rdi, qword [rsp + 0x60]
movzx eax, byte [rbp + 0x3d8]
test al, al
jne 0x140063e3d
mov byte [rbp + 0x3d8], 1
mov dl, 1
lea rcx, [rbp + 0x78]
call fcn.140066ee0
mov rbx, qword [rbp + 0x78]
mov qword [rbp + 0x3e0], rbx
movzx eax, byte [rbp + 0x3d8]
jmp 0x140063e44
mov rbx, qword [rbp + 0x3e0]
cmp al, 1
jne 0x140063ecc
lea rdx, [0x1400d64f8]
lea rcx, [rsp + 0x40]
call fcn.1400022e0
nop
lea r8, [rsp + 0x40]
lea rdx, [rbp + 0x140]
mov rcx, rbx
call fcn.14006c6e0
mov rdi, qword [rax]
add rdi, 0x40
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x140063eb9
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140063eb4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140063eb4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400bee5c
movdqa xmm0, xmmword [0x1400d76f0]
movdqu xmmword [rsp + 0x50], xmm0
mov byte [rsp + 0x40], 0
lea rdx, str.created_on
mov rcx, rdi
call fcn.140066250
lea rdx, [rbp + 0x160]
mov rcx, rax
call fcn.1400663d0
mov r12, rax
mov rdi, qword [rsp + 0x60]
movzx eax, byte [rbp + 0x3d8]
test al, al
jne 0x140063f23
mov byte [rbp + 0x3d8], 1
mov dl, 1
lea rcx, [rbp + 0x38]
call fcn.140066ee0
mov rbx, qword [rbp + 0x38]
mov qword [rbp + 0x3e0], rbx
movzx eax, byte [rbp + 0x3d8]
jmp 0x140063f2a
mov rbx, qword [rbp + 0x3e0]
cmp al, 1
jne 0x140063fb2
lea rdx, [0x1400d64f8]
lea rcx, [rsp + 0x40]
call fcn.1400022e0
nop
lea r8, [rsp + 0x40]
lea rdx, [rbp + 0x150]
mov rcx, rbx
call fcn.14006c6e0
mov rdi, qword [rax]
add rdi, 0x40
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x140063f9f
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140063f9a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140063f9a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400bee5c
movdqa xmm0, xmmword [0x1400d76f0]
movdqu xmmword [rsp + 0x50], xmm0
mov byte [rsp + 0x40], 0
lea rdx, str.status
mov rcx, rdi
call fcn.140066250
mov r8, rax
movzx ecx, byte [rax]
mov edx, ecx
sub edx, 5
je 0x140063ffe
sub edx, 1
je 0x140063fef
cmp edx, 1
jne 0x140063fea
add rax, 8
cmp cl, 7
cmovne rax, r14
cvttsd2si rsi, qword [rax]
jmp 0x140064013
mov esi, dword [rbp - 0x60]
jmp 0x140064013
add rax, 8
cmp cl, 6
cmovne rax, r14
mov esi, dword [rax]
jmp 0x140064013
sub cl, 5
cmp cl, 1
setbe al
lea rcx, [r8 + 8]
test al, al
cmove rcx, r14
mov esi, dword [rcx]
lea rax, [rbp + 0x180]
mov qword [rbp + 0x38], rax
mov rdi, qword [rsp + 0x60]
movzx eax, byte [rbp + 0x3d8]
test al, al
jne 0x140064054
mov byte [rbp + 0x3d8], 1
mov dl, 1
lea rcx, [rbp - 0x48]
call fcn.140066ee0
mov rbx, qword [rbp - 0x48]
mov qword [rbp + 0x3e0], rbx
movzx eax, byte [rbp + 0x3d8]
jmp 0x14006405b
mov rbx, qword [rbp + 0x3e0]
cmp al, 1
jne 0x1400640e3
lea rdx, [0x1400d64f8]
lea rcx, [rsp + 0x40]
call fcn.1400022e0
nop
lea r8, [rsp + 0x40]
lea rdx, [rbp + 0x280]
mov rcx, rbx
call fcn.14006c6e0
mov rdi, qword [rax]
add rdi, 0x40
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x1400640d0
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400640cb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400640cb
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400bee5c
movdqa xmm0, xmmword [0x1400d76f0]
movdqu xmmword [rsp + 0x50], xmm0
mov byte [rsp + 0x40], 0
lea rdx, str.version
mov rcx, rdi
call fcn.140066250
lea rdx, [rbp + 0x180]
mov rcx, rax
call fcn.1400663d0
mov r15, rax
lea rax, [rbp + 0x1a0]
mov qword [rbp - 0x48], rax
mov rdi, qword [rsp + 0x60]
movzx eax, byte [rbp + 0x3d8]
test al, al
jne 0x140064145
mov byte [rbp + 0x3d8], 1
mov dl, 1
lea rcx, [rbp - 0x38]
call fcn.140066ee0
mov rbx, qword [rbp - 0x38]
mov qword [rbp + 0x3e0], rbx
movzx eax, byte [rbp + 0x3d8]
jmp 0x14006414c
mov rbx, qword [rbp + 0x3e0]
cmp al, 1
jne 0x1400641d4
lea rdx, [0x1400d64f8]
lea rcx, [rsp + 0x40]
call fcn.1400022e0
nop
lea r8, [rsp + 0x40]
lea rdx, [rbp + 0x290]
mov rcx, rbx
call fcn.14006c6e0
mov rdi, qword [rax]
add rdi, 0x40
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x1400641c1
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400641bc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400641bc
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400bee5c
movdqa xmm0, xmmword [0x1400d76f0]
movdqu xmmword [rsp + 0x50], xmm0
mov byte [rsp + 0x40], 0
lea rdx, str.name
mov rcx, rdi
call fcn.140066250
lea rdx, [rbp + 0x1a0]
mov rcx, rax
call fcn.1400663d0
mov r14, rax
mov rdi, qword [rsp + 0x60]
movzx eax, byte [rbp + 0x3d8]
test al, al
jne 0x14006422b
mov byte [rbp + 0x3d8], 1
mov dl, 1
lea rcx, [rbp - 0x40]
call fcn.140066ee0
mov rbx, qword [rbp - 0x40]
mov qword [rbp + 0x3e0], rbx
movzx eax, byte [rbp + 0x3d8]
jmp 0x140064232
mov rbx, qword [rbp + 0x3e0]
cmp al, 1
jne 0x1400642ba
lea rdx, [0x1400d64f8]
lea rcx, [rsp + 0x40]
call fcn.1400022e0
nop
lea r8, [rsp + 0x40]
lea rdx, [rbp + 0xf0]
mov rcx, rbx
call fcn.14006c6e0
mov rdi, qword [rax]
add rdi, 0x40
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x1400642a7
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400642a2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400642a2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400bee5c
movdqa xmm0, xmmword [0x1400d76f0]
movdqu xmmword [rsp + 0x50], xmm0
mov byte [rsp + 0x40], 0
lea rdx, [0x1400d6518]
mov rcx, rdi
call fcn.140066250
lea rdx, [rbp + 0x1c0]
mov rcx, rax
call fcn.1400663d0
nop
mov qword [rsp + 0x28], r12
mov dword [rsp + 0x20], esi
mov r9, r15
mov r8, r14
mov rdx, rax
lea rcx, [rbp + 0x2a0]
call fcn.1400620d0
mov qword [rbp - 0x40], rax
lea rax, [rbp + 0xd0]
mov qword [rbp - 0x38], rax
mov rdi, qword [rsp + 0x60]
movzx eax, byte [rbp + 0x3d8]
test al, al
jne 0x14006433c
mov byte [rbp + 0x3d8], 1
mov dl, 1
lea rcx, [rbp - 0x58]
call fcn.140066ee0
mov rbx, qword [rbp - 0x58]
mov qword [rbp + 0x3e0], rbx
movzx eax, byte [rbp + 0x3d8]
jmp 0x140064343
mov rbx, qword [rbp + 0x3e0]
cmp al, 1
jne 0x1400643cb
lea rdx, str.token
lea rcx, [rsp + 0x40]
call fcn.1400022e0
nop
lea r8, [rsp + 0x40]
lea rdx, [rbp + 0x100]
mov rcx, rbx
call fcn.14006c6e0
mov rdi, qword [rax]
add rdi, 0x40
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x1400643b8
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400643b3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400643b3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400bee5c
movdqa xmm0, xmmword [0x1400d76f0]
movdqu xmmword [rsp + 0x50], xmm0
mov byte [rsp + 0x40], 0
lea rdx, [rbp + 0x1e0]
mov rcx, rdi
call fcn.1400663d0
mov rbx, rax
mov qword [rbp - 0x58], rax
lea rcx, [rbp + 0xd0]
call fcn.140006090
nop
mov rdx, rbx
lea rcx, [rbp + 0xd0]
call fcn.140020970
nop
mov rdx, qword [rbx + 0x18]
cmp rdx, 0xf
jbe 0x140064434
mov rcx, qword [rbx]
inc rdx
cmp rdx, 0x1000
jb 0x14006442f
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14006447b
mov rcx, r8
call fcn.1400bee5c
xor esi, esi
mov qword [rbx + 0x10], rsi
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], sil
mov rdi, qword [rsp + 0x60]
movzx eax, byte [rbp + 0x3d8]
test al, al
jne 0x140064482
mov byte [rbp + 0x3d8], 1
mov dl, 1
lea rcx, [rbp + 0x40]
call fcn.140066ee0
mov rbx, qword [rbp + 0x40]
mov qword [rbp + 0x3e0], rbx
movzx eax, byte [rbp + 0x3d8]
jmp 0x140064489
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov rbx, qword [rbp + 0x3e0]
cmp al, 1
jne 0x140064511
lea rdx, str.license
lea rcx, [rsp + 0x40]
call fcn.1400022e0
nop
lea r8, [rsp + 0x40]
lea rdx, [rbp + 0x110]
mov rcx, rbx
call fcn.14006c6e0
mov rdi, qword [rax]
add rdi, 0x40
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x1400644fe
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400644f9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400644f9
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400bee5c
movdqa xmm0, xmmword [0x1400d76f0]
movdqu xmmword [rsp + 0x50], xmm0
mov byte [rsp + 0x40], 0
lea rdx, str.duration
mov rcx, rdi
call fcn.140066250
mov r8, rax
movzx edx, byte [rax]
mov ecx, edx
sub ecx, 4
je 0x140064579
sub ecx, 1
je 0x140064562
sub ecx, 1
je 0x140064553
cmp ecx, 1
jne 0x14006454e
add rax, 8
cmp dl, 7
cmovne rax, rsi
cvttsd2si rsi, qword [rax]
jmp 0x140064587
mov esi, dword [rbp - 0x60]
jmp 0x140064587
add rax, 8
cmp dl, 6
cmovne rax, rsi
mov esi, dword [rax]
jmp 0x140064587
sub dl, 5
cmp dl, 1
setbe al
lea rcx, [r8 + 8]
test al, al
cmove rcx, rsi
mov esi, dword [rcx]
jmp 0x140064587
add rax, 8
cmp dl, 4
cmovne rax, rsi
movzx esi, byte [rax]
lea rax, [rbp + 0x200]
mov qword [rbp + 0x40], rax
mov rdi, qword [rsp + 0x60]
movzx eax, byte [rbp + 0x3d8]
test al, al
jne 0x1400645c8
mov byte [rbp + 0x3d8], 1
mov dl, 1
lea rcx, [rbp + 0x48]
call fcn.140066ee0
mov rbx, qword [rbp + 0x48]
mov qword [rbp + 0x3e0], rbx
movzx eax, byte [rbp + 0x3d8]
jmp 0x1400645cf
mov rbx, qword [rbp + 0x3e0]
cmp al, 1
jne 0x140064657
lea rdx, str.license
lea rcx, [rsp + 0x40]
call fcn.1400022e0
nop
lea r8, [rsp + 0x40]
lea rdx, [rbp + 0x120]
mov rcx, rbx
call fcn.14006c6e0
mov rdi, qword [rax]
add rdi, 0x40
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x140064644
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006463f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14006463f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400bee5c
movdqa xmm0, xmmword [0x1400d76f0]
movdqu xmmword [rsp + 0x50], xmm0
mov byte [rsp + 0x40], 0
lea rdx, str.created_on
mov rcx, rdi
call fcn.140066250
lea rdx, [rbp + 0x200]
mov rcx, rax
call fcn.1400663d0
mov r13, rax
lea rax, [rbp + 0x220]
mov qword [rbp + 0x48], rax
mov rdi, qword [rsp + 0x60]
movzx eax, byte [rbp + 0x3d8]
test al, al
jne 0x1400646bb
mov byte [rbp + 0x3d8], 1
mov dl, 1
lea rcx, [rsp + 0x78]
call fcn.140066ee0
mov rbx, qword [rsp + 0x78]
mov qword [rbp + 0x3e0], rbx
movzx eax, byte [rbp + 0x3d8]
jmp 0x1400646c2
mov rbx, qword [rbp + 0x3e0]
cmp al, 1
jne 0x14006474a
lea rdx, str.license
lea rcx, [rsp + 0x40]
call fcn.1400022e0
nop
lea r8, [rsp + 0x40]
lea rdx, [rbp + 0xa0]
mov rcx, rbx
call fcn.14006c6e0
mov rdi, qword [rax]
add rdi, 0x40
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x140064737
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140064732
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140064732
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400bee5c
movdqa xmm0, xmmword [0x1400d76f0]
movdqu xmmword [rsp + 0x50], xmm0
mov byte [rsp + 0x40], 0
lea rdx, str.expiry
mov rcx, rdi
call fcn.140066250
lea rdx, [rbp + 0x220]
mov rcx, rax
call fcn.1400663d0
mov r12, rax
lea rax, [rbp + 0x240]
mov qword [rsp + 0x78], rax
mov rdi, qword [rsp + 0x60]
movzx eax, byte [rbp + 0x3d8]
test al, al
jne 0x1400647af
mov byte [rbp + 0x3d8], 1
mov dl, 1
lea rcx, [rsp + 0x68]
call fcn.140066ee0
mov rbx, qword [rsp + 0x68]
mov qword [rbp + 0x3e0], rbx
movzx eax, byte [rbp + 0x3d8]
jmp 0x1400647b6
mov rbx, qword [rbp + 0x3e0]
cmp al, 1
jne 0x14006483e
lea rdx, str.license
lea rcx, [rsp + 0x40]
call fcn.1400022e0
nop
lea r8, [rsp + 0x40]
lea rdx, [rbp + 0xc0]
mov rcx, rbx
call fcn.14006c6e0
mov rdi, qword [rax]
add rdi, 0x40
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x14006482b
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140064826
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140064826
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400bee5c
movdqa xmm0, xmmword [0x1400d76f0]
movdqu xmmword [rsp + 0x50], xmm0
mov byte [rsp + 0x40], 0
lea rdx, str.hwid
mov rcx, rdi
call fcn.140066250
lea rdx, [rbp + 0x240]
mov rcx, rax
call fcn.1400663d0
mov r14, rax
lea rax, [rbp + 0x260]
mov qword [rsp + 0x68], rax
mov rdx, qword [rbp - 0x60]
lea rcx, [rbp + 0x260]
call fcn.140020b00
mov r15, rax
mov rdi, qword [rsp + 0x60]
movzx eax, byte [rbp + 0x3d8]
test al, al
jne 0x1400648b4
mov byte [rbp + 0x3d8], 1
mov dl, 1
lea rcx, [rbp - 0x50]
call fcn.140066ee0
mov rbx, qword [rbp - 0x50]
mov qword [rbp + 0x3e0], rbx
movzx eax, byte [rbp + 0x3d8]
jmp 0x1400648bb
mov rbx, qword [rbp + 0x3e0]
cmp al, 1
jne 0x140064943
lea rdx, str.license
lea rcx, [rsp + 0x40]
call fcn.1400022e0
nop
lea r8, [rsp + 0x40]
lea rdx, [rbp + 0x80]
mov rcx, rbx
call fcn.14006c6e0
mov rdi, qword [rax]
add rdi, 0x40
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x140064930
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006492b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14006492b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400bee5c
movdqa xmm0, xmmword [0x1400d76f0]
movdqu xmmword [rsp + 0x50], xmm0
mov byte [rsp + 0x40], 0
lea rdx, [0x1400d6518]
mov rcx, rdi
call fcn.140066250
lea rdx, [rbp + 0x50]
mov rcx, rax
call fcn.1400663d0
nop
mov dword [rsp + 0x30], esi
mov qword [rsp + 0x28], r13
mov qword [rsp + 0x20], r12
mov r9, r14
mov r8, r15
mov rdx, rax
lea rcx, [rbp + 0x328]
call fcn.1400624e0
nop
mov r9, qword [rbp - 0x40]
lea r8, [rbp + 0xd0]
mov rdx, rax
mov rdi, qword [rbp - 0x30]
mov rcx, rdi
call fcn.1400652a0
nop
movzx edx, byte [rbp + 0x3d8]
lea rcx, [rbp + 0x3e0]
call fcn.140065750
nop
mov rdx, qword [rbp + 0x420]
cmp rdx, 0xf
jbe 0x1400649f6
inc rdx
mov rcx, qword [rbp + 0x408]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400649f1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400649f1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400bee5c
movdqa xmm0, xmmword [0x1400d76f0]
movdqu xmmword [rbp + 0x418], xmm0
mov byte [rbp + 0x408], 0
mov rdx, qword [rbp + 0x400]
cmp rdx, 0xf
jbe 0x140064a51
inc rdx
mov rcx, qword [rbp + 0x3e8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140064a4c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140064a4c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400bee5c
movdqa xmm0, xmmword [0x1400d76f0]
movdqu xmmword [rbp + 0x3f8], xmm0
mov byte [rbp + 0x3e8], 0
mov rbx, qword [rbp - 0x60]
mov rdx, qword [rbx + 0x18]
cmp rdx, 0xf
jbe 0x140064aa2
inc rdx
mov rcx, qword [rbx]
cmp rdx, 0x1000
jb 0x140064a9d
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140064abd
mov rcx, r8
call fcn.1400bee5c
mov qword [rbx + 0x10], 0
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], 0
mov rax, rdi
jmp 0x14006526a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov rbx, qword [rsp + 0x60]
movzx eax, byte [rbp + 0x3d8]
test al, al
jne 0x140064afa
mov byte [rbp + 0x3d8], 1
mov dl, 1
lea rcx, [rbp - 0x30]
call fcn.140066ee0
mov rdi, qword [rbp - 0x30]
mov qword [rbp + 0x3e0], rdi
movzx eax, byte [rbp + 0x3d8]
jmp 0x140064b01
mov rdi, qword [rbp + 0x3e0]
cmp al, 1
jne 0x140064b89
lea rdx, str.message
lea rcx, [rsp + 0x40]
call fcn.1400022e0
nop
lea r8, [rsp + 0x40]
lea rdx, [rbp + 0x80]
mov rcx, rdi
call fcn.14006c6e0
mov rbx, qword [rax]
add rbx, 0x40
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x140064b76
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140064b71
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140064b71
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400bee5c
movdqa xmm0, xmmword [0x1400d76f0]
movdqu xmmword [rsp + 0x50], xmm0
mov byte [rsp + 0x40], 0
lea rcx, [rbp + 0xa0]
call fcn.140006090
mov dword [rbp - 0x68], 0x400
cmp byte [rbx], 3
jne 0x140064ba7
mov rdx, qword [rbx + 8]
jmp 0x140064baa
mov rdx, r14
lea rcx, [rbp + 0xa0]
call fcn.140020970
mov dword [rsp + 0x68], 7
mov dword [rsp + 0x6c], 0xf091c2a
mov dword [rsp + 0x70], 0x7f0a0f1d
mov edx, r14d
mov ecx, edx
lea eax, [rdx + 0x78]
xor byte [rsp + rcx + 0x6c], al
inc edx
mov eax, dword [rsp + 0x68]
cmp edx, eax
jb 0x140064bd1
mov byte [rsp + rax + 0x6c], 0
lea rcx, [rsp + 0x6c]
mov rax, 0xffffffffffffffff
inc rax
cmp byte [rcx + rax], 0
jne 0x140064bf5
lea rcx, [rbp + 0xa0]
mov rbx, qword [rbp + 0xa0]
mov rdi, qword [rbp + 0xb8]
cmp rdi, 0xf
cmova rcx, rbx
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x6c]
mov rdx, qword [rbp + 0xb0]
call fcn.140002770
mov rsi, rax
cmp rdi, 0xf
jbe 0x140064c6e
lea rdx, [rdi + 1]
mov rax, rbx
cmp rdx, 0x1000
jb 0x140064c66
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140064c66
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rbx
call fcn.1400bee5c
cmp rsi, 0xffffffffffffffff
je 0x140064d9d
mov rdx, r12
lea rcx, [rbp + 0x50]
call fcn.140020b00
mov rdx, rax
mov rcx, r13
call fcn.140063a40
nop
movzx edx, byte [rbp + 0x3d8]
lea rcx, [rbp + 0x3e0]
call fcn.140065750
nop
mov rdx, qword [rbp + 0x420]
cmp rdx, 0xf
jbe 0x140064ce8
inc rdx
mov rcx, qword [rbp + 0x408]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140064ce3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140064ce3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400bee5c
movdqa xmm0, xmmword [0x1400d76f0]
movdqu xmmword [rbp + 0x418], xmm0
mov byte [rbp + 0x408], 0
mov rdx, qword [rbp + 0x400]
cmp rdx, 0xf
jbe 0x140064d43
inc rdx
mov rcx, qword [rbp + 0x3e8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140064d3e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140064d3e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400bee5c
movdqa xmm0, xmmword [0x1400d76f0]
movdqu xmmword [rbp + 0x3f8], xmm0
mov byte [rbp + 0x3e8], 0
mov rdx, qword [r12 + 0x18]
cmp rdx, 0xf
jbe 0x140065254
inc rdx
mov rcx, qword [r12]
cmp rdx, 0x1000
jb 0x14006524f
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
jbe 0x14006524c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov eax, reloc.WLDAP32.dll_Ordinal_33
mov dword [rbp + 0x50], eax
movdqa xmm0, xmmword [0x1400d77e0]
movdqu xmmword [rbp + 0x54], xmm0
movdqa xmm1, xmmword [0x1400d7800]
movdqu xmmword [rbp + 0x64], xmm1
mov dword [rbp + 0x74], 0x99a9
mov edx, r14d
test eax, eax
je 0x140064de2
nop dword [rax]
mov ecx, edx
lea eax, [rdx + 0x78]
xor byte [rbp + rcx + 0x54], al
inc edx
mov eax, dword [rbp + 0x50]
cmp edx, eax
jb 0x140064dd0
mov byte [rbp + rax + 0x54], 0
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140064e76
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140064e76
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rbx]
add rdx, r10
mov r8d, 0x811c9dc5
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140064e71
nop dword [rax]
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x140064e50
cmp r8d, 0x491e0a9c
je 0x140064e7b
test r9d, r9d
jne 0x140064e30
mov rax, qword [rax]
jmp 0x140064e00
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r10
lea rcx, [rbp + 0x54]
call rdx
mov eax, 0xa
mov dword [rsp + 0x78], eax
mov dword [rsp + 0x7c], 0x8091c35
mov dword [rbp - 0x80], 0x3d1b1a1d
mov dword [rbp - 0x7c], 0x82f9ef
mov edx, r14d
test eax, eax
je 0x140064ed3
nop
mov ecx, edx
lea eax, [rdx + 0x78]
xor byte [rsp + rcx + 0x7c], al
inc edx
mov eax, dword [rsp + 0x78]
cmp edx, eax
jb 0x140064ec0
mov byte [rsp + rax + 0x7c], 0
mov rbx, qword [rsp + 0x60]
movzx eax, byte [rbp + 0x3d8]
test al, al
jne 0x140064f0e
mov byte [rbp + 0x3d8], 1
mov dl, 1
lea rcx, [rbp - 0x50]
call fcn.140066ee0
mov rdi, qword [rbp - 0x50]
mov qword [rbp + 0x3e0], rdi
movzx eax, byte [rbp + 0x3d8]
jmp 0x140064f15
mov rdi, qword [rbp + 0x3e0]
cmp al, 1
jne 0x140064fa9
lea rdx, str.message
lea rcx, [rbp + 0x80]
call fcn.1400022e0
nop
lea r8, [rbp + 0x80]
lea rdx, [rbp + 0xc0]
mov rcx, rdi
call fcn.14006c6e0
mov rbx, qword [rax]
add rbx, 0x40
mov rdx, qword [rbp + 0x98]
cmp rdx, 0xf
jbe 0x140064f92
inc rdx
mov rcx, qword [rbp + 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140064f8d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140064f8d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400bee5c
movdqa xmm0, xmmword [0x1400d76f0]
movdqu xmmword [rbp + 0x90], xmm0
mov byte [rbp + 0x80], 0
lea rcx, [rsp + 0x40]
call fcn.140006090
mov dword [rbp - 0x68], 0x800
cmp byte [rbx], 3
jne 0x140064fc5
mov rdx, qword [rbx + 8]
jmp 0x140064fc8
mov rdx, r14
lea rcx, [rsp + 0x40]
call fcn.140020970
lea rdx, [rsp + 0x40]
cmp qword [rsp + 0x58], 0xf
cmova rdx, qword [rsp + 0x40]
xor r9d, r9d
lea r8, [rsp + 0x7c]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x140065034
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006502f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14006502f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400bee5c
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x1400650c6
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x1400650c6
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
mov r8d, 0x811c9dc5
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x1400650c1
nop
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x1400650a0
cmp r8d, 0xcded1a85
je 0x1400650cb
test r9d, r9d
jne 0x140065080
mov rax, qword [rax]
jmp 0x140065050
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r10
xor ecx, ecx
call rdx
mov rcx, r13
call fcn.140006090
lea rcx, [r13 + 0x20]
call fcn.140006090
lea rcx, [r13 + 0x40]
call fcn.140006090
lea rcx, [r13 + 0x60]
call fcn.140006090
lea rcx, [r13 + 0x80]
call fcn.140006090
lea rcx, [r13 + 0xa8]
call fcn.140006090
lea rcx, [r13 + 0xc8]
call fcn.140006090
lea rcx, [r13 + 0xe8]
call fcn.140006090
lea rcx, [r13 + 0x108]
call fcn.140006090
lea rcx, [r13 + 0x128]
call fcn.140006090
nop
movzx edx, byte [rbp + 0x3d8]
lea rcx, [rbp + 0x3e0]
call fcn.140065750
nop
mov rdx, qword [rbp + 0x420]
cmp rdx, 0xf
jbe 0x1400651aa
inc rdx
mov rcx, qword [rbp + 0x408]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400651a5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400651a5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400bee5c
movdqa xmm0, xmmword [0x1400d76f0]
movdqu xmmword [rbp + 0x418], xmm0
mov byte [rbp + 0x408], 0
mov rdx, qword [rbp + 0x400]
cmp rdx, 0xf
jbe 0x140065205
inc rdx
mov rcx, qword [rbp + 0x3e8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140065200
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140065200
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400bee5c
movdqa xmm0, xmmword [0x1400d76f0]
movdqu xmmword [rbp + 0x3f8], xmm0
mov byte [rbp + 0x3e8], 0
mov rdx, qword [r12 + 0x18]
cmp rdx, 0xf
jbe 0x140065254
inc rdx
mov rcx, qword [r12]
cmp rdx, 0x1000
jb 0x14006524f
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140065294
mov rcx, r8
call fcn.1400bee5c
mov rax, r13
mov byte [r12], 0
mov qword [r12 + 0x18], reloc.WS2_32.dll_ntohs
mov qword [r12 + 0x10], r14
mov rcx, qword [rbp + 0x530]
xor rcx, rsp
call fcn.1400beaa0
mov rbx, qword [rsp + 0x690]
add rsp, 0x640
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3