Function at 0x14002dbc0
Capabilities:
Authenticate hmac
Terminate process

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0xa8
lea rbp, [rsp + 0x80]
mov qword [rbp + 8], 0xfffffffffffffffe
cmp byte [0x14027d178], 0
je 0x14002dc31
call fcn.14003e1d0
mov ecx, dword [0x14027ced4]
lea edx, [rcx - 1]
imul edx, ecx
test dl, 1
sete dl
cmp dword [0x14027ced0], 0xa
setl r8b
or r8b, dl
mov edx, dword [0x14027e118]
mov ebx, dword [0x14027e11c]
jne 0x14002ddde
lea edi, [rdx - 1]
imul edi, edx
and edi, 1
jmp 0x14002de5a
cmp byte [0x14027520d], 0
je 0x14002fba5
mov rcx, qword [0x14027d1c0]
call fcn.140056200
movabs rax, 0x4100000041000000
mov qword [rbp - 0x30], rax
lea rdx, [rbp - 0x30]
mov ecx, 1
call fcn.14003e990
movss xmm1, dword [0x1401ca730]
mov ecx, 2
call fcn.14003e7f0
movabs rax, 0x42b4000042b40000
mov qword [rbp - 0x30], rax
lea rcx, [rbp - 0x30]
xor esi, esi
xor edx, edx
call fcn.14004add0
mov rdx, qword [0x14027e8b0]
mov rax, qword [0x1401ca25f]
mov qword [rbp - 0x29], rax
mov eax, dword [0x14027ee50]
lea ecx, [rax - 1]
imul ecx, eax
mov rax, qword [0x1401ca258]
test cl, 1
sete cl
cmp dword [0x14027ee54], 0xa
mov qword [rbp - 0x30], rax
setl al
or al, cl
mov r8b, 0x51
nop word cs:[rax + rax]
nop dword [rax + rax]
mov cl, 0xca
sub cl, sil
and cl, 0x9c
lea ebx, [rsi + 0x35]
and bl, 0x63
or bl, cl
xor bl, r8b
xor bl, 0x9c
test al, al
je 0x14002dd00
mov byte [rbp + rsi - 0x30], bl
jmp 0x14002dd14
mov byte [rbp + rsi - 0x30], bl
nop word cs:[rax + rax]
nop
test al, al
je 0x14002dd10
add rsi, 1
cmp rsi, 0xf
je 0x14002dd25
mov r8b, byte [rbp + rsi - 0x30]
jmp 0x14002dce0
lea rcx, [rbp - 0x30]
mov r8d, Ordinal_46
call fcn.14004ae50
movabs rax, 0x4120000041200000
mov qword [rbp - 0x30], rax
lea rcx, [rbp - 0x30]
xor edx, edx
call fcn.140056590
movzx eax, byte [0x14027520c]
shl rax, 5
lea rdx, [0x14027e7a0]
lea r9, [rdx + rax]
mov rcx, qword [0x14027e898]
cmp r9, rcx
je 0x14002fa6c
mov rsi, qword [rax + rdx + 0x10]
cmp qword [rax + rdx + 0x18], 0x10
jb 0x14002dd83
mov r9, qword [r9]
mov rax, qword [rcx + 0x18]
cmp rax, rsi
jae 0x14002dd99
mov rdx, rsi
call fcn.140038ba0
jmp 0x14002fa6c
mov rdi, rcx
cmp rax, 0x10
jb 0x14002dda5
mov rdi, qword [rcx]
mov qword [rcx + 0x10], rsi
mov rcx, rdi
mov rdx, r9
mov r8, rsi
call sub.VCRUNTIME140.dll_memmove
cmp dword [0x14027e01c], 0xa
jl 0x14002fa48
mov eax, dword [0x14027e018]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
jne 0x14002fa66
jmp 0x14002fa48
lea edi, [rdx - 1]
imul edi, edx
and edi, 1
cmp ebx, 0xa
jl 0x14002ddf4
test edi, edi
jne 0x14002dee0
movaps xmm0, xmmword [0x1401ca5f0]
movups xmmword [rax + 0x15c], xmm0
movaps xmm1, xmmword [0x1401ca600]
movups xmmword [rax + 0x16c], xmm1
movaps xmm1, xmmword [0x1401ca5c0]
movups xmmword [rax + 0xbc], xmm1
movaps xmm1, xmmword [0x1401ca5b0]
movups xmmword [rax + 0xdc], xmm1
movups xmmword [rax + 0xec], xmm0
cmp dword [0x14027e12c], 0xa
jl 0x14002de51
mov esi, dword [0x14027e128]
lea ecx, [rsi - 1]
imul ecx, esi
and ecx, 1
jne 0x14002df00
test r8b, r8b
jne 0x14002df02
cmp ebx, 0xa
jl 0x14002de67
test edi, edi
jne 0x14002def0
movaps xmm0, xmmword [0x1401ca5f0]
movups xmmword [rax + 0x15c], xmm0
movaps xmm1, xmmword [0x1401ca600]
movups xmmword [rax + 0x16c], xmm1
movaps xmm1, xmmword [0x1401ca5c0]
movups xmmword [rax + 0xbc], xmm1
movaps xmm1, xmmword [0x1401ca5b0]
movups xmmword [rax + 0xdc], xmm1
movups xmmword [rax + 0xec], xmm0
cmp dword [0x14027e12c], 0xa
jl 0x14002ddde
mov ecx, dword [0x14027e128]
lea edi, [rcx - 1]
imul edi, ecx
and edi, 1
je 0x14002ddde
nop dword [rax + rax]
jmp 0x14002ded0
jmp 0x14002dee0
jmp 0x14002def0
jmp 0x14002df00
movaps xmm0, xmmword [0x1401ca610]
movups xmmword [rax + 0x20c], xmm0
movaps xmm0, xmmword [0x1401ca620]
movups xmmword [rax + 0x21c], xmm0
movaps xmm0, xmmword [0x1401ca630]
movups xmmword [rax + 0x22c], xmm0
movaps xmm0, xmmword [0x1401ca640]
movups xmmword [rax + 0x23c], xmm0
movaps xmm0, xmmword [0x1401ca650]
movups xmmword [rax + 0x24c], xmm0
movaps xmm0, xmmword [0x1401ca660]
movups xmmword [rax + 0x25c], xmm0
movaps xmm0, xmmword [0x1401ca670]
movups xmmword [rax + 4], xmm0
mov dword [rax + 0x28], 0x40000000
mov rcx, qword [0x14027d1c0]
call fcn.140056200
mov rdx, qword [0x14027e8b0]
movups xmm0, xmmword [0x1401ca010]
movaps xmmword [rbp - 0x30], xmm0
mov byte [rbp - 0x30], reloc.WLDAP32.dll_Ordinal_32
mov eax, 2
mov r8b, reloc.WLDAP32.dll_Ordinal_200
nop word cs:[rax + rax]
nop dword [rax]
movzx ebx, byte [rbp + rax - 0x31]
lea edi, [r8 + 1]
and dil, bl
not bl
lea esi, [rax + 0x34]
and sil, bl
or dil, sil
mov byte [rbp + rax - 0x31], dil
cmp rax, 0x10
je 0x14002dfe5
movzx ebx, byte [rbp + rax - 0x30]
mov ecx, ebx
not cl
lea edi, [rax + 0x35]
and dil, cl
and bl, r8b
or bl, dil
mov byte [rbp + rax - 0x30], bl
add rax, 2
add r8b, 0xfe
jmp 0x14002dfa0
lea rcx, [rbp - 0x30]
mov r8d, 0x69
call fcn.14004ae50
call fcn.14002d870
movss xmm0, dword [0x1401186f0]
call fcn.140057240
movabs rax, 0x41a0000042ae0000
mov qword [rbp - 0x30], rax
mov dword [rbp - 0x38], 0x6e69614d
mov byte [rbp - 0x34], 0
lea rcx, [rbp - 0x38]
lea rdx, [rbp - 0x30]
call fcn.1400797f0
test al, al
je 0x14002e037
mov byte [0x14027e8e8], 0
movss xmm1, dword [0x1401186bc]
xorps xmm0, xmm0
call fcn.140057050
movabs rax, 0x41a0000042ae0000
mov qword [rbp - 0x38], rax
movabs rax, 0x73646e696279654b
mov qword [rbp - 0x30], rax
mov byte [rbp - 0x28], 0
lea rcx, [rbp - 0x30]
lea rdx, [rbp - 0x38]
call fcn.1400797f0
test al, al
je 0x14002e081
mov byte [0x14027e8e8], 1
jmp 0x14002e08e
cmp byte [0x14027e8e8], 0
je 0x14002e3b2
movabs rax, 0x6c6f6320756e654d
mov qword [rbp - 0x30], rax
mov word [rbp - 0x28], 0x726f
mov byte [rbp - 0x26], 0
lea rdx, [0x14027d1d0]
lea rcx, [rbp - 0x30]
mov r8d, 0xb010660
call fcn.14008ccc0
movabs rax, 0x41a0000043160000
mov qword [rbp - 0x38], rax
movabs rax, 0x79656b20756e654d
mov qword [rbp - 0x30], rax
mov dword [rbp - 0x28], 0x646e6962
mov byte [rbp - 0x24], 0
lea rdx, [0x140275248]
lea rcx, [rbp - 0x30]
lea r8, [rbp - 0x38]
call fcn.14007a130
mov ecx, 0x80
call fcn.140042720
test al, al
je 0x14002e18f
movups xmm0, xmmword [0x1401ca15d]
movaps xmmword [rbp - 0x30], xmm0
movups xmm0, xmmword [0x1401ca16d]
movaps xmmword [rbp - 0x20], xmm0
movups xmm0, xmmword [0x1401ca176]
movups xmmword [rbp - 0x17], xmm0
mov byte [rbp - 0x30], 0x4b
movups xmm0, xmmword [rbp - 0x2f]
movaps xmm1, xmm0
andnps xmm1, xmmword [str.6789:_____ABCDE]
andps xmm0, xmmword [0x1401ca690]
orps xmm0, xmm1
movups xmmword [rbp - 0x2f], xmm0
movups xmm0, xmmword [rbp - 0x1f]
movaps xmm1, xmm0
andnps xmm1, xmmword [str.FGHIJKLMNOPQRSTU]
andps xmm0, xmmword [0x1401ca6b0]
orps xmm0, xmm1
movups xmmword [rbp - 0x1f], xmm0
xor byte [rbp - 0xf], 0x56
xor byte [rbp - 0xe], 0x57
xor byte [rbp - 0xd], 0x58
xor byte [rbp - 0xc], 0x59
xor byte [rbp - 0xb], 0x5a
xor byte [rbp - 0xa], 0x5b
xor byte [rbp - 9], 0x5c
xor byte [rbp - 8], 0x5d
lea rcx, [rbp - 0x30]
call fcn.140052f70
movabs r14, 0x41a0000043340000
mov qword [rbp - 0x38], r14
movups xmm0, xmmword [0x1401ca186]
movaps xmmword [rbp - 0x30], xmm0
mov al, byte [0x1401ca196]
mov byte [rbp - 0x20], al
mov byte [rbp - 0x30], 0x52
movups xmm0, xmmword [rbp - 0x2f]
xorps xmm0, xmmword [str.6789:_____ABCDE]
movups xmmword [rbp - 0x2f], xmm0
lea rdx, [0x140275240]
lea rcx, [rbp - 0x30]
lea r8, [rbp - 0x38]
call fcn.14007a130
mov ecx, 0x80
call fcn.140042720
test al, al
je 0x14002e27d
movups xmm0, xmmword [0x1401ca197]
movaps xmmword [rbp - 0x30], xmm0
movups xmm0, xmmword [0x1401ca1a7]
movaps xmmword [rbp - 0x20], xmm0
movups xmm0, xmmword [0x1401ca1b7]
movaps xmmword [rbp - 0x10], xmm0
mov eax, dword [0x1401ca1c6]
mov dword [rbp - 1], eax
mov byte [rbp - 0x30], 0x52
movups xmm0, xmmword [rbp - 0x2f]
movaps xmm1, xmm0
andnps xmm1, xmmword [str.6789:_____ABCDE]
andps xmm0, xmmword [0x1401ca690]
orps xmm0, xmm1
movups xmmword [rbp - 0x2f], xmm0
movups xmm0, xmmword [rbp - 0x1f]
movaps xmm1, xmm0
andnps xmm1, xmmword [str.FGHIJKLMNOPQRSTU]
andps xmm0, xmmword [0x1401ca6b0]
orps xmm0, xmm1
movups xmmword [rbp - 0x1f], xmm0
movups xmm0, xmmword [rbp - 0xf]
movaps xmm1, xmm0
andnps xmm1, xmmword [str.VWXYZ____abcde]
andps xmm0, xmmword [0x1401ca720]
orps xmm0, xmm1
movups xmmword [rbp - 0xf], xmm0
xor byte [rbp + 1], 0x66
xor byte [rbp + 2], 0x67
lea rcx, [rbp - 0x30]
call fcn.140052f70
mov qword [rbp - 0x38], r14
cmp dword [0x14027d89c], 0xa
jl 0x14002e2ba
mov eax, dword [0x14027d898]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
je 0x14002e2ba
mov rax, qword [0x1401ca1d1]
mov rcx, qword [0x1401ca1ca]
nop dword [rax]
mov qword [rbp - 0x29], rax
mov qword [rbp - 0x30], rcx
jmp 0x14002e2b0
mov rax, qword [0x1401ca1d1]
mov qword [rbp - 0x29], rax
mov rax, qword [0x1401ca1ca]
mov qword [rbp - 0x30], rax
mov eax, dword [0x14027ee50]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete cl
cmp dword [0x14027ee54], 0xa
setl al
or al, cl
mov r8b, 0x76
xor ecx, ecx
nop word cs:[rax + rax]
nop dword [rax]
mov dl, 0xca
sub dl, cl
and dl, 0x9c
lea ebx, [rcx + 0x35]
and bl, 0x63
or bl, dl
xor bl, r8b
xor bl, 0x9c
test al, al
je 0x14002e320
mov byte [rbp + rcx - 0x30], bl
jmp 0x14002e334
mov byte [rbp + rcx - 0x30], bl
nop word cs:[rax + rax]
nop
test al, al
je 0x14002e330
add rcx, 1
cmp rcx, 0xf
je 0x14002e345
mov r8b, byte [rbp + rcx - 0x30]
jmp 0x14002e300
lea rdx, reloc.WS2_32.dll_recvfrom
lea rcx, [rbp - 0x30]
lea r8, [rbp - 0x38]
call fcn.14007a130
mov eax, dword [0x14027e8f8]
mov ecx, dword [0x14028e5f0]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14002f463
movabs rax, 0x41a0000042ae0000
mov qword [rbp - 0x30], rax
cmp dword [0x14027ee70], 0xa
jl 0x14002e3d2
mov eax, dword [0x14027ee74]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
je 0x14002e3d2
nop word cs:[rax + rax]
jmp 0x14002e3b0
cmp dword [0x14027ee70], 0xa
jl 0x14002e442
mov eax, dword [0x14027ee74]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
je 0x14002e442
jmp 0x14002e3d0
mov dword [rbp - 0x38], 0x6f6c6e55
mov word [rbp - 0x34], 0x6461
mov byte [rbp - 0x32], 0
lea rcx, [rbp - 0x38]
lea rdx, [rbp - 0x30]
call fcn.1400797f0
test al, al
jne 0x14002f4f0
movss xmm1, dword [0x1401186bc]
xorps xmm0, xmm0
call fcn.140057050
movabs rax, 0x41a0000042ae0000
mov qword [rbp - 0x30], rax
cmp dword [0x14027ee70], 0xa
jl 0x14002e882
mov eax, dword [0x14027ee74]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
je 0x14002e882
nop dword [rax + rax]
jmp 0x14002e440
mov dword [rbp - 0x30], 0x62616e45
mov word [rbp - 0x2c], 0x656c
mov byte [rbp - 0x2a], 0
lea rdx, [0x14027520c]
lea rcx, [rbp - 0x30]
call fcn.14007aed0
movss xmm1, dword [0x1401186bc]
xorps xmm0, xmm0
call fcn.140057050
movabs rsi, 0x41a0000043340000
mov qword [rbp - 0x30], rsi
mov byte [rbp - 0x38], 0
lea rdx, [0x14027523c]
lea rcx, [rbp - 0x38]
lea r8, [rbp - 0x30]
call fcn.14007a130
mov ecx, 0x80
call fcn.140042720
test al, al
je 0x14002e545
movups xmm0, xmmword [0x1401ca020]
movaps xmmword [rbp - 0x30], xmm0
movups xmm0, xmmword [0x1401ca030]
movaps xmmword [rbp - 0x20], xmm0
movups xmm0, xmmword [0x1401ca03e]
movups xmmword [rbp - 0x12], xmm0
mov byte [rbp - 0x30], 0x4b
movups xmm0, xmmword [rbp - 0x2f]
movaps xmm1, xmm0
andnps xmm1, xmmword [str.6789:_____ABCDE]
andps xmm0, xmmword [0x1401ca690]
orps xmm0, xmm1
movups xmmword [rbp - 0x2f], xmm0
movups xmm0, xmmword [rbp - 0x1f]
movaps xmm1, xmm0
andnps xmm1, xmmword [str.FGHIJKLMNOPQRSTU]
andps xmm0, xmmword [0x1401ca6b0]
orps xmm0, xmm1
movups xmmword [rbp - 0x1f], xmm0
xor byte [rbp - 0xf], 0x56
xor byte [rbp - 0xe], 0x57
xor byte [rbp - 0xd], 0x58
xor byte [rbp - 0xc], 0x59
xor byte [rbp - 0xb], 0x5a
xor byte [rbp - 0xa], 0x5b
xor byte [rbp - 9], 0x5c
xor byte [rbp - 8], 0x5d
xor byte [rbp - 7], 0x5e
xor byte [rbp - 6], 0x5f
xor byte [rbp - 5], 0x60
xor byte [rbp - 4], 0x61
xor byte [rbp - 3], 0x62
lea rcx, [rbp - 0x30]
call fcn.140052f70
movabs rax, 0x65726966706948
mov qword [rbp - 0x30], rax
lea rdx, [0x14027520f]
lea rcx, [rbp - 0x30]
call fcn.14007aed0
movss xmm1, dword [0x1401186bc]
xorps xmm0, xmm0
call fcn.140057050
mov qword [rbp - 0x38], rsi
movzx eax, word [0x1401ca056]
mov word [rbp - 0x28], ax
mov rax, qword [0x1401ca04e]
mov qword [rbp - 0x30], rax
mov eax, dword [0x14027ee78]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete al
cmp dword [0x14027ee7c], 0xa
setl r10b
or r10b, al
mov r9d, dword [0x14027ee80]
mov r11d, dword [0x14027ee84]
lea r8d, [r9 - 1]
test r10b, r10b
je 0x14002e8b4
mov r14d, r8d
imul r14d, r9d
and r14d, 1
sete al
cmp r11d, 0xa
setl r15b
or r15b, al
mov edi, 0xca
xor esi, esi
jmp 0x14002e5fc
add edi, 0xffffffff
mov rsi, rcx
cmp rcx, 0xa
je 0x14002e666
lea rax, [rsi + 0x35]
test r15b, r15b
je 0x14002e610
movzx ebx, byte [rbp + rsi - 0x30]
jmp 0x14002e630
mov ecx, 0xca
sub rcx, rsi
movzx edx, byte [rbp + rsi - 0x30]
mov ebx, eax
jmp 0x14002e650
movzx edx, bl
mov ecx, edx
not ecx
mov ebx, eax
and ebx, ecx
and edx, edi
or edx, ebx
mov byte [rbp + rsi - 0x30], dl
lea rcx, [rsi + 1]
test r15b, r15b
jne 0x14002e5f0
mov ebx, eax
mov ecx, edi
and ecx, 0x94
and ebx, 0x6b
or ebx, ecx
xor bl, dl
xor bl, 0x94
mov byte [rbp + rsi - 0x30], bl
jmp 0x14002e630
test r10b, r10b
jne 0x14002e70a
test r14d, r14d
sete al
cmp r11d, 0xa
setl r14b
or r14b, al
mov ebx, 0xca
xor edi, edi
jmp 0x14002e6a0
add ebx, 0xffffffff
mov rdi, rcx
cmp rcx, 0xa
je 0x14002e5c8
lea rax, [rdi + 0x35]
test r14b, r14b
je 0x14002e6b0
movzx esi, byte [rbp + rdi - 0x30]
jmp 0x14002e6d0
mov ecx, 0xca
sub rcx, rdi
movzx edx, byte [rbp + rdi - 0x30]
mov esi, eax
jmp 0x14002e6f1
movzx edx, sil
mov ecx, edx
not ecx
mov esi, eax
and esi, ecx
and edx, ebx
or edx, esi
mov byte [rbp + rdi - 0x30], dl
lea rcx, [rdi + 1]
test r14b, r14b
jne 0x14002e690
mov esi, eax
mov ecx, ebx
and ecx, 0x94
and esi, 0x6b
or esi, ecx
xor sil, dl
xor sil, 0x94
mov byte [rbp + rdi - 0x30], sil
jmp 0x14002e6d0
lea rdx, [0x14027524c]
lea rcx, [rbp - 0x30]
lea r8, [rbp - 0x38]
call fcn.14007a130
mov ecx, 0x80
call fcn.140042720
test al, al
je 0x14002e7a0
movups xmm0, xmmword [0x1401ca058]
movaps xmmword [rbp - 0x30], xmm0
movups xmm0, xmmword [0x1401ca068]
movaps xmmword [rbp - 0x20], xmm0
movups xmm0, xmmword [0x1401ca073]
movups xmmword [rbp - 0x15], xmm0
mov byte [rbp - 0x30], 0x4b
movups xmm0, xmmword [rbp - 0x2f]
xorps xmm0, xmmword [str.6789:_____ABCDE]
movups xmmword [rbp - 0x2f], xmm0
movups xmm0, xmmword [rbp - 0x1f]
xorps xmm0, xmmword [str.FGHIJKLMNOPQRSTU]
movups xmmword [rbp - 0x1f], xmm0
xor byte [rbp - 0xf], 0x56
xor byte [rbp - 0xe], 0x57
xor byte [rbp - 0xd], 0x58
xor byte [rbp - 0xc], 0x59
xor byte [rbp - 0xb], 0x5a
xor byte [rbp - 0xa], 0x5b
xor byte [rbp - 9], 0x5c
xor byte [rbp - 8], 0x5d
xor byte [rbp - 7], 0x5e
xor byte [rbp - 6], 0x5f
lea rcx, [rbp - 0x30]
call fcn.140052f70
mov rax, qword [0x1401ca083]
mov qword [rbp - 0x30], rax
mov rax, qword [0x1401ca089]
mov qword [rbp - 0x2a], rax
mov byte [rbp - 0x30], 0x53
xor byte [rbp - 0x2f], 0x36
xor byte [rbp - 0x2e], 0x37
xor byte [rbp - 0x2d], 0x38
xor byte [rbp - 0x2c], 0x39
xor byte [rbp - 0x2b], 0x3a
xor byte [rbp - 0x2a], 0x3b
xor byte [rbp - 0x29], 0x3c
xor byte [rbp - 0x28], 0x3d
xor byte [rbp - 0x27], 0x3e
xor byte [rbp - 0x26], 0x3f
xor byte [rbp - 0x25], 0x40
xor byte [rbp - 0x24], 0x41
xor byte [rbp - 0x23], 0x42
lea rdx, [0x14027520d]
lea rcx, [rbp - 0x30]
call fcn.14007aed0
movabs rax, 0x657269666f747541
mov qword [rbp - 0x30], rax
mov byte [rbp - 0x28], 0
lea rdx, [0x14027520e]
lea rcx, [rbp - 0x30]
call fcn.14007aed0
movabs rax, 0x617a696e616d7548
mov qword [rbp - 0x30], rax
mov dword [rbp - 0x28], 0x6e6f6974
mov byte [rbp - 0x24], 0
lea rdx, [0x140275210]
lea rcx, [rbp - 0x30]
call fcn.14007aed0
call fcn.14007c990
mov rdx, qword [0x14027e8d0]
mov rax, qword [rdx]
mov rcx, qword [rdx + 0x18]
cmp dword [0x14027ee70], 0xa
jl 0x14002e8c4
mov ebx, dword [0x14027ee74]
lea edi, [rbx - 1]
imul edi, ebx
and edi, 1
je 0x14002e8c4
nop word cs:[rax + rax]
jmp 0x14002e880
mov dword [rbp - 0x38], 0x74737543
mov word [rbp - 0x34], 0x6d6f
mov byte [rbp - 0x32], 0
lea rcx, [rbp - 0x38]
lea rdx, [rbp - 0x30]
call fcn.1400797f0
test al, al
je 0x14002ea87
mov byte [0x14027e8fc], 1
jmp 0x14002ea94
mov r14d, r8d
imul r14d, r9d
and r14d, 1
jmp 0x14002e66f
cmp rcx, 0x10
cmovae rdx, rax
mov dword [rbp - 0x30], 0x70616557
mov word [rbp - 0x2c], 0x6e6f
mov byte [rbp - 0x2a], 0
lea rcx, [rbp - 0x30]
mov r8d, 1
call fcn.14007ca10
test al, al
je 0x14002ecaa
xor edi, edi
jmp 0x14002e8fb
add edi, 1
cmp edi, 0xc
jge 0x14002eca5
mov dword [rbp - 0x40], edi
movsxd rsi, edi
shl rsi, 5
lea rdx, [0x14027e520]
lea rbx, [rdx + rsi]
mov r15, qword [0x14027e8d0]
mov eax, dword [0x14027ceac]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete al
cmp dword [0x14027cea8], 0xa
setl r14b
or r14b, al
mov rdi, qword [rsi + rdx + 0x10]
mov r13, qword [r15 + 0x10]
mov qword [rbp - 0x48], rsi
lea r12, [rsi + rdx]
add r12, 0x18
jmp 0x14002e973
mov r8, rdi
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
sete sil
test r14b, r14b
jne 0x14002e9a7
cmp r13, rdi
jne 0x14002e9a0
cmp qword [r15 + 0x18], 0x10
mov rcx, r15
jb 0x14002e985
mov rcx, qword [r15]
cmp qword [r12], 0x10
mov rdx, rbx
jb 0x14002e960
mov rdx, qword [rbx]
jmp 0x14002e960
xor esi, esi
test r14b, r14b
je 0x14002e973
mov qword [rbp - 0x30], 0
lea rax, [0x14027e520]
mov rcx, qword [rbp - 0x48]
cmp qword [rcx + rax + 0x18], 0x10
mov rcx, rbx
jb 0x14002e9c8
mov rcx, qword [rbx]
mov edx, esi
xor r8d, r8d
lea r9, [rbp - 0x30]
call fcn.14007d6c0
mov edi, dword [rbp - 0x40]
test al, al
je 0x14002ea74
cmp qword [r12], 0x10
jb 0x14002e9eb
mov rbx, qword [rbx]
mov r14, qword [0x14027e8d0]
mov rcx, rbx
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
mov r13, rax
mov rax, qword [r14 + 0x18]
cmp rax, r13
jae 0x14002ea16
mov rcx, r14
mov rdx, r13
mov r9, rbx
call fcn.140038ba0
jmp 0x14002ea74
mov r12, r14
cmp rax, 0x10
jb 0x14002ea22
mov r12, qword [r14]
mov qword [r14 + 0x10], r13
mov rcx, r12
mov rdx, rbx
mov r8, r13
call sub.VCRUNTIME140.dll_memmove
cmp dword [0x14027e01c], 0xa
jl 0x14002ea4e
mov eax, dword [0x14027e018]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
jne 0x14002ea6d
mov byte [r12 + r13], 0
cmp dword [0x14027e01c], 0xa
jl 0x14002ea74
mov eax, dword [0x14027e018]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
je 0x14002ea74
mov byte [r12 + r13], 0
jmp 0x14002ea4e
test sil, sil
je 0x14002e8f8
call fcn.140056830
jmp 0x14002e8f8
cmp byte [0x14027e8fc], 1
jne 0x14002fa3e
mov rdx, qword [0x14027e8b0]
movzx eax, word [0x1401ca1e1]
mov word [rbp - 0x28], ax
mov rax, qword [0x1401ca1d9]
mov qword [rbp - 0x30], rax
mov eax, dword [0x14027ee78]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete al
cmp dword [0x14027ee7c], 0xa
setl r10b
or r10b, al
mov r9d, dword [0x14027ee80]
mov r11d, dword [0x14027ee84]
lea r8d, [r9 - 1]
test r10b, r10b
je 0x14002ec95
mov r15d, r8d
imul r15d, r9d
and r15d, 1
sete al
cmp r11d, 0xa
setl r12b
or r12b, al
mov esi, 0xca
xor eax, eax
jmp 0x14002eb1c
add esi, 0xffffffff
mov rax, rcx
cmp rcx, 0xa
je 0x14002eb8a
lea r13, [rax + 0x35]
test r12b, r12b
je 0x14002eb30
movzx ecx, byte [rbp + rax - 0x30]
jmp 0x14002eb50
mov ebx, 0xca
sub rbx, rax
movzx edi, byte [rbp + rax - 0x30]
mov ecx, r13d
jmp 0x14002eb73
movzx edi, cl
mov ecx, edi
not ecx
mov ebx, r13d
and ebx, ecx
and edi, esi
or edi, ebx
mov byte [rbp + rax - 0x30], dil
lea rcx, [rax + 1]
test r12b, r12b
jne 0x14002eb10
mov ecx, r13d
mov ebx, esi
and ebx, 0x94
and ecx, 0x6b
or ecx, ebx
xor cl, dil
xor cl, 0x94
mov byte [rbp + rax - 0x30], cl
jmp 0x14002eb50
test r10b, r10b
jne 0x14002ec28
test r15d, r15d
sete al
cmp r11d, 0xa
setl r15b
or r15b, al
mov edi, 0xca
xor eax, eax
jmp 0x14002ebc0
add edi, 0xffffffff
mov rax, rcx
cmp rcx, 0xa
je 0x14002eaec
lea r12, [rax + 0x35]
test r15b, r15b
je 0x14002ebd0
movzx ecx, byte [rbp + rax - 0x30]
jmp 0x14002ebf0
mov esi, 0xca
sub rsi, rax
movzx ebx, byte [rbp + rax - 0x30]
mov ecx, r12d
jmp 0x14002ec12
movzx ebx, cl
mov ecx, ebx
not ecx
mov esi, r12d
and esi, ecx
and ebx, edi
or ebx, esi
mov byte [rbp + rax - 0x30], bl
lea rcx, [rax + 1]
test r15b, r15b
jne 0x14002ebb0
mov ecx, r12d
mov esi, edi
and esi, 0x94
and ecx, 0x6b
or ecx, esi
xor cl, bl
xor cl, 0x94
mov byte [rbp + rax - 0x30], cl
jmp 0x14002ebf0
lea rcx, [rbp - 0x30]
mov r8d, Ordinal_46
call fcn.14004ae50
movabs rax, 0x42fa000043480000
mov qword [rbp - 0x30], rax
lea rcx, [rbp - 0x30]
xor edx, edx
call fcn.140056690
mov qword [rbp - 0x38], r14
mov rax, qword [0x1401ca1f0]
mov qword [rbp - 0x23], rax
movups xmm0, xmmword [0x1401ca1e3]
mov eax, dword [0x14027ee90]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete cl
cmp dword [0x14027ee94], 0xa
movaps xmmword [rbp - 0x30], xmm0
setl al
or al, cl
cmp al, 1
je 0x14002f79c
jmp 0x14002f7c3
mov r15d, r8d
imul r15d, r9d
and r15d, 1
jmp 0x14002eb93
call fcn.14007d670
mov rdx, qword [0x14027e8d0]
cmp qword [rdx + 0x38], 0x10
jb 0x14002ecbe
mov rdx, qword [rdx + 0x20]
jmp 0x14002ecc2
add rdx, 0x20
mov dword [rbp - 0x30], 0x706f6353
mov word [rbp - 0x2c], 0x65
lea rcx, [rbp - 0x30]
mov r8d, 1
call fcn.14007ca10
test al, al
je 0x14002ee97
xor edi, edi
jmp 0x14002eced
add edi, 1
cmp edi, 5
jge 0x14002ee92
mov dword [rbp - 0x48], edi
movsxd rdi, edi
shl rdi, 5
lea rdx, [0x14027e6a0]
lea rbx, [rdx + rdi]
mov r14, qword [0x14027e8d0]
lea r13, [r14 + 0x20]
mov eax, dword [0x14027ceac]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete al
cmp dword [0x14027cea8], 0xa
setl r15b
or r15b, al
lea rax, [rdi + rdx]
add rax, 0x10
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x50], rdi
mov rdi, qword [rdi + rdx + 0x10]
mov r12, qword [r14 + 0x30]
jmp 0x14002ed73
mov r8, rdi
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
sete sil
test r15b, r15b
jne 0x14002eda7
cmp r12, rdi
jne 0x14002eda0
cmp qword [r14 + 0x38], 0x10
mov rcx, r13
jb 0x14002ed86
mov rcx, qword [r14 + 0x20]
mov rax, qword [rbp - 0x40]
cmp qword [rax + 8], 0x10
mov rdx, rbx
jb 0x14002ed60
mov rdx, qword [rbx]
jmp 0x14002ed60
xor esi, esi
test r15b, r15b
je 0x14002ed73
mov qword [rbp - 0x30], 0
lea rax, [0x14027e6a0]
mov rcx, qword [rbp - 0x50]
cmp qword [rcx + rax + 0x18], 0x10
mov rcx, rbx
jb 0x14002edc8
mov rcx, qword [rbx]
mov edx, esi
xor r8d, r8d
lea r9, [rbp - 0x30]
call fcn.14007d6c0
mov edi, dword [rbp - 0x48]
test al, al
je 0x14002ee7f
mov rax, qword [0x14027e8d0]
lea r14, [rax + 0x20]
cmp rbx, r14
je 0x14002ee7f
mov rcx, qword [rbp - 0x40]
cmp qword [rcx + 8], 0x10
jb 0x14002ee03
mov rbx, qword [rbx]
mov rcx, qword [rbp - 0x40]
mov r12, qword [rcx]
mov rcx, qword [rax + 0x38]
cmp rcx, r12
jae 0x14002ee23
mov rcx, r14
mov rdx, r12
mov r9, rbx
call fcn.140038ba0
jmp 0x14002ee7f
cmp rcx, 0x10
jb 0x14002ee2d
mov r14, qword [rax + 0x20]
mov qword [rax + 0x30], r12
mov rcx, r14
mov rdx, rbx
mov r8, r12
call sub.VCRUNTIME140.dll_memmove
cmp dword [0x14027e01c], 0xa
jl 0x14002ee59
mov eax, dword [0x14027e018]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
jne 0x14002ee78
mov byte [r14 + r12], 0
cmp dword [0x14027e01c], 0xa
jl 0x14002ee7f
mov eax, dword [0x14027e018]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
je 0x14002ee7f
mov byte [r14 + r12], 0
jmp 0x14002ee59
test sil, sil
je 0x14002ecea
call fcn.140056830
jmp 0x14002ecea
call fcn.14007d670
mov rdx, qword [0x14027e8d0]
mov rax, qword [rdx + 0x40]
mov rcx, qword [rdx + 0x58]
cmp dword [0x14027ee70], 0xa
jl 0x14002eec2
mov ebx, dword [0x14027ee74]
lea edi, [rbx - 1]
imul edi, ebx
and edi, 1
je 0x14002eec2
jmp 0x14002eec0
add rdx, 0x40
cmp rcx, 0x10
cmovae rdx, rax
mov dword [rbp - 0x30], 0x72726142
mov word [rbp - 0x2c], 0x6c65
mov byte [rbp - 0x2a], 0
lea rcx, [rbp - 0x30]
mov r8d, 1
call fcn.14007ca10
test al, al
je 0x14002f0a4
xor eax, eax
jmp 0x14002ef00
mov eax, dword [rbp - 0x50]
add eax, 1
cmp eax, 3
jge 0x14002f09f
mov dword [rbp - 0x50], eax
movsxd rdi, eax
shl rdi, 5
lea rdx, [0x14027e740]
lea rbx, [rdx + rdi]
mov r14, qword [0x14027e8d0]
lea r13, [r14 + 0x40]
mov eax, dword [0x14027ceac]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete al
cmp dword [0x14027cea8], 0xa
setl r15b
or r15b, al
lea rax, [rdi + rdx]
add rax, 0x10
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x48], rdi
mov rdi, qword [rdi + rdx + 0x10]
mov r12, qword [r14 + 0x50]
jmp 0x14002ef83
mov r8, rdi
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
sete sil
test r15b, r15b
jne 0x14002efb7
cmp r12, rdi
jne 0x14002efb0
cmp qword [r14 + 0x58], 0x10
mov rcx, r13
jb 0x14002ef96
mov rcx, qword [r14 + 0x40]
mov rax, qword [rbp - 0x40]
cmp qword [rax + 8], 0x10
mov rdx, rbx
jb 0x14002ef70
mov rdx, qword [rbx]
jmp 0x14002ef70
xor esi, esi
test r15b, r15b
je 0x14002ef83
mov qword [rbp - 0x30], 0
lea rax, [0x14027e740]
mov rcx, qword [rbp - 0x48]
cmp qword [rcx + rax + 0x18], 0x10
mov rcx, rbx
jb 0x14002efd8
mov rcx, qword [rbx]
mov edx, esi
xor r8d, r8d
lea r9, [rbp - 0x30]
call fcn.14007d6c0
test al, al
je 0x14002f08c
mov rax, qword [0x14027e8d0]
lea rdi, [rax + 0x40]
cmp rbx, rdi
je 0x14002f08c
mov rcx, qword [rbp - 0x40]
cmp qword [rcx + 8], 0x10
jb 0x14002f010
mov rbx, qword [rbx]
mov rcx, qword [rbp - 0x40]
mov r12, qword [rcx]
mov rcx, qword [rax + 0x58]
cmp rcx, r12
jae 0x14002f030
mov rcx, rdi
mov rdx, r12
mov r9, rbx
call fcn.140038ba0
jmp 0x14002f08c
cmp rcx, 0x10
jb 0x14002f03a
mov rdi, qword [rax + 0x40]
mov qword [rax + 0x50], r12
mov rcx, rdi
mov rdx, rbx
mov r8, r12
call sub.VCRUNTIME140.dll_memmove
cmp dword [0x14027e01c], 0xa
jl 0x14002f066
mov eax, dword [0x14027e018]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
jne 0x14002f085
mov byte [rdi + r12], 0
cmp dword [0x14027e01c], 0xa
jl 0x14002f08c
mov eax, dword [0x14027e018]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
je 0x14002f08c
mov byte [rdi + r12], 0
jmp 0x14002f066
test sil, sil
je 0x14002eefa
call fcn.140056830
jmp 0x14002eefa
call fcn.14007d670
mov rax, qword [0x1401ca0a1]
mov qword [rbp - 0x20], rax
movups xmm0, xmmword [0x1401ca091]
movaps xmmword [rbp - 0x30], xmm0
mov eax, dword [0x14027ee98]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete cl
cmp dword [0x14027ee9c], 0xa
setl al
or al, cl
mov r8b, reloc.WS2_32.dll_WSACleanup
xor ecx, ecx
mov dl, 0xa
sub dl, cl
and dl, 0x15
lea ebx, [rcx + 0x35]
and bl, 0xea
or bl, dl
xor bl, r8b
xor bl, 0x15
test al, al
je 0x14002f0fc
mov byte [rbp + rcx - 0x30], bl
jmp 0x14002f104
mov byte [rbp + rcx - 0x30], bl
test al, al
je 0x14002f100
add rcx, 1
cmp rcx, 0x18
je 0x14002f115
mov r8b, byte [rbp + rcx - 0x30]
jmp 0x14002f0dd
lea rdx, reloc.WS2_32.dll_accept
lea rcx, [rbp - 0x30]
call fcn.14007aed0
cmp byte [reloc.WS2_32.dll_accept], 0
je 0x14002f1b7
movabs rax, 0x41a0000042ae0000
mov qword [rbp - 0x38], rax
movabs rax, 0x6766632065766153
mov qword [rbp - 0x30], rax
mov byte [rbp - 0x28], 0
lea rcx, [rbp - 0x30]
lea rdx, [rbp - 0x38]
call fcn.1400797f0
test al, al
je 0x14002f168
call section..text
movss xmm1, dword [0x1401186bc]
xorps xmm0, xmm0
call fcn.140057050
movabs rax, 0x41a0000042ae0000
mov qword [rbp - 0x38], rax
movabs rax, 0x6766632064616f4c
mov qword [rbp - 0x30], rax
mov byte [rbp - 0x28], 0
lea rcx, [rbp - 0x30]
lea rdx, [rbp - 0x38]
call fcn.1400797f0
test al, al
je 0x14002fa3e
call fcn.1400050b0
jmp 0x14002fa3e
mov dword [rbp - 0x38], 0x66322e25
mov byte [rbp - 0x34], 0
mov eax, dword [0x14027eea0]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete cl
cmp dword [0x14027eea4], 0xa
setl al
or al, cl
jne 0x14002f1eb
xor ecx, ecx
test cl, 1
mov ecx, eax
je 0x14002f1e4
movabs rax, 0x76697469736e6553
mov qword [rbp - 0x30], rax
mov dword [rbp - 0x28], 0x797469
lea rax, [rbp - 0x38]
mov qword [rsp + 0x20], rax
mov dword [rsp + 0x28], 0
lea rdx, [0x140275220]
lea rcx, [rbp - 0x30]
movss xmm3, dword [0x1401ca6c0]
xorps xmm2, xmm2
call fcn.140087250
mov ecx, 0x80
call fcn.140042720
test al, al
je 0x14002f2b4
movups xmm0, xmmword [0x1401ca0a9]
movaps xmmword [rbp - 0x30], xmm0
movups xmm0, xmmword [0x1401ca0b9]
movaps xmmword [rbp - 0x20], xmm0
mov rax, qword [0x1401ca0c7]
mov qword [rbp - 0x12], rax
mov byte [rbp - 0x30], Ordinal_79
movups xmm0, xmmword [rbp - 0x2f]
movaps xmm1, xmm0
andnps xmm1, xmmword [str.6789:_____ABCDE]
andps xmm0, xmmword [0x1401ca690]
orps xmm0, xmm1
movups xmmword [rbp - 0x2f], xmm0
movups xmm0, xmmword [rbp - 0x1f]
movaps xmm1, xmm0
andnps xmm1, xmmword [str.FGHIJKLMNOPQRSTU]
andps xmm0, xmmword [0x1401ca6b0]
orps xmm0, xmm1
movups xmmword [rbp - 0x1f], xmm0
xor byte [rbp - 0xf], 0x56
xor byte [rbp - 0xe], 0x57
xor byte [rbp - 0xd], 0x58
xor byte [rbp - 0xc], 0x59
xor byte [rbp - 0xb], 0x5a
lea rcx, [rbp - 0x30]
call fcn.140052f70
mov dword [rbp - 0x38], 0x66322e25
mov byte [rbp - 0x34], 0
movups xmm0, xmmword [0x1401ca0cf]
movaps xmmword [rbp - 0x30], xmm0
mov byte [rbp - 0x30], 0x41
mov eax, 2
mov cl, reloc.WLDAP32.dll_Ordinal_200
movzx edx, byte [rbp + rax - 0x31]
lea ebx, [rcx + 1]
and bl, dl
not dl
lea edi, [rax + 0x34]
and dil, dl
or bl, dil
mov byte [rbp + rax - 0x31], bl
cmp rax, 0x10
je 0x14002f315
movzx edx, byte [rbp + rax - 0x30]
mov ebx, edx
not bl
lea edi, [rax + 0x35]
and dil, bl
and dl, cl
or dl, dil
mov byte [rbp + rax - 0x30], dl
add rax, 2
add cl, 0xfe
jmp 0x14002f2d5
lea rax, [rbp - 0x38]
mov qword [rsp + 0x20], rax
mov dword [rsp + 0x28], 0
lea rdx, [0x140275224]
lea r14, [rbp - 0x30]
movss xmm3, dword [0x1401ca6c0]
xorps xmm2, xmm2
mov rcx, r14
call fcn.140087250
mov ecx, 0x80
call fcn.140042720
test al, al
je 0x14002f3c2
movups xmm0, xmmword [0x1401ca0df]
movaps xmmword [rbp - 0x30], xmm0
movups xmm0, xmmword [0x1401ca0ef]
movaps xmmword [rbp - 0x20], xmm0
movups xmm0, xmmword [0x1401ca0f9]
movups xmmword [rbp - 0x16], xmm0
mov byte [rbp - 0x30], Ordinal_79
movups xmm0, xmmword [rbp - 0x2f]
xorps xmm0, xmmword [str.6789:_____ABCDE]
movups xmmword [rbp - 0x2f], xmm0
movups xmm0, xmmword [rbp - 0x1f]
xorps xmm0, xmmword [str.FGHIJKLMNOPQRSTU]
movups xmmword [rbp - 0x1f], xmm0
xor byte [rbp - 0xf], 0x56
xor byte [rbp - 0xe], 0x57
xor byte [rbp - 0xd], 0x58
xor byte [rbp - 0xc], 0x59
xor byte [rbp - 0xb], 0x5a
xor byte [rbp - 0xa], 0x5b
xor byte [rbp - 9], 0x5c
xor byte [rbp - 8], 0x5d
xor byte [rbp - 7], 0x5e
lea rcx, [rbp - 0x30]
call fcn.140052f70
cmp dword [0x14027d804], 0xa
jl 0x14002f3f8
mov eax, dword [0x14027d800]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
je 0x14002f3f8
mov al, byte [reloc.WS2_32.dll_gethostname]
mov ecx, dword [0x1401ca109]
nop dword [rax + rax]
mov byte [rbp - 0x2c], al
mov dword [rbp - 0x30], ecx
jmp 0x14002f3f0
mov dword [rbp - 0x30], 0x66322e25
mov byte [rbp - 0x2c], 0
mov dword [rbp - 0x38], 0x38617973
mov eax, dword [0x14027d810]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete al
cmp dword [0x14027d814], 0xa
setl r8b
or r8b, al
mov r10d, dword [0x14027d968]
mov r9d, dword [0x14027d96c]
je 0x14002f449
mov r11b, reloc.WS2_32.dll_WSAStartup
mov al, 0x79
mov dl, 0x61
mov sil, gethostname
jmp 0x14002f506
lea edi, [r10 - 1]
imul edi, r10d
and edi, 1
mov r11b, reloc.WS2_32.dll_WSAStartup
mov al, 0x79
mov dl, 0x61
mov sil, gethostname
jmp 0x14002f54d
lea rcx, [0x14027e8f8]
call fcn.1400c4998
cmp dword [0x14027e8f8], 0xffffffff
jne 0x14002e37e
movups xmm0, xmmword [str.fRTUeoNGh._B]
movaps xmmword [rbp - 0x30], xmm0
movups xmm0, xmmword [0x1401ca2f6]
movups xmmword [rbp - 0x24], xmm0
mov word [rbp - 0x30], 0x53
xor byte [rbp - 0x2e], 0x36
xor byte [rbp - 0x2c], 0x37
xor byte [rbp - 0x2a], 0x38
xor byte [rbp - 0x28], 0x39
xor byte [rbp - 0x26], 0x3a
xor byte [rbp - 0x24], 0x3b
xor byte [rbp - 0x22], 0x3c
xor byte [rbp - 0x20], 0x3d
xor byte [rbp - 0x1e], 0x3e
xor byte [rbp - 0x1c], 0x3f
xor byte [rbp - 0x1a], 0x40
xor byte [rbp - 0x18], 0x41
xor byte [rbp - 0x16], 0x42
lea rcx, [rbp - 0x30]
xor edx, edx
call qword [sym.imp.USER32.dll_FindWindowW]
mov qword [0x14027e8f0], rax
lea rcx, [0x14027e8f8]
call fcn.1400c4a30
jmp 0x14002e37e
mov rdx, qword [0x14027e8f0]
mov cl, 1
call fcn.1400a8290
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
lea edi, [r10 - 1]
imul edi, r10d
and edi, 1
sete bl
cmp r9d, 0xa
setl cl
or cl, bl
nop dword [rax]
test cl, cl
je 0x14002f520
test sil, sil
je 0x14002f546
xor r11b, 0x35
mov byte [rbp - 0x38], r11b
xor al, 0x36
mov byte [rbp - 0x37], al
xor dl, 0x37
mov byte [rbp - 0x36], dl
xor sil, 0x38
mov byte [rbp - 0x35], sil
jmp 0x14002f548
xor esi, esi
test r8b, r8b
jne 0x14002f58d
test edi, edi
sete bl
cmp r9d, 0xa
setl cl
or cl, bl
nop dword [rax + rax]
test cl, cl
je 0x14002f560
test sil, sil
je 0x14002f586
xor r11b, 0x35
mov byte [rbp - 0x38], r11b
xor al, 0x36
mov byte [rbp - 0x37], al
xor dl, 0x37
mov byte [rbp - 0x36], dl
xor sil, 0x38
mov byte [rbp - 0x35], sil
jmp 0x14002f506
xor esi, esi
jmp 0x14002f506
mov qword [rsp + 0x20], r14
mov dword [rsp + 0x28], 0
lea rdx, [0x140275228]
lea rsi, [rbp - 0x38]
movss xmm2, dword [0x1401ca6c4]
movss xmm3, dword [0x1401ca6c8]
mov rcx, rsi
call fcn.140087250
mov ecx, 0x80
call fcn.140042720
test al, al
je 0x14002f615
movups xmm0, xmmword [0x1401ca10e]
movaps xmmword [rbp - 0x30], xmm0
movups xmm0, xmmword [0x1401ca11e]
movaps xmmword [rbp - 0x20], xmm0
mov al, byte [0x1401ca12e]
mov byte [rbp - 0x10], al
mov byte [rbp - 0x30], Ordinal_79
movups xmm0, xmmword [rbp - 0x2f]
xorps xmm0, xmmword [str.6789:_____ABCDE]
movups xmmword [rbp - 0x2f], xmm0
movups xmm0, xmmword [rbp - 0x1f]
xorps xmm0, xmmword [str.FGHIJKLMNOPQRSTU]
movups xmmword [rbp - 0x1f], xmm0
lea rcx, [rbp - 0x30]
call fcn.140052f70
mov dword [rbp - 0x38], 0x66322e25
mov byte [rbp - 0x34], 0
cmp dword [0x14027d834], 0xa
jl 0x14002f659
mov eax, dword [0x14027d830]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
je 0x14002f659
mov al, byte [0x1401ca137]
mov rcx, qword [0x1401ca12f]
nop word [rax + rax]
mov byte [rbp - 0x28], al
mov qword [rbp - 0x30], rcx
jmp 0x14002f650
movabs rax, 0x656c616353204955
mov qword [rbp - 0x30], rax
mov byte [rbp - 0x28], 0
mov qword [rsp + 0x20], rsi
mov dword [rsp + 0x28], 0
lea rdx, [0x14027522c]
lea rcx, [rbp - 0x30]
movss xmm2, dword [0x1401ca6cc]
movss xmm3, dword [0x140117160]
call fcn.140087250
mov ecx, 0x80
call fcn.140042720
test al, al
je 0x14002f132
mov rax, qword [0x1401ca155]
mov qword [rbp - 0x13], rax
movups xmm0, xmmword [0x1401ca148]
movaps xmmword [rbp - 0x20], xmm0
movups xmm0, xmmword [0x1401ca138]
mov eax, dword [0x14027eec8]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete cl
cmp dword [0x14027eecc], 0xa
movaps xmmword [rbp - 0x30], xmm0
setl al
or al, cl
cmp al, 1
jne 0x14002f73d
movaps xmm0, xmmword [rbp - 0x30]
movaps xmm1, xmm0
andnps xmm1, xmmword [0x1401ca6d0]
andps xmm0, xmmword [0x1401ca6e0]
movaps xmm2, xmmword [rbp - 0x20]
orps xmm0, xmm1
movaps xmm1, xmm2
andnps xmm1, xmmword [str.EFGHIJKLMNOPQRST]
movaps xmmword [rbp - 0x30], xmm0
andps xmm2, xmmword [0x1401ca700]
orps xmm2, xmm1
movaps xmmword [rbp - 0x20], xmm2
xor byte [rbp - 0x10], 0x55
xor byte [rbp - 0xf], 0x56
xor byte [rbp - 0xe], 0x57
xor byte [rbp - 0xd], 0x58
xor byte [rbp - 0xc], 0x59
test al, al
jne 0x14002f78e
movaps xmm0, xmmword [rbp - 0x30]
movaps xmm1, xmm0
andnps xmm1, xmmword [0x1401ca6d0]
andps xmm0, xmmword [0x1401ca6e0]
movaps xmm2, xmmword [rbp - 0x20]
orps xmm0, xmm1
movaps xmm1, xmm2
andnps xmm1, xmmword [str.EFGHIJKLMNOPQRST]
movaps xmmword [rbp - 0x30], xmm0
andps xmm2, xmmword [0x1401ca700]
orps xmm2, xmm1
movaps xmmword [rbp - 0x20], xmm2
xor byte [rbp - 0x10], 0x55
xor byte [rbp - 0xf], 0x56
xor byte [rbp - 0xe], 0x57
xor byte [rbp - 0xd], 0x58
xor byte [rbp - 0xc], 0x59
jmp 0x14002f6ed
lea rcx, [rbp - 0x30]
call fcn.140052f70
jmp 0x14002f132
movaps xmm0, xmmword [rbp - 0x30]
xorps xmm0, xmmword [0x1401ca6d0]
movaps xmmword [rbp - 0x30], xmm0
xor byte [rbp - 0x20], 0x45
xor byte [rbp - 0x1f], 0x46
xor byte [rbp - 0x1e], 0x47
xor byte [rbp - 0x1d], 0x48
xor byte [rbp - 0x1c], 0x49
test al, al
jne 0x14002f7e8
movaps xmm0, xmmword [rbp - 0x30]
xorps xmm0, xmmword [0x1401ca6d0]
movaps xmmword [rbp - 0x30], xmm0
xor byte [rbp - 0x20], 0x45
xor byte [rbp - 0x1f], 0x46
xor byte [rbp - 0x1e], 0x47
xor byte [rbp - 0x1d], 0x48
xor byte [rbp - 0x1c], 0x49
jmp 0x14002f79c
lea rdx, [0x140275250]
lea rcx, [rbp - 0x30]
lea r8, [rbp - 0x38]
call fcn.14007a130
mov qword [rbp - 0x38], r14
movups xmm0, xmmword [0x1401ca1f8]
movaps xmmword [rbp - 0x30], xmm0
mov rax, qword [0x1401ca207]
mov qword [rbp - 0x21], rax
mov eax, dword [0x14027eed0]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete cl
cmp dword [0x14027eed4], 0xa
setl r8b
or r8b, cl
mov byte [rbp - 0x30], 0x53
cmp r8b, 1
jne 0x14002f930
mov ecx, 2
mov dl, reloc.WLDAP32.dll_Ordinal_200
cmp rcx, 0x18
je 0x14002f89a
movzx ebx, byte [rbp + rcx - 0x31]
lea edi, [rdx + 1]
and dil, bl
not bl
lea esi, [rcx + 0x34]
and sil, bl
or dil, sil
mov byte [rbp + rcx - 0x31], dil
test r8b, r8b
je 0x14002f930
movzx ebx, byte [rbp + rcx - 0x30]
mov eax, ebx
not al
lea edi, [rcx + 0x35]
and dil, al
and bl, dl
or bl, dil
mov byte [rbp + rcx - 0x30], bl
add rcx, 2
add dl, 0xfe
cmp rcx, 0x18
jne 0x14002f851
lea rdx, [0x140275254]
lea rcx, [rbp - 0x30]
lea r8, [rbp - 0x38]
call fcn.14007a130
mov qword [rbp - 0x38], r14
mov rax, qword [0x1401ca21f]
mov qword [rbp - 0x20], rax
movups xmm0, xmmword [0x1401ca20f]
movaps xmmword [rbp - 0x30], xmm0
mov eax, dword [0x14027ee98]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete cl
cmp dword [0x14027ee9c], 0xa
setl al
or al, cl
mov r8b, 0x77
xor ecx, ecx
mov dl, 0xa
sub dl, cl
and dl, 0x15
lea ebx, [rcx + 0x35]
and bl, 0xea
or bl, dl
xor bl, r8b
xor bl, 0x15
test al, al
je 0x14002f90a
mov byte [rbp + rcx - 0x30], bl
jmp 0x14002f914
mov byte [rbp + rcx - 0x30], bl
nop
test al, al
je 0x14002f910
add rcx, 1
cmp rcx, 0x18
je 0x14002f932
mov r8b, byte [rbp + rcx - 0x30]
jmp 0x14002f8eb
jmp 0x14002f930
lea rdx, [0x140275258]
lea rcx, [rbp - 0x30]
lea r8, [rbp - 0x38]
call fcn.14007a130
movups xmm0, xmmword [0x1401ca227]
movaps xmmword [rbp - 0x30], xmm0
movups xmm0, xmmword [0x1401ca230]
movups xmmword [rbp - 0x27], xmm0
mov byte [rbp - 0x30], 0x41
movups xmm0, xmmword [rbp - 0x2f]
xorps xmm0, xmmword [str.6789:_____ABCDE]
movups xmmword [rbp - 0x2f], xmm0
xor byte [rbp - 0x1f], 0x46
xor byte [rbp - 0x1e], 0x47
xor byte [rbp - 0x1d], 0x48
xor byte [rbp - 0x1c], 0x49
xor byte [rbp - 0x1b], 0x4a
xor byte [rbp - 0x1a], 0x4b
xor byte [rbp - 0x19], 0x4c
mov qword [rbp - 0x38], r14
xor byte [rbp - 0x18], 0x4d
lea rdx, [0x14027525c]
lea rcx, [rbp - 0x30]
lea r8, [rbp - 0x38]
call fcn.14007a130
mov qword [rbp - 0x38], r14
mov rax, qword [0x1401ca250]
mov qword [rbp - 0x20], rax
movups xmm0, xmmword [0x1401ca240]
movaps xmmword [rbp - 0x30], xmm0
mov eax, dword [0x14027ee98]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete cl
cmp dword [0x14027ee9c], 0xa
setl al
or al, cl
mov r8b, pe_nt_image_headers64
xor ecx, ecx
mov dl, 0xa
sub dl, cl
and dl, 0x15
lea ebx, [rcx + 0x35]
and bl, 0xea
or bl, dl
xor bl, r8b
xor bl, 0x15
test al, al
je 0x14002fa03
mov byte [rbp + rcx - 0x30], bl
jmp 0x14002fa14
mov byte [rbp + rcx - 0x30], bl
nop word [rax + rax]
test al, al
je 0x14002fa10
add rcx, 1
cmp rcx, 0x18
je 0x14002fa25
mov r8b, byte [rbp + rcx - 0x30]
jmp 0x14002f9e4
lea rdx, [0x140275260]
lea rcx, [rbp - 0x30]
lea r8, [rbp - 0x38]
call fcn.14007a130
call fcn.1400528c0
call fcn.1400528c0
jmp 0x14002fba5
mov byte [rdi + rsi], 0
cmp dword [0x14027e01c], 0xa
jl 0x14002fa6c
mov eax, dword [0x14027e018]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
je 0x14002fa6c
mov byte [rdi + rsi], 0
jmp 0x14002fa48
movzx eax, byte [0x14027520f]
shl rax, 5
lea rdx, [0x14027e7e0]
lea r9, [rdx + rax]
mov rcx, qword [0x14027e880]
cmp r9, rcx
je 0x14002fb0d
mov rsi, qword [rax + rdx + 0x10]
cmp qword [rax + rdx + 0x18], 0x10
jb 0x14002fa9e
mov r9, qword [r9]
mov rax, qword [rcx + 0x18]
cmp rax, rsi
jae 0x14002fab1
mov rdx, rsi
call fcn.140038ba0
jmp 0x14002fb0d
mov rdi, rcx
cmp rax, 0x10
jb 0x14002fabd
mov rdi, qword [rcx]
mov qword [rcx + 0x10], rsi
mov rcx, rdi
mov rdx, r9
mov r8, rsi
call sub.VCRUNTIME140.dll_memmove
cmp dword [0x14027e01c], 0xa
jl 0x14002fae9
mov eax, dword [0x14027e018]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
jne 0x14002fb07
mov byte [rdi + rsi], 0
cmp dword [0x14027e01c], 0xa
jl 0x14002fb0d
mov eax, dword [0x14027e018]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
je 0x14002fb0d
mov byte [rdi + rsi], 0
jmp 0x14002fae9
mov rdx, qword [0x14027e898]
cmp qword [rdx + 0x18], 0x10
jb 0x14002fb1e
mov rdx, qword [rdx]
lea rsi, [0x1401d77eb]
mov rcx, rsi
call fcn.140078310
mov rdx, qword [0x14027e880]
cmp qword [rdx + 0x18], 0x10
jb 0x14002fb3e
mov rdx, qword [rdx]
mov rcx, rsi
call fcn.140078310
mov rcx, qword [0x14027e8d0]
cmp qword [rcx + 0x18], 0x10
jb 0x14002fb57
mov rcx, qword [rcx]
call fcn.140078310
mov rcx, qword [0x14027e8d0]
cmp qword [rcx + 0x38], 0x10
jb 0x14002fb70
mov rcx, qword [rcx + 0x20]
jmp 0x14002fb74
add rcx, 0x20
call fcn.140078310
mov rcx, qword [0x14027e8d0]
cmp qword [rcx + 0x58], 0x10
jb 0x14002fb8d
mov rcx, qword [rcx + 0x40]
jmp 0x14002fb91
add rcx, 0x40
call fcn.140078310
mov ecx, 2
call fcn.14003eb10
call fcn.1400528c0
nop
add rsp, 0xa8
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret