Function at 0x140002f00
Capabilities:
Access peb ldr_data
Encode data using xor
Get process filename
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0xe0]
sub rsp, 0x1e0
mov rax, qword [0x1400cd080]
xor rax, rsp
mov qword [rbp + 0xa0], rax
mov r13, qword [rbp + 0x160]
mov eax, 0x5a4d
mov qword [rbp - 0x40], rcx
xor ecx, ecx
mov qword [rbp - 0x38], rcx
mov qword [rbp - 0x18], rdx
mov byte [rsp + 0x50], r9b
cmp word [rdx], ax
jne 0x140005ba5
movsxd r12, dword [rdx + 0x3c]
mov eax, 0x8664
add r12, rdx
mov qword [rbp + 0x90], r12
cmp word [r12 + 4], ax
jne 0x140005ba5
mov dword [rbp + 0x88], 4
mov dword [rsp + 0x40], 0x3000
mov qword [rbp + 0x80], rcx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140003027
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140003027
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0x7988e9e9
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140003022
nop
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x140003000
cmp r8d, 0x25283240
je 0x14000302c
test r9d, r9d
jne 0x140002fe0
mov rax, qword [rax]
jmp 0x140002fb0
mov ecx, dword [rdi + 0x24]
add rcx, r10
movzx edx, word [rcx + r9*2]
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov r15d, dword [rcx + rdx*4]
lea rcx, [rbp + 0x88]
add r15, r10
call fcn.140024500
lea rcx, [rsp + 0x40]
mov r14d, dword [rax]
call fcn.140024500
lea rcx, [r12 + 0x50]
mov esi, dword [rax]
call fcn.140024500
lea rcx, [rbp + 0x80]
mov edi, dword [rax]
call fcn.140024500
lea rcx, [rbp - 0x40]
mov rbx, qword [rax]
call fcn.140024500
mov r9d, esi
mov dword [rsp + 0x20], r14d
mov r8d, edi
mov rdx, rbx
mov rcx, qword [rax]
call r15
mov qword [rbp - 0x38], rax
test rax, rax
je 0x140005ba5
mov dword [rbp + 0x98], 0
lea rax, [rbp + 0x98]
mov qword [rbp + 0x80], rax
mov dword [rsp + 0x40], 0x40
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140003157
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140003157
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0x96c07f58
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140003152
nop
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x140003130
cmp r8d, 0x50f5ce5f
je 0x14000315c
test r9d, r9d
jne 0x140003110
mov rax, qword [rax]
jmp 0x1400030e0
mov edx, dword [rdi + 0x24]
lea rcx, [rbp + 0x80]
add rdx, r10
movzx r8d, word [rdx + r9*2]
mov edx, dword [rdi + 0x1c]
add rdx, r10
mov r15d, dword [rdx + r8*4]
add r15, r10
call fcn.140024500
lea rcx, [rsp + 0x40]
mov r14, qword [rax]
call fcn.140024500
lea rcx, [r12 + 0x50]
mov esi, dword [rax]
call fcn.140024500
lea rcx, [rbp - 0x38]
mov edi, dword [rax]
call fcn.140024500
lea rcx, [rbp - 0x40]
mov rbx, qword [rax]
call fcn.140024500
mov r9d, esi
mov qword [rsp + 0x20], r14
mov r8d, edi
mov rdx, rbx
mov rcx, qword [rax]
call r15
xorps xmm0, xmm0
movups xmmword [rbp], xmm0
movups xmmword [rbp + 0x10], xmm0
movups xmmword [rbp + 0x20], xmm0
movups xmmword [rbp + 0x30], xmm0
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov rdi, rsi
nop
mov r9, qword [rdi + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov ebx, dword [rax + r9 + 0x88]
add rbx, r9
cmp rbx, r9
je 0x140003268
mov r8d, dword [rbx + 0x18]
test r8d, r8d
je 0x140003268
mov r11d, dword [rbx + 0x20]
nop word [rax + rax]
dec r8d
mov edx, 0xfd70422
lea rax, [r11 + r8*4]
mov ecx, dword [rax + r9]
add rcx, r9
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x140003263
nop dword [rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x140003240
cmp edx, 0xfbe3dbd4
je 0x1400034ac
test r8d, r8d
jne 0x140003220
mov rax, qword [rdi]
mov rdi, rax
cmp rax, rsi
je 0x14000327e
cmp qword [rax + 0x30], 0
jne 0x1400031f0
xor r12d, r12d
mov eax, r12d
mov qword [rbp], rax
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov rdi, rsi
nop
mov r9, qword [rdi + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov ebx, dword [rax + r9 + 0x88]
add rbx, r9
cmp rbx, r9
je 0x140003318
mov r8d, dword [rbx + 0x18]
test r8d, r8d
je 0x140003318
mov r11d, dword [rbx + 0x20]
nop word [rax + rax]
dec r8d
mov edx, 0xa42e72bf
lea rax, [r11 + r8*4]
mov ecx, dword [rax + r9]
add rcx, r9
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x140003313
nop dword [rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x1400032f0
cmp edx, 0xb9d969cb
je 0x1400034cb
test r8d, r8d
jne 0x1400032d0
mov rax, qword [rdi]
mov rdi, rax
cmp rax, rsi
je 0x14000332e
cmp qword [rax + 0x30], 0
jne 0x1400032a0
mov rax, r12
mov qword [rbp + 8], rax
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov rdi, rsi
nop dword [rax]
mov r9, qword [rdi + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov ebx, dword [rax + r9 + 0x88]
add rbx, r9
cmp rbx, r9
je 0x1400033c8
mov r8d, dword [rbx + 0x18]
test r8d, r8d
je 0x1400033c8
mov r11d, dword [rbx + 0x20]
nop word [rax + rax]
dec r8d
mov edx, 0x1d29210c
lea rax, [r9 + r8*4]
mov ecx, dword [rax + r11]
add rcx, r9
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x1400033c3
nop dword [rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x1400033a0
cmp edx, 0x54b92267
je 0x1400034e7
test r8d, r8d
jne 0x140003380
mov rax, qword [rdi]
mov rdi, rax
cmp rax, rsi
je 0x1400033de
cmp qword [rax + 0x30], 0
jne 0x140003350
mov rax, r12
mov qword [rbp + 0x10], rax
mov rax, qword [rbp - 0x38]
mov qword [rbp + 0x18], rax
mov eax, dword [rbp + 0x158]
mov dword [rbp + 0x28], eax
movzx eax, byte [rbp + 0x150]
mov dword [rbp + 0x38], eax
mov qword [rbp + 0x30], r13
mov qword [rbp + 0x80], r12
mov dword [rsp + 0x40], 0x1000
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop dword [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x1400034a7
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x1400034a7
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0x230b4426
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rbx]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x1400034a2
nop dword [rax]
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x140003480
cmp r8d, 0xf2d5a249
je 0x140003503
test r9d, r9d
jne 0x140003460
mov rax, qword [rax]
jmp 0x140003430
mov ecx, dword [rbx + 0x24]
add rcx, r9
movzx edx, word [rcx + r8*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r9
mov eax, dword [rcx + rdx*4]
add rax, r9
xor r12d, r12d
jmp 0x140003284
mov ecx, dword [rbx + 0x24]
add rcx, r9
movzx edx, word [rcx + r8*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r9
mov eax, dword [rcx + rdx*4]
add rax, r9
jmp 0x140003331
mov ecx, dword [rbx + 0x24]
add rcx, r9
movzx edx, word [rcx + r8*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r9
mov eax, dword [rcx + rdx*4]
add rax, r9
jmp 0x1400033e1
mov ecx, dword [rdi + 0x24]
add rcx, r10
movzx edx, word [rcx + r9*2]
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov r15d, dword [rcx + rdx*4]
lea rcx, [rbp + 0x80]
add r15, r10
call fcn.140024500
lea rcx, [rsp + 0x40]
mov r14, qword [rax]
call fcn.140024500
lea rcx, [rbp - 0x18]
movsxd rsi, dword [rax]
call fcn.140024500
lea rcx, [rbp - 0x38]
mov rdi, qword [rax]
call fcn.140024500
lea rcx, [rbp - 0x40]
mov rbx, qword [rax]
call fcn.140024500
mov r9, rsi
mov qword [rsp + 0x20], r14
mov r8, rdi
mov rdx, rbx
mov rcx, qword [rax]
call r15
test eax, eax
jne 0x14000358c
mov rdx, qword [rbp - 0x38]
mov r9d, 0x8000
mov rcx, qword [rbp - 0x40]
xor r8d, r8d
call qword [sym.imp.KERNEL32.dll_VirtualFreeEx]
jmp 0x140005ba5
mov rcx, qword [rbp + 0x90]
mov r13d, r12d
movzx eax, word [rcx + 0x14]
add rax, 0x28
cmp word [rcx + 6], 0
je 0x14000370c
lea r12, [rax + rcx]
nop dword [rax]
cmp dword [r12], 0
je 0x1400036f5
mov eax, dword [r12 + 4]
add rax, qword [rbp - 0x18]
mov qword [rsp + 0x40], rax
mov eax, dword [r12 - 4]
add rax, qword [rbp - 0x38]
mov qword [rbp + 0x88], rax
mov qword [rbp + 0x80], 0
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140003677
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140003677
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0x9f9876fd
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rbx]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140003672
nop dword [rax]
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x140003650
cmp r8d, 0xf80beea2
je 0x14000367c
test r9d, r9d
jne 0x140003630
mov rax, qword [rax]
jmp 0x140003600
mov ecx, dword [rdi + 0x24]
add rcx, r10
movzx edx, word [rcx + r9*2]
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov r15d, dword [rcx + rdx*4]
lea rcx, [rbp + 0x80]
add r15, r10
call fcn.140024500
mov rcx, r12
mov r14, qword [rax]
call fcn.140024500
lea rcx, [rsp + 0x40]
mov esi, dword [rax]
call fcn.140024500
lea rcx, [rbp + 0x88]
mov rdi, qword [rax]
call fcn.140024500
lea rcx, [rbp - 0x40]
mov rbx, qword [rax]
call fcn.140024500
mov r9d, esi
mov qword [rsp + 0x20], r14
mov r8, rdi
mov rdx, rbx
mov rcx, qword [rax]
call r15
test eax, eax
je 0x1400037c0
mov rcx, qword [rbp + 0x90]
movzx eax, word [rcx + 6]
inc r13d
add r12, 0x28
cmp r13d, eax
jne 0x1400035b0
xor r12d, r12d
mov dword [rsp + 0x40], 4
mov dword [rbp + 0x88], 0x3000
mov qword [rbp + 0x80], 0x40
mov qword [rsp + 0x70], r12
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x1400037bb
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x1400037bb
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0xcee1ff09
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x1400037b6
nop
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x140003790
cmp r8d, 0xde31b220
je 0x1400038ad
test r9d, r9d
jne 0x140003770
mov rax, qword [rax]
jmp 0x140003740
mov dword [rsp + 0x40], 0x8000
mov dword [rbp + 0x88], 0
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140003867
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140003867
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0x9e9cf298
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140003862
nop
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x140003840
cmp r8d, 0xac87ebc4
je 0x14000386c
test r9d, r9d
jne 0x140003820
mov rax, qword [rax]
jmp 0x1400037f0
mov ecx, dword [rdi + 0x24]
add rcx, r10
movzx edx, word [rcx + r9*2]
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov r14d, dword [rcx + rdx*4]
lea rcx, [rsp + 0x40]
add r14, r10
call fcn.140024500
lea rcx, [rbp + 0x88]
mov esi, dword [rax]
call fcn.140024500
lea rcx, [rbp - 0x38]
movsxd rdi, dword [rax]
call fcn.140024500
jmp 0x140005b8a
mov ecx, dword [rdi + 0x24]
add rcx, r10
movzx edx, word [rcx + r9*2]
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov r15d, dword [rcx + rdx*4]
lea rcx, [rsp + 0x40]
add r15, r10
call fcn.140024500
lea rcx, [rbp + 0x88]
mov r14d, dword [rax]
call fcn.140024500
lea rcx, [rbp + 0x80]
mov esi, dword [rax]
call fcn.140024500
lea rcx, [rsp + 0x70]
mov rdi, qword [rax]
call fcn.140024500
lea rcx, [rbp - 0x40]
mov rbx, qword [rax]
call fcn.140024500
mov r9d, esi
mov dword [rsp + 0x20], r14d
mov r8, rdi
mov rdx, rbx
mov rcx, qword [rax]
call r15
mov qword [rbp - 0x30], rax
test rax, rax
jne 0x1400039d0
mov dword [rsp + 0x40], 0x8000
mov dword [rbp + 0x88], r12d
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x1400039cb
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x1400039cb
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0x51e98907
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rbx]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x1400039c6
nop dword [rax]
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x1400039a0
cmp r8d, 0xe49ed8ed
je 0x14000386c
test r9d, r9d
jne 0x140003980
mov rax, qword [rax]
jmp 0x140003950
mov qword [rsp + 0x70], r12
lea rax, [rbp]
mov qword [rsp + 0x40], rax
mov qword [rbp + 0x80], 0x40
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140003a77
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140003a77
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0x86202c89
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rbx]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140003a72
nop dword [rax]
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x140003a50
cmp r8d, 0x5a0f4a56
je 0x140003a7c
test r9d, r9d
jne 0x140003a30
mov rax, qword [rax]
jmp 0x140003a00
mov ecx, dword [rdi + 0x24]
add rcx, r10
movzx edx, word [rcx + r9*2]
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov r15d, dword [rcx + rdx*4]
lea rcx, [rsp + 0x70]
add r15, r10
call fcn.140024500
lea rcx, [rbp + 0x80]
mov r14, qword [rax]
call fcn.140024500
lea rcx, [rsp + 0x40]
mov rsi, qword [rax]
call fcn.140024500
lea rcx, [rbp - 0x30]
mov rdi, qword [rax]
call fcn.140024500
lea rcx, [rbp - 0x40]
mov rbx, qword [rax]
call fcn.140024500
mov r9, rsi
mov qword [rsp + 0x20], r14
mov r8, rdi
mov rdx, rbx
mov rcx, qword [rax]
call r15
test eax, eax
jne 0x140003ccd
mov dword [rsp + 0x40], 0x8000
mov dword [rbp + 0x88], r12d
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140003b87
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140003b87
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0x6451133
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140003b82
nop
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x140003b60
cmp r8d, 0x51aeb5f1
je 0x140003b8c
test r9d, r9d
jne 0x140003b40
mov rax, qword [rax]
jmp 0x140003b10
mov ecx, dword [rdi + 0x24]
add rcx, r10
movzx edx, word [rcx + r9*2]
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov r14d, dword [rcx + rdx*4]
lea rcx, [rsp + 0x40]
add r14, r10
call fcn.140024500
lea rcx, [rbp + 0x88]
mov esi, dword [rax]
call fcn.140024500
lea rcx, [rbp - 0x38]
movsxd rdi, dword [rax]
call fcn.140024500
lea rcx, [rbp - 0x40]
mov rbx, qword [rax]
call fcn.140024500
mov r9d, esi
mov r8, rdi
mov rdx, rbx
mov rcx, qword [rax]
call r14
mov dword [rsp + 0x40], 0x8000
mov dword [rbp + 0x88], r12d
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140003c87
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140003c87
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0xb3c4ec6d
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140003c82
nop
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x140003c60
cmp r8d, 0xde61de3f
je 0x140003c8c
test r9d, r9d
jne 0x140003c40
mov rax, qword [rax]
jmp 0x140003c10
mov ecx, dword [rdi + 0x24]
add rcx, r10
movzx edx, word [rcx + r9*2]
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov r14d, dword [rcx + rdx*4]
lea rcx, [rsp + 0x40]
add r14, r10
call fcn.140024500
lea rcx, [rbp + 0x88]
mov esi, dword [rax]
call fcn.140024500
lea rcx, [rbp - 0x30]
movsxd rdi, dword [rax]
call fcn.140024500
jmp 0x140005b8a
mov dword [rsp + 0x40], 0x40
mov dword [rbp + 0x88], 0x3000
mov dword [rbp + 0x80], 0x1000
mov qword [rsp + 0x70], r12
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140003d77
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140003d77
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0xe173a803
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140003d72
nop
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x140003d50
cmp r8d, 0x17e73dea
je 0x140003d7c
test r9d, r9d
jne 0x140003d30
mov rax, qword [rax]
jmp 0x140003d00
mov ecx, dword [rdi + 0x24]
add rcx, r10
movzx edx, word [rcx + r9*2]
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov r15d, dword [rcx + rdx*4]
lea rcx, [rsp + 0x40]
add r15, r10
call fcn.140024500
lea rcx, [rbp + 0x88]
mov r14d, dword [rax]
call fcn.140024500
lea rcx, [rbp + 0x80]
mov esi, dword [rax]
call fcn.140024500
lea rcx, [rsp + 0x70]
movsxd rdi, dword [rax]
call fcn.140024500
lea rcx, [rbp - 0x40]
mov rbx, qword [rax]
call fcn.140024500
mov r9d, esi
mov dword [rsp + 0x20], r14d
mov r8, rdi
mov rdx, rbx
mov rcx, qword [rax]
call r15
mov qword [rbp - 0x28], rax
test rax, rax
jne 0x140003fca
mov dword [rbp + 0x80], 0x8000
mov dword [rsp + 0x40], r12d
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140003e97
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140003e97
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0x36de3103
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140003e92
nop
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x140003e70
cmp r8d, 0x870e08e1
je 0x140003e9c
test r9d, r9d
jne 0x140003e50
mov rax, qword [rax]
jmp 0x140003e20
mov ecx, dword [rdi + 0x24]
add rcx, r10
movzx edx, word [rcx + r9*2]
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov r14d, dword [rcx + rdx*4]
lea rcx, [rbp + 0x80]
add r14, r10
call fcn.140024500
lea rcx, [rsp + 0x40]
mov esi, dword [rax]
call fcn.140024500
lea rcx, [rbp - 0x38]
movsxd rdi, dword [rax]
call fcn.140024500
lea rcx, [rbp - 0x40]
mov rbx, qword [rax]
call fcn.140024500
mov r9d, esi
mov r8, rdi
mov rdx, rbx
mov rcx, qword [rax]
call r14
mov dword [rbp + 0x80], 0x8000
mov dword [rsp + 0x40], r12d
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140003f97
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140003f97
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0x76d3d848
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140003f92
nop
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x140003f70
cmp r8d, 0xc0ee5954
je 0x140003f9c
test r9d, r9d
jne 0x140003f50
mov rax, qword [rax]
jmp 0x140003f20
mov ecx, dword [rdi + 0x24]
add rcx, r10
movzx edx, word [rcx + r9*2]
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov r14d, dword [rcx + rdx*4]
lea rcx, [rbp + 0x80]
add r14, r10
call fcn.140024500
lea rcx, [rsp + 0x40]
jmp 0x140003cb5
mov qword [rsp + 0x70], r12
mov dword [rbp + 0x80], 0x1000
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140004067
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140004067
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0x9d1f3745
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140004062
nop
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x140004040
cmp r8d, 0xaa68e46a
je 0x14000406c
test r9d, r9d
jne 0x140004020
mov rax, qword [rax]
jmp 0x140003ff0
mov ecx, dword [rdi + 0x24]
add rcx, r10
movzx edx, word [rcx + r9*2]
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov r15d, dword [rcx + rdx*4]
lea rcx, [rsp + 0x70]
add r15, r10
call fcn.140024500
lea rcx, [rbp + 0x80]
mov r14, qword [rax]
call fcn.140024500
lea rcx, [0x140005be0]
movsxd rsi, dword [rax]
call fcn.140024500
lea rcx, [rbp - 0x28]
mov rdi, rax
call fcn.140024500
lea rcx, [rbp - 0x40]
mov rbx, qword [rax]
call fcn.140024500
mov r9, rsi
mov qword [rsp + 0x20], r14
mov r8, rdi
mov rdx, rbx
mov rcx, qword [rax]
call r15
mov dword [rsp + 0x40], r12d
test eax, eax
jne 0x1400043aa
mov dword [rbp + 0x80], 0x8000
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140004177
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140004177
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0xd1b386b8
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rbx]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140004172
nop dword [rax]
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x140004150
cmp r8d, 0xf9423da4
je 0x14000417c
test r9d, r9d
jne 0x140004130
mov rax, qword [rax]
jmp 0x140004100
mov ecx, dword [rdi + 0x24]
add rcx, r10
movzx edx, word [rcx + r9*2]
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov r14d, dword [rcx + rdx*4]
lea rcx, [rbp + 0x80]
add r14, r10
call fcn.140024500
lea rcx, [rsp + 0x40]
mov esi, dword [rax]
call fcn.140024500
lea rcx, [rbp - 0x38]
movsxd rdi, dword [rax]
call fcn.140024500
lea rcx, [rbp - 0x40]
mov rbx, qword [rax]
call fcn.140024500
mov r9d, esi
mov r8, rdi
mov rdx, rbx
mov rcx, qword [rax]
call r14
mov dword [rbp + 0x80], 0x8000
mov dword [rsp + 0x40], r12d
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140004277
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140004277
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0x3483768e
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rbx]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140004272
nop dword [rax]
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x140004250
cmp r8d, 0xaa65cb2e
je 0x14000427c
test r9d, r9d
jne 0x140004230
mov rax, qword [rax]
jmp 0x140004200
mov ecx, dword [rdi + 0x24]
add rcx, r10
movzx edx, word [rcx + r9*2]
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov r14d, dword [rcx + rdx*4]
lea rcx, [rbp + 0x80]
add r14, r10
call fcn.140024500
lea rcx, [rsp + 0x40]
mov esi, dword [rax]
call fcn.140024500
lea rcx, [rbp - 0x30]
movsxd rdi, dword [rax]
call fcn.140024500
lea rcx, [rbp - 0x40]
mov rbx, qword [rax]
call fcn.140024500
mov r9d, esi
mov r8, rdi
mov rdx, rbx
mov rcx, qword [rax]
call r14
mov dword [rbp + 0x80], 0x8000
mov dword [rsp + 0x40], r12d
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140004377
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140004377
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0x8ab0ce34
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rbx]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140004372
nop dword [rax]
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x140004350
cmp r8d, 0x960ae718
je 0x14000437c
test r9d, r9d
jne 0x140004330
mov rax, qword [rax]
jmp 0x140004300
mov ecx, dword [rdi + 0x24]
add rcx, r10
movzx edx, word [rcx + r9*2]
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov r14d, dword [rcx + rdx*4]
lea rcx, [rbp + 0x80]
add r14, r10
call fcn.140024500
lea rcx, [rsp + 0x40]
jmp 0x140005b77
mov rax, qword [rbp - 0x28]
mov qword [rbp + 0x88], rax
mov qword [rsp + 0x70], r12
mov dword [rbp + 0x80], r12d
mov qword [rsp + 0x68], r12
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140004457
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140004457
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0xb485522
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rbx]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140004452
nop dword [rax]
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x140004430
cmp r8d, 0xa3c0f79c
je 0x14000445c
test r9d, r9d
jne 0x140004410
mov rax, qword [rax]
jmp 0x1400043e0
mov ecx, dword [rdi + 0x24]
add rcx, r10
movzx edx, word [rcx + r9*2]
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov r13d, dword [rcx + rdx*4]
lea rcx, [rsp + 0x70]
add r13, r10
call fcn.140024500
lea rcx, [rbp + 0x80]
mov r12, qword [rax]
call fcn.140024500
lea rcx, [rbp - 0x30]
mov r15d, dword [rax]
call fcn.140024500
lea rcx, [rbp + 0x88]
mov r14, qword [rax]
call fcn.140024500
lea rcx, [rsp + 0x40]
mov rsi, qword [rax]
call fcn.140024500
lea rcx, [rsp + 0x68]
movsxd rdi, dword [rax]
call fcn.140024500
lea rcx, [rbp - 0x40]
mov rbx, qword [rax]
call fcn.140024500
mov qword [rsp + 0x30], r12
mov r9, rsi
mov dword [rsp + 0x28], r15d
mov r8, rdi
mov rdx, rbx
mov qword [rsp + 0x20], r14
mov rcx, qword [rax]
call r13
test rax, rax
jne 0x1400047a0
mov dword [rbp + 0x80], 0x8000
xor r15d, r15d
mov dword [rsp + 0x40], r15d
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140004597
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140004597
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0xc74c1f50
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140004592
nop
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x140004570
cmp r8d, 0x8baf1efc
je 0x14000459c
test r9d, r9d
jne 0x140004550
mov rax, qword [rax]
jmp 0x140004520
mov ecx, dword [rdi + 0x24]
add rcx, r10
movzx edx, word [rcx + r9*2]
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov r14d, dword [rcx + rdx*4]
lea rcx, [rbp + 0x80]
add r14, r10
call fcn.140024500
lea rcx, [rsp + 0x40]
mov esi, dword [rax]
call fcn.140024500
lea rcx, [rbp - 0x38]
movsxd rdi, dword [rax]
call fcn.140024500
lea rcx, [rbp - 0x40]
mov rbx, qword [rax]
call fcn.140024500
mov r9d, esi
mov r8, rdi
mov rdx, rbx
mov rcx, qword [rax]
call r14
mov dword [rbp + 0x80], 0x8000
mov dword [rsp + 0x40], r15d
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140004697
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140004697
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0x9cb78620
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140004692
nop
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x140004670
cmp r8d, 0xcb8d15ac
je 0x14000469c
test r9d, r9d
jne 0x140004650
mov rax, qword [rax]
jmp 0x140004620
mov ecx, dword [rdi + 0x24]
add rcx, r10
movzx edx, word [rcx + r9*2]
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov r14d, dword [rcx + rdx*4]
lea rcx, [rbp + 0x80]
add r14, r10
call fcn.140024500
lea rcx, [rsp + 0x40]
mov esi, dword [rax]
call fcn.140024500
lea rcx, [rbp - 0x30]
movsxd rdi, dword [rax]
call fcn.140024500
lea rcx, [rbp - 0x40]
mov rbx, qword [rax]
call fcn.140024500
mov r9d, esi
mov r8, rdi
mov rdx, rbx
mov rcx, qword [rax]
call r14
mov dword [rbp + 0x80], 0x8000
mov dword [rsp + 0x40], r15d
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x14000479b
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x14000479b
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0xa2453374
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140004796
nop
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x140004770
cmp r8d, 0xc4d72a58
je 0x14000437c
test r9d, r9d
jne 0x140004750
mov rax, qword [rax]
jmp 0x140004720
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, reloc.WLDAP32.dll_Ordinal_50
call qword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [0x1400beeb8]
xor r12d, r12d
movups xmm0, xmmword [str.nSUXRIL_lb]
mov dword [rbp - 0x68], eax
movsd xmm1, qword [0x1400beeb0]
movups xmmword [rbp - 0x80], xmm0
mov qword [rsp + 0x68], r12
movsd qword [rbp - 0x70], xmm1
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140004867
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140004867
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0xcd6548c5
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140004862
nop
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x140004840
cmp r8d, 0xe3d7f595
je 0x14000486c
test r9d, r9d
jne 0x140004820
mov rax, qword [rax]
jmp 0x1400047f0
mov ecx, dword [rdi + 0x24]
add rcx, r10
movaps xmmword [rsp + 0x1d0], xmm6
movaps xmmword [rsp + 0x1c0], xmm7
movaps xmmword [rsp + 0x1b0], xmm8
movzx edx, word [rcx + r9*2]
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov edi, dword [rcx + rdx*4]
lea rcx, [rbp - 0x80]
add rdi, r10
call fcn.140024500
mov esi, dword [reloc.WS2_32.dll_accept]
mov r14d, 5
mov rbx, rax
lea r15d, [r14 + 0x1a]
cmp byte [rax + 0x1b], r12b
je 0x140004a64
mov r8d, r12d
cmp esi, 2
jl 0x140004a21
movdqa xmm0, xmmword [str.9999999999999999_t]
mov rcx, rax
movdqa xmm5, xmmword [0x1400bf360]
movdqa xmm4, xmmword [0x1400bf3b0]
movdqa xmm7, xmmword [0x1400bf380]
movdqa xmmword [rsp + 0x70], xmm0
mov edx, dword [rsp + 0x70]
movd xmm6, r14d
movd xmm8, r15d
nop word [rax + rax]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
paddd xmm3, xmm5
pmuldq xmm0, xmm4
add r8d, 8
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
pand xmm2, xmmword [0x1400bf390]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
pxor xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rcx - 8], xmm2
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, edx
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1400bf390]
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
pxor xmm2, xmm0
movd dword [rcx - 4], xmm2
cmp r8d, 0x18
jl 0x140004910
cmp r8d, 0x1c
jge 0x140004a64
movsxd r9, r8d
add r9, rbx
nop word [rax + rax]
mov eax, 0x8d3dcb09
lea r9, [r9 + 1]
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x39
xor byte [r9 - 1], al
cmp r8d, 0x1c
jl 0x140004a30
lea rcx, [rsp + 0x68]
call fcn.140024500
mov rdx, rbx
mov rcx, qword [rax]
call rdi
mov qword [rbp - 0x10], rax
mov dword [rbp + 0x80], r12d
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140004b17
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140004b17
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0xdfd7c139
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140004b12
nop
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x140004af0
cmp r8d, 0x77fa241c
je 0x140004b1c
test r9d, r9d
jne 0x140004ad0
mov rax, qword [rax]
jmp 0x140004aa0
mov ecx, dword [rdi + 0x24]
add rcx, r10
movzx edx, word [rcx + r9*2]
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov edi, dword [rcx + rdx*4]
lea rcx, [rbp + 0x80]
add rdi, r10
call fcn.140024500
lea rcx, [rbp - 0x10]
mov ebx, dword [rax]
call fcn.140024500
mov edx, ebx
mov rcx, qword [rax]
call rdi
movups xmm0, xmmword [str.zUUTRMKn_:dhf]
mov qword [rsp + 0x68], r12
movups xmm1, xmmword [0x1400be918]
movups xmmword [rbp - 0x60], xmm0
movups xmmword [rbp - 0x50], xmm1
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140004bf7
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140004bf7
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0xd00cf711
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140004bf2
nop
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x140004bd0
cmp r8d, 0x4d641679
je 0x140004bfc
test r9d, r9d
jne 0x140004bb0
mov rax, qword [rax]
jmp 0x140004b80
mov ecx, dword [rdi + 0x24]
add rcx, r10
movzx edx, word [rcx + r9*2]
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov edi, dword [rcx + rdx*4]
lea rcx, [rbp - 0x60]
add rdi, r10
call fcn.140024500
mov rbx, rax
cmp byte [rax + 0x1f], r12b
je 0x140004db5
cmp esi, 2
jl 0x140004d7b
movdqa xmm0, xmmword [str.9999999999999999_t]
mov edx, r12d
movdqa xmm5, xmmword [0x1400bf360]
mov rcx, rax
movdqa xmm4, xmmword [0x1400bf3b0]
movdqa xmm7, xmmword [0x1400bf380]
movdqa xmmword [rsp + 0x70], xmm0
mov r8d, dword [rsp + 0x70]
movd xmm6, r14d
movd xmm8, r15d
nop dword [rax]
movd xmm2, edx
lea eax, [rdx + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
paddd xmm3, xmm5
pmuldq xmm0, xmm4
add edx, 8
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
pand xmm2, xmmword [0x1400bf390]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
pxor xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rcx - 8], xmm2
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, r8d
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1400bf390]
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
pxor xmm2, xmm0
movd dword [rcx - 4], xmm2
cmp edx, 0x20
jl 0x140004c70
jmp 0x140004db5
mov r9, rbx
mov r8d, r12d
mov eax, 0x8d3dcb09
lea r9, [r9 + 1]
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x39
xor byte [r9 - 1], al
cmp r8d, 0x20
jl 0x140004d81
lea rcx, [rsp + 0x68]
call fcn.140024500
mov rdx, rbx
mov rcx, qword [rax]
call rdi
movaps xmm8, xmmword [rsp + 0x1b0]
movaps xmm7, xmmword [rsp + 0x1c0]
movaps xmm6, xmmword [rsp + 0x1d0]
mov qword [rbp - 8], rax
mov dword [rbp + 0x80], r12d
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140004e77
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140004e77
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0xe26be7cd
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140004e72
nop
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x140004e50
cmp r8d, 0xd2650438
je 0x140004e7c
test r9d, r9d
jne 0x140004e30
mov rax, qword [rax]
jmp 0x140004e00
mov ecx, dword [rdi + 0x24]
add rcx, r10
movzx edx, word [rcx + r9*2]
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov edi, dword [rcx + rdx*4]
lea rcx, [rbp + 0x80]
add rdi, r10
call fcn.140024500
lea rcx, [rbp - 8]
mov ebx, dword [rax]
call fcn.140024500
mov edx, ebx
mov rcx, qword [rax]
call rdi
mov dword [rbp + 0x88], r12d
lea rax, [rbp + 0x88]
mov qword [rsp + 0x68], rax
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140004f57
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140004f57
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0xca22827c
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140004f52
nop
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x140004f30
cmp r8d, 0x9e27b332
je 0x140004f5c
test r9d, r9d
jne 0x140004f10
mov rax, qword [rax]
jmp 0x140004ee0
mov ecx, dword [rdi + 0x24]
add rcx, r10
movzx edx, word [rcx + r9*2]
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov edi, dword [rcx + rdx*4]
lea rcx, [rsp + 0x68]
add rdi, r10
call fcn.140024500
lea rcx, [rbp - 0x40]
mov rbx, qword [rax]
call fcn.140024500
mov rdx, rbx
mov rcx, qword [rax]
call rdi
cmp dword [rbp + 0x88], 0x103
jne 0x140005ba5
xorps xmm0, xmm0
mov qword [rsp + 0x68], r12
movups xmmword [rbp + 0x40], xmm0
mov qword [rsp + 0x70], 0x40
lea rax, [rbp + 0x40]
movups xmmword [rbp + 0x50], xmm0
mov qword [rbp + 0x80], rax
movups xmmword [rbp + 0x60], xmm0
movups xmmword [rbp + 0x70], xmm0
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140005057
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140005057
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0xb3368fa5
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140005052
nop
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x140005030
cmp r8d, 0x2ee602a5
je 0x14000505c
test r9d, r9d
jne 0x140005010
mov rax, qword [rax]
jmp 0x140004fe0
mov ecx, dword [rdi + 0x24]
add rcx, r10
movzx edx, word [rcx + r9*2]
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov r15d, dword [rcx + rdx*4]
lea rcx, [rsp + 0x68]
add r15, r10
call fcn.140024500
lea rcx, [rsp + 0x70]
mov r14, qword [rax]
call fcn.140024500
lea rcx, [rbp + 0x80]
mov rsi, qword [rax]
call fcn.140024500
lea rcx, [rbp - 0x30]
mov rdi, qword [rax]
call fcn.140024500
lea rcx, [rbp - 0x40]
mov rbx, qword [rax]
call fcn.140024500
mov r9, rsi
mov qword [rsp + 0x20], r14
mov r8, rdi
mov rdx, rbx
mov rcx, qword [rax]
call r15
mov rbx, qword [rbp + 0x60]
cmp rbx, 0x404040
je 0x1400058ac
mov ecx, 0xa
call qword [sym.imp.KERNEL32.dll_Sleep]
test rbx, rbx
je 0x140004eb1
mov ecx, 0x1400000
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov qword [rbp - 0x20], rax
test rax, rax
je 0x140005ba5
xor edx, edx
mov r8d, 0x1400000
mov rcx, rax
call sub.VCRUNTIME140.dll_memset
cmp byte [rsp + 0x50], r12b
je 0x140005225
mov qword [rsp + 0x68], r12
mov dword [rbp + 0x80], 0x1000
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x1400051b7
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x1400051b7
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0xf7d46f05
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x1400051b2
nop
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x140005190
cmp r8d, 0x833e222a
je 0x1400051bc
test r9d, r9d
jne 0x140005170
mov rax, qword [rax]
jmp 0x140005140
mov ecx, dword [rdi + 0x24]
add rcx, r10
movzx edx, word [rcx + r9*2]
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov r15d, dword [rcx + rdx*4]
lea rcx, [rsp + 0x68]
add r15, r10
call fcn.140024500
lea rcx, [rbp + 0x80]
mov r14, qword [rax]
call fcn.140024500
lea rcx, [rbp - 0x20]
movsxd rsi, dword [rax]
call fcn.140024500
lea rcx, [rbp - 0x38]
mov rdi, qword [rax]
call fcn.140024500
lea rcx, [rbp - 0x40]
mov rbx, qword [rax]
call fcn.140024500
mov r9, rsi
mov qword [rsp + 0x20], r14
mov r8, rdi
mov rdx, rbx
mov rcx, qword [rax]
call r15
mov rsi, qword [rbp + 0x90]
cmp byte [rbp + 0x140], r12b
je 0x1400054df
movzx eax, word [rsi + 0x14]
lea r13, [rsi + 0x18]
add r13, rax
cmp word [rsi + 6], r12w
je 0x1400054df
movzx r9d, word [0x1400beec0]
mov r10d, dword [0x1400beebc]
nop
cmp dword [r13 + 8], 0
je 0x1400054c1
cmp byte [rbp + 0x150], 0
jne 0x1400052dd
mov eax, dword [0x1400bf088]
lea r8, [rsp + 0x54]
movzx ecx, byte [0x1400bf08e]
mov dword [rsp + 0x54], eax
xor cl, 0x3f
movzx eax, word [0x1400bf08c]
xor byte [rsp + 0x55], 0x3a
xor byte [rsp + 0x56], 0x3b
xor byte [rsp + 0x57], 0x3c
mov word [rsp + 0x58], ax
xor al, 0x3d
xor byte [rsp + 0x59], 0x3e
mov byte [rsp + 0x58], al
sub r8, r13
mov rax, r13
mov byte [rsp + 0x54], reloc.WLDAP32.dll_Ordinal_46
mov byte [rsp + 0x5a], cl
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x1400052d5
inc rax
test ecx, ecx
jne 0x1400052c2
test edx, edx
je 0x14000539b
mov dword [rsp + 0x48], r10d
lea r8, [rsp + 0x48]
xor byte [rsp + 0x49], 0x3a
mov rax, r13
xor byte [rsp + 0x4a], 0x3b
xor byte [rsp + 0x4b], 0x3c
mov word [rsp + 0x4c], r9w
xor byte [rsp + 0x4c], 0x3d
xor byte [rsp + 0x4d], 0x3e
sub r8, r13
mov byte [rsp + 0x48], reloc.WLDAP32.dll_Ordinal_46
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x140005324
inc rax
test ecx, ecx
jne 0x140005311
test edx, edx
je 0x14000539b
mov eax, dword [0x1400bf114]
lea r8, [rsp + 0x5c]
movzx ecx, byte [0x1400bf11a]
mov dword [rsp + 0x5c], eax
xor cl, 0x3f
movzx eax, word [0x1400bf118]
xor byte [rsp + 0x5d], 0x3a
xor byte [rsp + 0x5e], 0x3b
xor byte [rsp + 0x5f], 0x3c
mov word [rsp + 0x60], ax
xor al, 0x3d
xor byte [rsp + 0x61], 0x3e
mov byte [rsp + 0x60], al
sub r8, r13
mov rax, r13
mov byte [rsp + 0x5c], reloc.WLDAP32.dll_Ordinal_46
mov byte [rsp + 0x62], cl
nop word [rax + rax]
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x140005393
inc rax
test ecx, ecx
jne 0x140005380
test edx, edx
jne 0x1400054c1
mov eax, dword [r13 + 0xc]
add rax, qword [rbp - 0x38]
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x68], 0
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140005447
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140005447
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0x88c3ca9d
lea rcx, [r10 + r9*4]
mov ecx, dword [rcx + rbx]
add rcx, r10
movzx edx, byte [rcx]
inc rcx
test dl, dl
je 0x140005442
nop dword [rax]
movsx edx, dl
lea rcx, [rcx + 1]
xor edx, r8d
imul r8d, edx, 0x1000193
movzx edx, byte [rcx - 1]
test dl, dl
jne 0x140005420
cmp r8d, 0x24a44382
je 0x14000544c
test r9d, r9d
jne 0x140005400
mov rax, qword [rax]
jmp 0x1400053d0
mov edx, dword [rdi + 0x24]
lea rcx, [rsp + 0x68]
add rdx, r10
movzx r8d, word [rdx + r9*2]
mov edx, dword [rdi + 0x1c]
add rdx, r10
mov r15d, dword [rdx + r8*4]
add r15, r10
call fcn.140024500
lea rcx, [r13 + 8]
mov r14, qword [rax]
call fcn.140024500
lea rcx, [rbp - 0x20]
mov esi, dword [rax]
call fcn.140024500
lea rcx, [rsp + 0x70]
mov rdi, qword [rax]
call fcn.140024500
lea rcx, [rbp - 0x40]
mov rbx, qword [rax]
call fcn.140024500
mov r9d, esi
mov qword [rsp + 0x20], r14
mov r8, rdi
mov rdx, rbx
mov rcx, qword [rax]
call r15
movzx r9d, word [0x1400beec0]
mov r10d, dword [0x1400beebc]
mov rsi, qword [rbp + 0x90]
inc r12d
add r13, 0x28
movzx eax, word [rsi + 6]
cmp r12d, eax
jne 0x140005260
xor r12d, r12d
cmp byte [rbp + 0x148], 0
je 0x140005593
movzx ebx, word [rsi + 0x14]
mov edi, r12d
add rbx, 0x3c
cmp word [rsi + 6], 0
je 0x140005563
add rbx, rsi
mov r14d, reloc.WLDAP32.dll_Ordinal_32
mov ecx, dword [rbx - 0x1c]
test ecx, ecx
je 0x140005555
mov eax, dword [rbx]
mov dword [rbp + 0x80], r12d
test eax, 0x80000000
jbe 0x140005526
mov r9d, 4
jmp 0x140005535
test eax, 0x20000000
mov r9d, 2
cmova r9d, r14d
mov edx, dword [rbx - 0x18]
lea rax, [rbp + 0x80]
add rdx, qword [rbp - 0x38]
mov r8, rcx
mov rcx, qword [rbp - 0x40]
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
movzx eax, word [rsi + 6]
inc edi
add rbx, 0x28
cmp edi, eax
jne 0x140005507
movzx eax, word [rsi + 0x14]
mov r9d, 2
mov rdx, qword [rbp - 0x38]
mov rcx, qword [rbp - 0x40]
mov dword [rbp + 0x90], r12d
mov r8d, dword [rax + rsi + 0x24]
lea rax, [rbp + 0x90]
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov qword [rsp + 0x68], r12
mov dword [rbp + 0x90], 0x1000
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140005637
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140005637
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0x8ca92da2
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140005632
nop
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x140005610
cmp r8d, 0x1779d72d
je 0x14000563c
test r9d, r9d
jne 0x1400055f0
mov rax, qword [rax]
jmp 0x1400055c0
mov ecx, dword [rdi + 0x24]
add rcx, r10
movzx edx, word [rcx + r9*2]
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov r15d, dword [rcx + rdx*4]
lea rcx, [rsp + 0x68]
add r15, r10
call fcn.140024500
lea rcx, [rbp + 0x90]
mov r14, qword [rax]
call fcn.140024500
lea rcx, [rbp - 0x20]
movsxd rsi, dword [rax]
call fcn.140024500
lea rcx, [rbp - 0x28]
mov rdi, qword [rax]
call fcn.140024500
lea rcx, [rbp - 0x40]
mov rbx, qword [rax]
call fcn.140024500
mov r9, rsi
mov qword [rsp + 0x20], r14
mov r8, rdi
mov rdx, rbx
mov rcx, qword [rax]
call r15
mov dword [rbp + 0x90], 0x8000
mov dword [rbp + 0x80], r12d
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140005747
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140005747
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0xa9912ce0
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140005742
nop
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x140005720
cmp r8d, 0xe66f06c
je 0x14000574c
test r9d, r9d
jne 0x140005700
mov rax, qword [rax]
jmp 0x1400056d0
mov ecx, dword [rdi + 0x24]
add rcx, r10
movzx edx, word [rcx + r9*2]
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov r14d, dword [rcx + rdx*4]
lea rcx, [rbp + 0x90]
add r14, r10
call fcn.140024500
lea rcx, [rbp + 0x80]
mov esi, dword [rax]
call fcn.140024500
lea rcx, [rbp - 0x28]
movsxd rdi, dword [rax]
call fcn.140024500
lea rcx, [rbp - 0x40]
mov rbx, qword [rax]
call fcn.140024500
mov r9d, esi
mov r8, rdi
mov rdx, rbx
mov rcx, qword [rax]
call r14
mov dword [rbp + 0x90], 0x8000
mov dword [rbp + 0x80], r12d
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140005847
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140005847
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0x1fd81035
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rbx]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140005842
nop dword [rax]
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x140005820
cmp r8d, 0x6ba8cf67
je 0x14000584c
test r9d, r9d
jne 0x140005800
mov rax, qword [rax]
jmp 0x1400057d0
mov ecx, dword [rdi + 0x24]
add rcx, r10
movzx edx, word [rcx + r9*2]
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov r14d, dword [rcx + rdx*4]
lea rcx, [rbp + 0x90]
add r14, r10
call fcn.140024500
lea rcx, [rbp + 0x80]
mov esi, dword [rax]
call fcn.140024500
lea rcx, [rbp - 0x30]
movsxd rdi, dword [rax]
call fcn.140024500
lea rcx, [rbp - 0x40]
mov rbx, qword [rax]
call fcn.140024500
mov r9d, esi
mov r8, rdi
mov rdx, rbx
mov rcx, qword [rax]
call r14
mov al, 1
jmp 0x140005ba7
mov dword [rbp + 0x90], 0x8000
mov dword [rbp + 0x80], r12d
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140005947
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140005947
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0x2c82d4ee
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rbx]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140005942
nop dword [rax]
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x140005920
cmp r8d, 0x80caf1ce
je 0x14000594c
test r9d, r9d
jne 0x140005900
mov rax, qword [rax]
jmp 0x1400058d0
mov ecx, dword [rdi + 0x24]
add rcx, r10
movzx edx, word [rcx + r9*2]
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov r14d, dword [rcx + rdx*4]
lea rcx, [rbp + 0x90]
add r14, r10
call fcn.140024500
lea rcx, [rbp + 0x80]
mov esi, dword [rax]
call fcn.140024500
lea rcx, [rbp - 0x38]
movsxd rdi, dword [rax]
call fcn.140024500
lea rcx, [rbp - 0x40]
mov rbx, qword [rax]
call fcn.140024500
mov r9d, esi
mov r8, rdi
mov rdx, rbx
mov rcx, qword [rax]
call r14
mov dword [rbp + 0x90], 0x8000
mov dword [rbp + 0x80], r12d
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140005a47
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140005a47
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0x40e645fe
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rbx]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140005a42
nop dword [rax]
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x140005a20
cmp r8d, 0x50d9b8be
je 0x140005a4c
test r9d, r9d
jne 0x140005a00
mov rax, qword [rax]
jmp 0x1400059d0
mov ecx, dword [rdi + 0x24]
add rcx, r10
movzx edx, word [rcx + r9*2]
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov r14d, dword [rcx + rdx*4]
lea rcx, [rbp + 0x90]
add r14, r10
call fcn.140024500
lea rcx, [rbp + 0x80]
mov esi, dword [rax]
call fcn.140024500
lea rcx, [rbp - 0x30]
movsxd rdi, dword [rax]
call fcn.140024500
lea rcx, [rbp - 0x40]
mov rbx, qword [rax]
call fcn.140024500
mov r9d, esi
mov r8, rdi
mov rdx, rbx
mov rcx, qword [rax]
call r14
mov dword [rbp + 0x90], 0x8000
mov dword [rbp + 0x80], r12d
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140005b47
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140005b47
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0x25db2056
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rbx]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140005b42
nop dword [rax]
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x140005b20
cmp r8d, 0x2d2b7d56
je 0x140005b4c
test r9d, r9d
jne 0x140005b00
mov rax, qword [rax]
jmp 0x140005ad0
mov ecx, dword [rdi + 0x24]
add rcx, r10
movzx edx, word [rcx + r9*2]
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov r14d, dword [rcx + rdx*4]
lea rcx, [rbp + 0x90]
add r14, r10
call fcn.140024500
lea rcx, [rbp + 0x80]
mov esi, dword [rax]
call fcn.140024500
lea rcx, [rbp - 0x28]
movsxd rdi, dword [rax]
call fcn.140024500
mov rbx, qword [rax]
lea rcx, [rbp - 0x40]
call fcn.140024500
mov r9d, esi
mov r8, rdi
mov rdx, rbx
mov rcx, qword [rax]
call r14
xor al, al
mov rcx, qword [rbp + 0xa0]
xor rcx, rsp
call fcn.1400a9190
mov rbx, qword [rsp + 0x230]
add rsp, 0x1e0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret