Function at 0x140031370
Capabilities:
Access peb ldr_data
Encode data using base64
Encode data using xor
Hash data using fnv
Hide graphical window
Resolve function by parsing pe exports

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x1c8
lea rbp, [rsp + 0x80]
movaps xmmword [rbp + 0x130], xmm6
mov qword [rbp + 0xf8], 0xfffffffffffffffe
mov qword [rbp + 0x60], 0
mov dword [rbp + 0x50], 0x50
xor ecx, ecx
call qword [sym.imp.GDI32.dll_CreateSolidBrush]
mov qword [rbp + 0x80], rax
mov edx, 0x7f00
xor ecx, ecx
call qword [sym.imp.USER32.dll_LoadCursorW]
mov qword [rbp + 0x78], rax
mov rsi, qword [sym.imp.USER32.dll_LoadIconW]
mov edx, 0x7f00
xor ecx, ecx
call rsi
mov qword [rbp + 0x70], rax
mov edx, 0x7f00
xor ecx, ecx
call rsi
mov qword [rbp + 0x98], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov qword [rbp + 0x68], rax
lea rax, [0x140033690]
mov qword [rbp + 0x58], rax
lea rax, [0x1401d8f9a]
mov qword [rbp + 0x90], rax
mov qword [rbp + 0x88], rax
mov dword [rbp + 0x54], 3
movabs rax, 0x100000000
mov qword [0x14027ec68], rax
lea rcx, [rbp + 0x50]
call qword [sym.imp.USER32.dll_RegisterClassExW]
test ax, ax
je 0x1400332a2
mov rax, qword gs:[0x60]
mov r9, qword [rax + 0x18]
add r9, 0x10
mov eax, dword [0x14027e330]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete al
cmp dword [0x14027e334], 0xa
setl r8b
or r8b, al
jmp 0x140031489
test r8b, r8b
je 0x1400318e0
mov r9, qword [r9]
mov r11, qword [r9 + 0x30]
movsxd rax, dword [r11 + 0x3c]
mov r10d, dword [rax + r11 + 0x88]
test r10, r10
je 0x140031480
mov edx, dword [r11 + r10 + 0x18]
mov rsi, rdx
nop dword [rax]
sub rsi, 1
jb 0x140031480
mov edi, edx
add edi, 0xffffffff
mov eax, dword [r11 + r10 + 0x20]
add rax, r11
mov edx, dword [rax + rdi*4]
add rdx, r11
mov eax, 0x5efb5621
nop
mov ebx, eax
movsx ecx, byte [rdx]
add rdx, 1
xor eax, ecx
imul eax, eax, 0x1000193
test ecx, ecx
jne 0x1400314d0
mov rdx, rsi
cmp ebx, 0x632ce0e1
jne 0x1400314b0
test r8b, r8b
je 0x1400318e0
mov eax, dword [r11 + r10 + 0x1c]
mov ecx, dword [r11 + r10 + 0x24]
add rax, r11
add rcx, r11
movzx ecx, word [rcx + rdi*2]
mov ecx, dword [rax + rcx*4]
add rcx, r11
call rcx
lea rdx, [rbp + 0xd0]
mov rcx, rax
call qword [sym.imp.USER32.dll_GetWindowRect]
mov esi, dword [rbp + 0xd8]
mov edi, dword [rbp + 0xdc]
movss xmm0, dword [0x1401ca760]
movss xmm1, dword [0x1401ca764]
call fcn.1400a8c10
movaps xmm6, xmm0
movss xmm0, dword [0x1401ca768]
movss xmm1, dword [0x1401ca76c]
call fcn.1400a8c10
cvttss2si eax, xmm6
cvttss2si ecx, xmm0
add esi, ecx
add edi, eax
mov dword [0x14027d184], esi
mov dword [0x14027d188], edi
add ecx, 0x50
add eax, 0x64
mov dword [0x14027d17c], ecx
mov dword [0x14027d180], eax
xorps xmm6, xmm6
movups xmmword [rsp + 0x50], xmm6
movups xmmword [rsp + 0x40], xmm6
mov dword [rsp + 0x38], eax
mov dword [rsp + 0x30], ecx
mov dword [rsp + 0x28], 1
mov dword [rsp + 0x20], 1
lea rdx, [0x1401d8f9a]
mov ecx, 0x80080
mov r8, rdx
mov r9d, 0x80000000
call qword [sym.imp.USER32.dll_CreateWindowExW]
mov qword [0x14027d168], rax
mov rsi, qword [sym.imp.USER32.dll_SetLayeredWindowAttributes]
mov rcx, rax
xor edx, edx
mov r8b, 1
mov r9d, 2
call rsi
mov rcx, qword [0x14027d168]
xor edx, edx
xor r8d, r8d
mov r9d, 1
call rsi
mov rcx, qword [0x14027d170]
call qword [sym.imp.USER32.dll_SetForegroundWindow]
mov rcx, qword [0x14027d168]
mov edx, 5
call qword [sym.imp.USER32.dll_ShowWindow]
mov rsi, qword [0x14027d168]
mov ecx, reloc.WLDAP32.dll_Ordinal_32
call sub.d3d9.dll_Direct3DCreate9
mov qword [0x14027ece8], rax
test rax, rax
je 0x140033362
movups xmmword [0x14027ec50], xmm6
movups xmmword [0x14027ec40], xmm6
movups xmmword [0x14027ec30], xmm6
movups xmmword [0x14027ec60], xmm6
lea rcx, [0x14027ec30]
movabs rdx, 0x100000001
mov qword [0x14027ec58], rdx
mov dword [0x14027ec48], 1
mov dword [0x14027ec38], 0
mov dword [0x14027ec60], 0x50
mov dword [0x14027ec6c], 1
mov rbx, qword [rax]
lea rdx, [0x14027ec70]
mov qword [rsp + 0x30], rdx
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], 0x40
mov rcx, rax
xor edx, edx
mov r8d, 1
mov r9, rsi
call qword [rbx + 0x80]
test eax, eax
js 0x140033362
mov rcx, qword [0x14027d168]
mov edx, 0xa
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, qword [0x14027d168]
call qword [sym.imp.USER32.dll_UpdateWindow]
mov qword [rsp + 0x30], 2
mov qword [rsp + 0x28], reloc.WS2_32.dll_sendto
mov qword [rsp + 0x20], reloc.WS2_32.dll_recv
lea rcx, str.1.79
mov edx, 0x1560
mov r8d, 0x3bc
mov r9d, 8
call fcn.140056fd0
xor ecx, ecx
call fcn.140042f20
call fcn.140044b00
mov rsi, rax
mov qword [rax + 0x18], 0
mov rcx, qword [rax + 0xa0]
xorps xmm6, xmm6
movups xmmword [rsp + 0x20], xmm6
lea rdx, [0x1401fb800]
movss xmm3, dword [0x1401ca770]
mov r8d, 0x3bfcc
call fcn.1400656a0
mov qword [0x14027d198], rax
mov rcx, qword [rsi + 0xa0]
movups xmmword [rsp + 0x20], xmm6
lea rdx, [0x140118730]
movss xmm3, dword [0x1401ca774]
mov r8d, 0x2c20
call fcn.1400657e0
mov qword [0x14027d1a0], rax
mov rcx, qword [rsi + 0xa0]
xorps xmm6, xmm6
movups xmmword [rsp + 0x20], xmm6
lea rdx, [0x14011b350]
movss xmm3, dword [0x1401ca778]
mov r8d, 0xa0ed
call fcn.1400657e0
mov qword [0x14027d1a8], rax
mov rcx, qword [rsi + 0xa0]
movups xmmword [rsp + 0x20], xmm6
lea rdx, [0x1402732d0]
movss xmm3, dword [0x1401ca77c]
mov r8d, 0x1f3c
call fcn.1400656a0
mov qword [0x14027d1b0], rax
mov rcx, qword [rsi + 0xa0]
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
lea rdx, [0x1402377d0]
movss xmm3, dword [0x1401ca780]
mov r8d, 0x3baf4
call fcn.1400656a0
mov qword [0x14027d1b8], rax
mov rcx, qword [rsi + 0xa0]
mov qword [rsp + 0x20], 0
lea rdx, str.C:WindowsFonts_verdana.ttf
movss xmm2, dword [0x1401ca784]
xor r9d, r9d
call fcn.140065490
mov qword [0x14027d1c0], rax
mov rcx, qword [rsi + 0xa0]
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
lea rdx, [0x140125440]
movss xmm3, dword [0x1401ca770]
mov r8d, 0xa4bcd
call fcn.1400657e0
mov qword [0x14027d190], rax
mov rcx, qword [rsi + 0xa0]
call fcn.140064c30
xor ecx, ecx
call fcn.14005e880
mov rcx, qword [0x14027d168]
call fcn.140076fb0
mov rcx, qword [0x14027ec70]
call fcn.140076c50
xorps xmm0, xmm0
movaps xmmword [rbp + 0x40], xmm0
movaps xmmword [rbp + 0x30], xmm0
movaps xmmword [rbp + 0x20], xmm0
mov rsi, qword [sym.imp.USER32.dll_IsWindow]
lea rdi, [rbp + 0x20]
mov rbx, qword [sym.imp.USER32.dll_PeekMessageW]
mov r14, qword [sym.imp.USER32.dll_TranslateMessage]
mov r15, qword [sym.imp.USER32.dll_DispatchMessageW]
jmp 0x140031906
jmp 0x1400318e0
mov rcx, rdi
call r14
mov rcx, rdi
call r15
cmp dword [rbp + 0x28], 0x12
je 0x14003338e
mov rcx, qword [0x14027d170]
call rsi
test eax, eax
je 0x14003338e
mov dword [rsp + 0x20], 1
mov rcx, rdi
xor edx, edx
xor r8d, r8d
xor r9d, r9d
call rbx
test eax, eax
jne 0x1400318f0
call fcn.140076fa0
call fcn.1400772a0
call fcn.140045e90
call fcn.14002dbc0
call fcn.1400521a0
mov rcx, qword [0x14027ec70]
mov rax, qword [rcx]
mov edx, 7
xor r8d, r8d
call qword [rax + 0x1c8]
mov rcx, qword [0x14027ec70]
mov rax, qword [rcx]
mov edx, reloc.WLDAP32.dll_Ordinal_27
xor r8d, r8d
call qword [rax + 0x1c8]
mov rcx, qword [0x14027ec70]
mov rax, qword [rcx]
mov edx, 0xae
xor r8d, r8d
call qword [rax + 0x1c8]
mov rcx, qword [0x14027ec70]
mov rax, qword [rcx]
mov dword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x3f800000
mov dword [rsp + 0x20], 0
xor edx, edx
xor r8d, r8d
mov r9d, 3
call qword [rax + 0x158]
mov rcx, qword [0x14027ec70]
mov rax, qword [rcx]
call qword [rax + 0x148]
test eax, eax
js 0x1400319fa
call fcn.140053110
call fcn.140044b10
mov rcx, rax
call fcn.140076020
mov rcx, qword [0x14027ec70]
mov rax, qword [rcx]
call qword [rax + 0x150]
mov rcx, qword [0x14027ec70]
mov rax, qword [rcx]
mov qword [rsp + 0x20], 0
xor edx, edx
xor r8d, r8d
xor r9d, r9d
call qword [rax + 0x88]
mov dword [rbp + 0xa4], eax
call fcn.140030c70
cmp dword [0x140275214], 0
je 0x140031a34
call fcn.1400a0710
mov eax, dword [0x14027ec88]
mov ecx, dword [0x14028e5f0]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140031b99
cmp dword [0x14027dd74], 0xa
jl 0x140031a77
mov eax, dword [0x14027dd70]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
jne 0x140033280
xorps xmm0, xmm0
movaps xmmword [rbp - 0x20], xmm0
cmp dword [0x14027e0ac], 0xa
jl 0x140031a9c
mov eax, dword [0x14027e0a8]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
jne 0x140033290
cmp dword [0x14027ed08], 0xa
jl 0x140031aba
mov eax, dword [0x14027ed0c]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
jne 0x1400332a0
movaps xmm0, xmmword [reloc.XINPUT1_3.dll_Ordinal_4]
movaps xmmword [rbp - 0x10], xmm0
mov dword [rbp - 0x20], 0x74737552
lea rcx, [rbp - 0x20]
call fcn.1400a98b0
test al, al
je 0x1400331c6
mov ecx, dword [0x14027523c]
call fcn.1400a8bf0
test al, al
je 0x140031c88
movzx eax, byte [0x14027520c]
xor rax, 1
mov byte [0x14027520c], al
shl rax, 5
lea rcx, [0x14027e7a0]
lea r9, [rcx + rax]
mov rcx, qword [0x14027e898]
cmp r9, rcx
je 0x140031c7d
lea rdx, [0x14027e7a0]
cmp qword [rax + rdx + 0x18], 0x10
jb 0x140031b32
mov r9, qword [r9]
lea rdx, [0x14027e7a0]
mov rsi, qword [rax + rdx + 0x10]
mov rax, qword [rcx + 0x18]
cmp rax, rsi
jae 0x140031b54
mov rdx, rsi
call fcn.140038ba0
jmp 0x140031c7d
mov rdi, rcx
cmp rax, 0x10
jb 0x140031b60
mov rdi, qword [rcx]
mov qword [rcx + 0x10], rsi
mov rcx, rdi
mov rdx, r9
mov r8, rsi
call sub.VCRUNTIME140.dll_memmove
cmp dword [0x14027e01c], 0xa
jl 0x140031c59
mov eax, dword [0x14027e018]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
jne 0x140031c77
jmp 0x140031c59
lea rcx, [0x14027ec88]
call fcn.1400c4998
cmp dword [0x14027ec88], 0xffffffff
jne 0x140031a59
movups xmm0, xmmword [str.fRTUeoNGh._B]
movaps xmmword [rbp + 0xb0], xmm0
movups xmm0, xmmword [0x1401ca2f6]
movups xmmword [rbp + 0xbc], xmm0
mov word [rbp + 0xb0], 0x53
xor byte [rbp + 0xb2], 0x36
xor byte [rbp + 0xb4], 0x37
xor byte [rbp + 0xb6], 0x38
xor byte [rbp + 0xb8], 0x39
xor byte [rbp + 0xba], 0x3a
xor byte [rbp + 0xbc], 0x3b
xor byte [rbp + 0xbe], 0x3c
xor byte [rbp + 0xc0], 0x3d
xor byte [rbp + 0xc2], 0x3e
xor byte [rbp + 0xc4], 0x3f
xor byte [rbp + 0xc6], 0x40
xor byte [rbp + 0xc8], 0x41
xor byte [rbp + 0xca], 0x42
lea rcx, [rbp + 0xb0]
xor edx, edx
call qword [sym.imp.USER32.dll_FindWindowW]
mov qword [0x14027ec80], rax
lea rcx, [0x14027ec88]
call fcn.1400c4a30
jmp 0x140031a59
mov byte [rdi + rsi], 0
cmp dword [0x14027e01c], 0xa
jl 0x140031c7d
mov eax, dword [0x14027e018]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
je 0x140031c7d
mov byte [rdi + rsi], 0
jmp 0x140031c59
mov ecx, 0xfa
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, dword [0x14027524c]
call fcn.1400a8bf0
test al, al
je 0x140031d63
movzx eax, byte [0x14027520f]
xor rax, 1
mov byte [0x14027520f], al
shl rax, 5
lea rcx, [0x14027e7e0]
lea r9, [rcx + rax]
mov rcx, qword [0x14027e880]
cmp r9, rcx
je 0x140031d58
lea rdx, [0x14027e7e0]
cmp qword [rax + rdx + 0x18], 0x10
jb 0x140031cdd
mov r9, qword [r9]
lea rdx, [0x14027e7e0]
mov rsi, qword [rax + rdx + 0x10]
mov rax, qword [rcx + 0x18]
cmp rax, rsi
jae 0x140031cfc
mov rdx, rsi
call fcn.140038ba0
jmp 0x140031d58
mov rdi, rcx
cmp rax, 0x10
jb 0x140031d08
mov rdi, qword [rcx]
mov qword [rcx + 0x10], rsi
mov rcx, rdi
mov rdx, r9
mov r8, rsi
call sub.VCRUNTIME140.dll_memmove
cmp dword [0x14027e01c], 0xa
jl 0x140031d34
mov eax, dword [0x14027e018]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
jne 0x140031d52
mov byte [rdi + rsi], 0
cmp dword [0x14027e01c], 0xa
jl 0x140031d58
mov eax, dword [0x14027e018]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
je 0x140031d58
mov byte [rdi + rsi], 0
jmp 0x140031d34
mov ecx, 0xfa
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, dword [0x140275240]
call fcn.1400a8bf0
test al, al
je 0x140031f7a
mov rcx, qword [0x14027e8d0]
lea rax, [0x14027e520]
cmp rcx, rax
je 0x140031e1b
mov rsi, qword [0x14027e530]
cmp qword [0x14027e538], 0x10
lea r9, [0x14027e520]
jb 0x140031dac
mov r9, qword [0x14027e520]
mov rax, qword [rcx + 0x18]
cmp rax, rsi
jae 0x140031dbf
mov rdx, rsi
call fcn.140038ba0
jmp 0x140031e1b
mov rdi, rcx
cmp rax, 0x10
jb 0x140031dcb
mov rdi, qword [rcx]
mov qword [rcx + 0x10], rsi
mov rcx, rdi
mov rdx, r9
mov r8, rsi
call sub.VCRUNTIME140.dll_memmove
cmp dword [0x14027e01c], 0xa
jl 0x140031df7
mov eax, dword [0x14027e018]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
jne 0x140031e15
mov byte [rdi + rsi], 0
cmp dword [0x14027e01c], 0xa
jl 0x140031e1b
mov eax, dword [0x14027e018]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
je 0x140031e1b
mov byte [rdi + rsi], 0
jmp 0x140031df7
mov rax, qword [0x14027e8d0]
lea rsi, [rax + 0x20]
lea rcx, [0x14027e6a0]
cmp rsi, rcx
je 0x140031ec5
mov rdi, qword [0x14027e6b0]
cmp qword [0x14027e6b8], 0x10
lea r9, [0x14027e6a0]
jb 0x140031e55
mov r9, qword [0x14027e6a0]
mov rcx, qword [rax + 0x38]
cmp rcx, rdi
jae 0x140031e6b
mov rcx, rsi
mov rdx, rdi
call fcn.140038ba0
jmp 0x140031ec5
cmp rcx, 0x10
jb 0x140031e75
mov rsi, qword [rax + 0x20]
mov qword [rax + 0x30], rdi
mov rcx, rsi
mov rdx, r9
mov r8, rdi
call sub.VCRUNTIME140.dll_memmove
cmp dword [0x14027e01c], 0xa
jl 0x140031ea1
mov eax, dword [0x14027e018]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
jne 0x140031ebf
mov byte [rsi + rdi], 0
cmp dword [0x14027e01c], 0xa
jl 0x140031ec5
mov eax, dword [0x14027e018]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
je 0x140031ec5
mov byte [rsi + rdi], 0
jmp 0x140031ea1
mov rax, qword [0x14027e8d0]
lea rsi, [rax + 0x40]
lea rcx, [0x14027e740]
cmp rsi, rcx
je 0x140031f6f
mov rdi, qword [0x14027e750]
cmp qword [0x14027e758], 0x10
lea r9, [0x14027e740]
jb 0x140031eff
mov r9, qword [0x14027e740]
mov rcx, qword [rax + 0x58]
cmp rcx, rdi
jae 0x140031f15
mov rcx, rsi
mov rdx, rdi
call fcn.140038ba0
jmp 0x140031f6f
cmp rcx, 0x10
jb 0x140031f1f
mov rsi, qword [rax + 0x40]
mov qword [rax + 0x50], rdi
mov rcx, rsi
mov rdx, r9
mov r8, rdi
call sub.VCRUNTIME140.dll_memmove
cmp dword [0x14027e01c], 0xa
jl 0x140031f4b
mov eax, dword [0x14027e018]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
jne 0x140031f69
mov byte [rsi + rdi], 0
cmp dword [0x14027e01c], 0xa
jl 0x140031f6f
mov eax, dword [0x14027e018]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
je 0x140031f6f
mov byte [rsi + rdi], 0
jmp 0x140031f4b
mov ecx, 0xfa
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, dword [0x14027525c]
call fcn.1400a8bf0
test al, al
je 0x1400320e7
mov rcx, qword [0x14027e8d0]
lea rax, [0x14027e540]
cmp rcx, rax
je 0x140032032
mov rsi, qword [0x14027e550]
cmp qword [0x14027e558], 0x10
lea r9, [0x14027e540]
jb 0x140031fc3
mov r9, qword [0x14027e540]
mov rax, qword [rcx + 0x18]
cmp rax, rsi
jae 0x140031fd6
mov rdx, rsi
call fcn.140038ba0
jmp 0x140032032
mov rdi, rcx
cmp rax, 0x10
jb 0x140031fe2
mov rdi, qword [rcx]
mov qword [rcx + 0x10], rsi
mov rcx, rdi
mov rdx, r9
mov r8, rsi
call sub.VCRUNTIME140.dll_memmove
cmp dword [0x14027e01c], 0xa
jl 0x14003200e
mov eax, dword [0x14027e018]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
jne 0x14003202c
mov byte [rdi + rsi], 0
cmp dword [0x14027e01c], 0xa
jl 0x140032032
mov eax, dword [0x14027e018]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
je 0x140032032
mov byte [rdi + rsi], 0
jmp 0x14003200e
mov rax, qword [0x14027e8d0]
lea rsi, [rax + 0x20]
lea rcx, [0x14027e6e0]
cmp rsi, rcx
je 0x1400320dc
mov rdi, qword [0x14027e6f0]
cmp qword [0x14027e6f8], 0x10
lea r9, [0x14027e6e0]
jb 0x14003206c
mov r9, qword [0x14027e6e0]
mov rcx, qword [rax + 0x38]
cmp rcx, rdi
jae 0x140032082
mov rcx, rsi
mov rdx, rdi
call fcn.140038ba0
jmp 0x1400320dc
cmp rcx, 0x10
jb 0x14003208c
mov rsi, qword [rax + 0x20]
mov qword [rax + 0x30], rdi
mov rcx, rsi
mov rdx, r9
mov r8, rdi
call sub.VCRUNTIME140.dll_memmove
cmp dword [0x14027e01c], 0xa
jl 0x1400320b8
mov eax, dword [0x14027e018]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
jne 0x1400320d6
mov byte [rsi + rdi], 0
cmp dword [0x14027e01c], 0xa
jl 0x1400320dc
mov eax, dword [0x14027e018]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
je 0x1400320dc
mov byte [rsi + rdi], 0
jmp 0x1400320b8
mov ecx, __WSAFDIsSet
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, dword [0x140275260]
call fcn.1400a8bf0
test al, al
je 0x140032254
mov rcx, qword [0x14027e8d0]
lea rax, [0x14027e5c0]
cmp rcx, rax
je 0x14003219f
mov rsi, qword [0x14027e5d0]
cmp qword [0x14027e5d8], 0x10
lea r9, [0x14027e5c0]
jb 0x140032130
mov r9, qword [0x14027e5c0]
mov rax, qword [rcx + 0x18]
cmp rax, rsi
jae 0x140032143
mov rdx, rsi
call fcn.140038ba0
jmp 0x14003219f
mov rdi, rcx
cmp rax, 0x10
jb 0x14003214f
mov rdi, qword [rcx]
mov qword [rcx + 0x10], rsi
mov rcx, rdi
mov rdx, r9
mov r8, rsi
call sub.VCRUNTIME140.dll_memmove
cmp dword [0x14027e01c], 0xa
jl 0x14003217b
mov eax, dword [0x14027e018]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
jne 0x140032199
mov byte [rdi + rsi], 0
cmp dword [0x14027e01c], 0xa
jl 0x14003219f
mov eax, dword [0x14027e018]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
je 0x14003219f
mov byte [rdi + rsi], 0
jmp 0x14003217b
mov rax, qword [0x14027e8d0]
lea rsi, [rax + 0x20]
lea rcx, [0x14027e6e0]
cmp rsi, rcx
je 0x140032249
mov rdi, qword [0x14027e6f0]
cmp qword [0x14027e6f8], 0x10
lea r9, [0x14027e6e0]
jb 0x1400321d9
mov r9, qword [0x14027e6e0]
mov rcx, qword [rax + 0x38]
cmp rcx, rdi
jae 0x1400321ef
mov rcx, rsi
mov rdx, rdi
call fcn.140038ba0
jmp 0x140032249
cmp rcx, 0x10
jb 0x1400321f9
mov rsi, qword [rax + 0x20]
mov qword [rax + 0x30], rdi
mov rcx, rsi
mov rdx, r9
mov r8, rdi
call sub.VCRUNTIME140.dll_memmove
cmp dword [0x14027e01c], 0xa
jl 0x140032225
mov eax, dword [0x14027e018]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
jne 0x140032243
mov byte [rsi + rdi], 0
cmp dword [0x14027e01c], 0xa
jl 0x140032249
mov eax, dword [0x14027e018]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
je 0x140032249
mov byte [rsi + rdi], 0
jmp 0x140032225
mov ecx, __WSAFDIsSet
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, dword [0x140275264]
call fcn.1400a8bf0
test al, al
je 0x1400323c1
mov rcx, qword [0x14027e8d0]
lea rax, [0x14027e580]
cmp rcx, rax
je 0x14003230c
mov rsi, qword [0x14027e590]
cmp qword [0x14027e598], 0x10
lea r9, [0x14027e580]
jb 0x14003229d
mov r9, qword [0x14027e580]
mov rax, qword [rcx + 0x18]
cmp rax, rsi
jae 0x1400322b0
mov rdx, rsi
call fcn.140038ba0
jmp 0x14003230c
mov rdi, rcx
cmp rax, 0x10
jb 0x1400322bc
mov rdi, qword [rcx]
mov qword [rcx + 0x10], rsi
mov rcx, rdi
mov rdx, r9
mov r8, rsi
call sub.VCRUNTIME140.dll_memmove
cmp dword [0x14027e01c], 0xa
jl 0x1400322e8
mov eax, dword [0x14027e018]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
jne 0x140032306
mov byte [rdi + rsi], 0
cmp dword [0x14027e01c], 0xa
jl 0x14003230c
mov eax, dword [0x14027e018]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
je 0x14003230c
mov byte [rdi + rsi], 0
jmp 0x1400322e8
mov rax, qword [0x14027e8d0]
lea rsi, [rax + 0x20]
lea rcx, [0x14027e700]
cmp rsi, rcx
je 0x1400323b6
mov rdi, qword [0x14027e710]
cmp qword [0x14027e718], 0x10
lea r9, [0x14027e700]
jb 0x140032346
mov r9, qword [0x14027e700]
mov rcx, qword [rax + 0x38]
cmp rcx, rdi
jae 0x14003235c
mov rcx, rsi
mov rdx, rdi
call fcn.140038ba0
jmp 0x1400323b6
cmp rcx, 0x10
jb 0x140032366
mov rsi, qword [rax + 0x20]
mov qword [rax + 0x30], rdi
mov rcx, rsi
mov rdx, r9
mov r8, rdi
call sub.VCRUNTIME140.dll_memmove
cmp dword [0x14027e01c], 0xa
jl 0x140032392
mov eax, dword [0x14027e018]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
jne 0x1400323b0
mov byte [rsi + rdi], 0
cmp dword [0x14027e01c], 0xa
jl 0x1400323b6
mov eax, dword [0x14027e018]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
je 0x1400323b6
mov byte [rsi + rdi], 0
jmp 0x140032392
mov ecx, __WSAFDIsSet
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, dword [0x140275250]
call fcn.1400a8bf0
test al, al
je 0x1400323d9
cmp byte [0x14027ec78], 0
je 0x140032400
mov ecx, dword [0x140275250]
call fcn.1400a8bf0
test al, al
jne 0x1400325d3
cmp byte [0x14027ec78], 1
jne 0x1400325d3
xor edi, edi
jmp 0x1400325cc
mov eax, dword [0x14027ceac]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete al
cmp dword [0x14027cea8], 0xa
mov r14, qword [0x14027e8d0]
setl r12b
mov r15, qword [r14 + 0x18]
mov r13, r14
cmp r15, 0x10
jb 0x140032434
mov r13, qword [r14]
or r12b, al
mov rbx, qword [r14 + 0x10]
lea rcx, [0x14027e520]
mov rdi, rcx
jmp 0x140032476
mov rdx, r13
mov r8, rbx
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
lea rcx, [0x14027e520]
je 0x1400324a5
add rdi, 0x20
lea rax, [0x14027e6a0]
cmp rdi, rax
je 0x14003249e
mov rax, qword [rdi + 0x10]
jmp 0x140032485
test r12b, r12b
jne 0x140032466
cmp rax, rbx
jne 0x140032480
test r12b, r12b
je 0x140032485
cmp qword [rdi + 0x18], 0x10
mov rcx, rdi
jb 0x140032450
mov rcx, qword [rdi]
jmp 0x140032450
lea rdi, [0x14027e6a0]
sub rdi, rcx
shr rdi, 5
add edi, 1
cmp edi, 0xb
jle 0x1400324bb
xor esi, esi
jmp 0x14003253c
movsxd rax, edi
shl rax, 5
cmp qword [rax + rcx + 0x18], 0x10
jb 0x1400324d0
mov rbx, qword [rax + rcx]
jmp 0x1400324d4
lea rbx, [rcx + rax]
mov rdi, qword [rax + rcx + 0x10]
mov rsi, rcx
jmp 0x140032506
mov rdx, rbx
mov r8, rdi
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
lea rcx, [0x14027e520]
je 0x140032535
add rsi, 0x20
lea rax, [0x14027e6a0]
cmp rsi, rax
je 0x14003252e
mov rax, qword [rsi + 0x10]
jmp 0x140032515
test r12b, r12b
jne 0x1400324f6
cmp rax, rdi
jne 0x140032510
test r12b, r12b
je 0x140032515
cmp qword [rsi + 0x18], 0x10
mov rcx, rsi
jb 0x1400324e0
mov rcx, qword [rsi]
jmp 0x1400324e0
lea rsi, [0x14027e6a0]
sub rsi, rcx
sar rsi, 5
movsxd rax, esi
shl rax, 5
lea r9, [rcx + rax]
mov dil, 1
cmp r9, r14
je 0x1400325cc
cmp qword [rax + rcx + 0x18], 0x10
jb 0x14003255a
mov r9, qword [r9]
lea rcx, [0x14027e520]
mov rbx, qword [rax + rcx + 0x10]
cmp r15, rbx
jae 0x140032578
mov rcx, r14
mov rdx, rbx
call fcn.140038ba0
jmp 0x1400325cc
mov qword [r14 + 0x10], rbx
mov rcx, r13
mov rdx, r9
mov r8, rbx
call sub.VCRUNTIME140.dll_memmove
cmp dword [0x14027e01c], 0xa
jl 0x1400325a4
mov eax, dword [0x14027e018]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
jne 0x1400325c4
mov byte [r13 + rbx], 0
cmp dword [0x14027e01c], 0xa
jl 0x1400325cc
mov eax, dword [0x14027e018]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
je 0x1400325cc
mov byte [r13 + rbx], 0
jmp 0x1400325a4
mov byte [0x14027ec78], dil
mov r14, qword [0x14027e8d0]
mov eax, dword [0x14027ceac]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete al
cmp dword [0x14027cea8], 0xa
setl bl
mov rdi, qword [r14 + 0x10]
cmp qword [r14 + 0x18], 0x10
jb 0x140032604
mov r14, qword [r14]
lea rcx, [0x14027e520]
or bl, al
mov rsi, rcx
jmp 0x140032646
mov rdx, r14
mov r8, rdi
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
lea rcx, [0x14027e520]
je 0x140032673
add rsi, 0x20
lea rax, [0x14027e6a0]
cmp rsi, rax
je 0x14003266c
mov rax, qword [rsi + 0x10]
jmp 0x140032654
test bl, bl
jne 0x140032636
cmp rax, rdi
jne 0x140032650
test bl, bl
je 0x140032654
cmp qword [rsi + 0x18], 0x10
mov rcx, rsi
jb 0x140032620
mov rcx, qword [rsi]
jmp 0x140032620
lea rsi, [0x14027e6a0]
sub rsi, rcx
shr rsi, 5
mov dword [0x140275214], esi
mov ecx, dword [0x140275254]
call fcn.1400a8bf0
test al, al
je 0x140032698
cmp byte [0x14027ec8c], 0
je 0x1400326bf
mov ecx, dword [0x140275254]
call fcn.1400a8bf0
test al, al
jne 0x140032b49
cmp byte [0x14027ec8c], 1
jne 0x140032b49
xor ebx, ebx
jmp 0x140032b43
mov r14, qword [0x14027e8d0]
mov eax, dword [0x14027ceac]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete al
cmp dword [0x14027cea8], 0xa
lea r15, [r14 + 0x20]
setl r13b
mov rsi, qword [r14 + 0x38]
mov r12, r15
cmp rsi, 0x10
jb 0x1400326f8
mov r12, qword [r14 + 0x20]
or r13b, al
mov rdi, qword [r14 + 0x30]
mov rbx, qword [0x14027e6b0]
lea rdx, [0x14027e6a0]
jmp 0x140032715
test r13b, r13b
jne 0x140032750
cmp rbx, rdi
jne 0x140032710
test r13b, r13b
je 0x140032715
cmp qword [0x14027e6b8], 0x10
mov rcx, rdx
jb 0x140032733
mov rcx, qword [0x14027e6a0]
mov rdx, r12
mov r8, rdi
call sub.VCRUNTIME140.dll_memcmp
lea rdx, [0x14027e6a0]
mov rcx, rdx
test eax, eax
je 0x1400328bb
mov rax, qword [0x14027e6d0]
jmp 0x140032765
test r13b, r13b
jne 0x1400327a8
cmp rax, rdi
jne 0x140032760
test r13b, r13b
je 0x140032765
cmp qword [0x14027e6d8], 0x10
lea rcx, [0x14027e6c0]
jb 0x140032787
mov rcx, qword [0x14027e6c0]
mov rdx, r12
mov r8, rdi
call sub.VCRUNTIME140.dll_memcmp
lea rcx, [0x14027e6c0]
test eax, eax
lea rdx, [0x14027e6a0]
je 0x1400328bb
mov rax, qword [0x14027e6f0]
jmp 0x1400327c5
test r13b, r13b
jne 0x140032808
cmp rax, rdi
jne 0x1400327c0
test r13b, r13b
je 0x1400327c5
cmp qword [0x14027e6f8], 0x10
lea rcx, [0x14027e6e0]
jb 0x1400327e7
mov rcx, qword [0x14027e6e0]
mov rdx, r12
mov r8, rdi
call sub.VCRUNTIME140.dll_memcmp
lea rcx, [0x14027e6e0]
test eax, eax
lea rdx, [0x14027e6a0]
je 0x1400328bb
mov rax, qword [0x14027e710]
jmp 0x140032825
test r13b, r13b
jne 0x140032864
cmp rax, rdi
jne 0x140032820
test r13b, r13b
je 0x140032825
cmp qword [0x14027e718], 0x10
lea rcx, [0x14027e700]
jb 0x140032847
mov rcx, qword [0x14027e700]
mov rdx, r12
mov r8, rdi
call sub.VCRUNTIME140.dll_memcmp
lea rcx, [0x14027e700]
test eax, eax
lea rdx, [0x14027e6a0]
je 0x1400328bb
mov rax, qword [0x14027e730]
jmp 0x140032875
test r13b, r13b
jne 0x1400328b4
cmp rax, rdi
jne 0x140032870
test r13b, r13b
je 0x140032875
cmp qword [0x14027e738], 0x10
lea rcx, [0x14027e720]
jb 0x140032897
mov rcx, qword [0x14027e720]
mov rdx, r12
mov r8, rdi
call sub.VCRUNTIME140.dll_memcmp
lea rcx, [0x14027e720]
test eax, eax
lea rdx, [0x14027e6a0]
je 0x1400328bb
lea rcx, [0x14027e740]
sub rcx, rdx
shr rcx, 5
add ecx, 1
cmp ecx, 4
jle 0x1400328d1
xor ecx, ecx
jmp 0x140032ab6
mov qword [rbp + 0xa8], rsi
movsxd rax, ecx
shl rax, 5
cmp qword [rax + rdx + 0x18], 0x10
jb 0x1400328ed
mov rsi, qword [rax + rdx]
jmp 0x1400328f1
lea rsi, [rdx + rax]
mov rdi, qword [rax + rdx + 0x10]
jmp 0x140032905
test r13b, r13b
jne 0x140032940
cmp rbx, rdi
jne 0x140032900
test r13b, r13b
je 0x140032905
cmp qword [0x14027e6b8], 0x10
mov rcx, rdx
jb 0x140032923
mov rcx, qword [0x14027e6a0]
mov rdx, rsi
mov r8, rbx
call sub.VCRUNTIME140.dll_memcmp
lea rdx, [0x14027e6a0]
mov rcx, rdx
test eax, eax
je 0x140032aa8
mov rax, qword [0x14027e6d0]
jmp 0x140032955
test r13b, r13b
jne 0x140032998
cmp rax, rdi
jne 0x140032950
test r13b, r13b
je 0x140032955
cmp qword [0x14027e6d8], 0x10
lea rcx, [0x14027e6c0]
jb 0x140032977
mov rcx, qword [0x14027e6c0]
mov rdx, rsi
mov r8, rdi
call sub.VCRUNTIME140.dll_memcmp
lea rcx, [0x14027e6c0]
test eax, eax
lea rdx, [0x14027e6a0]
je 0x140032aa8
mov rax, qword [0x14027e6f0]
jmp 0x1400329b5
test r13b, r13b
jne 0x1400329f8
cmp rax, rdi
jne 0x1400329b0
test r13b, r13b
je 0x1400329b5
cmp qword [0x14027e6f8], 0x10
lea rcx, [0x14027e6e0]
jb 0x1400329d7
mov rcx, qword [0x14027e6e0]
mov rdx, rsi
mov r8, rdi
call sub.VCRUNTIME140.dll_memcmp
lea rcx, [0x14027e6e0]
test eax, eax
lea rdx, [0x14027e6a0]
je 0x140032aa8
mov rax, qword [0x14027e710]
jmp 0x140032a15
test r13b, r13b
jne 0x140032a54
cmp rax, rdi
jne 0x140032a10
test r13b, r13b
je 0x140032a15
cmp qword [0x14027e718], 0x10
lea rcx, [0x14027e700]
jb 0x140032a37
mov rcx, qword [0x14027e700]
mov rdx, rsi
mov r8, rdi
call sub.VCRUNTIME140.dll_memcmp
lea rcx, [0x14027e700]
test eax, eax
lea rdx, [0x14027e6a0]
je 0x140032aa8
mov rax, qword [0x14027e730]
jmp 0x140032a62
test r13b, r13b
jne 0x140032aa1
cmp rax, rdi
jne 0x140032a5d
test r13b, r13b
je 0x140032a62
cmp qword [0x14027e738], 0x10
lea rcx, [0x14027e720]
jb 0x140032a84
mov rcx, qword [0x14027e720]
mov rdx, rsi
mov r8, rdi
call sub.VCRUNTIME140.dll_memcmp
lea rcx, [0x14027e720]
test eax, eax
lea rdx, [0x14027e6a0]
je 0x140032aa8
lea rcx, [0x14027e740]
sub rcx, rdx
sar rcx, 5
mov rsi, qword [rbp + 0xa8]
movsxd rax, ecx
shl rax, 5
lea r9, [rdx + rax]
mov bl, 1
cmp r9, r15
je 0x140032b43
cmp qword [rax + rdx + 0x18], 0x10
jb 0x140032ad3
mov r9, qword [r9]
lea rcx, [0x14027e6a0]
mov rdi, qword [rax + rcx + 0x10]
cmp rsi, rdi
jae 0x140032af1
mov rcx, r15
mov rdx, rdi
call fcn.140038ba0
jmp 0x140032b43
mov qword [r14 + 0x30], rdi
mov rcx, r12
mov rdx, r9
mov r8, rdi
call sub.VCRUNTIME140.dll_memmove
cmp dword [0x14027e01c], 0xa
jl 0x140032b1d
mov eax, dword [0x14027e018]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
jne 0x140032b3c
mov byte [r12 + rdi], 0
cmp dword [0x14027e01c], 0xa
jl 0x140032b43
mov eax, dword [0x14027e018]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
je 0x140032b43
mov byte [r12 + rdi], 0
jmp 0x140032b1d
mov byte [0x14027ec8c], bl
mov rsi, qword [0x14027e8d0]
mov eax, dword [0x14027ceac]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete al
cmp dword [0x14027cea8], 0xa
setl bl
mov rdi, qword [rsi + 0x30]
cmp qword [rsi + 0x38], 0x10
jb 0x140032b7d
mov rsi, qword [rsi + 0x20]
jmp 0x140032b81
add rsi, 0x20
lea rdx, [0x14027e6a0]
or bl, al
mov rax, qword [0x14027e6b0]
jmp 0x140032ba4
test bl, bl
jne 0x140032bde
cmp rax, rdi
jne 0x140032ba0
test bl, bl
je 0x140032ba4
cmp qword [0x14027e6b8], 0x10
mov rcx, rdx
jb 0x140032bc1
mov rcx, qword [0x14027e6a0]
mov rdx, rsi
mov r8, rdi
call sub.VCRUNTIME140.dll_memcmp
lea rdx, [0x14027e6a0]
mov rcx, rdx
test eax, eax
je 0x140032d29
mov rax, qword [0x14027e6d0]
jmp 0x140032bf4
test bl, bl
jne 0x140032c36
cmp rax, rdi
jne 0x140032bf0
test bl, bl
je 0x140032bf4
cmp qword [0x14027e6d8], 0x10
lea rcx, [0x14027e6c0]
jb 0x140032c15
mov rcx, qword [0x14027e6c0]
mov rdx, rsi
mov r8, rdi
call sub.VCRUNTIME140.dll_memcmp
lea rcx, [0x14027e6c0]
test eax, eax
lea rdx, [0x14027e6a0]
je 0x140032d29
mov rax, qword [0x14027e6f0]
jmp 0x140032c44
test bl, bl
jne 0x140032c86
cmp rax, rdi
jne 0x140032c40
test bl, bl
je 0x140032c44
cmp qword [0x14027e6f8], 0x10
lea rcx, [0x14027e6e0]
jb 0x140032c65
mov rcx, qword [0x14027e6e0]
mov rdx, rsi
mov r8, rdi
call sub.VCRUNTIME140.dll_memcmp
lea rcx, [0x14027e6e0]
test eax, eax
lea rdx, [0x14027e6a0]
je 0x140032d29
mov rax, qword [0x14027e710]
jmp 0x140032c94
test bl, bl
jne 0x140032cd2
cmp rax, rdi
jne 0x140032c90
test bl, bl
je 0x140032c94
cmp qword [0x14027e718], 0x10
lea rcx, [0x14027e700]
jb 0x140032cb5
mov rcx, qword [0x14027e700]
mov rdx, rsi
mov r8, rdi
call sub.VCRUNTIME140.dll_memcmp
lea rcx, [0x14027e700]
test eax, eax
lea rdx, [0x14027e6a0]
je 0x140032d29
mov rax, qword [0x14027e730]
jmp 0x140032ce4
test bl, bl
jne 0x140032d22
cmp rax, rdi
jne 0x140032ce0
test bl, bl
je 0x140032ce4
cmp qword [0x14027e738], 0x10
lea rcx, [0x14027e720]
jb 0x140032d05
mov rcx, qword [0x14027e720]
mov rdx, rsi
mov r8, rdi
call sub.VCRUNTIME140.dll_memcmp
lea rcx, [0x14027e720]
test eax, eax
lea rdx, [0x14027e6a0]
je 0x140032d29
lea rcx, [0x14027e740]
sub rcx, rdx
shr rcx, 5
mov dword [0x140275218], ecx
mov ecx, dword [0x140275258]
call fcn.1400a8bf0
test al, al
je 0x140032d4e
cmp byte [0x14027ec8d], 0
je 0x140032d75
mov ecx, dword [0x140275258]
call fcn.1400a8bf0
test al, al
jne 0x14003307e
cmp byte [0x14027ec8d], 1
jne 0x14003307e
xor ebx, ebx
jmp 0x140033078
mov r14, qword [0x14027e8d0]
mov eax, dword [0x14027ceac]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete al
cmp dword [0x14027cea8], 0xa
lea r15, [r14 + 0x40]
setl r13b
mov rsi, qword [r14 + 0x58]
mov r12, r15
cmp rsi, 0x10
jb 0x140032dae
mov r12, qword [r14 + 0x40]
or r13b, al
mov rdi, qword [r14 + 0x50]
mov rbx, qword [0x14027e750]
jmp 0x140032dc5
test r13b, r13b
jne 0x140032e01
cmp rbx, rdi
jne 0x140032dc0
test r13b, r13b
je 0x140032dc5
cmp qword [0x14027e758], 0x10
lea rcx, [0x14027e740]
jb 0x140032de7
mov rcx, qword [0x14027e740]
mov rdx, r12
mov r8, rdi
call sub.VCRUNTIME140.dll_memcmp
lea rcx, [0x14027e740]
test eax, eax
je 0x140032ea4
mov rax, qword [0x14027e770]
jmp 0x140032e15
test r13b, r13b
jne 0x140032e4d
cmp rax, rdi
jne 0x140032e10
test r13b, r13b
je 0x140032e15
cmp qword [0x14027e778], 0x10
lea rcx, [0x14027e760]
jb 0x140032e37
mov rcx, qword [0x14027e760]
mov rdx, r12
mov r8, rdi
call sub.VCRUNTIME140.dll_memcmp
lea rcx, [0x14027e760]
test eax, eax
je 0x140032ea4
mov rax, qword [0x14027e790]
jmp 0x140032e65
test r13b, r13b
jne 0x140032e9d
cmp rax, rdi
jne 0x140032e60
test r13b, r13b
je 0x140032e65
cmp qword [0x14027e798], 0x10
lea rcx, [0x14027e780]
jb 0x140032e87
mov rcx, qword [0x14027e780]
mov rdx, r12
mov r8, rdi
call sub.VCRUNTIME140.dll_memcmp
lea rcx, [0x14027e780]
test eax, eax
je 0x140032ea4
lea rcx, [0x14027e7a0]
lea rdx, [0x14027e740]
sub rcx, rdx
shr rcx, 5
add ecx, 1
cmp ecx, 2
jle 0x140032ec1
xor ecx, ecx
jmp 0x140032fe9
mov qword [rbp + 0xa8], rsi
movsxd rax, ecx
shl rax, 5
cmp qword [rax + rdx + 0x18], 0x10
jb 0x140032edd
mov rsi, qword [rax + rdx]
jmp 0x140032ee1
lea rsi, [rdx + rax]
mov rdi, qword [rax + rdx + 0x10]
jmp 0x140032ef5
test r13b, r13b
jne 0x140032f31
cmp rbx, rdi
jne 0x140032ef0
test r13b, r13b
je 0x140032ef5
cmp qword [0x14027e758], 0x10
lea rcx, [0x14027e740]
jb 0x140032f17
mov rcx, qword [0x14027e740]
mov rdx, rsi
mov r8, rbx
call sub.VCRUNTIME140.dll_memcmp
lea rcx, [0x14027e740]
test eax, eax
je 0x140032fd4
mov rax, qword [0x14027e770]
jmp 0x140032f45
test r13b, r13b
jne 0x140032f7d
cmp rax, rdi
jne 0x140032f40
test r13b, r13b
je 0x140032f45
cmp qword [0x14027e778], 0x10
lea rcx, [0x14027e760]
jb 0x140032f67
mov rcx, qword [0x14027e760]
mov rdx, rsi
mov r8, rdi
call sub.VCRUNTIME140.dll_memcmp
lea rcx, [0x14027e760]
test eax, eax
je 0x140032fd4
mov rax, qword [0x14027e790]
jmp 0x140032f95
test r13b, r13b
jne 0x140032fcd
cmp rax, rdi
jne 0x140032f90
test r13b, r13b
je 0x140032f95
cmp qword [0x14027e798], 0x10
lea rcx, [0x14027e780]
jb 0x140032fb7
mov rcx, qword [0x14027e780]
mov rdx, rsi
mov r8, rdi
call sub.VCRUNTIME140.dll_memcmp
lea rcx, [0x14027e780]
test eax, eax
je 0x140032fd4
lea rcx, [0x14027e7a0]
lea rdx, [0x14027e740]
sub rcx, rdx
sar rcx, 5
mov rsi, qword [rbp + 0xa8]
movsxd rax, ecx
shl rax, 5
lea r9, [rdx + rax]
mov bl, 1
cmp r9, r15
je 0x140033078
cmp qword [rax + rdx + 0x18], 0x10
jb 0x140033006
mov r9, qword [r9]
lea rcx, [0x14027e740]
mov rdi, qword [rax + rcx + 0x10]
cmp rsi, rdi
jae 0x140033024
mov rcx, r15
mov rdx, rdi
call fcn.140038ba0
jmp 0x140033078
mov qword [r14 + 0x50], rdi
mov rcx, r12
mov rdx, r9
mov r8, rdi
call sub.VCRUNTIME140.dll_memmove
cmp dword [0x14027e01c], 0xa
jl 0x140033052
mov eax, dword [0x14027e018]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
jne 0x140033071
jmp 0x140033052
mov byte [r12 + rdi], 0
cmp dword [0x14027e01c], 0xa
jl 0x140033078
mov eax, dword [0x14027e018]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
je 0x140033078
mov byte [r12 + rdi], 0
jmp 0x140033052
mov byte [0x14027ec8d], bl
mov rsi, qword [0x14027e8d0]
mov eax, dword [0x14027ceac]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete al
cmp dword [0x14027cea8], 0xa
setl bl
mov rdi, qword [rsi + 0x50]
cmp qword [rsi + 0x58], 0x10
jb 0x1400330b2
mov rsi, qword [rsi + 0x40]
jmp 0x1400330b6
add rsi, 0x40
or bl, al
mov rax, qword [0x14027e750]
jmp 0x1400330d4
test bl, bl
jne 0x14003310f
cmp rax, rdi
jne 0x1400330d0
test bl, bl
je 0x1400330d4
cmp qword [0x14027e758], 0x10
lea rcx, [0x14027e740]
jb 0x1400330f5
mov rcx, qword [0x14027e740]
mov rdx, rsi
mov r8, rdi
call sub.VCRUNTIME140.dll_memcmp
lea rcx, [0x14027e740]
test eax, eax
je 0x1400331b2
mov rax, qword [0x14027e770]
jmp 0x140033124
test bl, bl
jne 0x14003315b
cmp rax, rdi
jne 0x140033120
test bl, bl
je 0x140033124
cmp qword [0x14027e778], 0x10
lea rcx, [0x14027e760]
jb 0x140033145
mov rcx, qword [0x14027e760]
mov rdx, rsi
mov r8, rdi
call sub.VCRUNTIME140.dll_memcmp
lea rcx, [0x14027e760]
test eax, eax
je 0x1400331b2
mov rax, qword [0x14027e790]
jmp 0x140033174
test bl, bl
jne 0x1400331ab
cmp rax, rdi
jne 0x140033170
test bl, bl
je 0x140033174
cmp qword [0x14027e798], 0x10
lea rcx, [0x14027e780]
jb 0x140033195
mov rcx, qword [0x14027e780]
mov rdx, rsi
mov r8, rdi
call sub.VCRUNTIME140.dll_memcmp
lea rcx, [0x14027e780]
test eax, eax
je 0x1400331b2
lea rcx, [0x14027e7a0]
lea rax, [0x14027e740]
sub rcx, rax
shr rcx, 5
mov dword [0x14027521c], ecx
cmp dword [rbp + 0xa4], 0x88760868
mov rsi, qword [sym.imp.USER32.dll_IsWindow]
lea rdi, [rbp + 0x20]
mov rbx, qword [sym.imp.USER32.dll_PeekMessageW]
mov r14, qword [sym.imp.USER32.dll_TranslateMessage]
mov r15, qword [sym.imp.USER32.dll_DispatchMessageW]
jne 0x1400318fc
mov rcx, qword [0x14027ec70]
mov rax, qword [rcx]
call qword [rax + Ordinal_26]
cmp eax, 0x88760869
jne 0x1400318fc
cmp dword [0x14027da0c], 0xa
jl 0x140033250
mov eax, dword [0x14027da08]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
jne 0x140033276
jmp 0x140033250
mov rax, qword [rcx]
lea rdx, [0x14027ec30]
call qword [rax + 0x80]
call fcn.140076e30
jmp 0x1400318fc
call fcn.140076db0
mov rcx, qword [0x14027ec70]
cmp dword [0x14027da0c], 0xa
jl 0x14003322a
mov eax, dword [0x14027da08]
lea edx, [rax - 1]
imul edx, eax
and edx, 1
je 0x14003322a
call fcn.140076db0
jmp 0x140033250
jmp 0x140033280
jmp 0x140033290
jmp 0x1400332a0
movups xmm0, xmmword [0x1401ca2d0]
movaps xmmword [rbp + 0xd0], xmm0
movups xmm0, xmmword [0x1401ca2d9]
movups xmmword [rbp + 0xd9], xmm0
mov byte [rbp + 0xd0], 0x46
movups xmm0, xmmword [rbp + 0xd1]
xorps xmm0, xmmword [str.6789:_____ABCDE]
movups xmmword [rbp + 0xd1], xmm0
xor byte [rbp + 0xe1], 0x46
xor byte [rbp + 0xe2], 0x47
xor byte [rbp + 0xe3], 0x48
xor byte [rbp + 0xe4], 0x49
xor byte [rbp + 0xe5], 0x4a
xor byte [rbp + 0xe6], 0x4b
xor byte [rbp + 0xe7], 0x4c
xor byte [rbp + 0xe8], 0x4d
lea rax, vtable.std::exception.0
mov qword [rbp + 8], rax
lea rdx, [rbp + 0x10]
xorps xmm0, xmm0
movups xmmword [rbp + 0x10], xmm0
lea rax, [rbp + 0xd0]
mov qword [rbp + 0x20], rax
mov byte [rbp + 0x28], 1
lea rcx, [rbp + 0x20]
call sub.VCRUNTIME140.dll___std_exception_copy
cmp dword [0x14027d9cc], 0xa
jl 0x1400333d6
mov eax, dword [0x14027d9c8]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
je 0x1400333d6
nop
jmp 0x140033360
mov rsi, qword [0x14027ec70]
test rsi, rsi
je 0x14003341f
cmp dword [0x14027d9ec], 0xa
jl 0x1400333e6
mov eax, dword [0x14027d9e8]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
jne 0x140033409
jmp 0x1400333e6
call fcn.140076d10
call fcn.140077290
xor ecx, ecx
call fcn.140043fe0
mov rsi, qword [0x14027ec70]
test rsi, rsi
je 0x1400334a6
cmp dword [0x14027d9ec], 0xa
jl 0x14003346d
mov eax, dword [0x14027d9e8]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
jne 0x140033490
jmp 0x14003346d
lea rdx, [0x1401f02e0]
lea rcx, [rbp + 8]
call sub.VCRUNTIME140.dll__CxxThrowException
mov rax, qword [rsi]
mov rcx, rsi
call qword [rax + reloc.WS2_32.dll_recv]
cmp dword [0x14027d9ec], 0xa
jl 0x140033414
mov eax, dword [0x14027d9e8]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
je 0x140033414
mov rax, qword [rsi]
mov rcx, rsi
call qword [rax + reloc.WS2_32.dll_recv]
jmp 0x1400333e6
mov qword [0x14027ec70], 0
mov rcx, qword [0x14027ece8]
test rcx, rcx
je 0x14003343c
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [0x14027ece8], 0
mov rdx, qword [rbp + 0x68]
mov rcx, qword [rbp + 0x90]
call qword [sym.imp.USER32.dll_UnregisterClassW]
mov eax, 1
movaps xmm6, xmmword [rbp + 0x130]
add rsp, 0x1c8
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
mov rax, qword [rsi]
mov rcx, rsi
call qword [rax + reloc.WS2_32.dll_recv]
cmp dword [0x14027d9ec], 0xa
jl 0x14003349b
mov eax, dword [0x14027d9e8]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
je 0x14003349b
mov rax, qword [rsi]
mov rcx, rsi
call qword [rax + reloc.WS2_32.dll_recv]
jmp 0x14003346d
mov qword [0x14027ec70], 0
mov rcx, qword [0x14027ece8]
test rcx, rcx
je 0x1400334c3
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [0x14027ece8], 0
mov rcx, qword [0x14027d168]
call qword [sym.imp.USER32.dll_DestroyWindow]
mov rdx, qword [rbp + 0x68]
mov rcx, qword [rbp + 0x90]
call qword [sym.imp.USER32.dll_UnregisterClassW]
xor eax, eax
jmp 0x140033452