Function at 0x1800134e8
Capabilities:
Contain obfuscated stackstrings
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x450]
sub rsp, 0x550
mov rax, qword [0x18004dbe8]
xor rax, rsp
mov qword [rbp + 0x440], rax
mov rax, qword [rbp + 0x4b0]
xor edi, edi
mov qword [rbp + 0x40], rax
mov r10d, 0x750f3521
mov eax, dword [0x18004d730]
mov dword [rbp - 0x74], eax
mov qword [rbp - 0x30], 0x24
mov qword [rbp - 0x80], 0x77
movzx eax, word [0x18004d734]
mov word [rsp + 0x64], ax
movsx eax, word [0x18004d738]
mov dword [rbp - 0x48], eax
mov eax, dword [0x18004d718]
mov qword [rbp - 0x58], 0xc8
mov qword [rbp - 0x50], rax
mov eax, dword [0x18004d6b0]
mov qword [rbp - 0x20], rax
movzx eax, word [0x18004d6fc]
mov byte [rsp + 0x50], 0xf3
mov qword [rbp - 0x68], 0x7d
mov word [rsp + 0x68], ax
mov eax, dword [0x18004d6e4]
mov dword [rsp + 0x78], eax
mov eax, 0xdf01
mov r12d, dword [0x18004d720]
mov word [rsp + 0x54], ax
mov eax, dword [0x18004d6e4]
mov qword [rbp + 0x50], rcx
mov eax, 0xc67f
mov word [rsp + 0x70], ax
mov ecx, 0xaf3e
mov byte [rsp + 0x58], 0x34
mov eax, 0x7107
mov word [rsp + 0x60], ax
mov qword [rbp + 0x20], rdx
mov dl, byte [0x18004d663]
mov byte [rsp + 0x70], 0xee
mov rax, qword [0x18004d6c0]
mov byte [rsp + 0x70], al
mov eax, dword [0x18004d6b0]
mov word [rsp + 0x70], ax
movzx eax, word [0x18004d6b8]
mov word [rsp + 0x70], ax
movzx eax, word [0x18004d6e0]
mov eax, 0xeaac084d
mov qword [rbp + 0x78], r8
mov qword [rbp + 0x58], rax
mov r8d, 4
mov eax, dword [0x1809cbe90]
mov dword [rsp + 0x74], eax
mov eax, dword [rsp + 0x74]
add eax, 0x641
mov qword [rbp + 0x70], r9
mov dword [rbp + 8], eax
movsx eax, word [rsp + 0x64]
imul eax, eax, 0x2b
movzx r9d, r12b
mov dword [rbp - 0x18], r12d
mov word [rsp + 0x64], ax
mov eax, dword [rsp + 0x74]
add eax, 0x5bd
mov dword [rbp - 0x74], eax
mov al, byte [0x18004d663]
mov eax, dword [rsp + 0x78]
sub cx, word [0x18004d718]
mov byte [0x18004d60f], r8b
movzx eax, word [rsp + 0x54]
add cx, ax
mov word [rsp + 0x54], cx
movzx ecx, word [rsp + 0x54]
movzx eax, word [rsp + 0x54]
sub ecx, r9d
add ax, cx
mov word [rsp + 0x54], ax
movsx eax, byte [0x18004d60f]
mov ecx, eax
test al, al
je 0x18001373b
sub ecx, 1
je 0x18001370a
sub ecx, 1
je 0x1800136fc
sub ecx, 1
je 0x1800136e0
cmp ecx, 1
jne 0x180013745
movzx eax, word [rsp + 0x54]
movzx ecx, word [0x18004d6f0]
sub rax, 0xd5
sub ecx, 0x182e7b16
mov qword [0x18004d6a8], rax
mov dword [rsp + 0x78], ecx
jmp 0x180013745
movsx eax, byte [str.Pconnection_reset]
imul ecx, eax, 0xffffffa9
mov dword [0x18004d6f4], 0xd482812e
mov byte [0x18004d626], cl
jmp 0x180013745
mov rax, qword [rbp - 0x30]
sub al, 0x28
mov byte [str._AadPluginUninitial], al
jmp 0x180013745
mov eax, dword [0x18004d720]
mov ecx, 0x7f52
sub ax, cx
cmp word [0x18004d6d0], di
mov word [0x18004d6b4], ax
movzx ecx, byte [0x18004d663]
jne 0x180013734
mov ecx, 0x1d01
mov word [rsp + 0x54], cx
jmp 0x180013745
mov dword [0x18004d6b0], 0x478c7fab
mov eax, dword [rsp + 0x74]
xor dl, 0x72
add eax, 0x71f
movsx ecx, dl
mov dword [rbp - 0x14], eax
movzx eax, word [rsp + 0x64]
add cx, ax
mov word [rsp + 0x64], cx
movsx edx, word [0x18004d6f8]
movsx ecx, word [0x18004d728]
mov eax, dword [0x1809cbe90]
imul edx, ecx
mov word [0x18004d6f8], dx
mov dword [rsp + 0x74], eax
mov al, byte [0x18004d663]
test al, al
jne 0x1800137a8
mov rax, qword [0x18004d680]
test rax, rax
je 0x1800137a8
mov rax, qword [rbp - 0x30]
add al, 0x28
mov byte [0x18004d60f], al
mov eax, dword [rsp + 0x74]
mov rcx, qword [0x18004d6d8]
add eax, 0x6a6
mov dword [rbp - 0x74], eax
movzx eax, word [0x1809cbe90]
mov word [rsp + 0x70], ax
mov rax, qword [rbp - 0x80]
and rax, rcx
sub rcx, rax
mov eax, dword [rsp + 0x74]
add eax, 0x82d
mov qword [0x18004d6d8], rcx
mov dword [rbp - 0x74], eax
mov eax, dword [rsp + 0x74]
add eax, 0x772
mov dword [rsp + 0x74], eax
mov eax, dword [0x1809cbe90]
mov dword [rsp + 0x6c], eax
mov eax, dword [rsp + 0x6c]
add eax, 0x7d3
mov dword [rbp - 0x28], eax
movzx eax, word [0x18004d718]
mov word [0x18004d6f0], r8w
mov r8d, 0x2b
mov word [0x18004d6e0], ax
movzx eax, word [0x18004d6f0]
mov ecx, eax
lea r11d, [r8 - 0x2a]
test eax, eax
je 0x18001389a
sub ecx, r11d
je 0x180013894
sub ecx, r11d
je 0x18001387a
sub ecx, r11d
je 0x180013866
cmp ecx, r11d
jne 0x1800138ad
mov cl, byte [0x18004d64e]
mov r8d, 0xec8b
mov al, byte [0x18004d728]
add al, cl
or cl, al
mov byte [0x18004d64e], cl
jmp 0x1800138ad
movzx eax, word [rsp + 0x60]
mov ecx, 0x7409
sub ax, cx
mov word [rsp + 0x68], ax
jmp 0x1800138ad
mov byte [0x18004d663], 0xa9
movsx eax, word [rsp + 0x64]
imul eax, eax, 0xca
mov dword [0x18004d6fc], eax
jmp 0x1800138ad
mov rax, qword [rbp - 0x58]
jmp 0x1800138ad
movzx eax, word [0x18004d6f8]
mov qword [0x18004d700], r11
mov word [rsp + 0x70], ax
mov eax, dword [rsp + 0x6c]
add eax, 0x90e
mov dword [rbp - 0x74], eax
mov eax, dword [rsp + 0x6c]
add eax, 0x802
mov dword [rsp + 0x7c], eax
mov eax, 0x7d20
movzx ecx, byte [0x18004d623]
add cx, ax
mov eax, dword [0x1809cbe90]
mov word [0x18004d6d0], cx
mov ecx, 0xbf336e6a
add rcx, qword [0x18004d6b8]
mov qword [rbp - 0x68], rcx
mov dword [rsp + 0x6c], eax
mov eax, dword [rsp + 0x6c]
add eax, 0x85d
mov dword [rsp + 0x7c], eax
mov eax, 2
mov r14, qword [rbp - 0x80]
mov r15d, dword [0x18004d720]
sub r14, 0x4e
xor r15b, 0x4e
mov word [0x18004d68c], ax
movsx ecx, word [0x18004d68c]
mov qword [rbp + 0x48], r14
mov dword [rbp - 0x60], r15d
sub ecx, r11d
je 0x18001394f
cmp ecx, r11d
jne 0x18001396f
mov eax, dword [0x18004d71c]
sub eax, 0x181e4cf3
mov qword [0x18004d6d8], rax
jmp 0x18001396f
mov al, byte [0x18004d698]
movsx ecx, byte [rsp + 0x58]
and al, 0x20
mov byte [0x18004d60e], al
mov eax, 0x7863
sub cx, ax
mov word [rsp + 0x60], cx
mov eax, dword [rsp + 0x6c]
movabs rcx, 0xfa25af52e68f2
add eax, 0x6c4
mov dword [rbp], eax
mov eax, dword [rsp + 0x6c]
add eax, 0x5e7
mov dword [rsp + 0x7c], eax
mov eax, dword [0x1809cbe90]
mov dword [rsp + 0x6c], eax
movzx eax, byte [0x18004d60e]
add rax, rcx
mov qword [rbp - 0x80], rax
mov eax, dword [rsp + 0x6c]
add eax, 0x809
mov dword [rbp - 0x10], eax
movzx eax, word [rsp + 0x68]
test ax, ax
je 0x1800139c8
mov edx, r11d
test r15b, r15b
je 0x1800139ca
mov edx, edi
mov rax, qword [rbp - 0x68]
mov rax, qword [rbp - 0x58]
movsx rcx, byte [0x18004d679]
mov rax, qword [rbp - 0x50]
not rax
cmp rax, rcx
cmovbe edx, r11d
not edx
cmp edx, 0xffffffff
jle 0x180013a24
movsx ecx, byte [0x18004d60f]
mov eax, dword [0x18004d700]
sub dword [0x18004d6fc], eax
mov eax, dword [0x18004d724]
sub eax, ecx
mov rcx, qword [rbp - 0x80]
not eax
movsxd rdx, eax
movsxd rax, dword [0x18004d6fc]
or cl, al
sub dl, cl
mov byte [rsp + 0x58], dl
jmp 0x180013a47
movzx eax, word [rsp + 0x64]
test ax, ax
je 0x180013a47
movsx rax, word [rsp + 0x68]
mov rdx, qword [rbp - 0x20]
imul rdx, rax
mov rax, qword [rbp - 0x20]
sub rax, rdx
mov qword [rbp - 0x20], rax
mov eax, dword [rsp + 0x6c]
mov edx, 0xffcb
add eax, 0x8ba
mov qword [rbp + 0x30], rdi
mov dword [rsp + 0x5c], eax
mov r13d, 0xffffffcb
mov al, byte [rsp + 0x58]
mov byte [0x18004d626], al
mov eax, dword [rsp + 0x6c]
add eax, 0x6cc
mov dword [rbp + 0x14], r13d
mov dword [rsp + 0x7c], eax
movzx eax, word [rsp + 0x54]
sub rax, 0x996c
mov qword [rbp - 0x80], rax
mov rax, qword [0x18004d6c0]
mov esi, dword [0x1809cbe90]
movzx ecx, si
mov byte [0x180b3cb9f], al
mov dword [rsp + 0x6c], esi
mov rax, qword [rbp - 0x80]
test rax, rax
mov eax, dword [rsp + 0x6c]
cmovne cx, dx
add eax, 0x891
mov word [0x18004d6a0], cx
mov dword [rbp - 0x70], eax
mov eax, dword [rsp + 0x6c]
add eax, 0x64a
mov dword [rbp - 0x38], eax
mov eax, 0x4d13
mov byte [str._AadPluginUninitial], 0xcd
movsx ecx, byte [0x18004d626]
movzx ebx, cx
imul ebx, eax
mov eax, dword [rsp + 0x6c]
add eax, 0x8cf
mov dword [rsp + 0x7c], eax
movzx eax, word [rsp + 0x54]
cmp rax, qword [0x18004d6b8]
mov dword [rbp - 0x78], ebx
ja 0x180013b91
mov eax, r9d
mov edx, edi
not eax
mov ecx, edi
cmp eax, dword [0x18004d6fc]
mov rax, qword [rbp - 0x80]
setge dl
add edx, 0xfffffffe
cmp rax, r8
setne cl
add ecx, 0xfffffffe
cmp edx, ecx
je 0x180013b83
mov rax, qword [rbp - 0x50]
mov edx, edi
cmp rax, 0x3848ea11
movzx eax, word [0x18004d6f0]
setb dl
cmp eax, edx
jne 0x180013b83
movzx eax, word [rsp + 0x54]
mov rdx, qword [0x18004d6e8]
mov rcx, qword [0x18004d6e8]
add edx, eax
mov eax, dword [0x18004d6b0]
not edx
sub ecx, eax
xor ecx, edx
imul ecx, dword [0x18004d6a8]
mov dword [0x18004d6f4], ecx
mov dword [rbp - 0x48], 0xc6
jmp 0x180013bbc
imul rax, qword [0x18004d700], 0x15
mov qword [rbp - 0x80], rax
jmp 0x180013bbc
movzx ecx, word [0x18004d69c]
add rcx, 0xa854
mov qword [0x18004d6c0], rcx
movsx rcx, word [0x18004d68c]
add rcx, qword [0x18004d6d8]
and qword [0x18004d6d8], rcx
movzx eax, byte [0x18004d663]
mov rcx, rdi
movsx rdx, word [0x18004d738]
mov r11, rdi
imul rdx, rax
mov al, byte [0x18004d623]
test al, al
movzx r8d, r12b
mov rax, qword [0x18004d680]
mov r12d, 3
sete cl
mov qword [rbp + 0x60], rdi
sub rdx, rcx
mov dword [rbp + 0x10], edi
add rdx, 0x16332a99
mov qword [rbp + 0x18], rdi
neg rax
mov qword [rbp + 0x80], rdi
mov eax, dword [0x18004d6b0]
not rdx
sbb rcx, rcx
mov qword [rbp + 0x58], rdi
sub eax, dword [0x18004d6b8]
add rcx, 0x1357
imul eax, ecx
xor eax, edx
mov dword [rsp + 0x78], eax
lea eax, [r8 + 0x16c37dda]
mov dword [rbp - 0x48], eax
mov eax, dword [0x18004d6e4]
sub al, 0x29
mov byte [0x18004d64e], al
mov rax, qword [rbp - 0x20]
mov rax, qword [rbp - 0x68]
cmp byte [0x18004d666], dil
je 0x180013d22
mov word [0x18004d6f0], r12w
mov byte [0x18004d663], dil
movzx eax, word [0x18004d6f0]
mov ecx, eax
test eax, eax
je 0x180013cea
sub ecx, 1
je 0x180013cb5
sub ecx, 1
je 0x180013c9e
cmp ecx, 1
jne 0x180013d47
mov byte [str._AadPluginUninitial], 0x34
jmp 0x180013d47
mov rax, qword [0x18004d6e8]
mov esi, edi
mov eax, dword [rbp - 0x48]
sub al, 0x1c
mov byte [rsp + 0x58], al
jmp 0x180013d47
movzx eax, word [0x18004d710]
inc ax
movzx ecx, ax
movzx eax, bx
imul eax, ecx
mov word [rbp - 0x78], ax
mov rax, qword [rbp - 0x50]
test rax, rax
je 0x180013cde
movzx eax, word [0x18004d6f0]
jmp 0x180013ce2
mov al, byte [rsp + 0x50]
mov byte [0x18004d679], al
jmp 0x180013d47
mov r10d, edi
mov rax, r8
imul rax, qword [0x18004d6d8]
movabs rcx, 0xde0b7b22693e0
imul rax, rcx
test rax, rax
movzx eax, word [0x18004d6e0]
sete r10b
sub r10d, eax
mov eax, dword [0x18004d720]
imul esi, eax
jmp 0x180013d47
mov ecx, dword [0x18004d6a4]
movzx eax, byte [0x18004d666]
cmp eax, ecx
jbe 0x180013d47
movzx eax, word [rsp + 0x64]
mov ecx, 0x776f
sub ax, cx
mov word [0x18004d734], ax
movsx eax, byte [0x1809cc0ee]
sub esi, eax
movsx ecx, r15b
and ecx, 0x5295
mov dword [rsp + 0x6c], esi
xor r15d, r15d
mov dword [0x18004d718], ecx
mov eax, 0x6c
test ecx, ecx
je 0x180013e29
sub ecx, 1
je 0x180013e12
sub ecx, 1
je 0x180013dfa
lea r9d, [rax - 0x6b]
sub ecx, 1
je 0x180013daf
cmp ecx, r9d
jne 0x180013e57
mov word [rbp - 0x78], ax
movsx eax, word [0x18004d664]
add eax, 0x487d204f
cdqe
mov qword [rbp - 0x68], rax
jmp 0x180013e57
mov ecx, r15d
mov eax, 0xffffe525
mov word [0x18004d6d0], ax
mov edx, r15d
mov eax, dword [0x18004d71c]
test eax, eax
movzx eax, word [rsp + 0x70]
sete dl
test ax, ax
mov eax, 0xf5
sete cl
cwde
add edx, ecx
movsx ecx, byte [str._AadPluginUninitial]
add cx, dx
add cx, r9w
movsx ecx, cx
imul ecx, eax
mov word [rsp + 0x68], cx
jmp 0x180013e57
movzx ecx, byte [0x18004d663]
movzx eax, word [rsp + 0x60]
add ax, cx
not ax
mov word [rbp - 0x78], ax
jmp 0x180013e51
movzx ecx, byte [rsp + 0x50]
sub ecx, dword [0x18004d730]
mov al, byte [rsp + 0x50]
sub cl, al
mov byte [rsp + 0x50], cl
jmp 0x180013e51
movzx eax, byte [0x18004d627]
movzx edx, byte [0x18004d666]
imul eax, edx
not ax
mov word [rsp + 0x68], ax
mov eax, 0x8f7
add r9w, ax
mov word [rsp + 0x54], r9w
mov r9d, 1
mov qword [rbp - 0x58], r14
mov ebx, 2
mov word [rsp + 0x70], bx
movzx edi, bx
mov cl, byte [0x18004d679]
movzx eax, word [rsp + 0x68]
sub cl, al
mov qword [rbp + 0x38], rdi
mov byte [0x18004d679], cl
mov rax, qword [0x18004d690]
movsxd rcx, dword [0x18004d688]
sub rcx, rax
movzx eax, word [0x18004d664]
not rcx
mov dword [rbp + 0xb8], 0x1a696836
add ax, cx
mov dword [rbp + 0xbc], 0x5f675b68
mov word [0x18004d6f8], ax
mov rax, r15
mov word [rbp + 0xc0], 0x38
add byte [rbp + rax + 0xb8], 6
add rax, r9
cmp rax, 9
jb 0x180013ec4
movsx rcx, word [0x18004d6d0]
lea rax, [rbp + 0xb8]
mov qword [rbp + 0x68], rax
mov rax, qword [rbp - 0x58]
cmp rax, rcx
jle 0x180013f1b
mov eax, dword [rsp + 0x78]
test eax, eax
je 0x180013f37
movzx edi, word [0x18004d6d8]
movzx r9d, word [0x18004d6f4]
add di, di
mov dword [rbp - 0x78], r9d
mov r9d, 1
mov qword [rbp + 0x38], rdi
jmp 0x180013f37
mov al, byte [0x18004d60f]
test al, al
je 0x180013f37
mov rax, qword [rbp - 0x50]
and r14, rax
add qword [0x18004d708], r9
mov qword [rbp + 0x48], r14
mov qword [rbp + 0x28], r15
cmp r8, r14
jl 0x180013f68
mov eax, dword [rsp + 0x78]
mov ecx, 0x4908
add ax, cx
mov ecx, 0xffffa1a9
mov word [0x18004d6d4], ax
movzx eax, r10w
xor ax, cx
mov word [0x18004d6d4], ax
jmp 0x180013f99
mov al, byte [rsp + 0x50]
movzx eax, word [0x18004d734]
movzx ecx, byte [0x18004d623]
not ecx
sub ecx, 0x35
not ecx
cmp ecx, r9d
je 0x180013f99
movzx ecx, word [0x18004d734]
sub ecx, 0x5baf7d7e
or dword [0x18004d6fc], ecx
mov rax, qword [rbp - 0x50]
lea eax, [r14 - 0x44]
mov qword [rbp - 8], r15
mov byte [0x18004d60f], al
movzx eax, word [rsp + 0x54]
test ax, ax
mov rax, qword [0x18004d6c0]
jne 0x180013fc0
mov rax, qword [rbp - 0x20]
mov qword [rbp - 0x68], rax
mov rax, qword [rbp - 0x30]
cmp rax, r14
jne 0x180014069
mov rax, qword [rbp - 0x30]
mov edx, r15d
movsx rcx, byte [str.Pconnection_reset]
cmp rcx, rax
mov eax, r15d
setg dl
cmp byte [str.Pconnection_reset], 0x54
setg al
cmp edx, eax
jbe 0x180014013
mov cl, byte [0x18004d6c8]
mov al, byte [0x18004d663]
sub cl, 0x45
add cl, al
mov byte [0x18004d663], cl
jmp 0x1800140a4
test esi, esi
jne 0x180014043
movsx rcx, byte [0x18004d626]
movabs rax, 0xfffb384cc1071bb5
sub rax, rcx
add qword [0x18004d6a8], rax
mov al, byte [0x18004d663]
sub al, 0x27
mov byte [0x18004d623], al
jmp 0x1800140a4
mov rax, qword [rbp - 0x80]
test rax, rax
je 0x1800140a4
cmp byte [str.Pconnection_reset], r15b
mov ecx, r15d
movzx eax, word [rsp + 0x54]
sete cl
imul eax, ecx
mov dword [0x18004d688], eax
jmp 0x1800140a4
movsx eax, word [rsp + 0x68]
movzx edx, word [0x18004d6a0]
add edx, eax
movsx eax, word [rsp + 0x60]
cmp eax, edx
jne 0x1800140a4
mov rax, qword [rbp - 0x68]
mov qword [rbp - 0x30], rax
test r10d, r10d
je 0x180014097
movsx rcx, word [0x18004d6b4]
jmp 0x18001409e
mov rcx, qword [0x18004d728]
mov byte [0x18004d60f], cl
movzx eax, word [0x180db81de]
add dword [0x18004d6f4], eax
mov rax, qword [rbp + 0x40]
mov dword [rax], r15d
mov eax, dword [rbp - 0x10]
mov edx, dword [rsp + 0x5c]
imul ecx, eax, 0x272
mov eax, dword [rsp + 0x5c]
sub edx, ecx
sub edx, eax
mov eax, dword [rsp + 0x5c]
cmp edx, eax
je 0x180014864
movzx eax, word [0x18004d6f8]
test ax, ax
je 0x180014122
movzx eax, byte [0x18004d666]
movabs rcx, 0xf6ecf45e842fa
sub rcx, rax
mov qword [0x18004d6c8], r15
mov rax, qword [0x18004d690]
add rax, rcx
cmp qword [0x18004d6c8], r15
mov qword [0x18004d690], rax
jne 0x180014133
mov r10d, 8
jmp 0x180014133
mov rax, qword [rbp - 0x50]
test rax, rax
je 0x180014133
mov rax, qword [rbp - 0x50]
mov byte [rsp + 0x50], al
movzx eax, word [rsp + 0x68]
cmp r13w, ax
je 0x180014193
mov rcx, qword [0x18004d690]
movsx rax, word [0x18004d738]
cmp rax, rcx
jne 0x180014172
movsx eax, byte [0x18004d623]
mov dl, byte [0x18004d663]
imul ecx, eax, 0x35
xor dl, 0x1f
sub dl, cl
mov byte [0x18004d60f], dl
jmp 0x180014205
movsx rcx, byte [0x18004d679]
movsx rax, word [0x180c0caa8]
xor rcx, 0x28
mov qword [rbp - 0x20], rcx
mov qword [0x18004d708], rax
jmp 0x180014205
movzx eax, word [rsp + 0x70]
mov eax, r15d
movzx ecx, di
sub ecx, dword [0x18004d6f4]
cmp esi, 0x72
setae al
not eax
cmp eax, ecx
ja 0x1800141d7
mov eax, dword [0x18004d6e4]
mov r10d, r15d
movzx ecx, word [0x18004d6a0]
not ecx
xor eax, ecx
mov ecx, r15d
movzx eax, word [rsp + 0x54]
sete cl
cmp eax, ecx
sete r10b
jmp 0x180014205
movzx eax, word [rsp + 0x60]
test ax, ax
je 0x1800141ed
movzx eax, word [0x18004d6e0]
test ax, ax
je 0x180014205
mov al, byte [0x18004d679]
xor al, 0x46
mov byte [0x18004d663], al
mov dword [0x18004d6b0], 0xffffffe4
mov eax, dword [0x1809cbe90]
mov ecx, r15d
mov dword [rsp + 0x5c], eax
mov edx, r15d
movsx eax, word [0x18004d698]
imul eax, eax, 0xa6d3bf7f
mov qword [rbp + 0x48], rax
mov eax, dword [rsp + 0x5c]
add eax, 0x3f17
mov dword [rbp - 0x40], eax
mov rax, qword [0x18004d6d8]
add rax, 0x5e8c
mov qword [0x18004d6a8], rax
mov eax, dword [rsp + 0x5c]
add eax, 0xb7f5
mov dword [rbp - 0x40], eax
mov eax, dword [rsp + 0x5c]
add eax, 0x7136
mov dword [rbp - 0x40], eax
mov rax, qword [rbp - 0x30]
test rax, rax
movzx eax, byte [0x18004d60e]
sete cl
cmp ecx, eax
movsx rcx, word [rsp + 0x64]
mov eax, r15d
setb dl
cmp qword [0x18004d6a8], rcx
setl al
cmp eax, edx
jbe 0x1800142c9
mov eax, dword [rsp + 0x78]
test eax, eax
je 0x18001429c
cmp qword [0x18004d700], r15
je 0x1800142c9
movsx rcx, word [rsp + 0x60]
mov rax, qword [0x18004d6e8]
cmp rcx, rax
jl 0x1800142ed
movzx eax, word [rsp + 0x60]
test ax, ax
mov al, byte [str._AadPluginUninitial]
jne 0x1800142c1
mov al, dil
mov byte [0x18004d623], al
jmp 0x1800142ed
movsx edx, word [0x18004d6b4]
movzx eax, byte [0x18004d663]
cmp edx, eax
jl 0x1800142ed
mov rax, qword [0x18004d6c0]
add eax, 0x8c57
mov dword [0x18004d730], eax
mov eax, dword [0x1809cbe90]
mov dword [rbp - 0x40], 0x632
mov dword [rsp + 0x5c], eax
mov eax, dword [rsp + 0x5c]
add eax, 0x90d6
mov dword [rbp - 0x10], eax
mov eax, dword [rsp + 0x5c]
add eax, 0x61b
mov dword [rsp + 0x70], eax
mov eax, 4
mov word [rsp + 0x70], ax
mov eax, dword [0x18004d720]
movzx ecx, ax
imul eax, ecx, 0x35
mov ecx, 0xaf8
add ax, cx
movzx ecx, word [rsp + 0x70]
mov word [0x18004d6a0], ax
test ecx, ecx
je 0x1800143bd
sub ecx, 1
je 0x1800143af
sub ecx, 1
je 0x1800143a0
sub ecx, 1
je 0x18001438e
cmp ecx, 1
jne 0x1800143dd
movzx eax, word [0x18004d734]
movzx ecx, al
imul eax, ecx, 0x6f
movzx edx, dil
mov byte [rsp + 0x50], al
movzx ecx, word [0x18004d664]
movzx eax, byte [0x18004d738]
test cx, cx
cmovne edx, eax
mov byte [0x18004d64e], dl
jmp 0x1800143dd
movzx eax, word [rsp + 0x54]
imul rcx, rax, 0xf1
mov qword [rbp - 0x30], rcx
jmp 0x1800143dd
mov eax, dword [0x1809cbe90]
mov qword [0x18004d700], rax
jmp 0x1800143dd
movzx eax, word [rsp + 0x70]
mov word [0x18004d6a0], ax
jmp 0x1800143dd
movsx eax, byte [str.Pconnection_reset]
add ax, r10w
mov word [rbp - 0x78], ax
movzx eax, word [rsp + 0x60]
movzx eax, word [rsp + 0x70]
mov dword [0x18004d6fc], r15d
mov eax, dword [rsp + 0x5c]
mov r8d, r15d
add eax, 0xcd1
mov edx, r15d
mov dword [rsp + 0x5c], eax
mov ecx, r15d
mov rax, qword [rbp - 0x30]
add eax, 0x6f15d7f
cmp word [0x18004d738], r15w
mov dword [0x18004d6f4], eax
mov eax, r15d
sete al
cmp r10d, eax
mov rax, qword [rbp - 0x20]
setge r8b
cmp rax, 0xdd0d
movzx eax, word [rsp + 0x54]
setne dl
cmp edx, eax
setb cl
cmp ecx, r8d
je 0x180014456
movsx ecx, byte [0x18004d60f]
mov eax, 0x4e64
sub cx, ax
movabs rax, 0x667869f9f6b0c
mov qword [rbp - 0x58], rax
mov word [rbp - 0x78], cx
jmp 0x1800144b1
mov al, byte [rsp + 0x58]
test al, al
je 0x1800144b1
mov rdx, qword [rbp - 0x20]
movsx r8, word [0x18004d6d4]
mov eax, dword [0x18004d718]
imul rdx, rax
add r8, rdx
movsx edx, byte [str._AadPluginUninitial]
movsx eax, word [0x18004d714]
movzx ecx, byte [rsp + 0x50]
sub edx, eax
add ecx, edx
mov eax, r15d
test r8, r8
cmove eax, ecx
mov rcx, qword [0x18004d6e8]
mov dword [0x18004d724], eax
movsxd rax, r10d
add rcx, rax
mov qword [0x18004d6e8], rcx
mov edx, dword [rbp - 0x14]
mov eax, dword [rbp + 8]
sub edx, eax
mov ecx, dword [rbp - 0x14]
mov eax, dword [rbp + 8]
sub ecx, eax
mov r15, qword [rbp + 0x50]
xor ecx, edx
mov edx, 0x73faec1
sub edx, ecx
mov ecx, dword [rsp + 0x5c]
mov eax, dword [rbp - 0x10]
imul ecx, eax
sub edx, ecx
mov ecx, dword [rsp + 0x5c]
mov eax, dword [rbp - 0x10]
add ecx, edx
add eax, ecx
mov dword [rbp - 0x10], eax
cmp r15, 0xffffffffffffffff
je 0x1800147e1
movzx ecx, word [0x18004d6e0]
xor r13d, r13d
mov eax, dword [0x18004d6fc]
add eax, 0xffff341e
xor dword [0x18004d730], eax
mov eax, dword [rsp + 0x78]
sub cx, ax
mov al, byte [0x18004d730]
sub cx, 0x43
mov word [0x18004d6e0], cx
sub al, 0x4b
mov byte [0x18004d626], al
mov eax, dword [0x1809cbe90]
mov dword [rsp + 0x5c], eax
mov word [rsp + 0x54], r12w
mov qword [rbp - 0x50], rax
movzx ecx, word [rsp + 0x54]
test ecx, ecx
je 0x1800145b4
sub ecx, 1
je 0x180014599
sub ecx, 1
je 0x180014573
cmp ecx, 1
jne 0x1800145cc
mov rax, qword [rbp - 0x80]
movzx ecx, word [0x18004d6c8]
test rax, rax
cmovne cx, word [rbp - 0x50]
mov word [rsp + 0x60], cx
jmp 0x1800145cc
mov rcx, qword [rbp - 0x68]
movzx eax, word [0x18004d6a0]
sub rcx, rax
mov rax, qword [rbp - 0x68]
or rax, rcx
mov qword [rbp - 0x68], rax
mov al, byte [0x18004d6a8]
sub al, 0x1e
mov byte [rbp - 0x60], al
jmp 0x1800145cc
movzx eax, word [rsp + 0x54]
xor al, 0xbe
mov byte [0x18004d627], al
mov eax, 0xffffa20a
mov word [0x18004d738], ax
jmp 0x1800145cc
movabs rcx, 0xf02700fecb164
add rcx, qword [0x18004d728]
mov qword [0x18004d708], rcx
mov eax, dword [rsp + 0x5c]
add eax, 0x71f
mov dword [rbp + 8], eax
mov ecx, dword [rsp + 0x5c]
mov eax, dword [rbp - 0x40]
add ecx, eax
mov r12b, byte [0x18004d724]
mov dword [rbp - 0x14], ecx
mov ecx, dword [rsp + 0x5c]
mov eax, dword [rbp - 0x10]
add ecx, eax
mov dword [rbp - 0x40], ecx
mov ecx, dword [rbp - 0x40]
mov eax, dword [rbp + 8]
and ecx, eax
mov eax, dword [rbp - 0x14]
shl r12b, 3
mov dword [rbp - 0x18], r12d
cmp eax, ecx
je 0x1800147d2
mov ebx, 0x400
mov rdx, r9
mov ecx, ebx
call fcn.18002daa4
mov r8, qword [rbp + 0x20]
mov rsi, rax
mov rcx, qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov r9, rsi
mov qword [rsp + 0x40], r13
mov rdx, r15
mov qword [rsp + 0x38], r13
mov qword [rbp + 0x80], rax
lea rax, [rbp + 0x60]
mov qword [rsp + 0x30], r13
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rbx
call fcn.180013250
mov eax, dword [0x18004d71c]
lea rcx, [fcn.18002daa4]
mov rax, qword [0x18004d680]
xor r9d, r9d
sub byte [str.Pconnection_reset], al
movsxd rbx, dword [rsi + 0x3c]
mov qword [rsp + 0x40], r13
add rbx, rsi
mov qword [rsp + 0x38], r13
lea r8d, [r9 + 1]
mov qword [rsp + 0x30], r13
mov qword [rsp + 0x28], r13
mov edx, dword [rbx + 0x50]
mov qword [rsp + 0x20], r13
call fcn.180013250
mov r8, qword [rbp + 0x20]
lea rcx, [rbp + 0x60]
mov qword [rsp + 0x40], r13
mov rsi, rax
mov qword [rsp + 0x38], r13
mov r9, rsi
mov qword [rsp + 0x30], r13
mov rdx, r15
mov qword [rsp + 0x28], rcx
mov rcx, qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov qword [rbp + 0x18], rax
mov eax, dword [rbx + 0x50]
mov qword [rsp + 0x20], rax
call fcn.180013250
xor r15d, r15d
mov r9d, 1
mov qword [rbp - 0x58], r9
mov ecx, dword [0x18004d71c]
movzx eax, word [rsp + 0x54]
mov r8, qword [rbp - 0x50]
xor rax, rcx
movzx ecx, byte [0x18004d663]
and r8d, 0x27439bb4
xor rcx, qword [0x18004d700]
not r8
mov rdx, qword [rbp - 0x80]
add r8, rax
and rdx, qword [0x18004d728]
mov eax, r15d
sub rdx, rcx
not r8
imul rdx, r8
mov ecx, r15d
test rdx, rdx
mov edx, r15d
sete al
mov word [0x18004d6d4], ax
mov rax, qword [0x18004d690]
cmp rax, qword [0x18004d6d8]
mov rax, qword [0x18004d690]
setne dl
cmp rax, r9
setne cl
cmp edx, ecx
jne 0x1800147c9
mov eax, dword [0x18004d6f4]
cmp dword [0x18004d724], eax
jbe 0x1800147a6
test eax, eax
je 0x1800147a6
movsx rax, byte [str.Pconnection_reset]
movabs rcx, 0x3ea92591c08b3
add rax, rcx
mov qword [rbp - 0x30], rax
movsx ecx, word [rsp + 0x64]
xor ecx, 0x9c3a
mov dword [rbp - 0x48], ecx
jmp 0x1800147c9
movsx ecx, byte [0x18004d60f]
mov eax, dword [rsp + 0x78]
not eax
cmp eax, ecx
movzx ecx, byte [str.Pconnection_reset]
movzx eax, r12b
cmovne ecx, eax
mov byte [str.Pconnection_reset], cl
movsxd r11, dword [rsi + 0x3c]
add r11, rsi
jmp 0x1800147d8
mov rsi, r11
xor r15d, r15d
mov qword [rbp + 0x58], rsi
jmp 0x180014867
mov rax, qword [0x18004d6e8]
mov r15, r11
movzx ecx, byte [0x18004d64e]
sub ecx, 0x38868d29
cmp rcx, rax
mov rax, r11
movabs rcx, 0xfc91ab48491fc
sete al
mov qword [rbp - 0x50], rax
mov rax, qword [rbp - 0x68]
sub rcx, rax
mov rax, qword [rbp - 0x68]
add rax, rcx
cmp qword [0x18004d6b8], r11
mov qword [rbp - 0x68], rax
mov eax, r11d
mov rdi, qword [rbp - 0x68]
sete al
mov cl, byte [0x18004d688]
add di, ax
mov al, byte [0x18004d679]
sub cl, 0x67
add cl, al
mov qword [rbp + 0x38], rdi
mov rax, qword [rbp + 0x20]
mov byte [0x18004d679], cl
mov rsi, rax
mov qword [rbp + 0x18], rax
movsxd r11, dword [rax + 0x3c]
add r11, rax
jmp 0x180014867
mov rsi, r11
mov eax, dword [r11 + 0x88]
test eax, eax
je 0x180014dab
lea r12, [rsi + rax]
mov al, byte [rsp + 0x58]
mov r10d, dword [r12 + 0x1c]
mov r11d, dword [r12 + 0x20]
add r10, rsi
mov ebx, dword [r12 + 0x24]
add r11, rsi
mov eax, dword [0x18004d6b0]
add rbx, rsi
mov qword [rbp - 0x10], r10
mov qword [rbp + 8], r11
mov qword [rbp - 0x40], rbx
test eax, eax
jne 0x1800148bf
movzx ecx, byte [0x18004d666]
mov rax, qword [rbp - 0x58]
cmp rcx, rax
jle 0x1800148bf
mov r9d, r15d
movsx edx, word [0x18004d6b4]
mov r8d, r15d
movzx eax, word [0x18004d6e0]
mov ecx, r15d
not edx
cmp edx, eax
mov eax, dword [0x18004d720]
setne r8b
cmp r8d, eax
setl cl
cmp ecx, r9d
jne 0x18001492b
movzx ecx, byte [0x18004d623]
mov eax, 0xb861e336
movzx edx, byte [0x18004d627]
and rcx, rax
mov qword [rbp - 0x58], rcx
mov ecx, 0x82bec03b
mov eax, dword [rsp + 0x78]
inc eax
add edx, eax
mov rax, qword [0x18004d680]
not rax
imul rax, rcx
sub rdx, rax
mov qword [0x18004d6d8], rdx
mov r13d, r15d
cmp dword [r12 + 0x18], r15d
jbe 0x180014dab
movabs rax, 0xf0aedd56101d6
mov r15d, r13d
mov qword [rbp - 0x50], rax
movzx eax, word [rbx + r15*2]
mov r14d, dword [r10 + rax*4]
add r14, rsi
cmp r13d, dword [r12 + 0x18]
jae 0x180014980
mov eax, 0x1958
mov word [rbp + 0x38], ax
movzx eax, word [rsp + 0x54]
sub rax, 0xd04b
mov qword [rbp - 0x30], rax
mov eax, dword [r11 + r15*4]
add rax, rsi
mov qword [rbp + 0x68], rax
lea rdx, [rbp + 0x28]
mov rcx, r14
call fcn.180018048
mov esi, eax
cmp eax, 1
jbe 0x180014d8a
call fcn.18001c5e4
xor edx, edx
mov qword [rbp - 8], rax
mov qword [rsp + 0x40], rdx
lea rcx, [fcn.18002c640]
mov qword [rsp + 0x38], rdx
mov r9d, 0x104
mov qword [rsp + 0x30], rdx
xor r8d, r8d
mov qword [rsp + 0x28], rdx
mov rdi, rax
mov qword [rsp + 0x20], rdx
lea rdx, [rax + 0x18]
call fcn.180013250
mov r8, qword [rbp + 0x68]
lea rdx, [rdi + 0x18]
xor eax, eax
lea rcx, [0x18002d940]
mov qword [rsp + 0x40], rax
mov r9d, 0x103
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rax
call fcn.180013250
mov rax, qword [rbp + 0x20]
lea r8, [rdi + 0x10]
mov rbx, qword [rbp - 0x40]
mov rcx, qword [rbp - 0x10]
mov qword [rdi], rax
movzx eax, word [rbx + r15*2]
mov word [rdi + 8], ax
movzx eax, word [rbx + r15*2]
mov r15, qword [rbp + 0x20]
mov edx, dword [rcx + rax*4]
add rdx, r15
mov qword [r8], rdx
cmp esi, 2
jne 0x180014a53
mov rcx, qword [rbp + 0x28]
movsxd rax, dword [rcx + r14]
add rax, 4
add rax, rdx
add rax, rcx
jmp 0x180014ace
cmp esi, 3
jne 0x180014ab9
mov esi, dword [rsp + 0x6c]
xor edx, edx
test esi, esi
je 0x180014a8e
mov rax, qword [0x18004d6c8]
sar rax, 4
mov qword [0x18004d6a8], rax
movzx eax, word [0x18004d69c]
mov rdi, qword [rbp - 8]
imul eax, eax, 0xd001
movsxd rcx, eax
mov qword [rbp - 0x20], rcx
jmp 0x180014aa6
cmp qword [0x18004d728], rdx
je 0x180014aa6
movsx eax, byte [rbp - 0x60]
sub eax, 0x64010ce8
mov dword [0x18004d710], eax
mov rcx, qword [r8]
mov rax, qword [rbp + 0x28]
mov ecx, dword [rcx + rax]
mov qword [rdi + 0x220], rcx
jmp 0x180014ad9
mov eax, 4
cmp esi, eax
jne 0x180014ad5
mov rax, qword [rbp + 0x28]
mov ecx, dword [rdx + rax]
mov rax, qword [rcx + rdx + 6]
mov qword [rdi + 0x220], rax
mov esi, dword [rsp + 0x6c]
mov rdx, qword [rdi + 0x220]
lea r8, [rbp + 0x88]
mov rcx, qword [sym.imp.KERNEL32.dll_VirtualQuery]
xor eax, eax
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], rax
lea r9d, [rax + 0x30]
mov qword [rsp + 0x20], rax
call fcn.180013250
xor edx, edx
test rax, rax
jne 0x180014bbf
mov r14, qword [rbp + 0x30]
cmp r14, qword [rbp + 0x70]
jae 0x180014b8a
mov eax, dword [0x1800379e0]
lea rcx, [rbp + 0xe8]
movups xmm0, xmmword [str.Windows.Internal.A]
mov dword [rbp + 0x108], eax
movups xmm1, xmmword [0x1800379d0]
movzx eax, word [0x1800379e4]
movups xmmword [rbp + 0xe8], xmm0
mov word [rbp + 0x10c], ax
movups xmmword [rbp + 0xf8], xmm1
call qword [sym.imp.KERNEL32.dll_lstrlenW]
movsxd rcx, eax
mov rax, qword [rbp + 0x78]
mov qword [0x18004d690], rcx
mov ecx, 1
mov qword [rax + r14*8], rdi
add r14, rcx
mov qword [rbp + 0x30], r14
jmp 0x180014b8f
mov ecx, 1
mov rdi, qword [rbp + 0x40]
xor r15d, r15d
mov qword [rbp - 0x68], r15
mov rax, qword [rbp - 0x68]
movzx eax, word [rsp + 0x70]
sub al, 0x1f
mov dword [rbp + 0x10], 4
add dword [rdi], ecx
mov byte [rbp - 0x18], al
lea rcx, [rbp - 8]
call fcn.1800159d4
jmp 0x180014d8d
cmp qword [rbp + 0x90], r15
jne 0x180014c0a
mov al, byte [0x18004d60f]
xor r15d, r15d
cmp al, byte [rbp + 0x14]
mov ecx, r15d
mov al, byte [0x18004d60f]
setl dl
cmp al, 0x38
setl cl
cmp edx, ecx
je 0x180014bf7
mov eax, 0xaf38
mov word [0x18004d6a0], ax
jmp 0x180014bb1
movzx eax, word [0x18004d69c]
mov eax, dword [0x1809cbe90]
mov qword [rbp - 0x68], rax
jmp 0x180014bb1
xor edi, edi
lea rdx, [rbp + 0x220]
mov qword [rsp + 0x40], rdi
lea rcx, [fcn.18002c640]
mov qword [rsp + 0x38], rdi
mov r14d, 0x104
mov qword [rsp + 0x30], rdi
mov r9d, r14d
mov qword [rsp + 0x28], rdi
xor r8d, r8d
mov qword [rsp + 0x20], rdi
call fcn.180013250
mov al, byte [0x18004d663]
lea r8, [rbp + 0x220]
mov r9d, r14d
mov rdx, r15
mov r14, qword [rbp + 0x50]
mov rcx, r14
call fcn.180015b7c
mov qword [rsp + 0x40], rdi
lea rdx, [rbp + 0x330]
mov qword [rsp + 0x38], rdi
lea rcx, [fcn.18002c640]
mov qword [rsp + 0x30], rdi
mov r9d, 0x104
mov qword [rsp + 0x28], rdi
xor r8d, r8d
mov qword [rsp + 0x20], rdi
call fcn.180013250
mov rdx, qword [rbp + 0x90]
lea r8, [rbp + 0x330]
mov eax, 0x8d
mov r9d, 0x104
sub al, byte [0x18004d700]
mov rcx, r14
add byte [0x18004d666], al
call fcn.180015b7c
mov eax, edi
mov dword [rbp + 0xc8], 0x6c706369
lea ecx, [rdi + 1]
mov dword [rbp + 0xcc], 0x30316a63
mov dword [rbp + 0xd0], 0x6a6a622c
mov byte [rbp + 0xd4], dil
add byte [rbp + rax + 0xc8], 2
add rax, rcx
cmp rax, 0xc
jb 0x180014cef
lea rdx, [rbp + 0xc8]
lea rcx, [rbp + 0x220]
call qword [sym.imp.SHLWAPI.dll_StrStrIA]
test rax, rax
je 0x180014e51
mov dword [rbp + 0xd8], 0x686c5f65
mov rax, rdi
mov dword [rbp + 0xdc], 0x5b5c665f
mov ecx, 1
mov dword [rbp + 0xe0], 0x5e285f6d
mov word [rbp + 0xe4], 0x6666
mov byte [rbp + 0xe6], dil
add byte [rbp + rax + 0xd8], 6
add rax, rcx
cmp rax, 0xe
jb 0x180014d53
lea rdx, [rbp + 0xd8]
lea rcx, [rbp + 0x330]
call qword [sym.imp.SHLWAPI.dll_StrStrIA]
test rax, rax
je 0x180014e51
lea rcx, [rbp - 8]
call fcn.1800159d4
xor r15d, r15d
mov r10, qword [rbp - 0x10]
inc r13d
mov r11, qword [rbp + 8]
mov rsi, qword [rbp + 0x18]
cmp r13d, dword [r12 + 0x18]
jb 0x180014939
mov rdi, qword [rbp + 0x38]
mov edx, dword [rbp - 0x38]
mov eax, dword [rbp - 0x70]
or edx, eax
mov eax, dword [rbp - 0x70]
imul ecx, eax, 0x269
mov eax, dword [rsp + 0x7c]
sub edx, ecx
cmp edx, eax
je 0x18001556f
movzx eax, byte [rsp + 0x50]
movsx r10d, byte [0x18004d679]
movzx ecx, byte [rbp - 0x18]
neg r10d
sub cx, ax
mov eax, dword [0x1809cbe90]
mov word [0x18004d68c], cx
mov dword [rsp + 0x5c], eax
mov eax, dword [rsp + 0x5c]
add eax, 0x104be
mov dword [rbp - 0x70], eax
mov eax, 4
mov word [rsp + 0x54], ax
mov eax, dword [0x18004d6e4]
add eax, dword [0x180d7d5d8]
mov dword [0x18004d6e4], eax
movzx ecx, word [rsp + 0x54]
test ecx, ecx
je 0x1800150fc
sub ecx, 1
je 0x1800150ed
sub ecx, 1
je 0x1800150df
cmp ecx, 1
jne 0x180015116
mov eax, dword [0x1809cbe90]
mov qword [rbp - 0x58], rax
jmp 0x180015116
mov qword [rsp + 0x40], rdi
lea rdx, [rbp + 0x110]
mov qword [rsp + 0x38], rdi
lea rcx, [fcn.18002c640]
mov qword [rsp + 0x30], rdi
mov ebx, 0x104
mov qword [rsp + 0x28], rdi
mov r9d, ebx
xor r8d, r8d
mov qword [rsp + 0x20], rdi
call fcn.180013250
cmp byte [0x18004d64e], dil
jne 0x180014f0a
movsx ecx, byte [0x18004d60f]
movzx eax, word [rsp + 0x68]
cmp cx, ax
jl 0x180014eab
mov rax, qword [rbp - 0x50]
test rax, rax
je 0x180014f0a
movsx rax, byte [rsp + 0x58]
mov rdx, qword [0x18004d6e8]
mov edi, dword [rbp - 0x60]
add rdx, rax
movsx eax, dil
imul eax, dword [0x18004d710]
movsxd r8, eax
movzx eax, word [rsp + 0x70]
imul r8, rdx
xor edx, edx
test ax, ax
mov ecx, edx
mov eax, dword [rsp + 0x78]
sete cl
sub ecx, eax
mov eax, esi
imul rcx, rax
mov rax, qword [rbp - 0x20]
xor esi, esi
imul rax, rcx
mov ecx, esi
test rax, rax
sete cl
sub cx, r8w
mov word [0x18004d6f0], cx
jmp 0x180014f0f
mov edi, dword [rbp - 0x60]
xor esi, esi
mov rdx, qword [rbp + 0x90]
lea r8, [rbp + 0x110]
mov r9d, ebx
mov rcx, r14
call fcn.180015b7c
mov rbx, qword [rbp - 8]
lea r8, [rbp + 0x110]
mov qword [rsp + 0x40], rsi
lea rcx, [0x18002d940]
mov qword [rsp + 0x38], rsi
add rbx, 0x11c
mov qword [rsp + 0x30], rsi
mov rdx, rbx
mov qword [rsp + 0x28], rsi
mov r9d, 0x103
mov qword [rsp + 0x20], rsi
call fcn.180013250
mov qword [rsp + 0x40], rsi
lea rcx, [0x18002de10]
mov qword [rsp + 0x38], rsi
xor r9d, r9d
mov qword [rsp + 0x30], rsi
xor r8d, r8d
mov qword [rsp + 0x28], rsi
mov rdx, rbx
mov qword [rsp + 0x20], rsi
call fcn.180013250
test rax, rax
je 0x18001500f
mov qword [rsp + 0x40], rsi
lea rdx, [rbp + 0x110]
mov qword [rsp + 0x38], rsi
lea rcx, [fcn.18002c640]
mov qword [rsp + 0x30], rsi
xor r8d, r8d
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x20], rsi
mov esi, 0x104
mov r9d, esi
call fcn.180013250
mov r9d, esi
lea r8, [rbp + 0x110]
mov rdx, r15
mov rcx, r14
call fcn.180015b7c
lea rdx, [rbp + 0x110]
mov rcx, rbx
call fcn.1800155c4
xor r15d, r15d
test eax, eax
je 0x180015012
lea rcx, [rbp - 8]
call fcn.1800159d4
mov rbx, qword [rbp - 0x40]
jmp 0x180014d8d
xor r15d, r15d
mov r14, qword [rbp + 0x30]
cmp r14, qword [rbp + 0x70]
jae 0x1800150af
mov rax, qword [rbp - 0x58]
mov edx, r15d
test rax, rax
mov ecx, r15d
mov eax, dword [rbp - 0x48]
sete dl
cmp edx, eax
movzx eax, byte [rbp - 0x18]
mov edx, r15d
setle cl
cmp ecx, eax
movzx eax, byte [rsp + 0x50]
setb dl
cmp edx, eax
je 0x18001508e
movzx eax, word [rsp + 0x54]
test ax, ax
je 0x180015067
mov eax, dword [0x18004d6b0]
add al, 0x2e
add byte [str.Pconnection_reset], al
jmp 0x18001509c
mov al, byte [0x18004d679]
test al, al
je 0x18001509c
movzx eax, word [rbp - 0x78]
add eax, 0x25dee263
mov dword [0x18004d688], eax
mov al, byte [0x1809cbe90]
mov byte [0x18004d663], al
jmp 0x18001509c
movzx eax, word [rsp + 0x64]
and al, dil
sub dil, al
mov dword [rbp - 0x60], edi
mov rcx, qword [rbp + 0x78]
mov rax, qword [rbp - 8]
mov qword [rcx + r14*8], rax
inc r14
mov qword [rbp + 0x30], r14
movsx ecx, byte [str._AadPluginUninitial]
mov rax, qword [rbp - 0x30]
movzx edx, word [0x18004d68c]
shl al, 3
add dx, dx
add cx, dx
mov byte [rbp + 0x14], al
mov rax, qword [rbp + 0x40]
mov word [0x18004d68c], cx
inc dword [rax]
jmp 0x180015006
mov eax, dword [0x18004d6b0]
mov byte [0x180b3e50a], al
jmp 0x180015116
mov rax, qword [0x18004d690]
mov dword [0x1809cc030], eax
jmp 0x180015116
cmp word [0x18004d714], r15w
mov eax, r15d
sete al
xor ax, word [0x18004d708]
mov word [rsp + 0x68], ax
mov eax, dword [rsp + 0x5c]
mov r11, qword [rbp + 0x48]
add eax, 0x594
mov dword [rsp + 0x7c], eax
mov eax, dword [rsp + 0x5c]
add eax, 0x4cdd
mov byte [0x18004d666], 0x9e
mov dword [rsp + 0x7c], eax
movsxd rax, dword [0x18004d724]
cmp rax, r11
jge 0x180015162
movzx eax, word [rsp + 0x54]
mov ecx, dword [0x18004d720]
imul ecx, eax
imul ecx, dword [0x18004d708]
mov dword [0x18004d710], ecx
mov r9d, dword [rsp + 0x74]
mov eax, dword [rsp + 0x74]
sub r9d, eax
mov ecx, dword [rsp + 0x74]
xor r9d, ecx
mov edx, dword [rsp + 0x74]
xor r9d, edx
mov r8d, dword [rbp - 0x70]
mov eax, dword [rbp - 0x70]
imul r8d, eax
mov eax, 0x3a0b5a54
xor r8d, 0x9927a98
sub r8d, r9d
mov dword [rbp - 0x40], r8d
movsx ecx, word [rsp + 0x60]
movsx r8d, word [0x18004d664]
sub eax, ecx
add dword [0x18004d688], eax
mov eax, dword [0x1809cbe90]
mov dword [rsp + 0x5c], eax
mov rax, qword [rbp - 0x58]
mov al, byte [rsp + 0x50]
mov rax, qword [rbp - 0x58]
mov eax, dword [rsp + 0x5c]
add eax, 0x5ff3
shl r8d, 8
mov dword [rbp - 0x38], eax
movzx eax, word [rsp + 0x64]
test ax, ax
jne 0x18001521f
cmp word [0x18004d714], r15w
je 0x18001521f
movsx rax, byte [0x18004d626]
mov rcx, qword [rbp - 0x68]
movzx edx, byte [0x18004d666]
xor rdx, rax
mov eax, dword [0x18004d718]
xor cl, al
add cl, dl
mov byte [rsp + 0x50], cl
lea ecx, [r8 - 0xc0e7]
mov rax, qword [rbp - 0x80]
or rcx, rax
mov qword [rbp - 0x80], rcx
mov eax, dword [rsp + 0x5c]
mov edx, r15d
add eax, 0x8347
mov ecx, r15d
mov dword [rbp - 0x70], eax
movsx eax, byte [str._AadPluginUninitial]
cmp eax, dword [0x18004d688]
mov al, byte [str._AadPluginUninitial]
setge dl
cmp al, 7
setge cl
cmp edx, ecx
jne 0x18001525f
cmp r8d, dword [0x18004d730]
jbe 0x18001526b
mov al, byte [rsp + 0x50]
jmp 0x18001526b
movsx eax, byte [rbp - 0x60]
sub eax, 0x13bf5ec2
mov dword [rbp - 0x48], eax
mov eax, dword [rsp + 0x5c]
movabs rcx, 0x32d2f3e39c6f9
add eax, 0x5c7
mov dword [rsp + 0x7c], eax
mov rax, qword [rbp - 0x20]
add rax, rcx
mov qword [rbp - 0x50], rax
mov ecx, dword [rbp - 0x28]
mov eax, dword [rbp - 0x28]
sub ecx, eax
mov edx, dword [rbp - 0x74]
xor edx, 0x2e3
imul edx, ecx
mov ecx, dword [rsp + 0x7c]
mov eax, dword [rbp - 0x38]
imul ecx, eax
mov eax, dword [rbp - 0x70]
sub ecx, eax
mov eax, dword [rbp - 0x70]
add eax, ecx
movzx ecx, di
xor eax, 0x22a54c4
sub eax, edx
mov edx, r15d
mov dword [rsp + 0x7c], eax
mov eax, dword [0x1809cbe90]
mov dword [rsp + 0x5c], eax
mov rax, qword [rbp - 0x80]
cmp rcx, rax
mov eax, r15d
setbe dl
cmp di, 0x18
setbe al
cmp edx, eax
je 0x180015352
movzx eax, word [rsp + 0x68]
test ax, ax
je 0x18001530b
mov eax, dword [0x18004d710]
mov r8d, 2
xor eax, 0xef9356bb
mov dword [0x18004d71c], eax
jmp 0x180015356
movzx ecx, byte [0x18004d623]
mov rax, qword [rbp - 0x50]
sub cl, al
mov byte [0x18004d623], cl
movzx edx, word [rsp + 0x70]
movzx ecx, word [0x18004d6e0]
not edx
movzx eax, byte [rsp + 0x50]
xor ecx, edx
add eax, ecx
not eax
movsxd rdx, eax
movsx eax, word [rsp + 0x60]
sub r10d, eax
mov rax, qword [rbp - 0x80]
movsxd rcx, r10d
sub rcx, rdx
add al, cl
mov byte [rsp + 0x50], al
mov r8d, dword [rbp - 0x78]
mov eax, dword [rsp + 0x5c]
mov edx, r15d
add eax, 0x57f
mov dword [rbp - 0x28], eax
mov eax, dword [rsp + 0x5c]
add eax, 0x5a3
mov dword [rbp - 0x74], eax
mov eax, dword [rsp + 0x5c]
add eax, 0x601
mov dword [rbp - 0x38], eax
mov cl, byte [0x18004d679]
mov al, byte [rsp + 0x58]
cmp al, cl
mov al, byte [rsp + 0x58]
mov ecx, r15d
setge dl
cmp al, 0xc
setge cl
cmp edx, ecx
jne 0x1800153be
test r11, r11
je 0x1800153be
movzx eax, byte [0x18004d60e]
mov ecx, dword [0x18004d6e4]
sub ecx, eax
mov eax, dword [0x18004d6e4]
sub ecx, eax
mov dword [0x18004d6e4], ecx
mov ecx, dword [rbp - 0x28]
mov eax, dword [rbp - 0x28]
sub ecx, eax
mov edx, dword [rbp - 0x74]
mov eax, dword [rbp]
add edx, 0xf6a
imul edx, ecx
xor edx, 0xb3
sub edx, eax
mov eax, dword [rbp]
add eax, edx
cmp qword [rbp + 0x50], 0xffffffffffffffff
mov dword [rbp - 0x74], eax
je 0x18001556f
mov cl, byte [0x18004d626]
mov edx, r15d
mov al, byte [rsp + 0x58]
cmp al, cl
mov al, byte [rsp + 0x58]
mov ecx, r15d
setg dl
cmp al, 0x4e
setg cl
cmp edx, ecx
jne 0x180015463
mov eax, 1
sub r8b, 0x23
mov word [rsp + 0x70], ax
movsx rax, byte [0x18004d626]
mov qword [0x1809f8c88], rax
mov byte [rsp + 0x58], r8b
movzx ecx, word [rsp + 0x70]
test ecx, ecx
je 0x180015451
cmp ecx, 1
jne 0x18001547e
mov eax, dword [0x1809cbe90]
mov qword [0x18004d680], rax
jmp 0x18001547e
mov ecx, dword [0x18004d71c]
shr rcx, 1
mov qword [0x18004d728], rcx
jmp 0x18001547e
mov rax, qword [rbp - 0x30]
mov rax, qword [rbp - 0x58]
mov rax, qword [rbp - 0x80]
mov eax, dword [rsp + 0x78]
imul eax, dword [0x18004d6d8]
mov dword [rsp + 0x78], eax
mov eax, dword [0x1809cbe90]
mov ecx, 1
mov dword [rsp + 0x5c], eax
mov rax, qword [rbp - 0x80]
add rax, rcx
mov qword [rbp - 0x80], rax
mov eax, dword [rsp + 0x5c]
add eax, 0x5ad
mov dword [rbp - 0x38], eax
movzx eax, byte [0x18004d627]
mov dword [0x18004d710], eax
movzx eax, word [rsp + 0x60]
sub ax, cx
mov word [rsp + 0x60], ax
mov eax, dword [rsp + 0x5c]
add eax, 0x8d5
mov dword [rbp], eax
mov eax, 0xd4
add ax, word [0x18004d708]
mov word [rsp + 0x64], ax
mov ecx, dword [rsp + 0x5c]
mov eax, dword [rbp - 0x40]
add ecx, eax
mov dword [rbp - 0x40], ecx
mov ecx, dword [rbp - 0x74]
mov eax, dword [rsp + 0x7c]
imul ecx, eax
mov eax, dword [rbp - 0x38]
cmp ecx, eax
je 0x18001556f
mov rax, qword [0x18004d6c0]
mov ecx, 0x601a
mov rdx, qword [rbp + 0x80]
add ax, cx
mov qword [rsp + 0x40], r15
lea rcx, [fcn.18002deb8]
mov qword [rsp + 0x38], r15
xor r9d, r9d
mov qword [rsp + 0x30], r15
xor r8d, r8d
mov qword [rsp + 0x28], r15
mov word [0x18004d714], ax
mov qword [rsp + 0x20], r15
call fcn.180013250
mov rdx, qword [rbp + 0x58]
lea rcx, [fcn.18002deb8]
mov qword [rsp + 0x40], r15
xor r9d, r9d
mov qword [rsp + 0x38], r15
xor r8d, r8d
mov qword [rsp + 0x30], r15
mov qword [rsp + 0x28], r15
mov qword [rsp + 0x20], r15
call fcn.180013250
movzx ecx, word [rsp + 0x54]
mov eax, dword [rbp + 0x10]
sub rcx, 0xc014
mov qword [rbp - 0x58], rcx
mov rdx, qword [rbp - 0x58]
mov rcx, qword [rbp - 0x80]
xor rdx, rcx
mov rcx, qword [rbp - 0x80]
add rcx, rdx
mov qword [rbp - 0x80], rcx
mov rcx, qword [rbp + 0x440]
xor rcx, rsp
call fcn.18002b130
mov rbx, qword [rsp + 0x5a8]
add rsp, 0x550
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret