Function at 0x1400b8d56
Capabilities:
Encrypt data using speck
Query environment variable

Disassembly:
push rax
pushf
mov eax, 0xe0b5d520
pushf
not eax
add eax, 0x82760216
xor eax, 0xe17902e2
rol eax, 0x5f
popf
pushf
not eax
add eax, 0x9dcf1c27
xor eax, 0xfd72851b
rol eax, 0xcc
popf
cmp eax, 0x29
jne 0x1400b8d93
popf
pop rax
jmp 0x1400ba636
cmp eax, 0
jne 0x1400b8da2
popf
pop rax
jmp 0x1400b90bd
cmp eax, 3
jne 0x1400b8db1
popf
pop rax
jmp 0x1400b9310
cmp eax, 1
jne 0x1400b8dc0
popf
pop rax
jmp 0x1400b9130
cmp eax, 0xd
jne 0x1400b8dcf
popf
pop rax
jmp 0x1400b9716
cmp eax, 0x1a
jne 0x1400b8dde
popf
pop rax
jmp 0x1400b9e22
cmp eax, 0xe
jne 0x1400b8ded
popf
pop rax
jmp 0x1400b9795
cmp eax, 0x31
jne 0x1400b8dfc
popf
pop rax
jmp 0x1400ba977
cmp eax, 0x19
jne 0x1400b8e0b
popf
pop rax
jmp 0x1400b9d91
cmp eax, 8
jne 0x1400b8e1a
popf
pop rax
jmp 0x1400b9570
cmp eax, 0x2a
jne 0x1400b8e29
popf
pop rax
jmp 0x1400ba6b7
cmp eax, 0x17
jne 0x1400b8e38
popf
pop rax
jmp 0x1400b9cd2
cmp eax, 0x1c
jne 0x1400b8e47
popf
pop rax
jmp 0x1400b9ef1
cmp eax, 0x2e
jne 0x1400b8e56
popf
pop rax
jmp 0x1400ba80b
cmp eax, 0x18
jne 0x1400b8e65
popf
pop rax
jmp 0x1400b9d40
cmp eax, 0x2b
jne 0x1400b8e74
popf
pop rax
jmp 0x1400ba730
cmp eax, 0x1b
jne 0x1400b8e83
popf
pop rax
jmp 0x1400b9e74
cmp eax, 0x2d
jne 0x1400b8e92
popf
pop rax
jmp 0x1400ba7d3
cmp eax, 0x23
jne 0x1400b8ea1
popf
pop rax
jmp 0x1400ba311
cmp eax, 0x25
jne 0x1400b8eb0
popf
pop rax
jmp 0x1400ba48a
cmp eax, 0x32
jne 0x1400b8ebf
popf
pop rax
jmp 0x1400ba9de
cmp eax, 0x13
jne 0x1400b8ece
popf
pop rax
jmp 0x1400b99a4
cmp eax, 0x33
jne 0x1400b8edd
popf
pop rax
jmp 0x1400baa47
cmp eax, 0x24
jne 0x1400b8eec
popf
pop rax
jmp 0x1400ba3fe
cmp eax, 0x1e
jne 0x1400b8efb
popf
pop rax
jmp 0x1400ba027
cmp eax, 0xc
jne 0x1400b8f0a
popf
pop rax
jmp 0x1400b969c
cmp eax, 0x26
jne 0x1400b8f19
popf
pop rax
jmp 0x1400ba4f3
cmp eax, 0x27
jne 0x1400b8f28
popf
pop rax
jmp 0x1400ba52d
cmp eax, 0x30
jne 0x1400b8f37
popf
pop rax
jmp 0x1400ba875
cmp eax, 0x10
jne 0x1400b8f46
popf
pop rax
jmp 0x1400b9847
cmp eax, 0x2c
jne 0x1400b8f55
popf
pop rax
jmp 0x1400ba799
cmp eax, 9
jne 0x1400b8f64
popf
pop rax
jmp 0x1400b9598
cmp eax, 4
jne 0x1400b8f73
popf
pop rax
jmp 0x1400b935d
cmp eax, 0x16
jne 0x1400b8f82
popf
pop rax
jmp 0x1400b9c4f
cmp eax, 0x28
jne 0x1400b8f91
popf
pop rax
jmp 0x1400ba5eb
cmp eax, 0xa
jne 0x1400b8fa0
popf
pop rax
jmp 0x1400b9607
cmp eax, 0x36
jne 0x1400b8faf
popf
pop rax
jmp 0x1400baaf1
cmp eax, 0x14
jne 0x1400b8fbe
popf
pop rax
jmp 0x1400b9a14
cmp eax, 7
jne 0x1400b8fcd
popf
pop rax
jmp 0x1400b94ab
cmp eax, 0x34
jne 0x1400b8fdc
popf
pop rax
jmp 0x1400baa81
cmp eax, 2
jne 0x1400b8feb
popf
pop rax
jmp 0x1400b927c
cmp eax, 0x20
jne 0x1400b8ffa
popf
pop rax
jmp 0x1400ba262
cmp eax, 0x1d
jne 0x1400b9009
popf
pop rax
jmp 0x1400b9f77
cmp eax, 0x11
jne 0x1400b9018
popf
pop rax
jmp 0x1400b98f6
cmp eax, 0x35
jne 0x1400b9027
popf
pop rax
jmp 0x1400baab9
cmp eax, 0x2f
jne 0x1400b9036
popf
pop rax
jmp 0x1400ba83e
cmp eax, 0x12
jne 0x1400b9045
popf
pop rax
jmp 0x1400b9943
cmp eax, 0x21
jne 0x1400b9054
popf
pop rax
jmp 0x1400ba2bf
cmp eax, 0x1f
jne 0x1400b9063
popf
pop rax
jmp 0x1400ba08a
cmp eax, 0xb
jne 0x1400b9072
popf
pop rax
jmp 0x1400b9651
cmp eax, 0xf
jne 0x1400b9081
popf
pop rax
jmp 0x1400b97ba
cmp eax, 0x15
jne 0x1400b9090
popf
pop rax
jmp 0x1400b9be0
cmp eax, 5
jne 0x1400b909f
popf
pop rax
jmp 0x1400b93af
cmp eax, 6
jne 0x1400b90ae
popf
pop rax
jmp 0x1400b9428
cmp eax, 0x22
jne 0x1400b90bd
popf
pop rax
jmp 0x1400ba308
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x28]
sub rsp, 0x128
mov r15, rdx
mov r13, rcx
mov dword [rsp + 0x30], 0
xor r14d, r14d
mov dword [rbp + 0x80], r14d
nop word [rax + rax]
push rax
pushf
mov eax, 0x3edded11
pushf
not eax
add eax, 0xe1e9cde3
xor eax, 0xf61d6fb4
rol eax, 0xa8
popf
pushf
not eax
add eax, 0xf55a2554
xor eax, 0xdecabbfe
rol eax, 0xb6
popf
jmp 0x1400b8d84
xor edx, edx
mov r8d, 0x24a7f1ce
pushf
not r8d
add r8d, 0xa275b058
xor r8d, 0xf2012ca6
rol r8d, 0x9d
popf
pushf
not r8d
add r8d, 0xafab32b3
xor r8d, 0xbdb1a26d
rol r8d, 0x46
popf
mov rcx, r14
jmp 0x1400b916e
call qword [sym.imp.KERNEL32.dll_VirtualFree]
mov edx, dword [rbp + 0x80]
xor ecx, ecx
lea r9d, [rcx + 4]
mov r8d, 0xce6e99b1
pushf
not r8d
add r8d, 0xd256680f
xor r8d, 0x972496ab
rol r8d, 0xd6
popf
pushf
not r8d
add r8d, 0xe82683d7
xor r8d, 0xacb423d1
rol r8d, 0xa7
popf
pushf
not r8d
add r8d, 0xc575b2b8
xor r8d, 0xa6bd4a34
rol r8d, 0x52
popf
jmp 0x1400b91d2
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r14, rax
lea r9, [rbp + 0x80]
mov r8d, dword [rbp + 0x80]
mov rdx, rax
mov ecx, 0x7a0d3ece
pushf
not ecx
add ecx, 0xe42051b2
xor ecx, 0xc789edea
rol ecx, 0x1d
popf
pushf
not ecx
add ecx, 0xb8178724
xor ecx, 0x8266e742
rol ecx, 0x72
popf
jmp 0x1400b921c
call qword [sym.imp.ntdll.dll_NtQuerySystemInformation]
cmp eax, 0xc0000004
je 0x1400b925c
push rax
pushf
mov eax, 0xb86a58e0
pushf
not eax
add eax, 0xa283b6a6
xor eax, 0xca3c6130
rol eax, 0x27
popf
pushf
not eax
add eax, 0xc64f0409
xor eax, 0xb3b18978
rol eax, 0x31
popf
jmp 0x1400b8d84
push rax
pushf
mov eax, 0xe40411df
pushf
not eax
add eax, 0xc0a894d1
xor eax, 0xd8a482f1
rol eax, 0xc6
popf
jmp 0x1400b8d84
test eax, eax
js 0x1400b92ca
push rax
pushf
mov eax, 0x74883b24
pushf
not eax
add eax, 0xd9473239
xor eax, 0x9f475ba0
rol eax, 0xda
popf
pushf
not eax
add eax, 0xb6909431
xor eax, 0xd68f3b92
rol eax, 0x2e
popf
pushf
not eax
add eax, 0x97508afe
xor eax, 0xb1957dea
rol eax, 0x9d
popf
jmp 0x1400b8d84
push rax
pushf
mov eax, 0x2dde5141
pushf
not eax
add eax, 0xf6c19ff9
xor eax, 0xd9f74c3c
rol eax, 0x34
popf
pushf
not eax
add eax, 0xecd96b03
xor eax, 0xaada2bcb
rol eax, 0x6e
popf
pushf
not eax
add eax, 0x959cb79a
xor eax, 0xf91e5bdd
rol eax, 0x72
popf
jmp 0x1400b8d84
xor ecx, ecx
mov ebx, ecx
cmp dword [r14], ecx
jbe 0x1400b933d
push rax
pushf
mov eax, 0xe2cd46f9
pushf
not eax
add eax, 0x867d6a97
xor eax, 0xa3b0229d
rol eax, 0x1a
popf
jmp 0x1400b8d84
push rax
pushf
mov eax, 0x152a1046
pushf
not eax
add eax, 0x9a605357
xor eax, 0x85264310
rol eax, 0x70
popf
jmp 0x1400b8d84
lea rdi, [r14 + 0x2e]
lea rsi, [rcx - 1]
nop dword [rax]
push rax
pushf
mov eax, 0x2f0813a3
pushf
not eax
add eax, 0xee4b1691
xor eax, 0x94d8cbf3
rol eax, 0x92
popf
pushf
not eax
add eax, 0xd522c592
xor eax, 0xdee1f39e
rol eax, 0x7f
popf
pushf
not eax
add eax, 0xbb1a9a30
xor eax, 0x83f4a691
rol eax, 0x9a
popf
jmp 0x1400b8d84
movsxd rax, ebx
imul r12, rax, 0x128
movzx edx, word [rdi]
add rdx, 0x30
push r12
not r12
sub rdx, r12
pop r12
sub rdx, 1
push r14
not r14
sub rdx, r14
pop r14
sub rdx, 1
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x60], rcx
mov qword [rsp + 0x68], rcx
mov r8, rsi
nop dword [rax]
push rax
pushf
mov eax, 0x1951cb4d
pushf
not eax
add eax, 0xd833eacf
xor eax, 0xc2e317c0
rol eax, 0xb0
popf
pushf
not eax
add eax, 0xcf50017b
xor eax, 0xc70e857f
rol eax, 0x40
popf
jmp 0x1400b8d84
inc r8
cmp byte [rdx + r8], 0
jne 0x1400b9465
push rax
pushf
mov eax, 0xba1a6270
pushf
not eax
add eax, 0xeaf8ac29
xor eax, 0xaf4ded73
rol eax, 0xa5
popf
pushf
not eax
add eax, 0xd0056956
xor eax, 0xe590cfe2
rol eax, 0x25
popf
jmp 0x1400b8d84
push rax
pushf
mov eax, 0xeb269072
pushf
not eax
add eax, 0xbe8fb443
xor eax, 0xc1846d71
rol eax, 0x53
popf
pushf
not eax
add eax, 0xeab5412f
xor eax, 0xeb2eb624
rol eax, 0xcd
popf
pushf
not eax
add eax, 0xf8831019
xor eax, 0xb486e448
rol eax, 0xd6
popf
jmp 0x1400b8d84
lea rcx, [rsp + 0x50]
call fcn.1400a2316
nop
lea rax, [rsp + 0x50]
cmp qword [rsp + 0x68], 0x10
cmovae rax, qword [rsp + 0x50]
mov edx, 0x12aef5c2
pushf
not edx
add edx, 0xc0336f06
xor edx, 0xa7847969
rol edx, 7
popf
mov r8, qword [rsp + 0x60]
push rax
not rax
sub r8, rax
pop rax
sub r8, 1
cmp rax, r8
je 0x1400b952a
push rax
pushf
mov eax, 0x7beb2c30
pushf
not eax
add eax, 0xeecf7bc0
xor eax, 0xafcf4a84
rol eax, 0xa
popf
pushf
not eax
add eax, 0x8891a333
xor eax, 0xdc7d73fe
rol eax, 0x5d
popf
jmp 0x1400b8d84
push rax
pushf
mov eax, 0xeab73163
pushf
not eax
add eax, 0x98c76331
xor eax, 0xdca66068
rol eax, 0x70
popf
pushf
not eax
add eax, 0xf36db02e
xor eax, 0xd9fa10f3
rol eax, 0xf9
popf
pushf
not eax
add eax, 0xb21f17a2
xor eax, 0xa92eb646
rol eax, 0x19
popf
jmp 0x1400b8d84
nop dword [rax + rax]
push rax
pushf
mov eax, 0xdc2ec7db
pushf
not eax
add eax, 0x9970f99b
xor eax, 0xaf4231bf
rol eax, 7
popf
jmp 0x1400b8d84
imul rdx, rdx, 0x21
movsx rcx, byte [rax]
push rcx
not rcx
sub rdx, rcx
pop rcx
sub rdx, 1
inc rax
cmp rax, r8
jne 0x1400b95d4
push rax
pushf
mov eax, 0x355e7078
pushf
not eax
add eax, 0xfcf392ff
xor eax, 0xc79f2286
rol eax, 0x10
popf
jmp 0x1400b8d84
push rax
pushf
mov eax, 0x807b0d64
pushf
not eax
add eax, 0xb894355a
xor eax, 0xfc2b4eae
rol eax, 0xfe
popf
pushf
not eax
add eax, 0xd43767ab
xor eax, 0xe32e4d54
rol eax, 0xd1
popf
jmp 0x1400b8d84
cmp rdx, qword [r13]
je 0x1400b9631
push rax
pushf
mov eax, 0x305b746b
pushf
not eax
add eax, 0xdbe79650
xor eax, 0xab3c21e4
rol eax, 0x4c
popf
jmp 0x1400b8d84
push rax
pushf
mov eax, 0xd64d6e83
pushf
not eax
add eax, 0xaa4225b2
xor eax, 0xd3f4932e
rol eax, 0x77
popf
jmp 0x1400b8d84
mov rdx, qword [rsp + 0x68]
cmp rdx, 0x10
jb 0x1400b967c
push rax
pushf
mov eax, 0x1844cb6b
pushf
not eax
add eax, 0xecd3a48a
xor eax, 0xd48dd91e
rol eax, 0x92
popf
jmp 0x1400b8d84
push rax
pushf
mov eax, 0xf8ab2385
pushf
not eax
add eax, 0x84719b7c
xor eax, 0x8bc797f6
rol eax, 0x73
popf
jmp 0x1400b8d84
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400b96f6
push rax
pushf
mov eax, 0x6b992dab
pushf
not eax
add eax, 0xf5d809df
xor eax, 0x82131a06
rol eax, 0x61
popf
pushf
not eax
add eax, 0x99ffdbd3
xor eax, 0xeb790e18
rol eax, 0x9c
popf
pushf
not eax
add eax, 0x9cc1ad33
xor eax, 0x9b93d91b
rol eax, 0xa8
popf
jmp 0x1400b8d84
push rax
pushf
mov eax, 0x5d47aa34
pushf
not eax
add eax, 0xd1f9ab94
xor eax, 0xb4b2015e
rol eax, 0x23
popf
jmp 0x1400b8d84
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400b9775
push rax
pushf
mov eax, 0x90c599bc
pushf
not eax
add eax, 0x9a128c35
xor eax, 0x84bd4b09
rol eax, 0xfc
popf
pushf
not eax
add eax, 0xafaf5c36
xor eax, 0xed4f20a0
rol eax, 0x9a
popf
pushf
not eax
add eax, 0xe2d43706
xor eax, 0xd0e5b985
rol eax, 0xe6
popf
jmp 0x1400b8d84
push rax
pushf
mov eax, 0x512d7b27
pushf
not eax
add eax, 0xec991d00
xor eax, 0x9b6321d8
rol eax, 0x51
popf
jmp 0x1400b8d84
call fcn.14008908e
push rax
pushf
mov eax, 0x80e078fd
pushf
not eax
add eax, 0xc89362a9
xor eax, 0xb7b2e9ab
rol eax, 0xa4
popf
jmp 0x1400b8d84
xor ecx, ecx
mov qword [rsp + 0x60], rcx
mov qword [rsp + 0x68], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x50], cl
jmp 0x1400b97cf
inc ebx
add rdi, 0x128
cmp ebx, dword [r14]
jb 0x1400b9827
push rax
pushf
mov eax, 0x7bec5608
pushf
not eax
add eax, 0xd67ee060
xor eax, 0xdf486d93
rol eax, 0xe5
popf
pushf
not eax
add eax, 0xb7e5dd64
xor eax, 0xf593f824
rol eax, 0xbe
popf
pushf
not eax
add eax, 0x98ec5163
xor eax, 0xd6a50a25
rol eax, 0xf5
popf
jmp 0x1400b8d84
push rax
pushf
mov eax, 0x19b3a181
pushf
not eax
add eax, 0xe80ee012
xor eax, 0xce4f3e90
rol eax, 0x6e
popf
jmp 0x1400b8d84
xor edx, edx
mov r8d, 0xb5a57394
pushf
not r8d
add r8d, 0xa4aae9f6
xor r8d, 0x8e84e4c0
rol r8d, 0x96
popf
pushf
not r8d
add r8d, 0x8ac499af
xor r8d, 0xe26c384a
rol r8d, 7
popf
mov rcx, r14
jmp 0x1400b9885
call qword [sym.imp.KERNEL32.dll_VirtualFree]
xorps xmm0, xmm0
movups xmmword [r15], xmm0
mov qword [r15 + 0x10], 0
mov qword [r15 + 0x18], 0
mov qword [r15 + 0x10], 0
mov qword [r15 + 0x18], reloc.WS2_32.dll_ntohs
mov byte [r15], 0
mov dword [rsp + 0x30], 1
mov rax, r15
add rsp, 0x128
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
push rax
pushf
mov eax, 0xd0447159
pushf
not eax
add eax, 0xfded14f3
xor eax, 0xc74ed4d2
rol eax, 0x90
popf
pushf
not eax
add eax, 0xc757abbb
xor eax, 0xf29bb539
rol eax, 0x1d
popf
pushf
not eax
add eax, 0xe2b647fc
xor eax, 0xae64393a
rol eax, 0x22
popf
jmp 0x1400b8d84
lea r13, [r12 + r14]
mov qword [rsp + 0x40], r13
lea rdx, [r13 + 0x30]
xorps xmm0, xmm0
movups xmmword [rsp + 0x70], xmm0
mov qword [rbp - 0x80], 0
mov qword [rbp - 0x78], 0
mov r8, rsi
nop word [rax + rax]
push rax
pushf
mov eax, 0x1c5e50d6
pushf
not eax
add eax, 0xab31e159
xor eax, 0xe55bd4c3
rol eax, 0x57
popf
pushf
not eax
add eax, 0xc67413ea
xor eax, 0xa5b7cfc7
rol eax, 0xb1
popf
jmp 0x1400b8d84
inc r8
cmp byte [rdx + r8], 0
jne 0x1400b99f4
push rax
pushf
mov eax, 0x25a1236f
pushf
not eax
add eax, 0x920dddf9
xor eax, 0xb178ded3
rol eax, 0x84
popf
pushf
not eax
add eax, 0xe2806e12
xor eax, 0x8b4a62fe
rol eax, 0xa5
popf
pushf
not eax
add eax, 0xe5708c9a
xor eax, 0x97623946
rol eax, 0x72
popf
jmp 0x1400b8d84
push rax
pushf
mov eax, 0x19d75cc6
pushf
not eax
add eax, 0xde7ef696
xor eax, 0xc4a7bfcf
rol eax, 0x77
popf
jmp 0x1400b8d84
lea rcx, [rsp + 0x70]
call fcn.1400a2316
nop
movabs rax, 0x6ffe089a8a7e5572
pushf
not rax
add rax, 0x4d92189c
xor rax, 0x511e70d4
rol rax, 0x6b
popf
pushf
not rax
add rax, 0x5ce56e18
xor rax, 0x7b2a6cd2
rol rax, 0x10
popf
pushf
not rax
add rax, 0x69460a83
xor rax, 0x7bfb169a
rol rax, 0x72
popf
mov qword [rbp + 0x88], rax
mov rax, qword [rbp + 0x88]
mov qword [rbp - 0x70], rax
movabs rax, 0x3f572a994c8ab260
pushf
not rax
add rax, 0x44fbe895
xor rax, 0x41e274ec
rol rax, 0x92
popf
pushf
not rax
add rax, 0x6c2d950d
xor rax, 0x700021b4
rol rax, 0x1f
popf
mov qword [rbp + 0x88], rax
mov rax, qword [rbp + 0x88]
mov qword [rbp - 0x68], rax
movabs rdx, 0x52937b4237c20659
pushf
not rdx
add rdx, 0x59a9f39a
xor rdx, 0x45b898c7
rol rdx, 0x81
popf
pushf
not rdx
add rdx, 0x78c2f5d4
xor rdx, 0x475b839f
rol rdx, 0xee
popf
pushf
not rdx
add rdx, 0x63c95f5b
xor rdx, 0x568e8252
rol rdx, 0x77
popf
mov qword [rbp + 0x88], rdx
mov rax, qword [rbp + 0x88]
mov qword [rbp - 0x10], rax
movabs rcx, 0xb688649da6644b48
pushf
not rcx
add rcx, 0x4d070413
xor rcx, 0x5c5b41d6
rol rcx, 0xf2
popf
pushf
not rcx
add rcx, 0x649217c2
xor rcx, 0x626191ff
rol rcx, 0x96
popf
mov qword [rbp + 0x88], rcx
mov rax, qword [rbp + 0x88]
mov qword [rbp - 8], rax
movdqa xmm0, xmmword [rbp - 0x70]
xorps xmm0, xmmword [rbp - 0x10]
movdqa xmmword [rbp - 0x70], xmm0
lea rax, [rbp - 0x70]
mov rdi, rsi
nop word [rax + rax]
push rax
pushf
mov eax, 0x88e3d376
pushf
not eax
add eax, 0xe3e6956b
xor eax, 0xc7cc41d1
rol eax, 0xd8
popf
pushf
not eax
add eax, 0xf20b02ad
xor eax, 0xebdf6540
rol eax, 0x3d
popf
pushf
not eax
add eax, 0x81f4b1cb
xor eax, 0xfceb879d
rol eax, 0xf0
popf
jmp 0x1400b8d84
inc rdi
cmp byte [rax + rdi], 0
jne 0x1400b9c09
push rax
pushf
mov eax, 0xd52692a5
pushf
not eax
add eax, 0xa6cf6d94
xor eax, 0xd1bedaee
rol eax, 0xb0
popf
jmp 0x1400b8d84
push rax
pushf
mov eax, 0xcd0128b5
pushf
not eax
add eax, 0xc23cb2ae
xor eax, 0xf276aa4f
rol eax, 0x90
popf
pushf
not eax
add eax, 0x9c402ac4
xor eax, 0xf900ffa8
rol eax, 0xd3
popf
pushf
not eax
add eax, 0xe486ee72
xor eax, 0xfd93b223
rol eax, 0x54
popf
jmp 0x1400b8d84
lea r12, [rsp + 0x70]
cmp qword [rbp - 0x78], 0x10
cmovae r12, qword [rsp + 0x70]
mov rax, qword [rbp - 0x80]
cmp rdi, rax
ja 0x1400b9c8c
push rax
pushf
mov eax, 0xb02925ce
pushf
not eax
add eax, 0xad589c5b
xor eax, 0xfd97768c
rol eax, 0xed
popf
jmp 0x1400b8d84
push rax
pushf
mov eax, 0x18b46ff6
pushf
not eax
add eax, 0xfcf3301f
xor eax, 0x93374d6b
rol eax, 0xce
popf
pushf
not eax
add eax, 0xab7ca8ac
xor eax, 0xc6882965
rol eax, 0x34
popf
pushf
not eax
add eax, 0xdab8901d
xor eax, 0xa1efaade
rol eax, 0x19
popf
jmp 0x1400b8d84
sub rax, rdi
test rdi, rdi
jne 0x1400b9d0d
push rax
pushf
mov eax, 0x3658ad04
pushf
not eax
add eax, 0xb5cf16d5
xor eax, 0xd226d7f7
rol eax, 0xcc
popf
pushf
not eax
add eax, 0xcc8d5cd6
xor eax, 0xc0a6e200
rol eax, 0x11
popf
jmp 0x1400b8d84
push rax
pushf
mov eax, 0x3133f250
pushf
not eax
add eax, 0x9591585b
xor eax, 0xa084e1c0
rol eax, 0x91
popf
pushf
not eax
add eax, 0xa4f03a07
xor eax, 0x953eb053
rol eax, 0xae
popf
jmp 0x1400b8d84
xor r12d, r12d
mov ebx, r12d
jmp 0x1400ba02d
lea r13, [r12 + rax]
movq rax, xmm0
movsx eax, al
mov dword [rbp + 0x88], eax
lea r8, [r13 + 1]
sub r8, r12
mov edx, eax
mov rcx, r12
call sub.VCRUNTIME140.dll_memchr
mov rbx, rax
test rax, rax
je 0x1400b9ddc
push rax
pushf
mov eax, 0x4922d2d9
pushf
not eax
add eax, 0xfb86490a
xor eax, 0xb26370b0
rol eax, 0xda
popf
jmp 0x1400b8d84
push rax
pushf
mov eax, 0x2ed9aae9
pushf
not eax
add eax, 0x94b9725c
xor eax, 0x98406d8d
rol eax, 0xa9
popf
pushf
not eax
add eax, 0x8ba09bac
xor eax, 0xd75e7724
rol eax, 0xda
popf
pushf
not eax
add eax, 0xf17b7f0e
xor eax, 0x9f0f2b61
rol eax, 0xdf
popf
jmp 0x1400b8d84
nop dword [rax]
nop dword [rax + rax]
push rax
pushf
mov eax, 0x6a18f4e2
pushf
not eax
add eax, 0xcb09d09c
xor eax, 0xb1a53e47
rol eax, 0x48
popf
pushf
not eax
add eax, 0xc6a69c6a
xor eax, 0xec8d02a0
rol eax, 0xa3
popf
pushf
not eax
add eax, 0xc64c9888
xor eax, 0xe3df9ed8
rol eax, 0xe0
popf
jmp 0x1400b8d84
mov r8, rdi
lea rdx, [rbp - 0x70]
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x1400b9ed1
push rax
pushf
mov eax, 0xcb79ee5f
pushf
not eax
add eax, 0xeea9134e
xor eax, 0x93f7c487
rol eax, 0x31
popf
pushf
not eax
add eax, 0x918e7cbf
xor eax, 0xe0b96042
rol eax, 0xbb
popf
pushf
not eax
add eax, 0xfd85783b
xor eax, 0x84057860
rol eax, 0x38
popf
jmp 0x1400b8d84
push rax
pushf
mov eax, 0x43658d0b
pushf
not eax
add eax, 0xd32aafea
xor eax, 0x860522de
rol eax, 0x2a
popf
jmp 0x1400b8d84
inc rbx
lea r8, [r13 + 1]
sub r8, rbx
mov edx, dword [rbp + 0x88]
mov rcx, rbx
call sub.VCRUNTIME140.dll_memchr
mov rbx, rax
test rax, rax
jne 0x1400b9f31
push rax
pushf
mov eax, 0x89759880
pushf
not eax
add eax, 0xaa8c9ffd
xor eax, 0xf117077d
rol eax, 0xe4
popf
jmp 0x1400b8d84
push rax
pushf
mov eax, 0x91c75c70
pushf
not eax
add eax, 0xdb1539f5
xor eax, 0xf6284f4e
rol eax, 0xed
popf
pushf
not eax
add eax, 0xc2525749
xor eax, 0xdfd7007d
rol eax, 0xf
popf
pushf
not eax
add eax, 0xd9d2bb28
xor eax, 0xda41e510
rol eax, 0x37
popf
jmp 0x1400b8d84
mov r13, qword [rsp + 0x40]
movabs rcx, 0x7f9a5b58ccfdc2d7
pushf
not rcx
add rcx, 0x592370c0
xor rcx, 0x6a08f178
rol rcx, 0x31
popf
pushf
not rcx
add rcx, 0x74ab6a34
xor rcx, 0x677970d6
rol rcx, 0x14
popf
pushf
not rcx
add rcx, 0x40cfdc1b
xor rcx, 0x470718fa
rol rcx, 0x7b
popf
movabs rdx, 0x5243d647df4c9d9e
pushf
not rdx
add rdx, 0x67767c17
xor rdx, 0x7c6eb43d
rol rdx, 0xe1
popf
push rax
pushf
mov eax, 0xe33110cd
pushf
not eax
add eax, 0xcbbdbfe9
xor eax, 0xa47bffea
rol eax, 0xf1
popf
pushf
not eax
add eax, 0xa1956208
xor eax, 0xffb2c825
rol eax, 0xbf
popf
jmp 0x1400b8d84
mov rbx, rsi
xor r12d, r12d
cmp rbx, 0xffffffffffffffff
je 0x1400ba057
push rax
pushf
mov eax, 0xf440d21b
pushf
not eax
add eax, 0xd6aad222
xor eax, 0xe26a0f86
rol eax, 0xb9
popf
jmp 0x1400b8d84
push rax
pushf
mov eax, 0x8dc453f6
pushf
not eax
add eax, 0xe18d4449
xor eax, 0xc5f85a6e
rol eax, 0x48
popf
pushf
not eax
add eax, 0xafa45e2c
xor eax, 0x9efa2190
rol eax, 0xc3
popf
jmp 0x1400b8d84
movabs rax, 0xb7a23b4f5d52d760
pushf
not rax
add rax, 0x788813b0
xor rax, 0x416a5aac
rol rax, 0xbc
popf
pushf
not rax
add rax, 0x5a425b4e
xor rax, 0x664abacb
rol rax, 0x4a
popf
mov qword [rbp + 0x88], rax
mov rax, qword [rbp + 0x88]
mov qword [rsp + 0x40], rax
mov qword [rbp + 0x88], rcx
mov rax, qword [rbp + 0x88]
mov qword [rsp + 0x48], rax
mov qword [rbp + 0x88], rdx
mov rax, qword [rbp + 0x88]
mov qword [rbp], rax
mov qword [rbp + 0x88], rcx
mov rax, qword [rbp + 0x88]
mov qword [rbp + 8], rax
movdqa xmm0, xmmword [rbp]
xorps xmm0, xmmword [rsp + 0x40]
movdqa xmmword [rsp + 0x40], xmm0
movabs rax, 0x383cac27b87fc629
pushf
not rax
add rax, 0x47cd2608
xor rax, 0x6b408fae
rol rax, 0x3d
popf
pushf
not rax
add rax, 0x67d61b3f
xor rax, 0x5a078f7c
rol rax, 0xe9
popf
mov qword [rbp + 0x88], rax
mov rax, qword [rbp + 0x88]
mov qword [rbp - 0x60], rax
movabs rax, 0x7debfe7ce4b293dc
pushf
not rax
add rax, 0x43413d3e
xor rax, 0x69162f35
rol rax, 0xa7
popf
pushf
not rax
add rax, 0x7c72b683
xor rax, 0x5de0caa7
rol rax, 0x38
popf
pushf
not rax
add rax, 0x652a27d3
xor rax, 0x6a8edca1
rol rax, 0x8d
popf
mov qword [rbp + 0x88], rax
mov rax, qword [rbp + 0x88]
mov qword [rbp - 0x58], rax
mov qword [rbp + 0x88], rdx
mov rax, qword [rbp + 0x88]
mov qword [rbp + 0x10], rax
mov qword [rbp + 0x88], rcx
mov rax, qword [rbp + 0x88]
mov qword [rbp + 0x18], rax
movdqa xmm0, xmmword [rbp - 0x60]
xorps xmm0, xmmword [rbp + 0x10]
movdqa xmmword [rbp - 0x60], xmm0
lea rcx, [rbp - 0x60]
jmp 0x1400ba1fe
call qword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll_getenv]
xorps xmm0, xmm0
movups xmmword [rbp - 0x30], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x20], xmm1
mov r8, rsi
nop word [rax + rax]
push rax
pushf
mov eax, 0x31b0c4e0
pushf
not eax
add eax, 0xfc5f6e46
xor eax, 0xdd48248c
rol eax, 0x8e
popf
pushf
not eax
add eax, 0xd1eb7749
xor eax, 0xaecc52bb
rol eax, 0xca
popf
pushf
not eax
add eax, 0xe984ad4b
xor eax, 0xf3f4dbc8
rol eax, 0xde
popf
jmp 0x1400b8d84
inc r8
cmp byte [rax + r8], 0
jne 0x1400ba28c
push rax
pushf
mov eax, 0x189e0565
pushf
not eax
add eax, 0xf2f3c578
xor eax, 0xdb5dc012
rol eax, 0x8d
popf
jmp 0x1400b8d84
push rax
pushf
mov eax, 0x8444b6db
pushf
not eax
add eax, 0x843f57d2
xor eax, 0xe032f667
rol eax, 0x4a
popf
pushf
not eax
add eax, 0xb50432bb
xor eax, 0x9389ee3b
rol eax, 0x90
popf
jmp 0x1400b8d84
mov rdx, rax
lea rcx, [rbp - 0x30]
call fcn.1400a2316
nop
lea rax, [rsp + 0x40]
nop dword [rax]
push rax
pushf
mov eax, 0x183ad560
pushf
not eax
add eax, 0xa7cf1922
xor eax, 0xadd826ed
rol eax, 0x67
popf
pushf
not eax
add eax, 0xd16b9a9e
xor eax, 0xab3900cc
rol eax, 0xbb
popf
jmp 0x1400b8d84
inc rsi
cmp byte [rax + rsi], 0
jne 0x1400ba308
mov r8, rsi
lea rdx, [rsp + 0x40]
lea rcx, [rbp - 0x30]
call fcn.1400c0cbb
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x40], xmm0
movups xmm1, xmmword [rax]
movups xmmword [rbp - 0x50], xmm1
movups xmm2, xmmword [rax + 0x10]
movdqu xmmword [rbp - 0x40], xmm2
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov edi, dword [rsp + 0x30]
or edi, 2
mov dword [rsp + 0x30], edi
lea r9, [rbp - 0x50]
movq rcx, xmm1
movdqa xmm0, xmm2
psrldq xmm0, 8
movq rax, xmm0
cmp rax, 0x10
cmovae r9, rcx
movq qword [rsp + 0x20], xmm2
mov rdx, rbx
lea rcx, [rsp + 0x70]
call fcn.1400819c2
and edi, 0xfffffffd
mov dword [rsp + 0x30], edi
mov rdx, qword [rbp - 0x38]
cmp rdx, 0x10
jb 0x1400ba3de
push rax
pushf
mov eax, 0x6da720d
pushf
not eax
add eax, 0xc4671ba1
xor eax, 0xd55d41d2
rol eax, 0x91
popf
pushf
not eax
add eax, 0xa979ba8b
xor eax, 0xe0b43c8e
rol eax, 0xa
popf
pushf
not eax
add eax, 0xb30ff4d3
xor eax, 0xa7b74ff1
rol eax, 0x32
popf
jmp 0x1400b8d84
push rax
pushf
mov eax, 0x9fdb8d2d
pushf
not eax
add eax, 0x97e0d856
xor eax, 0xf8040328
rol eax, 0xd5
popf
jmp 0x1400b8d84
inc rdx
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400ba444
push rax
pushf
mov eax, 0x705a939
pushf
not eax
add eax, 0xeb7fdcd0
xor eax, 0x8d1b395e
rol eax, 0xf0
popf
pushf
not eax
add eax, 0xb2c816ae
xor eax, 0xb57fad4c
rol eax, 0xa9
popf
jmp 0x1400b8d84
push rax
pushf
mov eax, 0x14aeede2
pushf
not eax
add eax, 0x970b3436
xor eax, 0xcc40e1d2
rol eax, 0xa2
popf
pushf
not eax
add eax, 0xa37758fe
xor eax, 0x8863cfe8
rol eax, 0x12
popf
pushf
not eax
add eax, 0x861cb761
xor eax, 0xb18929c3
rol eax, 0xcf
popf
jmp 0x1400b8d84
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400ba4d2
push rax
pushf
mov eax, 0x1c226084
pushf
not eax
add eax, 0x89b60b0f
xor eax, 0xdf9261fc
rol eax, 0x61
popf
pushf
not eax
add eax, 0xf5f6e699
xor eax, 0x91facfab
rol eax, 0x72
popf
jmp 0x1400b8d84
push rax
pushf
mov eax, 0x98783841
pushf
not eax
add eax, 0x961c4c92
xor eax, 0xff241450
rol eax, 0xac
popf
jmp 0x1400b8d84
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
push rax
pushf
mov eax, 0xb13ba5d8
pushf
not eax
add eax, 0x963a5836
xor eax, 0xf4e6c397
rol eax, 0xf1
popf
pushf
not eax
add eax, 0x8764ad11
xor eax, 0xa7308ce0
rol eax, 0x4b
popf
jmp 0x1400b8d84
sub rbx, r12
mov r13, qword [rsp + 0x40]
movabs rcx, 0x7eb82e7fded81e7a
pushf
not rcx
add rcx, 0x644dc59d
xor rcx, 0x72ef0133
rol rcx, 0xa2
popf
pushf
not rcx
add rcx, 0x524456d2
xor rcx, 0x683e9e14
rol rcx, 0x3e
popf
movabs rdx, 0x9c80ac4ef44fab26
pushf
not rdx
add rdx, 0x52c0bc54
xor rdx, 0x43d807b7
rol rdx, 0xdc
popf
pushf
not rdx
add rdx, 0x54c9aba5
xor rdx, 0x4feb1997
rol rdx, 0xbe
popf
pushf
not rdx
add rdx, 0x7520ed8a
xor rdx, 0x6700da05
rol rdx, 0x3d
popf
jmp 0x1400ba02a
call fcn.14008908e
push rax
pushf
mov eax, 0x3c65f6b2
pushf
not eax
add eax, 0xed67008d
xor eax, 0x80447c3a
rol eax, 0x40
popf
pushf
not eax
add eax, 0xcf9afc6a
xor eax, 0xe6965794
rol eax, 0xe3
popf
pushf
not eax
add eax, 0xa49542e2
xor eax, 0xde76b3b6
rol eax, 0xda
popf
jmp 0x1400b8d84
movdqa xmm0, xmmword [0x1400348a0]
movdqu xmmword [rbp - 0x40], xmm0
mov byte [rbp - 0x50], 0
mov rdx, qword [rbp - 0x18]
cmp rdx, 0x10
jb 0x1400ba671
push rax
pushf
mov eax, 0x48eb21f3
pushf
not eax
add eax, 0xd378c712
xor eax, 0x8fcda51e
rol eax, 0xcb
popf
jmp 0x1400b8d84
push rax
pushf
mov eax, 0xc49141ce
pushf
not eax
add eax, 0x85912ec5
xor eax, 0x9680b801
rol eax, 0xc9
popf
pushf
not eax
add eax, 0xf86e2b9c
xor eax, 0xc3dc314f
rol eax, 0x5e
popf
pushf
not eax
add eax, 0xf0e13377
xor eax, 0xe25b3052
rol eax, 0x1f
popf
jmp 0x1400b8d84
inc rdx
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400ba710
push rax
pushf
mov eax, 0x851cca73
pushf
not eax
add eax, 0xbc5fbe20
xor eax, 0xb56e0de3
rol eax, 0x95
popf
pushf
not eax
add eax, 0xac5df6d2
xor eax, 0xbae24fac
rol eax, 0xee
popf
pushf
not eax
add eax, 0x9decbdd4
xor eax, 0x9b2527b0
rol eax, 0x2b
popf
jmp 0x1400b8d84
push rax
pushf
mov eax, 0x3368f396
pushf
not eax
add eax, 0xe5044b89
xor eax, 0xb19b5252
rol eax, 0xdb
popf
jmp 0x1400b8d84
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400ba765
push rax
pushf
mov eax, 0x9c8181ce
pushf
not eax
add eax, 0x8ccc0c8e
xor eax, 0xf04a9cbf
rol eax, 0x79
popf
jmp 0x1400b8d84
push rax
pushf
mov eax, 0xa7eba5c0
pushf
not eax
add eax, 0xbcd86ffa
xor eax, 0xf2b7f6dc
rol eax, 0x88
popf
pushf
not eax
add eax, 0xd6ba6fab
xor eax, 0xcf7d89c4
rol eax, 0x86
popf
jmp 0x1400b8d84
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14008908e
push rax
pushf
mov eax, 0x743b8ec2
pushf
not eax
add eax, 0x87603b04
xor eax, 0x9de9ec2e
rol eax, 0x5e
popf
pushf
not eax
add eax, 0xa19e333c
xor eax, 0xbde80320
rol eax, 0xf4
popf
jmp 0x1400b8d84
movdqa xmm0, xmmword [0x1400348a0]
movdqu xmmword [rbp - 0x20], xmm0
mov byte [rbp - 0x30], 0
jmp 0x1400ba875
mov edi, dword [rsp + 0x30]
push rax
pushf
mov eax, 0x9d205aee
pushf
not eax
add eax, 0xd6435570
xor eax, 0x907ff81f
rol eax, 0x91
popf
pushf
not eax
add eax, 0xaf95ab6a
xor eax, 0xaa5898af
rol eax, 0x56
popf
jmp 0x1400b8d84
mov rax, qword [r13 + 0x18]
mov rcx, qword [rbp + 0x70]
mov qword [rcx + 0x30], rax
xor edx, edx
mov r8d, 0xe28123f3
pushf
not r8d
add r8d, 0xb6c7a42e
xor r8d, 0xd68806d9
rol r8d, 0xfa
popf
pushf
not r8d
add r8d, 0x96876055
xor r8d, 0x8fe327d1
rol r8d, 0x7f
popf
pushf
not r8d
add r8d, 0xe5df1d11
xor r8d, 0xa30fdc1c
rol r8d, 0x21
popf
mov rcx, r14
jmp 0x1400ba8d8
call qword [sym.imp.KERNEL32.dll_VirtualFree]
movups xmm0, xmmword [rsp + 0x70]
movups xmmword [r15], xmm0
movups xmm1, xmmword [rbp - 0x80]
movups xmmword [r15 + 0x10], xmm1
mov qword [rbp - 0x80], r12
mov qword [rbp - 0x78], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x70], 0
or edi, 1
mov dword [rsp + 0x30], edi
mov qword [rbp - 0x80], r12
mov qword [rbp - 0x78], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x70], 0
mov rdx, qword [rsp + 0x68]
cmp rdx, 0x10
jb 0x1400ba957
push rax
pushf
mov eax, 0xaed6965a
pushf
not eax
add eax, 0xfdf8896b
xor eax, 0x882d86e7
rol eax, 0x44
popf
pushf
not eax
add eax, 0xfd8cd507
xor eax, 0x8cf4758a
rol eax, 0xd0
popf
jmp 0x1400b8d84
push rax
pushf
mov eax, 0x97309eb6
pushf
not eax
add eax, 0x8e59aff4
xor eax, 0xfa69113d
rol eax, 0xaa
popf
jmp 0x1400b8d84
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400ba9ab
push rax
pushf
mov eax, 0x505c91d7
pushf
not eax
add eax, 0xdaa118e8
xor eax, 0x89648710
rol eax, 0x2c
popf
jmp 0x1400b8d84
push rax
pushf
mov eax, 0x7863d24c
pushf
not eax
add eax, 0xbe558382
xor eax, 0xf19516dc
rol eax, 0xb8
popf
pushf
not eax
add eax, 0xad0a0ca2
xor eax, 0xc358a7fa
rol eax, 0x12
popf
jmp 0x1400b8d84
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400baa13
push rax
pushf
mov eax, 0xc24f832f
pushf
not eax
add eax, 0x84670bc6
xor eax, 0xc2db8896
rol eax, 0x8e
popf
jmp 0x1400b8d84
push rax
pushf
mov eax, 0x586e0b76
pushf
not eax
add eax, 0xeae6a421
xor eax, 0xcc7bfd35
rol eax, 0x61
popf
pushf
not eax
add eax, 0x9d3adabe
xor eax, 0xe1340edf
rol eax, 0xdd
popf
jmp 0x1400b8d84
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14008908e
push rax
pushf
mov eax, 0x67a08f69
pushf
not eax
add eax, 0xc9b25ebf
xor eax, 0xda2a2cd3
rol eax, 0x16
popf
pushf
not eax
add eax, 0xbac83f96
xor eax, 0xd45a309d
rol eax, 0xaa
popf
jmp 0x1400b8d84
mov qword [rsp + 0x60], r12
mov qword [rsp + 0x68], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x50], 0
jmp 0x1400b98be
int3