Function at 0x14004bcc0
Capabilities:
Access peb ldr_data
Contain obfuscated stackstrings
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
mov qword [rsp + 0x20], r12
push r13
push r14
push r15
sub rsp, 0x740
mov rax, qword [0x140099040]
xor rax, rsp
mov qword [rsp + 0x738], rax
xor r12d, r12d
mov dword [rsp + 0x38], r12d
mov r8d, 0x104
lea rdx, [rsp + 0x620]
xor ecx, ecx
call qword [0x140963ac0]
mov dword [rsp + 0x220], 0x38013b3c
mov dword [rsp + 0x224], 0x143b3006
mov dword [rsp + 0x228], 0x3a3d0638
mov dword [rsp + 0x22c], 0xd0d300c
mov byte [rsp + 0x230], 0xfc
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x231], xmm0
mov qword [rsp + 0x241], rax
mov dword [rsp + 0x249], eax
mov word [rsp + 0x24d], ax
mov byte [rsp + 0x24f], al
mov qword [rsp + 0x30], r12
mov rax, qword [rsp + 0x30]
movabs r9, 0xa20b8b373c921e1e
mov rcx, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
movzx edx, byte [rsp + rax + 0x220]
add rcx, r9
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
add r8b, 0x2e
mov rax, qword [rsp + 0x30]
mov byte [rsp + rax + 0x220], r8b
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
cmp rax, 0x30
jb 0x14004bd84
mov dword [rsp + 0x1c0], 0xc734cce4
mov dword [rsp + 0x1c4], 0xba48c833
mov dword [rsp + 0x1c8], 0x4cbf99b0
mov dword [rsp + 0x1cc], 0x4fb74fbf
mov dword [rsp + 0x1d0], 0x4949b440
mov dword [rsp + 0x1d4], 0x585fa6bc
mov dword [rsp + 0x1d8], 0xa757a858
mov dword [rsp + 0x1dc], 0x535cac8f
mov dword [rsp + 0x1e0], 0xbb5eac52
mov dword [rsp + 0x1e4], 0x9a995a56
mov dword [rsp + 0x1e8], 0x6d616a6b
mov word [rsp + 0x1ec], 0xa194
mov byte [rsp + 0x1ee], 0xfe
xor eax, eax
mov qword [rsp + 0x1ef], rax
mov qword [rsp + 0x30], r12
mov rax, qword [rsp + 0x30]
movabs r9, 0xa584aa6ffe9a9bba
nop dword [rax + rax]
mov rcx, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
movzx edx, byte [rsp + rax + 0x1c0]
add rcx, r9
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
sub r8b, 0x16
mov rax, qword [rsp + 0x30]
mov byte [rsp + rax + 0x1c0], r8b
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
cmp rax, 0x37
jb 0x14004be80
lea r8, [rsp + 0x220]
lea rdx, [rsp + 0x1c0]
lea rcx, [rsp + 0x340]
call fcn.14004b520
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x360], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x370], xmm1
lea rax, [rsp + 0x620]
mov r15, 0xffffffffffffffff
mov r8, r15
inc r8
cmp byte [rax + r8], 0
jne 0x14004bf15
lea rdx, [rsp + 0x620]
lea rcx, [rsp + 0x360]
call fcn.14005fa20
nop
lea rdx, [rsp + 0x360]
lea rcx, [rsp + 0x540]
call fcn.14004aea0
mov rbx, rax
mov rdi, qword [rax + 0x10]
cmp qword [rax + 0x18], 0xf
jbe 0x14004bf5b
mov rbx, qword [rax]
call fcn.1400750a8
mov qword [rsp + 0x90], rbx
mov qword [rsp + 0x98], rdi
lea r8, [rsp + 0x90]
mov edx, eax
lea rcx, [rsp + 0x480]
call fcn.140044530
mov dword [rsp + 0x38], 0x60
mov dword [rsp + 0x48], r12d
lea r13, [0x140960660]
mov qword [rsp + 0x50], r13
lea rdx, [rsp + 0x48]
lea rcx, [rsp + 0x460]
call fcn.1400456b0
mov dword [rsp + 0x38], 0xe0
cmp dword [rsp + 0x48], 0
jne 0x14004d359
lea rdx, [rsp + 0x460]
lea rcx, [rsp + 0x4c0]
call fcn.140044ad0
mov dword [rsp + 0x38], 0x1e0
lea rdx, [rsp + 0x480]
lea rcx, [rsp + 0x4c0]
call fcn.1400447a0
lea rcx, [rsp + 0x4c0]
call fcn.1400452b0
movzx ebx, al
lea rcx, [rsp + 0x4c0]
call fcn.140059f80
mov dword [rsp + 0x38], 0x60
lea rcx, [rsp + 0x460]
call fcn.140059f80
nop
lea rcx, [rsp + 0x480]
call fcn.140059f80
nop
lea rcx, [rsp + 0x540]
call fcn.14005b190
nop
mov rdx, qword [rsp + 0x378]
cmp rdx, 0xf
jbe 0x14004c08c
inc rdx
mov rcx, qword [rsp + 0x360]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004c087
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004c087
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400763dc
movdqa xmm0, xmmword [0x14008b030]
movdqu xmmword [rsp + 0x370], xmm0
mov byte [rsp + 0x360], 0
mov edi, ebx
xor edi, 1
mov r9, qword [0x140963ac8]
mov dword [rsp + 0x280], 0xd3dfe8f8
mov byte [rsp + 0x284], 0x40
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x285], xmm0
mov qword [rsp + 0x295], rax
mov word [rsp + 0x29d], ax
mov byte [rsp + 0x29f], al
mov qword [rsp + 0x30], r12
mov rax, qword [rsp + 0x30]
movabs r10, 0xedfd402f8cf8f3b6
nop dword [rax]
mov r8, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
movzx edx, byte [rsp + rax + 0x280]
add r8, r10
mov eax, edx
and rax, r8
imul rcx, rax, 0xfffffffffffffffe
add rcx, rdx
add rcx, r8
add cl, 6
mov rax, qword [rsp + 0x30]
mov byte [rsp + rax + 0x280], cl
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
cmp rax, 0x20
jb 0x14004c100
lea rdx, [rsp + 0x280]
lea rcx, [rsp + 0x620]
call r9
mov ecx, 2
test rax, rax
cmovne edi, ecx
mov r9, qword [0x140963ac8]
mov dword [rsp + 0x2e0], 0xf3f70e1a
mov byte [rsp + 0x2e4], 0x62
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x2e5], xmm0
mov dword [rsp + 0x2f5], eax
mov qword [rsp + 0x30], r12
mov rax, qword [rsp + 0x30]
movabs r10, 0xd11a65700bda8f71
nop dword [rax + rax]
mov rcx, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
movzx edx, byte [rsp + rax + 0x2e0]
add rcx, r10
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
sub r8b, 0x17
mov rax, qword [rsp + 0x30]
mov byte [rsp + rax + 0x2e0], r8b
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
cmp rax, 0x19
jb 0x14004c1b0
lea rdx, [rsp + 0x2e0]
lea rcx, [rsp + 0x620]
call r9
test rax, rax
jne 0x14004c314
xorps xmm0, xmm0
movups xmmword [rsp + 0x3e0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x3f0], xmm1
lea rax, [rsp + 0x620]
mov r8, r15
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x14004c240
lea rdx, [rsp + 0x620]
lea rcx, [rsp + 0x3e0]
call fcn.14005fa20
nop
mov dword [rsp + 0x38], 0x61
lea rdx, [rsp + 0x3e0]
lea rcx, [rsp + 0x5a0]
call fcn.14004aea0
mov rbx, rax
mov dword [rsp + 0x38], 0x63
mov rsi, qword [rax + 0x10]
cmp qword [rax + 0x18], 0xf
jbe 0x14004c296
mov rbx, qword [rax]
call fcn.1400750a8
mov qword [rsp + 0xa0], rbx
mov qword [rsp + 0xa8], rsi
lea r8, [rsp + 0xa0]
mov edx, eax
lea rcx, [rsp + 0x4a0]
call fcn.140044530
nop
mov dword [rsp + 0x38], 0x667
lea rcx, [rsp + 0x580]
call fcn.1400457e0
nop
mov dword [rsp + 0x38], 0x66f
lea r8, [rsp + 0x4a0]
mov rdx, rax
lea rcx, [rsp + 0x560]
call fcn.140044a70
nop
mov ebx, 0x67f
mov dword [rsp + 0x38], ebx
mov rcx, rax
call fcn.1400452b0
test al, al
je 0x14004c318
mov sil, 1
jmp 0x14004c31b
mov ebx, dword [rsp + 0x38]
xor sil, sil
test bl, 0x10
je 0x14004c335
and ebx, 0xffffffef
mov dword [rsp + 0x38], ebx
lea rcx, [rsp + 0x560]
call fcn.140059f80
nop
test bl, 8
je 0x14004c34f
and ebx, 0xfffffff7
mov dword [rsp + 0x38], ebx
lea rcx, [rsp + 0x580]
call fcn.140059f80
nop
test bl, 4
je 0x14004c369
and ebx, 0xfffffffb
mov dword [rsp + 0x38], ebx
lea rcx, [rsp + 0x4a0]
call fcn.140059f80
nop
test bl, 2
je 0x14004c383
and ebx, 0xfffffffd
mov dword [rsp + 0x38], ebx
lea rcx, [rsp + 0x5a0]
call fcn.14005b190
nop
test bl, 1
je 0x14004c39c
and ebx, 0xfffffffe
mov dword [rsp + 0x38], ebx
lea rcx, [rsp + 0x3e0]
call fcn.14005b190
test sil, sil
jne 0x14004c3bc
sub edi, 1
je 0x14004c79c
sub edi, 1
je 0x14004c550
cmp edi, 1
jne 0x14004d309
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
mov r9, qword [rax + 0x30]
movsxd rcx, dword [r9 + 0x3c]
mov r11d, dword [rcx + r9 + 0x88]
add r11, r9
cmp r11, r9
je 0x14004d351
mov r10d, dword [r11 + 0x18]
test r10d, r10d
je 0x14004d351
mov edi, dword [r11 + 0x20]
nop dword [rax]
dec r10d
lea rcx, [r9 + r10*4]
mov edx, dword [rcx + rdi]
add rdx, r9
mov r8d, 0x568659ef
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x14004d348
nop dword [rax]
nop word [rax + rax]
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x14004c430
cmp r8d, 0x3c465332
jne 0x14004d348
mov ecx, dword [r11 + 0x1c]
add rcx, r9
mov eax, dword [r11 + 0x24]
add rax, r9
movzx eax, word [rax + r10*2]
mov edx, dword [rcx + rax*4]
add rdx, r9
mov ecx, 0xa
call rdx
xorps xmm0, xmm0
movups xmmword [rsp + 0x320], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x330], xmm1
lea rax, [rsp + 0x620]
inc r15
cmp byte [rax + r15], 0
jne 0x14004c494
mov r8, r15
lea rdx, [rsp + 0x620]
lea rcx, [rsp + 0x320]
call fcn.14005fa20
nop
lea rdx, [rsp + 0x320]
lea rcx, [rsp + 0x600]
call fcn.14004aea0
mov rbx, rax
mov rdi, qword [rax + 0x10]
cmp qword [rax + 0x18], 0xf
jbe 0x14004c4dd
mov rbx, qword [rax]
call fcn.1400750a8
mov qword [rsp + 0xe0], rbx
mov qword [rsp + 0xe8], rdi
lea r8, [rsp + 0xe0]
mov edx, eax
lea rcx, [rsp + 0x440]
call fcn.140044530
mov ebx, dword [rsp + 0x38]
or ebx, 0x30000000
mov dword [rsp + 0x38], ebx
mov dword [rsp + 0x78], r12d
mov qword [rsp + 0x80], r13
lea rdx, [rsp + 0x78]
lea rcx, [rsp + 0x420]
call fcn.1400456b0
or ebx, 0x80000000
mov dword [rsp + 0x38], ebx
cmp dword [rsp + 0x78], 0
jne 0x14004d373
jmp 0x14004d0fe
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x14004c5e6
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x14004c5e6
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
mov r8d, 0x7427cd19
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x14004c5e1
nop
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x14004c5c0
cmp r8d, 0xe109cfdc
je 0x14004c5eb
test r9d, r9d
jne 0x14004c5a0
mov rax, qword [rax]
jmp 0x14004c570
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r10
mov ecx, shutdown
call rdx
lea rcx, [rsp + 0x340]
cmp qword [rsp + 0x358], 0xf
cmova rcx, qword [rsp + 0x340]
call fcn.14004afc0
mov r10, qword [0x140963ae8]
lea r8, [rsp + 0x340]
cmp qword [rsp + 0x358], 0xf
cmova r8, qword [rsp + 0x340]
mov dword [rsp + 0x2c0], 0x91e79d9f
mov byte [rsp + 0x2c4], 0
xor eax, eax
mov qword [rsp + 0x2c5], rax
mov dword [rsp + 0x2cd], eax
mov qword [rsp + 0x30], r12
mov rax, qword [rsp + 0x30]
movabs r11, 0x5d1ebb59a0ee2cd6
mov rcx, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
movzx edx, byte [rsp + rax + 0x2c0]
add rcx, r11
mov rax, rcx
and rax, rdx
imul r9, rax, 0xfffffffffffffffe
add r9, rcx
add r9, rdx
add r9b, 0x26
mov rax, qword [rsp + 0x30]
mov byte [rsp + rax + 0x2c0], r9b
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
cmp rax, 0x11
jb 0x14004c681
mov dword [rsp + 0x28], 0xa
mov qword [rsp + 0x20], r12
xor r9d, r9d
lea rdx, [rsp + 0x2c0]
xor ecx, ecx
call r10
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x14004c776
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x14004c776
mov edi, dword [rbx + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [rdi + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
mov r8d, 0xe853b534
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x14004c771
nop
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x14004c750
cmp r8d, 0x9b9e6544
je 0x14004c77b
test r9d, r9d
jne 0x14004c730
mov rax, qword [rax]
jmp 0x14004c700
mov ecx, dword [rbx + 0x1c]
add rcx, r10
mov eax, dword [rbx + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r10
mov ecx, r15d
call rdx
jmp 0x14004d309
mov dword [rsp + 0x250], 0x94adaba8
mov dword [rsp + 0x254], 0xa0b384b6
mov dword [rsp + 0x258], 0x8281b6b4
mov dword [rsp + 0x25c], 0xb9b984b0
mov byte [rsp + 0x260], 0x48
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x261], xmm0
mov dword [rsp + 0x271], eax
mov byte [rsp + 0x275], al
mov qword [rsp + 0x30], r12
mov rax, qword [rsp + 0x30]
movabs r9, 0xbe3e21c6dc44dc0c
nop
mov rcx, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
movzx edx, byte [rsp + rax + 0x250]
add rcx, r9
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
sub r8b, 0x54
mov rax, qword [rsp + 0x30]
mov byte [rsp + rax + 0x250], r8b
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
cmp rax, 0x26
jb 0x14004c800
mov dword [rsp + 0x150], 0x5764acc4
mov dword [rsp + 0x154], 0x5260506b
mov dword [rsp + 0x158], 0x6c5f3148
mov dword [rsp + 0x15c], 0x6f576f5f
mov dword [rsp + 0x160], 0x71715468
mov dword [rsp + 0x164], 0x707f565c
mov dword [rsp + 0x168], 0x57474070
mov dword [rsp + 0x16c], 0x7b7c4c2f
mov dword [rsp + 0x170], 0x637e4c7a
mov dword [rsp + 0x174], 0x72714246
mov dword [rsp + 0x178], 0x4d494243
mov dword [rsp + 0x17c], 0xde0964
mov qword [rsp + 0x30], r12
mov rax, qword [rsp + 0x30]
movabs r9, 0xf3742b9e599cbd7e
mov rcx, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
movzx edx, byte [rsp + rax + 0x150]
add rcx, r9
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
sub r8b, 0x72
mov rax, qword [rsp + 0x30]
mov byte [rsp + rax + 0x150], r8b
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
cmp rax, 0x30
jb 0x14004c8e6
lea r9, [rsp + 0x620]
lea rdx, [rsp + 0x250]
lea rcx, [rsp + 0x150]
call fcn.14004b750
lea rax, [rsp + 0x130]
mov qword [rsp + 0x30], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x300], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x310], xmm1
lea rax, [rsp + 0x620]
mov r8, r15
inc r8
cmp byte [rax + r8], 0
jne 0x14004c980
lea rdx, [rsp + 0x620]
lea rcx, [rsp + 0x300]
call fcn.14005fa20
nop
lea rdx, [rsp + 0x300]
lea rcx, [rsp + 0x5c0]
call fcn.14004aea0
mov rbx, rax
mov rdi, qword [rax + 0x10]
cmp qword [rax + 0x18], 0xf
jbe 0x14004c9c6
mov rbx, qword [rax]
call fcn.1400750a8
mov qword [rsp + 0xb0], rbx
mov qword [rsp + 0xb8], rdi
lea r8, [rsp + 0xb0]
mov edx, eax
lea rcx, [rsp + 0x500]
call fcn.140044530
mov edi, dword [rsp + 0x38]
or edi, 0x6000
mov dword [rsp + 0x38], edi
mov dword [rsp + 0x58], r12d
mov qword [rsp + 0x60], r13
lea rdx, [rsp + 0x58]
lea rcx, [rsp + 0x4e0]
call fcn.1400456b0
bts edi, 0xf
mov dword [rsp + 0x38], edi
cmp dword [rsp + 0x58], 0
jne 0x14004d38d
lea r8, [rsp + 0x500]
lea rdx, [rsp + 0x4e0]
lea rcx, [rsp + 0x130]
call fcn.140044a70
mov rsi, rax
lea rax, [rsp + 0xf0]
mov qword [rsp + 0x88], rax
lea rax, [rsp + 0x620]
mov rbx, r15
nop word [rax + rax]
inc rbx
cmp byte [rax + rbx], 0
jne 0x14004ca70
call fcn.1400750a8
lea rcx, [rsp + 0x620]
mov qword [rsp + 0xc0], rcx
mov qword [rsp + 0xc8], rbx
lea r8, [rsp + 0xc0]
mov edx, eax
lea rcx, [rsp + 0xf0]
call fcn.140044530
or edi, 0x60000
mov dword [rsp + 0x38], edi
lea rcx, [rsp + 0x110]
call fcn.1400457e0
nop
mov r8, rsi
lea rdx, [rsp + 0xf0]
mov rcx, rax
call fcn.14004b430
btr edi, 0xf
lea rcx, [rsp + 0x4e0]
call fcn.140059f80
nop
lea rcx, [rsp + 0x500]
call fcn.140059f80
nop
lea rcx, [rsp + 0x5c0]
call fcn.14005b190
nop
mov rdx, qword [rsp + 0x318]
cmp rdx, 0xf
jbe 0x14004cb4c
inc rdx
mov rcx, qword [rsp + 0x300]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004cb47
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004cb47
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400763dc
movdqa xmm0, xmmword [0x14008b030]
movdqu xmmword [rsp + 0x310], xmm0
mov byte [rsp + 0x300], 0
mov r14, qword [0x140963ae8]
mov qword [rsp + 0x30], r14
xorps xmm0, xmm0
movups xmmword [rsp + 0x3c0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x3d0], xmm1
lea rax, [rsp + 0x620]
mov r8, r15
inc r8
cmp byte [rax + r8], 0
jne 0x14004cb93
lea rdx, [rsp + 0x620]
lea rcx, [rsp + 0x3c0]
call fcn.14005fa20
nop
lea rdx, [rsp + 0x3c0]
lea rcx, [rsp + 0x5e0]
call fcn.14004aea0
mov rbx, rax
mov rsi, qword [rax + 0x10]
cmp qword [rax + 0x18], 0xf
jbe 0x14004cbd9
mov rbx, qword [rax]
call fcn.1400750a8
mov qword [rsp + 0xd0], rbx
mov qword [rsp + 0xd8], rsi
lea r8, [rsp + 0xd0]
mov edx, eax
lea rcx, [rsp + 0x400]
call fcn.140044530
or edi, 0x300000
mov dword [rsp + 0x38], edi
mov dword [rsp + 0x68], r12d
mov qword [rsp + 0x70], r13
lea rdx, [rsp + 0x68]
lea rcx, [rsp + 0x520]
call fcn.1400456b0
bts edi, 0x16
mov dword [rsp + 0x38], edi
cmp dword [rsp + 0x68], 0
jne 0x14004d3a7
lea rdx, [rsp + 0x520]
lea rcx, [rsp + 0x380]
call fcn.140044ad0
bts edi, 0x17
mov dword [rsp + 0x38], edi
lea rdx, [rsp + 0x400]
lea rcx, [rsp + 0x380]
call fcn.1400447a0
lea r12, [rsp + 0x380]
cmp qword [rsp + 0x398], 7
cmova r12, qword [rsp + 0x380]
mov r15, qword [rsp + 0x390]
call fcn.1400750a8
mov r13d, eax
xorps xmm0, xmm0
movups xmmword [rsp + 0x200], xmm0
xor ebx, ebx
mov qword [rsp + 0x210], rbx
mov ecx, reloc.WS2_32.dll_ntohs
mov qword [rsp + 0x218], rcx
mov byte [rsp + 0x200], bl
bts edi, 0x1b
mov dword [rsp + 0x38], edi
test r15, r15
je 0x14004cde6
cmp r15, 0x7fffffff
ja 0x14004d3c1
mov dword [rsp + 0x20], ebx
xor r9d, r9d
mov r8d, r15d
mov rdx, r12
mov ecx, r13d
call fcn.140075118
mov rsi, rax
shr rax, 0x20
test eax, eax
jne 0x14004d3c7
movsxd rcx, esi
mov rdx, qword [rsp + 0x210]
cmp rcx, rdx
ja 0x14004cd3c
lea rax, [rsp + 0x200]
cmp qword [rsp + 0x218], 0xf
cmova rax, qword [rsp + 0x200]
mov qword [rsp + 0x210], rcx
mov byte [rax + rcx], bl
jmp 0x14004cda3
mov r14, rcx
sub r14, rdx
mov r8, qword [rsp + 0x218]
mov rax, r8
sub rax, rdx
cmp r14, rax
ja 0x14004cd8b
mov qword [rsp + 0x210], rcx
lea rbx, [rsp + 0x200]
cmp r8, 0xf
cmova rbx, qword [rsp + 0x200]
add rbx, rdx
mov r8, r14
xor edx, edx
mov rcx, rbx
call sub.VCRUNTIME140.dll_memset
mov byte [r14 + rbx], 0
xor ebx, ebx
jmp 0x14004cd9e
mov r9, r14
mov rdx, r14
lea rcx, [rsp + 0x200]
call fcn.14005fe50
mov r14, qword [rsp + 0x30]
lea r9, [rsp + 0x200]
cmp qword [rsp + 0x218], 0xf
cmova r9, qword [rsp + 0x200]
mov dword [rsp + 0x20], esi
mov r8d, r15d
mov rdx, r12
mov ecx, r13d
call fcn.140075118
mov rcx, rax
shr rax, 0x20
test eax, eax
jne 0x14004d3d3
mov rcx, qword [rsp + 0x218]
btr edi, 0x1b
or edi, 0x7000000
mov dword [rsp + 0x38], edi
lea r10, [rsp + 0x200]
cmp rcx, 0xf
cmova r10, qword [rsp + 0x200]
mov dword [rsp + 0x2a0], 0xd07090f
mov byte [rsp + 0x2a4], __WSAFDIsSet
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x2a5], xmm0
mov qword [rsp + 0x2b5], rax
mov byte [rsp + 0x2bd], al
mov qword [rsp + 0x30], rbx
mov rax, qword [rsp + 0x30]
cmp rax, 0x1e
jae 0x14004ce9d
movabs r9, 0x31a2564f63908944
mov r8, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
movzx edx, byte [rsp + rax + 0x2a0]
add r8, r9
mov eax, edx
and rax, r8
imul rcx, rax, 0xfffffffffffffffe
add rcx, rdx
add rcx, r8
add cl, 0x24
mov rax, qword [rsp + 0x30]
mov byte [rsp + rax + 0x2a0], cl
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
cmp rax, 0x1e
jb 0x14004ce52
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, r10
lea rdx, [rsp + 0x2a0]
xor ecx, ecx
call r14
nop
mov rdx, qword [rsp + 0x218]
cmp rdx, 0xf
jbe 0x14004cf00
inc rdx
mov rcx, qword [rsp + 0x200]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004cefb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004cefb
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400763dc
mov qword [rsp + 0x210], rbx
mov qword [rsp + 0x218], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x200], 0
lea rcx, [rsp + 0x380]
call fcn.140059f80
nop
lea rcx, [rsp + 0x520]
call fcn.140059f80
nop
lea rcx, [rsp + 0x400]
call fcn.140059f80
nop
lea rcx, [rsp + 0x5e0]
call fcn.14005b190
nop
mov rdx, qword [rsp + 0x3d8]
cmp rdx, 0xf
jbe 0x14004cf9a
inc rdx
mov rcx, qword [rsp + 0x3c0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004cf95
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004cf95
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400763dc
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x14004d026
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x14004d026
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rbx]
add rdx, r10
mov r8d, 0x9c021572
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x14004d021
nop dword [rax]
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x14004d000
cmp r8d, 0x7f3b6bf5
je 0x14004d02b
test r9d, r9d
jne 0x14004cfe0
mov rax, qword [rax]
jmp 0x14004cfb0
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r10
mov ecx, 0xa
call rdx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x14004d0d6
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x14004d0d6
mov edi, dword [rbx + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rdi]
add rdx, r10
mov r8d, 0x58ae52d0
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x14004d0d1
nop dword [rax]
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x14004d0b0
cmp r8d, 0x881cbb60
je 0x14004d0db
test r9d, r9d
jne 0x14004d090
mov rax, qword [rax]
jmp 0x14004d060
mov ecx, dword [rbx + 0x1c]
add rcx, r10
mov eax, dword [rbx + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r10
mov ecx, 0xffffffff
call rdx
jmp 0x14004d309
lea rdx, [rsp + 0x420]
lea rcx, [rsp + 0x3a0]
call fcn.140044ad0
bts ebx, 0x1e
mov dword [rsp + 0x38], ebx
lea rdx, [rsp + 0x440]
lea rcx, [rsp + 0x3a0]
call fcn.1400447a0
lea rcx, [rsp + 0x3a0]
cmp qword [rsp + 0x3b8], 7
cmova rcx, qword [rsp + 0x3a0]
call fcn.140075a48
mov rdx, rax
shr rax, 0x20
test eax, eax
jne 0x14004d3dd
btr ebx, 0x1e
lea rcx, [rsp + 0x3a0]
call fcn.140059f80
btr ebx, 0x1f
mov dword [rsp + 0x38], ebx
lea rcx, [rsp + 0x420]
call fcn.140059f80
nop
lea rcx, [rsp + 0x440]
call fcn.140059f80
nop
lea rcx, [rsp + 0x600]
call fcn.14005b190
nop
mov rdx, qword [rsp + 0x338]
cmp rdx, 0xf
jbe 0x14004d1e7
inc rdx
mov rcx, qword [rsp + 0x320]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004d1e2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004d1e2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400763dc
movdqa xmm0, xmmword [0x14008b030]
movdqu xmmword [rsp + 0x330], xmm0
mov byte [rsp + 0x320], 0
mov dword [rsp + 0x180], 0x9f8a9afe
mov dword [rsp + 0x184], 0x988e9e83
mov dword [rsp + 0x188], 0xb6a7c5e2
mov dword [rsp + 0x18c], 0xb7afb7a7
mov dword [rsp + 0x190], 0xa5b9a2b2
mov dword [rsp + 0x194], 0xbab7d8d6
mov dword [rsp + 0x198], 0xcfbfb6ba
mov dword [rsp + 0x19c], 0xa3bab2d7
mov dword [rsp + 0x1a0], 0xcbb4baa4
mov dword [rsp + 0x1a4], 0xb8b9aca8
mov dword [rsp + 0x1a8], 0x515154ab
mov word [rsp + 0x1ac], 0x153e
mov byte [rsp + 0x1ae], 0xe4
xor eax, eax
mov word [rsp + 0x1af], ax
mov byte [rsp + 0x1b1], al
mov qword [rsp + 0x30], r12
mov rax, qword [rsp + 0x30]
movabs r9, 0xa9bacc20693b48d7
mov r8, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
movzx edx, byte [rsp + rax + 0x180]
add r8, r9
mov eax, edx
and rax, r8
imul rcx, rax, 0xfffffffffffffffe
add rcx, rdx
add rcx, r8
add cl, 0x1f
mov rax, qword [rsp + 0x30]
mov byte [rsp + rax + 0x180], cl
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
cmp rax, 0x32
jb 0x14004d2b0
lea rcx, [rsp + 0x180]
call fcn.14004b9c0
nop
lea rcx, [rsp + 0x340]
call fcn.14005b190
mov rcx, qword [rsp + 0x738]
xor rcx, rsp
call fcn.140075d20
lea r11, [rsp + 0x740]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov r12, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop r13
ret
test r10d, r10d
jne 0x14004c400
mov rax, qword [rax]
jmp 0x14004c3d0
lea r8, [rsp + 0x460]
lea rdx, [rsp + 0x48]
lea rcx, [0x14008a860]
call fcn.140045250
nop
lea r8, [rsp + 0x420]
lea rdx, [rsp + 0x78]
lea rcx, [0x14008a860]
call fcn.140045250
nop
lea r8, [rsp + 0x4e0]
lea rdx, [rsp + 0x58]
lea rcx, [0x14008a860]
call fcn.140045250
nop
lea r8, [rsp + 0x520]
lea rdx, [rsp + 0x68]
lea rcx, [0x14008a860]
call fcn.140045250
nop
call fcn.14003af30
int3
shr rsi, 0x20
mov ecx, esi
call fcn.14003b1e0
int3
shr rcx, 0x20
call fcn.14003b1e0
nop
shr rdx, 0x20
lea r8, [rsp + 0x3a0]
call fcn.140045160
int3