Function at 0x140008390
Capabilities:
Authenticate hmac
Contain obfuscated stackstrings
Link many functions at runtime

Disassembly:
push rbp
sub rsp, 0x3a0
lea rbp, [rsp + 0x80]
call fcn.1400081f0
mov byte [rbp + 0x7f], 0x73
mov byte [rbp + 0x80], 0x7c
mov byte [rbp + 0x81], 0x68
mov byte [rbp + 0x82], 0x75
mov byte [rbp + 0x83], 0x79
mov byte [rbp + 0x84], 0x71
mov byte [rbp + 0x85], 0xd
mov byte [rbp + 0x86], 0xd
mov byte [rbp + 0x87], 0x6e
mov byte [rbp + 0x88], 0x25
mov byte [rbp + 0x89], 0x2e
mov byte [rbp + 0x8a], 0x2f
mov byte [rbp + 0x8b], 0x44
lea rax, [rbp + 0x7f]
mov qword [rbp + 0x288], rax
mov rax, qword [rbp + 0x288]
movzx eax, byte [rax + 0xc]
test al, al
setne al
test al, al
je 0x1400084ab
lea rax, [rbp + 0x7f]
lea rdx, [rbp + 0x7f]
mov qword [rbp + 0x280], rdx
mov qword [rbp + 0x278], rax
mov dword [rbp + 0x274], 0
jmp 0x1400084a1
mov eax, dword [rbp + 0x274]
movsxd rdx, eax
mov rax, qword [rbp + 0x278]
add rax, rdx
movzx r8d, byte [rax]
mov eax, dword [rbp + 0x274]
movsxd rdx, eax
imul rdx, rdx, 0x4bda12f7
shr rdx, 0x20
sar edx, 4
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x36
sub eax, ecx
mov edx, eax
mov eax, edx
add eax, 0x38
mov ecx, r8d
xor ecx, eax
mov rdx, qword [rbp + 0x280]
mov eax, dword [rbp + 0x274]
cdqe
mov byte [rdx + rax], cl
add dword [rbp + 0x274], 1
cmp dword [rbp + 0x274], 0xc
jle 0x140008442
nop
lea rax, [rbp + 0x7f]
mov qword [rbp + 0x318], rax
mov dword [rbp + 0x250], 0
jmp 0x1400084d6
mov eax, dword [rbp + 0x250]
cdqe
mov byte [rbp + rax + 0x7f], 0
add dword [rbp + 0x250], 1
cmp dword [rbp + 0x250], 0xc
jle 0x1400084c2
nop
mov rax, qword [rbp + 0x318]
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
call rax
mov qword [rbp + 0x310], rax
mov byte [rbp + 0x74], 0x6f
mov byte [rbp + 0x75], 0x6a
mov byte [rbp + 0x76], 8
mov byte [rbp + 0x77], 0x64
mov byte [rbp + 0x78], 0xf
mov byte [rbp + 0x79], 0xf
mov byte [rbp + 0x7a], 0x10
mov byte [rbp + 0x7b], 0x5b
mov byte [rbp + 0x7c], 0x2c
mov byte [rbp + 0x7d], 0x2d
mov byte [rbp + 0x7e], 0x42
lea rax, [rbp + 0x74]
mov qword [rbp + 0x268], rax
mov rax, qword [rbp + 0x268]
movzx eax, byte [rax + 0xa]
test al, al
setne al
test al, al
je 0x1400085d4
lea rax, [rbp + 0x74]
lea rdx, [rbp + 0x74]
mov qword [rbp + 0x260], rdx
mov qword [rbp + 0x258], rax
mov dword [rbp + 0x254], 0
jmp 0x1400085ca
mov eax, dword [rbp + 0x254]
movsxd rdx, eax
mov rax, qword [rbp + 0x258]
add rax, rdx
movzx r8d, byte [rax]
mov eax, dword [rbp + 0x254]
movsxd rdx, eax
imul rdx, rdx, 0x4bda12f7
shr rdx, 0x20
sar edx, 4
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x36
sub eax, ecx
mov edx, eax
mov eax, edx
add eax, 0x38
mov ecx, r8d
xor ecx, eax
mov rdx, qword [rbp + 0x260]
mov eax, dword [rbp + 0x254]
cdqe
mov byte [rdx + rax], cl
add dword [rbp + 0x254], 1
cmp dword [rbp + 0x254], 0xa
jle 0x14000856b
nop
lea rax, [rbp + 0x74]
mov qword [rbp + 0x308], rax
mov dword [rbp + 0x230], 0
jmp 0x1400085ff
mov eax, dword [rbp + 0x230]
cdqe
mov byte [rbp + rax + 0x74], 0
add dword [rbp + 0x230], 1
cmp dword [rbp + 0x230], 0xa
jle 0x1400085eb
nop
mov rax, qword [rbp + 0x308]
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_LoadLibraryA]
call rax
mov qword [rbp + 0x300], rax
mov byte [rbp + 0x65], 0x7b
mov byte [rbp + 0x66], 0x4b
mov byte [rbp + 0x67], 0x5f
mov byte [rbp + 0x68], 0x5a
mov byte [rbp + 0x69], 0x48
mov byte [rbp + 0x6a], 0x58
mov byte [rbp + 0x6b], 0x6e
mov byte [rbp + 0x6c], 0x4d
mov byte [rbp + 0x6d], 0x2f
mov byte [rbp + 0x6e], 0x22
mov byte [rbp + 0x6f], 0x27
mov byte [rbp + 0x70], 0x30
mov byte [rbp + 0x71], 0x37
mov byte [rbp + 0x72], 4
mov byte [rbp + 0x73], 0x46
lea rax, [rbp + 0x65]
mov qword [rbp + 0x248], rax
mov rax, qword [rbp + 0x248]
movzx eax, byte [rax + 0xe]
test al, al
setne al
test al, al
je 0x14000870d
lea rax, [rbp + 0x65]
lea rdx, [rbp + 0x65]
mov qword [rbp + 0x240], rdx
mov qword [rbp + 0x238], rax
mov dword [rbp + 0x234], 0
jmp 0x140008703
mov eax, dword [rbp + 0x234]
movsxd rdx, eax
mov rax, qword [rbp + 0x238]
add rax, rdx
movzx r8d, byte [rax]
mov eax, dword [rbp + 0x234]
movsxd rdx, eax
imul rdx, rdx, 0x4bda12f7
shr rdx, 0x20
sar edx, 4
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x36
sub eax, ecx
mov edx, eax
mov eax, edx
add eax, 0x38
mov ecx, r8d
xor ecx, eax
mov rdx, qword [rbp + 0x240]
mov eax, dword [rbp + 0x234]
cdqe
mov byte [rdx + rax], cl
add dword [rbp + 0x234], 1
cmp dword [rbp + 0x234], 0xe
jle 0x1400086a4
nop
lea rax, [rbp + 0x65]
mov qword [rbp + 0x2f8], rax
mov dword [rbp + 0x210], 0
jmp 0x140008738
mov eax, dword [rbp + 0x210]
cdqe
mov byte [rbp + rax + 0x65], 0
add dword [rbp + 0x210], 1
cmp dword [rbp + 0x210], 0xe
jle 0x140008724
nop
mov rdx, qword [rbp + 0x2f8]
mov rax, qword [rbp + 0x310]
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
call rax
mov qword [0x1400101a8], rax
mov byte [rbp + 0x59], 0x7b
mov byte [rbp + 0x5a], 0x55
mov byte [rbp + 0x5b], 0x55
mov byte [rbp + 0x5c], 0x48
mov byte [rbp + 0x5d], 0x59
mov byte [rbp + 0x5e], 0x75
mov byte [rbp + 0x5f], 0x5f
mov byte [rbp + 0x60], 0x51
mov byte [rbp + 0x61], 0x24
mov byte [rbp + 0x62], 0x2d
mov byte [rbp + 0x63], 0x27
mov byte [rbp + 0x64], 0x43
lea rax, [rbp + 0x59]
mov qword [rbp + 0x228], rax
mov rax, qword [rbp + 0x228]
movzx eax, byte [rax + 0xb]
test al, al
setne al
test al, al
je 0x140008841
lea rax, [rbp + 0x59]
lea rdx, [rbp + 0x59]
mov qword [rbp + 0x220], rdx
mov qword [rbp + 0x218], rax
mov dword [rbp + 0x214], 0
jmp 0x140008837
mov eax, dword [rbp + 0x214]
movsxd rdx, eax
mov rax, qword [rbp + 0x218]
add rax, rdx
movzx r8d, byte [rax]
mov eax, dword [rbp + 0x214]
movsxd rdx, eax
imul rdx, rdx, 0x4bda12f7
shr rdx, 0x20
sar edx, 4
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x36
sub eax, ecx
mov edx, eax
mov eax, edx
add eax, 0x38
mov ecx, r8d
xor ecx, eax
mov rdx, qword [rbp + 0x220]
mov eax, dword [rbp + 0x214]
cdqe
mov byte [rdx + rax], cl
add dword [rbp + 0x214], 1
cmp dword [rbp + 0x214], 0xb
jle 0x1400087d8
nop
lea rax, [rbp + 0x59]
mov qword [rbp + 0x2f0], rax
mov dword [rbp + 0x1f0], 0
jmp 0x14000886c
mov eax, dword [rbp + 0x1f0]
cdqe
mov byte [rbp + rax + 0x59], 0
add dword [rbp + 0x1f0], 1
cmp dword [rbp + 0x1f0], 0xb
jle 0x140008858
nop
mov rdx, qword [rbp + 0x2f0]
mov rax, qword [rbp + 0x310]
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
call rax
mov qword [0x1400101b0], rax
mov byte [rbp + 0x4f], 0x7b
mov byte [rbp + 0x50], 0x56
mov byte [rbp + 0x51], 0x4a
mov byte [rbp + 0x52], 0x42
mov byte [rbp + 0x53], 0x7a
mov byte [rbp + 0x54], 0x54
mov byte [rbp + 0x55], 0x52
mov byte [rbp + 0x56], 0x5a
mov byte [rbp + 0x57], 1
mov byte [rbp + 0x58], 0x41
lea rax, [rbp + 0x4f]
mov qword [rbp + 0x208], rax
mov rax, qword [rbp + 0x208]
movzx eax, byte [rax + 9]
test al, al
setne al
test al, al
je 0x14000896d
lea rax, [rbp + 0x4f]
lea rdx, [rbp + 0x4f]
mov qword [rbp + 0x200], rdx
mov qword [rbp + 0x1f8], rax
mov dword [rbp + 0x1f4], 0
jmp 0x140008963
mov eax, dword [rbp + 0x1f4]
movsxd rdx, eax
mov rax, qword [rbp + 0x1f8]
add rax, rdx
movzx r8d, byte [rax]
mov eax, dword [rbp + 0x1f4]
movsxd rdx, eax
imul rdx, rdx, 0x4bda12f7
shr rdx, 0x20
sar edx, 4
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x36
sub eax, ecx
mov edx, eax
mov eax, edx
add eax, 0x38
mov ecx, r8d
xor ecx, eax
mov rdx, qword [rbp + 0x200]
mov eax, dword [rbp + 0x1f4]
cdqe
mov byte [rdx + rax], cl
add dword [rbp + 0x1f4], 1
cmp dword [rbp + 0x1f4], 9
jle 0x140008904
nop
lea rax, [rbp + 0x4f]
mov qword [rbp + 0x2e8], rax
mov dword [rbp + 0x1d0], 0
jmp 0x140008998
mov eax, dword [rbp + 0x1d0]
cdqe
mov byte [rbp + rax + 0x4f], 0
add dword [rbp + 0x1d0], 1
cmp dword [rbp + 0x1d0], 9
jle 0x140008984
nop
mov rdx, qword [rbp + 0x2e8]
mov rax, qword [rbp + 0x310]
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
call rax
mov qword [0x1400101b8], rax
mov byte [rbp + 0x43], 0x7d
mov byte [rbp + 0x44], 0x41
mov byte [rbp + 0x45], 0x53
mov byte [rbp + 0x46], 0x4f
mov byte [rbp + 0x47], 0x6c
mov byte [rbp + 0x48], 0x4f
mov byte [rbp + 0x49], 0x51
mov byte [rbp + 0x4a], 0x5c
mov byte [rbp + 0x4b], 0x25
mov byte [rbp + 0x4c], 0x32
mov byte [rbp + 0x4d], 0x31
mov byte [rbp + 0x4e], 0x43
lea rax, [rbp + 0x43]
mov qword [rbp + 0x1e8], rax
mov rax, qword [rbp + 0x1e8]
movzx eax, byte [rax + 0xb]
test al, al
setne al
test al, al
je 0x140008aa1
lea rax, [rbp + 0x43]
lea rdx, [rbp + 0x43]
mov qword [rbp + 0x1e0], rdx
mov qword [rbp + 0x1d8], rax
mov dword [rbp + 0x1d4], 0
jmp 0x140008a97
mov eax, dword [rbp + 0x1d4]
movsxd rdx, eax
mov rax, qword [rbp + 0x1d8]
add rax, rdx
movzx r8d, byte [rax]
mov eax, dword [rbp + 0x1d4]
movsxd rdx, eax
imul rdx, rdx, 0x4bda12f7
shr rdx, 0x20
sar edx, 4
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x36
sub eax, ecx
mov edx, eax
mov eax, edx
add eax, 0x38
mov ecx, r8d
xor ecx, eax
mov rdx, qword [rbp + 0x1e0]
mov eax, dword [rbp + 0x1d4]
cdqe
mov byte [rdx + rax], cl
add dword [rbp + 0x1d4], 1
cmp dword [rbp + 0x1d4], 0xb
jle 0x140008a38
nop
lea rax, [rbp + 0x43]
mov qword [rbp + 0x2e0], rax
mov dword [rbp + 0x1b0], 0
jmp 0x140008acc
mov eax, dword [rbp + 0x1b0]
cdqe
mov byte [rbp + rax + 0x43], 0
add dword [rbp + 0x1b0], 1
cmp dword [rbp + 0x1b0], 0xb
jle 0x140008ab8
nop
mov rdx, qword [rbp + 0x2e0]
mov rax, qword [rbp + 0x310]
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
call rax
mov qword [0x1400101c0], rax
mov byte [rbp + 0x20], 0x6f
mov byte [rbp + 0x21], 0x58
mov byte [rbp + 0x22], 0x53
mov byte [rbp + 0x23], 0x4f
mov byte [rbp + 0x24], 0x7a
mov byte [rbp + 0x25], 0x52
mov byte [rbp + 0x26], 0x4c
mov byte [rbp + 0x27], 0x6c
mov byte [rbp + 0x28], 0x29
mov byte [rbp + 0x29], 0x2f
mov byte [rbp + 0x2a], 0x25
mov byte [rbp + 0x2b], 0x2f
mov byte [rbp + 0x2c], 0x21
mov byte [rbp + 0x2d], 0xa
mov byte [rbp + 0x2e], 0x24
mov byte [rbp + 0x2f], 0x2d
mov byte [rbp + 0x30], 0x2d
mov byte [rbp + 0x31], 0x2a
mov byte [rbp + 0x32], 0x3e
mov byte [rbp + 0x33], 0x4b
lea rax, [rbp + 0x20]
mov qword [rbp + 0x1c8], rax
mov rax, qword [rbp + 0x1c8]
movzx eax, byte [rax + 0x13]
test al, al
setne al
test al, al
je 0x140008bf5
lea rax, [rbp + 0x20]
lea rdx, [rbp + 0x20]
mov qword [rbp + 0x1c0], rdx
mov qword [rbp + 0x1b8], rax
mov dword [rbp + 0x1b4], 0
jmp 0x140008beb
mov eax, dword [rbp + 0x1b4]
movsxd rdx, eax
mov rax, qword [rbp + 0x1b8]
add rax, rdx
movzx r8d, byte [rax]
mov eax, dword [rbp + 0x1b4]
movsxd rdx, eax
imul rdx, rdx, 0x4bda12f7
shr rdx, 0x20
sar edx, 4
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x36
sub eax, ecx
mov edx, eax
mov eax, edx
add eax, 0x38
mov ecx, r8d
xor ecx, eax
mov rdx, qword [rbp + 0x1c0]
mov eax, dword [rbp + 0x1b4]
cdqe
mov byte [rdx + rax], cl
add dword [rbp + 0x1b4], 1
cmp dword [rbp + 0x1b4], 0x13
jle 0x140008b8c
nop
lea rax, [rbp + 0x20]
mov qword [rbp + 0x2d8], rax
mov dword [rbp + 0x190], 0
jmp 0x140008c20
mov eax, dword [rbp + 0x190]
cdqe
mov byte [rbp + rax + 0x20], 0
add dword [rbp + 0x190], 1
cmp dword [rbp + 0x190], 0x13
jle 0x140008c0c
nop
mov rdx, qword [rbp + 0x2d8]
mov rax, qword [rbp + 0x310]
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
call rax
mov qword [0x1400101c8], rax
mov byte [rbp], 0x7f
mov byte [rbp + 1], 0x5c
mov byte [rbp + 2], 0x4e
mov byte [rbp + 3], 0x76
mov byte [rbp + 4], 0x53
mov byte [rbp + 5], 0x59
mov byte [rbp + 6], 0x4b
mov byte [rbp + 7], 0x53
mov byte [rbp + 8], 0x25
mov byte [rbp + 9], 7
mov byte [rbp + 0xa], 0x2b
mov byte [rbp + 0xb], 0x2f
mov byte [rbp + 0xc], 0x21
mov byte [rbp + 0xd], 0xb
mov byte [rbp + 0xe], 0x27
mov byte [rbp + 0xf], 0x2a
mov byte [rbp + 0x10], 0x2d
mov byte [rbp + 0x11], 8
mov byte [rbp + 0x12], 0x4a
mov rax, rbp
mov qword [rbp + 0x1a8], rax
mov rax, qword [rbp + 0x1a8]
movzx eax, byte [rax + 0x12]
test al, al
setne al
test al, al
je 0x140008d42
mov rax, rbp
mov rdx, rbp
mov qword [rbp + 0x1a0], rdx
mov qword [rbp + 0x198], rax
mov dword [rbp + 0x194], 0
jmp 0x140008d38
mov eax, dword [rbp + 0x194]
movsxd rdx, eax
mov rax, qword [rbp + 0x198]
add rax, rdx
movzx r8d, byte [rax]
mov eax, dword [rbp + 0x194]
movsxd rdx, eax
imul rdx, rdx, 0x4bda12f7
shr rdx, 0x20
sar edx, 4
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x36
sub eax, ecx
mov edx, eax
mov eax, edx
add eax, 0x38
mov ecx, r8d
xor ecx, eax
mov rdx, qword [rbp + 0x1a0]
mov eax, dword [rbp + 0x194]
cdqe
mov byte [rdx + rax], cl
add dword [rbp + 0x194], 1
cmp dword [rbp + 0x194], 0x12
jle 0x140008cd9
nop
mov rax, rbp
mov qword [rbp + 0x2d0], rax
mov dword [rbp + 0x170], 0
jmp 0x140008d6c
mov eax, dword [rbp + 0x170]
cdqe
mov byte [rbp + rax], 0
add dword [rbp + 0x170], 1
cmp dword [rbp + 0x170], 0x12
jle 0x140008d58
nop
mov rdx, qword [rbp + 0x2d0]
mov rax, qword [rbp + 0x310]
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
call rax
mov qword [0x1400101d0], rax
mov byte [rbp - 6], 0x6b
mov byte [rbp - 5], 0x55
mov byte [rbp - 4], 0x5f
mov byte [rbp - 3], 0x5e
mov byte [rbp - 2], 0x4c
mov byte [rbp - 1], 0x3d
lea rax, [rbp - 6]
mov qword [rbp + 0x188], rax
mov rax, qword [rbp + 0x188]
movzx eax, byte [rax + 5]
test al, al
setne al
test al, al
je 0x140008e5d
lea rax, [rbp - 6]
lea rdx, [rbp - 6]
mov qword [rbp + 0x180], rdx
mov qword [rbp + 0x178], rax
mov dword [rbp + 0x174], 0
jmp 0x140008e53
mov eax, dword [rbp + 0x174]
movsxd rdx, eax
mov rax, qword [rbp + 0x178]
add rax, rdx
movzx r8d, byte [rax]
mov eax, dword [rbp + 0x174]
movsxd rdx, eax
imul rdx, rdx, 0x4bda12f7
shr rdx, 0x20
sar edx, 4
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x36
sub eax, ecx
mov edx, eax
mov eax, edx
add eax, 0x38
mov ecx, r8d
xor ecx, eax
mov rdx, qword [rbp + 0x180]
mov eax, dword [rbp + 0x174]
cdqe
mov byte [rdx + rax], cl
add dword [rbp + 0x174], 1
cmp dword [rbp + 0x174], 5
jle 0x140008df4
nop
lea rax, [rbp - 6]
mov qword [rbp + 0x2c8], rax
mov dword [rbp + 0x150], 0
jmp 0x140008e88
mov eax, dword [rbp + 0x150]
cdqe
mov byte [rbp + rax - 6], 0
add dword [rbp + 0x150], 1
cmp dword [rbp + 0x150], 5
jle 0x140008e74
nop
mov rdx, qword [rbp + 0x2c8]
mov rax, qword [rbp + 0x310]
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
call rax
mov qword [0x1400101d8], rax
mov byte [rbp - 0x11], 0x6f
mov byte [rbp - 0x10], 0x6a
mov byte [rbp - 0xf], 0x7b
mov byte [rbp - 0xe], 0x68
mov byte [rbp - 0xd], 0x48
mov byte [rbp - 0xc], 0x5c
mov byte [rbp - 0xb], 0x4c
mov byte [rbp - 0xa], 0x4b
mov byte [rbp - 9], 0x35
mov byte [rbp - 8], 0x31
mov byte [rbp - 7], 0x42
lea rax, [rbp - 0x11]
mov qword [rbp + 0x168], rax
mov rax, qword [rbp + 0x168]
movzx eax, byte [rax + 0xa]
test al, al
setne al
test al, al
je 0x140008f8d
lea rax, [rbp - 0x11]
lea rdx, [rbp - 0x11]
mov qword [rbp + 0x160], rdx
mov qword [rbp + 0x158], rax
mov dword [rbp + 0x154], 0
jmp 0x140008f83
mov eax, dword [rbp + 0x154]
movsxd rdx, eax
mov rax, qword [rbp + 0x158]
add rax, rdx
movzx r8d, byte [rax]
mov eax, dword [rbp + 0x154]
movsxd rdx, eax
imul rdx, rdx, 0x4bda12f7
shr rdx, 0x20
sar edx, 4
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x36
sub eax, ecx
mov edx, eax
mov eax, edx
add eax, 0x38
mov ecx, r8d
xor ecx, eax
mov rdx, qword [rbp + 0x160]
mov eax, dword [rbp + 0x154]
cdqe
mov byte [rdx + rax], cl
add dword [rbp + 0x154], 1
cmp dword [rbp + 0x154], 0xa
jle 0x140008f24
nop
lea rax, [rbp - 0x11]
mov qword [rbp + 0x2c0], rax
mov dword [rbp + 0x130], 0
jmp 0x140008fb8
mov eax, dword [rbp + 0x130]
cdqe
mov byte [rbp + rax - 0x11], 0
add dword [rbp + 0x130], 1
cmp dword [rbp + 0x130], 0xa
jle 0x140008fa4
nop
mov rdx, qword [rbp + 0x2c0]
mov rax, qword [rbp + 0x300]
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
call rax
mov qword [0x1400101e0], rax
mov byte [rbp - 0x1d], 0x5f
mov byte [rbp - 0x1c], 0x5c
mov byte [rbp - 0x1b], 0x4e
mov byte [rbp - 0x1a], 0x5a
mov byte [rbp - 0x19], 0x58
mov byte [rbp - 0x18], 0x59
mov byte [rbp - 0x17], 0x4c
mov byte [rbp - 0x16], 0x56
mov byte [rbp - 0x15], 0x2e
mov byte [rbp - 0x14], 0x27
mov byte [rbp - 0x13], 0x2d
mov byte [rbp - 0x12], 0x43
lea rax, [rbp - 0x1d]
mov qword [rbp + 0x148], rax
mov rax, qword [rbp + 0x148]
movzx eax, byte [rax + 0xb]
test al, al
setne al
test al, al
je 0x1400090c1
lea rax, [rbp - 0x1d]
lea rdx, [rbp - 0x1d]
mov qword [rbp + 0x140], rdx
mov qword [rbp + 0x138], rax
mov dword [rbp + 0x134], 0
jmp 0x1400090b7
mov eax, dword [rbp + 0x134]
movsxd rdx, eax
mov rax, qword [rbp + 0x138]
add rax, rdx
movzx r8d, byte [rax]
mov eax, dword [rbp + 0x134]
movsxd rdx, eax
imul rdx, rdx, 0x4bda12f7
shr rdx, 0x20
sar edx, 4
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x36
sub eax, ecx
mov edx, eax
mov eax, edx
add eax, 0x38
mov ecx, r8d
xor ecx, eax
mov rdx, qword [rbp + 0x140]
mov eax, dword [rbp + 0x134]
cdqe
mov byte [rdx + rax], cl
add dword [rbp + 0x134], 1
cmp dword [rbp + 0x134], 0xb
jle 0x140009058
nop
lea rax, [rbp - 0x1d]
mov qword [rbp + 0x2b8], rax
mov dword [rbp + 0x110], 0
jmp 0x1400090ec
mov eax, dword [rbp + 0x110]
cdqe
mov byte [rbp + rax - 0x1d], 0
add dword [rbp + 0x110], 1
cmp dword [rbp + 0x110], 0xb
jle 0x1400090d8
nop
mov rdx, qword [rbp + 0x2b8]
mov rax, qword [rbp + 0x300]
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
call rax
mov qword [0x1400101e8], rax
mov byte [rbp - 0x28], 0x6f
mov byte [rbp - 0x27], 0x6a
mov byte [rbp - 0x26], 0x7b
mov byte [rbp - 0x25], 0x68
mov byte [rbp - 0x24], 0x53
mov byte [rbp - 0x23], 0x5e
mov byte [rbp - 0x22], 0x55
mov byte [rbp - 0x21], 0x5a
mov byte [rbp - 0x20], 0x34
mov byte [rbp - 0x1f], 0
mov byte [rbp - 0x1e], 0x42
lea rax, [rbp - 0x28]
mov qword [rbp + 0x128], rax
mov rax, qword [rbp + 0x128]
movzx eax, byte [rax + 0xa]
test al, al
setne al
test al, al
je 0x1400091f1
lea rax, [rbp - 0x28]
lea rdx, [rbp - 0x28]
mov qword [rbp + 0x120], rdx
mov qword [rbp + 0x118], rax
mov dword [rbp + 0x114], 0
jmp 0x1400091e7
mov eax, dword [rbp + 0x114]
movsxd rdx, eax
mov rax, qword [rbp + 0x118]
add rax, rdx
movzx r8d, byte [rax]
mov eax, dword [rbp + 0x114]
movsxd rdx, eax
imul rdx, rdx, 0x4bda12f7
shr rdx, 0x20
sar edx, 4
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x36
sub eax, ecx
mov edx, eax
mov eax, edx
add eax, 0x38
mov ecx, r8d
xor ecx, eax
mov rdx, qword [rbp + 0x120]
mov eax, dword [rbp + 0x114]
cdqe
mov byte [rdx + rax], cl
add dword [rbp + 0x114], 1
cmp dword [rbp + 0x114], 0xa
jle 0x140009188
nop
lea rax, [rbp - 0x28]
mov qword [rbp + 0x2b0], rax
mov dword [rbp + 0xf0], 0
jmp 0x14000921c
mov eax, dword [rbp + 0xf0]
cdqe
mov byte [rbp + rax - 0x28], 0
add dword [rbp + 0xf0], 1
cmp dword [rbp + 0xf0], 0xa
jle 0x140009208
nop
mov rdx, qword [rbp + 0x2b0]
mov rax, qword [rbp + 0x300]
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
call rax
mov qword [0x1400101f0], rax
mov byte [rbp - 0x35], 0x5e
mov byte [rbp - 0x34], 0x4b
mov byte [rbp - 0x33], 0x5f
mov byte [rbp - 0x32], 0x5e
mov byte [rbp - 0x31], 0x5d
mov byte [rbp - 0x30], 0x59
mov byte [rbp - 0x2f], 0x5a
mov byte [rbp - 0x2e], 0x4d
mov byte [rbp - 0x2d], 0x29
mov byte [rbp - 0x2c], 0x2f
mov byte [rbp - 0x2b], 0x24
mov byte [rbp - 0x2a], 0x2c
mov byte [rbp - 0x29], 0x44
lea rax, [rbp - 0x35]
mov qword [rbp + 0x108], rax
mov rax, qword [rbp + 0x108]
movzx eax, byte [rax + 0xc]
test al, al
setne al
test al, al
je 0x140009329
lea rax, [rbp - 0x35]
lea rdx, [rbp - 0x35]
mov qword [rbp + 0x100], rdx
mov qword [rbp + 0xf8], rax
mov dword [rbp + 0xf4], 0
jmp 0x14000931f
mov eax, dword [rbp + 0xf4]
movsxd rdx, eax
mov rax, qword [rbp + 0xf8]
add rax, rdx
movzx r8d, byte [rax]
mov eax, dword [rbp + 0xf4]
movsxd rdx, eax
imul rdx, rdx, 0x4bda12f7
shr rdx, 0x20
sar edx, 4
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x36
sub eax, ecx
mov edx, eax
mov eax, edx
add eax, 0x38
mov ecx, r8d
xor ecx, eax
mov rdx, qword [rbp + 0x100]
mov eax, dword [rbp + 0xf4]
cdqe
mov byte [rdx + rax], cl
add dword [rbp + 0xf4], 1
cmp dword [rbp + 0xf4], 0xc
jle 0x1400092c0
nop
lea rax, [rbp - 0x35]
mov qword [rbp + 0x2a8], rax
mov dword [rbp + 0xd0], 0
jmp 0x140009354
mov eax, dword [rbp + 0xd0]
cdqe
mov byte [rbp + rax - 0x35], 0
add dword [rbp + 0xd0], 1
cmp dword [rbp + 0xd0], 0xc
jle 0x140009340
nop
mov rdx, qword [rbp + 0x2a8]
mov rax, qword [rbp + 0x300]
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
call rax
mov qword [0x1400101f8], rax
mov byte [rbp - 0x41], 0x5b
mov byte [rbp - 0x40], 0x55
mov byte [rbp - 0x3f], 0x55
mov byte [rbp - 0x3e], 0x48
mov byte [rbp - 0x3d], 0x59
mov byte [rbp - 0x3c], 0x4e
mov byte [rbp - 0x3b], 0x51
mov byte [rbp - 0x3a], 0x5c
mov byte [rbp - 0x39], 0x2b
mov byte [rbp - 0x38], 0x24
mov byte [rbp - 0x37], 0x36
mov byte [rbp - 0x36], 0x43
lea rax, [rbp - 0x41]
mov qword [rbp + 0xe8], rax
mov rax, qword [rbp + 0xe8]
movzx eax, byte [rax + 0xb]
test al, al
setne al
test al, al
je 0x14000945d
lea rax, [rbp - 0x41]
lea rdx, [rbp - 0x41]
mov qword [rbp + 0xe0], rdx
mov qword [rbp + 0xd8], rax
mov dword [rbp + 0xd4], 0
jmp 0x140009453
mov eax, dword [rbp + 0xd4]
movsxd rdx, eax
mov rax, qword [rbp + 0xd8]
add rax, rdx
movzx r8d, byte [rax]
mov eax, dword [rbp + 0xd4]
movsxd rdx, eax
imul rdx, rdx, 0x4bda12f7
shr rdx, 0x20
sar edx, 4
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x36
sub eax, ecx
mov edx, eax
mov eax, edx
add eax, 0x38
mov ecx, r8d
xor ecx, eax
mov rdx, qword [rbp + 0xe0]
mov eax, dword [rbp + 0xd4]
cdqe
mov byte [rdx + rax], cl
add dword [rbp + 0xd4], 1
cmp dword [rbp + 0xd4], 0xb
jle 0x1400093f4
nop
lea rax, [rbp - 0x41]
mov qword [rbp + 0x2a0], rax
mov dword [rbp + 0xb0], 0
jmp 0x140009488
mov eax, dword [rbp + 0xb0]
cdqe
mov byte [rbp + rax - 0x41], 0
add dword [rbp + 0xb0], 1
cmp dword [rbp + 0xb0], 0xb
jle 0x140009474
nop
mov rdx, qword [rbp + 0x2a0]
mov rax, qword [rbp + 0x300]
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
call rax
mov qword [0x140010200], rax
mov byte [rbp - 0x4c], 0x6f
mov byte [rbp - 0x4b], 0x6a
mov byte [rbp - 0x4a], 0x7b
mov byte [rbp - 0x49], 0x78
mov byte [rbp - 0x48], 0x50
mov byte [rbp - 0x47], 0x58
mov byte [rbp - 0x46], 0x5f
mov byte [rbp - 0x45], 0x51
mov byte [rbp - 0x44], 0x35
mov byte [rbp - 0x43], 0x31
mov byte [rbp - 0x42], 0x42
lea rax, [rbp - 0x4c]
mov qword [rbp + 0xc8], rax
mov rax, qword [rbp + 0xc8]
movzx eax, byte [rax + 0xa]
test al, al
setne al
test al, al
je 0x14000958d
lea rax, [rbp - 0x4c]
lea rdx, [rbp - 0x4c]
mov qword [rbp + 0xc0], rdx
mov qword [rbp + 0xb8], rax
mov dword [rbp + 0xb4], 0
jmp 0x140009583
mov eax, dword [rbp + 0xb4]
movsxd rdx, eax
mov rax, qword [rbp + 0xb8]
add rax, rdx
movzx r8d, byte [rax]
mov eax, dword [rbp + 0xb4]
movsxd rdx, eax
imul rdx, rdx, 0x4bda12f7
shr rdx, 0x20
sar edx, 4
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x36
sub eax, ecx
mov edx, eax
mov eax, edx
add eax, 0x38
mov ecx, r8d
xor ecx, eax
mov rdx, qword [rbp + 0xc0]
mov eax, dword [rbp + 0xb4]
cdqe
mov byte [rdx + rax], cl
add dword [rbp + 0xb4], 1
cmp dword [rbp + 0xb4], 0xa
jle 0x140009524
nop
lea rax, [rbp - 0x4c]
mov qword [rbp + 0x298], rax
mov dword [rbp + 0x90], 0
jmp 0x1400095b8
mov eax, dword [rbp + 0x90]
cdqe
mov byte [rbp + rax - 0x4c], 0
add dword [rbp + 0x90], 1
cmp dword [rbp + 0x90], 0xa
jle 0x1400095a4
nop
mov rdx, qword [rbp + 0x298]
mov rax, qword [rbp + 0x300]
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
call rax
mov qword [0x140010208], rax
mov byte [rbp - 0x54], 0x5b
mov byte [rbp - 0x53], 0x56
mov byte [rbp - 0x52], 0x54
mov byte [rbp - 0x51], 0x55
mov byte [rbp - 0x50], 0x59
mov byte [rbp - 0x4f], 0x5e
mov byte [rbp - 0x4e], 0x4a
mov byte [rbp - 0x4d], 0x3f
lea rax, [rbp - 0x54]
mov qword [rbp + 0xa8], rax
mov rax, qword [rbp + 0xa8]
movzx eax, byte [rax + 7]
test al, al
setne al
test al, al
je 0x1400096b1
lea rax, [rbp - 0x54]
lea rdx, [rbp - 0x54]
mov qword [rbp + 0xa0], rdx
mov qword [rbp + 0x98], rax
mov dword [rbp + 0x94], 0
jmp 0x1400096a7
mov eax, dword [rbp + 0x94]
movsxd rdx, eax
mov rax, qword [rbp + 0x98]
add rax, rdx
movzx r8d, byte [rax]
mov eax, dword [rbp + 0x94]
movsxd rdx, eax
imul rdx, rdx, 0x4bda12f7
shr rdx, 0x20
sar edx, 4
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x36
sub eax, ecx
mov edx, eax
mov eax, edx
add eax, 0x38
mov ecx, r8d
xor ecx, eax
mov rdx, qword [rbp + 0xa0]
mov eax, dword [rbp + 0x94]
cdqe
mov byte [rdx + rax], cl
add dword [rbp + 0x94], 1
cmp dword [rbp + 0x94], 7
jle 0x140009648
nop
lea rax, [rbp - 0x54]
mov qword [rbp + 0x290], rax
mov dword [rbp + 0x8c], 0
jmp 0x1400096dc
mov eax, dword [rbp + 0x8c]
cdqe
mov byte [rbp + rax - 0x54], 0
add dword [rbp + 0x8c], 1
cmp dword [rbp + 0x8c], 7
jle 0x1400096c8
nop
mov rdx, qword [rbp + 0x290]
mov rax, qword [rbp + 0x300]
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
call rax
mov qword [0x140010210], rax
call fcn.1400081f0
nop
add rsp, 0x3a0
pop rbp
ret