Function at 0x140033ca0
Capabilities:
Access peb ldr_data
Contain obfuscated stackstrings
Create thread
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x398]
sub rsp, 0x470
movaps xmmword [rax - 0x38], xmm6
mov rax, qword [0x140105ec0]
xor rax, rsp
mov qword [rbp + 0x350], rax
mov r12, rcx
xor r13d, r13d
mov dword [rsp + 0x58], r13d
mov qword [rsp + 0x28], r13
mov dword [rsp + 0x20], r13d
xor r9d, r9d
lea r8, [0x14003c630]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
lea rcx, [rbp + 0x198]
call fcn.140032a60
nop
lea rdx, [rbp + 0x198]
cmp qword [rbp + 0x1b0], 0xf
cmova rdx, qword [rbp + 0x198]
mov r8, qword [rbp + 0x1a8]
lea rcx, [section..data]
call fcn.14001af30
mov qword [rsp + 0x28], r13
mov dword [rsp + 0x20], r13d
xor r9d, r9d
lea r8, [0x140038fe0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
cmp qword [r12 + 0x30], 0xa
je 0x140033e16
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140033df6
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140033df6
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [rbx + r9*4]
mov ecx, dword [rcx + r10]
add rcx, r10
mov r8d, 0x5c9fced1
movzx edx, byte [rcx]
inc rcx
test dl, dl
je 0x140033df1
nop
movsx edx, dl
xor edx, r8d
imul r8d, edx, 0x1000193
movzx edx, byte [rcx]
lea rcx, [rcx + 1]
test dl, dl
jne 0x140033dd0
cmp r8d, 0x81323971
je 0x140033dfb
test r9d, r9d
jne 0x140033db0
mov rax, qword [rax]
jmp 0x140033d80
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r10
xor ecx, ecx
call rdx
lea rcx, [rbp + 0x158]
call fcn.14002c0b0
nop
call fcn.140040510
mov r15, rax
mov dword [rsp + 0x40], 0x7d657e36
mov dword [rsp + 0x44], 0x737f6771
mov word [rsp + 0x48], 0x25
mov byte [rsp + 0x4a], 1
mov rdx, r12
cmp qword [r12 + 0x18], 0xf
jbe 0x140033e56
mov rdx, qword [r12]
xor r8d, r8d
mov rcx, r15
call fcn.14003ef10
mov rbx, rax
mov dword [rsp + 0x60], 0x7e737f36
mov dword [rsp + 0x64], 0x1002871
mov dword [rbp + 0xc8], 0x60737936
mov dword [rbp + 0xcc], 0x100287c
mov dword [rbp - 0x80], 0x61776736
mov word [rbp - 0x7c], 0x29
mov byte [rbp - 0x7a], 1
mov dword [rbp + 0xb0], 0x76626864
mov dword [rbp + 0xb4], 0x7e787c29
mov word [rbp + 0xb8], WSAStartup
mov byte [rbp + 0xba], 1
lea r8, [rbp - 0x80]
lea rdx, [rbp + 0xb0]
lea rcx, [rbp - 8]
call fcn.14001ebe0
nop
lea rdx, [r12 + 0x40]
mov r8, qword [rdx + 0x10]
cmp qword [rdx + 0x18], 0xf
jbe 0x140033ee5
mov rdx, qword [rdx]
mov rcx, rax
call fcn.14001ad80
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0xd8], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0xe8], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea r8, [rbp + 0xc8]
lea rdx, [rbp + 0xd8]
lea rcx, [rbp + 0x178]
call fcn.14001e8b0
nop
lea rdx, [rbp + 0x158]
cmp qword [rbp + 0x170], 0xf
cmova rdx, qword [rbp + 0x158]
mov r8, qword [rbp + 0x168]
mov rcx, rax
call fcn.14001ad80
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x28], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x18], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea r8, [rsp + 0x60]
lea rdx, [rbp - 0x28]
lea rcx, [rbp + 0x38]
call fcn.14001e8b0
nop
mov r14, 0xffffffffffffffff
mov r8, r14
nop dword [rax]
inc r8
cmp byte [rbx + r8], 0
jne 0x140033f90
mov rdx, rbx
mov rcx, rax
call fcn.14001ad80
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x48], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x38], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea r8, [rsp + 0x40]
lea rdx, [rbp - 0x48]
lea rcx, [rbp + 0x18]
call fcn.14001ee80
nop
lea rdx, [r12 + 0x20]
mov r8, qword [rdx + 0x10]
cmp qword [rdx + 0x18], 0xf
jbe 0x140033fe9
mov rdx, qword [rdx]
mov rcx, rax
call fcn.14001ad80
xorps xmm0, xmm0
movups xmmword [rbp + 0x138], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x148], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x138], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x148], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov edi, 0x3c
mov dword [rsp + 0x58], edi
mov rdx, qword [rbp + 0x30]
cmp rdx, 0xf
jbe 0x140034071
inc rdx
mov rcx, qword [rbp + 0x18]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003406c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14003406c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400c7410
movdqa xmm6, xmmword [0x1400f36b0]
movdqu xmmword [rbp + 0x28], xmm6
mov byte [rbp + 0x18], 0
mov rdx, qword [rbp - 0x30]
cmp rdx, 0xf
jbe 0x1400340c1
inc rdx
mov rcx, qword [rbp - 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400340bb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400340bb
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400c7410
nop
mov rdx, qword [rbp + 0x50]
cmp rdx, 0xf
jbe 0x1400340ff
inc rdx
mov rcx, qword [rbp + 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400340fa
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400340fa
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400c7410
movdqu xmmword [rbp + 0x48], xmm6
mov byte [rbp + 0x38], 0
mov rdx, qword [rbp - 0x10]
cmp rdx, 0xf
jbe 0x140034147
inc rdx
mov rcx, qword [rbp - 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140034141
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140034141
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400c7410
nop
mov rdx, qword [rbp + 0x190]
cmp rdx, 0xf
jbe 0x14003418b
inc rdx
mov rcx, qword [rbp + 0x178]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140034186
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140034186
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400c7410
movdqu xmmword [rbp + 0x188], xmm6
mov byte [rbp + 0x178], 0
mov rdx, qword [rbp + 0xf0]
cmp rdx, 0xf
jbe 0x1400341df
inc rdx
mov rcx, qword [rbp + 0xd8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400341d9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400341d9
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400c7410
nop
mov rdx, qword [rbp + 0x10]
cmp rdx, 0xf
jbe 0x14003421d
inc rdx
mov rcx, qword [rbp - 8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140034218
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140034218
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400c7410
movdqu xmmword [rbp + 8], xmm6
mov byte [rbp - 8], 0
lea rbx, [r12 + 0x80]
mov rax, qword [rbx + 0x10]
cmp qword [rbx + 0x18], 0xf
jbe 0x14003423c
mov rbx, qword [rbx]
cmp rax, 5
jb 0x14003435a
lea rsi, [rax + rbx]
lea r8, [rsi - 4]
sub r8, rbx
mov edx, 0x68
mov rcx, rbx
call sub.VCRUNTIME140.dll_memchr
test rax, rax
je 0x14003435a
cmp dword [rax], 0x70747468
jne 0x140034275
cmp byte [rax + 4], 0x73
je 0x140034296
inc rax
lea r8, [rsi - 4]
sub r8, rax
mov edx, 0x68
mov rcx, rax
call sub.VCRUNTIME140.dll_memchr
test rax, rax
jne 0x140034267
jmp 0x14003435a
sub rax, rbx
cmp rax, 0xffffffffffffffff
je 0x14003435a
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop dword [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140034336
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140034336
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rbx]
add rdx, r10
mov r8d, 0xba47c205
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140034331
nop dword [rax]
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x140034310
cmp r8d, 0x7d6d6ec5
je 0x14003433b
test r9d, r9d
jne 0x1400342f0
mov rax, qword [rax]
jmp 0x1400342c0
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r10
xor ecx, ecx
call rdx
mov edi, dword [rsp + 0x58]
lea rcx, [r12 + 0x80]
mov r8, qword [rcx + 0x10]
cmp qword [rcx + 0x18], 0xf
jbe 0x140034370
mov rcx, qword [rcx]
test r8, r8
jne 0x140034394
lea rdx, [0x1400ebef9]
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x140034394
cmp qword [r12 + 0x90], 0
je 0x140034a74
lea rdx, [r12 + 0x80]
xor r8d, r8d
lea rcx, [rbp - 0x28]
call fcn.14001ba50
nop
lea rcx, [rbp - 0x28]
cmp qword [rbp - 0x10], 7
cmova rcx, qword [rbp - 0x28]
mov r9d, 0xffffffff
mov r8d, 3
lea rdx, [rbp + 0xf8]
call fcn.1400c6d68
mov r8d, eax
test eax, eax
jne 0x140034429
mov edx, dword [rbp + 0x108]
test dl, 1
mov ecx, 0x1ff
mov eax, 0x16d
cmovne ecx, eax
mov dword [rbp + 0xa4], ecx
mov ecx, edx
shr ecx, 0xa
test cl, 1
je 0x14003441e
mov eax, dword [rbp + 0x10c]
cmp eax, 0xa000000c
jne 0x140034410
mov edx, 4
jmp 0x14003444f
cmp eax, 0xa0000003
jne 0x14003441e
mov edx, 0xa
jmp 0x14003444f
shr edx, 4
and edx, 1
or edx, 2
jmp 0x14003444f
mov dword [rbp + 0xa4], 0xffff
sub eax, 2
je 0x14003444a
sub eax, 1
je 0x14003444a
sub eax, 0x32
je 0x14003444a
cmp eax, 0x46
mov edx, r13d
jne 0x14003444f
mov edx, 1
mov dword [rbp + 0xa0], r8d
lea rax, [0x140105f48]
mov qword [rbp + 0xa8], rax
movaps xmm0, xmmword [rbp + 0xa0]
movdqa xmmword [rbp + 0xa0], xmm0
test edx, edx
je 0x140034529
cmp edx, 1
sete bl
lea rcx, [rbp - 0x28]
call fcn.140006360
test bl, bl
je 0x140034554
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x140034524
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x140034524
mov r11d, dword [rbx + 0x20]
nop word [rax + rax]
dec r9d
lea rdx, [r10 + r9*4]
mov r8d, dword [rdx + r11]
add r8, r10
mov edx, 0xbf56d46e
movzx ecx, byte [r8]
inc r8
test cl, cl
je 0x14003451f
nop
movsx ecx, cl
xor ecx, edx
imul edx, ecx, 0x1000193
movzx ecx, byte [r8]
lea r8, [r8 + 1]
test cl, cl
jne 0x140034500
cmp edx, 0xf7a24036
je 0x140034539
test r9d, r9d
jne 0x1400344e0
mov rax, qword [rax]
jmp 0x1400344b0
mov bl, 1
test r8d, r8d
jne 0x140035914
jmp 0x140034481
mov edx, dword [rbx + 0x1c]
add rdx, r10
mov ecx, dword [rbx + 0x24]
add rcx, r10
movzx ecx, word [rcx + r9*2]
mov eax, dword [rdx + rcx*4]
add rax, r10
xor ecx, ecx
call rax
xor edx, edx
mov r8d, pe_nt_image_headers64
lea rcx, [rbp + 0x1c0]
call sub.VCRUNTIME140.dll_memset
lea rbx, [r12 + 0x80]
cmp qword [rbx + 0x18], 0xf
jbe 0x14003457a
mov rbx, qword [rbx]
lea rax, [0x1400cd7d8]
mov qword [rbp + 0x1c0], rax
lea rcx, [rbp + 0x270]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::constructor_void____ptr64]
nop
mov dword [rsp + 0x58], 0xbc
xor r9d, r9d
xor r8d, r8d
lea rdx, [rbp + 0x1d0]
lea rcx, [rbp + 0x1c0]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_istream_char__struct_std::char_traits_char__::constructor_class_std::basic_streambuf_char__struct_std::char_traits_char______ptr64__bool____ptr64]
nop
mov rax, qword [rbp + 0x1c0]
movsxd rcx, dword [rax + 4]
lea rdi, vtable.std::basic_ifstream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx + 0x1c0], rdi
mov rax, qword [rbp + 0x1c0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xb0]
mov dword [rbp + rcx + 0x1bc], edx
lea rcx, [rbp + 0x1d0]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::constructor_void____ptr64]
lea rax, vtable.std::basic_filebuf_char__struct_std::char_traits_char__.0
mov qword [rbp + 0x1d0], rax
mov byte [rbp + 0x24c], 0
mov byte [rbp + 0x241], 0
lea rcx, [rbp + 0x1d0]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::_Init_void____ptr64]
mov qword [rbp + 0x250], r13
mov rax, qword [0x140107298]
mov qword [rbp + 0x244], rax
mov qword [rbp + 0x238], r13
mov r9d, 0x40
mov r8d, 1
mov rdx, rbx
lea rcx, [rbp + 0x1d0]
call fcn.14001a9c0
test rax, rax
jne 0x140034681
mov rax, qword [rbp + 0x1c0]
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0x1c0]
add rcx, rax
xor r8d, r8d
mov edx, 2
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool____ptr64]
nop
mov rax, qword [rbp + 0x1c0]
movsxd rcx, dword [rax + 4]
mov qword [rbp + rcx + 0x1c0], rdi
mov rax, qword [rbp + 0x1c0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xb0]
mov dword [rbp + rcx + 0x1bc], edx
xorps xmm0, xmm0
movups xmmword [rbp + 0xd8], xmm0
mov qword [rbp + 0xe8], r13
mov qword [rbp + reloc.WS2_32.dll_ntohs0], 0xf
mov byte [rbp + 0xd8], 0
movups xmmword [rbp + 0xf8], xmm0
movdqu xmmword [rbp + 0x108], xmm6
mov byte [rbp + 0xf8], 0
mov rax, qword [rbp + 0x1c0]
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0x1c0]
add rcx, rax
mov dl, 0xa
call qword [sym.imp.MSVCP140.dll_public:_char___cdecl_std::basic_ios_char__struct_std::char_traits_char__::widen_char_const___ptr64]
movzx r8d, al
lea rdx, [rbp + 0xd8]
lea rcx, [rbp + 0x1c0]
call fcn.140022850
movdqa xmm0, xmmword [0x1400cee80]
movdqu xmmword [rbp + 0x58], xmm0
movdqa xmm1, xmmword [0x1400cee00]
movdqu xmmword [rbp + 0x68], xmm1
movdqa xmm0, xmmword [0x1400cee10]
movdqu xmmword [rbp + 0x78], xmm0
mov word [rbp + 0x88], 0x100
lea r8, [r12 + 0x80]
mov rcx, qword [r8 + 0x10]
movabs rdi, 0x7fffffffffffffff
mov rax, rdi
sub rax, rcx
cmp rax, 0x14
jb 0x140035932
mov rax, r8
cmp qword [r8 + 0x18], 0xf
jbe 0x14003477c
mov rax, qword [r8]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], reloc.WS2_32.dll_sendto
lea r9, str.certutil__hashfile__
movzx edx, byte [rbp + 0x98]
lea rcx, [rbp - 0x78]
call fcn.14001d0b0
nop
lea r8, [rbp + 0x58]
lea rdx, [rbp - 0x78]
lea rcx, [rbp - 0x48]
call fcn.14001f0f0
nop
cmp qword [rax + 0x18], 0xf
jbe 0x1400347c3
mov rax, qword [rax]
xorps xmm0, xmm0
movups xmmword [rbp - 0x28], xmm0
movdqu xmmword [rbp - 0x18], xmm6
mov byte [rbp - 0x28], 0
mov dword [rsp + 0x58], 0x3bc
movups xmmword [rbp + 0xa0], xmm0
lea rdx, [0x1400cd7e0]
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__popen]
mov rbx, rax
mov rax, qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__pclose]
mov qword [rbp + 0xa0], rax
mov qword [rbp + 0xa8], rbx
test rbx, rbx
je 0x1400358ce
mov r8, rbx
mov edx, 0x80
lea rcx, [rbp + 0x2d0]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fgets]
test rax, rax
je 0x140034874
nop dword [rax]
lea rax, [rbp + 0x2d0]
mov r8, r14
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140034840
lea rdx, [rbp + 0x2d0]
lea rcx, [rbp - 0x28]
call fcn.14001af30
mov r8, rbx
mov edx, 0x80
lea rcx, [rbp + 0x2d0]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fgets]
test rax, rax
jne 0x140034830
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__pclose]
nop
lea rdx, [rbp - 0x28]
lea rcx, [rbp + 0xf8]
call fcn.14001a380
nop
mov r8, qword [rbp - 0x10]
cmp r8, 0xf
jbe 0x1400348a6
mov rdx, qword [rbp - 0x28]
lea rcx, [rbp - 0x28]
call fcn.14001b090
movdqu xmmword [rbp - 0x18], xmm6
mov byte [rbp - 0x28], 0
mov r8, qword [rbp - 0x30]
cmp r8, 0xf
jbe 0x1400348c6
mov rdx, qword [rbp - 0x48]
lea rcx, [rbp - 0x48]
call fcn.14001b090
movdqu xmmword [rbp - 0x38], xmm6
mov byte [rbp - 0x48], 0
mov r8, qword [rbp - 0x60]
cmp r8, 0xf
jbe 0x1400348e6
mov rdx, qword [rbp - 0x78]
lea rcx, [rbp - 0x78]
call fcn.14001b090
mov dword [rbp + 0xa4], 0x3d6e65
mov dword [rbp + 0xa0], 0x6b6f7426
mov byte [rbp + 0xa8], 0
lea rax, [rbp + 0xa0]
mov rcx, r14
nop dword [rax + rax]
inc rcx
cmp byte [rax + rcx], 0
jne 0x140034910
mov rax, rdi
mov rdx, qword [rbp + 0xe8]
sub rax, rdx
cmp rax, rcx
jb 0x14003592c
lea rax, [rbp + 0xd8]
cmp qword [rbp + 0xf0], 0xf
cmova rax, qword [rbp + 0xd8]
mov qword [rsp + 0x30], rdx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea r9, [rbp + 0xa0]
lea r8, [rbp + 0xd8]
movzx edx, byte [rbp + 0x98]
lea rcx, [rbp - 0x48]
call fcn.14001d0b0
nop
lea rdx, [rbp - 0x48]
cmp qword [rbp - 0x30], 0xf
cmova rdx, qword [rbp - 0x48]
mov r8, qword [rbp - 0x38]
lea rcx, [rbp + 0x138]
call fcn.14001ad80
nop
lea rcx, [rbp - 0x48]
call fcn.14001a320
lea r8, [r12 + 0x80]
mov dword [rbp + 0xa4], 0x3d6873
mov dword [rbp + 0xa0], 0x61687426
mov byte [rbp + 0xa8], 0
lea rcx, [rbp + 0xa0]
mov rax, r14
nop dword [rax]
inc rax
cmp byte [rcx + rax], 0
jne 0x1400349d0
mov rdx, qword [r8 + 0x10]
sub rdi, rdx
cmp rdi, rax
jb 0x14003592c
mov rcx, r8
cmp qword [r8 + 0x18], 0xf
jbe 0x1400349f6
mov rcx, qword [r8]
mov qword [rsp + 0x30], rdx
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0xa0]
movzx edx, byte [rbp + 0x98]
lea rcx, [rbp - 0x48]
call fcn.14001d0b0
mov edi, 0x5fc
mov dword [rsp + 0x58], edi
lea rdx, [rbp - 0x48]
cmp qword [rbp - 0x30], 0xf
cmova rdx, qword [rbp - 0x48]
mov r8, qword [rbp - 0x38]
lea rcx, [rbp + 0x138]
call fcn.14001ad80
nop
lea rcx, [rbp - 0x48]
call fcn.14001a320
nop
lea rcx, [rbp + 0xf8]
call fcn.14001a320
nop
lea rcx, [rbp + 0xd8]
call fcn.14001a320
nop
lea rcx, [rbp + 0x1c0]
call fcn.1400279d0
mov rcx, r15
call fcn.1400404e0
lea rax, [rbp + 0xf8]
mov qword [rsp + 0x70], rax
lea rdx, [r12 + 0x60]
lea rcx, [rbp + 0xf8]
call fcn.14001a560
mov rbx, rax
lea rdx, [rbp + 0x138]
lea rcx, [rbp - 0x78]
call fcn.14001a560
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rbp + 0x118]
call fcn.14003bf30
nop
mov dword [rsp + 0x4c], 0x64696c
mov dword [rsp + 0x40], 0x4179654b
mov dword [rsp + 0x44], 0x5f687475
mov dword [rsp + 0x48], 0x61766e49
mov byte [rsp + 0x50], 0
lea rcx, [rsp + 0x40]
mov rax, r14
nop dword [rax]
inc rax
cmp byte [rcx + rax], 0
jne 0x140034af0
lea rcx, [rbp + 0x118]
mov rbx, qword [rbp + 0x118]
mov rsi, qword [rbp + 0x130]
cmp rsi, 0xf
cmova rcx, rbx
mov r8, qword [rbp + 0x128]
cmp r8, rax
jne 0x140034bf6
lea rdx, [rsp + 0x40]
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x140034bf6
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x140034bc4
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x140034bc4
mov r11d, dword [rbx + 0x20]
nop word [rax + rax]
dec r9d
lea rdx, [r10 + r9*4]
mov r8d, dword [rdx + r11]
add r8, r10
mov edx, 0xf3e2f0cb
movzx ecx, byte [r8]
inc r8
test cl, cl
je 0x140034bbf
nop
movsx ecx, cl
xor ecx, edx
imul edx, ecx, 0x1000193
movzx ecx, byte [r8]
lea r8, [r8 + 1]
test cl, cl
jne 0x140034ba0
cmp edx, 0xebae719b
je 0x140034bc9
test r9d, r9d
jne 0x140034b80
mov rax, qword [rax]
jmp 0x140034b50
mov edx, dword [rbx + 0x1c]
add rdx, r10
mov ecx, dword [rbx + 0x24]
add rcx, r10
movzx ecx, word [rcx + r9*2]
mov eax, dword [rdx + rcx*4]
add rax, r10
xor ecx, ecx
call rax
mov rsi, qword [rbp + 0x130]
mov rbx, qword [rbp + 0x118]
mov edi, dword [rsp + 0x58]
lea rax, [rbp - 0x48]
mov qword [rbp + 0xa0], rax
lea rdx, [rbp + 0x118]
cmp rsi, 0xf
cmova rdx, rbx
xorps xmm0, xmm0
movups xmmword [rbp - 0x48], xmm0
mov qword [rbp - 0x38], r13
mov qword [rbp - 0x30], r13
nop
inc r14
cmp byte [rdx + r14], 0
jne 0x140034c20
mov r8, r14
lea rcx, [rbp - 0x48]
call fcn.14001c6d0
nop
lea rax, [rbp - 8]
mov qword [rsp + 0x70], rax
lea rdx, [0x140105040]
lea rcx, [rbp - 8]
call fcn.14001a560
mov rbx, rax
lea rdx, [0x140105020]
lea rcx, [rbp + 0x178]
call fcn.14001a560
nop
lea r8, [rbp - 0x48]
mov rdx, rbx
mov rcx, rax
call fcn.140027e80
xor eax, 0xa5a5
mov edx, eax
shr eax, 8
movzx r8d, al
movzx eax, dl
movabs r14, 0xcbf29ce484222325
xor rax, r14
movabs rsi, 0x100000001b3
imul rax, rsi
xor r8, rax
imul r8, rsi
mov eax, edx
shr eax, 0x10
movzx ecx, al
xor r8, rcx
imul r8, rsi
shr rdx, 0x18
xor r8, rdx
imul r8, rsi
cmp r8w, 0xdf7f
jne 0x14003569d
mov qword [rbp + 0x90], r13
mov byte [rsp + 0x20], 0
mov r9b, 1
lea r8, [rbp + 0x58]
lea rdx, [rbp + 0x118]
lea rcx, [rbp + 0xb0]
call fcn.140023c90
nop
lea rdx, [r12 + 0x20]
lea rcx, [rsp + 0x40]
call fcn.14001def0
nop
mov dword [rbp + 0xa4], 0x646972
mov dword [rbp + 0xa0], 0x656e776f
mov byte [rbp + 0xa8], 0
lea r9, [rbp + 0x98]
lea r8, [rbp + 0xa7]
lea rdx, [rbp + 0xa0]
lea rcx, [rbp + 0xf8]
call fcn.14001df80
or edi, 0x1800
mov dword [rsp + 0x58], edi
movzx ecx, byte [rbp + 0xb0]
test cl, cl
jne 0x140034d73
mov byte [rbp + 0xb0], 1
call fcn.140022110
mov qword [rbp + 0xb8], rax
movzx ecx, byte [rbp + 0xb0]
jmp 0x140034d7a
mov rax, qword [rbp + 0xb8]
cmp cl, 1
jne 0x140034d90
lea rdx, [rbp + 0xf8]
mov rcx, rax
call fcn.140027740
jmp 0x140034d97
mov rax, qword [rbp + 0xa0]
lea rdx, [rsp + 0x40]
mov rcx, rax
call fcn.140027370
movzx ebx, al
lea rcx, [rbp + 0xf8]
call fcn.14001a320
nop
movzx edx, byte [rsp + 0x40]
lea rcx, [rsp + 0x48]
call fcn.14002f330
test bl, bl
jne 0x140034e7b
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x140034e54
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x140034e54
mov r11d, dword [rbx + 0x20]
nop word [rax + rax]
dec r9d
lea rdx, [r11 + r9*4]
mov r8d, dword [rdx + r10]
add r8, r10
mov edx, 0xb15ff9a
movzx ecx, byte [r8]
inc r8
test cl, cl
je 0x140034e4f
nop
movsx ecx, cl
xor ecx, edx
imul edx, ecx, 0x1000193
movzx ecx, byte [r8]
lea r8, [r8 + 1]
test cl, cl
jne 0x140034e30
cmp edx, 0x75d43d12
je 0x140034e59
test r9d, r9d
jne 0x140034e10
mov rax, qword [rax]
jmp 0x140034de0
mov edx, dword [rbx + 0x1c]
add rdx, r10
mov ecx, dword [rbx + 0x24]
add rcx, r10
movzx ecx, word [rcx + r9*2]
mov eax, dword [rdx + rcx*4]
add rax, r10
mov ecx, 8
call rax
mov edi, dword [rsp + 0x58]
mov dword [rsp + 0x74], 0x656761
mov dword [rsp + 0x70], 0x7373656d
mov byte [rsp + 0x78], 0
lea r9, [rbp + 0x98]
lea r8, [rsp + 0x77]
lea rdx, [rsp + 0x70]
lea rcx, [rbp + 0xf8]
call fcn.14001df80
or edi, 0x6000
movzx ecx, byte [rbp + 0xb0]
test cl, cl
jne 0x140034eda
mov byte [rbp + 0xb0], 1
call fcn.140022110
mov qword [rbp + 0xb8], rax
movzx ecx, byte [rbp + 0xb0]
jmp 0x140034ee1
mov rax, qword [rbp + 0xb8]
cmp cl, 1
jne 0x140034ef7
lea rdx, [rbp + 0xf8]
mov rcx, rax
call fcn.140027740
jmp 0x140034efe
mov rax, qword [rbp + 0xa0]
lea rdx, [rbp + 0x178]
mov rcx, rax
call fcn.14001e760
nop
lea rcx, [rbp + 0xf8]
call fcn.14001a320
lea rdx, [rbp + 0xb0]
lea rcx, [rsp + 0x40]
call fcn.140026280
mov rdx, rax
mov rcx, r12
call fcn.140036390
mov word [rsp + 0x5b], 0x65
mov word [rsp + 0x58], 0x6f63
mov byte [rsp + 0x5a], 0x64
mov byte [rsp + 0x5d], 0
lea r9, [rbp + 0x98]
lea r8, [rsp + 0x5c]
lea rdx, [rsp + 0x58]
lea rcx, [rbp - 0x78]
call fcn.14001df80
or edi, 0x18000
movzx ecx, byte [rbp + 0xb0]
test cl, cl
jne 0x140034f95
mov byte [rbp + 0xb0], 1
call fcn.140022110
mov qword [rbp + 0xb8], rax
movzx ecx, byte [rbp + 0xb0]
jmp 0x140034f9c
mov rax, qword [rbp + 0xb8]
cmp cl, 1
jne 0x140034faf
lea rdx, [rbp - 0x78]
mov rcx, rax
call fcn.140027740
jmp 0x140034fb6
mov rax, qword [rbp + 0xa0]
mov rcx, rax
call fcn.14001e6f0
mov edx, eax
shr eax, 8
movzx ebx, al
movzx eax, dl
xor rax, r14
imul rax, rsi
xor rbx, rax
imul rbx, rsi
mov eax, edx
shr eax, 0x10
movzx ecx, al
xor rbx, rcx
imul rbx, rsi
shr rdx, 0x18
xor rbx, rdx
imul rbx, rsi
lea rcx, [rbp - 0x78]
call fcn.14001a320
mov dword [rbp + 0xa4], 0x737365
mov dword [rbp + 0xa0], 0x63637573
mov byte [rbp + 0xa8], 0
lea r9, [rbp + 0x98]
lea r8, [rbp + 0xa7]
lea rdx, [rbp + 0xa0]
lea rcx, [rbp - 8]
call fcn.14001df80
or edi, 0x60000
or edi, 1
mov dword [rsp + 0x58], edi
movzx ecx, byte [rbp + 0xb0]
test cl, cl
jne 0x140035067
mov byte [rbp + 0xb0], 1
call fcn.140022110
mov qword [rbp + 0xb8], rax
movzx ecx, byte [rbp + 0xb0]
jmp 0x14003506e
mov rax, qword [rbp + 0xb8]
cmp cl, 1
jne 0x140035084
lea rdx, [rbp - 8]
mov rcx, rax
call fcn.140027740
mov rcx, rax
jmp 0x14003508b
mov rcx, qword [rbp + 0xa0]
lea rax, [rcx + 8]
cmp byte [rcx], 4
cmovne rax, r13
cmp byte [rax], 0
je 0x140035137
mov dword [rsp + 0x60], 0x70716463
mov dword [rsp + 0x64], 0x656671
mov byte [rsp + 0x68], 1
lea rdx, [rbp - 0x78]
lea rcx, [rsp + 0x60]
call fcn.140027830
nop
or edi, 2
mov dword [rsp + 0x58], edi
movzx eax, byte [rbp + 0xb0]
test al, al
jne 0x1400350f4
mov byte [rbp + 0xb0], 1
call fcn.140022110
mov rcx, rax
mov qword [rbp + 0xb8], rax
movzx eax, byte [rbp + 0xb0]
jmp 0x1400350fb
mov rcx, qword [rbp + 0xb8]
cmp al, 1
jne 0x14003510d
lea rdx, [rbp - 0x78]
call fcn.140027740
mov rcx, rax
jmp 0x140035114
mov rcx, qword [rbp + 0xa0]
lea rax, [rcx + 8]
cmp byte [rcx], 4
cmovne rax, r13
cmp byte [rax], 0
je 0x140035133
movabs rax, 0xcbe5c873d26645f1
cmp rbx, rax
je 0x140035137
xor bl, bl
jmp 0x140035139
mov bl, 1
test dil, 2
je 0x14003514c
and edi, 0xfffffffd
lea rcx, [rbp - 0x78]
call fcn.14001a320
nop
test dil, 1
je 0x14003515b
lea rcx, [rbp - 8]
call fcn.14001a320
test bl, bl
je 0x1400355c4
mov dword [rbp + 0xa4], 0x737365
mov dword [rbp + 0xa0], 0x63637573
mov byte [rbp + 0xa8], 0
lea r9, [rbp + 0x98]
lea r8, [rbp + 0xa7]
lea rdx, [rbp + 0xa0]
lea rcx, [rbp - 0x78]
call fcn.14001df80
nop
movzx ecx, byte [rbp + 0xb0]
test cl, cl
jne 0x1400351c4
mov byte [rbp + 0xb0], 1
call fcn.140022110
mov qword [rbp + 0xb8], rax
movzx ecx, byte [rbp + 0xb0]
jmp 0x1400351cb
mov rax, qword [rbp + 0xb8]
cmp cl, 1
jne 0x1400351e1
lea rdx, [rbp - 0x78]
mov rcx, rax
call fcn.140027740
mov rcx, rax
jmp 0x1400351e8
mov rcx, qword [rbp + 0xa0]
lea rax, [rcx + 8]
cmp byte [rcx], 4
cmovne rax, r13
movzx ebx, byte [rax]
lea rcx, [rbp - 0x78]
call fcn.14001a320
test bl, bl
je 0x1400353cc
mov dword [rsp + 0x40], 0x4065747e
mov dword [rsp + 0x44], 0x7e656671
mov dword [rsp + 0x48], 0x1007777
lea rdx, [rbp - 0x78]
lea rcx, [rsp + 0x40]
call fcn.140027900
nop
movzx eax, byte [rbp + 0xb0]
test al, al
jne 0x140035258
mov byte [rbp + 0xb0], 1
call fcn.140022110
mov rcx, rax
mov qword [rbp + 0xb8], rax
movzx eax, byte [rbp + 0xb0]
jmp 0x14003525f
mov rcx, qword [rbp + 0xb8]
cmp al, 1
jne 0x140035271
lea rdx, [rbp - 0x78]
call fcn.140027740
mov rcx, rax
jmp 0x140035278
mov rcx, qword [rbp + 0xa0]
lea rax, [rcx + 8]
cmp byte [rcx], 4
cmovne rax, r13
movzx ebx, byte [rax]
lea rcx, [rbp - 0x78]
call fcn.14001a320
test bl, bl
je 0x14003529e
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
mov dword [rsp + 0x40], 0x60617463
mov dword [rsp + 0x44], 0x7e787a7d
mov word [rsp + 0x48], 0x7c
mov byte [rsp + 0x4a], 1
lea rdx, [rbp - 0x78]
lea rcx, [rsp + 0x40]
call fcn.140027880
nop
movzx eax, byte [rbp + 0xb0]
test al, al
jne 0x1400352f3
mov byte [rbp + 0xb0], 1
call fcn.140022110
mov rcx, rax
mov qword [rbp + 0xb8], rax
movzx eax, byte [rbp + 0xb0]
jmp 0x1400352fa
mov rcx, qword [rbp + 0xb8]
cmp al, 1
jne 0x140035309
lea rdx, [rbp - 0x78]
call fcn.140027740
jmp 0x140035310
mov rax, qword [rbp + 0xa0]
lea rcx, [r12 + 0x240]
mov rdx, rax
call fcn.14001e390
nop
lea rcx, [rbp - 0x78]
call fcn.14001a320
mov byte [0x140106948], 1
mov dword [rbp + 0xa0], 0x7a626171
mov dword [rbp + 0xa4], 0x79737a
mov byte [rbp + 0xa8], 1
lea rdx, [rbp - 0x78]
lea rcx, [rbp + 0xa0]
call fcn.140027830
nop
movzx ecx, byte [rbp + 0xb0]
test cl, cl
jne 0x140035384
mov byte [rbp + 0xb0], 1
call fcn.140022110
mov qword [rbp + 0xb8], rax
movzx ecx, byte [rbp + 0xb0]
jmp 0x14003538b
mov rax, qword [rbp + 0xb8]
cmp cl, 1
jne 0x14003539e
lea rdx, [rbp - 0x78]
mov rcx, rax
call fcn.140027740
jmp 0x1400353a5
mov rax, qword [rbp + 0xa0]
mov rdx, rax
lea rcx, [rsp + 0x40]
call fcn.140026280
mov rdx, rax
mov rcx, r12
call fcn.140035f70
nop
lea rcx, [rbp - 0x78]
call fcn.14001a320
jmp 0x140035678
mov dword [rsp + 0x40], 0x72647f79
mov dword [rsp + 0x44], 0x61727c78
mov dword [rsp + 0x48], 0x1006b7d
mov byte [rsp + 0x60], 3
xorps xmm0, xmm0
movups xmmword [rbp + 0xc8], xmm0
mov ecx, 0x20
call fcn.1400c7418
mov rbx, rax
lea rax, [rbp + 0x98]
mov qword [rbp + 0xc8], rax
mov qword [rbp + 0xd0], rbx
mov rdx, rbx
lea rcx, [rsp + 0x40]
call fcn.140027900
nop
mov qword [rsp + 0x68], rbx
mov dword [rbp + 0xa0], 0x6061747d
mov dword [rbp + 0xa4], 0x737275
mov byte [rbp + 0xa8], 1
lea rdx, [rbp - 0x78]
lea rcx, [rbp + 0xa0]
call fcn.140027830
nop
movzx ecx, byte [rbp + 0xb0]
test cl, cl
jne 0x14003547b
mov byte [rbp + 0xb0], 1
call fcn.140022110
mov qword [rbp + 0xb8], rax
movzx ecx, byte [rbp + 0xb0]
jmp 0x140035482
mov rax, qword [rbp + 0xb8]
cmp cl, 1
jne 0x140035495
lea rdx, [rbp - 0x78]
mov rcx, rax
call fcn.140027740
jmp 0x14003549c
mov rax, qword [rbp + 0xa0]
lea rdx, [rsp + 0x60]
mov rcx, rax
call fcn.140027370
movzx ebx, al
lea rcx, [rbp - 0x78]
call fcn.14001a320
nop
movzx edx, byte [rsp + 0x60]
lea rcx, [rsp + 0x68]
call fcn.14002f330
test bl, bl
je 0x140035678
mov dword [rbp - 0x52], 0x77656e
movdqa xmm0, xmmword [0x1400cef20]
movdqu xmmword [rbp - 0x78], xmm0
movdqa xmm1, xmmword [0x1400cef80]
movdqu xmmword [rbp - 0x68], xmm1
mov dword [rbp - 0x58], 0x616f6c6e
mov word [rbp - 0x54], 0x2064
mov byte [rbp - 0x4e], 0
mov r9d, reloc.WS2_32.dll_recv
xor r8d, r8d
lea rdx, [rbp - 0x78]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x1400355a4
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x1400355a4
mov r11d, dword [rbx + 0x20]
nop word [rax + rax]
dec r9d
lea rdx, [r10 + r9*4]
mov r8d, dword [rdx + r11]
add r8, r10
mov edx, 0x9ef111e3
movzx ecx, byte [r8]
inc r8
test cl, cl
je 0x14003559f
nop
movsx ecx, cl
xor ecx, edx
imul edx, ecx, 0x1000193
movzx ecx, byte [r8]
lea r8, [r8 + 1]
test cl, cl
jne 0x140035580
cmp edx, 0x78de8b13
je 0x1400355a9
test r9d, r9d
jne 0x140035560
mov rax, qword [rax]
jmp 0x140035530
mov edx, dword [rbx + 0x1c]
add rdx, r10
mov ecx, dword [rbx + 0x24]
add rcx, r10
movzx ecx, word [rcx + r9*2]
mov eax, dword [rdx + rcx*4]
xor ecx, ecx
jmp 0x140035672
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x140035654
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x140035654
mov r11d, dword [rbx + 0x20]
nop word [rax + rax]
dec r9d
lea rdx, [r11 + r9*4]
mov r8d, dword [rdx + r10]
add r8, r10
mov edx, 0xcd76a6d5
movzx ecx, byte [r8]
inc r8
test cl, cl
je 0x14003564f
nop
movsx ecx, cl
xor ecx, edx
imul edx, ecx, 0x1000193
movzx ecx, byte [r8]
lea r8, [r8 + 1]
test cl, cl
jne 0x140035630
cmp edx, 0x47b2ae55
je 0x140035659
test r9d, r9d
jne 0x140035610
mov rax, qword [rax]
jmp 0x1400355e0
mov edx, dword [rbx + 0x1c]
add rdx, r10
mov ecx, dword [rbx + 0x24]
add rcx, r10
movzx ecx, word [rcx + r9*2]
mov eax, dword [rdx + rcx*4]
mov ecx, 9
add rax, r10
call rax
nop
lea rcx, [rbp + 0x178]
call fcn.14001a320
nop
movzx edx, byte [rbp + 0xb0]
lea rcx, [rbp + 0xb8]
call fcn.14002f330
jmp 0x140035748
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x140035724
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x140035724
mov r11d, dword [rbx + 0x20]
nop word [rax + rax]
dec r9d
lea rdx, [r11 + r9*4]
mov r8d, dword [rdx + r10]
add r8, r10
mov edx, 0x5c80824e
movzx ecx, byte [r8]
inc r8
test cl, cl
je 0x14003571f
nop
movsx ecx, cl
xor ecx, edx
imul edx, ecx, 0x1000193
movzx ecx, byte [r8]
lea r8, [r8 + 1]
test cl, cl
jne 0x140035700
cmp edx, 0xe921916
je 0x140035729
test r9d, r9d
jne 0x1400356e0
mov rax, qword [rax]
jmp 0x1400356b0
mov edx, dword [rbx + 0x1c]
add rdx, r10
mov ecx, dword [rbx + 0x24]
add rcx, r10
movzx ecx, word [rcx + r9*2]
mov eax, dword [rdx + rcx*4]
add rax, r10
mov ecx, 7
call rax
nop
mov rdx, qword [rbp + 0x130]
cmp rdx, 0xf
jbe 0x14003578c
inc rdx
mov rcx, qword [rbp + 0x118]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140035787
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140035787
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400c7410
mov qword [rbp + 0x128], r13
mov qword [rbp + 0x130], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x118], 0
mov rdx, qword [rbp + 0x150]
cmp rdx, 0xf
jbe 0x1400357e9
inc rdx
mov rcx, qword [rbp + 0x138]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400357e4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400357e4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400c7410
movdqu xmmword [rbp + 0x148], xmm6
mov byte [rbp + 0x138], 0
mov rdx, qword [rbp + 0x170]
cmp rdx, 0xf
jbe 0x14003583c
inc rdx
mov rcx, qword [rbp + 0x158]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140035837
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140035837
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400c7410
mov qword [rbp + 0x168], r13
mov qword [rbp + 0x170], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x158], 0
mov rdx, qword [rbp + 0x1b0]
cmp rdx, 0xf
jbe 0x140035899
inc rdx
mov rcx, qword [rbp + 0x198]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140035894
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140035894
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400c7410
mov rcx, qword [rbp + 0x350]
xor rcx, rsp
call fcn.1400c73f0
lea r11, [rsp + 0x470]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
movdqa xmm0, xmmword [str._bvz_7xswyy_]
movdqu xmmword [rsp + 0x40], xmm0
mov byte [rsp + 0x50], 1
lea rdx, [rbp - 8]
lea rcx, [rsp + 0x40]
call fcn.1400278e0
nop
lea rdx, [rbp - 8]
lea rcx, [rbp + 0xb0]
call fcn.140001cc0
lea rdx, [0x140100e18]
lea rcx, [rbp + 0xb0]
call sub.VCRUNTIME140.dll__CxxThrowException
nop
lea r8, [rbp - 0x28]
lea rdx, [rbp + 0xa0]
lea rcx, str.exists
call fcn.140006da0
nop
call fcn.140001ca0
int3
call fcn.140001ca0
int3