Function at 0x1400063c0
Capabilities:
Create process on windows
Encode data using xor
Terminate process

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x2a0
mov rax, qword [0x140087118]
xor rax, rsp
mov qword [rsp + 0x290], rax
mov r15, rcx
mov qword [rsp + 0x58], rcx
xor edi, edi
mov byte [rsp + 0x31], dil
xor r14b, r14b
mov byte [0x140087610], r14b
xor r8d, r8d
lea rdx, [0x14006ace3]
lea rcx, [0x140087618]
call fcn.140003080
mov ecx, 0x1024
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov rbx, rax
xor edx, edx
mov r8d, 0x1024
mov rcx, rax
call sub.VCRUNTIME140.dll_memset
lea rax, [rsp + 0x90]
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x90], rdi
mov qword [rsp + 0xa0], 6
mov qword [rsp + 0xa8], reloc.WS2_32.dll_ntohs
mov ecx, dword [str.remove]
mov dword [rsp + 0x90], ecx
movzx ecx, word [0x14006ad20]
mov word [rsp + 0x94], cx
mov byte [rsp + 0x96], r14b
lea rax, [rsp + 0xf0]
mov qword [rsp + 0x1b0], rax
mov dword [rsp + 0x68], 0x1004041
mov ecx, edi
nop dword [rax]
nop dword [rax + rax]
lea eax, [rcx + 0x7c]
xor byte [rsp + rcx + 0x68], al
inc rcx
cmp rcx, 2
jb 0x1400064b0
mov byte [rsp + 0x6b], 0
lea r9, [rsp + 0x30]
lea r8, [rsp + 0x6a]
lea rdx, [rsp + 0x68]
lea rcx, [rsp + 0xf0]
call fcn.140003710
nop
mov rdx, qword [0x140087760]
mov qword [rsp + 0xd0], rdi
mov qword [rsp + 0xe0], rdi
mov qword [rsp + 0xe8], rdi
mov r13, 0xffffffffffffffff
mov r8, r13
nop dword [rax + rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x140006510
lea rcx, [rsp + 0xd0]
call fcn.1400025a0
nop
lea rax, [rsp + 0x90]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0xf0]
lea r8, [rsp + 0xd0]
lea rdx, [rsp + 0x130]
mov rcx, r15
call fcn.14000adf0
mov rcx, rax
cmp qword [rax + 0x18], 0x10
jb 0x140006562
mov rcx, qword [rax]
mov rdx, rbx
sub rdx, rcx
nop dword [rax + rax]
movzx eax, byte [rcx]
mov byte [rdx + rcx], al
lea rcx, [rcx + 1]
test al, al
jne 0x140006570
mov rdx, qword [rsp + 0x148]
cmp rdx, 0x10
jb 0x1400065c4
inc rdx
mov rcx, qword [rsp + 0x130]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400065bf
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400065bf
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400668bc
mov rcx, qword [0x140087760]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov qword [rsp + 0xd0], rdi
mov qword [rsp + 0xe0], rdi
mov qword [rsp + 0xe8], rdi
mov r8, r13
nop dword [rax]
inc r8
cmp byte [rbx + r8], 0
jne 0x1400065f0
mov rdx, rbx
lea rcx, [rsp + 0xd0]
call fcn.1400025a0
lea r8, [rsp + 0xd0]
lea rdx, [rsp + 0xf0]
lea rcx, [rsp + 0x50]
call fcn.1400141c0
mov rcx, rax
cmp qword [rax + 0x18], 0x10
jb 0x140006631
mov rcx, qword [rax]
mov rdx, rbx
sub rdx, rcx
nop word [rax + rax]
movzx eax, byte [rcx]
mov byte [rdx + rcx], al
lea rcx, [rcx + 1]
test al, al
jne 0x140006640
mov rdx, qword [rsp + 0x108]
cmp rdx, 0x10
jb 0x140006694
inc rdx
mov rcx, qword [rsp + 0xf0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000668f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000668f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400668bc
lea rdx, str.NB64
mov rcx, rbx
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x140006b05
mov ecx, dword [0x140087798]
sub ecx, 1
je 0x140006aa5
sub ecx, 1
je 0x140006a4e
sub ecx, 1
je 0x14000697a
cmp ecx, 1
je 0x140006732
mov dword [rsp + 0x70], 0x11351329
mov dword [rsp + 0x74], 0xa3ecf6ef
mov dword [rsp + 0x78], 0xe8f4f7c1
mov word [rsp + 0x7c], 0xfa
mov byte [rsp + 0x7e], 1
nop word [rax + rax]
lea eax, [rdi + 0x7c]
xor byte [rsp + rdi + 0x70], al
inc rdi
cmp rdi, 0xd
jb 0x140006700
mov byte [rsp + 0x7e], 0
lea rcx, [rsp + 0x70]
call fcn.14000ff30
mov byte [0x140087611], 1
mov byte [0x1400877a1], 1
jmp 0x140008850
mov dword [rsp + 0x70], 0x1c1b153f
mov dword [rsp + 0x74], 0xa3f0e4eb
mov dword [rsp + 0x78], 0xebefe4e2
mov dword [rsp + 0x7c], 0x100eded
mov rcx, rdi
nop word [rax + rax]
lea eax, [rcx + 0x7c]
xor byte [rsp + rcx + 0x70], al
inc rcx
cmp rcx, 0xe
jb 0x140006760
mov byte [rsp + 0x7f], 0
lea rcx, [rsp + 0x70]
call fcn.14000ff30
cmp dword [0x140087798], 4
jne 0x140006967
mov edx, dword [0x140087780]
mov ecx, edx
test edx, edx
je 0x140006897
sub ecx, 1
je 0x140006897
sub ecx, 1
je 0x140006897
mov byte [0x140087611], 1
mov byte [0x1400877a1], 1
mov dword [rsp + 0x70], 0x1b121c3b
mov dword [rsp + 0x74], 0xe6f0f3ef
mov word [rsp + 0x78], 0x100
cmp ecx, 1
je 0x140006840
nop dword [rax + rax]
lea eax, [rdi + 0x7c]
xor byte [rsp + rdi + 0x70], al
inc rdi
cmp rdi, 8
jb 0x1400067e0
mov byte [rsp + 0x79], 0
lea r9, [rsp + 0x30]
lea r8, [rsp + 0x78]
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0xf0]
call fcn.140003710
lea rdx, [rsp + 0xf0]
lea rcx, [0x140087618]
call fcn.140004eb0
lea rcx, [rsp + 0xf0]
call fcn.140001cd0
jmp 0x140008850
lea eax, [rdi + 0x7c]
xor byte [rsp + rdi + 0x70], al
inc rdi
cmp rdi, 8
jb 0x140006840
mov byte [rsp + 0x79], 0
lea r9, [rsp + 0x30]
lea r8, [rsp + 0x78]
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0xf0]
call fcn.140003710
lea rdx, [rsp + 0xf0]
lea rcx, [0x140087618]
call fcn.140004eb0
lea rcx, [rsp + 0xf0]
call fcn.140001cd0
jmp 0x140008850
inc edx
mov dword [0x140087780], edx
mov byte [0x140087610], 1
mov dword [rsp + 0x68], 0x1a0c123f
mov word [rsp + 0x6c], 0x100
mov rcx, rdi
nop dword [rax + rax]
lea eax, [rcx + 0x7c]
xor byte [rsp + rcx + 0x68], al
inc rcx
cmp rcx, 4
jb 0x1400068c0
mov byte [rsp + 0x6d], 0
mov qword [rsp + 0x90], rdi
mov qword [rsp + 0xa0], 4
mov qword [rsp + 0xa8], reloc.WS2_32.dll_ntohs
mov eax, dword [rsp + 0x68]
mov dword [rsp + 0x90], eax
mov byte [rsp + 0x94], 0
lea rdx, [rsp + 0x90]
lea rcx, [0x140087618]
call fcn.140004eb0
mov rdx, qword [rsp + 0xa8]
cmp rdx, 0x10
jb 0x140006962
inc rdx
mov rcx, qword [rsp + 0x90]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000695d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000695d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400668bc
jmp 0x140008850
mov byte [0x140087611], 1
mov byte [0x1400877a1], 1
jmp 0x140008850
mov byte [0x140087610], 0
mov dword [rsp + 0x70], 0x16191230
mov dword [rsp + 0x74], 0xe2e4a1ee
mov dword [rsp + 0x78], 0xe3e3e9ed
mov word [rsp + 0x7c], 0x100
lea eax, [rdi + 0x7c]
xor byte [rsp + rdi + 0x70], al
inc rdi
cmp rdi, 0xc
jb 0x1400069a0
mov byte [rsp + 0x7d], 0
mov qword [rsp + 0xa0], send
mov qword [rsp + 0xa8], reloc.WS2_32.dll_ntohs
movsd xmm0, qword [rsp + 0x70]
movsd qword [rsp + 0x90], xmm0
mov eax, dword [rsp + 0x78]
mov dword [rsp + 0x98], eax
mov byte [rsp + 0x9c], 0
lea rdx, [rsp + 0x90]
lea rcx, [0x140087660]
call fcn.140004eb0
mov rdx, qword [rsp + 0xa8]
cmp rdx, 0x10
jb 0x140006a49
inc rdx
mov rcx, qword [rsp + 0x90]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006a44
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140006a44
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400668bc
jmp 0x140008850
movdqa xmm0, xmmword [0x14006ae50]
movdqu xmmword [rsp + 0x70], xmm0
mov word [rsp + 0x80], 0xe8
mov byte [rsp + 0x82], 1
nop
lea eax, [rdi + 0x7c]
xor byte [rsp + rdi + 0x70], al
inc rdi
cmp rdi, 0x11
jb 0x140006a70
mov byte [rsp + 0x82], 0
lea rcx, [rsp + 0x70]
call fcn.14000ff30
mov byte [0x140087611], 1
mov byte [0x1400877a1], 1
jmp 0x140008850
movdqa xmm0, xmmword [0x14006ae40]
movdqu xmmword [rsp + 0x70], xmm0
mov dword [rsp + 0x80], 0xeae2e4ed
mov word [rsp + 0x84], 0xf4
mov byte [rsp + 0x86], 1
lea eax, [rdi + 0x7c]
xor byte [rsp + rdi + 0x70], al
inc rdi
cmp rdi, 0x15
jb 0x140006ad0
mov byte [rsp + 0x86], 0
lea rcx, [rsp + 0x70]
call fcn.14000ff30
mov byte [0x140087611], 1
mov byte [0x1400877a1], 1
jmp 0x140008850
mov dword [0x140087780], edi
lea rax, [rsp + 0xd0]
mov qword [rsp + 0x70], rax
mov qword [rsp + 0xd0], rdi
mov qword [rsp + 0xe0], 1
mov qword [rsp + 0xe8], reloc.WS2_32.dll_ntohs
mov word [rsp + 0xd0], Ordinal_60
mov qword [rsp + 0xf0], rdi
mov qword [rsp + 0x100], rdi
mov qword [rsp + 0x108], rdi
mov r8, r13
nop dword [rax]
inc r8
cmp byte [rbx + r8], 0
jne 0x140006b60
mov rdx, rbx
lea rcx, [rsp + 0xf0]
call fcn.1400025a0
nop
lea r8, [rsp + 0xd0]
lea rdx, [rsp + 0xf0]
lea rcx, [rsp + 0x38]
call fcn.14000c6f0
nop
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rbx, qword [rsp + 0x38]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__errno]
mov rsi, rax
cmp qword [rbx + 0x18], 0x10
jb 0x140006bb7
mov rbx, qword [rbx]
mov dword [rax], edi
mov r8d, 0xa
lea rdx, [rsp + 0x68]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_strtol]
mov ecx, eax
cmp rbx, qword [rsp + 0x68]
je 0x140008972
cmp dword [rsi], 0x22
je 0x14000897e
cmp ecx, 0x22b
jg 0x140006c4b
je case.0x140006c8b.730
sub ecx, 0x67
je 0x140006c0d
sub ecx, 0xa
je 0x140006c0d
sub ecx, 0x32
je 0x140006c0d
sub ecx, 0xf0
je 0x140006c0d
cmp ecx, 1
jne case.0x140006c8b.637
mov rcx, qword [rsp + 0x38]
add rcx, 0x20
cmp qword [rcx + 0x18], 0x10
jb 0x140006c20
mov rcx, qword [rcx]
call fcn.14000ff30
mov byte [0x140087611], 1
mov byte [0x1400877a1], 1
mov ecx, Ordinal_46
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov byte [0x140087610], 1
jmp 0x140006e3e
cmp ecx, 0x387
jg 0x140006db2
je case.0x140006c8b.701
add ecx, 0xfffffd84
cmp ecx, 0x91
ja case.0x140006c8b.637
movsxd rax, ecx
lea rdx, [0x140000000]
movzx eax, byte [rdx + rax + 0x89b0]
mov ecx, dword [rdx + rax*4 + 0x8998]
add rcx, rdx
jmp rcx
mov r14b, 1
inc dword [0x140087768]
jmp 0x140006e3e
mov dword [rsp + 0x68], 0xb1b1352
mov word [rsp + 0x6c], 0x100
lea rcx, [rsp + 0x68]
call fcn.140009650
mov rdx, rax
lea rcx, [0x140087808]
call fcn.140003840
test al, al
je 0x140006cd5
mov byte [0x140087611], 1
mov byte [0x1400877a1], 1
cmp dword [0x140087788], 0x369f
je 0x140006cef
mov byte [0x140087611], 1
mov byte [0x1400877a1], 1
cmp dword [0x140087790], 0x2c5aa
je 0x140006d09
mov byte [0x140087611], 1
mov byte [0x1400877a1], 1
lea rdx, [0x140087828]
lea rcx, [rsp + 0x90]
call fcn.140002860
lea rdx, [0x140087848]
lea rcx, [rsp + 0x90]
call fcn.140003800
movzx ebx, al
lea rcx, [rsp + 0x90]
call fcn.140001cd0
test bl, bl
je 0x140006d53
mov byte [0x140087611], 1
mov byte [0x1400877a1], 1
mov byte [rsp + 0x31], 1
jmp 0x140006e3e
mov byte [0x140087610], 1
mov byte [0x1400877a0], 1
mov rdx, qword [rsp + 0x38]
add rdx, 0x20
lea rcx, [rsp + 0x90]
call fcn.140002860
mov rdx, rax
lea rcx, [rsp + 0x130]
call fcn.140010ea0
mov rdx, rax
lea rcx, [0x1400877c8]
call fcn.140004eb0
lea rcx, [rsp + 0x130]
call fcn.140001cd0
jmp 0x140006e3e
cmp ecx, 0xbbd
jg 0x1400088d9
je 0x140006dea
sub ecx, 0x3e9
je 0x14000707b
sub ecx, 0xa
je 0x14000707b
sub ecx, 0x29
je case.0x140006c8b.701
cmp ecx, 0x7a0
jne case.0x140006c8b.637
mov byte [0x140087610], 0
mov rdx, qword [rsp + 0x38]
add rdx, 0x20
cmp qword [rdx + 0x18], 0x10
jb 0x140006e04
mov rdx, qword [rdx]
mov r8, r13
nop word [rax + rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x140006e10
lea rcx, [0x140087660]
call fcn.140003080
mov rcx, qword [rsp + 0x38]
add rcx, 0x20
cmp qword [rcx + 0x18], 0x10
jb 0x140006e39
mov rcx, qword [rcx]
call fcn.14000ff30
movabs r12, 0x7fffffffffffffff
cmp byte [0x1400877a1], 0
jne 0x140006c33
cmp byte [0x140087611], 0
jne 0x14000887d
test r14b, r14b
je 0x1400080f0
cmp dword [0x140087768], 1
jne 0x1400071c5
mov ecx, 8
call fcn.140066880
mov qword [rsp + 0x70], rax
test rax, rax
je 0x14000709f
mov rcx, rax
call fcn.14000fb50
mov rbx, rax
jmp 0x1400070a2
mov qword [rsp + 0xb0], rdi
mov qword [rsp + 0xc0], rdi
mov qword [rsp + 0xc8], rdi
mov rsi, qword [0x140087838]
lea r15, [0x140087828]
cmp qword [0x140087840], 0x10
cmovae r15, qword [0x140087828]
movabs r12, 0x7fffffffffffffff
cmp rsi, r12
ja 0x14000898a
cmp rsi, 0x10
jae 0x140006f1a
mov qword [rsp + 0xc0], rsi
mov ebx, reloc.WS2_32.dll_ntohs
mov qword [rsp + 0xc8], rbx
movups xmm0, xmmword [r15]
movups xmmword [rsp + 0xb0], xmm0
mov r14, qword [rsp + 0xb0]
jmp 0x140006f86
mov qword [rsp + 0xc8], reloc.WS2_32.dll_ntohs
mov rbx, rsi
or rbx, 0xf
cmp rbx, r12
jbe 0x140006f37
mov rbx, r12
jmp 0x140006f4b
mov r13d, reloc.WLDAP32.dll_Ordinal_22
cmp rbx, r13
cmovb rbx, r13
mov r13, 0xffffffffffffffff
lea rdx, [rbx + 1]
lea rcx, [rsp + 0xb0]
call fcn.140001d30
mov r14, rax
mov qword [rsp + 0xb0], rax
mov qword [rsp + 0xc0], rsi
mov qword [rsp + 0xc8], rbx
lea r8, [rsi + 1]
mov rdx, r15
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
lea rdx, [0x140087848]
cmp qword [0x140087860], 0x10
cmovae rdx, qword [0x140087848]
lea rcx, [rsp + 0xb0]
cmp rbx, 0x10
cmovae rcx, r14
cmp rsi, qword [0x140087858]
jne 0x140006fc7
mov r8, rsi
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x140006fc7
xor sil, sil
jmp 0x140006fca
mov sil, 1
cmp rbx, 0x10
jb 0x140007001
lea rdx, [rbx + 1]
mov rax, r14
cmp rdx, 0x1000
jb 0x140006ff9
add rdx, 0x27
mov r14, qword [r14 - 8]
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140007675
mov rcx, r14
call fcn.1400668bc
test sil, sil
je 0x14000705e
mov byte [0x140087610], 0
mov rdx, qword [rsp + 0x38]
add rdx, 0x20
cmp qword [rdx + 0x18], 0x10
jb 0x140007020
mov rdx, qword [rdx]
mov r8, r13
inc r8
cmp byte [rdx + r8], 0
jne 0x140007023
lea rcx, [0x140087660]
call fcn.140003080
mov rcx, qword [rsp + 0x38]
add rcx, 0x20
cmp qword [rcx + 0x18], 0x10
jb 0x14000704c
mov rcx, qword [rcx]
call fcn.14000ff30
xor r14b, r14b
mov r15, qword [rsp + 0x58]
jmp 0x140006e48
mov rcx, qword [rsp + 0x38]
add rcx, 0x20
cmp qword [rcx + 0x18], 0x10
jb 0x140007071
mov rcx, qword [rcx]
call fcn.14000ff30
jmp 0x140006c25
mov byte [0x140087610], 0
mov rcx, qword [rsp + 0x38]
add rcx, 0x20
cmp qword [rcx + 0x18], 0x10
jb 0x140007095
mov rcx, qword [rcx]
call fcn.14000ff30
jmp 0x140006c25
mov rbx, rdi
lea rax, [rsp + 0x90]
mov qword [rsp + 0x70], rax
mov word [rsp + 0x68], 0x46
mov byte [rsp + 0x6a], 1
lea rdx, [rsp + 0x90]
lea rcx, [rsp + 0x68]
call fcn.140004ff0
mov rsi, rax
mov rdx, qword [rsp + 0x38]
add rdx, 0x20
lea rcx, [rsp + 0x130]
call fcn.140002860
mov rdx, rax
lea rcx, [rsp + 0x190]
call fcn.140010ea0
nop
mov r8, rsi
mov rdx, rax
lea rcx, [rsp + 0xb0]
call fcn.14000c6f0
nop
lea rcx, [0x1400876f8]
mov rdx, qword [rsp + 0xb0]
cmp rcx, rdx
je 0x14000713a
mov r8, qword [rdx + 0x10]
cmp qword [rdx + 0x18], 0x10
jb 0x14000712d
mov rdx, qword [rdx]
call fcn.140003080
mov rdx, qword [rsp + 0xb0]
lea rax, [rdx + 0x20]
lea rcx, [0x1400876d8]
cmp rcx, rax
je 0x140007168
mov r8, qword [rax + 0x10]
cmp qword [rax + 0x18], 0x10
jb 0x140007158
mov rax, qword [rax]
mov rdx, rax
call fcn.140003080
mov rdx, qword [rsp + 0xb0]
add rdx, 0x20
lea rcx, [rsp + 0x1d0]
call fcn.140002860
mov r8, rax
lea rdx, [rsp + 0x70]
mov rcx, rbx
call fcn.14000fc40
mov rdx, rax
lea rcx, [0x1400876b8]
call fcn.140004eb0
lea rcx, [rsp + 0x70]
call fcn.140001cd0
mov dword [0x14008778c], 0xf1
mov byte [0x140087610], 1
lea rcx, [rsp + 0xb0]
call fcn.140008a50
jmp 0x1400080f0
cmp dword [0x140087768], 2
jne 0x140007bc9
mov rdx, qword [rsp + 0x38]
add rdx, 0x20
lea rcx, [rsp + 0x90]
call fcn.140002860
mov rdx, rax
lea rcx, [rsp + 0x130]
call fcn.140010ea0
nop
cmp qword [rax + 0x18], 0x10
jb 0x140007203
mov rax, qword [rax]
mov qword [rsp + 0xb0], rdi
mov qword [rsp + 0xc0], rdi
mov qword [rsp + 0xc8], rdi
mov r8, r13
nop
inc r8
cmp byte [rax + r8], 0
jne 0x140007220
mov rdx, rax
lea rcx, [rsp + 0xb0]
call fcn.1400025a0
nop
lea rcx, [rsp + 0x130]
call fcn.140001cd0
mov rdx, qword [rsp + 0x38]
add rdx, 0x40
lea rcx, [rsp + 0x190]
call fcn.140002860
mov rdx, rax
lea rcx, [rsp + 0x1b0]
call fcn.140010ea0
nop
cmp qword [rax + 0x18], 0x10
jb 0x140007279
mov rax, qword [rax]
mov qword [rsp + 0x1d0], rdi
mov qword [rsp + 0x1e0], rdi
mov qword [rsp + 0x1e8], rdi
mov r8, r13
inc r8
cmp byte [rax + r8], 0
jne 0x140007294
mov rdx, rax
lea rcx, [rsp + 0x1d0]
call fcn.1400025a0
nop
lea rcx, [rsp + 0x1b0]
call fcn.140001cd0
mov rdx, qword [rsp + 0x38]
add rdx, 0x60
lea rcx, [rsp + 0x130]
call fcn.140002860
mov rdx, rax
lea rcx, [rsp + 0x170]
call fcn.140010ea0
nop
cmp qword [rax + 0x18], 0x10
jb 0x1400072ed
mov rax, qword [rax]
mov qword [rsp + 0x90], rdi
xorps xmm0, xmm0
movdqu xmmword [rsp + 0xa0], xmm0
mov r8, r13
inc r8
cmp byte [rax + r8], 0
jne 0x140007304
mov rdx, rax
lea rcx, [rsp + 0x90]
call fcn.1400025a0
nop
lea rcx, [rsp + 0x170]
call fcn.140001cd0
mov rdx, qword [rsp + 0x38]
sub rdx, 0xffffffffffffff80
lea rcx, [rsp + 0x190]
call fcn.140002860
mov rdx, rax
lea rcx, [rsp + 0x1b0]
call fcn.140010ea0
nop
cmp qword [rax + 0x18], 0x10
jb 0x14000735d
mov rax, qword [rax]
mov qword [rsp + 0x130], rdi
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x140], xmm0
mov r8, r13
inc r8
cmp byte [rax + r8], 0
jne 0x140007374
mov rdx, rax
lea rcx, [rsp + 0x130]
call fcn.1400025a0
nop
lea rcx, [rsp + 0x1b0]
call fcn.140001cd0
mov rdx, qword [rsp + 0x38]
add rdx, 0xa0
lea rcx, [rsp + 0x170]
call fcn.140002860
mov rdx, rax
lea rcx, [rsp + 0x150]
call fcn.140010ea0
nop
cmp qword [rax + 0x18], 0x10
jb 0x1400073d0
mov rax, qword [rax]
mov qword [rsp + 0x190], rdi
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x1a0], xmm0
mov r8, r13
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x1400073f0
mov rdx, rax
lea rcx, [rsp + 0x190]
call fcn.1400025a0
nop
lea rcx, [rsp + 0x150]
call fcn.140001cd0
lea rdx, [r15 + 0x80]
mov r8, qword [rdx + 0x10]
cmp qword [rdx + 0x18], 0x10
jb 0x14000742d
mov rdx, qword [rdx]
lea rcx, [rsp + 0xb0]
mov r14, qword [rsp + 0xb0]
mov r15, qword [rsp + 0xc8]
cmp r15, 0x10
cmovae rcx, r14
mov rax, qword [rsp + 0xc0]
cmp rax, r8
jne 0x14000783e
mov r8, rax
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x14000783e
lea rcx, [rsp + 0x1d0]
mov rbx, qword [rsp + 0x1d0]
mov rsi, qword [rsp + 0x1e8]
cmp rsi, 0x10
cmovae rcx, rbx
mov r8, qword [rsp + 0x1e0]
cmp r8, 1
jne 0x1400076d4
lea rdx, [0x14006aca8]
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x1400076d4
movdqa xmm0, xmmword [0x14006adb0]
movdqu xmmword [rsp + 0xf0], xmm0
movdqa xmm1, xmmword [0x14006ae90]
movdqu xmmword [rsp + 0x100], xmm1
movdqa xmm0, xmmword [0x14006ae10]
movdqu xmmword [rsp + 0x110], xmm0
mov dword [rsp + 0x120], 0xd9cbc98c
mov dword [rsp + 0x124], 0xc3ddddd5
mov dword [rsp + 0x128], 0x97c7d1
mov byte [rsp + 0x12c], 1
lea eax, [rdi + 0x7c]
xor byte [rsp + rdi + 0xf0], al
inc rdi
cmp rdi, 0x3b
jb 0x140007510
mov byte [rsp + 0x12c], 0
lea rcx, [rsp + 0xf0]
call fcn.14000ff30
mov byte [0x140087611], 1
mov byte [0x1400877a1], 1
mov rdx, qword [rsp + 0x1a8]
cmp rdx, 0x10
jb 0x14000758a
inc rdx
mov rcx, qword [rsp + 0x190]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140007584
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140007756
call fcn.1400668bc
nop
mov rdx, qword [rsp + 0x148]
cmp rdx, 0x10
jb 0x1400075ce
inc rdx
mov rcx, qword [rsp + 0x130]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400075c8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000779d
call fcn.1400668bc
nop
mov rdx, qword [rsp + 0xa8]
cmp rdx, 0x10
jb 0x140007612
inc rdx
mov rcx, qword [rsp + 0x90]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000760c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400077e4
call fcn.1400668bc
nop
cmp rsi, 0x10
jb 0x14000764a
lea rdx, [rsi + 1]
mov rax, rbx
cmp rdx, 0x1000
jb 0x140007641
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000781c
mov rcx, rbx
call fcn.1400668bc
nop
cmp r15, 0x10
jb 0x140007685
lea rdx, [r15 + 1]
mov rax, r14
cmp rdx, 0x1000
jb 0x14000767c
add rdx, 0x27
mov r14, qword [r14 - 8]
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000767c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r14
call fcn.1400668bc
nop
mov rbx, qword [rsp + 0x38]
test rbx, rbx
je 0x1400076cf
mov rdi, qword [rsp + 0x40]
cmp rbx, rdi
je 0x1400076b6
nop dword [rax]
mov rcx, rbx
call fcn.140001cd0
add rbx, 0x20
cmp rbx, rdi
jne 0x1400076a0
mov rbx, qword [rsp + 0x38]
mov r8, qword [rsp + 0x48]
sub r8, rbx
sar r8, 5
mov rdx, rbx
lea rcx, [rsp + 0x38]
call fcn.14000a610
jmp 0x140008850
mov dword [rsp + 0x68], 0x1a0b0f08
mov word [rsp + 0x6c], 0x100
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0x68]
call fcn.140005070
mov rdx, rax
lea rcx, [0x140087808]
call fcn.140004eb0
lea rcx, [rsp + 0x70]
call fcn.140001cd0
mov dword [0x140087788], 0xd0035f3
mov byte [0x140087610], 1
mov rdx, qword [rsp + 0x1a8]
cmp rdx, 0x10
jb 0x140007763
inc rdx
mov rcx, qword [rsp + 0x190]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000775d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000775d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400668bc
nop
mov rdx, qword [rsp + 0x148]
cmp rdx, 0x10
jb 0x1400077aa
inc rdx
mov rcx, qword [rsp + 0x130]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400077a4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400077a4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400668bc
nop
mov rdx, qword [rsp + 0xa8]
cmp rdx, 0x10
jb 0x1400077f1
inc rdx
mov rcx, qword [rsp + 0x90]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400077eb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400077eb
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400668bc
nop
cmp rsi, 0x10
jb 0x14000782c
lea rdx, [rsi + 1]
mov rax, rbx
cmp rdx, 0x1000
jb 0x140007823
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140007823
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rbx
call fcn.1400668bc
nop
lea rcx, [rsp + 0xb0]
call fcn.140001cd0
jmp 0x1400080f0
mov dword [rsp + 0x68], 0x1a061852
mov word [rsp + 0x6c], 0x100
mov rsi, qword [rsp + 0x58]
add rsi, 0x20
mov r13, qword [rsi + 0x10]
mov rax, r12
sub rax, r13
cmp rax, 1
jb 0x140008990
cmp qword [rsi + 0x18], 0x10
jb 0x140007874
mov rsi, qword [rsi]
mov qword [rsp + 0x70], rdi
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x80], xmm0
lea r12, [r13 + 1]
mov ebx, reloc.WS2_32.dll_ntohs
lea r15, [rsp + 0x70]
cmp r12, rbx
jbe 0x1400078d6
mov rbx, r12
or rbx, 0xf
movabs rax, 0x7fffffffffffffff
cmp rbx, rax
jbe 0x1400078b3
mov rbx, rax
jmp 0x1400078c0
cmp rbx, 0x16
mov eax, reloc.WLDAP32.dll_Ordinal_22
cmovb rbx, rax
lea rdx, [rbx + 1]
lea rcx, [rsp + 0x70]
call fcn.140001d30
mov r15, rax
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x80], r12
mov qword [rsp + 0x88], rbx
mov r8, r13
mov rdx, rsi
mov rcx, r15
call sub.VCRUNTIME140.dll_memcpy
mov byte [r15 + r13], 0x5f
mov byte [r15 + r12], 0
lea rdx, [rsp + 0xb0]
cmp qword [rsp + 0xc8], 0x10
cmovae rdx, r14
mov r8, qword [rsp + 0xc0]
lea rcx, [rsp + 0x70]
call fcn.140008b50
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0xd0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0xe0], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea r8, [rsp + 0x68]
lea rdx, [rsp + 0xd0]
lea rcx, [rsp + 0xf0]
call fcn.140003890
nop
lea rcx, [rsp + 0xd0]
call fcn.140001cd0
nop
lea rcx, [rsp + 0x70]
call fcn.140001cd0
lea r8, [rsp + 0xf0]
cmp qword [rsp + 0x108], 0x10
cmovae r8, qword [rsp + 0xf0]
movabs rax, 0xfb0e802e3f7ffa1b
mov qword [rsp + 0x1b0], rax
movabs rcx, 0xaa6da283c1be4b58
mov qword [rsp + 0x1b8], rcx
movabs rax, 0xfb0e802e511a8a74
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x78], rcx
movdqa xmm0, xmmword [rsp + 0x1b0]
pxor xmm0, xmmword [rsp + 0x70]
movdqa xmmword [rsp + 0x70], xmm0
mov dword [rsp + 0x28], 1
mov qword [rsp + 0x20], rdi
xor r9d, r9d
lea rdx, [rsp + 0x70]
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
mov byte [0x140087611], 1
mov byte [0x1400877a1], 1
lea rcx, [rsp + 0xf0]
call fcn.140001cd0
nop
mov rdx, qword [rsp + 0x1a8]
cmp rdx, 0x10
jb 0x140007a65
inc rdx
mov rcx, qword [rsp + 0x190]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140007a5f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140007a5f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400668bc
nop
mov rdx, qword [rsp + 0x148]
cmp rdx, 0x10
jb 0x140007aac
inc rdx
mov rcx, qword [rsp + 0x130]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140007aa6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140007aa6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400668bc
nop
mov rdx, qword [rsp + 0xa8]
cmp rdx, 0x10
jb 0x140007af3
inc rdx
mov rcx, qword [rsp + 0x90]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140007aed
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140007aed
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400668bc
nop
mov rdx, qword [rsp + 0x1e8]
cmp rdx, 0x10
jb 0x140007b3a
inc rdx
mov rcx, qword [rsp + 0x1d0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140007b34
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140007b34
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400668bc
nop
mov rdx, qword [rsp + 0xc8]
cmp rdx, 0x10
jb 0x140007b81
inc rdx
mov rcx, qword [rsp + 0xb0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140007b7b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140007b7b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400668bc
nop
mov rbx, qword [rsp + 0x38]
test rbx, rbx
je 0x140007bc4
mov rdi, qword [rsp + 0x40]
cmp rbx, rdi
je 0x140007bab
mov rcx, rbx
call fcn.140001cd0
add rbx, 0x20
cmp rbx, rdi
jne 0x140007b95
mov rbx, qword [rsp + 0x38]
mov r8, qword [rsp + 0x48]
sub r8, rbx
sar r8, 5
mov rdx, rbx
lea rcx, [rsp + 0x38]
call fcn.14000a610
jmp 0x140008850
cmp dword [0x140087768], 3
jne 0x1400080a0
mov dword [rsp + 0x68], 0x1a0b0f08
mov word [rsp + 0x6c], 0x100
mov rcx, rdi
nop dword [rax + rax]
lea eax, [rcx + 0x7c]
xor byte [rsp + rcx + 0x68], al
inc rcx
cmp rcx, 4
jb 0x140007bf0
mov byte [rsp + 0x6d], 0
lea rdx, [rsp + 0x68]
lea rcx, [0x140087808]
call fcn.140003840
test al, al
je 0x140007c28
mov byte [0x140087611], 1
mov byte [0x1400877a1], 1
cmp dword [0x140087788], 0xd0035f3
je 0x140007c42
mov byte [0x140087611], 1
mov byte [0x1400877a1], 1
mov rdx, qword [rsp + 0x38]
add rdx, 0x20
lea rcx, [rsp + 0x150]
call fcn.140002860
mov rdx, rax
lea rcx, [rsp + 0x170]
call fcn.140010ea0
nop
xor edx, edx
lea r8d, [rdx + 0xa]
mov rcx, rax
call fcn.14000ca30
mov dword [0x1400874f0], eax
lea rcx, [rsp + 0x170]
call fcn.140001cd0
mov rdx, qword [rsp + 0x38]
add rdx, 0x40
lea rcx, [rsp + 0x150]
call fcn.140002860
mov rdx, rax
lea rcx, [rsp + 0x170]
call fcn.140010ea0
nop
cmp qword [rax + 0x18], 0x10
jb 0x140007cbb
mov rax, qword [rax]
mov r8, r13
nop
inc r8
cmp byte [rax + r8], 0
jne 0x140007cc0
mov rdx, rax
lea rcx, [0x140087538]
call fcn.140003080
nop
lea rcx, [rsp + 0x170]
call fcn.140001cd0
mov rdx, qword [rsp + 0x38]
add rdx, 0x60
lea rcx, [rsp + 0x150]
call fcn.140002860
mov rdx, rax
lea rcx, [rsp + 0x90]
call fcn.140010ea0
nop
xor edx, edx
lea r8d, [rdx + 0xa]
mov rcx, rax
call fcn.14000ca30
mov edx, eax
lea rcx, [rsp + 0x170]
call fcn.14000cb90
mov rdx, rax
lea rcx, [0x140087578]
call fcn.140004eb0
lea rcx, [rsp + 0x170]
call fcn.140001cd0
nop
lea rcx, [rsp + 0x90]
call fcn.140001cd0
mov rdx, qword [rsp + 0x38]
sub rdx, 0xffffffffffffff80
lea rcx, [rsp + 0x150]
call fcn.140002860
mov rdx, rax
lea rcx, [rsp + 0x170]
call fcn.140010ea0
nop
cmp qword [rax + 0x18], 0x10
jb 0x140007d86
mov rax, qword [rax]
mov r8, r13
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140007d90
mov rdx, rax
lea rcx, [0x140087558]
call fcn.140003080
nop
lea rcx, [rsp + 0x170]
call fcn.140001cd0
mov rdx, qword [rsp + 0x38]
add rdx, 0xa0
lea rcx, [rsp + 0x150]
call fcn.140002860
mov rdx, rax
lea rcx, [rsp + 0x170]
call fcn.140010ea0
nop
cmp qword [rax + 0x18], 0x10
jb 0x140007deb
mov rax, qword [rax]
mov r8, r13
nop
inc r8
cmp byte [rax + r8], 0
jne 0x140007df0
mov rdx, rax
lea rcx, [0x140087518]
call fcn.140003080
nop
lea rcx, [rsp + 0x170]
call fcn.140001cd0
mov rdx, qword [rsp + 0x38]
add rdx, 0xc0
lea rcx, [rsp + 0x150]
call fcn.140002860
mov rdx, rax
lea rcx, [rsp + 0x170]
call fcn.140010ea0
nop
cmp qword [rax + 0x18], 0x10
jb 0x140007e4b
mov rax, qword [rax]
mov r8, r13
nop
inc r8
cmp byte [rax + r8], 0
jne 0x140007e50
mov rdx, rax
lea rcx, [0x1400876d8]
call fcn.140003080
nop
lea rcx, [rsp + 0x170]
call fcn.140001cd0
mov rdx, qword [rsp + 0x38]
add rdx, 0xe0
lea rcx, [rsp + 0x150]
call fcn.140002860
mov rdx, rax
lea rcx, [rsp + 0x170]
call fcn.140010ea0
nop
xor edx, edx
lea r8d, [rdx + 0xa]
mov rcx, rax
call fcn.14000ca30
mov dword [0x14008760c], eax
lea rcx, [rsp + 0x170]
call fcn.140001cd0
mov dword [rsp + 0x68], 0xb1b1352
mov word [rsp + 0x6c], 0x100
lea rdx, [rsp + 0x150]
lea rcx, [rsp + 0x68]
call fcn.140005070
mov rdx, rax
lea rcx, [0x140087808]
call fcn.140004eb0
lea rcx, [rsp + 0x150]
call fcn.140001cd0
mov dword [0x140087788], 0x369f
mov dword [0x140087790], 0x2c5aa
movdqa xmm0, xmmword [0x14006ae60]
movdqu xmmword [rsp + 0x1f0], xmm0
movdqa xmm1, xmmword [0x14006ae70]
movdqu xmmword [rsp + 0x200], xmm1
movdqa xmm0, xmmword [0x14006adf0]
movdqu xmmword [rsp + 0x210], xmm0
movdqa xmm1, xmmword [0x14006ae20]
movdqu xmmword [rsp + 0x220], xmm1
movdqa xmm0, xmmword [0x14006adc0]
movdqu xmmword [rsp + 0x230], xmm0
movdqa xmm1, xmmword [0x14006ad90]
movdqu xmmword [rsp + 0x240], xmm1
movdqa xmm0, xmmword [0x14006ada0]
movdqu xmmword [rsp + 0x250], xmm0
mov dword [rsp + 0x260], 0x8e9a8ca8
mov word [rsp + 0x264], 0x100
lea rdx, [rsp + 0x150]
lea rcx, [rsp + 0x1f0]
call fcn.1400050f0
mov rdx, rax
lea rcx, [0x140087828]
call fcn.140004eb0
lea rcx, [rsp + 0x150]
call fcn.140001cd0
mov byte [0x140087610], 1
mov dword [rsp + 0x68], 0x1004835
lea rdx, [rsp + 0x150]
lea rcx, [rsp + 0x68]
call fcn.140005030
mov rdx, rax
lea rcx, [0x140087618]
call fcn.140004eb0
lea rcx, [rsp + 0x150]
call fcn.140001cd0
movdqa xmm0, xmmword [0x14006aea0]
movdqu xmmword [rsp + 0x70], xmm0
mov dword [rsp + 0x80], 0xe3fbebff
mov dword [rsp + 0x84], 0x100e8fc
mov rcx, rdi
nop dword [rax]
nop dword [rax + rax]
lea eax, [rcx + 0x7c]
xor byte [rsp + rcx + 0x70], al
inc rcx
cmp rcx, 0x16
jb 0x140008040
mov byte [rsp + 0x87], 0
lea r9, [rsp + 0x30]
lea r8, [rsp + 0x86]
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0x90]
call fcn.140003710
lea rdx, [rsp + 0x90]
lea rcx, [0x140087660]
call fcn.140004eb0
lea rcx, [rsp + 0x90]
call fcn.140001cd0
inc dword [0x140087768]
jmp 0x1400080f0
cmp dword [0x140087768], 4
je 0x1400080f0
mov byte [0x140087611], 1
mov byte [0x1400877a1], 1
mov rcx, qword [rsp + 0x38]
test rcx, rcx
je 0x1400080eb
lea r8, [rsp + 0x38]
mov rdx, qword [rsp + 0x40]
call fcn.140003a60
mov r8, qword [rsp + 0x48]
mov rdx, qword [rsp + 0x38]
sub r8, rdx
sar r8, 5
lea rcx, [rsp + 0x38]
call fcn.14000a610
jmp 0x140008850
cmp byte [rsp + 0x31], 0
je 0x1400087a4
mov rdx, qword [rsp + 0x38]
add rdx, 0x20
lea rcx, [rsp + 0x150]
call fcn.140002860
mov rdx, rax
lea rcx, [rsp + 0x170]
call fcn.140010ea0
nop
cmp qword [rax + 0x18], 0x10
jb 0x14000812c
mov rax, qword [rax]
mov qword [rsp + 0x90], rdi
mov qword [rsp + 0xa0], rdi
mov qword [rsp + 0xa8], rdi
mov r8, r13
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140008150
mov rdx, rax
lea rcx, [rsp + 0x90]
call fcn.1400025a0
nop
lea rcx, [rsp + 0x170]
call fcn.140001cd0
lea rcx, [rsp + 0x90]
mov rbx, qword [rsp + 0x90]
mov r14, qword [rsp + 0xa8]
cmp r14, 0x10
cmovae rcx, rbx
mov r8, qword [rsp + 0xa0]
cmp r8, 8
jne 0x14000870f
lea rdx, str.Req_IDNF
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x14000870f
xor r8d, r8d
lea rdx, [0x14006ace3]
lea rcx, [0x1400875e8]
call fcn.140003080
mov rdx, qword [rsp + 0x38]
add rdx, 0x40
lea rcx, [rsp + 0xf0]
call fcn.140002860
mov rdx, rax
lea rcx, [rsp + 0xd0]
call fcn.140010ea0
nop
xor edx, edx
lea r8d, [rdx + 0xa]
mov rcx, rax
call fcn.14000ca30
mov dword [0x1400874f0], eax
lea rcx, [rsp + 0xd0]
call fcn.140001cd0
mov rdx, qword [rsp + 0x38]
add rdx, 0x60
lea rcx, [rsp + 0x130]
call fcn.140002860
mov rdx, rax
lea rcx, [rsp + 0x190]
call fcn.140010ea0
nop
cmp qword [rax + 0x18], 0x10
jb 0x14000824d
mov rax, qword [rax]
mov r8, r13
inc r8
cmp byte [rax + r8], 0
jne 0x140008250
mov rdx, rax
lea rcx, [0x140087538]
call fcn.140003080
nop
lea rcx, [rsp + 0x190]
call fcn.140001cd0
mov rdx, qword [rsp + 0x38]
sub rdx, 0xffffffffffffff80
lea rcx, [rsp + 0xf0]
call fcn.140002860
mov rdx, rax
lea rcx, [rsp + 0x1d0]
call fcn.140010ea0
nop
xor edx, edx
lea r8d, [rdx + 0xa]
mov rcx, rax
call fcn.14000ca30
mov edx, eax
lea rcx, [rsp + 0xd0]
call fcn.14000cb90
mov rdx, rax
lea rcx, [0x140087578]
call fcn.140004eb0
lea rcx, [rsp + 0xd0]
call fcn.140001cd0
nop
lea rcx, [rsp + 0x1d0]
call fcn.140001cd0
mov rdx, qword [rsp + 0x38]
add rdx, 0xa0
lea rcx, [rsp + 0x130]
call fcn.140002860
mov rdx, rax
lea rcx, [rsp + 0x190]
call fcn.140010ea0
nop
cmp qword [rax + 0x18], 0x10
jb 0x140008319
mov rax, qword [rax]
mov r8, r13
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140008320
mov rdx, rax
lea rcx, [0x140087558]
call fcn.140003080
nop
lea rcx, [rsp + 0x190]
call fcn.140001cd0
mov rdx, qword [rsp + 0x38]
add rdx, 0xc0
lea rcx, [rsp + 0xf0]
call fcn.140002860
mov rdx, rax
lea rcx, [rsp + 0xd0]
call fcn.140010ea0
nop
cmp qword [rax + 0x18], 0x10
jb 0x14000837b
mov rax, qword [rax]
mov r8, r13
nop
inc r8
cmp byte [rax + r8], 0
jne 0x140008380
mov rdx, rax
lea rcx, [0x140087518]
call fcn.140003080
nop
lea rcx, [rsp + 0xd0]
call fcn.140001cd0
mov rdx, qword [rsp + 0x38]
cmp qword [rdx + 0xf0], 0
je 0x140008446
lea rax, [rsp + 0xf0]
mov qword [rsp + 0x70], rax
mov word [rsp + 0x68], 0
mov byte [rsp + 0x6a], 1
lea rdx, [rsp + 0xf0]
lea rcx, [rsp + 0x68]
call fcn.140004ff0
mov rsi, rax
mov rdx, qword [rsp + 0x38]
add rdx, 0xe0
lea rcx, [rsp + 0xd0]
call fcn.140002860
mov rdx, rax
lea rcx, [rsp + 0x130]
call fcn.140010ea0
nop
mov r8, rsi
mov rdx, rax
lea rcx, [rsp + 0xb0]
call fcn.14000c6f0
mov rdx, rax
lea rcx, [0x140087598]
call fcn.140004f40
lea rcx, [rsp + 0xb0]
call fcn.140008a50
mov rdx, qword [rsp + 0x38]
cmp qword [rdx + 0x110], 0
je 0x1400084ec
lea rax, [rsp + 0xf0]
mov qword [rsp + 0x70], rax
mov word [rsp + 0x68], 0
mov byte [rsp + 0x6a], 1
lea rdx, [rsp + 0xf0]
lea rcx, [rsp + 0x68]
call fcn.140004ff0
mov rsi, rax
mov rdx, qword [rsp + 0x38]
add rdx, 0x100
lea rcx, [rsp + 0xd0]
call fcn.140002860
mov rdx, rax
lea rcx, [rsp + 0x130]
call fcn.140010ea0
nop
mov r8, rsi
mov rdx, rax
lea rcx, [rsp + 0xb0]
call fcn.14000c6f0
mov rdx, rax
lea rcx, [0x1400875b0]
call fcn.140004f40
lea rcx, [rsp + 0xb0]
call fcn.140008a50
mov dword [0x140087608], 0xf018b3
mov rdx, qword [rsp + 0x38]
jmp 0x1400084f2
mov dword [0x140087608], edi
add rdx, 0x160
lea rcx, [rsp + 0xd0]
call fcn.140002860
mov rdx, rax
lea rcx, [rsp + 0xf0]
call fcn.140010ea0
nop
xor edx, edx
lea r8d, [rdx + 0xa]
mov rcx, rax
call fcn.14000ca30
mov dword [0x14008760c], eax
mov r8, qword [rsp + 0x108]
cmp r8, 0x10
jb 0x140008551
inc r8
mov rdx, qword [rsp + 0xf0]
lea rcx, [rsp + 0xf0]
call fcn.1400031f0
mov rax, qword [rsp + 0x38]
lea rdx, [rax + 0x180]
cmp qword [rdx + 0x10], 0
je 0x1400085bf
lea rcx, [rsp + 0xf0]
call fcn.140002860
mov rdx, rax
lea rcx, [rsp + 0xd0]
call fcn.140010ea0
nop
cmp qword [rax + 0x18], 0x10
jb 0x140008590
mov rax, qword [rax]
nop dword [rax]
inc r13
cmp byte [rax + r13], 0
jne 0x140008590
mov r8, r13
mov rdx, rax
lea rcx, [0x1400875e8]
call fcn.140003080
nop
lea rcx, [rsp + 0xd0]
call fcn.140001cd0
mov rax, qword [rsp + 0x38]
cmp qword [rax + 0x1b0], 0
je 0x14000865d
lea rax, [rsp + 0xf0]
mov qword [rsp + 0x70], rax
mov word [rsp + 0x68], 0
mov byte [rsp + 0x6a], 1
lea rdx, [rsp + 0xf0]
lea rcx, [rsp + 0x68]
call fcn.140004ff0
mov rsi, rax
mov rdx, qword [rsp + 0x38]
add rdx, 0x1a0
lea rcx, [rsp + 0xd0]
call fcn.140002860
mov rdx, rax
lea rcx, [rsp + 0x130]
call fcn.140010ea0
nop
mov r8, rsi
mov rdx, rax
lea rcx, [rsp + 0xb0]
call fcn.14000c6f0
mov rdx, rax
lea rcx, [0x1400875c8]
call fcn.140004f40
lea rcx, [rsp + 0xb0]
call fcn.140008a50
mov byte [0x1400875e0], 1
jmp 0x140008664
mov byte [0x1400875e0], 0
mov byte [0x140087610], 1
mov dword [rsp + 0x68], 0x1a0c123f
mov word [rsp + 0x6c], 0x100
mov rcx, rdi
nop dword [rax]
lea eax, [rcx + 0x7c]
xor byte [rsp + rcx + 0x68], al
inc rcx
cmp rcx, 4
jb 0x140008680
mov byte [rsp + 0x6d], 0
lea r9, [rsp + 0x30]
lea r8, [rsp + 0x6c]
lea rdx, [rsp + 0x68]
lea rcx, [rsp + 0xf0]
call fcn.140003710
lea rdx, [rsp + 0xf0]
lea rcx, [0x140087618]
call fcn.140004eb0
lea rcx, [rsp + 0xf0]
call fcn.140001cd0
nop
cmp r14, 0x10
jb 0x1400087a4
lea rdx, [r14 + 1]
mov rax, rbx
cmp rdx, 0x1000
jb 0x140008702
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140008748
mov rcx, rbx
call fcn.1400668bc
jmp 0x1400087a4
mov byte [0x140087611], 1
mov byte [0x1400877a1], 1
cmp r14, 0x10
jb 0x140008758
lea rdx, [r14 + 1]
mov rax, rbx
cmp rdx, 0x1000
jb 0x14000874f
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000874f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rbx
call fcn.1400668bc
nop
mov rbx, qword [rsp + 0x38]
test rbx, rbx
je 0x14000879f
mov rdi, qword [rsp + 0x40]
cmp rbx, rdi
je 0x140008786
nop dword [rax]
mov rcx, rbx
call fcn.140001cd0
add rbx, 0x20
cmp rbx, rdi
jne 0x140008770
mov rbx, qword [rsp + 0x38]
mov r8, qword [rsp + 0x48]
sub r8, rbx
sar r8, 5
mov rdx, rbx
lea rcx, [rsp + 0x38]
call fcn.14000a610
jmp 0x140008850
mov rbx, qword [rsp + 0x38]
test rbx, rbx
je 0x140008850
mov rsi, qword [rsp + 0x40]
cmp rbx, rsi
je 0x140008813
nop dword [rax]
mov rdx, qword [rbx + 0x18]
cmp rdx, 0x10
jb 0x1400087f6
mov rcx, qword [rbx]
inc rdx
cmp rdx, 0x1000
jb 0x1400087f1
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140008840
mov rcx, r8
call fcn.1400668bc
mov qword [rbx + 0x10], rdi
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], 0
add rbx, 0x20
cmp rbx, rsi
jne 0x1400087c0
mov rbx, qword [rsp + 0x38]
mov rdx, qword [rsp + 0x48]
sub rdx, rbx
and rdx, 0xffffffffffffffe0
mov rax, rbx
cmp rdx, 0x1000
jb 0x140008847
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140008847
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rbx
call fcn.1400668bc
nop
mov rcx, qword [rsp + 0x290]
xor rcx, rsp
call fcn.140066950
lea r11, [rsp + 0x2a0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
mov rcx, qword [rsp + 0x38]
test rcx, rcx
je 0x1400088d4
lea r8, [rsp + 0x38]
mov rdx, qword [rsp + 0x40]
call fcn.140003a60
mov rdx, qword [rsp + 0x48]
mov rcx, qword [rsp + 0x38]
sub rdx, rcx
and rdx, 0xffffffffffffffe0
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400088cf
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400088cf
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400668bc
jmp 0x140008850
cmp ecx, 0xd1f
je 0x140006c0d
cmp ecx, 0x19b4
je 0x140008964
cmp ecx, 0x2719
je 0x140008919
mov byte [0x140087610], 0
mov rcx, qword [rsp + 0x38]
add rcx, 0x20
cmp qword [rcx + 0x18], 0x10
jb 0x14000890f
mov rcx, qword [rcx]
call fcn.14000ff30
jmp 0x140006c25
mov byte [0x140087610], 0
mov dword [rsp + 0x70], 0x1a0a1335
mov dword [rsp + 0x74], 0xefe3eff2
mov dword [rsp + 0x78], 0xf5f4c0a4
mov dword [rsp + 0x7c], 0x100fbe7
lea eax, [rdi + 0x7c]
xor byte [rsp + rdi + 0x70], al
inc rdi
cmp rdi, 0xe
jb 0x140008940
mov byte [rsp + 0x7f], 0
lea rcx, [rsp + 0x70]
call fcn.14000ff30
jmp 0x140006c25
mov word [0x140087610], 0x100
jmp 0x140006c2c
lea rcx, str.invalid_stoi_argument
call sub.MSVCP140.dll_void___cdecl_std::_Xinvalid_argument_char_const____ptr64_
lea rcx, str.stoi_argument_out_of_range
call sub.MSVCP140.dll_void___cdecl_std::_Xout_of_range_char_const____ptr64_
call fcn.140001ab0
nop
call fcn.140001ab0
int3