Function at 0x140057620
Capabilities:
Access peb ldr_data
Authenticate hmac
Check for debugger via api
Check for peb beingdebugged flag
Check os version
Contain obfuscated stackstrings
Create process on windows
Delete file
Encode data using base64
Encode data using xor
Encrypt data using speck
Enumerate gui resources
Get number of processors
Hash data using fnv
Hide thread from debugger
Parse pe header
Resolve function by parsing pe exports

Disassembly:
push rbp
push rbx
push rdi
lea rbp, [rsp - 0x1200]
mov eax, 0x1300
call fcn.1400d4660
sub rsp, rax
call fcn.14004ccd0
call fcn.140042e00
cmp byte [0x14017640d], 0
je 0x140057870
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x1400576e7
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x1400576e7
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0x811c9dc5
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x1400576e2
nop
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x1400576c0
cmp r8d, 0xcded1a85
je 0x1400576ec
test r9d, r9d
jne 0x1400576a0
mov rax, qword [rax]
jmp 0x140057670
mov eax, dword [rdi + 0x24]
mov ecx, dword [rdi + 0x1c]
add rax, r10
add rcx, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
xor ecx, ecx
add rdx, r10
call rdx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140057797
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140057797
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0x811c9dc5
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140057792
nop
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x140057770
cmp r8d, 0xe80fd3a
je 0x14005779c
test r9d, r9d
jne 0x140057750
mov rax, qword [rax]
jmp 0x140057720
mov eax, dword [rdi + 0x24]
mov ecx, dword [rdi + 0x1c]
add rax, r10
add rcx, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
xor ecx, ecx
add rdx, r10
call rdx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140057847
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140057847
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0x811c9dc5
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140057842
nop
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x140057820
cmp r8d, 0xa52bcaf9
je 0x14005784c
test r9d, r9d
jne 0x140057800
mov rax, qword [rax]
jmp 0x1400577d0
mov eax, dword [rdi + 0x24]
mov ecx, dword [rdi + 0x1c]
add rax, r10
add rcx, r10
movzx eax, word [rax + r9*2]
mov ecx, dword [rcx + rax*4]
add rcx, r10
call rcx
mov dword [0], 0xdead
call fcn.140051150
test al, al
je 0x140057a90
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140057907
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140057907
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0x811c9dc5
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140057902
nop
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x1400578e0
cmp r8d, 0xcded1a85
je 0x14005790c
test r9d, r9d
jne 0x1400578c0
mov rax, qword [rax]
jmp 0x140057890
mov eax, dword [rdi + 0x24]
mov ecx, dword [rdi + 0x1c]
add rax, r10
add rcx, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
xor ecx, ecx
add rdx, r10
call rdx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x1400579b7
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x1400579b7
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0x811c9dc5
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x1400579b2
nop
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x140057990
cmp r8d, 0xe80fd3a
je 0x1400579bc
test r9d, r9d
jne 0x140057970
mov rax, qword [rax]
jmp 0x140057940
mov eax, dword [rdi + 0x24]
mov ecx, dword [rdi + 0x1c]
add rax, r10
add rcx, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
xor ecx, ecx
add rdx, r10
call rdx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140057a67
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140057a67
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0x811c9dc5
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140057a62
nop
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x140057a40
cmp r8d, 0xa52bcaf9
je 0x140057a6c
test r9d, r9d
jne 0x140057a20
mov rax, qword [rax]
jmp 0x1400579f0
mov eax, dword [rdi + 0x24]
mov ecx, dword [rdi + 0x1c]
add rax, r10
add rcx, r10
movzx eax, word [rax + r9*2]
mov ecx, dword [rcx + rax*4]
add rcx, r10
call rcx
mov dword [0], 0xdead
mov qword [rsp + 0x1320], rsi
lea rdx, [0x140057600]
mov qword [rsp + 0x1328], r12
lea rcx, [rbp + 0x4c0]
mov qword [rsp + 0x1330], r13
mov qword [rsp + 0x12f8], r14
mov qword [rsp + 0x12f0], r15
movaps xmmword [rsp + 0x12e0], xmm6
movaps xmmword [rsp + 0x12d0], xmm7
movaps xmmword [rsp + 0x12c0], xmm8
movaps xmmword [rsp + 0x12b0], xmm9
movaps xmmword [rsp + 0x12a0], xmm10
movaps xmmword [rsp + 0x1290], xmm11
movaps xmmword [rsp + 0x1280], xmm12
movaps xmmword [rsp + 0x1270], xmm13
movaps xmmword [rsp + 0x1260], xmm14
movaps xmmword [rsp + 0x1250], xmm15
call fcn.140065350
lea rcx, [rbp + 0x4c0]
call fcn.14004daa0
cmp dword [rbp + 0x4c8], 0
jne 0x1400615c4
xorps xmm0, xmm0
lea rcx, [0x1400513e0]
xor eax, eax
mov r13d, 1
movups xmmword [rbp + 0x7b0], xmm0
xor esi, esi
xor edx, edx
movups xmmword [rbp + 0x7e0], xmm0
mov dword [rbp + 0x7b0], WSASetLastError
movups xmmword [rbp + 0x7f0], xmm0
mov dword [rbp + 0x7ec], r13d
mov word [rbp + 0x7f0], si
movups xmmword [rbp + 0x7c0], xmm0
mov qword [rbp + 0x810], rax
movups xmmword [rbp + 0x7d0], xmm0
movups xmmword [rbp + 0x800], xmm0
call qword [sym.imp.USER32.dll_EnumWindows]
call fcn.14004ccd0
mov byte [rbp - 0x63], reloc.WLDAP32.dll_Ordinal_30
lea r12d, [r13 + 0xe]
mov byte [rbp - 0x62], 0x40
movabs r14, 0x76ff865cc5370036
mov byte [rbp - 0x61], 0x5d
mov r10, r14
mov byte [rbp - 0x60], 0x41
mov r9d, esi
mov byte [rbp - 0x5f], 0x49
mov byte [rbp - 0x5e], gethostname
movzx eax, byte [rbp - 0x63]
lea rax, [rbp - 0x63]
sub r10, rax
nop dword [rax]
mov rcx, r9
lea rdx, [rbp - 0x63]
add rdx, r9
and ecx, r12d
cmp rcx, r12
mov rax, r14
cmovae rcx, r12
movsx r8, byte [rdx]
add dl, r10b
shl cl, 2
shr rax, cl
and al, r12b
xor al, dl
xor al, r8b
mov byte [rbp + r9 - 0x63], al
inc r9
cmp r9, 6
jb 0x140057be0
xor edx, edx
lea rcx, [rbp - 0x63]
call fcn.140051190
test al, al
je 0x140057e40
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140057cb7
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140057cb7
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0x811c9dc5
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rbx]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140057cb2
nop dword [rax]
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x140057c90
cmp r8d, 0xcded1a85
je 0x140057cbc
test r9d, r9d
jne 0x140057c70
mov rax, qword [rax]
jmp 0x140057c40
mov eax, dword [rdi + 0x24]
mov ecx, dword [rdi + 0x1c]
add rax, r10
add rcx, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
xor ecx, ecx
add rdx, r10
call rdx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140057d67
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140057d67
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0x811c9dc5
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rbx]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140057d62
nop dword [rax]
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x140057d40
cmp r8d, 0xe80fd3a
je 0x140057d6c
test r9d, r9d
jne 0x140057d20
mov rax, qword [rax]
jmp 0x140057cf0
mov eax, dword [rdi + 0x24]
mov ecx, dword [rdi + 0x1c]
add rax, r10
add rcx, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
xor ecx, ecx
add rdx, r10
call rdx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140057e17
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140057e17
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0x811c9dc5
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rbx]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140057e12
nop dword [rax]
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x140057df0
cmp r8d, 0xa52bcaf9
je 0x140057e1c
test r9d, r9d
jne 0x140057dd0
mov rax, qword [rax]
jmp 0x140057da0
mov eax, dword [rdi + 0x24]
mov ecx, dword [rdi + 0x1c]
add rax, r10
add rcx, r10
movzx eax, word [rax + r9*2]
mov ecx, dword [rcx + rax*4]
add rcx, r10
call rcx
mov dword [0], 0xdead
cmp byte [0x14017640d], sil
je 0x140058060
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140057ed7
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140057ed7
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0x811c9dc5
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rbx]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140057ed2
nop dword [rax]
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x140057eb0
cmp r8d, 0xcded1a85
je 0x140057edc
test r9d, r9d
jne 0x140057e90
mov rax, qword [rax]
jmp 0x140057e60
mov eax, dword [rdi + 0x24]
mov ecx, dword [rdi + 0x1c]
add rax, r10
add rcx, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
xor ecx, ecx
add rdx, r10
call rdx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140057f87
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140057f87
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0x811c9dc5
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rbx]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140057f82
nop dword [rax]
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x140057f60
cmp r8d, 0xe80fd3a
je 0x140057f8c
test r9d, r9d
jne 0x140057f40
mov rax, qword [rax]
jmp 0x140057f10
mov eax, dword [rdi + 0x24]
mov ecx, dword [rdi + 0x1c]
add rax, r10
add rcx, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
xor ecx, ecx
add rdx, r10
call rdx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140058037
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140058037
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0x811c9dc5
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rbx]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140058032
nop dword [rax]
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x140058010
cmp r8d, 0xa52bcaf9
je 0x14005803c
test r9d, r9d
jne 0x140057ff0
mov rax, qword [rax]
jmp 0x140057fc0
mov eax, dword [rdi + 0x24]
mov ecx, dword [rdi + 0x1c]
add rax, r10
add rcx, r10
movzx eax, word [rax + r9*2]
mov ecx, dword [rcx + rax*4]
add rcx, r10
call rcx
mov dword [0], 0xdead
lea rdx, [0x14006eb80]
lea rcx, [rbp + 0x4d0]
call fcn.140065350
lea rcx, [rbp + 0x4d0]
call fcn.14004daa0
cmp dword [rbp + 0x4d8], esi
jne 0x1400615c4
lea rdx, [0x140057600]
lea rcx, [rbp + 0x4e0]
call fcn.140065350
lea rcx, [rbp + 0x4e0]
call fcn.14004daa0
cmp dword [rbp + 0x4e8], esi
jne 0x1400615c4
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
xor r9d, r9d
xor r8d, r8d
mov rcx, rax
lea edx, [r9 + 0x11]
call qword [sym.imp.ntdll.dll_NtSetInformationThread]
call qword [sym.imp.KERNEL32.dll_IsDebuggerPresent]
test eax, eax
je 0x1400580e4
mov dword [0], 0xdead
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
lea rdx, [rbp + 0x2e8]
call qword [sym.imp.KERNEL32.dll_CheckRemoteDebuggerPresent]
cmp dword [rbp + 0x2e8], esi
je 0x14005810d
mov dword [0], 0xdead
mov rax, qword gs:[0x60]
cmp byte [rax + 2], sil
je 0x140058127
mov dword [0], 0xdead
mov rax, qword gs:[0x60]
test byte [rax + 0x68], 0x70
je 0x140058141
mov dword [0], 0xdead
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov r9d, 8
mov qword [rsp + 0x20], rsi
mov rcx, rax
lea r8, [rbp + 0x438]
lea edx, [r9 - 1]
call qword [sym.imp.ntdll.dll_NtQueryInformationProcess]
cmp qword [rbp + 0x438], rsi
je 0x14005817a
mov dword [0], 0xdead
mov dword [rbp + 0x2cc], esi
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov r9d, 4
mov qword [rsp + 0x20], rsi
mov rcx, rax
lea r8, [rbp + 0x2cc]
lea edx, [r9 + 0x1b]
call qword [sym.imp.ntdll.dll_NtQueryInformationProcess]
cmp dword [rbp + 0x2cc], esi
jne 0x1400581b8
mov dword [0], 0xdead
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov r9d, 8
mov qword [rsp + 0x20], rsi
mov rcx, rax
lea r8, [rbp + 0x440]
lea edx, [r9 + 0x16]
call qword [sym.imp.ntdll.dll_NtQueryInformationProcess]
cmp qword [rbp + 0x440], rsi
je 0x1400581f1
mov dword [0], 0xdead
call fcn.140053210
test eax, eax
je 0x140058205
mov dword [0], 0xdead
mov rax, qword gs:[0x60]
test byte [rax + 0x68], 0x70
je 0x14005821f
mov dword [0], 0xdead
movzx r8d, r13b
xor edx, edx
xor ecx, ecx
call qword [sym.imp.ntdll.dll_NtSetDebugFilterState]
test eax, eax
jne 0x14005823c
mov dword [0], 0xdead
call fcn.140053360
test eax, eax
je 0x140058250
mov dword [0], 0xdead
call fcn.1400533c0
test eax, eax
je 0x140058264
mov dword [0], 0xdead
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
xor r9d, r9d
xor r8d, r8d
mov rcx, rax
lea edx, [r9 + 0x11]
call qword [sym.imp.ntdll.dll_NtSetInformationThread]
call fcn.140053230
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
xor r9d, r9d
xor r8d, r8d
mov rcx, rax
lea edx, [r9 + 0x11]
call qword [sym.imp.ntdll.dll_NtSetInformationThread]
call fcn.14004f320
xor edx, edx
lea rcx, [0x1400513e0]
call qword [sym.imp.USER32.dll_EnumWindows]
cmp byte [0x14017640d], sil
je 0x1400584d0
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140058347
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140058347
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0x811c9dc5
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rbx]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140058342
nop dword [rax]
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x140058320
cmp r8d, 0xcded1a85
je 0x14005834c
test r9d, r9d
jne 0x140058300
mov rax, qword [rax]
jmp 0x1400582d0
mov eax, dword [rdi + 0x24]
mov ecx, dword [rdi + 0x1c]
add rax, r10
add rcx, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
xor ecx, ecx
add rdx, r10
call rdx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x1400583f7
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x1400583f7
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0x811c9dc5
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rbx]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x1400583f2
nop dword [rax]
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x1400583d0
cmp r8d, 0xe80fd3a
je 0x1400583fc
test r9d, r9d
jne 0x1400583b0
mov rax, qword [rax]
jmp 0x140058380
mov eax, dword [rdi + 0x24]
mov ecx, dword [rdi + 0x1c]
add rax, r10
add rcx, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
xor ecx, ecx
add rdx, r10
call rdx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x1400584a7
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x1400584a7
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0x811c9dc5
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rbx]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x1400584a2
nop dword [rax]
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x140058480
cmp r8d, 0xa52bcaf9
je 0x1400584ac
test r9d, r9d
jne 0x140058460
mov rax, qword [rax]
jmp 0x140058430
mov eax, dword [rdi + 0x24]
mov ecx, dword [rdi + 0x1c]
add rax, r10
add rcx, r10
movzx eax, word [rax + r9*2]
mov ecx, dword [rcx + rax*4]
add rcx, r10
call rcx
mov dword [0], 0xdead
call fcn.140051150
test al, al
je 0x1400586f0
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140058567
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140058567
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0x811c9dc5
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140058562
nop
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x140058540
cmp r8d, 0xcded1a85
je 0x14005856c
test r9d, r9d
jne 0x140058520
mov rax, qword [rax]
jmp 0x1400584f0
mov eax, dword [rdi + 0x24]
mov ecx, dword [rdi + 0x1c]
add rax, r10
add rcx, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
xor ecx, ecx
add rdx, r10
call rdx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140058617
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140058617
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0x811c9dc5
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140058612
nop
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x1400585f0
cmp r8d, 0xe80fd3a
je 0x14005861c
test r9d, r9d
jne 0x1400585d0
mov rax, qword [rax]
jmp 0x1400585a0
mov eax, dword [rdi + 0x24]
mov ecx, dword [rdi + 0x1c]
add rax, r10
add rcx, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
xor ecx, ecx
add rdx, r10
call rdx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x1400586c7
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x1400586c7
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0x811c9dc5
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x1400586c2
nop
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x1400586a0
cmp r8d, 0xa52bcaf9
je 0x1400586cc
test r9d, r9d
jne 0x140058680
mov rax, qword [rax]
jmp 0x140058650
mov eax, dword [rdi + 0x24]
mov ecx, dword [rdi + 0x1c]
add rax, r10
add rcx, r10
movzx eax, word [rax + r9*2]
mov ecx, dword [rcx + rax*4]
add rcx, r10
call rcx
mov dword [0], 0xdead
xor r15b, r15b
lea rcx, [rbp + 0x9a0]
mov dword [rbp + 0x2c8], r15d
call fcn.140064b50
lea rdx, [0x140056a40]
lea rcx, [rbp + 0x4f0]
call fcn.140065350
lea rcx, [rbp + 0x4f0]
call fcn.14004daa0
cmp dword [rbp + 0x4f8], esi
jne 0x1400615c4
lea rdx, [0x14004f430]
lea rcx, [rbp + 0x500]
call fcn.140065350
lea rcx, [rbp + 0x500]
call fcn.14004daa0
cmp dword [rbp + 0x508], esi
jne 0x1400615c4
mov byte [rbp - 0x69], reloc.WLDAP32.dll_Ordinal_30
mov r10, r14
mov byte [rbp - 0x68], 0x40
mov r9, rsi
mov byte [rbp - 0x67], 0x5d
mov byte [rbp - 0x66], 0x41
mov byte [rbp - 0x65], 0x49
mov byte [rbp - 0x64], gethostname
movzx eax, byte [rbp - 0x69]
lea rax, [rbp - 0x69]
sub r10, rax
nop word [rax + rax]
mov rcx, r9
lea rdx, [rbp - 0x69]
add rdx, r9
and ecx, r12d
cmp rcx, r12
mov rax, r14
cmovae rcx, r12
movsx r8, byte [rdx]
add dl, r10b
shl cl, 2
shr rax, cl
and al, r12b
xor al, dl
xor al, r8b
mov byte [rbp + r9 - 0x69], al
inc r9
cmp r9, 6
jb 0x140058790
xor edx, edx
lea rcx, [rbp - 0x69]
call fcn.140051190
test al, al
je 0x1400589f0
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140058867
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140058867
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0x811c9dc5
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140058862
nop
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x140058840
cmp r8d, 0xcded1a85
je 0x14005886c
test r9d, r9d
jne 0x140058820
mov rax, qword [rax]
jmp 0x1400587f0
mov eax, dword [rdi + 0x24]
mov ecx, dword [rdi + 0x1c]
add rax, r10
add rcx, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
xor ecx, ecx
add rdx, r10
call rdx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140058917
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140058917
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0x811c9dc5
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140058912
nop
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x1400588f0
cmp r8d, 0xe80fd3a
je 0x14005891c
test r9d, r9d
jne 0x1400588d0
mov rax, qword [rax]
jmp 0x1400588a0
mov eax, dword [rdi + 0x24]
mov ecx, dword [rdi + 0x1c]
add rax, r10
add rcx, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
xor ecx, ecx
add rdx, r10
call rdx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x1400589c7
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x1400589c7
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0x811c9dc5
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x1400589c2
nop
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x1400589a0
cmp r8d, 0xa52bcaf9
je 0x1400589cc
test r9d, r9d
jne 0x140058980
mov rax, qword [rax]
jmp 0x140058950
mov eax, dword [rdi + 0x24]
mov ecx, dword [rdi + 0x1c]
add rax, r10
add rcx, r10
movzx eax, word [rax + r9*2]
mov ecx, dword [rcx + rax*4]
add rcx, r10
call rcx
mov dword [0], 0xdead
cmp byte [0x14017640d], sil
je 0x140058c10
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140058a87
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140058a87
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0x811c9dc5
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140058a82
nop
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x140058a60
cmp r8d, 0xcded1a85
je 0x140058a8c
test r9d, r9d
jne 0x140058a40
mov rax, qword [rax]
jmp 0x140058a10
mov eax, dword [rdi + 0x24]
mov ecx, dword [rdi + 0x1c]
add rax, r10
add rcx, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
xor ecx, ecx
add rdx, r10
call rdx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140058b37
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140058b37
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0x811c9dc5
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140058b32
nop
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x140058b10
cmp r8d, 0xe80fd3a
je 0x140058b3c
test r9d, r9d
jne 0x140058af0
mov rax, qword [rax]
jmp 0x140058ac0
mov eax, dword [rdi + 0x24]
mov ecx, dword [rdi + 0x1c]
add rax, r10
add rcx, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
xor ecx, ecx
add rdx, r10
call rdx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140058be7
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140058be7
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0x811c9dc5
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rbx]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140058be2
nop dword [rax]
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x140058bc0
cmp r8d, 0xa52bcaf9
je 0x140058bec
test r9d, r9d
jne 0x140058ba0
mov rax, qword [rax]
jmp 0x140058b70
mov eax, dword [rdi + 0x24]
mov ecx, dword [rdi + 0x1c]
add rax, r10
add rcx, r10
movzx eax, word [rax + r9*2]
mov ecx, dword [rcx + rax*4]
add rcx, r10
call rcx
mov dword [0], 0xdead
lea rdx, [0x140057600]
lea rcx, [rbp + 0x510]
call fcn.140065350
lea rcx, [rbp + 0x510]
call fcn.14004daa0
cmp dword [rbp + 0x518], esi
jne 0x1400615c4
xor edx, edx
lea rcx, [0x1400513e0]
call qword [sym.imp.USER32.dll_EnumWindows]
lea rdx, [0x140055660]
lea rcx, [rbp + 0x520]
call fcn.140065350
lea rcx, [rbp + 0x520]
call fcn.14004daa0
cmp dword [rbp + 0x528], esi
jne 0x1400615c4
lea rax, [0x140061870]
mov dword [rbp + 0x450], 0x50
mov edx, 0x7f00
mov qword [rbp + 0x458], rax
xor ecx, ecx
mov dword [rbp + 0x454], 0x40
mov qword [rbp + 0x460], rsi
mov qword [rbp + 0x468], rsi
call qword [sym.imp.USER32.dll_LoadIconA]
mov edx, 0x7f00
xor ecx, ecx
mov qword [rbp + 0x470], rax
call qword [sym.imp.USER32.dll_LoadCursorA]
mov edx, 0x7f00
mov qword [rbp + 0x480], rsi
mov qword [rbp + 0x478], rax
xor ecx, ecx
lea rax, str.Hydro_Hook
mov qword [rbp + 0x488], rax
mov qword [rbp + 0x490], rax
call qword [sym.imp.USER32.dll_LoadIconA]
mov ecx, dword [0x140176550]
mov qword [rbp + 0x498], rax
call fcn.140053bb0
test al, al
je 0x140058f30
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140058da7
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140058da7
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0x811c9dc5
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rbx]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140058da2
nop dword [rax]
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x140058d80
cmp r8d, 0xcded1a85
je 0x140058dac
test r9d, r9d
jne 0x140058d60
mov rax, qword [rax]
jmp 0x140058d30
mov eax, dword [rdi + 0x24]
mov ecx, dword [rdi + 0x1c]
add rax, r10
add rcx, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
xor ecx, ecx
add rdx, r10
call rdx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140058e57
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140058e57
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0x811c9dc5
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140058e52
nop
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x140058e30
cmp r8d, 0xe80fd3a
je 0x140058e5c
test r9d, r9d
jne 0x140058e10
mov rax, qword [rax]
jmp 0x140058de0
mov eax, dword [rdi + 0x24]
mov ecx, dword [rdi + 0x1c]
add rax, r10
add rcx, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
xor ecx, ecx
add rdx, r10
call rdx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140058f07
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140058f07
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0x811c9dc5
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140058f02
nop
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x140058ee0
cmp r8d, 0xa52bcaf9
je 0x140058f0c
test r9d, r9d
jne 0x140058ec0
mov rax, qword [rax]
jmp 0x140058e90
mov eax, dword [rdi + 0x24]
mov ecx, dword [rdi + 0x1c]
add rax, r10
add rcx, r10
movzx eax, word [rax + r9*2]
mov ecx, dword [rcx + rax*4]
add rcx, r10
call rcx
mov dword [0], 0xdead
call fcn.140051150
test al, al
je 0x140059150
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140058fc7
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140058fc7
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0x811c9dc5
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rbx]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140058fc2
nop dword [rax]
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x140058fa0
cmp r8d, 0xcded1a85
je 0x140058fcc
test r9d, r9d
jne 0x140058f80
mov rax, qword [rax]
jmp 0x140058f50
mov eax, dword [rdi + 0x24]
mov ecx, dword [rdi + 0x1c]
add rax, r10
add rcx, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
xor ecx, ecx
add rdx, r10
call rdx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140059077
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140059077
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0x811c9dc5
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rbx]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140059072
nop dword [rax]
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x140059050
cmp r8d, 0xe80fd3a
je 0x14005907c
test r9d, r9d
jne 0x140059030
mov rax, qword [rax]
jmp 0x140059000
mov eax, dword [rdi + 0x24]
mov ecx, dword [rdi + 0x1c]
add rax, r10
add rcx, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
xor ecx, ecx
add rdx, r10
call rdx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140059127
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140059127
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0x811c9dc5
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140059122
nop
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x140059100
cmp r8d, 0xa52bcaf9
je 0x14005912c
test r9d, r9d
jne 0x1400590e0
mov rax, qword [rax]
jmp 0x1400590b0
mov eax, dword [rdi + 0x24]
mov ecx, dword [rdi + 0x1c]
add rax, r10
add rcx, r10
movzx eax, word [rax + r9*2]
mov ecx, dword [rcx + rax*4]
add rcx, r10
call rcx
mov dword [0], 0xdead
lea rcx, [rbp + 0x450]
call qword [sym.imp.USER32.dll_RegisterClassExW]
mov ecx, r13d
call qword [sym.imp.USER32.dll_GetSystemMetrics]
cdq
xor ecx, ecx
sub eax, edx
sar eax, 1
lea ebx, [rax - 0xb0]
call qword [sym.imp.USER32.dll_GetSystemMetrics]
mov ecx, 0xac92
mov r9, rsi
cdq
movabs rdi, 0xd6824b0d7879acf0
sub eax, edx
mov r11d, 0x5310
sar eax, 1
mov edx, 0xac9a
lea r10d, [rax - 0x11f]
mov eax, 0xacb8
mov word [rbp + 0x2d0], ax
mov eax, 0xac87
mov word [rbp + 0x2d2], ax
mov eax, 0xac8b
mov word [rbp + 0x2d4], dx
mov word [rbp + 0x2d6], ax
mov eax, 0xacd2
mov word [rbp + 0x2d8], cx
mov word [rbp + 0x2da], ax
mov eax, 0xacb6
mov word [rbp + 0x2dc], ax
mov eax, 0xac9f
mov word [rbp + 0x2de], ax
mov eax, 0xacf1
mov word [rbp + 0x2e0], dx
mov word [rbp + 0x2e2], cx
mov word [rbp + 0x2e4], ax
movzx eax, word [rbp + 0x2d0]
nop dword [rax]
movzx r8d, word [rbp + r9*2 + 0x2d0]
mov rcx, r9
and ecx, r12d
movzx eax, r9w
cmp rcx, r12
mov rdx, rdi
cmovae rcx, r12
sub ax, r11w
shl cl, 2
shr rdx, cl
and dx, r12w
xor dx, ax
xor dx, r8w
mov word [rbp + r9*2 + 0x2d0], dx
inc r9
cmp r9, 0xb
jb 0x140059220
mov rdx, qword [rbp + 0x490]
lea r8, [rbp + 0x2d0]
mov qword [rsp + 0x58], rsi
mov r9d, 0x80000000
mov qword [rsp + 0x50], rsi
xor ecx, ecx
mov qword [rsp + 0x48], rsi
mov qword [rsp + 0x40], rsi
mov dword [rsp + 0x38], 0x161
mov dword [rsp + 0x30], 0x23f
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], r10d
call qword [sym.imp.USER32.dll_CreateWindowExW]
mov rcx, rax
mov qword [0x140176420], rax
mov edx, 0xffffffec
call qword [sym.imp.USER32.dll_GetWindowLongA]
mov rcx, qword [0x140176420]
mov edx, 0xffffffec
bts eax, 0x13
mov r8d, eax
call qword [sym.imp.USER32.dll_SetWindowLongA]
mov rcx, qword [0x140176420]
mov r9d, 2
mov r8b, 0xff
xor edx, edx
call qword [sym.imp.USER32.dll_SetLayeredWindowAttributes]
movdqa xmm0, xmmword [0x14010e560]
lea rdx, [rbp + 0x5a8]
mov rcx, qword [0x140176420]
movdqu xmmword [rbp + 0x5a8], xmm0
call qword [sym.imp.dwmapi.dll_DwmExtendFrameIntoClientArea]
mov rcx, qword [0x140176420]
lea rdx, [0x140176438]
xorps xmm0, xmm0
movups xmmword [rbp + 0xd48], xmm0
movups xmmword [0x140176438], xmm0
call qword [sym.imp.USER32.dll_GetWindowRect]
mov rcx, qword [0x140176420]
call fcn.1400616c0
test al, al
jne 0x14005936a
call fcn.1400617f0
mov rdx, qword [rbp + 0x468]
mov rcx, qword [rbp + 0x490]
call qword [sym.imp.USER32.dll_UnregisterClassW]
jmp 0x14006152a
mov rcx, qword [0x140176420]
mov edx, 0xa
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, qword [0x140176420]
call qword [sym.imp.USER32.dll_UpdateWindow]
mov qword [rsp + 0x30], 2
lea rcx, str.1.89.3_WIP
mov qword [rsp + 0x28], reloc.WS2_32.dll_sendto
mov edx, 0x37b8
mov r9d, 8
mov qword [rsp + 0x20], reloc.WS2_32.dll_recv
mov r8d, 0x418
call fcn.140015c80
xor ecx, ecx
call fcn.140006a30
mov rsi, qword [0x1401761e0]
test rsi, rsi
jne 0x1400593f5
mov r8d, 0xfc0
lea rdx, str.C:UsersSwabraPicturesHydro_SrcHydra__1_Hydraimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rsi, qword [0x1401761e0]
movss xmm3, dword [0x14010e4cc]
lea r14, [0x14010a398]
mov rcx, qword [rsi + 0x58]
lea rdx, [0x14014e540]
xor ebx, ebx
mov qword [rsp + 0x28], r14
mov r8d, 0x26a20
mov qword [rsp + 0x20], rbx
call fcn.14002d0c0
movss xmm3, dword [0x14010e4dc]
lea rdx, [0x14014e540]
mov rcx, qword [rsi + 0x58]
mov r8d, 0x26a20
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], rbx
call fcn.14002d0c0
movss xmm3, dword [0x14010e4d8]
lea rdx, [0x140120160]
mov rcx, qword [rsi + 0x58]
mov r8d, 0x292c4
mov qword [rsp + 0x28], r14
mov qword [0x1401763f8], rax
mov qword [rsp + 0x20], rbx
call fcn.14002d0c0
movss xmm3, dword [0x14010e4e0]
lea rdx, [0x14014e540]
mov rcx, qword [rsi + 0x58]
mov r8d, 0x26a20
mov qword [rsp + 0x28], r14
mov qword [0x140176578], rax
mov qword [rsp + 0x20], rbx
call fcn.14002d0c0
movss xmm3, dword [0x14010e4c8]
lea rdx, [0x14014e540]
mov rcx, qword [rsi + 0x58]
mov r8d, 0x26a20
mov qword [rsp + 0x28], r14
mov qword [0x140176410], rax
mov qword [rsp + 0x20], rbx
call fcn.14002d0c0
cmp byte [0x14017640d], bl
mov qword [0x140176430], rax
je 0x140059732
mov dword [rbp + 0x2ec], ebx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140059587
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140059587
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0x811c9dc5
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140059582
nop
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x140059560
cmp r8d, 0xcded1a85
je 0x14005958c
test r9d, r9d
jne 0x140059540
mov rax, qword [rax]
jmp 0x140059510
mov eax, dword [rdi + 0x24]
mov ecx, dword [rdi + 0x1c]
add rax, r10
add rcx, r10
movzx eax, word [rax + r9*2]
mov ebx, dword [rcx + rax*4]
lea rcx, [rbp + 0x2ec]
add rbx, r10
call fcn.140063b80
mov ecx, dword [rax]
call rbx
mov dword [rbp + 0x2f0], 0
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140059647
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140059647
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0x811c9dc5
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140059642
nop
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x140059620
cmp r8d, 0xe80fd3a
je 0x14005964c
test r9d, r9d
jne 0x140059600
mov rax, qword [rax]
jmp 0x1400595d0
mov eax, dword [rdi + 0x24]
mov ecx, dword [rdi + 0x1c]
add rax, r10
add rcx, r10
movzx eax, word [rax + r9*2]
mov ebx, dword [rcx + rax*4]
lea rcx, [rbp + 0x2f0]
add rbx, r10
call fcn.140063b80
mov ecx, dword [rax]
call rbx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop dword [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140059707
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140059707
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0x811c9dc5
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140059702
nop
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x1400596e0
cmp r8d, 0xa52bcaf9
je 0x14005970c
test r9d, r9d
jne 0x1400596c0
mov rax, qword [rax]
jmp 0x140059690
mov eax, dword [rdi + 0x24]
mov ecx, dword [rdi + 0x1c]
add rax, r10
add rcx, r10
movzx eax, word [rax + r9*2]
mov ecx, dword [rcx + rax*4]
add rcx, r10
call rcx
xor ebx, ebx
mov dword [0], 0xdead
call fcn.140051150
test al, al
je 0x140059980
mov dword [rbp + 0x2f4], ebx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x1400597d7
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x1400597d7
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0x811c9dc5
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x1400597d2
nop
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x1400597b0
cmp r8d, 0xcded1a85
je 0x1400597dc
test r9d, r9d
jne 0x140059790
mov rax, qword [rax]
jmp 0x140059760
mov eax, dword [rdi + 0x24]
mov ecx, dword [rdi + 0x1c]
add rax, r10
add rcx, r10
movzx eax, word [rax + r9*2]
mov ebx, dword [rcx + rax*4]
lea rcx, [rbp + 0x2f4]
add rbx, r10
call fcn.140063b80
mov ecx, dword [rax]
call rbx
mov dword [rbp + 0x2f8], 0
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140059897
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140059897
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0x811c9dc5
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140059892
nop
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x140059870
cmp r8d, 0xe80fd3a
je 0x14005989c
test r9d, r9d
jne 0x140059850
mov rax, qword [rax]
jmp 0x140059820
mov eax, dword [rdi + 0x24]
mov ecx, dword [rdi + 0x1c]
add rax, r10
add rcx, r10
movzx eax, word [rax + r9*2]
mov ebx, dword [rcx + rax*4]
lea rcx, [rbp + 0x2f8]
add rbx, r10
call fcn.140063b80
mov ecx, dword [rax]
call rbx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop dword [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140059957
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140059957
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0x811c9dc5
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140059952
nop
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x140059930
cmp r8d, 0xa52bcaf9
je 0x14005995c
test r9d, r9d
jne 0x140059910
mov rax, qword [rax]
jmp 0x1400598e0
mov eax, dword [rdi + 0x24]
mov ecx, dword [rdi + 0x1c]
add rax, r10
add rcx, r10
movzx eax, word [rax + r9*2]
mov ecx, dword [rcx + rax*4]
add rcx, r10
call rcx
mov dword [0], 0xdead
movss xmm3, dword [0x14010e4bc]
lea rdx, [0x140120160]
mov rcx, qword [rsi + 0x58]
mov r8d, 0x292c4
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], 0
call fcn.14002d0c0
xor ecx, ecx
call fcn.140028070
mov rcx, qword [0x140176420]
call fcn.14003f7b0
mov rdx, qword [0x1401769d8]
mov rcx, qword [0x1401769d0]
call fcn.14003f4f0
lea rdx, [0x140057600]
mov byte [rsp + 0x60], r13b
lea rcx, [rbp + 0x530]
call fcn.140065350
lea rcx, [rbp + 0x530]
call fcn.14004daa0
cmp dword [rbp + 0x538], 0
jne 0x1400615c4
movzx ebx, byte [rsp + 0x60]
movzx edi, byte [rsp + 0x60]
movss xmm7, dword [0x14010e544]
movss xmm14, dword [0x14010e3fc]
movss xmm15, dword [0x14010e4b8]
movsd xmm8, qword [0x14010e460]
movsd xmm9, qword [0x14010e488]
movss xmm11, dword [0x14010e4f4]
movss xmm12, dword [0x14010e4e4]
movss xmm10, dword [0x14010e510]
movss xmm13, dword [0x14010e50c]
nop dword [rax]
cmp byte [0x14017640d], 0
je 0x140059c82
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov r14d, dword [rcx + r10 + 0x88]
add r14, r10
cmp r14, r10
je 0x140059af7
mov r9d, dword [r14 + 0x18]
test r9d, r9d
je 0x140059af7
mov esi, dword [r14 + 0x20]
nop word [rax + rax]
dec r9d
mov r8d, 0x811c9dc5
lea rcx, [rsi + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140059af2
nop
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x140059ad0
cmp r8d, 0xcded1a85
je 0x140059afc
test r9d, r9d
jne 0x140059ab0
mov rax, qword [rax]
jmp 0x140059a80
mov eax, dword [r14 + 0x24]
mov ecx, dword [r14 + 0x1c]
add rax, r10
add rcx, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
xor ecx, ecx
add rdx, r10
call rdx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov r14d, dword [rcx + r10 + 0x88]
add r14, r10
cmp r14, r10
je 0x140059ba7
mov r9d, dword [r14 + 0x18]
test r9d, r9d
je 0x140059ba7
mov esi, dword [r14 + 0x20]
nop word [rax + rax]
dec r9d
mov r8d, 0x811c9dc5
lea rcx, [rsi + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140059ba2
nop
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x140059b80
cmp r8d, 0xe80fd3a
je 0x140059bac
test r9d, r9d
jne 0x140059b60
mov rax, qword [rax]
jmp 0x140059b30
mov eax, dword [r14 + 0x24]
mov ecx, dword [r14 + 0x1c]
add rax, r10
add rcx, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
xor ecx, ecx
add rdx, r10
call rdx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov r14d, dword [rcx + r10 + 0x88]
add r14, r10
cmp r14, r10
je 0x140059c57
mov r9d, dword [r14 + 0x18]
test r9d, r9d
je 0x140059c57
mov esi, dword [r14 + 0x20]
nop word [rax + rax]
dec r9d
mov r8d, 0x811c9dc5
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rsi]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140059c52
nop dword [rax]
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x140059c30
cmp r8d, 0xa52bcaf9
je 0x140059c5c
test r9d, r9d
jne 0x140059c10
mov rax, qword [rax]
jmp 0x140059be0
mov eax, dword [r14 + 0x24]
mov ecx, dword [r14 + 0x1c]
add rax, r10
add rcx, r10
movzx eax, word [rax + r9*2]
mov ecx, dword [rcx + rax*4]
add rcx, r10
call rcx
mov dword [0], 0xdead
lea rdx, [0x140057600]
lea rcx, [rbp + 0x540]
call fcn.140065350
lea rcx, [rbp + 0x540]
call fcn.14004daa0
cmp dword [rbp + 0x548], 0
jne 0x1400615c4
mov ecx, dword [0x140176550]
call fcn.140053bb0
test al, al
je 0x140059ee2
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov r14d, dword [rcx + r10 + 0x88]
add r14, r10
cmp r14, r10
je 0x140059d57
mov r9d, dword [r14 + 0x18]
test r9d, r9d
je 0x140059d57
mov esi, dword [r14 + 0x20]
nop word [rax + rax]
dec r9d
mov r8d, 0x811c9dc5
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rsi]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140059d52
nop dword [rax]
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x140059d30
cmp r8d, 0xcded1a85
je 0x140059d5c
test r9d, r9d
jne 0x140059d10
mov rax, qword [rax]
jmp 0x140059ce0
mov eax, dword [r14 + 0x24]
mov ecx, dword [r14 + 0x1c]
add rax, r10
add rcx, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
xor ecx, ecx
add rdx, r10
call rdx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov r14d, dword [rcx + r10 + 0x88]
add r14, r10
cmp r14, r10
je 0x140059e07
mov r9d, dword [r14 + 0x18]
test r9d, r9d
je 0x140059e07
mov esi, dword [r14 + 0x20]
nop word [rax + rax]
dec r9d
mov r8d, 0x811c9dc5
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rsi]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140059e02
nop dword [rax]
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x140059de0
cmp r8d, 0xe80fd3a
je 0x140059e0c
test r9d, r9d
jne 0x140059dc0
mov rax, qword [rax]
jmp 0x140059d90
mov eax, dword [r14 + 0x24]
mov ecx, dword [r14 + 0x1c]
add rax, r10
add rcx, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
xor ecx, ecx
add rdx, r10
call rdx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov r14d, dword [rcx + r10 + 0x88]
add r14, r10
cmp r14, r10
je 0x140059eb7
mov r9d, dword [r14 + 0x18]
test r9d, r9d
je 0x140059eb7
mov esi, dword [r14 + 0x20]
nop word [rax + rax]
dec r9d
mov r8d, 0x811c9dc5
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rsi]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140059eb2
nop dword [rax]
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x140059e90
cmp r8d, 0xa52bcaf9
je 0x140059ebc
test r9d, r9d
jne 0x140059e70
mov rax, qword [rax]
jmp 0x140059e40
mov eax, dword [r14 + 0x24]
mov ecx, dword [r14 + 0x1c]
add rax, r10
add rcx, r10
movzx eax, word [rax + r9*2]
mov ecx, dword [rcx + rax*4]
add rcx, r10
call rcx
mov dword [0], 0xdead
mov byte [rbp - 0x75], reloc.WLDAP32.dll_Ordinal_30
movabs r11, 0x76ff865cc5370036
mov byte [rbp - 0x74], 0x40
xor r9d, r9d
mov byte [rbp - 0x73], 0x5d
mov r10, r11
mov byte [rbp - 0x72], 0x41
mov byte [rbp - 0x71], 0x49
mov byte [rbp - 0x70], gethostname
movzx eax, byte [rbp - 0x75]
lea rax, [rbp - 0x75]
sub r10, rax
nop word [rax + rax]
mov rcx, r9
lea rdx, [rbp - 0x75]
add rdx, r9
and ecx, 0xf
cmp rcx, 0xf
mov rax, r11
cmovae rcx, r12
movsx r8, byte [rdx]
add dl, r10b
shl cl, 2
shr rax, cl
and al, 0xf
xor al, dl
xor al, r8b
mov byte [rbp + r9 - 0x75], al
inc r9
cmp r9, 6
jb 0x140059f20
xor edx, edx
lea rcx, [rbp - 0x75]
call fcn.140051190
test al, al
je 0x14005a182
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov r14d, dword [rcx + r10 + 0x88]
add r14, r10
cmp r14, r10
je 0x140059ff7
mov r9d, dword [r14 + 0x18]
test r9d, r9d
je 0x140059ff7
mov esi, dword [r14 + 0x20]
nop word [rax + rax]
dec r9d
mov r8d, 0x811c9dc5
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rsi]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140059ff2
nop dword [rax]
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x140059fd0
cmp r8d, 0xcded1a85
je 0x140059ffc
test r9d, r9d
jne 0x140059fb0
mov rax, qword [rax]
jmp 0x140059f80
mov eax, dword [r14 + 0x24]
mov ecx, dword [r14 + 0x1c]
add rax, r10
add rcx, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
xor ecx, ecx
add rdx, r10
call rdx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov r14d, dword [rcx + r10 + 0x88]
add r14, r10
cmp r14, r10
je 0x14005a0a7
mov r9d, dword [r14 + 0x18]
test r9d, r9d
je 0x14005a0a7
mov esi, dword [r14 + 0x20]
nop word [rax + rax]
dec r9d
mov r8d, 0x811c9dc5
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rsi]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x14005a0a2
nop dword [rax]
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x14005a080
cmp r8d, 0xe80fd3a
je 0x14005a0ac
test r9d, r9d
jne 0x14005a060
mov rax, qword [rax]
jmp 0x14005a030
mov eax, dword [r14 + 0x24]
mov ecx, dword [r14 + 0x1c]
add rax, r10
add rcx, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
xor ecx, ecx
add rdx, r10
call rdx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov r14d, dword [rcx + r10 + 0x88]
add r14, r10
cmp r14, r10
je 0x14005a157
mov r9d, dword [r14 + 0x18]
test r9d, r9d
je 0x14005a157
mov esi, dword [r14 + 0x20]
nop word [rax + rax]
dec r9d
mov r8d, 0x811c9dc5
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rsi]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x14005a152
nop dword [rax]
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x14005a130
cmp r8d, 0xa52bcaf9
je 0x14005a15c
test r9d, r9d
jne 0x14005a110
mov rax, qword [rax]
jmp 0x14005a0e0
mov eax, dword [r14 + 0x24]
mov ecx, dword [r14 + 0x1c]
add rax, r10
add rcx, r10
movzx eax, word [rax + r9*2]
mov ecx, dword [rcx + rax*4]
add rcx, r10
call rcx
mov dword [0], 0xdead
xor edx, edx
lea rcx, [0x1400513e0]
call qword [sym.imp.USER32.dll_EnumWindows]
xor r9d, r9d
mov dword [rsp + 0x20], r13d
xor r8d, r8d
lea rcx, [rbp + 0x780]
xor edx, edx
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
je 0x14005a207
nop
lea rcx, [rbp + 0x780]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rbp + 0x780]
call qword [sym.imp.USER32.dll_DispatchMessageA]
cmp dword [rbp + 0x788], 0x12
lea rcx, [rbp + 0x780]
movzx r15d, r15b
cmove r15d, r13d
mov dword [rsp + 0x20], r13d
xor r9d, r9d
xor r8d, r8d
xor edx, edx
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
jne 0x14005a1b0
mov dword [rbp + 0x2c8], r15d
test r15b, r15b
jne 0x1400614d1
cmp byte [0x14017640d], 0
je 0x14005a432
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov r14d, dword [rcx + r10 + 0x88]
add r14, r10
cmp r14, r10
je 0x14005a2a7
mov r9d, dword [r14 + 0x18]
test r9d, r9d
je 0x14005a2a7
mov esi, dword [r14 + 0x20]
nop word [rax + rax]
dec r9d
mov r8d, 0x811c9dc5
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rsi]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x14005a2a2
nop dword [rax]
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x14005a280
cmp r8d, 0xcded1a85
je 0x14005a2ac
test r9d, r9d
jne 0x14005a260
mov rax, qword [rax]
jmp 0x14005a230
mov eax, dword [r14 + 0x24]
mov ecx, dword [r14 + 0x1c]
add rax, r10
add rcx, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
xor ecx, ecx
add rdx, r10
call rdx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov r14d, dword [rcx + r10 + 0x88]
add r14, r10
cmp r14, r10
je 0x14005a357
mov r9d, dword [r14 + 0x18]
test r9d, r9d
je 0x14005a357
mov esi, dword [r14 + 0x20]
nop word [rax + rax]
dec r9d
mov r8d, 0x811c9dc5
lea rcx, [rsi + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x14005a352
nop
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x14005a330
cmp r8d, 0xe80fd3a
je 0x14005a35c
test r9d, r9d
jne 0x14005a310
mov rax, qword [rax]
jmp 0x14005a2e0
mov eax, dword [r14 + 0x24]
mov ecx, dword [r14 + 0x1c]
add rax, r10
add rcx, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
xor ecx, ecx
add rdx, r10
call rdx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov r14d, dword [rcx + r10 + 0x88]
add r14, r10
cmp r14, r10
je 0x14005a407
mov r9d, dword [r14 + 0x18]
test r9d, r9d
je 0x14005a407
mov esi, dword [r14 + 0x20]
nop word [rax + rax]
dec r9d
mov r8d, 0x811c9dc5
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rsi]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x14005a402
nop dword [rax]
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x14005a3e0
cmp r8d, 0xa52bcaf9
je 0x14005a40c
test r9d, r9d
jne 0x14005a3c0
mov rax, qword [rax]
jmp 0x14005a390
mov eax, dword [r14 + 0x24]
mov ecx, dword [r14 + 0x1c]
add rax, r10
add rcx, r10
movzx eax, word [rax + r9*2]
mov ecx, dword [rcx + rax*4]
add rcx, r10
call rcx
mov dword [0], 0xdead
mov byte [rbp - 0x7b], reloc.WLDAP32.dll_Ordinal_30
movabs rsi, 0x76ff865cc5370036
mov byte [rbp - 0x7a], 0x40
xor r9d, r9d
mov byte [rbp - 0x79], 0x5d
mov r10, rsi
mov byte [rbp - 0x78], 0x41
mov byte [rbp - 0x77], 0x49
mov byte [rbp - 0x76], gethostname
movzx eax, byte [rbp - 0x7b]
lea rax, [rbp - 0x7b]
sub r10, rax
nop word [rax + rax]
mov rcx, r9
lea rdx, [rbp - 0x7b]
add rdx, r9
and ecx, 0xf
cmp rcx, 0xf
mov rax, rsi
cmovae rcx, r12
movsx r8, byte [rdx]
add dl, r10b
shl cl, 2
shr rax, cl
and al, 0xf
xor al, dl
xor al, r8b
mov byte [rbp + r9 - 0x7b], al
inc r9
cmp r9, 6
jb 0x14005a470
xor edx, edx
lea rcx, [rbp - 0x7b]
call fcn.140051190
test al, al
je 0x14005a6dc
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov r14d, dword [rcx + r10 + 0x88]
add r14, r10
cmp r14, r10
je 0x14005a547
mov r9d, dword [r14 + 0x18]
test r9d, r9d
je 0x14005a547
mov esi, dword [r14 + 0x20]
nop word [rax + rax]
dec r9d
mov r8d, 0x811c9dc5
lea rcx, [rsi + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x14005a542
nop
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x14005a520
cmp r8d, 0xcded1a85
je 0x14005a54c
test r9d, r9d
jne 0x14005a500
mov rax, qword [rax]
jmp 0x14005a4d0
mov eax, dword [r14 + 0x24]
mov ecx, dword [r14 + 0x1c]
add rax, r10
add rcx, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
xor ecx, ecx
add rdx, r10
call rdx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov r14d, dword [rcx + r10 + 0x88]
add r14, r10
cmp r14, r10
je 0x14005a5f7
mov r9d, dword [r14 + 0x18]
test r9d, r9d
je 0x14005a5f7
mov esi, dword [r14 + 0x20]
nop word [rax + rax]
dec r9d
mov r8d, 0x811c9dc5
lea rcx, [rsi + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x14005a5f2
nop
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x14005a5d0
cmp r8d, 0xe80fd3a
je 0x14005a5fc
test r9d, r9d
jne 0x14005a5b0
mov rax, qword [rax]
jmp 0x14005a580
mov eax, dword [r14 + 0x24]
mov ecx, dword [r14 + 0x1c]
add rax, r10
add rcx, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
xor ecx, ecx
add rdx, r10
call rdx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov r14d, dword [rcx + r10 + 0x88]
add r14, r10
cmp r14, r10
je 0x14005a6a7
mov r9d, dword [r14 + 0x18]
test r9d, r9d
je 0x14005a6a7
mov esi, dword [r14 + 0x20]
nop word [rax + rax]
dec r9d
mov r8d, 0x811c9dc5
lea rcx, [rsi + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x14005a6a2
nop
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x14005a680
cmp r8d, 0xa52bcaf9
je 0x14005a6ac
test r9d, r9d
jne 0x14005a660
mov rax, qword [rax]
jmp 0x14005a630
mov eax, dword [r14 + 0x24]
mov ecx, dword [r14 + 0x1c]
add rax, r10
add rcx, r10
movzx eax, word [rax + r9*2]
mov ecx, dword [rcx + rax*4]
add rcx, r10
call rcx
mov dword [0], 0xdead
movabs rsi, 0x76ff865cc5370036
call fcn.14003f760
call fcn.1400405c0
call fcn.140009320
lea rdx, [0x140057600]
lea rcx, [rbp + 0x550]
call fcn.140065350
lea rcx, [rbp + 0x550]
call fcn.14004daa0
cmp dword [rbp + 0x558], 0
jne 0x1400615c4
mov byte [rsp + 0x7f], reloc.WLDAP32.dll_Ordinal_30
xor r9d, r9d
mov byte [rbp - 0x80], 0x40
mov r10, rsi
mov byte [rbp - 0x7f], 0x5d
mov byte [rbp - 0x7e], 0x41
mov byte [rbp - 0x7d], 0x49
mov byte [rbp - 0x7c], gethostname
movzx eax, byte [rsp + 0x7f]
lea rax, [rsp + 0x7f]
sub r10, rax
nop dword [rax]
nop word [rax + rax]
mov rcx, r9
lea rdx, [rsp + 0x7f]
add rdx, r9
and ecx, 0xf
cmp rcx, 0xf
mov rax, rsi
cmovae rcx, r12
movsx r8, byte [rdx]
add dl, r10b
shl cl, 2
shr rax, cl
and al, 0xf
xor al, dl
xor al, r8b
mov byte [rsp + r9 + 0x7f], al
inc r9
cmp r9, 6
jb 0x14005a750
xor edx, edx
lea rcx, [rsp + 0x7f]
call fcn.140051190
test al, al
je 0x14005a9b2
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov r14d, dword [rcx + r10 + 0x88]
add r14, r10
cmp r14, r10
je 0x14005a827
mov r9d, dword [r14 + 0x18]
test r9d, r9d
je 0x14005a827
mov esi, dword [r14 + 0x20]
nop word [rax + rax]
dec r9d
mov r8d, 0x811c9dc5
lea rcx, [rsi + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x14005a822
nop
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x14005a800
cmp r8d, 0xcded1a85
je 0x14005a82c
test r9d, r9d
jne 0x14005a7e0
mov rax, qword [rax]
jmp 0x14005a7b0
mov eax, dword [r14 + 0x24]
mov ecx, dword [r14 + 0x1c]
add rax, r10
add rcx, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
xor ecx, ecx
add rdx, r10
call rdx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov r14d, dword [rcx + r10 + 0x88]
add r14, r10
cmp r14, r10
je 0x14005a8d7
mov r9d, dword [r14 + 0x18]
test r9d, r9d
je 0x14005a8d7
mov esi, dword [r14 + 0x20]
nop word [rax + rax]
dec r9d
mov r8d, 0x811c9dc5
lea rcx, [rsi + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x14005a8d2
nop
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x14005a8b0
cmp r8d, 0xe80fd3a
je 0x14005a8dc
test r9d, r9d
jne 0x14005a890
mov rax, qword [rax]
jmp 0x14005a860
mov eax, dword [r14 + 0x24]
mov ecx, dword [r14 + 0x1c]
add rax, r10
add rcx, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
xor ecx, ecx
add rdx, r10
call rdx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov r14d, dword [rcx + r10 + 0x88]
add r14, r10
cmp r14, r10
je 0x14005a987
mov r9d, dword [r14 + 0x18]
test r9d, r9d
je 0x14005a987
mov esi, dword [r14 + 0x20]
nop word [rax + rax]
dec r9d
mov r8d, 0x811c9dc5
lea rcx, [rsi + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x14005a982
nop
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x14005a960
cmp r8d, 0xa52bcaf9
je 0x14005a98c
test r9d, r9d
jne 0x14005a940
mov rax, qword [rax]
jmp 0x14005a910
mov eax, dword [r14 + 0x24]
mov ecx, dword [r14 + 0x1c]
add rax, r10
add rcx, r10
movzx eax, word [rax + r9*2]
mov ecx, dword [rcx + rax*4]
add rcx, r10
call rcx
mov dword [0], 0xdead
call fcn.140051150
test al, al
je 0x14005abd2
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov r14d, dword [rcx + r10 + 0x88]
add r14, r10
cmp r14, r10
je 0x14005aa47
mov r9d, dword [r14 + 0x18]
test r9d, r9d
je 0x14005aa47
mov esi, dword [r14 + 0x20]
nop word [rax + rax]
dec r9d
mov r8d, 0x811c9dc5
lea rcx, [rsi + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x14005aa42
nop
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x14005aa20
cmp r8d, 0xcded1a85
je 0x14005aa4c
test r9d, r9d
jne 0x14005aa00
mov rax, qword [rax]
jmp 0x14005a9d0
mov eax, dword [r14 + 0x24]
mov ecx, dword [r14 + 0x1c]
add rax, r10
add rcx, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
xor ecx, ecx
add rdx, r10
call rdx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov r14d, dword [rcx + r10 + 0x88]
add r14, r10
cmp r14, r10
je 0x14005aaf7
mov r9d, dword [r14 + 0x18]
test r9d, r9d
je 0x14005aaf7
mov esi, dword [r14 + 0x20]
nop word [rax + rax]
dec r9d
mov r8d, 0x811c9dc5
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rsi]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x14005aaf2
nop dword [rax]
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x14005aad0
cmp r8d, 0xe80fd3a
je 0x14005aafc
test r9d, r9d
jne 0x14005aab0
mov rax, qword [rax]
jmp 0x14005aa80
mov eax, dword [r14 + 0x24]
mov ecx, dword [r14 + 0x1c]
add rax, r10
add rcx, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
xor ecx, ecx
add rdx, r10
call rdx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov r14d, dword [rcx + r10 + 0x88]
add r14, r10
cmp r14, r10
je 0x14005aba7
mov r9d, dword [r14 + 0x18]
test r9d, r9d
je 0x14005aba7
mov esi, dword [r14 + 0x20]
nop word [rax + rax]
dec r9d
mov r8d, 0x811c9dc5
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rsi]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x14005aba2
nop dword [rax]
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x14005ab80
cmp r8d, 0xa52bcaf9
je 0x14005abac
test r9d, r9d
jne 0x14005ab60
mov rax, qword [rax]
jmp 0x14005ab30
mov eax, dword [r14 + 0x24]
mov ecx, dword [r14 + 0x1c]
add rax, r10
add rcx, r10
movzx eax, word [rax + r9*2]
mov ecx, dword [rcx + rax*4]
add rcx, r10
call rcx
mov dword [0], 0xdead
cmp byte [0x14017640d], 0
je 0x14005adf2
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov r14d, dword [rcx + r10 + 0x88]
add r14, r10
cmp r14, r10
je 0x14005ac67
mov r9d, dword [r14 + 0x18]
test r9d, r9d
je 0x14005ac67
mov esi, dword [r14 + 0x20]
nop word [rax + rax]
dec r9d
mov r8d, 0x811c9dc5
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rsi]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x14005ac62
nop dword [rax]
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x14005ac40
cmp r8d, 0xcded1a85
je 0x14005ac6c
test r9d, r9d
jne 0x14005ac20
mov rax, qword [rax]
jmp 0x14005abf0
mov eax, dword [r14 + 0x24]
mov ecx, dword [r14 + 0x1c]
add rax, r10
add rcx, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
xor ecx, ecx
add rdx, r10
call rdx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov r14d, dword [rcx + r10 + 0x88]
add r14, r10
cmp r14, r10
je 0x14005ad17
mov r9d, dword [r14 + 0x18]
test r9d, r9d
je 0x14005ad17
mov esi, dword [r14 + 0x20]
nop word [rax + rax]
dec r9d
mov r8d, 0x811c9dc5
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rsi]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x14005ad12
nop dword [rax]
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x14005acf0
cmp r8d, 0xe80fd3a
je 0x14005ad1c
test r9d, r9d
jne 0x14005acd0
mov rax, qword [rax]
jmp 0x14005aca0
mov eax, dword [r14 + 0x24]
mov ecx, dword [r14 + 0x1c]
add rax, r10
add rcx, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
xor ecx, ecx
add rdx, r10
call rdx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov r14d, dword [rcx + r10 + 0x88]
add r14, r10
cmp r14, r10
je 0x14005adc7
mov r9d, dword [r14 + 0x18]
test r9d, r9d
je 0x14005adc7
mov esi, dword [r14 + 0x20]
nop word [rax + rax]
dec r9d
mov r8d, 0x811c9dc5
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rsi]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x14005adc2
nop dword [rax]
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x14005ada0
cmp r8d, 0xa52bcaf9
je 0x14005adcc
test r9d, r9d
jne 0x14005ad80
mov rax, qword [rax]
jmp 0x14005ad50
mov eax, dword [r14 + 0x24]
mov ecx, dword [r14 + 0x1c]
add rax, r10
add rcx, r10
movzx eax, word [rax + r9*2]
mov ecx, dword [rcx + rax*4]
add rcx, r10
call rcx
mov dword [0], 0xdead
mov rax, qword [0x1401761e0]
test rax, rax
jne 0x14005ae1f
mov r8d, 0xb4f
lea rdx, str.C:UsersSwabraPicturesHydro_SrcHydra__1_Hydraimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x1401761e0]
lea r15, [rax + 0x37e0]
xor r14d, r14d
mov dword [r15 + 0x44], 0x40800000
mov dword [r15 + 0x2c], 0x41200000
mov dword [r15 + 0x4c], 0x40a00000
mov dword [r15 + 0x50], 0x41c80000
mov dword [r15 + 0x54], 0x41700000
mov dword [r15 + 0x58], 0x40a00000
mov dword [r15 + 0x74], 0x40800000
mov dword [r15 + 0x78], 0x41700000
cmp qword [0x140176558], r14
mov qword [rbp + 0x448], r15
jne 0x14005aebe
mov rcx, qword [0x1401769d0]
lea rax, [0x140176558]
mov qword [rsp + 0x30], r14
lea r9, [0x140175040]
mov qword [rsp + 0x28], rax
lea rdx, [0x140149430]
mov rax, qword [0x140176570]
mov r8d, 0x510d
mov qword [rsp + 0x20], rax
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
mov rax, qword [0x1401761e0]
mov rax, qword [rax + 0x3ea0]
lea rcx, [rbp + 0x698]
movss xmm6, dword [rax + 0x20]
call fcn.140016580
subss xmm6, dword [0x14010e4e8]
xor edx, edx
mov dword [rbp + 0x378], 0x440fc000
lea rcx, [rbp + 0x378]
mov dword [rbp + 0x37c], 0x43b08000
subss xmm6, dword [0x14010e4b0]
call fcn.140012d30
cmp byte [reloc.WS2_32.dll_accept], 0
je 0x14005db64
lea rcx, [0x140175238]
call fcn.140062940
mov r8d, Ordinal_45
lea rdx, [rsp + 0x60]
mov rcx, rax
call fcn.14000f200
lea rdx, [0x140057600]
lea rcx, [rbp + 0x560]
call fcn.140065350
lea rcx, [rbp + 0x560]
call fcn.14004daa0
cmp dword [rbp + 0x568], 0
jne 0x1400615c4
lea rdx, [0x140057600]
lea rcx, [rbp + 0x4a0]
call fcn.140065350
lea rcx, [rbp + 0x4a0]
call fcn.14004daa0
cmp dword [rbp + 0x4a8], 0
jne 0x1400615c4
lea rdx, [0x140057600]
lea rcx, [rbp + 0x4b0]
call fcn.140065350
lea rcx, [rbp + 0x4b0]
call fcn.14004daa0
cmp dword [rbp + 0x4b8], 0
jne 0x1400615c4
mov ecx, dword [0x140176550]
call fcn.140053bb0
test al, al
je 0x14005b1e2
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov r14d, dword [rcx + r10 + 0x88]
add r14, r10
cmp r14, r10
je 0x14005b057
mov r9d, dword [r14 + 0x18]
test r9d, r9d
je 0x14005b057
mov esi, dword [r14 + 0x20]
nop word [rax + rax]
dec r9d
mov r8d, 0x811c9dc5
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rsi]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x14005b052
nop dword [rax]
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x14005b030
cmp r8d, 0xcded1a85
je 0x14005b05c
test r9d, r9d
jne 0x14005b010
mov rax, qword [rax]
jmp 0x14005afe0
mov eax, dword [r14 + 0x24]
mov ecx, dword [r14 + 0x1c]
add rax, r10
add rcx, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
xor ecx, ecx
add rdx, r10
call rdx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov r14d, dword [rcx + r10 + 0x88]
add r14, r10
cmp r14, r10
je 0x14005b107
mov r9d, dword [r14 + 0x18]
test r9d, r9d
je 0x14005b107
mov esi, dword [r14 + 0x20]
nop word [rax + rax]
dec r9d
mov r8d, 0x811c9dc5
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rsi]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x14005b102
nop dword [rax]
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x14005b0e0
cmp r8d, 0xe80fd3a
je 0x14005b10c
test r9d, r9d
jne 0x14005b0c0
mov rax, qword [rax]
jmp 0x14005b090
mov eax, dword [r14 + 0x24]
mov ecx, dword [r14 + 0x1c]
add rax, r10
add rcx, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
xor ecx, ecx
add rdx, r10
call rdx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov r14d, dword [rcx + r10 + 0x88]
add r14, r10
cmp r14, r10
je 0x14005b1b7
mov r9d, dword [r14 + 0x18]
test r9d, r9d
je 0x14005b1b7
mov esi, dword [r14 + 0x20]
nop word [rax + rax]
dec r9d
mov r8d, 0x811c9dc5
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rsi]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x14005b1b2
nop dword [rax]
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x14005b190
cmp r8d, 0xa52bcaf9
je 0x14005b1bc
test r9d, r9d
jne 0x14005b170
mov rax, qword [rax]
jmp 0x14005b140
mov eax, dword [r14 + 0x24]
mov ecx, dword [r14 + 0x1c]
add rax, r10
add rcx, r10
movzx eax, word [rax + r9*2]
mov ecx, dword [rcx + rax*4]
add rcx, r10
call rcx
mov dword [0], 0xdead
cmp byte [0x14017640d], 0
je 0x14005b402
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov r14d, dword [rcx + r10 + 0x88]
add r14, r10
cmp r14, r10
je 0x14005b277
mov r9d, dword [r14 + 0x18]
test r9d, r9d
je 0x14005b277
mov esi, dword [r14 + 0x20]
nop word [rax + rax]
dec r9d
mov r8d, 0x811c9dc5
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rsi]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x14005b272
nop dword [rax]
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x14005b250
cmp r8d, 0xcded1a85
je 0x14005b27c
test r9d, r9d
jne 0x14005b230
mov rax, qword [rax]
jmp 0x14005b200
mov eax, dword [r14 + 0x24]
mov ecx, dword [r14 + 0x1c]
add rax, r10
add rcx, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
xor ecx, ecx
add rdx, r10
call rdx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov r14d, dword [rcx + r10 + 0x88]
add r14, r10
cmp r14, r10
je 0x14005b327
mov r9d, dword [r14 + 0x18]
test r9d, r9d
je 0x14005b327
mov esi, dword [r14 + 0x20]
nop word [rax + rax]
dec r9d
mov r8d, 0x811c9dc5
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rsi]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x14005b322
nop dword [rax]
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x14005b300
cmp r8d, 0xe80fd3a
je 0x14005b32c
test r9d, r9d
jne 0x14005b2e0
mov rax, qword [rax]
jmp 0x14005b2b0
mov eax, dword [r14 + 0x24]
mov ecx, dword [r14 + 0x1c]
add rax, r10
add rcx, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
xor ecx, ecx
add rdx, r10
call rdx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov r14d, dword [rcx + r10 + 0x88]
add r14, r10
cmp r14, r10
je 0x14005b3d7
mov r9d, dword [r14 + 0x18]
test r9d, r9d
je 0x14005b3d7
mov esi, dword [r14 + 0x20]
nop word [rax + rax]
dec r9d
mov r8d, 0x811c9dc5
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rsi]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x14005b3d2
nop dword [rax]
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x14005b3b0
cmp r8d, 0xa52bcaf9
je 0x14005b3dc
test r9d, r9d
jne 0x14005b390
mov rax, qword [rax]
jmp 0x14005b360
mov eax, dword [r14 + 0x24]
mov ecx, dword [r14 + 0x1c]
add rax, r10
add rcx, r10
movzx eax, word [rax + r9*2]
mov ecx, dword [rcx + rax*4]
add rcx, r10
call rcx
mov dword [0], 0xdead
call fcn.140041a40
mov rcx, qword [0x1401761e0]
mov edx, 0xff
mov r9d, edx
mov dword [rsp + 0x20], __WSAFDIsSet
mov r8d, edx
mov rax, qword [rcx + 0x3ea0]
mov byte [rax + 0xb0], 1
mov rax, qword [rcx + 0x3ea0]
lea rcx, [rbp + 0xd38]
mov rsi, qword [rax + 0x290]
call fcn.1400338d0
mov rcx, rax
call fcn.1400048c0
mov rdx, qword [0x140176558]
lea r9, [rbp + 0x390]
mov dword [rsp + 0x30], eax
lea r8, [rbp + 0x398]
lea rax, [rbp + 0x380]
mov dword [rbp + 0x380], 0x3f800000
mov qword [rsp + 0x28], rax
mov rcx, rsi
lea rax, [rbp + 0x388]
mov dword [rbp + 0x384], 0x3f800000
mov qword [rsp + 0x20], rax
mov qword [rbp + 0x388], 0
mov dword [rbp + 0x390], 0x42840000
mov dword [rbp + 0x394], 0x42600000
mov dword [rbp + 0x398], 0xc1a00000
mov dword [rbp + 0x39c], 0xc1300000
call fcn.14002bdb0
mov rcx, qword [0x140176578]
call fcn.140012820
mov byte [rbp + 0x291], reloc.WLDAP32.dll_Ordinal_32
mov byte [rbp + 0x292], Ordinal_50
mov byte [rbp + 0x293], gethostname
mov byte [rbp + 0x294], gethostname
mov byte [rbp + 0x295], 0x3f
mov byte [rbp + 0x296], 0x3e
mov byte [rbp + 0x297], Ordinal_60
mov byte [rbp + 0x298], 0x3e
mov byte [rbp + 0x299], Ordinal_60
mov byte [rbp + 0x29a], 0x3f
mov byte [rbp + 0x29b], gethostname
mov byte [rbp + 0x29c], gethostname
mov byte [rbp + 0x29d], Ordinal_50
mov byte [rbp + 0x29e], gethostname
mov byte [rbp + 0x29f], 0x3d
mov byte [rbp + 0x2a0], reloc.WLDAP32.dll_Ordinal_60
mov byte [rbp + 0x2a1], Ordinal_50
mov byte [rbp + 0x2a2], 0x3f
mov byte [rbp + 0x2a3], 3
mov byte [rbp + 0x2a4], 5
mov byte [rbp + 0x2a5], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x2a6], reloc.WS2_32.dll_ntohl
mov byte [rbp + 0x2a7], ntohl
mov byte [rbp + 0x2a8], reloc.WS2_32.dll_ntohl
mov byte [rbp + 0x2a9], 8
mov byte [rbp + 0x2aa], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x2ab], 3
mov byte [rbp + 0x2ac], 4
mov byte [rbp + 0x2ad], 0
mov byte [rbp + 0x2ae], 4
mov byte [rbp + 0x2af], reloc.WS2_32.dll_listen
mov byte [rbp + 0x2b0], ntohl
mov byte [rbp + 0x2b1], 0
mov byte [rbp + 0x2b2], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x2b3], reloc.WS2_32.dll_send
mov byte [rbp + 0x2b4], reloc.WS2_32.dll_setsockopt
mov byte [rbp + 0x2b5], Ordinal_32
mov byte [rbp + 0x2b6], reloc.WLDAP32.dll_Ordinal_30
mov byte [rbp + 0x2b7], reloc.WLDAP32.dll_Ordinal_27
mov byte [rbp + 0x2b8], reloc.WLDAP32.dll_Ordinal_30
mov byte [rbp + 0x2b9], Ordinal_26
mov byte [rbp + 0x2ba], Ordinal_32
mov byte [rbp + 0x2bb], 0x7b
mov byte [rbp + 0x2bc], Ordinal_79
mov byte [rbp + 0x2bd], 0x54
mov byte [rbp + 0x2be], 0x46
mov byte [rbp + 0x2bf], 0x52
mov byte [rbp + 0x2c0], reloc.WLDAP32.dll_Ordinal_60
movzx eax, byte [rbp + 0x291]
movabs r11, 0x11fadb8ebfdd430e
mov r10, r11
lea rax, [rbp + 0x291]
xor r9d, r9d
sub r10, rax
nop
mov rcx, r9
lea rdx, [rbp + 0x291]
add rdx, r9
and ecx, 0xf
cmp rcx, 0xf
mov rax, r11
cmovae rcx, r12
movsx r8, byte [rdx]
add dl, r10b
shl cl, 2
shr rax, cl
and al, 0xf
xor al, dl
xor al, r8b
mov byte [rbp + r9 + 0x291], al
inc r9
cmp r9, 0x30
jb 0x14005b650
lea rcx, [rbp + 0x291]
call fcn.140033fc0
movaps xmm1, xmm7
xorps xmm0, xmm0
call fcn.1400162e0
movaps xmm0, xmmword [0x14010e740]
lea rdx, [rbp + 0x5b8]
xor ecx, ecx
movups xmmword [rbp + 0x5b8], xmm0
call fcn.140004e10
mov byte [rsp + 0x69], 8
movabs r11, 0xeb6d413d2473e444
mov byte [rsp + 0x6a], reloc.WLDAP32.dll_Ordinal_46
xor r9d, r9d
mov byte [rsp + 0x6b], reloc.WLDAP32.dll_Ordinal_45
mov r10, r11
mov byte [rsp + 0x6c], Ordinal_35
mov byte [rsp + 0x6d], Ordinal_79
movzx eax, byte [rsp + 0x69]
lea rax, [rsp + 0x69]
sub r10, rax
nop dword [rax]
mov rcx, r9
lea rdx, [rsp + 0x69]
add rdx, r9
and ecx, 0xf
cmp rcx, 0xf
mov rax, r11
cmovae rcx, r12
movsx r8, byte [rdx]
add dl, r10b
shl cl, 2
shr rax, cl
and al, 0xf
xor al, dl
xor al, r8b
mov byte [rsp + r9 + 0x69], al
inc r9
cmp r9, 5
jb 0x14005b700
lea rcx, [rsp + 0x69]
call fcn.140033fc0
mov ecx, r13d
call fcn.140004e70
call fcn.1400128c0
xor edx, edx
lea rcx, [0x1400513e0]
call qword [sym.imp.USER32.dll_EnumWindows]
mov byte [rsp + 0x79], reloc.WLDAP32.dll_Ordinal_30
movabs r11, 0x76ff865cc5370036
mov byte [rsp + 0x7a], 0x40
xor r9d, r9d
mov byte [rsp + 0x7b], 0x5d
mov r10, r11
mov byte [rsp + 0x7c], 0x41
mov byte [rsp + 0x7d], 0x49
mov byte [rsp + 0x7e], Ordinal_60
movzx eax, byte [rsp + 0x79]
lea rax, [rsp + 0x79]
sub r10, rax
nop dword [rax]
mov rcx, r9
lea rdx, [rsp + 0x79]
add rdx, r9
and ecx, 0xf
cmp rcx, 0xf
mov rax, r11
cmovae rcx, r12
movsx r8, byte [rdx]
add dl, r10b
shl cl, 2
shr rax, cl
and al, 0xf
xor al, dl
xor al, r8b
mov byte [rsp + r9 + 0x79], al
inc r9
cmp r9, 6
jb 0x14005b7a0
xor edx, edx
lea rcx, [rsp + 0x79]
call fcn.140051190
test al, al
je 0x14005ba02
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov r14d, dword [rcx + r10 + 0x88]
add r14, r10
cmp r14, r10
je 0x14005b877
mov r9d, dword [r14 + 0x18]
test r9d, r9d
je 0x14005b877
mov esi, dword [r14 + 0x20]
nop word [rax + rax]
dec r9d
mov r8d, 0x811c9dc5
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rsi]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x14005b872
nop dword [rax]
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x14005b850
cmp r8d, 0xcded1a85
je 0x14005b87c
test r9d, r9d
jne 0x14005b830
mov rax, qword [rax]
jmp 0x14005b800
mov eax, dword [r14 + 0x24]
mov ecx, dword [r14 + 0x1c]
add rax, r10
add rcx, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
xor ecx, ecx
add rdx, r10
call rdx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov r14d, dword [rcx + r10 + 0x88]
add r14, r10
cmp r14, r10
je 0x14005b927
mov r9d, dword [r14 + 0x18]
test r9d, r9d
je 0x14005b927
mov esi, dword [r14 + 0x20]
nop word [rax + rax]
dec r9d
mov r8d, 0x811c9dc5
lea rcx, [rsi + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x14005b922
nop
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x14005b900
cmp r8d, 0xe80fd3a
je 0x14005b92c
test r9d, r9d
jne 0x14005b8e0
mov rax, qword [rax]
jmp 0x14005b8b0
mov eax, dword [r14 + 0x24]
mov ecx, dword [r14 + 0x1c]
add rax, r10
add rcx, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
xor ecx, ecx
add rdx, r10
call rdx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov r14d, dword [rcx + r10 + 0x88]
add r14, r10
cmp r14, r10
je 0x14005b9d7
mov r9d, dword [r14 + 0x18]
test r9d, r9d
je 0x14005b9d7
mov esi, dword [r14 + 0x20]
nop word [rax + rax]
dec r9d
mov r8d, 0x811c9dc5
lea rcx, [rsi + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x14005b9d2
nop
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x14005b9b0
cmp r8d, 0xa52bcaf9
je 0x14005b9dc
test r9d, r9d
jne 0x14005b990
mov rax, qword [rax]
jmp 0x14005b960
mov eax, dword [r14 + 0x24]
mov ecx, dword [r14 + 0x1c]
add rax, r10
add rcx, r10
movzx eax, word [rax + r9*2]
mov ecx, dword [rcx + rax*4]
add rcx, r10
call rcx
mov dword [0], 0xdead
cmp byte [0x14017640d], 0
je 0x14005bc22
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov r14d, dword [rcx + r10 + 0x88]
add r14, r10
cmp r14, r10
je 0x14005ba97
mov r9d, dword [r14 + 0x18]
test r9d, r9d
je 0x14005ba97
mov esi, dword [r14 + 0x20]
nop word [rax + rax]
dec r9d
mov r8d, 0x811c9dc5
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rsi]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x14005ba92
nop dword [rax]
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x14005ba70
cmp r8d, 0xcded1a85
je 0x14005ba9c
test r9d, r9d
jne 0x14005ba50
mov rax, qword [rax]
jmp 0x14005ba20
mov eax, dword [r14 + 0x24]
mov ecx, dword [r14 + 0x1c]
add rax, r10
add rcx, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
xor ecx, ecx
add rdx, r10
call rdx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov r14d, dword [rcx + r10 + 0x88]
add r14, r10
cmp r14, r10
je 0x14005bb47
mov r9d, dword [r14 + 0x18]
test r9d, r9d
je 0x14005bb47
mov esi, dword [r14 + 0x20]
nop word [rax + rax]
dec r9d
mov r8d, 0x811c9dc5
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rsi]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x14005bb42
nop dword [rax]
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x14005bb20
cmp r8d, 0xe80fd3a
je 0x14005bb4c
test r9d, r9d
jne 0x14005bb00
mov rax, qword [rax]
jmp 0x14005bad0
mov eax, dword [r14 + 0x24]
mov ecx, dword [r14 + 0x1c]
add rax, r10
add rcx, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
xor ecx, ecx
add rdx, r10
call rdx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov r14d, dword [rcx + r10 + 0x88]
add r14, r10
cmp r14, r10
je 0x14005bbf7
mov r9d, dword [r14 + 0x18]
test r9d, r9d
je 0x14005bbf7
mov esi, dword [r14 + 0x20]
nop word [rax + rax]
dec r9d
mov r8d, 0x811c9dc5
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rsi]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x14005bbf2
nop dword [rax]
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x14005bbd0
cmp r8d, 0xa52bcaf9
je 0x14005bbfc
test r9d, r9d
jne 0x14005bbb0
mov rax, qword [rax]
jmp 0x14005bb80
mov eax, dword [r14 + 0x24]
mov ecx, dword [r14 + 0x1c]
add rax, r10
add rcx, r10
movzx eax, word [rax + r9*2]
mov ecx, dword [rcx + rax*4]
add rcx, r10
call rcx
mov dword [0], 0xdead
lea rcx, [rbp + 0x6e0]
call fcn.1400165e0
movss xmm0, dword [rax]
mulss xmm0, xmm14
subss xmm0, xmm15
call fcn.140016390
call fcn.140036d10
lea rcx, [rbp + 0x6d8]
call fcn.1400165e0
movss xmm0, dword [rax]
cvtps2pd xmm0, xmm0
divsd xmm0, xmm8
subsd xmm0, xmm9
cvtpd2ps xmm0, xmm0
call fcn.140016390
lea rcx, [0x140174fe0]
call fcn.140062940
mov byte [rbp + 0xb], reloc.WLDAP32.dll_Ordinal_211
xor r14d, r14d
mov byte [rbp + 0xc], 0xdd
movabs rsi, 0xd6824b0d7879acf0
mov byte [rbp + 0xd], 0x8b
mov r11, rax
mov byte [rbp + 0xe], 0x8a
lea rax, [rbp + 0xb]
mov byte [rbp + 0xf], 0x98
mov r10, rsi
mov byte [rbp + 0x10], 0x80
mov r9d, r14d
mov byte [rbp + 0x11], 0x90
sub r10, rax
mov byte [rbp + 0x12], 0x91
mov byte [rbp + 0x13], 0x98
mov byte [rbp + 0x14], 0x9c
mov byte [rbp + 0x15], 0xf1
movzx ecx, byte [rbp + 0xb]
nop word [rax + rax]
mov rcx, r9
lea rdx, [rbp + 0xb]
add rdx, r9
and ecx, 0xf
cmp rcx, 0xf
mov rax, rsi
cmovae rcx, r12
movsx r8, byte [rdx]
add dl, r10b
shl cl, 2
shr rax, cl
and al, 0xf
xor al, dl
xor al, r8b
mov byte [rbp + r9 + 0xb], al
inc r9
cmp r9, 0xb
jb 0x14005bcd0
mov qword [rsp + 0x38], r14
lea rax, [rbp + 0x3a0]
mov qword [rsp + 0x30], r14
lea r8, [0x1401761f0]
mov dword [rsp + 0x28], r14d
lea rcx, [rbp + 0xb]
mov r9d, 0xff
mov qword [rsp + 0x20], rax
mov rdx, r11
mov qword [rbp + 0x3a0], r14
call fcn.1400398a0
call fcn.140036d10
lea rcx, [rbp + 0x618]
call fcn.1400165e0
movss xmm0, dword [rax]
cvtps2pd xmm0, xmm0
divsd xmm0, xmm8
subsd xmm0, xmm9
cvtpd2ps xmm0, xmm0
call fcn.140016390
lea rcx, [0x1401752b8]
call fcn.140062940
mov byte [rbp + 0x16], reloc.WLDAP32.dll_Ordinal_211
mov r11, rax
mov byte [rbp + 0x17], 0xdd
lea rax, [rbp + 0x16]
mov byte [rbp + 0x18], Ordinal_143
mov r10, rsi
mov byte [rbp + 0x19], 0x98
mov r9, r14
mov byte [rbp + 0x1a], Ordinal_143
sub r10, rax
mov byte [rbp + 0x1b], 0x81
mov byte [rbp + 0x1c], 0x89
mov byte [rbp + 0x1d], 0x9f
mov byte [rbp + 0x1e], 0x87
mov byte [rbp + 0x1f], 0x9d
mov byte [rbp + 0x20], 0xf1
movzx ecx, byte [rbp + 0x16]
nop dword [rax]
mov rcx, r9
lea rdx, [rbp + 0x16]
add rdx, r9
and ecx, 0xf
cmp rcx, 0xf
mov rax, rsi
cmovae rcx, r12
movsx r8, byte [rdx]
add dl, r10b
shl cl, 2
shr rax, cl
and al, 0xf
xor al, dl
xor al, r8b
mov byte [rbp + r9 + 0x16], al
inc r9
cmp r9, 0xb
jb 0x14005bdc0
mov qword [rsp + 0x38], r14
lea rax, [rbp + 0x3a8]
mov qword [rsp + 0x30], r14
lea r8, [0x140176450]
mov dword [rsp + 0x28], 0x8000
lea rcx, [rbp + 0x16]
mov r9d, 0xff
mov qword [rsp + 0x20], rax
mov rdx, r11
mov qword [rbp + 0x3a8], r14
call fcn.1400398a0
lea rcx, [0x14010bd90]
call fcn.140033fc0
movaps xmm1, xmm7
xorps xmm0, xmm0
call fcn.1400162e0
mov rax, qword [0x1401761e0]
lea rcx, [0x140175298]
or dword [rax + 0x4728], 1
mov dword [rax + 0x472c], 0x40800000
call fcn.140062940
lea rdx, [0x1401763ef]
mov rcx, rax
call fcn.1400364c0
lea rcx, [rbp + 0x620]
call fcn.1400165e0
movss xmm0, dword [rax]
cvtps2pd xmm0, xmm0
divsd xmm0, qword [str.ffffff]
addsd xmm0, qword [0x14010e468]
cvtpd2ps xmm0, xmm0
call fcn.140016390
lea rcx, [0x1401750f8]
mov dword [rbp + 0x3b0], 0x42a00000
mov dword [rbp + 0x3b4], 0x41f00000
call fcn.140062940
xor r8d, r8d
lea rdx, [rbp + 0x3b0]
mov rcx, rax
call fcn.140034f80
test al, al
je 0x14005d5c5
lea rdx, [0x140176450]
lea rcx, [rbp + 0xe20]
call fcn.140062c00
lea rdx, [0x1401761f0]
mov rsi, rax
lea rcx, [rbp + 0xe40]
call fcn.140062c00
mov r8, rsi
lea rcx, [0x1401766a0]
mov rdx, rax
call fcn.14007dc50
cmp byte [0x1401768b0], r14b
je 0x14005d380
cmp byte [0x1401763ef], r14b
je 0x14005bf3e
call fcn.1400423e0
mov byte [rsp + 0x73], reloc.WLDAP32.dll_Ordinal_30
movabs r11, 0x76ff865cc5370036
mov byte [rsp + 0x74], 0x40
mov r10, r11
mov byte [rsp + 0x75], 0x5d
mov r9, r14
mov byte [rsp + 0x76], 0x41
mov byte [rsp + 0x77], 0x49
mov byte [rsp + 0x78], Ordinal_60
movzx eax, byte [rsp + 0x73]
lea rax, [rsp + 0x73]
sub r10, rax
nop dword [rax]
mov rcx, r9
lea rdx, [rsp + 0x73]
add rdx, r9
and ecx, 0xf
cmp rcx, 0xf
mov rax, r11
cmovae rcx, r12
movsx r8, byte [rdx]
add dl, r10b
shl cl, 2
shr rax, cl
and al, 0xf
xor al, dl
xor al, r8b
mov byte [rsp + r9 + 0x73], al
inc r9
cmp r9, 6
jb 0x14005bf80
xor edx, edx
lea rcx, [rsp + 0x73]
call fcn.140051190
test al, al
je 0x14005c215
mov dword [rbp + 0x2fc], r14d
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov r14d, dword [rcx + r10 + 0x88]
add r14, r10
cmp r14, r10
je 0x14005c067
mov r9d, dword [r14 + 0x18]
test r9d, r9d
je 0x14005c067
mov esi, dword [r14 + 0x20]
nop word [rax + rax]
dec r9d
mov r8d, 0x811c9dc5
lea rcx, [rsi + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x14005c062
nop
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x14005c040
cmp r8d, 0xcded1a85
je 0x14005c06c
test r9d, r9d
jne 0x14005c020
mov rax, qword [rax]
jmp 0x14005bff0
mov eax, dword [r14 + 0x24]
mov ecx, dword [r14 + 0x1c]
add rax, r10
add rcx, r10
movzx eax, word [rax + r9*2]
mov esi, dword [rcx + rax*4]
lea rcx, [rbp + 0x2fc]
add rsi, r10
call fcn.140063b80
mov ecx, dword [rax]
call rsi
mov dword [rbp + 0x300], 0
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov r14d, dword [rcx + r10 + 0x88]
add r14, r10
cmp r14, r10
je 0x14005c127
mov r9d, dword [r14 + 0x18]
test r9d, r9d
je 0x14005c127
mov esi, dword [r14 + 0x20]
nop word [rax + rax]
dec r9d
mov r8d, 0x811c9dc5
lea rcx, [rsi + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x14005c122
nop
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x14005c100
cmp r8d, 0xe80fd3a
je 0x14005c12c
test r9d, r9d
jne 0x14005c0e0
mov rax, qword [rax]
jmp 0x14005c0b0
mov eax, dword [r14 + 0x24]
mov ecx, dword [r14 + 0x1c]
add rax, r10
add rcx, r10
movzx eax, word [rax + r9*2]
mov esi, dword [rcx + rax*4]
lea rcx, [rbp + 0x300]
add rsi, r10
call fcn.140063b80
mov ecx, dword [rax]
call rsi
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov r14d, dword [rcx + r10 + 0x88]
add r14, r10
cmp r14, r10
je 0x14005c1e7
mov r9d, dword [r14 + 0x18]
test r9d, r9d
je 0x14005c1e7
mov esi, dword [r14 + 0x20]
nop word [rax + rax]
dec r9d
mov r8d, 0x811c9dc5
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rsi]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x14005c1e2
nop dword [rax]
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x14005c1c0
cmp r8d, 0xa52bcaf9
je 0x14005c1ec
test r9d, r9d
jne 0x14005c1a0
mov rax, qword [rax]
jmp 0x14005c170
mov eax, dword [r14 + 0x24]
mov ecx, dword [r14 + 0x1c]
add rax, r10
add rcx, r10
movzx eax, word [rax + r9*2]
mov ecx, dword [rcx + rax*4]
add rcx, r10
call rcx
xor r14d, r14d
mov dword [0], 0xdead
cmp byte [0x1401763ef], 0
je 0x14005c223
call fcn.1400423e0
lea rdx, [0x140176450]
lea rcx, [rbp + 0xe60]
call fcn.140062c00
lea rdx, [0x1401761f0]
mov rsi, rax
lea rcx, [rbp + 0xf60]
call fcn.140062c00
mov r8, rsi
lea rcx, [0x1401766a0]
mov rdx, rax
call fcn.14007dc50
cmp byte [0x1401768b0], 0
je 0x14005d159
mov byte [rbp - 0x1b], 0xf5
movabs r11, 0x892291223bfa85ac
mov byte [rbp - 0x1a], 0xd4
mov r10, r11
mov byte [rbp - 0x19], 0xce
mov r9, r14
mov byte [rbp - 0x18], 0xd5
mov byte [rbp - 0x17], 0xde
mov byte [rbp - 0x16], 0xdf
mov byte [rbp - 0x15], 0xcd
mov byte [rbp - 0x14], Ordinal_211
mov byte [rbp - 0x13], 0xb6
movzx eax, byte [rbp - 0x1b]
lea rax, [rbp - 0x1b]
sub r10, rax
nop word [rax + rax]
mov rcx, r9
lea rdx, [rbp - 0x1b]
add rdx, r9
and ecx, 0xf
cmp rcx, 0xf
mov rax, r11
cmovae rcx, r12
movsx r8, byte [rdx]
add dl, r10b
shl cl, 2
shr rax, cl
and al, 0xf
xor al, dl
xor al, r8b
mov byte [rbp + r9 - 0x1b], al
inc r9
cmp r9, 9
jb 0x14005c2b0
lea rdx, [rbp - 0x1b]
lea rcx, [rbp + 0xf20]
call fcn.140062c00
mov r8, rax
lea rdx, [rbp + 0x588]
lea rcx, [0x1401766a0]
call fcn.140083c50
lea rcx, [rbp + 0x588]
call fcn.140062940
lea rcx, [rbp + 0x588]
mov rsi, rax
call fcn.140062950
mov r12d, dword [rbp + 0x2c4]
cmp rsi, rax
je 0x14005c343
sub eax, esi
add r12d, eax
mov dword [rbp + 0x2c4], r12d
cmp r12d, 0xf
jle 0x14005ceff
lea rcx, [rbp + 0x588]
call fcn.140062970
mov byte [rbp - 0x2c], 0x43
movabs r11, 0x18fd9fb21882c770
mov byte [rbp - 0x2b], 0x40
mov r10, r11
mov byte [rbp - 0x2a], 0x44
mov r9, r14
mov byte [rbp - 0x29], Ordinal_79
mov r12d, reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x28], 0x43
mov byte [rbp - 0x27], Ordinal_79
mov byte [rbp - 0x26], 0x7e
movzx eax, byte [rbp - 0x2c]
lea rax, [rbp - 0x2c]
mov dword [rbp + 0x2c4], r14d
sub r10, rax
nop dword [rax]
mov rcx, r9
lea rdx, [rbp - 0x2c]
add rdx, r9
and ecx, r12d
cmp rcx, r12
mov rax, r11
cmovae rcx, r12
movsx r8, byte [rdx]
add dl, r10b
shl cl, 2
shr rax, cl
and al, r12b
xor al, dl
xor al, r8b
mov byte [rbp + r9 - 0x2c], al
inc r9
cmp r9, 7
jb 0x14005c3a0
lea rdx, [rbp - 0x2c]
lea rcx, [rbp + 0xf80]
call fcn.140062c00
mov r8, rax
lea rdx, [rbp + 0x570]
lea rcx, [0x1401766a0]
call fcn.140079700
cmp byte [0x1401768b0], 0
je 0x14005cc9b
mov byte [rbp - 0x6f], reloc.WLDAP32.dll_Ordinal_30
movabs r11, 0x76ff865cc5370036
mov byte [rbp - 0x6e], 0x40
mov r10, r11
mov byte [rbp - 0x6d], 0x5d
mov r9, r14
mov byte [rbp - 0x6c], 0x41
mov byte [rbp - 0x6b], 0x49
mov byte [rbp - 0x6a], gethostname
movzx eax, byte [rbp - 0x6f]
lea rax, [rbp - 0x6f]
sub r10, rax
mov rcx, r9
lea rdx, [rbp - 0x6f]
add rdx, r9
and ecx, r12d
cmp rcx, r12
mov rax, r11
cmovae rcx, r12
movsx r8, byte [rdx]
add dl, r10b
shl cl, 2
shr rax, cl
and al, r12b
xor al, dl
xor al, r8b
mov byte [rbp + r9 - 0x6f], al
inc r9
cmp r9, 6
jb 0x14005c440
xor edx, edx
lea rcx, [rbp - 0x6f]
call fcn.140051190
test al, al
je 0x14005c6d5
mov dword [rbp + 0x304], r14d
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov r14d, dword [rcx + r10 + 0x88]
add r14, r10
cmp r14, r10
je 0x14005c527
mov r9d, dword [r14 + 0x18]
test r9d, r9d
je 0x14005c527
mov esi, dword [r14 + 0x20]
nop word [rax + rax]
dec r9d
mov r8d, 0x811c9dc5
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rsi]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x14005c522
nop dword [rax]
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x14005c500
cmp r8d, 0xcded1a85
je 0x14005c52c
test r9d, r9d
jne 0x14005c4e0
mov rax, qword [rax]
jmp 0x14005c4b0
mov eax, dword [r14 + 0x24]
mov ecx, dword [r14 + 0x1c]
add rax, r10
add rcx, r10
movzx eax, word [rax + r9*2]
mov esi, dword [rcx + rax*4]
lea rcx, [rbp + 0x304]
add rsi, r10
call fcn.140063b80
mov ecx, dword [rax]
call rsi
mov dword [rbp + 0x308], 0
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov r14d, dword [rcx + r10 + 0x88]
add r14, r10
cmp r14, r10
je 0x14005c5e7
mov r9d, dword [r14 + 0x18]
test r9d, r9d
je 0x14005c5e7
mov esi, dword [r14 + 0x20]
nop word [rax + rax]
dec r9d
mov r8d, 0x811c9dc5
lea rcx, [rsi + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x14005c5e2
nop
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x14005c5c0
cmp r8d, 0xe80fd3a
je 0x14005c5ec
test r9d, r9d
jne 0x14005c5a0
mov rax, qword [rax]
jmp 0x14005c570
mov eax, dword [r14 + 0x24]
mov ecx, dword [r14 + 0x1c]
add rax, r10
add rcx, r10
movzx eax, word [rax + r9*2]
mov esi, dword [rcx + rax*4]
lea rcx, [rbp + 0x308]
add rsi, r10
call fcn.140063b80
mov ecx, dword [rax]
call rsi
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov r14d, dword [rcx + r10 + 0x88]
add r14, r10
cmp r14, r10
je 0x14005c6a7
mov r9d, dword [r14 + 0x18]
test r9d, r9d
je 0x14005c6a7
mov esi, dword [r14 + 0x20]
nop word [rax + rax]
dec r9d
mov r8d, 0x811c9dc5
lea rcx, [rsi + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x14005c6a2
nop
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x14005c680
cmp r8d, 0xa52bcaf9
je 0x14005c6ac
test r9d, r9d
jne 0x14005c660
mov rax, qword [rax]
jmp 0x14005c630
mov eax, dword [r14 + 0x24]
mov ecx, dword [r14 + 0x1c]
add rax, r10
add rcx, r10
movzx eax, word [rax + r9*2]
mov ecx, dword [rcx + rax*4]
add rcx, r10
call rcx
xor r14d, r14d
mov dword [0], 0xdead
lea rcx, [0x140174f80]
call fcn.140062940
mov r9d, 0x40
mov dword [rsp + 0x20], r13d
mov rdx, rax
lea rcx, [rbp + 0x1040]
lea r8d, [r9 - 0x1e]
call fcn.140061a60
lea rcx, [rbp + 0x570]
call fcn.1400619a0
lea rcx, [rbp + 0x570]
mov rsi, rax
call fcn.1400619b0
mov r8, rsi
lea rcx, [rbp + 0x1040]
mov rdx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::write_char_const____ptr64__long_long___int64_____ptr64]
lea rcx, [rbp + 0x1040]
call fcn.140061a20
mov rax, qword [rbp + 0x1040]
xor r8d, r8d
xor edx, edx
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0x1040]
add rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::clear_int__bool____ptr64]
lea rcx, [0x140174f80]
call fcn.140062940
mov rdx, rax
lea rcx, [rbp + 0x8a0]
call fcn.140062c00
lea rcx, [rbp + 0x8a0]
call fcn.1400422d0
lea rcx, [rbp + 0x8a0]
movzx esi, al
call fcn.140062ae0
test sil, sil
je 0x14005ca31
lea rcx, [0x140174f80]
call fcn.140062940
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
lea rdx, [0x14004ce30]
lea rcx, [rbp + 0x5c8]
call fcn.140064330
mov rcx, rax
call fcn.14004daa0
lea rcx, [rbp + 0x5c8]
call fcn.14004da80
lea rdx, [0x1400574e0]
lea rcx, [rbp + 0x5d8]
call fcn.140064330
mov rcx, rax
call fcn.14004daa0
lea rcx, [rbp + 0x5d8]
call fcn.14004da80
lea rdx, [0x1401767e0]
lea rcx, [0x140175118]
call fcn.140062ab0
lea rdx, [0x140176800]
lea rcx, [0x140175098]
call fcn.140062ab0
lea rdx, [0x140176820]
lea rcx, [0x140175218]
call fcn.140062ab0
lea rdx, [0x140176840]
lea rcx, [rbp + 0xfa0]
call fcn.140062c40
mov rcx, rax
call fcn.1400428e0
mov rdx, rax
lea rcx, [rbp + 0xfc0]
call fcn.140042980
lea rdx, [rbp + 0x6f0]
lea rcx, [rbp + 0xd58]
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
mov eax, dword [rax + 0x20]
movaps xmmword [rbp + 0x6f0], xmm0
movaps xmmword [rbp + 0x700], xmm1
mov dword [rbp + 0x710], eax
call fcn.140042860
mov rdx, rax
lea rcx, [0x140174fc0]
call fcn.140062b40
lea rcx, [rbp + 0xd58]
call fcn.140062ae0
lea rdx, [0x140176860]
lea rcx, [rbp + 0xe80]
call fcn.140062c40
mov rcx, rax
call fcn.1400428e0
mov rdx, rax
lea rcx, [rbp + 0xfe8]
call fcn.140042980
lea rdx, [rbp + 0x720]
lea rcx, [rbp + 0xd78]
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
mov eax, dword [rax + 0x20]
movaps xmmword [rbp + 0x720], xmm0
movaps xmmword [rbp + 0x730], xmm1
mov dword [rbp + 0x740], eax
call fcn.140042860
mov rdx, rax
lea rcx, [0x140175020]
call fcn.140062b40
lea rcx, [rbp + 0xd78]
call fcn.140062ae0
lea rcx, [0x140176880]
mov esi, r14d
call fcn.1400628a0
test rax, rax
je 0x14005c9fa
nop dword [rax + rax]
mov rdx, r14
lea rcx, [0x140176880]
call fcn.140062870
mov rdx, rax
lea rcx, [rbp + 0xde0]
call fcn.1400615d0
lea rdx, [rbp + 0xe00]
lea rcx, [rbp + 0xea0]
call fcn.140062c40
mov rcx, rax
call fcn.1400428e0
mov rdx, rax
lea rcx, [rbp + 0x1010]
call fcn.140042980
lea rdx, [rbp + 0x750]
lea rcx, [rbp + 0xd98]
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
mov eax, dword [rax + 0x20]
movaps xmmword [rbp + 0x750], xmm0
movaps xmmword [rbp + 0x760], xmm1
mov dword [rbp + 0x770], eax
call fcn.140042860
mov rdx, rax
lea rcx, [0x1401751d8]
call fcn.140062b40
lea rcx, [rbp + 0xd98]
call fcn.140062ae0
lea rcx, [rbp + 0xde0]
call fcn.140061610
inc esi
lea rcx, [0x140176880]
movsxd r14, esi
call fcn.1400628a0
cmp r14, rax
jb 0x14005c940
lea rcx, [rbp + 0x1040]
mov byte [reloc.WS2_32.dll_accept], 0
mov byte [0x1401761db], 1
call fcn.140042590
lea rcx, [rbp + 0x570]
call fcn.1400619c0
lea rcx, [rbp + 0x588]
call fcn.140062ae0
jmp 0x14005d5c2
mov dword [rbp + 0x30c], r14d
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov r14d, dword [rcx + r10 + 0x88]
add r14, r10
cmp r14, r10
je 0x14005cac7
mov r9d, dword [r14 + 0x18]
test r9d, r9d
je 0x14005cac7
mov esi, dword [r14 + 0x20]
nop word [rax + rax]
dec r9d
mov r8d, 0x811c9dc5
lea rcx, [rsi + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x14005cac2
nop
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x14005caa0
cmp r8d, 0xcded1a85
je 0x14005cacc
test r9d, r9d
jne 0x14005ca80
mov rax, qword [rax]
jmp 0x14005ca50
mov eax, dword [r14 + 0x24]
mov ecx, dword [r14 + 0x1c]
add rax, r10
add rcx, r10
movzx eax, word [rax + r9*2]
mov esi, dword [rcx + rax*4]
lea rcx, [rbp + 0x30c]
add rsi, r10
call fcn.140063b80
mov ecx, dword [rax]
call rsi
mov dword [rbp + 0x310], 0
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov r14d, dword [rcx + r10 + 0x88]
add r14, r10
cmp r14, r10
je 0x14005cb87
mov r9d, dword [r14 + 0x18]
test r9d, r9d
je 0x14005cb87
mov esi, dword [r14 + 0x20]
nop word [rax + rax]
dec r9d
mov r8d, 0x811c9dc5
lea rcx, [rsi + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x14005cb82
nop
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x14005cb60
cmp r8d, 0xe80fd3a
je 0x14005cb8c
test r9d, r9d
jne 0x14005cb40
mov rax, qword [rax]
jmp 0x14005cb10
mov eax, dword [r14 + 0x24]
mov ecx, dword [r14 + 0x1c]
add rax, r10
add rcx, r10
movzx eax, word [rax + r9*2]
mov esi, dword [rcx + rax*4]
lea rcx, [rbp + 0x310]
add rsi, r10
call fcn.140063b80
mov ecx, dword [rax]
call rsi
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov r14d, dword [rcx + r10 + 0x88]
add r14, r10
cmp r14, r10
je 0x14005cc47
mov r9d, dword [r14 + 0x18]
test r9d, r9d
je 0x14005cc47
mov esi, dword [r14 + 0x20]
nop word [rax + rax]
dec r9d
mov r8d, 0x811c9dc5
lea rcx, [rsi + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x14005cc42
nop
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x14005cc20
cmp r8d, 0xa52bcaf9
je 0x14005cc4c
test r9d, r9d
jne 0x14005cc00
mov rax, qword [rax]
jmp 0x14005cbd0
mov eax, dword [r14 + 0x24]
mov ecx, dword [r14 + 0x1c]
add rax, r10
add rcx, r10
movzx eax, word [rax + r9*2]
mov ecx, dword [rcx + rax*4]
add rcx, r10
call rcx
lea rcx, [rbp + 0x1040]
mov dword [0], 0xdead
call fcn.140042590
lea rcx, [rbp + 0x570]
call fcn.1400619c0
lea rcx, [rbp + 0x588]
call fcn.140062ae0
jmp 0x14005d5c2
mov dword [rbp + 0x314], r14d
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov r14d, dword [rcx + r10 + 0x88]
add r14, r10
cmp r14, r10
je 0x14005cd37
mov r9d, dword [r14 + 0x18]
test r9d, r9d
je 0x14005cd37
mov esi, dword [r14 + 0x20]
nop word [rax + rax]
dec r9d
mov r8d, 0x811c9dc5
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rsi]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x14005cd32
nop dword [rax]
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x14005cd10
cmp r8d, 0xcded1a85
je 0x14005cd3c
test r9d, r9d
jne 0x14005ccf0
mov rax, qword [rax]
jmp 0x14005ccc0
mov eax, dword [r14 + 0x24]
mov ecx, dword [r14 + 0x1c]
add rax, r10
add rcx, r10
movzx eax, word [rax + r9*2]
mov esi, dword [rcx + rax*4]
lea rcx, [rbp + 0x314]
add rsi, r10
call fcn.140063b80
mov ecx, dword [rax]
call rsi
mov dword [rbp + 0x318], 0
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov r14d, dword [rcx + r10 + 0x88]
add r14, r10
cmp r14, r10
je 0x14005cdf7
mov r9d, dword [r14 + 0x18]
test r9d, r9d
je 0x14005cdf7
mov esi, dword [r14 + 0x20]
nop word [rax + rax]
dec r9d
mov r8d, 0x811c9dc5
lea rcx, [rsi + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x14005cdf2
nop
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x14005cdd0
cmp r8d, 0xe80fd3a
je 0x14005cdfc
test r9d, r9d
jne 0x14005cdb0
mov rax, qword [rax]
jmp 0x14005cd80
mov eax, dword [r14 + 0x24]
mov ecx, dword [r14 + 0x1c]
add rax, r10
add rcx, r10
movzx eax, word [rax + r9*2]
mov esi, dword [rcx + rax*4]
lea rcx, [rbp + 0x318]
add rsi, r10
call fcn.140063b80
mov ecx, dword [rax]
call rsi
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov r14d, dword [rcx + r10 + 0x88]
add r14, r10
cmp r14, r10
je 0x14005ceb7
mov r9d, dword [r14 + 0x18]
test r9d, r9d
je 0x14005ceb7
mov esi, dword [r14 + 0x20]
nop word [rax + rax]
dec r9d
mov r8d, 0x811c9dc5
lea rcx, [rsi + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x14005ceb2
nop
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x14005ce90
cmp r8d, 0xa52bcaf9
je 0x14005cebc
test r9d, r9d
jne 0x14005ce70
mov rax, qword [rax]
jmp 0x14005ce40
mov eax, dword [r14 + 0x24]
mov ecx, dword [r14 + 0x1c]
add rax, r10
add rcx, r10
movzx eax, word [rax + r9*2]
mov ecx, dword [rcx + rax*4]
add rcx, r10
call rcx
lea rcx, [rbp + 0x570]
mov dword [0], 0xdead
call fcn.1400619c0
lea rcx, [rbp + 0x588]
call fcn.140062ae0
jmp 0x14005d5c2
mov dword [rbp + 0x31c], r14d
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov r14d, dword [rcx + r10 + 0x88]
add r14, r10
cmp r14, r10
je 0x14005cf97
mov r9d, dword [r14 + 0x18]
test r9d, r9d
je 0x14005cf97
mov esi, dword [r14 + 0x20]
nop word [rax + rax]
dec r9d
mov r8d, 0x811c9dc5
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rsi]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x14005cf92
nop dword [rax]
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x14005cf70
cmp r8d, 0xcded1a85
je 0x14005cf9c
test r9d, r9d
jne 0x14005cf50
mov rax, qword [rax]
jmp 0x14005cf20
mov eax, dword [r14 + 0x24]
mov ecx, dword [r14 + 0x1c]
add rax, r10
add rcx, r10
movzx eax, word [rax + r9*2]
mov esi, dword [rcx + rax*4]
lea rcx, [rbp + 0x31c]
add rsi, r10
call fcn.140063b80
mov ecx, dword [rax]
call rsi
mov dword [rbp + 0x320], 0
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov r14d, dword [rcx + r10 + 0x88]
add r14, r10
cmp r14, r10
je 0x14005d057
mov r9d, dword [r14 + 0x18]
test r9d, r9d
je 0x14005d057
mov esi, dword [r14 + 0x20]
nop word [rax + rax]
dec r9d
mov r8d, 0x811c9dc5
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rsi]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x14005d052
nop dword [rax]
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x14005d030
cmp r8d, 0xe80fd3a
je 0x14005d05c
test r9d, r9d
jne 0x14005d010
mov rax, qword [rax]
jmp 0x14005cfe0
mov eax, dword [r14 + 0x24]
mov ecx, dword [r14 + 0x1c]
add rax, r10
add rcx, r10
movzx eax, word [rax + r9*2]
mov esi, dword [rcx + rax*4]
lea rcx, [rbp + 0x320]
add rsi, r10
call fcn.140063b80
mov ecx, dword [rax]
call rsi
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov r14d, dword [rcx + r10 + 0x88]
add r14, r10
cmp r14, r10
je 0x14005d117
mov r9d, dword [r14 + 0x18]
test r9d, r9d
je 0x14005d117
mov esi, dword [r14 + 0x20]
nop word [rax + rax]
dec r9d
mov r8d, 0x811c9dc5
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rsi]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x14005d112
nop dword [rax]
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x14005d0f0
cmp r8d, 0xa52bcaf9
je 0x14005d11c
test r9d, r9d
jne 0x14005d0d0
mov rax, qword [rax]
jmp 0x14005d0a0
mov eax, dword [r14 + 0x24]
mov ecx, dword [r14 + 0x1c]
add rax, r10
add rcx, r10
movzx eax, word [rax + r9*2]
mov ecx, dword [rcx + rax*4]
add rcx, r10
call rcx
lea rcx, [rbp + 0x588]
mov dword [0], 0xdead
mov r12d, reloc.WS2_32.dll_ntohs
call fcn.140062ae0
jmp 0x14005d5c2
mov dword [rbp + 0x324], r14d
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov r14d, dword [rcx + r10 + 0x88]
add r14, r10
cmp r14, r10
je 0x14005d1f7
mov r9d, dword [r14 + 0x18]
test r9d, r9d
je 0x14005d1f7
mov esi, dword [r14 + 0x20]
nop word [rax + rax]
dec r9d
mov r8d, 0x811c9dc5
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rsi]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x14005d1f2
nop dword [rax]
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x14005d1d0
cmp r8d, 0xcded1a85
je 0x14005d1fc
test r9d, r9d
jne 0x14005d1b0
mov rax, qword [rax]
jmp 0x14005d180
mov eax, dword [r14 + 0x24]
mov ecx, dword [r14 + 0x1c]
add rax, r10
add rcx, r10
movzx eax, word [rax + r9*2]
mov esi, dword [rcx + rax*4]
lea rcx, [rbp + 0x324]
add rsi, r10
call fcn.140063b80
mov ecx, dword [rax]
call rsi
mov dword [rbp + 0x328], 0
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov r14d, dword [rcx + r10 + 0x88]
add r14, r10
cmp r14, r10
je 0x14005d2b7
mov r9d, dword [r14 + 0x18]
test r9d, r9d
je 0x14005d2b7
mov esi, dword [r14 + 0x20]
nop word [rax + rax]
dec r9d
mov r8d, 0x811c9dc5
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rsi]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x14005d2b2
nop dword [rax]
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x14005d290
cmp r8d, 0xe80fd3a
je 0x14005d2bc
test r9d, r9d
jne 0x14005d270
mov rax, qword [rax]
jmp 0x14005d240
mov eax, dword [r14 + 0x24]
mov ecx, dword [r14 + 0x1c]
add rax, r10
add rcx, r10
movzx eax, word [rax + r9*2]
mov esi, dword [rcx + rax*4]
lea rcx, [rbp + 0x328]
add rsi, r10
call fcn.140063b80
mov ecx, dword [rax]
call rsi
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov r14d, dword [rcx + r10 + 0x88]
add r14, r10
cmp r14, r10
je 0x14005d37b
mov r9d, dword [r14 + 0x18]
test r9d, r9d
je 0x14005d37b
mov esi, dword [r14 + 0x20]
nop word [rax + rax]
dec r9d
mov r8d, 0x811c9dc5
lea rcx, [rsi + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x14005d376
nop
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x14005d350
cmp r8d, 0xa52bcaf9
je 0x14005d59c
test r9d, r9d
jne 0x14005d330
mov rax, qword [rax]
jmp 0x14005d300
mov dword [rbp + 0x32c], r14d
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov r14d, dword [rcx + r10 + 0x88]
add r14, r10
cmp r14, r10
je 0x14005d417
mov r9d, dword [r14 + 0x18]
test r9d, r9d
je 0x14005d417
mov esi, dword [r14 + 0x20]
nop word [rax + rax]
dec r9d
mov r8d, 0x811c9dc5
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rsi]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x14005d412
nop dword [rax]
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x14005d3f0
cmp r8d, 0xcded1a85
je 0x14005d41c
test r9d, r9d
jne 0x14005d3d0
mov rax, qword [rax]
jmp 0x14005d3a0
mov eax, dword [r14 + 0x24]
mov ecx, dword [r14 + 0x1c]
add rax, r10
add rcx, r10
movzx eax, word [rax + r9*2]
mov esi, dword [rcx + rax*4]
lea rcx, [rbp + 0x32c]
add rsi, r10
call fcn.140063b80
mov ecx, dword [rax]
call rsi
mov dword [rbp + 0x330], 0
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov r14d, dword [rcx + r10 + 0x88]
add r14, r10
cmp r14, r10
je 0x14005d4d7
mov r9d, dword [r14 + 0x18]
test r9d, r9d
je 0x14005d4d7
mov esi, dword [r14 + 0x20]
nop word [rax + rax]
dec r9d
mov r8d, 0x811c9dc5
lea rcx, [rsi + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x14005d4d2
nop
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x14005d4b0
cmp r8d, 0xe80fd3a
je 0x14005d4dc
test r9d, r9d
jne 0x14005d490
mov rax, qword [rax]
jmp 0x14005d460
mov eax, dword [r14 + 0x24]
mov ecx, dword [r14 + 0x1c]
add rax, r10
add rcx, r10
movzx eax, word [rax + r9*2]
mov esi, dword [rcx + rax*4]
lea rcx, [rbp + 0x330]
add rsi, r10
call fcn.140063b80
mov ecx, dword [rax]
call rsi
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov r14d, dword [rcx + r10 + 0x88]
add r14, r10
cmp r14, r10
je 0x14005d597
mov r9d, dword [r14 + 0x18]
test r9d, r9d
je 0x14005d597
mov esi, dword [r14 + 0x20]
nop word [rax + rax]
dec r9d
mov r8d, 0x811c9dc5
lea rcx, [rsi + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x14005d592
nop
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x14005d570
cmp r8d, 0xa52bcaf9
je 0x14005d59c
test r9d, r9d
jne 0x14005d550
mov rax, qword [rax]
jmp 0x14005d520
mov eax, dword [r14 + 0x24]
mov ecx, dword [r14 + 0x1c]
add rax, r10
add rcx, r10
movzx eax, word [rax + r9*2]
mov ecx, dword [rcx + rax*4]
add rcx, r10
call rcx
mov dword [0], 0xdead
xor r14d, r14d
mov byte [rbp - 0x39], reloc.WLDAP32.dll_Ordinal_30
movabs r11, 0x76ff865cc5370036
mov byte [rbp - 0x38], 0x40
mov r10, r11
mov byte [rbp - 0x37], 0x5d
mov r9, r14
mov byte [rbp - 0x36], 0x41
mov byte [rbp - 0x35], 0x49
mov byte [rbp - 0x34], gethostname
movzx eax, byte [rbp - 0x39]
lea rax, [rbp - 0x39]
sub r10, rax
nop dword [rax + rax]
mov rcx, r9
lea rdx, [rbp - 0x39]
add rdx, r9
and ecx, 0xf
cmp rcx, 0xf
mov rax, r11
cmovae rcx, r12
movsx r8, byte [rdx]
add dl, r10b
shl cl, 2
shr rax, cl
and al, 0xf
xor al, dl
xor al, r8b
mov byte [rbp + r9 - 0x39], al
inc r9
cmp r9, 6
jb 0x14005d600
xor edx, edx
lea rcx, [rbp - 0x39]
call fcn.140051190
test al, al
je 0x14005d865
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov r14d, dword [rcx + r10 + 0x88]
add r14, r10
cmp r14, r10
je 0x14005d6d7
mov r9d, dword [r14 + 0x18]
test r9d, r9d
je 0x14005d6d7
mov esi, dword [r14 + 0x20]
nop word [rax + rax]
dec r9d
mov r8d, 0x811c9dc5
lea rcx, [rsi + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x14005d6d2
nop
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x14005d6b0
cmp r8d, 0xcded1a85
je 0x14005d6dc
test r9d, r9d
jne 0x14005d690
mov rax, qword [rax]
jmp 0x14005d660
mov eax, dword [r14 + 0x24]
mov ecx, dword [r14 + 0x1c]
add rax, r10
add rcx, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
xor ecx, ecx
add rdx, r10
call rdx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov r14d, dword [rcx + r10 + 0x88]
add r14, r10
cmp r14, r10
je 0x14005d787
mov r9d, dword [r14 + 0x18]
test r9d, r9d
je 0x14005d787
mov esi, dword [r14 + 0x20]
nop word [rax + rax]
dec r9d
mov r8d, 0x811c9dc5
lea rcx, [rsi + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x14005d782
nop
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x14005d760
cmp r8d, 0xe80fd3a
je 0x14005d78c
test r9d, r9d
jne 0x14005d740
mov rax, qword [rax]
jmp 0x14005d710
mov eax, dword [r14 + 0x24]
mov ecx, dword [r14 + 0x1c]
add rax, r10
add rcx, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
xor ecx, ecx
add rdx, r10
call rdx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov r14d, dword [rcx + r10 + 0x88]
add r14, r10
cmp r14, r10
je 0x14005d837
mov r9d, dword [r14 + 0x18]
test r9d, r9d
je 0x14005d837
mov esi, dword [r14 + 0x20]
nop word [rax + rax]
dec r9d
mov r8d, 0x811c9dc5
lea rcx, [rsi + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x14005d832
nop
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x14005d810
cmp r8d, 0xa52bcaf9
je 0x14005d83c
test r9d, r9d
jne 0x14005d7f0
mov rax, qword [rax]
jmp 0x14005d7c0
mov eax, dword [r14 + 0x24]
mov ecx, dword [r14 + 0x1c]
add rax, r10
add rcx, r10
movzx eax, word [rax + r9*2]
mov ecx, dword [rcx + rax*4]
add rcx, r10
call rcx
xor r14d, r14d
mov dword [0], 0xdead
lea rcx, [rbp + 0xcf8]
call fcn.1400554e0
mov byte [rbp - 0x25], 0x75
movabs rsi, 0x2708afa85b89822e
mov byte [rbp - 0x24], 0x5e
mov r10, rsi
mov byte [rbp - 0x23], 0x57
mov r9, r14
mov byte [rbp - 0x22], 0x4b
mov byte [rbp - 0x21], Ordinal_26
mov byte [rbp - 0x20], ntohl
mov byte [rbp - 0x1f], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x1e], 0
mov byte [rbp - 0x1d], reloc.WS2_32.dll_ntohl
mov byte [rbp - 0x1c], 0x3d
movzx eax, byte [rbp - 0x25]
lea rax, [rbp - 0x25]
sub r10, rax
nop dword [rax]
nop dword [rax + rax]
mov rcx, r9
lea rdx, [rbp - 0x25]
add rdx, r9
and ecx, 0xf
cmp rcx, 0xf
mov rax, rsi
cmovae rcx, r12
movsx r8, byte [rdx]
add dl, r10b
shl cl, 2
shr rax, cl
and al, 0xf
xor al, dl
xor al, r8b
mov byte [rbp + r9 - 0x25], al
inc r9
cmp r9, 0xa
jb 0x14005d8c0
movzx edx, bl
lea rcx, [rbp + 0x6b8]
call fcn.140064760
lea rax, [rbp - 0x25]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], 0
jne 0x14005d914
lea rdx, [rbp - 0x25]
lea rcx, [rbp + 0x6b8]
call fcn.140064780
lea rcx, [rbp + 0x6b8]
call fcn.140062940
mov rcx, rax
call fcn.140033fc0
movaps xmm1, xmm7
xorps xmm0, xmm0
call fcn.1400162e0
lea rcx, [rbp + 0x628]
call fcn.1400165e0
movss xmm0, dword [rax]
divss xmm0, dword [0x14010e424]
subss xmm0, dword [0x14010e4f8]
call fcn.140016390
mov byte [rbp - 0x12], 0xf2
movabs r11, 0x892291223bfa85ac
mov byte [rbp - 0x11], 0xc2
mov r10, r11
mov byte [rbp - 0x10], 0xcc
mov r9, r14
mov byte [rbp - 0xf], 0xce
mov byte [rbp - 0xe], 0xc9
mov byte [rbp - 0xd], 0xca
mov byte [rbp - 0xc], 0xdc
mov byte [rbp - 0xb], 0xc2
mov byte [rbp - 0xa], 0xb6
movzx eax, byte [rbp - 0x12]
lea rax, [rbp - 0x12]
sub r10, rax
mov rcx, r9
lea rdx, [rbp - 0x12]
add rdx, r9
and ecx, 0xf
cmp rcx, 0xf
mov rax, r11
cmovae rcx, r12
movsx r8, byte [rdx]
add dl, r10b
shl cl, 2
shr rax, cl
and al, 0xf
xor al, dl
xor al, r8b
mov byte [rbp + r9 - 0x12], al
inc r9
cmp r9, 9
jb 0x14005d9b1
lea rcx, [rbp - 0x12]
call fcn.140033fc0
movaps xmm1, xmm7
xorps xmm0, xmm0
call fcn.1400162e0
movaps xmm0, xmmword [0x14010e740]
lea rdx, [rbp + 0x5e8]
xor ecx, ecx
movups xmmword [rbp + 0x5e8], xmm0
call fcn.140004e10
mov byte [rbp - 0x33], 0x50
movabs rsi, 0x18fd9fb21882c770
mov byte [rbp - 0x32], 0x3e
mov r10, rsi
mov byte [rbp - 0x31], reloc.WS2_32.dll_recv
mov r9, r14
mov byte [rbp - 0x30], reloc.WS2_32.dll_listen
mov byte [rbp - 0x2f], reloc.WS2_32.dll_send
mov byte [rbp - 0x2e], 0x5c
mov byte [rbp - 0x2d], 0x7e
movzx eax, byte [rbp - 0x33]
lea rax, [rbp - 0x33]
sub r10, rax
mov rcx, r9
lea rdx, [rbp - 0x33]
add rdx, r9
and ecx, 0xf
cmp rcx, 0xf
mov rax, rsi
cmovae rcx, r12
movzx r8d, byte [rdx]
add dl, r10b
shl cl, 2
shr rax, cl
and al, 0xf
xor al, dl
xor al, r8b
mov byte [rbp + r9 - 0x33], al
inc r9
cmp r9, 7
jb 0x14005da52
lea rcx, [rbp - 0x33]
call fcn.140033fc0
mov rcx, qword [0x1401761e0]
lea rdx, [rbp + 0x3b8]
add rcx, 0x4748
movsd xmm0, qword [rcx]
movsd qword [rbp + 0x348], xmm0
call fcn.1400023d0
xor ecx, ecx
call fcn.14000c0e0
test al, al
je 0x14005db1e
movss xmm0, dword [rbp + 0x3b8]
lea rdx, [rbp + 0x3c0]
movss xmm1, dword [rbp + 0x3bc]
lea rcx, [rbp + 0x348]
addss xmm0, dword [rbp + 0x348]
addss xmm1, dword [rbp + 0x34c]
mov r8b, 1
movss dword [rbp + 0x3c0], xmm0
movss dword [rbp + 0x3c4], xmm1
call fcn.140013970
test al, al
je 0x14005db1e
mov byte [reloc.WS2_32.dll_accept], 0
mov byte [0x1401761de], 1
mov ecx, r13d
call fcn.140004e70
movss xmm1, dword [0x140176408]
xor ecx, ecx
mulss xmm1, dword [r15]
call fcn.140004f40
mov ecx, r13d
call fcn.140005010
lea rcx, [rbp + 0x6b8]
call fcn.140062ae0
lea rcx, [rbp + 0xcf8]
call fcn.140062ae0
call fcn.140011bc0
jmp 0x14006145b
cmp byte [0x1401761db], 0
je 0x14005fdb1
lea r8, [rbp + 0x3c8]
mov qword [rbp + 0x3c8], 0
xor edx, edx
mov qword [rbp + 0x3d0], 0
lea rcx, [rbp + 0x3d0]
call fcn.140012ca0
xor edx, edx
mov dword [rbp + 0x3d8], 0x44610000
lea rcx, [rbp + 0x3d8]
mov dword [rbp + 0x3dc], 0x44610000
call fcn.140012d30
lea rcx, [0x140175238]
call fcn.140062940
mov r8d, Ordinal_45
lea rdx, [rsp + 0x60]
mov rcx, rax
call fcn.14000f200
mov rcx, qword [0x1401761e0]
mov edx, 0xff
mov r9d, edx
mov dword [rsp + 0x20], __WSAFDIsSet
mov r8d, edx
mov rax, qword [rcx + 0x3ea0]
mov byte [rax + 0xb0], 1
mov rax, qword [rcx + 0x3ea0]
lea rcx, [rbp + 0xd28]
mov rsi, qword [rax + 0x290]
call fcn.1400338d0
mov rcx, rax
call fcn.1400048c0
mov rdx, qword [0x140176558]
lea r9, [rbp + 0x3f0]
mov dword [rsp + 0x30], eax
lea r8, [rbp + 0x3f8]
lea rax, [rbp + 0x3e0]
mov dword [rbp + 0x3e0], 0x3f800000
mov qword [rsp + 0x28], rax
mov rcx, rsi
lea rax, [rbp + 0x3e8]
mov dword [rbp + 0x3e4], 0x3f800000
mov qword [rsp + 0x20], rax
mov qword [rbp + 0x3e8], 0
mov dword [rbp + 0x3f0], 0x42840000
mov dword [rbp + 0x3f4], 0x42600000
mov dword [rbp + 0x3f8], 0xc1a00000
mov dword [rbp + 0x3fc], 0xc1300000
call fcn.14002bdb0
call fcn.140041a40
xor edx, edx
lea rcx, [0x1400513e0]
call qword [sym.imp.USER32.dll_EnumWindows]
mov byte [rbp - 0x3f], reloc.WLDAP32.dll_Ordinal_30
movabs r15, 0x76ff865cc5370036
mov byte [rbp - 0x3e], 0x40
mov r10, r15
mov byte [rbp - 0x3d], 0x5d
mov r9, r14
mov byte [rbp - 0x3c], 0x41
mov byte [rbp - 0x3b], 0x49
mov byte [rbp - 0x3a], gethostname
movzx eax, byte [rbp - 0x3f]
lea rax, [rbp - 0x3f]
sub r10, rax
nop
mov rcx, r9
lea rdx, [rbp - 0x3f]
add rdx, r9
and ecx, 0xf
cmp rcx, 0xf
mov rax, r15
cmovae rcx, r12
movsx r8, byte [rdx]
add dl, r10b
shl cl, 2
shr rax, cl
and al, 0xf
xor al, dl
xor al, r8b
mov byte [rbp + r9 - 0x3f], al
inc r9
cmp r9, 6
jb 0x14005dcf0
xor edx, edx
lea rcx, [rbp - 0x3f]
call fcn.140051190
test al, al
je 0x14005df87
mov dword [rbp + 0x334], r14d
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov r14d, dword [rcx + r10 + 0x88]
add r14, r10
cmp r14, r10
je 0x14005ddd7
mov r9d, dword [r14 + 0x18]
test r9d, r9d
je 0x14005ddd7
mov esi, dword [r14 + 0x20]
nop word [rax + rax]
dec r9d
mov r8d, 0x811c9dc5
lea rcx, [rsi + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x14005ddd2
nop
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x14005ddb0
cmp r8d, 0xcded1a85
je 0x14005dddc
test r9d, r9d
jne 0x14005dd90
mov rax, qword [rax]
jmp 0x14005dd60
mov ecx, dword [r14 + 0x24]
add rcx, r10
movzx edx, word [rcx + r9*2]
mov ecx, dword [r14 + 0x1c]
add rcx, r10
mov esi, dword [rcx + rdx*4]
lea rcx, [rbp + 0x334]
add rsi, r10
call fcn.140063b80
mov ecx, dword [rax]
call rsi
mov dword [rbp + 0x338], 0
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov r14d, dword [rcx + r10 + 0x88]
add r14, r10
cmp r14, r10
je 0x14005de97
mov r9d, dword [r14 + 0x18]
test r9d, r9d
je 0x14005de97
mov esi, dword [r14 + 0x20]
nop word [rax + rax]
dec r9d
mov r8d, 0x811c9dc5
lea rcx, [rsi + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x14005de92
nop
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x14005de70
cmp r8d, 0xe80fd3a
je 0x14005de9c
test r9d, r9d
jne 0x14005de50
mov rax, qword [rax]
jmp 0x14005de20
mov ecx, dword [r14 + 0x24]
add rcx, r10
movzx edx, word [rcx + r9*2]
mov ecx, dword [r14 + 0x1c]
add rcx, r10
mov esi, dword [rcx + rdx*4]
lea rcx, [rbp + 0x338]
add rsi, r10
call fcn.140063b80
mov ecx, dword [rax]
call rsi
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov r14d, dword [rcx + r10 + 0x88]
add r14, r10
cmp r14, r10
je 0x14005df57
mov r9d, dword [r14 + 0x18]
test r9d, r9d
je 0x14005df57
mov esi, dword [r14 + 0x20]
nop word [rax + rax]
dec r9d
mov r8d, 0x811c9dc5
lea rcx, [rsi + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x14005df52
nop
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x14005df30
cmp r8d, 0xa52bcaf9
je 0x14005df5c
test r9d, r9d
jne 0x14005df10
mov rax, qword [rax]
jmp 0x14005dee0
mov ecx, dword [r14 + 0x24]
add rcx, r10
movzx edx, word [rcx + r9*2]
mov ecx, dword [r14 + 0x1c]
add rcx, r10
mov eax, dword [rcx + rdx*4]
add rax, r10
call rax
mov dword [0], 0xdead
jmp 0x14006141d
xorps xmm2, xmm2
lea rcx, [rbp + 0x630]
xorps xmm1, xmm1
call fcn.1400021b0
mov rcx, rax
call fcn.140016b40
lea rcx, [0x14010bde8]
call fcn.140033fc0
movaps xmm1, xmm7
xorps xmm0, xmm0
call fcn.1400162e0
mov rcx, qword [0x1401763f8]
call fcn.140012820
xorps xmm2, xmm2
lea rcx, [rbp + 0x6a0]
xorps xmm1, xmm1
call fcn.1400021b0
cmp dword [0x1401763f4], 0
lea rdx, str.Main
mov r8, rax
sete cl
xor r9d, r9d
call fcn.140034a20
test al, al
je 0x14005dffd
mov dword [0x1401763f4], r14d
xorps xmm2, xmm2
lea rcx, [rbp + 0x6a8]
xorps xmm1, xmm1
call fcn.1400021b0
cmp dword [0x1401763f4], 1
lea rdx, str.Other
mov r8, rax
sete cl
xor r9d, r9d
call fcn.140034a20
test al, al
je 0x14005e036
mov dword [0x1401763f4], r13d
xorps xmm2, xmm2
lea rcx, [rbp + 0x690]
xorps xmm1, xmm1
call fcn.1400021b0
cmp dword [0x1401763f4], 2
lea rdx, str.Info
mov r8, rax
sete cl
xor r9d, r9d
call fcn.140034a20
test al, al
je 0x14005e072
mov dword [0x1401763f4], 2
xorps xmm2, xmm2
lea rcx, [rbp + 0x640]
xorps xmm1, xmm1
call fcn.1400021b0
cmp dword [0x1401763f4], 3
lea rdx, str.Credits
mov r8, rax
sete cl
xor r9d, r9d
call fcn.140034a20
test al, al
je 0x14005e0ae
mov dword [0x1401763f4], 3
call fcn.1400128c0
call fcn.140016ce0
mov eax, dword [0x1401763f4]
test eax, eax
jne 0x14005e926
call fcn.140041a40
lea rcx, [0x14010be30]
call fcn.140033fc0
movaps xmm1, xmm7
xorps xmm0, xmm0
call fcn.1400162e0
movaps xmm2, xmm10
lea rcx, [rbp + 0x688]
movaps xmm1, xmm13
call fcn.1400021b0
mov byte [rbp + 0xf7], 0xa3
mov r11, rax
mov byte [rbp + 0xf8], Ordinal_143
movabs rsi, 0xd88659ee0bd819ee
mov byte [rbp + 0xf9], 0x90
mov r10, rsi
mov byte [rbp + 0xfa], 0x9c
mov r9, r14
mov byte [rbp + 0xfb], 0x9e
mov byte [rbp + 0xfc], 0xa9
mov byte [rbp + 0xfd], __WSAFDIsSet
mov byte [rbp + 0xfe], Ordinal_200
mov byte [rbp + 0xff], 0xcb
mov byte [rbp + 0x100], Ordinal_211
mov byte [rbp + 0x101], Ordinal_200
mov byte [rbp + 0x102], Ordinal_211
mov byte [rbp + 0x103], reloc.WLDAP32.dll_Ordinal_200
mov byte [rbp + 0x104], 0x9d
mov byte [rbp + 0x105], 0x90
mov byte [rbp + 0x106], 0x9f
mov byte [rbp + 0x107], 0x87
mov byte [rbp + 0x108], 0xf1
movzx eax, byte [rbp + 0xf7]
lea rax, [rbp + 0xf7]
sub r10, rax
nop dword [rax + rax]
mov rcx, r9
lea rdx, [rbp + 0xf7]
add rdx, r9
and ecx, 0xf
cmp rcx, 0xf
mov rax, rsi
cmovae rcx, r12
movsx r8, byte [rdx]
add dl, r10b
shl cl, 2
shr rax, cl
and al, 0xf
xor al, dl
xor al, r8b
mov byte [rbp + r9 + 0xf7], al
inc r9
cmp r9, 0x12
jb 0x14005e1a0
xor r9d, r9d
lea rcx, [rbp + 0xf7]
mov r8b, 1
mov rdx, r11
call fcn.14000c4c0
test al, al
je 0x14005e60a
mov byte [rbp + 0xe5], 0xb2
mov r10, rsi
mov byte [rbp + 0xe6], 0x80
mov r9, r14
mov byte [rbp + 0xe7], reloc.WS2_32.dll___WSAFDIsSet
mov byte [rbp + 0xe8], __WSAFDIsSet
mov byte [rbp + 0xe9], __WSAFDIsSet
mov byte [rbp + 0xea], __WSAFDIsSet
mov byte [rbp + 0xeb], __WSAFDIsSet
mov byte [rbp + 0xec], reloc.WLDAP32.dll_Ordinal_143
mov byte [rbp + 0xed], 0x9d
mov byte [rbp + 0xee], reloc.WLDAP32.dll_Ordinal_217
mov byte [rbp + 0xef], 0xa2
mov byte [rbp + 0xf0], 0x99
mov byte [rbp + 0xf1], Ordinal_143
mov byte [rbp + 0xf2], 0x9a
mov byte [rbp + 0xf3], __WSAFDIsSet
mov byte [rbp + 0xf4], 0x9c
mov byte [rbp + 0xf5], 0x83
mov byte [rbp + 0xf6], 0xf1
movzx eax, byte [rbp + 0xe5]
lea rax, [rbp + 0xe5]
sub r10, rax
nop dword [rax]
nop word [rax + rax]
mov rcx, r9
lea rdx, [rbp + 0xe5]
add rdx, r9
and ecx, 0xf
cmp rcx, 0xf
mov rax, rsi
cmovae rcx, r12
movsx r8, byte [rdx]
add dl, r10b
shl cl, 2
shr rax, cl
and al, 0xf
xor al, dl
xor al, r8b
mov byte [rbp + r9 + 0xe5], al
inc r9
cmp r9, 0x12
jb 0x14005e2a0
lea rdx, [0x14017640f]
lea rcx, [rbp + 0xe5]
call fcn.1400364c0
mov byte [rbp + 0x6a], Ordinal_143
movabs rsi, 0xad99cb55b978c9c6
mov byte [rbp + 0x6b], 0xbe
mov r10, rsi
mov byte [rbp + 0x6c], 0xad
mov r9, r14
mov byte [rbp + 0x6d], 0xa9
mov byte [rbp + 0x6e], 0xe2
mov byte [rbp + 0x6f], 0x9f
mov byte [rbp + 0x70], 0xa0
mov byte [rbp + 0x71], 0xb4
mov byte [rbp + 0x72], 0xa2
mov byte [rbp + 0x73], 0xab
mov byte [rbp + 0x74], 0xb7
mov byte [rbp + 0x75], 0xae
mov byte [rbp + 0x76], 0xfb
mov byte [rbp + 0x77], 0xda
movzx eax, byte [rbp + 0x6a]
lea rax, [rbp + 0x6a]
sub r10, rax
nop word [rax + rax]
mov rcx, r9
lea rdx, [rbp + 0x6a]
add rdx, r9
and ecx, 0xf
cmp rcx, 0xf
mov rax, rsi
cmovae rcx, r12
movsx r8, byte [rdx]
add dl, r10b
shl cl, 2
shr rax, cl
and al, 0xf
xor al, dl
xor al, r8b
mov byte [rbp + r9 + 0x6a], al
inc r9
cmp r9, 0xe
jb 0x14005e350
lea rdx, [0x1401761dd]
lea rcx, [rbp + 0x6a]
call fcn.1400364c0
mov byte [rbp + 0x109], reloc.WLDAP32.dll_Ordinal_50
movabs r11, 0xde419f38cf883e60
mov byte [rbp + 0x10a], 2
mov r10, r11
mov byte [rbp + 0x10b], ntohl
mov r9, r14
mov byte [rbp + 0x10c], 9
mov byte [rbp + 0x10d], Ordinal_32
mov byte [rbp + 0x10e], Ordinal_26
mov byte [rbp + 0x10f], reloc.WLDAP32.dll_Ordinal_27
mov byte [rbp + 0x110], reloc.WS2_32.dll_select
mov byte [rbp + 0x111], 0x40
mov byte [rbp + 0x112], reloc.WS2_32.dll_gethostname
mov byte [rbp + 0x113], reloc.WS2_32.dll_setsockopt
mov byte [rbp + 0x114], reloc.WS2_32.dll_listen
mov byte [rbp + 0x115], 2
mov byte [rbp + 0x116], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x117], 9
mov byte [rbp + 0x118], ntohl
mov byte [rbp + 0x119], reloc.WS2_32.dll_socket
mov byte [rbp + 0x11a], 0x57
mov byte [rbp + 0x11b], 0x7c
movzx eax, byte [rbp + 0x109]
lea rax, [rbp + 0x109]
sub r10, rax
mov rcx, r9
lea rdx, [rbp + 0x109]
add rdx, r9
and ecx, 0xf
cmp rcx, 0xf
mov rax, r11
cmovae rcx, r12
movsx r8, byte [rdx]
add dl, r10b
shl cl, 2
shr rax, cl
and al, 0xf
xor al, dl
xor al, r8b
mov byte [rbp + r9 + 0x109], al
inc r9
cmp r9, 0x13
jb 0x14005e440
lea rdx, [0x1401761d9]
lea rcx, [rbp + 0x109]
call fcn.1400364c0
mov byte [rbp + 0x5c], 0x93
mov r10, rsi
mov byte [rbp + 0x5d], 0xa2
mov r9, r14
mov byte [rbp + 0x5e], 0xa5
mov byte [rbp + 0x5f], 0xe5
mov byte [rbp + 0x60], 0x91
mov byte [rbp + 0x61], 0xbc
mov byte [rbp + 0x62], 0xaa
mov byte [rbp + 0x63], 0xa9
mov byte [rbp + 0x64], 0xad
mov byte [rbp + 0x65], 0xa3
mov byte [rbp + 0x66], 0xb5
mov byte [rbp + 0x67], 0xba
mov byte [rbp + 0x68], 0xfb
mov byte [rbp + 0x69], 0xda
movzx eax, byte [rbp + 0x5c]
lea rax, [rbp + 0x5c]
sub r10, rax
nop dword [rax]
mov rcx, r9
lea rdx, [rbp + 0x5c]
add rdx, r9
and ecx, 0xf
cmp rcx, 0xf
mov rax, rsi
cmovae rcx, r12
movsx r8, byte [rdx]
add dl, r10b
shl cl, 2
shr rax, cl
and al, 0xf
xor al, dl
xor al, r8b
mov byte [rbp + r9 + 0x5c], al
inc r9
cmp r9, 0xe
jb 0x14005e4e0
lea rdx, [0x1401761df]
lea rcx, [rbp + 0x5c]
call fcn.1400364c0
lea rcx, [0x14010be38]
call fcn.140033fc0
movaps xmm1, xmm7
xorps xmm0, xmm0
call fcn.1400162e0
movaps xmm2, xmm12
lea rcx, [rbp + 0x680]
movaps xmm1, xmm11
call fcn.1400021b0
mov byte [rbp - 0x45], 0x63
mov r11, rax
mov byte [rbp - 0x44], 0x44
lea rax, [rbp - 0x45]
mov byte [rbp - 0x43], 0x57
mov r10, r15
mov byte [rbp - 0x42], 0x56
mov r9, r14
mov byte [rbp - 0x41], 0x5b
sub r10, rax
mov byte [rbp - 0x40], gethostname
movzx ecx, byte [rbp - 0x45]
mov rcx, r9
lea rdx, [rbp - 0x45]
add rdx, r9
and ecx, 0xf
cmp rcx, 0xf
mov rax, r15
cmovae rcx, r12
movsx r8, byte [rdx]
add dl, r10b
shl cl, 2
shr rax, cl
and al, 0xf
xor al, dl
xor al, r8b
mov byte [rbp + r9 - 0x45], al
inc r9
cmp r9, 6
jb 0x14005e581
mov rdx, r11
lea rcx, [rbp - 0x45]
call fcn.1400354a0
test al, al
je 0x14005e60a
movzx eax, byte [0x14017640f]
test al, al
je 0x14005e5fc
cmp byte [0x1401761dd], 0
je 0x14005e5ef
xor edx, edx
xor ecx, ecx
call fcn.14004c4f0
movzx eax, byte [0x14017640f]
test al, al
je 0x14005e5fc
xor edx, edx
xor ecx, ecx
call fcn.14004c4f0
cmp byte [0x1401761d9], 0
je 0x14005e60a
call fcn.140043de0
call fcn.14000c520
movaps xmm1, xmm7
xorps xmm0, xmm0
call fcn.1400162e0
lea rcx, [0x14010be48]
call fcn.140033fc0
movaps xmm1, xmm7
xorps xmm0, xmm0
call fcn.1400162e0
movaps xmm2, xmm10
lea rcx, [rbp + 0x678]
movaps xmm1, xmm13
call fcn.1400021b0
mov byte [rbp + 0xd4], 0xf3
mov r11, rax
mov byte [rbp + 0xd5], 0xde
movabs rsi, 0xf6131b6c2871abbc
mov byte [rbp + 0xd6], 0xdc
mov r10, rsi
mov byte [rbp + 0xd7], 0x81
mov r9, r14
mov byte [rbp + 0xd8], 0xf3
mov byte [rbp + 0xd9], 0xf5
mov byte [rbp + 0xda], 0xfe
mov byte [rbp + 0xdb], 0xad
mov byte [rbp + 0xdc], 0xac
mov byte [rbp + 0xdd], __WSAFDIsSet
mov byte [rbp + 0xde], 0xa4
mov byte [rbp + 0xdf], 0xa8
mov byte [rbp + 0xe0], 0xaf
mov byte [rbp + 0xe1], 0xa7
mov byte [rbp + 0xe2], 0xbb
mov byte [rbp + 0xe3], 0xf6
mov byte [rbp + 0xe4], 0xc0
movzx eax, byte [rbp + 0xd4]
lea rax, [rbp + 0xd4]
sub r10, rax
mov rcx, r9
lea rdx, [rbp + 0xd4]
add rdx, r9
and ecx, 0xf
cmp rcx, 0xf
mov rax, rsi
cmovae rcx, r12
movsx r8, byte [rdx]
add dl, r10b
shl cl, 2
shr rax, cl
and al, 0xf
xor al, dl
xor al, r8b
mov byte [rbp + r9 + 0xd4], al
inc r9
cmp r9, 0x11
jb 0x14005e6e0
xor r9d, r9d
lea rcx, [rbp + 0xd4]
mov r8b, 1
mov rdx, r11
call fcn.14000c4c0
test al, al
je 0x14005e91b
mov byte [rbp + 0x19d], 0xb0
movabs r11, 0x5be25727b8a9bc90
mov byte [rbp + 0x19e], 0xb8
mov r10, r11
mov byte [rbp + 0x19f], 0xbe
mov r9, r14
mov byte [rbp + 0x1a0], 0xb8
mov byte [rbp + 0x1a1], 0xbd
mov byte [rbp + 0x1a2], 0xbf
mov byte [rbp + 0x1a3], 0xbe
mov byte [rbp + 0x1a4], 0xbc
mov byte [rbp + 0x1a5], 0xbf
mov byte [rbp + 0x1a6], 0xbb
mov byte [rbp + 0x1a7], 0xbd
mov byte [rbp + 0x1a8], Ordinal_211
mov byte [rbp + 0x1a9], 0xe7
mov byte [rbp + 0x1aa], 0xe0
mov byte [rbp + 0x1ab], 0xe1
mov byte [rbp + 0x1ac], 0xff
mov byte [rbp + 0x1ad], Ordinal_211
mov byte [rbp + 0x1ae], 0x88
mov byte [rbp + 0x1af], 0xfd
mov byte [rbp + 0x1b0], Ordinal_211
mov byte [rbp + 0x1b1], 0xdf
mov byte [rbp + 0x1b2], Ordinal_200
mov byte [rbp + 0x1b3], Ordinal_211
mov byte [rbp + 0x1b4], 0xc0
mov byte [rbp + 0x1b5], 0xdc
mov byte [rbp + 0x1b6], __WSAFDIsSet
mov byte [rbp + 0x1b7], 0xad
movzx eax, byte [rbp + 0x19d]
lea rax, [rbp + 0x19d]
sub r10, rax
nop dword [rax + rax]
mov rcx, r9
lea rdx, [rbp + 0x19d]
add rdx, r9
and ecx, 0xf
cmp rcx, 0xf
mov rax, r11
cmovae rcx, r12
movsx r8, byte [rdx]
add dl, r10b
shl cl, 2
shr rax, cl
and al, 0xf
xor al, dl
xor al, r8b
mov byte [rbp + r9 + 0x19d], al
inc r9
cmp r9, 0x1b
jb 0x14005e820
lea rcx, [rbp + 0x19d]
call fcn.140033fc0
mov rcx, qword [0x140176430]
call fcn.140012820
lea rcx, [0x140175198]
call fcn.140062940
mov byte [rbp - 9], 0x64
movabs rsi, 0x2708afa85b89822e
mov byte [rbp - 8], 0x44
mov r11, rax
mov byte [rbp - 7], 0x41
lea rax, [rbp - 9]
mov byte [rbp - 6], 0x52
mov r10, rsi
mov byte [rbp - 5], 1
mov r9, r14
mov byte [rbp - 4], Ordinal_50
sub r10, rax
mov byte [rbp - 3], Ordinal_32
mov byte [rbp - 2], reloc.WS2_32.dll_setsockopt
mov byte [rbp - 1], Ordinal_79
mov byte [rbp], 0x3d
movzx ecx, byte [rbp - 9]
nop word [rax + rax]
mov rcx, r9
lea rdx, [rbp - 9]
add rdx, r9
and ecx, 0xf
cmp rcx, 0xf
mov rax, rsi
cmovae rcx, r12
movsx r8, byte [rdx]
add dl, r10b
shl cl, 2
shr rax, cl
and al, 0xf
xor al, dl
xor al, r8b
mov byte [rbp + r9 - 9], al
inc r9
cmp r9, 0xa
jb 0x14005e8d0
mov rdx, r11
lea rcx, [rbp - 9]
call fcn.140033fc0
call fcn.1400128c0
call fcn.14000c520
mov eax, dword [0x1401763f4]
cmp eax, 1
jne 0x14005eec3
call fcn.140056d50
lea rcx, [0x14010be58]
call fcn.140033fc0
movaps xmm1, xmm7
xorps xmm0, xmm0
call fcn.1400162e0
movss xmm1, dword [0x14010e508]
lea rcx, [rbp + 0x670]
movaps xmm2, xmm10
call fcn.1400021b0
mov byte [rbp + 0xc3], 0xf3
mov r11, rax
mov byte [rbp + 0xc4], 0xde
movabs rsi, 0xf6131b6c2871abbc
mov byte [rbp + 0xc5], 0xdc
mov r10, rsi
mov byte [rbp + 0xc6], reloc.WLDAP32.dll_Ordinal_217
mov r9, r14
mov byte [rbp + 0xc7], 0xa5
mov byte [rbp + 0xc8], 0xf3
mov byte [rbp + 0xc9], 0xfc
mov byte [rbp + 0xca], 0xf6
mov byte [rbp + 0xcb], 0xbd
mov byte [rbp + 0xcc], __WSAFDIsSet
mov byte [rbp + 0xcd], 0xa4
mov byte [rbp + 0xce], 0xf4
mov byte [rbp + 0xcf], 0xa5
mov byte [rbp + 0xd0], 0xac
mov byte [rbp + 0xd1], 0xa3
mov byte [rbp + 0xd2], 0xb3
mov byte [rbp + 0xd3], 0xc0
movzx eax, byte [rbp + 0xc3]
lea rax, [rbp + 0xc3]
sub r10, rax
nop
mov rcx, r9
lea rdx, [rbp + 0xc3]
add rdx, r9
and ecx, 0xf
cmp rcx, 0xf
mov rax, rsi
cmovae rcx, r12
movsx r8, byte [rdx]
add dl, r10b
shl cl, 2
shr rax, cl
and al, 0xf
xor al, dl
xor al, r8b
mov byte [rbp + r9 + 0xc3], al
inc r9
cmp r9, 0x11
jb 0x14005ea00
xor r9d, r9d
lea rcx, [rbp + 0xc3]
mov r8b, 1
mov rdx, r11
call fcn.14000c4c0
test al, al
je 0x14005eeb8
mov byte [rbp + 0xb3], 0x43
movabs rsi, 0x7b1fc9cc4127ef0e
mov byte [rbp + 0xb4], 0x63
mov r10, rsi
mov byte [rbp + 0xb5], 0x7a
mov r9, r14
mov byte [rbp + 0xb6], 0x7e
mov byte [rbp + 0xb7], 0x7b
mov byte [rbp + 0xb8], Ordinal_50
mov byte [rbp + 0xb9], 0x53
mov byte [rbp + 0xba], 0x7e
mov byte [rbp + 0xbb], 0x68
mov byte [rbp + 0xbc], reloc.WS2_32.dll_WSAGetLastError
mov byte [rbp + 0xbd], 0x7f
mov byte [rbp + 0xbe], 0x7c
mov byte [rbp + 0xbf], 0x61
mov byte [rbp + 0xc0], 0x7f
mov byte [rbp + 0xc1], Ordinal_60
mov byte [rbp + 0xc2], reloc.WLDAP32.dll_Ordinal_26
movzx eax, byte [rbp + 0xb3]
lea rax, [rbp + 0xb3]
sub r10, rax
nop
mov rcx, r9
lea rdx, [rbp + 0xb3]
add rdx, r9
and ecx, 0xf
cmp rcx, 0xf
mov rax, rsi
cmovae rcx, r12
movsx r8, byte [rdx]
add dl, r10b
shl cl, 2
shr rax, cl
and al, 0xf
xor al, dl
xor al, r8b
mov byte [rbp + r9 + 0xb3], al
inc r9
cmp r9, 0x10
jb 0x14005eaf0
lea rdx, [0x14017640e]
lea rcx, [rbp + 0xb3]
call fcn.1400364c0
mov byte [rbp + 0xa3], 0x43
mov r10, rsi
mov byte [rbp + 0xa4], 0x63
mov r9, r14
mov byte [rbp + 0xa5], 0x7a
mov byte [rbp + 0xa6], 0x7e
mov byte [rbp + 0xa7], 0x7b
mov byte [rbp + 0xa8], Ordinal_50
mov byte [rbp + 0xa9], 0x43
mov byte [rbp + 0xaa], reloc.WS2_32.dll_WSASetLastError
mov byte [rbp + 0xab], 0x76
mov byte [rbp + 0xac], reloc.WS2_32.dll_WSACleanup
mov byte [rbp + 0xad], 0x63
mov byte [rbp + 0xae], reloc.WS2_32.dll_WSACleanup
mov byte [rbp + 0xaf], 0x7b
mov byte [rbp + 0xb0], WSACleanup
mov byte [rbp + 0xb1], Ordinal_60
mov byte [rbp + 0xb2], reloc.WLDAP32.dll_Ordinal_26
movzx eax, byte [rbp + 0xa3]
lea rax, [rbp + 0xa3]
sub r10, rax
nop word [rax + rax]
mov rcx, r9
lea rdx, [rbp + 0xa3]
add rdx, r9
and ecx, 0xf
cmp rcx, 0xf
mov rax, rsi
cmovae rcx, r12
movsx r8, byte [rdx]
add dl, r10b
shl cl, 2
shr rax, cl
and al, 0xf
xor al, dl
xor al, r8b
mov byte [rbp + r9 + 0xa3], al
inc r9
cmp r9, 0x10
jb 0x14005ebd0
lea rdx, [0x14017641d]
lea rcx, [rbp + 0xa3]
call fcn.1400364c0
mov byte [rbp + 0x15b], reloc.WS2_32.dll_send
movabs r11, 0xbfe80bcce84e7856
mov byte [rbp + 0x15c], 0x3e
mov r10, r11
mov byte [rbp + 0x15d], gethostname
mov r9, r14
mov byte [rbp + 0x15e], 0x3f
mov byte [rbp + 0x15f], Ordinal_60
mov byte [rbp + 0x160], 0x7f
mov byte [rbp + 0x161], Ordinal_26
mov byte [rbp + 0x162], reloc.WLDAP32.dll_Ordinal_60
mov byte [rbp + 0x163], Ordinal_60
mov byte [rbp + 0x164], Ordinal_60
mov byte [rbp + 0x165], Ordinal_26
mov byte [rbp + 0x166], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x167], Ordinal_79
mov byte [rbp + 0x168], Ordinal_60
mov byte [rbp + 0x169], 0xa
mov byte [rbp + 0x16a], Ordinal_32
mov byte [rbp + 0x16b], 6
mov byte [rbp + 0x16c], 3
mov byte [rbp + 0x16d], reloc.WS2_32.dll_select
mov byte [rbp + 0x16e], ntohl
mov byte [rbp + 0x16f], 0x44
mov byte [rbp + 0x170], reloc.WS2_32.dll_WSAGetLastError
movzx eax, byte [rbp + 0x15b]
lea rax, [rbp + 0x15b]
sub r10, rax
nop
mov rcx, r9
lea rdx, [rbp + 0x15b]
add rdx, r9
and ecx, 0xf
cmp rcx, 0xf
mov rax, r11
cmovae rcx, r12
movsx r8, byte [rdx]
add dl, r10b
shl cl, 2
shr rax, cl
and al, 0xf
xor al, dl
xor al, r8b
mov byte [rbp + r9 + 0x15b], al
inc r9
cmp r9, 0x16
jb 0x14005ece0
lea rdx, [0x1401761da]
lea rcx, [rbp + 0x15b]
call fcn.1400364c0
lea rdx, [0x1401762ef]
lea rcx, str.Clean_Cache
call fcn.1400364c0
mov byte [rbp + 0x94], 0xc0
movabs r11, 0x4a1a9491ed025de0
mov byte [rbp + 0x95], Ordinal_211
mov r10, r11
mov byte [rbp + 0x96], Ordinal_211
mov r9, r14
mov byte [rbp + 0x97], Ordinal_200
mov byte [rbp + 0x98], Ordinal_200
mov byte [rbp + 0x99], Ordinal_200
mov byte [rbp + 0x9a], 0xcb
mov byte [rbp + 0x9b], 0xc9
mov byte [rbp + 0x9c], 0xc9
mov byte [rbp + 0x9d], 0xc0
mov byte [rbp + 0x9e], Ordinal_211
mov byte [rbp + 0x9f], Ordinal_200
mov byte [rbp + 0xa0], Ordinal_200
mov byte [rbp + 0xa1], 0xcc
mov byte [rbp + 0xa2], 0xe4
movzx eax, byte [rbp + 0x94]
lea rax, [rbp + 0x94]
sub r10, rax
mov rcx, r9
lea rdx, [rbp + 0x94]
add rdx, r9
and ecx, 0xf
cmp rcx, 0xf
mov rax, r11
cmovae rcx, r12
movsx r8, byte [rdx]
add dl, r10b
shl cl, 2
shr rax, cl
and al, 0xf
xor al, dl
xor al, r8b
mov byte [rbp + r9 + 0x94], al
inc r9
cmp r9, 0xf
jb 0x14005edd0
lea rcx, [rbp + 0x94]
call fcn.140033fc0
movaps xmm1, xmm7
xorps xmm0, xmm0
call fcn.1400162e0
movaps xmm2, xmm12
lea rcx, [rbp + 0x668]
movaps xmm1, xmm11
call fcn.1400021b0
mov byte [rbp - 0x4b], reloc.WS2_32.dll_WSAStartup
mov rsi, rax
mov byte [rbp - 0x4a], 0x58
lea rax, [rbp - 0x4b]
mov byte [rbp - 0x49], 0x5d
mov r11, r15
mov byte [rbp - 0x48], 0x58
mov r10, r14
mov byte [rbp - 0x47], 0x53
sub r11, rax
mov byte [rbp - 0x46], gethostname
movzx ecx, byte [rbp - 0x4b]
nop word [rax + rax]
mov rcx, r10
lea r8, [rbp - 0x4b]
add r8, r10
and ecx, 0xf
cmp rcx, 0xf
mov rdx, r15
cmovae rcx, r12
movsx r9, byte [r8]
lea eax, [r8 + r11]
shl cl, 2
shr rdx, cl
and dl, 0xf
xor dl, al
xor dl, r9b
mov byte [rbp + r10 - 0x4b], dl
inc r10
cmp r10, 6
jb 0x14005ee70
mov rdx, rsi
lea rcx, [rbp - 0x4b]
call fcn.1400354a0
call fcn.14000c520
mov eax, dword [0x1401763f4]
cmp eax, 2
jne 0x14005f4da
lea rdx, [0x140175118]
lea rcx, [rbp + 0xdb8]
call fcn.140062c40
mov byte [rbp + 0x21], 0xa5
movabs rsi, 0xd6824b0d7879acf0
mov byte [rbp + 0x22], Ordinal_143
mov r11, rax
mov byte [rbp + 0x23], 0x9b
lea rax, [rbp + 0x21]
mov byte [rbp + 0x24], 0x8b
mov r10, rsi
mov byte [rbp + 0x25], 0x93
mov r9, r14
mov byte [rbp + 0x26], 0x93
sub r10, rax
mov byte [rbp + 0x27], 0x93
mov byte [rbp + 0x28], __WSAFDIsSet
mov byte [rbp + 0x29], 0xcf
mov byte [rbp + 0x2a], reloc.WLDAP32.dll_Ordinal_217
mov byte [rbp + 0x2b], 0xf1
movzx ecx, byte [rbp + 0x21]
nop dword [rax]
mov rcx, r9
lea rdx, [rbp + 0x21]
add rdx, r9
and ecx, 0xf
cmp rcx, 0xf
mov rax, rsi
cmovae rcx, r12
movsx r8, byte [rdx]
add dl, r10b
shl cl, 2
shr rax, cl
and al, 0xf
xor al, dl
xor al, r8b
mov byte [rbp + r9 + 0x21], al
inc r9
cmp r9, 0xb
jb 0x14005ef30
mov r8, r11
lea rdx, [rbp + 0x21]
lea rcx, [rbp + 0x960]
call fcn.140064020
lea rcx, [rbp + 0xdb8]
call fcn.140062ae0
lea rdx, [0x140175098]
lea rcx, [rbp + 0xc98]
call fcn.140062c40
mov byte [rbp + 0x42], reloc.WLDAP32.dll_Ordinal_41
movabs r15, 0xbb566ea9358b8a64
mov byte [rbp + 0x43], 0x33
mov r11, rax
mov byte [rbp + 0x44], Ordinal_79
lea rax, [rbp + 0x42]
mov byte [rbp + 0x45], reloc.WS2_32.dll_ntohl
mov r10, r15
mov byte [rbp + 0x46], 7
mov r9, r14
mov byte [rbp + 0x47], 5
sub r10, rax
mov byte [rbp + 0x48], Ordinal_32
mov byte [rbp + 0x49], reloc.WS2_32.dll_listen
mov byte [rbp + 0x4a], reloc.WLDAP32.dll_Ordinal_22
mov byte [rbp + 0x4b], reloc.WS2_32.dll_sendto
mov byte [rbp + 0x4c], 0x5a
mov byte [rbp + 0x4d], 0x49
mov byte [rbp + 0x4e], 0x76
movzx ecx, byte [rbp + 0x42]
nop
mov rcx, r9
lea rdx, [rbp + 0x42]
add rdx, r9
and ecx, 0xf
cmp rcx, 0xf
mov rax, r15
cmovae rcx, r12
movsx r8, byte [rdx]
add dl, r10b
shl cl, 2
shr rax, cl
and al, 0xf
xor al, dl
xor al, r8b
mov byte [rbp + r9 + 0x42], al
inc r9
cmp r9, 0xd
jb 0x14005eff0
mov r8, r11
lea rdx, [rbp + 0x42]
lea rcx, [rbp + 0x940]
call fcn.140064020
lea rcx, [rbp + 0xc98]
call fcn.140062ae0
lea rdx, [0x140175218]
lea rcx, [rbp + 0xcb8]
call fcn.140062c40
mov byte [rbp + 0x86], 0x88
mov r11, rax
mov byte [rbp + 0x87], 0xaa
movabs rsi, 0xad99cb55b978c9c6
mov byte [rbp + 0x88], 0xb3
mov r10, rsi
mov byte [rbp + 0x89], 0xa1
mov r9, r14
mov byte [rbp + 0x8a], 0xb5
mov byte [rbp + 0x8b], 0xad
mov byte [rbp + 0x8c], 0xb7
mov byte [rbp + 0x8d], 0xa3
mov byte [rbp + 0x8e], 0xe6
mov byte [rbp + 0x8f], 0x83
mov byte [rbp + 0x90], 0xbf
mov byte [rbp + 0x91], 0xe7
mov byte [rbp + 0x92], 0xfb
mov byte [rbp + 0x93], 0xda
movzx eax, byte [rbp + 0x86]
lea rax, [rbp + 0x86]
sub r10, rax
nop dword [rax]
nop word [rax + rax]
mov rcx, r9
lea rdx, [rbp + 0x86]
add rdx, r9
and ecx, 0xf
cmp rcx, 0xf
mov rax, rsi
cmovae rcx, r12
movsx r8, byte [rdx]
add dl, r10b
shl cl, 2
shr rax, cl
and al, 0xf
xor al, dl
xor al, r8b
mov byte [rbp + r9 + 0x86], al
inc r9
cmp r9, 0xe
jb 0x14005f0f0
mov r8, r11
lea rdx, [rbp + 0x86]
lea rcx, [rbp + 0x920]
call fcn.140064020
lea rcx, [rbp + 0xcb8]
call fcn.140062ae0
lea rdx, [0x140174fc0]
lea rcx, [rbp + 0xcd8]
call fcn.140062c40
mov byte [rbp + 0x78], 0x83
mov r11, rax
mov byte [rbp + 0x79], 0xb9
mov r10, rsi
mov byte [rbp + 0x7a], 0xa4
mov r9, r14
mov byte [rbp + 0x7b], 0xa4
mov byte [rbp + 0x7c], 0xb6
mov byte [rbp + 0x7d], 0xa9
mov byte [rbp + 0x7e], 0xe5
mov byte [rbp + 0x7f], 0xa2
mov byte [rbp + 0x80], 0xaa
mov byte [rbp + 0x81], 0xbe
mov byte [rbp + 0x82], 0xbe
mov byte [rbp + 0x83], 0xe7
mov byte [rbp + 0x84], 0xfb
mov byte [rbp + 0x85], 0xda
movzx eax, byte [rbp + 0x78]
lea rax, [rbp + 0x78]
sub r10, rax
mov rcx, r9
lea rdx, [rbp + 0x78]
add rdx, r9
and ecx, 0xf
cmp rcx, 0xf
mov rax, rsi
cmovae rcx, r12
movsx r8, byte [rdx]
add dl, r10b
shl cl, 2
shr rax, cl
and al, 0xf
xor al, dl
xor al, r8b
mov byte [rbp + r9 + 0x78], al
inc r9
cmp r9, 0xe
jb 0x14005f1c3
mov r8, r11
lea rdx, [rbp + 0x78]
lea rcx, [rbp + 0x900]
call fcn.140064020
lea rcx, [rbp + 0xcd8]
call fcn.140062ae0
lea rdx, [0x140175020]
lea rcx, [rbp + 0x9b8]
call fcn.140062c40
mov byte [rbp + 0x4f], Ordinal_45
mov r11, rax
mov byte [rbp + 0x50], 2
lea rax, [rbp + 0x4f]
mov byte [rbp + 0x51], Ordinal_32
mov r10, r15
mov byte [rbp + 0x52], reloc.WLDAP32.dll_Ordinal_27
mov r9, r14
mov byte [rbp + 0x53], 0x43
sub r10, rax
mov byte [rbp + 0x54], reloc.WS2_32.dll_listen
mov byte [rbp + 0x55], 0
mov byte [rbp + 0x56], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x57], ntohl
mov byte [rbp + 0x58], 9
mov byte [rbp + 0x59], 0x5a
mov byte [rbp + 0x5a], 0x49
mov byte [rbp + 0x5b], 0x76
movzx ecx, byte [rbp + 0x4f]
nop word [rax + rax]
mov rcx, r9
lea rdx, [rbp + 0x4f]
add rdx, r9
and ecx, 0xf
cmp rcx, 0xf
mov rax, r15
cmovae rcx, r12
movsx r8, byte [rdx]
add dl, r10b
shl cl, 2
shr rax, cl
and al, 0xf
xor al, dl
xor al, r8b
mov byte [rbp + r9 + 0x4f], al
inc r9
cmp r9, 0xd
jb 0x14005f280
mov r8, r11
lea rdx, [rbp + 0x4f]
lea rcx, [rbp + 0x8e0]
call fcn.140064020
lea rcx, [rbp + 0x9b8]
call fcn.140062ae0
lea rdx, [0x1401751d8]
lea rcx, [rbp + 0x9d8]
call fcn.140062c40
mov byte [rbp + 0x187], 3
mov r11, rax
mov byte [rbp + 0x188], Ordinal_45
movabs r15, 0xbfe80bcce84e7856
mov byte [rbp + 0x189], reloc.WLDAP32.dll_Ordinal_50
mov r10, r15
mov byte [rbp + 0x18a], reloc.WLDAP32.dll_Ordinal_45
mov r9, r14
mov byte [rbp + 0x18b], Ordinal_60
mov byte [rbp + 0x18c], reloc.WLDAP32.dll_Ordinal_45
mov byte [rbp + 0x18d], 0x3d
mov byte [rbp + 0x18e], reloc.WLDAP32.dll_Ordinal_35
mov byte [rbp + 0x18f], Ordinal_41
mov byte [rbp + 0x190], Ordinal_60
mov byte [rbp + 0x191], 4
mov byte [rbp + 0x192], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x193], Ordinal_79
mov byte [rbp + 0x194], 8
mov byte [rbp + 0x195], reloc.WS2_32.dll_send
mov byte [rbp + 0x196], reloc.WLDAP32.dll_Ordinal_30
mov byte [rbp + 0x197], 9
mov byte [rbp + 0x198], reloc.WS2_32.dll_recv
mov byte [rbp + Ordinal_269], 0x19
mov byte [rbp + 0x19a], 0x54
mov byte [rbp + 0x19b], 0x44
mov byte [rbp + 0x19c], reloc.WS2_32.dll_WSAGetLastError
movzx eax, byte [rbp + 0x187]
lea rax, [rbp + 0x187]
sub r10, rax
nop word [rax + rax]
mov rcx, r9
lea rdx, [rbp + 0x187]
add rdx, r9
and ecx, 0xf
cmp rcx, 0xf
mov rax, r15
cmovae rcx, r12
movsx r8, byte [rdx]
add dl, r10b
shl cl, 2
shr rax, cl
and al, 0xf
xor al, dl
xor al, r8b
mov byte [rbp + r9 + 0x187], al
inc r9
cmp r9, 0x16
jb 0x14005f3b0
mov r8, r11
lea rdx, [rbp + 0x187]
lea rcx, [rbp + 0x8c0]
call fcn.140064020
lea rcx, [rbp + 0x9d8]
call fcn.140062ae0
lea rcx, [rbp + 0x960]
call fcn.140062940
mov rcx, rax
call fcn.140033fc0
lea rcx, [rbp + 0x940]
call fcn.140062940
mov rcx, rax
call fcn.140033fc0
lea rcx, [rbp + 0x920]
call fcn.140062940
mov rcx, rax
call fcn.140033fc0
lea rcx, [rbp + 0x900]
call fcn.140062940
mov rcx, rax
call fcn.140033fc0
lea rcx, [rbp + 0x8e0]
call fcn.140062940
mov rcx, rax
call fcn.140033fc0
lea rcx, [rbp + 0x8c0]
call fcn.140062940
mov rcx, rax
call fcn.140033fc0
lea rcx, [rbp + 0x8c0]
call fcn.140062ae0
lea rcx, [rbp + 0x8e0]
call fcn.140062ae0
lea rcx, [rbp + 0x900]
call fcn.140062ae0
lea rcx, [rbp + 0x920]
call fcn.140062ae0
lea rcx, [rbp + 0x940]
call fcn.140062ae0
lea rcx, [rbp + 0x960]
call fcn.140062ae0
mov eax, dword [0x1401763f4]
jmp 0x14005f4e4
movabs r15, 0xbfe80bcce84e7856
cmp eax, 3
jne 0x14006141d
mov rcx, qword [0x140176410]
call fcn.140012820
mov byte [rbp + 0x1b8], 0xa0
movabs rsi, 0x4e13d617cd8d808e
mov byte [rbp + 0x1b9], 0xa7
mov r10, rsi
mov byte [rbp + 0x1ba], 0xb0
mov r9, r14
mov byte [rbp + 0x1bb], 0xb9
mov byte [rbp + 0x1bc], 0xbf
mov byte [rbp + 0x1bd], 0xbb
mov byte [rbp + 0x1be], 0xb9
mov byte [rbp + 0x1bf], 0xb9
mov byte [rbp + 0x1c0], 0xb1
mov byte [rbp + 0x1c1], 0xb6
mov byte [rbp + 0x1c2], 0xbe
mov byte [rbp + 0x1c3], 0xb4
mov byte [rbp + 0x1c4], 0xb9
mov byte [rbp + 0x1c5], 0xba
mov byte [rbp + 0x1c6], 0xb2
mov byte [rbp + 0x1c7], 0xb9
mov byte [rbp + 0x1c8], 0xb0
mov byte [rbp + 0x1c9], 0xb7
mov byte [rbp + 0x1ca], 0x80
mov byte [rbp + 0x1cb], Ordinal_143
mov byte [rbp + 0x1cc], reloc.WLDAP32.dll_Ordinal_143
mov byte [rbp + 0x1cd], Ordinal_143
mov byte [rbp + 0x1ce], Ordinal_143
mov byte [rbp + 0x1cf], Ordinal_143
mov byte [rbp + 0x1d0], 0x81
mov byte [rbp + 0x1d1], 0x86
mov byte [rbp + 0x1d2], Ordinal_143
mov byte [rbp + 0x1d3], 0x84
mov byte [rbp + 0x1d4], Ordinal_143
mov byte [rbp + 0x1d5], Ordinal_143
mov byte [rbp + 0x1d6], 0x82
mov byte [rbp + 0x1d7], Ordinal_143
mov byte [rbp + 0x1d8], 0x80
mov byte [rbp + 0x1d9], 0xa7
movzx eax, byte [rbp + 0x1b8]
lea rax, [rbp + 0x1b8]
sub r10, rax
nop dword [rax + rax]
mov rcx, r9
lea rdx, [rbp + 0x1b8]
add rdx, r9
and ecx, 0xf
cmp rcx, 0xf
mov rax, rsi
cmovae rcx, r12
movsx r8, byte [rdx]
add dl, r10b
shl cl, 2
shr rax, cl
and al, 0xf
xor al, dl
xor al, r8b
mov byte [rbp + r9 + 0x1b8], al
inc r9
cmp r9, 0x22
jb 0x14005f610
lea rcx, [rbp + 0x1b8]
call fcn.140033fc0
mov byte [rbp + 0x21e], 0xa0
mov r10, rsi
mov byte [rbp + 0x21f], 0xa7
mov r9, r14
mov byte [rbp + 0x220], 0xb0
mov byte [rbp + 0x221], 0xb9
mov byte [rbp + 0x222], 0xbf
mov byte [rbp + 0x223], 0xbb
mov byte [rbp + 0x224], 0xb9
mov byte [rbp + 0x225], 0xb9
mov byte [rbp + 0x226], 0xb1
mov byte [rbp + 0x227], 0xb6
mov byte [rbp + 0x228], 0xbe
mov byte [rbp + 0x229], 0xb4
mov byte [rbp + 0x22a], 0xb9
mov byte [rbp + 0x22b], 0xba
mov byte [rbp + 0x22c], 0xb2
mov byte [rbp + 0x22d], 0xb9
mov byte [rbp + 0x22e], 0xb0
mov byte [rbp + 0x22f], 0xb7
mov byte [rbp + 0x230], 0x80
mov byte [rbp + 0x231], Ordinal_143
mov byte [rbp + 0x232], reloc.WLDAP32.dll_Ordinal_143
mov byte [rbp + 0x233], Ordinal_143
mov byte [rbp + 0x234], Ordinal_143
mov byte [rbp + 0x235], Ordinal_143
mov byte [rbp + 0x236], 0x81
mov byte [rbp + 0x237], 0x86
mov byte [rbp + 0x238], Ordinal_143
mov byte [rbp + 0x239], 0x84
mov byte [rbp + 0x23a], Ordinal_143
mov byte [rbp + 0x23b], Ordinal_143
mov byte [rbp + 0x23c], 0x82
mov byte [rbp + 0x23d], Ordinal_143
mov byte [rbp + 0x23e], 0x80
mov byte [rbp + 0x23f], 0xa7
movzx eax, byte [rbp + 0x21e]
lea rax, [rbp + 0x21e]
sub r10, rax
nop dword [rax]
nop word [rax + rax]
mov rcx, r9
lea rdx, [rbp + 0x21e]
add rdx, r9
and ecx, 0xf
cmp rcx, 0xf
mov rax, rsi
cmovae rcx, r12
movsx r8, byte [rdx]
add dl, r10b
shl cl, 2
shr rax, cl
and al, 0xf
xor al, dl
xor al, r8b
mov byte [rbp + r9 + 0x21e], al
inc r9
cmp r9, 0x22
jb 0x14005f770
lea rcx, [rbp + 0x21e]
call fcn.140033fc0
movaps xmm1, xmm7
xorps xmm0, xmm0
call fcn.1400162e0
mov byte [rbp + 0x171], Ordinal_32
mov r10, r15
mov byte [rbp + 0x172], Ordinal_41
mov r9, r14
mov byte [rbp + 0x173], 0x3e
mov byte [rbp + 0x174], Ordinal_60
mov byte [rbp + 0x175], Ordinal_41
mov byte [rbp + 0x176], 0x7f
mov byte [rbp + 0x177], 0x79
mov byte [rbp + 0x178], reloc.WS2_32.dll_WSAStartup
mov byte [rbp + 0x179], Ordinal_41
mov byte [rbp + 0x17a], Ordinal_41
mov byte [rbp + 0x17b], 2
mov byte [rbp + 0x17c], Ordinal_26
mov byte [rbp + 0x17d], gethostname
mov byte [rbp + 0x17e], 1
mov byte [rbp + 0x17f], reloc.WS2_32.dll_ntohl
mov byte [rbp + 0x180], 8
mov byte [rbp + 0x181], reloc.WS2_32.dll_sendto
mov byte [rbp + 0x182], 0x3d
mov byte [rbp + 0x183], 2
mov byte [rbp + 0x184], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x185], reloc.WLDAP32.dll_Ordinal_22
mov byte [rbp + 0x186], reloc.WS2_32.dll_WSAGetLastError
movzx eax, byte [rbp + 0x171]
lea rax, [rbp + 0x171]
sub r10, rax
nop dword [rax + rax]
mov rcx, r9
lea rdx, [rbp + 0x171]
add rdx, r9
and ecx, 0xf
cmp rcx, 0xf
mov rax, r15
cmovae rcx, r12
movsx r8, byte [rdx]
add dl, r10b
shl cl, 2
shr rax, cl
and al, 0xf
xor al, dl
xor al, r8b
mov byte [rbp + r9 + 0x171], al
inc r9
cmp r9, 0x16
jb 0x14005f880
lea rcx, [rbp + 0x171]
call fcn.140033fc0
mov byte [rbp + 0x1fc], 0xa0
mov r10, rsi
mov byte [rbp + 0x1fd], 0xa7
mov r9, r14
mov byte [rbp + 0x1fe], 0xb0
mov byte [rbp + 0x1ff], 0xb9
mov byte [rbp + 0x200], 0xbf
mov byte [rbp + 0x201], 0xbb
mov byte [rbp + 0x202], 0xb9
mov byte [rbp + 0x203], 0xb9
mov byte [rbp + 0x204], 0xb1
mov byte [rbp + 0x205], 0xb6
mov byte [rbp + 0x206], 0xbe
mov byte [rbp + 0x207], 0xb4
mov byte [rbp + 0x208], 0xb9
mov byte [rbp + 0x209], 0xba
mov byte [rbp + 0x20a], 0xb2
mov byte [rbp + 0x20b], 0xb9
mov byte [rbp + 0x20c], 0xb0
mov byte [rbp + 0x20d], 0xb7
mov byte [rbp + 0x20e], 0x80
mov byte [rbp + 0x20f], Ordinal_143
mov byte [rbp + 0x210], reloc.WLDAP32.dll_Ordinal_143
mov byte [rbp + 0x211], Ordinal_143
mov byte [rbp + 0x212], Ordinal_143
mov byte [rbp + 0x213], Ordinal_143
mov byte [rbp + 0x214], 0x81
mov byte [rbp + 0x215], 0x86
mov byte [rbp + 0x216], Ordinal_143
mov byte [rbp + 0x217], 0x84
mov byte [rbp + 0x218], Ordinal_143
mov byte [rbp + 0x219], Ordinal_143
mov byte [rbp + 0x21a], 0x82
mov byte [rbp + 0x21b], Ordinal_143
mov byte [rbp + 0x21c], 0x80
mov byte [rbp + 0x21d], 0xa7
movzx eax, byte [rbp + 0x1fc]
lea rax, [rbp + 0x1fc]
sub r10, rax
nop dword [rax]
nop word [rax + rax]
mov rcx, r9
lea rdx, [rbp + 0x1fc]
add rdx, r9
and ecx, 0xf
cmp rcx, 0xf
mov rax, rsi
cmovae rcx, r12
movsx r8, byte [rdx]
add dl, r10b
shl cl, 2
shr rax, cl
and al, 0xf
xor al, dl
xor al, r8b
mov byte [rbp + r9 + 0x1fc], al
inc r9
cmp r9, 0x22
jb 0x14005f9e0
lea rcx, [rbp + 0x1fc]
call fcn.140033fc0
movaps xmm1, xmm7
xorps xmm0, xmm0
call fcn.1400162e0
mov byte [rbp + 0x146], 0xa4
movabs r15, 0xb733788841421de4
mov byte [rbp + 0x147], Ordinal_143
mov r10, r15
mov byte [rbp + 0x148], 0x9d
mov r9, r14
mov byte [rbp + 0x149], Ordinal_200
mov byte [rbp + 0x14a], Ordinal_200
mov byte [rbp + 0x14b], Ordinal_211
mov byte [rbp + 0x14c], 0x9f
mov byte [rbp + 0x14d], 0x98
mov byte [rbp + 0x14e], Ordinal_143
mov byte [rbp + 0x14f], 0x9d
mov byte [rbp + 0x150], 0xb9
mov byte [rbp + 0x151], 0x9a
mov byte [rbp + 0x152], 0x9a
mov byte [rbp + 0x153], __WSAFDIsSet
mov byte [rbp + 0x154], 0x9d
mov byte [rbp + 0x155], Ordinal_143
mov byte [rbp + 0x156], 0xaf
mov byte [rbp + 0x157], 0x99
mov byte [rbp + 0x158], 0x9a
mov byte [rbp + 0x159], 0x84
mov byte [rbp + 0x15a], 0xfa
movzx eax, byte [rbp + 0x146]
lea rax, [rbp + 0x146]
sub r10, rax
nop dword [rax + rax]
mov rcx, r9
lea rdx, [rbp + 0x146]
add rdx, r9
and ecx, 0xf
cmp rcx, 0xf
mov rax, r15
cmovae rcx, r12
movsx r8, byte [rdx]
add dl, r10b
shl cl, 2
shr rax, cl
and al, 0xf
xor al, dl
xor al, r8b
mov byte [rbp + r9 + 0x146], al
inc r9
cmp r9, 0x15
jb 0x14005faf0
lea rcx, [rbp + 0x146]
call fcn.140033fc0
mov byte [rbp + 0x1da], 0xa0
mov r10, rsi
mov byte [rbp + 0x1db], 0xa7
mov r9, r14
mov byte [rbp + 0x1dc], 0xb0
mov byte [rbp + 0x1dd], 0xb9
mov byte [rbp + 0x1de], 0xbf
mov byte [rbp + 0x1df], 0xbb
mov byte [rbp + 0x1e0], 0xb9
mov byte [rbp + 0x1e1], 0xb9
mov byte [rbp + 0x1e2], 0xb1
mov byte [rbp + 0x1e3], 0xb6
mov byte [rbp + 0x1e4], 0xbe
mov byte [rbp + 0x1e5], 0xb4
mov byte [rbp + 0x1e6], 0xb9
mov byte [rbp + 0x1e7], 0xba
mov byte [rbp + 0x1e8], 0xb2
mov byte [rbp + 0x1e9], 0xb9
mov byte [rbp + 0x1ea], 0xb0
mov byte [rbp + 0x1eb], 0xb7
mov byte [rbp + 0x1ec], 0x80
mov byte [rbp + 0x1ed], Ordinal_143
mov byte [rbp + 0x1ee], reloc.WLDAP32.dll_Ordinal_143
mov byte [rbp + 0x1ef], Ordinal_143
mov byte [rbp + 0x1f0], Ordinal_143
mov byte [rbp + 0x1f1], Ordinal_143
mov byte [rbp + 0x1f2], 0x81
mov byte [rbp + 0x1f3], 0x86
mov byte [rbp + 0x1f4], Ordinal_143
mov byte [rbp + 0x1f5], 0x84
mov byte [rbp + 0x1f6], Ordinal_143
mov byte [rbp + 0x1f7], Ordinal_143
mov byte [rbp + 0x1f8], 0x82
mov byte [rbp + 0x1f9], Ordinal_143
mov byte [rbp + 0x1fa], 0x80
mov byte [rbp + 0x1fb], 0xa7
movzx eax, byte [rbp + 0x1da]
lea rax, [rbp + 0x1da]
sub r10, rax
nop dword [rax]
nop word [rax + rax]
mov rcx, r9
lea rdx, [rbp + 0x1da]
add rdx, r9
and ecx, 0xf
cmp rcx, 0xf
mov rax, rsi
cmovae rcx, r12
movsx r8, byte [rdx]
add dl, r10b
shl cl, 2
shr rax, cl
and al, 0xf
xor al, dl
xor al, r8b
mov byte [rbp + r9 + 0x1da], al
inc r9
cmp r9, 0x22
jb 0x14005fc50
lea rcx, [rbp + 0x1da]
call fcn.140033fc0
call fcn.1400128c0
call fcn.140036d10
call fcn.140036d10
call fcn.140036d10
mov byte [rbp + 0x131], 0x84
mov r10, r15
mov byte [rbp + 0x132], 0x82
mov r9, r14
mov byte [rbp + 0x133], 0x98
mov byte [rbp + 0x134], 0x85
mov byte [rbp + 0x135], 0x85
mov byte [rbp + 0x136], 0x9f
mov byte [rbp + 0x137], reloc.WLDAP32.dll_Ordinal_143
mov byte [rbp + 0x138], 0xc1
mov byte [rbp + 0x139], 0x83
mov byte [rbp + 0x13a], 0x82
mov byte [rbp + 0x13b], 0xc9
mov byte [rbp + 0x13c], 0x80
mov byte [rbp + 0x13d], Ordinal_143
mov byte [rbp + 0x13e], __WSAFDIsSet
mov byte [rbp + 0x13f], 0x87
mov byte [rbp + 0x140], reloc.WS2_32.dll___WSAFDIsSet
mov byte [rbp + 0x141], 0x98
mov byte [rbp + 0x142], __WSAFDIsSet
mov byte [rbp + 0x143], __WSAFDIsSet
mov byte [rbp + 0x144], 0x9d
mov byte [rbp + 0x145], 0xfa
movzx eax, byte [rbp + 0x131]
lea rax, [rbp + 0x131]
sub r10, rax
nop word [rax + rax]
mov rcx, r9
lea rdx, [rbp + 0x131]
add rdx, r9
and ecx, 0xf
cmp rcx, 0xf
mov rax, r15
cmovae rcx, r12
movzx r8d, byte [rdx]
add dl, r10b
shl cl, 2
shr rax, cl
and al, 0xf
xor al, dl
xor al, r8b
mov byte [rbp + r9 + 0x131], al
inc r9
cmp r9, 0x15
jb 0x14005fd60
lea rcx, [rbp + 0x131]
call fcn.140034160
jmp 0x14006141d
lea rcx, [0x140175238]
call fcn.140062940
mov r8d, Ordinal_45
lea rdx, [rsp + 0x60]
mov rcx, rax
call fcn.14000f200
call fcn.140041a40
mov rcx, qword [0x1401761e0]
mov edx, 0xff
mov r9d, edx
mov dword [rsp + 0x20], __WSAFDIsSet
mov r8d, edx
mov rax, qword [rcx + 0x3ea0]
mov byte [rax + 0xb0], 1
mov rax, qword [rcx + 0x3ea0]
lea rcx, [rbp + 0xd18]
mov rsi, qword [rax + 0x290]
call fcn.1400338d0
mov rcx, rax
call fcn.1400048c0
mov rdx, qword [0x140176560]
lea r9, [rbp + 0x410]
mov dword [rsp + 0x30], eax
lea r8, [rbp + 0x418]
movaps xmm0, xmm6
movss dword [rbp + 0x418], xmm6
addss xmm0, dword [0x14010e4e8]
lea rax, [rbp + 0x400]
mov dword [rbp + 0x400], 0x3f800000
mov qword [rsp + 0x28], rax
mov rcx, rsi
lea rax, [rbp + 0x408]
mov dword [rbp + 0x404], 0x3f800000
mov qword [rbp + 0x408], 0
movss dword [rbp + 0x410], xmm0
mov dword [rbp + 0x414], 0x42600000
mov dword [rbp + 0x41c], 0x41200000
mov qword [rsp + 0x20], rax
call fcn.14002bdb0
xor ecx, ecx
call fcn.14000c0e0
test al, al
je 0x140060053
mov byte [rbp + 0x11c], 0x88
movabs r11, 0xb733788841421de4
mov byte [rbp + 0x11d], 0x9f
mov r10, r11
mov byte [rbp + 0x11e], 0x9f
mov r9, r14
mov byte [rbp + 0x11f], __WSAFDIsSet
mov byte [rbp + 0x120], 0x99
mov byte [rbp + 0x121], Ordinal_217
mov byte [rbp + 0x122], Ordinal_200
mov byte [rbp + 0x123], 0xc0
mov byte [rbp + 0x124], 0x80
mov byte [rbp + 0x125], Ordinal_143
mov byte [rbp + 0x126], __WSAFDIsSet
mov byte [rbp + 0x127], Ordinal_143
mov byte [rbp + 0x128], 0x9c
mov byte [rbp + 0x129], 0x80
mov byte [rbp + 0x12a], __WSAFDIsSet
mov byte [rbp + 0x12b], Ordinal_217
mov byte [rbp + 0x12c], __WSAFDIsSet
mov byte [rbp + reloc.WLDAP32.dll_Ordinal_301], __WSAFDIsSet
mov byte [rbp + 0x12e], __WSAFDIsSet
mov byte [rbp + 0x12f], reloc.WLDAP32.dll_Ordinal_217
mov byte [rbp + 0x130], 0xfa
movzx eax, byte [rbp + 0x11c]
lea rax, [rbp + 0x11c]
sub r10, rax
nop dword [rax]
mov rcx, r9
lea rdx, [rbp + 0x11c]
add rdx, r9
and ecx, 0xf
cmp rcx, 0xf
mov rax, r11
cmovae rcx, r12
movsx r8, byte [rdx]
add dl, r10b
shl cl, 2
shr rax, cl
and al, 0xf
xor al, dl
xor al, r8b
mov byte [rbp + r9 + 0x11c], al
inc r9
cmp r9, 0x15
jb 0x14005ff70
mov byte [rsp + 0x6e], Ordinal_50
movabs rdi, 0xeb6d413d2473e444
mov byte [rsp + 0x6f], Ordinal_50
mov r11, rdi
mov byte [rsp + 0x70], Ordinal_41
mov r10, r14
mov byte [rsp + 0x71], Ordinal_41
mov byte [rsp + 0x72], Ordinal_79
movzx eax, byte [rsp + 0x6e]
lea rax, [rsp + 0x6e]
sub r11, rax
nop word [rax + rax]
mov rcx, r10
lea r8, [rsp + 0x6e]
add r8, r10
and ecx, 0xf
cmp rcx, 0xf
mov rdx, rdi
cmovae rcx, r12
movsx r9, byte [r8]
lea eax, [r8 + r11]
shl cl, 2
shr rdx, cl
and dl, 0xf
xor dl, al
xor dl, r9b
mov byte [rsp + r10 + 0x6e], dl
inc r10
cmp r10, 5
jb 0x14005fff0
mov dword [rsp + 0x28], r13d
lea r8, [rbp + 0x11c]
xor r9d, r9d
mov qword [rsp + 0x20], r14
lea rdx, [rsp + 0x6e]
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
movzx edi, byte [rsp + 0x60]
lea rcx, [rbp + 0x368]
call qword [sym.imp.KERNEL32.dll_GetLocalTime]
movzx edx, word [rbp + 0x374]
movzx r13d, word [rbp + 0x368]
movzx r12d, word [rbp + 0x36a]
movzx r15d, word [rbp + 0x36e]
movzx r14d, word [rbp + 0x370]
movzx esi, word [rbp + 0x372]
cmp edx, 9
ja 0x1400600d9
lea rcx, [rbp + 0xa18]
call fcn.140041940
mov r8, rax
lea rdx, [0x1400ea92c]
lea rcx, [rbp + 0x9f8]
call fcn.140064020
mov rdx, rax
lea rcx, [0x140175178]
call fcn.140062b40
lea rcx, [rbp + 0x9f8]
call fcn.140062ae0
lea rcx, [rbp + 0xa18]
jmp 0x1400600fb
lea rcx, [rbp + 0xa38]
call fcn.140041940
mov rdx, rax
lea rcx, [0x140175178]
call fcn.140062b40
lea rcx, [rbp + 0xa38]
call fcn.140062ae0
mov edx, esi
cmp esi, 9
ja 0x14006014d
lea rcx, [rbp + 0xa78]
call fcn.140041940
mov r8, rax
lea rdx, [0x1400ea92c]
lea rcx, [rbp + 0xa58]
call fcn.140064020
mov rdx, rax
lea rcx, [0x140175258]
call fcn.140062b40
lea rcx, [rbp + 0xa58]
call fcn.140062ae0
lea rcx, [rbp + 0xa78]
jmp 0x14006016f
lea rcx, [rbp + 0xa98]
call fcn.140041940
mov rdx, rax
lea rcx, [0x140175258]
call fcn.140062b40
lea rcx, [rbp + 0xa98]
call fcn.140062ae0
mov edx, r14d
cmp r14d, 9
ja 0x1400601c3
lea rcx, [rbp + 0xad8]
call fcn.140041940
mov r8, rax
lea rdx, [0x1400ea92c]
lea rcx, [rbp + 0xab8]
call fcn.140064020
mov rdx, rax
lea rcx, [0x140175000]
call fcn.140062b40
lea rcx, [rbp + 0xab8]
call fcn.140062ae0
lea rcx, [rbp + 0xad8]
jmp 0x1400601e5
lea rcx, [rbp + 0xaf8]
call fcn.140041940
mov rdx, rax
lea rcx, [0x140175000]
call fcn.140062b40
lea rcx, [rbp + 0xaf8]
call fcn.140062ae0
mov edx, r15d
cmp r15d, 9
ja 0x140060239
lea rcx, [rbp + 0xb38]
call fcn.140041940
mov r8, rax
lea rdx, [0x1400ea92c]
lea rcx, [rbp + 0xb18]
call fcn.140064020
mov rdx, rax
lea rcx, [0x1401750d8]
call fcn.140062b40
lea rcx, [rbp + 0xb18]
call fcn.140062ae0
lea rcx, [rbp + 0xb38]
jmp 0x14006025b
lea rcx, [rbp + 0xb58]
call fcn.140041940
mov rdx, rax
lea rcx, [0x1401750d8]
call fcn.140062b40
lea rcx, [rbp + 0xb58]
call fcn.140062ae0
mov edx, r12d
cmp r12d, 9
ja 0x1400602af
lea rcx, [rbp + 0xb98]
call fcn.140041940
mov r8, rax
lea rdx, [0x1400ea92c]
lea rcx, [rbp + 0xb78]
call fcn.140064020
mov rdx, rax
lea rcx, [0x1401750b8]
call fcn.140062b40
lea rcx, [rbp + 0xb78]
call fcn.140062ae0
lea rcx, [rbp + 0xb98]
jmp 0x1400602d1
lea rcx, [rbp + 0xbb8]
call fcn.140041940
mov rdx, rax
lea rcx, [0x1401750b8]
call fcn.140062b40
lea rcx, [rbp + 0xbb8]
call fcn.140062ae0
mov edx, r13d
lea rcx, [rbp + 0x880]
call fcn.140063700
lea r8, [0x14010be90]
lea rdx, [0x1401750d8]
lea rcx, [rbp + 0xc78]
call fcn.1400642c0
mov rdx, rax
lea r8, [0x1401750b8]
lea rcx, [rbp + 0xc58]
call fcn.1400643a0
mov r13d, 1
lea rdx, [0x14010be90]
mov r8d, r13d
mov rcx, rax
call fcn.140062a30
mov rdx, rax
lea rcx, [rbp + 0x860]
call fcn.140062bd0
lea r9, [rbp + 0x880]
movzx edx, dil
lea r8, [rbp + 0x860]
lea rcx, [rbp + 0x840]
call fcn.140064c00
lea r8d, [r13 + 2]
lea rdx, [0x14010be94]
lea rcx, [rbp + 0x840]
call fcn.140062a30
mov rdx, rax
lea rcx, [rbp + 0x820]
call fcn.140062bd0
lea r8, [0x140175000]
lea rdx, [rbp + 0x820]
lea rcx, [rbp + 0xc38]
call fcn.1400643a0
lea rdx, [0x14010be90]
mov rcx, rax
call fcn.1400629a0
mov rcx, rax
call fcn.140063b80
mov rdx, rax
lea rcx, [rbp + 0x980]
call fcn.140062bd0
lea r8, [0x140175258]
lea rdx, [rbp + 0x980]
lea rcx, [rbp + 0xc18]
call fcn.1400643a0
mov rdx, rax
lea r8, [0x14010be90]
lea rcx, [rbp + 0xbf8]
call fcn.140064250
mov rdx, rax
lea r8, [0x140175178]
lea rcx, [rbp + 0xbd8]
call fcn.1400643a0
mov rdx, rax
lea rcx, [0x140175078]
call fcn.140062b40
lea rcx, [rbp + 0xbd8]
call fcn.140062ae0
lea rcx, [rbp + 0xbf8]
call fcn.140062ae0
lea rcx, [rbp + 0xc18]
call fcn.140062ae0
lea rcx, [rbp + 0x980]
call fcn.140062ae0
lea rcx, [rbp + 0xc38]
call fcn.140062ae0
lea rcx, [rbp + 0x820]
call fcn.140062ae0
lea rcx, [rbp + 0x840]
call fcn.140062ae0
lea rcx, [rbp + 0x860]
call fcn.140062ae0
lea rcx, [rbp + 0xc58]
call fcn.140062ae0
lea rcx, [rbp + 0xc78]
call fcn.140062ae0
lea rcx, [rbp + 0x880]
call fcn.140062ae0
mov byte [rsp + 0x61], 0xdc
lea r12d, [r13 + 0xe]
mov byte [rsp + 0x62], 0xc2
xor r14d, r14d
mov byte [rsp + 0x63], 0xe6
movabs r11, 0x6a7b5c40aa4784e0
movzx eax, byte [rsp + 0x61]
mov r10, r11
lea rax, [rsp + 0x61]
mov r9d, r14d
sub r10, rax
nop dword [rax]
mov rcx, r9
lea rdx, [rsp + 0x61]
add rdx, r9
and ecx, r12d
cmp rcx, r12
mov rax, r11
cmovae rcx, r12
movsx r8, byte [rdx]
add dl, r10b
shl cl, 2
shr rax, cl
and al, r12b
xor al, dl
xor al, r8b
mov byte [rsp + r9 + 0x61], al
inc r9
cmp r9, 3
jb 0x1400604d0
lea rcx, [rsp + 0x61]
call fcn.140033fc0
mov rcx, qword [0x1401761e0]
lea rdx, [rbp + 0x420]
add rcx, 0x4748
movsd xmm0, qword [rcx]
movsd qword [rbp + 0x350], xmm0
call fcn.1400023d0
xor ecx, ecx
call fcn.14000c0e0
test al, al
je 0x140060589
movss xmm2, dword [rbp + 0x424]
lea rcx, [rbp + 0x660]
movss xmm1, dword [rbp + 0x420]
addss xmm2, dword [rbp + 0x354]
addss xmm1, dword [rbp + 0x350]
call fcn.1400021b0
mov rdx, rax
lea rcx, [rbp + 0x350]
movzx r8d, r13b
call fcn.140013970
test al, al
jne 0x140060592
cmp byte [0x1401761dc], r14b
je 0x1400605b5
cmp byte [0x1401761de], r14b
mov byte [0x1401761dc], r14b
sete byte [0x1401761de]
cmp byte [reloc.WS2_32.dll_accept], r14b
sete byte [0x140149424]
movaps xmm1, xmm7
xorps xmm0, xmm0
call fcn.1400162e0
mov rcx, qword [0x140176578]
call fcn.140012820
mov byte [rbp + 0x263], 0x60
movabs r11, 0xd568db042de08746
mov byte [rbp + 0x264], 0x63
mov r10, r11
mov byte [rbp + 0x265], reloc.WS2_32.dll_WSAGetLastError
mov r9, r14
mov byte [rbp + 0x266], 0x61
mov byte [rbp + 0x267], WSASetLastError
mov byte [rbp + 0x268], 0x65
mov byte [rbp + 0x269], 0x61
mov byte [rbp + 0x26a], reloc.WS2_32.dll_WSAGetLastError
mov byte [rbp + 0x26b], WSASetLastError
mov byte [rbp + 0x26c], reloc.WS2_32.dll_WSAGetLastError
mov byte [rbp + 0x26d], 0x7b
mov byte [rbp + 0x26e], 0x7c
mov byte [rbp + 0x26f], 0x7a
mov byte [rbp + 0x270], 0x75
mov byte [rbp + 0x271], WSACleanup
mov byte [rbp + 0x272], 0x78
mov byte [rbp + 0x273], reloc.WS2_32.dll_WSASetLastError
mov byte [rbp + 0x274], reloc.WS2_32.dll_WSAStartup
mov byte [rbp + 0x275], 0x7f
mov byte [rbp + 0x276], WSACleanup
mov byte [rbp + 0x277], 0x7a
mov byte [rbp + 0x278], 0x75
mov byte [rbp + 0x279], WSACleanup
mov byte [rbp + 0x27a], 0x7f
mov byte [rbp + 0x27b], 0x7a
mov byte [rbp + 0x27c], 0x7f
mov byte [rbp + 0x27d], Ordinal_79
mov byte [rbp + 0x27e], Ordinal_79
mov byte [rbp + 0x27f], Ordinal_79
mov byte [rbp + 0x280], 0x45
mov byte [rbp + 0x281], 0x41
mov byte [rbp + 0x282], 0x48
mov byte [rbp + 0x283], 0x40
mov byte [rbp + 0x284], 0x43
mov byte [rbp + 0x285], reloc.WLDAP32.dll_Ordinal_79
mov byte [rbp + 0x286], 0x41
mov byte [rbp + 0x287], Ordinal_79
mov byte [rbp + 0x288], 0x45
mov byte [rbp + 0x289], 0x41
mov byte [rbp + 0x28a], reloc.WLDAP32.dll_Ordinal_79
mov byte [rbp + 0x28b], Ordinal_35
mov byte [rbp + 0x28c], reloc.WLDAP32.dll_Ordinal_22
mov byte [rbp + 0x28d], Ordinal_32
mov byte [rbp + 0x28e], reloc.WS2_32.dll_ntohl
mov byte [rbp + 0x28f], reloc.WS2_32.dll_setsockopt
mov byte [rbp + 0x290], 0x75
movzx eax, byte [rbp + 0x263]
lea rax, [rbp + 0x263]
sub r10, rax
nop
mov rcx, r9
lea rdx, [rbp + 0x263]
add rdx, r9
and ecx, r12d
cmp rcx, r12
mov rax, r11
cmovae rcx, r12
movsx r8, byte [rdx]
add dl, r10b
shl cl, 2
shr rax, cl
and al, r12b
xor al, dl
xor al, r8b
mov byte [rbp + r9 + 0x263], al
inc r9
cmp r9, 0x2e
jb 0x140060730
lea rcx, [rbp + 0x263]
call fcn.140033fc0
movaps xmm1, xmm7
xorps xmm0, xmm0
call fcn.1400162e0
movaps xmm0, xmmword [0x14010e740]
lea rdx, [rbp + 0x5f8]
xor ecx, ecx
movups xmmword [rbp + 0x5f8], xmm0
call fcn.140004e10
mov byte [rsp + 0x64], 8
movabs r11, 0xeb6d413d2473e444
mov byte [rsp + 0x65], reloc.WLDAP32.dll_Ordinal_46
mov r10, r11
mov byte [rsp + 0x66], reloc.WLDAP32.dll_Ordinal_45
mov r9, r14
mov byte [rsp + 0x67], Ordinal_35
mov byte [rsp + 0x68], Ordinal_79
movzx eax, byte [rsp + 0x64]
lea rax, [rsp + 0x64]
sub r10, rax
nop dword [rax]
mov rcx, r9
lea rdx, [rsp + 0x64]
add rdx, r9
and ecx, r12d
cmp rcx, r12
mov rax, r11
cmovae rcx, r12
movsx r8, byte [rdx]
add dl, r10b
shl cl, 2
shr rax, cl
and al, r12b
xor al, dl
xor al, r8b
mov byte [rsp + r9 + 0x64], al
inc r9
cmp r9, 5
jb 0x1400607e0
lea rcx, [rsp + 0x64]
call fcn.140033fc0
call fcn.1400128c0
movaps xmm1, xmm7
xorps xmm0, xmm0
call fcn.1400162e0
mov ecx, r13d
call fcn.140004e70
mov rcx, qword [0x1401761e0]
lea rdx, [rbp + 0x428]
add rcx, 0x4748
movsd xmm0, qword [rcx]
movsd qword [rbp + 0x358], xmm0
call fcn.1400023d0
xor ecx, ecx
call fcn.14000c0e0
test al, al
je 0x1400608ba
movss xmm2, dword [rbp + 0x42c]
lea rcx, [rbp + 0x658]
movss xmm1, dword [rbp + 0x428]
addss xmm2, dword [rbp + 0x35c]
addss xmm1, dword [rbp + 0x358]
call fcn.1400021b0
mov rdx, rax
lea rcx, [rbp + 0x358]
movzx r8d, r13b
call fcn.140013970
test al, al
je 0x1400608ba
mov byte [0x14017641c], r13b
jmp 0x1400608c7
cmp byte [0x14017641c], r14b
je 0x140060b05
mov dword [rbp + 0x33c], r14d
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov r14d, dword [rcx + r10 + 0x88]
add r14, r10
cmp r14, r10
je 0x140060957
mov r9d, dword [r14 + 0x18]
test r9d, r9d
je 0x140060957
mov esi, dword [r14 + 0x20]
nop word [rax + rax]
dec r9d
mov r8d, 0x811c9dc5
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rsi]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140060952
nop dword [rax]
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x140060930
cmp r8d, 0xcded1a85
je 0x14006095c
test r9d, r9d
jne 0x140060910
mov rax, qword [rax]
jmp 0x1400608e0
mov eax, dword [r14 + 0x24]
mov ecx, dword [r14 + 0x1c]
add rax, r10
add rcx, r10
movzx eax, word [rax + r9*2]
mov esi, dword [rcx + rax*4]
lea rcx, [rbp + 0x33c]
add rsi, r10
call fcn.140063b80
mov ecx, dword [rax]
call rsi
mov dword [rbp + 0x340], 0
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov r14d, dword [rcx + r10 + 0x88]
add r14, r10
cmp r14, r10
je 0x140060a17
mov r9d, dword [r14 + 0x18]
test r9d, r9d
je 0x140060a17
mov esi, dword [r14 + 0x20]
nop word [rax + rax]
dec r9d
mov r8d, 0x811c9dc5
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rsi]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140060a12
nop dword [rax]
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x1400609f0
cmp r8d, 0xe80fd3a
je 0x140060a1c
test r9d, r9d
jne 0x1400609d0
mov rax, qword [rax]
jmp 0x1400609a0
mov eax, dword [r14 + 0x24]
mov ecx, dword [r14 + 0x1c]
add rax, r10
add rcx, r10
movzx eax, word [rax + r9*2]
mov esi, dword [rcx + rax*4]
lea rcx, [rbp + 0x340]
add rsi, r10
call fcn.140063b80
mov ecx, dword [rax]
call rsi
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov r14d, dword [rcx + r10 + 0x88]
add r14, r10
cmp r14, r10
je 0x140060ad7
mov r9d, dword [r14 + 0x18]
test r9d, r9d
je 0x140060ad7
mov esi, dword [r14 + 0x20]
nop word [rax + rax]
dec r9d
mov r8d, 0x811c9dc5
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rsi]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140060ad2
nop dword [rax]
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x140060ab0
cmp r8d, 0xa52bcaf9
je 0x140060adc
test r9d, r9d
jne 0x140060a90
mov rax, qword [rax]
jmp 0x140060a60
mov eax, dword [r14 + 0x24]
mov ecx, dword [r14 + 0x1c]
add rax, r10
add rcx, r10
movzx eax, word [rax + r9*2]
mov ecx, dword [rcx + rax*4]
add rcx, r10
call rcx
xor r14d, r14d
mov dword [0], 0xdead
lea rcx, [rbp + 0x650]
call fcn.1400165e0
movss xmm0, dword [rax]
mulss xmm0, xmm14
subss xmm0, xmm15
call fcn.140016390
call fcn.140036d10
lea rcx, [rbp + 0x648]
call fcn.1400165e0
movss xmm0, dword [rax]
cvtps2pd xmm0, xmm0
divsd xmm0, xmm8
subsd xmm0, xmm9
cvtpd2ps xmm0, xmm0
call fcn.140016390
lea rcx, [0x140174fe0]
call fcn.140062940
mov byte [rbp + 0x2c], reloc.WLDAP32.dll_Ordinal_211
movabs rsi, 0xd6824b0d7879acf0
mov byte [rbp + 0x2d], 0xdd
mov r11, rax
mov byte [rbp + 0x2e], 0x8b
lea rax, [rbp + 0x2c]
mov byte [rbp + 0x2f], 0x8a
mov r10, rsi
mov byte [rbp + 0x30], 0x98
mov r9, r14
mov byte [rbp + 0x31], 0x80
sub r10, rax
mov byte [rbp + 0x32], 0x90
mov byte [rbp + 0x33], 0x91
mov byte [rbp + 0x34], 0x98
mov byte [rbp + 0x35], 0x9c
mov byte [rbp + 0x36], 0xf1
movzx ecx, byte [rbp + 0x2c]
nop word [rax + rax]
mov rcx, r9
lea rdx, [rbp + 0x2c]
add rdx, r9
and ecx, r12d
cmp rcx, r12
mov rax, rsi
cmovae rcx, r12
movsx r8, byte [rdx]
add dl, r10b
shl cl, 2
shr rax, cl
and al, r12b
xor al, dl
xor al, r8b
mov byte [rbp + r9 + 0x2c], al
inc r9
cmp r9, 0xb
jb 0x140060bb0
mov qword [rsp + 0x30], r14
lea r8, [0x1401761f0]
mov qword [rsp + 0x28], r14
lea rcx, [rbp + 0x2c]
mov r9d, 0xff
mov dword [rsp + 0x20], r14d
mov rdx, r11
call fcn.140036ed0
call fcn.140036d10
lea rcx, [rbp + 0x638]
call fcn.1400165e0
movss xmm0, dword [rax]
cvtps2pd xmm0, xmm0
divsd xmm0, xmm8
subsd xmm0, xmm9
cvtpd2ps xmm0, xmm0
call fcn.140016390
lea rcx, [0x1401752b8]
call fcn.140062940
mov byte [rbp + 0x37], reloc.WLDAP32.dll_Ordinal_211
mov r11, rax
mov byte [rbp + 0x38], 0xdd
lea rax, [rbp + 0x37]
mov byte [rbp + 0x39], Ordinal_143
mov r10, rsi
mov byte [rbp + 0x3a], 0x98
mov r9, r14
mov byte [rbp + 0x3b], Ordinal_143
sub r10, rax
mov byte [rbp + 0x3c], 0x81
mov byte [rbp + 0x3d], 0x89
mov byte [rbp + 0x3e], 0x9f
mov byte [rbp + 0x3f], 0x87
mov byte [rbp + 0x40], 0x9d
mov byte [rbp + 0x41], 0xf1
movzx ecx, byte [rbp + 0x37]
nop dword [rax]
mov rcx, r9
lea rdx, [rbp + 0x37]
add rdx, r9
and ecx, r12d
cmp rcx, r12
mov rax, rsi
cmovae rcx, r12
movsx r8, byte [rdx]
add dl, r10b
shl cl, 2
shr rax, cl
and al, r12b
xor al, dl
xor al, r8b
mov byte [rbp + r9 + 0x37], al
inc r9
cmp r9, 0xb
jb 0x140060c90
mov qword [rsp + 0x30], r14
lea r8, [0x140176450]
mov qword [rsp + 0x28], r14
lea rcx, [rbp + 0x37]
mov r9d, 0xff
mov dword [rsp + 0x20], 0x8000
mov rdx, r11
call fcn.140036ed0
call fcn.140036d10
lea rcx, [rbp + 0x6e8]
call fcn.1400165e0
movss xmm0, dword [rax]
cvtps2pd xmm0, xmm0
divsd xmm0, xmm8
subsd xmm0, xmm9
cvtpd2ps xmm0, xmm0
call fcn.140016390
lea rcx, [0x140175138]
call fcn.140062940
mov byte [rbp + 1], 3
movabs rsi, 0x2708afa85b89822e
mov byte [rbp + 2], reloc.WS2_32.dll_ntohl
mov r11, rax
mov byte [rbp + 3], 0x7e
lea rax, [rbp + 1]
mov byte [rbp + 4], 0x50
mov r10, rsi
mov byte [rbp + 5], 0x58
mov r9, r14
mov byte [rbp + 6], 0x5e
sub r10, rax
mov byte [rbp + 7], 0x51
mov byte [rbp + 8], 0x43
mov byte [rbp + 9], 0x5b
mov byte [rbp + 0xa], 0x3d
movzx ecx, byte [rbp + 1]
nop dword [rax]
nop word [rax + rax]
mov rcx, r9
lea rdx, [rbp + 1]
add rdx, r9
and ecx, r12d
cmp rcx, r12
mov rax, rsi
cmovae rcx, r12
movsx r8, byte [rdx]
add dl, r10b
shl cl, 2
shr rax, cl
and al, r12b
xor al, dl
xor al, r8b
mov byte [rbp + r9 + 1], al
inc r9
cmp r9, 0xa
jb 0x140060d80
mov qword [rsp + 0x30], r14
lea r8, [0x1401762f0]
mov qword [rsp + 0x28], r14
lea rcx, [rbp + 1]
mov r9d, 0xff
mov dword [rsp + 0x20], 0x8000
mov rdx, r11
call fcn.140036ed0
lea rcx, [rbp + 0x6b0]
call fcn.1400165e0
movss xmm0, dword [rax]
cvtps2pd xmm0, xmm0
divsd xmm0, qword [str.ffffff]
addsd xmm0, qword [0x14010e478]
cvtpd2ps xmm0, xmm0
call fcn.140016390
lea rcx, [0x140175278]
mov dword [rbp + 0x430], 0x42a00000
mov dword [rbp + 0x434], 0x41f00000
call fcn.140062940
xor r8d, r8d
lea rdx, [rbp + 0x430]
mov rcx, rax
call fcn.140034f80
test al, al
je 0x1400613fb
lea rdx, [0x1400e903a]
lea rcx, [rbp + 0xec0]
call fcn.140062c00
lea rdx, [0x1401762f0]
mov r15, rax
lea rcx, [rbp + 0xee0]
call fcn.140062c00
lea rdx, [0x140176450]
mov r14, rax
lea rcx, [rbp + 0xf00]
call fcn.140062c00
lea rdx, [0x1401761f0]
mov rsi, rax
lea rcx, [rbp + 0xf40]
call fcn.140062c00
mov r9, r14
mov qword [rsp + 0x20], r15
mov r8, rsi
lea rcx, [0x1401766a0]
mov rdx, rax
call fcn.140080230
cmp byte [0x1401768b0], 0
movabs r15, 0x76ff865cc5370036
mov r10, r15
je 0x140061375
mov byte [rbp - 0x51], reloc.WLDAP32.dll_Ordinal_30
xor r14d, r14d
mov byte [rbp - 0x50], 0x40
mov r9d, r14d
mov byte [rbp - 0x4f], 0x5d
mov byte [rbp - 0x4e], 0x41
mov byte [rbp - 0x4d], 0x49
mov byte [rbp - 0x4c], gethostname
movzx eax, byte [rbp - 0x51]
lea rax, [rbp - 0x51]
sub r10, rax
nop dword [rax]
mov rcx, r9
lea rdx, [rbp - 0x51]
add rdx, r9
and ecx, r12d
cmp rcx, r12
mov rax, r15
cmovae rcx, r12
movsx r8, byte [rdx]
add dl, r10b
shl cl, 2
shr rax, cl
and al, r12b
xor al, dl
xor al, r8b
mov byte [rbp + r9 - 0x51], al
inc r9
cmp r9, 6
jb 0x140060f00
xor edx, edx
lea rcx, [rbp - 0x51]
call fcn.140051190
test al, al
je 0x140061197
mov dword [rbp + 0x344], r14d
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov r14d, dword [rcx + r10 + 0x88]
add r14, r10
cmp r14, r10
je 0x140060fe7
mov r9d, dword [r14 + 0x18]
test r9d, r9d
je 0x140060fe7
mov esi, dword [r14 + 0x20]
nop word [rax + rax]
dec r9d
mov r8d, 0x811c9dc5
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rsi]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140060fe2
nop dword [rax]
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x140060fc0
cmp r8d, 0xcded1a85
je 0x140060fec
test r9d, r9d
jne 0x140060fa0
mov rax, qword [rax]
jmp 0x140060f70
mov ecx, dword [r14 + 0x24]
add rcx, r10
movzx edx, word [rcx + r9*2]
mov ecx, dword [r14 + 0x1c]
add rcx, r10
mov esi, dword [rcx + rdx*4]
lea rcx, [rbp + 0x344]
add rsi, r10
call fcn.140063b80
mov ecx, dword [rax]
call rsi
mov dword [rbp + 0x360], 0
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov r14d, dword [rcx + r10 + 0x88]
add r14, r10
cmp r14, r10
je 0x1400610a7
mov r9d, dword [r14 + 0x18]
test r9d, r9d
je 0x1400610a7
mov esi, dword [r14 + 0x20]
nop word [rax + rax]
dec r9d
mov r8d, 0x811c9dc5
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rsi]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x1400610a2
nop dword [rax]
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x140061080
cmp r8d, 0xe80fd3a
je 0x1400610ac
test r9d, r9d
jne 0x140061060
mov rax, qword [rax]
jmp 0x140061030
mov ecx, dword [r14 + 0x24]
add rcx, r10
movzx edx, word [rcx + r9*2]
mov ecx, dword [r14 + 0x1c]
add rcx, r10
mov esi, dword [rcx + rdx*4]
lea rcx, [rbp + 0x360]
add rsi, r10
call fcn.140063b80
mov ecx, dword [rax]
call rsi
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov r14d, dword [rcx + r10 + 0x88]
add r14, r10
cmp r14, r10
je 0x140061167
mov r9d, dword [r14 + 0x18]
test r9d, r9d
je 0x140061167
mov esi, dword [r14 + 0x20]
nop word [rax + rax]
dec r9d
mov r8d, 0x811c9dc5
lea rcx, [rsi + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140061162
nop
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x140061140
cmp r8d, 0xa52bcaf9
je 0x14006116c
test r9d, r9d
jne 0x140061120
mov rax, qword [rax]
jmp 0x1400610f0
mov ecx, dword [r14 + 0x24]
add rcx, r10
movzx edx, word [rcx + r9*2]
mov ecx, dword [r14 + 0x1c]
add rcx, r10
mov eax, dword [rcx + rdx*4]
add rax, r10
call rax
mov dword [0], 0xdead
jmp 0x1400613fb
mov byte [rbp - 0x57], 0x6a
mov r10, r15
mov byte [rbp - 0x56], 0x5b
mov r9, r14
mov byte [rbp - 0x55], 0x4a
mov byte [rbp - 0x54], 0x58
mov byte [rbp - 0x53], 0x45
mov byte [rbp - 0x52], gethostname
movzx eax, byte [rbp - 0x57]
lea rax, [rbp - 0x57]
sub r10, rax
mov rcx, r9
lea rdx, [rbp - 0x57]
add rdx, r9
and ecx, r12d
cmp rcx, r12
mov rax, r15
cmovae rcx, r12
movsx r8, byte [rdx]
add dl, r10b
shl cl, 2
shr rax, cl
and al, r12b
xor al, dl
xor al, r8b
mov byte [rbp + r9 - 0x57], al
inc r9
cmp r9, 6
jb 0x1400611c0
mov byte [rbp + 0x240], 0xf3
movabs r11, 0x5376164f216ff6a0
mov byte [rbp + 0x241], 0xde
mov r10, r11
mov byte [rbp + 0x242], Ordinal_200
mov r9, r14
mov byte [rbp + 0x243], Ordinal_211
mov byte [rbp + 0x244], Ordinal_211
mov byte [rbp + 0x245], Ordinal_211
mov byte [rbp + 0x246], Ordinal_217
mov byte [rbp + 0x247], Ordinal_200
mov byte [rbp + 0x248], Ordinal_211
mov byte [rbp + 0x249], 0xc1
mov byte [rbp + 0x24a], 0xc0
mov byte [rbp + 0x24b], reloc.WLDAP32.dll_Ordinal_211
mov byte [rbp + 0x24c], Ordinal_143
mov byte [rbp + 0x24d], 0xf8
mov byte [rbp + 0x24e], reloc.WLDAP32.dll_Ordinal_200
mov byte [rbp + 0x24f], Ordinal_211
mov byte [rbp + 0x250], reloc.WLDAP32.dll_Ordinal_217
mov byte [rbp + 0x251], reloc.WLDAP32.dll_Ordinal_200
mov byte [rbp + 0x252], 0xc0
mov byte [rbp + 0x253], reloc.WLDAP32.dll_Ordinal_217
mov byte [rbp + 0x254], 0xc9
mov byte [rbp + 0x255], Ordinal_217
mov byte [rbp + 0x256], reloc.WLDAP32.dll_Ordinal_211
mov byte [rbp + 0x257], __WSAFDIsSet
mov byte [rbp + 0x258], 0xf6
mov byte [rbp + 0x259], reloc.WLDAP32.dll_Ordinal_211
mov byte [rbp + 0x25a], 0x9c
mov byte [rbp + 0x25b], 0xfb
mov byte [rbp + 0x25c], Ordinal_217
mov byte [rbp + 0x25d], reloc.WLDAP32.dll_Ordinal_217
mov byte [rbp + 0x25e], Ordinal_211
mov byte [rbp + 0x25f], Ordinal_211
mov byte [rbp + 0x260], 0xae
mov byte [rbp + 0x261], 0xbf
mov byte [rbp + 0x262], Ordinal_200
movzx eax, byte [rbp + 0x240]
lea rax, [rbp + 0x240]
sub r10, rax
mov rcx, r9
lea rdx, [rbp + 0x240]
add rdx, r9
and ecx, r12d
cmp rcx, r12
mov rax, r11
cmovae rcx, r12
movzx r8d, byte [rdx]
add dl, r10b
shl cl, 2
shr rax, cl
and al, r12b
xor al, dl
xor al, r8b
mov byte [rbp + r9 + 0x240], al
inc r9
cmp r9, 0x23
jb 0x140061310
mov r9d, 0x40
lea r8, [rbp - 0x57]
lea rdx, [rbp + 0x240]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
mov byte [0x1401761dc], r13b
jmp 0x1400613fb
mov byte [rbp - 0x5d], 0x6a
xor r9d, r9d
mov byte [rbp - 0x5c], 0x5b
mov byte [rbp - 0x5b], 0x4a
mov byte [rbp - 0x5a], 0x58
mov byte [rbp - 0x59], 0x45
mov byte [rbp - 0x58], gethostname
movzx eax, byte [rbp - 0x5d]
lea rax, [rbp - 0x5d]
sub r10, rax
nop dword [rax + rax]
mov rcx, r9
lea rdx, [rbp - 0x5d]
add rdx, r9
and ecx, r12d
cmp rcx, r12
mov rax, r15
cmovae rcx, r12
movzx r8d, byte [rdx]
add dl, r10b
shl cl, 2
shr rax, cl
and al, r12b
xor al, dl
xor al, r8b
mov byte [rbp + r9 - 0x5d], al
inc r9
cmp r9, 6
jb 0x1400613a0
lea rcx, [0x1401768b8]
call fcn.140062940
mov r9d, 0x40
lea r8, [rbp - 0x5d]
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
mov rax, qword [rbp + 0x448]
xor ecx, ecx
movss xmm1, dword [0x140176408]
mulss xmm1, dword [rax]
call fcn.140004f40
mov ecx, r13d
call fcn.140005010
call fcn.140011bc0
xor edx, edx
mov dword [rsp + 0x28], 6
xor ecx, ecx
mov dword [rsp + 0x20], 6
mov r9d, 0x161
mov r8d, 0x23f
call qword [sym.imp.GDI32.dll_CreateRoundRectRgn]
mov rcx, qword [0x140176420]
mov r8d, r13d
mov rdx, rax
call qword [sym.imp.USER32.dll_SetWindowRgn]
call fcn.14000b9a0
mov rcx, qword [0x1401769d8]
lea r8, [0x1401769c0]
xorps xmm0, xmm0
xor r9d, r9d
movups xmmword [rbp + 0x608], xmm0
mov edx, r13d
mov rax, qword [rcx]
call qword [rax + 0x108]
mov rcx, qword [0x1401769d8]
lea r8, [rbp + 0x608]
mov rdx, qword [0x1401769c0]
mov rax, qword [rcx]
call qword [rax + 0x190]
call fcn.140008940
mov rcx, rax
call fcn.14003e420
mov rcx, qword [0x1401769c8]
xor r8d, r8d
mov edx, r13d
mov rax, qword [rcx]
call qword [rax + 0x40]
mov r15d, dword [rbp + 0x2c8]
jmp 0x140059a60
call fcn.14003f680
call fcn.14003f9c0
mov rbx, qword [0x1401761e0]
mov qword [0x1401761e0], rbx
call fcn.140006e80
mov rcx, rbx
mov qword [0x1401761e0], 0
call fcn.14001fe50
call fcn.1400617f0
mov rcx, qword [0x140176420]
call qword [sym.imp.USER32.dll_DestroyWindow]
mov rdx, qword [rbp + 0x468]
mov rcx, qword [rbp + 0x490]
call qword [sym.imp.USER32.dll_UnregisterClassW]
xor r13d, r13d
lea rcx, [rbp + 0x9a0]
call fcn.140062f60
movaps xmm15, xmmword [rsp + 0x1250]
mov eax, r13d
mov r13, qword [rsp + 0x1330]
movaps xmm14, xmmword [rsp + 0x1260]
movaps xmm13, xmmword [rsp + 0x1270]
movaps xmm12, xmmword [rsp + 0x1280]
movaps xmm11, xmmword [rsp + 0x1290]
movaps xmm10, xmmword [rsp + 0x12a0]
movaps xmm9, xmmword [rsp + 0x12b0]
movaps xmm8, xmmword [rsp + 0x12c0]
movaps xmm7, xmmword [rsp + 0x12d0]
movaps xmm6, xmmword [rsp + 0x12e0]
mov r15, qword [rsp + 0x12f0]
mov r14, qword [rsp + 0x12f8]
mov r12, qword [rsp + 0x1328]
mov rsi, qword [rsp + 0x1320]
add rsp, 0x1300
pop rdi
pop rbx
pop rbp
ret
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
int3