Function at 0x1400e8e00
Capabilities:
Access peb ldr_data
Get ntdll base address
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x98
cmp dword [0x1406d3e80], 0xa
jl 0x1400e8e32
mov eax, dword [0x1406d3e84]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
je 0x1400e8e32
nop dword [rax]
jmp 0x1400e8e30
mov eax, dword [0x1406d3d98]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete cl
cmp dword [0x1406d3d9c], 0xa
setl al
or al, cl
cmp al, 1
jne 0x1400e8e61
mov rcx, qword gs:[0x60]
test al, al
jne 0x1400e8e6c
mov rcx, qword gs:[0x60]
jmp 0x1400e8e54
mov rax, qword [rcx + 0x18]
mov r8, qword [rax + 0x10]
cmp dword [0x1406d3da0], 0xa
jl 0x1400e8e92
mov eax, dword [0x1406d3da4]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
je 0x1400e8e92
nop
jmp 0x1400e8e90
mov eax, dword [0x1406d3da8]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete cl
cmp dword [0x1406d3dac], 0xa
setl r12b
mov edx, dword [0x1406d3db0]
lea ebp, [rdx - 1]
imul ebp, edx
test bpl, 1
sete dl
cmp dword [0x1406d3db4], 0xa
setl byte [rsp + 0x38]
cmp dword [0x1406d3db8], 0xa
jl 0x1400e8ef2
mov ebp, dword [0x1406d3dbc]
lea ebx, [rbp - 1]
imul ebx, ebp
and ebx, 1
je 0x1400e8ef2
nop dword [rax + rax]
jmp 0x1400e8ef0
or r12b, cl
or byte [rsp + 0x38], dl
mov r11, qword [r8 + 0x30]
mov r9, r8
movsxd rcx, dword [r11 + 0x3c]
mov r10d, dword [rcx + r11 + 0x88]
test r10, r10
je 0x1400e90b0
mov ecx, dword [r11 + r10 + 0x18]
mov rax, rcx
jmp 0x1400e8f34
mov edi, 0x811c9dc5
mov rcx, rax
cmp edi, 0x8285aca5
je 0x1400e90e5
sub rax, 1
jb 0x1400e90b0
mov r14d, ecx
add r14d, 0xffffffff
mov ecx, dword [r11 + r10 + 0x20]
add rcx, r11
mov r15d, dword [rcx + r14*4]
mov cl, byte [r11 + r15]
test cl, cl
je 0x1400e8f20
add r15, r11
mov edi, 0x811c9dc5
jmp 0x1400e9065
mov esi, edi
and esi, 0x7ab683ed
or esi, 0x1410812
mov ecx, edi
and ecx, 0x85497c12
xor ecx, esi
mov esi, ecx
xor esi, 0x50af90c3
xor ecx, 0xfebef7ed
and ecx, esi
mov esi, edi
and esi, 0xae11672e
mov r13d, edx
and r13d, 0xae11672e
mov ebp, ecx
not ebp
mov ebx, esi
not ebx
and ebp, ebx
and ebx, 0x6400fcd7
xor edi, 0x24006406
and edi, esi
or edi, ebx
xor edi, ecx
xor edi, 0x6400fcd7
xor esi, ecx
or esi, ebp
not esi
or esi, edi
mov ecx, edx
xor ecx, 0xac106400
and ecx, r13d
mov edi, edx
and edi, 0x12c8050
mov ebx, edx
and ebx, 0x50c21881
lea ebp, [rbx + 0x9148106]
xor ebp, edi
xor ebx, 0xfdd6fc81
mov edi, edx
and edi, 0xac106400
or edi, 0x52831b03
xor edi, ecx
mov ecx, edi
xor ecx, 0x53af9b53
xor ebp, 0xa390278
and ebp, ecx
or edi, 0x400080
and edi, ebx
or edi, ebp
mov ecx, edx
and ecx, 0x51ee98d1
or ecx, 0x2e016708
xor ecx, r13d
xor ecx, 0x7fefffd9
xor edx, 0xae11672e
or edx, ecx
mov ecx, edx
xor ecx, edi
not ecx
not edx
and edx, edi
or edx, ecx
xor edx, esi
imul edi, edx, 0x1000193
mov cl, byte [r15]
test cl, cl
je 0x1400e8f25
add r15, 1
movsx edx, cl
add cl, 0xbf
cmp cl, 0x19
ja 0x1400e8f70
nop dword [rax + rax]
test r12b, r12b
je 0x1400e9080
mov ecx, edx
and ecx, 0xebcba6fa
and edx, 0x14345925
or edx, 0xab402048
xor edx, ecx
xor edx, 0xab402068
jmp 0x1400e8f70
mov al, byte [rsp + 0x38]
test al, al
je 0x1400e90e0
nop dword [rax + rax]
mov r9, qword [r9]
test al, al
je 0x1400e90e0
cmp r9, r8
je 0x1400e9122
mov r11, qword [r9 + 0x30]
test r11, r11
jne 0x1400e8f00
jmp 0x1400e9122
mov r9, qword [r9]
jmp 0x1400e90c0
mov ecx, dword [r11 + r10 + 0x1c]
mov edx, dword [r11 + r10 + 0x24]
add rcx, r11
add rdx, r11
movzx edx, word [rdx + r14*2]
mov eax, dword [rcx + rdx*4]
add rax, r11
cmp dword [0x1406cdd74], 0xa
jl 0x1400e912d
mov ecx, dword [0x1406cdd70]
lea edx, [rcx - 1]
imul edx, ecx
and edx, 1
je 0x1400e912d
nop word [rax + rax]
jmp 0x1400e9120
xor eax, eax
cmp dword [0x1406cdd74], 0xa
jge 0x1400e9109
mov qword [rsp + 0x70], rax
mov ecx, dword [0x1406ce508]
lea edx, [rcx - 1]
imul edx, ecx
test dl, 1
sete cl
cmp dword [0x1406ce50c], 0xa
setl al
or al, cl
mov byte [rsp + 0x60], al
mov eax, dword [0x1406d4170]
mov qword [rsp + 0x68], rax
mov eax, dword [0x1406d4174]
mov dword [rsp + 0x44], eax
je 0x1400e9702
mov rax, qword [rsp + 0x68]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
cmp dword [rsp + 0x44], 0xa
jl 0x1400e918c
test ecx, ecx
jne 0x1400e93d0
mov dword [rsp + 0x58], ecx
mov rcx, qword gs:[0x60]
mov rcx, qword [rcx + 0x18]
mov rcx, qword [rcx + 0x10]
mov rax, qword [rcx + 0x30]
mov qword [rsp + 0x50], rcx
mov qword [rsp + 0x48], rcx
movsxd rcx, dword [rax + 0x3c]
mov r13d, dword [rcx + rax + 0x88]
test r13, r13
je 0x1400e9380
mov ecx, dword [rax + r13 + 0x18]
mov rdx, rcx
jmp 0x1400e91e6
mov r8d, 0x811c9dc5
mov rcx, rdx
cmp r8d, 0x63464b39
je 0x1400e93d2
sub rdx, 1
jb 0x1400e9380
mov r15d, ecx
add r15d, 0xffffffff
mov ecx, dword [rax + r13 + 0x20]
add rcx, rax
mov ebx, dword [rcx + r15*4]
mov cl, byte [rax + rbx]
test cl, cl
je 0x1400e91d0
add rbx, rax
mov r8d, 0x811c9dc5
jmp 0x1400e9332
mov ecx, r8d
and ecx, 0x7ab683ed
or ecx, 0x1410812
mov ebp, r8d
and ebp, 0x85497c12
xor ebp, ecx
mov ecx, ebp
xor ecx, 0x50af90c3
xor ebp, 0xfebef7ed
and ebp, ecx
mov r11d, r8d
and r11d, 0xae11672e
mov r10d, r14d
and r10d, 0xae11672e
mov ecx, ebp
not ecx
mov r9d, r11d
not r9d
and ecx, r9d
and r9d, 0x6400fcd7
xor r8d, 0x24006406
and r8d, r11d
or r8d, r9d
xor r8d, ebp
xor r8d, 0x6400fcd7
xor r11d, ebp
or r11d, ecx
not r11d
or r11d, r8d
mov ecx, r14d
xor ecx, 0xac106400
and ecx, r10d
mov ebp, r14d
and ebp, 0x12c8050
mov esi, r14d
and esi, 0x50c21881
lea edi, [rsi + 0x9148106]
xor edi, ebp
xor esi, 0xfdd6fc81
mov ebp, r14d
and ebp, 0xac106400
or ebp, 0x52831b03
xor ebp, ecx
mov ecx, ebp
xor ecx, 0x53af9b53
xor edi, 0xa390278
and edi, ecx
or ebp, 0x400080
and ebp, esi
or ebp, edi
mov ecx, r14d
and ecx, 0x51ee98d1
or ecx, 0x2e016708
xor ecx, r10d
xor ecx, 0x7fefffd9
xor r14d, 0xae11672e
or r14d, ecx
mov ecx, r14d
xor ecx, ebp
not ecx
not r14d
and r14d, ebp
or r14d, ecx
xor r14d, r11d
imul r8d, r14d, 0x1000193
mov cl, byte [rbx]
test cl, cl
je 0x1400e91d6
add rbx, 1
movsx r14d, cl
add cl, 0xbf
cmp cl, 0x19
ja 0x1400e9220
nop word cs:[rax + rax]
test r12b, r12b
je 0x1400e9350
mov ecx, r14d
and ecx, 0xebcba6fa
and r14d, 0x14345925
or r14d, 0xab402048
xor r14d, ecx
xor r14d, 0xab402068
jmp 0x1400e9220
mov al, byte [rsp + 0x38]
test al, al
mov rcx, qword [rsp + 0x48]
je 0x1400e93c0
nop dword [rax]
mov rcx, qword [rcx]
test al, al
je 0x1400e93c0
cmp rcx, qword [rsp + 0x50]
je 0x1400e9632
mov rax, qword [rcx + 0x30]
test rax, rax
jne 0x1400e91aa
jmp 0x1400e9632
mov rcx, qword [rcx]
jmp 0x1400e9390
jmp 0x1400e93d0
mov ecx, dword [rax + r13 + 0x1c]
mov edx, dword [rax + r13 + 0x24]
add rcx, rax
add rdx, rax
movzx edx, word [rdx + r15*2]
mov edx, dword [rcx + rdx*4]
add rdx, rax
mov ecx, dword [rsp + 0x58]
cmp byte [rsp + 0x60], 0
jne 0x1400e9643
cmp dword [rsp + 0x44], 0xa
jl 0x1400e940b
test ecx, ecx
jne 0x1400e9630
mov rcx, qword gs:[0x60]
mov rcx, qword [rcx + 0x18]
mov r11, qword [rcx + 0x10]
mov r10, qword [r11 + 0x30]
mov r8, r11
movsxd rcx, dword [r10 + 0x3c]
mov r9d, dword [rcx + r10 + 0x88]
test r9, r9
je 0x1400e95e0
mov ecx, dword [r10 + r9 + 0x18]
mov r14, rcx
jmp 0x1400e9464
mov ebp, 0x811c9dc5
mov rcx, r14
cmp ebp, 0x63464b39
je 0x1400e916f
sub r14, 1
jb 0x1400e95e0
add ecx, 0xffffffff
mov edx, dword [r10 + r9 + 0x20]
add rdx, r10
mov r15d, dword [rdx + rcx*4]
mov cl, byte [r10 + r15]
test cl, cl
je 0x1400e9450
add r15, r10
mov ebp, 0x811c9dc5
jmp 0x1400e9594
mov edx, ebp
and edx, 0x7ab683ed
or edx, 0x1410812
mov ecx, ebp
and ecx, 0x85497c12
xor ecx, edx
mov edx, ecx
xor edx, 0x50af90c3
xor ecx, 0xfebef7ed
and ecx, edx
mov eax, ebp
and eax, 0xae11672e
mov r13d, ebx
and r13d, 0xae11672e
mov esi, ecx
not esi
mov edi, eax
not edi
and esi, edi
and edi, 0x6400fcd7
xor ebp, 0x24006406
and ebp, eax
or ebp, edi
xor ebp, ecx
xor ebp, 0x6400fcd7
xor eax, ecx
or eax, esi
not eax
or eax, ebp
mov ecx, ebx
xor ecx, 0xac106400
and ecx, r13d
mov esi, ebx
and esi, 0x12c8050
mov edi, ebx
and edi, 0x50c21881
lea edx, [rdi + 0x9148106]
xor edx, esi
xor edi, 0xfdd6fc81
mov ebp, ebx
and ebp, 0xac106400
or ebp, 0x52831b03
xor ebp, ecx
mov ecx, ebp
xor ecx, 0x53af9b53
xor edx, 0xa390278
and edx, ecx
or ebp, 0x400080
and ebp, edi
or ebp, edx
mov ecx, ebx
and ecx, 0x51ee98d1
or ecx, 0x2e016708
xor ecx, r13d
xor ecx, 0x7fefffd9
xor ebx, 0xae11672e
or ebx, ecx
mov ecx, ebx
xor ecx, ebp
not ecx
not ebx
and ebx, ebp
or ebx, ecx
xor ebx, eax
imul ebp, ebx, 0x1000193
mov cl, byte [r15]
test cl, cl
je 0x1400e9455
add r15, 1
movsx ebx, cl
add cl, 0xbf
cmp cl, 0x19
ja 0x1400e94a0
nop word [rax + rax]
test r12b, r12b
je 0x1400e95b0
mov ecx, ebx
and ecx, 0xebcba6fa
and ebx, 0x14345925
or ebx, 0xab402048
xor ebx, ecx
xor ebx, 0xab402068
jmp 0x1400e94a0
mov al, byte [rsp + 0x38]
test al, al
je 0x1400e9620
nop dword [rax + rax]
mov r8, qword [r8]
test al, al
je 0x1400e9620
cmp r8, r11
je 0x1400e916f
mov r10, qword [r8 + 0x30]
test r10, r10
jne 0x1400e9423
jmp 0x1400e916f
mov r8, qword [r8]
jmp 0x1400e95f0
jmp 0x1400e9630
mov ecx, dword [rsp + 0x58]
xor edx, edx
cmp byte [rsp + 0x60], 0
je 0x1400e93fc
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
lea r8, [0x1400e6780]
xor ecx, ecx
mov rax, rdx
xor edx, edx
xor r9d, r9d
call rax
mov rcx, rax
call qword [rsp + reloc.WS2_32.dll_WSASetLastError]
call fcn.1400df500
mov qword [rsp + 0x60], rax
mov qword [0x1406d3688], rax
mov eax, dword [0x1406ce098]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete al
cmp dword [0x1406ce09c], 0xa
setl cl
or cl, al
mov byte [rsp + 0x68], cl
mov eax, dword [0x1406d4180]
mov qword [rsp + 0x58], rax
mov eax, dword [0x1406d4184]
mov dword [rsp + 0x50], eax
je 0x1400e9720
mov rax, qword [rsp + 0x58]
lea edi, [rax - 1]
imul edi, eax
and edi, 1
cmp dword [rsp + 0x50], 0xa
jl 0x1400e96d1
test edi, edi
jne 0x1400e9700
mov eax, dword [0x1406d3d98]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete cl
cmp dword [0x1406d3d9c], 0xa
setl al
or al, cl
cmp al, 1
jne 0x1400e99f2
jmp 0x1400e9733
jmp 0x1400e9700
mov rax, qword [rsp + 0x68]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
cmp dword [rsp + 0x44], 0xa
jge 0x1400e9403
jmp 0x1400e940b
mov rax, qword [rsp + 0x58]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
jmp 0x1400e9a26
mov rcx, qword gs:[0x60]
test al, al
je 0x1400e99f2
mov rax, qword [rcx + 0x18]
mov rax, qword [rax + 0x10]
mov qword [rsp + 0x38], rax
cmp dword [0x1406d3da0], 0xa
jl 0x1400e976f
mov eax, dword [0x1406d3da4]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
jne 0x1400e99e0
mov eax, dword [0x1406d3da8]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete r8b
cmp dword [0x1406d3dac], 0xa
setl cl
mov edx, dword [0x1406d3db0]
lea ebp, [rdx - 1]
imul ebp, edx
test bpl, 1
sete dl
cmp dword [0x1406d3db4], 0xa
setl al
cmp dword [0x1406d3db8], 0xa
jl 0x1400e97c7
mov ebp, dword [0x1406d3dbc]
lea ebx, [rbp - 1]
imul ebx, ebp
and ebx, 1
jne 0x1400e99f0
mov dword [rsp + 0x44], edi
or cl, r8b
or al, dl
mov r13, qword [rsp + 0x38]
mov rdi, qword [r13 + 0x30]
mov byte [rsp + 0x48], al
movsxd rax, dword [rdi + 0x3c]
mov r12d, dword [rax + rdi + 0x88]
test r12, r12
je 0x1400e999a
mov edx, dword [rdi + r12 + 0x18]
mov r15, rdx
jmp 0x1400e9813
mov eax, 0x811c9dc5
mov rdx, r15
cmp eax, 0x38435074
je 0x1400e9a00
sub r15, 1
jb 0x1400e999a
mov r14d, edx
add r14d, 0xffffffff
mov eax, dword [rdi + r12 + 0x20]
add rax, rdi
mov esi, dword [rax + r14*4]
mov bl, byte [rdi + rsi]
test bl, bl
je 0x1400e9800
add rsi, rdi
mov eax, 0x811c9dc5
jmp 0x1400e995b
mov edx, eax
and edx, 0x7ab683ed
or edx, 0x1410812
mov r11d, eax
and r11d, 0x85497c12
xor r11d, edx
mov edx, r11d
xor edx, 0x50af90c3
xor r11d, 0xfebef7ed
and r11d, edx
mov r9d, eax
and r9d, 0xae11672e
mov r10d, r8d
and r10d, 0xae11672e
mov edx, r11d
not edx
mov ebx, r9d
not ebx
and edx, ebx
and ebx, 0x6400fcd7
xor eax, 0x24006406
and eax, r9d
or eax, ebx
xor eax, r11d
xor eax, 0x6400fcd7
xor r9d, r11d
or r9d, edx
not r9d
or r9d, eax
mov edx, r8d
xor edx, 0xac106400
and edx, r10d
mov eax, r8d
and eax, 0x12c8050
mov ebx, r8d
and ebx, 0x50c21881
lea ebp, [rbx + 0x9148106]
xor ebp, eax
xor ebx, 0xfdd6fc81
mov eax, r8d
and eax, 0xac106400
or eax, 0x52831b03
xor eax, edx
mov edx, eax
xor edx, 0x53af9b53
xor ebp, 0xa390278
and ebp, edx
or eax, 0x400080
and eax, ebx
or eax, ebp
mov edx, r8d
and edx, 0x51ee98d1
or edx, 0x2e016708
xor edx, r10d
xor edx, 0x7fefffd9
xor r8d, 0xae11672e
or r8d, edx
mov edx, r8d
xor edx, eax
not edx
not r8d
and r8d, eax
or r8d, edx
xor r8d, r9d
imul eax, r8d, 0x1000193
mov bl, byte [rsi]
test bl, bl
je 0x1400e9805
add rsi, 1
movsx r8d, bl
add bl, 0xbf
cmp bl, 0x19
ja 0x1400e9850
nop
test cl, cl
je 0x1400e9970
mov edx, r8d
and edx, 0xebcba6fa
and r8d, 0x14345925
or r8d, 0xab402048
xor r8d, edx
xor r8d, 0xab402068
jmp 0x1400e9850
mov al, byte [rsp + 0x48]
test al, al
je 0x1400e99d5
nop word cs:[rax + rax]
nop dword [rax]
mov r13, qword [r13]
test al, al
je 0x1400e99d5
cmp r13, qword [rsp + 0x38]
je 0x1400e9a62
mov rdi, qword [r13 + 0x30]
test rdi, rdi
jne 0x1400e97dd
jmp 0x1400e9a62
mov r13, qword [r13]
jmp 0x1400e99b0
jmp 0x1400e99e0
jmp 0x1400e99f0
mov rcx, qword gs:[0x60]
jmp 0x1400e9733
mov eax, dword [rdi + r12 + 0x1c]
mov ecx, dword [rdi + r12 + 0x24]
add rax, rdi
add rcx, rdi
movzx ecx, word [rcx + r14*2]
mov ebp, dword [rax + rcx*4]
add rbp, rdi
cmp byte [rsp + 0x68], 0
mov ecx, dword [rsp + 0x44]
jne 0x1400e9a66
cmp dword [rsp + 0x50], 0xa
jl 0x1400e9a31
test ecx, ecx
jne 0x1400e9a60
mov eax, dword [0x1406d3d98]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete cl
cmp dword [0x1406d3d9c], 0xa
setl al
or al, cl
cmp al, 1
jne 0x1400e9dc2
jmp 0x1400e9b29
jmp 0x1400e9a60
xor ebp, ebp
jmp 0x1400e9a1b
mov rcx, qword [rsp + 0x60]
xor edx, edx
call rbp
mov eax, dword [0x1406ce4e0]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete al
cmp dword [0x1406ce4e4], 0xa
setl cl
or cl, al
mov byte [rsp + 0x60], cl
mov eax, dword [0x1406d4130]
mov qword [rsp + 0x68], rax
mov eax, dword [0x1406d4134]
mov dword [rsp + 0x58], eax
je 0x1400e9b12
mov rax, qword [rsp + 0x68]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
mov dword [rsp + 0x50], ecx
cmp dword [rsp + 0x58], 0xa
jl 0x1400e9ac8
cmp dword [rsp + 0x50], 0
jne 0x1400e9b10
mov eax, dword [0x1406d3d98]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete cl
cmp dword [0x1406d3d9c], 0xa
setl al
or al, cl
mov ecx, dword [0x1406d3da4]
lea edx, [rcx - 1]
imul edx, ecx
test dl, 1
sete cl
cmp dword [0x1406d3da0], 0xa
setl bl
cmp al, 1
jne 0x1400ea082
jmp 0x1400e9dd0
jmp 0x1400e9b10
mov rax, qword [rsp + 0x68]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
mov dword [rsp + 0x50], ecx
jmp 0x1400ea0b2
mov rcx, qword gs:[0x60]
test al, al
je 0x1400e9dc2
mov rax, qword [rcx + 0x18]
mov rax, qword [rax + 0x10]
mov qword [rsp + 0x38], rax
cmp dword [0x1406d3da0], 0xa
jl 0x1400e9b65
mov eax, dword [0x1406d3da4]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
jne 0x1400e9db0
mov eax, dword [0x1406d3da8]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete al
cmp dword [0x1406d3dac], 0xa
setl cl
mov edx, dword [0x1406d3db0]
lea ebp, [rdx - 1]
imul ebp, edx
test bpl, 1
sete dl
cmp dword [0x1406d3db4], 0xa
setl r14b
cmp dword [0x1406d3db8], 0xa
jl 0x1400e9bbd
mov ebp, dword [0x1406d3dbc]
lea ebx, [rbp - 1]
imul ebx, ebp
and ebx, 1
jne 0x1400e9dc0
or cl, al
or r14b, dl
mov r8, qword [rsp + 0x38]
mov r10, qword [r8 + 0x30]
movsxd rax, dword [r10 + 0x3c]
mov r9d, dword [rax + r10 + 0x88]
test r9, r9
je 0x1400e9d72
mov eax, dword [r10 + r9 + 0x18]
mov r15, rax
jmp 0x1400e9c04
mov ebx, 0x811c9dc5
mov rax, r15
cmp ebx, 0x38435074
je 0x1400e96b8
sub r15, 1
jb 0x1400e9d72
add eax, 0xffffffff
mov edx, dword [r10 + r9 + 0x20]
add rdx, r10
mov r12d, dword [rdx + rax*4]
mov dl, byte [r10 + r12]
test dl, dl
je 0x1400e9bf0
add r12, r10
mov ebx, 0x811c9dc5
jmp 0x1400e9d3a
mov edx, ebx
and edx, 0x7ab683ed
or edx, 0x1410812
mov ebp, ebx
and ebp, 0x85497c12
xor ebp, edx
mov edx, ebp
xor edx, 0x50af90c3
xor ebp, 0xfebef7ed
and ebp, edx
mov edi, ebx
and edi, 0xae11672e
mov r13d, eax
and r13d, 0xae11672e
mov edx, ebp
not edx
mov esi, edi
not esi
and edx, esi
and esi, 0x6400fcd7
xor ebx, 0x24006406
and ebx, edi
or ebx, esi
xor ebx, ebp
xor ebx, 0x6400fcd7
xor edi, ebp
or edi, edx
not edi
or edi, ebx
mov edx, eax
xor edx, 0xac106400
and edx, r13d
mov esi, eax
and esi, 0x12c8050
mov ebp, eax
and ebp, 0x50c21881
lea r11d, [rbp + 0x9148106]
xor r11d, esi
xor ebp, 0xfdd6fc81
mov ebx, eax
and ebx, 0xac106400
or ebx, 0x52831b03
xor ebx, edx
mov edx, ebx
xor edx, 0x53af9b53
xor r11d, 0xa390278
and r11d, edx
or ebx, 0x400080
and ebx, ebp
or ebx, r11d
mov edx, eax
and edx, 0x51ee98d1
or edx, 0x2e016708
xor edx, r13d
xor edx, 0x7fefffd9
xor eax, 0xae11672e
or eax, edx
mov edx, eax
xor edx, ebx
not edx
not eax
and eax, ebx
or eax, edx
xor eax, edi
imul ebx, eax, 0x1000193
mov dl, byte [r12]
test dl, dl
je 0x1400e9bf5
add r12, 1
movsx eax, dl
add dl, 0xbf
cmp dl, 0x19
ja 0x1400e9c40
nop dword [rax]
test cl, cl
je 0x1400e9d50
mov edx, eax
and edx, 0xebcba6fa
and eax, 0x14345925
or eax, 0xab402048
xor eax, edx
xor eax, 0xab402068
jmp 0x1400e9c40
test r14b, r14b
je 0x1400e9da5
nop word [rax + rax]
mov r8, qword [r8]
test r14b, r14b
je 0x1400e9da5
cmp r8, qword [rsp + 0x38]
je 0x1400e96b8
mov r10, qword [r8 + 0x30]
test r10, r10
jne 0x1400e9bcb
jmp 0x1400e96b8
mov r8, qword [r8]
jmp 0x1400e9d80
jmp 0x1400e9db0
jmp 0x1400e9dc0
mov rcx, qword gs:[0x60]
jmp 0x1400e9b29
mov edx, ebx
or dl, cl
mov rbp, qword gs:[0x60]
test al, al
je 0x1400ea082
test dl, dl
je 0x1400ea070
mov rbp, qword [rbp + 0x18]
mov eax, dword [0x1406d3da8]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete r8b
cmp dword [0x1406d3dac], 0xa
setl al
mov edx, dword [0x1406d3db0]
lea ebx, [rdx - 1]
imul ebx, edx
test bl, 1
sete cl
cmp dword [0x1406d3db4], 0xa
mov rbp, qword [rbp + 0x10]
mov qword [rsp + 0x48], rbp
setl dl
cmp dword [0x1406d3db8], 0xa
jl 0x1400e9e51
mov ebp, dword [0x1406d3dbc]
lea ebx, [rbp - 1]
imul ebx, ebp
and ebx, 1
jne 0x1400ea080
or al, r8b
or dl, cl
mov rcx, qword [rsp + 0x48]
mov r12, qword [rcx + 0x30]
mov byte [rsp + 0x44], dl
mov qword [rsp + 0x38], rcx
movsxd rcx, dword [r12 + 0x3c]
mov r11d, dword [rcx + r12 + 0x88]
test r11, r11
je 0x1400ea03a
mov ecx, dword [r12 + r11 + 0x18]
mov rbx, rcx
jmp 0x1400e9e9e
mov r8d, 0x811c9dc5
mov rcx, rbx
cmp r8d, 0x1a8c88a9
je 0x1400ea090
sub rbx, 1
jb 0x1400ea03a
mov r13d, ecx
add r13d, 0xffffffff
mov ecx, dword [r12 + r11 + 0x20]
add rcx, r12
mov ecx, dword [rcx + r13*4]
mov dl, byte [r12 + rcx]
test dl, dl
je 0x1400e9e88
add rcx, r12
mov r8d, 0x811c9dc5
jmp 0x1400e9ff2
mov esi, r8d
and esi, 0x7ab683ed
or esi, 0x1410812
mov edx, r8d
and edx, 0x85497c12
xor edx, esi
mov esi, edx
xor esi, 0x50af90c3
xor edx, 0xfebef7ed
and edx, esi
mov r15d, r8d
and r15d, 0xae11672e
mov r14d, r10d
and r14d, 0xae11672e
mov esi, edx
not esi
mov r9d, r15d
not r9d
and esi, r9d
and r9d, 0x6400fcd7
xor r8d, 0x24006406
and r8d, r15d
or r8d, r9d
xor r8d, edx
xor r8d, 0x6400fcd7
xor r15d, edx
or r15d, esi
not r15d
or r15d, r8d
mov esi, r10d
xor esi, 0xac106400
and esi, r14d
mov edx, r10d
and edx, 0x12c8050
mov edi, r10d
and edi, 0x50c21881
lea ebp, [rdi + 0x9148106]
xor ebp, edx
xor edi, 0xfdd6fc81
mov edx, r10d
and edx, 0xac106400
or edx, 0x52831b03
xor edx, esi
mov esi, edx
xor esi, 0x53af9b53
xor ebp, 0xa390278
and ebp, esi
or edx, 0x400080
and edx, edi
or edx, ebp
mov ebp, r10d
and ebp, 0x51ee98d1
or ebp, 0x2e016708
xor ebp, r14d
xor ebp, 0x7fefffd9
xor r10d, 0xae11672e
or r10d, ebp
mov ebp, r10d
xor ebp, edx
not ebp
not r10d
and r10d, edx
or r10d, ebp
xor r10d, r15d
imul r8d, r10d, 0x1000193
mov dl, byte [rcx]
test dl, dl
je 0x1400e9e8e
add rcx, 1
movsx r10d, dl
add dl, 0xbf
cmp dl, 0x19
ja 0x1400e9ee0
nop word cs:[rax + rax]
test al, al
je 0x1400ea010
mov edx, r10d
and edx, 0xebcba6fa
and r10d, 0x14345925
or r10d, 0xab402048
xor r10d, edx
xor r10d, 0xab402068
jmp 0x1400e9ee0
mov dl, byte [rsp + 0x44]
test dl, dl
mov rcx, qword [rsp + 0x38]
je 0x1400ea06b
mov rcx, qword [rcx]
test dl, dl
je 0x1400ea06b
cmp rcx, qword [rsp + 0x48]
je 0x1400ea112
mov r12, qword [rcx + 0x30]
test r12, r12
jne 0x1400e9e63
jmp 0x1400ea112
mov rcx, qword [rcx]
jmp 0x1400ea047
jmp 0x1400ea070
jmp 0x1400ea080
mov rdx, qword gs:[0x60]
jmp 0x1400e9dd0
mov eax, dword [r12 + r11 + 0x1c]
mov ecx, dword [r12 + r11 + 0x24]
add rax, r12
add rcx, r12
movzx ecx, word [rcx + r13*2]
mov esi, dword [rax + rcx*4]
add rsi, r12
cmp byte [rsp + 0x60], 0
jne 0x1400ea11b
cmp dword [rsp + 0x58], 0xa
jl 0x1400ea0c0
cmp dword [rsp + 0x50], 0
jne 0x1400ea110
mov eax, dword [0x1406d3d98]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete cl
cmp dword [0x1406d3d9c], 0xa
setl al
or al, cl
mov ecx, dword [0x1406d3da4]
lea edx, [rcx - 1]
imul edx, ecx
test dl, 1
sete cl
cmp dword [0x1406d3da0], 0xa
setl bl
cmp al, 1
jne 0x1400ea822
jmp 0x1400ea5ba
jmp 0x1400ea110
xor esi, esi
cmp byte [rsp + 0x60], 0
je 0x1400ea0b2
call qword [sym.imp.USER32.dll_GetDesktopWindow]
lea rdx, [0x1406d36c8]
mov rcx, rax
call rsi
mov qword [rsp + 0x88], 0
mov eax, dword [0x1406ce0b0]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete al
cmp dword [0x1406ce0b4], 0xa
setl cl
or cl, al
mov byte [rsp + 0x70], cl
mov eax, dword [0x1406d4190]
mov qword [rsp + 0x60], rax
mov eax, dword [0x1406d4194]
mov dword [rsp + 0x48], eax
je 0x1400ea1b9
mov rax, qword [rsp + 0x60]
lea esi, [rax - 1]
imul esi, eax
and esi, 1
cmp dword [rsp + 0x48], 0xa
mov dword [rsp + 0x68], esi
jl 0x1400ea18f
test esi, esi
jne 0x1400ea1b7
mov eax, dword [0x1406d3d98]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete cl
cmp dword [0x1406d3d9c], 0xa
setl al
or al, cl
cmp al, 1
jne 0x1400ea49f
jmp 0x1400ea1cc
jmp 0x1400ea1b7
mov rax, qword [rsp + 0x60]
lea edx, [rax - 1]
imul edx, eax
and edx, 1
jmp 0x1400ea4d3
mov rcx, qword gs:[0x60]
test al, al
je 0x1400ea49f
mov rax, qword [rcx + 0x18]
mov rax, qword [rax + 0x10]
mov qword [rsp + 0x50], rax
cmp dword [0x1406d3da0], 0xa
jl 0x1400ea208
mov eax, dword [0x1406d3da4]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
jne 0x1400ea49b
mov eax, dword [0x1406d3da8]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete r8b
cmp dword [0x1406d3dac], 0xa
setl al
test esi, esi
setne r9b
cmp dword [rsp + 0x48], 0xa
setge cl
mov ebp, dword [0x1406d3db0]
lea ebx, [rbp - 1]
imul ebx, ebp
test bl, 1
sete bl
cmp dword [0x1406d3db4], 0xa
setl dl
cmp dword [0x1406d3db8], 0xa
jl 0x1400ea26d
mov ebp, dword [0x1406d3dbc]
lea edi, [rbp - 1]
imul edi, ebp
and edi, 1
jne 0x1400ea49d
or al, r8b
and cl, r9b
mov byte [rsp + 0x44], cl
or dl, bl
mov byte [rsp + 0x58], dl
mov rcx, qword [rsp + 0x50]
mov r14, qword [rcx + 0x30]
mov qword [rsp + 0x38], rcx
movsxd rcx, dword [r14 + 0x3c]
mov r13d, dword [rcx + r14 + 0x88]
test r13, r13
je 0x1400ea45a
mov ecx, dword [r14 + r13 + 0x18]
mov rbx, rcx
jmp 0x1400ea2c0
mov r9d, 0x811c9dc5
mov rcx, rbx
cmp r9d, 0x5bb57373
je 0x1400ea4ad
sub rbx, 1
jb 0x1400ea45a
mov r15d, ecx
add r15d, 0xffffffff
mov ecx, dword [r14 + r13 + 0x20]
add rcx, r14
mov edx, dword [rcx + r15*4]
mov cl, byte [r14 + rdx]
test cl, cl
je 0x1400ea2aa
add rdx, r14
mov r9d, 0x811c9dc5
jmp 0x1400ea412
mov ecx, r9d
and ecx, 0x7ab683ed
or ecx, 0x1410812
mov edi, r9d
and edi, 0x85497c12
xor edi, ecx
mov ecx, edi
xor ecx, 0x50af90c3
xor edi, 0xfebef7ed
and edi, ecx
mov r12d, r9d
and r12d, 0xae11672e
mov r11d, r8d
and r11d, 0xae11672e
mov ecx, edi
not ecx
mov r10d, r12d
not r10d
and ecx, r10d
and r10d, 0x6400fcd7
xor r9d, 0x24006406
and r9d, r12d
or r9d, r10d
xor r9d, edi
xor r9d, 0x6400fcd7
xor r12d, edi
or r12d, ecx
not r12d
or r12d, r9d
mov ecx, r8d
xor ecx, 0xac106400
and ecx, r11d
mov edi, r8d
and edi, 0x12c8050
mov ebp, r8d
and ebp, 0x50c21881
lea esi, [rbp + 0x9148106]
xor esi, edi
xor ebp, 0xfdd6fc81
mov edi, r8d
and edi, 0xac106400
or edi, 0x52831b03
xor edi, ecx
mov ecx, edi
xor ecx, 0x53af9b53
xor esi, 0xa390278
and esi, ecx
or edi, 0x400080
and edi, ebp
or edi, esi
mov ecx, r8d
and ecx, 0x51ee98d1
or ecx, 0x2e016708
xor ecx, r11d
xor ecx, 0x7fefffd9
xor r8d, 0xae11672e
or r8d, ecx
mov ecx, r8d
xor ecx, edi
not ecx
not r8d
and r8d, edi
or r8d, ecx
xor r8d, r12d
imul r9d, r8d, 0x1000193
mov cl, byte [rdx]
test cl, cl
je 0x1400ea2b0
add rdx, 1
movsx r8d, cl
add cl, 0xbf
cmp cl, 0x19
ja 0x1400ea300
nop word cs:[rax + rax]
test al, al
je 0x1400ea430
mov ecx, r8d
and ecx, 0xebcba6fa
and r8d, 0x14345925
or r8d, 0xab402048
xor r8d, ecx
xor r8d, 0xab402068
jmp 0x1400ea300
cmp byte [rsp + 0x44], 0
jne 0x1400ea499
mov cl, byte [rsp + 0x58]
test cl, cl
mov rdx, qword [rsp + 0x38]
je 0x1400ea494
mov rdx, qword [rdx]
test cl, cl
je 0x1400ea494
cmp rdx, qword [rsp + 0x50]
je 0x1400ea50b
mov qword [rsp + 0x38], rdx
mov r14, qword [rdx + 0x30]
test r14, r14
jne 0x1400ea28b
jmp 0x1400ea50b
mov rdx, qword [rdx]
jmp 0x1400ea46e
jmp 0x1400ea499
jmp 0x1400ea49b
jmp 0x1400ea49d
mov rcx, qword gs:[0x60]
jmp 0x1400ea1cc
mov eax, dword [r14 + r13 + 0x1c]
mov ecx, dword [r14 + r13 + 0x24]
add rax, r14
add rcx, r14
movzx ecx, word [rcx + r15*2]
mov ebp, dword [rax + rcx*4]
add rbp, r14
cmp byte [rsp + 0x70], 0
mov edx, dword [rsp + 0x68]
jne 0x1400ea50f
cmp dword [rsp + 0x48], 0xa
jl 0x1400ea4de
test edx, edx
jne 0x1400ea509
mov eax, dword [0x1406d3d98]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete cl
cmp dword [0x1406d3d9c], 0xa
setl al
or al, cl
cmp al, 1
jne 0x1400eaabf
jmp 0x1400ea830
jmp 0x1400ea509
xor ebp, ebp
jmp 0x1400ea4c8
xor ecx, ecx
call rbp
mov dword [rsp + 0x90], eax
mov eax, dword [0x1406ce0b0]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete al
cmp dword [0x1406ce0b4], 0xa
setl cl
or cl, al
mov byte [rsp + 0x80], cl
mov eax, dword [0x1406d4190]
mov qword [rsp + 0x70], rax
mov eax, dword [0x1406d4194]
mov dword [rsp + 0x50], eax
je 0x1400ea5a3
mov rax, qword [rsp + 0x70]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
mov dword [rsp + 0x38], ecx
cmp dword [rsp + 0x50], 0xa
jl 0x1400ea576
cmp dword [rsp + 0x38], 0
jne 0x1400ea5a1
mov eax, dword [0x1406d3d98]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete cl
cmp dword [0x1406d3d9c], 0xa
setl al
or al, cl
cmp al, 1
jne 0x1400ead8b
jmp 0x1400eaacd
jmp 0x1400ea5a1
mov rax, qword [rsp + 0x70]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
mov dword [rsp + 0x38], ecx
jmp 0x1400eadc3
mov edx, ebx
or dl, cl
mov rbp, qword gs:[0x60]
test al, al
je 0x1400ea822
test dl, dl
je 0x1400ea810
mov rdx, qword [rbp + 0x18]
mov eax, dword [0x1406d3da8]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete al
cmp dword [0x1406d3dac], 0xa
setl bl
mov ecx, dword [0x1406d3db0]
lea ebp, [rcx - 1]
imul ebp, ecx
test bpl, 1
sete cl
cmp dword [0x1406d3db4], 0xa
mov r11, qword [rdx + 0x10]
setl r14b
cmp dword [0x1406d3db8], 0xa
jl 0x1400ea637
mov edx, dword [0x1406d3dbc]
lea ebp, [rdx - 1]
imul ebp, edx
and ebp, 1
jne 0x1400ea820
or bl, al
or r14b, cl
mov r10, qword [r11 + 0x30]
mov r8, r11
movsxd rax, dword [r10 + 0x3c]
mov r9d, dword [rax + r10 + 0x88]
test r9, r9
je 0x1400ea7d4
mov eax, dword [r10 + r9 + 0x18]
mov r15, rax
jmp 0x1400ea676
mov ecx, 0x811c9dc5
mov rax, r15
cmp ecx, 0x1a8c88a9
je 0x1400e9aa8
sub r15, 1
jb 0x1400ea7d4
add eax, 0xffffffff
mov ecx, dword [r10 + r9 + 0x20]
add rcx, r10
mov r12d, dword [rcx + rax*4]
mov al, byte [r10 + r12]
test al, al
je 0x1400ea662
add r12, r10
mov ecx, 0x811c9dc5
jmp 0x1400ea79e
mov eax, ecx
and eax, 0x7ab683ed
or eax, 0x1410812
mov esi, ecx
and esi, 0x85497c12
xor esi, eax
mov eax, esi
xor eax, 0x50af90c3
xor esi, 0xfebef7ed
and esi, eax
mov ebp, ecx
and ebp, 0xae11672e
mov r13d, edx
and r13d, 0xae11672e
mov eax, esi
not eax
mov edi, ebp
not edi
and eax, edi
and edi, 0x6400fcd7
xor ecx, 0x24006406
and ecx, ebp
or ecx, edi
xor ecx, esi
xor ecx, 0x6400fcd7
xor ebp, esi
or ebp, eax
not ebp
or ebp, ecx
mov eax, edx
xor eax, 0xac106400
and eax, r13d
mov ecx, edx
and ecx, 0x12c8050
mov esi, edx
and esi, 0x50c21881
lea edi, [rsi + 0x9148106]
xor edi, ecx
xor esi, 0xfdd6fc81
mov ecx, edx
and ecx, 0xac106400
or ecx, 0x52831b03
xor ecx, eax
mov eax, ecx
xor eax, 0x53af9b53
xor edi, 0xa390278
and edi, eax
or ecx, 0x400080
and ecx, esi
or ecx, edi
mov eax, edx
and eax, 0x51ee98d1
or eax, 0x2e016708
xor eax, r13d
xor eax, 0x7fefffd9
xor edx, 0xae11672e
or edx, eax
mov eax, edx
xor eax, ecx
not eax
not edx
and edx, ecx
or edx, eax
xor edx, ebp
imul ecx, edx, 0x1000193
mov al, byte [r12]
test al, al
je 0x1400ea667
add r12, 1
movsx edx, al
add al, 0xbf
cmp al, 0x19
ja 0x1400ea6b0
nop
test bl, bl
je 0x1400ea7b0
mov eax, edx
and eax, 0xebcba6fa
and edx, 0x14345925
or edx, 0xab402048
xor edx, eax
xor edx, 0xab402068
jmp 0x1400ea6b0
test r14b, r14b
je 0x1400ea7fc
mov r8, qword [r8]
test r14b, r14b
je 0x1400ea7fc
cmp r8, r11
je 0x1400e9aa8
mov r10, qword [r8 + 0x30]
test r10, r10
jne 0x1400ea643
jmp 0x1400e9aa8
mov r8, qword [r8]
jmp 0x1400ea7d9
jmp 0x1400ea810
jmp 0x1400ea820
mov rdx, qword gs:[0x60]
jmp 0x1400ea5ba
mov rcx, qword gs:[0x60]
test al, al
je 0x1400eaabf
mov rax, qword [rcx + 0x18]
mov rax, qword [rax + 0x10]
mov qword [rsp + 0x38], rax
cmp dword [0x1406d3da0], 0xa
jl 0x1400ea86c
mov eax, dword [0x1406d3da4]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
jne 0x1400eaabb
mov eax, dword [0x1406d3da8]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete cl
cmp dword [0x1406d3dac], 0xa
setl al
test edx, edx
setne dl
cmp dword [rsp + 0x48], 0xa
setge r14b
mov ebp, dword [0x1406d3db0]
lea ebx, [rbp - 1]
imul ebx, ebp
test bl, 1
sete bl
cmp dword [0x1406d3db4], 0xa
setl r8b
cmp dword [0x1406d3db8], 0xa
jl 0x1400ea8d1
mov ebp, dword [0x1406d3dbc]
lea edi, [rbp - 1]
imul edi, ebp
and edi, 1
jne 0x1400eaabd
or al, cl
and r14b, dl
or r8b, bl
mov r9, qword [rsp + 0x38]
mov r15, qword [r9 + 0x30]
movsxd rcx, dword [r15 + 0x3c]
mov r10d, dword [rcx + r15 + 0x88]
test r10, r10
je 0x1400eaa85
mov ecx, dword [r15 + r10 + 0x18]
mov r12, rcx
jmp 0x1400ea915
mov edx, 0x811c9dc5
mov rcx, r12
cmp edx, 0x5bb57373
je 0x1400ea172
sub r12, 1
jb 0x1400eaa85
add ecx, 0xffffffff
mov edx, dword [r15 + r10 + 0x20]
add rdx, r15
mov r13d, dword [rdx + rcx*4]
mov bl, byte [r15 + r13]
test bl, bl
je 0x1400ea901
add r13, r15
mov edx, 0x811c9dc5
jmp 0x1400eaa4b
mov esi, edx
and esi, 0x7ab683ed
or esi, 0x1410812
mov edi, edx
and edi, 0x85497c12
xor edi, esi
mov esi, edi
xor esi, 0x50af90c3
xor edi, 0xfebef7ed
and edi, esi
mov r11d, edx
and r11d, 0xae11672e
mov ebp, ecx
and ebp, 0xae11672e
mov ebx, edi
not ebx
mov esi, r11d
not esi
and ebx, esi
and esi, 0x6400fcd7
xor edx, 0x24006406
and edx, r11d
or edx, esi
xor edx, edi
xor edx, 0x6400fcd7
xor r11d, edi
or r11d, ebx
not r11d
or r11d, edx
mov esi, ecx
xor esi, 0xac106400
and esi, ebp
mov edx, ecx
and edx, 0x12c8050
mov edi, ecx
and edi, 0x50c21881
lea ebx, [rdi + 0x9148106]
xor ebx, edx
xor edi, 0xfdd6fc81
mov edx, ecx
and edx, 0xac106400
or edx, 0x52831b03
xor edx, esi
mov esi, edx
xor esi, 0x53af9b53
xor ebx, 0xa390278
and ebx, esi
or edx, 0x400080
and edx, edi
or edx, ebx
mov esi, ecx
and esi, 0x51ee98d1
or esi, 0x2e016708
xor esi, ebp
xor esi, 0x7fefffd9
xor ecx, 0xae11672e
or ecx, esi
mov esi, ecx
xor esi, edx
not esi
not ecx
and ecx, edx
or ecx, esi
xor ecx, r11d
imul edx, ecx, 0x1000193
mov bl, byte [r13]
test bl, bl
je 0x1400ea906
add r13, 1
movsx ecx, bl
add bl, 0xbf
cmp bl, 0x19
ja 0x1400ea950
nop
test al, al
je 0x1400eaa60
mov esi, ecx
and esi, 0xebcba6fa
and ecx, 0x14345925
or ecx, 0xab402048
xor ecx, esi
xor ecx, 0xab402068
jmp 0x1400ea950
test r14b, r14b
jne 0x1400eaab9
test r8b, r8b
je 0x1400eaab4
mov r9, qword [r9]
test r8b, r8b
je 0x1400eaab4
cmp r9, qword [rsp + 0x38]
je 0x1400ea172
mov r15, qword [r9 + 0x30]
test r15, r15
jne 0x1400ea8e2
jmp 0x1400ea172
mov r9, qword [r9]
jmp 0x1400eaa8f
jmp 0x1400eaab9
jmp 0x1400eaabb
jmp 0x1400eaabd
mov rcx, qword gs:[0x60]
jmp 0x1400ea830
mov rcx, qword gs:[0x60]
test al, al
je 0x1400ead8b
mov rax, qword [rcx + 0x18]
mov rax, qword [rax + 0x10]
mov qword [rsp + 0x58], rax
cmp dword [0x1406d3da0], 0xa
jl 0x1400eab09
mov eax, dword [0x1406d3da4]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
jne 0x1400ead87
mov eax, dword [0x1406d3da8]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete cl
cmp dword [0x1406d3dac], 0xa
setl al
cmp dword [rsp + 0x38], 0
setne dl
cmp dword [rsp + 0x50], 0xa
setge byte [rsp + 0x44]
mov ebp, dword [0x1406d3db0]
lea ebx, [rbp - 1]
imul ebx, ebp
test bl, 1
sete bl
cmp dword [0x1406d3db4], 0xa
setl byte [rsp + 0x68]
cmp dword [0x1406d3db8], 0xa
jl 0x1400eab73
mov ebp, dword [0x1406d3dbc]
lea edi, [rbp - 1]
imul edi, ebp
and edi, 1
jne 0x1400ead89
or al, cl
and byte [rsp + 0x44], dl
or byte [rsp + 0x68], bl
mov rcx, qword [rsp + 0x58]
mov r14, qword [rcx + 0x30]
xor edx, edx
mov qword [rsp + 0x60], rdx
mov qword [rsp + 0x48], rcx
movsxd rcx, dword [r14 + 0x3c]
mov r13d, dword [rcx + r14 + 0x88]
test r13, r13
je 0x1400ead4a
mov ecx, dword [r14 + r13 + 0x18]
mov rbx, rcx
jmp 0x1400eabc7
cmp byte [rsp + 0x44], 0
jne 0x1400ead85
jmp 0x1400ead87
jmp 0x1400ead89
mov rcx, qword gs:[0x60]
jmp 0x1400eaacd
cmp dword [rsp + 0x50], 0xa
jl 0x1400eadd1
cmp dword [rsp + 0x38], 0
jne 0x1400eadfc
mov eax, dword [0x1406d3d98]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete cl
cmp dword [0x1406d3d9c], 0xa
setl al
or al, cl
cmp al, 1
jne 0x1400eb11f
jmp 0x1400eae93
jmp 0x1400eadfc
mov rcx, qword gs:[0x60]
test al, al
je 0x1400eb11f
mov rax, qword [rcx + 0x18]
mov rax, qword [rax + 0x10]
mov qword [rsp + 0x48], rax
cmp dword [0x1406d3da0], 0xa
jl 0x1400eaecf
mov eax, dword [0x1406d3da4]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
jne 0x1400eb11b
mov eax, dword [0x1406d3da8]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete cl
cmp dword [0x1406d3dac], 0xa
setl al
cmp dword [rsp + 0x38], 0
setne dl
cmp dword [rsp + 0x50], 0xa
setge r14b
mov ebp, dword [0x1406d3db0]
lea ebx, [rbp - 1]
imul ebx, ebp
test bl, 1
sete bl
cmp dword [0x1406d3db4], 0xa
setl r8b
cmp dword [0x1406d3db8], 0xa
jl 0x1400eaf37
mov ebp, dword [0x1406d3dbc]
lea edi, [rbp - 1]
imul edi, ebp
and edi, 1
jne 0x1400eb11d
or al, cl
and r14b, dl
or r8b, bl
mov r9, qword [rsp + 0x48]
mov r15, qword [r9 + 0x30]
movsxd rcx, dword [r15 + 0x3c]
mov r10d, dword [rcx + r15 + 0x88]
test r10, r10
je 0x1400eb0e5
mov ecx, dword [r15 + r10 + 0x18]
mov r12, rcx
jmp 0x1400eaf7b
mov edx, 0x811c9dc5
mov rcx, r12
cmp edx, 0x5bb57373
je 0x1400ea556
sub r12, 1
jb 0x1400eb0e5
add ecx, 0xffffffff
mov edx, dword [r15 + r10 + 0x20]
add rdx, r15
mov r13d, dword [rdx + rcx*4]
mov bl, byte [r15 + r13]
test bl, bl
je 0x1400eaf67
add r13, r15
mov edx, 0x811c9dc5
jmp 0x1400eb0a4
mov esi, edx
and esi, 0x7ab683ed
or esi, 0x1410812
mov edi, edx
and edi, 0x85497c12
xor edi, esi
mov esi, edi
xor esi, 0x50af90c3
xor edi, 0xfebef7ed
and edi, esi
mov r11d, edx
and r11d, 0xae11672e
mov ebp, ecx
and ebp, 0xae11672e
mov ebx, edi
not ebx
mov esi, r11d
not esi
and ebx, esi
and esi, 0x6400fcd7
xor edx, 0x24006406
and edx, r11d
or edx, esi
xor edx, edi
xor edx, 0x6400fcd7
xor r11d, edi
or r11d, ebx
not r11d
or r11d, edx
mov esi, ecx
xor esi, 0xac106400
and esi, ebp
mov edx, ecx
and edx, 0x12c8050
mov edi, ecx
and edi, 0x50c21881
lea ebx, [rdi + 0x9148106]
xor ebx, edx
xor edi, 0xfdd6fc81
mov edx, ecx
and edx, 0xac106400
or edx, 0x52831b03
xor edx, esi
mov esi, edx
xor esi, 0x53af9b53
xor ebx, 0xa390278
and ebx, esi
or edx, 0x400080
and edx, edi
or edx, ebx
mov esi, ecx
and esi, 0x51ee98d1
or esi, 0x2e016708
xor esi, ebp
xor esi, 0x7fefffd9
xor ecx, 0xae11672e
or ecx, esi
mov esi, ecx
xor esi, edx
not esi
not ecx
and ecx, edx
or ecx, esi
xor ecx, r11d
imul edx, ecx, 0x1000193
mov bl, byte [r13]
test bl, bl
je 0x1400eaf6c
add r13, 1
movsx ecx, bl
add bl, 0xbf
cmp bl, 0x19
ja 0x1400eafa9
nop word [rax + rax]
test al, al
je 0x1400eb0c0
mov esi, ecx
and esi, 0xebcba6fa
and ecx, 0x14345925
or ecx, 0xab402048
xor ecx, esi
xor ecx, 0xab402068
jmp 0x1400eafa9
test r14b, r14b
jne 0x1400eb119
test r8b, r8b
je 0x1400eb114
mov r9, qword [r9]
test r8b, r8b
je 0x1400eb114
cmp r9, qword [rsp + 0x48]
je 0x1400ea556
mov r15, qword [r9 + 0x30]
test r15, r15
jne 0x1400eaf48
jmp 0x1400ea556
mov r9, qword [r9]
jmp 0x1400eb0ef
jmp 0x1400eb119
jmp 0x1400eb11b
jmp 0x1400eb11d
mov rcx, qword gs:[0x60]
jmp 0x1400eae93