Function at 0x140018d60
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x50]
sub rsp, 0x150
movaps xmmword [rsp + 0x140], xmm6
mov rax, qword [0x1401e56c8]
xor rax, rsp
mov qword [rbp + 0x30], rax
mov r13, r9
mov r12, r8
mov rsi, rdx
mov rdi, rcx
mov qword [rsp + 0x30], rcx
xor r14d, r14d
xorps xmm0, xmm0
cmp qword [rdx], r14
je 0x140019f16
movups xmmword [rsp + 0x78], xmm0
mov qword [rsp + 0x78], r14
mov qword [rbp - 0x80], r14
mov qword [rbp - 0x78], r14
mov ecx, 0x3e8
call fcn.14015be00
mov qword [rsp + 0x78], rax
lea rbx, [rax + 0x3e8]
mov qword [rbp - 0x78], rbx
xor edx, edx
mov r8d, 0x3e8
mov rcx, rax
call sub.VCRUNTIME140.dll_memset
mov qword [rbp - 0x80], rbx
mov rbx, qword [rsp + 0x78]
mov r14, qword [rsi]
mov r15, qword [0x1401ea128]
cmp byte [0x1401ec478], 0
jne 0x140018e0f
call fcn.1400c9300
mov rax, qword [0x1401ec358]
mov qword [rsp + 0x20], 0
mov r9d, 0x3e8
mov r8, rbx
mov rdx, r14
mov rcx, r15
test rax, rax
je 0x140018e37
call rax
jmp 0x140018e3d
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
xor r15d, r15d
mov dword [rsp + 0x64], r15d
movsxd rax, dword [0x1401ea164]
test eax, eax
jne 0x14001922c
mov r8d, r15d
mov rdx, qword [rbp - 0x80]
mov r11, qword [rsp + 0x78]
sub rdx, r11
lea rbx, [rdx - 8]
test rbx, rbx
je 0x140019282
lea rcx, [r11 + 4]
mov r9d, 4
sub r9, r11
mov r10, r11
neg r10
movzx esi, byte [0x1401ea1e8]
nop word [rax + rax]
test sil, sil
je 0x14001a09e
lea rax, [r10 + rcx]
cmp rax, rdx
ja 0x140018ea8
cmp dword [rcx - 4], r15d
jne 0x140018eb9
lea rax, [r9 + rcx]
cmp rax, rdx
ja 0x140018eb9
cmp dword [rcx], 0x3ca3d70a
je 0x140018ecf
add r8d, 4
add rcx, 4
movsxd rax, r8d
cmp rax, rbx
jae 0x140019282
jmp 0x140018e90
mov r10d, 8
lea r9d, [r8 + 8]
movsxd rcx, r9d
nop dword [rax]
lea rax, [rcx + 4]
cmp rax, rdx
ja 0x140018ef7
cmp dword [r11 + rcx], 0x20000000
jae 0x140019061
add r10d, 4
add r9d, 4
movsxd rcx, r9d
lea rax, [rdx - 4]
cmp rcx, rax
jb 0x140018ee0
xorps xmm0, xmm0
movups xmmword [rdi], xmm0
mov qword [rdi + 0x10], r15
mov qword [rdi + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rdi], r15b
mov dword [rdi + 0x20], r15d
mov qword [rdi + 0x28], r15
mov word [rdi + 0x30], r15w
lea rcx, [rdi + 0x38]
mov eax, dword [str.t_C_L6]
mov dword [rsp + 0x68], eax
movzx eax, word [0x1401ba414]
mov word [rsp + 0x6c], ax
mov byte [rsp + 0x68], 0x45
xor byte [rsp + 0x69], 0x32
xor byte [rsp + 0x6a], 0x33
xor byte [rsp + 0x6b], 0x34
xor al, 0x35
mov byte [rsp + 0x6c], al
xor byte [rsp + 0x6d], 0x36
movups xmmword [rcx], xmm0
mov qword [rcx + 0x10], r15
mov qword [rcx + 0x18], r15
lea rax, [rsp + 0x68]
mov rbx, 0xffffffffffffffff
mov r8, rbx
inc r8
cmp byte [rax + r8], 0
jne 0x140018f80
lea rdx, [rsp + 0x68]
call fcn.140010900
nop
lea rcx, [rdi + 0x58]
mov eax, dword [str.t_C_L6]
mov dword [rsp + 0x68], eax
movzx eax, word [0x1401ba414]
mov word [rsp + 0x6c], ax
mov byte [rsp + 0x68], 0x45
xor byte [rsp + 0x69], 0x32
xor byte [rsp + 0x6a], 0x33
xor byte [rsp + 0x6b], 0x34
xor al, 0x35
mov byte [rsp + 0x6c], al
xor byte [rsp + 0x6d], 0x36
xorps xmm0, xmm0
movups xmmword [rcx], xmm0
mov qword [rcx + 0x10], r15
mov qword [rcx + 0x18], r15
lea rax, [rsp + 0x68]
mov r8, rbx
inc r8
cmp byte [rax + r8], 0
jne 0x140018fe4
lea rdx, [rsp + 0x68]
call fcn.140010900
nop
lea rcx, [rdi + 0x78]
mov eax, dword [str.t_C_L6]
mov dword [rsp + 0x68], eax
movzx eax, word [0x1401ba414]
mov word [rsp + 0x6c], ax
mov byte [rsp + 0x68], 0x45
xor byte [rsp + 0x69], 0x32
xor byte [rsp + 0x6a], 0x33
xor byte [rsp + 0x6b], 0x34
xor al, 0x35
mov byte [rsp + 0x6c], al
xor byte [rsp + 0x6d], 0x36
xorps xmm0, xmm0
movups xmmword [rcx], xmm0
mov qword [rcx + 0x10], r15
mov qword [rcx + 0x18], r15
lea rax, [rsp + 0x68]
inc rbx
cmp byte [rax + rbx], 0
jne 0x140019045
mov r8, rbx
lea rdx, [rsp + 0x68]
call fcn.140010900
nop
jmp 0x1400191e8
lea eax, [r10 + r8]
mov dword [0x1401ea164], eax
movsxd rcx, eax
lea rax, [rcx + 4]
cmp rax, rdx
ja 0x14001908a
mov eax, dword [r11 + rcx]
mov dword [rsp + 0x64], eax
cmp eax, 0x20000000
jae 0x1400193e1
mov dword [0x1401ea164], r15d
xorps xmm0, xmm0
movups xmmword [rdi], xmm0
mov qword [rdi + 0x10], r15
mov qword [rdi + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rdi], r15b
mov dword [rdi + 0x20], r15d
mov qword [rdi + 0x28], r15
mov word [rdi + 0x30], r15w
lea rcx, [rdi + 0x38]
mov eax, dword [str.t_C_L6]
mov dword [rsp + 0x68], eax
movzx eax, word [0x1401ba414]
mov word [rsp + 0x6c], ax
mov byte [rsp + 0x68], 0x45
xor byte [rsp + 0x69], 0x32
xor byte [rsp + 0x6a], 0x33
xor byte [rsp + 0x6b], 0x34
xor al, 0x35
mov byte [rsp + 0x6c], al
xor byte [rsp + 0x6d], 0x36
movups xmmword [rcx], xmm0
mov qword [rcx + 0x10], r15
mov qword [rcx + 0x18], r15
lea rax, [rsp + 0x68]
mov rbx, 0xffffffffffffffff
mov r8, rbx
inc r8
cmp byte [rax + r8], 0
jne 0x140019106
lea rdx, [rsp + 0x68]
call fcn.140010900
nop
lea rcx, [rdi + 0x58]
mov eax, dword [str.t_C_L6]
mov dword [rsp + 0x68], eax
movzx eax, word [0x1401ba414]
mov word [rsp + 0x6c], ax
mov byte [rsp + 0x68], 0x45
xor byte [rsp + 0x69], 0x32
xor byte [rsp + 0x6a], 0x33
xor byte [rsp + 0x6b], 0x34
xor al, 0x35
mov byte [rsp + 0x6c], al
xor byte [rsp + 0x6d], 0x36
xorps xmm0, xmm0
movups xmmword [rcx], xmm0
mov qword [rcx + 0x10], r15
mov qword [rcx + 0x18], r15
lea rax, [rsp + 0x68]
mov r8, rbx
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140019170
lea rdx, [rsp + 0x68]
call fcn.140010900
nop
lea rcx, [rdi + 0x78]
mov eax, dword [str.t_C_L6]
mov dword [rsp + 0x68], eax
movzx eax, word [0x1401ba414]
mov word [rsp + 0x6c], ax
mov byte [rsp + 0x68], 0x45
xor byte [rsp + 0x69], 0x32
xor byte [rsp + 0x6a], 0x33
xor byte [rsp + 0x6b], 0x34
xor al, 0x35
mov byte [rsp + 0x6c], al
xor byte [rsp + 0x6d], 0x36
xorps xmm0, xmm0
movups xmmword [rcx], xmm0
mov qword [rcx + 0x10], r15
mov qword [rcx + 0x18], r15
lea rax, [rsp + 0x68]
inc rbx
cmp byte [rax + rbx], 0
jne 0x1400191d1
mov r8, rbx
lea rdx, [rsp + 0x68]
call fcn.140010900
nop
mov rcx, qword [rsp + 0x78]
test rcx, rcx
je 0x14001a06c
mov rdx, qword [rbp - 0x78]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140019222
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140019f0f
call fcn.14015c094
jmp 0x14001a06c
mov rbx, rax
add rbx, qword [rsi]
mov rsi, qword [0x1401ea128]
cmp byte [0x1401ec478], r15b
jne 0x140019247
call fcn.1400c9300
mov rax, qword [0x1401ec358]
mov qword [rsp + 0x20], r15
mov r9d, 4
lea r8, [rsp + 0x64]
mov rdx, rbx
mov rcx, rsi
test rax, rax
je 0x14001926d
call rax
jmp 0x140019273
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov eax, dword [rsp + 0x64]
cmp eax, 0x20000000
jae 0x1400193e1
xorps xmm0, xmm0
movups xmmword [rdi], xmm0
mov qword [rdi + 0x10], r15
mov qword [rdi + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rdi], r15b
mov dword [rdi + 0x20], r15d
mov qword [rdi + 0x28], r15
mov word [rdi + 0x30], r15w
lea rcx, [rdi + 0x38]
mov eax, dword [str.t_C_L6]
mov dword [rsp + 0x68], eax
movzx eax, word [0x1401ba414]
mov word [rsp + 0x6c], ax
mov byte [rsp + 0x68], 0x45
xor byte [rsp + 0x69], 0x32
xor byte [rsp + 0x6a], 0x33
xor byte [rsp + 0x6b], 0x34
xor al, 0x35
mov byte [rsp + 0x6c], al
xor byte [rsp + 0x6d], 0x36
movups xmmword [rcx], xmm0
mov qword [rcx + 0x10], r15
mov qword [rcx + 0x18], r15
lea rax, [rsp + 0x68]
mov rbx, 0xffffffffffffffff
mov r8, rbx
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140019300
lea rdx, [rsp + 0x68]
call fcn.140010900
nop
lea rcx, [rdi + 0x58]
mov eax, dword [str.t_C_L6]
mov dword [rsp + 0x68], eax
movzx eax, word [0x1401ba414]
mov word [rsp + 0x6c], ax
mov byte [rsp + 0x68], 0x45
xor byte [rsp + 0x69], 0x32
xor byte [rsp + 0x6a], 0x33
xor byte [rsp + 0x6b], 0x34
xor al, 0x35
mov byte [rsp + 0x6c], al
xor byte [rsp + 0x6d], 0x36
xorps xmm0, xmm0
movups xmmword [rcx], xmm0
mov qword [rcx + 0x10], r15
mov qword [rcx + 0x18], r15
lea rax, [rsp + 0x68]
mov r8, rbx
inc r8
cmp byte [rax + r8], 0
jne 0x140019364
lea rdx, [rsp + 0x68]
call fcn.140010900
nop
lea rcx, [rdi + 0x78]
mov eax, dword [str.t_C_L6]
mov dword [rsp + 0x68], eax
movzx eax, word [0x1401ba414]
mov word [rsp + 0x6c], ax
mov byte [rsp + 0x68], 0x45
xor byte [rsp + 0x69], 0x32
xor byte [rsp + 0x6a], 0x33
xor byte [rsp + 0x6b], 0x34
xor al, 0x35
mov byte [rsp + 0x6c], al
xor byte [rsp + 0x6d], 0x36
xorps xmm0, xmm0
movups xmmword [rcx], xmm0
mov qword [rcx + 0x10], r15
mov qword [rcx + 0x18], r15
lea rax, [rsp + 0x68]
inc rbx
cmp byte [rax + rbx], 0
jne 0x1400193c5
mov r8, rbx
lea rdx, [rsp + 0x68]
call fcn.140010900
nop
jmp 0x1400191e8
movzx ebx, word [r12]
mov rdx, r15
cmp bx, 0x24
jb 0x140019408
cmp bx, 0x28
sete dl
inc rdx
cmp bx, 0x28
jne 0x140019404
mov ebx, r15d
jmp 0x140019408
sub bx, 0x24
movzx ecx, word [0x1401ea110]
imul rcx, rax
add rcx, qword [0x1401eca38]
lea rsi, [rcx + rdx*4]
mov r14, qword [0x1401ea128]
cmp byte [0x1401ec478], r15b
jne 0x140019433
call fcn.1400c9300
mov rax, qword [0x1401ec358]
mov qword [rsp + 0x20], r15
mov r9d, 4
lea r8, [rsp + 0x64]
lea rdx, [rsi + 0x14]
mov rcx, r14
test rax, rax
je 0x14001945a
call rax
jmp 0x140019460
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movzx esi, word [0x1401ea110]
mov eax, dword [rsp + 0x64]
imul rsi, rax
add rsi, qword [0x1401eca38]
mov r14, qword [0x1401ea128]
cmp byte [0x1401ec478], r15b
jne 0x14001948b
call fcn.1400c9300
mov rax, qword [0x1401ec358]
mov qword [rsp + 0x20], r15
mov r9d, 4
lea r8, [rsp + 0x64]
lea rdx, [rsi + 0x10]
mov rcx, r14
test rax, rax
je 0x1400194b2
call rax
jmp 0x1400194b8
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movzx esi, word [0x1401ea110]
mov eax, dword [rsp + 0x64]
imul rsi, rax
add rsi, qword [0x1401eca38]
mov r14, qword [0x1401ea128]
cmp byte [0x1401ec478], r15b
jne 0x1400194e3
call fcn.1400c9300
mov rax, qword [0x1401ec358]
mov qword [rsp + 0x20], r15
mov r9d, 4
lea r8, [rsp + 0x64]
lea rdx, [rsi + 0x10]
mov rcx, r14
test rax, rax
je 0x14001950a
call rax
jmp 0x140019510
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov r8d, dword [rsp + 0x64]
cmp r8d, 0x20000000
jae 0x140019681
xorps xmm0, xmm0
movups xmmword [rdi], xmm0
mov qword [rdi + 0x10], r15
mov qword [rdi + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rdi], r15b
mov dword [rdi + 0x20], r15d
mov qword [rdi + 0x28], r15
mov word [rdi + 0x30], r15w
lea rcx, [rdi + 0x38]
mov eax, dword [str.t_C_L6]
mov dword [rsp + 0x68], eax
movzx eax, word [0x1401ba414]
mov word [rsp + 0x6c], ax
mov byte [rsp + 0x68], 0x45
xor byte [rsp + 0x69], 0x32
xor byte [rsp + 0x6a], 0x33
xor byte [rsp + 0x6b], 0x34
xor al, 0x35
mov byte [rsp + 0x6c], al
xor byte [rsp + 0x6d], 0x36
movups xmmword [rcx], xmm0
mov qword [rcx + 0x10], r15
mov qword [rcx + 0x18], r15
lea rax, [rsp + 0x68]
mov rbx, 0xffffffffffffffff
mov r8, rbx
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x1400195a0
lea rdx, [rsp + 0x68]
call fcn.140010900
nop
lea rcx, [rdi + 0x58]
mov eax, dword [str.t_C_L6]
mov dword [rsp + 0x68], eax
movzx eax, word [0x1401ba414]
mov word [rsp + 0x6c], ax
mov byte [rsp + 0x68], 0x45
xor byte [rsp + 0x69], 0x32
xor byte [rsp + 0x6a], 0x33
xor byte [rsp + 0x6b], 0x34
xor al, 0x35
mov byte [rsp + 0x6c], al
xor byte [rsp + 0x6d], 0x36
xorps xmm0, xmm0
movups xmmword [rcx], xmm0
mov qword [rcx + 0x10], r15
mov qword [rcx + 0x18], r15
lea rax, [rsp + 0x68]
mov r8, rbx
inc r8
cmp byte [rax + r8], 0
jne 0x140019604
lea rdx, [rsp + 0x68]
call fcn.140010900
nop
lea rcx, [rdi + 0x78]
mov eax, dword [str.t_C_L6]
mov dword [rsp + 0x68], eax
movzx eax, word [0x1401ba414]
mov word [rsp + 0x6c], ax
mov byte [rsp + 0x68], 0x45
xor byte [rsp + 0x69], 0x32
xor byte [rsp + 0x6a], 0x33
xor byte [rsp + 0x6b], 0x34
xor al, 0x35
mov byte [rsp + 0x6c], al
xor byte [rsp + 0x6d], 0x36
xorps xmm0, xmm0
movups xmmword [rcx], xmm0
mov qword [rcx + 0x10], r15
mov qword [rcx + 0x18], r15
lea rax, [rsp + 0x68]
inc rbx
cmp byte [rax + rbx], 0
jne 0x140019665
mov r8, rbx
lea rdx, [rsp + 0x68]
call fcn.140010900
nop
jmp 0x1400191e8
movsx eax, bx
shl eax, 2
movsxd rcx, eax
movzx ebx, word [0x1401ea110]
imul rbx, r8
add rcx, qword [0x1401eca38]
add rbx, rcx
mov rsi, qword [0x1401ea128]
cmp byte [0x1401ec478], r15b
jne 0x1400196b4
call fcn.1400c9300
mov rax, qword [0x1401ec358]
mov qword [rsp + 0x20], r15
mov r9d, 4
lea r8, [rsp + 0x64]
lea rdx, [rbx + 0x10]
mov rcx, rsi
test rax, rax
je 0x1400196db
call rax
jmp 0x1400196e1
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
lea rcx, [rbp - 0x70]
call fcn.140018bc0
nop
movzx edx, word [0x1401ea110]
mov ecx, edx
mov r8d, dword [rsp + 0x64]
imul rcx, r8
mov r9, qword [0x1401eca38]
add rcx, r9
mov qword [rbp - 0x48], rcx
mov dword [rsp + 0x70], r15d
xor r10d, r10d
mov ebx, r10d
nop word [rax + rax]
movzx edx, dx
mov eax, r8d
imul rax, rdx
movsxd rsi, ebx
add rax, r9
add rsi, rax
mov r14, qword [0x1401ea128]
cmp byte [0x1401ec478], 0
jne 0x14001974b
call fcn.1400c9300
xor r10d, r10d
mov rax, qword [0x1401ec358]
mov qword [rsp + 0x20], r10
mov r9d, 4
lea r8, [rsp + 0x70]
lea rdx, [rsi + 0x14]
mov rcx, r14
test rax, rax
je 0x140019772
call rax
jmp 0x140019778
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
cmp dword [rsp + 0x70], 0x20000000
ja 0x1400197ac
inc r15d
add ebx, 4
cmp ebx, 0x18
jge 0x140019859
mov r8d, dword [rsp + 0x64]
movzx edx, word [0x1401ea110]
mov r9, qword [0x1401eca38]
xor r10d, r10d
jmp 0x140019720
cmp byte [r13], 0
je 0x140019859
xor r14d, r14d
mov dword [rsp + 0x68], r14d
lea eax, [r15*4 + 4]
movsxd rcx, eax
movzx ebx, word [0x1401ea110]
mov eax, dword [rsp + 0x64]
imul rbx, rax
add rcx, qword [0x1401eca38]
add rbx, rcx
mov rsi, qword [0x1401ea128]
cmp byte [0x1401ec478], r14b
jne 0x1400197f8
call fcn.1400c9300
mov rax, qword [0x1401ec358]
mov qword [rsp + 0x20], r14
mov r9d, 4
lea r8, [rsp + 0x68]
lea rdx, [rbx + 0x14]
mov rcx, rsi
test rax, rax
je 0x14001981f
call rax
jmp 0x140019825
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov eax, dword [rsp + 0x68]
cmp eax, 0x20000000
jbe 0x14001985c
mov ecx, eax
movzx eax, word [0x1401ea110]
imul rcx, rax
add rcx, qword [0x1401eca38]
mov qword [rsp + 0x30], rcx
lea rdx, [rbp + 8]
lea rcx, [rsp + 0x30]
call fcn.140015d30
jmp 0x14001985c
xor r14d, r14d
movzx edx, word [r12]
mov ecx, edx
sub ecx, 0x24
je 0x140019d26
sub ecx, 1
je 0x140019cb3
sub ecx, 1
je 0x140019c23
sub ecx, 1
je 0x140019bb0
cmp ecx, 1
je 0x14001991e
inc edx
lea rcx, [rsp + 0x40]
call fcn.14000ea50
mov rbx, rax
lea rax, [rbp - 0x70]
cmp rax, rbx
je 0x140019b3b
mov rdx, qword [rbp - 0x58]
cmp rdx, 0x10
jb 0x1400198ea
inc rdx
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400198e5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400198e5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14015c094
movdqa xmm0, xmmword [0x1401c4af0]
movdqu xmmword [rbp - 0x60], xmm0
mov byte [rbp - 0x70], 0
movups xmm0, xmmword [rbx]
movups xmmword [rbp - 0x70], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rbp - 0x60], xmm1
mov qword [rbx + 0x10], r14
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], 0
jmp 0x140019b3b
movsd xmm0, qword [str.bWP__R]
movsd qword [rsp + 0x30], xmm0
mov eax, dword [0x1401ba3d0]
mov dword [rsp + 0x38], eax
cmp byte [reloc.WLDAP32.dll_Ordinal_60], 0
je 0x140019aa3
mov r8d, r14d
cmp dword [reloc.WS2_32.dll_accept], 2
jl 0x140019a65
movdqa xmm4, xmmword [0x1401c4ea0]
mov eax, 5
movd xmm6, eax
mov eax, Ordinal_35
movd xmm5, eax
movdqa xmm2, xmmword [0x1401c4b30]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm5
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1401c4c20]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1401c4d00]
packuswb xmm2, xmm2
paddb xmm2, xmmword [0x1401c4d70]
movd xmm0, dword [str.bWP__R]
xorps xmm2, xmm0
movd dword [rsp + 0x30], xmm2
movdqa xmm3, xmmword [0x1401c4b40]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm5
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1401c4c20]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1401c4d00]
packuswb xmm2, xmm2
paddb xmm2, xmmword [0x1401c4d70]
movd xmm0, dword [rsp + 0x34]
xorps xmm2, xmm0
movd dword [rsp + 0x34], xmm2
mov r8d, 8
movsxd rax, r8d
lea r9, [rsp + 0x30]
add r9, rax
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x31
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0xc
jl 0x140019a70
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x50], xmm1
lea rax, [rsp + 0x30]
mov rbx, 0xffffffffffffffff
inc rbx
cmp byte [rax + rbx], 0
jne 0x140019ac0
lea rdx, [rsp + 0x30]
mov r8, rbx
lea rcx, [rsp + 0x40]
call fcn.140010900
mov rdx, qword [rbp - 0x58]
cmp rdx, 0x10
jb 0x140019b16
inc rdx
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140019b11
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140019dd9
call fcn.14015c094
movups xmm0, xmmword [rsp + 0x40]
movups xmmword [rbp - 0x70], xmm0
movups xmm1, xmmword [rsp + 0x50]
movdqa xmm0, xmmword [0x1401c4af0]
movups xmmword [rbp - 0x60], xmm1
movdqu xmmword [rsp + 0x50], xmm0
mov byte [rsp + 0x40], 0
lea rcx, [rsp + 0x40]
call fcn.140010730
movzx eax, word [r12]
mov dword [rbp - 0x50], eax
cmp dword [rsp + 0x70], 0x20000000
jbe 0x140019e16
movzx ebx, word [0x1401ea110]
imul ebx, dword [rsp + 0x64]
add rbx, qword [0x1401eca38]
mov rsi, qword [0x1401ea128]
cmp byte [0x1401ec478], 0
jne 0x140019b83
call fcn.1400c9300
mov rax, qword [0x1401ec358]
mov qword [rsp + 0x20], r14
mov r9d, 4
lea r8, [rbp - 0x40]
lea rdx, [rbx + 0xc]
mov rcx, rsi
test rax, rax
je 0x140019de0
call rax
jmp 0x140019de6
mov eax, dword [0x1401ba438]
mov dword [rsp + 0x68], eax
movzx ecx, word [0x1401ba43c]
mov word [rsp + 0x6c], cx
movzx eax, byte [0x1401ba43e]
mov byte [rsp + 0x68], 0x48
xor byte [rsp + 0x69], 0x32
xor byte [rsp + 0x6a], 0x33
xor byte [rsp + 0x6b], 0x34
xor cl, 0x35
mov byte [rsp + 0x6c], cl
xor byte [rsp + 0x6d], 0x36
xor al, 0x37
mov byte [rsp + 0x6e], al
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x50], xmm1
lea rax, [rsp + 0x68]
mov rbx, 0xffffffffffffffff
inc rbx
cmp byte [rax + rbx], 0
jne 0x140019c10
lea rdx, [rsp + 0x68]
jmp 0x140019ace
movsd xmm0, qword [str.rZVGAF_YM__]
movsd qword [rsp + 0x30], xmm0
movzx ecx, word [0x1401ba3f0]
mov word [rsp + 0x38], cx
movzx eax, byte [0x1401ba3f2]
mov byte [rsp + 0x30], 0x43
xor byte [rsp + 0x31], 0x32
xor byte [rsp + 0x32], 0x33
xor byte [rsp + 0x33], 0x34
xor byte [rsp + 0x34], 0x35
xor byte [rsp + 0x35], 0x36
xor byte [rsp + 0x36], 0x37
xor byte [rsp + 0x37], 0x38
xor cl, 0x39
mov byte [rsp + 0x38], cl
xor byte [rsp + 0x39], 0x3a
xor al, 0x3b
mov byte [rsp + 0x3a], al
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x50], xmm1
lea rax, [rsp + 0x30]
mov rbx, 0xffffffffffffffff
nop dword [rax + rax]
inc rbx
cmp byte [rax + rbx], 0
jne 0x140019ca0
lea rdx, [rsp + 0x30]
jmp 0x140019ace
movsd xmm0, qword [str.WTSQYK9]
movsd qword [rsp + 0x30], xmm0
movzx eax, byte [reloc.WS2_32.dll_gethostname]
mov byte [rsp + 0x30], Ordinal_79
xor byte [rsp + 0x31], 0x32
xor byte [rsp + 0x32], 0x33
xor byte [rsp + 0x33], 0x34
xor byte [rsp + 0x34], 0x35
xor byte [rsp + 0x35], 0x36
xor byte [rsp + 0x36], 0x37
xor byte [rsp + 0x37], 0x38
xor al, 0x39
mov byte [rsp + 0x38], al
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x50], xmm1
lea rax, [rsp + 0x30]
mov rbx, 0xffffffffffffffff
inc rbx
cmp byte [rax + rbx], 0
jne 0x140019d13
lea rdx, [rsp + 0x30]
jmp 0x140019ace
mov eax, dword [0x1401ba408]
mov dword [rsp + 0x68], eax
movzx eax, word [0x1401ba40c]
mov word [rsp + 0x6c], ax
mov byte [rsp + 0x68], 0x42
xor byte [rsp + 0x69], 0x32
xor byte [rsp + 0x6a], 0x33
xor byte [rsp + 0x6b], 0x34
xor al, 0x35
mov byte [rsp + 0x6c], al
xor byte [rsp + 0x6d], 0x36
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x50], xmm1
lea rax, [rsp + 0x68]
mov rbx, 0xffffffffffffffff
nop dword [rax + rax]
inc rbx
cmp byte [rax + rbx], 0
jne 0x140019d80
mov r8, rbx
lea rdx, [rsp + 0x68]
lea rcx, [rsp + 0x40]
call fcn.140010900
mov rdx, qword [rbp - 0x58]
cmp rdx, 0x10
jb 0x140019b16
inc rdx
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140019b11
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140019b11
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov ecx, dword [rsp + 0x70]
movzx eax, word [0x1401ea110]
imul rcx, rax
add rcx, qword [0x1401eca38]
mov qword [rsp + 0x30], rcx
lea r8, [rbp - 0x38]
lea rdx, [rbp - 0x18]
lea rcx, [rsp + 0x30]
call fcn.140015190
mov eax, dword [rbp - 0x50]
movups xmm0, xmmword [rbp - 0x70]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rbp - 0x60]
movups xmmword [rdi + 0x10], xmm1
movdqa xmm0, xmmword [0x1401c4af0]
movdqu xmmword [rbp - 0x60], xmm0
mov byte [rbp - 0x70], 0
mov dword [rdi + 0x20], eax
mov rax, qword [rbp - 0x48]
mov qword [rdi + 0x28], rax
movzx eax, word [rbp - 0x40]
mov word [rdi + 0x30], ax
movups xmm0, xmmword [rbp - 0x38]
movups xmmword [rdi + 0x38], xmm0
movups xmm1, xmmword [rbp - 0x28]
movups xmmword [rdi + 0x48], xmm1
mov qword [rbp - 0x28], r14
mov qword [rbp - 0x20], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x38], 0
movups xmm0, xmmword [rbp - 0x18]
movups xmmword [rdi + 0x58], xmm0
movups xmm1, xmmword [rbp - 8]
movups xmmword [rdi + 0x68], xmm1
mov qword [rbp - 8], r14
mov qword [rbp], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x18], 0
movups xmm0, xmmword [rbp + 8]
movups xmmword [rdi + 0x78], xmm0
movups xmm1, xmmword [rbp + 0x18]
movups xmmword [rdi + 0x88], xmm1
mov qword [rbp + 0x18], r14
mov qword [rbp + 0x20], reloc.WS2_32.dll_ntohs
mov byte [rbp + 8], 0
lea rcx, [rbp + 8]
call fcn.140010730
lea rcx, [rbp - 0x18]
call fcn.140010730
lea rcx, [rbp - 0x38]
call fcn.140010730
lea rcx, [rbp - 0x70]
call fcn.140010730
nop
mov rcx, qword [rsp + 0x78]
test rcx, rcx
je 0x14001a06c
mov rdx, qword [rbp - 0x78]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140019222
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140019222
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
movups xmmword [rcx], xmm0
mov qword [rcx + 0x10], r14
mov qword [rcx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rcx], r14b
mov dword [rcx + 0x20], r14d
mov qword [rcx + 0x28], r14
mov word [rcx + 0x30], r14w
add rcx, 0x38
mov eax, dword [str.t_C_L6]
mov dword [rsp + 0x68], eax
movzx eax, word [0x1401ba414]
mov word [rsp + 0x6c], ax
mov byte [rsp + 0x68], 0x45
xor byte [rsp + 0x69], 0x32
xor byte [rsp + 0x6a], 0x33
xor byte [rsp + 0x6b], 0x34
xor al, 0x35
mov byte [rsp + 0x6c], al
xor byte [rsp + 0x6d], 0x36
movups xmmword [rcx], xmm0
mov qword [rcx + 0x10], r14
mov qword [rcx + 0x18], r14
lea rax, [rsp + 0x68]
mov rbx, 0xffffffffffffffff
mov r8, rbx
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140019f90
lea rdx, [rsp + 0x68]
call fcn.140010900
nop
lea rcx, [rdi + 0x58]
mov eax, dword [str.t_C_L6]
mov dword [rsp + 0x68], eax
movzx eax, word [0x1401ba414]
mov word [rsp + 0x6c], ax
mov byte [rsp + 0x68], 0x45
xor byte [rsp + 0x69], 0x32
xor byte [rsp + 0x6a], 0x33
xor byte [rsp + 0x6b], 0x34
xor al, 0x35
mov byte [rsp + 0x6c], al
xor byte [rsp + 0x6d], 0x36
xorps xmm0, xmm0
movups xmmword [rcx], xmm0
mov qword [rcx + 0x10], r14
mov qword [rcx + 0x18], r14
lea rax, [rsp + 0x68]
mov r8, rbx
inc r8
cmp byte [rax + r8], 0
jne 0x140019ff4
lea rdx, [rsp + 0x68]
call fcn.140010900
nop
lea rcx, [rdi + 0x78]
mov eax, dword [str.t_C_L6]
mov dword [rsp + 0x68], eax
movzx eax, word [0x1401ba414]
mov word [rsp + 0x6c], ax
mov byte [rsp + 0x68], 0x45
xor byte [rsp + 0x69], 0x32
xor byte [rsp + 0x6a], 0x33
xor byte [rsp + 0x6b], 0x34
xor al, 0x35
mov byte [rsp + 0x6c], al
xor byte [rsp + 0x6d], 0x36
xorps xmm0, xmm0
movups xmmword [rcx], xmm0
mov qword [rcx + 0x10], r14
mov qword [rcx + 0x18], r14
lea rax, [rsp + 0x68]
inc rbx
cmp byte [rax + rbx], 0
jne 0x14001a055
mov r8, rbx
lea rdx, [rsp + 0x68]
call fcn.140010900
nop
mov rax, rdi
mov rcx, qword [rbp + 0x30]
xor rcx, rsp
call fcn.14015bde0
mov rbx, qword [rsp + 0x1a8]
movaps xmm6, xmmword [rsp + 0x140]
add rsp, 0x150
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
movss xmm0, dword [0x1401c4720]
call fcn.1400cdb40
int3