Function at 0x14006e580
Capabilities:
Encode data using xor
Get hostname
Get session user name

Disassembly:
mov rax, rsp
push rbp
push rbx
push rsi
push rdi
push r12
push r14
push r15
lea rbp, [rax - 0x78]
sub rsp, 0x140
movaps xmmword [rax - 0x48], xmm6
movaps xmmword [rax - 0x58], xmm7
lea rdx, [0x1403458e5]
lea r12, [0x1403458d0]
mov rcx, r12
call qword [sym.imp.ADVAPI32.dll_GetUserNameA]
lea rdx, [0x1403458f9]
lea r15, [0x1403458e9]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_GetComputerNameA]
movdqa xmm0, xmmword [0x1403118f0]
movdqu xmmword [rbp - 0x40], xmm0
mov word [rbp - 0x30], 0x100
xor r14d, r14d
mov ecx, r14d
nop word [rax + rax]
lea eax, [rcx + 0x63]
xor byte [rbp + rcx - 0x40], al
inc rcx
cmp rcx, 0x10
jb 0x14006e5f0
mov byte [rbp - 0x2f], r14b
mov word [rbp + 0x90], 0x5d
mov byte [rbp + 0x92], r14b
mov word [rbp + 0x88], 0x5c
mov byte [rbp + 0x8a], r14b
mov word [rbp + 0x80], 0x5b
mov byte [rbp + 0x82], r14b
mov rdx, qword [0x14034590d]
lea rax, [rbp + 0x80]
mov rbx, 0xffffffffffffffff
mov rcx, rbx
nop dword [rax]
inc rcx
cmp byte [rax + rcx], r14b
jne 0x14006e650
movabs rsi, 0x7fffffffffffffff
mov rax, rsi
sub rax, rdx
cmp rax, rcx
jb 0x14006f4fb
lea rdi, [0x1403458fd]
mov r9, rdi
cmp qword [0x140345915], 0x10
cmovae r9, qword [0x1403458fd]
mov qword [rsp + 0x30], rcx
lea rax, [rbp + 0x80]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rdx
lea rcx, [rbp - 0x60]
call fcn.14007a120
nop
mov r8, rbx
nop
inc r8
cmp byte [r15 + r8], 0
jne 0x14006e6b0
mov rdx, r15
lea rcx, [rbp - 0x60]
call fcn.140060590
mov qword [rsp + 0x60], r14
mov qword [rsp + 0x70], r14
mov qword [rsp + 0x78], r14
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x60], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x70], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea rax, [rbp + 0x88]
mov r8, rbx
nop
inc r8
cmp byte [rax + r8], 0
jne 0x14006e700
lea rdx, [rbp + 0x88]
lea rcx, [rsp + 0x60]
call fcn.140060590
mov qword [rsp + 0x40], r14
mov qword [rsp + 0x50], r14
mov qword [rsp + 0x58], r14
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x40], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x50], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov r8, rbx
nop dword [rax]
inc r8
cmp byte [r12 + r8], 0
jne 0x14006e750
mov rdx, r12
lea rcx, [rsp + 0x40]
call fcn.140060590
mov qword [rbp - 0x80], r14
mov qword [rbp - 0x70], r14
mov qword [rbp - 0x68], r14
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x80], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x70], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea rax, [rbp + 0x90]
mov r8, rbx
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x14006e7a0
lea rdx, [rbp + 0x90]
lea rcx, [rbp - 0x80]
call fcn.140060590
mov qword [rbp - 0x28], r14
mov qword [rbp - 0x18], r14
mov qword [rbp - 0x10], r14
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x28], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x18], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea rax, [rbp - 0x40]
mov r8, rbx
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x14006e7f0
lea rdx, [rbp - 0x40]
lea rcx, [rbp - 0x28]
call fcn.140060590
movups xmm6, xmmword [rax]
movups xmm7, xmmword [rax + 0x10]
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov rdx, qword [0x140345935]
cmp rdx, 0x10
jb 0x14006e85e
mov rcx, qword [0x14034591d]
inc rdx
cmp rdx, 0x1000
jb 0x14006e859
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14006f507
mov rcx, r8
call fcn.140223f10
movups xmmword [0x14034591d], xmm6
movups xmmword [0x14034592d], xmm7
mov rdx, qword [rbp - 0x10]
cmp rdx, 0x10
jb 0x14006e8a7
inc rdx
mov rcx, qword [rbp - 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006e8a2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14006f501
call fcn.140223f10
mov qword [rbp - 0x18], r14
mov qword [rbp - 0x10], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x28], 0
mov rdx, qword [rbp - 0x68]
cmp rdx, 0x10
jb 0x14006e8f2
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006e8ed
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14006f50d
call fcn.140223f10
mov qword [rbp - 0x70], r14
mov qword [rbp - 0x68], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x80], 0
mov rdx, qword [rsp + 0x58]
cmp rdx, 0x10
jb 0x14006e93f
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006e93a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14006f513
call fcn.140223f10
mov qword [rsp + 0x50], r14
mov qword [rsp + 0x58], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x40], 0
mov rdx, qword [rsp + 0x78]
cmp rdx, 0x10
jb 0x14006e98f
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006e98a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14006f519
call fcn.140223f10
mov qword [rsp + 0x70], r14
mov qword [rsp + 0x78], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x60], 0
mov rdx, qword [rbp - 0x48]
cmp rdx, 0x10
jb 0x14006e9dd
inc rdx
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006e9d8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14006f51f
call fcn.140223f10
mov word [rbp + 0x90], 0x5d
mov byte [rbp + 0x92], 0
mov word [rbp + 0x88], 0x5c
mov byte [rbp + 0x8a], 0
mov word [rbp + 0x80], 0x5b
mov byte [rbp + 0x82], 0
mov rdx, qword [0x14034590d]
lea rax, [rbp + 0x80]
mov rcx, rbx
nop
inc rcx
cmp byte [rax + rcx], 0
jne 0x14006ea20
mov rax, rsi
sub rax, rdx
cmp rax, rcx
jb 0x14006f525
cmp qword [0x140345915], 0x10
cmovae rdi, qword [0x1403458fd]
mov qword [rsp + 0x30], rcx
lea rax, [rbp + 0x80]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rdx
mov r9, rdi
lea rcx, [rbp - 0x60]
call fcn.14007a120
nop
mov r8, rbx
nop
inc r8
cmp byte [r15 + r8], 0
jne 0x14006ea70
mov rdx, r15
lea rcx, [rbp - 0x60]
call fcn.140060590
mov qword [rbp - 0x80], r14
mov qword [rbp - 0x70], r14
mov qword [rbp - 0x68], r14
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x80], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x70], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea rax, [rbp + 0x88]
mov r8, rbx
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x14006eac0
lea rdx, [rbp + 0x88]
lea rcx, [rbp - 0x80]
call fcn.140060590
mov qword [rsp + 0x40], r14
mov qword [rsp + 0x50], r14
mov qword [rsp + 0x58], r14
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x40], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x50], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov r8, rbx
nop dword [rax]
inc r8
cmp byte [r12 + r8], 0
jne 0x14006eb10
mov rdx, r12
lea rcx, [rsp + 0x40]
call fcn.140060590
mov qword [rsp + 0x60], r14
mov qword [rsp + 0x70], r14
mov qword [rsp + 0x78], r14
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x60], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x70], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea rax, [rbp + 0x90]
mov r8, rbx
inc r8
cmp byte [rax + r8], 0
jne 0x14006eb60
lea rdx, [rbp + 0x90]
lea rcx, [rsp + 0x60]
call fcn.140060590
movups xmm6, xmmword [rax]
movups xmm7, xmmword [rax + 0x10]
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov rdx, qword [0x140345955]
cmp rdx, 0x10
jb 0x14006ebd2
mov rcx, qword [0x14034593d]
inc rdx
cmp rdx, 0x1000
jb 0x14006ebcd
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14006f531
mov rcx, r8
call fcn.140223f10
movups xmmword [0x14034593d], xmm6
movups xmmword [0x14034594d], xmm7
mov rdx, qword [rsp + 0x78]
cmp rdx, 0x10
jb 0x14006ec1d
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006ec18
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14006f52b
call fcn.140223f10
mov qword [rsp + 0x70], r14
mov qword [rsp + 0x78], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x60], 0
mov rdx, qword [rsp + 0x58]
cmp rdx, 0x10
jb 0x14006ec6d
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006ec68
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14006f537
call fcn.140223f10
mov qword [rsp + 0x50], r14
mov qword [rsp + 0x58], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x40], 0
mov rdx, qword [rbp - 0x68]
cmp rdx, 0x10
jb 0x14006ecbb
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006ecb6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14006f53d
call fcn.140223f10
mov qword [rbp - 0x70], r14
mov qword [rbp - 0x68], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x80], 0
mov rdx, qword [rbp - 0x48]
cmp rdx, 0x10
jb 0x14006ed06
inc rdx
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006ed01
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14006f543
call fcn.140223f10
movdqa xmm0, xmmword [0x1403118f0]
movdqu xmmword [rbp - 0x40], xmm0
mov word [rbp - 0x30], 0x100
mov rcx, r14
nop dword [rax]
lea eax, [rcx + 0x63]
xor byte [rbp + rcx - 0x40], al
inc rcx
cmp rcx, 0x10
jb 0x14006ed20
mov byte [rbp - 0x2f], 0
mov word [rbp + 0x98], Ordinal_46
mov byte [rbp + 0x9a], 0
mov word [rbp + 0x90], 0x5d
mov byte [rbp + 0x92], 0
mov word [rbp + 0x88], 0x5c
mov byte [rbp + 0x8a], 0
mov word [rbp + 0x80], 0x5b
mov byte [rbp + 0x82], 0
mov rdx, qword [0x14034596d]
lea rax, [rbp + 0x80]
mov rcx, rbx
inc rcx
cmp byte [rax + rcx], 0
jne 0x14006ed85
mov rax, rsi
sub rax, rdx
cmp rax, rcx
jb 0x14006f549
lea rdi, [0x14034595d]
mov r9, rdi
cmp qword [0x140345975], 0x10
cmovae r9, qword [0x14034595d]
mov qword [rsp + 0x30], rcx
lea rax, [rbp + 0x80]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rdx
lea rcx, [rbp - 8]
call fcn.14007a120
nop
mov r8, rbx
nop word [rax + rax]
inc r8
cmp byte [r15 + r8], 0
jne 0x14006ede0
mov rdx, r15
lea rcx, [rbp - 8]
call fcn.140060590
mov qword [rbp - 0x60], r14
mov qword [rbp - 0x50], r14
mov qword [rbp - 0x48], r14
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x60], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x50], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea rax, [rbp + 0x88]
mov r8, rbx
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x14006ee30
lea rdx, [rbp + 0x88]
lea rcx, [rbp - 0x60]
call fcn.140060590
mov qword [rbp - 0x28], r14
mov qword [rbp - 0x18], r14
mov qword [rbp - 0x10], r14
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x28], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x18], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov r8, rbx
nop word [rax + rax]
inc r8
cmp byte [r12 + r8], 0
jne 0x14006ee80
mov rdx, r12
lea rcx, [rbp - 0x28]
call fcn.140060590
mov qword [rbp - 0x80], r14
mov qword [rbp - 0x70], r14
mov qword [rbp - 0x68], r14
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x80], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x70], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea rax, [rbp + 0x90]
mov r8, rbx
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x14006eed0
lea rdx, [rbp + 0x90]
lea rcx, [rbp - 0x80]
call fcn.140060590
mov qword [rsp + 0x40], r14
mov qword [rsp + 0x50], r14
mov qword [rsp + 0x58], r14
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x40], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x50], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea rax, [rbp + 0x98]
mov r8, rbx
inc r8
cmp byte [rax + r8], 0
jne 0x14006ef23
lea rdx, [rbp + 0x98]
lea rcx, [rsp + 0x40]
call fcn.140060590
mov qword [rsp + 0x60], r14
mov qword [rsp + 0x70], r14
mov qword [rsp + 0x78], r14
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x60], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x70], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea rax, [rbp - 0x40]
mov r8, rbx
inc r8
cmp byte [rax + r8], 0
jne 0x14006ef74
lea rdx, [rbp - 0x40]
lea rcx, [rsp + 0x60]
call fcn.140060590
movups xmm6, xmmword [rax]
movups xmm7, xmmword [rax + 0x10]
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov rdx, qword [0x140345995]
cmp rdx, 0x10
jb 0x14006efe3
mov rcx, qword [0x14034597d]
inc rdx
cmp rdx, 0x1000
jb 0x14006efde
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14006f555
mov rcx, r8
call fcn.140223f10
movups xmmword [0x14034597d], xmm6
movups xmmword [0x14034598d], xmm7
mov rdx, qword [rsp + 0x78]
cmp rdx, 0x10
jb 0x14006f02e
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006f029
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14006f54f
call fcn.140223f10
mov qword [rsp + 0x70], r14
mov qword [rsp + 0x78], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x60], 0
mov rdx, qword [rsp + 0x58]
cmp rdx, 0x10
jb 0x14006f07e
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006f079
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14006f55b
call fcn.140223f10
mov qword [rsp + 0x50], r14
mov qword [rsp + 0x58], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x40], 0
mov rdx, qword [rbp - 0x68]
cmp rdx, 0x10
jb 0x14006f0cc
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006f0c7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14006f561
call fcn.140223f10
mov qword [rbp - 0x70], r14
mov qword [rbp - 0x68], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x80], 0
mov rdx, qword [rbp - 0x10]
cmp rdx, 0x10
jb 0x14006f117
inc rdx
mov rcx, qword [rbp - 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006f112
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14006f567
call fcn.140223f10
mov qword [rbp - 0x18], r14
mov qword [rbp - 0x10], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x28], 0
mov rdx, qword [rbp - 0x48]
cmp rdx, 0x10
jb 0x14006f162
inc rdx
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006f15d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14006f56d
call fcn.140223f10
mov qword [rbp - 0x50], r14
mov qword [rbp - 0x48], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x60], 0
mov rdx, qword [rbp + 0x10]
cmp rdx, 0x10
jb 0x14006f1ad
inc rdx
mov rcx, qword [rbp - 8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006f1a8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14006f573
call fcn.140223f10
mov word [rbp + 0x90], 0x5d
mov byte [rbp + 0x92], 0
mov word [rbp + 0x88], 0x5c
mov byte [rbp + 0x8a], 0
mov word [rbp + 0x80], 0x5b
mov byte [rbp + 0x82], 0
mov rcx, qword [0x14034596d]
lea rdx, [rbp + 0x80]
mov rax, rbx
nop
inc rax
cmp byte [rdx + rax], 0
jne 0x14006f1f0
sub rsi, rcx
cmp rsi, rax
jb 0x14006f579
cmp qword [0x140345975], 0x10
cmovae rdi, qword [0x14034595d]
mov qword [rsp + 0x30], rax
lea rax, [rbp + 0x80]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
mov r9, rdi
lea rcx, [rbp - 8]
call fcn.14007a120
nop
mov r8, rbx
nop dword [rax + rax]
inc r8
cmp byte [r15 + r8], 0
jne 0x14006f240
mov rdx, r15
lea rcx, [rbp - 8]
call fcn.140060590
mov qword [rsp + 0x40], r14
mov qword [rsp + 0x50], r14
mov qword [rsp + 0x58], r14
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x40], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x50], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea rax, [rbp + 0x88]
mov r8, rbx
nop
inc r8
cmp byte [rax + r8], 0
jne 0x14006f290
lea rdx, [rbp + 0x88]
lea rcx, [rsp + 0x40]
call fcn.140060590
mov qword [rsp + 0x60], r14
mov qword [rsp + 0x70], r14
mov qword [rsp + 0x78], r14
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x60], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x70], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov r8, rbx
nop dword [rax]
inc r8
cmp byte [r12 + r8], 0
jne 0x14006f2e0
mov rdx, r12
lea rcx, [rsp + 0x60]
call fcn.140060590
mov qword [rbp - 0x60], r14
mov qword [rbp - 0x50], r14
mov qword [rbp - 0x48], r14
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x60], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x50], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea rax, [rbp + 0x90]
nop dword [rax + rax]
inc rbx
cmp byte [rax + rbx], 0
jne 0x14006f330
mov r8, rbx
lea rdx, [rbp + 0x90]
lea rcx, [rbp - 0x60]
call fcn.140060590
movups xmm6, xmmword [rax]
movups xmm7, xmmword [rax + 0x10]
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov rdx, qword [0x1403459b5]
cmp rdx, 0x10
jb 0x14006f3a3
mov rcx, qword [0x14034599d]
inc rdx
cmp rdx, 0x1000
jb 0x14006f39e
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14006f585
mov rcx, r8
call fcn.140223f10
movups xmmword [0x14034599d], xmm6
movups xmmword [0x1403459ad], xmm7
mov rdx, qword [rbp - 0x48]
cmp rdx, 0x10
jb 0x14006f3ec
inc rdx
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006f3e7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14006f57f
call fcn.140223f10
mov qword [rbp - 0x50], r14
mov qword [rbp - 0x48], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x60], 0
mov rdx, qword [rsp + 0x78]
cmp rdx, 0x10
jb 0x14006f439
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006f434
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14006f58b
call fcn.140223f10
mov qword [rsp + 0x70], r14
mov qword [rsp + 0x78], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x60], 0
mov rdx, qword [rsp + 0x58]
cmp rdx, 0x10
jb 0x14006f489
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006f484
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14006f591
call fcn.140223f10
mov qword [rsp + 0x50], r14
mov qword [rsp + 0x58], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x40], 0
mov rdx, qword [rbp + 0x10]
cmp rdx, 0x10
jb 0x14006f4d3
inc rdx
mov rcx, qword [rbp - 8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006f4ce
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14006f4f5
call fcn.140223f10
movaps xmm6, xmmword [rsp + 0x130]
movaps xmm7, xmmword [rsp + 0x120]
add rsp, 0x140
pop r15
pop r14
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
call fcn.14023482c
int3
call fcn.14005b5f0
nop
call fcn.14023482c
nop
call fcn.14023482c
nop
call fcn.14023482c
nop
call fcn.14023482c
nop
call fcn.14023482c
nop
call fcn.14023482c
int3
call fcn.14005b5f0
nop
call fcn.14023482c
nop
call fcn.14023482c
nop
call fcn.14023482c
nop
call fcn.14023482c
nop
call fcn.14023482c
int3
call fcn.14005b5f0
nop
call fcn.14023482c
nop
call fcn.14023482c
nop
call fcn.14023482c
nop
call fcn.14023482c
nop
call fcn.14023482c
nop
call fcn.14023482c
nop
call fcn.14023482c
int3
call fcn.14005b5f0
nop
call fcn.14023482c
nop
call fcn.14023482c
nop
call fcn.14023482c
nop
call fcn.14023482c
int3