Function at 0x1401dd660
Capabilities:
Encode data using xor
Encrypt data using speck

Disassembly:
mov r11, rsp
mov qword [r11 + 0x20], r9
mov qword [r11 + 0x18], r8
mov qword [r11 + 0x10], rdx
push rbx
push rbp
push rsi
push rdi
push r12
push r15
sub rsp, 0x78
mov r10, qword [rsp + 0xd8]
mov rdi, rdx
mov rdx, qword [rdx]
mov r12d, 1
mov qword [rsp + 0x40], rdx
mov r15, rcx
mov rcx, qword [rsp + 0xd0]
mov rax, r9
mov rsi, r8
mov ebp, r12d
test r10, r10
je 0x1401dd6ba
mov rax, qword [r15 + 0x1b0]
mov qword [r10], rax
mov rax, r9
cmp dword [r15 + 0x80], 0
jge 0x1401dd6d3
xor eax, eax
add rsp, 0x78
pop r15
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret
mov rax, qword [rax]
test rax, rax
je 0x1401dd705
test rcx, rcx
je 0x1401dd6e6
cmp qword [rcx], 0
jne 0x1401dd705
sub rdx, qword [rdi]
mov rcx, r15
mov r8, rdx
mov edx, 0xffffffec
add rsp, 0x78
pop r15
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
jmp 0x1401e32b0
xor r11d, r11d
mov qword [rsp + 0x70], r13
test rax, rax
mov qword [rsp + 0x68], r14
mov rax, qword [r15 + 0x50]
lea r14, [r15 + 0x28]
cmovne r11, rcx
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x30], r11
lea r9, [r15 + 0x20]
mov qword [rsp + 0xb0], r9
test rax, rax
jne 0x1401dd77a
mov rax, qword [rdi]
mov rcx, qword [r8]
mov qword [r15 + 0x18], rcx
test rax, rax
jne 0x1401dd75a
mov qword [r14], rcx
lea rdx, [0x140000000]
mov qword [r9], rcx
jmp 0x1401dd7cb
lea rdx, [rcx + rax]
inc rax
mov qword [r14], rdx
cmp rax, 0x1c
jbe 0x1401dd7b4
lea rcx, [rdx - 0x1b]
mov qword [r9], rcx
lea rdx, [0x140000000]
jmp 0x1401dd7cb
lea rcx, [r15 + 0x48]
mov ebp, 2
lea rdx, [rcx + rax]
mov qword [r15 + 0x18], rcx
inc rax
mov qword [r14], rdx
cmp rax, 0x1c
jbe 0x1401dd7a7
lea rcx, [rdx - 0x1b]
mov qword [r9], rcx
lea rdx, [0x140000000]
jmp 0x1401dd7cb
mov qword [rsp + 0xb0], r9
mov qword [rsp + 0x38], r14
mov qword [r9], rcx
lea rdx, [0x140000000]
jmp 0x1401dd7cb
mov r14, qword [rsp + 0x38]
mov r12d, 1
lea r13, [r15 + 0x310]
cmp ebp, 1
je 0x1401dd8ce
cmp ebp, 2
jne 0x1401dea1e
cmp qword [r15 + 0x88], 0
je 0x1401dd826
mov rdx, qword [rsp + 0xc8]
mov r9, r10
mov r8, r11
mov dword [rsp + 0x20], r12d
mov rcx, r15
call fcn.1401e34b0
test eax, eax
js 0x1401de9b6
mov r9, qword [rsp + 0xb0]
mov r10, qword [rsp + 0xd8]
mov r11, qword [rsp + 0x30]
mov rdx, qword [r15 + 0x50]
test rdx, rdx
je 0x1401de9e0
mov rax, qword [r14]
cmp qword [r15 + 0x18], rax
jne 0x1401dd877
mov qword [r15 + 0x50], 0
mov ebp, r12d
mov rax, qword [rdi]
mov rcx, qword [rsi]
mov qword [r15 + 0x18], rcx
test rax, rax
jne 0x1401dd85e
mov qword [r14], rcx
mov qword [r9], rcx
jmp 0x1401dd8c7
lea rdx, [rcx + rax]
inc rax
mov qword [r14], rdx
cmp rax, 0x1c
jbe 0x1401dd872
lea rcx, [rdx - 0x1b]
mov qword [r9], rcx
jmp 0x1401dd8c7
cmp qword [rdi], 0
je 0x1401de9b8
mov rax, qword [rsi]
lea r8, [r15 + 0x48]
mov ebp, r12d
movzx ecx, byte [rax]
mov rax, r8
mov byte [rdx + r15 + 0x48], cl
add qword [r15 + 0x50], 1
mov rdx, qword [r15 + 0x50]
mov qword [r15 + 0x18], r8
lea rcx, [r8 + rdx]
cmovne rax, rcx
add rcx, 0xffffffffffffffe5
mov qword [r14], rax
lea rax, [rdx + 1]
cmp rax, 0x1c
cmovbe rcx, r8
mov qword [r9], rcx
inc qword [rsi]
dec qword [rdi]
lea rdx, [0x140000000]
movsxd rax, dword [r15]
cmp eax, 0x1a
ja case.default.0x1401dd8e4
mov ecx, dword [rdx + rax*4 + 0x1deaa8]
add rcx, rdx
jmp rcx
lea rcx, [r15 + 8]
call fcn.1401e5dc0
test eax, eax
jne 0x1401dd8fb
lea ebp, [rax + 2]
jmp 0x1401de995
mov r8d, dword [r15 + 0x304]
mov eax, r8d
and eax, 0xffffffdf
mov dword [r15 + 0x304], eax
mov rdx, qword [r15 + 8]
mov rax, qword [r15 + 0x10]
mov rcx, rdx
and rcx, qword [0x140438638]
dec rax
shr rdx, 1
mov qword [r15 + 0x10], rax
mov qword [r15 + 8], rdx
test rcx, rcx
jne 0x1401dd94a
mov ecx, dword [r15 + 0x304]
and ecx, 0xfffff43f
bts ecx, 0xa
jmp 0x1401dda10
mov rcx, rdx
add rax, 0xfffffffffffffffd
and rcx, qword [reloc.WS2_32.dll_getsockopt]
shr rdx, 3
mov qword [r15 + 0x10], rax
mov qword [r15 + 8], rdx
test rcx, rcx
je 0x1401dd985
mov eax, dword [r15 + 0x304]
add ecx, 0x11
shl ecx, 6
xor ecx, eax
and ecx, 0xfc0
xor ecx, eax
jmp 0x1401dda10
mov rcx, rdx
add rax, 0xfffffffffffffffd
and rcx, qword [reloc.WS2_32.dll_getsockopt]
shr rdx, 3
mov qword [r15 + 0x10], rax
mov qword [r15 + 8], rdx
cmp rcx, 1
jne 0x1401dd9e4
test r8b, 0x20
je 0x1401dd9c9
mov rcx, rdx
shr rdx, 1
and rcx, qword [0x140438638]
dec rax
mov qword [r15 + 8], rdx
mov qword [r15 + 0x10], rax
cmp rcx, 1
jne 0x1401dd9d3
mov ebp, 0xfffffff3
jmp 0x1401de995
or dword [r15 + 0x304], 0x20
mov ecx, dword [r15 + 0x304]
jmp 0x1401dda17
mov eax, dword [r15 + 0x304]
test rcx, rcx
je 0x1401dda02
add ecx, 8
shl ecx, 6
xor ecx, eax
and ecx, 0xfc0
xor ecx, eax
jmp 0x1401dda10
mov ecx, eax
and ecx, 0xfffff47f
or ecx, 0x440
mov dword [r15 + 0x304], ecx
and cl, 0x20
mov ebp, r12d
neg cl
sbb eax, eax
add eax, 2
mov dword [r15], eax
jmp 0x1401de995
mov r8, qword [r15 + 0x10]
cmp r8, 6
jae 0x1401dda78
mov r9, qword [r14]
nop dword [rax]
mov rdx, qword [r15 + 0x18]
cmp rdx, r9
je 0x1401ddafe
movzx eax, byte [rdx]
mov rcx, r8
shl rax, cl
add r8, 8
or qword [r15 + 8], rax
lea rax, [rdx + 1]
mov qword [r15 + 0x18], rax
mov qword [r15 + 0x10], r8
cmp r8, 6
jb 0x1401dda40
mov r9, qword [rsp + 0xb0]
mov rcx, qword [r15 + 8]
lea rax, [r8 - 6]
mov rdx, rcx
shr rcx, 6
and rdx, qword [0x140438660]
mov qword [r15 + 0x10], rax
mov eax, edx
shl eax, 6
and edx, 0x3f
mov qword [r15 + 8], rcx
sub edx, 0xa
mov ecx, dword [r15 + 0x304]
xor eax, ecx
and eax, 0xfc0
xor eax, ecx
mov dword [r15 + 0x304], eax
cmp edx, 0x14
ja 0x1401ddb17
mov dword [r15], 2
mov ecx, dword [r15 + 0x304]
mov eax, r12d
shr ecx, 6
mov edx, 0x3030
and ecx, 0x3f
shl eax, cl
mov rcx, qword [r15 + 0x40]
sub eax, 0x10
mov dword [r15 + 0x5c], eax
call qword [r15 + gethostbyaddr]
mov qword [r15 + 0x100], rax
test rax, rax
jne 0x1401ddb28
lea ebp, [rax - 0x1e]
jmp 0x1401de995
mov r9, qword [rsp + 0xb0]
lea rdx, [0x140000000]
mov ebp, 2
jmp case.default.0x1401dd8e4
mov ebp, 0xfffffff3
lea rdx, [0x140000000]
jmp case.default.0x1401dd8e4
add rax, 0x1da0
mov dword [r15], 3
mov qword [r15 + 0x108], rax
mov rcx, r15
call fcn.1401e6a30
mov dword [r15], 4
lea rdx, [r15 + 8]
mov rcx, r15
call fcn.1401df9d0
mov r9, qword [rsp + 0xb0]
mov ebp, eax
mov r10, qword [rsp + 0xd8]
lea rdx, [0x140000000]
mov r11, qword [rsp + 0x30]
cmp eax, 1
jne case.default.0x1401dd8e4
lea r11, [r15 + 0x304]
test byte [r11], 6
je 0x1401ddc09
mov rdx, qword [r15 + 0x10]
mov r8d, 0
mov rcx, rdx
and ecx, 7
je 0x1401ddbca
mov rax, qword [r15 + 8]
lea r8, [0x140000000]
mov r8, qword [r8 + rcx*8 + 0x438630]
lea r9, [r15 + 0x304]
sub rdx, rcx
and r8, rax
shr rax, cl
mov qword [r15 + 8], rax
mov qword [r15 + 0x10], rdx
jmp 0x1401ddbcd
mov r9, r11
cmp rdx, 0x40
jae 0x1401ddbe6
mov rcx, rdx
mov rax, r12
shl rax, cl
mov r11, r9
dec rax
and qword [r15 + 8], rax
test r8, r8
je 0x1401ddc09
mov r11, qword [rsp + 0x30]
lea rdx, [0x140000000]
mov r9, qword [rsp + 0xb0]
mov ebp, 0xfffffff2
jmp case.default.0x1401dd8e4
test byte [r11], 4
je 0x1401ddc4f
mov rax, qword [r15 + 0x2d0]
lea rdx, [0x140000000]
mov r9, qword [rsp + 0xb0]
mov r11, qword [rsp + 0x30]
mov dword [r15], reloc.WS2_32.dll_inet_ntoa
test rax, rax
je case.default.0x1401dd8e4
movsxd rdx, dword [r15 + 0x84]
mov rcx, qword [r15 + 0x2e0]
call rax
jmp 0x1401de995
cmp dword [r15 + 0x84], 0
jne 0x1401ddc79
mov r11, qword [rsp + 0x30]
lea rdx, [0x140000000]
mov r9, qword [rsp + 0xb0]
mov dword [r15], recv
jmp case.default.0x1401dd8e4
mov rcx, r15
call fcn.1401dd510
test byte [r11], 2
je 0x1401ddc93
mov dword [r15], reloc.WS2_32.dll_inet_addr
jmp 0x1401de995
mov r9, qword [rsp + 0xb0]
lea rdx, [0x140000000]
mov qword [r15], reloc.WS2_32.dll_select
lea rax, [r15 + 0x438]
mov qword [r15 + 0x410], rax
mov qword [r15 + 0x360], 0
mov qword [r15 + 0x354], 0
mov dword [r15 + 0x350], 0
movsxd rax, dword [r15 + 4]
cmp eax, 3
jl 0x1401ddcfa
mov r10, qword [rsp + 0xd8]
mov r11, qword [rsp + 0x30]
mov dword [r15], 5
jmp case.default.0x1401dd8e4
add rax, 0x27
lea rdx, [r15 + 8]
mov rcx, r15
lea r8, [r15 + rax*8]
call fcn.1401dff80
mov r9, qword [rsp + 0xb0]
mov ebp, eax
mov r10, qword [rsp + 0xd8]
lea rdx, [0x140000000]
mov r11, qword [rsp + 0x30]
cmp eax, 1
jne case.default.0x1401dd8e4
movsxd rax, dword [r15 + 4]
inc qword [r15 + rax*8 + 0x138]
movsxd rcx, dword [r15 + 4]
cmp qword [r15 + rcx*8 + 0x138], 2
jae 0x1401ddd63
lea eax, [rcx + 1]
mov dword [r15 + 4], eax
lea rdx, [0x140000000]
jmp case.default.0x1401dd8e4
mov dword [r15], reloc.WS2_32.dll_send
movsxd rdx, dword [r15 + 4]
xor r9d, r9d
imul eax, edx, 0x278
mov qword [rsp + 0x20], r15
mov rcx, qword [r15 + rdx*8 + 0x138]
add rcx, 2
movsxd rdx, eax
mov rax, qword [r15 + 0x100]
lea r8, [rax + rdx*4]
mov rdx, rcx
call fcn.1401e0e80
mov r9, qword [rsp + 0xb0]
mov ebp, eax
mov r10, qword [rsp + 0xd8]
lea rdx, [0x140000000]
mov r11, qword [rsp + 0x30]
cmp eax, 1
jne case.default.0x1401dd8e4
mov dword [r15], shutdown
imul eax, dword [r15 + 4], 0x18c
mov edx, 0x1a
xor r9d, r9d
mov qword [rsp + 0x20], r15
movsxd rcx, eax
mov rax, qword [r15 + 0x108]
lea r8, [rax + rcx*4]
mov ecx, edx
call fcn.1401e0e80
mov r9, qword [rsp + 0xb0]
mov ebp, eax
mov r10, qword [rsp + 0xd8]
lea rdx, [0x140000000]
mov r11, qword [rsp + 0x30]
cmp eax, 1
jne case.default.0x1401dd8e4
mov dword [r15], reloc.WS2_32.dll_setsockopt
movsxd rdx, dword [r15 + 4]
imul eax, edx, 0x18c
cmp dword [r15 + 0x2fc], 0
lea rdi, [r15 + rdx*8]
movsxd rcx, eax
mov rax, qword [r15 + 0x108]
lea r11, [rax + rcx*4]
jne 0x1401ddf18
mov r8, qword [r15 + 0x10]
cmp r8, 0xf
jae 0x1401dde90
mov r9, qword [r14]
nop dword [rax + rax]
mov rdx, qword [r15 + 0x18]
cmp rdx, r9
je 0x1401ddef8
movzx eax, byte [rdx]
mov rcx, r8
shl rax, cl
add r8, 8
or qword [r15 + 8], rax
lea rax, [rdx + 1]
mov qword [r15 + 0x18], rax
mov qword [r15 + 0x10], r8
cmp r8, 0xf
jb 0x1401dde60
mov r10, qword [0x1404386a8]
and r10, qword [r15 + 8]
movzx eax, r10b
lea r9, [r11 + rax*4]
movzx eax, byte [r11 + rax*4]
cmp al, 8
jbe 0x1401ddee3
shr qword [r15 + 8], 8
lea ecx, [rax - 8]
add r8, 0xfffffffffffffff8
shr r10, 8
mov qword [r15 + 0x10], r8
lea rax, [0x140000000]
mov rdx, qword [rax + rcx*8 + 0x438630]
movzx eax, word [r9 + 2]
and rdx, r10
add rdx, rax
movzx eax, byte [r9 + rdx*4]
lea r9, [r9 + rdx*4]
movzx ecx, al
sub r8, rcx
shr qword [r15 + 8], cl
mov qword [r15 + 0x10], r8
movzx r10d, word [r9 + 2]
jmp 0x1401ddf1f
lea r8, [rsp + 0x48]
mov rcx, r11
lea rdx, [r15 + 8]
call fcn.1401e2160
test eax, eax
je 0x1401ddfda
mov r10, qword [rsp + 0x48]
jmp 0x1401ddf24
mov r10, qword [r15 + 0x130]
mov qword [rsp + 0x48], r10
mov rcx, qword [r15 + 0x10]
lea rax, [0x140000000]
movzx r9d, byte [rax + r10*4 + 0x438742]
movzx r11d, word [rax + r10*4 + 0x438740]
cmp rcx, r9
jae 0x1401ddf7f
mov r8, qword [r14]
nop dword [rax]
mov rdx, qword [r15 + 0x18]
cmp rdx, r8
je 0x1401ddfcc
movzx eax, byte [rdx]
shl rax, cl
add rcx, 8
or qword [r15 + 8], rax
lea rax, [rdx + 1]
mov qword [r15 + 0x18], rax
mov qword [r15 + 0x10], rcx
cmp rcx, r9
jb 0x1401ddf50
lea rax, [0x140000000]
mov rax, qword [rax + r9*8 + 0x438630]
sub rcx, r9
mov rdx, qword [r15 + 8]
mov qword [r15 + 0x10], rcx
and rax, rdx
add rax, r11
mov rcx, r9
shr rdx, cl
mov qword [r15 + 8], rdx
mov qword [rdi + 0x118], rax
inc dword [r15 + 4]
mov rdi, qword [rsp + 0xb8]
mov dword [r15 + 0x2fc], 0
mov dword [r15], reloc.WS2_32.dll_select
jmp 0x1401de995
mov qword [r15 + 0x130], r10
mov dword [r15 + 0x2fc], r12d
mov rdi, qword [rsp + 0xb8]
mov ebp, 2
jmp 0x1401de995
mov rcx, qword [rsp + 0xc8]
mov r9, r15
mov r8, r10
mov rdx, r11
call fcn.1401decd0
mov r9, qword [rsp + 0xb0]
mov ebp, eax
mov r10, qword [rsp + 0xd8]
lea rdx, [0x140000000]
mov r11, qword [rsp + 0x30]
cmp eax, 1
jne case.default.0x1401dd8e4
mov dword [r15], recv
lea rdx, [0x140000000]
jmp case.default.0x1401dd8e4
mov rcx, r15
call fcn.1401e3300
jmp 0x1401de002
mov r8, qword [r15 + 0x10]
cmp r8, 6
jae 0x1401de083
mov r9, qword [r14]
mov rdx, qword [r15 + 0x18]
cmp rdx, r9
je 0x1401ddafe
movzx eax, byte [rdx]
mov rcx, r8
shl rax, cl
add r8, 8
or qword [r15 + 8], rax
lea rax, [rdx + 1]
mov qword [r15 + 0x18], rax
mov qword [r15 + 0x10], r8
cmp r8, 6
jb 0x1401de053
mov rcx, qword [r15 + 8]
lea rax, [r8 - 6]
mov rdx, rcx
shr rcx, 6
and rdx, qword [0x140438660]
mov qword [r15 + 8], rcx
mov rcx, rdx
mov qword [r15 + 0x10], rax
and rcx, qword [reloc.WS2_32.dll_closesocket]
shr rdx, 2
shl rdx, cl
mov qword [r15 + 0x180], rcx
mov rcx, qword [r15 + 0x40]
mov qword [r15 + 0x188], rdx
mov rdx, qword [r15 + 0x138]
call qword [r15 + gethostbyaddr]
mov qword [r15 + 0x318], rax
test rax, rax
jne 0x1401de0e3
lea ebp, [rax - 0x15]
jmp 0x1401de995
mov qword [r15], 6
movsxd r10, dword [r15 + 4]
cmp r10d, dword [r15 + 0x138]
jge 0x1401de178
mov r11, r10
nop
mov r8, qword [r15 + 0x10]
cmp r8, 2
jae 0x1401de140
mov r9, qword [r15 + 0x28]
nop
mov rdx, qword [r15 + 0x18]
cmp rdx, r9
je 0x1401de2d5
movzx eax, byte [rdx]
mov rcx, r8
shl rax, cl
add r8, 8
or qword [r15 + 8], rax
lea rax, [rdx + 1]
mov qword [r15 + 0x18], rax
mov qword [r15 + 0x10], r8
cmp r8, 2
jb 0x1401de110
mov rcx, qword [r15 + 8]
lea rax, [r8 - 2]
mov rdx, rcx
inc r10d
and rdx, qword [reloc.WS2_32.dll_closesocket]
mov qword [r15 + 0x10], rax
shr rcx, 2
mov qword [r15 + 8], rcx
mov rax, qword [r15 + 0x318]
mov byte [r11 + rax], dl
inc r11
cmp r10d, dword [r15 + 0x138]
jl 0x1401de100
mov dword [r15], reloc.WS2_32.dll_shutdown
mov rcx, qword [r15 + 0x138]
lea rdx, [r15 + 0x308]
shl rcx, 6
mov r9, r15
mov r8, r13
call fcn.1401df0b0
mov r9, qword [rsp + 0xb0]
mov ebp, eax
mov r10, qword [rsp + 0xd8]
lea rdx, [0x140000000]
mov r11, qword [rsp + 0x30]
cmp eax, 1
jne case.default.0x1401dd8e4
xorps xmm0, xmm0
xor esi, esi
movups xmmword [r15 + 0x330], xmm0
movups xmmword [r15 + 0x340], xmm0
cmp qword [r15 + 0x138], rsi
jbe 0x1401de285
nop word [rax + rax]
mov r14, qword [r13]
mov r11, rsi
shl r11, 6
xor edi, edi
xor r10d, r10d
movzx r9d, byte [r11 + r14]
nop word [rax + rax]
lea rdx, [r14 + r10]
add r10, 4
add rdx, r11
movzx r8d, byte [rdx + 3]
movzx ecx, byte [rdx + 2]
xor r8, r9
xor rcx, r9
or r8, rcx
movzx ecx, byte [rdx + 1]
xor rcx, r9
or r8, rcx
movzx ecx, byte [rdx]
xor rcx, r9
or r8, rcx
or rdi, r8
cmp r10, 0x40
jb 0x1401de210
test rdi, rdi
jne 0x1401de26d
mov rax, rsi
mov ecx, esi
shr rax, 5
and ecx, 0x1f
lea rdx, [r15 + rax*4]
mov eax, dword [rdx + 0x330]
bts eax, ecx
mov dword [rdx + 0x330], eax
inc rsi
cmp rsi, qword [r15 + 0x138]
jb 0x1401de1f0
mov rdi, qword [rsp + 0xb8]
mov rsi, qword [rsp + 0xc0]
mov dword [r15], reloc.WS2_32.dll_socket
mov r10, qword [r15 + 0x180]
mov eax, 0x18
mov r8, qword [r15 + 0x188]
lea ecx, [r10 + 1]
shl eax, cl
lea r14, [r8 + 0x10]
add r14, rax
test byte [r15 + 0x304], 0x20
mov r13, r14
je 0x1401de34a
cmp r8d, 0x7ffffffc
jb 0x1401de2e3
mov edx, 0x8000000c
jmp 0x1401de333
mov dword [r15 + 4], r10d
mov ebp, 2
jmp 0x1401de995
mov ecx, r10d
mov edx, 0x7ffffffc
sub edx, r8d
mov r9d, r12d
shr edx, cl
xor eax, eax
shl r9d, cl
add edx, 4
mov ecx, edx
dec r9d
shr ecx, 1
je 0x1401de30a
inc eax
shr ecx, 1
jne 0x1401de304
lea ecx, [rax - 1]
shr edx, cl
lea eax, [rax*2 - 4]
and edx, 1
or edx, eax
jne 0x1401de323
lea edx, [r8 + 0x10]
jmp 0x1401de333
dec edx
mov ecx, r10d
shl edx, cl
or edx, r9d
add edx, 0x11
add edx, r8d
mov r14d, 0x3e
mov r13d, edx
lea ecx, [r10 + 1]
shl r14d, cl
add r14, 0x10
add r14, r8
mov rcx, qword [r15 + 0x148]
lea r8, [r15 + 0x198]
shl rcx, 2
lea rdx, [r15 + 0x190]
mov r9, r15
call fcn.1401df0b0
mov r9, qword [rsp + 0xb0]
mov ebp, eax
mov r10, qword [rsp + 0xd8]
lea rdx, [0x140000000]
mov r11, qword [rsp + 0x30]
cmp eax, 1
jne 0x1401dd7c0
mov rax, qword [r15 + 0x308]
lea rdx, [r15 + 0xb8]
mov r9d, 0x100
mov qword [rsp + 0x20], rax
mov r8d, r9d
mov rcx, r15
call fcn.1401e6680
mov rcx, qword [r15 + 0x140]
lea rdx, [r15 + 0xd0]
mov r9d, 0x2c0
mov qword [rsp + 0x20], rcx
mov rcx, r15
mov r8d, r9d
mov edi, eax
call fcn.1401e6680
mov rcx, qword [r15 + 0x190]
lea rdx, [r15 + 0xe8]
mov qword [rsp + 0x20], rcx
mov esi, eax
mov rcx, r15
mov r9, r13
mov r8, r14
and esi, edi
call fcn.1401e6680
and eax, esi
test al, 1
je 0x1401dea84
mov rdi, qword [rsp + 0xb8]
mov qword [r15], 0x18
mov ecx, dword [r15 + 4]
test ecx, ecx
je 0x1401de440
sub ecx, 1
je 0x1401de438
cmp ecx, 1
jne 0x1401dea9e
mov r14d, 0xe8
jmp 0x1401de446
mov r14d, 0xd0
jmp 0x1401de446
mov r14d, reloc.OLEAUT32.dll_VariantTimeToSystemTime
mov r12d, 1
lea rsi, [r15 + 0xa6c]
cmp dword [r15 + 0x350], r12d
je 0x1401de475
mov rax, qword [r15 + r14 + 8]
mov qword [r15 + 0xa70], rax
mov dword [rsi], 0
mov dword [r15 + 0x350], r12d
movzx eax, word [r15 + r14 + 0x14]
cmp dword [rsi], eax
jge 0x1401de4df
nop
movzx edx, word [r15 + r14 + 0x12]
lea r9, [rsp + 0x50]
movzx ecx, word [r15 + r14 + 0x10]
mov r8, qword [r15 + 0xa70]
mov qword [rsp + 0x20], r15
call fcn.1401e0e80
mov ebp, eax
cmp eax, 1
jne 0x1401de5f0
mov rcx, qword [r15 + r14]
mov rax, qword [r15 + 0xa70]
movsxd rdx, dword [rsi]
mov qword [rcx + rdx*8], rax
inc dword [rsi]
mov rax, qword [rsp + 0x50]
lea rax, [rax*4]
add qword [r15 + 0xa70], rax
movzx eax, word [r15 + r14 + 0x14]
cmp dword [rsi], eax
jl 0x1401de480
mov rdi, qword [rsp + 0xb8]
lea r13, [r15 + 0x310]
mov rsi, qword [rsp + 0xc0]
lea rdx, [0x140000000]
mov r14, qword [rsp + 0x38]
mov ebp, r12d
mov r9, qword [rsp + 0xb0]
mov r10, qword [rsp + 0xd8]
mov r11, qword [rsp + 0x30]
mov dword [r15 + 0x350], 0
inc dword [r15 + 4]
cmp dword [r15 + 4], 3
jl case.default.0x1401dd8e4
mov dword [r15], 0x19
lea r13, [r15 + 0x310]
mov r9, qword [r15 + 0x158]
movzx ecx, r9b
mov r8, r9
and cl, 0x1f
shl r8, 6
add r8, qword [r13]
mov rax, r9
shr rax, 5
mov qword [r15 + 0xa8], r8
mov edx, dword [r15 + rax*4 + 0x330]
mov rax, qword [r15 + 0xb8]
shr rdx, cl
and edx, 1
mov dword [r15 + 0x110], edx
movzx ecx, byte [r8]
mov rcx, qword [rax + rcx*8]
mov rax, qword [r15 + 0x318]
mov qword [r15 + 0x1a0], rcx
movzx ecx, byte [rax + r9]
lea rax, [0x1404387b0]
and ecx, 3
shl rcx, 9
add rcx, rax
mov rax, qword [r15 + 0x198]
mov qword [r15 + 0xb0], rax
mov rax, qword [r15 + 0xd0]
mov qword [r15 + 0xa0], rcx
mov rcx, qword [rax]
mov qword [r15 + 0x98], rcx
mov rcx, r15
call fcn.1401deb20
test eax, eax
jne 0x1401de611
mov r14, qword [rsp + 0x38]
lea ebp, [rax - 0x1b]
jmp 0x1401de995
mov rdi, qword [rsp + 0xb8]
lea r13, [r15 + 0x310]
mov rsi, qword [rsp + 0xc0]
mov r14, qword [rsp + 0x38]
jmp 0x1401de995
mov r12, qword [r15 + 0x180]
lea r11, [r15 + 0x350]
mov r13, qword [r15 + 0x188]
mov r9d, 1
movzx r14d, word [r15 + 0xfa]
mov rcx, r12
mov edi, r9d
xor ebp, ebp
shl edi, cl
lea r8d, [r9 + 0xf]
test r13, r13
je 0x1401de687
mov rsi, 0xfffffffffffffff1
lea rcx, [r11 + 0x10]
sub rsi, r11
lea rdx, [r11 + 0x2a0]
mov r10, r13
lea r8, [r13 + 0x10]
nop dword [rax]
nop word [rax + rax]
mov byte [rcx], bpl
lea rax, [rsi + rcx]
mov qword [rdx], rax
lea rdx, [rdx + 8]
lea rcx, [rcx + 1]
sub r10, r9
jne 0x1401de670
cmp r8, r14
jae 0x1401de6e6
nop dword [rax]
mov rcx, r9
lea r10, [rbp + 2]
shl r10, cl
mov rcx, r12
sub r10, 4
shl r10, cl
xor ecx, ecx
inc r10
add r10, r13
test rdi, rdi
je 0x1401de6da
lea rdx, [r11 + 0x220]
lea rdx, [rdx + r8*8]
nop dword [rax]
mov byte [r8 + r11], r9b
lea rax, [r10 + rcx]
inc r8
mov qword [rdx], rax
inc rcx
lea rdx, [rdx + 8]
cmp rcx, rdi
jb 0x1401de6c0
add r9, rbp
xor rbp, 1
cmp r8, r14
jb 0x1401de690
mov rdi, qword [rsp + 0xb8]
mov rsi, qword [rsp + 0xc0]
mov dword [r15], 7
mov rcx, r15
call fcn.1401e0340
mov r14, qword [rsp + 0x38]
mov ebp, eax
mov r9, qword [rsp + 0xb0]
mov r12d, 1
mov r10, qword [rsp + 0xd8]
lea r13, [r15 + 0x310]
mov r11, qword [rsp + 0x30]
lea rdx, [0x140000000]
cmp eax, 2
jne case.default.0x1401dd8e4
mov rcx, r15
call fcn.1401e2200
mov ebp, eax
lea r13, [r15 + 0x310]
jmp 0x1401de995
mov rdx, qword [rsp + 0xc8]
mov r9, r10
mov r8, r11
mov dword [rsp + 0x20], 0
mov rcx, r15
call fcn.1401e34b0
mov r9, qword [rsp + 0xb0]
mov ebp, eax
mov r10, qword [rsp + 0xd8]
lea rdx, [0x140000000]
mov r11, qword [rsp + 0x30]
cmp eax, 1
jne case.default.0x1401dd8e4
mov rcx, r15
call fcn.1401e3470
mov ecx, dword [r15 + 0x304]
mov eax, r12d
shr ecx, 6
and ecx, 0x3f
shl eax, cl
cmp dword [r15 + 0x64], eax
jne 0x1401de7c1
mov eax, dword [r15 + 0x5c]
mov dword [r15 + 0x60], eax
mov eax, dword [r15]
cmp eax, 0xf
jne 0x1401de834
mov rcx, qword [r15 + 0x328]
test rcx, rcx
je 0x1401de817
mov eax, dword [rcx + 0x14]
cmp dword [rcx + 0x10], eax
je 0x1401de817
mov edx, dword [r15 + 0x58]
mov rcx, r15
call fcn.1401debf0
add dword [r15 + 0x58], eax
lea rdx, [0x140000000]
mov eax, dword [r15 + 0x58]
mov r9, qword [rsp + 0xb0]
mov r10, qword [rsp + 0xd8]
mov r11, qword [rsp + 0x30]
cmp eax, dword [r15 + 0x64]
jge case.default.0x1401dd8e4
cmp dword [r15 + 0x84], 0
mov eax, recv
mov ecx, 7
cmovne eax, ecx
mov dword [r15], eax
jmp 0x1401de995
cmp eax, 0x10
jne 0x1401de846
mov eax, 0xa
mov dword [r15], eax
jmp 0x1401de995
cmp dword [r15 + 4], 0
jne 0x1401de86a
cmp dword [r15 + 0x84], 0
mov eax, recv
mov ecx, 9
cmovne eax, ecx
mov dword [r15], eax
jmp 0x1401de995
mov eax, 8
mov dword [r15], eax
jmp 0x1401de995
cmp dword [r15 + 0x84], 0
jge 0x1401de88b
mov ebp, 0xfffffff6
jmp case.default.0x1401dd8e4
mov rcx, r15
call fcn.1401e67f0
test byte [r15 + 0x304], 1
jne 0x1401de8a9
mov dword [r15], 3
jmp 0x1401de995
mov r9, qword [r15 + 0x10]
mov edx, 0
mov rcx, r9
and ecx, 7
je 0x1401de8de
mov rax, qword [r15 + 8]
lea r8, [0x140000000]
mov rdx, qword [r8 + rcx*8 + 0x438630]
sub r9, rcx
and rdx, rax
mov qword [r15 + 0x10], r9
shr rax, cl
mov qword [r15 + 8], rax
cmp r9, 0x40
jae 0x1401de8f4
mov rcx, r9
mov rax, r12
shl rax, cl
dec rax
and qword [r15 + 8], rax
test rdx, rdx
je 0x1401de903
mov ebp, 0xfffffff1
jmp 0x1401de995
cmp qword [r15 + 0x50], 0
jne 0x1401de95b
mov r10, qword [r15 + 0x18]
mov rdx, r9
shr rdx, 3
mov rax, r10
sub rax, rdx
test rdx, rdx
cmovne r10, rax
lea r8, [rdx*8]
sub r9, r8
mov qword [r15 + 0x18], r10
mov qword [r15 + 0x10], r9
cmp r9, 0x40
jae 0x1401de94b
mov rcx, r9
mov rax, r12
shl rax, cl
dec rax
and qword [r15 + 8], rax
mov rax, qword [r14]
sub rax, r10
mov qword [rdi], rax
mov rax, qword [r15 + 0x18]
mov qword [rsi], rax
mov dword [r15], 0x1a
cmp qword [r15 + 0x88], 0
je 0x1401de9b8
mov r9, qword [rsp + 0xd8]
mov rcx, r15
mov r8, qword [rsp + 0x30]
mov rdx, qword [rsp + 0xc8]
mov dword [rsp + 0x20], r12d
call fcn.1401e34b0
mov ebp, eax
cmp eax, 1
je 0x1401de9b8
mov r10, qword [rsp + 0xd8]
lea rdx, [0x140000000]
mov r11, qword [rsp + 0x30]
mov r9, qword [rsp + 0xb0]
jmp case.default.0x1401dd8e4
mov ebp, eax
mov edx, ebp
mov r8, qword [rsp + 0x40]
sub r8, qword [rdi]
mov rcx, r15
mov r13, qword [rsp + 0x70]
mov r14, qword [rsp + 0x68]
add rsp, 0x78
pop r15
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
jmp 0x1401e32b0
mov rax, qword [r15 + 0x18]
mov qword [rsi], rax
mov rax, qword [r14]
sub rax, qword [r15 + 0x18]
mov qword [rdi], rax
je 0x1401de9b8
nop dword [rax]
nop word [rax + rax]
mov rax, qword [rsi]
mov rcx, qword [r15 + 0x50]
movzx eax, byte [rax]
mov byte [rcx + r15 + 0x48], al
inc qword [r15 + 0x50]
inc qword [rsi]
sub qword [rdi], 1
jne 0x1401dea00
jmp 0x1401de9b8
cmp qword [r15 + 0x50], 0
je 0x1401dea2f
mov qword [r15 + 0x50], 0
jmp 0x1401de9b8
mov rcx, qword [r15 + 0x10]
mov r9, qword [r15 + 0x18]
mov rdx, rcx
shr rdx, 3
mov rax, r9
sub rax, rdx
test rdx, rdx
cmovne r9, rax
lea r8, [rdx*8]
sub rcx, r8
mov qword [r15 + 0x18], r9
mov qword [r15 + 0x10], rcx
cmp rcx, 0x40
jae 0x1401dea6e
shl r12, cl
dec r12
and qword [r15 + 8], r12
mov rax, qword [r15 + 0x28]
sub rax, r9
mov qword [rdi], rax
mov rax, qword [r15 + 0x18]
mov qword [rsi], rax
jmp 0x1401de9b8
mov rax, qword [rsp + 0xb8]
mov edx, 0xffffffea
mov r8, qword [rsp + 0x40]
sub r8, qword [rax]
jmp 0x1401de9c2
mov edx, 0xffffffe1
jmp 0x1401de9ba
add qword [rcx + 0x2e8], r8
cmp qword [rcx + 0x50], 0
mov dword [rcx + 0x80], edx
je 0x1401e32d6
mov rax, qword [rcx + 0x28]
cmp qword [rcx + 0x18], rax
jne 0x1401e32d6
mov qword [rcx + 0x50], 0
sub edx, 1
je 0x1401e32f4
sub edx, 1
je 0x1401e32ee
cmp edx, 1
je 0x1401e32e8
xor eax, eax
ret
mov eax, 3
ret
mov eax, 2
ret
mov eax, 1
ret