Function at 0x1401207b0
Capabilities:
Access peb ldr_data
Contain obfuscated stackstrings
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
push rbp
push rdi
push r12
push r14
push r15
lea rbp, [rax - 0xf8]
sub rsp, 0x1d0
movaps xmmword [rax - 0x38], xmm6
mov rax, qword [0x140714d80]
xor rax, rsp
mov qword [rbp + 0xb0], rax
movzx ebx, dl
mov rsi, rcx
xor r12d, r12d
mov dword [rsp + 0x40], r12d
call fcn.1401219e0
mov dword [rsp + 0x48], 0x7a647d37
mov dword [rsp + 0x4c], 0x7c7e6470
mov word [rsp + 0x50], 0x24
mov byte [rsp + 0x52], 1
mov dword [rsp + 0x40], 0x79727c37
mov dword [rsp + 0x44], 0x1002b70
mov dword [rbp], 0x67766137
mov dword [rbp + 4], 0x76787f66
mov dword [rbp + 8], 0x267e70
mov byte [rbp + 0xc], 1
mov dword [rsp + 0x30], 0x71636b65
mov dword [rsp + 0x34], 0x7d7f7528
mov dword [rsp + 0x38], 0x100717a
lea r8, [rbp]
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0x78]
call fcn.140117c60
nop
lea rdx, [rsi + 0x240]
mov r8, qword [rdx + 0x10]
cmp qword [rdx + 0x18], 0xf
jbe 0x14012087f
mov rdx, qword [rdx]
mov rcx, rax
call fcn.14006ec50
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x68], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x58], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea r8, [rsp + 0x40]
lea rdx, [rbp - 0x68]
lea rcx, [rbp - 0x48]
call fcn.1401172d0
nop
mov rdx, rsi
cmp qword [rsi + 0x18], 0xf
jbe 0x1401208c5
mov rdx, qword [rsi]
mov r8, qword [rsi + 0x10]
mov rcx, rax
call fcn.14006ec50
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x10], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x20], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea r8, [rsp + 0x48]
lea rdx, [rbp + 0x10]
lea rcx, [rsp + 0x58]
call fcn.1401177b0
nop
lea rdx, [rsi + 0x20]
cmp qword [rsi + 0x38], 0xf
jbe 0x140120912
mov rdx, qword [rsi + 0x20]
mov r8, qword [rsi + 0x30]
mov rcx, rax
call fcn.14006ec50
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x90], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0xa0], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov rdx, qword [rsp + 0x70]
cmp rdx, 0xf
jbe 0x140120982
inc rdx
mov rcx, qword [rsp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14012097d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14012097d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140224898
movdqa xmm6, xmmword [0x14037a260]
movdqu xmmword [rsp + 0x68], xmm6
mov byte [rsp + 0x58], 0
mov rdx, qword [rbp + 0x28]
cmp rdx, 0xf
jbe 0x1401209d4
inc rdx
mov rcx, qword [rbp + 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401209ce
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1401209ce
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140224898
nop
mov rdx, qword [rbp - 0x30]
cmp rdx, 0xf
jbe 0x140120a12
inc rdx
mov rcx, qword [rbp - 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140120a0d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140120a0d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140224898
movdqu xmmword [rbp - 0x38], xmm6
mov byte [rbp - 0x48], 0
mov rdx, qword [rbp - 0x50]
cmp rdx, 0xf
jbe 0x140120a5a
inc rdx
mov rcx, qword [rbp - 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140120a54
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140120a54
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140224898
nop
mov rdx, qword [rbp - 0x70]
cmp rdx, 0xf
jbe 0x140120a99
inc rdx
mov rcx, qword [rsp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140120a94
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140120a94
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140224898
movdqu xmmword [rbp - 0x78], xmm6
mov byte [rsp + 0x78], 0
lea rdx, [rsi + 0x60]
lea rcx, [rbp + 0x30]
call fcn.1400df200
nop
test bl, bl
je 0x140120b1d
mov rcx, qword [rbp + 0x40]
mov rdx, qword [rbp + 0x48]
mov rax, rdx
sub rax, rcx
cmp rax, 0xd
jb 0x140120afc
lea rax, [rcx + 0xd]
mov qword [rbp + 0x40], rax
lea rbx, [rbp + 0x30]
cmp rdx, 0xf
cmova rbx, qword [rbp + 0x30]
add rbx, rcx
mov r8d, reloc.WS2_32.dll_listen
lea rdx, str._check_paid1
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + 0xd], 0
jmp 0x140120b1d
mov qword [rsp + 0x20], reloc.WS2_32.dll_listen
lea r9, str._check_paid1
xor r8d, r8d
mov edx, reloc.WS2_32.dll_listen
lea rcx, [rbp + 0x30]
call fcn.14006dfe0
lea rax, [rsp + 0x78]
mov qword [rsp + 0x40], rax
lea rdx, [rbp + 0x30]
lea rcx, [rsp + 0x78]
call fcn.1400df200
mov rbx, rax
lea rdx, [rbp + 0x90]
lea rcx, [rbp - 0x68]
call fcn.1400df200
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rbp + 0x50]
call fcn.140132de0
nop
lea rax, [rbp + 0x10]
mov qword [rbp], rax
lea rdx, [rbp + 0x50]
cmp qword [rbp + 0x68], 0xf
cmova rdx, qword [rbp + 0x50]
xorps xmm0, xmm0
movups xmmword [rbp + 0x10], xmm0
mov qword [rbp + 0x20], r12
mov qword [rbp + 0x28], r12
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rdx + r8], 0
jne 0x140120b85
lea rcx, [rbp + 0x10]
call fcn.14006d8c0
nop
lea rax, [rbp - 0x48]
mov qword [rsp + 0x40], rax
lea rdx, [0x140713ea8]
lea rcx, [rbp - 0x48]
call fcn.1400df200
mov rbx, rax
lea rdx, [0x140713e88]
lea rcx, [rsp + 0x58]
call fcn.1400df200
nop
lea r8, [rbp + 0x10]
mov rdx, rbx
mov rcx, rax
call fcn.14011f4e0
xor eax, 0xa5a5
mov edx, eax
shr eax, 8
movzx r8d, al
movzx eax, dl
movabs r15, 0xcbf29ce484222325
xor rax, r15
movabs r14, 0x100000001b3
imul rax, r14
xor r8, rax
imul r8, r14
mov eax, edx
shr eax, 0x10
movzx ecx, al
xor r8, rcx
imul r8, r14
shr rdx, 0x18
xor r8, rdx
imul r8, r14
cmp r8w, 0xdf7f
jne 0x140121227
mov qword [rbp - 0x10], r12
mov byte [rsp + 0x20], 0
mov r9b, 1
lea r8, [rbp - 0x48]
lea rdx, [rbp + 0x50]
lea rcx, [rbp + 0x10]
call fcn.14011b810
nop
mov byte [rsp + 0x48], 3
xorps xmm0, xmm0
movups xmmword [rbp], xmm0
mov ecx, 0x20
call fcn.14022485c
mov rbx, rax
lea rax, [rbp - 8]
mov qword [rbp], rax
mov qword [rbp + 8], rbx
lea rdx, [rsi + 0x20]
mov rcx, rbx
call fcn.1400df200
nop
mov qword [rsp + 0x50], rbx
mov dword [rsp + 0x34], 0x646972
mov dword [rsp + 0x30], 0x656e776f
mov byte [rsp + 0x38], 0
lea r9, [rbp - 8]
lea r8, [rsp + 0x37]
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0x58]
call fcn.14006d490
nop
movzx ecx, byte [rbp + 0x10]
test cl, cl
jne 0x140120ccd
mov byte [rbp + 0x10], 1
call fcn.140119e60
mov qword [rbp + 0x18], rax
movzx ecx, byte [rbp + 0x10]
jmp 0x140120cd1
mov rax, qword [rbp + 0x18]
cmp cl, 1
jne 0x140120ce5
lea rdx, [rsp + 0x58]
mov rcx, rax
call fcn.14011efd0
jmp 0x140120cea
mov rax, qword [rsp + 0x30]
lea rdx, [rsp + 0x48]
mov rcx, rax
call fcn.14011ec00
movzx ebx, al
mov rdx, qword [rsp + 0x70]
cmp rdx, 0xf
jbe 0x140120d3a
inc rdx
mov rcx, qword [rsp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140120d35
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140120d35
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140224898
movdqu xmmword [rsp + 0x68], xmm6
mov byte [rsp + 0x58], 0
movzx edx, byte [rsp + 0x48]
lea rcx, [rsp + 0x50]
call fcn.140126380
test bl, bl
jne 0x140120e09
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140120de6
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140120de6
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rbx]
add rdx, r10
mov r8d, 0xf232c12a
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140120de1
nop dword [rax]
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x140120dc0
cmp r8d, 0xd84696a2
je 0x140120deb
test r9d, r9d
jne 0x140120da0
mov rax, qword [rax]
jmp 0x140120d70
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r10
mov ecx, 8
call rdx
mov dword [rbp + 4], 0x656761
mov dword [rbp], 0x7373656d
mov byte [rbp + 8], 0
lea r9, [rbp - 8]
lea r8, [rbp + 7]
lea rdx, [rbp]
lea rcx, [rsp + 0x58]
call fcn.14006d490
nop
movzx ecx, byte [rbp + 0x10]
test cl, cl
jne 0x140120e4d
mov byte [rbp + 0x10], 1
call fcn.140119e60
mov qword [rbp + 0x18], rax
movzx ecx, byte [rbp + 0x10]
jmp 0x140120e51
mov rax, qword [rbp + 0x18]
cmp cl, 1
jne 0x140120e65
lea rdx, [rsp + 0x58]
mov rcx, rax
call fcn.14011efd0
jmp 0x140120e6a
mov rax, qword [rsp + 0x30]
xorps xmm0, xmm0
movups xmmword [rbp + 0x70], xmm0
movdqu xmmword [rbp + 0x80], xmm6
mov byte [rbp + 0x70], 0
mov dword [rsp + 0x40], 0x5fc
cmp byte [rax], 3
jne 0x140120e99
mov rdx, qword [rax + 8]
lea rax, [rbp + 0x70]
cmp rax, rdx
je 0x140120eb4
jmp 0x140120e9c
mov rdx, r12
mov r8, qword [rdx + 0x10]
cmp qword [rdx + 0x18], 0xf
jbe 0x140120eaa
mov rdx, qword [rdx]
lea rcx, [rbp + 0x70]
call fcn.14006ece0
nop
mov rdx, qword [rsp + 0x70]
cmp rdx, 0xf
jbe 0x140120ef4
inc rdx
mov rcx, qword [rsp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140120eef
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140120eef
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140224898
movdqu xmmword [rsp + 0x68], xmm6
mov byte [rsp + 0x58], 0
mov word [rsp + 0x43], 0x65
mov word [rsp + 0x40], 0x6f63
mov byte [rsp + 0x42], 0x64
mov byte [rsp + 0x45], 0
lea r9, [rbp - 8]
lea r8, [rsp + 0x44]
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x78]
call fcn.14006d490
nop
movzx ecx, byte [rbp + 0x10]
test cl, cl
jne 0x140120f4b
mov byte [rbp + 0x10], 1
call fcn.140119e60
mov qword [rbp + 0x18], rax
movzx ecx, byte [rbp + 0x10]
jmp 0x140120f4f
mov rax, qword [rbp + 0x18]
cmp cl, 1
jne 0x140120f63
lea rdx, [rsp + 0x78]
mov rcx, rax
call fcn.14011efd0
jmp 0x140120f68
mov rax, qword [rsp + 0x30]
mov rcx, rax
call fcn.140117200
mov edx, eax
shr eax, 8
movzx edi, al
movzx eax, dl
xor rax, r15
imul rax, r14
xor rdi, rax
imul rdi, r14
mov eax, edx
shr eax, 0x10
movzx ecx, al
xor rdi, rcx
imul rdi, r14
shr rdx, 0x18
xor rdi, rdx
imul rdi, r14
mov rdx, qword [rbp - 0x70]
cmp rdx, 0xf
jbe 0x140120fe2
inc rdx
mov rcx, qword [rsp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140120fdd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140120fdd
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140224898
mov dword [rsp + 0x34], 0x737365
mov dword [rsp + 0x30], 0x63637573
mov byte [rsp + 0x38], 0
lea r9, [rbp - 8]
lea r8, [rsp + 0x37]
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x68]
call fcn.14006d490
nop
mov ebx, 0x7bfd
mov dword [rsp + 0x40], ebx
movzx ecx, byte [rbp + 0x10]
test cl, cl
jne 0x140121033
mov byte [rbp + 0x10], 1
call fcn.140119e60
mov qword [rbp + 0x18], rax
movzx ecx, byte [rbp + 0x10]
jmp 0x140121037
mov rax, qword [rbp + 0x18]
cmp cl, 1
jne 0x14012104d
lea rdx, [rbp - 0x68]
mov rcx, rax
call fcn.14011efd0
mov rcx, rax
jmp 0x140121052
mov rcx, qword [rsp + 0x30]
lea rax, [rcx + 8]
cmp byte [rcx], 4
cmovne rax, r12
cmp byte [rax], 0
je 0x1401210fc
mov dword [rsp + 0x4c], 0x737365
mov dword [rsp + 0x48], 0x63637573
mov byte [rsp + 0x50], 0
lea r9, [rbp - 8]
lea r8, [rsp + 0x4f]
lea rdx, [rsp + 0x48]
lea rcx, [rsp + 0x78]
call fcn.14006d490
nop
mov ebx, 0x1fbff
mov dword [rsp + 0x40], ebx
movzx ecx, byte [rbp + 0x10]
test cl, cl
jne 0x1401210b8
mov byte [rbp + 0x10], 1
call fcn.140119e60
mov qword [rbp + 0x18], rax
movzx ecx, byte [rbp + 0x10]
jmp 0x1401210bc
mov rax, qword [rbp + 0x18]
cmp cl, 1
jne 0x1401210d3
lea rdx, [rsp + 0x78]
mov rcx, rax
call fcn.14011efd0
mov rcx, rax
jmp 0x1401210d8
mov rcx, qword [rsp + 0x30]
lea rax, [rcx + 8]
cmp byte [rcx], 4
cmovne rax, r12
cmp byte [rax], 0
je 0x1401210f7
movabs rax, 0xcbe5c873d26645f1
cmp rdi, rax
je 0x1401210fc
xor dil, dil
jmp 0x1401210ff
mov dil, 1
test bl, 2
je 0x140121112
and ebx, 0xfffffffd
lea rcx, [rsp + 0x78]
call fcn.14006ead0
nop
test bl, 1
je 0x140121120
lea rcx, [rbp - 0x68]
call fcn.14006ead0
test dil, dil
je 0x140121143
lea rdx, [rbp + 0x10]
lea rcx, [rsp + 0x48]
call fcn.14011de50
mov rdx, rax
mov rcx, rsi
call fcn.14012ee30
jmp 0x1401211fa
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop dword [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x1401211d6
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x1401211d6
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
mov r8d, 0x26849205
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x1401211d1
nop
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x1401211b0
cmp r8d, 0x64a73ec5
je 0x1401211db
test r9d, r9d
jne 0x140121190
mov rax, qword [rax]
jmp 0x140121160
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r10
mov ecx, 9
call rdx
nop
mov r8, qword [rbp + 0x88]
cmp r8, 0xf
jbe 0x140121215
mov rdx, qword [rbp + 0x70]
lea rcx, [rbp + 0x70]
call fcn.1400ea290
nop
movzx edx, byte [rbp + 0x10]
lea rcx, [rbp + 0x18]
call fcn.140126380
jmp 0x1401212da
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x1401212b6
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x1401212b6
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [rbx + r9*4]
mov ecx, dword [rcx + r10]
add rcx, r10
mov r8d, 0x7c4d7df4
movzx edx, byte [rcx]
inc rcx
test dl, dl
je 0x1401212b1
nop
movsx edx, dl
xor edx, r8d
imul r8d, edx, 0x1000193
movzx edx, byte [rcx]
lea rcx, [rcx + 1]
test dl, dl
jne 0x140121290
cmp r8d, 0x5de66104
je 0x1401212bb
test r9d, r9d
jne 0x140121270
mov rax, qword [rax]
jmp 0x140121240
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r10
mov ecx, 7
call rdx
nop
mov rdx, qword [rbp + 0x68]
cmp rdx, 0xf
jbe 0x140121318
inc rdx
mov rcx, qword [rbp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140121313
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140121313
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140224898
movdqu xmmword [rbp + 0x60], xmm6
mov byte [rbp + 0x50], 0
mov rdx, qword [rbp + 0x48]
cmp rdx, 0xf
jbe 0x14012135f
inc rdx
mov rcx, qword [rbp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14012135a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14012135a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140224898
mov qword [rbp + 0x40], r12
mov qword [rbp + 0x48], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x30], 0
mov rdx, qword [rbp + 0xa8]
cmp rdx, 0xf
jbe 0x1401213b3
inc rdx
mov rcx, qword [rbp + 0x90]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401213ae
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1401213ae
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140224898
mov rcx, qword [rbp + 0xb0]
xor rcx, rsp
call fcn.140225440
lea r11, [rsp + 0x1d0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rbp
ret