Function at 0x1401172a0
Capabilities:
Connect to wmi namespace via wbemlocator
Encode data using xor

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rdx
mov qword [rax + 8], rcx
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x128]
sub rsp, 0x1e8
movaps xmmword [rax - 0x58], xmm6
movaps xmmword [rax - 0x68], xmm7
mov r12, rdx
mov rbx, rcx
xor r13d, r13d
mov dword [rbp + 0x68], r13d
mov qword [rcx], r13
mov qword [rcx + 8], r13
mov qword [rcx + 0x10], r13
lea rdi, [rcx + 0x20]
xorps xmm0, xmm0
movups xmmword [rdi], xmm0
mov qword [rdi + 0x10], r13
mov qword [rdi + 0x18], 7
mov word [rdi], r13w
mov dword [rbp + 0x68], 1
mov dword [rcx + 0x18], r13d
mov rax, rdi
cmp qword [rdi + 0x18], 7
jbe 0x140117317
mov rax, qword [rdi]
mov qword [rdi + 0x10], r13
mov word [rax], r13w
mov qword [rbp + 0x58], r13
mov qword [rbp + 0x48], r13
mov qword [rbp + 0x60], r13
mov qword [rbp + 0x18], r13
xor edx, edx
xor ecx, ecx
call qword [sym.imp.ole32.dll_CoInitializeEx]
test eax, eax
jns 0x140117619
mov dword [rbx + 0x18], 3
mov edx, eax
lea rcx, [rsp + 0x50]
call fcn.14011f380
mov r10, rax
movups xmm0, xmmword [0x1402cc3b0]
movups xmmword [rbp - 0x70], xmm0
movups xmm1, xmmword [0x1402cc3c0]
movups xmmword [rbp - 0x60], xmm1
movups xmm0, xmmword [0x1402cc3d0]
movups xmmword [rbp - 0x50], xmm0
movups xmm1, xmmword [0x1402cc3e0]
movups xmmword [rbp - 0x40], xmm1
movups xmm0, xmmword [0x1402cc3f0]
movups xmmword [rbp - 0x30], xmm0
movups xmm1, xmmword [0x1402cc400]
movups xmmword [rbp - 0x20], xmm1
cmp dword [reloc.WS2_32.dll_accept], 2
jl 0x1401174b7
movdqa xmm5, xmmword [0x14027d080]
mov edx, r13d
movdqa xmm4, xmmword [0x1402cc880]
movdqa xmm6, xmmword [str.4444]
movdqa xmm7, xmmword [0x1402cc860]
lea rcx, [rbp - 0x70]
nop dword [rax]
movd xmm2, edx
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm7
paddw xmm3, xmm2
movq xmm0, qword [rcx]
xorps xmm3, xmm0
movq qword [rcx], xmm3
lea eax, [rdx + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm7
paddw xmm3, xmm2
movq xmm0, qword [rcx + 8]
xorps xmm3, xmm0
movq qword [rcx + 8], xmm3
add edx, 8
lea rcx, [rcx + 0x10]
cmp edx, 0x30
jl 0x1401173d0
jmp 0x1401174f4
lea r9, [rbp - 0x70]
mov r8d, r13d
nop
mov eax, 0x4ec4ec4f
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movzx eax, dx
imul ecx, eax, 0x34
movzx eax, r8w
sub ax, cx
add ax, 0x33
xor word [r9], ax
inc r8d
lea r9, [r9 + 2]
cmp r8d, 0x30
jl 0x1401174c0
mov r8, r10
lea rdx, [rbp - 0x70]
lea rcx, [rsp + 0x70]
call fcn.140114ec0
mov rsi, rax
cmp rdi, rax
je 0x140117576
mov rdx, qword [rdi + 0x18]
cmp rdx, 7
jbe 0x140117548
mov rcx, qword [rdi]
lea rdx, [rdx*2 + 2]
cmp rdx, 0x1000
jb 0x140117543
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1401175ae
mov rcx, r8
call fcn.140268570
mov qword [rdi + 0x10], r13
mov qword [rdi + 0x18], 7
mov word [rdi], r13w
movups xmm0, xmmword [rsi]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsi + 0x10]
movups xmmword [rdi + 0x10], xmm1
mov qword [rsi + 0x10], r13
mov qword [rsi + 0x18], 7
mov word [rsi], r13w
mov rdx, qword [rbp - 0x78]
cmp rdx, 7
jbe 0x1401175ba
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401175b5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1401175b5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140268570
movdqa xmm0, xmmword [0x1402cbb00]
movdqu xmmword [rbp - 0x80], xmm0
mov word [rsp + 0x70], r13w
mov rdx, qword [rsp + 0x68]
cmp rdx, 7
jbe 0x1401188d6
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401188d1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1401188d1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov qword [rsp + 0x40], r13
mov dword [rsp + 0x38], r13d
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], 3
mov dword [rsp + 0x20], r13d
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 - 1]
xor ecx, ecx
call qword [sym.imp.ole32.dll_CoInitializeSecurity]
test eax, eax
jns 0x14011794d
mov dword [rbx + 0x18], 4
mov edx, eax
lea rcx, [rsp + 0x50]
call fcn.14011f380
mov r10, rax
movups xmm0, xmmword [0x1402cc410]
movups xmmword [rbp - 0x70], xmm0
movups xmm1, xmmword [0x1402cc420]
movups xmmword [rbp - 0x60], xmm1
movups xmm0, xmmword [0x1402cc430]
movups xmmword [rbp - 0x50], xmm0
movups xmm1, xmmword [0x1402cc440]
movups xmmword [rbp - 0x40], xmm1
movups xmm0, xmmword [str._:_w_6__g_]
movups xmmword [rbp - 0x30], xmm0
movsd xmm0, qword [0x1402cc460]
movsd qword [rbp - 0x20], xmm0
movzx eax, word [0x1402cc468]
mov word [rbp - 0x18], ax
mov r8d, r13d
cmp dword [reloc.WS2_32.dll_accept], 2
jl 0x1401177df
movdqa xmm5, xmmword [0x14027d080]
movdqa xmm4, xmmword [0x1402cc880]
movdqa xmm6, xmmword [str.4444]
movdqa xmm7, xmmword [0x1402cc860]
lea rcx, [rbp - 0x70]
nop dword [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm7
paddw xmm3, xmm2
movq xmm0, qword [rcx]
xorps xmm3, xmm0
movq qword [rcx], xmm3
lea eax, [r8 + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm7
paddw xmm3, xmm2
movq xmm0, qword [rcx + 8]
xorps xmm3, xmm0
movq qword [rcx + 8], xmm3
add r8d, 8
lea rcx, [rcx + 0x10]
cmp r8d, 0x28
jl 0x1401176f0
cmp r8d, 0x2d
jge 0x140117824
movsxd rax, r8d
lea r9, [rbp - 0x70]
lea r9, [r9 + rax*2]
nop word [rax + rax]
mov eax, 0x4ec4ec4f
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movzx eax, dx
imul ecx, eax, 0x34
movzx eax, r8w
sub ax, cx
add ax, 0x33
xor word [r9], ax
inc r8d
lea r9, [r9 + 2]
cmp r8d, 0x2d
jl 0x1401177f0
mov r8, r10
lea rdx, [rbp - 0x70]
lea rcx, [rsp + 0x70]
call fcn.140114ec0
mov rsi, rax
lea rdi, [rbx + 0x20]
cmp rdi, rax
je 0x1401178aa
mov rdx, qword [rdi + 0x18]
cmp rdx, 7
jbe 0x14011787c
mov rcx, qword [rdi]
lea rdx, [rdx*2 + 2]
cmp rdx, 0x1000
jb 0x140117877
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1401178e2
mov rcx, r8
call fcn.140268570
mov qword [rdi + 0x10], r13
mov qword [rdi + 0x18], 7
mov word [rdi], r13w
movups xmm0, xmmword [rsi]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsi + 0x10]
movups xmmword [rdi + 0x10], xmm1
mov qword [rsi + 0x10], r13
mov qword [rsi + 0x18], 7
mov word [rsi], r13w
mov rdx, qword [rbp - 0x78]
cmp rdx, 7
jbe 0x1401178ee
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401178e9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1401178e9
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140268570
movdqa xmm0, xmmword [0x1402cbb00]
movdqu xmmword [rbp - 0x80], xmm0
mov word [rsp + 0x70], r13w
mov rdx, qword [rsp + 0x68]
cmp rdx, 7
jbe 0x1401188d6
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401188d1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1401188d1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
lea rax, [rbp + 0x58]
mov qword [rsp + 0x20], rax
lea r9, [0x140302d98]
xor edx, edx
lea r8d, [rdx + 1]
lea rcx, [0x140302da8]
call qword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
jns 0x140117c6d
mov dword [rbx + 0x18], 5
mov edx, eax
lea rcx, [rsp + 0x50]
call fcn.14011f380
mov r10, rax
movups xmm0, xmmword [str.uUZR_]
movups xmmword [rbp - 0x70], xmm0
movups xmm1, xmmword [0x1402cc480]
movups xmmword [rbp - 0x60], xmm1
movups xmm0, xmmword [0x1402cc490]
movups xmmword [rbp - 0x50], xmm0
movups xmm1, xmmword [0x1402cc4a0]
movups xmmword [rbp - 0x40], xmm1
movups xmm0, xmmword [0x1402cc4b0]
movups xmmword [rbp - 0x30], xmm0
movups xmm1, xmmword [0x1402cc4c0]
movups xmmword [rbp - 0x20], xmm1
movsd xmm0, qword [0x1402cc4d0]
movsd qword [rbp - 0x10], xmm0
mov r8d, r13d
cmp dword [reloc.WS2_32.dll_accept], 2
jl 0x140117b00
movdqa xmm5, xmmword [0x14027d080]
movdqa xmm4, xmmword [0x1402cc880]
movdqa xmm6, xmmword [str.4444]
movdqa xmm7, xmmword [0x1402cc860]
lea rcx, [rbp - 0x70]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm7
paddw xmm3, xmm2
movq xmm0, qword [rcx]
xorps xmm3, xmm0
movq qword [rcx], xmm3
lea eax, [r8 + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm7
paddw xmm3, xmm2
movq xmm0, qword [rcx + 8]
xorps xmm3, xmm0
movq qword [rcx + 8], xmm3
add r8d, 8
lea rcx, [rcx + 0x10]
cmp r8d, 0x30
jl 0x140117a11
cmp r8d, 0x34
jge 0x140117b44
movsxd rax, r8d
lea r9, [rbp - 0x70]
lea r9, [r9 + rax*2]
nop dword [rax + rax]
mov eax, 0x4ec4ec4f
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movzx eax, dx
imul ecx, eax, 0x34
movzx eax, r8w
sub ax, cx
add ax, 0x33
xor word [r9], ax
inc r8d
lea r9, [r9 + 2]
cmp r8d, 0x34
jl 0x140117b10
mov r8, r10
lea rdx, [rbp - 0x70]
lea rcx, [rsp + 0x70]
call fcn.140114ec0
mov rsi, rax
lea rdi, [rbx + 0x20]
cmp rdi, rax
je 0x140117bca
mov rdx, qword [rdi + 0x18]
cmp rdx, 7
jbe 0x140117b9c
mov rcx, qword [rdi]
lea rdx, [rdx*2 + 2]
cmp rdx, 0x1000
jb 0x140117b97
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140117c02
mov rcx, r8
call fcn.140268570
mov qword [rdi + 0x10], r13
mov qword [rdi + 0x18], 7
mov word [rdi], r13w
movups xmm0, xmmword [rsi]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsi + 0x10]
movups xmmword [rdi + 0x10], xmm1
mov qword [rsi + 0x10], r13
mov qword [rsi + 0x18], 7
mov word [rsi], r13w
mov rdx, qword [rbp - 0x78]
cmp rdx, 7
jbe 0x140117c0e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140117c09
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140117c09
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140268570
movdqa xmm0, xmmword [0x1402cbb00]
movdqu xmmword [rbp - 0x80], xmm0
mov word [rsp + 0x70], r13w
mov rdx, qword [rsp + 0x68]
cmp rdx, 7
jbe 0x1401188d6
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401188d1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1401188d1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rax, qword [rbp + 0x58]
mov rcx, qword [rax]
mov rsi, qword [rcx + 0x18]
movups xmm0, xmmword [0x1402cc4d8]
movups xmmword [rbp + 0x2e], xmm0
mov ecx, dword [0x1402cc4e8]
mov dword [rbp + 0x3e], ecx
movzx eax, word [0x1402cc4ec]
mov edx, WSAStartup
mov word [rbp + 0x2e], dx
xor word [rbp + 0x30], 0x34
xor word [rbp + 0x32], 0x35
xor word [rbp + 0x34], 0x36
xor word [rbp + 0x36], 0x37
xor word [rbp + 0x38], 0x38
xor word [rbp + 0x3a], 0x39
xor word [rbp + 0x3c], 0x3a
xor cx, 0x3b
mov word [rbp + 0x3e], cx
xor word [rbp + 0x40], 0x3c
xor ax, 0x3d
mov word [rbp + 0x42], ax
lea ecx, [rdx - 0x5a]
call fcn.140268aec
mov rdi, rax
mov qword [rbp + 0x140], rax
test rax, rax
je 0x140117d0e
mov qword [rax + 8], r13
mov dword [rax + 0x10], 1
lea rcx, [rbp + 0x2e]
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rdi], rax
test rax, rax
je 0x14011965c
jmp 0x140117d11
mov rdi, r13
mov qword [rbp + 0x148], rdi
test rdi, rdi
je 0x140119672
lea rax, [rbp + 0x48]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], r13
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], r13d
mov qword [rsp + 0x20], r13
xor r9d, r9d
xor r8d, r8d
mov rdx, qword [rdi]
mov rcx, qword [rbp + 0x58]
call rsi
mov esi, eax
mov ecx, 0xffffffff
lock xadd dword [rdi + 0x10], ecx
cmp ecx, 1
jne 0x140117d8e
mov rcx, qword [rdi]
test rcx, rcx
je 0x140117d6f
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rdi], r13
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x140117d81
call fcn.140268570
mov qword [rdi + 8], r13
mov edx, Ordinal_26
mov rcx, rdi
call fcn.140268570
test esi, esi
jns 0x14011808d
mov dword [rbx + 0x18], 6
mov edx, esi
lea rcx, [rsp + 0x50]
call fcn.14011f380
mov r10, rax
movups xmm0, xmmword [0x1402cc4f0]
movups xmmword [rbp - 0x70], xmm0
movups xmm1, xmmword [0x1402cc500]
movups xmmword [rbp - 0x60], xmm1
movups xmm0, xmmword [0x1402cc510]
movups xmmword [rbp - 0x50], xmm0
movups xmm1, xmmword [0x1402cc520]
movups xmmword [rbp - 0x40], xmm1
movups xmm0, xmmword [0x1402cc530]
movups xmmword [rbp - 0x30], xmm0
movups xmm1, xmmword [0x1402cc540]
movups xmmword [rbp - 0x20], xmm1
mov eax, dword [0x1402cc550]
mov dword [rbp - 0x10], eax
mov r8d, r13d
cmp dword [reloc.WS2_32.dll_accept], 2
jl 0x140117f1f
movdqa xmm5, xmmword [0x14027d080]
movdqa xmm4, xmmword [0x1402cc880]
movdqa xmm6, xmmword [str.4444]
movdqa xmm7, xmmword [0x1402cc860]
lea rcx, [rbp - 0x70]
nop dword [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm7
paddw xmm3, xmm2
movq xmm0, qword [rcx]
xorps xmm3, xmm0
movq qword [rcx], xmm3
lea eax, [r8 + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm7
paddw xmm3, xmm2
movq xmm0, qword [rcx + 8]
xorps xmm3, xmm0
movq qword [rcx + 8], xmm3
add r8d, 8
lea rcx, [rcx + 0x10]
cmp r8d, 0x30
jl 0x140117e30
cmp r8d, 0x32
jge 0x140117f64
movsxd rax, r8d
lea r9, [rbp - 0x70]
lea r9, [r9 + rax*2]
nop word [rax + rax]
mov eax, 0x4ec4ec4f
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movzx eax, dx
imul ecx, eax, 0x34
movzx eax, r8w
sub ax, cx
add ax, 0x33
xor word [r9], ax
inc r8d
lea r9, [r9 + 2]
cmp r8d, 0x32
jl 0x140117f30
mov r8, r10
lea rdx, [rbp - 0x70]
lea rcx, [rsp + 0x70]
call fcn.140114ec0
mov rsi, rax
lea rdi, [rbx + 0x20]
cmp rdi, rax
je 0x140117fea
mov rdx, qword [rdi + 0x18]
cmp rdx, 7
jbe 0x140117fbc
mov rcx, qword [rdi]
lea rdx, [rdx*2 + 2]
cmp rdx, 0x1000
jb 0x140117fb7
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140118022
mov rcx, r8
call fcn.140268570
mov qword [rdi + 0x10], r13
mov qword [rdi + 0x18], 7
mov word [rdi], r13w
movups xmm0, xmmword [rsi]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsi + 0x10]
movups xmmword [rdi + 0x10], xmm1
mov qword [rsi + 0x10], r13
mov qword [rsi + 0x18], 7
mov word [rsi], r13w
mov rdx, qword [rbp - 0x78]
cmp rdx, 7
jbe 0x14011802e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140118029
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140118029
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140268570
movdqa xmm0, xmmword [0x1402cbb00]
movdqu xmmword [rbp - 0x80], xmm0
mov word [rsp + 0x70], r13w
mov rdx, qword [rsp + 0x68]
cmp rdx, 7
jbe 0x1401188d6
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401188d1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1401188d1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov dword [rsp + 0x38], r13d
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], 3
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 0xa]
mov rcx, qword [rbp + 0x48]
call qword [sym.imp.ole32.dll_CoSetProxyBlanket]
test eax, eax
jns 0x1401183bd
mov dword [rbx + 0x18], 7
mov edx, eax
lea rcx, [rsp + 0x50]
call fcn.14011f380
mov r10, rax
movups xmm0, xmmword [str.p__ZS]
movups xmmword [rbp - 0x70], xmm0
movups xmm1, xmmword [0x1402cc570]
movups xmmword [rbp - 0x60], xmm1
movups xmm0, xmmword [0x1402cc580]
movups xmmword [rbp - 0x50], xmm0
movups xmm1, xmmword [0x1402cc590]
movups xmmword [rbp - 0x40], xmm1
movups xmm0, xmmword [0x1402cc5a0]
movups xmmword [rbp - 0x30], xmm0
mov eax, dword [0x1402cc5b0]
mov dword [rbp - 0x20], eax
movzx eax, word [0x1402cc5b4]
mov word [rbp - 0x1c], ax
mov r8d, r13d
cmp dword [reloc.WS2_32.dll_accept], 2
jl 0x14011824f
movdqa xmm5, xmmword [0x14027d080]
movdqa xmm4, xmmword [0x1402cc880]
movdqa xmm6, xmmword [str.4444]
movdqa xmm7, xmmword [0x1402cc860]
lea rcx, [rbp - 0x70]
nop dword [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm7
paddw xmm3, xmm2
movq xmm0, qword [rcx]
xorps xmm3, xmm0
movq qword [rcx], xmm3
lea eax, [r8 + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm7
paddw xmm3, xmm2
movq xmm0, qword [rcx + 8]
xorps xmm3, xmm0
movq qword [rcx + 8], xmm3
add r8d, 8
lea rcx, [rcx + 0x10]
cmp r8d, 0x28
jl 0x140118160
cmp r8d, 0x2b
jge 0x140118294
movsxd rax, r8d
lea r9, [rbp - 0x70]
lea r9, [r9 + rax*2]
nop word [rax + rax]
mov eax, 0x4ec4ec4f
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movzx eax, dx
imul ecx, eax, 0x34
movzx eax, r8w
sub ax, cx
add ax, 0x33
xor word [r9], ax
inc r8d
lea r9, [r9 + 2]
cmp r8d, 0x2b
jl 0x140118260
mov r8, r10
lea rdx, [rbp - 0x70]
lea rcx, [rsp + 0x70]
call fcn.140114ec0
mov rsi, rax
lea rdi, [rbx + 0x20]
cmp rdi, rax
je 0x14011831a
mov rdx, qword [rdi + 0x18]
cmp rdx, 7
jbe 0x1401182ec
mov rcx, qword [rdi]
lea rdx, [rdx*2 + 2]
cmp rdx, 0x1000
jb 0x1401182e7
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140118352
mov rcx, r8
call fcn.140268570
mov qword [rdi + 0x10], r13
mov qword [rdi + 0x18], 7
mov word [rdi], r13w
movups xmm0, xmmword [rsi]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsi + 0x10]
movups xmmword [rdi + 0x10], xmm1
mov qword [rsi + 0x10], r13
mov qword [rsi + 0x18], 7
mov word [rsi], r13w
mov rdx, qword [rbp - 0x78]
cmp rdx, 7
jbe 0x14011835e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140118359
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140118359
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140268570
movdqa xmm0, xmmword [0x1402cbb00]
movdqu xmmword [rbp - 0x80], xmm0
mov word [rsp + 0x70], r13w
mov rdx, qword [rsp + 0x68]
cmp rdx, 7
jbe 0x1401188d6
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401188d1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1401188d1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rax, qword [rbp + 0x48]
mov rcx, qword [rax]
mov r14, qword [rcx + 0xa0]
mov rsi, r12
cmp qword [r12 + 0x18], 7
jbe 0x1401183da
mov rsi, qword [r12]
mov ecx, Ordinal_26
call fcn.140268aec
mov rdi, rax
mov qword [rbp + 0x88], rax
test rax, rax
je 0x14011841a
mov qword [rax + 8], r13
mov dword [rax + 0x10], 1
mov rcx, rsi
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rdi], rax
test rax, rax
jne 0x14011841d
test rsi, rsi
jne 0x140119667
jmp 0x14011841d
mov rdi, r13
mov qword [rbp + 0x98], rdi
test rdi, rdi
je 0x140119651
mov rsi, qword [rdi]
mov eax, dword [str.dey6]
mov dword [rbp + 0x140], eax
mov r15d, dword [reloc.WS2_32.dll_accept]
cmp byte [0x1402cc5bb], 0
je 0x140118520
cmp r15d, 2
jl 0x1401184da
movdqa xmm3, xmmword [0x14027d080]
movdqa xmm2, xmm3
punpckldq xmm2, xmm3
pmuldq xmm2, xmmword [0x1402cc880]
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmmword [0x1402cc880]
shufps xmm2, xmm0, 0xdd
psrad xmm2, 4
movdqa xmm0, xmm2
psrld xmm0, 0x1f
paddd xmm0, xmm2
pmulld xmm0, xmmword [str.4444]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1402cbc10]
packuswb xmm2, xmm2
paddb xmm2, xmmword [0x1402cc870]
movd xmm0, eax
xorps xmm2, xmm0
movd dword [rbp + 0x140], xmm2
jmp 0x140118520
lea r9, [rbp + 0x140]
mov r8d, r13d
nop dword [rax]
nop dword [rax + rax]
mov eax, 0x4ec4ec4f
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x34
movzx eax, r8b
sub al, cl
add al, 0x33
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 4
jl 0x1401184f0
lea rdx, [rbp + 0x140]
lea rcx, [rbp + 0x90]
call fcn.1401160c0
nop
mov rcx, qword [rax]
test rcx, rcx
je 0x140118541
mov rdx, qword [rcx]
jmp 0x140118544
mov rdx, r13
lea rax, [rbp + 0x60]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r13
mov r9d, Ordinal_50
mov r8, rsi
mov rcx, qword [rbp + 0x48]
call r14
mov r14d, eax
mov rsi, qword [rbp + 0x90]
test rsi, rsi
je 0x1401185bc
mov ecx, 0xffffffff
lock xadd dword [rsi + 0x10], ecx
cmp ecx, 1
jne 0x1401185b5
test rsi, rsi
je 0x1401185b5
mov rcx, qword [rsi]
test rcx, rcx
je 0x140118596
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rsi], r13
mov rcx, qword [rsi + 8]
test rcx, rcx
je 0x1401185a8
call fcn.140268570
mov qword [rsi + 8], r13
mov edx, Ordinal_26
mov rcx, rsi
call fcn.140268570
mov qword [rbp + 0x90], r13
mov eax, 0xffffffff
lock xadd dword [rdi + 0x10], eax
cmp eax, 1
jne 0x1401185fb
mov rcx, qword [rdi]
test rcx, rcx
je 0x1401185dc
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rdi], r13
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x1401185ee
call fcn.140268570
mov qword [rdi + 8], r13
mov edx, Ordinal_26
mov rcx, rdi
call fcn.140268570
test r14d, r14d
jns 0x140118955
mov dword [rbx + 0x18], 1
mov edx, r14d
lea rcx, [rsp + 0x50]
call fcn.14011f380
mov r10, rax
movups xmm0, xmmword [0x1402cc5c0]
movups xmmword [rbp - 0x70], xmm0
movups xmm1, xmmword [0x1402cc5d0]
movups xmmword [rbp - 0x60], xmm1
movups xmm0, xmmword [0x1402cc5e0]
movups xmmword [rbp - 0x50], xmm0
movzx ecx, word [0x1402cc5f0]
mov word [rbp - 0x40], cx
mov r8d, r13d
cmp r15d, 2
jl 0x14011876f
movdqa xmm5, xmmword [0x14027d080]
movdqa xmm4, xmmword [0x1402cc880]
movdqa xmm6, xmmword [str.4444]
movdqa xmm7, xmmword [0x1402cc860]
lea rcx, [rbp - 0x70]
nop dword [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm7
paddw xmm3, xmm2
movq xmm0, qword [rcx]
xorps xmm3, xmm0
movq qword [rcx], xmm3
lea eax, [r8 + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm7
paddw xmm3, xmm2
movq xmm0, qword [rcx + 8]
xorps xmm3, xmm0
movq qword [rcx + 8], xmm3
add r8d, 8
lea rcx, [rcx + 0x10]
cmp r8d, 0x18
jl 0x140118680
cmp r8d, 0x19
jge 0x1401187b4
movsxd rax, r8d
lea r9, [rbp - 0x70]
lea r9, [r9 + rax*2]
nop word [rax + rax]
mov eax, 0x4ec4ec4f
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movzx eax, dx
imul ecx, eax, 0x34
movzx eax, r8w
sub ax, cx
add ax, 0x33
xor word [r9], ax
inc r8d
lea r9, [r9 + 2]
cmp r8d, 0x19
jl 0x140118780
mov r8, r10
lea rdx, [rbp - 0x70]
lea rcx, [rsp + 0x70]
call fcn.140114ec0
mov rsi, rax
lea rdi, [rbx + 0x20]
cmp rdi, rax
je 0x14011883a
mov rdx, qword [rdi + 0x18]
cmp rdx, 7
jbe 0x14011880c
mov rcx, qword [rdi]
lea rdx, [rdx*2 + 2]
cmp rdx, 0x1000
jb 0x140118807
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140118872
mov rcx, r8
call fcn.140268570
mov qword [rdi + 0x10], r13
mov qword [rdi + 0x18], 7
mov word [rdi], r13w
movups xmm0, xmmword [rsi]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsi + 0x10]
movups xmmword [rdi + 0x10], xmm1
mov qword [rsi + 0x10], r13
mov qword [rsi + 0x18], 7
mov word [rsi], r13w
mov rdx, qword [rbp - 0x78]
cmp rdx, 7
jbe 0x14011887e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140118879
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140118879
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140268570
movdqa xmm0, xmmword [0x1402cbb00]
movdqu xmmword [rbp - 0x80], xmm0
mov word [rsp + 0x70], r13w
mov rdx, qword [rsp + 0x68]
cmp rdx, 7
jbe 0x1401188d6
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401188d1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1401188d1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140268570
lea rcx, [rbp + 0xa0]
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
mov rcx, qword [rbp + 0x18]
test rcx, rcx
je 0x1401188f2
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rbp + 0x48]
test rcx, rcx
je 0x140118901
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rbp + 0x58]
test rcx, rcx
je 0x140118910
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rbp + 0x60]
test rcx, rcx
je 0x14011891f
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
call qword [sym.imp.ole32.dll_CoUninitialize]
nop
mov rcx, r12
call fcn.1400aacb0
mov rax, rbx
movaps xmm6, xmmword [rsp + 0x1d0]
movaps xmm7, xmmword [rsp + 0x1c0]
add rsp, 0x1e8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
mov qword [rbp + 0x18], r13
mov dword [rbp + 0x148], r13d
mov rcx, qword [rbp + 0x60]
test rcx, rcx
je 0x1401188d6
mov esi, 0x56
lea r14d, [rsi - 0x12]
nop word [rax + rax]
mov rax, qword [rcx]
lea rdx, [rbp + 0x148]
mov qword [rsp + 0x20], rdx
lea r9, [rbp + 0x18]
mov edx, 0xffffffff
lea r8d, [rdx + 2]
call qword [rax + reloc.WLDAP32.dll_Ordinal_32]
cmp dword [rbp + 0x148], 0
je 0x1401188d6
test eax, eax
js 0x1401188d6
mov r10, qword [rbp + 0x18]
mov rax, qword [r10]
mov r11, qword [rax + 0x20]
movups xmm7, xmmword [str.wQFUEQINRSS_ed6wQWCP8]
movups xmmword [rbp - 0x70], xmm7
movsd xmm0, qword [0x1402cc608]
movsd qword [rbp - 0x60], xmm0
cmp word [0x1402cc60e], 0
je 0x140118b24
mov r8d, r13d
cmp r15d, 2
jl 0x140118ad9
movdqa xmm4, xmmword [0x1402cc880]
movdqa xmm6, xmmword [0x1402cc860]
movdqa xmm2, xmmword [0x14027d080]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [str.4444]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm6
paddw xmm3, xmm2
movq xmm1, xmm7
xorps xmm3, xmm1
movq qword [rbp - 0x70], xmm3
movdqa xmm2, xmmword [0x1402cbb90]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [str.4444]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm6
paddw xmm3, xmm2
movq xmm0, qword [rbp - 0x68]
xorps xmm3, xmm0
movq qword [rbp - 0x68], xmm3
mov r8d, 8
movsxd rax, r8d
lea r9, [rbp - 0x70]
lea r9, [r9 + rax*2]
nop dword [rax]
nop dword [rax + rax]
mov eax, 0x4ec4ec4f
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movzx eax, dx
imul ecx, eax, 0x34
movzx eax, r8w
sub ax, cx
add ax, 0x33
xor word [r9], ax
inc r8d
lea r9, [r9 + 2]
cmp r8d, 0xc
jl 0x140118af0
mov qword [rsp + 0x28], r13
mov qword [rsp + 0x20], r13
lea r9, [rbp + 0x70]
xor r8d, r8d
lea rdx, [rbp - 0x70]
mov rcx, r10
call r11
mov edi, eax
mov rcx, qword [rbp + 0x78]
call qword [sym.imp.OLEAUT32.dll_VariantInit]
mov r8d, eax
xorps xmm0, xmm0
movups xmmword [rsp + 0x70], xmm0
mov qword [rbp - 0x80], r13
mov qword [rbp - 0x78], r13
mov rdx, qword [rbp + 0x78]
lea rcx, [rsp + 0x70]
call fcn.1400886d0
nop
mov rcx, qword [0x1402cc610]
mov qword [rbp + 0x50], rcx
cmp word [0x1402cc616], 0
je 0x140118c44
cmp r15d, 2
jl 0x140118bff
movdqa xmm3, xmmword [0x14027d080]
movdqa xmm2, xmm3
punpckldq xmm2, xmm3
pmuldq xmm2, xmmword [0x1402cc880]
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmmword [0x1402cc880]
shufps xmm2, xmm0, 0xdd
psrad xmm2, 4
movdqa xmm0, xmm2
psrld xmm0, 0x1f
paddd xmm0, xmm2
pmulld xmm0, xmmword [str.4444]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
paddw xmm2, xmmword [0x1402cc860]
movq xmm0, qword [rbp + 0x50]
xorps xmm2, xmm0
movq qword [rbp + 0x50], xmm2
jmp 0x140118c44
lea r9, [rbp + 0x50]
mov r8d, r13d
nop word [rax + rax]
mov eax, 0x4ec4ec4f
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movzx eax, dx
imul ecx, eax, 0x34
movzx eax, r8w
sub ax, cx
add ax, 0x33
xor word [r9], ax
inc r8d
lea r9, [r9 + 2]
cmp r8d, 4
jl 0x140118c10
xor r8d, r8d
lea rdx, [rbp + 0x50]
lea rcx, [rsp + 0x70]
call fcn.140117190
cmp rax, 0xffffffffffffffff
jne 0x1401195f4
movsd xmm0, qword [0x1402cc618]
movsd qword [rbp - 8], xmm0
mov eax, dword [0x1402cc620]
mov dword [rbp], eax
cmp word [0x1402cc622], 0
je 0x140118c9d
mov word [rbp - 8], r14w
xor word [rbp - 6], 0x34
xor word [rbp - 4], 0x35
xor word [rbp - 2], 0x36
xor word [rbp], 0x37
xor word [rbp + 2], 0x38
xor r8d, r8d
lea rdx, [rbp - 8]
lea rcx, [rsp + 0x70]
call fcn.140117190
cmp rax, 0xffffffffffffffff
jne 0x1401195f4
movsd xmm0, qword [str.eyBWE_9]
movsd qword [rbp + 0x20], xmm0
mov ecx, dword [0x1402cc630]
mov dword [rbp + 0x28], ecx
movzx eax, word [reloc.WS2_32.dll_gethostname]
mov word [rbp + 0x20], si
xor word [rbp + 0x22], 0x34
xor word [rbp + 0x24], 0x35
xor word [rbp + 0x26], 0x36
xor cx, 0x37
mov word [rbp + 0x28], cx
xor word [rbp + 0x2a], 0x38
xor ax, 0x39
mov word [rbp + 0x2c], ax
xor r8d, r8d
lea rdx, [rbp + 0x20]
lea rcx, [rsp + 0x70]
call fcn.140117190
cmp rax, 0xffffffffffffffff
jne 0x1401195f4
movups xmm0, xmmword [str.e_GBBYUxTD]
movups xmmword [rbp - 0x70], xmm0
mov ecx, dword [0x1402cc648]
mov dword [rbp - 0x60], ecx
movzx eax, word [0x1402cc64c]
mov word [rbp - 0x70], si
xor word [rbp - 0x6e], 0x34
xor word [rbp - 0x6c], 0x35
xor word [rbp - 0x6a], 0x36
xor word [rbp - 0x68], 0x37
xor word [rbp - 0x66], 0x38
xor word [rbp - 0x64], 0x39
xor word [rbp - 0x62], 0x3a
xor cx, 0x3b
mov word [rbp - 0x60], cx
xor word [rbp - 0x5e], 0x3c
xor ax, 0x3d
mov word [rbp - 0x5c], ax
xor r8d, r8d
lea rdx, [rbp - 0x70]
lea rcx, [rsp + 0x70]
call fcn.140117190
cmp rax, 0xffffffffffffffff
jne 0x1401195f4
movups xmm0, xmmword [str.qX_SCWVNS_]
movups xmmword [rbp + 4], xmm0
mov eax, dword [0x1402cc660]
mov dword [rbp + 0x14], eax
cmp word [reloc.WLDAP32.dll_Ordinal_60], 0
je 0x140118dde
mov eax, 0x42
mov word [rbp + 4], ax
xor word [rbp + 6], 0x34
xor word [rbp + 8], 0x35
xor word [rbp + 0xa], 0x36
xor word [rbp + 0xc], 0x37
xor word [rbp + 0xe], 0x38
xor word [rbp + 0x10], 0x39
xor word [rbp + 0x12], 0x3a
xor word [rbp + 0x14], 0x3b
xor word [rbp + 0x16], 0x3c
xor r8d, r8d
lea rdx, [rbp + 4]
lea rcx, [rsp + 0x70]
call fcn.140117190
cmp rax, 0xffffffffffffffff
jne 0x1401195f4
movups xmm7, xmmword [0x1402cc668]
movups xmmword [rsp + 0x50], xmm7
movsd xmm0, qword [0x1402cc678]
movsd qword [rsp + 0x60], xmm0
movzx eax, word [0x1402cc680]
mov word [rsp + 0x68], ax
mov r8d, r13d
cmp r15d, 2
jl 0x140118f16
movdqa xmm4, xmmword [0x1402cc880]
movdqa xmm6, xmmword [0x1402cc860]
movdqa xmm2, xmmword [0x14027d080]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [str.4444]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm6
paddw xmm3, xmm2
movq xmm1, xmm7
xorps xmm3, xmm1
movq qword [rsp + 0x50], xmm3
movdqa xmm2, xmmword [0x1402cbb90]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [str.4444]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm6
paddw xmm3, xmm2
movq xmm0, qword [rsp + 0x58]
xorps xmm3, xmm0
movq qword [rsp + 0x58], xmm3
mov r8d, 8
movsxd rax, r8d
lea r9, [rsp + 0x50]
lea r9, [r9 + rax*2]
nop dword [rax]
nop word [rax + rax]
mov eax, 0x4ec4ec4f
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movzx eax, dx
imul ecx, eax, 0x34
movzx eax, r8w
sub ax, cx
add ax, 0x33
xor word [r9], ax
inc r8d
lea r9, [r9 + 2]
cmp r8d, 0xd
jl 0x140118f30
xor r8d, r8d
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x70]
call fcn.140117190
cmp rax, 0xffffffffffffffff
jne 0x1401195f4
movups xmm0, xmmword [str.d__RD_KSYY]
movups xmmword [rbp - 0x70], xmm0
mov ecx, dword [0x1402cc698]
mov dword [rbp - 0x60], ecx
movzx eax, word [0x1402cc69c]
mov edx, 0x57
mov word [rbp - 0x70], dx
xor word [rbp - 0x6e], 0x34
xor word [rbp - 0x6c], 0x35
xor word [rbp - 0x6a], 0x36
xor word [rbp - 0x68], 0x37
xor word [rbp - 0x66], 0x38
xor word [rbp - 0x64], 0x39
xor word [rbp - 0x62], 0x3a
xor cx, 0x3b
mov word [rbp - 0x60], cx
xor word [rbp - 0x5e], 0x3c
xor ax, 0x3d
mov word [rbp - 0x5c], ax
xor r8d, r8d
lea rdx, [rbp - 0x70]
lea rcx, [rsp + 0x70]
call fcn.140117190
cmp rax, 0xffffffffffffffff
jne 0x1401195f4
test edi, edi
js 0x140119290
cmp word [rbp + 0x70], 2
jb 0x14011908c
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x60], r13
mov qword [rsp + 0x68], r13
mov rdx, qword [rbp + 0x78]
mov r8, rax
inc r8
cmp word [rdx + r8*2], 0
jne 0x140119023
lea rcx, [rsp + 0x50]
call fcn.1400886d0
nop
mov rdx, qword [rbx + 8]
cmp rdx, qword [rbx + 0x10]
je 0x14011906f
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdx], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdx + 0x10], xmm1
mov qword [rsp + 0x60], r13
mov qword [rsp + 0x68], 7
mov word [rsp + 0x50], r13w
add qword [rbx + 8], 0x20
jmp 0x14011907d
lea r8, [rsp + 0x50]
mov rcx, rbx
call fcn.140115510
nop
lea rcx, [rsp + 0x50]
call fcn.1400aacb0
jmp 0x140119290
movups xmm0, xmmword [0x1402cc6a0]
movups xmmword [rbp - 0x70], xmm0
movups xmm1, xmmword [0x1402cc6b0]
movups xmmword [rbp - 0x60], xmm1
pextrw eax, xmm1, 7
test ax, ax
je 0x140119204
cmp r15d, 2
jl 0x1401191c8
movdqa xmm5, xmmword [0x14027d080]
mov edx, r13d
movdqa xmm4, xmmword [0x1402cc880]
movdqa xmm6, xmmword [str.4444]
movdqa xmm7, xmmword [0x1402cc860]
lea rcx, [rbp - 0x70]
movd xmm2, edx
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm7
paddw xmm3, xmm2
movq xmm0, qword [rcx]
xorps xmm3, xmm0
movq qword [rcx], xmm3
lea eax, [rdx + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm7
paddw xmm3, xmm2
movq xmm0, qword [rcx + 8]
xorps xmm3, xmm0
movq qword [rcx + 8], xmm3
add edx, 8
lea rcx, [rcx + 0x10]
cmp edx, 0x10
jl 0x1401190e1
jmp 0x140119204
lea r9, [rbp - 0x70]
mov r8d, r13d
nop
mov eax, 0x4ec4ec4f
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movzx eax, dx
imul ecx, eax, 0x34
movzx eax, r8w
sub ax, cx
add ax, 0x33
xor word [r9], ax
inc r8d
lea r9, [r9 + 2]
cmp r8d, 0x10
jl 0x1401191d0
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x60], r13
mov qword [rsp + 0x68], r13
lea rax, [rbp - 0x70]
mov r8, 0xffffffffffffffff
inc r8
cmp word [rax + r8*2], 0
jne 0x140119221
lea rdx, [rbp - 0x70]
lea rcx, [rsp + 0x50]
call fcn.1400886d0
nop
mov rdx, qword [rbx + 8]
cmp rdx, qword [rbx + 0x10]
je 0x140119269
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdx], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdx + 0x10], xmm1
mov r8d, 7
mov word [rsp + 0x50], r13w
add qword [rbx + 8], 0x20
jmp 0x14011927b
lea r8, [rsp + 0x50]
mov rcx, rbx
call fcn.140115510
mov r8, qword [rsp + 0x68]
cmp r8, 7
jbe 0x140119290
mov rdx, qword [rsp + 0x50]
lea rcx, [rsp + 0x50]
call fcn.140116b50
lea rcx, [rbp + 0x70]
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
mov rcx, qword [rbp + 0x18]
mov rax, qword [rcx]
mov r10, qword [rax + 0x20]
movups xmm0, xmmword [0x1402cc6c0]
movups xmmword [rbp - 0x70], xmm0
mov edx, dword [0x1402cc6d0]
mov dword [rbp - 0x60], edx
movzx eax, word [0x1402cc6d4]
mov r8d, Ordinal_79
mov word [rbp - 0x70], r8w
xor word [rbp - 0x6e], 0x34
xor word [rbp - 0x6c], 0x35
xor word [rbp - 0x6a], 0x36
xor word [rbp - 0x68], 0x37
xor word [rbp - 0x66], 0x38
xor word [rbp - 0x64], 0x39
xor word [rbp - 0x62], 0x3a
xor dx, 0x3b
mov word [rbp - 0x60], dx
xor word [rbp - 0x5e], 0x3c
xor ax, 0x3d
mov word [rbp - 0x5c], ax
mov qword [rsp + 0x28], r13
mov qword [rsp + 0x20], r13
lea r9, [rbp + 0x70]
xor r8d, r8d
lea rdx, [rbp - 0x70]
call r10
test eax, eax
js 0x1401195dc
cmp word [rbp + 0x70], 2
jb 0x1401193c4
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x60], r13
mov qword [rsp + 0x68], r13
mov rdx, qword [rbp + 0x78]
mov r8, 0xffffffffffffffff
nop dword [rax + rax]
inc r8
cmp word [rdx + r8*2], 0
jne 0x140119350
lea rcx, [rsp + 0x50]
call fcn.1400886d0
nop
mov rdx, qword [rbx + 8]
cmp rdx, qword [rbx + 0x10]
je 0x140119394
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdx], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdx + 0x10], xmm1
mov r8d, 7
mov word [rsp + 0x50], r13w
add qword [rbx + 8], 0x20
jmp 0x1401193a6
lea r8, [rsp + 0x50]
mov rcx, rbx
call fcn.140115510
mov r8, qword [rsp + 0x68]
cmp r8, 7
jbe 0x1401195dc
mov rdx, qword [rsp + 0x50]
lea rcx, [rsp + 0x50]
call fcn.140116b50
jmp 0x1401195dc
movups xmm7, xmmword [0x1402cc6d8]
movups xmmword [rsp + 0x50], xmm7
movsd xmm0, qword [0x1402cc6e8]
movsd qword [rsp + 0x60], xmm0
mov eax, dword [0x1402cc6f0]
mov dword [rsp + 0x68], eax
movzx eax, word [0x1402cc6f4]
mov word [rsp + 0x6c], ax
mov r8d, r13d
cmp r15d, 2
jl 0x1401194eb
movdqa xmm4, xmmword [0x1402cc880]
movdqa xmm6, xmmword [0x1402cc860]
movdqa xmm2, xmmword [0x14027d080]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [str.4444]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm6
paddw xmm3, xmm2
movq xmm1, xmm7
xorps xmm3, xmm1
movq qword [rsp + 0x50], xmm3
movdqa xmm2, xmmword [0x1402cbb90]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [str.4444]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm6
paddw xmm3, xmm2
movq xmm0, qword [rsp + 0x58]
xorps xmm3, xmm0
movq qword [rsp + 0x58], xmm3
mov r8d, 8
movsxd rax, r8d
lea r9, [rsp + 0x50]
lea r9, [r9 + rax*2]
nop word [rax + rax]
mov eax, 0x4ec4ec4f
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movzx eax, dx
imul ecx, eax, 0x34
movzx eax, r8w
sub ax, cx
add ax, 0x33
xor word [r9], ax
inc r8d
lea r9, [r9 + 2]
cmp r8d, 0xf
jl 0x140119500
xorps xmm0, xmm0
movups xmmword [rbp - 0x70], xmm0
mov qword [rbp - 0x60], r13
mov qword [rbp - 0x58], r13
lea rax, [rsp + 0x50]
mov r8, 0xffffffffffffffff
nop
inc r8
cmp word [rax + r8*2], 0
jne 0x140119550
lea rdx, [rsp + 0x50]
lea rcx, [rbp - 0x70]
call fcn.1400886d0
nop
mov rdx, qword [rbx + 8]
cmp rdx, qword [rbx + 0x10]
je 0x140119594
movups xmm0, xmmword [rbp - 0x70]
movups xmmword [rdx], xmm0
movups xmm1, xmmword [rbp - 0x60]
movups xmmword [rdx + 0x10], xmm1
mov edx, 7
mov word [rbp - 0x70], r13w
add qword [rbx + 8], 0x20
jmp 0x1401195a4
lea r8, [rbp - 0x70]
mov rcx, rbx
call fcn.140115510
mov rdx, qword [rbp - 0x58]
cmp rdx, 7
jbe 0x1401195dc
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401195d7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140119643
call fcn.140268570
lea rcx, [rbp + 0x70]
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
mov rcx, qword [rbp + 0x18]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [rbp + 0x18], r13
mov rdx, qword [rbp - 0x78]
cmp rdx, 7
jbe 0x140119631
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x70]
cmp rdx, 0x1000
mov rax, rcx
jb 0x14011962c
mov rcx, qword [rcx - 8]
sub rax, rcx
add rdx, 0x27
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14011964a
call fcn.140268570
mov rcx, qword [rbp + 0x60]
test rcx, rcx
jne 0x140118980
jmp 0x1401188d6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov ecx, 0x8007000e
call fcn.14026a1d0
nop
mov ecx, 0x8007000e
call fcn.14026a1d0
nop
mov ecx, 0x8007000e
call fcn.14026a1d0
nop
mov ecx, 0x8007000e
call fcn.14026a1d0
int3