Function at 0x1400de170
Capabilities:
Encode data using base64
Encode data using xor

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x138]
sub rsp, 0x210
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
mov rax, qword [0x140217900]
xor rax, rsp
mov qword [rbp + 0xe0], rax
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x50], xmm0
xor ebx, ebx
mov qword [rbp + 0x60], rbx
mov rdi, qword [0x14021be40]
sub rdi, qword [0x14021be38]
sar rdi, 4
movabs rsi, 0xfffffffffffffff
test rdi, rdi
je 0x1400de26b
cmp rdi, rsi
ja 0x1400df562
shl rdi, 4
test rdi, rdi
je 0x1400de231
cmp rdi, 0x1000
jb 0x1400de226
lea rcx, [rdi + 0x27]
cmp rcx, rdi
jbe 0x1400df568
call fcn.14015be90
test rax, rax
je 0x1400df56e
lea rbx, [rax + 0x27]
and rbx, 0xffffffffffffffe0
mov qword [rbx - 8], rax
jmp 0x1400de231
mov rcx, rdi
call fcn.14015be90
mov rbx, rax
mov qword [rbp + 0x50], rbx
mov qword [rbp + 0x58], rbx
lea rcx, [rdi + rbx]
mov qword [rbp + 0x60], rcx
mov rdi, qword [0x14021be40]
mov rdx, qword [0x14021be38]
sub rdi, rdx
mov r8, rdi
mov rcx, rbx
call fcn.14019cd80
and rdi, 0xfffffffffffffff0
lea rax, [rdi + rbx]
mov qword [rbp + 0x58], rax
xor ebx, ebx
mov qword [rbp + 0x68], rbx
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x70], xmm0
mov rdi, qword [0x14021c038]
sub rdi, qword [0x14021c030]
sar rdi, 4
test rdi, rdi
je 0x1400de31b
cmp rdi, rsi
ja 0x1400df574
shl rdi, 4
test rdi, rdi
je 0x1400de2e1
cmp rdi, 0x1000
jb 0x1400de2d6
lea rcx, [rdi + 0x27]
cmp rcx, rdi
jbe 0x1400df57a
call fcn.14015be90
test rax, rax
je 0x1400df580
lea rbx, [rax + 0x27]
and rbx, 0xffffffffffffffe0
mov qword [rbx - 8], rax
jmp 0x1400de2e1
mov rcx, rdi
call fcn.14015be90
mov rbx, rax
mov qword [rbp + 0x68], rbx
mov qword [rbp + 0x70], rbx
lea rcx, [rdi + rbx]
mov qword [rbp + 0x78], rcx
mov rdi, qword [0x14021c038]
mov rdx, qword [0x14021c030]
sub rdi, rdx
mov r8, rdi
mov rcx, rbx
call fcn.14019cd80
and rdi, 0xfffffffffffffff0
lea rax, [rdi + rbx]
mov qword [rbp + 0x70], rax
xor ebx, ebx
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x80], xmm0
mov qword [rbp + 0x90], rbx
mov rdi, qword [0x14021bf78]
sub rdi, qword [0x14021bf70]
sar rdi, 4
test rdi, rdi
je 0x1400de3dd
cmp rdi, rsi
ja 0x1400df586
shl rdi, 4
test rdi, rdi
je 0x1400de397
cmp rdi, 0x1000
jb 0x1400de38c
lea rcx, [rdi + 0x27]
cmp rcx, rdi
jbe 0x1400df58c
call fcn.14015be90
test rax, rax
je 0x1400df592
lea rbx, [rax + 0x27]
and rbx, 0xffffffffffffffe0
mov qword [rbx - 8], rax
jmp 0x1400de397
mov rcx, rdi
call fcn.14015be90
mov rbx, rax
mov qword [rbp + 0x80], rbx
mov qword [rbp + 0x88], rbx
lea rcx, [rbx + rdi]
mov qword [rbp + 0x90], rcx
mov rdi, qword [0x14021bf78]
mov rdx, qword [0x14021bf70]
sub rdi, rdx
mov r8, rdi
mov rcx, rbx
call fcn.14019cd80
and rdi, 0xfffffffffffffff0
lea rax, [rdi + rbx]
mov qword [rbp + 0x88], rax
xor ebx, ebx
lea rax, [rbp + 0x50]
mov qword [rbp - 0x70], rax
lea rax, [rbp + 0x98]
mov qword [rbp - 0x68], rax
movaps xmm0, xmmword [rbp - 0x70]
movdqa xmmword [rbp - 0x70], xmm0
lea r8, [rsp + 0x54]
lea rdx, [rbp - 0x70]
lea rcx, [rsp + 0x70]
call fcn.14007f5a0
nop
lea r9, [0x140082b40]
mov edx, Ordinal_27
mov r8d, 3
lea rcx, [rbp + 0x50]
call fcn.14015b5fc
mov r9d, ebx
mov dword [rsp + 0x50], ebx
mov rcx, qword [rsp + 0x78]
mov r8, qword [rsp + 0x70]
sub rcx, r8
movabs r14, 0x2aaaaaaaaaaaaaab
mov rax, r14
imul rcx
sar rdx, 2
mov rax, rdx
shr rax, 0x3f
add rdx, rax
je 0x1400de6b4
mov rax, rbx
mov qword [rbp - 0x70], rbx
mov edi, dword [0x14021ba48]
nop dword [rax]
mov r15, qword [rax + r8]
mov r13, qword [rax + r8 + 8]
cmp r15, r13
je 0x1400de65b
movups xmm6, xmmword [r15]
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp - 0x50], xmm0
movups xmmword [rbp - 0x40], xmm0
movups xmmword [rbp - 0x30], xmm0
movups xmmword [rbp - 0x20], xmm0
movups xmmword [rbp - 0x10], xmm0
movups xmmword [rbp], xmm0
mov qword [rbp + 0x10], rax
lea rdi, [rbp - 0x50]
mov ecx, 0x68
rep stosb byte [rdi], al
mov dword [rbp - 0x50], ebx
mov eax, dword [0x14021c128]
mov dword [rbp - 0x4c], eax
mov qword [rbp - 0x40], rbx
mov qword [rbp - 0x38], rbx
lea rcx, [rbp - 0x50]
call qword [0x14021c120]
mov r12, qword [rbp - 0x40]
mov qword [0x14021c130], r12
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp - 0x50], xmm0
movups xmmword [rbp - 0x40], xmm0
movups xmmword [rbp - 0x30], xmm0
movups xmmword [rbp - 0x20], xmm0
movups xmmword [rbp - 0x10], xmm0
movups xmmword [rbp], xmm0
mov qword [rbp + 0x10], rax
lea rdi, [rbp - 0x50]
mov ecx, 0x68
rep stosb byte [rdi], al
mov dword [rbp - 0x50], recvfrom
mov eax, dword [0x14021c128]
mov dword [rbp - 0x4c], eax
mov qword [rbp - 0x38], rbx
lea rcx, [rbp - 0x50]
call qword [0x14021c120]
mov rsi, qword [rbp - 0x38]
mov qword [0x14021c138], rsi
mov r9d, 4
mov r8d, 0x1000
mov rdx, rsi
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r14, rax
test rax, rax
je 0x1400de62e
xorps xmm0, xmm0
movups xmmword [rbp - 0x30], xmm0
movups xmmword [rbp - 0x20], xmm0
movups xmmword [rbp - 0x10], xmm0
movups xmmword [rbp], xmm0
lea rdi, [rbp - 0x50]
xor eax, eax
mov ecx, 0x68
rep stosb byte [rdi], al
mov dword [rbp - 0x50], 1
mov qword [rbp - 0x48], r12
mov qword [rbp - 0x40], r14
mov qword [rbp - 0x38], rsi
mov eax, dword [0x14021c128]
mov dword [rbp - 0x4c], eax
mov qword [rbp + 0x10], rbx
lea rcx, [rbp - 0x50]
call qword [0x14021c120]
test rsi, rsi
je 0x1400de61b
movdqa xmm0, xmm6
psrldq xmm0, 8
movq r9, xmm0
movzx r10d, byte [r9]
mov r8, r14
movq r11, xmm6
sub r8, r11
test r10b, r10b
je 0x1400de5ec
movzx eax, r10b
mov rcx, r11
lea rdi, [r8 + rbx]
mov rdx, r9
sub rdx, r11
cmp al, 0x78
jne 0x1400de5e1
movzx eax, byte [rcx]
cmp byte [rdi + rcx], al
jne 0x1400de613
inc rcx
movzx eax, byte [rcx + rdx]
test al, al
jne 0x1400de5d5
xor edx, edx
mov r8d, 0x8000
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_VirtualFree]
lea edi, [rbx + r12]
mov dword [0x14021ba48], edi
test edi, edi
jne 0x1400de6a6
xor ebx, ebx
jmp 0x1400de636
inc rbx
cmp rbx, rsi
jb 0x1400de5c4
xor edx, edx
mov r8d, 0x8000
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_VirtualFree]
xor ebx, ebx
mov dword [0x14021ba48], ebx
mov edi, ebx
add r15, 0x10
cmp r15, r13
jne 0x1400de482
mov r9d, dword [rsp + 0x50]
movabs r14, 0x2aaaaaaaaaaaaaab
mov rax, qword [rbp - 0x70]
mov r8, qword [rsp + 0x70]
test edi, edi
jne 0x1400deaff
inc r9d
mov dword [rsp + 0x50], r9d
add rax, 0x18
mov qword [rbp - 0x70], rax
mov rcx, qword [rsp + 0x78]
sub rcx, r8
mov rax, r14
imul rcx
sar rdx, 2
mov rax, rdx
shr rax, 0x3f
add rdx, rax
movsxd rax, r9d
cmp rax, rdx
mov rax, qword [rbp - 0x70]
mov ebx, 0
jb 0x1400de470
jmp 0x1400de6c1
mov r9d, dword [rsp + 0x50]
mov dword [0x14021ba40], r9d
jmp 0x1400de648
cmp dword [0x14021ba48], 0
jne 0x1400deb0b
movsd xmm0, qword [0x1401c76e0]
movzx eax, byte [0x1401c76e8]
movsd qword [rbp - 0x70], xmm0
mov byte [rbp - 0x70], 0x43
xor byte [rbp - 0x6f], 0x38
xor byte [rbp - 0x6e], 0x39
xor byte [rbp - 0x6d], 0x3a
xor byte [rbp - 0x6c], 0x3b
xor byte [rbp - 0x6b], 0x3c
xor byte [rbp - 0x6a], 0x3d
xor byte [rbp - 0x69], 0x3e
xor al, 0x3f
mov byte [rbp - 0x68], al
xorps xmm0, xmm0
movups xmmword [rbp + 0xc0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xd0], xmm1
lea rax, [rbp - 0x70]
mov rbx, 0xffffffffffffffff
mov r8, rbx
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x1400de720
lea rdx, [rbp - 0x70]
lea rcx, [rbp + 0xc0]
call fcn.1400639f0
nop
movups xmm3, xmmword [0x1401c8068]
movups xmmword [rbp - 0x70], xmm3
movsd xmm0, qword [0x1401c8078]
movsd qword [rbp - 0x60], xmm0
movzx eax, word [0x1401c8080]
mov word [rbp - 0x58], ax
movzx eax, byte [0x1401c8082]
mov byte [rbp - 0x56], al
xor edi, edi
cmp dword [reloc.WS2_32.dll_accept], 2
jl 0x1400de9e5
movdqa xmm5, xmmword [0x1401cc2f0]
movdqa xmm6, xmmword [str.3333]
movdqa xmm7, xmmword [str.7777777777777777]
movdqa xmm2, xmmword [0x1401b3b30]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm5
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm5
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
movdqa xmm4, xmmword [0x1401cc2d0]
andps xmm2, xmm4
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm7
movd eax, xmm3
movd xmm0, eax
xorps xmm2, xmm0
movd dword [rbp - 0x70], xmm2
movdqa xmm2, xmmword [0x1401cc130]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm5
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm5
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
andps xmm2, xmm4
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm7
movd xmm0, dword [rbp - 0x6c]
xorps xmm2, xmm0
movd dword [rbp - 0x6c], xmm2
movdqa xmm3, xmmword [0x1401cc140]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm5
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm5
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
andps xmm3, xmm4
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm7
movd xmm0, dword [rbp - 0x68]
xorps xmm3, xmm0
movd dword [rbp - 0x68], xmm3
movdqa xmm2, xmmword [0x1401cc150]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm5
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm5
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
andps xmm2, xmm4
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm7
movd xmm0, dword [rbp - 0x64]
xorps xmm2, xmm0
movd dword [rbp - 0x64], xmm2
movdqa xmm3, xmmword [0x1401cc160]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm5
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm5
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
andps xmm3, xmm4
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm7
movd xmm0, dword [rbp - 0x60]
xorps xmm3, xmm0
movd dword [rbp - 0x60], xmm3
movdqa xmm2, xmmword [0x1401cc170]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm5
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm5
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
andps xmm2, xmm4
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm7
movd xmm0, dword [rbp - 0x5c]
xorps xmm2, xmm0
movd dword [rbp - 0x5c], xmm2
mov edi, Ordinal_27
mov eax, edi
lea r8, [rbp - 0x70]
add r8, rax
nop
mov eax, 0xa0a0a0a1
imul edi
add edx, edi
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x33
movzx eax, dil
sub al, cl
add al, 0x37
xor byte [r8], al
inc edi
lea r8, [r8 + 1]
cmp edi, 0x1b
jl 0x1400de9f0
xorps xmm0, xmm0
movups xmmword [rbp + 0x20], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x30], xmm1
lea rax, [rbp - 0x70]
mov r8, rbx
inc r8
cmp byte [rax + r8], 0
jne 0x1400dea35
lea rdx, [rbp - 0x70]
lea rcx, [rbp + 0x20]
call fcn.1400639f0
nop
lea rdx, [rbp + 0x20]
cmp qword [rbp + 0x38], 0xf
cmova rdx, qword [rbp + 0x20]
xorps xmm0, xmm0
movups xmmword [rbp + 0xa0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xb0], xmm1
mov r8, rbx
inc r8
cmp byte [rdx + r8], 0
jne 0x1400dea73
lea rcx, [rbp + 0xa0]
call fcn.1400639f0
lea rcx, [rbp + 0xa0]
mov rdi, qword [rbp + 0xa0]
mov r8, qword [rbp + 0xb8]
cmp r8, 0xf
cmova rcx, rdi
mov rax, rbx
nop dword [rax]
inc rax
cmp byte [rcx + rax], 0
jne 0x1400deab0
lea rdx, [rbp + 0xa0]
cmp r8, 0xf
cmova rdx, rdi
lea rcx, [rbp + 0xc0]
mov rdi, qword [rbp + 0xc0]
mov r9, qword [rbp + 0xd8]
cmp r9, 0xf
cmova rcx, rdi
nop word [rax + rax]
inc rbx
cmp byte [rcx + rbx], 0
je 0x1400df50e
jmp 0x1400deaf0
xor ebx, ebx
movabs rsi, 0xfffffffffffffff
cmp dword [0x14021ba40], 0
jne 0x1400debf9
mov dword [0x14021ba60], 0x10
mov dword [0x14021ba50], 0x68
mov dword [0x14021ba58], 0xcc
mov dword [0x14021ba64], 0x10
mov dword [0x14021ba68], 0x14
mov dword [0x14021ba6c], 0x18
mov dword [0x14021ba70], 0x1c
mov dword [0x14021ba74], 0x134
mov dword [0x14021ba78], 0x2c
mov dword [0x14021ba7c], 0x10
mov dword [0x14021ba80], 0xa0
mov dword [0x14021ba88], 0xec
mov dword [0x14021ba84], 0x79
mov dword [0x14021ba8c], 0xac
mov dword [0x14021ba90], 0x58
mov dword [0x14021ba94], 0x70
mov dword [0x14021ba98], 0x260
mov dword [0x14021baa8], 0x110
mov dword [0x14021baac], 0x2d4
mov dword [0x14021bab0], 0x15c
mov dword [0x14021bab4], 0x160
mov dword [0x14021bab8], 0xd0
jmp 0x1400ded4e
cmp dword [0x14021ba40], 1
jne 0x1400decab
mov dword [0x14021ba58], 0xd0
mov dword [0x14021ba50], 0x6c
mov dword [0x14021ba64], 0x14
mov dword [0x14021ba68], 0x18
mov dword [0x14021ba6c], 0x20
mov dword [0x14021ba70], 0x24
mov dword [0x14021ba74], 0x12c
mov dword [0x14021ba80], 0x98
mov dword [0x14021ba8c], 0xa4
mov dword [0x14021ba90], 0x50
mov dword [0x14021ba94], 0x68
mov dword [0x14021ba98], 0x23c
mov dword [0x14021baac], 0x2cc
mov dword [0x14021bab0], 0x140
mov dword [0x14021bab4], 0x144
mov dword [0x14021bab8], 0xd4
jmp 0x1400ded3a
cmp dword [0x14021ba40], 2
jne 0x1400ded6c
mov dword [0x14021ba58], 0xb4
mov dword [0x14021ba50], 0x50
mov dword [0x14021ba64], 0x18
mov dword [0x14021ba68], 0x1c
mov dword [0x14021ba6c], 0x24
mov dword [0x14021ba70], 0x28
mov dword [0x14021ba74], 0x120
mov dword [0x14021ba80], 0x8c
mov dword [0x14021ba8c], 0x98
mov dword [0x14021ba90], 0x20
mov dword [0x14021ba94], 0x5c
mov dword [0x14021baac], 0x2c0
mov dword [0x14021bab8], 0xb8
mov dword [0x14021ba7c], 4
mov dword [0x14021ba78], 0x3c
mov dword [0x14021ba5c], 0x28
mov dword [0x14021babc], 0x48
mov dword [0x14021bac0], 0x4c
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x20], xmm0
mov qword [rbp + 0x30], rbx
mov rdi, qword [0x14021c020]
sub rdi, qword [0x14021c018]
sar rdi, 4
test rdi, rdi
je 0x1400dee1c
cmp rdi, rsi
ja 0x1400df598
shl rdi, 4
test rdi, rdi
je 0x1400dede2
cmp rdi, 0x1000
jb 0x1400dedd7
lea rcx, [rdi + 0x27]
cmp rcx, rdi
jbe 0x1400df59e
call fcn.14015be90
test rax, rax
je 0x1400df5a4
lea rbx, [rax + 0x27]
and rbx, 0xffffffffffffffe0
mov qword [rbx - 8], rax
jmp 0x1400dede2
mov rcx, rdi
call fcn.14015be90
mov rbx, rax
mov qword [rbp + 0x20], rbx
mov qword [rbp + 0x28], rbx
lea rcx, [rdi + rbx]
mov qword [rbp + 0x30], rcx
mov rdi, qword [0x14021c020]
mov rdx, qword [0x14021c018]
sub rdi, rdx
mov r8, rdi
mov rcx, rbx
call fcn.14019cd80
and rdi, 0xfffffffffffffff0
lea rax, [rdi + rbx]
mov qword [rbp + 0x28], rax
xor ebx, ebx
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x38], xmm0
mov qword [rbp + 0x48], rbx
mov rdi, qword [0x14021c078]
sub rdi, qword [0x14021c070]
sar rdi, 4
test rdi, rdi
je 0x1400deecc
cmp rdi, rsi
ja 0x1400df5aa
shl rdi, 4
test rdi, rdi
je 0x1400dee92
cmp rdi, 0x1000
jb 0x1400dee87
lea rcx, [rdi + 0x27]
cmp rcx, rdi
jbe 0x1400df5b0
call fcn.14015be90
test rax, rax
je 0x1400df5b6
lea rbx, [rax + 0x27]
and rbx, 0xffffffffffffffe0
mov qword [rbx - 8], rax
jmp 0x1400dee92
mov rcx, rdi
call fcn.14015be90
mov rbx, rax
mov qword [rbp + 0x38], rbx
mov qword [rbp + 0x40], rbx
lea rcx, [rdi + rbx]
mov qword [rbp + 0x48], rcx
mov rdi, qword [0x14021c078]
mov rdx, qword [0x14021c070]
sub rdi, rdx
mov r8, rdi
mov rcx, rbx
call fcn.14019cd80
and rdi, 0xfffffffffffffff0
lea rax, [rdi + rbx]
mov qword [rbp + 0x40], rax
xor ebx, ebx
lea rax, [rbp + 0x20]
mov qword [rbp - 0x70], rax
lea rax, [rbp + 0x50]
mov qword [rbp - 0x68], rax
movaps xmm0, xmmword [rbp - 0x70]
movdqa xmmword [rbp - 0x70], xmm0
lea r8, [rsp + 0x54]
lea rdx, [rbp - 0x70]
lea rcx, [rsp + 0x58]
call fcn.14007f5a0
nop
lea r9, [0x140082b40]
mov edx, Ordinal_27
mov r8d, 2
lea rcx, [rbp + 0x20]
call fcn.14015b5fc
mov r9d, ebx
mov dword [rsp + 0x50], ebx
mov rcx, qword [rsp + 0x60]
mov r8, qword [rsp + 0x58]
sub rcx, r8
mov rax, r14
imul rcx
sar rdx, 2
mov rax, rdx
shr rax, 0x3f
add rdx, rax
je 0x1400df193
mov rax, rbx
mov qword [rbp - 0x70], rbx
mov edi, dword [0x14021ba54]
nop
mov r15, qword [rax + r8]
mov r13, qword [rax + r8 + 8]
cmp r15, r13
je 0x1400df13c
movups xmm6, xmmword [r15]
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp - 0x50], xmm0
movups xmmword [rbp - 0x40], xmm0
movups xmmword [rbp - 0x30], xmm0
movups xmmword [rbp - 0x20], xmm0
movups xmmword [rbp - 0x10], xmm0
movups xmmword [rbp], xmm0
mov qword [rbp + 0x10], rax
lea rdi, [rbp - 0x50]
mov ecx, 0x68
rep stosb byte [rdi], al
mov dword [rbp - 0x50], ebx
mov eax, dword [0x14021c128]
mov dword [rbp - 0x4c], eax
mov qword [rbp - 0x40], rbx
mov qword [rbp - 0x38], rbx
lea rcx, [rbp - 0x50]
call qword [0x14021c120]
mov r12, qword [rbp - 0x40]
mov qword [0x14021c130], r12
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp - 0x50], xmm0
movups xmmword [rbp - 0x40], xmm0
movups xmmword [rbp - 0x30], xmm0
movups xmmword [rbp - 0x20], xmm0
movups xmmword [rbp - 0x10], xmm0
movups xmmword [rbp], xmm0
mov qword [rbp + 0x10], rax
lea rdi, [rbp - 0x50]
mov ecx, 0x68
rep stosb byte [rdi], al
mov dword [rbp - 0x50], recvfrom
mov eax, dword [0x14021c128]
mov dword [rbp - 0x4c], eax
mov qword [rbp - 0x38], rbx
lea rcx, [rbp - 0x50]
call qword [0x14021c120]
mov rsi, qword [rbp - 0x38]
mov qword [0x14021c138], rsi
mov r9d, 4
mov r8d, 0x1000
mov rdx, rsi
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r14, rax
test rax, rax
je 0x1400df10f
xorps xmm0, xmm0
movups xmmword [rbp - 0x30], xmm0
movups xmmword [rbp - 0x20], xmm0
movups xmmword [rbp - 0x10], xmm0
movups xmmword [rbp], xmm0
lea rdi, [rbp - 0x50]
xor eax, eax
mov ecx, 0x68
rep stosb byte [rdi], al
mov dword [rbp - 0x50], 1
mov qword [rbp - 0x48], r12
mov qword [rbp - 0x40], r14
mov qword [rbp - 0x38], rsi
mov eax, dword [0x14021c128]
mov dword [rbp - 0x4c], eax
mov qword [rbp + 0x10], rbx
lea rcx, [rbp - 0x50]
call qword [0x14021c120]
test rsi, rsi
je 0x1400df0fc
movdqa xmm0, xmm6
psrldq xmm0, 8
movq r9, xmm0
movzx r10d, byte [r9]
mov r8, r14
movq r11, xmm6
sub r8, r11
test r10b, r10b
je 0x1400df0cd
movzx ecx, r10b
mov rax, r11
lea rdi, [r8 + rbx]
mov rdx, r9
sub rdx, r11
cmp cl, 0x78
jne 0x1400df0c2
movzx ecx, byte [rax]
cmp byte [rdi + rax], cl
jne 0x1400df0f4
inc rax
movzx ecx, byte [rax + rdx]
test cl, cl
jne 0x1400df0b5
xor edx, edx
mov r8d, 0x8000
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_VirtualFree]
lea edi, [rbx + r12]
mov dword [0x14021ba54], edi
test edi, edi
jne 0x1400df183
xor ebx, ebx
jmp 0x1400df117
inc rbx
cmp rbx, rsi
jb 0x1400df0a4
xor edx, edx
mov r8d, 0x8000
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_VirtualFree]
xor ebx, ebx
mov dword [0x14021ba54], ebx
mov edi, ebx
add r15, 0x10
cmp r15, r13
jne 0x1400def62
mov r9d, dword [rsp + 0x50]
movabs r14, 0x2aaaaaaaaaaaaaab
mov rax, qword [rbp - 0x70]
mov r8, qword [rsp + 0x58]
test edi, edi
jne 0x1400df191
inc r9d
mov dword [rsp + 0x50], r9d
add rax, 0x18
mov qword [rbp - 0x70], rax
mov rcx, qword [rsp + 0x60]
sub rcx, r8
mov rax, r14
imul rcx
sar rdx, 2
mov rax, rdx
shr rax, 0x3f
add rdx, rax
movsxd rax, r9d
cmp rax, rdx
mov rax, qword [rbp - 0x70]
mov ebx, 0
jb 0x1400def50
jmp 0x1400df193
mov r9d, dword [rsp + 0x50]
mov dword [0x14021ba44], r9d
jmp 0x1400df129
xor ebx, ebx
mov r15, qword [0x14021c000]
mov r13, qword [0x14021c008]
cmp r15, r13
je 0x1400df36b
nop word [rax + rax]
movups xmm6, xmmword [r15]
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp - 0x50], xmm0
movups xmmword [rbp - 0x40], xmm0
movups xmmword [rbp - 0x30], xmm0
movups xmmword [rbp - 0x20], xmm0
movups xmmword [rbp - 0x10], xmm0
movups xmmword [rbp], xmm0
mov qword [rbp + 0x10], rax
lea rdi, [rbp - 0x50]
mov ecx, 0x68
rep stosb byte [rdi], al
mov dword [rbp - 0x50], ebx
mov eax, dword [0x14021c128]
mov dword [rbp - 0x4c], eax
mov qword [rbp - 0x40], rbx
mov qword [rbp - 0x38], rbx
lea rcx, [rbp - 0x50]
call qword [0x14021c120]
mov r12, qword [rbp - 0x40]
mov qword [0x14021c130], r12
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp - 0x50], xmm0
movups xmmword [rbp - 0x40], xmm0
movups xmmword [rbp - 0x30], xmm0
movups xmmword [rbp - 0x20], xmm0
movups xmmword [rbp - 0x10], xmm0
movups xmmword [rbp], xmm0
mov qword [rbp + 0x10], rax
lea rdi, [rbp - 0x50]
mov ecx, 0x68
rep stosb byte [rdi], al
mov dword [rbp - 0x50], recvfrom
mov eax, dword [0x14021c128]
mov dword [rbp - 0x4c], eax
mov qword [rbp - 0x38], rbx
lea rcx, [rbp - 0x50]
call qword [0x14021c120]
mov rsi, qword [rbp - 0x38]
mov qword [0x14021c138], rsi
mov r9d, 4
mov r8d, 0x1000
mov rdx, rsi
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r14, rax
test rax, rax
je 0x1400df358
xorps xmm0, xmm0
movups xmmword [rbp - 0x30], xmm0
movups xmmword [rbp - 0x20], xmm0
movups xmmword [rbp - 0x10], xmm0
movups xmmword [rbp], xmm0
lea rdi, [rbp - 0x50]
xor eax, eax
mov ecx, 0x68
rep stosb byte [rdi], al
mov dword [rbp - 0x50], 1
mov qword [rbp - 0x48], r12
mov qword [rbp - 0x40], r14
mov qword [rbp - 0x38], rsi
mov eax, dword [0x14021c128]
mov dword [rbp - 0x4c], eax
mov qword [rbp + 0x10], rbx
lea rcx, [rbp - 0x50]
call qword [0x14021c120]
test rsi, rsi
je 0x1400df345
movdqa xmm0, xmm6
psrldq xmm0, 8
movq r9, xmm0
movzx r10d, byte [r9]
mov r8, r14
movq r11, xmm6
sub r8, r11
test r10b, r10b
je 0x1400df31a
movzx eax, r10b
mov rcx, r11
lea rdi, [r8 + rbx]
mov rdx, r9
sub rdx, r11
cmp al, 0x78
jne 0x1400df30f
movzx eax, byte [rcx]
cmp byte [rdi + rcx], al
jne 0x1400df33d
inc rcx
movzx eax, byte [rcx + rdx]
test al, al
jne 0x1400df303
xor edx, edx
mov r8d, 0x8000
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_VirtualFree]
lea eax, [rbx + r12]
mov dword [0x14021ba4c], eax
test eax, eax
jne 0x1400df36b
xor ebx, ebx
jmp 0x1400df35e
inc rbx
cmp rbx, rsi
jb 0x1400df2f2
xor edx, edx
mov r8d, 0x8000
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_VirtualFree]
xor ebx, ebx
mov dword [0x14021ba4c], ebx
add r15, 0x10
cmp r15, r13
jne 0x1400df1b0
xor edi, edi
cmp dword [0x14021ba44], edi
setne dil
inc edi
mov edx, dword [0x14021ba48]
add edx, 2
lea rcx, [0x14021c120]
call fcn.140070370
mov dword [0x14021ba48], eax
mov edx, dword [0x14021ba54]
add edx, edi
lea rcx, [0x14021c120]
call fcn.140070370
mov dword [0x14021ba54], eax
mov edx, dword [0x14021ba4c]
add edx, 2
lea rcx, [0x14021c120]
call fcn.140070370
mov dword [0x14021ba4c], eax
mov rcx, qword [rsp + 0x58]
test rcx, rcx
je 0x1400df45a
lea r8, [rsp + 0x58]
mov rdx, qword [rsp + 0x60]
call fcn.140070f40
mov rcx, qword [rsp + 0x68]
mov rdi, qword [rsp + 0x58]
sub rcx, rdi
movabs rbx, 0x2aaaaaaaaaaaaaab
mov rax, rbx
imul rcx
sar rdx, 2
mov rax, rdx
shr rax, 0x3f
add rdx, rax
lea rdx, [rdx + rdx*2]
shl rdx, 3
mov rax, rdi
cmp rdx, 0x1000
jb 0x1400df43e
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400df5bc
mov rcx, rdi
call fcn.14015b6cc
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x58], xmm0
mov qword [rsp + 0x68], 0
jmp 0x1400df464
movabs rbx, 0x2aaaaaaaaaaaaaab
mov rcx, qword [rsp + 0x70]
test rcx, rcx
je 0x1400df4ce
lea r8, [rsp + 0x70]
mov rdx, qword [rsp + 0x78]
call fcn.140070f40
mov rcx, qword [rbp - 0x80]
mov rdi, qword [rsp + 0x70]
sub rcx, rdi
mov rax, rbx
imul rcx
sar rdx, 2
mov rax, rdx
shr rax, 0x3f
add rdx, rax
lea rdx, [rdx + rdx*2]
shl rdx, 3
mov rax, rdi
cmp rdx, 0x1000
jb 0x1400df4c6
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400df508
mov rcx, rdi
call fcn.14015b6cc
mov rcx, qword [rbp + 0xe0]
xor rcx, rsp
call fcn.14015b7e0
lea r11, [rsp + 0x210]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.14017ad3c
nop
lea r8, [rbp + 0xc0]
cmp r9, 0xf
cmova r8, rdi
mov dword [rsp + 0x48], 0
lea rdi, [rsp + 0x50]
mov qword [rsp + 0x40], rdi
mov dword [rsp + 0x38], 0xa
mov dword [rsp + 0x30], reloc.WS2_32.dll_recv
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rdx
mov r9d, ebx
mov edx, 0xffffffff
xor ecx, ecx
call sub.WTSAPI32.dll_WTSSendMessageA
mov ecx, 1
call fcn.14017c0c8
nop
call fcn.14006cfa0
int3
call fcn.1400699f0
int3
call fcn.14017ad3c
nop
call fcn.14006cfa0
int3
call fcn.1400699f0
int3
call fcn.14017ad3c
nop
call fcn.14006cfa0
int3
call fcn.1400699f0
int3
call fcn.14017ad3c
nop
call fcn.14006cfa0
int3
call fcn.1400699f0
int3
call fcn.14017ad3c
nop
call fcn.14006cfa0
int3
call fcn.1400699f0
int3
call fcn.14017ad3c
nop
call fcn.14017ad3c
int3