Function at 0x14006eb70
Capabilities:
Encode data using xor

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
mov qword [rax + 0x20], r12
push r13
push r14
push r15
sub rsp, 0x250
movaps xmmword [rax - 0x28], xmm6
movaps xmmword [rax - 0x38], xmm7
movaps xmmword [rax - 0x48], xmm8
movaps xmmword [rax - 0x58], xmm9
movaps xmmword [rax - 0x68], xmm10
movaps xmmword [rax - 0x78], xmm11
movaps xmmword [rax - 0x88], xmm12
mov rax, qword [0x14037f670]
xor rax, rsp
mov qword [rsp + 0x1d0], rax
xor r15d, r15d
mov esi, r15d
mov dword [rsp + 0x60], r15d
xor ecx, ecx
call qword [sym.imp.GDI32.dll_CreateSolidBrush]
mov edx, 0x7f00
xor ecx, ecx
call qword [sym.imp.USER32.dll_LoadCursorA]
mov edx, 0x7f00
xor ecx, ecx
call qword [sym.imp.USER32.dll_LoadIconA]
mov edx, 0x7f00
xor ecx, ecx
call qword [sym.imp.USER32.dll_LoadIconA]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov r14, rax
mov dword [0x14038a0ac], 1
mov dword [0x14038a0a8], r15d
xorps xmm0, xmm0
movups xmmword [rsp + 0x168], xmm0
movups xmmword [rsp + 0x178], xmm0
movups xmmword [rsp + 0x188], xmm0
lea r12d, [r15 + 4]
lea r13d, [r15 + 0x1f]
mov edi, dword [reloc.WS2_32.dll_accept]
movss xmm10, dword [0x14034e9c8]
movss xmm11, dword [0x14034e9b0]
movss xmm9, dword [0x14034ea0c]
movss xmm12, dword [0x14034e8f0]
nop dword [rax]
cmp dword [rsp + 0x170], 0x12
je 0x14006fba5
mov rcx, qword [0x140389870]
call qword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x14006fba5
mov dword [rsp + 0x20], 1
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rsp + 0x168]
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
je 0x14006ecd3
lea rcx, [rsp + 0x168]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rsp + 0x168]
call qword [sym.imp.USER32.dll_DispatchMessageA]
jmp 0x14006ec70
cmp qword [0x14038a0d0], 0
jne 0x14006ece2
call fcn.1400ae800
call fcn.1400af0b0
call fcn.14008fdd0
mov byte [rsp + 0x120], 1
cmp byte [0x140389881], 0
je 0x14006fa97
mov rax, qword [str.QYODQVT_QM_C8]
mov qword [rsp + 0x1b0], rax
cmp byte [0x140347037], 0
je 0x14006ee72
mov r8d, r15d
cmp edi, 2
jl 0x14006ee35
movdqa xmm4, xmmword [0x14034fa50]
movd xmm6, r12d
movd xmm5, r13d
movdqa xmm2, xmmword [0x14034eac0]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm5
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x14034eb00]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x14034eb80]
packuswb xmm2, xmm2
paddb xmm2, xmmword [0x14034ebb0]
movd xmm0, dword [rsp + 0x1b0]
pxor xmm2, xmm0
movd dword [rsp + 0x1b0], xmm2
movdqa xmm3, xmmword [0x14034ead0]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm5
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x14034eb00]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x14034eb80]
packuswb xmm2, xmm2
paddb xmm2, xmmword [0x14034ebb0]
movd xmm0, dword [rsp + 0x1b4]
pxor xmm2, xmm0
movd dword [rsp + 0x1b4], xmm2
jmp 0x14006ee72
lea r9, [rsp + 0x1b0]
nop dword [rax]
mov eax, 0x2f684bdb
mul r8d
mov eax, r8d
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x36
movzx eax, r8b
sub al, cl
add al, 0x34
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 8
jl 0x14006ee40
mov r8d, Ordinal_45
lea rdx, [rsp + 0x120]
lea rcx, [rsp + 0x1b0]
call fcn.140094eb0
mov dword [rsp + 0x88], 0x43960000
mov dword [rsp + 0x8c], 0x43160000
xor r8d, r8d
lea rdx, [rsp + 0x88]
mov rcx, qword [0x140389ba0]
mov rcx, qword [rcx + 0x1a90]
call fcn.1400978e0
xor ecx, ecx
call qword [sym.imp.USER32.dll_GetSystemMetrics]
cdq
sub eax, edx
sar eax, 1
mov ebx, eax
mov ecx, 1
call qword [sym.imp.USER32.dll_GetSystemMetrics]
cdq
sub eax, edx
sar eax, 1
movd xmm0, ebx
cvtdq2ps xmm0, xmm0
subss xmm0, xmm10
movd xmm1, eax
cvtdq2ps xmm1, xmm1
subss xmm1, xmm11
cmp byte [0x14038a121], 0
jne 0x14006ef38
movss dword [rsp + 0x90], xmm0
movss dword [rsp + 0x94], xmm1
mov rax, qword [0x140389ba0]
xor r8d, r8d
lea rdx, [rsp + 0x90]
mov rcx, qword [rax + 0x1a90]
call fcn.140097810
mov byte [0x14038a121], 1
movups xmm0, xmmword [0x140389cc0]
movaps xmmword [rsp + 0xf0], xmm0
movups xmm1, xmmword [0x140389cd0]
movaps xmmword [rsp + 0x100], xmm1
mov eax, dword [0x140389ce0]
mov dword [rsp + 0x110], eax
movsd xmm0, qword [0x14034bf28]
movsd qword [rsp + 0x50], xmm0
movzx eax, byte [reloc.WLDAP32.dll_Ordinal_60]
mov byte [rsp + 0x50], Ordinal_41
xor byte [rsp + 0x51], 0x35
xor byte [rsp + 0x52], 0x36
xor byte [rsp + 0x53], 0x37
xor byte [rsp + 0x54], 0x38
xor byte [rsp + 0x55], 0x39
xor byte [rsp + 0x56], 0x3a
xor byte [rsp + 0x57], 0x3b
xor al, 0x3c
mov byte [rsp + 0x58], al
lea r9, [rsp + 0xf0]
lea r8, [rsp + 0x50]
mov edx, Ordinal_27
lea rcx, [rsp + 0x1b0]
call fcn.140274ee4
mov qword [rsp + 0x158], r15
mov qword [rsp + 0x160], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x148], 0
lea rax, [rsp + 0x1b0]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], 0
jne 0x14006eff0
lea rdx, [rsp + 0x1b0]
lea rcx, [rsp + 0x148]
call fcn.14007c9b0
or esi, 1
xor eax, eax
mov word [rsp + 0x60], ax
lea r8, [rsp + 0x148]
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x128]
call fcn.14007d7d0
nop
movsd xmm0, qword [str.CPZTWT_e_TnA]
movsd qword [rsp + 0x78], xmm0
mov eax, dword [0x14034bf98]
mov dword [rsp + 0x80], eax
movzx eax, word [0x14034bf9c]
mov word [rsp + 0x84], ax
cmp byte [0x14034bf9d], 0
je 0x14006f1c0
mov r8d, r15d
cmp edi, 2
jl 0x14006f183
movdqa xmm4, xmmword [0x14034fa50]
movd xmm6, r12d
movd xmm5, r13d
movdqa xmm2, xmmword [0x14034eac0]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm5
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x14034eb00]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x14034eb80]
packuswb xmm2, xmm2
mov eax, dword [0x14034ebb0]
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [str.CPZTWT_e_TnA]
pxor xmm2, xmm1
movd dword [rsp + 0x78], xmm2
movdqa xmm3, xmmword [0x14034ead0]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm5
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x14034eb00]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x14034eb80]
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rsp + 0x7c]
pxor xmm2, xmm1
movd dword [rsp + 0x7c], xmm2
mov r8d, 8
mov eax, r8d
lea r9, [rsp + 0x78]
add r9, rax
nop
mov eax, 0x4bda12f7
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x36
movzx eax, r8b
sub al, cl
add al, 0x34
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0xe
jl 0x14006f190
lea rcx, [rsp + 0x78]
call fcn.1400afe30
mov rbx, qword [0x140389ba0]
mov rax, qword [rbx + 0x1a90]
cmp byte [rax + 0x8b], 0
jne 0x14006f1fa
mov eax, dword [rax + 0x1b0]
neg eax
sbb ecx, ecx
add ecx, 6
call fcn.1400b28f0
mov rbx, qword [0x140389ba0]
movaps xmm6, xmmword [0x14034edc0]
mov dword [rsp + 0x1b0], r15d
movups xmm0, xmmword [rbx + 0x1624]
movups xmmword [rsp + 0x1b4], xmm0
lea rcx, [rbx + 0x1bc0]
lea rdx, [rsp + 0x1b0]
call fcn.14009e240
movups xmmword [rbx + 0x1624], xmm6
mov eax, dword [str.QMFJ_:]
mov dword [rsp + 0x40], eax
movzx eax, word [0x14034be44]
mov word [rsp + 0x44], ax
movzx eax, byte [0x14034be46]
mov byte [rsp + 0x40], 0x65
xor byte [rsp + 0x41], 0x35
xor byte [rsp + 0x42], 0x36
xor byte [rsp + 0x43], 0x37
xor byte [rsp + 0x44], 0x38
xor byte [rsp + 0x45], 0x39
xor al, 0x3a
mov byte [rsp + 0x46], al
lea rcx, [rsp + 0x40]
call fcn.1400afe30
movaps xmm1, xmm9
xorps xmm0, xmm0
call fcn.140097e30
movups xmm0, xmmword [0x14034be00]
movups xmmword [rsp + 0xa8], xmm0
movups xmm1, xmmword [0x14034be10]
movups xmmword [rsp + 0xb8], xmm1
movzx eax, word [0x14034be20]
mov word [rsp + 0xc8], ax
mov r8d, r15d
cmp edi, 2
jl 0x14006f417
movdqa xmm5, xmmword [0x14034eac0]
movdqa xmm4, xmmword [0x14034fa50]
movd xmm6, r12d
movdqa xmm7, xmmword [0x14034eb00]
movd xmm8, r13d
movdqa xmm0, xmmword [0x14034ebb0]
movdqa xmmword [rsp + 0x1b0], xmm0
lea rcx, [rsp + 0xac]
mov edx, dword [rsp + 0x1b0]
nop word [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x14034eb80]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
pxor xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x14034eb80]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
pxor xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x20
jl 0x14006f310
cmp r8d, 0x22
jge 0x14006f460
movsxd rax, r8d
lea r9, [rsp + 0xa8]
add r9, rax
nop word [rax + rax]
mov eax, 0x4bda12f7
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x36
movzx eax, r8b
sub al, cl
add al, 0x34
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x22
jl 0x14006f430
lea rcx, [rsp + 0xa8]
call fcn.1400afe30
mov r8, qword [0x140389ba0]
movsxd rax, dword [r8 + 0x1bc0]
lea rdx, [rax + rax*4]
mov rcx, qword [r8 + 0x1bc8]
movsxd rax, dword [rcx + rdx*4 - 0x14]
add rax, rax
movups xmm0, xmmword [rcx + rdx*4 - 0x10]
movups xmmword [r8 + rax*8 + 0x1624], xmm0
dec dword [r8 + 0x1bc0]
lea rcx, [rsp + 0x128]
cmp qword [rsp + 0x140], 0x10
cmovae rcx, qword [rsp + 0x128]
call fcn.1400afe30
movaps xmm1, xmm9
xorps xmm0, xmm0
call fcn.140097e30
movaps xmm6, xmmword [0x14034ed20]
mov rbx, qword [0x140389ba0]
mov dword [rsp + 0x1b0], r15d
movups xmm0, xmmword [rbx + 0x1624]
movups xmmword [rsp + 0x1b4], xmm0
lea rcx, [rbx + 0x1bc0]
lea rdx, [rsp + 0x1b0]
call fcn.14009e240
movups xmmword [rbx + 0x1624], xmm6
movups xmm0, xmmword [0x14034ccb0]
movups xmmword [rsp + 0xd0], xmm0
movups xmm1, xmmword [0x14034ccc0]
movups xmmword [rsp + 0xe0], xmm1
psrldq xmm1, 0xf
movd eax, xmm1
test al, al
je 0x14006f6d2
mov r8d, r15d
cmp edi, 2
jl 0x14006f691
movdqa xmm5, xmmword [0x14034eac0]
mov edx, r15d
movdqa xmm4, xmmword [0x14034fa50]
movd xmm6, r12d
movdqa xmm7, xmmword [0x14034eb00]
movd xmm8, r13d
movdqa xmm0, xmmword [0x14034ebb0]
movdqa xmmword [rsp + 0x1b0], xmm0
lea rcx, [rsp + 0xd4]
mov r8d, dword [rsp + 0x1b0]
nop
movd xmm2, edx
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x14034eb80]
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
pxor xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [rdx + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x14034eb80]
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rcx]
pxor xmm2, xmm0
movd dword [rcx], xmm2
add edx, 8
lea rcx, [rcx + 8]
cmp edx, 0x20
jl 0x14006f590
jmp 0x14006f6d2
lea r9, [rsp + 0xd0]
nop dword [rax]
mov eax, 0x2f684bdb
mul r8d
mov eax, r8d
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x36
movzx eax, r8b
sub al, cl
add al, 0x34
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x20
jl 0x14006f6a0
lea rcx, [rsp + 0xd0]
call fcn.1400afe30
mov r8, qword [0x140389ba0]
movsxd rax, dword [r8 + 0x1bc0]
lea rdx, [rax + rax*4]
mov rcx, qword [r8 + 0x1bc8]
movsxd rax, dword [rcx + rdx*4 - 0x14]
add rax, rax
movups xmm0, xmmword [rcx + rdx*4 - 0x10]
movups xmmword [r8 + rax*8 + 0x1624], xmm0
dec dword [r8 + 0x1bc0]
mov rax, qword [r8 + 0x1a90]
cmp byte [rax + 0x8b], 0
jne 0x14006f737
mov eax, dword [rax + 0x1b0]
neg eax
sbb ecx, ecx
add ecx, 6
call fcn.1400b28f0
mov qword [rsp + 0x98], 0
movsd xmm0, qword [str.XZWS]
movsd qword [rsp + 0x68], xmm0
mov eax, dword [0x14034cff8]
mov dword [rsp + 0x70], eax
cmp byte [0x14034cffb], 0
je 0x14006f8c0
mov r8d, r15d
cmp edi, 2
jl 0x14006f880
movdqa xmm4, xmmword [0x14034fa50]
movd xmm6, r12d
movd xmm5, r13d
movdqa xmm2, xmmword [0x14034eac0]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm5
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x14034eb00]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x14034eb80]
packuswb xmm2, xmm2
mov eax, dword [0x14034ebb0]
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [str.XZWS]
pxor xmm2, xmm1
movd dword [rsp + 0x68], xmm2
movdqa xmm3, xmmword [0x14034ead0]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm5
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x14034eb00]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x14034eb80]
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rsp + 0x6c]
pxor xmm2, xmm1
movd dword [rsp + 0x6c], xmm2
mov r8d, 8
mov eax, r8d
lea r9, [rsp + 0x68]
add r9, rax
nop dword [rax + rax]
mov eax, 0x4bda12f7
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x36
movzx eax, r8b
sub al, cl
add al, 0x34
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0xc
jl 0x14006f890
lea rdx, [rsp + 0x98]
lea rcx, [rsp + 0x68]
call fcn.1400b0820
test al, al
je 0x14006f992
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
nop
mov rdx, qword [rsp + 0x140]
cmp rdx, 0x10
jb 0x14006f929
inc rdx
mov rcx, qword [rsp + 0x128]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006f924
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14006fc62
call fcn.140261c34
mov qword [rsp + 0x138], r15
mov qword [rsp + 0x140], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x128], 0
mov rdx, qword [rsp + 0x160]
cmp rdx, 0x10
jb 0x14006f988
inc rdx
mov rcx, qword [rsp + 0x148]
mov r8, rcx
cmp rdx, 0x1000
jb 0x14006f983
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub r8, rcx
add r8, 0xfffffffffffffff8
cmp r8, 0x1f
ja 0x14006fc68
call fcn.140261c34
mov eax, 1
jmp 0x14006fc07
movaps xmm1, xmm9
xorps xmm0, xmm0
call fcn.140097e30
mov qword [rsp + 0xa0], 0
mov eax, dword [0x140347038]
mov dword [rsp + 0x48], eax
movzx eax, byte [0x14034703c]
mov byte [rsp + 0x48], 0x65
xor byte [rsp + 0x49], 0x35
xor byte [rsp + 0x4a], 0x36
xor byte [rsp + 0x4b], 0x37
xor al, 0x38
mov byte [rsp + 0x4c], al
lea rdx, [rsp + 0xa0]
lea rcx, [rsp + 0x48]
call fcn.1400b0820
test al, al
jne 0x14006fc5c
mov rdx, qword [rsp + 0x140]
cmp rdx, 0x10
jb 0x14006fa32
inc rdx
mov rcx, qword [rsp + 0x128]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006fa2d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14006fc62
call fcn.140261c34
mov qword [rsp + 0x138], r15
mov qword [rsp + 0x140], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x128], 0
mov rdx, qword [rsp + 0x160]
cmp rdx, 0x10
jb 0x14006fa91
inc rdx
mov rcx, qword [rsp + 0x148]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006fa8c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14006fc68
call fcn.140261c34
call fcn.1400971e0
nop
call fcn.1400916c0
mov rcx, qword [0x14038a068]
mov rax, qword [rcx]
xor r8d, r8d
lea edx, [r8 + 7]
call qword [rax + 0x1c8]
mov rcx, qword [0x14038a068]
mov rax, qword [rcx]
xor r8d, r8d
lea edx, [r8 + 0x1b]
call qword [rax + 0x1c8]
mov rcx, qword [0x14038a068]
mov rax, qword [rcx]
xor r8d, r8d
mov edx, 0xae
call qword [rax + 0x1c8]
mov rcx, qword [0x14038a068]
mov rax, qword [rcx]
mov dword [rsp + 0x30], r15d
movss dword [rsp + 0x28], xmm12
mov dword [rsp + 0x20], r15d
mov r9d, 3
xor r8d, r8d
xor edx, edx
call qword [rax + 0x158]
mov rcx, qword [0x14038a068]
mov rax, qword [rcx]
call qword [rax + 0x148]
test eax, eax
js 0x14006fb53
call fcn.140091a70
mov rax, qword [0x140389ba0]
add rax, 0x1d90
mov rcx, r15
cmp byte [rax], r15b
cmovne rcx, rax
call fcn.1400adfb0
mov rcx, qword [0x14038a068]
mov rax, qword [rcx]
call qword [rax + 0x150]
mov rcx, qword [0x14038a068]
mov rax, qword [rcx]
mov qword [rsp + 0x20], r15
xor r9d, r9d
xor r8d, r8d
xor edx, edx
call qword [rax + 0x88]
mov ebx, eax
call fcn.14006b710
cmp ebx, 0x88760868
jne 0x14006ec70
mov rcx, qword [0x14038a068]
mov rax, qword [rcx]
call qword [rax + Ordinal_26]
cmp eax, 0x88760869
jne 0x14006ec70
call fcn.1400786d0
jmp 0x14006ec70
call fcn.1400ae740
mov qword [0x14038a0f8], r15
call fcn.14008eb30
mov rcx, qword [0x14038a068]
test rcx, rcx
je 0x14006fbcf
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [0x14038a068], r15
mov rcx, qword [0x14038a060]
test rcx, rcx
je 0x14006fbe8
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [0x14038a060], r15
mov rcx, qword [0x140389888]
call qword [sym.imp.USER32.dll_DestroyWindow]
mov rdx, r14
lea rcx, reloc.WLDAP32.dll_Ordinal_32
call qword [sym.imp.USER32.dll_UnregisterClassA]
xor eax, eax
mov rcx, qword [rsp + 0x1d0]
xor rcx, rsp
call fcn.140261c10
lea r11, [rsp + 0x250]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov r12, qword [r11 + 0x38]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
mov rsp, r11
pop r15
pop r14
pop r13
ret
call fcn.14006b4d0
nop
call fcn.140276034
nop
call fcn.140276034
int3