Function at 0x140012aa0
Capabilities:
Access peb ldr_data
Encode data using xor
Enumerate processes
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x520
mov rax, qword [0x1400ad080]
xor rax, rsp
mov qword [rsp + 0x510], rax
lea rdi, [0x1400ae7b0]
mov rsi, rdi
cmp qword [0x1400ae7c8], 0xf
cmova rsi, qword [0x1400ae7b0]
mov dword [rsp + 0xc0], 0x238
xor edx, edx
lea ecx, [rdx + 2]
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rbx, rax
lea rdx, [rsp + 0xc0]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_Process32FirstW]
cmp eax, 1
jne 0x140012b7f
lea rdx, [rsp + 0xc0]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_Process32NextW]
cmp eax, 1
jne 0x140012b7f
mov qword [rsp + 0x20], 0xffffffffffffffff
mov r9, rsi
mov r8d, 0x104
lea rdx, [rsp + 0x300]
lea rcx, [rsp + 0xa8]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_mbstowcs_s]
lea rdx, [rsp + 0x300]
lea rcx, [rsp + 0xec]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
mov rcx, rbx
test eax, eax
je 0x140012f44
lea rdx, [rsp + 0xc0]
call qword [sym.imp.KERNEL32.dll_Process32NextW]
cmp eax, 1
je 0x140012b23
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
movups xmm0, xmmword [0x14009faa8]
movups xmmword [rsp + 0x68], xmm0
mov eax, dword [0x14009fab8]
mov dword [rsp + 0x78], eax
movzx eax, byte [0x14009fabc]
mov byte [rsp + 0x7c], al
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r9, qword [rax + 0x30]
movsxd rcx, dword [r9 + 0x3c]
mov r11d, dword [rcx + r9 + 0x88]
add r11, r9
cmp r11, r9
je 0x140012f3c
mov r10d, dword [r11 + 0x18]
test r10d, r10d
je 0x140012f3c
mov ebx, dword [r11 + 0x20]
nop dword [rax]
dec r10d
lea rdx, [rbx + r10*4]
mov ecx, dword [rdx + r9]
add rcx, r9
mov r8d, 0x811c9dc5
movzx edx, byte [rcx]
inc rcx
test dl, dl
je 0x140012f33
nop dword [rax]
nop word [rax + rax]
movsx edx, dl
xor edx, r8d
imul r8d, edx, 0x1000193
movzx edx, byte [rcx]
lea rcx, [rcx + 1]
test dl, dl
jne 0x140012c20
cmp r8d, 0xe76fb4aa
jne 0x140012f33
mov edx, dword [r11 + 0x1c]
add rdx, r9
mov ecx, dword [r11 + 0x24]
add rcx, r9
movzx ecx, word [rcx + r10*2]
mov r8d, dword [rdx + rcx*4]
add r8, r9
xor ebx, ebx
cmp dword [reloc.WS2_32.dll_accept], 2
jl 0x140012db8
movdqa xmm0, xmmword [0x1400a0280]
movdqa xmmword [rsp + 0x80], xmm0
lea rcx, [rsp + 0x68]
movd xmm2, ebx
pshufd xmm2, xmm2, 0
paddd xmm2, xmmword [0x1400a0080]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmmword [0x1400a05a0]
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmmword [0x1400a05a0]
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1400a00a0]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400a0110]
packuswb xmm2, xmm2
movd xmm0, dword [rsp + 0x80]
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
lea eax, [rbx + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmmword [0x1400a0080]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmmword [0x1400a05a0]
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmmword [0x1400a05a0]
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1400a00a0]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400a0110]
packuswb xmm2, xmm2
movd xmm0, dword [rsp + 0x80]
paddb xmm2, xmm0
movd xmm0, dword [rcx + 4]
xorps xmm2, xmm0
movd dword [rcx + 4], xmm2
add ebx, 8
mov eax, ebx
lea rcx, [rcx + 8]
cmp ebx, 0x10
jl 0x140012c84
cmp eax, 0x15
jge 0x140012dfe
movsxd rax, ebx
lea r9, [rsp + 0x68]
add r9, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x92492493
imul ebx
add edx, ebx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x38
movzx eax, bl
sub al, cl
add al, 0x39
xor byte [r9], al
inc ebx
lea r9, [r9 + 1]
cmp ebx, 0x15
jl 0x140012dd0
lea rcx, [rsp + 0x68]
call r8
movsd xmm0, qword [0x14009fb88]
movsd qword [rsp + 0xa8], xmm0
movzx eax, word [0x14009fb90]
mov word [rsp + 0xb0], ax
cmp byte [0x14009fb91], 0
je 0x140012e7f
mov byte [rsp + 0xa8], reloc.WLDAP32.dll_Ordinal_32
xor byte [rsp + 0xa9], 0x3a
xor byte [rsp + 0xaa], 0x3b
xor byte [rsp + 0xab], 0x3c
xor byte [rsp + 0xac], 0x3d
xor byte [rsp + 0xad], 0x3e
xor byte [rsp + 0xae], 0x3f
xor byte [rsp + 0xaf], 0x40
xor byte [rsp + 0xb0], 0x41
xor byte [rsp + 0xb1], 0x42
lea rdx, [rsp + 0xa8]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140026a20
cmp qword [0x1400ae7c8], 0xf
cmova rdi, qword [0x1400ae7b0]
mov r8, qword [0x1400ae7c0]
mov rdx, rdi
mov rcx, rax
call fcn.1400280d0
movsd xmm0, qword [0x14009fd28]
movsd qword [rsp + 0x50], xmm0
movzx edx, word [0x14009fd30]
mov word [rsp + 0x58], dx
movzx ecx, byte [0x14009fd32]
mov byte [rsp + 0x50], reloc.WLDAP32.dll_Ordinal_32
xor byte [rsp + 0x51], 0x3a
xor byte [rsp + 0x52], 0x3b
xor byte [rsp + 0x53], 0x3c
xor byte [rsp + 0x54], 0x3d
xor byte [rsp + 0x55], 0x3e
xor byte [rsp + 0x56], 0x3f
xor byte [rsp + 0x57], 0x40
xor dl, 0x41
mov byte [rsp + 0x58], dl
xor byte [rsp + 0x59], 0x42
xor cl, 0x43
mov byte [rsp + 0x5a], cl
lea rdx, [rsp + 0x50]
mov rcx, rax
call fcn.140026a20
lea rdx, [0x140027050]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
jmp 0x140013b6c
test r10d, r10d
jne 0x140012bf0
mov rax, qword [rax]
jmp 0x140012bc0
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov esi, dword [rsp + 0xc8]
test esi, esi
je 0x140012b88
lea rdx, [0x1400ae430]
lea rcx, [rsp + 0x80]
call fcn.140025db0
mov r8, rax
lea rdx, [rsp + 0x68]
lea rcx, [0x1400ae4d0]
call fcn.140032e10
mov rdi, rax
lea rax, [0x1400ad298]
cmp rax, rdi
je 0x140013019
mov rcx, qword [0x1400ad298]
test rcx, rcx
je 0x140012fea
mov rdx, qword [0x1400ad2a8]
sub rdx, rcx
cmp rdx, 0x1000
jb 0x140012fcf
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14001304e
mov rcx, r8
call fcn.14008aae0
xorps xmm0, xmm0
movdqu xmmword [0x1400ad298], xmm0
xor ebx, ebx
mov qword [0x1400ad2a8], rbx
jmp 0x140012fec
xor ebx, ebx
mov rax, qword [rdi]
mov qword [0x1400ad298], rax
mov rax, qword [rdi + 8]
mov qword [0x1400ad2a0], rax
mov rax, qword [rdi + 0x10]
mov qword [0x1400ad2a8], rax
mov qword [rdi], rbx
mov qword [rdi + 8], rbx
mov qword [rdi + 0x10], rbx
jmp 0x14001301b
xor ebx, ebx
mov rcx, qword [rsp + 0x68]
test rcx, rcx
je 0x14001305a
mov rdx, qword [rsp + 0x78]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140013055
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140013055
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14008aae0
mov r8d, esi
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rsi, rax
test rax, rax
jne 0x140013571
movups xmm0, xmmword [0x14009faa8]
movups xmmword [rsp + 0x50], xmm0
mov eax, dword [0x14009fab8]
mov dword [rsp + 0x60], eax
movzx eax, byte [0x14009fabc]
mov byte [rsp + 0x64], al
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax + rax]
mov r9, qword [rax + 0x30]
movsxd rcx, dword [r9 + 0x3c]
mov r11d, dword [rcx + r9 + 0x88]
add r11, r9
cmp r11, r9
je 0x140013569
mov r10d, dword [r11 + 0x18]
test r10d, r10d
je 0x140013569
mov edi, dword [r11 + 0x20]
nop dword [rax]
dec r10d
lea rdx, [rdi + r10*4]
mov r8d, dword [rdx + r9]
add r8, r9
mov edx, 0x811c9dc5
movzx ecx, byte [r8]
inc r8
test cl, cl
je 0x140013560
nop dword [rax]
nop word [rax + rax]
movsx ecx, cl
xor ecx, edx
imul edx, ecx, 0x1000193
movzx ecx, byte [r8]
lea r8, [r8 + 1]
test cl, cl
jne 0x140013110
cmp edx, 0xe76fb4aa
jne 0x140013560
mov edx, dword [r11 + 0x1c]
add rdx, r9
mov ecx, dword [r11 + 0x24]
add rcx, r9
movzx ecx, word [rcx + r10*2]
mov r10d, dword [rdx + rcx*4]
add r10, r9
mov r8d, ebx
mov edi, dword [reloc.WS2_32.dll_accept]
cmp edi, 2
jl 0x1400132ac
movdqa xmm0, xmmword [0x1400a0280]
movdqa xmmword [rsp + 0x80], xmm0
lea rcx, [rsp + 0x50]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmmword [0x1400a0080]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmmword [0x1400a05a0]
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmmword [0x1400a05a0]
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1400a00a0]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400a0110]
packuswb xmm2, xmm2
movd xmm0, dword [rsp + 0x80]
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmmword [0x1400a0080]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmmword [0x1400a05a0]
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmmword [0x1400a05a0]
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1400a00a0]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400a0110]
packuswb xmm2, xmm2
movd xmm0, dword [rsp + 0x80]
paddb xmm2, xmm0
movd xmm0, dword [rcx + 4]
xorps xmm2, xmm0
movd dword [rcx + 4], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x10
jl 0x140013175
cmp r8d, 0x15
jge 0x1400132f3
movsxd rax, r8d
lea r9, [rsp + 0x50]
add r9, rax
nop word [rax + rax]
mov eax, 0x92492493
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x38
movzx eax, r8b
sub al, cl
add al, 0x39
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x15
jl 0x1400132c0
lea rcx, [rsp + 0x50]
call r10
movsd xmm0, qword [0x14009fb88]
movsd qword [rsp + 0xa8], xmm0
movzx eax, word [0x14009fb90]
mov word [rsp + 0xb0], ax
cmp byte [0x14009fb91], 0
je 0x140013374
mov byte [rsp + 0xa8], reloc.WLDAP32.dll_Ordinal_32
xor byte [rsp + 0xa9], 0x3a
xor byte [rsp + 0xaa], 0x3b
xor byte [rsp + 0xab], 0x3c
xor byte [rsp + 0xac], 0x3d
xor byte [rsp + 0xad], 0x3e
xor byte [rsp + 0xae], 0x3f
xor byte [rsp + 0xaf], 0x40
xor byte [rsp + 0xb0], 0x41
xor byte [rsp + 0xb1], 0x42
lea rdx, [rsp + 0xa8]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140026a20
mov r9, rax
movups xmm0, xmmword [0x14009fee8]
movups xmmword [rsp + 0x50], xmm0
mov ecx, dword [0x14009fef8]
mov dword [rsp + 0x60], ecx
cmp byte [0x14009fefb], 0
je 0x14001353e
cmp edi, 2
jl 0x140013504
movdqa xmm0, xmmword [0x1400a0280]
movdqa xmmword [rsp + 0x80], xmm0
lea rcx, [rsp + 0x50]
nop dword [rax]
movd xmm2, ebx
pshufd xmm2, xmm2, 0
paddd xmm2, xmmword [0x1400a0080]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmmword [0x1400a05a0]
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmmword [0x1400a05a0]
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1400a00a0]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400a0110]
packuswb xmm2, xmm2
movd xmm0, dword [rsp + 0x80]
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
lea eax, [rbx + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmmword [0x1400a0080]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmmword [0x1400a05a0]
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmmword [0x1400a05a0]
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1400a00a0]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400a0110]
packuswb xmm2, xmm2
movd xmm0, dword [rsp + 0x80]
paddb xmm2, xmm0
movd xmm0, dword [rcx + 4]
xorps xmm2, xmm0
movd dword [rcx + 4], xmm2
add ebx, 8
mov eax, ebx
lea rcx, [rcx + 8]
cmp ebx, 0x10
jl 0x1400133d0
cmp eax, 0x14
jge 0x14001353e
movsxd rax, ebx
lea r8, [rsp + 0x50]
add r8, rax
nop
mov eax, 0x92492493
imul ebx
add edx, ebx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x38
movzx eax, bl
sub al, cl
add al, 0x39
xor byte [r8], al
inc ebx
lea r8, [r8 + 1]
cmp ebx, 0x14
jl 0x140013510
lea rdx, [rsp + 0x50]
mov rcx, r9
call fcn.140026a20
lea rdx, [0x140027050]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
jmp 0x140013b6c
test r10d, r10d
jne 0x1400130e0
mov rax, qword [rax]
jmp 0x1400130b0
mov rcx, qword [0x1400ad2a0]
sub rcx, qword [0x1400ad298]
call fcn.14008ae8c
mov rdi, rax
mov r8, qword [0x1400ad2a0]
mov rdx, qword [0x1400ad298]
sub r8, rdx
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
mov rdx, rdi
mov rcx, rsi
call fcn.1400286d0
test al, al
jne 0x1400135bc
mov rcx, rdi
call fcn.14008aae0
mov edi, 0x8123
mov rcx, rdi
call fcn.14008aae0
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r9, qword [rax + 0x30]
movsxd rcx, dword [r9 + 0x3c]
mov r11d, dword [rcx + r9 + 0x88]
add r11, r9
cmp r11, r9
je 0x140013bab
mov r10d, dword [r11 + 0x18]
test r10d, r10d
je 0x140013bab
mov edi, dword [r11 + 0x20]
nop dword [rax]
dec r10d
lea rdx, [r9 + r10*4]
mov r8d, dword [rdx + rdi]
add r8, r9
mov edx, 0x811c9dc5
movzx ecx, byte [r8]
inc r8
test cl, cl
je 0x140013ba2
nop dword [rax]
nop word [rax + rax]
movsx ecx, cl
xor ecx, edx
imul edx, ecx, 0x1000193
movzx ecx, byte [r8]
lea r8, [r8 + 1]
test cl, cl
jne 0x140013640
cmp edx, 0x491e0a9c
jne 0x140013ba2
mov edx, dword [r11 + 0x1c]
add rdx, r9
mov ecx, dword [r11 + 0x24]
add rcx, r9
movzx ecx, word [rcx + r10*2]
mov eax, dword [rdx + rcx*4]
add rax, r9
lea rcx, [0x14009fa0c]
call rax
movups xmm0, xmmword [0x14009faa8]
movups xmmword [rsp + 0x50], xmm0
mov eax, dword [0x14009fab8]
mov dword [rsp + 0x60], eax
movzx eax, byte [0x14009fabc]
mov byte [rsp + 0x64], al
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r9, qword [rax + 0x30]
movsxd rcx, dword [r9 + 0x3c]
mov r11d, dword [rcx + r9 + 0x88]
add r11, r9
cmp r11, r9
je 0x140013b9a
mov r10d, dword [r11 + 0x18]
test r10d, r10d
je 0x140013b9a
mov edi, dword [r11 + 0x20]
nop dword [rax]
dec r10d
lea rdx, [r9 + r10*4]
mov r8d, dword [rdx + rdi]
add r8, r9
mov edx, 0x811c9dc5
movzx ecx, byte [r8]
inc r8
test cl, cl
je 0x140013b91
nop dword [rax]
nop word [rax + rax]
movsx ecx, cl
xor ecx, edx
imul edx, ecx, 0x1000193
movzx ecx, byte [r8]
lea r8, [r8 + 1]
test cl, cl
jne 0x140013720
cmp edx, 0xe76fb4aa
jne 0x140013b91
mov edx, dword [r11 + 0x1c]
add rdx, r9
mov ecx, dword [r11 + 0x24]
add rcx, r9
movzx ecx, word [rcx + r10*2]
mov r10d, dword [rdx + rcx*4]
add r10, r9
mov r8d, ebx
mov edi, dword [reloc.WS2_32.dll_accept]
cmp edi, 2
jl 0x1400138bc
movdqa xmm0, xmmword [0x1400a0280]
movdqa xmmword [rsp + 0x80], xmm0
lea rcx, [rsp + 0x50]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmmword [0x1400a0080]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmmword [0x1400a05a0]
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmmword [0x1400a05a0]
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1400a00a0]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400a0110]
packuswb xmm2, xmm2
movd xmm0, dword [rsp + 0x80]
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmmword [0x1400a0080]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmmword [0x1400a05a0]
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmmword [0x1400a05a0]
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1400a00a0]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400a0110]
packuswb xmm2, xmm2
movd xmm0, dword [rsp + 0x80]
paddb xmm2, xmm0
movd xmm0, dword [rcx + 4]
xorps xmm2, xmm0
movd dword [rcx + 4], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x10
jl 0x140013785
cmp r8d, 0x15
jge 0x140013903
movsxd rax, r8d
lea r9, [rsp + 0x50]
add r9, rax
nop word [rax + rax]
mov eax, 0x92492493
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x38
movzx eax, r8b
sub al, cl
add al, 0x39
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x15
jl 0x1400138d0
lea rcx, [rsp + 0x50]
call r10
movsd xmm0, qword [0x14009fb88]
movsd qword [rsp + 0xa8], xmm0
movzx eax, word [0x14009fb90]
mov word [rsp + 0xb0], ax
cmp byte [0x14009fb91], 0
je 0x140013984
mov byte [rsp + 0xa8], reloc.WLDAP32.dll_Ordinal_32
xor byte [rsp + 0xa9], 0x3a
xor byte [rsp + 0xaa], 0x3b
xor byte [rsp + 0xab], 0x3c
xor byte [rsp + 0xac], 0x3d
xor byte [rsp + 0xad], 0x3e
xor byte [rsp + 0xae], 0x3f
xor byte [rsp + 0xaf], 0x40
xor byte [rsp + 0xb0], 0x41
xor byte [rsp + 0xb1], 0x42
lea rdx, [rsp + 0xa8]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140026a20
mov r8, rax
movups xmm0, xmmword [0x14009fb98]
movups xmmword [rsp + 0x68], xmm0
mov ecx, dword [0x14009fba8]
mov dword [rsp + 0x78], ecx
movzx ecx, word [0x14009fbac]
mov word [rsp + 0x7c], cx
movzx ecx, byte [reloc.WLDAP32.dll_Ordinal_79]
mov byte [rsp + 0x7e], cl
cmp edi, 2
jl 0x140013b1b
movdqa xmm0, xmmword [0x1400a0280]
movdqa xmmword [rsp + 0x80], xmm0
lea rcx, [rsp + 0x68]
movd xmm2, ebx
pshufd xmm2, xmm2, 0
paddd xmm2, xmmword [0x1400a0080]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmmword [0x1400a05a0]
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmmword [0x1400a05a0]
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1400a00a0]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400a0110]
packuswb xmm2, xmm2
movd xmm0, dword [rsp + 0x80]
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
lea eax, [rbx + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmmword [0x1400a0080]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmmword [0x1400a05a0]
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmmword [0x1400a05a0]
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1400a00a0]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400a0110]
packuswb xmm2, xmm2
movd xmm0, dword [rsp + 0x80]
paddb xmm2, xmm0
movd xmm0, dword [rcx + 4]
xorps xmm2, xmm0
movd dword [rcx + 4], xmm2
add ebx, 8
mov eax, ebx
lea rcx, [rcx + 8]
cmp ebx, 0x10
jl 0x1400139e7
cmp eax, 0x17
jge 0x140013b5e
movsxd rax, ebx
lea r9, [rsp + 0x68]
add r9, rax
nop word [rax + rax]
mov eax, 0x92492493
imul ebx
add edx, ebx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x38
movzx eax, bl
sub al, cl
add al, 0x39
xor byte [r9], al
inc ebx
lea r9, [r9 + 1]
cmp ebx, 0x17
jl 0x140013b30
lea rdx, [rsp + 0x68]
mov rcx, r8
call fcn.140026a20
nop
mov rcx, qword [rsp + 0x510]
xor rcx, rsp
call fcn.14008aac0
lea r11, [rsp + 0x520]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rsp, r11
pop rdi
ret
test r10d, r10d
jne 0x1400136f0
mov rax, qword [rax]
jmp 0x1400136c0
test r10d, r10d
jne 0x140013610
mov rax, qword [rax]
jmp 0x1400135e0