Function at 0x140027990
Capabilities:
Encode data using xor

Disassembly:
mov rax, rsp
mov qword [rax + 0x18], rbx
push rbp
push rsi
push rdi
push r14
push r15
lea rbp, [rax - 0x48]
sub rsp, 0x120
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
mov rax, qword [0x1401e56c8]
xor rax, rsp
mov qword [rbp - 8], rax
mov r14, r9
mov rdi, r8
mov rbx, rdx
mov rsi, rcx
mov qword [rsp + 0x30], rcx
xor r15d, r15d
lea rcx, [rsp + 0x70]
call fcn.140028c10
nop
mov ebx, dword [rbx]
movzx eax, word [0x1401ea110]
imul rbx, rax
add rbx, qword [0x1401eca38]
mov qword [rsp + 0x70], rbx
cmp byte [rdi], r15b
je 0x140027e48
mov dword [rbp - 0x40], r15d
mov rdi, qword [0x1401ea128]
cmp byte [0x1401ec478], r15b
jne 0x140027a19
call fcn.1400c9300
mov rax, qword [0x1401ec358]
mov qword [rsp + 0x20], r15
mov r9d, 4
lea r8, [rbp - 0x40]
lea rdx, [rbx + 0x14]
mov rcx, rdi
test rax, rax
je 0x140027a3f
call rax
jmp 0x140027a45
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movzx ebx, word [0x1401ea110]
mov eax, dword [rbp - 0x40]
imul rbx, rax
add rbx, qword [0x1401eca38]
mov rdi, qword [0x1401ea128]
cmp byte [0x1401ec478], 0
jne 0x140027a6f
call fcn.1400c9300
mov rax, qword [0x1401ec358]
mov qword [rsp + 0x20], r15
mov r9d, 4
lea r8, [rbp - 0x40]
lea rdx, [rbx + 0x14]
mov rcx, rdi
test rax, rax
je 0x140027a95
call rax
jmp 0x140027a9b
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov eax, dword [rbp - 0x40]
test eax, eax
jne 0x140027c6d
mov qword [rsi], r15
mov rax, qword [str.cYSWULRF_Y__I_]
mov qword [rsp + 0x68], rax
cmp byte [0x1401ba64f], 0
je 0x140027c23
cmp dword [reloc.WS2_32.dll_accept], 2
jl 0x140027bdb
movdqa xmm4, xmmword [0x1401c4ea0]
mov eax, 5
movd xmm6, eax
mov eax, Ordinal_35
movd xmm5, eax
movdqa xmm2, xmmword [0x1401c4b30]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm5
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1401c4c20]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1401c4d00]
packuswb xmm2, xmm2
paddb xmm2, xmmword [0x1401c4db0]
movd xmm0, dword [rsp + 0x68]
xorps xmm2, xmm0
movd dword [rsp + 0x68], xmm2
movdqa xmm3, xmmword [0x1401c4b40]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm5
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1401c4c20]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1401c4d00]
packuswb xmm2, xmm2
paddb xmm2, xmmword [0x1401c4db0]
movd xmm0, dword [rsp + 0x6c]
xorps xmm2, xmm0
movd dword [rsp + 0x6c], xmm2
jmp 0x140027c23
lea r9, [rsp + 0x68]
mov r8d, r15d
nop dword [rax]
nop word [rax + rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x36
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 8
jl 0x140027bf0
xorps xmm0, xmm0
movups xmmword [rsi + 8], xmm0
mov qword [rsi + 0x18], r15
mov qword [rsi + 0x20], r15
lea rax, [rsp + 0x68]
mov r8, 0xffffffffffffffff
nop
inc r8
cmp byte [rax + r8], 0
jne 0x140027c40
lea rdx, [rsp + 0x68]
lea rcx, [rsi + 8]
call fcn.140010900
mov qword [rsi + 0x28], r15
mov qword [rsi + 0x30], r15
mov qword [rsi + 0x38], r15
mov dword [rsi + 0x40], r15d
jmp 0x140028b8a
movzx ebx, word [0x1401ea110]
imul rbx, rax
cmp rbx, 0x20000000
jb 0x140027dbe
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x20], xmm1
mov qword [rbp - 0x10], r15
mov edx, 0x58
lea rcx, [rbp - 0x20]
call fcn.140013f80
mov rax, qword [rbp - 0x20]
lea rcx, [rax + 0x58]
xorps xmm0, xmm0
xor edx, edx
movups xmmword [rax], xmm0
movups xmmword [rax + 0x10], xmm0
movups xmmword [rax + 0x20], xmm0
movups xmmword [rax + 0x30], xmm0
movups xmmword [rax + 0x40], xmm0
mov qword [rax + 0x50], rdx
mov qword [rbp - 0x18], rcx
lea rdx, [rbx + 0xc]
mov qword [rsp + 0x20], r15
mov r9d, 0x58
mov r8, qword [rbp - 0x20]
mov rcx, qword [0x1401ea128]
call fcn.1400c9940
cmp byte [0x1401ea1e8], 0
je 0x140028bdb
mov rax, qword [rbp - 0x18]
mov rcx, qword [rbp - 0x20]
sub rax, rcx
cmp rax, 4
jae 0x140027d09
mov eax, r15d
jmp 0x140027d10
mov eax, dword [rcx]
cmp eax, 0x50
ja 0x140027d6f
lea rdx, [rcx + 4]
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x50], xmm1
mov r8d, eax
lea rcx, [rsp + 0x40]
call fcn.140010900
nop
mov rcx, qword [rbp - 0x20]
test rcx, rcx
je 0x140027dd9
mov rdx, qword [rbp - 0x10]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140027d68
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140027db7
call fcn.14015c094
jmp 0x140027dd9
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
movdqa xmm1, xmmword [0x1401c4af0]
movdqu xmmword [rsp + 0x50], xmm1
mov byte [rsp + 0x40], 0
test rcx, rcx
je 0x140027dd9
mov rdx, qword [rbp - 0x10]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140027d68
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140027d68
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
movdqa xmm1, xmmword [0x1401c4af0]
movdqu xmmword [rsp + 0x50], xmm1
mov byte [rsp + 0x40], 0
mov rdx, qword [rbp - 0x70]
cmp rdx, 0x10
jb 0x140027e18
inc rdx
mov rcx, qword [rsp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140027e13
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140027e13
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14015c094
movups xmm0, xmmword [rsp + 0x40]
movups xmmword [rsp + 0x78], xmm0
movups xmm1, xmmword [rsp + 0x50]
movups xmmword [rbp - 0x78], xmm1
mov qword [rsp + 0x50], r15
mov qword [rsp + 0x58], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x40], 0
lea rcx, [rsp + 0x40]
call fcn.140010730
cmp byte [r14], 0
jne 0x140027e5b
mov rax, qword [rbp + 0x70]
cmp byte [rax], 0
je 0x140028b36
mov dword [rsp + 0x68], r15d
mov rbx, qword [rsp + 0x70]
mov rdi, qword [0x1401ea128]
cmp byte [0x1401ec478], 0
jne 0x140027e7a
call fcn.1400c9300
mov rax, qword [0x1401ec358]
mov qword [rsp + 0x20], r15
mov r9d, 4
lea r8, [rsp + 0x68]
lea rdx, [rbx + 0x18]
mov rcx, rdi
test rax, rax
je 0x140027ea1
call rax
jmp 0x140027ea7
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movzx ebx, word [0x1401ea110]
mov eax, dword [rsp + 0x68]
imul rbx, rax
add rbx, qword [0x1401eca38]
mov rdi, qword [0x1401ea128]
cmp byte [0x1401ec478], 0
jne 0x140027ed2
call fcn.1400c9300
mov rax, qword [0x1401ec358]
mov qword [rsp + 0x20], r15
mov r9d, 4
lea r8, [rsp + 0x68]
lea rdx, [rbx + 0xc]
mov rcx, rdi
test rax, rax
je 0x140027ef9
call rax
jmp 0x140027eff
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov eax, dword [rsp + 0x68]
test eax, eax
jne 0x1400280b3
mov qword [rsi], r15
mov rax, qword [str.cYSWULRF_Y__I_]
mov qword [rbp - 0x40], rax
cmp byte [0x1401ba64f], 0
je 0x140028083
cmp dword [reloc.WS2_32.dll_accept], 2
jl 0x140028041
movdqa xmm4, xmmword [0x1401c4ea0]
mov eax, 5
movd xmm6, eax
mov eax, Ordinal_35
movd xmm5, eax
movdqa xmm2, xmmword [0x1401c4b30]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm5
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1401c4c20]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1401c4d00]
packuswb xmm2, xmm2
mov eax, dword [0x1401c4db0]
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rbp - 0x40]
xorps xmm2, xmm1
movd dword [rbp - 0x40], xmm2
movdqa xmm3, xmmword [0x1401c4b40]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm5
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1401c4c20]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1401c4d00]
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rbp - 0x3c]
xorps xmm2, xmm1
movd dword [rbp - 0x3c], xmm2
jmp 0x140028083
lea r9, [rbp - 0x40]
mov r8d, r15d
nop dword [rax + rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x36
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 8
jl 0x140028050
xorps xmm0, xmm0
movups xmmword [rsi + 8], xmm0
mov qword [rsi + 0x18], r15
mov qword [rsi + 0x20], r15
lea rax, [rbp - 0x40]
mov r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x1400280a0
lea rdx, [rbp - 0x40]
jmp 0x140027c4f
movzx ebx, word [0x1401ea110]
imul rbx, rax
add rbx, qword [0x1401eca38]
mov rdi, qword [0x1401ea128]
cmp byte [0x1401ec478], 0
jne 0x1400280da
call fcn.1400c9300
mov rax, qword [0x1401ec358]
mov qword [rsp + 0x20], r15
mov r9d, 4
lea r8, [rbp - 0x50]
lea rdx, [rbx + 0x14]
mov rcx, rdi
test rax, rax
je 0x140028100
call rax
jmp 0x140028106
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
cmp dword [rbp - 0x50], 0
jne 0x140028146
mov rax, qword [rsp + 0x70]
mov qword [rsi], rax
movups xmm0, xmmword [rsp + 0x78]
movups xmmword [rsi + 8], xmm0
movups xmm1, xmmword [rbp - 0x78]
movups xmmword [rsi + 0x18], xmm1
mov rdx, qword [rbp - 0x58]
mov rcx, qword [rbp - 0x60]
mov rax, qword [rbp - 0x68]
mov qword [rsi + 0x28], rax
mov qword [rsi + 0x30], rcx
mov qword [rsi + 0x38], rdx
mov dword [rsi + 0x40], r15d
jmp 0x140028b6d
cmp byte [r14], 0
je 0x140028b36
cmp dword [0x1401ea214], 0
je 0x1400283fd
movsxd rdx, dword [0x1401ea210]
test edx, edx
je 0x1400283fd
mov dword [rbp - 0x40], r15d
movzx ebx, word [0x1401ea110]
mov eax, dword [rsp + 0x68]
imul rbx, rax
add rbx, qword [0x1401eca38]
add rbx, rdx
mov rdi, qword [0x1401ea128]
cmp byte [0x1401ec478], 0
jne 0x14002819e
call fcn.1400c9300
mov rax, qword [0x1401ec358]
mov qword [rsp + 0x20], r15
mov r9d, 4
lea r8, [rbp - 0x40]
mov rdx, rbx
mov rcx, rdi
test rax, rax
je 0x1400281c3
call rax
jmp 0x1400281c9
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
cmp dword [rbp - 0x40], 0x3f400000
je 0x140028394
mov dword [0x1401ea214], r15d
mov dword [0x1401ea210], r15d
mov qword [rsi], r15
mov rax, qword [str.cYSWULRF_Y__I_]
mov qword [rsp + 0x30], rax
cmp byte [0x1401ba64f], 0
je 0x140028363
cmp dword [reloc.WS2_32.dll_accept], 2
jl 0x14002831f
movdqa xmm4, xmmword [0x1401c4ea0]
mov eax, 5
movd xmm6, eax
mov eax, Ordinal_35
movd xmm5, eax
movdqa xmm2, xmmword [0x1401c4b30]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm5
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1401c4c20]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1401c4d00]
packuswb xmm2, xmm2
mov eax, dword [0x1401c4db0]
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rsp + 0x30]
xorps xmm2, xmm1
movd dword [rsp + 0x30], xmm2
movdqa xmm3, xmmword [0x1401c4b40]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm5
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1401c4c20]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1401c4d00]
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rsp + 0x34]
xorps xmm2, xmm1
movd dword [rsp + 0x34], xmm2
jmp 0x140028363
lea r9, [rsp + 0x30]
mov r8d, r15d
nop word [rax + rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x36
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 8
jl 0x140028330
xorps xmm0, xmm0
movups xmmword [rsi + 8], xmm0
mov qword [rsi + 0x18], r15
mov qword [rsi + 0x20], r15
lea rax, [rsp + 0x30]
mov r8, 0xffffffffffffffff
nop
inc r8
cmp byte [rax + r8], 0
jne 0x140028380
lea rdx, [rsp + 0x30]
jmp 0x140027c4f
movzx ecx, word [0x1401ea110]
mov eax, dword [rsp + 0x68]
imul rcx, rax
movsxd rbx, dword [0x1401ea214]
add rcx, qword [0x1401eca38]
add rbx, rcx
mov rdi, qword [0x1401ea128]
cmp byte [0x1401ec478], 0
jne 0x1400283c9
call fcn.1400c9300
mov rax, qword [0x1401ec358]
mov qword [rsp + 0x20], r15
mov r9d, 4
lea r8, [rsp + 0x68]
mov rdx, rbx
mov rcx, rdi
test rax, rax
je 0x1400283f2
call rax
jmp 0x1400285b3
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
jmp 0x1400285b3
xorps xmm0, xmm0
movups xmmword [rbp - 0x38], xmm0
mov qword [rbp - 0x38], r15
mov qword [rbp - 0x30], r15
mov qword [rbp - 0x28], r15
mov ecx, 0xfa
call fcn.14015be00
mov qword [rbp - 0x38], rax
lea rbx, [rax + 0xfa]
mov qword [rbp - 0x28], rbx
xor edx, edx
mov r8d, 0xfa
mov rcx, rax
call sub.VCRUNTIME140.dll_memset
mov qword [rbp - 0x30], rbx
mov rdi, qword [rbp - 0x38]
movzx ebx, word [0x1401ea110]
mov eax, dword [rsp + 0x68]
imul rbx, rax
add rbx, qword [0x1401eca38]
mov r14, qword [0x1401ea128]
cmp byte [0x1401ec478], 0
jne 0x14002846c
call fcn.1400c9300
mov rax, qword [0x1401ec358]
mov qword [rsp + 0x20], r15
mov r9d, 0xfa
mov r8, rdi
mov rdx, rbx
mov rcx, r14
test rax, rax
je 0x140028490
call rax
jmp 0x140028496
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, r15
mov r9, qword [rbp - 0x30]
mov r8, qword [rbp - 0x38]
sub r9, r8
lea r11, [r9 - 0x10]
test r11, r11
je 0x1400284e6
mov rdx, r8
mov r10d, 4
sub r10, r8
movzx ebx, byte [0x1401ea1e8]
test bl, bl
je 0x140028be9
lea rax, [rdx + r10]
cmp rax, r9
ja 0x1400284d9
cmp dword [rdx], 0x3f400000
je 0x140028526
add rcx, 4
add rdx, 4
cmp rcx, r11
jb 0x1400284c0
test r8, r8
je 0x1400285b3
mov rdx, qword [rbp - 0x28]
sub rdx, r8
mov rax, r8
cmp rdx, 0x1000
jb 0x1400285ab
add rdx, 0x27
mov r8, qword [r8 - 8]
sub rax, r8
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400285ab
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov dword [0x1401ea210], ecx
lea rax, [rcx + 8]
cmp rax, r9
ja 0x14002854b
cmp dword [r8 + rcx + 4], 0x20000000
jbe 0x14002854b
add ecx, 4
mov dword [0x1401ea214], ecx
jmp 0x14002858f
lea rax, [rcx + 0xc]
cmp rax, r9
ja 0x14002856a
cmp dword [r8 + rcx + 8], 0x20000000
jbe 0x14002856a
add ecx, 8
mov dword [0x1401ea214], ecx
jmp 0x14002858f
lea rax, [rcx + 0x10]
cmp rax, r9
ja 0x140028589
cmp dword [r8 + rcx + 0xc], 0x20000000
jbe 0x140028589
add ecx, 0xc
mov dword [0x1401ea214], ecx
jmp 0x14002858f
mov ecx, dword [0x1401ea214]
movsxd rdx, ecx
lea rax, [rdx + 4]
cmp rax, r9
mov eax, r15d
ja 0x1400285a2
mov eax, dword [r8 + rdx]
mov dword [rsp + 0x68], eax
jmp 0x1400284e6
mov rcx, r8
call fcn.14015c094
cmp dword [rsp + 0x68], 0
jne 0x140028774
mov qword [rsi], r15
mov rax, qword [str.cYSWULRF_Y__I_]
mov qword [rsp + 0x30], rax
cmp byte [0x1401ba64f], 0
je 0x140028743
cmp dword [reloc.WS2_32.dll_accept], 2
jl 0x1400286f9
movdqa xmm4, xmmword [0x1401c4ea0]
mov eax, 5
movd xmm6, eax
mov eax, Ordinal_35
movd xmm5, eax
movdqa xmm2, xmmword [0x1401c4b30]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm5
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1401c4c20]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1401c4d00]
packuswb xmm2, xmm2
mov eax, dword [0x1401c4db0]
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rsp + 0x30]
xorps xmm2, xmm1
movd dword [rsp + 0x30], xmm2
movdqa xmm3, xmmword [0x1401c4b40]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm5
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1401c4c20]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1401c4d00]
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rsp + 0x34]
xorps xmm2, xmm1
movd dword [rsp + 0x34], xmm2
jmp 0x140028743
lea r9, [rsp + 0x30]
mov r8d, r15d
nop dword [rax]
nop word [rax + rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x36
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 8
jl 0x140028710
xorps xmm0, xmm0
movups xmmword [rsi + 8], xmm0
mov qword [rsi + 0x18], r15
mov qword [rsi + 0x20], r15
lea rax, [rsp + 0x30]
mov r8, 0xffffffffffffffff
nop
inc r8
cmp byte [rax + r8], 0
jne 0x140028760
lea rdx, [rsp + 0x30]
jmp 0x140027c4f
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
mov qword [rbp - 0x20], r15
mov qword [rbp - 0x18], r15
mov qword [rbp - 0x10], r15
mov ecx, 0x3e8
call fcn.14015be00
mov qword [rbp - 0x20], rax
lea rbx, [rax + 0x3e8]
mov qword [rbp - 0x10], rbx
xor edx, edx
mov r8d, 0x3e8
mov rcx, rax
call sub.VCRUNTIME140.dll_memset
mov qword [rbp - 0x18], rbx
mov rdi, qword [rbp - 0x20]
movzx ebx, word [0x1401ea110]
mov eax, dword [rsp + 0x68]
imul rbx, rax
add rbx, qword [0x1401eca38]
mov r14, qword [0x1401ea128]
cmp byte [0x1401ec478], 0
jne 0x1400287e3
call fcn.1400c9300
mov rax, qword [0x1401ec358]
mov qword [rsp + 0x20], r15
mov r9d, 0x3e8
mov r8, rdi
mov rdx, rbx
mov rcx, r14
test rax, rax
je 0x140028807
call rax
jmp 0x14002880d
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov ecx, reloc.WS2_32.dll_recv
mov r9, qword [rbp - 0x18]
mov rax, r9
mov r8, qword [rbp - 0x20]
sub rax, r8
add rax, 0xfffffffffffffff8
cmp rcx, rax
jae 0x140028afa
cmp byte [0x1401ea1e8], 0
je 0x140028bcd
mov rax, r9
sub rax, r8
lea r14, [rcx + 4]
cmp r14, rax
mov edx, r15d
ja 0x140028850
mov edx, dword [r8 + rcx]
mov dword [rbp - 0x40], edx
cmp rax, 4
mov eax, r15d
jb 0x14002885f
mov eax, dword [r8]
cmp edx, eax
je 0x140028afa
mov rcx, qword [rbp - 0x60]
sub rcx, qword [rbp - 0x68]
sar rcx, 5
mov eax, dword [rbp - 0x50]
cmp rcx, rax
jae 0x140028afa
test edx, edx
je 0x140028ade
cmp edx, 0x20000000
jb 0x140028afa
jbe 0x140028ade
mov ebx, edx
movzx eax, word [0x1401ea110]
imul rbx, rax
add rbx, qword [0x1401eca38]
mov rdi, qword [0x1401ea128]
cmp byte [0x1401ec478], 0
jne 0x1400288c2
call fcn.1400c9300
mov rax, qword [0x1401ec358]
mov qword [rsp + 0x20], r15
mov r9d, 4
lea r8, [rbp - 0x40]
lea rdx, [rbx + 0x10]
mov rcx, rdi
test rax, rax
je 0x1400288e8
call rax
jmp 0x1400288ee
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov eax, dword [rbp - 0x40]
test eax, eax
je 0x140028ad6
mov ebx, eax
movzx eax, word [0x1401ea110]
imul rbx, rax
add rbx, qword [0x1401eca38]
mov rdi, qword [0x1401ea128]
cmp byte [0x1401ec478], 0
jne 0x140028922
call fcn.1400c9300
mov rax, qword [0x1401ec358]
mov qword [rsp + 0x20], r15
mov r9d, 4
lea r8, [rbp - 0x40]
lea rdx, [rbx + 0x14]
mov rcx, rdi
test rax, rax
je 0x140028948
call rax
jmp 0x14002894e
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov ebx, dword [rbp - 0x40]
movzx eax, word [0x1401ea110]
imul rbx, rax
cmp rbx, 0x20000000
jb 0x140028a6d
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x38], xmm1
mov qword [rbp - 0x28], r15
mov edx, Ordinal_27
lea rcx, [rbp - 0x38]
call fcn.140013f80
mov rax, qword [rbp - 0x38]
lea rcx, [rax + 0x18]
xorps xmm0, xmm0
xor edx, edx
movups xmmword [rax], xmm0
mov qword [rax + 0x10], rdx
mov qword [rbp - 0x30], rcx
lea rdx, [rbx + 0xc]
mov qword [rsp + 0x20], r15
mov r9d, Ordinal_27
mov r8, qword [rbp - 0x38]
mov rcx, qword [0x1401ea128]
call fcn.1400c9940
cmp byte [0x1401ea1e8], 0
je 0x140028bf7
mov rax, qword [rbp - 0x30]
mov rcx, qword [rbp - 0x38]
sub rax, rcx
cmp rax, 4
jae 0x1400289dd
mov eax, r15d
jmp 0x1400289e4
mov eax, dword [rcx]
cmp eax, 0x10
ja 0x140028a50
lea rdx, [rcx + 4]
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], r15
mov qword [rsp + 0x58], r15
mov r8d, eax
lea rcx, [rsp + 0x40]
call fcn.140010900
nop
mov rcx, qword [rbp - 0x38]
test rcx, rcx
je 0x140028a88
mov rdx, qword [rbp - 0x28]
sub rdx, rcx
cmp rdx, 0x1000
mov rax, rcx
jb 0x140028a3d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140028af3
call fcn.14015c094
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x38], xmm0
mov qword [rbp - 0x28], r15
jmp 0x140028a88
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], r15
mov qword [rsp + 0x58], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x40], 0
jmp 0x140028a0c
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], r15
mov qword [rsp + 0x58], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x40], 0
mov rdx, qword [rbp - 0x60]
cmp rdx, qword [rbp - 0x58]
je 0x140028abd
movups xmm0, xmmword [rsp + 0x40]
movups xmmword [rdx], xmm0
movups xmm1, xmmword [rsp + 0x50]
movups xmmword [rdx + 0x10], xmm1
mov qword [rsp + 0x50], r15
mov qword [rsp + 0x58], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x40], 0
add qword [rbp - 0x60], 0x20
jmp 0x140028acc
lea r8, [rsp + 0x40]
lea rcx, [rbp - 0x68]
call fcn.14002d7e0
nop
lea rcx, [rsp + 0x40]
call fcn.140010730
mov r8, qword [rbp - 0x20]
mov r9, qword [rbp - 0x18]
mov rcx, r14
mov rax, r9
sub rax, r8
add rax, 0xfffffffffffffff8
cmp r14, rax
jmp 0x140028827
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
test r8, r8
je 0x140028b36
mov rdx, qword [rbp - 0x10]
sub rdx, r8
mov rax, r8
cmp rdx, 0x1000
jb 0x140028b2e
add rdx, 0x27
mov r8, qword [r8 - 8]
sub rax, r8
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140028b2e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r8
call fcn.14015c094
mov rax, qword [rsp + 0x70]
mov qword [rsi], rax
movups xmm0, xmmword [rsp + 0x78]
movups xmmword [rsi + 8], xmm0
movups xmm1, xmmword [rbp - 0x78]
movups xmmword [rsi + 0x18], xmm1
mov rdx, qword [rbp - 0x58]
mov rcx, qword [rbp - 0x60]
mov rax, qword [rbp - 0x68]
mov qword [rsi + 0x28], rax
mov qword [rsi + 0x30], rcx
mov qword [rsi + 0x38], rdx
mov eax, dword [rbp - 0x50]
mov dword [rsi + 0x40], eax
mov qword [rbp - 0x68], r15
mov qword [rbp - 0x60], r15
mov qword [rbp - 0x58], r15
mov byte [rsp + 0x78], 0
mov qword [rbp - 0x70], reloc.WS2_32.dll_ntohs
mov qword [rbp - 0x78], r15
lea rcx, [rbp - 0x68]
call fcn.140013d10
lea rcx, [rsp + 0x78]
call fcn.140010730
mov rax, rsi
mov rcx, qword [rbp - 8]
xor rcx, rsp
call fcn.14015bde0
lea r11, [rsp + 0x120]
mov rbx, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
mov rsp, r11
pop r15
pop r14
pop rdi
pop rsi
pop rbp
ret
movss xmm0, dword [0x1401c4720]
call fcn.1400cdb40
nop
movss xmm0, dword [0x1401c4720]
call fcn.1400cdb40
nop
movss xmm0, dword [0x1401c4720]
call fcn.1400cdb40
nop
movss xmm0, dword [0x1401c4720]
call fcn.1400cdb40
int3