Function at 0x1401c9220
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x130]
sub rsp, 0x230
mov rax, qword [0x14065ef68]
xor rax, rsp
mov qword [rbp + 0x120], rax
mov rbx, rdx
mov qword [rsp + 0x48], rcx
xor r9d, r9d
mov dword [rsp + 0x30], r9d
xorps xmm0, xmm0
movups xmmword [rbp - 0x68], xmm0
mov qword [rbp - 0x58], r9
mov qword [rbp - 0x50], r9
mov rdi, qword [rdx + 0x10]
cmp qword [rdx + 0x18], 0x10
jb 0x1401c927d
mov rbx, qword [rdx]
movabs r15, 0x7fffffffffffffff
cmp rdi, r15
ja 0x1401ca0f0
mov esi, reloc.WS2_32.dll_ntohs
mov qword [rbp - 0x50], rsi
cmp rdi, 0x10
jae 0x1401c92ac
mov qword [rbp - 0x58], rdi
movups xmm0, xmmword [rbx]
movups xmmword [rbp - 0x68], xmm0
jmp 0x1401c930a
mov rcx, rdi
or rcx, rsi
mov qword [rsp + 0x38], rcx
cmp rcx, r15
jbe 0x1401c92c1
mov r14, r15
jmp 0x1401c92df
mov qword [rsp + 0x40], socket
lea rax, [rsp + 0x40]
lea rdx, [rsp + 0x38]
cmp rcx, 0x16
cmovae rax, rdx
mov r14, qword [rax]
lea rdx, [r14 + 1]
lea rcx, [rbp - 0x68]
call fcn.1400505f0
mov qword [rbp - 0x68], rax
mov qword [rbp - 0x58], rdi
mov qword [rbp - 0x50], r14
lea r8, [rdi + 1]
mov rdx, rbx
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
xor r9d, r9d
lea rdx, [rbp - 0x68]
cmp qword [rbp - 0x50], 0x10
cmovae rdx, qword [rbp - 0x68]
mov rax, qword [rbp - 0x58]
add rax, rdx
lea rdx, [rbp - 0x68]
cmp qword [rbp - 0x50], 0x10
cmovae rdx, qword [rbp - 0x68]
cmp rdx, rax
je 0x1401c9342
cmp byte [rdx], 0x5c
jne 0x1401c933a
mov byte [rdx], 0x2f
inc rdx
cmp rdx, rax
jne 0x1401c9332
xorps xmm0, xmm0
movups xmmword [rbp + 0x58], xmm0
mov qword [rbp + 0x68], r9
mov qword [rbp + 0x70], r9
mov ecx, 3
mov qword [rbp + 0x68], rcx
mov qword [rbp + 0x70], rsi
mov eax, dword [0x1404a1148]
mov word [rbp + 0x58], ax
movzx eax, byte [0x1404a114a]
mov byte [rbp + 0x5a], al
mov byte [rbp + 0x5b], 0
movups xmmword [rbp + 0x18], xmm0
mov qword [rbp + 0x28], r9
mov qword [rbp + 0x30], r9
mov qword [rbp + 0x28], r9
mov qword [rbp + 0x30], rsi
mov byte [rbp + 0x18], 0
lea rbx, [rbp + 0x58]
cmp rsi, 0x10
cmovae rbx, qword [rbp + 0x58]
lea r14, [rbp - 0x68]
cmp qword [rbp - 0x50], 0x10
cmovae r14, qword [rbp - 0x68]
mov rax, qword [rbp - 0x58]
cmp rcx, rax
ja 0x1401c941a
sub rax, rcx
lea r12, [rax + r14]
lea r8, [r12 + 1]
sub r8, r14
movsx edx, byte [rbx]
mov rcx, r14
call sub.VCRUNTIME140.dll_memchr
mov rdi, rax
test rax, rax
je 0x1401c9417
movsx r13d, byte [rbx]
nop dword [rax + rax]
mov r8d, 3
mov rdx, rbx
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x1401c9498
inc rdi
lea r8, [r12 + 1]
sub r8, rdi
mov edx, r13d
mov rcx, rdi
call sub.VCRUNTIME140.dll_memchr
mov rdi, rax
test rax, rax
jne 0x1401c93e0
xor r9d, r9d
mov rdi, 0xffffffffffffffff
cmp rdi, 0xffffffffffffffff
je 0x1401c9adb
xorps xmm0, xmm0
movups xmmword [rbp - 0x28], xmm0
mov qword [rbp - 0x18], r9
mov qword [rbp - 0x10], r9
mov qword [rsp + 0x60], rdi
mov rax, qword [rbp - 0x58]
mov qword [rsp + 0x58], rax
lea rcx, [rsp + 0x58]
lea rdx, [rsp + 0x60]
cmp rax, rdi
cmovae rcx, rdx
mov r14, qword [rcx]
lea r12, [rbp - 0x68]
cmp qword [rbp - 0x50], 0x10
cmovae r12, qword [rbp - 0x68]
cmp r14, r15
ja 0x1401ca0f6
mov qword [rbp - 0x10], rsi
cmp r14, 0x10
jae 0x1401c94a0
mov qword [rbp - 0x18], r14
mov r8, r14
mov rdx, r12
lea rcx, [rbp - 0x28]
call sub.VCRUNTIME140.dll_memcpy
mov byte [rbp + r14 - 0x28], 0
jmp 0x1401c9503
sub rdi, r14
xor r9d, r9d
jmp 0x1401c9421
mov rcx, r14
or rcx, 0xf
mov qword [rsp + 0x40], rcx
cmp rcx, r15
jbe 0x1401c94b6
mov r13, r15
jmp 0x1401c94d4
mov qword [rsp + 0x38], socket
lea rax, [rsp + 0x38]
lea rdx, [rsp + 0x40]
cmp rcx, 0x16
cmovae rax, rdx
mov r13, qword [rax]
lea rdx, [r13 + 1]
lea rcx, [rbp - 0x28]
call fcn.1400505f0
mov rbx, rax
mov qword [rbp - 0x28], rax
mov qword [rbp - 0x18], r14
mov qword [rbp - 0x10], r13
mov r8, r14
mov rdx, r12
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
mov byte [r14 + rbx], 0
mov dword [rsp + 0x30], 1
mov rdx, qword [rbp + 0x30]
cmp rdx, 0x10
jb 0x1401c9546
inc rdx
mov rcx, qword [rbp + 0x18]
cmp rdx, 0x1000
jb 0x1401c9541
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1401c95c9
mov rcx, r8
call fcn.1402f1e30
xor r12d, r12d
mov qword [rbp + 0x28], r12
mov qword [rbp + 0x30], rsi
mov byte [rbp + 0x18], r12b
movups xmm0, xmmword [rbp - 0x28]
movups xmmword [rbp + 0x18], xmm0
movups xmm1, xmmword [rbp - 0x18]
movups xmmword [rbp + 0x28], xmm1
mov qword [rbp - 0x18], r12
mov qword [rbp - 0x10], rsi
mov byte [rbp - 0x28], r12b
mov r14d, 1
and r14d, 0xfffffffe
mov dword [rsp + 0x30], r14d
mov qword [rbp - 0x18], r12
mov qword [rbp - 0x10], rsi
mov byte [rbp - 0x28], r12b
mov ebx, 3
add rbx, rdi
lea rdi, [rbp - 0x68]
cmp qword [rbp - 0x50], 0x10
cmovae rdi, qword [rbp - 0x68]
mov r8, qword [rbp - 0x58]
cmp rbx, r8
jae 0x1401c95d0
sub r8, rbx
lea rcx, [rdi + rbx]
lea edx, [r12 + 0x3f]
call sub.VCRUNTIME140.dll_memchr
mov r13, rax
test rax, rax
je 0x1401c95d0
sub r13, rdi
jmp 0x1401c95d7
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov r13, 0xffffffffffffffff
cmp r13, 0xffffffffffffffff
je 0x1401c998c
xorps xmm0, xmm0
movups xmmword [rbp - 0x28], xmm0
mov qword [rbp - 0x18], r12
mov qword [rbp - 0x10], r12
mov rdx, qword [rbp - 0x58]
cmp rdx, rbx
jb 0x1401ca0fc
mov rcx, r13
sub rcx, rbx
mov qword [rsp + 0x70], rcx
sub rdx, rbx
mov qword [rsp + 0x68], rdx
lea rax, [rsp + 0x68]
lea r8, [rsp + 0x70]
cmp rdx, rcx
cmovae rax, r8
mov rdi, qword [rax]
lea rax, [rbp - 0x68]
cmp qword [rbp - 0x50], 0x10
cmovae rax, qword [rbp - 0x68]
add rax, rbx
mov qword [rsp + 0x50], rax
cmp rdi, r15
ja 0x1401ca102
mov qword [rbp - 0x10], rsi
cmp rdi, 0x10
jae 0x1401c9667
mov qword [rbp - 0x18], rdi
mov r8, rdi
mov rdx, rax
lea rcx, [rbp - 0x28]
call sub.VCRUNTIME140.dll_memcpy
mov byte [rbp + rdi - 0x28], 0
jmp 0x1401c96cf
mov rcx, rdi
or rcx, 0xf
mov qword [rsp + 0x40], rcx
cmp rcx, r15
jbe 0x1401c967d
mov r12, r15
jmp 0x1401c969b
mov qword [rsp + 0x38], socket
lea rax, [rsp + 0x38]
lea rdx, [rsp + 0x40]
cmp rcx, 0x16
cmovae rax, rdx
mov r12, qword [rax]
lea rdx, [r12 + 1]
lea rcx, [rbp - 0x28]
call fcn.1400505f0
mov rbx, rax
mov qword [rbp - 0x28], rax
mov qword [rbp - 0x18], rdi
mov qword [rbp - 0x10], r12
mov r8, rdi
mov rdx, qword [rsp + 0x50]
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
mov byte [rdi + rbx], 0
xor r12d, r12d
or r14d, 2
mov dword [rsp + 0x30], r14d
mov rbx, qword [rsp + 0x48]
lea rcx, [rbx + 0x108]
lea rdx, [rbp - 0x28]
call fcn.140081080
and r14d, 0xfffffffd
mov dword [rsp + 0x30], r14d
mov rdx, qword [rbp - 0x10]
cmp rdx, 0x10
jb 0x1401c9731
inc rdx
mov rcx, qword [rbp - 0x28]
cmp rdx, 0x1000
jb 0x1401c972c
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1401c980a
mov rcx, r8
call fcn.1402f1e30
mov qword [rbp - 0x18], r12
mov qword [rbp - 0x10], rsi
mov byte [rbp - 0x28], 0
xorps xmm0, xmm0
movups xmmword [rbp - 8], xmm0
mov qword [rbp + 8], r12
mov qword [rbp + 0x10], r12
mov qword [rbp + 8], 1
mov qword [rbp + 0x10], rsi
movzx eax, word [0x1404a114c]
mov byte [rbp - 8], al
mov byte [rbp - 7], 0
movups xmmword [rbp + 0x38], xmm0
mov qword [rbp + 0x48], r12
mov qword [rbp + 0x50], r12
mov qword [rbp + 0x48], 1
mov qword [rbp + 0x50], rsi
movzx eax, word [0x14048d0f0]
mov byte [rbp + 0x38], al
mov byte [rbp + 0x39], 0
inc r13
movups xmmword [rbp - 0x48], xmm0
mov qword [rbp - 0x38], r12
mov qword [rbp - 0x30], r12
mov rcx, qword [rbp - 0x58]
cmp rcx, r13
jb 0x1401ca108
mov qword [rbp - 0x80], 0xffffffffffffffff
sub rcx, r13
mov qword [rsp + 0x78], rcx
lea rax, [rsp + 0x78]
lea rdx, [rbp - 0x80]
cmp rcx, 0xffffffffffffffff
cmovae rax, rdx
mov rdi, qword [rax]
lea r12, [rbp - 0x68]
cmp qword [rbp - 0x50], 0x10
cmovae r12, qword [rbp - 0x68]
add r12, r13
cmp rdi, r15
ja 0x1401ca10e
mov qword [rbp - 0x30], rsi
cmp rdi, 0x10
jae 0x1401c9811
mov qword [rbp - 0x38], rdi
mov r8, rdi
mov rdx, r12
lea rcx, [rbp - 0x48]
call sub.VCRUNTIME140.dll_memcpy
mov byte [rbp + rdi - 0x48], 0
jmp 0x1401c9873
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov rcx, rdi
or rcx, 0xf
mov qword [rsp + 0x38], rcx
cmp rcx, r15
ja 0x1401c9840
mov qword [rsp + 0x50], socket
lea rax, [rsp + 0x50]
lea rdx, [rsp + 0x38]
cmp rcx, 0x16
cmovae rax, rdx
mov r15, qword [rax]
lea rdx, [r15 + 1]
lea rcx, [rbp - 0x48]
call fcn.1400505f0
mov rbx, rax
mov qword [rbp - 0x48], rax
mov qword [rbp - 0x38], rdi
mov qword [rbp - 0x30], r15
mov r8, rdi
mov rdx, r12
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
mov byte [rdi + rbx], 0
mov rbx, qword [rsp + 0x48]
or r14d, 4
mov dword [rsp + 0x30], r14d
mov byte [rsp + 0x20], 1
lea r9, [rbp - 8]
lea r8, [rbp + 0x38]
lea rdx, [rbp - 0x48]
lea rcx, [rbx + 0x128]
call fcn.14026c660
and r14d, 0xfffffffb
mov dword [rsp + 0x30], r14d
mov rdx, qword [rbp - 0x30]
cmp rdx, 0x10
jb 0x1401c98dd
inc rdx
mov rcx, qword [rbp - 0x48]
cmp rdx, 0x1000
jb 0x1401c98d8
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1401c9977
mov rcx, r8
call fcn.1402f1e30
xor r13d, r13d
mov qword [rbp - 0x38], r13
mov qword [rbp - 0x30], rsi
mov byte [rbp - 0x48], r13b
mov rdx, qword [rbp + 0x50]
cmp rdx, 0x10
jb 0x1401c9923
inc rdx
mov rcx, qword [rbp + 0x38]
cmp rdx, 0x1000
jb 0x1401c991e
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1401c997e
mov rcx, r8
call fcn.1402f1e30
mov qword [rbp + 0x48], r13
mov qword [rbp + 0x50], rsi
mov byte [rbp + 0x38], 0
mov rdx, qword [rbp + 0x10]
cmp rdx, 0x10
jb 0x1401c9966
inc rdx
mov rcx, qword [rbp - 8]
cmp rdx, 0x1000
jb 0x1401c9961
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1401c9985
mov rcx, r8
call fcn.1402f1e30
mov qword [rbp + 8], r13
mov qword [rbp + 0x10], rsi
mov byte [rbp - 8], 0
jmp 0x1401c9ade
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x48], xmm0
xor r13d, r13d
mov qword [rbp - 0x38], r13
mov qword [rbp - 0x30], r13
mov rcx, qword [rbp - 0x58]
cmp rcx, rbx
jb 0x1401ca114
mov qword [rbp - 0x70], 0xffffffffffffffff
sub rcx, rbx
mov qword [rbp - 0x78], rcx
lea rax, [rbp - 0x78]
lea rdx, [rbp - 0x70]
cmp rcx, 0xffffffffffffffff
cmovae rax, rdx
mov rdi, qword [rax]
lea r12, [rbp - 0x68]
cmp qword [rbp - 0x50], 0x10
cmovae r12, qword [rbp - 0x68]
add r12, rbx
cmp rdi, r15
ja 0x1401ca11a
mov qword [rbp - 0x30], rsi
cmp rdi, 0x10
jae 0x1401c9a0b
mov qword [rbp - 0x38], rdi
mov r8, rdi
mov rdx, r12
lea rcx, [rbp - 0x48]
call sub.VCRUNTIME140.dll_memcpy
mov byte [rbp + rdi - 0x48], r13b
jmp 0x1401c9a68
mov rcx, rdi
or rcx, 0xf
mov qword [rsp + 0x38], rcx
cmp rcx, r15
ja 0x1401c9a3a
mov qword [rsp + 0x50], socket
lea rax, [rsp + 0x50]
lea rdx, [rsp + 0x38]
cmp rcx, 0x16
cmovae rax, rdx
mov r15, qword [rax]
lea rdx, [r15 + 1]
lea rcx, [rbp - 0x48]
call fcn.1400505f0
mov rbx, rax
mov qword [rbp - 0x48], rax
mov qword [rbp - 0x38], rdi
mov qword [rbp - 0x30], r15
mov r8, rdi
mov rdx, r12
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
mov byte [rdi + rbx], r13b
or r14d, 8
mov dword [rsp + 0x30], r14d
mov rcx, qword [rsp + 0x48]
add rcx, 0x108
lea rdx, [rbp - 0x48]
call fcn.140081080
and r14d, 0xfffffff7
mov dword [rsp + 0x30], r14d
mov rdx, qword [rbp - 0x30]
cmp rdx, 0x10
jb 0x1401c9ac6
inc rdx
mov rcx, qword [rbp - 0x48]
cmp rdx, 0x1000
jb 0x1401c9ac1
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1401c9ad4
mov rcx, r8
call fcn.1402f1e30
mov qword [rbp - 0x38], r13
mov qword [rbp - 0x30], rsi
mov byte [rbp - 0x48], 0
jmp 0x1401c9ade
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
xor r13d, r13d
mov ecx, dword [0x140696aa8]
mov rax, qword gs:[0x58]
mov edx, 0x30
mov rax, qword [rax + rcx*8]
mov eax, dword [rdx + rax]
cmp dword [0x140692470], eax
jg 0x1401c9eff
lea r8, [rbp + 0x18]
mov r15, qword [rbp + 0x18]
mov r12, qword [rbp + 0x30]
cmp r12, 0x10
cmovae r8, r15
movabs rcx, 0xcbf29ce484222325
mov rdx, r13
mov rdi, qword [rbp + 0x28]
test rdi, rdi
je 0x1401c9b54
movabs r9, 0x100000001b3
nop dword [rax]
movzx eax, byte [rdx + r8]
xor rcx, rax
imul rcx, r9
inc rdx
cmp rdx, rdi
jb 0x1401c9b40
and rcx, qword [0x140692460]
lea rax, [rcx + rcx]
mov r14, qword [0x140692448]
mov rbx, qword [r14 + rax*8 + 8]
mov r13, qword [0x140692438]
cmp rbx, r13
jne 0x1401c9b7d
xor edi, edi
mov ebx, edi
jmp 0x1401c9bd9
add rcx, rcx
mov r14, qword [r14 + rcx*8]
nop dword [rax]
nop dword [rax + rax]
lea rdx, [rbx + 0x10]
mov rax, qword [rdx + 0x10]
cmp qword [rdx + 0x18], 0x10
jb 0x1401c9ba2
mov rdx, qword [rdx]
lea rcx, [rbp + 0x18]
cmp r12, 0x10
cmovae rcx, r15
cmp rdi, rax
jne 0x1401c9bc6
mov r8, rdi
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x1401c9bc6
mov eax, 1
jmp 0x1401c9bc8
xor eax, eax
test al, al
jne 0x1401c9bd7
cmp rbx, r14
je 0x1401c9b77
mov rbx, qword [rbx + 8]
jmp 0x1401c9b90
xor edi, edi
mov rax, r13
test rbx, rbx
cmovne rax, rbx
cmp rax, r13
je 0x1401c9bf8
mov rbx, qword [rsp + 0x48]
mov rcx, rbx
call qword [rax + 0x30]
jmp 0x1401c9c90
mov rbx, qword [0x14068baa0]
test rbx, rbx
je 0x1401c9c8b
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x30]
test al, al
je 0x1401c9c8b
lea r8, [rbp + 0x18]
lea rdx, str.Unhandled_protocol__
lea rcx, [rbp - 8]
call fcn.1400599d0
nop
mov rax, qword [rbx]
lea r9, [rbp - 8]
lea r8, str.eax::apps::ProtocolParser::parseUrl
mov edx, 1
mov rcx, rbx
call qword [rax + gethostname]
nop
mov rdx, qword [rbp + 0x10]
cmp rdx, 0x10
jb 0x1401c9c7f
inc rdx
mov rcx, qword [rbp - 8]
cmp rdx, 0x1000
jb 0x1401c9c7a
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1401c9e53
mov rcx, r8
call fcn.1402f1e30
mov qword [rbp + 8], rdi
mov qword [rbp + 0x10], rsi
mov byte [rbp - 8], 0
mov rbx, qword [rsp + 0x48]
lea rcx, [rbx + 0x128]
xorps xmm0, xmm0
movups xmmword [rbp - 8], xmm0
mov qword [rbp + 8], rdi
mov qword [rbp + 0x10], rdi
mov qword [rbp + 8], 8
mov qword [rbp + 0x10], rsi
movsd xmm0, qword [str.authCode]
movsd qword [rbp - 8], xmm0
mov byte [rbp], 0
lea r9, [0x140471c70]
lea r8, [rbp - 8]
lea rdx, [rbp - 0x48]
call fcn.14026bb10
nop
mov qword [rbp + 0x48], rdi
mov qword [rbp + 0x50], rdi
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x38], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x48], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], rsi
mov byte [rax], 0
lea rcx, [rbx + 0x20]
lea rdx, [rbp + 0x38]
call fcn.140081080
nop
mov rdx, qword [rbp + 0x50]
cmp rdx, 0x10
jb 0x1401c9d43
inc rdx
mov rcx, qword [rbp + 0x38]
cmp rdx, 0x1000
jb 0x1401c9d3e
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1401c9e5a
mov rcx, r8
call fcn.1402f1e30
mov qword [rbp + 0x48], rdi
mov qword [rbp + 0x50], rsi
mov byte [rbp + 0x38], 0
mov rdx, qword [rbp - 0x30]
cmp rdx, 0x10
jb 0x1401c9d8a
inc rdx
mov rcx, qword [rbp - 0x48]
cmp rdx, 0x1000
jb 0x1401c9d85
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1401c9e61
mov rcx, r8
call fcn.1402f1e30
mov qword [rbp - 0x38], rdi
mov qword [rbp - 0x30], rsi
mov byte [rbp - 0x48], 0
mov rdx, qword [rbp + 0x10]
cmp rdx, 0x10
jb 0x1401c9dd1
inc rdx
mov rcx, qword [rbp - 8]
cmp rdx, 0x1000
jb 0x1401c9dcc
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1401c9e68
mov rcx, r8
call fcn.1402f1e30
mov qword [rbp + 8], rdi
mov qword [rbp + 0x10], rsi
mov byte [rbp - 8], 0
mov rdx, qword [rbp + 0x30]
cmp rdx, 0x10
jb 0x1401c9e14
inc rdx
mov rcx, qword [rbp + 0x18]
cmp rdx, 0x1000
jb 0x1401c9e0f
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1401c9e6f
mov rcx, r8
call fcn.1402f1e30
mov qword [rbp + 0x28], rdi
mov qword [rbp + 0x30], rsi
mov byte [rbp + 0x18], 0
cmp rsi, 0x10
jb 0x1401c9e7f
lea rdx, [rsi + 1]
cmp rdx, 0x1000
jb 0x1401c9e76
add rdx, 0x27
mov rax, qword [rbp + 0x58]
mov rcx, qword [rax - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1401c9e7a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov rcx, qword [rbp + 0x58]
call fcn.1402f1e30
mov qword [rbp + 0x68], rdi
mov qword [rbp + 0x70], rsi
mov byte [rbp + 0x58], 0
mov rdx, qword [rbp - 0x50]
cmp rdx, 0x10
jb 0x1401c9ec2
inc rdx
mov rcx, qword [rbp - 0x68]
cmp rdx, 0x1000
jb 0x1401c9ebd
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1401c9ef8
mov rcx, r8
call fcn.1402f1e30
mov qword [rbp - 0x58], rdi
mov qword [rbp - 0x50], rsi
mov byte [rbp - 0x68], 0
mov rcx, qword [rbp + 0x120]
xor rcx, rsp
call fcn.1402f2210
mov rbx, qword [rsp + 0x280]
add rsp, 0x230
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
lea rcx, [0x140692470]
call fcn.1402f23d4
cmp dword [0x140692470], 0xffffffff
jne 0x1401c9b05
xorps xmm0, xmm0
movups xmmword [rbp + 0x80], xmm0
mov qword [rbp + 0x90], r13
mov qword [rbp + 0x98], r13
mov r8d, 6
lea rdx, str.origin
lea rcx, [rbp + 0x80]
call fcn.1400413c0
nop
lea rax, [0x1401c8730]
mov qword [rbp + 0xa0], rax
xorps xmm0, xmm0
movups xmmword [rbp + 0xa8], xmm0
mov qword [rbp + 0xb8], r13
mov qword [rbp + 0xc0], r13
mov r8d, 7
lea rdx, str.origin2
lea rcx, [rbp + 0xa8]
call fcn.1400413c0
nop
lea rax, [0x1401c7aa0]
mov qword [rbp + 0xc8], rax
xorps xmm0, xmm0
movups xmmword [rbp + 0xd0], xmm0
mov qword [rbp + 0xe0], r13
mov qword [rbp + 0xe8], r13
mov r8d, 7
lea rdx, str.link2ea
lea rcx, [rbp + 0xd0]
call fcn.1400413c0
nop
lea rax, [0x1401c74e0]
mov qword [rbp + 0xf0], rax
xorps xmm0, xmm0
movups xmmword [rbp + 0xf8], xmm0
mov qword [rbp + 0x108], r13
mov qword [rbp + 0x110], r13
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.eaconnect.microsoft
lea rcx, [rbp + 0xf8]
call fcn.1400413c0
nop
lea rax, [0x1401c7100]
mov qword [rbp + 0x118], rax
mov dword [rsp + 0x40], 0
mov eax, dword [rsp + 0x40]
mov dword [0x140692430], eax
mov qword [0x140692438], r13
mov qword [0x140692440], r13
mov ecx, gethostname
call fcn.1402f1df4
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [0x140692438], rax
mov qword [0x140692448], r13
xorps xmm0, xmm0
movdqa xmmword [0x140692450], xmm0
mov qword [0x140692460], 7
mov qword [0x140692468], 8
mov dword [0x140692430], 0x3f800000
mov r8, qword [0x140692438]
mov edx, reloc.WS2_32.dll_recv
lea rcx, [0x140692448]
call fcn.140056db0
nop
lea r8, [rbp + 0x120]
lea rdx, [rbp + 0x80]
lea rcx, [0x140692430]
call fcn.1401c4510
nop
lea r9, [fcn.140055620]
mov edx, 0x28
lea r8d, [rdx - 0x24]
lea rcx, [rbp + 0x80]
call fcn.1402f225c
lea rcx, [0x140460ae0]
call fcn.1402f2080
nop
lea rcx, [0x140692470]
call fcn.1402f2368
jmp 0x1401c9b05
call fcn.140050390
nop
call fcn.140050390
nop
call fcn.1400503d0
int3
call fcn.140050390
nop
call fcn.1400503d0
int3
call fcn.140050390
nop
call fcn.1400503d0
int3
call fcn.140050390
int3