Function at 0x1400bfc10
Capabilities:
Encode data using xor
Get installed programs
Query or enumerate registry value

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
mov qword [rax + 0x20], r12
push r13
push r14
push r15
sub rsp, 0x360
movaps xmmword [rax - 0x28], xmm6
movaps xmmword [rax - 0x38], xmm7
movaps xmmword [rax - 0x48], xmm8
mov rax, qword [0x14037f670]
xor rax, rsp
mov qword [rsp + 0x320], rax
xor r13d, r13d
mov dword [rsp + 0x118], r13d
mov ecx, 0x104
call fcn.1402622dc
mov dword [rsp + 0x140], 0x40
mov dword [rsp + 0x118], 1
lea r8, [rsp + 0xf0]
lea rdx, str.SOFTWAREMicrosoftWindowsCurrentVersionUninstallSteam_App_252490
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyA]
movups xmm0, xmmword [str._ECYUVwS_K_._CPm5_]
movups xmmword [rsp + 0x30], xmm0
psrldq xmm0, 0xf
movd eax, xmm0
mov ebx, dword [reloc.WS2_32.dll_accept]
test al, al
je 0x1400bfe49
mov r8d, r13d
cmp ebx, 2
jl 0x1400bfe12
movdqa xmm5, xmmword [0x14034eac0]
mov edx, r13d
movdqa xmm4, xmmword [0x14034fa70]
mov edi, 4
movd xmm6, edi
movdqa xmm7, xmmword [0x14034eae0]
mov esi, Ordinal_32
movd xmm8, esi
movdqa xmm0, xmmword [0x14034ebb0]
movdqa xmmword [rsp + 0xc0], xmm0
lea rcx, [rsp + 0x30]
mov r8d, dword [rsp + 0xc0]
movd xmm2, edx
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x14034eb80]
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rcx]
pxor xmm2, xmm0
movd dword [rcx], xmm2
lea eax, [rdx + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x14034eb80]
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rcx + 4]
pxor xmm2, xmm0
movd dword [rcx + 4], xmm2
add edx, 8
lea rcx, [rcx + 8]
cmp edx, 0x10
jl 0x1400bfd11
jmp 0x1400bfe51
lea r9, [rsp + 0x30]
nop word [rax + rax]
mov eax, 0x5397829d
mul r8d
shr edx, 4
movsx eax, dl
imul ecx, eax, 0x31
movzx eax, r8b
sub al, cl
add al, 0x34
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x10
jl 0x1400bfe20
mov esi, Ordinal_32
lea edi, [rsi - 0x1b]
mov qword [rsp + 0x130], r13
mov qword [rsp + 0x138], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x120], r13b
lea rax, [rsp + 0x30]
mov r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp byte [rax + r8], r13b
jne 0x1400bfe80
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0x120]
call fcn.14007c9b0
lea rdx, [rsp + 0x120]
cmp qword [rsp + 0x138], 0x10
cmovae rdx, qword [rsp + 0x120]
lea rax, [rsp + 0x140]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x2e0]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x118]
xor r8d, r8d
mov rcx, qword [rsp + 0xf0]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov rdx, qword [rsp + 0x138]
cmp rdx, 0x10
jb 0x1400bff2b
inc rdx
mov rcx, qword [rsp + 0x120]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400bff26
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400c0f5d
call fcn.140261c34
mov rcx, qword [rsp + 0xf0]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
xor edx, edx
mov r8d, 0x110
lea rcx, [rsp + 0x1b0]
call fcn.1402649f0
lea rcx, [rsp + 0x1b0]
call fcn.1400c1d60
nop
mov qword [rsp + 0x108], r13
mov qword [rsp + 0x110], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0xf8], 0
mov r14d, r13d
movsd xmm0, qword [str.hVPPdR_BO]
movsd qword [rsp + 0x30], xmm0
mov eax, dword [0x14034e838]
mov dword [rsp + 0x38], eax
movzx eax, word [0x14034e83c]
mov word [rsp + 0x3c], ax
cmp byte [0x14034e83d], r13b
je 0x1400c0100
mov r8d, r13d
cmp ebx, 2
jl 0x1400c00c2
movdqa xmm4, xmmword [0x14034fa70]
movd xmm6, edi
movd xmm5, esi
movdqa xmm2, xmmword [0x14034eac0]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm5
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x14034eae0]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x14034eb80]
packuswb xmm2, xmm2
mov eax, dword [0x14034ebb0]
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [str.hVPPdR_BO]
pxor xmm2, xmm1
movd dword [rsp + 0x30], xmm2
movdqa xmm3, xmmword [0x14034ead0]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm5
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x14034eae0]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x14034eb80]
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rsp + 0x34]
pxor xmm2, xmm1
movd dword [rsp + 0x34], xmm2
mov r8d, 8
mov eax, r8d
lea r9, [rsp + 0x30]
add r9, rax
nop dword [rax]
mov eax, 0x5397829d
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x31
movzx eax, r8b
sub al, cl
add al, 0x34
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0xe
jl 0x1400c00d0
mov qword [rsp + 0x130], r13
mov qword [rsp + 0x138], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x120], r14b
lea rax, [rsp + 0x30]
mov r8, 0xffffffffffffffff
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], r14b
jne 0x1400c0130
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0x120]
call fcn.14007c9b0
nop
mov qword [rsp + 0x158], r13
mov qword [rsp + 0x160], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x148], 0
lea rax, [rsp + 0x2e0]
mov r8, 0xffffffffffffffff
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x1400c0180
lea rdx, [rsp + 0x2e0]
lea rcx, [rsp + 0x148]
call fcn.14007c9b0
nop
lea rdx, [rsp + 0x120]
cmp qword [rsp + 0x138], 0x10
cmovae rdx, qword [rsp + 0x120]
mov r8, qword [rsp + 0x130]
lea rcx, [rsp + 0x148]
call fcn.14007ae70
mov qword [rsp + 0xd0], r13
mov qword [rsp + 0xd8], r13
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0xc0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0xd0], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov ebx, 1
lea rdx, [rsp + 0xc0]
cmp qword [rsp + 0xd8], 0x10
cmovae rdx, qword [rsp + 0xc0]
mov r8d, ebx
lea rcx, [rsp + 0x1c0]
call fcn.14007cb90
test rax, rax
mov rax, qword [rsp + 0x1b0]
movsxd rcx, dword [rax + 4]
lea rax, [rsp + 0x1b0]
je 0x1400c025d
add rcx, rax
cmp qword [rcx + 0x48], 0
cmovne edi, r13d
mov edx, edi
jmp 0x1400c0277
add rcx, rax
mov edx, 6
mov r15d, 2
cmp qword [rcx + 0x48], 0
cmovne edx, r15d
or edx, dword [rcx + 0x10]
xor r8d, r8d
call fcn.14005f0a0
nop
mov rdx, qword [rsp + 0xd8]
cmp rdx, 0x10
jb 0x1400c02c3
inc rdx
mov rcx, qword [rsp + 0xc0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400c02be
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400c0f63
call fcn.140261c34
mov qword [rsp + 0xd0], r13
mov qword [rsp + 0xd8], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0xc0], 0
mov rdx, qword [rsp + 0x160]
cmp rdx, 0x10
jb 0x1400c0323
inc rdx
mov rcx, qword [rsp + 0x148]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400c031d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400c0f69
call fcn.140261c34
nop
mov rax, qword [rsp + 0x1b0]
movsxd rcx, dword [rax + 4]
mov rax, qword [rsp + rcx + 0x1f0]
mov rcx, qword [rax + 8]
mov qword [rsp + 0xc8], rcx
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
nop
lea rcx, [rsp + 0xc0]
call fcn.14007d4e0
mov rcx, rax
mov rax, qword [rax]
mov dl, 0xa
call qword [rax + 0x40]
movzx edi, al
mov rcx, qword [rsp + 0xc8]
test rcx, rcx
je 0x1400c038e
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
test rax, rax
je 0x1400c038e
mov rcx, qword [rax]
mov r9, qword [rcx]
mov edx, 1
mov rcx, rax
call r9
movzx r8d, dil
lea rdx, [rsp + 0xf8]
lea rcx, [rsp + 0x1b0]
call fcn.140083010
mov rcx, qword [rax]
movsxd rdx, dword [rcx + 4]
test byte [rdx + rax + 0x10], 6
jne 0x1400c0da1
inc r14d
mov dword [rsp + 0x98], r14d
mov qword [rsp + 0x158], r13
mov qword [rsp + 0x160], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x148], 0
mov qword [rsp + 0x198], r13
mov qword [rsp + 0x1a0], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x188], 0
mov qword [rsp + 0x178], r13
mov r15d, reloc.WS2_32.dll_ntohs
mov qword [rsp + 0x180], r15
mov byte [rsp + 0x168], 0
lea rcx, [rsp + 0xf8]
cmp qword [rsp + 0x110], 0x10
setae r14b
mov rsi, qword [rsp + 0xf8]
cmovae rcx, rsi
mov qword [rsp + 0x20], 1
lea r9, reloc.WLDAP32.dll_Ordinal_32
mov rdi, qword [rsp + 0x108]
mov rdx, rdi
call fcn.1400c2aa0
lea rcx, [rax + 1]
mov qword [rsp + 0x88], r13
mov qword [rsp + 0x90], r15
mov byte [rsp + 0x78], 0
cmp rdi, rcx
jb 0x1400c0f6f
sub rdi, rcx
mov r8, 0xffffffffffffffff
cmp rdi, r8
cmovb r8, rdi
lea rdx, [rsp + 0xf8]
test r14b, r14b
cmovne rdx, rsi
add rdx, rcx
lea rcx, [rsp + 0x78]
call fcn.14007c9b0
nop
lea rcx, [rsp + 0x78]
cmp qword [rsp + 0x90], 0x10
cmovae rcx, qword [rsp + 0x78]
mov qword [rsp + 0x20], 1
lea r9, reloc.WLDAP32.dll_Ordinal_32
mov rdx, qword [rsp + 0x88]
call fcn.1400c2aa0
mov r12, rax
lea rcx, [rsp + 0xf8]
cmp qword [rsp + 0x110], 0x10
cmovae rcx, qword [rsp + 0xf8]
mov qword [rsp + 0x20], 1
lea r9, reloc.WLDAP32.dll_Ordinal_32
mov rdx, qword [rsp + 0x108]
call fcn.1400c2aa0
lea r13, [rax + 1]
lea rax, [rsp + 0xa0]
mov qword [rsp + 0xe0], rax
mov dword [rsp + 0x48], 0x849b8fc6
mov dword [rsp + 0x4c], 0xd6989190
mov word [rsp + 0x50], 0x100
xor edi, edi
mov ecx, edi
nop word [rax + rax]
lea eax, [rcx - 0x13]
xor byte [rsp + rcx + 0x48], al
inc rcx
cmp rcx, 8
jb 0x1400c0550
mov byte [rsp + 0x51], dil
mov qword [rsp + 0xb0], rdi
mov qword [rsp + 0xb8], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0xa0], dil
mov r8d, 8
lea rdx, [rsp + 0x48]
lea rcx, [rsp + 0xa0]
call fcn.14007c9b0
or ebx, 0xe
mov qword [rsp + 0x68], rdi
mov qword [rsp + 0x70], rdi
mov rsi, qword [rsp + 0x108]
lea r14, [rsp + 0xf8]
cmp qword [rsp + 0x110], 0x10
cmovae r14, qword [rsp + 0xf8]
cmp rsi, 0x10
jae 0x1400c05e2
movups xmm0, xmmword [r14]
movups xmmword [rsp + 0x58], xmm0
mov qword [rsp + 0x70], reloc.WS2_32.dll_ntohs
jmp 0x1400c065d
mov rdi, rsi
or rdi, 0xf
movabs rax, 0x7fffffffffffffff
cmp rdi, rax
cmova rdi, rax
lea rcx, [rdi + 1]
cmp rcx, 0x1000
jb 0x1400c0636
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x1400c0f75
mov rcx, rax
call fcn.140261ee4
mov rcx, rax
test rax, rax
je 0x1400c0f7a
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x1400c0644
test rcx, rcx
je 0x1400c0642
call fcn.140261ee4
jmp 0x1400c0644
xor eax, eax
mov qword [rsp + 0x58], rax
lea r8, [rsi + 1]
mov rdx, r14
mov rcx, rax
call fcn.1402645e0
mov qword [rsp + 0x70], rdi
mov qword [rsp + 0x68], rsi
lea rax, [rsp + 0x148]
mov qword [rsp + 0x20], rax
mov r9, r12
mov r8, r13
lea rdx, [rsp + 0xa0]
lea rcx, [rsp + 0x58]
call fcn.1400bf910
movzx edi, al
mov rdx, qword [rsp + 0x90]
cmp rdx, 0x10
jb 0x1400c06ca
inc rdx
mov rcx, qword [rsp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400c06c5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400c0f80
call fcn.140261c34
test dil, dil
je 0x1400c06fc
lea rcx, [rsp + 0x148]
cmp qword [rsp + 0x160], 0x10
cmovae rcx, qword [rsp + 0x148]
call fcn.1400c77a0
mov dword [reloc.WS2_32.dll_accept], eax
xor r13d, r13d
jmp 0x1400c0ccc
lea rcx, [rsp + 0xf8]
cmp qword [rsp + 0x110], 0x10
setae r14b
mov rsi, qword [rsp + 0xf8]
cmovae rcx, rsi
mov qword [rsp + 0x20], 1
lea r9, reloc.WLDAP32.dll_Ordinal_32
mov rdi, qword [rsp + 0x108]
mov rdx, rdi
call fcn.1400c2aa0
lea rcx, [rax + 1]
mov qword [rsp + 0x68], 0
mov qword [rsp + 0x70], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x58], 0
cmp rdi, rcx
jb 0x1400c0f86
sub rdi, rcx
mov r8, 0xffffffffffffffff
cmp rdi, r8
cmovb r8, rdi
lea rdx, [rsp + 0xf8]
test r14b, r14b
cmovne rdx, rsi
add rdx, rcx
lea rcx, [rsp + 0x58]
call fcn.14007c9b0
nop
lea rcx, [rsp + 0x58]
cmp qword [rsp + 0x70], 0x10
cmovae rcx, qword [rsp + 0x58]
mov qword [rsp + 0x20], 1
lea r9, reloc.WLDAP32.dll_Ordinal_32
mov rdx, qword [rsp + 0x68]
call fcn.1400c2aa0
mov r12, rax
lea rcx, [rsp + 0xf8]
cmp qword [rsp + 0x110], 0x10
cmovae rcx, qword [rsp + 0xf8]
mov qword [rsp + 0x20], 1
lea r9, reloc.WLDAP32.dll_Ordinal_32
mov rdx, qword [rsp + 0x108]
call fcn.1400c2aa0
lea r13, [rax + 1]
lea rax, [rsp + 0xa0]
mov qword [rsp + 0xe8], rax
mov dword [rsp + 0x30], 0x849b8fc6
mov dword [rsp + 0x34], 0xc6989190
mov word [rsp + 0x38], 0xd7
mov byte [rsp + 0x3a], 1
xor edi, edi
mov ecx, edi
nop dword [rax + rax]
lea eax, [rcx - 0x13]
xor byte [rsp + rcx + 0x30], al
inc rcx
cmp rcx, 9
jb 0x1400c0830
mov byte [rsp + 0x3a], dil
mov qword [rsp + 0xb0], rdi
mov qword [rsp + 0xb8], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0xa0], dil
mov r8d, 9
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0xa0]
call fcn.14007c9b0
or ebx, 0x70
mov qword [rsp + 0x88], rdi
mov qword [rsp + 0x90], rdi
mov rsi, qword [rsp + 0x108]
lea r14, [rsp + 0xf8]
cmp qword [rsp + 0x110], 0x10
cmovae r14, qword [rsp + 0xf8]
cmp rsi, 0x10
jae 0x1400c08cb
movups xmm0, xmmword [r14]
movups xmmword [rsp + 0x78], xmm0
mov qword [rsp + 0x90], reloc.WS2_32.dll_ntohs
jmp 0x1400c0949
mov rdi, rsi
or rdi, 0xf
movabs rax, 0x7fffffffffffffff
cmp rdi, rax
cmova rdi, rax
lea rcx, [rdi + 1]
cmp rcx, 0x1000
jb 0x1400c091f
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x1400c0f8c
mov rcx, rax
call fcn.140261ee4
mov rcx, rax
test rax, rax
je 0x1400c0f91
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x1400c092d
test rcx, rcx
je 0x1400c092b
call fcn.140261ee4
jmp 0x1400c092d
xor eax, eax
mov qword [rsp + 0x78], rax
lea r8, [rsi + 1]
mov rdx, r14
mov rcx, rax
call fcn.1402645e0
mov qword [rsp + 0x90], rdi
mov qword [rsp + 0x88], rsi
lea rax, [rsp + 0x188]
mov qword [rsp + 0x20], rax
mov r9, r12
mov r8, r13
lea rdx, [rsp + 0xa0]
lea rcx, [rsp + 0x78]
call fcn.1400bf910
movzx edi, al
mov rdx, qword [rsp + 0x70]
cmp rdx, 0x10
jb 0x1400c09b6
inc rdx
mov rcx, qword [rsp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400c09b1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400c0f97
call fcn.140261c34
test dil, dil
je 0x1400c09e8
lea rcx, [rsp + 0x188]
cmp qword [rsp + 0x1a0], 0x10
cmovae rcx, qword [rsp + 0x188]
call fcn.1400c77a0
mov dword [reloc.WS2_32.dll_bind], eax
xor r13d, r13d
jmp 0x1400c0ccc
lea rcx, [rsp + 0xf8]
cmp qword [rsp + 0x110], 0x10
setae r14b
mov rsi, qword [rsp + 0xf8]
cmovae rcx, rsi
mov qword [rsp + 0x20], 1
lea r9, reloc.WLDAP32.dll_Ordinal_32
mov rdi, qword [rsp + 0x108]
mov rdx, rdi
call fcn.1400c2aa0
lea rcx, [rax + 1]
xor r13d, r13d
mov qword [rsp + 0x68], r13
mov qword [rsp + 0x70], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x58], r13b
cmp rdi, rcx
jb 0x1400c0f9d
sub rdi, rcx
mov r8, 0xffffffffffffffff
cmp rdi, r8
cmovb r8, rdi
lea rdx, [rsp + 0xf8]
test r14b, r14b
cmovne rdx, rsi
add rdx, rcx
lea rcx, [rsp + 0x58]
call fcn.14007c9b0
nop
lea rcx, [rsp + 0x58]
cmp qword [rsp + 0x70], 0x10
cmovae rcx, qword [rsp + 0x58]
mov qword [rsp + 0x20], 1
lea r9, reloc.WLDAP32.dll_Ordinal_32
mov rdx, qword [rsp + 0x68]
call fcn.1400c2aa0
mov r15, rax
lea rcx, [rsp + 0xf8]
cmp qword [rsp + 0x110], 0x10
cmovae rcx, qword [rsp + 0xf8]
mov qword [rsp + 0x20], 1
lea r9, reloc.WLDAP32.dll_Ordinal_32
mov rdx, qword [rsp + 0x108]
call fcn.1400c2aa0
lea r12, [rax + 1]
lea rax, [rsp + 0xa0]
mov qword [rsp + 0xe8], rax
mov dword [rsp + 0x40], 0x939a8ac6
mov dword [rsp + 0x44], 0x100d09a
mov rax, r13
nop word [rax + rax]
lea ecx, [rax - 0x13]
xor byte [rsp + rax + 0x40], cl
inc rax
cmp rax, 6
jb 0x1400c0b10
mov byte [rsp + 0x47], 0
mov qword [rsp + 0xb0], r13
mov qword [rsp + 0xb8], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0xa0], 0
mov r8d, 6
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0xa0]
call fcn.14007c9b0
or ebx, 0x380
mov qword [rsp + 0x88], r13
mov qword [rsp + 0x90], r13
mov rsi, qword [rsp + 0x108]
lea r14, [rsp + 0xf8]
cmp qword [rsp + 0x110], 0x10
cmovae r14, qword [rsp + 0xf8]
cmp rsi, 0x10
jae 0x1400c0bae
movups xmm0, xmmword [r14]
movups xmmword [rsp + 0x78], xmm0
mov qword [rsp + 0x90], reloc.WS2_32.dll_ntohs
jmp 0x1400c0c2d
mov rdi, rsi
or rdi, 0xf
movabs rax, 0x7fffffffffffffff
cmp rdi, rax
cmova rdi, rax
lea rcx, [rdi + 1]
cmp rcx, 0x1000
jb 0x1400c0c02
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x1400c0fa3
mov rcx, rax
call fcn.140261ee4
mov rcx, rax
test rax, rax
je 0x1400c0fa8
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x1400c0c11
test rcx, rcx
je 0x1400c0c0e
call fcn.140261ee4
jmp 0x1400c0c11
mov rax, r13
mov qword [rsp + 0x78], rax
lea r8, [rsi + 1]
mov rdx, r14
mov rcx, rax
call fcn.1402645e0
mov qword [rsp + 0x90], rdi
mov qword [rsp + 0x88], rsi
lea rax, [rsp + 0x168]
mov qword [rsp + 0x20], rax
mov r9, r15
mov r8, r12
lea rdx, [rsp + 0xa0]
lea rcx, [rsp + 0x78]
call fcn.1400bf910
movzx edi, al
mov rdx, qword [rsp + 0x70]
cmp rdx, 0x10
jb 0x1400c0c9a
inc rdx
mov rcx, qword [rsp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400c0c95
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400c0fae
call fcn.140261c34
test dil, dil
je 0x1400c0cc4
lea rcx, [rsp + 0x168]
cmp qword [rsp + 0x180], 0x10
cmovae rcx, qword [rsp + 0x168]
call fcn.1400c77a0
mov dword [reloc.WS2_32.dll_recvfrom], eax
mov r15, qword [rsp + 0x180]
cmp r15, 0x10
jb 0x1400c0d09
lea rdx, [r15 + 1]
mov rcx, qword [rsp + 0x168]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400c0d03
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400c0fb4
call fcn.140261c34
nop
mov rdx, qword [rsp + 0x1a0]
cmp rdx, 0x10
jb 0x1400c0d4d
inc rdx
mov rcx, qword [rsp + 0x188]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400c0d47
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400c0fba
call fcn.140261c34
nop
mov rdx, qword [rsp + 0x160]
cmp rdx, 0x10
mov r14d, dword [rsp + 0x98]
jb 0x1400c0323
inc rdx
mov rcx, qword [rsp + 0x148]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400c0d97
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400c0fc0
call fcn.140261c34
jmp 0x1400c0323
lea rcx, [rsp + 0x1c0]
call fcn.14007bdb0
test rax, rax
jne 0x1400c0de8
mov rax, qword [rsp + 0x1b0]
movsxd rcx, dword [rax + 4]
lea rdx, [rsp + 0x1b0]
add rcx, rdx
cmp qword [rcx + 0x48], 0
mov edx, 6
mov eax, 2
cmovne edx, eax
or edx, dword [rcx + 0x10]
xor r8d, r8d
call fcn.14005f0a0
nop
mov rdx, qword [rsp + 0x138]
cmp rdx, 0x10
jb 0x1400c0e2c
inc rdx
mov rcx, qword [rsp + 0x120]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400c0e26
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400c0fc6
call fcn.140261c34
nop
mov rdx, qword [rsp + 0x110]
cmp rdx, 0x10
jb 0x1400c0e6f
inc rdx
mov rcx, qword [rsp + 0xf8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400c0e6a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400c0fcc
call fcn.140261c34
mov qword [rsp + 0x108], r13
mov qword [rsp + 0x110], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0xf8], 0
mov rax, qword [rsp + 0x1b0]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ifstream_char__struct_std::char_traits_char__.0
mov qword [rsp + rcx + 0x1b0], rax
mov rax, qword [rsp + 0x1b0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xb0]
mov dword [rsp + rcx + 0x1ac], edx
lea rcx, [rsp + 0x1c0]
call fcn.140079580
mov rax, qword [rsp + 0x1b0]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_istream_char__struct_std::char_traits_char__.0
mov qword [rsp + rcx + 0x1b0], rax
mov rax, qword [rsp + 0x1b0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x18]
mov dword [rsp + rcx + 0x1ac], edx
lea rax, vtable.std::ios_base.0
mov qword [rsp + 0x260], rax
lea rcx, [rsp + 0x260]
call fcn.140260678
nop
xor eax, eax
mov rcx, qword [rsp + 0x320]
xor rcx, rsp
call fcn.140261c10
lea r11, [rsp + 0x360]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov r12, qword [r11 + 0x38]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
mov rsp, r11
pop r15
pop r14
pop r13
ret
call fcn.140276034
nop
call fcn.140276034
nop
call fcn.140276034
nop
call fcn.14007d4c0
nop
call fcn.14005e230
call fcn.140276034
nop
call fcn.140276034
int3
call fcn.14007d4c0
nop
call fcn.14005e230
call fcn.140276034
nop
call fcn.140276034
int3
call fcn.14007d4c0
nop
call fcn.14005e230
call fcn.140276034
nop
call fcn.140276034
nop
call fcn.140276034
nop
call fcn.140276034
nop
call fcn.140276034
nop
call fcn.140276034
nop
call fcn.140276034
int3