Function at 0x1400377a0
Capabilities:
Authenticate hmac
Parse pe header
Terminate process

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x500]
sub rsp, 0x600
movdqa xmm1, xmmword [0x14009c500]
movdqu xmmword [rsp + 0x20], xmm1
mov dl, 0x58
mov r8b, Ordinal_60
mov r9b, reloc.WLDAP32.dll_Ordinal_32
mov r10b, 0x6b
mov r11b, 0x76
movzx ebx, r10b
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd ecx, xmm1
xor al, cl
mov byte [rsp + 0x21], al
xor byte [rsp + 0x22], cl
xor byte [rsp + 0x23], cl
xor byte [rsp + 0x24], cl
xor byte [rsp + 0x25], cl
xor byte [rsp + 0x26], cl
xor byte [rsp + 0x27], cl
xor byte [rsp + 0x28], cl
xor byte [rsp + 0x29], cl
xor byte [rsp + 0x2a], cl
xor byte [rsp + 0x2b], cl
xor byte [rsp + 0x2c], cl
xor byte [rsp + 0x2d], cl
xor byte [rsp + 0x2e], cl
xor byte [rsp + 0x2f], cl
xor dl, cl
mov byte [rsp + 0x30], dl
xor r8b, cl
mov byte [rsp + 0x31], r8b
xor r9b, cl
mov byte [rsp + 0x32], r9b
xor r10b, cl
mov byte [rsp + 0x33], r10b
xor r11b, cl
mov byte [rsp + 0x34], r11b
xor bl, cl
mov byte [rsp + 0x35], bl
mov byte [rsp + 0x36], 0
lea rdx, [rsp + 0x21]
lea rcx, [rsp + 0x50]
call fcn.1400391b0
nop
mov byte [rsp + 0x20], 0x41
mov al, reloc.WLDAP32.dll_Ordinal_46
mov cl, Ordinal_46
movzx edx, cl
mov r8b, gethostname
mov r9b, 0x25
mov r10b, reloc.WLDAP32.dll_Ordinal_35
mov r11b, 0x26
mov bl, reloc.WS2_32.dll_WSAGetLastError
mov dil, 0x24
mov sil, reloc.WS2_32.dll_gethostname
movzx r14d, dil
xor r15d, r15d
xor al, 0x41
mov byte [rsp + 0x21], al
xor cl, 0x41
mov byte [rsp + 0x22], cl
xor dl, 0x41
mov byte [rsp + 0x23], dl
xor r8b, 0x41
mov byte [rsp + 0x24], r8b
xor r9b, 0x41
mov byte [rsp + 0x25], r9b
xor r10b, 0x41
mov byte [rsp + 0x26], r10b
xor r11b, 0x41
mov byte [rsp + 0x27], r11b
xor bl, 0x41
mov byte [rsp + 0x28], bl
xor dil, 0x41
mov byte [rsp + 0x29], dil
xor sil, 0x41
mov byte [rsp + 0x2a], sil
xor r14b, 0x41
mov byte [rsp + 0x2b], r14b
mov byte [rsp + 0x2c], r15b
movzx edx, byte [rbp + 0x530]
lea rcx, [rsp + 0x70]
call fcn.1400392f0
nop
lea rax, [rsp + 0x21]
mov rbx, 0xffffffffffffffff
mov r8, rbx
nop
inc r8
cmp byte [rax + r8], 0
jne 0x140037920
lea rdx, [rsp + 0x21]
lea rcx, [rsp + 0x70]
call fcn.140039310
nop
mov byte [rsp + 0x37], 3
mov al, 0x7b
mov cl, 0x35
mov dl, 0x37
mov r8b, 0x67
mov r9b, 0x61
mov r10b, 0x64
mov r11b, Ordinal_46
mov dil, 0x66
movzx esi, al
movzx r14d, dil
xor r15d, r15d
xor al, 3
mov byte [rsp + 0x38], al
xor cl, 3
mov byte [rsp + 0x39], cl
xor dl, 3
mov byte [rsp + 0x3a], dl
xor r8b, 3
mov byte [rsp + 0x3b], r8b
xor r9b, 3
mov byte [rsp + 0x3c], r9b
xor r10b, 3
mov byte [rsp + 0x3d], r10b
xor r11b, 3
mov byte [rsp + 0x3e], r11b
xor dil, 3
mov byte [rsp + 0x3f], dil
xor sil, 3
mov byte [rsp + 0x40], sil
xor r14b, 3
mov byte [rsp + 0x41], r14b
mov byte [rsp + 0x42], r15b
movzx edx, byte [rbp + 0x530]
lea rcx, [rbp - 0x70]
call fcn.1400392f0
nop
lea rax, [rsp + 0x38]
mov r8, rbx
nop
inc r8
cmp byte [rax + r8], 0
jne 0x1400379d0
lea rdx, [rsp + 0x38]
lea rcx, [rbp - 0x70]
call fcn.140039310
nop
mov byte [rsp + 0x37], 0x63
mov al, reloc.WLDAP32.dll_Ordinal_27
mov cl, 0x50
mov dl, 0x51
mov r8b, 7
mov r9b, 1
mov r10b, 4
mov r11b, Ordinal_79
mov dil, 6
movzx esi, al
movzx r14d, dil
xor r15d, r15d
xor al, 0x63
mov byte [rsp + 0x38], al
xor cl, 0x63
mov byte [rsp + 0x39], cl
xor dl, 0x63
mov byte [rsp + 0x3a], dl
xor r8b, 0x63
mov byte [rsp + 0x3b], r8b
xor r9b, 0x63
mov byte [rsp + 0x3c], r9b
xor r10b, 0x63
mov byte [rsp + 0x3d], r10b
xor r11b, 0x63
mov byte [rsp + 0x3e], r11b
xor dil, 0x63
mov byte [rsp + 0x3f], dil
xor sil, 0x63
mov byte [rsp + 0x40], sil
xor r14b, 0x63
mov byte [rsp + 0x41], r14b
mov byte [rsp + 0x42], r15b
movzx edx, byte [rbp + 0x530]
lea rcx, [rbp - 0x50]
call fcn.1400392f0
nop
lea rax, [rsp + 0x38]
mov r8, rbx
nop
inc r8
cmp byte [rax + r8], 0
jne 0x140037a80
lea rdx, [rsp + 0x38]
lea rcx, [rbp - 0x50]
call fcn.140039310
nop
mov byte [rsp + 0x37], reloc.WS2_32.dll_WSASetLastError
mov al, reloc.WS2_32.dll_sendto
mov cl, Ordinal_26
mov dl, reloc.WS2_32.dll_setsockopt
mov r8b, 0x5e
movzx r9d, dl
mov r10b, 8
movzx r11d, dl
xor edi, edi
xor al, 0x70
mov byte [rsp + 0x38], al
xor cl, 0x70
mov byte [rsp + 0x39], cl
xor dl, 0x70
mov byte [rsp + 0x3a], dl
xor r8b, 0x70
mov byte [rsp + 0x3b], r8b
xor r9b, 0x70
mov byte [rsp + 0x3c], r9b
xor r10b, 0x70
mov byte [rsp + 0x3d], r10b
xor r11b, 0x70
mov byte [rsp + 0x3e], r11b
mov byte [rsp + 0x3f], dil
movzx edx, byte [rbp + 0x530]
lea rcx, [rbp - 0x30]
call fcn.1400392f0
nop
lea rax, [rsp + 0x38]
mov r8, rbx
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140037b10
lea rdx, [rsp + 0x38]
lea rcx, [rbp - 0x30]
call fcn.140039310
nop
mov byte [rsp + 0x20], 0x64
mov al, reloc.WS2_32.dll_recv
mov cl, 7
mov dl, reloc.WS2_32.dll_sendto
mov r8b, reloc.WS2_32.dll_select
mov r9b, reloc.WS2_32.dll_listen
mov r10b, 1
mov r11b, reloc.WS2_32.dll_send
mov dil, 0x4a
movzx esi, r10b
mov r14b, Ordinal_30
movzx r15d, r10b
xor r12d, r12d
xor al, 0x64
mov byte [rsp + 0x21], al
xor cl, 0x64
mov byte [rsp + 0x22], cl
xor dl, 0x64
mov byte [rsp + 0x23], dl
xor r8b, 0x64
mov byte [rsp + 0x24], r8b
xor r9b, 0x64
mov byte [rsp + 0x25], r9b
xor r10b, 0x64
mov byte [rsp + 0x26], r10b
xor r11b, 0x64
mov byte [rsp + 0x27], r11b
xor dil, 0x64
mov byte [rsp + 0x28], dil
xor sil, 0x64
mov byte [rsp + 0x29], sil
xor r14b, 0x64
mov byte [rsp + 0x2a], r14b
xor r15b, 0x64
mov byte [rsp + 0x2b], r15b
mov byte [rsp + 0x2c], r12b
movzx edx, byte [rbp + 0x530]
lea rcx, [rbp - 0x10]
call fcn.1400392f0
nop
lea rax, [rsp + 0x21]
mov r8, rbx
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140037bd0
lea rdx, [rsp + 0x21]
lea rcx, [rbp - 0x10]
call fcn.140039310
nop
mov byte [rsp + 0x20], 0x5f
mov al, 0x3e
mov cl, 0x2a
mov dl, 0x2b
mov r8b, Ordinal_50
mov r9b, Ordinal_46
movzx r10d, cl
mov r11b, Ordinal_50
mov dil, Ordinal_46
mov sil, WSAStartup
mov r14b, Ordinal_60
mov r15b, Ordinal_41
movzx r12d, r14b
xor r13d, r13d
xor al, 0x5f
mov byte [rsp + 0x21], al
xor cl, 0x5f
mov byte [rsp + 0x22], cl
xor dl, 0x5f
mov byte [rsp + 0x23], dl
xor r8b, 0x5f
mov byte [rsp + 0x24], r8b
xor r9b, 0x5f
mov byte [rsp + 0x25], r9b
xor r10b, 0x5f
mov byte [rsp + 0x26], r10b
xor r11b, 0x5f
mov byte [rsp + 0x27], r11b
xor dil, 0x5f
mov byte [rsp + 0x28], dil
xor sil, 0x5f
mov byte [rsp + 0x29], sil
xor r14b, 0x5f
mov byte [rsp + 0x2a], r14b
xor r15b, 0x5f
mov byte [rsp + 0x2b], r15b
xor r12b, 0x5f
mov byte [rsp + 0x2c], r12b
mov byte [rsp + 0x2d], r13b
movzx edx, byte [rbp + 0x530]
lea rcx, [rbp + 0x10]
call fcn.1400392f0
nop
lea rax, [rsp + 0x21]
mov r8, rbx
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140037ca0
lea rdx, [rsp + 0x21]
lea rcx, [rbp + 0x10]
call fcn.140039310
nop
mov byte [rsp + 0x20], Ordinal_60
mov al, 0x5a
mov cl, Ordinal_79
mov dl, reloc.WLDAP32.dll_Ordinal_79
mov r8b, 0x54
mov r9b, 0x49
movzx r10d, cl
mov r11b, 0x55
mov dil, 0x48
mov sil, 0x58
mov r14b, reloc.WS2_32.dll_setsockopt
mov r15b, 0x5e
mov r12b, 0x43
movzx r13d, r15b
xor ebx, ebx
xor al, 0x3b
mov byte [rsp + 0x21], al
xor cl, 0x3b
mov byte [rsp + 0x22], cl
xor dl, 0x3b
mov byte [rsp + 0x23], dl
xor r8b, 0x3b
mov byte [rsp + 0x24], r8b
xor r9b, 0x3b
mov byte [rsp + 0x25], r9b
xor r10b, 0x3b
mov byte [rsp + 0x26], r10b
xor r11b, 0x3b
mov byte [rsp + 0x27], r11b
xor dil, 0x3b
mov byte [rsp + 0x28], dil
xor sil, 0x3b
mov byte [rsp + 0x29], sil
xor r14b, 0x3b
mov byte [rsp + 0x2a], r14b
xor r15b, 0x3b
mov byte [rsp + 0x2b], r15b
xor r12b, 0x3b
mov byte [rsp + 0x2c], r12b
xor r13b, 0x3b
mov byte [rsp + 0x2d], r13b
mov byte [rsp + 0x2e], bl
movzx edx, byte [rbp + 0x530]
lea rcx, [rbp + 0x30]
call fcn.1400392f0
nop
lea rax, [rsp + 0x21]
mov rbx, 0xffffffffffffffff
mov r8, rbx
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140037d80
lea rdx, [rsp + 0x21]
lea rcx, [rbp + 0x30]
call fcn.140039310
nop
mov byte [rsp + 0x20], 0x5f
mov al, reloc.WS2_32.dll_gethostname
mov cl, 0x36
mov dl, 0x33
mov r8b, Ordinal_60
mov r9b, reloc.WLDAP32.dll_Ordinal_50
mov r10b, Ordinal_50
mov r11b, Ordinal_50
mov dil, WSAStartup
movzx esi, r8b
mov r14b, Ordinal_41
movzx r15d, r8b
xor r12d, r12d
xor al, 0x5f
mov byte [rsp + 0x21], al
xor cl, 0x5f
mov byte [rsp + 0x22], cl
xor dl, 0x5f
mov byte [rsp + 0x23], dl
xor r8b, 0x5f
mov byte [rsp + 0x24], r8b
xor r9b, 0x5f
mov byte [rsp + 0x25], r9b
xor r10b, 0x5f
mov byte [rsp + 0x26], r10b
xor r11b, 0x5f
mov byte [rsp + 0x27], r11b
xor dil, 0x5f
mov byte [rsp + 0x28], dil
xor sil, 0x5f
mov byte [rsp + 0x29], sil
xor r14b, 0x5f
mov byte [rsp + 0x2a], r14b
xor r15b, 0x5f
mov byte [rsp + 0x2b], r15b
mov byte [rsp + 0x2c], r12b
movzx edx, byte [rbp + 0x530]
lea rcx, [rbp + 0x50]
call fcn.1400392f0
nop
lea rax, [rsp + 0x21]
mov r8, rbx
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140037e40
lea rdx, [rsp + 0x21]
lea rcx, [rbp + 0x50]
call fcn.140039310
nop
mov byte [rsp + 0x20], 0x79
mov al, 9
mov cl, 0xb
mov dl, reloc.WLDAP32.dll_Ordinal_22
mov r8b, reloc.WLDAP32.dll_Ordinal_26
mov r9b, reloc.WS2_32.dll_sendto
movzx r10d, dl
mov r11b, reloc.WS2_32.dll_socket
mov dil, 0x57
mov sil, Ordinal_30
mov r14b, 1
movzx r15d, sil
xor r12d, r12d
xor al, 0x79
mov byte [rsp + 0x21], al
xor cl, 0x79
mov byte [rsp + 0x22], cl
xor dl, 0x79
mov byte [rsp + 0x23], dl
xor r8b, 0x79
mov byte [rsp + 0x24], r8b
xor r9b, 0x79
mov byte [rsp + 0x25], r9b
xor r10b, 0x79
mov byte [rsp + 0x26], r10b
xor r11b, 0x79
mov byte [rsp + 0x27], r11b
xor dil, 0x79
mov byte [rsp + 0x28], dil
xor sil, 0x79
mov byte [rsp + 0x29], sil
xor r14b, 0x79
mov byte [rsp + 0x2a], r14b
xor r15b, 0x79
mov byte [rsp + 0x2b], r15b
mov byte [rsp + 0x2c], r12b
movzx edx, byte [rbp + 0x530]
lea rcx, [rbp + 0x70]
call fcn.1400392f0
nop
lea rax, [rsp + 0x21]
mov r8, rbx
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140037f00
lea rdx, [rsp + 0x21]
lea rcx, [rbp + 0x70]
call fcn.140039310
nop
mov byte [rsp + 0x37], 0x47
mov al, 0x35
mov cl, Ordinal_35
mov dl, reloc.WLDAP32.dll_Ordinal_32
mov r8b, 0x2a
mov r9b, Ordinal_41
mov r10b, reloc.WLDAP32.dll_Ordinal_41
mov r11b, 0x69
movzx edi, cl
mov sil, 0x3f
movzx r14d, cl
xor r15d, r15d
xor al, 0x47
mov byte [rsp + 0x38], al
xor cl, 0x47
mov byte [rsp + 0x39], cl
xor dl, 0x47
mov byte [rsp + 0x3a], dl
xor r8b, 0x47
mov byte [rsp + 0x3b], r8b
xor r9b, 0x47
mov byte [rsp + 0x3c], r9b
xor r10b, 0x47
mov byte [rsp + 0x3d], r10b
xor r11b, 0x47
mov byte [rsp + 0x3e], r11b
xor dil, 0x47
mov byte [rsp + 0x3f], dil
xor sil, 0x47
mov byte [rsp + 0x40], sil
xor r14b, 0x47
mov byte [rsp + 0x41], r14b
mov byte [rsp + 0x42], r15b
movzx edx, byte [rbp + 0x530]
lea rcx, [rbp + 0x90]
call fcn.1400392f0
nop
lea rax, [rsp + 0x38]
mov r8, rbx
inc r8
cmp byte [rax + r8], 0
jne 0x140037fb1
lea rdx, [rsp + 0x38]
lea rcx, [rbp + 0x90]
call fcn.140039310
nop
mov byte [rsp + 0x20], 0x3d
mov al, 0x4d
mov cl, reloc.WLDAP32.dll_Ordinal_79
mov dl, 0x52
mov r8b, 0x5e
mov r9b, 0x58
mov r10b, 0x45
movzx r11d, al
mov dil, reloc.WS2_32.dll_send
movzx esi, r9b
movzx r14d, r10b
movzx r15d, r9b
xor r12d, r12d
xor al, 0x3d
mov byte [rsp + 0x21], al
xor cl, 0x3d
mov byte [rsp + 0x22], cl
xor dl, 0x3d
mov byte [rsp + 0x23], dl
xor r8b, 0x3d
mov byte [rsp + 0x24], r8b
xor r9b, 0x3d
mov byte [rsp + 0x25], r9b
xor r10b, 0x3d
mov byte [rsp + 0x26], r10b
xor r11b, 0x3d
mov byte [rsp + 0x27], r11b
xor dil, 0x3d
mov byte [rsp + 0x28], dil
xor sil, 0x3d
mov byte [rsp + 0x29], sil
xor r14b, 0x3d
mov byte [rsp + 0x2a], r14b
xor r15b, 0x3d
mov byte [rsp + 0x2b], r15b
mov byte [rsp + 0x2c], r12b
movzx edx, byte [rbp + 0x530]
lea rcx, [rbp + 0xb0]
call fcn.1400392f0
nop
lea rax, [rsp + 0x21]
mov r8, rbx
inc r8
cmp byte [rax + r8], 0
jne 0x140038074
lea rdx, [rsp + 0x21]
lea rcx, [rbp + 0xb0]
call fcn.140039310
nop
mov byte [rsp + 0x37], 0x44
mov al, Ordinal_46
mov cl, reloc.WLDAP32.dll_Ordinal_32
mov dl, 0x25
mov r8b, 0x35
mov r9b, 0x6a
mov r10b, reloc.WLDAP32.dll_Ordinal_33
mov r11b, reloc.WLDAP32.dll_Ordinal_60
movzx edi, r10b
xor esi, esi
xor al, 0x44
mov byte [rsp + 0x38], al
xor cl, 0x44
mov byte [rsp + 0x39], cl
xor dl, 0x44
mov byte [rsp + 0x3a], dl
xor r8b, 0x44
mov byte [rsp + 0x3b], r8b
xor r9b, 0x44
mov byte [rsp + 0x3c], r9b
xor r10b, 0x44
mov byte [rsp + 0x3d], r10b
xor r11b, 0x44
mov byte [rsp + 0x3e], r11b
xor dil, 0x44
mov byte [rsp + 0x3f], dil
mov byte [rsp + 0x40], sil
movzx edx, byte [rbp + 0x530]
lea rcx, [rbp + 0xd0]
call fcn.1400392f0
nop
lea rax, [rsp + 0x38]
mov r8, rbx
nop
inc r8
cmp byte [rax + r8], 0
jne 0x140038110
lea rdx, [rsp + 0x38]
lea rcx, [rbp + 0xd0]
call fcn.140039310
nop
mov byte [rsp + 0x37], Ordinal_32
mov al, reloc.WS2_32.dll_WSACleanup
mov cl, 0x79
mov dl, 0x7c
mov r8b, 0x6c
mov r9b, 0x2b
mov r10b, reloc.WLDAP32.dll_Ordinal_41
mov r11b, 0x33
mov dil, 0x78
mov sil, 0x65
movzx r14d, dil
xor r15d, r15d
xor al, 0x1d
mov byte [rsp + 0x38], al
xor cl, 0x1d
mov byte [rsp + 0x39], cl
xor dl, 0x1d
mov byte [rsp + 0x3a], dl
xor r8b, 0x1d
mov byte [rsp + 0x3b], r8b
xor r9b, 0x1d
mov byte [rsp + 0x3c], r9b
xor r10b, 0x1d
mov byte [rsp + 0x3d], r10b
xor r11b, 0x1d
mov byte [rsp + 0x3e], r11b
xor dil, 0x1d
mov byte [rsp + 0x3f], dil
xor sil, 0x1d
mov byte [rsp + 0x40], sil
xor r14b, 0x1d
mov byte [rsp + 0x41], r14b
mov byte [rsp + 0x42], r15b
movzx edx, byte [rbp + 0x530]
lea rcx, [rbp + 0xf0]
call fcn.1400392f0
nop
lea rax, [rsp + 0x38]
mov r8, rbx
inc r8
cmp byte [rax + r8], 0
jne 0x1400381c4
lea rdx, [rsp + 0x38]
lea rcx, [rbp + 0xf0]
call fcn.140039310
nop
mov byte [rsp + 0x37], 0x64
mov al, reloc.WS2_32.dll_listen
xor cl, cl
mov dl, 5
mov r8b, 0x4a
mov r9b, 1
mov r10b, Ordinal_30
movzx r11d, r9b
xor edi, edi
xor al, 0x64
mov byte [rsp + 0x38], al
xor cl, 0x64
mov byte [rsp + 0x39], cl
xor dl, 0x64
mov byte [rsp + 0x3a], dl
xor r8b, 0x64
mov byte [rsp + 0x3b], r8b
xor r9b, 0x64
mov byte [rsp + 0x3c], r9b
xor r10b, 0x64
mov byte [rsp + 0x3d], r10b
xor r11b, 0x64
mov byte [rsp + 0x3e], r11b
mov byte [rsp + 0x3f], dil
movzx edx, byte [rbp + 0x530]
lea rcx, [rbp + 0x110]
call fcn.1400392f0
nop
lea rax, [rsp + 0x38]
mov r8, rbx
inc r8
cmp byte [rax + r8], 0
jne 0x140038253
lea rdx, [rsp + 0x38]
lea rcx, [rbp + 0x110]
call fcn.140039310
nop
mov byte [rsp + 0x37], 0x47
mov al, reloc.WLDAP32.dll_Ordinal_46
mov cl, reloc.WLDAP32.dll_Ordinal_35
mov dl, 0x26
mov r8b, WSAStartup
mov r9b, reloc.WS2_32.dll_WSAStartup
mov r10b, 0x69
mov r11b, Ordinal_35
mov dil, 0x3f
movzx esi, r11b
xor r14d, r14d
xor al, 0x47
mov byte [rsp + 0x38], al
xor cl, 0x47
mov byte [rsp + 0x39], cl
xor dl, 0x47
mov byte [rsp + 0x3a], dl
xor r8b, 0x47
mov byte [rsp + 0x3b], r8b
xor r9b, 0x47
mov byte [rsp + 0x3c], r9b
xor r10b, 0x47
mov byte [rsp + 0x3d], r10b
xor r11b, 0x47
mov byte [rsp + 0x3e], r11b
xor dil, 0x47
mov byte [rsp + 0x3f], dil
xor sil, 0x47
mov byte [rsp + 0x40], sil
mov byte [rsp + 0x41], r14b
movzx edx, byte [rbp + 0x530]
lea rcx, [rbp + 0x130]
call fcn.1400392f0
nop
lea rax, [rsp + 0x38]
mov r8, rbx
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140038300
lea rdx, [rsp + 0x38]
lea rcx, [rbp + 0x130]
call fcn.140039310
nop
movdqa xmm1, xmmword [0x14009c460]
movdqu xmmword [rsp + 0x20], xmm1
mov dl, Ordinal_50
mov r8b, WSAGetLastError
mov r9b, 0x26
mov r10b, Ordinal_60
movzx r11d, r9b
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd ecx, xmm1
xor al, cl
mov byte [rsp + 0x21], al
xor byte [rsp + 0x22], cl
xor byte [rsp + 0x23], cl
xor byte [rsp + 0x24], cl
xor byte [rsp + 0x25], cl
xor byte [rsp + 0x26], cl
xor byte [rsp + 0x27], cl
xor byte [rsp + 0x28], cl
xor byte [rsp + 0x29], cl
xor byte [rsp + 0x2a], cl
xor byte [rsp + 0x2b], cl
xor byte [rsp + 0x2c], cl
xor byte [rsp + 0x2d], cl
xor byte [rsp + 0x2e], cl
xor byte [rsp + 0x2f], cl
xor dl, cl
mov byte [rsp + 0x30], dl
xor r8b, cl
mov byte [rsp + 0x31], r8b
xor r9b, cl
mov byte [rsp + 0x32], r9b
xor r10b, cl
mov byte [rsp + 0x33], r10b
xor r11b, cl
mov byte [rsp + 0x34], r11b
mov byte [rsp + 0x35], 0
movzx edx, byte [rbp + 0x530]
lea rcx, [rbp + 0x150]
call fcn.1400392f0
nop
lea rax, [rsp + 0x21]
mov r8, rbx
nop
inc r8
cmp byte [rax + r8], 0
jne 0x1400383d0
lea rdx, [rsp + 0x21]
lea rcx, [rbp + 0x150]
call fcn.140039310
nop
mov byte [rsp + 0x20], WSACleanup
mov al, 0x26
mov cl, 0x18
mov dl, 3
mov r8b, reloc.WS2_32.dll_sendto
mov r9b, 2
mov r10b, Ordinal_27
mov r11b, reloc.WS2_32.dll_recv
movzx edi, dl
mov sil, reloc.WLDAP32.dll_Ordinal_26
mov r14b, 0x5f
movzx r15d, r8b
mov r12b, 9
movzx r13d, r8b
xor ebx, ebx
xor al, 0x71
mov byte [rsp + 0x21], al
xor cl, 0x71
mov byte [rsp + 0x22], cl
xor dl, 0x71
mov byte [rsp + 0x23], dl
xor r8b, 0x71
mov byte [rsp + 0x24], r8b
xor r9b, 0x71
mov byte [rsp + 0x25], r9b
xor r10b, 0x71
mov byte [rsp + 0x26], r10b
xor r11b, 0x71
mov byte [rsp + 0x27], r11b
xor dil, 0x71
mov byte [rsp + 0x28], dil
xor sil, 0x71
mov byte [rsp + 0x29], sil
xor r14b, 0x71
mov byte [rsp + 0x2a], r14b
xor r15b, 0x71
mov byte [rsp + 0x2b], r15b
xor r12b, 0x71
mov byte [rsp + 0x2c], r12b
xor r13b, 0x71
mov byte [rsp + 0x2d], r13b
mov byte [rsp + 0x2e], bl
movzx edx, byte [rbp + 0x530]
lea rcx, [rbp + 0x170]
call fcn.1400392f0
nop
lea rax, [rsp + 0x21]
mov rbx, 0xffffffffffffffff
mov r8, rbx
nop
inc r8
cmp byte [rax + r8], 0
jne 0x1400384b0
lea rdx, [rsp + 0x21]
lea rcx, [rbp + 0x170]
call fcn.140039310
nop
mov byte [rsp + 0x20], 4
mov al, 0x60
mov cl, 0x71
mov dl, 0x69
mov r8b, reloc.WS2_32.dll_WSACleanup
mov r9b, 0x67
mov r10b, 0x65
movzx r11d, r8b
mov dil, 0x2a
mov sil, 0x61
mov r14b, 0x7c
movzx r15d, sil
xor r12d, r12d
xor al, 4
mov byte [rsp + 0x21], al
xor cl, 4
mov byte [rsp + 0x22], cl
xor dl, 4
mov byte [rsp + 0x23], dl
xor r8b, 4
mov byte [rsp + 0x24], r8b
xor r9b, 4
mov byte [rsp + 0x25], r9b
xor r10b, 4
mov byte [rsp + 0x26], r10b
xor r11b, 4
mov byte [rsp + 0x27], r11b
xor dil, 4
mov byte [rsp + 0x28], dil
xor sil, 4
mov byte [rsp + 0x29], sil
xor r14b, 4
mov byte [rsp + 0x2a], r14b
xor r15b, 4
mov byte [rsp + 0x2b], r15b
mov byte [rsp + 0x2c], r12b
movzx edx, byte [rbp + 0x530]
lea rcx, [rbp + 0x190]
call fcn.1400392f0
nop
lea rax, [rsp + 0x21]
mov r8, rbx
inc r8
cmp byte [rax + r8], 0
jne 0x140038571
lea rdx, [rsp + 0x21]
lea rcx, [rbp + 0x190]
call fcn.140039310
nop
movdqa xmm1, xmmword [0x14009c530]
movdqu xmmword [rsp + 0x20], xmm1
mov dl, 0x62
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd ecx, xmm1
xor al, cl
mov byte [rsp + 0x21], al
xor byte [rsp + 0x22], cl
xor byte [rsp + 0x23], cl
xor byte [rsp + 0x24], cl
xor byte [rsp + 0x25], cl
xor byte [rsp + 0x26], cl
xor byte [rsp + 0x27], cl
xor byte [rsp + 0x28], cl
xor byte [rsp + 0x29], cl
xor byte [rsp + 0x2a], cl
xor byte [rsp + 0x2b], cl
xor byte [rsp + 0x2c], cl
xor byte [rsp + 0x2d], cl
xor byte [rsp + 0x2e], cl
xor byte [rsp + 0x2f], cl
xor dl, cl
mov byte [rsp + 0x30], dl
mov byte [rsp + 0x31], 0
movzx edx, byte [rbp + 0x530]
lea rcx, [rbp + 0x1b0]
call fcn.1400392f0
nop
lea rax, [rsp + 0x21]
mov r8, rbx
inc r8
cmp byte [rax + r8], 0
jne 0x140038613
lea rdx, [rsp + 0x21]
lea rcx, [rbp + 0x1b0]
call fcn.140039310
nop
mov byte [rsp + 0x20], Ordinal_60
mov al, 0x71
mov cl, 0x55
mov dl, 0x48
mov r8b, 0x57
mov r9b, 0x4a
mov r10b, 0x4c
mov r11b, 0x6a
mov dil, 0x7d
mov sil, 0x7b
mov r14b, reloc.WLDAP32.dll_Ordinal_22
mov r15b, 0x5d
mov r12b, 0x40
movzx r13d, r15b
xor ebx, ebx
xor al, 0x38
mov byte [rsp + 0x21], al
xor cl, 0x38
mov byte [rsp + 0x22], cl
xor dl, 0x38
mov byte [rsp + 0x23], dl
xor r8b, 0x38
mov byte [rsp + 0x24], r8b
xor r9b, 0x38
mov byte [rsp + 0x25], r9b
xor r10b, 0x38
mov byte [rsp + 0x26], r10b
xor r11b, 0x38
mov byte [rsp + 0x27], r11b
xor dil, 0x38
mov byte [rsp + 0x28], dil
xor sil, 0x38
mov byte [rsp + 0x29], sil
xor r14b, 0x38
mov byte [rsp + 0x2a], r14b
xor r15b, 0x38
mov byte [rsp + 0x2b], r15b
xor r12b, 0x38
mov byte [rsp + 0x2c], r12b
xor r13b, 0x38
mov byte [rsp + 0x2d], r13b
mov byte [rsp + 0x2e], bl
movzx edx, byte [rbp + 0x530]
lea rcx, [rbp + 0x1d0]
call fcn.1400392f0
nop
lea rax, [rsp + 0x21]
mov rbx, 0xffffffffffffffff
mov r8, rbx
inc r8
cmp byte [rax + r8], 0
jne 0x1400386f0
lea rdx, [rsp + 0x21]
lea rcx, [rbp + 0x1d0]
call fcn.140039310
nop
mov byte [rsp + 0x20], Ordinal_32
mov al, 0x4c
mov cl, 0x59
mov dl, 0x48
mov r8b, reloc.WS2_32.dll_WSAStartup
movzx r9d, r8b
mov r10b, reloc.WS2_32.dll_WSASetLastError
mov r11b, reloc.WS2_32.dll_WSAGetLastError
mov dil, reloc.WLDAP32.dll_Ordinal_50
mov sil, 0x79
mov r14b, 0x64
movzx r15d, sil
xor r12d, r12d
xor al, 0x1c
mov byte [rsp + 0x21], al
xor cl, 0x1c
mov byte [rsp + 0x22], cl
xor dl, 0x1c
mov byte [rsp + 0x23], dl
xor r8b, 0x1c
mov byte [rsp + 0x24], r8b
xor r9b, 0x1c
mov byte [rsp + 0x25], r9b
xor r10b, 0x1c
mov byte [rsp + 0x26], r10b
xor r11b, 0x1c
mov byte [rsp + 0x27], r11b
xor dil, 0x1c
mov byte [rsp + 0x28], dil
xor sil, 0x1c
mov byte [rsp + 0x29], sil
xor r14b, 0x1c
mov byte [rsp + 0x2a], r14b
xor r15b, 0x1c
mov byte [rsp + 0x2b], r15b
mov byte [rsp + 0x2c], r12b
movzx edx, byte [rbp + 0x530]
lea rcx, [rbp + 0x1f0]
call fcn.1400392f0
nop
lea rax, [rsp + 0x21]
mov r8, rbx
inc r8
cmp byte [rax + r8], 0
jne 0x1400387b1
lea rdx, [rsp + 0x21]
lea rcx, [rbp + 0x1f0]
call fcn.140039310
nop
mov byte [rsp + 0x37], 6
mov al, 0x4a
mov cl, 0x69
mov dl, reloc.WS2_32.dll_WSACleanup
mov r8b, 0x62
mov r9b, 0x56
mov r10b, 0x43
mov r11b, Ordinal_41
mov dil, 0x63
mov sil, 0x7e
movzx r14d, dil
xor r15d, r15d
xor al, 6
mov byte [rsp + 0x38], al
xor cl, 6
mov byte [rsp + 0x39], cl
xor dl, 6
mov byte [rsp + 0x3a], dl
xor r8b, 6
mov byte [rsp + 0x3b], r8b
xor r9b, 6
mov byte [rsp + 0x3c], r9b
xor r10b, 6
mov byte [rsp + 0x3d], r10b
xor r11b, 6
mov byte [rsp + 0x3e], r11b
xor dil, 6
mov byte [rsp + 0x3f], dil
xor sil, 6
mov byte [rsp + 0x40], sil
xor r14b, 6
mov byte [rsp + 0x41], r14b
mov byte [rsp + 0x42], r15b
movzx edx, byte [rbp + 0x530]
lea rcx, [rbp + 0x210]
call fcn.1400392f0
nop
lea rax, [rsp + 0x38]
mov r8, rbx
inc r8
cmp byte [rax + r8], 0
jne 0x140038865
lea rdx, [rsp + 0x38]
lea rcx, [rbp + 0x210]
call fcn.140039310
nop
mov byte [rsp + 0x20], 0x61
mov al, 5
mov cl, reloc.WS2_32.dll_sendto
mov dl, listen
mov r8b, reloc.WS2_32.dll_recvfrom
mov r9b, 2
xor r10b, r10b
movzx r11d, r8b
mov dil, reloc.WLDAP32.dll_Ordinal_79
mov sil, 4
mov r14b, Ordinal_27
movzx r15d, sil
xor r12d, r12d
xor al, 0x61
mov byte [rsp + 0x21], al
xor cl, 0x61
mov byte [rsp + 0x22], cl
xor dl, 0x61
mov byte [rsp + 0x23], dl
xor r8b, 0x61
mov byte [rsp + 0x24], r8b
xor r9b, 0x61
mov byte [rsp + 0x25], r9b
xor r10b, 0x61
mov byte [rsp + 0x26], r10b
xor r11b, 0x61
mov byte [rsp + 0x27], r11b
xor dil, 0x61
mov byte [rsp + 0x28], dil
xor sil, 0x61
mov byte [rsp + 0x29], sil
xor r14b, 0x61
mov byte [rsp + 0x2a], r14b
xor r15b, 0x61
mov byte [rsp + 0x2b], r15b
mov byte [rsp + 0x2c], r12b
movzx edx, byte [rbp + 0x530]
lea rcx, [rbp + 0x230]
call fcn.1400392f0
nop
lea rax, [rsp + 0x21]
mov r8, rbx
inc r8
cmp byte [rax + r8], 0
jne 0x140038926
lea rdx, [rsp + 0x21]
lea rcx, [rbp + 0x230]
call fcn.140039310
nop
movdqa xmm1, xmmword [0x14009c520]
movdqu xmmword [rsp + 0x20], xmm1
mov dl, 0x67
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd ecx, xmm1
xor al, cl
mov byte [rsp + 0x21], al
xor byte [rsp + 0x22], cl
xor byte [rsp + 0x23], cl
xor byte [rsp + 0x24], cl
xor byte [rsp + 0x25], cl
xor byte [rsp + 0x26], cl
xor byte [rsp + 0x27], cl
xor byte [rsp + 0x28], cl
xor byte [rsp + 0x29], cl
xor byte [rsp + 0x2a], cl
xor byte [rsp + 0x2b], cl
xor byte [rsp + 0x2c], cl
xor byte [rsp + 0x2d], cl
xor byte [rsp + 0x2e], cl
xor byte [rsp + 0x2f], cl
xor dl, cl
mov byte [rsp + 0x30], dl
mov byte [rsp + 0x31], 0
movzx edx, byte [rbp + 0x530]
lea rcx, [rbp + 0x250]
call fcn.1400392f0
nop
lea rax, [rsp + 0x21]
mov r8, rbx
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x1400389d0
lea rdx, [rsp + 0x21]
lea rcx, [rbp + 0x250]
call fcn.140039310
nop
movdqa xmm1, xmmword [0x14009c4f0]
movdqu xmmword [rsp + 0x20], xmm1
mov dl, 0x7c
mov r8b, 0x61
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd ecx, xmm1
xor al, cl
mov byte [rsp + 0x21], al
xor byte [rsp + 0x22], cl
xor byte [rsp + 0x23], cl
xor byte [rsp + 0x24], cl
xor byte [rsp + 0x25], cl
xor byte [rsp + 0x26], cl
xor byte [rsp + 0x27], cl
xor byte [rsp + 0x28], cl
xor byte [rsp + 0x29], cl
xor byte [rsp + 0x2a], cl
xor byte [rsp + 0x2b], cl
xor byte [rsp + 0x2c], cl
xor byte [rsp + 0x2d], cl
xor byte [rsp + 0x2e], cl
xor byte [rsp + 0x2f], cl
xor dl, cl
mov byte [rsp + 0x30], dl
xor r8b, cl
mov byte [rsp + 0x31], r8b
mov byte [rsp + 0x32], 0
movzx edx, byte [rbp + 0x530]
lea rcx, [rbp + 0x270]
call fcn.1400392f0
nop
lea rax, [rsp + 0x21]
nop word [rax + rax]
inc rbx
cmp byte [rax + rbx], 0
jne 0x140038a80
mov r8, rbx
lea rdx, [rsp + 0x21]
lea rcx, [rbp + 0x270]
call fcn.140039310
nop
movdqa xmm1, xmmword [0x14009c4d0]
movdqu xmmword [rsp + 0x37], xmm1
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd ecx, xmm1
xor al, cl
mov byte [rsp + 0x38], al
xor byte [rsp + 0x39], cl
xor byte [rsp + 0x3a], cl
xor byte [rsp + 0x3b], cl
xor byte [rsp + 0x3c], cl
xor byte [rsp + 0x3d], cl
xor byte [rsp + 0x3e], cl
xor byte [rsp + 0x3f], cl
xor byte [rsp + 0x40], cl
xor byte [rsp + 0x41], cl
xor byte [rsp + 0x42], cl
xor byte [rsp + 0x43], cl
xor byte [rsp + 0x44], cl
xor byte [rsp + 0x45], cl
xor byte [rsp + 0x46], cl
mov byte [rsp + 0x47], 0
lea rdx, [rsp + 0x38]
lea rcx, [rbp + 0x290]
call fcn.1400391b0
nop
mov byte [rsp + 0x20], WSACleanup
mov al, 2
mov cl, Ordinal_32
mov dl, 0x18
mov r8b, reloc.WS2_32.dll_socket
movzx r9d, r8b
mov r10b, reloc.WLDAP32.dll_Ordinal_46
mov r11b, Ordinal_27
movzx ebx, dl
mov dil, 5
mov sil, 0x5f
mov r14b, reloc.WS2_32.dll_sendto
mov r15b, 9
movzx r12d, r14b
xor r13d, r13d
xor al, 0x71
mov byte [rsp + 0x21], al
xor cl, 0x71
mov byte [rsp + 0x22], cl
xor dl, 0x71
mov byte [rsp + 0x23], dl
xor r8b, 0x71
mov byte [rsp + 0x24], r8b
xor r9b, 0x71
mov byte [rsp + 0x25], r9b
xor r10b, 0x71
mov byte [rsp + 0x26], r10b
xor r11b, 0x71
mov byte [rsp + 0x27], r11b
xor bl, 0x71
mov byte [rsp + 0x28], bl
xor dil, 0x71
mov byte [rsp + 0x29], dil
xor sil, 0x71
mov byte [rsp + 0x2a], sil
xor r14b, 0x71
mov byte [rsp + 0x2b], r14b
xor r15b, 0x71
mov byte [rsp + 0x2c], r15b
xor r12b, 0x71
mov byte [rsp + 0x2d], r12b
mov byte [rsp + 0x2e], r13b
lea rdx, [rsp + 0x21]
lea rcx, [rbp + 0x2b0]
call fcn.1400391b0
nop
mov byte [rsp + 0x37], Ordinal_60
mov al, reloc.WLDAP32.dll_Ordinal_79
mov cl, 0x51
mov dl, 0x56
mov r8b, 0x5c
mov r9b, 0x5a
mov r10b, 0x5f
mov r11b, reloc.WLDAP32.dll_Ordinal_22
mov bl, 0x5d
mov dil, 0x40
movzx esi, bl
xor r14d, r14d
xor al, 0x38
mov byte [rsp + 0x38], al
xor cl, 0x38
mov byte [rsp + 0x39], cl
xor dl, 0x38
mov byte [rsp + 0x3a], dl
xor r8b, 0x38
mov byte [rsp + 0x3b], r8b
xor r9b, 0x38
mov byte [rsp + 0x3c], r9b
xor r10b, 0x38
mov byte [rsp + 0x3d], r10b
xor r11b, 0x38
mov byte [rsp + 0x3e], r11b
xor bl, 0x38
mov byte [rsp + 0x3f], bl
xor dil, 0x38
mov byte [rsp + 0x40], dil
xor sil, 0x38
mov byte [rsp + 0x41], sil
mov byte [rsp + 0x42], r14b
lea rdx, [rsp + 0x38]
lea rcx, [rbp + 0x2d0]
call fcn.1400391b0
nop
movdqa xmm1, xmmword [str.b_b_r_a]
movdqu xmmword [rsp + 0x20], xmm1
mov dl, reloc.WLDAP32.dll_Ordinal_26
mov r8b, 7
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd ecx, xmm1
xor al, cl
mov byte [rsp + 0x21], al
xor byte [rsp + 0x22], cl
xor byte [rsp + 0x23], cl
xor byte [rsp + 0x24], cl
xor byte [rsp + 0x25], cl
xor byte [rsp + 0x26], cl
xor byte [rsp + 0x27], cl
xor byte [rsp + 0x28], cl
xor byte [rsp + 0x29], cl
xor byte [rsp + 0x2a], cl
xor byte [rsp + 0x2b], cl
xor byte [rsp + 0x2c], cl
xor byte [rsp + 0x2d], cl
xor byte [rsp + 0x2e], cl
xor byte [rsp + 0x2f], cl
xor dl, cl
mov byte [rsp + 0x30], dl
xor r8b, cl
mov byte [rsp + 0x31], r8b
mov byte [rsp + 0x32], r14b
lea rdx, [rsp + 0x21]
lea rcx, [rbp + 0x2f0]
call fcn.1400391b0
nop
movdqa xmm1, xmmword [0x14009c510]
movdqu xmmword [rsp + 0x37], xmm1
mov dl, 0x68
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd ecx, xmm1
xor al, cl
mov byte [rsp + 0x38], al
xor byte [rsp + 0x39], cl
xor byte [rsp + 0x3a], cl
xor byte [rsp + 0x3b], cl
xor byte [rsp + 0x3c], cl
xor byte [rsp + 0x3d], cl
xor byte [rsp + 0x3e], cl
xor byte [rsp + 0x3f], cl
xor byte [rsp + 0x40], cl
xor byte [rsp + 0x41], cl
xor byte [rsp + 0x42], cl
xor byte [rsp + 0x43], cl
xor byte [rsp + 0x44], cl
xor byte [rsp + 0x45], cl
xor byte [rsp + 0x46], cl
xor dl, cl
mov byte [rsp + 0x47], dl
mov byte [rsp + 0x48], r14b
lea rdx, [rsp + 0x38]
lea rcx, [rbp + 0x310]
call fcn.1400391b0
nop
mov byte [rsp + 0x20], 0x47
mov al, reloc.WLDAP32.dll_Ordinal_33
mov cl, reloc.WLDAP32.dll_Ordinal_46
mov dl, reloc.WLDAP32.dll_Ordinal_35
movzx r8d, dl
mov r9b, 0x2b
mov r10b, Ordinal_35
mov r11b, 0x35
mov bl, 0x69
movzx edi, r10b
mov sil, 0x3f
movzx r14d, r10b
xor r15d, r15d
xor al, 0x47
mov byte [rsp + 0x21], al
xor cl, 0x47
mov byte [rsp + 0x22], cl
xor dl, 0x47
mov byte [rsp + 0x23], dl
xor r8b, 0x47
mov byte [rsp + 0x24], r8b
xor r9b, 0x47
mov byte [rsp + 0x25], r9b
xor r10b, 0x47
mov byte [rsp + 0x26], r10b
xor r11b, 0x47
mov byte [rsp + 0x27], r11b
xor bl, 0x47
mov byte [rsp + 0x28], bl
xor dil, 0x47
mov byte [rsp + 0x29], dil
xor sil, 0x47
mov byte [rsp + 0x2a], sil
xor r14b, 0x47
mov byte [rsp + 0x2b], r14b
mov byte [rsp + 0x2c], r15b
lea rdx, [rsp + 0x21]
lea rcx, [rbp + 0x330]
call fcn.1400391b0
nop
mov byte [rsp + 0x37], 0x40
mov al, 0x34
mov cl, 0x36
mov dl, Ordinal_32
mov r8b, gethostname
mov r9b, reloc.WS2_32.dll_WSAStartup
mov r10b, WSACleanup
mov r11b, WSASetLastError
mov bl, 0x25
mov dil, gethostname
movzx esi, bl
xor r14d, r14d
xor al, 0x40
mov byte [rsp + 0x38], al
xor cl, 0x40
mov byte [rsp + 0x39], cl
xor dl, 0x40
mov byte [rsp + 0x3a], dl
xor r8b, 0x40
mov byte [rsp + 0x3b], r8b
xor r9b, 0x40
mov byte [rsp + 0x3c], r9b
xor r10b, 0x40
mov byte [rsp + 0x3d], r10b
xor r11b, 0x40
mov byte [rsp + 0x3e], r11b
xor bl, 0x40
mov byte [rsp + 0x3f], bl
xor dil, 0x40
mov byte [rsp + 0x40], dil
xor sil, 0x40
mov byte [rsp + 0x41], sil
mov byte [rsp + 0x42], r14b
lea rdx, [rsp + 0x38]
lea rcx, [rbp + 0x350]
call fcn.1400391b0
nop
mov byte [rsp + 0x20], 4
mov al, reloc.WS2_32.dll_WSASetLastError
mov cl, WSAStartup
mov dl, 0x5b
mov r8b, 0x7c
mov r9b, reloc.WLDAP32.dll_Ordinal_50
mov r10b, Ordinal_50
mov r11b, 0x2a
mov bl, 0x61
movzx edi, r8b
movzx esi, bl
xor al, 4
mov byte [rsp + 0x21], al
xor cl, 4
mov byte [rsp + 0x22], cl
xor dl, 4
mov byte [rsp + 0x23], dl
xor r8b, 4
mov byte [rsp + 0x24], r8b
xor r9b, 4
mov byte [rsp + 0x25], r9b
xor r10b, 4
mov byte [rsp + 0x26], r10b
xor r11b, 4
mov byte [rsp + 0x27], r11b
xor bl, 4
mov byte [rsp + 0x28], bl
xor dil, 4
mov byte [rsp + 0x29], dil
xor sil, 4
mov byte [rsp + 0x2a], sil
mov byte [rsp + 0x2b], r14b
lea rdx, [rsp + 0x21]
lea rcx, [rbp + 0x370]
call fcn.1400391b0
nop
mov byte [rsp + 0x37], reloc.WLDAP32.dll_Ordinal_79
mov al, listen
mov cl, 0x27
mov dl, reloc.WLDAP32.dll_Ordinal_46
mov r8b, 0x3d
mov r9b, reloc.WLDAP32.dll_Ordinal_35
mov r10b, 0x2a
mov r11b, reloc.WLDAP32.dll_Ordinal_60
mov bl, 0x61
movzx edi, r10b
mov sil, gethostname
movzx r14d, r10b
xor al, 0x4f
mov byte [rsp + 0x38], al
xor cl, 0x4f
mov byte [rsp + 0x39], cl
xor dl, 0x4f
mov byte [rsp + 0x3a], dl
xor r8b, 0x4f
mov byte [rsp + 0x3b], r8b
xor r9b, 0x4f
mov byte [rsp + 0x3c], r9b
xor r10b, 0x4f
mov byte [rsp + 0x3d], r10b
xor r11b, 0x4f
mov byte [rsp + 0x3e], r11b
xor bl, 0x4f
mov byte [rsp + 0x3f], bl
xor dil, 0x4f
mov byte [rsp + 0x40], dil
xor sil, 0x4f
mov byte [rsp + 0x41], sil
xor r14b, 0x4f
mov byte [rsp + 0x42], r14b
mov byte [rsp + 0x43], r15b
lea rdx, [rsp + 0x38]
lea rcx, [rbp + 0x390]
call fcn.1400391b0
nop
movdqa xmm1, xmmword [0x14009c450]
movdqu xmmword [rsp + 0x20], xmm1
mov dl, 0x24
mov r8b, reloc.WS2_32.dll_WSAGetLastError
movzx r9d, dl
mov r10b, reloc.WS2_32.dll_gethostname
movzx r11d, dl
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd ecx, xmm1
xor al, cl
mov byte [rsp + 0x21], al
xor byte [rsp + 0x22], cl
xor byte [rsp + 0x23], cl
xor byte [rsp + 0x24], cl
xor byte [rsp + 0x25], cl
xor byte [rsp + 0x26], cl
xor byte [rsp + 0x27], cl
xor byte [rsp + 0x28], cl
xor byte [rsp + 0x29], cl
xor byte [rsp + 0x2a], cl
xor byte [rsp + 0x2b], cl
xor byte [rsp + 0x2c], cl
xor byte [rsp + 0x2d], cl
xor byte [rsp + 0x2e], cl
xor byte [rsp + 0x2f], cl
xor dl, cl
mov byte [rsp + 0x30], dl
xor r8b, cl
mov byte [rsp + 0x31], r8b
xor r9b, cl
mov byte [rsp + 0x32], r9b
xor r10b, cl
mov byte [rsp + 0x33], r10b
xor r11b, cl
mov byte [rsp + 0x34], r11b
mov byte [rsp + 0x35], r15b
lea rdx, [rsp + 0x21]
lea rcx, [rbp + 0x3b0]
call fcn.1400391b0
nop
movdqa xmm1, xmmword [0x14009c4e0]
movdqu xmmword [rsp + 0x37], xmm1
mov dl, 0x61
xor r8b, r8b
mov r9b, Ordinal_27
mov r10b, 0x52
mov r11b, reloc.WLDAP32.dll_Ordinal_79
movzx ebx, r10b
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd ecx, xmm1
xor al, cl
mov byte [rsp + 0x38], al
xor byte [rsp + 0x39], cl
xor byte [rsp + 0x3a], cl
xor byte [rsp + 0x3b], cl
xor byte [rsp + 0x3c], cl
xor byte [rsp + 0x3d], cl
xor byte [rsp + 0x3e], cl
xor byte [rsp + 0x3f], cl
xor byte [rsp + 0x40], cl
xor byte [rsp + 0x41], cl
xor byte [rsp + 0x42], cl
xor byte [rsp + 0x43], cl
xor byte [rsp + 0x44], cl
xor byte [rsp + 0x45], cl
xor byte [rsp + 0x46], cl
xor dl, cl
mov byte [rsp + 0x47], dl
xor r8b, cl
mov byte [rsp + 0x48], r8b
xor r9b, cl
mov byte [rsp + 0x49], r9b
xor r10b, cl
mov byte [rsp + 0x4a], r10b
xor r11b, cl
mov byte [rsp + 0x4b], r11b
xor bl, cl
mov byte [rsp + 0x4c], bl
mov byte [rsp + 0x4d], r15b
lea rdx, [rsp + 0x38]
lea rcx, [rbp + 0x3d0]
call fcn.1400391b0
nop
mov r8d, 0x104
lea rdx, [rbp + 0x3f0]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
lea rbx, [rsp + 0x50]
mov rcx, rbx
call fcn.14003c0f0
mov rdx, rax
lea rcx, [rbp + 0x3f0]
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
jne 0x140039170
add rbx, 0x20
lea rax, [rbp + 0x3f0]
cmp rbx, rax
jne 0x140039106
lea r9, [0x14003bf70]
mov edx, reloc.WLDAP32.dll_Ordinal_32
lea r8d, [rdx + 5]
lea rcx, [rsp + 0x50]
call fcn.140077164
xor al, al
lea r11, [rsp + 0x600]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3