Function at 0x14017ffb0
Capabilities:
Encode data using xor
Execute anti-debugging instructions

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
mov qword [rsp + 8], rcx
push rbp
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x40
xor eax, eax
mov qword [rbp - 0x18], rax
mov dword [rbp - 0x10], eax
nop dword [rax]
mov rsi, qword [0x14051e4d8]
xorps xmm0, xmm0
mov r14, qword [0x14051e4d0]
movabs r15, 0xe8c006cad3dc15cd
movzx r11d, byte [rbp + 0x30]
movabs r13, 0x5d402f8bcb04989b
movups xmmword [rbp - 0x1c], xmm0
mov dword [rbp - 0x20], 0x114599b1
movabs r12, 0xba4014607b944167
mov dword [rbp - 0xc], eax
mov word [rbp - 8], ax
nop word [rax + rax]
mov rax, r14
mov r9, rsi
nop word [rax + rax]
xor edi, edi
cmp rdi, 0x1a
jae 0x14017ff3c
movzx ebx, byte [rbp + rdi - 0x20]
mov r8, rbx
cmp rax, rdi
ja 0x14017ff34
lea rcx, [r9 + 1]
cmp rax, rcx
jae 0x14017f46f
lea r11, [rdi + r15]
movzx ecx, r11b
and cl, r8b
add cl, cl
sub r11b, cl
add r11b, 0x65
add r11b, r8b
jmp 0x14017f4a0
je 0x14017fecd
inc rcx
cmp rax, rcx
je 0x14017fe5a
lea rcx, [r9 + 3]
cmp rax, rcx
je 0x14017fe2a
lea rcx, [r9 + 9]
cmp rax, rcx
je 0x14017fde8
nop dword [rax + rax]
cmp r9, rdi
ja 0x14017ff2c
lea rcx, [r9 + 0x3e8]
cmp rax, rcx
jae 0x14017f4cb
lea edx, [rdi - 0x2f]
movzx ecx, dl
and cl, bl
add cl, cl
sub dl, cl
lea r11d, [rbx + rdx]
add r11b, 0x49
jmp 0x14017f4f1
lea rcx, [r9 + 1]
cmp rax, rcx
je 0x14017fdcd
inc rcx
cmp rax, rcx
je 0x14017fdae
lea rcx, [r9 + 5]
cmp rax, rcx
je 0x14017fd95
lea rcx, [r9 + rax]
cmp rcx, rdi
jbe 0x14017fa5b
nop
lea rcx, [r9 + 3]
cmp rax, rcx
je 0x14017fa37
lea rcx, [r9 + 0x1000]
cmp rax, rcx
je 0x14017fa0e
lea rcx, [r9 + 0x61]
cmp rax, rcx
je 0x14017f9ef
lea rcx, [r9 + 0x7a]
cmp rax, rcx
je 0x14017f9cf
lea rcx, [r9 + 0x41]
cmp rax, rcx
je 0x14017f9b6
lea rcx, [r9 + 0x5a]
cmp rax, rcx
je 0x14017f996
lea rcx, [r9 + 0x2a]
cmp rax, rcx
je 0x14017f976
lea rcx, [r9 + 0x200]
cmp rax, rcx
je 0x14017f957
lea rcx, [r9 + 0x3e8]
cmp rax, rcx
je 0x14017f930
lea rcx, [r9 + 0x400]
cmp rax, rcx
je 0x14017f500
lea rax, [r9 + 8]
lea r9, [rax + 0x1000]
lea rcx, [r9 + 9]
cmp rax, rcx
jb 0x14017ff11
lea rcx, [r9 + 0xa]
cmp rax, rcx
jb 0x14017fef6
lea rcx, [r9 + 1]
cmp rax, rcx
jb 0x14017f6e3
lea rcx, [r9 + 2]
cmp rax, rcx
jb 0x14017f6ca
lea rcx, [r9 + 3]
cmp rax, rcx
jb 0x14017f6b1
lea rcx, [r9 + 4]
cmp rax, rcx
jb 0x14017f8df
lea rcx, [r9 + 5]
cmp rax, rcx
jb 0x14017f892
lea rcx, [r9 + 0x7a]
cmp rax, rcx
jb 0x14017f84d
lea rcx, [r9 + 0x41]
cmp rax, rcx
jb 0x14017f82d
lea rcx, [r9 + 0x5a]
cmp rax, rcx
jb 0x14017f500
lea rax, [r9 + 0x28]
lea r9, [rax + 0x2a]
lea rcx, [r9 + 0x40]
cmp rax, rcx
ja 0x14017f806
lea rcx, [r9 + 0x42]
cmp rax, rcx
ja 0x14017f7e7
lea rcx, [r9 + 6]
cmp rax, rcx
ja 0x14017f7c8
lea rcx, [r9 + 8]
cmp rax, rcx
ja 0x14017f7a8
lea rcx, [r9 + 9]
cmp rax, rcx
ja 0x14017f788
lea rcx, [r9 + 0xa]
cmp rax, rcx
ja 0x14017f768
lea rcx, [r9 + 0x10]
cmp rax, rcx
ja 0x14017f749
lea rcx, [r9 + 0x20]
cmp rax, rcx
ja 0x14017f720
lea rcx, [r9 + 3]
cmp rax, rcx
ja 0x14017f6fc
lea rcx, [r9 + 4]
cmp rax, rcx
ja 0x14017f500
lea rax, [r9 + 0x200]
lea r9, [rax + 5]
jmp 0x14017f500
lea edx, [rdi + 0x4f]
movzx ecx, dl
and cl, bl
add cl, cl
sub dl, cl
lea r11d, [rbx + rdx]
sub r11b, 0x29
jmp 0x14017f4f1
lea edx, [rdi - 0x4b]
movzx ecx, dl
and cl, bl
add cl, cl
sub dl, cl
lea r11d, [rbx + rdx]
add r11b, 0xd
jmp 0x14017f4a0
lea edx, [rdi + 0x1b]
movzx ecx, dl
and cl, bl
add cl, cl
sub dl, cl
lea r11d, [rbx + rdx]
add r11b, 0x43
jmp 0x14017f441
lea r8d, [rdi - 0x78]
mov edx, 0x24
movzx ecx, bl
movzx r10d, dil
and cl, r8b
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, bl
add r11b, r8b
jmp 0x14017fe01
lea r8d, [rdi - 0x12]
mov edx, 0x3f
movzx ecx, bl
inc r9
and cl, r8b
dec rdi
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, bl
add r11b, r8b
inc rdi
jmp 0x14017f432
lea edx, [rdi + 0x54]
movzx ecx, bl
and cl, dl
dec rdi
add cl, cl
sub bl, cl
lea r11d, [rdx + rbx]
sub r11b, 0x4c
inc rdi
jmp 0x14017f432
lea r8d, [rdi - 0x46]
movzx ecx, bl
and cl, r8b
movzx r11d, bl
add cl, cl
movzx r10d, dil
sub r11b, cl
sub r11b, 0x16
jmp 0x14017fd4b
lea r8d, [rdi + 0x20]
mov edx, reloc.WS2_32.dll_recv
movzx ecx, bl
and cl, r8b
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, bl
add r11b, r8b
jmp 0x14017fe3e
lea r8d, [rdi - 0x7a]
mov edx, 0x2b
movzx ecx, bl
and cl, r8b
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, bl
add r11b, r8b
jmp 0x14017fe41
lea r8d, [rdi - 0x14]
movzx ecx, bl
and cl, r8b
movzx r11d, bl
add cl, cl
sub r11b, cl
sub r11b, 0x74
add r11b, r8b
jmp 0x14017fe74
lea r8d, [rdi + 0x52]
movzx ecx, bl
and cl, r8b
movzx r11d, bl
add cl, cl
sub r11b, cl
sub r11b, 0x3e
add r11b, r8b
jmp 0x14017fe95
lea edx, [rdi - 0x48]
movzx ecx, bl
and cl, dl
add cl, cl
sub bl, cl
movzx ecx, byte [rbp + rdi - 0x20]
add rcx, r9
add rdi, rcx
lea r11d, [rdx + rbx]
sub r11b, 8
inc rdi
jmp 0x14017f432
lea edx, [rdi - 0x49]
movzx ecx, bl
and cl, dl
add cl, cl
sub bl, cl
lea r11d, [rdx + rbx]
dec r11b
mov byte [rbp + rdi - 0x20], r11b
inc rdi
jmp 0x14017f432
lea r8d, [rdi + 0x1d]
movzx ecx, bl
and cl, r8b
movzx r11d, bl
add cl, cl
sub r11b, cl
add r11b, 0x35
add r11b, r8b
cmp r9, 0x5a
jb 0x14017f840
mov edx, 0x1f
movzx r10d, dil
movzx ecx, bl
lea r8d, [r10 - 0x52]
and cl, r8b
sub dl, cl
add dl, dl
add dl, bl
add dl, r8b
lea r11d, [rdx + rdx]
jmp 0x14017fe01
lea r8d, [rdi - 0x7d]
movzx ecx, bl
and cl, r8b
movzx r11d, bl
add cl, cl
sub r11b, cl
add r11b, 0x6b
add r11b, r8b
cmp rax, 0x400
jae 0x14017fd2f
lea rcx, [r9 + 8]
cmp rax, rcx
jbe 0x14017fbd8
mov edx, 0x2d
lea r8d, [rdi - 0x56]
movzx ecx, bl
and cl, r8b
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, bl
jmp 0x14017f864
lea r8d, [rdi - 0x17]
movzx ecx, bl
and cl, r8b
movzx r11d, bl
add cl, cl
sub r11b, cl
sub r11b, 0x5f
add r11b, r8b
lea rcx, [r9 + rax]
cmp rcx, 0x42
je 0x14017fd71
lea rdx, [r9 + 2]
cmp rax, rdx
jbe 0x14017fb5c
lea r8d, [rdi - 0x27]
movzx ecx, bl
and cl, r8b
movzx r11d, bl
add cl, cl
sub r11b, cl
add r11b, 0x11
jmp 0x14017f8a9
lea edx, [rdi - 0x1a]
movzx ecx, bl
and cl, dl
add cl, cl
sub bl, cl
movzx ecx, byte [rbp + rdi - 0x20]
add rcx, r9
add rdi, rcx
lea r11d, [rdx + rbx]
sub r11b, 0x4a
inc rdi
jmp 0x14017f432
lea r8d, [rdi + 0x4c]
movzx ecx, bl
and cl, r8b
movzx r11d, bl
add cl, cl
sub r11b, cl
sub r11b, 0x14
add r11b, r8b
jmp 0x14017fe95
lea r8d, [rdi - 0x4e]
mov edx, reloc.WS2_32.dll_recvfrom
movzx ecx, bl
and cl, r8b
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, bl
add r11b, r8b
jmp 0x14017fe74
lea r8d, [rdi + 0x18]
mov edx, 0x2c
movzx ecx, bl
and cl, r8b
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, bl
add r11b, r8b
jmp 0x14017fe41
lea edx, [rdi + 0x7e]
movzx ecx, bl
and cl, dl
add cl, cl
sub bl, cl
lea r11d, [rdx + rbx]
sub r11b, 0x72
jmp 0x14017fe3e
movzx r10d, dil
movzx ecx, bl
movzx r11d, bl
lea r8d, [r10 - 0x1c]
and cl, r8b
add cl, cl
sub r11b, cl
sub r11b, 0x3c
jmp 0x14017fd4b
lea edx, [rdi + 0x4a]
movzx ecx, bl
and cl, dl
dec rdi
add cl, cl
sub bl, cl
lea r11d, [rdx + rbx]
sub r11b, 6
inc rdi
jmp 0x14017f432
lea r8d, [rdi - 0x50]
mov edx, 0x18
movzx ecx, bl
inc r9
and cl, r8b
dec rdi
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, bl
add r11b, r8b
inc rdi
jmp 0x14017f432
mov edx, reloc.WS2_32.dll_gethostbyaddr
movzx r10d, dil
movzx ecx, bl
lea r8d, [r10 + 0x16]
and cl, r8b
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, bl
add r11b, r8b
jmp 0x14017fe01
lea rcx, [r9 + 0x10]
cmp rax, rcx
jae 0x14017fa7d
lea edx, [rdi - 0x33]
movzx ecx, dl
and cl, bl
add cl, cl
sub dl, cl
lea r11d, [rbx + rdx]
add r11b, 0x65
jmp 0x14017f8f9
lea rdx, [r9 + 1]
cmp rax, rdx
jne 0x14017faad
lea edx, [rdi - 0x5e]
movzx ecx, dl
and cl, bl
add cl, cl
sub dl, cl
movzx ecx, byte [rbp + rdi - 0x20]
add rcx, r9
add rdi, rcx
lea r11d, [rbx + rdx]
sub r11b, 0x6e
inc rdi
jmp 0x14017f432
lea rcx, [r9 + 3]
cmp rax, rcx
jne 0x14017fad6
lea r8d, [rdi - 0x2a]
mov edx, reloc.WS2_32.dll_send
movzx ecx, r8b
and cl, bl
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, r8b
add r11b, bl
jmp 0x14017fe74
lea rcx, [r9 + 5]
cmp rax, rcx
jne 0x14017fafd
movzx r10d, dil
lea edx, [r10 - 0x5c]
movzx ecx, dl
and cl, bl
add cl, cl
sub dl, cl
lea r11d, [rbx + rdx]
sub r11b, 0x7c
jmp 0x14017fd4e
lea rcx, [rdx + 1]
cmp rax, rcx
jne 0x14017fb2c
lea r8d, [rdi + 0x3e]
mov edx, 0x27
movzx ecx, r8b
dec rdi
and cl, bl
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, r8b
add r11b, bl
inc rdi
jmp 0x14017f432
lea rcx, [r9 + 2]
cmp rax, rcx
jne 0x14017f8f9
movzx r10d, dil
movzx ecx, bl
movzx r11d, bl
lea r8d, [r10 + 0x72]
and cl, r8b
add cl, cl
sub r11b, cl
sub r11b, 0x1e
add r11b, r8b
jmp 0x14017fe01
lea rcx, [r9 + 1]
cmp rax, rcx
jne 0x14017fb88
movzx r10d, dil
movzx ecx, bl
movzx r11d, bl
lea r8d, [r10 + 0x73]
and cl, r8b
add cl, cl
sub r11b, cl
sub r11b, 0x25
add r11b, r8b
jmp 0x14017fe01
lea rcx, [r9 + 3]
cmp rax, rcx
jne 0x14017fbb0
lea edx, [rdi - 0x59]
movzx ecx, bl
and cl, dl
dec rdi
add cl, cl
sub bl, cl
lea r11d, [rdx + rbx]
add r11b, 0x6f
inc rdi
jmp 0x14017f432
cmp rax, rdx
jne 0x14017f8ac
lea r8d, [rdi - 0x57]
movzx ecx, bl
and cl, r8b
movzx r11d, bl
add cl, cl
sub r11b, cl
add r11b, 0x61
add r11b, r8b
jmp 0x14017fe95
lea rcx, [r9 + 1]
cmp rax, rcx
jne 0x14017fc0f
lea r8d, [rdi + 0x44]
movzx ecx, bl
and cl, r8b
mov edx, reloc.WS2_32.dll_select
sub dl, cl
movzx ecx, byte [rbp + rdi - 0x20]
add rcx, r9
add rdi, rcx
lea r11d, [rdx + rdx]
add r11b, bl
add r11b, r8b
inc rdi
jmp 0x14017f432
inc rcx
cmp rax, rcx
jne 0x14017fc36
lea r8d, [rdi + 0x78]
movzx ecx, bl
and cl, r8b
movzx r11d, bl
add cl, cl
sub r11b, cl
sub r11b, 0x48
add r11b, r8b
jmp 0x14017fe74
lea rcx, [r9 + 3]
cmp rax, rcx
jne 0x14017fc58
lea edx, [rdi + 0x12]
movzx ecx, bl
and cl, dl
add cl, cl
sub bl, cl
lea r11d, [rdx + rbx]
sub r11b, 0x7e
jmp 0x14017fe41
lea rcx, [r9 + 4]
cmp rax, rcx
jne 0x14017fc81
lea r8d, [rdi - 0x54]
mov edx, 0x26
movzx ecx, bl
and cl, r8b
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, bl
add r11b, r8b
jmp 0x14017fe3e
lea rcx, [r9 + 5]
cmp rax, rcx
jne 0x14017fcab
mov edx, reloc.WS2_32.dll_inet_addr
movzx r10d, dil
movzx ecx, bl
lea r8d, [r10 + 0x46]
and cl, r8b
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, bl
jmp 0x14017fd4b
lea rcx, [r9 + 6]
cmp rax, rcx
jne 0x14017fcd3
lea edx, [rdi - 0x20]
movzx ecx, bl
and cl, dl
dec rdi
add cl, cl
sub bl, cl
lea r11d, [rdx + rbx]
sub r11b, 0x20
inc rdi
jmp 0x14017f432
lea rcx, [r9 + 7]
cmp rax, rcx
jne 0x14017fcfe
lea edx, [rdi + 0x7a]
movzx ecx, bl
and cl, dl
inc r9
add cl, cl
dec rdi
sub bl, cl
lea r11d, [rdx + rbx]
sub r11b, 0x56
inc rdi
jmp 0x14017f432
lea rcx, [r9 + 9]
cmp rax, rcx
jne 0x14017f867
mov edx, 0x3a
movzx r10d, dil
movzx ecx, bl
lea r8d, [r10 + 0x14]
and cl, r8b
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, bl
add r11b, r8b
jmp 0x14017fe01
movzx edx, byte [rbp + rdi - 0x20]
movzx r10d, dil
movzx ecx, bl
lea r8d, [r10 + 0x48]
and cl, r8b
sub dl, cl
add dl, 4
lea r11d, [rdx + rdx]
add r11b, r8b
add r10b, 0x15
movzx ecx, r10b
and cl, bl
add cl, cl
sub r10b, cl
add r10b, 0x6d
add r10b, bl
add r10b, r11b
mov byte [rbp + rdi - 0x20], r10b
jmp 0x14017fe3e
lea r8d, [rdi - 0x1e]
movzx ecx, bl
and cl, r8b
movzx r11d, bl
add cl, cl
sub r11b, cl
sub r11b, byte [rbp + rdi - 0x20]
sub r11b, 0x2e
add r11b, r8b
jmp 0x14017fe74
lea edx, [rdi + 0x6d]
movzx ecx, dl
and cl, bl
add cl, cl
sub dl, cl
lea r11d, [rbx + rdx]
add r11b, 5
jmp 0x14017fe41
lea edx, [rdi - 0x61]
dec rdi
movzx ecx, dl
and cl, bl
add cl, cl
sub dl, cl
lea r11d, [rbx + rdx]
sub r11b, 0x59
inc rdi
jmp 0x14017f432
movzx r10d, dil
lea edx, [r10 + 0x6b]
movzx ecx, dl
and cl, bl
add cl, cl
sub dl, cl
lea r11d, [rbx + rdx]
add r11b, 0x13
jmp 0x14017fe01
movzx r10d, dil
lea edx, [r10 + 0x37]
movzx ecx, dl
and cl, bl
add cl, cl
sub dl, cl
lea r11d, [rbx + rdx]
add r11b, 0x7f
add r10b, 0x7b
movzx ecx, r10b
and cl, bl
add cl, cl
sub r10b, cl
sub r10b, 0x5d
add r10b, bl
mov byte [rbp + rdi - 0x20], r10b
inc r9
dec rdi
inc rdi
jmp 0x14017f432
lea edx, [rdi - 0x31]
movzx ecx, dl
and cl, bl
add cl, cl
sub dl, cl
lea r11d, [rbx + rdx]
add r11b, 0x57
add rax, r9
movzx ecx, r11b
mov rdx, 0xffffffffffffffff
sub rdx, rcx
add rdi, rdx
inc rdi
jmp 0x14017f432
lea rdx, [rdi + r13]
movzx ebx, r8b
movzx ecx, dl
and cl, r8b
add cl, cl
sub dl, cl
lea r11d, [rbx + rdx]
sub r11b, 0x3d
lea edx, [rdi - 0x51]
inc r9
movzx ecx, dl
and cl, bl
add cl, cl
sub dl, cl
add dl, 0x37
add dl, bl
movzx ecx, dl
mov byte [rbp + rdi - 0x20], cl
add rcx, r9
sub rdi, rcx
lea edx, [rdi + 0x7c]
inc rax
movzx ecx, dl
and cl, bl
add cl, cl
sub dl, cl
mov rcx, 0xffffffffffffffff
sub rcx, rax
sub dl, 0x64
add dl, bl
mov byte [rbp + rdi - 0x20], dl
add rdi, rcx
movzx ecx, byte [rbp + rdi - 0x20]
add rcx, r9
add rdi, rcx
inc rdi
jmp 0x14017f432
lea rdx, [rdi + r12]
movzx ecx, dl
and cl, r8b
add cl, cl
sub dl, cl
lea r11d, [r8 + rdx]
add r11b, 0x2f
movzx ecx, byte [rbp + rdi - 0x20]
add rcx, r9
add rdi, rcx
inc rdi
jmp 0x14017f432
sub dil, 0x7f
movzx ecx, bl
and cl, dil
add cl, cl
sub bl, cl
lea r11d, [rdi + rbx]
add r11b, 0x79
jmp 0x14017f430
sub dil, 0x19
movzx eax, bl
and al, dil
add al, al
sub bl, al
lea r11d, [rdi + rbx]
sub r11b, 0x51
jmp 0x14017f420
mov eax, dword [rbp + 0x15ea59c]
jmp 0x14017ff3f
mov eax, dword [rbp + 0xfabb69]
jmp 0x14017ff3f
mov eax, dword [rbp - 0x20]
movsxd rcx, eax
mov qword [0x14051e4f8], rcx
rdtsc
shl rdx, 0x20
lea rdi, [rbp + 0x30]
or rax, rdx
xor bl, bl
lea rcx, [rcx + rax*8]
mov qword [0x14051e500], rcx
mov ecx, 0x186a0
inc bl
call fcn.14017e770
movzx ecx, bl
movzx eax, al
xor cl, 0x61
lea rdi, [rdi + 1]
movzx edx, cl
imul eax, edx
xor byte [rdi - 1], al
cmp bl, 8
jb 0x14017ff63
mov rax, qword [rbp + 0x30]
lea r11, [rsp + 0x40]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x40
xor eax, eax
xorps xmm0, xmm0
movups xmmword [rsp + 0x28], xmm0
mov dword [rsp + 0x38], eax
mov rsi, rcx
mov byte [rsp + 0x3c], al
mov rbp, qword [0x14051e4d8]
movabs r15, 0x979e17a6c5842159
mov r14, qword [0x14051e4d0]
movabs r13, 0x2552a58f669ce96f
movzx r11d, byte [rsp + 0x70]
movabs r12, 0xc6da46f4508c640b
mov dword [rsp + 0x20], 0xc9057109
movups xmmword [rsp + 0x24], xmm0
mov dword [rsp + 0x34], eax
mov word [rsp + 0x38], ax
nop dword [rax]
mov rax, r14
mov r9, rbp
nop word [rax + rax]
xor edi, edi
cmp rdi, 0x1a
jae 0x140180b0e
movzx ebx, byte [rsp + rdi + 0x20]
mov r10, rbx
cmp rax, rdi
ja 0x140180b05
lea rcx, [r9 + 1]
cmp rax, rcx
jae 0x14018007f
lea r11, [rdi + r15]
movzx ecx, r11b
and cl, r10b
add cl, cl
sub r11b, cl
sub r11b, 0x6f
add r11b, r10b
jmp 0x1401800c0
je 0x140180a9d
inc rcx
cmp rax, rcx
je 0x140180a36
lea rcx, [r9 + 3]
cmp rax, rcx
je 0x1401809ee
lea rcx, [r9 + 7]
cmp rax, rcx
je 0x1401809cf
lea rcx, [r9 + 4]
cmp rax, rcx
je 0x140180990
nop dword [rax + rax]
cmp r9, rdi
ja 0x140180afc
lea rcx, [r9 + 5]
cmp rax, rcx
jae 0x1401800e8
lea edx, [rdi + 0x4d]
movzx ecx, dl
and cl, bl
add cl, cl
sub dl, cl
lea r11d, [rbx + rdx]
sub r11b, 0x1b
jmp 0x140180120
lea rcx, [r9 + 1]
cmp rax, rcx
je 0x140180975
inc rcx
cmp rax, rcx
je 0x140180956
lea rcx, [r9 + 3]
cmp rax, rcx
je 0x140180906
lea rcx, [r9 + 6]
cmp rax, rcx
je 0x1401808ed
nop dword [rax + rax]
lea rcx, [r9 + rax]
cmp rcx, rdi
jbe 0x140180642
nop dword [rax]
lea rcx, [r9 + 9]
cmp rax, rcx
je 0x14018061e
lea rcx, [r9 + 0x10]
cmp rax, rcx
je 0x1401805f5
lea rcx, [r9 + 0x28]
cmp rax, rcx
je 0x1401805d6
lea rcx, [r9 + 0x41]
cmp rax, rcx
je 0x1401805b8
lea rcx, [r9 + 0x2a]
cmp rax, rcx
je 0x14018059f
lea rcx, [r9 + 2]
cmp rax, rcx
je 0x140180586
lea rcx, [r9 + 4]
cmp rax, rcx
je 0x140180566
lea rcx, [r9 + 6]
cmp rax, rcx
je 0x140180546
lea rcx, [r9 + 0x200]
cmp rax, rcx
je 0x140180518
lea rcx, [r9 + 0x400]
cmp rax, rcx
je 0x140180130
lea rax, [r9 + 3]
lea r9, [rax + 0x61]
lea rcx, [r9 + 5]
cmp rax, rcx
jb 0x140180ae1
lea rcx, [r9 + 0x80]
cmp rax, rcx
jb 0x140180ac6
lea rcx, [r9 + 0x3e8]
cmp rax, rcx
jb 0x1401802fc
lea rcx, [r9 + 0x1000]
cmp rax, rcx
jb 0x1401802e3
lea rcx, [r9 + 0x7a]
cmp rax, rcx
jb 0x1401802ca
lea rcx, [r9 + 0x5a]
cmp rax, rcx
jb 0x1401804d3
lea rcx, [r9 + 0x10]
cmp rax, rcx
jb 0x14018048a
lea rcx, [r9 + 0x28]
cmp rax, rcx
jb 0x140180442
lea rcx, [r9 + 0x42]
cmp rax, rcx
jb 0x140180421
lea rax, [r9 + 0xa]
lea r9, [rax + 0x3e8]
lea rcx, [r9 + 0x20]
cmp rax, rcx
ja 0x1401803f3
lea rcx, [r9 + 0x40]
cmp rax, rcx
ja 0x1401803d6
lea rcx, [r9 + 0x64]
cmp rax, rcx
ja 0x1401803b9
lea rcx, [r9 + 0x200]
cmp rax, rcx
ja 0x140180399
lea rcx, [r9 + 3]
cmp rax, rcx
ja 0x140180380
lea rcx, [r9 + 5]
cmp rax, rcx
ja 0x14018035d
lea rcx, [r9 + 8]
cmp rax, rcx
ja 0x14018033e
lea rcx, [r9 + 0xa]
cmp rax, rcx
ja 0x140180315
lea rcx, [r9 + 0x7a]
cmp rax, rcx
ja 0x140180130
lea rax, [r9 + 6]
lea r9, [rax + 0x5a]
jmp 0x140180130
lea edx, [rdi + 0x53]
movzx ecx, dl
and cl, bl
add cl, cl
sub dl, cl
lea r11d, [rbx + rdx]
sub r11b, 0x45
jmp 0x140180120
lea edx, [rdi - 0x5f]
movzx ecx, dl
and cl, bl
add cl, cl
sub dl, cl
lea r11d, [rbx + rdx]
sub r11b, 0x67
jmp 0x1401800c0
lea edx, [rdi - 0x11]
movzx ecx, dl
and cl, bl
add cl, cl
sub dl, cl
lea r11d, [rbx + rdx]
add r11b, 0x77
jmp 0x140180051
lea r8d, [rdi - 0x4a]
mov edx, 3
movzx ecx, bl
inc r9
and cl, r8b
dec rdi
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, bl
add r11b, r8b
inc rdi
jmp 0x140180042
lea edx, [rdi + 4]
movzx ecx, bl
and cl, dl
dec rdi
add cl, cl
sub bl, cl
lea r11d, [rdx + rbx]
sub r11b, 0x1c
inc rdi
jmp 0x140180042
lea r8d, [rdi + 0x52]
movzx ecx, bl
and cl, r8b
movzx r11d, bl
add cl, cl
movzx r10d, dil
sub r11b, cl
sub r11b, 0x3e
add r11b, r8b
jmp 0x14018091f
lea edx, [rdi - 0x60]
movzx ecx, bl
and cl, dl
add cl, cl
sub bl, cl
lea r11d, [rdx + rbx]
sub r11b, 0x60
jmp 0x14018093a
lea r8d, [rdi - 0x12]
mov edx, 0x3f
movzx ecx, bl
and cl, r8b
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, bl
add r11b, r8b
jmp 0x14018093d
mov edx, 0x2e
lea r8d, [rdi + 0x3c]
movzx ecx, bl
and cl, r8b
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, bl
jmp 0x140180a0a
mov edx, 0x1d
lea r8d, [rdi - 0x76]
movzx ecx, bl
and cl, r8b
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, bl
jmp 0x140180a5b
lea r8d, [rdi - 0x28]
movzx ecx, bl
and cl, r8b
mov edx, reloc.WS2_32.dll_inet_ntoa
sub dl, cl
movzx ecx, byte [rsp + rdi + 0x20]
add rcx, r9
add rdi, rcx
lea r11d, [rdx + rdx]
add r11b, bl
add r11b, r8b
inc rdi
jmp 0x140180042
lea edx, [rdi + 0x1b]
movzx ecx, bl
and cl, dl
add cl, cl
sub bl, cl
lea r11d, [rdx + rbx]
add r11b, 0x43
mov byte [rsp + rdi + 0x20], r11b
inc rdi
jmp 0x140180042
lea r8d, [rdi + 0x69]
movzx ecx, bl
and cl, r8b
movzx r11d, bl
add cl, cl
sub r11b, cl
add r11b, 0x21
add r11b, r8b
cmp r9, 0x80
jb 0x140180435
movzx edx, bl
movzx r10d, dil
movzx ecx, bl
lea r8d, [r10 + 0x76]
and cl, r8b
add cl, cl
sub dl, cl
add dl, r8b
lea r11d, [rdx*2 - 0x74]
jmp 0x1401809a9
lea edx, [rdi - 0x49]
movzx ecx, dl
and cl, bl
add cl, cl
sub dl, cl
lea r11d, [rbx + rdx]
dec r11b
cmp rax, 0x400
jae 0x1401808ae
lea rdx, [r9 + 3]
cmp rax, rdx
jbe 0x14018080a
lea r8d, [rdi - 0x7e]
mov edx, 0x39
movzx ecx, r8b
and cl, bl
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, r8b
add r11b, bl
jmp 0x14018045c
lea edx, [rdi + 5]
movzx ecx, dl
and cl, bl
add cl, cl
sub dl, cl
lea r11d, [rbx + rdx]
sub r11b, 0x23
lea rcx, [r9 + rax]
cmp rcx, 0x40
je 0x1401808d3
lea rcx, [r9 + 6]
cmp rax, rcx
jbe 0x140180744
lea edx, [rdi + 0x35]
movzx ecx, dl
and cl, bl
add cl, cl
sub dl, cl
lea r11d, [rbx + rdx]
sub r11b, 0x73
jmp 0x14018049d
lea r8d, [rdi - 0x32]
mov edx, gethostbyaddr
movzx ecx, r8b
and cl, bl
sub dl, cl
movzx ecx, byte [rsp + rdi + 0x20]
add rcx, r9
add rdi, rcx
lea r11d, [rdx + rdx]
add r11b, r8b
add r11b, bl
inc rdi
jmp 0x140180042
lea r8d, [rdi + 0x1c]
mov edx, 0x1e
movzx ecx, r8b
and cl, bl
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, r8b
add r11b, bl
jmp 0x140180a5e
lea r8d, [rdi + 0x6a]
mov edx, ntohs
movzx ecx, r8b
and cl, bl
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, r8b
add r11b, bl
jmp 0x140180a0d
lea edx, [rdi - 0x48]
movzx ecx, dl
and cl, bl
add cl, cl
sub dl, cl
lea r11d, [rbx + rdx]
sub r11b, 8
jmp 0x14018093d
lea edx, [rdi + 6]
movzx ecx, dl
and cl, bl
add cl, cl
sub dl, cl
lea r11d, [rbx + rdx]
sub r11b, 0x2a
jmp 0x14018093a
movzx r10d, dil
lea edx, [r10 + 0x54]
movzx ecx, dl
and cl, bl
add cl, cl
sub dl, cl
lea r11d, [rbx + rdx]
sub r11b, 0x4c
jmp 0x14018091f
lea edx, [rdi - 0x5e]
dec rdi
movzx ecx, dl
and cl, bl
add cl, cl
sub dl, cl
lea r11d, [rbx + rdx]
sub r11b, 0x6e
inc rdi
jmp 0x140180042
lea r8d, [rdi - 0x10]
mov edx, reloc.WS2_32.dll_getservbyport
movzx ecx, r8b
inc r9
and cl, bl
dec rdi
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, r8b
add r11b, bl
inc rdi
jmp 0x140180042
lea r8d, [rdi + 0x3e]
mov edx, 0x27
movzx ecx, r8b
movzx r10d, dil
and cl, bl
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, r8b
add r11b, bl
jmp 0x1401809a9
lea rcx, [r9 + 0x3e8]
cmp rax, rcx
jae 0x140180667
lea edx, [rdi + 0x59]
movzx ecx, dl
and cl, bl
add cl, cl
sub dl, cl
lea r11d, [rbx + rdx]
sub r11b, 0x6f
jmp 0x1401804e7
lea rcx, [r9 + 1]
cmp rax, rcx
jne 0x140180697
lea edx, [rdi - 0x66]
movzx ecx, dl
and cl, bl
add cl, cl
sub dl, cl
movzx ecx, byte [rsp + rdi + 0x20]
add rcx, r9
add rdi, rcx
lea r11d, [rbx + rdx]
sub r11b, 0x36
inc rdi
jmp 0x140180042
inc rcx
cmp rax, rcx
jne 0x1401806bf
lea r8d, [rdi - 2]
mov edx, 7
movzx ecx, r8b
and cl, bl
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, r8b
add r11b, bl
jmp 0x140180a0d
lea rcx, [r9 + 4]
cmp rax, rcx
jne 0x1401806e8
lea r8d, [rdi + 0x62]
mov edx, 0x29
movzx ecx, r8b
and cl, bl
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, r8b
add r11b, bl
jmp 0x14018093a
lea rcx, [r9 + 6]
cmp rax, rcx
jne 0x140180715
mov edx, 0x3a
movzx r10d, dil
lea r8d, [r10 + 0x14]
movzx ecx, r8b
and cl, bl
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, r8b
add r11b, bl
jmp 0x14018091f
lea rcx, [r9 + 3]
cmp rax, rcx
jne 0x1401804e7
lea edx, [rdi + 0x78]
inc r9
movzx ecx, dl
dec rdi
and cl, bl
add cl, cl
sub dl, cl
lea r11d, [rbx + rdx]
sub r11b, 0x48
inc rdi
jmp 0x140180042
lea rcx, [r9 + 1]
cmp rax, rcx
jne 0x14018076b
movzx r10d, dil
lea edx, [r10 - 0x19]
movzx ecx, dl
and cl, bl
add cl, cl
sub dl, cl
lea r11d, [rbx + rdx]
sub r11b, 0x51
jmp 0x1401809a9
inc rcx
cmp rax, rcx
jne 0x140180792
lea edx, [rdi + 0x4b]
dec rdi
movzx ecx, dl
and cl, bl
add cl, cl
sub dl, cl
lea r11d, [rbx + rdx]
sub r11b, 0xd
inc rdi
jmp 0x140180042
lea rcx, [r9 + 3]
cmp rax, rcx
jne 0x1401807b4
lea edx, [rdi - 0x51]
movzx ecx, dl
and cl, bl
add cl, cl
sub dl, cl
lea r11d, [rbx + rdx]
add r11b, 0x37
jmp 0x14018093a
lea rcx, [r9 + 5]
cmp rax, rcx
jne 0x1401807d6
lea edx, [rdi + 0x13]
movzx ecx, dl
and cl, bl
add cl, cl
sub dl, cl
lea r11d, [rbx + rdx]
add r11b, 0x7b
jmp 0x140180a0d
lea rcx, [r9 + 9]
cmp rax, rcx
jne 0x14018049d
lea edx, [rdi + 0x77]
movzx ecx, dl
and cl, bl
add cl, cl
sub dl, cl
movzx ecx, byte [rsp + rdi + 0x20]
add rcx, r9
add rdi, rcx
lea r11d, [rbx + rdx]
sub r11b, 0x41
inc rdi
jmp 0x140180042
lea rcx, [r9 + 1]
cmp rax, rcx
jne 0x14018083a
lea edx, [rdi + 0x34]
movzx ecx, dl
and cl, bl
add cl, cl
sub dl, cl
movzx ecx, byte [rsp + rdi + 0x20]
add rcx, r9
add rdi, rcx
lea r11d, [rbx + rdx]
sub r11b, 0x6c
inc rdi
jmp 0x140180042
inc rcx
cmp rax, rcx
jne 0x14018085b
lea edx, [rdi - 0x68]
movzx ecx, dl
and cl, bl
add cl, cl
sub dl, cl
lea r11d, [rbx + rdx]
sub r11b, 0x28
jmp 0x140180a0d
cmp rax, rdx
jne 0x140180880
lea r8d, [rdi - 4]
mov edx, ntohs
movzx ecx, bl
and cl, r8b
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, bl
add r11b, r8b
jmp 0x14018093a
lea rcx, [r9 + 4]
cmp rax, rcx
jne 0x14018045c
mov edx, 0x1f
movzx r10d, dil
movzx ecx, bl
lea r8d, [r10 - 0x52]
and cl, r8b
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, bl
add r11b, r8b
jmp 0x14018091f
movzx r11d, byte [rsp + rdi + 0x20]
movzx r10d, dil
movzx ecx, bl
lea r8d, [r10 + 0x28]
and cl, r8b
add cl, cl
sub r11b, cl
sub r11b, 0x18
add r11b, bl
add r11b, r8b
jmp 0x14018091f
mov edx, 5
lea r8d, [rdi - 0x26]
movzx ecx, r8b
and cl, bl
sub dl, cl
lea r11d, [rdx + rdx]
jmp 0x140180a0a
lea edx, [rdi + 0x2b]
movzx ecx, dl
and cl, bl
add cl, cl
sub dl, cl
lea r11d, [rbx + rdx]
sub r11b, 0x2d
jmp 0x140180a0d
movzx r10d, dil
lea edx, [r10 + 0x15]
movzx ecx, dl
and cl, bl
add cl, cl
sub dl, cl
lea r11d, [rbx + rdx]
add r11b, 0x6d
movzx ecx, bl
sub r10b, 0x7f
and cl, r10b
add cl, cl
sub bl, cl
add bl, 0x79
add bl, r10b
add bl, r11b
mov byte [rsp + rdi + 0x20], bl
add rax, r9
movzx ecx, r11b
mov rdx, 0xffffffffffffffff
sub rdx, rcx
add rdi, rdx
inc rdi
jmp 0x140180042
lea edx, [rdi + 0x63]
dec rdi
movzx ecx, dl
and cl, bl
add cl, cl
sub dl, cl
lea r11d, [rbx + rdx]
add r11b, 0x4b
inc rdi
jmp 0x140180042
movzx r10d, dil
lea edx, [r10 - 1]
movzx ecx, dl
and cl, bl
add cl, cl
sub dl, cl
lea r11d, [rbx + rdx]
add r11b, 7
jmp 0x1401809a9
movzx r10d, dil
lea edx, [r10 - 0x65]
movzx ecx, dl
and cl, bl
add cl, cl
sub dl, cl
lea r11d, [rbx + rdx]
sub r11b, 0x3d
movzx ecx, bl
sub r10b, 0x31
and cl, r10b
add cl, cl
sub bl, cl
add bl, 0x57
add bl, r10b
mov byte [rsp + rdi + 0x20], bl
inc r9
dec rdi
inc rdi
jmp 0x140180042
lea edx, [rdi + 0x37]
movzx ecx, dl
and cl, bl
add cl, cl
sub dl, cl
lea r11d, [rbx + rdx]
add r11b, 0x7f
dec rdi
inc rdi
jmp 0x140180042
lea r8, [rdi + r13]
movzx r11d, r10b
movzx ecx, r8b
movzx ebx, r10b
and cl, r10b
add cl, cl
sub r11b, cl
sub r11b, 9
add r11b, r8b
lea r8d, [rdi + 0x33]
movzx ecx, bl
and cl, r8b
inc r9
add cl, cl
movzx edx, bl
sub dl, cl
sub dl, 0x65
add dl, r8b
movzx ecx, dl
mov byte [rsp + rdi + 0x20], cl
add rcx, r9
sub rdi, rcx
jmp 0x140180a5e
movabs r8, 0xf6167641db94a6bd
movzx r11d, r10b
add r8, rdi
movzx ebx, r10b
movzx ecx, r8b
and cl, r10b
add cl, cl
sub r11b, cl
sub r11b, 0x2b
add r11b, r8b
lea r8d, [rdi - 0x74]
movzx ecx, bl
and cl, r8b
inc rax
mov edx, reloc.WS2_32.dll_shutdown
sub dl, cl
mov rcx, 0xffffffffffffffff
sub rcx, rax
add dl, dl
add dl, bl
add dl, r8b
mov byte [rsp + rdi + 0x20], dl
add rdi, rcx
movzx ecx, byte [rsp + rdi + 0x20]
add rcx, r9
add rdi, rcx
inc rdi
jmp 0x140180042
lea rdx, [rdi + r12]
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
lea r11d, [r10 + rdx]
sub r11b, 0x4d
movzx ecx, byte [rsp + rdi + 0x20]
add rcx, r9
add rdi, rcx
inc rdi
jmp 0x140180042
add dil, 0x3d
movzx ecx, bl
and cl, dil
add cl, cl
sub bl, cl
lea r11d, [rdi + rbx]
add r11b, 0x55
jmp 0x140180040
sub dil, 0x75
movzx eax, bl
and al, dil
add al, al
sub bl, al
lea r11d, [rdi + rbx]
add r11b, 0x33
jmp 0x140180030
mov eax, dword [rsp + 0x14667ec]
jmp 0x140180b12
mov eax, dword [rsp + 0x14a8945]
jmp 0x140180b12
mov eax, dword [rsp + 0x20]
movsxd rcx, eax
mov qword [0x14051e4f8], rcx
rdtsc
shl rdx, 0x20
xor rsi, 0x186a0
or rax, rdx
lea rcx, [rcx + rax*8]
mov qword [0x14051e500], rcx
mov rcx, rsi
lea r11, [rsp + 0x40]
mov rbx, qword [r11 + 0x38]
mov rbp, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
jmp 0x14017f3a0