Function at 0x14006acc0
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x208]
sub rsp, 0x2e0
movaps xmmword [rax - 0x38], xmm6
mov rax, qword [0x14013f240]
xor rax, rsp
mov qword [rbp + 0x1c0], rax
xor r12d, r12d
mov r14, rcx
movabs r13, 0x2b18ccbe41505347
xorps xmm6, xmm6
lea r15d, [r12 + 0xf]
mov rsi, qword [0x14013fa70]
xorps xmm0, xmm0
add rsi, 0x20
mov qword [rbp + 0x10], r12
mov r9d, reloc.WLDAP32.dll_Ordinal_22
mov qword [rbp + 0x18], r12
movabs r8, 0x8000000000000000
movabs rdx, 0x7fffffffffffffff
movups xmmword [rbp], xmm0
mov rdi, qword [rsi + 0x10]
cmp qword [rsi + 0x18], r15
jbe 0x14006ad54
mov rsi, qword [rsi]
cmp rdi, rdx
ja 0x14006bc6d
cmp rdi, r15
ja 0x14006ad76
mov qword [rbp + 0x10], rdi
mov qword [rbp + 0x18], r15
movups xmm0, xmmword [rsi]
movups xmmword [rbp], xmm0
jmp 0x14006adf8
mov rbx, rdi
or rbx, r15
cmp rbx, rdx
jbe 0x14006ad8a
mov rbx, rdx
lea rax, [r8 + 0x27]
jmp 0x14006adac
cmp rbx, 0x16
cmovb rbx, r9
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x14006adce
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14006bc60
mov rcx, rax
call fcn.1400e4cb0
mov rcx, rax
test rax, rax
je 0x14006bc66
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x14006addd
test rcx, rcx
je 0x14006adda
call fcn.1400e4cb0
jmp 0x14006addd
mov rax, r12
lea r8, [rdi + 1]
mov qword [rbp], rax
mov rdx, rsi
mov qword [rbp + 0x10], rdi
mov rcx, rax
mov qword [rbp + 0x18], rbx
call sub.VCRUNTIME140.dll_memcpy
mov rax, qword [r14]
mov rdx, qword [rax + 8]
mov rax, qword [0x14013fd18]
mov rcx, qword [rax + 0x70]
add rcx, rdx
call fcn.140053760
mov rcx, qword [0x14013fd70]
mov rdi, rax
movsxd rbx, dword [rcx + 0x94]
mov rcx, qword [0x14013fd18]
mov rcx, qword [rcx + 0xb8]
add rcx, rax
call fcn.140053530
mov rcx, qword [0x14013fd18]
shl eax, 4
movsxd rdx, eax
mov rcx, qword [rcx + 0xb0]
add rcx, rdx
add rcx, rdi
call fcn.140053760
mov rcx, qword [0x14013fd18]
lea r8, [rbp + 0xb0]
mov qword [rsp + 0x38], r12
xorps xmm0, xmm0
mov qword [rsp + 0x30], r12
mov rdx, rbx
mov dword [rsp + 0x28], r12d
mov r9d, Ordinal_41
imul rdx, qword [rcx + 0xc0]
movsd qword [rbp + 0x180], xmm6
movsd qword [rbp + 0x1a0], xmm6
movups xmmword [rbp + 0x160], xmm0
mov rcx, qword [0x14013f9d8]
add rdx, rax
mov dword [rbp + 0xd1], r12d
xor eax, eax
mov qword [rbp + 0xb8], rdx
mov dword [rbp + 0x198], eax
mov edx, 0x220d4c
mov dword [rbp + 0x1b8], eax
mov byte [rbp + 0xd7], al
lea rax, [rbp + 0x160]
mov qword [rbp + 0xc0], rax
mov eax, dword [0x14013f9e0]
mov dword [rbp + 0xb4], eax
movups xmmword [rbp + 0x170], xmm0
mov word [rbp + 0xd5], r12w
movups xmmword [rbp + 0x188], xmm6
mov dword [rbp + 0xb0], 0x6720f8
movups xmmword [rbp + 0x1a8], xmm6
mov qword [rbp + 0xc8], 0x60
mov byte [rbp + 0xd0], r12b
mov qword [rsp + 0x20], r12
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov rax, qword [0x14013fd18]
xorps xmm0, xmm0
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x30], r12
mov dword [rbp + 0xf9], r12d
mov rax, qword [rax + 0xa8]
add rax, rdi
movsd qword [rbp + 0x120], xmm6
xor ecx, ecx
mov qword [rbp + 0xe0], rax
lea rax, [rbp + 0x100]
movsd qword [rbp + 0x140], xmm6
mov qword [rbp + 0xe8], rax
mov eax, dword [0x14013f9e0]
mov dword [rbp + 0xdc], eax
movups xmmword [rbp + 0x100], xmm0
mov dword [rbp + 0x138], ecx
movups xmmword [rbp + 0x110], xmm0
mov dword [rbp + 0x158], ecx
movups xmmword [rbp + 0x128], xmm6
mov word [rbp + 0xfd], r12w
movups xmmword [rbp + 0x148], xmm6
mov byte [rbp + 0xff], cl
mov dword [rbp + 0xd8], 0x6720f8
mov qword [rbp + 0xf0], 0x60
mov byte [rbp + 0xf8], cl
mov dword [rsp + 0x28], r12d
lea r9d, [rcx + 0x28]
mov qword [rsp + 0x20], r12
mov rcx, qword [0x14013f9d8]
lea r8, [rbp + 0xd8]
mov edx, 0x220d4c
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
lea rdx, [rbp + 0x30]
lea rcx, [rbp + 0x100]
call fcn.14006e540
lea rdx, [rbp + 0x70]
lea rcx, [rbp + 0x160]
call fcn.14006e540
mov rcx, qword [0x14013fcf8]
cmp byte [rcx + 0x48], r12b
je 0x14006b61f
mov byte [rsp + 0x50], reloc.WS2_32.dll_recv
mov r10, r13
mov byte [rsp + 0x51], Ordinal_41
mov r9, r12
mov byte [rsp + 0x52], reloc.WS2_32.dll_gethostname
mov byte [rsp + 0x53], Ordinal_60
mov byte [rsp + 0x54], 0x24
mov byte [rsp + 0x55], Ordinal_41
mov byte [rsp + 0x56], Ordinal_79
movzx eax, byte [rsp + 0x50]
lea rax, [rsp + 0x50]
sub r10, rax
nop word [rax + rax]
mov rcx, r9
lea rdx, [rsp + 0x50]
add rdx, r9
and ecx, r15d
cmp rcx, r15
mov rax, r13
cmovae rcx, r15
movsx r8, byte [rdx]
add dl, r10b
shl cl, 2
shr rax, cl
and al, r15b
xor al, dl
xor al, r8b
mov byte [rsp + r9 + 0x50], al
inc r9
cmp r9, 7
jb 0x14006b070
xor r8d, r8d
lea rdx, [rsp + 0x50]
lea rcx, [rbp]
call fcn.140072940
movabs rsi, 0x99474736b62ae711
cmp rax, 0xffffffffffffffff
je 0x14006b0de
mov rcx, qword [0x14013fcf8]
mov eax, dword [rcx + 0x24]
mov dword [rcx + 0x1c], eax
jmp 0x14006b629
mov byte [rbp - 0x60], 0x58
mov r10, rsi
mov byte [rbp - 0x5f], WSAStartup
mov r9, r12
mov byte [rbp - 0x5e], 0x7a
mov byte [rbp - 0x5d], 0x7e
mov byte [rbp - 0x5c], 0x3f
mov byte [rbp - 0x5b], 0x57
mov byte [rbp - 0x5a], reloc.WS2_32.dll_WSASetLastError
mov byte [rbp - 0x59], 0x7d
mov byte [rbp - 0x58], WSAStartup
mov byte [rbp - 0x57], 0x76
mov byte [rbp - 0x56], WSAStartup
mov byte [rbp - 0x55], Ordinal_26
movzx eax, byte [rbp - 0x60]
lea rax, [rbp - 0x60]
sub r10, rax
nop
mov rcx, r9
lea rdx, [rbp - 0x60]
add rdx, r9
and ecx, r15d
cmp rcx, r15
mov rax, rsi
cmovae rcx, r15
movsx r8, byte [rdx]
add dl, r10b
shl cl, 2
shr rax, cl
and al, r15b
xor al, dl
xor al, r8b
mov byte [rbp + r9 - 0x60], al
inc r9
cmp r9, 0xc
jb 0x14006b120
xor r8d, r8d
lea rdx, [rbp - 0x60]
lea rcx, [rbp]
call fcn.140072940
movabs rbx, 0x9a55c8393bf1abe5
cmp rax, 0xffffffffffffffff
je 0x14006b18c
mov rcx, qword [0x14013fcf8]
mov eax, dword [rcx + 0x24]
mov dword [rcx + 0x1c], eax
jmp 0x14006b633
mov byte [rbp - 0x40], 0xa1
mov r10, rbx
mov byte [rbp - 0x3f], 0x9b
mov r9, r12
mov byte [rbp - 0x3e], 0x9f
mov byte [rbp - 0x3d], 0x83
mov byte [rbp - 0x3c], 0x9d
mov byte [rbp - 0x3b], 0x89
mov byte [rbp - 0x3a], __WSAFDIsSet
mov byte [rbp - 0x39], 0xcf
mov byte [rbp - 0x38], 0xb6
mov byte [rbp - 0x37], 0x84
mov byte [rbp - 0x36], 0x81
mov byte [rbp - 0x35], 0x90
mov byte [rbp - 0x34], 0x91
mov byte [rbp - 0x33], 0xf7
movzx eax, byte [rbp - 0x40]
lea rax, [rbp - 0x40]
sub r10, rax
nop word [rax + rax]
mov rcx, r9
lea rdx, [rbp - 0x40]
add rdx, r9
and ecx, r15d
cmp rcx, r15
mov rax, rbx
cmovae rcx, r15
movsx r8, byte [rdx]
add dl, r10b
shl cl, 2
shr rax, cl
and al, r15b
xor al, dl
xor al, r8b
mov byte [rbp + r9 - 0x40], al
inc r9
cmp r9, 0xe
jb 0x14006b1e0
xor r8d, r8d
lea rdx, [rbp - 0x40]
lea rcx, [rbp]
call fcn.140072940
cmp rax, 0xffffffffffffffff
je 0x14006b242
mov rcx, qword [0x14013fcf8]
mov eax, dword [rcx + 0x20]
mov dword [rcx + 0x1c], eax
jmp 0x14006b633
mov byte [rsp + 0x70], 0xa3
movabs r11, 0x719724727eb4a3f9
mov byte [rsp + 0x71], 0x9d
mov r10, r11
mov byte [rsp + 0x72], reloc.WS2_32.dll___WSAFDIsSet
mov r9, r12
mov byte [rsp + 0x73], 0x82
mov byte [rsp + 0x74], 0x9e
mov byte [rsp + 0x75], 0x80
mov byte [rsp + 0x76], 0x9f
mov byte [rsp + 0x77], 7
movzx eax, byte [rsp + 0x70]
lea rax, [rsp + 0x70]
sub r10, rax
nop word [rax + rax]
mov rcx, r9
lea rdx, [rsp + 0x70]
add rdx, r9
and ecx, r15d
cmp rcx, r15
mov rax, r11
cmovae rcx, r15
movsx r8, byte [rdx]
add dl, r10b
shl cl, 2
shr rax, cl
and al, r15b
xor al, dl
xor al, r8b
mov byte [rsp + r9 + 0x70], al
inc r9
cmp r9, 8
jb 0x14006b290
xor r8d, r8d
lea rdx, [rsp + 0x70]
lea rcx, [rbp]
call fcn.140072940
movabs rdi, 0xffe6da5e561655b1
cmp rax, 0xffffffffffffffff
je 0x14006b2fe
mov rcx, qword [0x14013fcf8]
mov eax, dword [rcx + 0x28]
mov dword [rcx + 0x1c], eax
jmp 0x14006b63d
mov byte [rsp + 0x40], 0xe3
mov r10, rdi
mov byte [rsp + 0x41], 0xf4
mov r9, r12
mov byte [rsp + 0x42], 0xf1
mov byte [rsp + 0x43], 0xb1
movzx eax, byte [rsp + 0x40]
lea rax, [rsp + 0x40]
sub r10, rax
nop word [rax + rax]
mov rcx, r9
lea rdx, [rsp + 0x40]
add rdx, r9
and ecx, r15d
cmp rcx, r15
mov rax, rdi
cmovae rcx, r15
movsx r8, byte [rdx]
add dl, r10b
shl cl, 2
shr rax, cl
and al, r15b
xor al, dl
xor al, r8b
mov byte [rsp + r9 + 0x40], al
inc r9
cmp r9, 4
jb 0x14006b330
xor r8d, r8d
lea rdx, [rsp + 0x40]
lea rcx, [rbp]
call fcn.140072940
cmp rax, 0xffffffffffffffff
je 0x14006b394
mov rcx, qword [0x14013fcf8]
mov eax, dword [rcx + 0x2c]
mov dword [rcx + 0x1c], eax
jmp 0x14006b63d
mov byte [rbp - 0x80], 0x84
movabs r11, 0x4e2126758c1b44c7
mov byte [rbp - 0x7f], 0xb6
mov r10, r11
mov byte [rbp - 0x7e], 0xb8
mov r9, r12
mov byte [rbp - 0x7d], 0xa3
mov byte [rbp - 0x7c], 0xe0
mov byte [rbp - 0x7b], 0x8a
mov byte [rbp - 0x7a], 0xb4
mov byte [rbp - 0x79], 0xa8
mov byte [rbp - 0x78], 0xca
movzx eax, byte [rbp - 0x80]
lea rax, [rbp - 0x80]
sub r10, rax
nop dword [rax]
nop word [rax + rax]
mov rcx, r9
lea rdx, [rbp - 0x80]
add rdx, r9
and ecx, r15d
cmp rcx, r15
mov rax, r11
cmovae rcx, r15
movsx r8, byte [rdx]
add dl, r10b
shl cl, 2
shr rax, cl
and al, r15b
xor al, dl
xor al, r8b
mov byte [rbp + r9 - 0x80], al
inc r9
cmp r9, 9
jb 0x14006b3e0
xor r8d, r8d
lea rdx, [rbp - 0x80]
lea rcx, [rbp]
call fcn.140072940
cmp rax, 0xffffffffffffffff
je 0x14006b442
mov rcx, qword [0x14013fcf8]
mov eax, dword [rcx + 0x2c]
mov dword [rcx + 0x1c], eax
jmp 0x14006b63d
mov byte [rsp + 0x58], reloc.WS2_32.dll_send
mov r10, r13
mov byte [rsp + 0x59], Ordinal_35
mov r9, r12
mov byte [rsp + 0x5a], reloc.WLDAP32.dll_Ordinal_35
mov byte [rsp + 0x5b], 0x3f
mov byte [rsp + 0x5c], reloc.WLDAP32.dll_Ordinal_46
mov byte [rsp + 0x5d], Ordinal_60
mov byte [rsp + 0x5e], Ordinal_79
movzx eax, byte [rsp + 0x58]
lea rax, [rsp + 0x58]
sub r10, rax
nop dword [rax + rax]
mov rcx, r9
lea rdx, [rsp + 0x58]
add rdx, r9
and ecx, r15d
cmp rcx, r15
mov rax, r13
cmovae rcx, r15
movsx r8, byte [rdx]
add dl, r10b
shl cl, 2
shr rax, cl
and al, r15b
xor al, dl
xor al, r8b
mov byte [rsp + r9 + 0x58], al
inc r9
cmp r9, 7
jb 0x14006b480
xor r8d, r8d
lea rdx, [rsp + 0x58]
lea rcx, [rbp]
call fcn.140072940
cmp rax, 0xffffffffffffffff
je 0x14006b4e4
mov rcx, qword [0x14013fcf8]
mov eax, dword [rcx + 0x30]
mov dword [rcx + 0x1c], eax
jmp 0x14006b63d
mov byte [rsp + 0x44], 0xf4
mov r10, rdi
mov byte [rsp + 0x45], 0xf4
mov r9, r12
mov byte [rsp + 0x46], 0xe4
mov byte [rsp + 0x47], 0xb1
movzx eax, byte [rsp + 0x44]
lea rax, [rsp + 0x44]
sub r10, rax
nop dword [rax + rax]
mov rcx, r9
lea rdx, [rsp + 0x44]
add rdx, r9
and ecx, r15d
cmp rcx, r15
mov rax, rdi
cmovae rcx, r15
movsx r8, byte [rdx]
add dl, r10b
shl cl, 2
shr rax, cl
and al, r15b
xor al, dl
xor al, r8b
mov byte [rsp + r9 + 0x44], al
inc r9
cmp r9, 4
jb 0x14006b510
xor r8d, r8d
lea rdx, [rsp + 0x44]
lea rcx, [rbp]
call fcn.140072940
cmp rax, 0xffffffffffffffff
je 0x14006b574
mov rcx, qword [0x14013fcf8]
mov eax, dword [rcx + 0x30]
mov dword [rcx + 0x1c], eax
jmp 0x14006b63d
mov byte [rbp - 0x30], 0xa8
mov r10, rbx
mov byte [rbp - 0x2f], 0x9d
mov r9, r12
mov byte [rbp - 0x2e], 0x82
mov byte [rbp - 0x2d], __WSAFDIsSet
mov byte [rbp - 0x2c], 0x81
mov byte [rbp - 0x2b], 0x8b
mov byte [rbp - 0x2a], 0x87
mov byte [rbp - 0x29], 0xcf
mov byte [rbp - 0x28], 0xb6
mov byte [rbp - 0x27], 0x84
mov byte [rbp - 0x26], 0x81
mov byte [rbp - 0x25], 0x90
mov byte [rbp - 0x24], 0x91
mov byte [rbp - 0x23], 0xf7
movzx eax, byte [rbp - 0x30]
lea rax, [rbp - 0x30]
sub r10, rax
nop dword [rax]
mov rcx, r9
lea rdx, [rbp - 0x30]
add rdx, r9
and ecx, r15d
cmp rcx, r15
mov rax, rbx
cmovae rcx, r15
movsx r8, byte [rdx]
add dl, r10b
shl cl, 2
shr rax, cl
and al, r15b
xor al, dl
xor al, r8b
mov byte [rbp + r9 - 0x30], al
inc r9
cmp r9, 0xe
jb 0x14006b5c0
xor r8d, r8d
lea rdx, [rbp - 0x30]
lea rcx, [rbp]
call fcn.140072940
mov rcx, qword [0x14013fcf8]
cmp rax, 0xffffffffffffffff
je 0x14006b63d
mov eax, dword [rcx + 0x30]
mov dword [rcx + 0x1c], eax
jmp 0x14006b63d
movabs rsi, 0x99474736b62ae711
movabs rbx, 0x9a55c8393bf1abe5
movabs rdi, 0xffe6da5e561655b1
cmp byte [rcx + 0x49], r12b
je 0x14006bc0d
mov byte [rsp + 0x60], reloc.WS2_32.dll_recv
mov r10, r13
mov byte [rsp + 0x61], Ordinal_41
mov r9, r12
mov byte [rsp + 0x62], reloc.WS2_32.dll_gethostname
mov byte [rsp + 0x63], Ordinal_60
mov byte [rsp + 0x64], 0x24
mov byte [rsp + 0x65], Ordinal_41
mov byte [rsp + 0x66], Ordinal_79
movzx eax, byte [rsp + 0x60]
lea rax, [rsp + 0x60]
sub r10, rax
nop dword [rax]
mov rcx, r9
lea rdx, [rsp + 0x60]
add rdx, r9
and ecx, r15d
cmp rcx, r15
mov rax, r13
cmovae rcx, r15
movsx r8, byte [rdx]
add dl, r10b
shl cl, 2
shr rax, cl
and al, r15b
xor al, dl
xor al, r8b
mov byte [rsp + r9 + 0x60], al
inc r9
cmp r9, 7
jb 0x14006b680
xor r8d, r8d
lea rdx, [rsp + 0x60]
lea rcx, [rbp]
call fcn.140072940
cmp rax, 0xffffffffffffffff
je 0x14006b6e4
mov rcx, qword [0x14013fcf8]
mov eax, dword [rcx + 0x38]
mov dword [rcx + 0x18], eax
jmp 0x14006bc0d
mov byte [rbp - 0x50], 0x58
mov r10, rsi
mov byte [rbp - 0x4f], WSAStartup
mov r9, r12
mov byte [rbp - 0x4e], 0x7a
mov byte [rbp - 0x4d], 0x7e
mov byte [rbp - 0x4c], 0x3f
mov byte [rbp - 0x4b], 0x57
mov byte [rbp - 0x4a], reloc.WS2_32.dll_WSASetLastError
mov byte [rbp - 0x49], 0x7d
mov byte [rbp - 0x48], WSAStartup
mov byte [rbp - 0x47], 0x76
mov byte [rbp - 0x46], WSAStartup
mov byte [rbp - 0x45], Ordinal_26
movzx eax, byte [rbp - 0x50]
lea rax, [rbp - 0x50]
sub r10, rax
nop word [rax + rax]
mov rcx, r9
lea rdx, [rbp - 0x50]
add rdx, r9
and ecx, r15d
cmp rcx, r15
mov rax, rsi
cmovae rcx, r15
movsx r8, byte [rdx]
add dl, r10b
shl cl, 2
shr rax, cl
and al, r15b
xor al, dl
xor al, r8b
mov byte [rbp + r9 - 0x50], al
inc r9
cmp r9, 0xc
jb 0x14006b730
xor r8d, r8d
lea rdx, [rbp - 0x50]
lea rcx, [rbp]
call fcn.140072940
cmp rax, 0xffffffffffffffff
je 0x14006b792
mov rcx, qword [0x14013fcf8]
mov eax, dword [rcx + 0x38]
mov dword [rcx + 0x18], eax
jmp 0x14006bc0d
mov byte [rbp - 0x20], 0xa1
mov r10, rbx
mov byte [rbp - 0x1f], 0x9b
mov r9, r12
mov byte [rbp - 0x1e], 0x9f
mov byte [rbp - 0x1d], 0x83
mov byte [rbp - 0x1c], 0x9d
mov byte [rbp - 0x1b], 0x89
mov byte [rbp - 0x1a], __WSAFDIsSet
mov byte [rbp - 0x19], 0xcf
mov byte [rbp - 0x18], 0xb6
mov byte [rbp - 0x17], 0x84
mov byte [rbp - 0x16], 0x81
mov byte [rbp - 0x15], 0x90
mov byte [rbp - 0x14], 0x91
mov byte [rbp - 0x13], 0xf7
movzx eax, byte [rbp - 0x20]
lea rax, [rbp - 0x20]
sub r10, rax
nop dword [rax + rax]
mov rcx, r9
lea rdx, [rbp - 0x20]
add rdx, r9
and ecx, r15d
cmp rcx, r15
mov rax, rbx
cmovae rcx, r15
movsx r8, byte [rdx]
add dl, r10b
shl cl, 2
shr rax, cl
and al, r15b
xor al, dl
xor al, r8b
mov byte [rbp + r9 - 0x20], al
inc r9
cmp r9, 0xe
jb 0x14006b7e0
xor r8d, r8d
lea rdx, [rbp - 0x20]
lea rcx, [rbp]
call fcn.140072940
cmp rax, 0xffffffffffffffff
je 0x14006b842
mov rcx, qword [0x14013fcf8]
mov eax, dword [rcx + 0x34]
mov dword [rcx + 0x18], eax
jmp 0x14006bc0d
mov byte [rsp + 0x78], 0xa3
movabs r11, 0x719724727eb4a3f9
mov byte [rsp + 0x79], 0x9d
mov r10, r11
mov byte [rsp + 0x7a], reloc.WS2_32.dll___WSAFDIsSet
mov r9, r12
mov byte [rsp + 0x7b], 0x82
mov byte [rsp + 0x7c], 0x9e
mov byte [rsp + 0x7d], 0x80
mov byte [rsp + 0x7e], 0x9f
mov byte [rsp + 0x7f], 7
movzx eax, byte [rsp + 0x78]
lea rax, [rsp + 0x78]
sub r10, rax
nop word [rax + rax]
mov rcx, r9
lea rdx, [rsp + 0x78]
add rdx, r9
and ecx, r15d
cmp rcx, r15
mov rax, r11
cmovae rcx, r15
movsx r8, byte [rdx]
add dl, r10b
shl cl, 2
shr rax, cl
and al, r15b
xor al, dl
xor al, r8b
mov byte [rsp + r9 + 0x78], al
inc r9
cmp r9, 8
jb 0x14006b890
xor r8d, r8d
lea rdx, [rsp + 0x78]
lea rcx, [rbp]
call fcn.140072940
cmp rax, 0xffffffffffffffff
je 0x14006b8f4
mov rcx, qword [0x14013fcf8]
mov eax, dword [rcx + 0x3c]
mov dword [rcx + 0x18], eax
jmp 0x14006bc0d
mov byte [rsp + 0x48], 0xe3
mov r10, rdi
mov byte [rsp + 0x49], 0xf4
mov r9, r12
mov byte [rsp + 0x4a], 0xf1
mov byte [rsp + 0x4b], 0xb1
movzx eax, byte [rsp + 0x48]
lea rax, [rsp + 0x48]
sub r10, rax
nop dword [rax + rax]
mov rcx, r9
lea rdx, [rsp + 0x48]
add rdx, r9
and ecx, r15d
cmp rcx, r15
mov rax, rdi
cmovae rcx, r15
movsx r8, byte [rdx]
add dl, r10b
shl cl, 2
shr rax, cl
and al, r15b
xor al, dl
xor al, r8b
mov byte [rsp + r9 + 0x48], al
inc r9
cmp r9, 4
jb 0x14006b920
xor r8d, r8d
lea rdx, [rsp + 0x48]
lea rcx, [rbp]
call fcn.140072940
cmp rax, 0xffffffffffffffff
je 0x14006b984
mov rcx, qword [0x14013fcf8]
mov eax, dword [rcx + 0x40]
mov dword [rcx + 0x18], eax
jmp 0x14006bc0d
mov byte [rbp - 0x70], 0x84
movabs r11, 0x4e2126758c1b44c7
mov byte [rbp - 0x6f], 0xb6
mov r10, r11
mov byte [rbp - 0x6e], 0xb8
mov r9, r12
mov byte [rbp - 0x6d], 0xa3
mov byte [rbp - 0x6c], 0xe0
mov byte [rbp - 0x6b], 0x8a
mov byte [rbp - 0x6a], 0xb4
mov byte [rbp - 0x69], 0xa8
mov byte [rbp - 0x68], 0xca
movzx eax, byte [rbp - 0x70]
lea rax, [rbp - 0x70]
sub r10, rax
nop dword [rax]
nop word [rax + rax]
mov rcx, r9
lea rdx, [rbp - 0x70]
add rdx, r9
and ecx, r15d
cmp rcx, r15
mov rax, r11
cmovae rcx, r15
movsx r8, byte [rdx]
add dl, r10b
shl cl, 2
shr rax, cl
and al, r15b
xor al, dl
xor al, r8b
mov byte [rbp + r9 - 0x70], al
inc r9
cmp r9, 9
jb 0x14006b9d0
xor r8d, r8d
lea rdx, [rbp - 0x70]
lea rcx, [rbp]
call fcn.140072940
cmp rax, 0xffffffffffffffff
je 0x14006ba32
mov rcx, qword [0x14013fcf8]
mov eax, dword [rcx + 0x40]
mov dword [rcx + 0x18], eax
jmp 0x14006bc0d
mov byte [rsp + 0x68], reloc.WS2_32.dll_send
mov r10, r13
mov byte [rsp + 0x69], Ordinal_35
mov r9, r12
mov byte [rsp + 0x6a], reloc.WLDAP32.dll_Ordinal_35
mov byte [rsp + 0x6b], 0x3f
mov byte [rsp + 0x6c], reloc.WLDAP32.dll_Ordinal_46
mov byte [rsp + 0x6d], Ordinal_60
mov byte [rsp + 0x6e], Ordinal_79
movzx eax, byte [rsp + 0x68]
lea rax, [rsp + 0x68]
sub r10, rax
nop dword [rax + rax]
mov rcx, r9
lea rdx, [rsp + 0x68]
add rdx, r9
and ecx, r15d
cmp rcx, r15
mov rax, r13
cmovae rcx, r15
movsx r8, byte [rdx]
add dl, r10b
shl cl, 2
shr rax, cl
and al, r15b
xor al, dl
xor al, r8b
mov byte [rsp + r9 + 0x68], al
inc r9
cmp r9, 7
jb 0x14006ba70
xor r8d, r8d
lea rdx, [rsp + 0x68]
lea rcx, [rbp]
call fcn.140072940
cmp rax, 0xffffffffffffffff
je 0x14006bad4
mov rcx, qword [0x14013fcf8]
mov eax, dword [rcx + 0x44]
mov dword [rcx + 0x18], eax
jmp 0x14006bc0d
mov byte [rsp + 0x4c], 0xf4
mov r11, rdi
mov byte [rsp + 0x4d], 0xf4
mov r10, r12
mov byte [rsp + 0x4e], 0xe4
mov byte [rsp + 0x4f], 0xb1
movzx eax, byte [rsp + 0x4c]
lea rax, [rsp + 0x4c]
sub r11, rax
nop dword [rax + rax]
mov rcx, r10
lea r8, [rsp + 0x4c]
add r8, r10
and ecx, r15d
cmp rcx, r15
mov rdx, rdi
cmovae rcx, r15
movsx r9, byte [r8]
lea eax, [r8 + r11]
shl cl, 2
shr rdx, cl
and dl, r15b
xor dl, al
xor dl, r9b
mov byte [rsp + r10 + 0x4c], dl
inc r10
cmp r10, 4
jb 0x14006bb00
xor r8d, r8d
lea rdx, [rsp + 0x4c]
lea rcx, [rbp]
call fcn.140072940
cmp rax, 0xffffffffffffffff
je 0x14006bb65
mov rcx, qword [0x14013fcf8]
mov eax, dword [rcx + 0x44]
mov dword [rcx + 0x18], eax
jmp 0x14006bc0d
mov byte [rbp - 0x10], 0xa8
mov r10, rbx
mov byte [rbp - 0xf], 0x9d
mov r9, r12
mov byte [rbp - 0xe], 0x82
mov byte [rbp - 0xd], __WSAFDIsSet
mov byte [rbp - 0xc], 0x81
mov byte [rbp - 0xb], 0x8b
mov byte [rbp - 0xa], 0x87
mov byte [rbp - 9], 0xcf
mov byte [rbp - 8], 0xb6
mov byte [rbp - 7], 0x84
mov byte [rbp - 6], 0x81
mov byte [rbp - 5], 0x90
mov byte [rbp - 4], 0x91
mov byte [rbp - 3], 0xf7
movzx eax, byte [rbp - 0x10]
lea rax, [rbp - 0x10]
sub r10, rax
nop
mov rcx, r9
lea rdx, [rbp - 0x10]
add rdx, r9
and ecx, r15d
cmp rcx, r15
mov rax, rbx
cmovae rcx, r15
movzx r8d, byte [rdx]
add dl, r10b
shl cl, 2
shr rax, cl
and al, r15b
xor al, dl
xor al, r8b
mov byte [rbp + r9 - 0x10], al
inc r9
cmp r9, 0xe
jb 0x14006bbb0
xor r8d, r8d
lea rdx, [rbp - 0x10]
lea rcx, [rbp]
call fcn.140072940
cmp rax, 0xffffffffffffffff
je 0x14006bc0d
mov rcx, qword [0x14013fcf8]
mov eax, dword [rcx + 0x30]
mov dword [rcx + 0x1c], eax
mov rdx, qword [rbp + 0x18]
cmp rdx, r15
jbe 0x14006bc43
mov rcx, qword [rbp]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006bc3e
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14006bc66
call fcn.1400e4cec
lea rcx, [rbp + 0x20]
mov byte [0x14013f9ff], 1
mov qword [rbp + 0x20], 0xa
call fcn.140053800
jmp 0x14006ad13
call fcn.140002ea0
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140002ec0
int3