Function at 0x14000d560
Capabilities:
Check for sandbox and av modules
Check http status code
Encode data using xor
Parse pe header
Query or enumerate registry value

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1f0]
sub rsp, 0x2f0
mov rax, qword [0x1400d4700]
xor rax, rsp
mov qword [rbp + 0x1e0], rax
xor ebx, ebx
lea r15d, [rbx + 1]
nop
lea rcx, str.VBoxHook.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov edi, ebx
test rax, rax
cmovne edi, r15d
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, r15d
mov edx, 0x80000000
lea rcx, str..VBoxMiniRdrDN
call qword [sym.imp.KERNEL32.dll_CreateFileA]
cmp rax, 0xffffffffffffffff
jne 0x14000f157
test edi, edi
jne 0x14000f157
lea rcx, str.SbieDll.dll
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov ecx, ebx
test rax, rax
setne cl
test ecx, ecx
jne 0x14000f157
mov byte [rbp], ntohs
mov al, 0x26
mov cl, 0x5a
mov dl, 0x41
mov r8b, 0x5b
mov r9b, Ordinal_79
mov r10b, 0x5e
mov r11b, 0x49
movzx edi, al
xor esi, esi
xor al, 0xc
mov byte [rbp + 1], al
xor cl, 0xc
mov byte [rbp + 2], cl
xor dl, 0xc
mov byte [rbp + 3], dl
xor r8b, 0xc
mov byte [rbp + 4], r8b
xor r9b, 0xc
mov byte [rbp + 5], r9b
xor r10b, 0xc
mov byte [rbp + 6], r10b
xor r11b, 0xc
mov byte [rbp + 7], r11b
xor dil, 0xc
mov byte [rbp + 8], dil
mov byte [rbp + 9], sil
lea rax, [rbp + 1]
mov qword [rbp + 0xf8], rax
mov byte [rbp - 8], 0x33
mov al, Ordinal_26
mov cl, 0x65
mov dl, 0x71
mov r8b, 0x7c
mov r9b, 0x6b
movzx r10d, al
xor al, 0x33
mov byte [rbp - 7], al
xor cl, 0x33
mov byte [rbp - 6], cl
xor dl, 0x33
mov byte [rbp - 5], dl
xor r8b, 0x33
mov byte [rbp - 4], r8b
xor r9b, 0x33
mov byte [rbp - 3], r9b
xor r10b, 0x33
mov byte [rbp - 2], r10b
mov byte [rbp - 1], sil
lea rax, [rbp - 7]
mov qword [rbp + 0x100], rax
mov byte [rbp + 0x10], WSAGetLastError
mov al, 0x46
mov cl, 0x3a
mov dl, 0x25
mov r8b, 0x3e
mov r9b, gethostname
mov r10b, reloc.WS2_32.dll_gethostname
mov r11b, reloc.WLDAP32.dll_Ordinal_45
mov dil, reloc.WLDAP32.dll_Ordinal_32
movzx esi, al
xor r14d, r14d
xor al, 0x6c
mov byte [rbp + 0x11], al
xor cl, 0x6c
mov byte [rbp + 0x12], cl
xor dl, 0x6c
mov byte [rbp + 0x13], dl
xor r8b, 0x6c
mov byte [rbp + 0x14], r8b
xor r9b, 0x6c
mov byte [rbp + 0x15], r9b
xor r10b, 0x6c
mov byte [rbp + 0x16], r10b
xor r11b, 0x6c
mov byte [rbp + 0x17], r11b
xor dil, 0x6c
mov byte [rbp + 0x18], dil
xor sil, 0x6c
mov byte [rbp + 0x19], sil
mov byte [rbp + 0x1a], r14b
lea rax, [rbp + 0x11]
mov qword [rbp + 0x108], rax
mov dword [rbp + 0x11c], 0x3f
lea rax, [rbp + 0xf0]
mov qword [rsp + 0x20], rax
mov r9d, 0x20019
xor r8d, r8d
lea rdx, str.SYSTEMControlSet001ServicesDiskEnum
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x14000d7e0
lea rax, [rbp + 0x11c]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x1a0]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea rdx, [0x1400c6c50]
mov rcx, qword [rbp + 0xf0]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x14000d7d3
mov esi, ebx
lea rdi, [rbp + 0xf8]
nop word [rax + rax]
mov rdx, qword [rdi]
lea rcx, [rbp + 0x1a0]
call fcn.140073344
test rax, rax
jne 0x14000df1c
inc esi
add rdi, 8
cmp esi, 3
jb 0x14000d7b0
mov rcx, qword [rbp + 0xf0]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, ebx
test eax, eax
jne 0x14000f157
call qword [sym.imp.KERNEL32.dll_IsDebuggerPresent]
test eax, eax
jne 0x14000f189
lea rcx, str.ollydbg.exe
call fcn.14000a1f0
test al, al
jne 0x14000f292
lea rcx, str.idaq64.exe
call fcn.14000a1f0
test al, al
jne 0x14000f292
lea rcx, str.HxD.exe
call fcn.14000a1f0
test al, al
jne 0x14000f292
lea rcx, str.ResourceHacker.exe
call fcn.14000a1f0
test al, al
jne 0x14000f292
lea rcx, str.ProcessHacker.exe
call fcn.14000a1f0
test al, al
jne 0x14000f292
lea rcx, str.idaq32.exe
call fcn.14000a1f0
test al, al
jne 0x14000f292
lea rcx, str.httpdebugger.exe
call fcn.14000a1f0
test al, al
jne 0x14000f292
lea rcx, str.windowrenamer.exe
call fcn.14000a1f0
test al, al
jne 0x14000f292
mov byte [rbp + 0x20], reloc.WLDAP32.dll_Ordinal_41
mov al, 0x47
mov cl, 0x5d
mov dl, 0x4d
mov r8b, 0x45
movzx r9d, r8b
mov r10b, 7
movzx r11d, dl
movzx edi, r8b
movzx esi, r8b
xor al, 0x29
mov byte [rbp + 0x21], al
xor cl, 0x29
mov byte [rbp + 0x22], cl
xor dl, 0x29
mov byte [rbp + 0x23], dl
xor r8b, 0x29
mov byte [rbp + 0x24], r8b
xor r9b, 0x29
mov byte [rbp + 0x25], r9b
xor r10b, 0x29
mov byte [rbp + 0x26], r10b
xor r11b, 0x29
mov byte [rbp + 0x27], r11b
xor dil, 0x29
mov byte [rbp + 0x28], dil
xor sil, 0x29
mov byte [rbp + 0x29], sil
mov byte [rbp + 0x2a], r14b
lea rcx, [rbp + 0x21]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov r14, rax
movdqa xmm1, xmmword [0x1400c76a0]
movdqu xmmword [rbp + 0xf8], xmm1
mov dl, 0x54
mov r8b, WSAGetLastError
mov r9b, 0x52
mov r10b, 0x48
mov r11b, 0x5f
mov dil, 0x5b
mov sil, 0x5e
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd ecx, xmm1
xor al, cl
mov byte [rbp + 0xf9], al
xor byte [rbp + 0xfa], cl
xor byte [rbp + 0xfb], cl
xor byte [rbp + 0xfc], cl
xor byte [rbp + 0xfd], cl
xor byte [rbp + 0xfe], cl
xor byte [rbp + 0xff], cl
xor byte [rbp + 0x100], cl
xor byte [rbp + 0x101], cl
xor byte [rbp + 0x102], cl
xor byte [rbp + 0x103], cl
xor byte [rbp + 0x104], cl
xor byte [rbp + 0x105], cl
xor byte [rbp + 0x106], cl
xor byte [rbp + 0x107], cl
xor dl, cl
mov byte [rbp + 0x108], dl
xor r8b, cl
mov byte [rbp + 0x109], r8b
xor r9b, cl
mov byte [rbp + 0x10a], r9b
xor r10b, cl
mov byte [rbp + 0x10b], r10b
xor r11b, cl
mov byte [rbp + 0x10c], r11b
xor dil, cl
mov byte [rbp + 0x10d], dil
xor sil, cl
mov byte [rbp + 0x10e], sil
mov byte [rbp + 0x10f], 0
lea rdx, [rbp + 0xf9]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rdi, rax
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov rcx, rax
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 0x11]
call rdi
movdqa xmm1, xmmword [0x1400c72c0]
movdqu xmmword [rbp + 0xf8], xmm1
mov dl, reloc.WLDAP32.dll_Ordinal_30
mov r8b, Ordinal_33
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd ecx, xmm1
xor al, cl
mov byte [rbp + 0xf9], al
xor byte [rbp + 0xfa], cl
xor byte [rbp + 0xfb], cl
xor byte [rbp + 0xfc], cl
xor byte [rbp + 0xfd], cl
xor byte [rbp + 0xfe], cl
xor byte [rbp + 0xff], cl
xor byte [rbp + 0x100], cl
xor byte [rbp + 0x101], cl
xor byte [rbp + 0x102], cl
xor byte [rbp + 0x103], cl
xor byte [rbp + 0x104], cl
xor byte [rbp + 0x105], cl
xor byte [rbp + 0x106], cl
xor byte [rbp + 0x107], cl
xor dl, cl
mov byte [rbp + 0x108], dl
xor r8b, cl
mov byte [rbp + 0x109], r8b
mov byte [rbp + 0x10a], 0
lea rdx, [rbp + 0xf9]
xor ecx, ecx
call fcn.1400135b0
mov r15, rax
movdqa xmm1, xmmword [0x1400c76c0]
movdqu xmmword [rbp - 0x60], xmm1
mov dl, 0x48
mov r8b, 0x55
mov r9b, 0x59
mov r10b, 2
mov r11b, 0x47
mov dil, 0x5e
mov sil, 0x42
mov r14b, 0x43
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd ecx, xmm1
xor al, cl
mov byte [rbp - 0x5f], al
xor byte [rbp - 0x5e], cl
xor byte [rbp - 0x5d], cl
xor byte [rbp - 0x5c], cl
xor byte [rbp - 0x5b], cl
xor byte [rbp - 0x5a], cl
xor byte [rbp - 0x59], cl
xor byte [rbp - 0x58], cl
xor byte [rbp - 0x57], cl
xor byte [rbp - 0x56], cl
xor byte [rbp - 0x55], cl
xor byte [rbp - 0x54], cl
xor byte [rbp - 0x53], cl
xor byte [rbp - 0x52], cl
xor byte [rbp - 0x51], cl
xor dl, cl
mov byte [rbp - 0x50], dl
xor r8b, cl
mov byte [rbp - 0x4f], r8b
xor r9b, cl
mov byte [rbp - 0x4e], r9b
xor r10b, cl
mov byte [rbp - 0x4d], r10b
xor r11b, cl
mov byte [rbp - 0x4c], r11b
xor dil, cl
mov byte [rbp - 0x4b], dil
xor sil, cl
mov byte [rbp - 0x4a], sil
xor r14b, cl
mov byte [rbp - 0x49], r14b
mov byte [rbp - 0x48], 0
lea rdx, [rbp - 0x5f]
mov rcx, r15
call fcn.1400135b0
mov byte [rbp + 0x60], WSAGetLastError
xor cl, cl
mov dl, 8
mov r8b, Ordinal_27
mov r9b, 5
mov r10b, 2
mov r11b, 9
mov dil, 0x57
mov sil, Ordinal_79
mov r14b, 0x3d
mov r15b, Ordinal_35
mov r12b, 0x3e
mov r13b, reloc.WS2_32.dll_gethostname
xor ebx, ebx
xor cl, 0x6d
mov byte [rbp + 0x61], cl
xor dl, 0x6d
mov byte [rbp + 0x62], dl
xor r8b, 0x6d
mov byte [rbp + 0x63], r8b
xor r9b, 0x6d
mov byte [rbp + 0x64], r9b
xor r10b, 0x6d
mov byte [rbp + 0x65], r10b
xor r11b, 0x6d
mov byte [rbp + 0x66], r11b
xor dil, 0x6d
mov byte [rbp + 0x67], dil
xor sil, 0x6d
mov byte [rbp + 0x68], sil
xor r14b, 0x6d
mov byte [rbp + 0x69], r14b
xor r15b, 0x6d
mov byte [rbp + 0x6a], r15b
xor r12b, 0x6d
mov byte [rbp + 0x6b], r12b
xor r13b, 0x6d
mov byte [rbp + 0x6c], r13b
mov byte [rbp + 0x6d], bl
lea rdx, [rbp + 0x61]
mov rcx, rax
call fcn.1400135b0
mov byte [rbp + 0x70], 0x58
mov cl, ntohs
mov dl, reloc.WS2_32.dll_gethostname
mov r8b, reloc.WLDAP32.dll_Ordinal_32
mov r9b, 0x3d
mov r10b, 0x36
mov r11b, Ordinal_45
mov dil, 0x62
mov sil, 0x78
movzx r14d, r11b
mov r15b, 0x2a
mov r12b, reloc.WLDAP32.dll_Ordinal_45
movzx r13d, r9b
xor cl, 0x58
mov byte [rbp + 0x71], cl
xor dl, 0x58
mov byte [rbp + 0x72], dl
xor r8b, 0x58
mov byte [rbp + 0x73], r8b
xor r9b, 0x58
mov byte [rbp + 0x74], r9b
xor r10b, 0x58
mov byte [rbp + 0x75], r10b
xor r11b, 0x58
mov byte [rbp + 0x76], r11b
xor dil, 0x58
mov byte [rbp + 0x77], dil
xor sil, 0x58
mov byte [rbp + 0x78], sil
xor r14b, 0x58
mov byte [rbp + 0x79], r14b
xor r15b, 0x58
mov byte [rbp + 0x7a], r15b
xor r12b, 0x58
mov byte [rbp + 0x7b], r12b
xor r13b, 0x58
mov byte [rbp + 0x7c], r13b
mov byte [rbp + 0x7d], bl
lea rdx, [rbp + 0x71]
mov rcx, rax
call fcn.1400135b0
mov byte [rbp + 0x30], Ordinal_41
mov cl, 0x41
mov dl, 0x47
mov r8b, 0x4b
mov r9b, 0x43
mov r10b, Ordinal_30
mov r11b, 6
movzx edi, cl
movzx esi, r8b
mov r14b, 0x49
mov r15b, 0x42
xor cl, 0x26
mov byte [rbp + 0x31], cl
xor dl, 0x26
mov byte [rbp + 0x32], dl
xor r8b, 0x26
mov byte [rbp + 0x33], r8b
xor r9b, 0x26
mov byte [rbp + 0x34], r9b
xor r10b, 0x26
mov byte [rbp + 0x35], r10b
xor r11b, 0x26
mov byte [rbp + 0x36], r11b
xor dil, 0x26
mov byte [rbp + 0x37], dil
xor sil, 0x26
mov byte [rbp + 0x38], sil
xor r14b, 0x26
mov byte [rbp + 0x39], r14b
xor r15b, 0x26
mov byte [rbp + 0x3a], r15b
mov byte [rbp + 0x3b], bl
lea rdx, [rbp + 0x31]
mov rcx, rax
call fcn.1400135b0
mov rdi, rax
lea rcx, [rbp + 0x120]
call fcn.14000ca70
nop
lea r8d, [rbx + 1]
lea rdx, [0x1400c725c]
lea rcx, [rbp + 0x120]
call fcn.1400030a0
lea r9, [rbp + 0x120]
cmp qword [rbp + 0x138], 0x10
cmovae r9, qword [rbp + 0x120]
movdqa xmm1, xmmword [0x1400c7290]
movdqu xmmword [rbp + 0x1a0], xmm1
movdqa xmm2, xmmword [0x1400c74a0]
movdqu xmmword [rbp + 0x1b0], xmm2
mov dl, reloc.WS2_32.dll_recv
mov r8b, Ordinal_30
mov r10b, reloc.WLDAP32.dll_Ordinal_27
mov r11b, reloc.WS2_32.dll_send
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd ecx, xmm1
xor al, cl
mov byte [rbp + 0x1a1], al
xor byte [rbp + 0x1a2], cl
xor byte [rbp + 0x1a3], cl
xor byte [rbp + 0x1a4], cl
xor byte [rbp + 0x1a5], cl
xor byte [rbp + 0x1a6], cl
xor byte [rbp + 0x1a7], cl
xor byte [rbp + 0x1a8], cl
xor byte [rbp + 0x1a9], cl
xor byte [rbp + 0x1aa], cl
xor byte [rbp + 0x1ab], cl
xor byte [rbp + 0x1ac], cl
xor byte [rbp + 0x1ad], cl
xor byte [rbp + 0x1ae], cl
xor byte [rbp + 0x1af], cl
movd eax, xmm2
xor al, cl
mov byte [rbp + 0x1b0], al
xor byte [rbp + 0x1b1], cl
xor byte [rbp + 0x1b2], cl
xor byte [rbp + 0x1b3], cl
xor byte [rbp + 0x1b4], cl
xor byte [rbp + 0x1b5], cl
xor byte [rbp + 0x1b6], cl
xor byte [rbp + 0x1b7], cl
xor byte [rbp + 0x1b8], cl
xor byte [rbp + 0x1b9], cl
xor byte [rbp + 0x1ba], cl
xor byte [rbp + 0x1bb], cl
xor byte [rbp + 0x1bc], cl
xor byte [rbp + 0x1bd], cl
xor byte [rbp + 0x1be], cl
xor byte [rbp + 0x1bf], cl
xor dl, cl
mov byte [rbp + 0x1c0], dl
xor r8b, cl
mov byte [rbp + 0x1c1], r8b
xor r10b, cl
mov byte [rbp + 0x1c2], r10b
xor r11b, cl
mov byte [rbp + 0x1c3], r11b
mov byte [rbp + 0x1c4], bl
lea rax, [rbp + 0x118]
mov qword [rsp + 0x20], rax
mov r8, rdi
lea rdx, [rbp + 0x1a1]
lea rcx, [rbp + 0x140]
call fcn.140007200
nop
mov rcx, rdi
call fcn.140071270
mov byte [rbp - 0x20], 0x53
mov al, 0x36
mov cl, reloc.WLDAP32.dll_Ordinal_33
movzx edx, cl
mov r8b, reloc.WLDAP32.dll_Ordinal_60
movzx r9d, cl
xor r10d, r10d
xor al, 0x53
mov byte [rbp - 0x1f], al
xor cl, 0x53
mov byte [rbp - 0x1e], cl
xor dl, 0x53
mov byte [rbp - 0x1d], dl
xor r8b, 0x53
mov byte [rbp - 0x1c], r8b
xor r9b, 0x53
mov byte [rbp - 0x1b], r9b
mov byte [rbp - 0x1a], r10b
lea rcx, [rbp - 0x1f]
mov rax, 0xffffffffffffffff
nop
inc rax
cmp byte [rcx + rax], bl
jne 0x14000dee0
lea rcx, [rbp + 0x140]
cmp qword [rbp + 0x158], 0x10
cmovae rcx, qword [rbp + 0x140]
mov r8, qword [rbp + 0x150]
cmp r8, rax
jne 0x14000df31
lea rdx, [rbp - 0x1f]
call fcn.140074200
test eax, eax
jne 0x14000df31
mov al, 1
jmp 0x14000df33
mov rcx, qword [rbp + 0xf0]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, r15d
jmp 0x14000d7e2
xor al, al
test al, al
jne 0x14000f03c
cmp dword [rbp + 0x118], 0xc8
je 0x14000ead4
mov byte [rbp - 0x18], 0x7e
mov al, Ordinal_30
mov cl, reloc.WS2_32.dll_select
mov dl, reloc.WS2_32.dll_listen
xor al, 0x7e
mov byte [rbp - 0x17], al
xor cl, 0x7e
mov byte [rbp - 0x16], cl
xor dl, 0x7e
mov byte [rbp - 0x15], dl
mov byte [rbp - 0x14], bl
lea rcx, [rbp - 0x17]
call fcn.14007f4e0
mov byte [rbp - 0x10], 1
mov al, 0x4a
mov cl, 0x64
mov dl, 0x78
mov r8b, reloc.WLDAP32.dll_Ordinal_33
mov r9b, Ordinal_60
xor al, 1
mov byte [rbp - 0xf], al
xor cl, 1
mov byte [rbp - 0xe], cl
xor dl, 1
mov byte [rbp - 0xd], dl
xor r8b, 1
mov byte [rbp - 0xc], r8b
xor r9b, 1
mov byte [rbp - 0xb], r9b
mov byte [rbp - 0xa], bl
xor r8d, r8d
xor edx, edx
lea rcx, [rbp - 0xf]
call fcn.14000c580
mov qword [rbp + 0x180], rbx
mov qword [rbp + 0x190], rbx
mov qword [rbp + 0x198], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x180], bl
lea rdx, [rbp + 0x180]
call fcn.14000f740
mov qword [rbp + 0x160], rbx
mov qword [rbp + 0x170], rbx
mov qword [rbp + 0x178], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x160], 0
mov byte [rbp + 0x40], reloc.WS2_32.dll_listen
mov al, 0x58
mov cl, 0x7e
mov dl, 0x68
mov r8b, 0x7f
mov r9b, 0x63
mov r10b, 0x6c
mov r11b, 0x60
movzx edi, dl
mov sil, reloc.WLDAP32.dll_Ordinal_45
mov r14b, gethostname
xor r15d, r15d
xor al, 0xd
mov byte [rbp + 0x41], al
xor cl, 0xd
mov byte [rbp + 0x42], cl
xor dl, 0xd
mov byte [rbp + 0x43], dl
xor r8b, 0xd
mov byte [rbp + 0x44], r8b
xor r9b, 0xd
mov byte [rbp + 0x45], r9b
xor r10b, 0xd
mov byte [rbp + 0x46], r10b
xor r11b, 0xd
mov byte [rbp + 0x47], r11b
xor dil, 0xd
mov byte [rbp + 0x48], dil
xor sil, 0xd
mov byte [rbp + 0x49], sil
xor r14b, 0xd
mov byte [rbp + 0x4a], r14b
mov byte [rbp + 0x4b], r15b
xor r8d, r8d
mov dl, 1
lea rcx, [rbp + 0x41]
call fcn.14000c580
lea rdx, [rbp + 0x160]
call fcn.14000f740
movdqa xmm1, xmmword [0x1400c77e0]
movdqu xmmword [rbp + 0xf8], xmm1
mov dl, WSAStartup
mov r8b, reloc.WS2_32.dll_WSAStartup
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd ecx, xmm1
xor al, cl
mov byte [rbp + 0xf9], al
xor byte [rbp + 0xfa], cl
xor byte [rbp + 0xfb], cl
xor byte [rbp + 0xfc], cl
xor byte [rbp + 0xfd], cl
xor byte [rbp + 0xfe], cl
xor byte [rbp + 0xff], cl
xor byte [rbp + 0x100], cl
xor byte [rbp + 0x101], cl
xor byte [rbp + 0x102], cl
xor byte [rbp + 0x103], cl
xor byte [rbp + 0x104], cl
xor byte [rbp + 0x105], cl
xor byte [rbp + 0x106], cl
xor byte [rbp + 0x107], cl
xor dl, cl
mov byte [rbp + 0x108], dl
xor r8b, cl
mov byte [rbp + 0x109], r8b
mov byte [rbp + 0x10a], r15b
lea rdx, [rbp + 0xf9]
xor ecx, ecx
call fcn.1400135b0
mov r15, rax
movdqa xmm1, xmmword [0x1400c72f0]
movdqu xmmword [rbp - 0x60], xmm1
mov dl, reloc.WS2_32.dll_sendto
mov r8b, 9
mov r9b, 5
mov r10b, 0x5e
mov r11b, reloc.WLDAP32.dll_Ordinal_27
mov dil, 2
mov sil, reloc.WLDAP32.dll_Ordinal_30
mov r14b, Ordinal_33
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd ecx, xmm1
xor al, cl
mov byte [rbp - 0x5f], al
xor byte [rbp - 0x5e], cl
xor byte [rbp - 0x5d], cl
xor byte [rbp - 0x5c], cl
xor byte [rbp - 0x5b], cl
xor byte [rbp - 0x5a], cl
xor byte [rbp - 0x59], cl
xor byte [rbp - 0x58], cl
xor byte [rbp - 0x57], cl
xor byte [rbp - 0x56], cl
xor byte [rbp - 0x55], cl
xor byte [rbp - 0x54], cl
xor byte [rbp - 0x53], cl
xor byte [rbp - 0x52], cl
xor byte [rbp - 0x51], cl
xor dl, cl
mov byte [rbp - 0x50], dl
xor r8b, cl
mov byte [rbp - 0x4f], r8b
xor r9b, cl
mov byte [rbp - 0x4e], r9b
xor r10b, cl
mov byte [rbp - 0x4d], r10b
xor r11b, cl
mov byte [rbp - 0x4c], r11b
xor dil, cl
mov byte [rbp - 0x4b], dil
xor sil, cl
mov byte [rbp - 0x4a], sil
xor r14b, cl
mov byte [rbp - 0x49], r14b
mov byte [rbp - 0x48], 0
lea rdx, [rbp - 0x5f]
mov rcx, r15
call fcn.1400135b0
mov byte [rbp + 0x80], Ordinal_60
mov cl, 0x57
mov dl, 0x5f
mov r8b, Ordinal_79
mov r9b, 0x52
mov r10b, 0x55
mov r11b, 0x5e
xor dil, dil
mov sil, reloc.WLDAP32.dll_Ordinal_26
mov r14b, 0x6a
mov r15b, 0x75
mov r12b, 0x69
mov r13b, WSAGetLastError
xor ebx, ebx
xor cl, 0x3a
mov byte [rbp + 0x81], cl
xor dl, 0x3a
mov byte [rbp + 0x82], dl
xor r8b, 0x3a
mov byte [rbp + 0x83], r8b
xor r9b, 0x3a
mov byte [rbp + 0x84], r9b
xor r10b, 0x3a
mov byte [rbp + 0x85], r10b
xor r11b, 0x3a
mov byte [rbp + 0x86], r11b
xor dil, 0x3a
mov byte [rbp + 0x87], dil
xor sil, 0x3a
mov byte [rbp + 0x88], sil
xor r14b, 0x3a
mov byte [rbp + 0x89], r14b
xor r15b, 0x3a
mov byte [rbp + 0x8a], r15b
xor r12b, 0x3a
mov byte [rbp + 0x8b], r12b
xor r13b, 0x3a
mov byte [rbp + 0x8c], r13b
mov byte [rbp + 0x8d], bl
lea rdx, [rbp + 0x81]
mov rcx, rax
call fcn.1400135b0
mov byte [rbp + 0x90], 0x61
mov cl, 0x37
xor dl, dl
mov r8b, Ordinal_27
mov r9b, 4
mov r10b, reloc.WS2_32.dll_ntohs
mov r11b, reloc.WS2_32.dll_setsockopt
mov dil, 0x5b
mov sil, 0x41
movzx r14d, r11b
mov r15b, reloc.WS2_32.dll_send
mov r12b, reloc.WS2_32.dll_sendto
movzx r13d, r9b
xor cl, 0x61
mov byte [rbp + 0x91], cl
xor dl, 0x61
mov byte [rbp + 0x92], dl
xor r8b, 0x61
mov byte [rbp + 0x93], r8b
xor r9b, 0x61
mov byte [rbp + 0x94], r9b
xor r10b, 0x61
mov byte [rbp + 0x95], r10b
xor r11b, 0x61
mov byte [rbp + 0x96], r11b
xor dil, 0x61
mov byte [rbp + 0x97], dil
xor sil, 0x61
mov byte [rbp + 0x98], sil
xor r14b, 0x61
mov byte [rbp + 0x99], r14b
xor r15b, 0x61
mov byte [rbp + 0x9a], r15b
xor r12b, 0x61
mov byte [rbp + 0x9b], r12b
xor r13b, 0x61
mov byte [rbp + 0x9c], r13b
mov byte [rbp + 0x9d], bl
lea rdx, [rbp + 0x91]
mov rcx, rax
call fcn.1400135b0
mov byte [rbp + 0x50], reloc.WLDAP32.dll_Ordinal_33
mov cl, 0x46
mov dl, 0x40
mov r8b, 0x4c
mov r9b, 0x44
mov r10b, reloc.WLDAP32.dll_Ordinal_27
mov r11b, 1
movzx edi, cl
movzx esi, r8b
mov r14b, Ordinal_79
mov r15b, 0x45
xor cl, 0x21
mov byte [rbp + 0x51], cl
xor dl, 0x21
mov byte [rbp + 0x52], dl
xor r8b, 0x21
mov byte [rbp + 0x53], r8b
xor r9b, 0x21
mov byte [rbp + 0x54], r9b
xor r10b, 0x21
mov byte [rbp + 0x55], r10b
xor r11b, 0x21
mov byte [rbp + 0x56], r11b
xor dil, 0x21
mov byte [rbp + 0x57], dil
xor sil, 0x21
mov byte [rbp + 0x58], sil
xor r14b, 0x21
mov byte [rbp + 0x59], r14b
xor r15b, 0x21
mov byte [rbp + 0x5a], r15b
mov byte [rbp + 0x5b], bl
lea rdx, [rbp + 0x51]
mov rcx, rax
call fcn.1400135b0
mov r13, rax
lea rcx, [rbp - 0x60]
call fcn.14000ca70
mov rdi, rax
lea rax, [rbp + 0x120]
cmp rax, rdi
je 0x14000e471
mov rdx, qword [rbp + 0x138]
cmp rdx, 0x10
jb 0x14000e436
inc rdx
mov rcx, qword [rbp + 0x120]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000e431
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000f256
call fcn.140071270
mov qword [rbp + 0x130], rbx
mov qword [rbp + 0x138], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x120], bl
movups xmm0, xmmword [rdi]
movups xmmword [rbp + 0x120], xmm0
movups xmm1, xmmword [rdi + 0x10]
movups xmmword [rbp + 0x130], xmm1
mov qword [rdi + 0x10], rbx
mov qword [rdi + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rdi], bl
mov rdx, qword [rbp - 0x48]
cmp rdx, 0x10
jb 0x14000e4ac
inc rdx
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000e4a7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000f256
call fcn.140071270
mov r8d, 1
lea rdx, [0x1400c7260]
lea rcx, [rbp + 0x120]
call fcn.1400030a0
mov byte [rbp - 0x70], 0x3f
mov al, Ordinal_30
mov cl, 0x54
mov dl, 0x5a
mov r8b, 0x46
movzx r9d, al
mov r10b, 5
mov r11b, Ordinal_33
movzx edi, al
xor al, 0x3f
mov byte [rbp - 0x6f], al
xor cl, 0x3f
mov byte [rbp - 0x6e], cl
xor dl, 0x3f
mov byte [rbp - 0x6d], dl
xor r8b, 0x3f
mov byte [rbp - 0x6c], r8b
xor r9b, 0x3f
mov byte [rbp - 0x6b], r9b
xor r10b, 0x3f
mov byte [rbp - 0x6a], r10b
xor r11b, 0x3f
mov byte [rbp - 0x69], r11b
xor dil, 0x3f
mov byte [rbp - 0x68], dil
mov byte [rbp - 0x67], bl
lea r8, [rbp + 0x180]
lea rdx, [rbp - 0x6f]
lea rcx, [rbp - 0x60]
call fcn.14000f460
nop
mov r8d, 2
lea rdx, [0x1400c7014]
mov rcx, rax
call fcn.1400030a0
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0xb0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0xc0], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea rdx, [rbp + 0xb0]
movq rcx, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 8
movq rax, xmm0
cmp rax, 0x10
cmovae rdx, rcx
movq r8, xmm1
lea rcx, [rbp + 0x120]
call fcn.1400030a0
nop
mov rdx, qword [rbp + 0xc8]
cmp rdx, 0x10
jb 0x14000e5df
inc rdx
mov rcx, qword [rbp + 0xb0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000e5d9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000f25c
call fcn.140071270
nop
mov rdx, qword [rbp - 0x48]
cmp rdx, 0x10
jb 0x14000e61a
inc rdx
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000e615
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000f262
call fcn.140071270
mov byte [rbp + 0xa0], WSAGetLastError
mov al, 0x48
mov cl, Ordinal_32
mov dl, Ordinal_26
mov r8b, reloc.WS2_32.dll_ntohs
mov r9b, Ordinal_26
mov r10b, 4
mov r11b, listen
mov dil, 7
movzx esi, r8b
movzx r14d, al
mov r15b, 0x50
movzx r12d, al
xor ebx, ebx
xor al, 0x6a
mov byte [rbp + 0xa1], al
xor cl, 0x6a
mov byte [rbp + 0xa2], cl
xor dl, 0x6a
mov byte [rbp + 0xa3], dl
xor r8b, 0x6a
mov byte [rbp + 0xa4], r8b
xor r9b, 0x6a
mov byte [rbp + 0xa5], r9b
xor r10b, 0x6a
mov byte [rbp + 0xa6], r10b
xor r11b, 0x6a
mov byte [rbp + 0xa7], r11b
xor dil, 0x6a
mov byte [rbp + 0xa8], dil
xor sil, 0x6a
mov byte [rbp + 0xa9], sil
xor r14b, 0x6a
mov byte [rbp + 0xaa], r14b
xor r15b, 0x6a
mov byte [rbp + 0xab], r15b
xor r12b, 0x6a
mov byte [rbp + 0xac], r12b
mov byte [rbp + 0xad], bl
lea r8, [rbp + 0x160]
lea rdx, [rbp + 0xa1]
lea rcx, [rbp - 0x60]
call fcn.14000f460
nop
lea r8d, [rbx + 2]
lea rdx, [0x1400c7264]
mov rcx, rax
call fcn.1400030a0
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0xd0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0xe0], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], bl
lea rdx, [rbp + 0xd0]
movq rcx, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 8
movq rax, xmm0
cmp rax, 0x10
cmovae rdx, rcx
movq r8, xmm1
lea rcx, [rbp + 0x120]
call fcn.1400030a0
nop
mov rdx, qword [rbp + 0xe8]
cmp rdx, 0x10
jb 0x14000e78e
inc rdx
mov rcx, qword [rbp + 0xd0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000e788
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000f268
call fcn.140071270
nop
mov rdx, qword [rbp - 0x48]
cmp rdx, 0x10
jb 0x14000e7c9
inc rdx
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000e7c4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000f26e
call fcn.140071270
mov dword [rbp + 0x118], ebx
lea r9, [rbp + 0x120]
cmp qword [rbp + 0x138], 0x10
cmovae r9, qword [rbp + 0x120]
movdqa xmm1, xmmword [0x1400c73c0]
movdqu xmmword [rbp + 0x1a0], xmm1
movdqa xmm2, xmmword [0x1400c72b0]
movdqu xmmword [rbp + 0x1b0], xmm2
mov dl, reloc.WS2_32.dll_socket
mov r8b, reloc.WS2_32.dll_setsockopt
mov r10b, reloc.WLDAP32.dll_Ordinal_27
mov r11b, 1
mov dil, 6
movzx esi, dl
xor r14d, r14d
mov word [rbp + 0x1c6], r14w
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd ecx, xmm1
xor al, cl
mov byte [rbp + 0x1a1], al
xor byte [rbp + 0x1a2], cl
xor byte [rbp + 0x1a3], cl
xor byte [rbp + 0x1a4], cl
xor byte [rbp + 0x1a5], cl
xor byte [rbp + 0x1a6], cl
xor byte [rbp + 0x1a7], cl
xor byte [rbp + 0x1a8], cl
xor byte [rbp + 0x1a9], cl
xor byte [rbp + 0x1aa], cl
xor byte [rbp + 0x1ab], cl
xor byte [rbp + 0x1ac], cl
xor byte [rbp + 0x1ad], cl
xor byte [rbp + 0x1ae], cl
xor byte [rbp + 0x1af], cl
movd eax, xmm2
xor al, cl
mov byte [rbp + 0x1b0], al
xor byte [rbp + 0x1b1], cl
xor byte [rbp + 0x1b2], cl
xor byte [rbp + 0x1b3], cl
xor byte [rbp + 0x1b4], cl
xor byte [rbp + 0x1b5], cl
xor byte [rbp + 0x1b6], cl
xor byte [rbp + 0x1b7], cl
xor byte [rbp + 0x1b8], cl
xor byte [rbp + 0x1b9], cl
xor byte [rbp + 0x1ba], cl
xor byte [rbp + 0x1bb], cl
xor byte [rbp + 0x1bc], cl
xor byte [rbp + 0x1bd], cl
xor byte [rbp + 0x1be], cl
xor byte [rbp + 0x1bf], cl
xor dl, cl
mov byte [rbp + 0x1c0], dl
xor r8b, cl
mov byte [rbp + 0x1c1], r8b
xor r10b, cl
mov byte [rbp + 0x1c2], r10b
xor r11b, cl
mov byte [rbp + 0x1c3], r11b
xor dil, cl
mov byte [rbp + 0x1c4], dil
xor sil, cl
mov byte [rbp + 0x1c5], sil
xor r14b, cl
mov byte [rbp + 0x1c6], r14b
mov byte [rbp + 0x1c7], 0
lea rax, [rbp + 0x118]
mov qword [rsp + 0x20], rax
mov r8, r13
lea rdx, [rbp + 0x1a1]
lea rcx, [rbp - 0x60]
call fcn.140007200
mov rdx, qword [rbp - 0x48]
cmp rdx, 0x10
jb 0x14000e99a
inc rdx
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000e995
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000f274
call fcn.140071270
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
nop
mov rdx, qword [rbp + 0x178]
cmp rdx, 0x10
jb 0x14000e9e8
inc rdx
mov rcx, qword [rbp + 0x160]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000e9e2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000f27a
call fcn.140071270
nop
mov rdx, qword [rbp + 0x198]
cmp rdx, 0x10
jb 0x14000ea2a
inc rdx
mov rcx, qword [rbp + 0x180]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000ea24
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000f280
call fcn.140071270
nop
mov rdx, qword [rbp + 0x158]
cmp rdx, 0x10
jb 0x14000ea6b
inc rdx
mov rcx, qword [rbp + 0x140]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000ea66
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000f286
call fcn.140071270
mov qword [rbp + 0x150], rbx
mov qword [rbp + 0x158], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x140], 0
mov rdx, qword [rbp + 0x138]
cmp rdx, 0x10
mov r15d, 1
jb 0x14000d5a0
inc rdx
mov rcx, qword [rbp + 0x120]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000eaca
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000f28c
call fcn.140071270
jmp 0x14000d5a0
mov byte [rsp + 0x40], 0x60
mov dl, 0xa
lea rcx, [rsp + 0x40]
call fcn.14000fa80
mov byte [rsp + 0x41], al
mov dl, 0x54
lea rcx, [rsp + 0x40]
call fcn.14000fa80
mov byte [rsp + 0x42], al
mov dl, 0x49
lea rcx, [rsp + 0x40]
call fcn.14000fa80
mov byte [rsp + 0x43], al
mov dl, 0x4d
lea rcx, [rsp + 0x40]
call fcn.14000fa80
mov byte [rsp + 0x44], al
mov dl, 0x45
lea rcx, [rsp + 0x40]
call fcn.14000fa80
mov byte [rsp + 0x45], al
mov dl, 0x4c
lea rcx, [rsp + 0x40]
call fcn.14000fa80
mov byte [rsp + 0x46], al
mov dl, 0x45
lea rcx, [rsp + 0x40]
call fcn.14000fa80
mov byte [rsp + 0x47], al
mov dl, 0x46
lea rcx, [rsp + 0x40]
call fcn.14000fa80
mov byte [rsp + 0x48], al
mov dl, 0x54
lea rcx, [rsp + 0x40]
call fcn.14000fa80
mov byte [rsp + 0x49], al
mov dl, reloc.WLDAP32.dll_Ordinal_32
lea rcx, [rsp + 0x40]
call fcn.14000fa80
mov byte [rsp + 0x4a], al
mov dl, 0x3a
lea rcx, [rsp + 0x40]
call fcn.14000fa80
mov byte [rsp + 0x4b], al
mov dl, reloc.WLDAP32.dll_Ordinal_27
lea rcx, [rsp + 0x40]
call fcn.14000fa80
mov byte [rsp + 0x4c], al
mov dl, 0x5b
lea rcx, [rsp + 0x40]
call fcn.14000fa80
mov byte [rsp + 0x4d], al
mov dl, Ordinal_50
lea rcx, [rsp + 0x40]
call fcn.14000fa80
mov byte [rsp + 0x4e], al
mov dl, Ordinal_60
lea rcx, [rsp + 0x40]
call fcn.14000fa80
mov byte [rsp + 0x4f], al
mov dl, 0x33
lea rcx, [rsp + 0x40]
call fcn.14000fa80
mov byte [rsp + 0x50], al
mov dl, reloc.WLDAP32.dll_Ordinal_50
lea rcx, [rsp + 0x40]
call fcn.14000fa80
mov byte [rsp + 0x51], al
mov dl, 0x6d
lea rcx, [rsp + 0x40]
call fcn.14000fa80
mov byte [rsp + 0x52], al
mov dl, reloc.WLDAP32.dll_Ordinal_32
lea rcx, [rsp + 0x40]
call fcn.14000fa80
mov byte [rsp + 0x53], al
mov dl, 0x4c
lea rcx, [rsp + 0x40]
call fcn.14000fa80
mov byte [rsp + 0x54], al
mov dl, 0x49
lea rcx, [rsp + 0x40]
call fcn.14000fa80
mov byte [rsp + 0x55], al
mov dl, 0x46
lea rcx, [rsp + 0x40]
call fcn.14000fa80
mov byte [rsp + 0x56], al
mov dl, 0x45
lea rcx, [rsp + 0x40]
call fcn.14000fa80
mov byte [rsp + 0x57], al
mov dl, 0x54
lea rcx, [rsp + 0x40]
call fcn.14000fa80
mov byte [rsp + 0x58], al
mov dl, 0x49
lea rcx, [rsp + 0x40]
call fcn.14000fa80
mov byte [rsp + 0x59], al
mov dl, 0x4d
lea rcx, [rsp + 0x40]
call fcn.14000fa80
mov byte [rsp + 0x5a], al
mov dl, 0x45
lea rcx, [rsp + 0x40]
call fcn.14000fa80
mov byte [rsp + 0x5b], al
mov dl, reloc.WLDAP32.dll_Ordinal_32
lea rcx, [rsp + 0x40]
call fcn.14000fa80
mov byte [rsp + 0x5c], al
mov dl, 0xa
lea rcx, [rsp + 0x40]
call fcn.14000fa80
mov byte [rsp + 0x5d], al
mov dl, 0xa
lea rcx, [rsp + 0x40]
call fcn.14000fa80
mov byte [rsp + 0x5e], al
mov dl, reloc.WLDAP32.dll_Ordinal_27
lea rcx, [rsp + 0x40]
call fcn.14000fa80
mov byte [rsp + 0x5f], al
mov dl, 0x5b
lea rcx, [rsp + 0x40]
call fcn.14000fa80
mov byte [rsp + 0x60], al
mov dl, 0x30
lea rcx, [rsp + 0x40]
call fcn.14000fa80
mov byte [rsp + 0x61], al
mov dl, 0x6d
lea rcx, [rsp + 0x40]
call fcn.14000fa80
mov byte [rsp + 0x62], al
mov dl, reloc.WLDAP32.dll_Ordinal_27
lea rcx, [rsp + 0x40]
call fcn.14000fa80
mov byte [rsp + 0x63], al
mov dl, 0x5b
lea rcx, [rsp + 0x40]
call fcn.14000fa80
mov byte [rsp + 0x64], al
mov dl, Ordinal_50
lea rcx, [rsp + 0x40]
call fcn.14000fa80
mov byte [rsp + 0x65], al
mov dl, Ordinal_60
lea rcx, [rsp + 0x40]
call fcn.14000fa80
mov byte [rsp + 0x66], al
mov dl, 0x33
lea rcx, [rsp + 0x40]
call fcn.14000fa80
mov byte [rsp + 0x67], al
mov dl, reloc.WLDAP32.dll_Ordinal_50
lea rcx, [rsp + 0x40]
call fcn.14000fa80
mov byte [rsp + 0x68], al
mov dl, 0x6d
lea rcx, [rsp + 0x40]
call fcn.14000fa80
mov byte [rsp + 0x69], al
mov dl, 0x50
lea rcx, [rsp + 0x40]
call fcn.14000fa80
mov byte [rsp + 0x6a], al
mov dl, 0x52
lea rcx, [rsp + 0x40]
call fcn.14000fa80
mov byte [rsp + 0x6b], al
mov dl, 0x45
lea rcx, [rsp + 0x40]
call fcn.14000fa80
mov byte [rsp + 0x6c], al
mov dl, 0x53
lea rcx, [rsp + 0x40]
call fcn.14000fa80
mov byte [rsp + 0x6d], al
mov dl, 0x53
lea rcx, [rsp + 0x40]
call fcn.14000fa80
mov byte [rsp + 0x6e], al
mov dl, reloc.WLDAP32.dll_Ordinal_32
lea rcx, [rsp + 0x40]
call fcn.14000fa80
mov byte [rsp + 0x6f], al
mov dl, 0x45
lea rcx, [rsp + 0x40]
call fcn.14000fa80
mov byte [rsp + 0x70], al
mov dl, Ordinal_79
lea rcx, [rsp + 0x40]
call fcn.14000fa80
mov byte [rsp + 0x71], al
mov dl, 0x54
lea rcx, [rsp + 0x40]
call fcn.14000fa80
mov byte [rsp + 0x72], al
mov dl, 0x45
lea rcx, [rsp + 0x40]
call fcn.14000fa80
mov byte [rsp + 0x73], al
mov dl, 0x52
lea rcx, [rsp + 0x40]
call fcn.14000fa80
mov byte [rsp + 0x74], al
mov dl, reloc.WLDAP32.dll_Ordinal_32
lea rcx, [rsp + 0x40]
call fcn.14000fa80
mov byte [rsp + 0x75], al
mov dl, 0x54
lea rcx, [rsp + 0x40]
call fcn.14000fa80
mov byte [rsp + 0x76], al
mov dl, reloc.WLDAP32.dll_Ordinal_79
lea rcx, [rsp + 0x40]
call fcn.14000fa80
mov byte [rsp + 0x77], al
mov dl, reloc.WLDAP32.dll_Ordinal_32
lea rcx, [rsp + 0x40]
call fcn.14000fa80
mov byte [rsp + 0x78], al
mov dl, 0x49
lea rcx, [rsp + 0x40]
call fcn.14000fa80
mov byte [rsp + 0x79], al
mov dl, Ordinal_79
lea rcx, [rsp + 0x40]
call fcn.14000fa80
mov byte [rsp + 0x7a], al
mov dl, 0x4a
lea rcx, [rsp + 0x40]
call fcn.14000fa80
mov byte [rsp + 0x7b], al
mov dl, 0x45
lea rcx, [rsp + 0x40]
call fcn.14000fa80
mov byte [rsp + 0x7c], al
mov dl, 0x43
lea rcx, [rsp + 0x40]
call fcn.14000fa80
mov byte [rsp + 0x7d], al
mov dl, 0x54
lea rcx, [rsp + 0x40]
call fcn.14000fa80
mov byte [rsp + 0x7e], al
mov dl, reloc.WLDAP32.dll_Ordinal_27
lea rcx, [rsp + 0x40]
call fcn.14000fa80
mov byte [rsp + 0x7f], al
mov dl, 0x5b
lea rcx, [rsp + 0x40]
call fcn.14000fa80
mov byte [rbp - 0x80], al
mov dl, 0x30
lea rcx, [rsp + 0x40]
call fcn.14000fa80
mov byte [rbp - 0x7f], al
mov dl, 0x6d
lea rcx, [rsp + 0x40]
call fcn.14000fa80
mov byte [rbp - 0x7e], al
xor eax, eax
mov byte [rbp - 0x7d], al
nop dword [rax + rax]
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rbx + 0x41], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rbx + 0x42], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rbx + 0x43], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rbx + 0x44], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rbx + 0x45], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rbx + 0x46], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rbx + 0x47], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rbx + 0x48], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rbx + 0x49], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rbx + 0x4a], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rbx + 0x4b], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rbx + 0x4c], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rbx + 0x4d], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rbx + 0x4e], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rbx + 0x4f], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rbx + 0x50], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rbx + 0x51], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rbx + 0x52], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rbx + 0x53], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rbx + 0x54], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rbx + 0x55], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rbx + 0x56], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rbx + 0x57], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rbx + 0x58], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rbx + 0x59], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rbx + 0x5a], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rbx + 0x5b], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rbx + 0x5c], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rbx + 0x5d], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rbx + 0x5e], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rbx + 0x5f], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rbx + 0x60], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rbx + 0x61], al
add rbx, 0x21
cmp rbx, 0x42
jae 0x14000f192
jmp 0x14000ef00
movdqa xmm0, xmmword [0x1400c77d0]
movdqu xmmword [rbp - 0x60], xmm0
movdqa xmm1, xmmword [0x1400c7780]
movdqu xmmword [rbp - 0x50], xmm1
movdqa xmm0, xmmword [0x1400c7890]
movdqu xmmword [rbp - 0x40], xmm0
mov dword [rbp - 0x30], 0x706b1f6d
mov dword [rbp - 0x2c], 0x76677a1f
mov dword [rbp - 0x28], 0x64241f6b
mov word [rbp - 0x24], 0x520f
xor eax, eax
mov byte [rbp - 0x22], al
mov rcx, rbx
nop word [rax + rax]
movzx eax, byte [rbp - 0x60]
xor byte [rbp + rcx - 0x5f], al
inc rcx
cmp rcx, 0x3d
jb 0x14000f090
mov byte [rbp - 0x22], bl
mov r8b, 1
movzx edx, r8b
lea rcx, [rbp - 0x5f]
call fcn.14000c580
nop
mov rdx, qword [rbp + 0x158]
cmp rdx, 0x10
jb 0x14000f0f6
inc rdx
mov rcx, qword [rbp + 0x140]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000f0f1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000f286
call fcn.140071270
mov qword [rbp + 0x150], rbx
mov qword [rbp + 0x158], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x140], 0
mov rdx, qword [rbp + 0x138]
cmp rdx, 0x10
jb 0x14000f150
inc rdx
mov rcx, qword [rbp + 0x120]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000f14b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000f28c
call fcn.140071270
mov eax, 1
jmp 0x14000f159
xor eax, eax
mov rcx, qword [rbp + 0x1e0]
xor rcx, rsp
call fcn.140071250
lea r11, [rsp + 0x2f0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov ecx, r15d
call fcn.14007a114
nop
mov byte [rbp - 0x7d], 0
mov byte [rbp - 0x70], WSAGetLastError
mov al, Ordinal_60
mov cl, 9
xor dl, dl
mov r8b, reloc.WS2_32.dll_ntohs
mov r9b, 3
mov r10b, 1
movzx r11d, cl
mov bl, 0x4c
xor edi, edi
xor al, 0x6c
mov byte [rbp - 0x6f], al
xor cl, 0x6c
mov byte [rbp - 0x6e], cl
xor dl, 0x6c
mov byte [rbp - 0x6d], dl
xor r8b, 0x6c
mov byte [rbp - 0x6c], r8b
xor r9b, 0x6c
mov byte [rbp - 0x6b], r9b
xor r10b, 0x6c
mov byte [rbp - 0x6a], r10b
xor r11b, 0x6c
mov byte [rbp - 0x69], r11b
xor bl, 0x6c
mov byte [rbp - 0x68], bl
mov byte [rbp - 0x67], dil
lea r8, [rbp + 0x140]
lea rdx, [rbp - 0x6f]
lea rcx, [rbp - 0x60]
call fcn.14000f460
nop
lea r8, [rsp + 0x41]
mov rdx, rax
lea rcx, [rbp + 0xf8]
call fcn.14000f6d0
nop
lea rcx, [rbp - 0x60]
call fcn.140002eb0
lea rcx, [rbp + 0xf8]
call fcn.140003130
mov rcx, rax
mov r8b, 1
movzx edx, r8b
call fcn.14000c580
lea rdx, [rbp + 0x120]
lea rcx, [rbp + 0x140]
call fcn.1400096c0
lea ecx, [rdi + 1]
call fcn.14007a114
nop
call fcn.140078124
nop
call fcn.140078124
nop
call fcn.140078124
nop
call fcn.140078124
nop
call fcn.140078124
int3
call fcn.140078124
nop
call fcn.140078124
nop
call fcn.140078124
nop
call fcn.140078124
nop
call fcn.140078124
int3
mov ecx, 0xffffffff
call fcn.14007a114
int3