Function at 0x14004ed40
Capabilities:
Encode data using xor
Terminate process

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x168]
sub rsp, 0x230
movaps xmmword [rax - 0x48], xmm6
movaps xmmword [rax - 0x58], xmm7
movaps xmmword [rax - 0x68], xmm8
movaps xmmword [rax - 0x78], xmm9
movaps xmmword [rax - 0x88], xmm10
movaps xmmword [rax - 0x98], xmm12
movaps xmmword [rax - 0xa8], xmm13
movaps xmmword [rax - 0xb8], xmm14
mov rax, qword [0x1400e1700]
xor rax, rsp
mov qword [rbp + 0xa8], rax
mov r13, rdx
mov qword [rbp - 0x70], r8
mov r12, qword [rbp + 0x198]
xor edi, edi
movss xmm1, dword [rbp - 0x6c]
mulss xmm1, dword [0x1400d0394]
subss xmm1, dword [0x1400d0488]
subss xmm1, dword [0x1400d047c]
addss xmm1, dword [0x1400d0454]
movss xmm0, dword [0x1400d0480]
movss dword [rbp - 0x54], xmm0
movss dword [rbp - 0x50], xmm1
lea rcx, [rbp - 0x54]
call fcn.140019dc0
mov rcx, qword [0x1401d51a0]
mov rcx, qword [rcx + 0x10]
call fcn.140019570
mov r8, qword [0x1401d5178]
add r8, 0x30
lea rdx, str.Welcome_back_
lea rcx, [rbp - 0x48]
call fcn.140006e00
nop
lea r8d, [rdi + 1]
lea rdx, [0x1400cffd4]
mov rcx, rax
call fcn.140006b50
mov rdx, rax
lea rcx, [rsp + 0x50]
call fcn.140006a00
nop
lea rcx, [rsp + 0x50]
call fcn.1400069f0
mov rbx, rax
movss xmm2, dword [r12]
mov dword [rbp - 0x80], 0x3f0d8d8e
mov dword [rbp - 0x7c], 0x3f09898a
mov dword [rbp - 0x78], 0x3f22a2a3
movss dword [rbp - 0x74], xmm2
lea rcx, [rbp - 0x80]
call fcn.14000b3f0
movss xmm13, dword [rbp + 0x190]
movaps xmm10, xmm13
movss xmm7, dword [0x1400d04e0]
addss xmm10, xmm7
movss dword [rbp - 0x54], xmm10
movss xmm12, dword [rbp + 0x194]
movaps xmm0, xmm12
addss xmm0, dword [0x1400d04d8]
addss xmm0, dword [0x1400d04a8]
addss xmm0, dword [0x1400d0474]
movss dword [rbp - 0x50], xmm0
mov qword [rsp + 0x40], rdi
xorps xmm9, xmm9
movss dword [rsp + 0x38], xmm9
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x28], rbx
mov dword [rsp + 0x20], eax
lea r9, [rbp - 0x54]
xorps xmm2, xmm2
xor edx, edx
mov rcx, r13
call fcn.140037660
nop
lea rcx, [rsp + 0x50]
call fcn.140001750
nop
lea rcx, [rbp - 0x48]
call fcn.140001750
call fcn.140019610
mov byte [rbp - 0x58], 0x47
movzx eax, byte [0x1400cb424]
xor al, 0x47
xor ecx, ecx
xor al, 0x47
mov byte [rbp - 0x57], al
mov byte [rbp - 0x56], cl
movss xmm4, dword [r12]
mov rax, qword [0x1401d5178]
cmp byte [rax + 0xd0], cl
je 0x14004ef55
mov dword [rbp - 0x80], 0x3e2cacad
mov dword [rbp - 0x7c], 0x3ea4a4a5
mov dword [rbp - 0x78], 0x3f6feff0
movss dword [rbp - 0x74], xmm4
lea rcx, [rbp - 0x80]
jmp 0x14004ef73
mov dword [rbp - 0x70], 0x3f74f4f5
mov dword [rbp - 0x6c], 0x3f129293
mov dword [rbp - 0x68], 0x3ec2c2c3
movss dword [rbp - 0x64], xmm4
lea rcx, [rbp - 0x70]
call fcn.14000b3f0
movss dword [rbp - 0x60], xmm10
movaps xmm6, xmm12
addss xmm6, xmm7
movss xmm14, dword [0x1400d04b4]
addss xmm6, xmm14
movss dword [rbp - 0x5c], xmm6
mov rcx, qword [0x1401d51a0]
mov qword [rsp + 0x40], rdi
movss dword [rsp + 0x38], xmm9
mov qword [rsp + 0x30], rdi
lea rdx, [rbp - 0x57]
mov qword [rsp + 0x28], rdx
mov dword [rsp + 0x20], eax
lea r9, [rbp - 0x60]
movss xmm2, dword [0x1400d048c]
mov rdx, qword [rcx]
mov rcx, r13
call fcn.140037660
mov byte [rbp - 0x54], 0x57
mov al, reloc.WS2_32.dll_sendto
xor ecx, ecx
xor al, 0x57
mov byte [rbp - 0x53], al
mov byte [rbp - 0x52], cl
movss xmm0, dword [r12]
mov rax, qword [0x1401d5178]
cmp byte [rax + 0xd0], cl
je 0x14004f01a
mov dword [rbp - 0x80], 0x3e2cacad
mov dword [rbp - 0x7c], 0x3ea4a4a5
mov dword [rbp - 0x78], 0x3f6feff0
movss dword [rbp - 0x74], xmm0
lea rcx, [rbp - 0x80]
jmp 0x14004f038
mov dword [rbp - 0x70], 0x3f74f4f5
mov dword [rbp - 0x6c], 0x3f129293
mov dword [rbp - 0x68], 0x3ec2c2c3
movss dword [rbp - 0x64], xmm0
lea rcx, [rbp - 0x70]
call fcn.14000b3f0
movaps xmm8, xmm13
addss xmm8, dword [0x1400d052c]
addss xmm8, dword [0x1400d04b0]
movss dword [rbp - 0x60], xmm8
movss dword [rbp - 0x5c], xmm6
mov rcx, qword [0x1401d51a0]
mov qword [rsp + 0x40], rdi
movss dword [rsp + 0x38], xmm9
mov qword [rsp + 0x30], rdi
lea rdx, [rbp - 0x53]
mov qword [rsp + 0x28], rdx
mov dword [rsp + 0x20], eax
lea r9, [rbp - 0x60]
movss xmm2, dword [0x1400d048c]
mov rdx, qword [rcx]
mov rcx, r13
call fcn.140037660
mov byte [rbp - 0x58], 0x33
movzx eax, byte [0x1400cb420]
xor al, 0x33
xor ecx, ecx
xor al, 0x33
mov byte [rbp - 0x57], al
mov byte [rbp - 0x56], cl
movss xmm0, dword [r12]
mov rax, qword [0x1401d5178]
cmp byte [rax + 0xd0], cl
je 0x14004f0e6
mov dword [rbp - 0x80], 0x3e2cacad
mov dword [rbp - 0x7c], 0x3ea4a4a5
mov dword [rbp - 0x78], 0x3f6feff0
movss dword [rbp - 0x74], xmm0
lea rcx, [rbp - 0x80]
jmp 0x14004f104
mov dword [rbp - 0x70], 0x3f74f4f5
mov dword [rbp - 0x6c], 0x3f129293
mov dword [rbp - 0x68], 0x3ec2c2c3
movss dword [rbp - 0x64], xmm0
lea rcx, [rbp - 0x70]
call fcn.14000b3f0
movaps xmm7, xmm13
addss xmm7, dword [0x1400d0548]
addss xmm7, dword [0x1400d04b0]
addss xmm7, dword [0x1400d0498]
movss dword [rbp - 0x60], xmm7
movss dword [rbp - 0x5c], xmm6
mov rcx, qword [0x1401d51a0]
mov qword [rsp + 0x40], rdi
movss dword [rsp + 0x38], xmm9
mov qword [rsp + 0x30], rdi
lea rdx, [rbp - 0x57]
mov qword [rsp + 0x28], rdx
mov dword [rsp + 0x20], eax
lea r9, [rbp - 0x60]
movss xmm2, dword [0x1400d048c]
mov rdx, qword [rcx]
mov rcx, r13
call fcn.140037660
mov byte [rbp - 0x80], Ordinal_26
mov al, 0x55
mov cl, 0x78
mov dl, 0x6a
mov r8b, WSAGetLastError
mov r9b, reloc.WS2_32.dll_gethostname
mov r10b, 0x6c
mov r11b, 0x69
mov bl, 0x7d
movzx edi, cl
movzx esi, r8b
mov r14b, 0x7c
xor r15d, r15d
xor al, 0x19
mov byte [rbp - 0x7f], al
xor cl, 0x19
mov byte [rbp - 0x7e], cl
xor dl, 0x19
mov byte [rbp - 0x7d], dl
xor r8b, 0x19
mov byte [rbp - 0x7c], r8b
xor r9b, 0x19
mov byte [rbp - 0x7b], r9b
xor r10b, 0x19
mov byte [rbp - 0x7a], r10b
xor r11b, 0x19
mov byte [rbp - 0x79], r11b
xor bl, 0x19
mov byte [rbp - 0x78], bl
xor dil, 0x19
mov byte [rbp - 0x77], dil
xor sil, 0x19
mov byte [rbp - 0x76], sil
xor r14b, 0x19
mov byte [rbp - 0x75], r14b
mov byte [rbp - 0x74], r15b
movss xmm2, dword [r12]
mov dword [rbp - 0x70], 0x3ed8d8d9
mov dword [rbp - 0x6c], 0x3ed2d2d3
mov dword [rbp - 0x68], 0x3ef0f0f1
movss dword [rbp - 0x64], xmm2
lea rcx, [rbp - 0x70]
call fcn.14000b3f0
movss dword [rbp - 0x60], xmm10
movaps xmm6, xmm12
addss xmm6, dword [0x1400d04f8]
addss xmm6, xmm14
movss dword [rbp - 0x5c], xmm6
mov qword [rsp + 0x40], r15
movss dword [rsp + 0x38], xmm9
mov qword [rsp + 0x30], r15
lea rcx, [rbp - 0x7f]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], eax
lea r9, [rbp - 0x60]
xorps xmm2, xmm2
xor edx, edx
mov rcx, r13
call fcn.140037660
mov byte [rbp - 0x80], reloc.WS2_32.dll_ntohs
mov al, 0x4a
mov cl, 0x77
mov dl, 0x7f
mov r8b, 0x66
mov r9b, 0x7d
mov r10b, 0x6a
mov r11b, 0x7c
mov bl, 0x2f
movzx edi, r8b
mov sil, 0x61
xor r14d, r14d
xor al, 0xf
mov byte [rbp - 0x7f], al
xor cl, 0xf
mov byte [rbp - 0x7e], cl
xor dl, 0xf
mov byte [rbp - 0x7d], dl
xor r8b, 0xf
mov byte [rbp - 0x7c], r8b
xor r9b, 0xf
mov byte [rbp - 0x7b], r9b
xor r10b, 0xf
mov byte [rbp - 0x7a], r10b
xor r11b, 0xf
mov byte [rbp - 0x79], r11b
xor bl, 0xf
mov byte [rbp - 0x78], bl
xor dil, 0xf
mov byte [rbp - 0x77], dil
xor sil, 0xf
mov byte [rbp - 0x76], sil
mov byte [rbp - 0x75], r14b
movss xmm0, dword [r12]
mov dword [rbp - 0x70], 0x3ed8d8d9
mov dword [rbp - 0x6c], 0x3ed2d2d3
mov dword [rbp - 0x68], 0x3ef0f0f1
movss dword [rbp - 0x64], xmm0
lea rcx, [rbp - 0x70]
call fcn.14000b3f0
movss dword [rbp - 0x60], xmm8
movss dword [rbp - 0x5c], xmm6
mov qword [rsp + 0x40], r15
movss dword [rsp + 0x38], xmm9
mov qword [rsp + 0x30], r15
lea rcx, [rbp - 0x7f]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], eax
lea r9, [rbp - 0x60]
xorps xmm2, xmm2
xor edx, edx
mov rcx, r13
call fcn.140037660
movdqa xmm1, xmmword [0x1400d08e0]
movdqu xmmword [rsp + 0x50], xmm1
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd ecx, xmm1
xor al, cl
mov byte [rsp + 0x51], al
xor byte [rsp + 0x52], cl
xor byte [rsp + 0x53], cl
xor byte [rsp + 0x54], cl
xor byte [rsp + 0x55], cl
xor byte [rsp + 0x56], cl
xor byte [rsp + 0x57], cl
xor byte [rsp + 0x58], cl
xor byte [rsp + 0x59], cl
xor byte [rsp + 0x5a], cl
xor byte [rsp + 0x5b], cl
xor byte [rsp + 0x5c], cl
xor byte [rsp + 0x5d], cl
xor byte [rsp + 0x5e], cl
xor byte [rsp + 0x5f], cl
mov byte [rsp + 0x60], r14b
movss xmm0, dword [r12]
mov dword [rbp - 0x80], 0x3ed8d8d9
mov dword [rbp - 0x7c], 0x3ed2d2d3
mov dword [rbp - 0x78], 0x3ef0f0f1
movss dword [rbp - 0x74], xmm0
lea rcx, [rbp - 0x80]
call fcn.14000b3f0
movss dword [rbp - 0x60], xmm7
movss dword [rbp - 0x5c], xmm6
mov qword [rsp + 0x40], r15
movss dword [rsp + 0x38], xmm9
mov qword [rsp + 0x30], r15
lea rcx, [rsp + 0x51]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], eax
lea r9, [rbp - 0x60]
xorps xmm2, xmm2
xor edx, edx
mov rcx, r13
call fcn.140037660
mov rcx, qword [0x1401d5178]
add rcx, 0x1d8
call fcn.1400069f0
mov rbx, rax
movss xmm0, dword [r12]
mov dword [rbp - 0x70], 0x3f0d8d8e
mov dword [rbp - 0x6c], 0x3f09898a
mov dword [rbp - 0x68], 0x3f22a2a3
movss dword [rbp - 0x64], xmm0
lea rcx, [rbp - 0x70]
call fcn.14000b3f0
movss dword [rbp - 0x54], xmm10
movaps xmm6, xmm12
addss xmm6, dword [0x1400d0500]
addss xmm6, xmm14
movss dword [rbp - 0x50], xmm6
mov qword [rsp + 0x40], r15
movss dword [rsp + 0x38], xmm9
mov qword [rsp + 0x30], r15
mov qword [rsp + 0x28], rbx
mov dword [rsp + 0x20], eax
lea r9, [rbp - 0x54]
xorps xmm2, xmm2
xor edx, edx
mov rcx, r13
call fcn.140037660
mov rcx, qword [0x1401d5178]
add rcx, 0x118
call fcn.1400069f0
mov rbx, rax
movss xmm0, dword [r12]
mov dword [rbp - 0x80], 0x3f0d8d8e
mov dword [rbp - 0x7c], 0x3f09898a
mov dword [rbp - 0x78], 0x3f22a2a3
movss dword [rbp - 0x74], xmm0
lea rcx, [rbp - 0x80]
call fcn.14000b3f0
movss dword [rbp - 0x60], xmm8
movss dword [rbp - 0x5c], xmm6
mov qword [rsp + 0x40], r15
movss dword [rsp + 0x38], xmm9
mov qword [rsp + 0x30], r15
mov qword [rsp + 0x28], rbx
mov dword [rsp + 0x20], eax
lea r9, [rbp - 0x60]
xorps xmm2, xmm2
xor edx, edx
mov rcx, r13
call fcn.140037660
mov byte [rbp - 0x80], 0x7b
mov al, reloc.WLDAP32.dll_Ordinal_46
mov cl, reloc.WS2_32.dll_setsockopt
mov dl, Ordinal_32
mov r8b, reloc.WLDAP32.dll_Ordinal_30
mov r9b, reloc.WS2_32.dll_ntohs
movzx r10d, r8b
mov r11b, Ordinal_26
movzx ebx, r9b
movzx edi, r8b
movzx esi, dl
xor al, 0x7b
mov byte [rbp - 0x7f], al
xor cl, 0x7b
mov byte [rbp - 0x7e], cl
xor dl, 0x7b
mov byte [rbp - 0x7d], dl
xor r8b, 0x7b
mov byte [rbp - 0x7c], r8b
xor r9b, 0x7b
mov byte [rbp - 0x7b], r9b
xor r10b, 0x7b
mov byte [rbp - 0x7a], r10b
xor r11b, 0x7b
mov byte [rbp - 0x79], r11b
xor bl, 0x7b
mov byte [rbp - 0x78], bl
xor dil, 0x7b
mov byte [rbp - 0x77], dil
xor sil, 0x7b
mov byte [rbp - 0x76], sil
mov byte [rbp - 0x75], r14b
movss xmm0, dword [r12]
mov dword [rbp - 0x70], 0x3f0d8d8e
mov dword [rbp - 0x6c], 0x3f09898a
mov dword [rbp - 0x68], 0x3f22a2a3
movss dword [rbp - 0x64], xmm0
lea rcx, [rbp - 0x70]
call fcn.14000b3f0
movss dword [rbp - 0x60], xmm7
movss dword [rbp - 0x5c], xmm6
mov qword [rsp + 0x40], r15
movss dword [rsp + 0x38], xmm9
mov qword [rsp + 0x30], r15
lea rcx, [rbp - 0x7f]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], eax
lea r9, [rbp - 0x60]
xorps xmm2, xmm2
xor edx, edx
mov rcx, r13
call fcn.140037660
movss xmm2, dword [r12]
movss xmm0, dword [0x1400d0350]
movss dword [rbp - 0x48], xmm0
movss xmm1, dword [0x1400d0348]
movss dword [rbp - 0x44], xmm1
movss xmm0, dword [0x1400d0358]
movss dword [rbp - 0x40], xmm0
movss dword [rbp - 0x3c], xmm2
lea rcx, [rbp - 0x48]
call fcn.14000b3f0
movaps xmm0, xmm13
addss xmm0, dword [0x1400d0534]
addss xmm0, dword [0x1400d0488]
movss dword [rbp - 0x60], xmm0
movaps xmm1, xmm12
addss xmm1, dword [0x1400d0520]
addss xmm1, xmm14
movss dword [rbp - 0x5c], xmm1
movss dword [rbp - 0x54], xmm10
movaps xmm0, xmm12
addss xmm0, dword [0x1400d0510]
addss xmm0, xmm14
movss dword [rbp - 0x50], xmm0
mov dword [rsp + 0x28], r15d
movss xmm0, dword [0x1400d0414]
movss dword [rsp + 0x20], xmm0
mov r9d, eax
lea r8, [rbp - 0x60]
lea rdx, [rbp - 0x54]
mov rcx, r13
call fcn.140036e50
mov rcx, qword [0x1401d5178]
add rcx, 0x218
call fcn.1400069f0
mov r15, rax
movss xmm2, dword [r12]
mov dword [rsp + 0x50], 0x3f48c8c9
mov dword [rsp + 0x54], 0x3f48c8c9
movss xmm1, dword [0x1400d03d4]
movss dword [rsp + 0x58], xmm1
movss dword [rsp + 0x5c], xmm2
lea rcx, [rsp + 0x50]
call fcn.14000b3f0
mov r14d, eax
mov rsi, qword [0x1401d5178]
mov byte [rbp - 0x80], 4
mov cl, 0x51
mov dl, reloc.WS2_32.dll_WSACleanup
mov r8b, 0x60
mov r9b, 0x65
mov r10b, reloc.WS2_32.dll_WSASetLastError
mov r11b, WSAGetLastError
mov bl, 0x6a
mov dil, 0x63
xor eax, eax
xor cl, 4
mov byte [rbp - 0x7f], cl
xor dl, 4
mov byte [rbp - 0x7e], dl
xor r8b, 4
mov byte [rbp - 0x7d], r8b
xor r9b, 4
mov byte [rbp - 0x7c], r9b
xor r10b, 4
mov byte [rbp - 0x7b], r10b
xor r11b, 4
mov byte [rbp - 0x7a], r11b
xor bl, 4
mov byte [rbp - 0x79], bl
xor dil, 4
mov byte [rbp - 0x78], dil
mov byte [rbp - 0x77], al
lea rdx, [rbp - 0x7f]
lea rcx, [rsi + 0x218]
call fcn.140007450
mov ecx, reloc.WLDAP32.dll_Ordinal_60
mov edx, reloc.WS2_32.dll_gethostname
test al, al
cmovne ecx, edx
movd xmm0, ecx
cvtdq2ps xmm0, xmm0
addss xmm13, dword [0x1400d04f0]
addss xmm0, xmm13
movss dword [rbp - 0x70], xmm0
addss xmm12, dword [0x1400d0514]
addss xmm12, xmm14
movss dword [rbp - 0x6c], xmm12
xor esi, esi
mov qword [rsp + 0x40], rsi
movss dword [rsp + 0x38], xmm9
mov qword [rsp + 0x30], rsi
mov qword [rsp + 0x28], r15
mov dword [rsp + 0x20], r14d
lea r9, [rbp - 0x70]
xorps xmm2, xmm2
xor edx, edx
mov rcx, r13
call fcn.140037660
movss xmm0, dword [0x1400d0538]
movss dword [rbp - 0x70], xmm0
movss xmm2, dword [0x1400d0528]
movss dword [rbp - 0x6c], xmm2
lea rcx, [rbp - 0x70]
call fcn.140019dc0
movss xmm1, dword [r12]
xor ecx, ecx
call fcn.14000b9c0
movss xmm0, dword [0x1400d0518]
movss dword [rbp - 0x70], xmm0
movss xmm1, dword [0x1400d04ac]
movss dword [rbp - 0x6c], xmm1
xor r8d, r8d
lea rdx, [rbp - 0x70]
lea rcx, [0x1400cfc1c]
call fcn.140055980
test al, al
je 0x14004fc09
mov byte [rbp - 0x80], Ordinal_50
mov al, 0x65
mov cl, 0x40
mov dl, 0x54
mov r8b, 0x51
mov r9b, 0x44
mov r10b, 0x59
mov r11b, 0x5e
mov bl, 0x57
xor al, 0x30
mov byte [rbp - 0x7f], al
xor cl, 0x30
mov byte [rbp - 0x7e], cl
xor dl, 0x30
mov byte [rbp - 0x7d], dl
xor r8b, 0x30
mov byte [rbp - 0x7c], r8b
xor r9b, 0x30
mov byte [rbp - 0x7b], r9b
xor r10b, 0x30
mov byte [rbp - 0x7a], r10b
xor r11b, 0x30
mov byte [rbp - 0x79], r11b
xor bl, 0x30
mov byte [rbp - 0x78], bl
mov byte [rbp - 0x77], sil
mov rcx, qword [0x1401d5178]
add rcx, 0x218
lea rdx, [rbp - 0x7f]
call fcn.140007450
test al, al
je 0x14004fa52
movdqa xmm0, xmmword [0x1400d1440]
movdqa xmmword [rbp - 0x10], xmm0
movdqa xmm1, xmmword [0x1400d13f0]
movdqa xmmword [rbp], xmm1
movdqa xmm0, xmmword [0x1400d1400]
movdqa xmmword [rbp + 0x10], xmm0
movdqa xmm1, xmmword [0x1400d1480]
movdqa xmmword [rbp + 0x20], xmm1
movdqa xmm0, xmmword [0x1400d1470]
movdqa xmmword [rbp + 0x30], xmm0
movdqa xmm1, xmmword [0x1400d13e0]
movdqa xmmword [rbp + 0x40], xmm1
movdqa xmm0, xmmword [0x1400d1430]
movdqa xmmword [rbp + 0x50], xmm0
movdqa xmm1, xmmword [0x1400d1410]
movdqa xmmword [rbp + 0x60], xmm1
movdqa xmm0, xmmword [0x1400d1450]
movdqa xmmword [rbp + 0x70], xmm0
movdqa xmm1, xmmword [0x1400d1420]
movdqa xmmword [rbp + 0x80], xmm1
mov dword [rbp + 0x90], 0xf6f2e3fb
mov dword [rbp + 0x94], 0xf93af83a
mov dword [rbp + 0x98], 0xf5f5e9ea
mov word [rbp + 0x9c], 0x34e9
xor eax, eax
mov byte [rbp + 0x9e], al
mov ecx, esi
nop word [rax + rax]
movzx eax, byte [rbp - 0x10]
xor byte [rbp + rcx - 0xf], al
inc rcx
cmp rcx, 0xad
jb 0x14004f920
mov byte [rbp + 0x9e], sil
lea rdx, [rbp - 0xf]
mov rcx, qword [0x1401d51b8]
call fcn.14005c900
movdqa xmm1, xmmword [0x1400d1320]
movdqu xmmword [rsp + 0x50], xmm1
movdqa xmm2, xmmword [0x1400d0a10]
movdqu xmmword [rsp + 0x60], xmm2
mov dl, reloc.WLDAP32.dll_Ordinal_50
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd ecx, xmm1
xor al, cl
mov byte [rsp + 0x51], al
xor byte [rsp + 0x52], cl
xor byte [rsp + 0x53], cl
xor byte [rsp + 0x54], cl
xor byte [rsp + 0x55], cl
xor byte [rsp + 0x56], cl
xor byte [rsp + 0x57], cl
xor byte [rsp + 0x58], cl
xor byte [rsp + 0x59], cl
xor byte [rsp + 0x5a], cl
xor byte [rsp + 0x5b], cl
xor byte [rsp + 0x5c], cl
xor byte [rsp + 0x5d], cl
xor byte [rsp + 0x5e], cl
xor byte [rsp + 0x5f], cl
movd eax, xmm2
xor al, cl
mov byte [rsp + 0x60], al
xor byte [rsp + 0x61], cl
xor byte [rsp + 0x62], cl
xor byte [rsp + 0x63], cl
xor byte [rsp + 0x64], cl
xor byte [rsp + 0x65], cl
xor byte [rsp + 0x66], cl
xor byte [rsp + 0x67], cl
xor byte [rsp + 0x68], cl
xor byte [rsp + 0x69], cl
xor byte [rsp + 0x6a], cl
xor byte [rsp + 0x6b], cl
xor byte [rsp + 0x6c], cl
xor byte [rsp + 0x6d], cl
xor byte [rsp + 0x6e], cl
xor byte [rsp + 0x6f], cl
xor dl, cl
mov byte [rsp + 0x70], dl
mov byte [rsp + 0x71], sil
lea rcx, [rbp + 0xa0]
call fcn.140059490
nop
mov dword [rsp + 0x20], esi
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rsp + 0x51]
call fcn.14005a510
nop
call qword [sym.imp.ole32.dll_CoUninitialize]
xor ecx, ecx
call qword [sym.imp.USER32.dll_PostQuitMessage]
mov ecx, listen
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_raise]
mov ecx, 0xffffffff
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov byte [rbp - 0x70], 0x5f
mov al, reloc.WLDAP32.dll_Ordinal_27
mov cl, 0x36
mov dl, Ordinal_45
mov r8b, 0x3e
mov r9b, 0x3d
mov r10b, 0x33
mov r11b, Ordinal_60
mov bl, Ordinal_60
xor al, 0x5f
mov byte [rbp - 0x6f], al
xor cl, 0x5f
mov byte [rbp - 0x6e], cl
xor dl, 0x5f
mov byte [rbp - 0x6d], dl
xor r8b, 0x5f
mov byte [rbp - 0x6c], r8b
xor r9b, 0x5f
mov byte [rbp - 0x6b], r9b
xor r10b, 0x5f
mov byte [rbp - 0x6a], r10b
xor r11b, 0x5f
mov byte [rbp - 0x69], r11b
xor bl, 0x5f
mov byte [rbp - 0x68], bl
mov byte [rbp - 0x67], sil
mov rcx, qword [0x1401d5178]
add rcx, 0x218
lea rdx, [rbp - 0x6f]
call fcn.140007450
test al, al
je 0x14004fba6
movdqa xmm1, xmmword [0x1400d0810]
movdqu xmmword [rsp + 0x50], xmm1
movdqa xmm2, xmmword [0x1400d0680]
movdqu xmmword [rsp + 0x60], xmm2
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd ecx, xmm1
xor al, cl
mov byte [rsp + 0x51], al
xor byte [rsp + 0x52], cl
xor byte [rsp + 0x53], cl
xor byte [rsp + 0x54], cl
xor byte [rsp + 0x55], cl
xor byte [rsp + 0x56], cl
xor byte [rsp + 0x57], cl
xor byte [rsp + 0x58], cl
xor byte [rsp + 0x59], cl
xor byte [rsp + 0x5a], cl
xor byte [rsp + 0x5b], cl
xor byte [rsp + 0x5c], cl
xor byte [rsp + 0x5d], cl
xor byte [rsp + 0x5e], cl
xor byte [rsp + 0x5f], cl
movd eax, xmm2
xor al, cl
mov byte [rsp + 0x60], al
xor byte [rsp + 0x61], cl
xor byte [rsp + 0x62], cl
xor byte [rsp + 0x63], cl
xor byte [rsp + 0x64], cl
xor byte [rsp + 0x65], cl
xor byte [rsp + 0x66], cl
xor byte [rsp + 0x67], cl
xor byte [rsp + 0x68], cl
xor byte [rsp + 0x69], cl
xor byte [rsp + 0x6a], cl
xor byte [rsp + 0x6b], cl
xor byte [rsp + 0x6c], cl
xor byte [rsp + 0x6d], cl
xor byte [rsp + 0x6e], cl
mov byte [rsp + 0x6f], sil
lea rdx, [rsp + 0x51]
mov rcx, qword [0x1401d51b8]
call fcn.14005c900
xor ecx, ecx
call qword [sym.imp.USER32.dll_PostQuitMessage]
mov ecx, listen
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_raise]
mov ecx, 0xffffffff
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov rax, qword [0x1401d5190]
mov dword [rax + 0x104], 1
mov dword [rax + 0x108], 1
mov byte [rax + 0x114], 1
cmp dword [rax + 0x34], esi
jne 0x14004fc09
mov byte [rbp + 0xa0], sil
lea rdx, [rbp + 0xa0]
lea rcx, [rsp + 0x50]
call fcn.140051510
nop
lea rcx, [rsp + 0x50]
call fcn.140007cd0
nop
cmp dword [rsp + 0x58], 0
je 0x14004fbff
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
int3
mov rax, qword [0x1401d5190]
inc dword [rax + 0x34]
mov ecx, 1
call fcn.14000ba40
mov rcx, qword [0x1401d5198]
call fcn.14004dd40
mov rax, qword [0x1401d5178]
cmp byte [rax + 0xd3], 0
je 0x14004fd2e
movdqa xmm1, xmmword [0x1400d10d0]
movdqu xmmword [rsp + 0x50], xmm1
movdqa xmm2, xmmword [0x1400d0690]
movdqu xmmword [rsp + 0x60], xmm2
mov dl, reloc.WS2_32.dll_setsockopt
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd ecx, xmm1
xor al, cl
mov byte [rsp + 0x51], al
xor byte [rsp + 0x52], cl
xor byte [rsp + 0x53], cl
xor byte [rsp + 0x54], cl
xor byte [rsp + 0x55], cl
xor byte [rsp + 0x56], cl
xor byte [rsp + 0x57], cl
xor byte [rsp + 0x58], cl
xor byte [rsp + 0x59], cl
xor byte [rsp + 0x5a], cl
xor byte [rsp + 0x5b], cl
xor byte [rsp + 0x5c], cl
xor byte [rsp + 0x5d], cl
xor byte [rsp + 0x5e], cl
xor byte [rsp + 0x5f], cl
movd eax, xmm2
xor al, cl
mov byte [rsp + 0x60], al
xor byte [rsp + 0x61], cl
xor byte [rsp + 0x62], cl
xor byte [rsp + 0x63], cl
xor byte [rsp + 0x64], cl
xor byte [rsp + 0x65], cl
xor byte [rsp + 0x66], cl
xor byte [rsp + 0x67], cl
xor byte [rsp + 0x68], cl
xor byte [rsp + 0x69], cl
xor byte [rsp + 0x6a], cl
xor byte [rsp + 0x6b], cl
xor byte [rsp + 0x6c], cl
xor byte [rsp + 0x6d], cl
xor byte [rsp + 0x6e], cl
xor byte [rsp + 0x6f], cl
xor dl, cl
mov byte [rsp + 0x70], dl
mov byte [rsp + 0x71], 0
lea rcx, [rbp + 0xa0]
call fcn.140059490
nop
mov dword [rsp + 0x20], esi
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rsp + 0x51]
call fcn.14005a510
nop
call qword [sym.imp.ole32.dll_CoUninitialize]
mov rax, qword [0x1401d5178]
mov byte [rax + 0xd3], 0
jmp 0x14005027b
cmp byte [0x1401d515a], 0
je 0x1400500da
cmp byte [rax + 0xd0], 0
jne 0x1400500da
movdqa xmm1, xmmword [0x1400d1310]
movdqu xmmword [rsp + 0x50], xmm1
movdqa xmm2, xmmword [0x1400d1170]
movdqu xmmword [rsp + 0x60], xmm2
mov cl, 0x6b
mov dl, 0x71
mov r8b, 0x6a
mov r9b, reloc.WS2_32.dll_WSASetLastError
mov r11b, Ordinal_45
movzx ebx, dl
mov dil, reloc.WS2_32.dll_WSACleanup
mov sil, 0x63
mov r14b, 0x76
mov r15b, 0x65
mov r12b, 0x60
mov r13b, 0x61
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd r10d, xmm1
xor al, r10b
mov byte [rsp + 0x51], al
xor byte [rsp + 0x52], r10b
xor byte [rsp + 0x53], r10b
xor byte [rsp + 0x54], r10b
xor byte [rsp + 0x55], r10b
xor byte [rsp + 0x56], r10b
xor byte [rsp + 0x57], r10b
xor byte [rsp + 0x58], r10b
xor byte [rsp + 0x59], r10b
xor byte [rsp + 0x5a], r10b
xor byte [rsp + 0x5b], r10b
xor byte [rsp + 0x5c], r10b
xor byte [rsp + 0x5d], r10b
xor byte [rsp + 0x5e], r10b
xor byte [rsp + 0x5f], r10b
movd eax, xmm2
xor al, r10b
mov byte [rsp + 0x60], al
xor byte [rsp + 0x61], r10b
xor byte [rsp + 0x62], r10b
xor byte [rsp + 0x63], r10b
xor byte [rsp + 0x64], r10b
xor byte [rsp + 0x65], r10b
xor byte [rsp + 0x66], r10b
xor byte [rsp + 0x67], r10b
xor byte [rsp + 0x68], r10b
xor byte [rsp + 0x69], r10b
xor byte [rsp + 0x6a], r10b
xor byte [rsp + 0x6b], r10b
xor byte [rsp + 0x6c], r10b
xor byte [rsp + 0x6d], r10b
xor byte [rsp + 0x6e], r10b
xor byte [rsp + 0x6f], r10b
xor cl, r10b
mov byte [rsp + 0x70], cl
xor dl, r10b
mov byte [rsp + 0x71], dl
xor r8b, r10b
mov byte [rsp + 0x72], r8b
xor r9b, r10b
mov byte [rsp + 0x73], r9b
xor r11b, r10b
mov byte [rsp + 0x74], r11b
xor bl, r10b
mov byte [rsp + 0x75], bl
xor dil, r10b
mov byte [rsp + 0x76], dil
xor sil, r10b
mov byte [rsp + 0x77], sil
xor r14b, r10b
mov byte [rsp + 0x78], r14b
xor r15b, r10b
mov byte [rsp + 0x79], r15b
xor r12b, r10b
mov byte [rsp + 0x7a], r12b
xor r13b, r10b
mov byte [rsp + 0x7b], r13b
mov al, 0x77
xor al, r10b
mov byte [rsp + 0x7c], al
mov byte [rsp + 0x7d], 0
lea rcx, [rbp + 0xa0]
call fcn.140059490
nop
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rsp + 0x51]
call fcn.14005a510
nop
call qword [sym.imp.ole32.dll_CoUninitialize]
movdqa xmm1, xmmword [0x1400d13c0]
movdqa xmmword [rbp - 0x10], xmm1
movdqa xmm2, xmmword [0x1400d13b0]
movdqa xmmword [rbp], xmm2
movdqa xmm3, xmmword [0x1400d1390]
movdqa xmmword [rbp + 0x10], xmm3
movdqa xmm4, xmmword [0x1400d13a0]
movdqa xmmword [rbp + 0x20], xmm4
movdqa xmm5, xmmword [0x1400d08c0]
movdqa xmmword [rbp + 0x30], xmm5
movdqa xmm6, xmmword [0x1400d13d0]
movdqa xmmword [rbp + 0x40], xmm6
mov dl, 0x18
mov r8b, Ordinal_211
mov r9b, 0xdb
mov r10b, 0xc4
mov r11b, Ordinal_200
mov bl, 0xc6
mov dil, 0xda
mov sil, reloc.WS2_32.dll_sendto
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd ecx, xmm1
xor al, cl
mov byte [rbp - 0xf], al
xor byte [rbp - 0xe], cl
xor byte [rbp - 0xd], cl
xor byte [rbp - 0xc], cl
xor byte [rbp - 0xb], cl
xor byte [rbp - 0xa], cl
xor byte [rbp - 9], cl
xor byte [rbp - 8], cl
xor byte [rbp - 7], cl
xor byte [rbp - 6], cl
xor byte [rbp - 5], cl
xor byte [rbp - 4], cl
xor byte [rbp - 3], cl
xor byte [rbp - 2], cl
xor byte [rbp - 1], cl
movd eax, xmm2
xor al, cl
mov byte [rbp], al
xor byte [rbp + 1], cl
xor byte [rbp + 2], cl
xor byte [rbp + 3], cl
xor byte [rbp + 4], cl
xor byte [rbp + 5], cl
xor byte [rbp + 6], cl
xor byte [rbp + 7], cl
xor byte [rbp + 8], cl
xor byte [rbp + 9], cl
xor byte [rbp + 0xa], cl
xor byte [rbp + 0xb], cl
xor byte [rbp + 0xc], cl
xor byte [rbp + 0xd], cl
xor byte [rbp + 0xe], cl
xor byte [rbp + 0xf], cl
movd eax, xmm3
xor al, cl
mov byte [rbp + 0x10], al
xor byte [rbp + 0x11], cl
xor byte [rbp + 0x12], cl
xor byte [rbp + 0x13], cl
xor byte [rbp + 0x14], cl
xor byte [rbp + 0x15], cl
xor byte [rbp + 0x16], cl
xor byte [rbp + 0x17], cl
xor byte [rbp + 0x18], cl
xor byte [rbp + 0x19], cl
xor byte [rbp + 0x1a], cl
xor byte [rbp + 0x1b], cl
xor byte [rbp + 0x1c], cl
xor byte [rbp + 0x1d], cl
xor byte [rbp + 0x1e], cl
xor byte [rbp + 0x1f], cl
movd eax, xmm4
xor al, cl
mov byte [rbp + 0x20], al
xor byte [rbp + 0x21], cl
xor byte [rbp + 0x22], cl
xor byte [rbp + 0x23], cl
xor byte [rbp + 0x24], cl
xor byte [rbp + 0x25], cl
xor byte [rbp + 0x26], cl
xor byte [rbp + 0x27], cl
xor byte [rbp + 0x28], cl
xor byte [rbp + 0x29], cl
xor byte [rbp + 0x2a], cl
xor byte [rbp + 0x2b], cl
xor byte [rbp + 0x2c], cl
xor byte [rbp + 0x2d], cl
xor byte [rbp + 0x2e], cl
xor byte [rbp + 0x2f], cl
movd eax, xmm5
xor al, cl
mov byte [rbp + 0x30], al
xor byte [rbp + 0x31], cl
xor byte [rbp + 0x32], cl
xor byte [rbp + 0x33], cl
xor byte [rbp + 0x34], cl
xor byte [rbp + 0x35], cl
xor byte [rbp + 0x36], cl
xor byte [rbp + 0x37], cl
xor byte [rbp + 0x38], cl
xor byte [rbp + 0x39], cl
xor byte [rbp + 0x3a], cl
xor byte [rbp + 0x3b], cl
xor byte [rbp + 0x3c], cl
xor byte [rbp + 0x3d], cl
xor byte [rbp + 0x3e], cl
xor byte [rbp + 0x3f], cl
movd eax, xmm6
xor al, cl
mov byte [rbp + 0x40], al
xor byte [rbp + 0x41], cl
xor byte [rbp + 0x42], cl
xor byte [rbp + 0x43], cl
xor byte [rbp + 0x44], cl
xor byte [rbp + 0x45], cl
xor byte [rbp + 0x46], cl
xor byte [rbp + 0x47], cl
xor byte [rbp + 0x48], cl
xor byte [rbp + 0x49], cl
xor byte [rbp + 0x4a], cl
xor byte [rbp + 0x4b], cl
xor byte [rbp + 0x4c], cl
xor byte [rbp + 0x4d], cl
xor byte [rbp + 0x4e], cl
xor byte [rbp + 0x4f], cl
xor dl, cl
mov byte [rbp + 0x50], dl
xor r8b, cl
mov byte [rbp + 0x51], r8b
xor r9b, cl
mov byte [rbp + 0x52], r9b
xor r10b, cl
mov byte [rbp + 0x53], r10b
xor r11b, cl
mov byte [rbp + 0x54], r11b
xor bl, cl
mov byte [rbp + 0x55], bl
xor dil, cl
mov byte [rbp + 0x56], dil
xor sil, cl
mov byte [rbp + 0x57], sil
mov byte [rbp + 0x58], 0
lea rdx, [rbp - 0xf]
mov rcx, qword [0x1401d51b8]
call fcn.14005c900
mov byte [0x1401d515a], 0
jmp 0x140050274
cmp byte [0x1401d5159], 0
je 0x14005027b
movdqa xmm1, xmmword [0x1400d0a20]
movdqu xmmword [rbp - 0x48], xmm1
movdqa xmm2, xmmword [0x1400d0c20]
movdqu xmmword [rbp - 0x38], xmm2
mov cl, 0x78
mov dl, 0x25
mov r8b, reloc.WLDAP32.dll_Ordinal_50
mov r10b, reloc.WLDAP32.dll_Ordinal_33
mov r11b, 0x3e
movzx ebx, r8b
mov dil, reloc.WLDAP32.dll_Ordinal_32
mov sil, 0x24
mov r14b, 0x79
mov r15b, Ordinal_41
mov r12b, 0x3f
movzx r13d, r15b
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd r9d, xmm1
xor al, r9b
mov byte [rbp - 0x47], al
xor byte [rbp - 0x46], r9b
xor byte [rbp - 0x45], r9b
xor byte [rbp - 0x44], r9b
xor byte [rbp - 0x43], r9b
xor byte [rbp - 0x42], r9b
xor byte [rbp - 0x41], r9b
xor byte [rbp - 0x40], r9b
xor byte [rbp - 0x3f], r9b
xor byte [rbp - 0x3e], r9b
xor byte [rbp - 0x3d], r9b
xor byte [rbp - 0x3c], r9b
xor byte [rbp - 0x3b], r9b
xor byte [rbp - 0x3a], r9b
xor byte [rbp - 0x39], r9b
movd eax, xmm2
xor al, r9b
mov byte [rbp - 0x38], al
xor byte [rbp - 0x37], r9b
xor byte [rbp - 0x36], r9b
xor byte [rbp - 0x35], r9b
xor byte [rbp - 0x34], r9b
xor byte [rbp - 0x33], r9b
xor byte [rbp - 0x32], r9b
xor byte [rbp - 0x31], r9b
xor byte [rbp - 0x30], r9b
xor byte [rbp - 0x2f], r9b
xor byte [rbp - 0x2e], r9b
xor byte [rbp - 0x2d], r9b
xor byte [rbp - 0x2c], r9b
xor byte [rbp - 0x2b], r9b
xor byte [rbp - 0x2a], r9b
xor byte [rbp - 0x29], r9b
xor cl, r9b
mov byte [rbp - 0x28], cl
xor dl, r9b
mov byte [rbp - 0x27], dl
xor r8b, r9b
mov byte [rbp - 0x26], r8b
xor r10b, r9b
mov byte [rbp - 0x25], r10b
xor r11b, r9b
mov byte [rbp - 0x24], r11b
xor bl, r9b
mov byte [rbp - 0x23], bl
xor dil, r9b
mov byte [rbp - 0x22], dil
xor sil, r9b
mov byte [rbp - 0x21], sil
xor r14b, r9b
mov byte [rbp - 0x20], r14b
xor r15b, r9b
mov byte [rbp - 0x1f], r15b
xor r12b, r9b
mov byte [rbp - 0x1e], r12b
xor r13b, r9b
mov byte [rbp - 0x1d], r13b
mov byte [rbp - 0x1c], 0
lea r9, [0x1400cb42e]
mov qword [rsp + 0x20], r9
lea r8, [rbp - 0x47]
lea rdx, [rsp + 0x50]
mov rcx, qword [0x1401d5180]
call fcn.140001be0
nop
mov rcx, rax
call fcn.1400069f0
mov rbx, rax
lea rcx, [rbp + 0xa0]
call fcn.140059490
nop
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, rbx
call fcn.14005a510
nop
call qword [sym.imp.ole32.dll_CoUninitialize]
nop
lea rcx, [rsp + 0x50]
call fcn.140001750
mov byte [0x1401d5159], 0
mov rcx, qword [rbp + 0xa8]
xor rcx, rsp
call fcn.1400b8870
lea r11, [rsp + 0x230]
mov rbx, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm12, xmmword [r11 - 0x60]
movaps xmm13, xmmword [r11 - 0x70]
movaps xmm14, xmmword [r11 - 0x80]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret