Function at 0x1400a3260
Capabilities:
Access peb ldr_data
Contain obfuscated stackstrings
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x3e8]
sub rsp, 0x4e8
movaps xmmword [rsp + 0x4d0], xmm6
mov rax, qword [0x140365f00]
xor rax, rsp
mov qword [rbp + 0x3c0], rax
mov r14, r9
mov qword [rbp + 0x18], r9
mov rsi, r8
mov qword [rbp + 0x20], r8
mov r13, rdx
mov r12, rcx
mov qword [rbp + 0x1a0], rdx
mov qword [rbp + 0x1a8], r8
mov qword [rbp + 0x1b0], r9
mov r15, qword [rbp + 0x450]
mov qword [rbp + 0x28], r15
mov qword [rbp + 0x1b8], r15
xor ebx, ebx
mov dword [rsp + 0x68], ebx
call fcn.140093e90
lea rcx, [rbp + 0x230]
call fcn.1400ada60
nop
mov dword [rbp - 0x78], 0x3f272068
mov dword [rbp - 0x74], 0x313d2137
mov word [rbp - 0x70], WSAGetLastError
mov byte [rbp - 0x6e], 1
mov dword [rbp + 0x190], 0x3c312168
mov dword [rbp + 0x194], 0x1006e37
mov dword [rsp + 0x70], 0x22353c68
mov dword [rsp + 0x74], 0x3b3b3a21
mov dword [rsp + 0x78], 0x65333f
mov byte [rsp + 0x7c], 1
mov dword [rbp - 0x50], 0x38272768
mov dword [rbp - 0x4c], 0x1006e36
mov dword [rbp - 0x48], 0x303d2a68
mov dword [rbp - 0x44], 0x693f3b
mov byte [rbp - 0x40], 1
mov dword [rsp + 0x68], 0x28352468
mov word [rsp + 0x6c], reloc.WS2_32.dll_WSAGetLastError
mov byte [rsp + 0x6e], 1
mov dword [rbp - 0x58], 0x22313f68
mov dword [rbp - 0x54], 0x1006e21
mov dword [rbp - 0x38], 0x34233a68
mov dword [rbp - 0x34], 0x38353d20
mov dword [rbp - 0x30], 0x1006a33
mov dword [rbp + 0x1c0], 0x3420363a
mov dword [rbp + 0x1c4], 0x3231216f
mov dword [rbp + 0x1c8], 0x3c2c243f
mov word [rbp + 0x1cc], 0x28
mov byte [rbp + 0x1ce], 1
lea r8, [rbp - 0x38]
lea rdx, [rbp + 0x1c0]
lea rcx, [rbp + 0x1d0]
call fcn.140089c10
nop
mov rdx, r13
cmp qword [r13 + 0x18], 0xf
jbe 0x1400a33dc
mov rdx, qword [r13]
mov r8, qword [r13 + 0x10]
mov rcx, rax
call fcn.140003620
movups xmm0, xmmword [rax]
movups xmmword [rbp - 8], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 8], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea r8, [rbp - 0x58]
lea rdx, [rbp - 8]
lea rcx, [rbp + 0x210]
call fcn.140089060
nop
mov rdx, rsi
cmp qword [rsi + 0x18], 0xf
jbe 0x1400a3428
mov rdx, qword [rsi]
mov r8, qword [rsi + 0x10]
mov rcx, rax
call fcn.140003620
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x30], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x40], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea r8, [rsp + 0x68]
lea rdx, [rbp + 0x30]
lea rcx, [rbp + 0x170]
call fcn.140088f70
nop
mov rdx, r14
cmp qword [r14 + 0x18], 0xf
jbe 0x1400a3475
mov rdx, qword [r14]
mov r8, qword [r14 + 0x10]
mov rcx, rax
call fcn.140003620
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x150], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x160], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea r8, [rbp - 0x48]
lea rdx, [rbp + 0x150]
lea rcx, [rbp + 0x130]
call fcn.140089150
nop
mov rdx, r15
cmp qword [r15 + 0x18], 0xf
jbe 0x1400a34ca
mov rdx, qword [r15]
mov r8, qword [r15 + 0x10]
mov rcx, rax
call fcn.140003620
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x110], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x120], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea r8, [rbp - 0x50]
lea rdx, [rbp + 0x110]
lea rcx, [rbp + 0xf0]
call fcn.140089060
nop
lea rdx, [rbp + 0x230]
cmp qword [rbp + 0x248], 0xf
cmova rdx, qword [rbp + 0x230]
mov r8, qword [rbp + 0x240]
mov rcx, rax
call fcn.140003620
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0xd0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0xe0], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea r8, [rsp + 0x70]
lea rdx, [rbp + 0xd0]
lea rcx, [rbp + 0xb0]
call fcn.140089840
nop
lea rdx, [r12 + 0x240]
mov r8, qword [rdx + 0x10]
cmp qword [rdx + 0x18], 0xf
jbe 0x1400a358b
mov rdx, qword [rdx]
mov rcx, rax
call fcn.140003620
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x90], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0xa0], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea r8, [rbp + 0x190]
lea rdx, [rbp + 0x90]
lea rcx, [rbp + 0x70]
call fcn.140089060
nop
mov rdx, r12
cmp qword [r12 + 0x18], 0xf
jbe 0x1400a35de
mov rdx, qword [r12]
mov r8, qword [r12 + 0x10]
mov rcx, rax
call fcn.140003620
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x50], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x60], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea r8, [rbp - 0x78]
lea rdx, [rbp + 0x50]
lea rcx, [rbp - 0x28]
call fcn.140089390
nop
lea rdx, [r12 + 0x20]
cmp qword [r12 + 0x38], 0xf
jbe 0x1400a362d
mov rdx, qword [r12 + 0x20]
mov r8, qword [r12 + 0x30]
mov rcx, rax
call fcn.140003620
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x270], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x280], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov rdx, qword [rbp - 0x10]
cmp rdx, 0xf
jbe 0x1400a369c
inc rdx
mov rcx, qword [rbp - 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400a3697
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400a3697
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140130784
movdqa xmm6, xmmword [0x14034bf10]
movdqu xmmword [rbp - 0x18], xmm6
mov byte [rbp - 0x28], 0
mov rdx, qword [rbp + 0x68]
cmp rdx, 0xf
jbe 0x1400a36ec
inc rdx
mov rcx, qword [rbp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400a36e6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400a36e6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140130784
nop
mov rdx, qword [rbp + 0x88]
cmp rdx, 0xf
jbe 0x1400a372d
inc rdx
mov rcx, qword [rbp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400a3728
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400a3728
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140130784
movdqu xmmword [rbp + 0x80], xmm6
mov byte [rbp + 0x70], 0
mov rdx, qword [rbp + 0xa8]
cmp rdx, 0xf
jbe 0x1400a377e
inc rdx
mov rcx, qword [rbp + 0x90]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400a3778
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400a3778
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140130784
nop
mov rdx, qword [rbp + 0xc8]
cmp rdx, 0xf
jbe 0x1400a37c2
inc rdx
mov rcx, qword [rbp + 0xb0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400a37bd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400a37bd
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140130784
movdqu xmmword [rbp + 0xc0], xmm6
mov byte [rbp + 0xb0], 0
mov rdx, qword [rbp + 0xe8]
cmp rdx, 0xf
jbe 0x1400a3816
inc rdx
mov rcx, qword [rbp + 0xd0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400a3810
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400a3810
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140130784
nop
mov rdx, qword [rbp + 0x108]
cmp rdx, 0xf
jbe 0x1400a385a
inc rdx
mov rcx, qword [rbp + 0xf0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400a3855
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400a3855
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140130784
movdqu xmmword [rbp + 0x100], xmm6
mov byte [rbp + 0xf0], 0
mov rdx, qword [rbp + 0x128]
cmp rdx, 0xf
jbe 0x1400a38ae
inc rdx
mov rcx, qword [rbp + 0x110]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400a38a8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400a38a8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140130784
nop
mov rdx, qword [rbp + 0x148]
cmp rdx, 0xf
jbe 0x1400a38f2
inc rdx
mov rcx, qword [rbp + 0x130]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400a38ed
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400a38ed
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140130784
movdqu xmmword [rbp + 0x140], xmm6
mov byte [rbp + 0x130], 0
mov rdx, qword [rbp + 0x168]
cmp rdx, 0xf
jbe 0x1400a3946
inc rdx
mov rcx, qword [rbp + 0x150]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400a3940
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400a3940
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140130784
nop
mov rdx, qword [rbp + 0x188]
cmp rdx, 0xf
jbe 0x1400a398a
inc rdx
mov rcx, qword [rbp + 0x170]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400a3985
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400a3985
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140130784
movdqu xmmword [rbp + 0x180], xmm6
mov byte [rbp + 0x170], 0
mov rdx, qword [rbp + 0x48]
cmp rdx, 0xf
jbe 0x1400a39d8
inc rdx
mov rcx, qword [rbp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400a39d2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400a39d2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140130784
nop
mov rdx, qword [rbp + 0x228]
cmp rdx, 0xf
jbe 0x1400a3a1c
inc rdx
mov rcx, qword [rbp + 0x210]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400a3a17
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400a3a17
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140130784
movdqu xmmword [rbp + 0x220], xmm6
mov byte [rbp + 0x210], 0
mov rdx, qword [rbp + 0x10]
cmp rdx, 0xf
jbe 0x1400a3a6a
inc rdx
mov rcx, qword [rbp - 8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400a3a64
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400a3a64
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140130784
nop
mov rdx, qword [rbp + 0x1e8]
cmp rdx, 0xf
jbe 0x1400a3aae
inc rdx
mov rcx, qword [rbp + 0x1d0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400a3aa9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400a3aa9
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140130784
movdqu xmmword [rbp + 0x1e0], xmm6
mov byte [rbp + 0x1d0], 0
lea rax, [rbp - 8]
mov qword [rbp - 0x68], rax
lea rdx, [r12 + 0x60]
lea rcx, [rbp - 8]
call fcn.14000cc10
mov rbx, rax
lea rdx, [rbp + 0x270]
lea rcx, [rbp + 0x30]
call fcn.14000cc10
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rbp + 0x250]
call fcn.1400a49f0
nop
lea rax, [rbp - 0x28]
mov qword [rsp + 0x58], rax
lea rdx, [rbp + 0x250]
cmp qword [rbp + 0x268], 0xf
cmova rdx, qword [rbp + 0x250]
xorps xmm0, xmm0
movups xmmword [rbp - 0x28], xmm0
xor eax, eax
mov qword [rbp - 0x18], rax
mov qword [rbp - 0x10], rax
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rdx + r8], al
jne 0x1400a3b32
lea rcx, [rbp - 0x28]
call fcn.1400042a0
nop
lea rax, [rbp + 0x1d0]
mov qword [rbp - 0x68], rax
lea rdx, [0x140365040]
lea rcx, [rbp + 0x1d0]
call fcn.14000cc10
mov rbx, rax
lea rdx, [0x140365020]
lea rcx, [rbp + 0x210]
call fcn.14000cc10
nop
lea r8, [rbp - 0x28]
mov rdx, rbx
mov rcx, rax
call fcn.140091920
xor eax, 0xa5a5
mov edx, eax
shr eax, 8
movzx r8d, al
movzx eax, dl
movabs rcx, 0xcbf29ce484222325
xor rax, rcx
movabs r9, 0x100000001b3
imul rax, r9
xor r8, rax
imul r8, r9
mov eax, edx
shr eax, 0x10
movzx ecx, al
xor r8, rcx
imul r8, r9
shr rdx, 0x18
xor r8, rdx
imul r8, r9
cmp r8w, 0xdf7f
jne 0x1400a485f
xor eax, eax
mov qword [rbp + 0x208], rax
mov byte [rsp + 0x20], al
mov r9b, 1
lea r8, [rbp + 0x1d0]
lea rdx, [rbp + 0x250]
lea rcx, [rbp + 0x1c0]
call fcn.14008d950
nop
lea rdx, [r12 + 0x20]
lea rcx, [rsp + 0x70]
call fcn.140088820
nop
mov dword [rsp + 0x5c], 0x646972
mov dword [rsp + 0x58], 0x656e776f
mov byte [rsp + 0x60], 0
lea r9, [rsp + 0x50]
lea r8, [rsp + 0x5f]
lea rdx, [rsp + 0x58]
lea rcx, [rbp - 0x28]
call fcn.140004e40
nop
movzx ecx, byte [rbp + 0x1c0]
test cl, cl
jne 0x1400a3c72
mov byte [rbp + 0x1c0], 1
call fcn.14008bdd0
mov qword [rbp + 0x1c8], rax
movzx ecx, byte [rbp + 0x1c0]
jmp 0x1400a3c79
mov rax, qword [rbp + 0x1c8]
cmp cl, 1
jne 0x1400a3c8c
lea rdx, [rbp - 0x28]
mov rcx, rax
call fcn.140091170
jmp 0x1400a3c91
mov rax, qword [rsp + 0x58]
lea rdx, [rsp + 0x70]
mov rcx, rax
call fcn.140090da0
movzx ebx, al
mov r8, qword [rbp - 0x10]
cmp r8, 0xf
jbe 0x1400a3cb8
mov rdx, qword [rbp - 0x28]
lea rcx, [rbp - 0x28]
call fcn.140003e40
movdqu xmmword [rbp - 0x18], xmm6
mov byte [rbp - 0x28], 0
movzx edx, byte [rsp + 0x70]
lea rcx, [rsp + 0x78]
call fcn.140097a60
test bl, bl
jne 0x1400a3d89
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x1400a3d66
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x1400a3d66
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rbx]
add rdx, r10
mov r8d, 0xded133c7
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x1400a3d61
nop dword [rax]
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x1400a3d40
cmp r8d, 0x6d349e07
je 0x1400a3d6b
test r9d, r9d
jne 0x1400a3d20
mov rax, qword [rax]
jmp 0x1400a3cf0
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r10
mov ecx, 8
call rdx
mov dword [rbp - 0x64], 0x656761
mov dword [rbp - 0x68], 0x7373656d
mov byte [rbp - 0x60], 0
lea r9, [rsp + 0x50]
lea r8, [rbp - 0x61]
lea rdx, [rbp - 0x68]
lea rcx, [rbp - 8]
call fcn.140004e40
nop
movzx ecx, byte [rbp + 0x1c0]
test cl, cl
jne 0x1400a3dd9
mov byte [rbp + 0x1c0], 1
call fcn.14008bdd0
mov qword [rbp + 0x1c8], rax
movzx ecx, byte [rbp + 0x1c0]
jmp 0x1400a3de0
mov rax, qword [rbp + 0x1c8]
cmp cl, 1
jne 0x1400a3df3
lea rdx, [rbp - 8]
mov rcx, rax
call fcn.140091170
jmp 0x1400a3df8
mov rax, qword [rsp + 0x58]
xorps xmm0, xmm0
movups xmmword [rbp + 0x290], xmm0
movdqu xmmword [rbp + 0x2a0], xmm6
mov byte [rbp + 0x290], 0
mov dword [rsp + 0x68], 0xc2ffc
cmp byte [rax], 3
jne 0x1400a3e30
mov rdx, qword [rax + 8]
lea rax, [rbp + 0x290]
cmp rax, rdx
je 0x1400a3e4f
jmp 0x1400a3e34
xor eax, eax
mov edx, eax
mov r8, qword [rdx + 0x10]
cmp qword [rdx + 0x18], 0xf
jbe 0x1400a3e42
mov rdx, qword [rdx]
lea rcx, [rbp + 0x290]
call fcn.14000dae0
nop
lea rcx, [rbp - 8]
call fcn.140003410
mov word [rsp + 0x6b], 0x65
mov word [rsp + 0x68], 0x6f63
mov byte [rsp + 0x6a], 0x64
mov byte [rsp + 0x6d], 0
lea r9, [rsp + 0x50]
lea r8, [rsp + 0x6c]
lea rdx, [rsp + 0x68]
lea rcx, [rbp + 0x1d0]
call fcn.140004e40
nop
movzx ecx, byte [rbp + 0x1c0]
test cl, cl
jne 0x1400a3eb3
mov byte [rbp + 0x1c0], 1
call fcn.14008bdd0
mov qword [rbp + 0x1c8], rax
movzx ecx, byte [rbp + 0x1c0]
jmp 0x1400a3eba
mov rax, qword [rbp + 0x1c8]
cmp cl, 1
jne 0x1400a3ed0
lea rdx, [rbp + 0x1d0]
mov rcx, rax
call fcn.140091170
jmp 0x1400a3ed5
mov rax, qword [rsp + 0x58]
mov rcx, rax
call fcn.140088dc0
mov edx, eax
shr eax, 8
movzx edi, al
movzx eax, dl
movabs rcx, 0xcbf29ce484222325
xor rax, rcx
movabs r8, 0x100000001b3
imul rax, r8
xor rdi, rax
imul rdi, r8
mov eax, edx
shr eax, 0x10
movzx ecx, al
xor rdi, rcx
imul rdi, r8
shr rdx, 0x18
xor rdi, rdx
imul rdi, r8
lea rcx, [rbp + 0x1d0]
call fcn.140003410
mov dword [rsp + 0x5c], 0x737365
mov dword [rsp + 0x58], 0x63637573
mov byte [rsp + 0x60], 0
lea r9, [rsp + 0x50]
lea r8, [rsp + 0x5f]
lea rdx, [rsp + 0x58]
lea rcx, [rbp + 0x210]
call fcn.140004e40
nop
mov ebx, 0xfdffd
mov dword [rsp + 0x68], ebx
movzx ecx, byte [rbp + 0x1c0]
test cl, cl
jne 0x1400a3f91
mov byte [rbp + 0x1c0], 1
call fcn.14008bdd0
mov qword [rbp + 0x1c8], rax
movzx ecx, byte [rbp + 0x1c0]
jmp 0x1400a3f98
mov rax, qword [rbp + 0x1c8]
cmp cl, 1
jne 0x1400a3fb1
lea rdx, [rbp + 0x210]
mov rcx, rax
call fcn.140091170
mov rcx, rax
jmp 0x1400a3fb6
mov rcx, qword [rsp + 0x58]
lea rax, [rcx + 8]
cmp byte [rcx], 4
mov ecx, 0
cmovne rax, rcx
cmp byte [rax], cl
je 0x1400a4085
mov dword [rbp + 0x194], 0x737365
mov dword [rbp + 0x190], 0x63637573
mov byte [rbp + 0x198], cl
lea r9, [rsp + 0x50]
lea r8, [rbp + 0x197]
lea rdx, [rbp + 0x190]
lea rcx, [rbp + 0x1d0]
call fcn.140004e40
nop
mov ebx, 0xcfdfff
mov dword [rsp + 0x68], ebx
movzx ecx, byte [rbp + 0x1c0]
test cl, cl
jne 0x1400a4038
mov byte [rbp + 0x1c0], 1
call fcn.14008bdd0
mov qword [rbp + 0x1c8], rax
movzx ecx, byte [rbp + 0x1c0]
jmp 0x1400a403f
mov rax, qword [rbp + 0x1c8]
cmp cl, 1
jne 0x1400a4058
lea rdx, [rbp + 0x1d0]
mov rcx, rax
call fcn.140091170
mov rcx, rax
jmp 0x1400a405d
mov rcx, qword [rsp + 0x58]
lea rax, [rcx + 8]
cmp byte [rcx], 4
mov ecx, 0
cmovne rax, rcx
cmp byte [rax], cl
je 0x1400a4080
movabs rax, 0xcbe5c873d26645f1
cmp rdi, rax
je 0x1400a4085
xor dil, dil
jmp 0x1400a4088
mov dil, 1
test bl, 2
je 0x1400a409d
and ebx, 0xfffffffd
lea rcx, [rbp + 0x1d0]
call fcn.140003410
nop
test bl, 1
je 0x1400a40ae
lea rcx, [rbp + 0x210]
call fcn.140003410
test dil, dil
je 0x1400a4789
lea rdx, [rbp + 0x1c0]
lea rcx, [rsp + 0x70]
call fcn.14008ff40
mov rdx, rax
mov rcx, r12
call fcn.14009f990
mov dword [rsp + 0x5c], 0x737365
mov dword [rsp + 0x58], 0x63637573
mov byte [rsp + 0x60], 0
lea r9, [rsp + 0x50]
lea r8, [rsp + 0x5f]
lea rdx, [rsp + 0x58]
lea rcx, [rbp + 0x1d0]
call fcn.140004e40
nop
movzx ecx, byte [rbp + 0x1c0]
test cl, cl
jne 0x1400a412b
mov byte [rbp + 0x1c0], 1
call fcn.14008bdd0
mov qword [rbp + 0x1c8], rax
movzx ecx, byte [rbp + 0x1c0]
jmp 0x1400a4132
mov rax, qword [rbp + 0x1c8]
cmp cl, 1
jne 0x1400a414b
lea rdx, [rbp + 0x1d0]
mov rcx, rax
call fcn.140091170
mov rcx, rax
jmp 0x1400a4150
mov rcx, qword [rsp + 0x58]
lea rax, [rcx + 8]
cmp byte [rcx], 4
mov ecx, 0
cmovne rax, rcx
movzx ebx, byte [rax]
lea rcx, [rbp + 0x1d0]
call fcn.140003410
test bl, bl
je 0x1400a4219
mov word [rsp + 0x6b], reloc.WS2_32.dll_WSAGetLastError
mov word [rsp + 0x68], 0x6e69
mov byte [rsp + 0x6a], 0x66
mov byte [rsp + 0x6d], 0
lea r9, [rsp + 0x50]
lea r8, [rsp + 0x6c]
lea rdx, [rsp + 0x68]
lea rcx, [rbp + 0x1d0]
call fcn.140004e40
nop
movzx ecx, byte [rbp + 0x1c0]
test cl, cl
jne 0x1400a41d2
mov byte [rbp + 0x1c0], 1
call fcn.14008bdd0
mov qword [rbp + 0x1c8], rax
movzx ecx, byte [rbp + 0x1c0]
jmp 0x1400a41d9
mov rax, qword [rbp + 0x1c8]
cmp cl, 1
jne 0x1400a41ef
lea rdx, [rbp + 0x1d0]
mov rcx, rax
call fcn.140091170
jmp 0x1400a41f4
mov rax, qword [rsp + 0x58]
mov rdx, rax
lea rcx, [rsp + 0x70]
call fcn.14008ff40
mov rdx, rax
mov rcx, r12
call fcn.14009fd60
nop
lea rcx, [rbp + 0x1d0]
call fcn.140003410
mov dword [rsp + 0x70], 0x25392107
mov dword [rsp + 0x74], 0x3c38323b
mov dword [rsp + 0x78], 0x3c322c
mov byte [rsp + 0x7c], 1
lea rcx, [rsp + 0x70]
call fcn.140092c20
mov rdx, rax
lea rcx, [r12 + 0x218]
call fcn.140088a90
test al, al
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
je 0x1400a46f0
lea r15, [section..data]
mov rsi, r15
cmp qword [reloc.WS2_32.dll_ntohs], 0xf
cmova rsi, qword [section..data]
nop dword [rax]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x1400a4306
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x1400a4306
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rbx]
add rdx, r10
mov r8d, 0xfc3d25b6
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x1400a4301
nop dword [rax]
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x1400a42e0
cmp r8d, 0xc8041750
je 0x1400a430b
test r9d, r9d
jne 0x1400a42c0
mov rax, qword [rax]
jmp 0x1400a4290
mov edx, dword [rdi + 0x1c]
add rdx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rdx + rax*4]
add rdx, r10
mov rcx, rsi
call rdx
movdqa xmm0, xmmword [0x140138e70]
movdqu xmmword [rsp + 0x70], xmm0
mov byte [rbp - 0x80], 1
lea rcx, [rsp + 0x70]
call fcn.140092bd0
mov rdx, rax
mov r8, r15
lea rcx, [rbp + 0x210]
call fcn.140088f00
nop
xor edx, edx
mov r8d, 0x108
lea rcx, [rbp + 0x2b0]
call sub.VCRUNTIME140.dll_memset
mov dword [rsp + 0x20], 1
mov r9d, 0x40
mov r8d, 2
lea rdx, [rbp + 0x210]
lea rcx, [rbp + 0x2b0]
call fcn.140033be0
nop
cmp qword [rbp + 0x338], 0
je 0x1400a43ce
mov rdx, r15
cmp qword [reloc.WS2_32.dll_ntohs], 0xf
cmova rdx, qword [section..data]
mov r8, qword [0x140365010]
lea rcx, [rbp + 0x2b0]
call fcn.140036bc0
lea rcx, [rbp + 0x2b0]
call fcn.140033ba0
mov dword [rbp - 0x78], 0x2536201d
mov dword [rbp - 0x74], 0x30263225
mov word [rbp - 0x70], 0xa
mov byte [rbp - 0x6e], 1
lea rcx, [rbp - 0x78]
call fcn.140092b90
mov rdx, rax
mov r8, r15
lea rcx, [rbp + 0x1d0]
call fcn.140088f00
nop
lea rdx, [rbp + 0x1d0]
cmp qword [rbp + 0x1e8], 0xf
cmova rdx, qword [rbp + 0x1d0]
xor ecx, ecx
mov qword [rsp + 0x40], rcx
lea rax, [rbp + 0x190]
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], rcx
mov dword [rsp + 0x28], 0x20006
mov dword [rsp + 0x20], ecx
xor r9d, r9d
xor r8d, r8d
mov rcx, 0xffffffff80000001
call qword [sym.imp.ADVAPI32.dll_RegCreateKeyExA]
test eax, eax
jne 0x1400a45ff
mov r14, qword [0x140365010]
inc r14
cmp qword [reloc.WS2_32.dll_ntohs], 0xf
jbe 0x1400a4473
mov r15, qword [section..data]
mov rsi, r15
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r11, qword [rax + 0x30]
movsxd rcx, dword [r11 + 0x3c]
mov edi, dword [rcx + r11 + 0x88]
add rdi, r11
cmp rdi, r11
je 0x1400a4506
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x1400a4506
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r11]
add rdx, r11
mov r8d, 0x867cd7da
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x1400a4501
nop
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x1400a44e0
cmp r8d, 0xda522147
je 0x1400a450b
test r9d, r9d
jne 0x1400a44c0
mov rax, qword [rax]
jmp 0x1400a4490
mov ecx, dword [rdi + 0x1c]
add rcx, r11
mov eax, dword [rdi + 0x24]
add rax, r11
movzx eax, word [rax + r9*2]
mov r10d, dword [rcx + rax*4]
add r10, r11
mov dword [rsp + 0x28], r14d
mov qword [rsp + 0x20], r15
mov r9d, 1
xor r8d, r8d
mov rdx, rsi
mov rcx, qword [rbp + 0x190]
call r10
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop dword [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x1400a45d6
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x1400a45d6
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
mov r8d, 0x5fdd204c
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x1400a45d1
nop
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x1400a45b0
cmp r8d, 0x207e4e01
je 0x1400a45db
test r9d, r9d
jne 0x1400a4590
mov rax, qword [rax]
jmp 0x1400a4560
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r10
mov rcx, qword [rbp + 0x190]
call rdx
mov r14, qword [rbp + 0x18]
lea rsi, [r12 + 0x20]
cmp qword [rsi + 0x18], 0xf
jbe 0x1400a460e
mov rsi, qword [rsi]
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x1400a4696
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x1400a4696
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rbx]
add rdx, r10
mov r8d, 0xafdbc348
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x1400a4691
nop dword [rax]
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x1400a4670
cmp r8d, 0xd4c80202
je 0x1400a469b
test r9d, r9d
jne 0x1400a4650
mov rax, qword [rax]
jmp 0x1400a4620
mov edx, dword [rdi + 0x1c]
add rdx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rdx + rax*4]
add rdx, r10
mov rcx, rsi
call rdx
nop
lea rcx, [rbp + 0x1d0]
call fcn.140003410
nop
lea rcx, [rbp + 0x2b0]
call fcn.14002f860
nop
lea rcx, [rbp + 0x210]
call fcn.140003410
mov rsi, qword [rbp + 0x20]
mov r15, qword [rbp + 0x28]
jmp 0x1400a483a
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x1400a4766
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x1400a4766
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rbx]
add rdx, r10
mov r8d, 0x904818b3
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x1400a4761
nop dword [rax]
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x1400a4740
cmp r8d, 0xe7cd4ce3
je 0x1400a476b
test r9d, r9d
jne 0x1400a4720
mov rax, qword [rax]
jmp 0x1400a46f0
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
mov ecx, ntohs
jmp 0x1400a4834
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x1400a4816
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x1400a4816
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
mov r8d, 0x58cf0dde
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x1400a4811
nop
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x1400a47f0
cmp r8d, 0xeafcf966
je 0x1400a481b
test r9d, r9d
jne 0x1400a47d0
mov rax, qword [rax]
jmp 0x1400a47a0
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
mov ecx, 9
add rdx, r10
call rdx
nop
lea rcx, [rbp + 0x290]
call fcn.140003410
nop
movzx edx, byte [rbp + 0x1c0]
lea rcx, [rbp + 0x1c8]
call fcn.140097a60
jmp 0x1400a490a
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x1400a48e6
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x1400a48e6
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [rbx + r9*4]
mov ecx, dword [rcx + r10]
add rcx, r10
mov r8d, 0xe00bb0fe
movzx edx, byte [rcx]
inc rcx
test dl, dl
je 0x1400a48e1
nop
movsx edx, dl
xor edx, r8d
imul r8d, edx, 0x1000193
movzx edx, byte [rcx]
lea rcx, [rcx + 1]
test dl, dl
jne 0x1400a48c0
cmp r8d, 0x3d006386
je 0x1400a48eb
test r9d, r9d
jne 0x1400a48a0
mov rax, qword [rax]
jmp 0x1400a4870
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r10
mov ecx, 7
call rdx
nop
mov r8, qword [rbp + 0x268]
cmp r8, 0xf
jbe 0x1400a492a
mov rdx, qword [rbp + 0x250]
lea rcx, [rbp + 0x250]
call fcn.140003e40
movdqu xmmword [rbp + 0x260], xmm6
mov byte [rbp + 0x250], 0
mov r8, qword [rbp + 0x288]
cmp r8, 0xf
jbe 0x1400a495a
mov rdx, qword [rbp + 0x270]
lea rcx, [rbp + 0x270]
call fcn.140003e40
nop
mov r8, qword [rbp + 0x248]
cmp r8, 0xf
jbe 0x1400a497a
mov rdx, qword [rbp + 0x230]
lea rcx, [rbp + 0x230]
call fcn.140003e40
xor eax, eax
mov qword [rbp + 0x240], rax
mov qword [rbp + 0x248], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x230], al
mov rcx, r13
call fcn.140003410
nop
mov rcx, rsi
call fcn.140003410
nop
mov rcx, r14
call fcn.140003410
nop
mov rcx, r15
call fcn.140003410
mov rcx, qword [rbp + 0x3c0]
xor rcx, rsp
call fcn.1401304e0
movaps xmm6, xmmword [rsp + 0x4d0]
add rsp, 0x4e8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret